lwn.git/net/xfrm/xfrm_input.c, branch v2.6.33.1-rt9

net: skb->dst accessors

2009-06-03T09:51:04+00:00

Define three accessors to get/set dst attached to a skb struct dst_entry *skb_dst(const struct sk_buff *skb) void skb_dst_set(struct sk_buff *skb, struct dst_entry *dst) void skb_dst_drop(struct sk_buff *skb) This one should replace occurrences of : dst_release(skb->dst) skb->dst = NULL; Delete skb->dst field Signed-off-by: Eric Dumazet Signed-off-by: David S. Miller

Revert "xfrm: Accept ESP packets regardless of UDP encapsulation mode"

2008-12-19T06:27:37+00:00

This reverts commit e061b165c7f4ec5e2e160d990b49011b5b6e5c6a. Signed-off-by: David S. Miller

xfrm: Accept ESP packets regardless of UDP encapsulation mode

2008-12-04T23:40:17+00:00

From: Martin Willi An IPsec node speaking IKEv2 MUST accept incoming UDP encapsulated ESP packets, even if no NAT situation is detected. This is important if MOBIKE is in use. Some implementation keep the encapsulation mode if they move out of a NAT situation. Signed-off-by: David S. Miller

netns xfrm: per-netns MIBs

2008-11-26T01:59:52+00:00

Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

netns xfrm: xfrm_input() fixup

2008-11-26T01:37:56+00:00

Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

netns xfrm: state lookup in netns

2008-11-26T01:30:50+00:00

Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

[IPSEC]: Fix inter address family IPsec tunnel handling.

2008-03-24T21:51:51+00:00

Signed-off-by: Kazunori MIYAZAWA Signed-off-by: David S. Miller

[IPSEC]: Fix bogus usage of u64 on input sequence number

2008-02-13T06:50:35+00:00

Al Viro spotted a bogus use of u64 on the input sequence number which is big-endian. This patch fixes it by giving the input sequence number its own member in the xfrm_skb_cb structure. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller

[XFRM]: Fix statistics.

2008-02-01T03:28:30+00:00

o Outbound sequence number overflow error status is counted as XfrmOutStateSeqError. o Additionaly, it changes inbound sequence number replay error name from XfrmInSeqOutOfWindow to XfrmInStateSeqError to apply name scheme above. o Inbound IPv4 UDP encapsuling type mismatch error is wrongly mapped to XfrmInStateInvalid then this patch fiex the error to XfrmInStateMismatch. Signed-off-by: Masahide NAKAMURA Signed-off-by: David S. Miller

[XFRM]: Remove unused exports.

2008-02-01T03:28:29+00:00

This patch removes the following no longer used EXPORT_SYMBOL's: - xfrm_input.c: xfrm_parse_spi - xfrm_state.c: xfrm_replay_check - xfrm_state.c: xfrm_replay_advance Signed-off-by: Adrian Bunk Signed-off-by: David S. Miller