Herbert Xu 0da0b81697 xfrm: Allow transport-mode states with AF_UNSPEC selector ...

[ Upstream commit c276a706ea ]

xfrm state selectors are matched against the inner-most flow
which can be of any address family.  Therefore middle states
in nested configurations need to carry a wildcard selector in
order to work at all.

However, this is currently forbidden for transport-mode states.

Fix this by removing the unnecessary check.

Fixes: 13996378e6 ("[IPSEC]: Rename mode to outer_mode and add inner_mode")
Reported-by: David George <David.George@sophos.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-03-22 13:29:55 +01:00

..

espintcp.c

net: Fix data-races around netdev_max_backlog.

2022-08-31 17:15:19 +02:00

Kconfig

xfrm/compat: Add 32=>64-bit messages translator

2020-09-24 08:53:03 +02:00

Makefile

xfrm: Provide API to register translator module

2020-09-24 08:53:03 +02:00

xfrm_algo.c

crypto: skcipher - remove the "blkcipher" algorithm type

2019-11-01 13:38:32 +08:00

xfrm_compat.c

xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()

2023-02-15 17:22:23 +01:00

xfrm_device.c

xfrm: replay: Fix ESN wrap around for GSO

2022-12-02 17:39:58 +01:00

xfrm_hash.c

mm: remove include/linux/bootmem.h

2018-10-31 08:54:16 -07:00

xfrm_hash.h

…

xfrm_inout.h

xfrm: move xfrm4_extract_header to common helper

2020-05-06 09:40:08 +02:00

xfrm_input.c

xfrm: fix bug with DSCP copy to v6 from v4 tunnel

2023-02-15 17:22:23 +01:00

xfrm_interface.c

Fix XFRM-I support for nested ESP tunnels

2023-03-03 11:44:50 +01:00

xfrm_ipcomp.c

xfrm: Update ipcomp_scratches with NULL when freed

2022-10-26 13:25:46 +02:00

xfrm_output.c

xfrm: remove the fragment check for ipv6 beet mode

2021-07-14 16:56:19 +02:00

xfrm_policy.c

Fix XFRM-I support for nested ESP tunnels

2023-03-03 11:44:50 +01:00

xfrm_proc.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

xfrm_replay.c

xfrm: replay: Fix ESN wrap around for GSO

2022-12-02 17:39:58 +01:00

xfrm_state.c

xfrm: Allow transport-mode states with AF_UNSPEC selector

2023-03-22 13:29:55 +01:00

xfrm_sysctl.c

…

xfrm_user.c

xfrm: fix rcu lock in xfrm_notify_userpolicy()

2023-01-18 11:44:57 +01:00