Guillaume Nault 23e7b1bfed xfrm: Don't accidentally set RTO_ONLINK in decode_session4() ... Similar to commit 94e2238969 ("xfrm4: strip ECN bits from tos field"), clear the ECN bits from iph->tos when setting ->flowi4_tos. This ensures that the last bit of ->flowi4_tos is cleared, so ip_route_output_key_hash() isn't going to restrict the scope of the route lookup. Use ~INET_ECN_MASK instead of IPTOS_RT_MASK, because we have no reason to clear the high order bits. Found by code inspection, compile tested only. Fixes: 4da3089f2b ("[IPSEC]: Use TOS when doing tunnel lookups") Signed-off-by: Guillaume Nault <gnault@redhat.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2022-01-11 20:36:08 -08:00
..
espintcp.c
Kconfig
Makefile
xfrm_algo.c	xfrm: Add support for SM4 symmetric cipher algorithm	2021-12-23 09:32:51 +01:00
xfrm_compat.c	xfrm: rate limit SA mapping change message to user space	2021-12-23 09:32:51 +01:00
xfrm_device.c	xfrm: add net device refcount tracker to struct xfrm_state_offload	2021-12-10 08:16:33 -08:00
xfrm_hash.c
xfrm_hash.h	xfrm: add state hashtable keyed by seq	2021-05-14 13:52:01 +02:00
xfrm_inout.h
xfrm_input.c	xfrm: update SA curlft.use_time	2021-12-23 09:32:50 +01:00
xfrm_interface.c	xfrm: interface with if_id 0 should return error	2021-12-17 07:17:13 +01:00
xfrm_ipcomp.c	net: xfrm: Fix end of loop tests for list_for_each_entry	2021-07-26 12:26:28 +02:00
xfrm_output.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-01-09 17:00:17 -08:00
xfrm_policy.c	xfrm: Don't accidentally set RTO_ONLINK in decode_session4()	2022-01-11 20:36:08 -08:00
xfrm_proc.c
xfrm_replay.c	xfrm: replay: remove last replay indirection	2021-06-21 09:55:06 +02:00
xfrm_state.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next	2022-01-06 11:54:20 +00:00
xfrm_sysctl.c
xfrm_user.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-01-09 17:00:17 -08:00