Eyal Birger 497653f6d2 xfrm: fix "disable_policy" on ipv4 early demux ... [ Upstream commit 3a5913183a ] The commit in the "Fixes" tag tried to avoid a case where policy check is ignored due to dst caching in next hops. However, when the traffic is locally consumed, the dst may be cached in a local TCP or UDP socket as part of early demux. In this case the "disable_policy" flag is not checked as ip_route_input_noref() was only called before caching, and thus, packets after the initial packet in a flow will be dropped if not matching policies. Fix by checking the "disable_policy" flag also when a valid dst is already available. Link: https://bugzilla.kernel.org/show_bug.cgi?id=216557 Reported-by: Monil Patel <monil191989@gmail.com> Fixes: e6175a2ed1 ("xfrm: fix "disable_policy" flag use when arriving from different devices") Signed-off-by: Eyal Birger <eyal.birger@gmail.com> ---- v2: use dev instead of skb->dev Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-12-02 17:39:58 +01:00
..
bpfilter	net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"	2020-08-10 12:06:44 -07:00
netfilter	netfilter: nft_fib: Fix for rpath check with VRF devices	2022-10-26 13:25:22 +02:00
af_inet.c	tcp/udp: Make early_demux back namespacified.	2022-11-10 18:14:26 +01:00
ah4.c	xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume	2021-04-14 08:42:05 +02:00
arp.c	ipv4: Invalidate neighbour for broadcast address upon address addition	2022-04-13 21:00:57 +02:00
bpf_tcp_ca.c	bpf: Change bpf_sk_storage_*() to accept ARG_PTR_TO_BTF_ID_SOCK_COMMON	2020-09-25 13:58:01 -07:00
cipso_ipv4.c	cipso: Fix data-races around sysctl.	2022-07-21 21:20:08 +02:00
datagram.c	udp: Update reuse->has_conns under reuseport_lock.	2022-10-30 09:41:19 +01:00
devinet.c	net: socket: remove register_gifconf	2022-09-28 11:10:35 +02:00
esp4_offload.c	esp: Fix BEET mode inter address family tunneling on GSO	2022-03-16 14:15:57 +01:00
esp4.c	esp: limit skb_page_frag_refill use to a single page	2022-04-27 13:53:48 +02:00
fib_frontend.c	ip: fix triggering of 'icmp redirect'	2022-09-08 11:11:40 +02:00
fib_lookup.h
fib_notifier.c
fib_rules.c	ipv4: convert fib_num_tclassid_users to atomic_t	2021-12-08 09:03:26 +01:00
fib_semantics.c	ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.	2022-07-29 17:19:20 +02:00
fib_trie.c	ipv4: Fix a data-race around sysctl_fib_sync_mem.	2022-07-21 21:20:08 +02:00
fou.c	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
gre_demux.c	erspan: fix version 1 check in gre_parse_header()	2021-01-12 20:18:12 +01:00
gre_offload.c	net: gre: recompute gre csum for sctp over gre tunnels	2020-08-03 15:29:44 -07:00
icmp.c	ip: Fix data-races around sysctl_ip_no_pmtu_disc.	2022-07-29 17:19:12 +02:00
igmp.c	igmp: Fix data-races around sysctl_igmp_qrv.	2022-08-03 12:00:46 +02:00
inet_connection_sock.c	ip: Fix a data-race around sysctl_ip_autobind_reuse.	2022-07-29 17:19:13 +02:00
inet_diag.c	inet_diag: fix kernel-infoleak for UDP sockets	2021-12-22 09:30:53 +01:00
inet_fragment.c	inet: frags: annotate races around fqdir->dead and fqdir->high_thresh	2022-01-27 10:54:33 +01:00
inet_hashtables.c	once: add DO_ONCE_SLOW() for sleepable contexts	2022-10-26 13:25:23 +02:00
inet_timewait_sock.c
inetpeer.c	inetpeer: Fix data-races around sysctl.	2022-07-21 21:20:07 +02:00
ip_forward.c	ip: Fix data-races around sysctl_ip_fwd_update_priority.	2022-07-29 17:19:12 +02:00
ip_fragment.c	inet: frags: annotate races around fqdir->dead and fqdir->high_thresh	2022-01-27 10:54:33 +01:00
ip_gre.c	erspan: do not assume transport header is always set	2022-06-29 08:59:48 +02:00
ip_input.c	xfrm: fix "disable_policy" on ipv4 early demux	2022-12-02 17:39:58 +01:00
ip_options.c	net: clean up codestyle for net/ipv4	2020-08-25 06:28:02 -07:00
ip_output.c	net: Fix data-races around sysctl_[rw]mem_(max|default).	2022-08-31 17:15:19 +02:00
ip_sockglue.c	net: Fix data-races around sysctl_optmem_max.	2022-08-31 17:15:20 +02:00
ip_tunnel_core.c	tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()	2022-07-07 17:52:19 +02:00
ip_tunnel.c	net: Set true network header for ECN decapsulation	2021-08-04 12:46:42 +02:00
ip_vti.c	net: always use icmp{,v6}_ndo_send from ndo_start_xmit	2021-03-17 17:06:12 +01:00
ipcomp.c	ipcomp: assign if_id to child tunnel from parent tunnel	2020-07-09 12:55:37 +02:00
ipconfig.c	net: ipconfig: Don't override command-line hostnames or domains	2021-06-18 10:00:05 +02:00
ipip.c	net: ipip: implement header_ops->parse_protocol for AF_PACKET	2020-06-30 12:29:39 -07:00
ipmr_base.c
ipmr.c	ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path	2022-02-16 12:54:25 +01:00
Kconfig	net: ipv4: remove duplicate "the the" phrase in Kconfig text	2020-08-18 16:02:16 -07:00
Makefile	udp_tunnel: add central NIC RX port offload infrastructure	2020-07-10 13:54:00 -07:00
metrics.c
netfilter.c	netfilter: use actual socket sk rather than skb sk when routing harder	2020-10-30 12:57:39 +01:00
netlink.c
nexthop.c	nh: fix scope used to find saddr when adding non gw nh	2022-11-03 23:57:54 +09:00
ping.c	lsm,selinux: pass flowi_common instead of flowi to the LSM hooks	2022-06-09 10:21:09 +02:00
proc.c	tcp: switch orphan_count to bare per-cpu counters	2021-11-18 14:04:08 +01:00
protocol.c
raw_diag.c
raw.c	lsm,selinux: pass flowi_common instead of flowi to the LSM hooks	2022-06-09 10:21:09 +02:00
route.c	ip: Fix data-races around sysctl_ip_fwd_use_pmtu.	2022-07-29 17:19:12 +02:00
syncookies.c	tcp: Fix data-races around sysctl knobs related to SYN option.	2022-07-29 17:19:21 +02:00
sysctl_net_ipv4.c	tcp/udp: Make early_demux back namespacified.	2022-11-10 18:14:26 +01:00
tcp_bbr.c	tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets	2021-08-18 08:59:13 +02:00
tcp_bic.c
tcp_bpf.c	bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues	2022-11-16 09:57:08 +01:00
tcp_cdg.c	tcp: cdg: allow tcp_cdg_release() to be called multiple times	2022-11-25 17:45:55 +01:00
tcp_cong.c	net: Only allow init netns to set default tcp cong to a restricted algo	2021-05-14 09:50:46 +02:00
tcp_cubic.c	tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows	2021-12-01 09:19:06 +01:00
tcp_dctcp.c
tcp_dctcp.h
tcp_diag.c
tcp_fastopen.c	tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.	2022-07-29 17:19:18 +02:00
tcp_highspeed.c	Replace HTTP links with HTTPS ones: IPv*	2020-07-06 13:23:03 -07:00
tcp_htcp.c	Replace HTTP links with HTTPS ones: IPv*	2020-07-06 13:23:03 -07:00
tcp_hybla.c
tcp_illinois.c
tcp_input.c	tcp: fix indefinite deferral of RTO with SACK reneging	2022-11-03 23:57:52 +09:00
tcp_ipv4.c	tcp: fix a signed-integer-overflow bug in tcp_add_backlog()	2022-11-03 23:57:52 +09:00
tcp_lp.c
tcp_metrics.c	tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save.	2022-08-03 12:00:45 +02:00
tcp_minisocks.c	tcp: Fix a data-race around sysctl_tcp_rfc1337.	2022-07-29 17:19:22 +02:00
tcp_nv.c
tcp_offload.c	net, gro: Set inner transport header offset in tcp/udp GRO hook	2021-08-12 13:22:05 +02:00
tcp_output.c	tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited	2022-10-26 13:25:23 +02:00
tcp_rate.c	tcp: ensure to use the most recently sent skb when filling the rate sample	2022-05-09 09:05:03 +02:00
tcp_recovery.c	tcp: Fix data-races around sysctl_tcp_recovery.	2022-07-29 17:19:21 +02:00
tcp_scalable.c	net: ipv4: delete repeated words	2020-08-24 17:31:20 -07:00
tcp_timer.c	tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.	2022-07-29 17:19:21 +02:00
tcp_ulp.c
tcp_vegas.c	tcp: use semicolons rather than commas to separate statements	2020-10-13 17:11:52 -07:00
tcp_vegas.h
tcp_veno.c	Replace HTTP links with HTTPS ones: IPv*	2020-07-06 13:23:03 -07:00
tcp_westwood.c
tcp_yeah.c
tcp.c	tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent	2022-11-16 09:57:11 +01:00
tunnel4.c	tunnel4: add cb_handler to struct xfrm_tunnel	2020-07-09 12:51:36 +02:00
udp_bpf.c	bpf, sockmap, udp: sk_prot needs inuse_idx set for proc stats	2021-07-28 14:35:37 +02:00
udp_diag.c
udp_impl.h	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
udp_offload.c	net, gro: Set inner transport header offset in tcp/udp GRO hook	2021-08-12 13:22:05 +02:00
udp_tunnel_core.c	udp_tunnel: add central NIC RX port offload infrastructure	2020-07-10 13:54:00 -07:00
udp_tunnel_nic.c	udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister()	2022-03-02 11:42:51 +01:00
udp_tunnel_stub.c	udp_tunnel: add central NIC RX port offload infrastructure	2020-07-10 13:54:00 -07:00
udp.c	udp: Update reuse->has_conns under reuseport_lock.	2022-10-30 09:41:19 +01:00
udplite.c	net/ipv4: remove compat_ip_{get,set}sockopt	2020-07-19 18:16:41 -07:00
xfrm4_input.c
xfrm4_output.c	xfrm: fix unused variable warning if CONFIG_NETFILTER=n	2020-05-11 15:12:27 +02:00
xfrm4_policy.c
xfrm4_protocol.c	net: xfrm: unexport __init-annotated xfrm4_protocol_init()	2022-06-14 18:32:40 +02:00
xfrm4_state.c
xfrm4_tunnel.c	xfrm: interface: fix the priorities for ipip and ipv6 tunnels	2020-10-09 12:29:48 +02:00