Huy Nguyen 855150a762 xfrm: Fix double ESP trailer insertion in IPsec crypto offload. ... [ Upstream commit 94579ac3f6 ] During IPsec performance testing, we see bad ICMP checksum. The error packet has duplicated ESP trailer due to double validate_xmit_xfrm calls. The first call is from ip_output, but the packet cannot be sent because netif_xmit_frozen_or_stopped is true and the packet gets dev_requeue_skb. The second call is from NET_TX softirq. However after the first call, the packet already has the ESP trailer. Fix by marking the skb with XFRM_XMIT bit after the packet is handled by validate_xmit_xfrm to avoid duplicate ESP trailer insertion. Fixes: f6e27114a6 ("net: Add a xfrm validate function to validate_xmit_skb") Signed-off-by: Huy Nguyen <huyn@mellanox.com> Reviewed-by: Boris Pismenny <borisp@mellanox.com> Reviewed-by: Raed Salem <raeds@mellanox.com> Reviewed-by: Saeed Mahameed <saeedm@mellanox.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-06-30 23:17:10 -04:00
..
Kconfig	ipsec: select crypto ciphers for xfrm_algo	2019-07-26 09:14:10 +02:00
Makefile	xfrm: Add virtual xfrm interfaces	2018-06-23 16:07:25 +02:00
xfrm_algo.c	xfrm: use IS_ENABLED() instead of checking for built-in or module	2016-09-10 21:19:11 -07:00
xfrm_device.c	xfrm: Fix double ESP trailer insertion in IPsec crypto offload.	2020-06-30 23:17:10 -04:00
xfrm_hash.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfrm_hash.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfrm_input.c	xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input	2020-06-03 08:19:44 +02:00
xfrm_interface.c	xfrm interface: fix oops when deleting a x-netns interface	2020-06-03 08:19:44 +02:00
xfrm_ipcomp.c	net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()	2018-03-13 07:46:37 +01:00
xfrm_output.c	xfrm: fix a NULL-ptr deref in xfrm_local_error	2020-06-03 08:19:45 +02:00
xfrm_policy.c	xfrm: fix a warning in xfrm_policy_insert_list	2020-06-03 08:19:45 +02:00
xfrm_proc.c	proc: introduce proc_create_net_single	2018-05-16 07:24:30 +02:00
xfrm_replay.c	xfrm: Fix ESN sequence number handling for IPsec GSO packets.	2018-03-01 08:14:50 +01:00
xfrm_state.c	xfrm: Fix memleak on xfrm state destroy	2019-12-05 09:21:27 +01:00
xfrm_sysctl.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfrm_user.c	xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire	2020-04-02 15:28:19 +02:00