Steffen Klassert 20eb208513 xfrm: Workaround incompatibility of ESN and async crypto ... [ Upstream commit 3b59df46a4 ] ESN for esp is defined in RFC 4303. This RFC assumes that the sequence number counters are always up to date. However, this is not true if an async crypto algorithm is employed. If the sequence number counters are not up to date on sequence number check, we may incorrectly update the upper 32 bit of the sequence number. This leads to a DOS. We workaround this by comparing the upper sequence number, (used for authentication) with the upper sequence number computed after the async processing. We drop the packet if these numbers are different. To do this, we introduce a recheck function that does this check in the ESN case. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Acked-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2012-10-13 05:38:40 +09:00
..
acpi	Merge branch 'release' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux	2012-05-05 10:06:06 -07:00
asm-generic	mutex: Place lock in contended state after fastpath_lock failure	2012-10-02 10:30:21 -07:00
crypto	crypto: user - Fix lookup of algorithms with IV generator	2012-03-29 19:52:47 +08:00
drm	drm: Check for invalid cursor flags	2012-10-02 10:30:23 -07:00
keys
linux	serial: set correct baud_base for EXSYS EX-41092 Dual 16950	2012-10-07 08:32:25 -07:00
math-emu
media	Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media	2012-05-14 11:23:37 -07:00
misc
mtd
net	xfrm: Workaround incompatibility of ESN and async crypto	2012-10-13 05:38:40 +09:00
pcmcia
rdma	Merge branches 'cma', 'cxgb3', 'cxgb4', 'ehca', 'iser', 'mad', 'nes', 'qib', 'srp' and 'srpt' into for-next	2012-03-19 09:50:33 -07:00
rxrpc
scsi	SCSI: libsas: fix taskfile corruption in sas_ata_qc_fill_rtf	2012-07-16 09:04:37 -07:00
sound	ALSA: hda - hide HDMI/ELD printks unless snd.debug=2	2012-04-10 14:53:55 +02:00
target	target: Add generation of LOGICAL BLOCK ADDRESS OUT OF RANGE	2012-08-09 08:31:26 -07:00
trace	tracing: Don't call page_to_pfn() if page is NULL	2012-10-02 10:30:08 -07:00
video	Merge branch 'platforms' of git://git.linaro.org/people/rmk/linux-arm	2012-03-27 18:17:02 -07:00
xen	xen/m2p: do not reuse kmap_op->dev_bus_addr	2012-10-02 10:30:06 -07:00
Kbuild