{"push_id":1756684757,"size":8,"distinct_size":8,"ref":"refs/heads/net_upstream","head":"12e8b570e732eaa5eae3a2895ba3fbcf91bde2b4","before":"fadd2ce5a3680fb265694f573cbfb8bcb7d6c9d5","commits":[{"sha":"0e78a87306a6f55b1c7bbafad1de62c3975953ca","author":{"name":"Steffen Klassert","email":"e12a4e53ffae7bea4a26a8251851e5c5b883df46@secunet.com"},"message":"esp4: Fix udpencap for local TCP packets.\n\nLocally generated TCP packets are usually cloned, so we\ndo skb_cow_data() on this packets. After that we need to\nreload the pointer to the esp header. On udpencap this\nheader has an offset to skb_transport_header, so take this\noffset into account.\n\nFixes: 67d349ed603 (\"net/esp4: Fix invalid esph pointer crash\")\nFixes: fca11ebde3f0 (\"esp4: Reorganize esp_output\")\nReported-by: Don Bowman <db@donbowman.ca>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":true,"url":"https://api.github.com/repos/jpirko/linux_mlxsw/commits/0e78a87306a6f55b1c7bbafad1de62c3975953ca"},{"sha":"9b3eb54106cf6acd03f07cf0ab01c13676a226c2","author":{"name":"Sabrina Dubroca","email":"4970d9e510e008c61ce99b43933c9aaa332864d8@queasysnail.net"},"message":"xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY\n\nWhen CONFIG_XFRM_SUB_POLICY=y, xfrm_dst stores a copy of the flowi for\nthat dst. Unfortunately, the code that allocates and fills this copy\ndoesn't care about what type of flowi (flowi, flowi4, flowi6) gets\npassed. In multiple code paths (from raw_sendmsg, from TCP when\nreplying to a FIN, in vxlan, geneve, and gre), the flowi that gets\npassed to xfrm is actually an on-stack flowi4, so we end up reading\nstuff from the stack past the end of the flowi4 struct.\n\nSince xfrm_dst->origin isn't used anywhere following commit\nca116922afa8 (\"xfrm: Eliminate \"fl\" and \"pol\" args to\nxfrm_bundle_ok().\"), just get rid of it.  xfrm_dst->partner isn't used\neither, so get rid of that too.\n\nFixes: 9d6ec938019c (\"ipv4: Use flowi4 in public route lookup interfaces.\")\nSigned-off-by: Sabrina Dubroca <sd@queasysnail.net>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":true,"url":"https://api.github.com/repos/jpirko/linux_mlxsw/commits/9b3eb54106cf6acd03f07cf0ab01c13676a226c2"},{"sha":"d90c902449a7561f1b1d58ba5a0d11728ce8b0b2","author":{"name":"Steffen Klassert","email":"e12a4e53ffae7bea4a26a8251851e5c5b883df46@secunet.com"},"message":"af_key: Fix slab-out-of-bounds in pfkey_compile_policy.\n\nThe sadb_x_sec_len is stored in the unit 'byte divided by eight'.\nSo we have to multiply this value by eight before we can do\nsize checks. Otherwise we may get a slab-out-of-bounds when\nwe memcpy the user sec_ctx.\n\nFixes: df71837d502 (\"[LSM-IPSec]: Security association restriction.\")\nReported-by: Andrey Konovalov <andreyknvl@google.com>\nTested-by: Andrey Konovalov <andreyknvl@google.com>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":true,"url":"https://api.github.com/repos/jpirko/linux_mlxsw/commits/d90c902449a7561f1b1d58ba5a0d11728ce8b0b2"},{"sha":"2c1497bbc8fdee897341ab48ee9c9209b421b8c0","author":{"name":"Ilan Tayari","email":"4f2f3b8f7482916a4308611d2f901f0845bbbccc@mellanox.com"},"message":"xfrm: Fix NETDEV_DOWN with IPSec offload\n\nUpon NETDEV_DOWN event, all xfrm_state objects which are bound to\nthe device are flushed.\n\nThe condition for this is wrong, though, testing dev->hw_features\ninstead of dev->features. If a device has non-user-modifiable\nNETIF_F_HW_ESP, then its xfrm_state objects are not flushed,\ncausing a crash later on after the device is deleted.\n\nCheck dev->features instead of dev->hw_features.\n\nFixes: d77e38e612a0 (\"xfrm: Add an IPsec hardware offloading API\")\nSigned-off-by: Ilan Tayari <ilant@mellanox.com>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":true,"url":"https://api.github.com/repos/jpirko/linux_mlxsw/commits/2c1497bbc8fdee897341ab48ee9c9209b421b8c0"},{"sha":"a486cd23661c9387fb076c3f6ae8b2aa9d20d54a","author":{"name":"Antony Antony","email":"62ba9496910f702bac487a49d4a6f345ef2fa5ff@phenome.org"},"message":"xfrm: fix state migration copy replay sequence numbers\n\nDuring xfrm migration copy replay and preplay sequence numbers\nfrom the previous state.\n\nHere is a tcpdump output showing the problem.\n10.0.10.46 is running vanilla kernel, is the IKE/IPsec responder.\nAfter the migration it sent wrong sequence number, reset to 1.\nThe migration is from 10.0.0.52 to 10.0.0.53.\n\nIP 10.0.0.52.4500 > 10.0.10.46.4500: UDP-encap: ESP(spi=0x43ef462d,seq=0x7cf), length 136\nIP 10.0.10.46.4500 > 10.0.0.52.4500: UDP-encap: ESP(spi=0xca1c282d,seq=0x7cf), length 136\nIP 10.0.0.52.4500 > 10.0.10.46.4500: UDP-encap: ESP(spi=0x43ef462d,seq=0x7d0), length 136\nIP 10.0.10.46.4500 > 10.0.0.52.4500: UDP-encap: ESP(spi=0xca1c282d,seq=0x7d0), length 136\n\nIP 10.0.0.53.4500 > 10.0.10.46.4500: NONESP-encap: isakmp: child_sa  inf2[I]\nIP 10.0.10.46.4500 > 10.0.0.53.4500: NONESP-encap: isakmp: child_sa  inf2[R]\nIP 10.0.0.53.4500 > 10.0.10.46.4500: NONESP-encap: isakmp: child_sa  inf2[I]\nIP 10.0.10.46.4500 > 10.0.0.53.4500: NONESP-encap: isakmp: child_sa  inf2[R]\n\nIP 10.0.0.53.4500 > 10.0.10.46.4500: UDP-encap: ESP(spi=0x43ef462d,seq=0x7d1), length 136\n\nNOTE: next sequence is wrong 0x1\n\nIP 10.0.10.46.4500 > 10.0.0.53.4500: UDP-encap: ESP(spi=0xca1c282d,seq=0x1), length 136\nIP 10.0.0.53.4500 > 10.0.10.46.4500: UDP-encap: ESP(spi=0x43ef462d,seq=0x7d2), length 136\nIP 10.0.10.46.4500 > 10.0.0.53.4500: UDP-encap: ESP(spi=0xca1c282d,seq=0x2), length 136\n\nSigned-off-by: Antony Antony <antony@phenome.org>\nReviewed-by: Richard Guy Briggs <rgb@tricolour.ca>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":true,"url":"https://api.github.com/repos/jpirko/linux_mlxsw/commits/a486cd23661c9387fb076c3f6ae8b2aa9d20d54a"},{"sha":"2f9bfd3399920440edec724bee626b87070def4a","author":{"name":"David S. Miller","email":"79caf591e37e1438a2d55ae59670d5cd0d717764@davemloft.net"},"message":"Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec\n\nSteffen Klassert says:\n\n====================\npull request (net): ipsec 2017-05-23\n\n1) Fix wrong header offset for esp4 udpencap packets.\n\n2) Fix a stack access out of bounds when creating a bundle\n   with sub policies. From Sabrina Dubroca.\n\n3) Fix slab-out-of-bounds in pfkey due to an incorrect\n   sadb_x_sec_len calculation.\n\n4) We checked the wrong feature flags when taking down\n   an interface with IPsec offload enabled.\n   Fix from Ilan Tayari.\n\n5) Copy the anti replay sequence numbers when doing a state\n   migration, otherwise we get out of sync with the sequence\n   numbers. Fix from Antony Antony.\n\nPlease pull or let me know if there are problems.\n====================\n\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/jpirko/linux_mlxsw/commits/2f9bfd3399920440edec724bee626b87070def4a"},{"sha":"7f65b1f5adc5f8496ca8bec4947de66fefe36220","author":{"name":"Oliver Neukum","email":"af55dedc0d50bd691239218b486da844e4a16906@suse.com"},"message":"cdc-ether: divorce initialisation with a filter reset and a generic method\n\nSome devices need their multicast filter reset but others are crashed by that.\nSo the methods need to be separated.\n\nSigned-off-by: Oliver Neukum <oneukum@suse.com>\nReported-by: \"Ridgway, Keith\" <kridgway@harris.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/jpirko/linux_mlxsw/commits/7f65b1f5adc5f8496ca8bec4947de66fefe36220"},{"sha":"12e8b570e732eaa5eae3a2895ba3fbcf91bde2b4","author":{"name":"Jesper Dangaard Brouer","email":"c0e0bb89af36a52f34a752a6368bf03d7c867cd5@redhat.com"},"message":"mlx5: fix bug reading rss_hash_type from CQE\n\nMasks for extracting part of the Completion Queue Entry (CQE)\nfield rss_hash_type was swapped, namely CQE_RSS_HTYPE_IP and\nCQE_RSS_HTYPE_L4.\n\nThe bug resulted in setting skb->l4_hash, even-though the\nrss_hash_type indicated that hash was NOT computed over the\nL4 (UDP or TCP) part of the packet.\n\nAdded comments from the datasheet, to make it more clear what\nthese masks are selecting.\n\nSigned-off-by: Jesper Dangaard Brouer <brouer@redhat.com>\nAcked-by: Saeed Mahameed <saeedm@mellanox.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/jpirko/linux_mlxsw/commits/12e8b570e732eaa5eae3a2895ba3fbcf91bde2b4"}]}
{"actor":{"display_login":"jpirko"}}