)]}' { "log": [ { "commit": "87c1e12b5eeb7b30b4b41291bef8e0b41fc3dde9", "tree": "4e30c4d60c21ab5e0346648ed852258a96265288", "parents": [ "3a5b27bf6f29574d667230c7e76e4b83fe3014e0" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Mar 02 02:51:56 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 03 01:04:37 2010 -0800" }, "message": "ipsec: Fix bogus bundle flowi\n\nWhen I merged the bundle creation code, I introduced a bogus\nflowi value in the bundle. Instead of getting from the caller,\nit was instead set to the flow in the route object, which is\ntotally different.\n\nThe end result is that the bundles we created never match, and\nwe instead end up with an ever growing bundle list.\n\nThanks to Jamal for find this problem.\n\nReported-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nAcked-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nAcked-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8ca2e93b557f2a0b35f7769038abf600177e1122", "tree": "2b25012de07a48c33db0a191924d6e5fcc99c22a", "parents": [ "3d6acfa7641fd0a35f608b142f61e79f7ed8db43" ], "author": { "name": "Jamal Hadi Salim", "email": "hadi@cyberus.ca", "time": "Mon Feb 22 11:32:57 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 22 16:21:12 2010 -0800" }, "message": "xfrm: SP lookups signature with mark\n\npass mark to all SP lookups to prepare them for when we add code\nto have them search.\n\nSigned-off-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bd55775c8dd656fc69b3a42a1c4ab32abb7e8af9", "tree": "766b30d5fc29d5d4849a10a290db51fe0f7c3ad7", "parents": [ "bf825f81b454fae2ffe1b675f3a549656726440e" ], "author": { "name": "Jamal Hadi Salim", "email": "hadi@cyberus.ca", "time": "Mon Feb 22 16:20:22 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 22 16:20:22 2010 -0800" }, "message": "xfrm: SA lookups signature with mark\n\npass mark to all SA lookups to prepare them for when we add code\nto have them search.\n\nSigned-off-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bf825f81b454fae2ffe1b675f3a549656726440e", "tree": "8096391060484f831c0f2e4a7cef3448b4ff4845", "parents": [ "7f6b9dbd5afbd966a82dcbafc5ed62305eb9d479" ], "author": { "name": "Jamal Hadi Salim", "email": "hadi@cyberus.ca", "time": "Mon Feb 22 11:32:54 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 22 16:19:45 2010 -0800" }, "message": "xfrm: introduce basic mark infrastructure\n\nAdd basic structuring and accessors for xfrm mark\n\nSigned-off-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a63374631e7192a64648ecc6672619a7abf9ebcd", "tree": "b046b6dcbec6e995ccb87e91ac7458fe0d9b142a", "parents": [ "c28e93040b497e895d5c41b54abef3bc8db17fa9" ], "author": { "name": "jamal", "email": "hadi@cyberus.ca", "time": "Tue Feb 09 13:21:17 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Feb 12 13:27:48 2010 -0800" }, "message": "xfrm: use proper kernel types\n\nkernel side should use uxx instead of __uxx types\n\nSigned-off-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a1664773907a2b69e2a3019598dcbeffa6bc724b", "tree": "77070892675e29de901587a4f55bbc620b20e211", "parents": [ "e924960dacdf85d118a98c7262edf2f99c3015cf" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Mon Jan 25 10:37:54 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 28 06:31:05 2010 -0800" }, "message": "netns xfrm: xfrm6_tunnel in netns\n\nI\u0027m not sure about rcu stuff near kmem cache destruction:\n* checks for non-empty hashes look bogus, they\u0027re done _before_\n rcu_berrier()\n* unregistering netns ops is done before kmem_cache destoy\n (as it should), and unregistering involves rcu barriers by itself\n\nSo it looks nothing should be done.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e071041be037eca208b62b84469a06bdfc692bea", "tree": "c78506a4a582555959ffeb94980cb0cd7f86eab5", "parents": [ "2ca4231de7f7a5fd7137bac152030ba71f15e8c3" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Sat Jan 23 13:37:10 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jan 23 23:10:42 2010 -0800" }, "message": "netns xfrm: fix \"ip xfrm state|policy count\" misreport\n\n\"ip xfrm state|policy count\" report SA/SP count from init_net,\nnot from netns of caller process.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4447bb33f09444920a8f1d89e1540137429351b6", "tree": "0aeadd5f09b412380974d3155255ba8db27dd1ed", "parents": [ "4e242d1616781f9f1f0b01abf878700b259cd8b5" ], "author": { "name": "Martin Willi", "email": "martin@strongswan.org", "time": "Wed Nov 25 00:29:52 2009 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Nov 25 15:48:38 2009 -0800" }, "message": "xfrm: Store aalg in xfrm_state with a user specified truncation length\n\nAdding a xfrm_state requires an authentication algorithm specified\neither as xfrm_algo or as xfrm_algo_auth with a specific truncation\nlength. For compatibility, both attributes are dumped to userspace,\nand we also accept both attributes, but prefer the new syntax.\n\nIf no truncation length is specified, or the authentication algorithm\nis specified using xfrm_algo, the truncation length from the algorithm\ndescription in the kernel is used.\n\nSigned-off-by: Martin Willi \u003cmartin@strongswan.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9e0d57fd6dad37d72a3ca6db00ca8c76f2215454", "tree": "89693eb2e093da06e2228c12b43bde23e95049ad", "parents": [ "7a50a240c495478179f01c9df4bd75e39cff79c7" ], "author": { "name": "Yury Polyanskiy", "email": "polyanskiy@gmail.com", "time": "Sun Nov 08 20:58:41 2009 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Nov 08 20:58:41 2009 -0800" }, "message": "xfrm: SAD entries do not expire correctly after suspend-resume\n\n This fixes the following bug in the current implementation of\nnet/xfrm: SAD entries timeouts do not count the time spent by the machine \nin the suspended state. This leads to the connectivity problems because \nafter resuming local machine thinks that the SAD entry is still valid, while \nit has already been expired on the remote server.\n\n The cause of this is very simple: the timeouts in the net/xfrm are bound to \nthe old mod_timer() timers. This patch reassigns them to the\nCLOCK_REALTIME hrtimer.\n\n I have been using this version of the patch for a few months on my\nmachines without any problems. Also run a few stress tests w/o any\nissues.\n\n This version of the patch uses tasklet_hrtimer by Peter Zijlstra\n(commit 9ba5f0).\n\n This patch is against 2.6.31.4. Please CC me.\n\nSigned-off-by: Yury Polyanskiy \u003cpolyanskiy@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fd2c3ef761fbc5e6c27fa7d40b30cda06bfcd7d8", "tree": "25922196160e9d5be8aa2a473ce981756926390f", "parents": [ "4b7673a04a16f1d8faf1e367ae28a6ee1671843d" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Tue Nov 03 03:26:03 2009 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Nov 04 05:06:25 2009 -0800" }, "message": "net: cleanup include/net\n\nThis cleanup patch puts struct/union/enum opening braces,\nin first line to ease grep games.\n\nstruct something\n{\n\nbecomes :\n\nstruct something {\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "eb2ff967a587a4a784fd2390f38e324a5bec01ec", "tree": "63deb9023b47287a7fad08465f7c75a5c41e29fc", "parents": [ "2ad9afbf5ca27482aa275de517261d56fd1e7ba0" ], "author": { "name": "Steffen Klassert", "email": "steffen.klassert@secunet.com", "time": "Wed Oct 07 22:50:40 2009 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Oct 18 21:32:01 2009 -0700" }, "message": "xfrm: remove skb_icv_walk\n\nThe last users of skb_icv_walk are converted to ahash now,\nso skb_icv_walk is unused and can be removed.\n\nSigned-off-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a33bc5c15154c835aae26f16e6a3a7d9ad4acb45", "tree": "cf7683b1b2d2fd170bfc6650ea84a4b9a81eebbf", "parents": [ "9aada7ac047f789ffb27540cc1695989897b2dfe" ], "author": { "name": "Neil Horman", "email": "nhorman@tuxdriver.com", "time": "Thu Jul 30 18:52:15 2009 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jul 30 18:52:15 2009 -0700" }, "message": "xfrm: select sane defaults for xfrm[4|6] gc_thresh\n\nChoose saner defaults for xfrm[4|6] gc_thresh values on init\n\nCurrently, the xfrm[4|6] code has hard-coded initial gc_thresh values\n(set to 1024). Given that the ipv4 and ipv6 routing caches are sized\ndynamically at boot time, the static selections can be non-sensical.\nThis patch dynamically selects an appropriate gc threshold based on\nthe corresponding main routing table size, using the assumption that\nwe should in the worst case be able to handle as many connections as\nthe routing table can.\n\nFor ipv4, the maximum route cache size is 16 * the number of hash\nbuckets in the route cache. Given that xfrm4 starts garbage\ncollection at the gc_thresh and prevents new allocations at 2 *\ngc_thresh, we set gc_thresh to half the maximum route cache size.\n\nFor ipv6, its a bit trickier. there is no maximum route cache size,\nbut the ipv6 dst_ops gc_thresh is statically set to 1024. It seems\nsane to select a simmilar gc_thresh for the xfrm6 code that is half\nthe number of hash buckets in the v6 route cache times 16 (like the v4\ncode does).\n\nSigned-off-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d5fdd6babcfc2b0e6a8da1acf492a69fb54b4c47", "tree": "e4ebdb5d6c4b1ddc16f83e701e3e6038c379a497", "parents": [ "0cf08dcb78e8d61b6d4b2eb5cdb296d969971626" ], "author": { "name": "Brian Haley", "email": "brian.haley@hp.com", "time": "Tue Jun 23 04:31:07 2009 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Jun 23 04:31:07 2009 -0700" }, "message": "ipv6: Use correct data types for ICMPv6 type and code\n\nChange all the code that deals directly with ICMPv6 type and code\nvalues to use u8 instead of a signed int as that\u0027s the actual data\ntype.\n\nSigned-off-by: Brian Haley \u003cbrian.haley@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "adf30907d63893e4208dfe3f5c88ae12bc2f25d5", "tree": "0f07542bb95de2ad537540868aba6cf87a86e17d", "parents": [ "511c3f92ad5b6d9f8f6464be1b4f85f0422be91a" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Tue Jun 02 05:19:30 2009 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Jun 03 02:51:04 2009 -0700" }, "message": "net: skb-\u003edst accessors\n\nDefine three accessors to get/set dst attached to a skb\n\nstruct dst_entry *skb_dst(const struct sk_buff *skb)\n\nvoid skb_dst_set(struct sk_buff *skb, struct dst_entry *dst)\n\nvoid skb_dst_drop(struct sk_buff *skb)\nThis one should replace occurrences of :\ndst_release(skb-\u003edst)\nskb-\u003edst \u003d NULL;\n\nDelete skb-\u003edst field\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b27aeadb5948d400df83db4d29590fb9862ba49d", "tree": "f76cc43150164facbb890e4d5c619a99fe6ce303", "parents": [ "c68cd1a01ba56995d85a4a62b195b2b3f6415c64" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 18:00:48 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 18:00:48 2008 -0800" }, "message": "netns xfrm: per-netns sysctls\n\nMake\n\tnet.core.xfrm_aevent_etime\n\tnet.core.xfrm_acq_expires\n\tnet.core.xfrm_aevent_rseqth\n\tnet.core.xfrm_larval_drop\n\nsysctls per-netns.\n\nFor that make net_core_path[] global, register it to prevent two\n/proc/net/core antries and change initcall position -- xfrm_init() is called\nfrom fs_initcall, so this one should be fs_initcall at least.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c68cd1a01ba56995d85a4a62b195b2b3f6415c64", "tree": "69351005622aced7acf9085fa5c54134419286ba", "parents": [ "59c9940ed0ef026673cac52f2eaed77af7d486da" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 18:00:14 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 18:00:14 2008 -0800" }, "message": "netns xfrm: /proc/net/xfrm_stat in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "59c9940ed0ef026673cac52f2eaed77af7d486da", "tree": "d7d4e38e693178f16000eaa5ae03f415f3197f7a", "parents": [ "4fb236bac9fc7d51e2267866de6d4c30e549d2f8" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:59:52 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:59:52 2008 -0800" }, "message": "netns xfrm: per-netns MIBs\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fbda33b2b85941c1ae3a0d89522dec5c1b1bd98c", "tree": "f35036a6faf4fa549e45ff2b0407344e17cf9455", "parents": [ "c5b3cf46eabe6e7459125fc6e2033b4222665017" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:56:49 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:56:49 2008 -0800" }, "message": "netns xfrm: -\u003eget_saddr in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c5b3cf46eabe6e7459125fc6e2033b4222665017", "tree": "a968ad567906d7b45270b9e91d534493f8a1a38d", "parents": [ "db983c1144884cab10d6397532f4bf05eb0c01d2" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:51:25 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:51:25 2008 -0800" }, "message": "netns xfrm: -\u003edst_lookup in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "db983c1144884cab10d6397532f4bf05eb0c01d2", "tree": "ebb86abdaeb916191424407881d52635019502cf", "parents": [ "7067802e262457a9737521e5669b622028b2283a" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:51:01 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:51:01 2008 -0800" }, "message": "netns xfrm: KM reporting in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7067802e262457a9737521e5669b622028b2283a", "tree": "f6f94b1429700979cb1407fc1f96de487f6bf085", "parents": [ "fc34acd36eecdec95171b98ef2516e3d4daa5c41" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:50:36 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:50:36 2008 -0800" }, "message": "netns xfrm: pass netns with KM notifications\n\nSA and SPD flush are executed with NULL SA and SPD respectively, for\nthese cases pass netns explicitly from userspace socket.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a6483b790f8efcd8db190c1c0ff93f9d9efe919a", "tree": "e05ba1d3e7014409a69d878bf9f24c5eb93365e4", "parents": [ "bd235e3cfff617ff91677da553714051866ba55f" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:38:20 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:38:20 2008 -0800" }, "message": "netns xfrm: per-netns NETLINK_XFRM socket\n\nStub senders to init_net\u0027s one temporarily.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ddcfd79680c1dc74eb5f24aa70785c11bf7eec8f", "tree": "f1d762f6b1cf6bcec289fe558a26dcb4e37ffb29", "parents": [ "3dd0b4997a1d4f3a3666e400cc75b0279ce96849" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:37:23 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:37:23 2008 -0800" }, "message": "netns xfrm: dst garbage-collecting in netns\n\nPass netns pointer to struct xfrm_policy_afinfo::garbage_collect()\n\n\t[This needs more thoughts on what to do with dst_ops]\n\t[Currently stub to init_net]\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "99a66657b2f62ae8b2b1e6ffc6abed051e4561ca", "tree": "ce3d720da709565e427ad805ba8b50a4bbb2b5d3", "parents": [ "f6e1e25d703c0a9ba1863384a16851dec52f8e3a" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:36:13 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:36:13 2008 -0800" }, "message": "netns xfrm: xfrm_route_forward() in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f6e1e25d703c0a9ba1863384a16851dec52f8e3a", "tree": "cd89a1a4f3d4f6c54448d922347f4054ea6e04a0", "parents": [ "52479b623d3d41df84c499325b6a8c7915413032" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:35:44 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:35:44 2008 -0800" }, "message": "netns xfrm: xfrm_policy_check in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cdcbca7c1f1946758cfacb69bc1c7eeaccb11e2d", "tree": "1ee0f5edf7fb9e50f7f70c680044be33d41a0d41", "parents": [ "8d1211a6aaea43ea36151c17b0193eb763ff2d7e" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:34:49 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:34:49 2008 -0800" }, "message": "netns xfrm: policy walking in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8d1211a6aaea43ea36151c17b0193eb763ff2d7e", "tree": "8e58601a897ec0e2afb3b2b1df695560b0d76ed4", "parents": [ "33ffbbd52c327225a3e28485c39dc5746d81be03" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:34:20 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:34:20 2008 -0800" }, "message": "netns xfrm: finding policy in netns\n\nAdd netns parameter to xfrm_policy_bysel_ctx(), xfrm_policy_byidx().\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "33ffbbd52c327225a3e28485c39dc5746d81be03", "tree": "ae11b5bbc1651fa5bb53c6c9764128ad7a8a574a", "parents": [ "1121994c803f4a4f471d617443ff2a09515725e7" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:33:32 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:33:32 2008 -0800" }, "message": "netns xfrm: policy flushing in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "284fa7da300adcb700b44df2f64a536b434d4650", "tree": "382f31cff91d68085b03bd4df639fd7ad3c78051", "parents": [ "5447c5e401c49aba0c36bb1066f2d25b152553b7" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:32:14 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:32:14 2008 -0800" }, "message": "netns xfrm: state walking in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5447c5e401c49aba0c36bb1066f2d25b152553b7", "tree": "5a5b4e0736368a70a266bd04075d174310aa5f80", "parents": [ "12604d8aaa38ac4e24299c9803fefdb301a16421" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:31:51 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:31:51 2008 -0800" }, "message": "netns xfrm: finding states in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "221df1ed33c9284fc7a6f6e47ca7f8d5f3665d43", "tree": "1961ab9f9061b595e10449a24e7275d91f422de2", "parents": [ "0e6024519b4da2d9413b97be1de8122d5709ccc1" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:30:50 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:30:50 2008 -0800" }, "message": "netns xfrm: state lookup in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0e6024519b4da2d9413b97be1de8122d5709ccc1", "tree": "169bb5b6b763dbb63ccb23decd36441daa8398ca", "parents": [ "98806f75ba2afc716e4d2f915d3ac7687546f9c0" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:30:18 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:30:18 2008 -0800" }, "message": "netns xfrm: state flush in netns\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dc2caba7b321289e7d02e63d7216961ccecfa103", "tree": "639c3da4e2a2b35af3b4dfe980994ce7f9a27c0e", "parents": [ "a35f6c5de32664d82c072a7e2c7d5c5234de4158" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:24:15 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:24:15 2008 -0800" }, "message": "netns xfrm: per-netns policy counts\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0331b1f383e1fa4049f8e75cafeea8f006171c64", "tree": "69409ab7c17e1527ed063bb4f2eda440e2cb4ea2", "parents": [ "50a30657fd7ee77a94a6bf0ad86eba7c37c3032e" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:21:45 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:21:45 2008 -0800" }, "message": "netns xfrm: add struct xfrm_policy::xp_net\n\nAgain, to avoid complications with passing netns when not necessary.\nAgain, -\u003exp_net is set-once field, once set it never changes.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "50a30657fd7ee77a94a6bf0ad86eba7c37c3032e", "tree": "7eb9165881b9082588eb2c373e9ed2ebc013321e", "parents": [ "c78371441c0d957f54c9f8a35b3ee5a378d14808" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:21:01 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:21:01 2008 -0800" }, "message": "netns xfrm: per-netns km_waitq\n\nDisallow spurious wakeups in __xfrm_lookup().\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "673c09be457bb23aa0eaaa79804cbb342210d195", "tree": "9948d1859bbcd07316f5cea239b86845d6061570", "parents": [ "d62ddc21b674b5ac1466091ff3fbf7baa53bc92c" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:15:16 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:15:16 2008 -0800" }, "message": "netns xfrm: add struct xfrm_state::xs_net\n\nTo avoid unnecessary complications with passing netns around.\n\n* set once, very early after allocating\n* once set, never changes\n\nFor a while create every xfrm_state in init_net.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d62ddc21b674b5ac1466091ff3fbf7baa53bc92c", "tree": "13e57abe023b5258b168e7f9108015a78493e481", "parents": [ "c95839693d2a6612af7f75ad877012eba2f69757" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Nov 25 17:14:31 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 25 17:14:31 2008 -0800" }, "message": "netns xfrm: add netns boilerplate\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cc0fe83525d734bdd9c883b45eca6bb22f286daa", "tree": "3400a54f4dbce1ca80f2da65d3bf99bd26f970bb", "parents": [ "d5917a35ac0d8ebfb4a7d0db3b66054009bd4f37" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Fri Oct 31 00:42:25 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Oct 31 00:42:25 2008 -0700" }, "message": "xfrm: remove unused struct xfrm_policy::next\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "def8b4faff5ca349beafbbfeb2c51f3602a6ef3a", "tree": "a90fbb0b6ae2a49c507465801f31df77bc5ebf9d", "parents": [ "b057efd4d226fcc3a92b0dc6d8ea8e8185ecb260" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Oct 28 13:24:06 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 28 13:24:06 2008 -0700" }, "message": "net: reduce structures when XFRM\u003dn\n\nifdef out\n* struct sk_buff::sp\t\t(pointer)\n* struct dst_entry::xfrm\t(pointer)\n* struct sock::sk_policy\t(2 pointers)\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "13c1d18931ebb5cf407cb348ef2cd6284d68902d", "tree": "6d590f85e48b4cce8f67e42c65b88fce8fcc49c6", "parents": [ "95430c0b140c31cb9e39f876afe1c0e9947d1aaf" ], "author": { "name": "Arnaud Ebalard", "email": "arno@natisbad.org", "time": "Sun Oct 05 13:33:42 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Oct 05 13:33:42 2008 -0700" }, "message": "xfrm: MIGRATE enhancements (draft-ebalard-mext-pfkey-enhanced-migrate)\n\nProvides implementation of the enhancements of XFRM/PF_KEY MIGRATE mechanism\nspecified in draft-ebalard-mext-pfkey-enhanced-migrate-00. Defines associated\nPF_KEY SADB_X_EXT_KMADDRESS extension and XFRM/netlink XFRMA_KMADDRESS\nattribute.\n\nSigned-off-by: Arnaud Ebalard \u003carno@natisbad.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "12a169e7d8f4b1c95252d8b04ed0f1033ed7cfe2", "tree": "9630d7798d4fdfc06d6001ccd057aff68f39f908", "parents": [ "b262e60309e1b0eb25d300c7e739427d5316abb1" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 01 07:03:24 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 01 07:03:24 2008 -0700" }, "message": "ipsec: Put dumpers on the dump list\n\nHerbert Xu came up with the idea and the original patch to make\nxfrm_state dump list contain also dumpers:\n\nAs it is we go to extraordinary lengths to ensure that states\ndon\u0027t go away while dumpers go to sleep. It\u0027s much easier if\nwe just put the dumpers themselves on the list since they can\u0027t\ngo away while they\u0027re going.\n\nI\u0027ve also changed the order of addition on new states to prevent\na never-ending dump.\n\nTimo Teräs improved the patch to apply cleanly to latest tree,\nmodified iteration code to be more readable by using a common\nstruct for entries in the list, implemented the same idea for\nxfrm_policy dumping and moved the af_key specific \"last\" entry\ncaching to af_key.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: Timo Teras \u003ctimo.teras@iki.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5c1824587f0797373c95719a196f6098f7c6d20c", "tree": "c3a5af01afc01d88e111c7e1821b03bf404566f6", "parents": [ "fcaa40669cd798ca2ac0d15441e8a1d1145f2b16" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Sep 22 19:48:19 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Sep 22 19:48:19 2008 -0700" }, "message": "ipsec: Fix xfrm_state_walk race\n\nAs discovered by Timo Teräs, the currently xfrm_state_walk scheme\nis racy because if a second dump finishes before the first, we\nmay free xfrm states that the first dump would walk over later.\n\nThis patch fixes this by storing the dumps in a list in order\nto calculate the correct completion counter which cures this\nproblem.\n\nI\u0027ve expanded netlink_cb in order to accomodate the extra state\nrelated to this. It shouldn\u0027t be a big deal since netlink_cb\nis kmalloced for each dump and we\u0027re just increasing it by 4 or\n8 bytes.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "abb81c4f3cb9b8d421f1e5474811ef1d461d341c", "tree": "71a08df3a53eb9e19a62c673d77084e4d81f708b", "parents": [ "dacc62dbf56e872ad96edde0393b9deb56d80cd5" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Sep 09 19:58:29 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Sep 09 19:58:29 2008 -0700" }, "message": "ipsec: Use RCU-like construct for saved state within a walk\n\nNow that we save states within a walk we need synchronisation\nso that the list the saved state is on doesn\u0027t disappear from\nunder us.\n\nAs it stands this is done by keeping the state on the list which\nis bad because it gets in the way of the management of the state\nlife-cycle.\n\nAn alternative is to make our own pseudo-RCU system where we use\ncounters to indicate which state can\u0027t be freed immediately as\nit may be referenced by an ongoing walk when that resumes.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "41fef0ee7b8f3fe3f3dd2ddc9b170f3d88bce595", "tree": "ad828bea28e07bc5b9bc41cc40ec681e811171af", "parents": [ "c8005785102e5b67ecf213f06a3d6c001f6f8cb4" ], "author": { "name": "Marcin Slusarz", "email": "marcin.slusarz@gmail.com", "time": "Sat May 03 21:03:01 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat May 03 21:03:01 2008 -0700" }, "message": "xfrm: convert empty xfrm_audit_* macros to functions\n\nit removes these warnings when CONFIG_AUDITSYSCALL is unset:\n\nnet/xfrm/xfrm_user.c: In function \u0027xfrm_add_sa\u0027:\nnet/xfrm/xfrm_user.c:412: warning: unused variable \u0027sid\u0027\nnet/xfrm/xfrm_user.c:411: warning: unused variable \u0027sessionid\u0027\nnet/xfrm/xfrm_user.c:410: warning: unused variable \u0027loginuid\u0027\nnet/xfrm/xfrm_user.c: In function \u0027xfrm_del_sa\u0027:\nnet/xfrm/xfrm_user.c:485: warning: unused variable \u0027sid\u0027\nnet/xfrm/xfrm_user.c:484: warning: unused variable \u0027sessionid\u0027\nnet/xfrm/xfrm_user.c:483: warning: unused variable \u0027loginuid\u0027\nnet/xfrm/xfrm_user.c: In function \u0027xfrm_add_policy\u0027:\nnet/xfrm/xfrm_user.c:1132: warning: unused variable \u0027sid\u0027\nnet/xfrm/xfrm_user.c:1131: warning: unused variable \u0027sessionid\u0027\nnet/xfrm/xfrm_user.c:1130: warning: unused variable \u0027loginuid\u0027\nnet/xfrm/xfrm_user.c: In function \u0027xfrm_get_policy\u0027:\nnet/xfrm/xfrm_user.c:1382: warning: unused variable \u0027sid\u0027\nnet/xfrm/xfrm_user.c:1381: warning: unused variable \u0027sessionid\u0027\nnet/xfrm/xfrm_user.c:1380: warning: unused variable \u0027loginuid\u0027\nnet/xfrm/xfrm_user.c: In function \u0027xfrm_add_pol_expire\u0027:\nnet/xfrm/xfrm_user.c:1620: warning: unused variable \u0027sid\u0027\nnet/xfrm/xfrm_user.c:1619: warning: unused variable \u0027sessionid\u0027\nnet/xfrm/xfrm_user.c:1618: warning: unused variable \u0027loginuid\u0027\nnet/xfrm/xfrm_user.c: In function \u0027xfrm_add_sa_expire\u0027:\nnet/xfrm/xfrm_user.c:1658: warning: unused variable \u0027sid\u0027\nnet/xfrm/xfrm_user.c:1657: warning: unused variable \u0027sessionid\u0027\nnet/xfrm/xfrm_user.c:1656: warning: unused variable \u0027loginuid\u0027\n\nSigned-off-by: Marcin Slusarz \u003cmarcin.slusarz@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2532386f480eefbdd67b48be55fb4fb3e5a6081c", "tree": "dd6a5a3c4116a67380a1336319c16632f04f80f9", "parents": [ "436c405c7d19455a71f42c9bec5fd5e028f1eb4e" ], "author": { "name": "Eric Paris", "email": "eparis@redhat.com", "time": "Fri Apr 18 10:09:25 2008 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Apr 28 06:18:03 2008 -0400" }, "message": "Audit: collect sessionid in netlink messages\n\nPreviously I added sessionid output to all audit messages where it was\navailable but we still didn\u0027t know the sessionid of the sender of\nnetlink messages. This patch adds that information to netlink messages\nso we can audit who sent netlink messages.\n\nSigned-off-by: Eric Paris \u003ceparis@redhat.com\u003e\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "c5d18e984a313adf5a1a4ae69e0b1d93cf410229", "tree": "2922514a388759b999757eec49b7a5bd9f290e3c", "parents": [ "7c3f944e29c02d71e13442e977cf4cec19c39e98" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Apr 22 00:46:42 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Apr 22 00:46:42 2008 -0700" }, "message": "[IPSEC]: Fix catch-22 with algorithm IDs above 31\n\nAs it stands it\u0027s impossible to use any authentication algorithms\nwith an ID above 31 portably. It just happens to work on x86 but\nfails miserably on ppc64.\n\nThe reason is that we\u0027re using a bit mask to check the algorithm\nID but the mask is only 32 bits wide.\n\nAfter looking at how this is used in the field, I have concluded\nthat in the long term we should phase out state matching by IDs\nbecause this is made superfluous by the reqid feature. For current\napplications, the best solution IMHO is to allow all algorithms when\nthe bit masks are all ~0.\n\nThe following patch does exactly that.\n\nThis bug was identified by IBM when testing on the ppc64 platform\nusing the NULL authentication algorithm which has an ID of 251.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8e8e43843ba3ced0c657cbc0fdb10644ec60f772", "tree": "e64954326ced9c365c52c256f01b5f9fb1bcae66", "parents": [ "ed85f2c3b2b72bd20f617ac749f5c22be8d0f66e", "50fd4407b8bfbde7c1a0bfe4f24de7df37164342" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 27 18:48:56 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 27 18:48:56 2008 -0700" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6\n\nConflicts:\n\n\tdrivers/net/usb/rndis_host.c\n\tdrivers/net/wireless/b43/dma.c\n\tnet/ipv6/ndisc.c\n" }, { "commit": "732c8bd590625e8bc0b88313b82930e336b2bec4", "tree": "1cf3f6b9db7b886d35bbf38bab2ca6ff82d206d8", "parents": [ "0e5606e4f46b7cf52dd445af01e71ed9dbb7f735" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Mar 26 16:51:09 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 26 16:51:09 2008 -0700" }, "message": "[IPSEC]: Fix BEET output\n\nThe IPv6 BEET output function is incorrectly including the inner\nheader in the payload to be protected. This causes a crash as\nthe packet doesn\u0027t actually have that many bytes for a second\nheader.\n\nThe IPv4 BEET output on the other hand is broken when it comes\nto handling an inner IPv6 header since it always assumes an\ninner IPv4 header.\n\nThis patch fixes both by making sure that neither BEET output\nfunction touches the inner header at all. All access is now\ndone through the protocol-independent cb structure. Two new\nattributes are added to make this work, the IP header length\nand the IPv4 option length. They\u0027re filled in by the inner\nmode\u0027s output function.\n\nThanks to Joakim Koskela for finding this problem.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9bb182a7007515239091b237fe7169b1328a61d3", "tree": "7be7f556c58c650a547a0db34058f8ffffbf98aa", "parents": [ "df8ea19b5d2e7512095bb1e0737513b8da196d64" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Fri Feb 22 14:48:22 2008 +0900" }, "committer": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Mar 25 10:23:57 2008 +0900" }, "message": "[XFRM] MIP6: Fix address keys for routing search.\n\nEach MIPv6 XFRM state (DSTOPT/RH2) holds either destination or source\naddress to be mangled in the IPv6 header (that is \"CoA\").\nOn Inter-MN communication after both nodes binds each other,\nthey use route optimized traffic two MIPv6 states applied, and\nboth source and destination address in the IPv6 header\nare replaced by the states respectively.\nThe packet format is correct, however, next-hop routing search\nare not.\nThis patch fixes it by remembering address pairs for later states.\n\nBased on patch from Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e.\n\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "df9dcb4588aca9cc243cf1f3f454361a84e1cbdb", "tree": "53dabed7cffee752109808cbea2f812e0a6d7faf", "parents": [ "fa86d322d89995fef1bfb5cc768b89d8c22ea0d9" ], "author": { "name": "Kazunori MIYAZAWA", "email": "kazunori@miyazawa.org", "time": "Mon Mar 24 14:51:51 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 24 14:51:51 2008 -0700" }, "message": "[IPSEC]: Fix inter address family IPsec tunnel handling.\n\nSigned-off-by: Kazunori MIYAZAWA \u003ckazunori@miyazawa.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "577f99c1d08cf9cbdafd4e858dd13ff04d855090", "tree": "0f726bbda9b18d311d4c95198bbd96cb7ac01db0", "parents": [ "26c0f03f6b77c513cb7bc37b73a06819bdbb791b", "2f633928cbba8a5858bb39b11e7219a41b0fbef5" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 18 00:37:55 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 18 00:37:55 2008 -0700" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6\n\nConflicts:\n\n\tdrivers/net/wireless/rt2x00/rt2x00dev.c\n\tnet/8021q/vlan_dev.c\n" }, { "commit": "8e3d716cce0c186ae9c88b91cc5686b78e0fd2d4", "tree": "f090da2ca7409f8c4003cb1bef328b47cd8b47ef", "parents": [ "0ff9663c88ac5efdb5c8ac21c0bd7f993a4e3849" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Mar 17 22:49:16 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 17 22:49:16 2008 -0700" }, "message": "xfrm: -\u003eeth_proto is __be16\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4c563f7669c10a12354b72b518c2287ffc6ebfb3", "tree": "056ec93f192f31640f32983c9e11bc7ce1c0692f", "parents": [ "1e04d530705280770e003ac8db516722cca54758" ], "author": { "name": "Timo Teras", "email": "timo.teras@iki.fi", "time": "Thu Feb 28 21:31:08 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 28 21:31:08 2008 -0800" }, "message": "[XFRM]: Speed up xfrm_policy and xfrm_state walking\n\nChange xfrm_policy and xfrm_state walking algorithm from O(n^2) to O(n).\nThis is achieved adding the entries to one more list which is used\nsolely for walking the entries.\n\nThis also fixes some races where the dump can have duplicate or missing\nentries when the SPD/SADB is modified during an ongoing dump.\n\nDumping SADB with 20000 entries using \"time ip xfrm state\" the sys\ntime dropped from 1.012s to 0.080s.\n\nSigned-off-by: Timo Teras \u003ctimo.teras@iki.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b318e0e4ef4e85812c25afa19f75addccc834cd4", "tree": "95d51df1aa01978a99e763cd92fd6f7f4647bf20", "parents": [ "45b503548210fe6f23e92b856421c2a3f05fd034" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Feb 12 22:50:35 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 12 22:50:35 2008 -0800" }, "message": "[IPSEC]: Fix bogus usage of u64 on input sequence number\n\nAl Viro spotted a bogus use of u64 on the input sequence number which\nis big-endian. This patch fixes it by giving the input sequence number\nits own member in the xfrm_skb_cb structure.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "533cb5b0a63f28ecab5503cfceb77e641fa7f7c4", "tree": "62e7d7c65776c5fb30a8ff10fb3049e63257331c", "parents": [ "2216b48376c40cf6984398d478a01b55e76c5434" ], "author": { "name": "Eric Dumazet", "email": "dada1@cosmosbay.com", "time": "Wed Jan 30 19:11:50 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:20 2008 -0800" }, "message": "[XFRM]: constify \u0027struct xfrm_type\u0027\n\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1a6509d991225ad210de54c63314fd9542922095", "tree": "afe5c560388558bebd3e21b7c6f789a28a323a51", "parents": [ "6fbf2cb77461a0cd0675228d20dd0f70d7b2251f" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Jan 28 19:37:29 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:03 2008 -0800" }, "message": "[IPSEC]: Add support for combined mode algorithms\n\nThis patch adds support for combined mode algorithms with GCM being\nthe first algorithm supported.\n\nCombined mode algorithms can be added through the xfrm_user interface\nusing the new algorithm payload type XFRMA_ALG_AEAD. Each algorithms\nis identified by its name and the ICV length.\n\nFor the purposes of matching algorithms in xfrm_tmpl structures,\ncombined mode algorithms occupy the same name space as encryption\nalgorithms. This is in line with how they are negotiated using IKE.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "64c31b3f76482bb64459e786f9eca3bd0164d153", "tree": "4f8fa9e23dbb2b2a73c4516263c983b01cff4f3a", "parents": [ "d66e37a99d323012165ce91fd5c4518e2fcea0c5" ], "author": { "name": "WANG Cong", "email": "xiyou.wangcong@gmail.com", "time": "Mon Jan 07 22:34:29 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:00:46 2008 -0800" }, "message": "[XFRM] xfrm_policy_destroy: Rename and relative fixes.\n\nSince __xfrm_policy_destroy is used to destory the resources\nallocated by xfrm_policy_alloc. So using the name\n__xfrm_policy_destroy is not correspond with xfrm_policy_alloc.\nRename it to xfrm_policy_destroy.\n\nAnd along with some instances that call xfrm_policy_alloc\nbut not using xfrm_policy_destroy to destroy the resource,\nfix them.\n\nSigned-off-by: WANG Cong \u003cxiyou.wangcong@gmail.com\u003e\nAcked-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9ef32d0d1f64cad414697f34bda1b269f632f0cd", "tree": "9bc49054bd29cd5c286631b1a75f028f6e95055a", "parents": [ "680a5a5086443b9547b32b04f40af8f9d717f711" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Jan 01 19:07:50 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:00:28 2008 -0800" }, "message": "[IPSEC]: Kill duplicate xfrm_policy_flush prototype\n\nFor five years we had two xfrm_policy_flush prototypes and every time that\nfunction\u0027s signature changed people have been diligently updating both of\nthem without noticing :)\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "afeb14b49098ba7a51c96e083a4105a0301f94c4", "tree": "2675451596adbea8aa261704c356d074136abbbd", "parents": [ "dfd4f0ae2e111e2b93c295938c0e64ebbb69ae6e" ], "author": { "name": "Paul Moore", "email": "paul.moore@hp.com", "time": "Fri Dec 21 14:58:11 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:00:01 2008 -0800" }, "message": "[XFRM]: RFC4303 compliant auditing\n\nThis patch adds a number of new IPsec audit events to meet the auditing\nrequirements of RFC4303. This includes audit hooks for the following events:\n\n * Could not find a valid SA [sections 2.1, 3.4.2]\n . xfrm_audit_state_notfound()\n . xfrm_audit_state_notfound_simple()\n\n * Sequence number overflow [section 3.3.3]\n . xfrm_audit_state_replay_overflow()\n\n * Replayed packet [section 3.4.3]\n . xfrm_audit_state_replay()\n\n * Integrity check failure [sections 3.4.4.1, 3.4.4.2]\n . xfrm_audit_state_icvfail()\n\nWhile RFC4304 deals only with ESP most of the changes in this patch apply to\nIPsec in general, i.e. both AH and ESP. The one case, integrity check\nfailure, where ESP specific code had to be modified the same was done to the\nAH code for the sake of consistency.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "68277accb3a5f004344f4346498640601b8b7016", "tree": "e6b541283a516406fbd936051028845a20f5a7c4", "parents": [ "8ea843495df36036cb7f22f61994b34f8362b443" ], "author": { "name": "Paul Moore", "email": "paul.moore@hp.com", "time": "Thu Dec 20 20:49:33 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:59:40 2008 -0800" }, "message": "[XFRM]: Assorted IPsec fixups\n\nThis patch fixes a number of small but potentially troublesome things in the\nXFRM/IPsec code:\n\n * Use the \u0027audit_enabled\u0027 variable already in include/linux/audit.h\n Removed the need for extern declarations local to each XFRM audit fuction\n\n * Convert \u0027sid\u0027 to \u0027secid\u0027 everywhere we can\n The \u0027sid\u0027 name is specific to SELinux, \u0027secid\u0027 is the common naming\n convention used by the kernel when refering to tokenized LSM labels,\n unfortunately we have to leave \u0027ctx_sid\u0027 in \u0027struct xfrm_sec_ctx\u0027 otherwise\n we risk breaking userspace\n\n * Convert address display to use standard NIP* macros\n Similar to what was recently done with the SPD audit code, this also also\n includes the removal of some unnecessary memcpy() calls\n\n * Move common code to xfrm_audit_common_stateinfo()\n Code consolidation from the \"less is more\" book on software development\n\n * Proper spacing around commas in function arguments\n Minor style tweak since I was already touching the code\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "558f82ef6e0d25e87f7468c07b6db1fbbf95a855", "tree": "b2fe20926ca4e500b6e5c0232a5bf3b2e3ba898e", "parents": [ "9473e1f631de339c50bde1e3bd09e1045fe90fd5" ], "author": { "name": "Masahide NAKAMURA", "email": "nakam@linux-ipv6.org", "time": "Thu Dec 20 20:42:57 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:59:38 2008 -0800" }, "message": "[XFRM]: Define packet dropping statistics.\n\nThis statistics is shown factor dropped by transformation\nat /proc/net/xfrm_stat for developer.\nIt is a counter designed from current transformation source code\nand defined as linux private MIB.\n\nSee Documentation/networking/xfrm_proc.txt for the detail.\n\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a1b051405bc16222d92c73b0c26d65b333a154ee", "tree": "2950e34bbb51838f8da3e1d03c8ee608d3b56f55", "parents": [ "bd515c3e48ececd774eb3128e81b669dbbd32637" ], "author": { "name": "Masahide NAKAMURA", "email": "nakam@linux-ipv6.org", "time": "Thu Dec 20 20:41:12 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:59:36 2008 -0800" }, "message": "[XFRM] IPv6: Fix dst/routing check at transformation.\n\nIPv6 specific thing is wrongly removed from transformation at net-2.6.25.\nThis patch recovers it with current design.\n\no Update \"path\" of xfrm_dst since IPv6 transformation should\n care about routing changes. It is required by MIPv6 and\n off-link destined IPsec.\no Rename nfheader_len which is for non-fragment transformation used by\n MIPv6 to rt6i_nfheader_len as IPv6 name space.\n\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nAcked-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d5422efe680fc55010c6ddca2370ca9548a96355", "tree": "f72fa5eb779c8ae7d49688a9caac9b69a1f3bd58", "parents": [ "815f4e57e9fc67456624ecde0515a901368c78d2" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Dec 12 10:44:16 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:57:22 2008 -0800" }, "message": "[IPSEC]: Added xfrm_decode_session_reverse and xfrmX_policy_check_reverse\n\nRFC 4301 requires us to relookup ICMP traffic that does not match any\npolicies using the reverse of its payload. This patch adds the functions\nxfrm_decode_session_reverse and xfrmX_policy_check_reverse so we can get\nthe reverse flow to perform such a lookup.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "005011211f559113686938c2c252b8ee1ab855b5", "tree": "a126bc8cbbfa9a263e06cc517fe3c1ae6f31af59", "parents": [ "385ac2e3f226c09cb71733df1899658e33a7850f" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Dec 11 01:53:43 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:57:05 2008 -0800" }, "message": "[IPSEC]: Add xfrm_input_state helper\n\nThis patch adds the xfrm_input_state helper function which returns the\ncurrent xfrm state being processed on the input path given an sk_buff.\nThis is currently only used by xfrm_input but will be used by ESP upon\nasynchronous resumption.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c35b7e72cd48bc7163b6900fb3689fa54b572bba", "tree": "28e1386d9c0a7522e40d6d77b2c912f88f0e8a36", "parents": [ "75314fb38364c81a573cd222f74d792409a7afba" ], "author": { "name": "Daniel Lezcano", "email": "dlezcano@fr.ibm.com", "time": "Sat Dec 08 00:14:11 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:56:59 2008 -0800" }, "message": "[IPV6]: remove ifdef in route6 for xfrm6\n\nThe following patch create the usual static inline functions to disable\nthe xfrm6_init and xfrm6_fini function when XFRM is off.\nThat\u0027s allow to remove some ifdef and make the code a little more clear.\n\nSigned-off-by: Daniel Lezcano \u003cdlezcano@fr.ibm.com\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0013cabab30ec55830ce63d34c0bdd887eb87644", "tree": "667338ce7d2e2b859f1a0fd8d268622da471fe08", "parents": [ "d63bddbe90c4fd924b2155ca92a879393d856170" ], "author": { "name": "Daniel Lezcano", "email": "dlezcano@fr.ibm.com", "time": "Fri Dec 07 00:42:11 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:56:45 2008 -0800" }, "message": "[IPV6]: Make xfrm6_init to return an error code.\n\nThe xfrm initialization function does not return any error code, so if\nthere is an error, the caller can not be advise of that. This patch\nchecks the return code of the different called functions in order to\nreturn a successful or failed initialization.\n\nSigned-off-by: Daniel Lezcano \u003cdlezcano@fr.ibm.com\u003e\nAcked-by: Benjamin Thery \u003cbenjamin.thery@bull.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2fcb45b6b87914f072314e5b5d9c196f45984683", "tree": "e5a6cc4101a8b2693799fde9f47abaf480ae2dfc", "parents": [ "bbca17680f82b1ba3122d41e8bc675aebf6d1cf2" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Dec 03 22:54:12 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:55:49 2008 -0800" }, "message": "[IPSEC]: Use the correct family for input state lookup\n\nWhen merging the input paths of IPsec I accidentally left a hard-coded\nAF_INET for the state lookup call. This broke IPv6 obviously. This\npatch fixes by getting the input callers to specify the family through\nskb-\u003ecb.\n\nCredit goes to Kazunori Miyazawa for diagnosing this and providing an\ninitial patch.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "294b4baf292197e13d1df1d253efa7ac84ffee3f", "tree": "f7f4fc0fa51e937829e2702faffa78b913895f99", "parents": [ "6e23ae2a48750bda407a4a58f52a4865d7308bf5" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Nov 14 01:57:47 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:55 2008 -0800" }, "message": "[IPSEC]: Kill afinfo-\u003enf_post_routing\n\nAfter changeset:\n\n\t[NETFILTER]: Introduce NF_INET_ hook values\n\nIt always evaluates to NF_INET_POST_ROUTING.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1bf06cd2e338fd6fc29169d30eaf0df982338285", "tree": "351bf1c8e5063fdfb8c820470972169d398729fe", "parents": [ "60d5fcfb19d8a958fc563e52240cd05ec23f36c9" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Nov 19 18:50:17 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:54 2008 -0800" }, "message": "[IPSEC]: Add async resume support on input\n\nThis patch adds support for async resumptions on input. To do so, the\ntransform would return -EINPROGRESS and subsequently invoke the\nfunction xfrm_input_resume to resume processing.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "60d5fcfb19d8a958fc563e52240cd05ec23f36c9", "tree": "f1bb64a18b1b183ad1cdf84f88a42a0b643af720", "parents": [ "d26f398400311982d2433debae85746c348b7d58" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Nov 19 18:47:58 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:53 2008 -0800" }, "message": "[IPSEC]: Remove nhoff from xfrm_input\n\nThe nhoff field isn\u0027t actually necessary in xfrm_input. For tunnel\nmode transforms we now throw away the output IP header so it makes no\nsense to fill in the nexthdr field. For transport mode we can now let\nthe function transport_finish do the setting and it knows where the\nnexthdr field is.\n\nThe only other thing that needs the nexthdr field to be set is the\nheader extraction code. However, we can simply move the protocol\nextraction out of the generic header extraction.\n\nWe want to minimise the amount of info we have to carry around between\ntransforms as this simplifies the resumption process for async crypto.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d26f398400311982d2433debae85746c348b7d58", "tree": "cd1fd0dfbd5a51428dc92ea3dbbb864205a27fa8", "parents": [ "0ebea8ef3559b545c37b016f44e84c3b33e47c39" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Nov 13 21:47:08 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:52 2008 -0800" }, "message": "[IPSEC]: Make x-\u003elastused an unsigned long\n\nCurrently x-\u003elastused is u64 which means that it cannot be\nread/written atomically on all architectures. David Miller observed\nthat the value stored in it is only an unsigned long which is always\natomic.\n\nSo based on his suggestion this patch changes the internal\nrepresentation from u64 to unsigned long while the user-interface\nstill refers to it as u64.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "716062fd4c2f88a33ab409f62a1e7397ad0a7e33", "tree": "73f2618fe99bca3870a0dbdc35acf6466ab3b976", "parents": [ "c6581a457e661b7070e484ad723bbf555b17aca2" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Nov 13 21:44:23 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:50 2008 -0800" }, "message": "[IPSEC]: Merge most of the input path\n\nAs part of the work on asynchronous cryptographic operations, we need\nto be able to resume from the spot where they occur. As such, it\nhelps if we isolate them to one spot.\n\nThis patch moves most of the remaining family-specific processing into\nthe common input code.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c6581a457e661b7070e484ad723bbf555b17aca2", "tree": "8562bded99fdee996e6b147d938057caf154f25b", "parents": [ "862b82c6f960cc61274d370aa78ce1112f92a83e" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Nov 13 21:43:43 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:49 2008 -0800" }, "message": "[IPSEC]: Add async resume support on output\n\nThis patch adds support for async resumptions on output. To do so,\nthe transform would return -EINPROGRESS and subsequently invoke the\nfunction xfrm_output_resume to resume processing.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "862b82c6f960cc61274d370aa78ce1112f92a83e", "tree": "51e252e1525dd7d02a695d428890a4c37fae2442", "parents": [ "ef76bc23ef2acf20c8f7f841a542d8ab74c827c6" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Nov 13 21:43:11 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:48 2008 -0800" }, "message": "[IPSEC]: Merge most of the output path\n\nAs part of the work on asynchrnous cryptographic operations, we need\nto be able to resume from the spot where they occur. As such, it\nhelps if we isolate them to one spot.\n\nThis patch moves most of the remaining family-specific processing into\nthe common output code.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "227620e295090629fcb2c46ad3828222ab65438d", "tree": "534162a74628fdfa7a8201cb776a45ca07510e5b", "parents": [ "36cf9acf93e8561d9faec24849e57688a81eb9c5" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Nov 13 21:41:28 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:46 2008 -0800" }, "message": "[IPSEC]: Separate inner/outer mode processing on input\n\nWith inter-family transforms the inner mode differs from the outer\nmode. Attempting to handle both sides from the same function means\nthat it needs to handle both IPv4 and IPv6 which creates duplication\nand confusion.\n\nThis patch separates the two parts on the input path so that each\nfunction deals with one family only.\n\nIn particular, the functions xfrm4_extract_inut/xfrm6_extract_inut\nmoves the pertinent fields from the IPv4/IPv6 IP headers into a\nneutral format stored in skb-\u003ecb. This is then used by the inner mode\ninput functions to modify the inner IP header. In this way the input\nfunction no longer has to know about the outer address family.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "36cf9acf93e8561d9faec24849e57688a81eb9c5", "tree": "fd4fab84132f1784a23441e03c4a0b9aea6cc43a", "parents": [ "29bb43b4ec4e625b0659186fc8a7c8f8b7c81982" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Nov 13 21:40:52 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:45 2008 -0800" }, "message": "[IPSEC]: Separate inner/outer mode processing on output\n\nWith inter-family transforms the inner mode differs from the outer\nmode. Attempting to handle both sides from the same function means\nthat it needs to handle both IPv4 and IPv6 which creates duplication\nand confusion.\n\nThis patch separates the two parts on the output path so that each\nfunction deals with one family only.\n\nIn particular, the functions xfrm4_extract_output/xfrm6_extract_output\nmoves the pertinent fields from the IPv4/IPv6 IP headers into a\nneutral format stored in skb-\u003ecb. This is then used by the outer mode\noutput functions to write the outer IP header. In this way the output\nfunction no longer has to know about the inner address family.\n\nSince the extract functions are only called by tunnel modes (the only\nmodes that can support inter-family transforms), I\u0027ve also moved the\nxfrm*_tunnel_check_size calls into them. This allows the correct ICMP\nmessage to be sent as opposed to now where you might call icmp_send\nwith an IPv6 packet and vice versa.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "25ee3286dcbc830a833354bb1d15567956844813", "tree": "bb5597d9e148f363bf0bbcd1a7269b5f677f0103", "parents": [ "66cdb3ca27323a92712d289fc5edc7841d74a139" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Dec 11 09:32:34 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:43 2008 -0800" }, "message": "[IPSEC]: Merge common code into xfrm_bundle_create\n\nHalf of the code in xfrm4_bundle_create and xfrm6_bundle_create are\ncommon. This patch extracts that logic and puts it into\nxfrm_bundle_create. The rest of it are then accessed through afinfo.\n\nAs a result this fixes the problem with inter-family transforms where\nwe treat every xfrm dst in the bundle as if it belongs to the top\nfamily.\n\nThis patch also fixes a long-standing error-path bug where we may free\nthe xfrm states twice.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "66cdb3ca27323a92712d289fc5edc7841d74a139", "tree": "443c864e4cab413743c3ca755a50f8a5d0ec300d", "parents": [ "f04e7e8d7f175c05bbde3ae748bf2541da53721d" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Nov 13 21:37:28 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:42 2008 -0800" }, "message": "[IPSEC]: Move flow construction into xfrm_dst_lookup\n\nThis patch moves the flow construction from the callers of\nxfrm_dst_lookup into that function. It also changes xfrm_dst_lookup\nso that it takes an xfrm state as its argument instead of explicit\naddresses.\n\nThis removes any address-specific logic from the callers of\nxfrm_dst_lookup which is needed to correctly support inter-family\ntransforms.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f04e7e8d7f175c05bbde3ae748bf2541da53721d", "tree": "0e9a61e66fa507fc389d3e85917eaeb614cc9525", "parents": [ "fff693888012806370c98c601fbaa141fb12dfca" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Nov 13 21:36:51 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 14:53:41 2008 -0800" }, "message": "[IPSEC]: Replace x-\u003etype-\u003e{local,remote}_addr with flags\n\nThe functions local_addr and remote_addr are more than what they\u0027re\nneeded for. The same thing can be done easily with flags on the type\nobject. This patch does that and simplifies the wrapper functions in\nxfrm6_policy accordingly.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0f99be0d115a5716292c58dfdb20d2eddd0f3387", "tree": "a4c8fc6262add152fa7207e40a5f02b18c9bedde", "parents": [ "2e3884b5b16795c03a7bf295797c1b2402885b88" ], "author": { "name": "Eric Dumazet", "email": "dada1@cosmosbay.com", "time": "Tue Jan 08 23:39:06 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Jan 08 23:39:06 2008 -0800" }, "message": "[XFRM]: xfrm_algo_clone() allocates too much memory\n\nalg_key_len is the length in bits of the key, not in bytes.\n\nBest way to fix this is to move alg_len() function from net/xfrm/xfrm_user.c \nto include/net/xfrm.h, and to use it in xfrm_algo_clone()\n\nalg_len() is renamed to xfrm_alg_len() because of its global exposition.\n\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a37ae4086e7e804db534bc8f2d31c2fbf89c5761", "tree": "3bdbdf32937ab8dd8cdde043ca239d59e0818bfb", "parents": [ "c1bd24b76879f61b2d10609b0dabde400792a6ec" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Oct 23 21:13:53 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Oct 23 21:27:56 2007 -0700" }, "message": "[NET]: Don\u0027t declare extern variables in net/core/sysctl_net_core.c\n\nSome are already declared in include/linux/netdevice.h, while\nsome others (xfrm ones) need to be declared.\n\nThe driver/net/rrunner.c just uses same extern as well, so\ncleanup it also.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "13996378e6585fb25e582afe7489bf52dde78deb", "tree": "4a1eb75c81a5a9d23c68f9818259f3b357dc8265", "parents": [ "ca68145f16359f71cd62b2671aa3e8c58f45ef19" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 17 21:35:51 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 17 21:35:51 2007 -0700" }, "message": "[IPSEC]: Rename mode to outer_mode and add inner_mode\n\nThis patch adds a new field to xfrm states called inner_mode. The existing\nmode object is renamed to outer_mode.\n\nThis is the first part of an attempt to fix inter-family transforms. As it\nis we always use the outer family when determining which mode to use. As a\nresult we may end up shoving IPv4 packets into netfilter6 and vice versa.\n\nWhat we really want is to use the inner family for the first part of outbound\nprocessing and the outer family for the second part. For inbound processing\nwe\u0027d use the opposite pairing.\n\nI\u0027ve also added a check to prevent silly combinations such as transport mode\nwith inter-family transforms.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "17c2a42a24e1e8dd6aa7cea4f84e034ab1bfff31", "tree": "3ee494a16a43f575f8c4900deaab894b73b2953a", "parents": [ "1bfcb10f670f5ff5e1d9f53e59680573524cb142" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 17 21:33:12 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 17 21:33:12 2007 -0700" }, "message": "[IPSEC]: Store afinfo pointer in xfrm_mode\n\nIt is convenient to have a pointer from xfrm_state to address-specific\nfunctions such as the output function for a family. Currently the\naddress-specific policy code calls out to the xfrm state code to get\nthose pointers when we could get it in an easier way via the state\nitself.\n\nThis patch adds an xfrm_state_afinfo to xfrm_mode (since they\u0027re\naddress-specific) and changes the policy code to use it. I\u0027ve also\nadded an owner field to do reference counting on the module providing\nthe afinfo even though it isn\u0027t strictly necessary today since IPv6\ncan\u0027t be unloaded yet.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1bfcb10f670f5ff5e1d9f53e59680573524cb142", "tree": "003b271a2c1e089ae6506d869b7a8c8f04dbde0a", "parents": [ "aa5d62cc8777f733f8b59b5586c0a1989813189e" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 17 21:31:50 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 17 21:31:50 2007 -0700" }, "message": "[IPSEC]: Add missing BEET checks\n\nCurrently BEET mode does not reinject the packet back into the stack\nlike tunnel mode does. Since BEET should behave just like tunnel mode\nthis is incorrect.\n\nThis patch fixes this by introducing a flags field to xfrm_mode that\ntells the IPsec code whether it should terminate and reinject the packet\nback into the stack.\n\nIt then sets the flag for BEET and tunnel mode.\n\nI\u0027ve also added a number of missing BEET checks elsewhere where we check\nwhether a given mode is a tunnel or not.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "aa5d62cc8777f733f8b59b5586c0a1989813189e", "tree": "e04d5c0032e7460031cb83162db64fc68244af3a", "parents": [ "440725000cba0b1a68ca2df20124be3a5b7f7702" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 17 21:31:12 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 17 21:31:12 2007 -0700" }, "message": "[IPSEC]: Move type and mode map into xfrm_state.c\n\nThe type and mode maps are only used by SAs, not policies. So it makes\nsense to move them from xfrm_policy.c into xfrm_state.c. This also allows\nus to mark xfrm_get_type/xfrm_put_type/xfrm_get_mode/xfrm_put_mode as\nstatic.\n\nThe only other change I\u0027ve made in the move is to get rid of the casts\non the request_module call for types. They\u0027re unnecessary because C\nwill promote them to ints anyway.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "33b5ecb8f64706d1ed472dcb44162ab3a7345724", "tree": "065d9cc0592bc08db34a562ff8753279cf52509c", "parents": [ "c4541b41c0e4b75b11125fed16db642fc03cb31c" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 17 21:29:25 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 17 21:29:25 2007 -0700" }, "message": "[IPSEC]: Get nexthdr from caller in xfrm6_rcv_spi\n\nCurrently xfrm6_rcv_spi gets the nexthdr value itself from the packet.\nThis means that we need to fix up the value in case we have a 4-on-6\ntunnel. Moving this logic into the caller simplifies things and allows\nus to merge the code with IPv4.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c4541b41c0e4b75b11125fed16db642fc03cb31c", "tree": "10627bc42cf56fd3f45aa93963d0852dfefa49ab", "parents": [ "04663d0b8b3c8ce3804106279420cfe5bdfcce3c" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 17 21:28:53 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 17 21:28:53 2007 -0700" }, "message": "[IPSEC]: Move tunnel parsing for IPv4 out of xfrm4_input\n\nThis patch moves the tunnel parsing for IPv4 out of xfrm4_input and into\nxfrm4_tunnel. This change is in line with what IPv6 does and will allow\nus to merge the two input functions.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e5bbef20e017efcb10700398cc048c49b98628e0", "tree": "5139dfbfb416eaeb43cc75645e486fe6a103e39b", "parents": [ "a224be766bf593f7bcd534ca0c48dbd3eaf7bfce" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Oct 15 12:50:28 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 15 12:50:28 2007 -0700" }, "message": "[IPV6]: Replace sk_buff ** with sk_buff * in input handlers\n\nWith all the users of the double pointers removed from the IPv6 input path,\nthis patch converts all occurances of sk_buff ** to sk_buff * in IPv6 input\nhandlers.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "37fedd3aab6517daec628764c5d66dd8761fbe5f", "tree": "12227aec3944168bff04173dccd580240f4496aa", "parents": [ "7b277b1a5fb147cb828e5d8b9780cee60f31a9bf" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 10 15:44:44 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:54 2007 -0700" }, "message": "[IPSEC]: Use IPv6 calling convention as the convention for x-\u003emode-\u003eoutput\n\nThe IPv6 calling convention for x-\u003emode-\u003eoutput is more general and could\nhelp an eventual protocol-generic x-\u003etype-\u003eoutput implementation. This\npatch adopts it for IPv4 as well and modifies the IPv4 type output functions\naccordingly.\n\nIt also rewrites the IPv6 mac/transport header calculation to be based off\nthe network header where practical.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "658b219e9379d75fbdc578b9630b598098471258", "tree": "fe802c4e1ee6468a9c2558a5e529b2380845a003", "parents": [ "75ba28c633952f7994a7117c98ae6515b58f8d30" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Oct 09 13:29:52 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:01 2007 -0700" }, "message": "[IPSEC]: Move common code into xfrm_alloc_spi\n\nThis patch moves some common code that conceptually belongs to the xfrm core\nfrom af_key/xfrm_user into xfrm_alloc_spi.\n\nIn particular, the spin lock on the state is now taken inside xfrm_alloc_spi.\nPreviously it also protected the construction of the response PF_KEY/XFRM\nmessages to user-space. This is inconsistent as other identical constructions\nare not protected by the state lock. This is bad because they in fact should\nbe protected but only in certain spots (so as not to hold the lock for too\nlong which may cause packet drops).\n\nThe SPI byte order conversion has also been moved.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cdf7e668d4327a33e11be04c4cb9bcc604eaaa0f", "tree": "3ffa05d642ec702b73eb568894024b4787849faa", "parents": [ "436a0a402203d5a47d2edf7e4dde6c08a7257983" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Oct 08 17:26:34 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:55 2007 -0700" }, "message": "[IPSEC]: Unexport xfrm_replay_notify\n\nNow that the only callers of xfrm_replay_notify are in xfrm, we can remove\nthe export.\n\nThis patch also removes xfrm_aevent_doreplay since it\u0027s now called in just\none spot.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "436a0a402203d5a47d2edf7e4dde6c08a7257983", "tree": "b47e73326a2ff7dbf8ac3fbcb6c4acea5c06619d", "parents": [ "83815dea47cf3e98ccbb6aecda08cba1ba91208f" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Oct 08 17:25:53 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:54 2007 -0700" }, "message": "[IPSEC]: Move output replay code into xfrm_output\n\nThe replay counter is one of only two remaining things in the output code\nthat requires a lock on the xfrm state (the other being the crypto). This\npatch moves it into the generic xfrm_output so we can remove the lock from\nthe transforms themselves.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "83815dea47cf3e98ccbb6aecda08cba1ba91208f", "tree": "6d728f3b26dc02685ec6c8eb5c08605adf9d2688", "parents": [ "406ef77c893ebd882209be4e393d64b01fe72054" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Oct 08 17:25:08 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:54 2007 -0700" }, "message": "[IPSEC]: Move xfrm_state_check into xfrm_output.c\n\nThe functions xfrm_state_check and xfrm_state_check_space are only used by\nthe output code in xfrm_output.c so we can move them over.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "406ef77c893ebd882209be4e393d64b01fe72054", "tree": "815d753889769b355fba7e648abef7ad1422559e", "parents": [ "bc31d3b2c7d7f2a03721a05cb3c9a3ce8b1e2e5a" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Oct 08 17:16:30 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:53 2007 -0700" }, "message": "[IPSEC]: Move common output code to xfrm_output\n\nMost of the code in xfrm4_output_one and xfrm6_output_one are identical so\nthis patch moves them into a common xfrm_output function which will live\nin net/xfrm.\n\nIn fact this would seem to fix a bug as on IPv4 we never reset the network\nheader after a transform which may upset netfilter later on.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ab5f5e8b144e4c804ef3aa1ce08a9ca9f01187ce", "tree": "bf3915a618b29f507d882e9c665ed9d07e7c0765", "parents": [ "d2e9117c7aa9544d910634e17e3519fd67155229" ], "author": { "name": "Joy Latten", "email": "latten@austin.ibm.com", "time": "Mon Sep 17 11:51:22 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:49:02 2007 -0700" }, "message": "[XFRM]: xfrm audit calls\n\nThis patch modifies the current ipsec audit layer\nby breaking it up into purpose driven audit calls.\n\nSo far, the only audit calls made are when add/delete\nan SA/policy. It had been discussed to give each\nkey manager it\u0027s own calls to do this, but I found\nthere to be much redundnacy since they did the exact\nsame things, except for how they got auid and sid, so I\ncombined them. The below audit calls can be made by any\nkey manager. Hopefully, this is ok.\n\nSigned-off-by: Joy Latten \u003clatten@austin.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bd0bf0765ea1fba80d7085e1f0375ec045631dc1", "tree": "7a637d217e6f090f3eebe127a11fcbfaabc1c3cd", "parents": [ "16751347a060a10c09b11593bb179fd5b0240c04" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Jul 18 01:55:52 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Jul 18 01:55:52 2007 -0700" }, "message": "[XFRM]: Fix crash introduced by struct dst_entry reordering\n\nXFRM expects xfrm_dst-\u003eu.next to be same pointer as dst-\u003enext, which\nwas broken by the dst_entry reordering in commit 1e19e02c~, causing\nan oops in xfrm_bundle_ok when walking the bundle upwards.\n\nKill xfrm_dst-\u003eu.next and change the only user to use dst-\u003enext instead.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "067b207b281db5e3f03f8d244286c20f61aa2343", "tree": "a947ba1fdc03ca82fdb2c7d6f8334b995c1c5ab2", "parents": [ "93cce3d3657bfb5d04789afcd5104f8c48700f32" ], "author": { "name": "James Chapman", "email": "jchapman@katalix.com", "time": "Thu Jul 05 17:08:05 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:16:53 2007 -0700" }, "message": "[UDP]: Cleanup UDP encapsulation code\n\nThis cleanup fell out after adding L2TP support where a new encap_rcv\nfuncptr was added to struct udp_sock. Have XFRM use the new encap_rcv\nfuncptr, which allows us to move the XFRM encap code from udp.c into\nxfrm4_input.c.\n\nMake xfrm4_rcv_encap() static since it is no longer called externally.\n\nSigned-off-by: James Chapman \u003cjchapman@katalix.com\u003e\nAcked-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "628529b6ee334fedc8d25ce56205bb99566572b9", "tree": "4545df6f7ecdec05c903bb2c11ba9fb4380ac71c", "parents": [ "007a531b0a0c902392a3deff730acd28ce6625c7" ], "author": { "name": "Jamal Hadi Salim", "email": "hadi@cyberus.ca", "time": "Mon Jul 02 22:41:14 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:16:35 2007 -0700" }, "message": "[XFRM] Introduce standalone SAD lookup\n\nThis allows other in-kernel functions to do SAD lookups.\nThe only known user at the moment is pktgen.\n\nSigned-off-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d3d6dd3adaaad71eae20902ed81808a66a40a5b9", "tree": "b08faa2174867f3f589889695bfa8388d2237f1e", "parents": [ "59fbb3a61e02deaeaa4fb50792217921f3002d64" ], "author": { "name": "Masahide NAKAMURA", "email": "nakam@linux-ipv6.org", "time": "Tue Jun 26 23:57:49 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:15:43 2007 -0700" }, "message": "[XFRM]: Add module alias for transformation type.\n\nIt is clean-up for XFRM type modules and adds aliases with its\nprotocol:\n ESP, AH, IPCOMP, IPIP and IPv6 for IPsec\n ROUTING and DSTOPTS for MIPv6\n\nIt is almost the same thing as XFRM mode alias, but it is added\nnew defines XFRM_PROTO_XXX for preprocessing since some protocols\nare defined as enum.\n\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nAcked-by: Ingo Oeser \u003cnetdev@axxeo.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "136ebf08b46f839e2dc9db34322b654e5d9b9936", "tree": "6a38a3c546def150ff73effcf4afd9c55881f49c", "parents": [ "2371baa4bdab3268b32009926f75e7a5d3a41506" ], "author": { "name": "Masahide NAKAMURA", "email": "nakam@linux-ipv6.org", "time": "Tue Jun 26 23:51:41 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:15:41 2007 -0700" }, "message": "[IPV6] MIP6: Kill unnecessary ifdefs.\n\nKill unnecessary CONFIG_IPV6_MIP6.\n\no It is redundant for RAW socket to keep MH out with the config then\n it can handle any protocol.\no Clean-up at AH.\n\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" } ], "next": "4aa2e62c45b5ca08be2d0d3c0744d7585b56e860" }