Evan Nimmo 9ab1265d52 xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume ... A situation can occur where the interface bound to the sk is different to the interface bound to the sk attached to the skb. The interface bound to the sk is the correct one however this information is lost inside xfrm_output2 and instead the sk on the skb is used in xfrm_output_resume instead. This assumes that the sk bound interface and the bound interface attached to the sk within the skb are the same which can lead to lookup failures inside ip_route_me_harder resulting in the packet being dropped. We have an l2tp v3 tunnel with ipsec protection. The tunnel is in the global VRF however we have an encapsulated dot1q tunnel interface that is within a different VRF. We also have a mangle rule that marks the packets causing them to be processed inside ip_route_me_harder. Prior to commit 31c70d5956 ("l2tp: keep original skb ownership") this worked fine as the sk attached to the skb was changed from the dot1q encapsulated interface to the sk for the tunnel which meant the interface bound to the sk and the interface bound to the skb were identical. Commit 46d6c5ae95 ("netfilter: use actual socket sk rather than skb sk when routing harder") fixed some of these issues however a similar problem existed in the xfrm code. Fixes: 31c70d5956 ("l2tp: keep original skb ownership") Signed-off-by: Evan Nimmo <evan.nimmo@alliedtelesis.co.nz> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>		2021-03-03 09:32:52 +01:00
..
espintcp.c	espintcp: restore IP CB before handing the packet to xfrm	2020-08-17 15:58:04 +02:00
Kconfig	xfrm/compat: Add 32=>64-bit messages translator	2020-09-24 08:53:03 +02:00
Makefile	xfrm: Provide API to register translator module	2020-09-24 08:53:03 +02:00
xfrm_algo.c	crypto: skcipher - remove the "blkcipher" algorithm type	2019-11-01 13:38:32 +08:00
xfrm_compat.c	xfrm/compat: Don't allocate memory with __GFP_ZERO	2020-11-09 07:34:56 +01:00
xfrm_device.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-06-25 19:29:51 -07:00
xfrm_hash.c	mm: remove include/linux/bootmem.h	2018-10-31 08:54:16 -07:00
xfrm_hash.h	xfrm: use complete IPv6 addresses for hash	2018-10-15 10:09:18 +02:00
xfrm_inout.h	xfrm: move xfrm4_extract_header to common helper	2020-05-06 09:40:08 +02:00
xfrm_input.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2021-01-21 11:05:10 -08:00
xfrm_interface.c	xfrm: interface: fix ipv4 pmtu check to honor ip header df	2021-02-23 18:23:58 +01:00
xfrm_ipcomp.c	net: Use skb_frag_off accessors	2019-07-30 14:21:32 -07:00
xfrm_output.c	xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume	2021-03-03 09:32:52 +01:00
xfrm_policy.c	xfrm: Fix wraparound in xfrm_policy_addr_delta()	2021-01-04 10:35:09 +01:00
xfrm_proc.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
xfrm_replay.c	xfrm: introduce oseq-may-wrap flag	2020-06-24 07:51:01 +02:00
xfrm_state.c	selinux/stable-5.11 PR 20201214	2020-12-16 11:01:04 -08:00
xfrm_sysctl.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfrm_user.c	xfrm: Return the correct errno code	2021-02-04 09:29:27 +01:00