You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Herbert Xu c5d18e984a [IPSEC]: Fix catch-22 with algorithm IDs above 31 ... As it stands it's impossible to use any authentication algorithms with an ID above 31 portably. It just happens to work on x86 but fails miserably on ppc64. The reason is that we're using a bit mask to check the algorithm ID but the mask is only 32 bits wide. After looking at how this is used in the field, I have concluded that in the long term we should phase out state matching by IDs because this is made superfluous by the reqid feature. For current applications, the best solution IMHO is to allow all algorithms when the bit masks are all ~0. The following patch does exactly that. This bug was identified by IBM when testing on the ppc64 platform using the NULL authentication algorithm which has an ID of 251. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net>		17 years ago
..
Kconfig	net: xfrm statistics depend on INET	17 years ago
Makefile	[XFRM]: Define packet dropping statistics.	17 years ago
xfrm_algo.c	[IPSEC]: Add support for aes-ctr.	17 years ago
xfrm_hash.c	…
xfrm_hash.h	…
xfrm_input.c	[IPSEC]: Fix inter address family IPsec tunnel handling.	17 years ago
xfrm_output.c	[IPSEC]: Fix inter address family IPsec tunnel handling.	17 years ago
xfrm_policy.c	[IPSEC]: Fix catch-22 with algorithm IDs above 31	17 years ago
xfrm_proc.c	[XFRM]: Fix statistics.	17 years ago
xfrm_state.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6	17 years ago
xfrm_user.c	[IPSEC]: Fix catch-22 with algorithm IDs above 31	17 years ago