linux-toradex.git/net/ipv4/esp4.c, branch v2.6.18

[NET]: Conversions from kmalloc+memset to k(z|c)alloc.

2006-07-21T21:51:30+00:00

Signed-off-by: Panagiotis Issaris 
Signed-off-by: David S. Miller

Remove obsolete #include

2006-06-30T17:25:36+00:00

Signed-off-by: Jörn Engel 
Signed-off-by: Adrian Bunk

[IPSEC] proto: Move transport mode input path into xfrm_mode_transport

2006-06-18T04:28:41+00:00

Now that we have xfrm_mode objects we can move the transport mode specific
input decapsulation code into xfrm_mode_transport.  This removes duplicate
code as well as unnecessary header movement in case of tunnel mode SAs
since we will discard the original IP header immediately.

This also fixes a minor bug for transport-mode ESP where the IP payload
length is set to the correct value minus the header length (with extension
headers for IPv6).

Of course the other neat thing is that we no longer have to allocate
temporary buffers to hold the IP headers for ESP and IPComp.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[IPSEC]: Kill unused decap state argument

2006-04-01T08:52:46+00:00

This patch removes the decap_state argument from the xfrm input hook.
Previously this function allowed the input hook to share state with
the post_input hook.  The latter has since been removed.

The only purpose for it now is to check the encap type.  However, it
is easier and better to move the encap type check to the generic
xfrm_rcv function.  This allows us to get rid of the decap state
argument altogether.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[IPSEC]: Sync series - fast path

2006-03-21T03:15:29+00:00

Fast path sequence updates that will generate ipsec async
events

Signed-off-by: Jamal Hadi Salim 
Signed-off-by: David S. Miller

[IPSEC]: Kill post_input hook and do NAT-T in esp_input directly

2006-02-27T21:00:40+00:00

The only reason post_input exists at all is that it gives us the
potential to adjust the checksums incrementally in future which
we ought to do.

However, after thinking about it for a bit we can adjust the
checksums without using this post_input stuff at all.  The crucial
point is that only the inner-most NAT-T SA needs to be considered
when adjusting checksums.  What's more, the checksum adjustment
comes down to a single u32 due to the linearity of IP checksums.

We just happen to have a spare u32 lying around in our skb structure :)
When ip_summed is set to CHECKSUM_NONE on input, the value of skb->csum
is currently unused.  All we have to do is to make that the checksum
adjustment and voila, there goes all the post_input and decap structures!

I've left in the decap data structures for now since it's intricately
woven into the sec_path stuff.  We can kill them later too.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[IPSEC] esp: Kill unnecessary block and indentation

2006-02-27T21:00:01+00:00

We used to keep sg on the stack which is why the extra block was useful.
We've long since stopped doing that so let's kill the block and save
some indentation.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03T21:11:21+00:00

To help in reducing the number of include dependencies, several files were
touched as they were getting needed headers indirectly for stuff they use.

Thanks also to Alan Menegotto for pointing out that net/dccp/proto.c had
linux/dccp.h include twice.

Signed-off-by: Arnaldo Carvalho de Melo 
Signed-off-by: David S. Miller

[IPSEC] Fix block size/MTU bugs in ESP

2005-10-11T04:11:34+00:00

This patch fixes the following bugs in ESP:

* Fix transport mode MTU overestimate.  This means that the inner MTU
  is smaller than it needs be.  Worse yet, given an input MTU which
  is a multiple of 4 it will always produce an estimate which is not
  a multiple of 4.

  For example, given a standard ESP/3DES/MD5 transform and an MTU of
  1500, the resulting MTU for transport mode is 1462 when it should
  be 1464.

  The reason for this is because IP header lengths are always a multiple
  of 4 for IPv4 and 8 for IPv6.

* Ensure that the block size is at least 4.  This is required by RFC2406
  and corresponds to what the esp_output function does.  At the moment
  this only affects crypto_null as its block size is 1.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[IPSEC]: Use ALIGN macro in ESP

2005-10-11T04:11:08+00:00

This patch uses the macro ALIGN in all the applicable spots for ESP.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller