android_external_iproute2/ip/ipxfrm.c, branch cm-14.0 Unnamed repository; edit this file 'description' to name the repository. xfrm: remove duplicated include 2015-07-27T21:36:53+00:00 Zhang Shengju zhangshengju@cmss.chinamobile.com 2015-07-25T08:44:24+00:00 0dc2e22978c9f754e171574e727d8dfa226d3781 Remove dupldated include for <linux/xfrm.h>, since it's already included by 'xfrm.h'. Signed-off-by: Zhang Shengju <zhangshengju@cmss.chinamobile.com> 
Remove dupldated include for <linux/xfrm.h>, since it's already
included by 'xfrm.h'.

Signed-off-by: Zhang Shengju <zhangshengju@cmss.chinamobile.com>
ip-xfrm: support 'proto any' with 'sport' and 'dport' 2015-04-20T16:56:44+00:00 Pavel Šimerda psimerda@redhat.com 2015-04-13T14:00:57+00:00 11a3e5c4b31530840d6ea4339ce4078d5922b5d6 When creating an IPsec SA that sets 'proto any' (IPPROTO_IP) and specifies 'sport' and 'dport' at the same time in selector, the following error is issued: "sport" and "dport" are invalid with proto=ip However using IPPROTO_IP with ports is completely legal and necessary when one wants to share the SA on both TCP and UDP. One of the applications requiring sharing SAs is 3GPP IMS AKA authentication. See also: * https://bugzilla.redhat.com/show_bug.cgi?id=497355 Reported-by: Jiří Klimeš <jklimes@redhat.com> Signed-off-by: Pavel Šimerda <psimerda@redhat.com> 
When creating an IPsec SA that sets 'proto any' (IPPROTO_IP) and
specifies 'sport' and 'dport' at the same time in selector, the
following error is issued:

"sport" and "dport" are invalid with proto=ip

However using IPPROTO_IP with ports is completely legal and necessary
when one wants to share the SA on both TCP and UDP. One of the
applications requiring sharing SAs is 3GPP IMS AKA authentication.

See also:

 * https://bugzilla.redhat.com/show_bug.cgi?id=497355

Reported-by: Jiří Klimeš <jklimes@redhat.com>
Signed-off-by: Pavel Šimerda <psimerda@redhat.com>
add a source addres length parameter to rt_addr_n2a 2015-03-24T22:45:23+00:00 Eric W. Biederman ebiederm@xmission.com 2015-03-15T19:48:32+00:00 26dcdf3a91123c6bf748e06d1205d110d95f34db For some address families (like AF_PACKET) it is helpful to have the length when prenting the address. Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> 
For some address families (like AF_PACKET) it is helpful to have the
length when prenting the address.

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
xfrm: Fix -o (oneline) being broken in xfrm and correct mark radix 2015-03-24T22:01:20+00:00 philipp@redfish-solutions.com philipp@redfish-solutions.com 2015-03-19T19:54:28+00:00 6f4cad912082998bc2a44316af5550eaf260605a Don't insert newline in -o (oneline) mode; print mark as hex. Oneline mode is supposed to force all output to be on oneline and machine-parsable, but this isn't the case for "ip xfrm" as shown: % ip -o xfrm monitor ... src 0.0.0.0/0 dst 0.0.0.0/0 \ dir out priority 2051 ptype main \ mark -1879048191/0xffffffff tmpl src 203.0.130.10 dst 198.51.130.30\ proto esp reqid 16384 mode tunnel\ ... as that's 2 lines, not one. Also, the "mark" is shown in signed decimal, but the mask is in hex. This is confusing: let's use hex for both. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> 
Don't insert newline in -o (oneline) mode; print mark as hex.

Oneline mode is supposed to force all output to be on oneline and
machine-parsable, but this isn't the case for "ip xfrm" as shown:

% ip -o xfrm monitor
...
src 0.0.0.0/0 dst 0.0.0.0/0 \   dir out priority 2051 ptype main \  mark -1879048191/0xffffffff
    tmpl src 203.0.130.10 dst 198.51.130.30\        proto esp reqid 16384 mode tunnel\
...

as that's 2 lines, not one. Also, the "mark" is shown in signed
decimal, but the mask is in hex. This is confusing: let's use
hex for both.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
xfrm: add support of ESN and anti-replay window 2014-10-30T05:50:48+00:00 dingzhi zhi.ding@6wind.com 2014-10-20T09:23:04+00:00 0151b56d102961c1418aea3ee53428d4ca2669c9 This patch allows to configure ESN and anti-replay window. Signed-off-by: dingzhi <zhi.ding@6wind.com> Signed-off-by: Adrien Mazarguil <adrien.mazarguil@6wind.com> Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> 
This patch allows to configure ESN and anti-replay window.

Signed-off-by: dingzhi <zhi.ding@6wind.com>
Signed-off-by: Adrien Mazarguil <adrien.mazarguil@6wind.com>
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
cleanup warnings 2014-08-04T17:30:35+00:00 Stephen Hemminger stephen@networkplumber.org 2014-08-04T17:30:35+00:00 656111b2f9c5932350e697a1aaa70ba2d9b40bc7 ll_index can return -1 but was declared unsigned. rt_addr_n2a had unused length parameter 
ll_index can return -1 but was declared unsigned.
rt_addr_n2a had unused length parameter
Remove trailing whitespace 2014-02-17T18:55:31+00:00 Stephen Hemminger stephen@networkplumber.org 2014-02-17T18:55:31+00:00 0612519e011812276ade512d4a7f8113497f64ed 






Fix FSF address in file headers
2013-12-06T23:05:07+00:00

Stephen Hemminger
stephen@networkplumber.org

2013-12-06T23:05:07+00:00

4d98ab00de90bac916f526c83c68012d7159f712












ip/xfrm: Fix potential SIGSEGV when printing extra flags
2013-08-31T17:33:21+00:00

Thomas Egerer
thomas.egerer@secunet.com

2013-08-29T12:00:36+00:00

1ed509bb522225050edfa1ed7ddc7255e9a18bd5

The git-commit dc8867d0, that added support for displaying the
extra-flags of a state, introduced a potential segfault.
Trying to show a state without the extra-flag attribute and show_stats
enabled, would cause the NULL pointer in tb[XFRMA_SA_EXTRA_FLAGS] to be
dereferenced.

Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>





The git-commit dc8867d0, that added support for displaying the
extra-flags of a state, introduced a potential segfault.
Trying to show a state without the extra-flag attribute and show_stats
enabled, would cause the NULL pointer in tb[XFRMA_SA_EXTRA_FLAGS] to be
dereferenced.

Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>







ip/xfrm: all to set flag XFRM_SA_XFLAG_DONT_ENCAP_DSCP
2013-05-17T15:38:26+00:00

Nicolas Dichtel
nicolas.dichtel@6wind.com

2013-05-17T08:36:38+00:00

dc8867d0ff6202559c05a8fb8f7c16829360af28

For the display part, we print extra-flags only if show_stats is set, like for
standard flags.

Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>





For the display part, we print extra-flags only if show_stats is set, like for
standard flags.

Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>