android_kernel_xiaomi_sm8450/net
Martin Willi adad2dab31 UPSTREAM: Revert "Fix XFRM-I support for nested ESP tunnels"
[ Upstream commit 5fc46f94219d1d103ffb5f0832be9da674d85a73 ]

This reverts commit b0355dbbf13c0052931dd14c38c789efed64d3de.

The reverted commit clears the secpath on packets received via xfrm interfaces
to support nested IPsec tunnels. This breaks Netfilter policy matching using
xt_policy in the FORWARD chain, as the secpath is missing during forwarding.
Additionally, Benedict Wong reports that it breaks Transport-in-Tunnel mode.

Fix this regression by reverting the commit until we have a better approach
for nested IPsec tunnels.

Fixes: b0355dbbf13c ("Fix XFRM-I support for nested ESP tunnels")
Link: https://lore.kernel.org/netdev/20230412085615.124791-1-martin@strongswan.org/
Signed-off-by: Martin Willi <martin@strongswan.org>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

Bug: 288489934
(cherry picked from commit c5449195f8)
Change-Id: Iefaed6d21a641fefb02e0fd0067086a9ae3a802a
Signed-off-by: Carlos Llamas <cmllamas@google.com>
2023-07-18 16:48:03 +00:00
..
6lowpan 6lowpan: iphc: Fix an off-by-one check of array index 2021-09-15 09:50:34 +02:00
9p UPSTREAM: 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition 2023-06-12 11:27:42 +00:00
802 mrp: introduce active flags to prevent UAF when applicant uninit 2023-01-14 10:16:18 +01:00
8021q net: make free_netdev() more lenient with unregistering devices 2022-07-29 17:19:07 +02:00
appletalk appletalk: Fix skb allocation size in loopback case 2021-04-07 15:00:08 +02:00
atm net/atm: fix proc_mpc_write incorrect return value 2022-10-30 09:41:16 +01:00
ax25 net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg 2022-06-22 14:13:17 +02:00
batman-adv batman-adv: Don't skb_split skbuffs with frag_list 2022-05-18 10:23:42 +02:00
bluetooth UPSTREAM: bluetooth: Perform careful capability checks in hci_sock_ioctl() 2023-06-19 11:23:12 +01:00
bpf bpf: Move skb->len == 0 checks into __bpf_redirect 2023-01-14 10:15:31 +01:00
bpfilter ANDROID: GKI: set vfs-only exports into their own namespace 2022-01-11 09:30:47 +01:00
bridge netfilter: ebtables: fix table blob use-after-free 2023-03-11 16:40:12 +01:00
caif net: caif: Fix use-after-free in cfusbl_device_notify() 2023-03-17 08:45:11 +01:00
can can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write 2023-04-05 11:23:47 +02:00
ceph libceph: fix potential use-after-free on linger ping and resends 2022-05-25 09:17:56 +02:00
core This is the 5.10.175 stable release 2023-03-24 14:42:30 +00:00
dcb net: dcb: disable softirqs in dcbnl_flush_dev() 2022-03-08 19:09:37 +01:00
dccp This is the 5.10.169 stable release 2023-02-25 15:32:12 +00:00
decnet net: Fix data-races around sysctl_[rw]mem(_offset)?. 2022-08-31 17:15:19 +02:00
dns_resolver
dsa net: dsa: ksz: Check return value 2022-12-14 11:32:01 +01:00
ethernet
ethtool net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats 2023-01-24 07:19:55 +01:00
hsr hsr: ratelimit only when errors are printed 2023-04-05 11:23:52 +02:00
ieee802154 net: ieee802154: fix error return code in dgram_bind() 2022-11-03 23:57:51 +09:00
ife
ipv4 This is the 5.10.177 stable release 2023-04-05 14:11:48 +00:00
ipv6 This is the 5.10.177 stable release 2023-04-05 14:11:48 +00:00
iucv net/iucv: Fix size of interrupt data 2023-03-22 13:30:00 +01:00
kcm kcm: close race conditions on sk_receive_queue 2022-11-25 17:45:56 +01:00
key af_key: Fix send_acquire race with pfkey_register 2022-12-02 17:39:58 +01:00
l2tp l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() 2023-03-11 16:39:29 +01:00
l3mdev l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu 2022-04-27 13:53:50 +02:00
lapb net: lapb: Copy the skb before sending a packet 2021-02-10 09:29:14 +01:00
llc llc: only change llc->dev when bind() succeeds 2022-03-28 09:57:10 +02:00
mac80211 wifi: mac80211: fix qos on mesh interfaces 2023-04-05 11:23:41 +02:00
mac802154 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() 2022-12-14 11:32:01 +01:00
mpls net: mpls: fix stale pointer if allocation fails during device rename 2023-02-22 12:55:58 +01:00
mptcp mptcp: avoid setting TCP_CLOSE state twice 2023-03-22 13:30:04 +01:00
ncsi net/ncsi: check for error return from call to nla_put_u32 2022-01-05 12:40:32 +01:00
netfilter This is the 5.10.176 stable release 2023-03-24 16:03:04 +00:00
netlabel netlabel: fix out-of-bounds memory accesses 2022-04-13 21:01:00 +02:00
netlink netlink: annotate data races around sk_state 2023-02-01 08:23:24 +01:00
netrom netrom: Fix use-after-free caused by accept on already connected socket 2023-02-15 17:22:12 +01:00
nfc nfc: change order inside nfc_se_io error path 2023-03-17 08:45:07 +01:00
nsh
openvswitch net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() 2023-02-22 12:55:57 +01:00
packet net/af_packet: make sure to pull mac header 2023-01-14 10:16:29 +01:00
phonet phonet: refcount leak in pep_sock_accep 2022-01-11 15:25:01 +01:00
psample net: psample: Fix netlink skb length with tunnel info 2021-03-07 12:34:07 +01:00
qrtr Merge tag 'android12-5.10.168_r00' into android12-5.10 2023-03-23 11:09:43 +00:00
rds rds: rds_rm_zerocopy_callback() correct order for list_add_tail() 2023-03-11 16:39:26 +01:00
rfkill
rose net/rose: Fix to not accept on connected socket 2023-02-22 12:55:53 +01:00
rxrpc rxrpc: Fix missing unlock in rxrpc_do_sendmsg() 2023-01-14 10:16:12 +01:00
sched UPSTREAM: net/sched: flower: fix possible OOB write in fl_set_geneve_opt() 2023-07-03 19:13:10 +00:00
sctp This is the 5.10.173 stable release 2023-03-22 11:21:35 +00:00
smc net/smc: fix deadlock triggered by cancel_delayed_work_syn() 2023-03-22 13:29:58 +01:00
strparser bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding 2021-11-18 14:04:27 +01:00
sunrpc This is the 5.10.175 stable release 2023-03-24 14:42:30 +00:00
switchdev net: switchdev: don't set port_obj_info->handled true when -EOPNOTSUPP 2021-02-07 15:37:12 +01:00
tipc This is the 5.10.164 stable release 2023-02-16 13:59:20 +00:00
tls net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() 2023-04-05 11:23:31 +02:00
unix This is the 5.10.159 stable release 2022-12-14 13:11:31 +01:00
vmw_vsock This is the 5.10.163 stable release 2023-02-06 12:30:05 +00:00
wimax
wireless Merge 5.10.174 into android12-5.10-lts 2023-03-24 14:38:51 +00:00
x25 net/x25: Fix to not accept on connected socket 2023-02-15 17:22:15 +01:00
xdp xsk: Add missing overflow check in xdp_umem_reg 2023-04-05 11:23:32 +02:00
xfrm UPSTREAM: Revert "Fix XFRM-I support for nested ESP tunnels" 2023-07-18 16:48:03 +00:00
compat.c net: Return the correct errno code 2021-06-18 10:00:06 +02:00
devres.c
Kconfig
Makefile
socket.c UPSTREAM: net: remove cmsg restriction from io_uring based send/recvmsg calls 2023-02-07 13:38:15 +00:00
sysctl_net.c
TEST_MAPPING ANDROID: add TEST_MAPPING for net/, include/net 2023-01-23 17:55:25 +00:00