Sabrina Dubroca 1de9425286 xfrm: xfrm_state_mtu should return at least 1280 for ipv6 ... [ Upstream commit b515d2637276a3810d6595e10ab02c13bfd0b63a ] Jianwen reported that IPv6 Interoperability tests are failing in an IPsec case where one of the links between the IPsec peers has an MTU of 1280. The peer generates a packet larger than this MTU, the router replies with a "Packet too big" message indicating an MTU of 1280. When the peer tries to send another large packet, xfrm_state_mtu returns 1280 - ipsec_overhead, which causes ip6_setup_cork to fail with EINVAL. We can fix this by forcing xfrm_state_mtu to return IPV6_MIN_MTU when IPv6 is used. After going through IPsec, the packet will then be fragmented to obey the actual network's PMTU, just before leaving the host. Currently, TFC padding is capped to PMTU - overhead to avoid fragementation: after padding and encapsulation, we still fit within the PMTU. That behavior is preserved in this patch. Fixes: 91657eafb6 ("xfrm: take net hdr len into account for esp payload size calculation") Reported-by: Jianwen Ji <jiji@redhat.com> Signed-off-by: Sabrina Dubroca <sd@queasysnail.net> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-07-14 16:56:14 +02:00
..
ila	net: Add MODULE_DESCRIPTION entries to network modules	2020-06-20 21:33:57 -07:00
netfilter	netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local	2021-06-23 14:42:42 +02:00
addrconf_core.c	ipv6: add ipv6_fragment hook in ipv6_stub	2020-08-31 12:26:39 -07:00
addrconf.c	net: ipv4: Remove unneed BUG() function	2021-06-30 08:47:20 -04:00
addrlabel.c	ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init	2020-11-25 11:20:16 -08:00
af_inet6.c	ipv6: add ipv6_fragment hook in ipv6_stub	2020-08-31 12:26:39 -07:00
ah6.c	xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume	2021-04-14 08:42:05 +02:00
anycast.c	ipv6: fix memory leaks on IPV6_ADDRFORM path	2020-07-30 16:30:55 -07:00
calipso.c	cipso,calipso: resolve a number of problems with the DOI refcounts	2021-03-17 17:06:15 +01:00
datagram.c	icmp6: support rfc 4884	2020-07-24 17:12:41 -07:00
esp6_offload.c	xfrm: Provide private skb extensions for segmented and hw offloaded ESP packets	2021-04-14 08:42:07 +02:00
esp6.c	xfrm: xfrm_state_mtu should return at least 1280 for ipv6	2021-07-14 16:56:14 +02:00
exthdrs_core.c	ipv6: remove printk	2019-07-27 14:23:48 -07:00
exthdrs_offload.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
exthdrs.c	net: ipv6: kerneldoc fixes	2020-07-13 17:20:39 -07:00
fib6_notifier.c	net: fib_notifier: propagate extack down to the notifier block callback	2019-10-04 11:10:56 -07:00
fib6_rules.c	fib: use indirect call wrappers in the most common fib_rules_ops	2020-07-28 17:42:31 -07:00
fou6.c	net: Add MODULE_DESCRIPTION entries to network modules	2020-06-20 21:33:57 -07:00
icmp.c	net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending	2021-03-04 11:38:46 +01:00
inet6_connection_sock.c	net: add bool confirm_neigh parameter for dst_ops.update_pmtu	2019-12-24 22:28:54 -08:00
inet6_hashtables.c	net: ipv6: remove unused arg exact_dif in compute_score	2020-08-31 13:08:10 -07:00
ip6_checksum.c	net: udp: fix handling of CHECKSUM_COMPLETE packets	2018-10-24 14:18:16 -07:00
ip6_fib.c	ipv6: fix suspecious RCU usage warning	2021-03-30 14:31:57 +02:00
ip6_flowlabel.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next	2020-08-05 20:13:21 -07:00
ip6_gre.c	ipv6: remove extra dev_hold() for fallback tunnels	2021-05-22 11:40:55 +02:00
ip6_icmp.c	net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending	2021-03-04 11:38:46 +01:00
ip6_input.c	ipv6: weaken the v4mapped source check	2021-03-30 14:32:01 +02:00
ip6_offload.c	udp: move gro declarations to net/udp.h	2020-06-23 20:10:15 -07:00
ip6_offload.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
ip6_output.c	net: ipv6: Validate GSO SKB before finish IPv6 processing	2021-01-23 16:04:00 +01:00
ip6_tunnel.c	ipv6: remove extra dev_hold() for fallback tunnels	2021-05-22 11:40:55 +02:00
ip6_udp_tunnel.c	net: Make locking in sock_bindtoindex optional	2020-06-01 14:57:14 -07:00
ip6_vti.c	ipv6: remove extra dev_hold() for fallback tunnels	2021-05-22 11:40:55 +02:00
ip6mr.c	net/ipv6: switch ip6_mroute_setsockopt to sockptr_t	2020-07-24 15:41:54 -07:00
ipcomp6.c	ipcomp: assign if_id to child tunnel from parent tunnel	2020-07-09 12:55:37 +02:00
ipv6_sockglue.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-08-02 01:02:12 -07:00
Kconfig	net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC	2020-09-18 17:45:04 -07:00
Makefile	net: ipv6: add rpl sr tunnel	2020-03-29 22:30:57 -07:00
mcast_snoop.c	net: bridge: mcast: fix broken length + header check for MRDv6 Adv.	2021-05-14 09:50:44 +02:00
mcast.c	mld: fix panic in mld_newpack()	2021-06-03 09:00:48 +02:00
mip6.c	xfrm: remove type and offload_type map from xfrm_state_afinfo	2019-06-06 08:34:50 +02:00
ndisc.c	net: Exempt multicast addresses from five-second neighbor lifetime	2020-11-13 14:24:39 -08:00
netfilter.c	netfilter: use actual socket sk rather than skb sk when routing harder	2020-10-30 12:57:39 +01:00
output_core.c	treewide: Add SPDX license identifier for missed files	2019-05-21 10:50:45 +02:00
ping.c	ipv6/ping: set skb->mark on icmpv6 sockets	2020-07-03 14:36:04 -07:00
proc.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-06-07 11:00:14 -07:00
protocol.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
raw.c	net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind()	2021-04-14 08:42:02 +02:00
reassembly.c	ipv6: record frag_max_size in atomic fragments in input path	2021-06-03 09:00:50 +02:00
route.c	ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions	2021-06-10 13:39:20 +02:00
rpl_iptunnel.c	net: ipv6: Use struct_size() helper and kcalloc()	2020-06-23 20:27:09 -07:00
rpl.c	ipv6: rpl: fix full address compression	2020-04-18 15:04:27 -07:00
seg6_hmac.c	crypto: lib/sha1 - remove unnecessary includes of linux/cryptohash.h	2020-05-08 15:32:17 +10:00
seg6_iptunnel.c	seg6_iptunnel: Refactor seg6_lwt_headroom out of uapi header	2020-08-03 17:57:40 -07:00
seg6_local.c	seg6: fix seg6_validate_srh() to avoid slab-out-of-bounds	2020-06-04 15:39:32 -07:00
seg6.c	seg6: fix seg6_validate_srh() to avoid slab-out-of-bounds	2020-06-04 15:39:32 -07:00
sit.c	ipv6: remove extra dev_hold() for fallback tunnels	2021-05-22 11:40:55 +02:00
syncookies.c	net: Update window_clamp if SOCK_RCVBUF is set	2020-11-10 17:42:35 -08:00
sysctl_net_ipv6.c	ipv6: Fix sysctl max for fib_multipath_hash_policy	2020-09-02 15:44:53 -07:00
tcp_ipv6.c	ipv6: weaken the v4mapped source check	2021-03-30 14:32:01 +02:00
tcpv6_offload.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
tunnel6.c	tunnel6: add tunnel6_input_afinfo for ipip and ipv6 tunnels	2020-07-09 12:52:37 +02:00
udp_impl.h	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
udp_offload.c	udp: ipv4: manipulate network header of NATed UDP GRO fraglist	2021-02-10 09:29:23 +01:00
udp.c	udp: fix race between close() and udp_abort()	2021-06-23 14:42:42 +02:00
udplite.c	net/ipv6: remove compat_ipv6_{get,set}sockopt	2020-07-19 18:16:41 -07:00
xfrm6_input.c	xfrm: state: remove extract_input indirection from xfrm_state_afinfo	2020-05-06 09:40:08 +02:00
xfrm6_output.c	xfrm: remove output_finish indirection from xfrm_state_afinfo	2020-05-06 09:40:08 +02:00
xfrm6_policy.c	net: add bool confirm_neigh parameter for dst_ops.update_pmtu	2019-12-24 22:28:54 -08:00
xfrm6_protocol.c	xfrm: add support for UDPv6 encapsulation of ESP	2020-04-28 11:28:36 +02:00
xfrm6_state.c	xfrm: remove output_finish indirection from xfrm_state_afinfo	2020-05-06 09:40:08 +02:00
xfrm6_tunnel.c	xfrm: interface: fix the priorities for ipip and ipv6 tunnels	2020-10-09 12:29:48 +02:00