kernel-ark/net/xfrm
Herbert Xu 910ef70aa3 [IPSEC]: Do xfrm_state_check_space before encapsulation
While merging the IPsec output path I moved the encapsulation output
operation to the top of the loop so that it sits outside of the locked
section.  Unfortunately in doing so it now sits in front of the space
check as well which could be a fatal error.

This patch rearranges the calls so that the space check happens as
the thing on the output path.

This patch also fixes an incorrect goto should the encapsulation output
fail.

Thanks to Kazunori MIYAZAWA for finding this bug.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-01-28 14:59:13 -08:00
..
Kconfig [PFKEYV2]: CONFIG_NET_KEY_MIGRATE option 2007-02-08 13:15:05 -08:00
Makefile [IPSEC]: Move common output code to xfrm_output 2007-10-10 16:54:53 -07:00
xfrm_algo.c cleanup asm/scatterlist.h includes 2007-11-02 08:47:06 +01:00
xfrm_hash.c [IPSEC]: kmalloc + memset conversion to kzalloc 2008-01-28 14:55:05 -08:00
xfrm_hash.h [XFRM] STATE: Use destination address for src hash. 2006-10-04 00:31:02 -07:00
xfrm_input.c [IPSEC]: Add xfrm_input_state helper 2008-01-28 14:57:05 -08:00
xfrm_output.c [IPSEC]: Do xfrm_state_check_space before encapsulation 2008-01-28 14:59:13 -08:00
xfrm_policy.c [IPSEC]: Fix zero return value in xfrm_lookup on error 2008-01-28 14:57:54 -08:00
xfrm_state.c [XFRM]: Fix potential race vs xfrm_state(only)_find and xfrm_hash_resize. 2008-01-28 14:58:07 -08:00
xfrm_user.c [IPSEC]: Make x->lastused an unsigned long 2008-01-28 14:53:52 -08:00