Eric Dumazet ef81bb40bf
ipv6: make fragment identifications less predictable ...
[ Backport of upstream commit 87c48fa3b4630905f98268dde838ee43626a060c ]
Fernando Gont reported current IPv6 fragment identification generation
was not secure, because using a very predictable system-wide generator,
allowing various attacks.
IPv4 uses inetpeer cache to address this problem and to get good
performance. We'll use this mechanism when IPv6 inetpeer is stable
enough in linux-3.1
For the time being, we use jhash on destination address to provide less
predictable identifications. Also remove a spinlock and use cmpxchg() to
get better SMP performance.
Reported-by: Fernando Gont <fernando@gont.com.ar >
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com >
Signed-off-by: David S. Miller <davem@davemloft.net >
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de >
2011-08-15 18:31:37 -07:00
2011-05-25 08:46:38 -05:00
2011-05-16 19:32:19 -04:00
2011-05-22 20:11:48 -04:00
2011-03-31 11:26:23 -03:00
2011-03-31 11:26:23 -03:00
2011-06-16 17:29:22 +02:00
2011-05-13 16:08:13 -04:00
2011-05-02 15:26:28 -07:00
2011-07-08 09:53:08 -07:00
2010-08-20 01:42:59 -07:00
2010-06-11 18:37:08 -07:00
2011-04-24 10:54:56 -07:00
2011-04-24 10:54:56 -07:00
2011-04-24 10:54:56 -07:00
2011-01-13 21:48:25 -08:00
2011-01-10 16:10:37 -08:00
2011-04-24 10:54:56 -07:00
2010-03-30 22:02:32 +09:00
2011-06-27 14:45:25 -04:00
2010-10-07 09:43:45 +02:00
2011-05-05 11:10:14 -07:00
2010-12-31 10:47:46 -08:00
2011-03-02 21:58:55 -08:00
2010-11-08 13:50:08 -08:00
2011-03-12 15:08:55 -08:00
2010-06-03 03:21:52 -07:00
2011-03-12 15:08:55 -08:00
2011-03-12 15:08:55 -08:00
2011-01-26 20:51:05 -08:00
2011-07-01 17:30:43 -07:00
2010-10-27 11:37:32 -07:00
2011-03-31 18:03:35 -07:00
2011-05-12 17:46:56 -04:00
2011-03-31 11:26:23 -03:00
2011-05-10 10:16:21 +02:00
2010-08-21 23:05:39 -07:00
2011-02-04 15:59:53 -08:00
2011-01-28 15:44:29 -05:00
2009-11-06 14:32:18 +03:00
2011-05-19 16:21:22 -04:00
2011-05-08 15:28:28 -07:00
2009-12-08 20:17:51 -08:00
2010-07-12 20:21:46 -07:00
2011-05-18 18:32:03 -04:00
2011-05-12 18:52:14 -04:00
2010-06-30 13:44:29 -07:00
2010-10-21 13:06:43 +02:00
2011-05-06 15:37:57 -07:00
2010-12-09 20:05:58 -08:00
2011-04-22 11:04:14 -07:00
2011-04-24 10:54:56 -07:00
2011-04-24 10:54:56 -07:00
2010-10-25 13:09:45 -07:00
2011-04-14 15:05:22 -07:00
2011-05-27 13:37:46 +02:00
2011-05-10 13:32:46 -07:00
2010-02-16 23:05:38 -08:00
2010-10-27 11:37:32 -07:00
2011-08-15 18:31:37 -07:00
2011-04-24 10:54:56 -07:00
2011-03-31 11:26:23 -03:00
2010-07-26 15:09:04 -04:00
2009-12-26 20:43:57 -08:00
2011-05-13 15:13:24 -04:00
2009-12-26 20:46:28 -08:00
2011-05-24 16:47:54 -04:00
2010-06-03 03:21:52 -07:00
2010-04-23 13:35:55 +09:00
2011-04-24 10:54:56 -07:00
2010-11-19 13:13:47 -08:00
2011-06-12 17:45:41 -04:00
2011-05-27 13:41:33 -04:00
2011-04-24 10:54:56 -07:00
2010-03-30 22:02:32 +09:00
2011-05-10 10:16:21 +02:00
2010-03-30 22:02:32 +09:00
2011-05-17 14:16:58 -04:00
2010-12-21 12:43:16 -08:00
2011-03-31 11:26:23 -03:00
2011-01-24 15:32:47 -08:00
2010-09-08 13:42:22 -07:00
2011-04-24 10:54:56 -07:00
2011-01-12 19:00:39 -08:00
2010-11-22 15:48:51 -05:00
2010-01-17 19:09:39 -08:00
2011-03-27 17:59:04 -07:00
2011-05-18 18:42:43 -04:00
2010-11-27 22:56:08 -08:00
2011-03-24 00:13:14 -07:00
2010-11-24 11:16:43 -08:00
2011-08-15 18:31:35 -07:00
2011-05-19 16:21:22 -04:00
2011-06-27 16:06:19 -07:00
2011-02-20 11:10:14 -08:00
2010-12-01 18:09:13 -08:00
2011-08-15 18:31:37 -07:00
2011-03-01 12:35:03 -08:00
2011-03-01 12:35:03 -08:00
2011-04-24 10:54:56 -07:00
2011-03-31 11:26:23 -03:00
2010-11-28 11:12:20 -08:00
2010-04-22 16:12:36 -07:00
2011-05-11 14:26:58 -04:00
ef81bb40bf