Eric Dumazet 6e2856767e ipv4: use siphash instead of Jenkins in fnhe_hashfun() ...

commit 6457378fe7 upstream.

A group of security researchers brought to our attention
the weakness of hash function used in fnhe_hashfun().

Lets use siphash instead of Jenkins Hash, to considerably
reduce security risks.

Also remove the inline keyword, this really is distracting.

Fixes: d546c62154 ("ipv4: harden fnhe_hashfun()")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Keyu Man <kman001@ucr.edu>
Cc: Willy Tarreau <w@1wt.eu>
Signed-off-by: David S. Miller <davem@davemloft.net>
[OP: adjusted context for 4.19 stable]
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-11-02 18:26:44 +01:00

..

bpfilter

…

netfilter

…

af_inet.c

…

ah4.c

…

arp.c

…

cipso_ipv4.c

net: ipv4: fix memory leak in netlbl_cipsov4_add_std

2021-06-30 08:48:15 -04:00

datagram.c

…

devinet.c

…

esp4_offload.c

…

esp4.c

…

fib_frontend.c

net/ipv4: swap flow ports when validating source

2021-07-20 16:15:51 +02:00

fib_lookup.h

…

fib_notifier.c

…

fib_rules.c

…

fib_semantics.c

…

fib_trie.c

…

fou.c

…

gre_demux.c

…

gre_offload.c

…

icmp.c

ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)

2021-09-22 11:47:47 +02:00

igmp.c

igmp: Add ip_mc_list lock in ip_check_mc_rcu

2021-09-22 11:47:47 +02:00

inet_connection_sock.c

…

inet_diag.c

…

inet_fragment.c

…

inet_hashtables.c

…

inet_timewait_sock.c

…

inetpeer.c

…

ip_forward.c

…

ip_fragment.c

…

ip_gre.c

ip_gre: validate csum_start only on pull

2021-09-22 11:48:14 +02:00

ip_input.c

…

ip_options.c

…

ip_output.c

ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()

2021-09-22 11:48:04 +02:00

ip_sockglue.c

…

ip_tunnel_core.c

…

ip_tunnel.c

net: ip_tunnel: fix mtu calculation for ETHER tunnel devices

2021-07-28 11:13:46 +02:00

ip_vti.c

…

ipcomp.c

…

ipconfig.c

…

ipip.c

…

ipmr_base.c

…

ipmr.c

…

Kconfig

…

Makefile

…

metrics.c

…

netfilter.c

…

netlink.c

…

ping.c

ping: Check return value of function 'ping_queue_rcv_skb'

2021-06-30 08:48:30 -04:00

proc.c

…

protocol.c

…

raw_diag.c

…

raw.c

…

route.c

ipv4: use siphash instead of Jenkins in fnhe_hashfun()

2021-11-02 18:26:44 +01:00

syncookies.c

…

sysctl_net_ipv4.c

…

tcp_bbr.c

tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets

2021-08-26 08:36:39 -04:00

tcp_bic.c

…

tcp_cdg.c

…

tcp_cong.c

…

tcp_cubic.c

…

tcp_dctcp.c

…

tcp_diag.c

…

tcp_fastopen.c

tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD

2021-09-22 11:48:07 +02:00

tcp_highspeed.c

…

tcp_htcp.c

…

tcp_hybla.c

…

tcp_illinois.c

…

tcp_input.c

tcp: address problems caused by EDT misshaps

2021-10-06 15:31:19 +02:00

tcp_ipv4.c

tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos

2021-09-22 11:47:52 +02:00

tcp_lp.c

…

tcp_metrics.c

…

tcp_minisocks.c

…

tcp_nv.c

…

tcp_offload.c

…

tcp_output.c

tcp: always set retrans_stamp on recovery

2021-10-06 15:31:19 +02:00

tcp_rate.c

…

tcp_recovery.c

…

tcp_scalable.c

…

tcp_timer.c

tcp: adjust rto_base in retransmits_timed_out()

2021-10-06 15:31:20 +02:00

tcp_ulp.c

…

tcp_vegas.c

…

tcp_vegas.h

…

tcp_veno.c

…

tcp_westwood.c

…

tcp_yeah.c

…

tcp.c

…

tunnel4.c

…

udp_diag.c

…

udp_impl.h

…

udp_offload.c

…

udp_tunnel.c

…

udp.c

net: udp: annotate data race around udp_sk(sk)->corkflag

2021-10-06 15:31:25 +02:00

udplite.c

…

xfrm4_input.c

…

xfrm4_mode_beet.c

…

xfrm4_mode_transport.c

…

xfrm4_mode_tunnel.c

…

xfrm4_output.c

…

xfrm4_policy.c

…

xfrm4_protocol.c

…

xfrm4_state.c

…

xfrm4_tunnel.c

…