Herbert Xu 4c4d51a731 [IPSEC]: Reject packets within replay window but outside the bit mask ...

Up until this point we've accepted replay window settings greater than
32 but our bit mask can only accomodate 32 packets.  Thus any packet
with a sequence number within the window but outside the bit mask would
be accepted.

This patch causes those packets to be rejected instead.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

2007-04-05 00:07:39 -07:00

..

Kconfig

[PFKEYV2]: CONFIG_NET_KEY_MIGRATE option

2007-02-08 13:15:05 -08:00

Makefile

[XFRM]: Extract common hashing code into xfrm_hash.[ch]

2006-09-22 15:08:49 -07:00

xfrm_algo.c

[NET] XFRM: Fix whitespace errors.

2007-02-10 23:20:24 -08:00

xfrm_hash.c

[XFRM]: Extract common hashing code into xfrm_hash.[ch]

2006-09-22 15:08:49 -07:00

xfrm_hash.h

[XFRM] STATE: Use destination address for src hash.

2006-10-04 00:31:02 -07:00

xfrm_input.c

[NET] XFRM: Fix whitespace errors.

2007-02-10 23:20:24 -08:00

xfrm_policy.c

[XFRM]: ipsecv6 needs a space when printing audit record.

2007-03-20 00:09:47 -07:00

xfrm_state.c

[IPSEC]: Reject packets within replay window but outside the bit mask

2007-04-05 00:07:39 -07:00

xfrm_user.c

[NET]: fix up misplaced inlines.

2007-03-22 12:27:49 -07:00