Eric Dumazet bf200e2734 netns: provide pure entropy for net_hash_mix() ... [ Upstream commit 355b98553789b646ed97ad801a619ff898471b92 ] net_hash_mix() currently uses kernel address of a struct net, and is used in many places that could be used to reveal this address to a patient attacker, thus defeating KASLR, for the typical case (initial net namespace, &init_net is not dynamically allocated) I believe the original implementation tried to avoid spending too many cycles in this function, but security comes first. Also provide entropy regardless of CONFIG_NET_NS. Fixes: 0b4419162a ("netns: introduce the net_hash_mix "salt" for hashes") Change-Id: If8819e29af0839bca9d1a5f16fb90ecb566a32b3 Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: Amit Klein <aksecurity@gmail.com> Reported-by: Benny Pinkas <benny@pinkas.net> Cc: Pavel Emelyanov <xemul@openvz.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-07-11 12:24:34 +02:00
..
conntrack.h	…
core.h	…
dccp.h	…
generic.h	…
hash.h	netns: provide pure entropy for net_hash_mix()	2020-07-11 12:24:34 +02:00
ipv4.h	This is the 3.10.73 stable release	2015-05-01 13:49:45 -07:00
ipv6.h	net: add a sysctl to reflect the fwmark on replies	2014-06-23 15:20:28 -07:00
mib.h	…
netfilter.h	…
packet.h	…
sctp.h	sctp: fix ASCONF list handling	2015-10-01 12:07:34 +02:00
unix.h	…
x_tables.h	…
xfrm.h	…