ipv6: use siphash in rt6_exception_hash()
authorEric Dumazet <edumazet@google.com>
Wed, 25 Aug 2021 23:17:28 +0000 (16:17 -0700)
committerDavid S. Miller <davem@davemloft.net>
Thu, 26 Aug 2021 09:20:34 +0000 (10:20 +0100)
commit4785305c05b25a242e5314cc821f54ade4c18810
tree97d15607963a33938c42b4bb5361aab12b34b38b
parent92ea47fe09b531642e5b791d74645a6f08b23725
ipv6: use siphash in rt6_exception_hash()

A group of security researchers brought to our attention
the weakness of hash function used in rt6_exception_hash()

Lets use siphash instead of Jenkins Hash, to considerably
reduce security risks.

Following patch deals with IPv4.

Fixes: 35732d01fe31 ("ipv6: introduce a hash table to store dst cache")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Keyu Man <kman001@ucr.edu>
Cc: Wei Wang <weiwan@google.com>
Cc: Martin KaFai Lau <kafai@fb.com>
Acked-by: Wei Wang <weiwan@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/route.c