bsd/netinet6/ipsec.c

68 #include <sys/mbuf.h>
241 	struct mbuf *, int);
242 static int ipsec4_setspidx_inpcb(struct mbuf *, struct inpcb *pcb);
244 static int ipsec6_setspidx_in6pcb(struct mbuf *, struct in6pcb *pcb);
246 static int ipsec_setspidx(struct mbuf *, struct secpolicyindex *, int);
247 static void ipsec4_get_ulp(struct mbuf *m, struct secpolicyindex *, int);
248 static int ipsec4_setspidx_ipaddr(struct mbuf *, struct secpolicyindex *);
250 static void ipsec6_get_ulp(struct mbuf *m, struct secpolicyindex *, int);
251 static int ipsec6_setspidx_ipaddr(struct mbuf *, struct secpolicyindex *);
258 static int ipsec_get_policy(struct secpolicy *pcb_sp, struct mbuf **mp);
260 static int ipsec_in_reject(struct secpolicy *, struct mbuf *);
262 static int ipsec64_encapsulate(struct mbuf *, struct secasvar *);
264 static struct ipsec_tag *ipsec_addaux(struct mbuf *);
265 static struct ipsec_tag *ipsec_findaux(struct mbuf *);
266 static void ipsec_optaux(struct mbuf *, struct ipsec_tag *);
304 	struct mbuf *m;
506 	struct mbuf *m;
579 	struct mbuf *m;
751 	struct mbuf *m;
804  * set IP address into spidx from mbuf.
807  * IN:	get the followings from mbuf.
818 	struct mbuf *m,
844 	struct mbuf *m;
887 	struct mbuf *m;
927  * by looking at the content of mbuf.
932 	struct mbuf *m;
939 	struct mbuf *n;
948 	 * mistakenly call this function with inconsistent mbuf chain
1014 	struct mbuf *m;
1092 	struct mbuf *m;
1125 	struct mbuf *m;
1182 	struct mbuf *m;
1428 	struct mbuf **mp;
1471 	/* This is a new mbuf allocated by soopt_getm() */
1512 	struct mbuf **mp;
1529 	/* This is a new mbuf allocated by soopt_getm() */
1612 	/* This is a new mbuf allocated by soopt_getm() */
1653 	struct mbuf **mp;
1668 	/* This is a new mbuf allocated by soopt_getm() */
1839 	struct mbuf *m;
1935 	struct mbuf *m;
1970 	struct mbuf *m;
1994 	struct mbuf *m;
2028 	struct mbuf *m;
2126 	struct mbuf *m;
2169 	struct mbuf *m;
2211 	struct mbuf *m;
2235 		panic("ipsec4_encapsulate: assumption failed (first mbuf length)");
2245 		panic("ipsec4_encapsulate: assumption failed (first mbuf length)");
2258 	 * grow the mbuf to accomodate the new IPv4 header.
2262 		struct mbuf *n;
2333 	struct mbuf **m_ptr;
2338 	struct mbuf *m = *m_ptr;
2352 	 * grow the mbuf to accomodate the new IPv4 header.
2356 		struct mbuf *n;
2424 	struct mbuf *m;
2449 	 * grow the mbuf to accomodate the new IPv6 header.
2452 		panic("ipsec6_encapsulate: assumption failed (first mbuf length)");
2454 		struct mbuf *n;
2502 	struct mbuf *m;
2529 	 * grow the mbuf to accomodate the new IPv4 header.
2532 		panic("ipsec6_encapsulate: assumption failed (first mbuf length)");
2534 		struct mbuf *n;
2588 	struct mbuf **m_ptr;
2593 	struct mbuf *m = *m_ptr;
2607 	 * grow the mbuf to accomodate the new IPv6 header.
2610 		struct mbuf *n;
2964 	struct mbuf *m;
3278 	struct mbuf *mprev,
3370 			state->m = NULL; /* icmp6_error freed the mbuf */
3848 struct mbuf *
3850 	struct mbuf *m;
3852 	struct mbuf *mh;
3857 		panic("ipsec4_splithdr: first mbuf too short, m_len %d, pkt_len %d, m_flag %x", m->m_len, m->m_pkthdr.len, m->m_flags);
3890 struct mbuf *
3892 	struct mbuf *m;
3894 	struct mbuf *mh;
3899 		panic("ipsec6_splithdr: first mbuf too short");
3930 	struct mbuf *m;		/* no pullup permitted, m->m_len >= ip */
3948 		panic("too short mbuf on ipsec4_tunnel_validate");
4049 	struct mbuf *m;		/* no pullup permitted, m->m_len >= ip */
4064 		panic("too short mbuf on ipsec6_tunnel_validate");
4127  * Make a mbuf chain for encryption.
4128  * If the original mbuf chain contains a mbuf with a cluster,
4133 struct mbuf *
4135 	struct mbuf *m;
4137 	struct mbuf *n, **mpp, *mnew;
4152 				struct mbuf *mm;
4180 					struct mbuf *mn;
4204 					/* need another mbuf */
4251 	struct mbuf *m)
4279 	struct mbuf *m)
4290 	struct mbuf *m)
4304 	struct mbuf			*m,
4314 	struct mbuf *m,
4319 	/* if so == NULL, don't insist on getting the aux mbuf */
4335 	struct mbuf *m)
4348 	struct mbuf *m,
4372 	struct mbuf *m,
4389 	struct mbuf *m)
4404 	struct mbuf	       *m;