bsd/netkey/key.c

156  * - SAs that are not in DEAD state will have (total external reference + 1)
159  * - SAs that are in DEAD state will have (total external reference)
269 /* Thread safe: no accumulated state */
347 		ipseclog((LOG_DEBUG, "%s: state mismatched (TREE=%d SA=%d)\n", \
688 		if (sp->state == IPSEC_SPSTATE_DEAD)
738 		if (sp->state == IPSEC_SPSTATE_DEAD)
857  * NOTE: searching SAD of aliving state.
869 	u_int stateidx, state;
879 		if (sah->state == SADB_SASTATE_DEAD)
890 	 * search a valid state list for outbound packet.
909 		state = saorder_state_valid[stateidx];
911 		sav = key_do_allocsa_policy(sah, state, dstport);
922  * searching SAD with direction, protocol, mode and state.
931 	u_int state,
943 	for (sav = LIST_FIRST(&sah->savtree[state]);
950 		KEY_CHKSASTATE(sav->state, state, "key_do_allocsa_policy");
1118 	u_int stateidx, state, tmpidx, matchidx;
1149 	 * search a valid state list for inbound packet.
1165 			state = saorder_state_valid[stateidx];
1166 			if (sav->state == state) {
1272 	u_int stateidx, state;
1285 		if (sah->state == SADB_SASTATE_DEAD)
1300 	 * search a valid state list for outbound packet.
1312 		state = saorder_state_valid[stateidx];
1313 		if (key_do_get_translated_port(sah, outsav, state)) {
1326 	u_int state)
1336 	for (currsav = LIST_FIRST(&sah->savtree[state]);
1343 		KEY_CHKSASTATE(currsav->state, state, "key_do_get_translated_port");
1555 	sp->state = IPSEC_SPSTATE_DEAD;
1598 		if (sp->state == IPSEC_SPSTATE_DEAD)
1623 		if (sp->state == IPSEC_SPSTATE_DEAD)
1632 		if (sp->state == IPSEC_SPSTATE_DEAD)
1661  * NOTE: `state', `secpolicyindex' in secpolicy structure are not set,
2177 			newsp->state = IPSEC_SPSTATE_DEAD;
2255 	newsp->state = IPSEC_SPSTATE_ALIVE;
2448 	sp->state = IPSEC_SPSTATE_DEAD;
2518 	sp->state = IPSEC_SPSTATE_DEAD;
2738 			sp->state = IPSEC_SPSTATE_DEAD;
3092 	newsah->state = SADB_SASTATE_MATURE;
3106 	u_int stateidx, state;
3120 		state = saorder_state_any[stateidx];
3121 		for (sav = (struct secasvar *)LIST_FIRST(&sah->savtree[state]);
3134 			KEY_CHKSASTATE(state, sav->state, "key_delsah");
3163  * allocating a new SA with LARVAL state.  key_add() and key_getspi() call,
3258 	newsav->state = SADB_SASTATE_LARVAL;
3267  * allocating a new SA with LARVAL state.  key_add() and key_getspi() call,
3358 		newsav->state = SADB_SASTATE_MATURE;
3362 		newsav->state = SADB_SASTATE_LARVAL;
3452 		if (sah->state == SADB_SASTATE_DEAD)
3489 	u_int stateidx, state;
3506 			state = saorder_state_alive[stateidx];
3507 			if (sav->state == state &&
3541 	u_int stateidx, state, matchidx;
3552 			state = saorder_state_alive[stateidx];
3553 			if (sav->state == state) {
4510 	p->sadb_sa_state = sav->state;
5224 				if (sp->state == IPSEC_SPSTATE_DEAD) {
5238 						sp->state = IPSEC_SPSTATE_DEAD;
5261 			if (sah->state == SADB_SASTATE_DEAD) {
5441 				if (sav->state != SADB_SASTATE_DEAD) {
5443 						"invalid sav->state "
5446 						SADB_SASTATE_DEAD, sav->state));
6234  * search SAD with sequence for a SA which state is SADB_SASTATE_LARVAL.
6247 	u_int state;
6251 	state = SADB_SASTATE_LARVAL;
6254 	LIST_FOREACH(sav, &sah->savtree[state], chain) {
6256 		KEY_CHKSASTATE(state, sav->state, "key_getsabyseq");
6621 		if (sah->state == SADB_SASTATE_DEAD)
6682 	u_int stateidx, state;
6693 		if (sah->state == SADB_SASTATE_DEAD)
6702 			state = saorder_state_alive[stateidx];
6703 			if (state == SADB_SASTATE_LARVAL)
6705 			for (sav = LIST_FIRST(&sah->savtree[state]);
6709 				if (sav->state != state) {
6711 					       "invalid sav->state "
6713 					       state, sav->state));
6810 		if (sah->state == SADB_SASTATE_DEAD)
6872 		if (sah->state == SADB_SASTATE_DEAD)
7603 		if (sah->state == SADB_SASTATE_DEAD)
7986 	u_int8_t state;
8014 			state = saorder_state_any[stateidx];
8015 			for (sav = LIST_FIRST(&sah->savtree[state]);
8026 		sah->state = SADB_SASTATE_DEAD;
8077 	u_int8_t state;
8125 			state = saorder_state_any[stateidx];
8126 			LIST_FOREACH(sav, &sah->savtree[state], chain) {
8830 	u_int8_t state)
8836 	if (sav->state == state)
8844 	sav->state = state;
8845 	LIST_INSERT_HEAD(&sav->sah->savtree[state], sav, chain);