sys/netipsec/ipsec_input.c

124 	struct secasvar *sav;
207 	sav = KEY_ALLOCSA(&dst_address, sproto, spi);
208 	if (sav == NULL) {
217 	if (sav->tdb_xform == NULL) {
222 		KEY_FREESAV(&sav);
231 	error = (*sav->tdb_xform->xf_input)(m, sav, skip, protoff);
232 	KEY_FREESAV(&sav);
294 ipsec4_common_input_cb(struct mbuf *m, struct secasvar *sav,
310 	IPSEC_ASSERT(sav != NULL, ("null SA"));
311 	IPSEC_ASSERT(sav->sah != NULL, ("null SAH"));
312 	saidx = &sav->sah->saidx;
324 		KEY_FREESAV(&sav);
335 			    __func__, ipsec_address(&sav->sah->saidx.dst),
336 			    (u_long) ntohl(sav->spi)));
356 	ipsec_bpf(m, sav, AF_INET, ENC_IN|ENC_BEFORE);
393 			    (u_long) ntohl(sav->spi)));
431 			    (u_long) ntohl(sav->spi)));
471 		tdbi->spi = sav->spi;
473 		tdbi->alg_auth = sav->alg_auth;
474 		tdbi->alg_enc = sav->alg_enc;
482 	key_sa_recordxfer(sav, m);		/* record data transfer */
495 		ipsec_bpf(m, sav, AF_INET, ENC_IN|ENC_AFTER);
498 		ipsec_bpf(m, sav, AF_INET6, ENC_IN|ENC_AFTER);
526 	error = netisr_queue_src(isr_prot, (uintptr_t)sav->spi, m);
596 ipsec6_common_input_cb(struct mbuf *m, struct secasvar *sav, int skip, int protoff,
612 	IPSEC_ASSERT(sav != NULL, ("null SA"));
613 	IPSEC_ASSERT(sav->sah != NULL, ("null SAH"));
614 	saidx = &sav->sah->saidx;
635 		    __func__, ipsec_address(&sav->sah->saidx.dst),
636 		    (u_long) ntohl(sav->spi)));
655 	ipsec_bpf(m, sav, AF_INET6, ENC_IN|ENC_BEFORE);
689 			    (u_long) ntohl(sav->spi)));
726 			    (u_long) ntohl(sav->spi)));
760 		tdbi->spi = sav->spi;
762 		tdbi->alg_auth = sav->alg_auth;
763 		tdbi->alg_enc = sav->alg_enc;
772 	key_sa_recordxfer(sav, m);
780 		ipsec_bpf(m, sav, AF_INET, ENC_IN|ENC_AFTER);
783 		ipsec_bpf(m, sav, AF_INET6, ENC_IN|ENC_AFTER);
884 			struct secasvar *sav;
897 			sav = KEY_ALLOCSA((union sockaddr_union *)sa,
899 			valid = (sav != NULL);
900 			if (sav)
901 				KEY_FREESAV(&sav);