sys/netipsec/ipsec_input.c

122 	struct secasvar *sav;
201 	sav = key_allocsa(&dst_address, sproto, spi);
202 	if (sav == NULL) {
211 	if (sav->tdb_xform == NULL) {
216 		key_freesav(&sav);
225 	error = (*sav->tdb_xform->xf_input)(m, sav, skip, protoff);
277 ipsec4_common_input_cb(struct mbuf *m, struct secasvar *sav, int skip,
288 	IPSEC_ASSERT(sav != NULL, ("null SA"));
289 	IPSEC_ASSERT(sav->sah != NULL, ("null SAH"));
290 	saidx = &sav->sah->saidx;
304 			    __func__, ipsec_address(&sav->sah->saidx.dst,
305 			    buf, sizeof(buf)), (u_long) ntohl(sav->spi)));
324 	if (sav->natt != NULL &&
326 		udp_ipsec_adjust_cksum(m, sav, prot, skip);
328 	IPSEC_INIT_CTX(&ctx, &m, NULL, sav, AF_INET, IPSEC_ENC_BEFORE);
383 		xh->spi = sav->spi;
389 	key_sa_recordxfer(sav, m);		/* record data transfer */
419 	IPSEC_INIT_CTX(&ctx, &m, NULL, sav, af, IPSEC_ENC_AFTER);
425 		error = ipsec_if_input(m, sav, af);
427 		error = netisr_queue_src(isr_prot, (uintptr_t)sav->spi, m);
434 	key_freesav(&sav);
437 	key_freesav(&sav);
488 ipsec6_common_input_cb(struct mbuf *m, struct secasvar *sav, int skip,
502 	IPSEC_ASSERT(sav != NULL, ("null SA"));
503 	IPSEC_ASSERT(sav->sah != NULL, ("null SAH"));
504 	saidx = &sav->sah->saidx;
517 		    __func__, ipsec_address(&sav->sah->saidx.dst, buf,
518 		    sizeof(buf)), (u_long) ntohl(sav->spi)));
525 	IPSEC_INIT_CTX(&ctx, &m, NULL, sav, af, IPSEC_ENC_BEFORE);
582 		xh->spi = sav->spi;
588 	key_sa_recordxfer(sav, m);
596 	IPSEC_INIT_CTX(&ctx, &m, NULL, sav, af, IPSEC_ENC_AFTER);
622 			error = ipsec_if_input(m, sav, af);
625 			    (uintptr_t)sav->spi, m);
632 		key_freesav(&sav);
670 	key_freesav(&sav);
673 	key_freesav(&sav);