net/ipv4/cipso_ipv4.c

6  * draft-ietf-cipso-ipsecurity-01.txt with additional tag types as found in
75 /* Restricted bitmap (tag #1) flags */
91 /* Base length of the restrictive category bitmap tag (tag #1). */
94 /* Base length of the enumerated category tag (tag #2). */
97 /* Base length of the ranged categories bitmap tag (tag #5). */
99 /* The maximum number of category ranges permitted in the ranged category tag
100  * (tag #5).  You may note that the IETF draft states that the maximum number
106 /* Base length of the local tag (non-standard tag).
146  * The CIPSO tag hashing function.  Returns a 32-bit hash value.
1141  * @len: the total tag length in bytes, not including this header
1158  * cipso_v4_gentag_rbm - Generate a CIPSO restricted bitmap tag (type #1)
1165  * Generate a CIPSO option using the restricted bitmap tag, tag type #1.  The
1168  * the tag on success, negative values on failure.
1216  * cipso_v4_parsetag_rbm - Parse a CIPSO restricted bitmap tag
1218  * @tag: the CIPSO tag
1222  * Parse a CIPSO restricted bitmap tag (tag type #1) and return the security
1228 				 const unsigned char *tag,
1232 	u8 tag_len = tag[1];
1235 	ret_val = cipso_v4_map_lvl_ntoh(doi_def, tag[3], &level);
1243 						    &tag[4],
1259  * cipso_v4_gentag_enum - Generate a CIPSO enumerated tag (type #2)
1266  * Generate a CIPSO option using the enumerated tag, tag type #2.  Returns the
1267  * size of the tag on success, negative values on failure.
1308  * cipso_v4_parsetag_enum - Parse a CIPSO enumerated tag
1310  * @tag: the CIPSO tag
1314  * Parse a CIPSO enumerated tag (tag type #2) and return the security
1320 				  const unsigned char *tag,
1324 	u8 tag_len = tag[1];
1327 	ret_val = cipso_v4_map_lvl_ntoh(doi_def, tag[3], &level);
1335 						     &tag[4],
1350  * cipso_v4_gentag_rng - Generate a CIPSO ranged tag (type #5)
1357  * Generate a CIPSO option using the ranged tag, tag type #5.  Returns the
1358  * size of the tag on success, negative values on failure.
1399  * cipso_v4_parsetag_rng - Parse a CIPSO ranged tag
1401  * @tag: the CIPSO tag
1405  * Parse a CIPSO ranged tag (tag type #5) and return the security attributes
1410 				 const unsigned char *tag,
1414 	u8 tag_len = tag[1];
1417 	ret_val = cipso_v4_map_lvl_ntoh(doi_def, tag[3], &level);
1425 						    &tag[4],
1441  * cipso_v4_gentag_loc - Generate a CIPSO local tag (non-standard)
1448  * Generate a CIPSO option using the local tag.  Returns the size of the tag
1468  * cipso_v4_parsetag_loc - Parse a CIPSO local tag
1470  * @tag: the CIPSO tag
1474  * Parse a CIPSO local tag and return the security attributes in @secattr.
1479 				 const unsigned char *tag,
1482 	secattr->attr.secid = *(u32 *)&tag[2];
1549 	unsigned char *tag;
1572 	tag = opt + opt_iter;
1574 		for (tag_iter = 0; doi_def->tags[tag_iter] != tag[0];)
1585 		tag_len = tag[1];
1591 		switch (tag[0]) {
1607 							   tag[3]) < 0) {
1613 							    &tag[4],
1627 						   tag[3]) < 0) {
1633 							&tag[4],
1646 						   tag[3]) < 0) {
1652 						       &tag[4],
1659 			/* This is a non-standard tag that we only allow for
1678 		tag += tag_len;
1768 	/* XXX - This code assumes only one tag per CIPSO option which isn't
2097 	/* XXX - This code assumes only one tag per CIPSO option which isn't