sbin/isakmpd/ike_quick_mode.c

390 	struct ipsec_exch *ie = exchange->data;
880 	 * Save SA payload body in ie->sa_i_b, length ie->sa_i_b_len.
882 	ie->sa_i_b = message_copy(msg, ISAKMP_GEN_SZ, &ie->sa_i_b_len);
883 	if (!ie->sa_i_b)
895 		ie->group = group_get(group_desc);
896 		if (!ie->group)
898 		ie->g_x_len = dh_getlen(ie->group);
901 			group_free(ie->group);
902 			ie->group = 0;
1040 	struct ipsec_exch *ie = exchange->data;
1111 		ie->pfs = 1;
1148 		ie->id_ci_sz = GET_ISAKMP_GEN_LENGTH(idp->p);
1149 		ie->id_ci = malloc(ie->id_ci_sz);
1150 		if (!ie->id_ci) {
1153 			    (unsigned long)ie->id_ci_sz);
1156 		memcpy(ie->id_ci, idp->p, ie->id_ci_sz);
1160 		    ie->id_ci + ISAKMP_GEN_SZ, ie->id_ci_sz - ISAKMP_GEN_SZ));
1163 		ie->id_cr_sz = GET_ISAKMP_GEN_LENGTH(idp->p);
1164 		ie->id_cr = malloc(ie->id_cr_sz);
1165 		if (!ie->id_cr) {
1168 			    (unsigned long)ie->id_cr_sz);
1171 		memcpy(ie->id_cr, idp->p, ie->id_cr_sz);
1175 		    ie->id_cr + ISAKMP_GEN_SZ, ie->id_cr_sz - ISAKMP_GEN_SZ));
1189 		ie->flags = IPSEC_EXCH_FLAG_NO_ID;
1194 		ie->id_ci_sz = ISAKMP_ID_DATA_OFF + sockaddr_addrlen(src);
1195 		ie->id_cr_sz = ISAKMP_ID_DATA_OFF + sockaddr_addrlen(dst);
1196 		ie->id_ci = calloc(ie->id_ci_sz, sizeof(char));
1197 		ie->id_cr = calloc(ie->id_cr_sz, sizeof(char));
1199 		if (!ie->id_ci || !ie->id_cr) {
1202 			    (unsigned long)ie->id_cr_sz,
1204 			free(ie->id_ci);
1205 			ie->id_ci = 0;
1206 			free(ie->id_cr);
1207 			ie->id_cr = 0;
1213 			free(ie->id_ci);
1214 			ie->id_ci = 0;
1215 			free(ie->id_cr);
1216 			ie->id_cr = 0;
1221 			SET_ISAKMP_ID_TYPE(ie->id_ci, IPSEC_ID_IPV4_ADDR);
1222 			SET_ISAKMP_ID_TYPE(ie->id_cr, IPSEC_ID_IPV4_ADDR);
1226 			SET_ISAKMP_ID_TYPE(ie->id_ci, IPSEC_ID_IPV6_ADDR);
1227 			SET_ISAKMP_ID_TYPE(ie->id_cr, IPSEC_ID_IPV6_ADDR);
1233 			free(ie->id_ci);
1234 			ie->id_ci = 0;
1235 			free(ie->id_cr);
1236 			ie->id_cr = 0;
1239 		memcpy(ie->id_ci + ISAKMP_ID_DATA_OFF, sockaddr_addrdata(src),
1241 		memcpy(ie->id_cr + ISAKMP_ID_DATA_OFF, sockaddr_addrdata(dst),
1278 	    (!ie->group || ie->group->id != isa->group_desc)) ||
1279 	    (!isa->group_desc && ie->group)) {
1298 	struct ipsec_exch *ie = exchange->data;
1344 	if (ie->group)
1358 	struct ipsec_exch *ie = exchange->data;
1390 				ie->keymat_len = ipsec_keymat_length(proto);
1399 					= malloc(((ie->keymat_len + prf->blocksize - 1)
1404 					    (((unsigned long)ie->keymat_len +
1412 				keymat < iproto->keymat[i] + ie->keymat_len;
1431 					if (ie->g_xy) {
1434 						    "g^xy", ie->g_xy,
1435 						    ie->g_xy_len));
1437 						    ie->g_xy, ie->g_xy_len);
1469 				    iproto->keymat[i], ie->keymat_len));
1494 	struct ipsec_exch *ie = exchange->data;
1563 		ie->pfs = 1;
1599 		ie->id_ci_sz = GET_ISAKMP_GEN_LENGTH(idp->p);
1600 		ie->id_ci = malloc(ie->id_ci_sz);
1601 		if (!ie->id_ci) {
1604 			    (unsigned long)ie->id_ci_sz);
1607 		memcpy(ie->id_ci, idp->p, ie->id_ci_sz);
1611 		    ie->id_ci + ISAKMP_GEN_SZ, ie->id_ci_sz - ISAKMP_GEN_SZ));
1614 		ie->id_cr_sz = GET_ISAKMP_GEN_LENGTH(idp->p);
1615 		ie->id_cr = malloc(ie->id_cr_sz);
1616 		if (!ie->id_cr) {
1619 			    (unsigned long)ie->id_cr_sz);
1622 		memcpy(ie->id_cr, idp->p, ie->id_cr_sz);
1626 		    ie->id_cr + ISAKMP_GEN_SZ, ie->id_cr_sz - ISAKMP_GEN_SZ));
1640 		ie->flags = IPSEC_EXCH_FLAG_NO_ID;
1645 		ie->id_ci_sz = ISAKMP_ID_DATA_OFF + sockaddr_addrlen(src);
1646 		ie->id_cr_sz = ISAKMP_ID_DATA_OFF + sockaddr_addrlen(dst);
1647 		ie->id_ci = calloc(ie->id_ci_sz, sizeof(char));
1648 		ie->id_cr = calloc(ie->id_cr_sz, sizeof(char));
1650 		if (!ie->id_ci || !ie->id_cr) {
1653 			    (unsigned long)ie->id_ci_sz,
1664 			SET_ISAKMP_ID_TYPE(ie->id_ci, IPSEC_ID_IPV4_ADDR);
1665 			SET_ISAKMP_ID_TYPE(ie->id_cr, IPSEC_ID_IPV4_ADDR);
1669 			SET_ISAKMP_ID_TYPE(ie->id_ci, IPSEC_ID_IPV6_ADDR);
1670 			SET_ISAKMP_ID_TYPE(ie->id_cr, IPSEC_ID_IPV6_ADDR);
1679 		memcpy(ie->id_cr + ISAKMP_ID_DATA_OFF, sockaddr_addrdata(src),
1681 		memcpy(ie->id_ci + ISAKMP_ID_DATA_OFF, sockaddr_addrdata(dst),
1743 		ie->group = group_get(group_desc);
1744 		if (!ie->group) {
1773 	name = connection_passive_lookup_by_ids(ie->id_ci, ie->id_cr);
1787 		    " id %s", ie->id_ci, ie->id_ci_sz, ie->id_cr,
1788 		    ie->id_cr_sz, 1)));
1803 	free(ie->id_ci);
1804 	ie->id_ci = 0;
1805 	free(ie->id_cr);
1806 	ie->id_cr = 0;
1815 	struct ipsec_exch *ie = exchange->data;
1852 	if (ie->group && ipsec_gen_g_x(msg))
1859 	if (!(ie->flags & IPSEC_EXCH_FLAG_NO_ID)) {
1860 		sz = ie->id_ci_sz;
1867 		memcpy(id, ie->id_ci, sz);
1874 		sz = ie->id_cr_sz;
1881 		memcpy(id, ie->id_cr, sz);
1926 	if (ie->group)
1936 	struct ipsec_exch *ie = exchange->data;
1939 	ie->g_xy_len = dh_secretlen(ie->group);
1940 	ie->g_xy = malloc(ie->g_xy_len);
1941 	if (!ie->g_xy) {
1943 		    (unsigned long)ie->g_xy_len);
1946 	if (dh_create_shared(ie->group, ie->g_xy,
1947 	    exchange->initiator ? ie->g_xr : ie->g_xi)) {
1951 	LOG_DBG_BUF((LOG_NEGOTIATION, 80, "gen_g_xy: g^xy", ie->g_xy,
1952 	    ie->g_xy_len));