bsd/netinet6/ipsec.c

68 #include <sys/mbuf.h>
240 static int ipsec_setspidx_interface(struct secpolicyindex *, u_int, struct mbuf *,
243 	struct mbuf *, int);
244 static int ipsec4_setspidx_inpcb(struct mbuf *, struct inpcb *pcb);
246 static int ipsec6_setspidx_in6pcb(struct mbuf *, struct in6pcb *pcb);
248 static int ipsec_setspidx(struct mbuf *, struct secpolicyindex *, int, int);
249 static void ipsec4_get_ulp(struct mbuf *m, struct secpolicyindex *, int);
250 static int ipsec4_setspidx_ipaddr(struct mbuf *, struct secpolicyindex *);
252 static void ipsec6_get_ulp(struct mbuf *m, struct secpolicyindex *, int);
253 static int ipsec6_setspidx_ipaddr(struct mbuf *, struct secpolicyindex *);
260 static int ipsec_get_policy(struct secpolicy *pcb_sp, struct mbuf **mp);
262 static int ipsec_in_reject(struct secpolicy *, struct mbuf *);
264 static int ipsec64_encapsulate(struct mbuf *, struct secasvar *);
266 static struct ipsec_tag *ipsec_addaux(struct mbuf *);
267 static struct ipsec_tag *ipsec_findaux(struct mbuf *);
268 static void ipsec_optaux(struct mbuf *, struct ipsec_tag *);
306 	struct mbuf *m;
509 ipsec4_getpolicybyaddr(struct mbuf *m,
575 ipsec4_getpolicybyinterface(struct mbuf *m,
645 	struct mbuf *m;
818 ipsec6_getpolicybyaddr(struct mbuf *m,
876 ipsec6_getpolicybyinterface(struct mbuf *m,
937  * set IP address into spidx from mbuf.
940  * IN:	get the followings from mbuf.
951 	struct mbuf *m,
979                     struct mbuf *m,
1013 	struct mbuf *m;
1056 	struct mbuf *m;
1096  * by looking at the content of mbuf.
1100 ipsec_setspidx(struct mbuf *m,
1108 	struct mbuf *n;
1117 	 * mistakenly call this function with inconsistent mbuf chain
1188 	struct mbuf *m;
1266 	struct mbuf *m;
1300 	struct mbuf *m;
1357 	struct mbuf *m;
1603 	struct mbuf **mp;
1646 	/* This is a new mbuf allocated by soopt_getm() */
1687 	struct mbuf **mp;
1704 	/* This is a new mbuf allocated by soopt_getm() */
1787 	/* This is a new mbuf allocated by soopt_getm() */
1828 	struct mbuf **mp;
1843 	/* This is a new mbuf allocated by soopt_getm() */
2014 	struct mbuf *m;
2110 	struct mbuf *m;
2146 	struct mbuf *m;
2170 	struct mbuf *m;
2205 	struct mbuf *m;
2303 	struct mbuf *m;
2347 	struct mbuf *m;
2390 	struct mbuf *m;
2414 		panic("ipsec4_encapsulate: assumption failed (first mbuf length)");
2424 		panic("ipsec4_encapsulate: assumption failed (first mbuf length)");
2437 	 * grow the mbuf to accomodate the new IPv4 header.
2441 		struct mbuf *n;
2508 	struct mbuf **m_ptr;
2513 	struct mbuf *m = *m_ptr;
2527 	 * grow the mbuf to accomodate the new IPv4 header.
2531 		struct mbuf *n;
2595 	struct mbuf *m;
2620 	 * grow the mbuf to accomodate the new IPv6 header.
2623 		panic("ipsec6_encapsulate: assumption failed (first mbuf length)");
2625 		struct mbuf *n;
2673 	struct mbuf *m;
2700 	 * grow the mbuf to accomodate the new IPv4 header.
2703 		panic("ipsec6_encapsulate: assumption failed (first mbuf length)");
2705 		struct mbuf *n;
2759 	struct mbuf **m_ptr;
2764 	struct mbuf *m = *m_ptr;
2778 	 * grow the mbuf to accomodate the new IPv6 header.
2781 		struct mbuf *n;
3135 	struct mbuf *m;
3444 	struct mbuf *mprev,
3536 			state->m = NULL; /* icmp6_error freed the mbuf */
3993 struct mbuf *
3995 	struct mbuf *m;
3997 	struct mbuf *mh;
4002 		panic("ipsec4_splithdr: first mbuf too short, m_len %d, pkt_len %d, m_flag %x", m->m_len, m->m_pkthdr.len, m->m_flags);
4035 struct mbuf *
4037 	struct mbuf *m;
4039 	struct mbuf *mh;
4044 		panic("ipsec6_splithdr: first mbuf too short");
4075 	struct mbuf *m;		/* no pullup permitted, m->m_len >= ip */
4093 		panic("too short mbuf on ipsec4_tunnel_validate");
4194 	struct mbuf *m;		/* no pullup permitted, m->m_len >= ip */
4209 		panic("too short mbuf on ipsec6_tunnel_validate");
4272  * Make a mbuf chain for encryption.
4273  * If the original mbuf chain contains a mbuf with a cluster,
4278 struct mbuf *
4280 	struct mbuf *m;
4282 	struct mbuf *n, **mpp, *mnew;
4297 				struct mbuf *mm;
4325 					struct mbuf *mn;
4349 					/* need another mbuf */
4396 	struct mbuf *m)
4424 	struct mbuf *m)
4435 	struct mbuf *m)
4449 	struct mbuf			*m,
4459 	struct mbuf *m,
4464 	/* if so == NULL, don't insist on getting the aux mbuf */
4480 	struct mbuf *m)
4493 	struct mbuf *m,
4517 	struct mbuf *m,
4534 	struct mbuf *m)
4549 	struct mbuf	       *m;