bsd/netinet/flow_divert.c

545 		FDLOG0(LOG_WARNING, &nil_pcb, "HMAC in token does not match computed HMAC");
1640 		FDLOG(LOG_ERR, &nil_pcb, "failed to get the token key: %d", error);
2261 				FDLOG(LOG_INFO, fd_cb, "Got %s from token", signing_id);
2762 	mbuf_t						token			= NULL;
2793 	error = soopt_getm(sopt, &token);
2798 	error = soopt_mcopyin(sopt, token);
2803 	error = flow_divert_packet_get_tlv(token, 0, FLOW_DIVERT_TLV_KEY_UNIT, sizeof(key_unit), (void *)&key_unit, NULL);
2807 		FDLOG(LOG_ERR, &nil_pcb, "Failed to get the key unit from the token: %d", error);
2813 	error = flow_divert_packet_get_tlv(token, 0, FLOW_DIVERT_TLV_CTL_UNIT, sizeof(ctl_unit), (void *)&ctl_unit, NULL);
2815 		FDLOG(LOG_ERR, &nil_pcb, "Failed to get the control socket unit from the token: %d", error);
2828 	error = flow_divert_packet_verify_hmac(token, (key_unit != 0 ? key_unit : ctl_unit));
2836 	error = flow_divert_packet_get_tlv(token, 0, FLOW_DIVERT_TLV_FLOW_ID, sizeof(flow_id), (void *)&flow_id, NULL);
2838 		FDLOG(LOG_ERR, &nil_pcb, "Failed to get the flow ID from the token: %d", error);
2848 			error = flow_divert_packet_get_tlv(token, 0, FLOW_DIVERT_TLV_LOG_LEVEL,
2855 			fd_cb->connect_token = token;
2856 			token = NULL;
2863 	if (token != NULL) {
2864 		mbuf_freem(token);
2877 	mbuf_t						token						= NULL;
2892 	error = mbuf_gethdr(MBUF_DONTWAIT, MBUF_TYPE_HEADER, &token);
2900 	error = flow_divert_packet_append_tlv(token, FLOW_DIVERT_TLV_CTL_UNIT, sizeof(ctl_unit), &ctl_unit);
2905 	error = flow_divert_packet_append_tlv(token, FLOW_DIVERT_TLV_FLOW_ID, sizeof(fd_cb->hash), &fd_cb->hash);
2922 		error = flow_divert_packet_append_tlv(token, FLOW_DIVERT_TLV_KEY_UNIT, sizeof(ctl_unit), &ctl_unit);
2924 			error = flow_divert_packet_compute_hmac(token, control_group, hmac);
2938 	error = flow_divert_packet_append_tlv(token, FLOW_DIVERT_TLV_HMAC, sizeof(hmac), hmac);
2943 	error = soopt_mcopyout(sopt, token);
2945 		token = NULL;	/* For some reason, soopt_mcopyout() frees the mbuf if it fails */
2950 	if (token != NULL) {
2951 		mbuf_freem(token);