Lines Matching full:xp
1913 static int check_reqid(struct xfrm_policy *xp, int dir, int count, void *ptr) in check_reqid() argument
1918 for (i=0; i<xp->xfrm_nr; i++) { in check_reqid()
1919 if (xp->xfrm_vec[i].reqid == reqid) in check_reqid()
1947 parse_ipsecrequest(struct xfrm_policy *xp, struct sadb_x_policy *pol, in parse_ipsecrequest() argument
1950 struct net *net = xp_net(xp); in parse_ipsecrequest()
1951 struct xfrm_tmpl *t = xp->xfrm_vec + xp->xfrm_nr; in parse_ipsecrequest()
1954 if (xp->xfrm_nr >= XFRM_MAX_DEPTH) in parse_ipsecrequest()
1990 t->encap_family = xp->family; in parse_ipsecrequest()
1994 xp->xfrm_nr++; in parse_ipsecrequest()
1999 parse_ipsecrequests(struct xfrm_policy *xp, struct sadb_x_policy *pol) in parse_ipsecrequests() argument
2013 if ((err = parse_ipsecrequest(xp, pol, rq)) < 0) in parse_ipsecrequests()
2021 static inline int pfkey_xfrm_policy2sec_ctx_size(const struct xfrm_policy *xp) in pfkey_xfrm_policy2sec_ctx_size() argument
2023 struct xfrm_sec_ctx *xfrm_ctx = xp->security; in pfkey_xfrm_policy2sec_ctx_size()
2033 static int pfkey_xfrm_policy2msg_size(const struct xfrm_policy *xp) in pfkey_xfrm_policy2msg_size() argument
2036 int sockaddr_size = pfkey_sockaddr_size(xp->family); in pfkey_xfrm_policy2msg_size()
2040 for (i=0; i<xp->xfrm_nr; i++) { in pfkey_xfrm_policy2msg_size()
2041 t = xp->xfrm_vec + i; in pfkey_xfrm_policy2msg_size()
2050 (xp->xfrm_nr * sizeof(struct sadb_x_ipsecrequest)) + in pfkey_xfrm_policy2msg_size()
2052 pfkey_xfrm_policy2sec_ctx_size(xp); in pfkey_xfrm_policy2msg_size()
2055 static struct sk_buff * pfkey_xfrm_policy2msg_prep(const struct xfrm_policy *xp) in pfkey_xfrm_policy2msg_prep() argument
2060 size = pfkey_xfrm_policy2msg_size(xp); in pfkey_xfrm_policy2msg_prep()
2069 static int pfkey_xfrm_policy2msg(struct sk_buff *skb, const struct xfrm_policy *xp, int dir) in pfkey_xfrm_policy2msg() argument
2079 int sockaddr_size = pfkey_sockaddr_size(xp->family); in pfkey_xfrm_policy2msg()
2080 int socklen = pfkey_sockaddr_len(xp->family); in pfkey_xfrm_policy2msg()
2082 size = pfkey_xfrm_policy2msg_size(xp); in pfkey_xfrm_policy2msg()
2094 addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto); in pfkey_xfrm_policy2msg()
2095 addr->sadb_address_prefixlen = xp->selector.prefixlen_s; in pfkey_xfrm_policy2msg()
2097 if (!pfkey_sockaddr_fill(&xp->selector.saddr, in pfkey_xfrm_policy2msg()
2098 xp->selector.sport, in pfkey_xfrm_policy2msg()
2100 xp->family)) in pfkey_xfrm_policy2msg()
2109 addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto); in pfkey_xfrm_policy2msg()
2110 addr->sadb_address_prefixlen = xp->selector.prefixlen_d; in pfkey_xfrm_policy2msg()
2113 pfkey_sockaddr_fill(&xp->selector.daddr, xp->selector.dport, in pfkey_xfrm_policy2msg()
2115 xp->family); in pfkey_xfrm_policy2msg()
2122 lifetime->sadb_lifetime_allocations = _X2KEY(xp->lft.hard_packet_limit); in pfkey_xfrm_policy2msg()
2123 lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.hard_byte_limit); in pfkey_xfrm_policy2msg()
2124 lifetime->sadb_lifetime_addtime = xp->lft.hard_add_expires_seconds; in pfkey_xfrm_policy2msg()
2125 lifetime->sadb_lifetime_usetime = xp->lft.hard_use_expires_seconds; in pfkey_xfrm_policy2msg()
2131 lifetime->sadb_lifetime_allocations = _X2KEY(xp->lft.soft_packet_limit); in pfkey_xfrm_policy2msg()
2132 lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.soft_byte_limit); in pfkey_xfrm_policy2msg()
2133 lifetime->sadb_lifetime_addtime = xp->lft.soft_add_expires_seconds; in pfkey_xfrm_policy2msg()
2134 lifetime->sadb_lifetime_usetime = xp->lft.soft_use_expires_seconds; in pfkey_xfrm_policy2msg()
2140 lifetime->sadb_lifetime_allocations = xp->curlft.packets; in pfkey_xfrm_policy2msg()
2141 lifetime->sadb_lifetime_bytes = xp->curlft.bytes; in pfkey_xfrm_policy2msg()
2142 lifetime->sadb_lifetime_addtime = xp->curlft.add_time; in pfkey_xfrm_policy2msg()
2143 lifetime->sadb_lifetime_usetime = xp->curlft.use_time; in pfkey_xfrm_policy2msg()
2149 if (xp->action == XFRM_POLICY_ALLOW) { in pfkey_xfrm_policy2msg()
2150 if (xp->xfrm_nr) in pfkey_xfrm_policy2msg()
2157 pol->sadb_x_policy_id = xp->index; in pfkey_xfrm_policy2msg()
2158 pol->sadb_x_policy_priority = xp->priority; in pfkey_xfrm_policy2msg()
2160 for (i=0; i<xp->xfrm_nr; i++) { in pfkey_xfrm_policy2msg()
2161 const struct xfrm_tmpl *t = xp->xfrm_vec + i; in pfkey_xfrm_policy2msg()
2200 if ((xfrm_ctx = xp->security)) { in pfkey_xfrm_policy2msg()
2201 int ctx_size = pfkey_xfrm_policy2sec_ctx_size(xp); in pfkey_xfrm_policy2msg()
2214 hdr->sadb_msg_reserved = refcount_read(&xp->refcnt); in pfkey_xfrm_policy2msg()
2219 static int key_notify_policy(struct xfrm_policy *xp, int dir, const struct km_event *c) in key_notify_policy() argument
2225 out_skb = pfkey_xfrm_policy2msg_prep(xp); in key_notify_policy()
2229 err = pfkey_xfrm_policy2msg(out_skb, xp, dir); in key_notify_policy()
2245 pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ALL, NULL, xp_net(xp)); in key_notify_policy()
2257 struct xfrm_policy *xp; in pfkey_spdadd() local
2272 xp = xfrm_policy_alloc(net, GFP_KERNEL); in pfkey_spdadd()
2273 if (xp == NULL) in pfkey_spdadd()
2276 xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ? in pfkey_spdadd()
2278 xp->priority = pol->sadb_x_policy_priority; in pfkey_spdadd()
2281 xp->family = pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.saddr); in pfkey_spdadd()
2282 xp->selector.family = xp->family; in pfkey_spdadd()
2283 xp->selector.prefixlen_s = sa->sadb_address_prefixlen; in pfkey_spdadd()
2284 xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto); in pfkey_spdadd()
2285 xp->selector.sport = ((struct sockaddr_in *)(sa+1))->sin_port; in pfkey_spdadd()
2286 if (xp->selector.sport) in pfkey_spdadd()
2287 xp->selector.sport_mask = htons(0xffff); in pfkey_spdadd()
2290 pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.daddr); in pfkey_spdadd()
2291 xp->selector.prefixlen_d = sa->sadb_address_prefixlen; in pfkey_spdadd()
2296 xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto); in pfkey_spdadd()
2298 xp->selector.dport = ((struct sockaddr_in *)(sa+1))->sin_port; in pfkey_spdadd()
2299 if (xp->selector.dport) in pfkey_spdadd()
2300 xp->selector.dport_mask = htons(0xffff); in pfkey_spdadd()
2311 err = security_xfrm_policy_alloc(&xp->security, uctx, GFP_KERNEL); in pfkey_spdadd()
2318 xp->lft.soft_byte_limit = XFRM_INF; in pfkey_spdadd()
2319 xp->lft.hard_byte_limit = XFRM_INF; in pfkey_spdadd()
2320 xp->lft.soft_packet_limit = XFRM_INF; in pfkey_spdadd()
2321 xp->lft.hard_packet_limit = XFRM_INF; in pfkey_spdadd()
2323 xp->lft.hard_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations); in pfkey_spdadd()
2324 xp->lft.hard_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes); in pfkey_spdadd()
2325 xp->lft.hard_add_expires_seconds = lifetime->sadb_lifetime_addtime; in pfkey_spdadd()
2326 xp->lft.hard_use_expires_seconds = lifetime->sadb_lifetime_usetime; in pfkey_spdadd()
2329 xp->lft.soft_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations); in pfkey_spdadd()
2330 xp->lft.soft_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes); in pfkey_spdadd()
2331 xp->lft.soft_add_expires_seconds = lifetime->sadb_lifetime_addtime; in pfkey_spdadd()
2332 xp->lft.soft_use_expires_seconds = lifetime->sadb_lifetime_usetime; in pfkey_spdadd()
2334 xp->xfrm_nr = 0; in pfkey_spdadd()
2336 (err = parse_ipsecrequests(xp, pol)) < 0) in pfkey_spdadd()
2339 err = xfrm_policy_insert(pol->sadb_x_policy_dir-1, xp, in pfkey_spdadd()
2342 xfrm_audit_policy_add(xp, err ? 0 : 1, true); in pfkey_spdadd()
2355 km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c); in pfkey_spdadd()
2356 xfrm_pol_put(xp); in pfkey_spdadd()
2360 xp->walk.dead = 1; in pfkey_spdadd()
2361 xfrm_policy_destroy(xp); in pfkey_spdadd()
2371 struct xfrm_policy *xp; in pfkey_spddelete() local
2417 xp = xfrm_policy_bysel_ctx(net, &dummy_mark, 0, XFRM_POLICY_TYPE_MAIN, in pfkey_spddelete()
2421 if (xp == NULL) in pfkey_spddelete()
2424 xfrm_audit_policy_delete(xp, err ? 0 : 1, true); in pfkey_spddelete()
2433 km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c); in pfkey_spddelete()
2436 xfrm_pol_put(xp); in pfkey_spddelete()
2440 static int key_pol_get_resp(struct sock *sk, struct xfrm_policy *xp, const struct sadb_msg *hdr, in… in key_pol_get_resp() argument
2447 out_skb = pfkey_xfrm_policy2msg_prep(xp); in key_pol_get_resp()
2452 err = pfkey_xfrm_policy2msg(out_skb, xp, dir); in key_pol_get_resp()
2465 pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ONE, sk, xp_net(xp)); in key_pol_get_resp()
2657 struct xfrm_policy *xp; in pfkey_spdget() local
2668 xp = xfrm_policy_byid(net, &dummy_mark, 0, XFRM_POLICY_TYPE_MAIN, in pfkey_spdget()
2670 if (xp == NULL) in pfkey_spdget()
2674 xfrm_audit_policy_delete(xp, err ? 0 : 1, true); in pfkey_spdget()
2682 km_policy_notify(xp, dir, &c); in pfkey_spdget()
2684 err = key_pol_get_resp(sk, xp, hdr, dir); in pfkey_spdget()
2688 xfrm_pol_put(xp); in pfkey_spdget()
2692 static int dump_sp(struct xfrm_policy *xp, int dir, int count, void *ptr) in dump_sp() argument
2702 out_skb = pfkey_xfrm_policy2msg_prep(xp); in dump_sp()
2706 err = pfkey_xfrm_policy2msg(out_skb, xp, dir); in dump_sp()
3042 static int key_notify_policy_expire(struct xfrm_policy *xp, const struct km_event *c) in key_notify_policy_expire() argument
3105 static int pfkey_send_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c) in pfkey_send_policy_notify() argument
3107 if (xp && xp->type != XFRM_POLICY_TYPE_MAIN) in pfkey_send_policy_notify()
3112 return key_notify_policy_expire(xp, c); in pfkey_send_policy_notify()
3116 return key_notify_policy(xp, dir, c); in pfkey_send_policy_notify()
3158 static int pfkey_send_acquire(struct xfrm_state *x, struct xfrm_tmpl *t, struct xfrm_policy *xp) in pfkey_send_acquire() argument
3240 pol->sadb_x_policy_id = xp->index; in pfkey_send_acquire()
3241 pol->sadb_x_policy_priority = xp->priority; in pfkey_send_acquire()
3274 struct xfrm_policy *xp; in pfkey_compile_policy() local
3306 xp = xfrm_policy_alloc(net, GFP_ATOMIC); in pfkey_compile_policy()
3307 if (xp == NULL) { in pfkey_compile_policy()
3312 xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ? in pfkey_compile_policy()
3315 xp->lft.soft_byte_limit = XFRM_INF; in pfkey_compile_policy()
3316 xp->lft.hard_byte_limit = XFRM_INF; in pfkey_compile_policy()
3317 xp->lft.soft_packet_limit = XFRM_INF; in pfkey_compile_policy()
3318 xp->lft.hard_packet_limit = XFRM_INF; in pfkey_compile_policy()
3319 xp->family = sk->sk_family; in pfkey_compile_policy()
3321 xp->xfrm_nr = 0; in pfkey_compile_policy()
3323 (*dir = parse_ipsecrequests(xp, pol)) < 0) in pfkey_compile_policy()
3342 *dir = security_xfrm_policy_alloc(&xp->security, uctx, GFP_ATOMIC); in pfkey_compile_policy()
3350 return xp; in pfkey_compile_policy()
3353 xp->walk.dead = 1; in pfkey_compile_policy()
3354 xfrm_policy_destroy(xp); in pfkey_compile_policy()