Lines Matching refs:xp
1853 static int check_reqid(struct xfrm_policy *xp, int dir, int count, void *ptr) in check_reqid() argument
1858 for (i=0; i<xp->xfrm_nr; i++) { in check_reqid()
1859 if (xp->xfrm_vec[i].reqid == reqid) in check_reqid()
1887 parse_ipsecrequest(struct xfrm_policy *xp, struct sadb_x_ipsecrequest *rq) in parse_ipsecrequest() argument
1889 struct net *net = xp_net(xp); in parse_ipsecrequest()
1890 struct xfrm_tmpl *t = xp->xfrm_vec + xp->xfrm_nr; in parse_ipsecrequest()
1893 if (xp->xfrm_nr >= XFRM_MAX_DEPTH) in parse_ipsecrequest()
1929 t->encap_family = xp->family; in parse_ipsecrequest()
1933 xp->xfrm_nr++; in parse_ipsecrequest()
1938 parse_ipsecrequests(struct xfrm_policy *xp, struct sadb_x_policy *pol) in parse_ipsecrequests() argument
1948 if ((err = parse_ipsecrequest(xp, rq)) < 0) in parse_ipsecrequests()
1956 static inline int pfkey_xfrm_policy2sec_ctx_size(const struct xfrm_policy *xp) in pfkey_xfrm_policy2sec_ctx_size() argument
1958 struct xfrm_sec_ctx *xfrm_ctx = xp->security; in pfkey_xfrm_policy2sec_ctx_size()
1968 static int pfkey_xfrm_policy2msg_size(const struct xfrm_policy *xp) in pfkey_xfrm_policy2msg_size() argument
1971 int sockaddr_size = pfkey_sockaddr_size(xp->family); in pfkey_xfrm_policy2msg_size()
1975 for (i=0; i<xp->xfrm_nr; i++) { in pfkey_xfrm_policy2msg_size()
1976 t = xp->xfrm_vec + i; in pfkey_xfrm_policy2msg_size()
1985 (xp->xfrm_nr * sizeof(struct sadb_x_ipsecrequest)) + in pfkey_xfrm_policy2msg_size()
1987 pfkey_xfrm_policy2sec_ctx_size(xp); in pfkey_xfrm_policy2msg_size()
1990 static struct sk_buff * pfkey_xfrm_policy2msg_prep(const struct xfrm_policy *xp) in pfkey_xfrm_policy2msg_prep() argument
1995 size = pfkey_xfrm_policy2msg_size(xp); in pfkey_xfrm_policy2msg_prep()
2004 static int pfkey_xfrm_policy2msg(struct sk_buff *skb, const struct xfrm_policy *xp, int dir) in pfkey_xfrm_policy2msg() argument
2014 int sockaddr_size = pfkey_sockaddr_size(xp->family); in pfkey_xfrm_policy2msg()
2015 int socklen = pfkey_sockaddr_len(xp->family); in pfkey_xfrm_policy2msg()
2017 size = pfkey_xfrm_policy2msg_size(xp); in pfkey_xfrm_policy2msg()
2030 addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto); in pfkey_xfrm_policy2msg()
2031 addr->sadb_address_prefixlen = xp->selector.prefixlen_s; in pfkey_xfrm_policy2msg()
2033 if (!pfkey_sockaddr_fill(&xp->selector.saddr, in pfkey_xfrm_policy2msg()
2034 xp->selector.sport, in pfkey_xfrm_policy2msg()
2036 xp->family)) in pfkey_xfrm_policy2msg()
2046 addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto); in pfkey_xfrm_policy2msg()
2047 addr->sadb_address_prefixlen = xp->selector.prefixlen_d; in pfkey_xfrm_policy2msg()
2050 pfkey_sockaddr_fill(&xp->selector.daddr, xp->selector.dport, in pfkey_xfrm_policy2msg()
2052 xp->family); in pfkey_xfrm_policy2msg()
2060 lifetime->sadb_lifetime_allocations = _X2KEY(xp->lft.hard_packet_limit); in pfkey_xfrm_policy2msg()
2061 lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.hard_byte_limit); in pfkey_xfrm_policy2msg()
2062 lifetime->sadb_lifetime_addtime = xp->lft.hard_add_expires_seconds; in pfkey_xfrm_policy2msg()
2063 lifetime->sadb_lifetime_usetime = xp->lft.hard_use_expires_seconds; in pfkey_xfrm_policy2msg()
2070 lifetime->sadb_lifetime_allocations = _X2KEY(xp->lft.soft_packet_limit); in pfkey_xfrm_policy2msg()
2071 lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.soft_byte_limit); in pfkey_xfrm_policy2msg()
2072 lifetime->sadb_lifetime_addtime = xp->lft.soft_add_expires_seconds; in pfkey_xfrm_policy2msg()
2073 lifetime->sadb_lifetime_usetime = xp->lft.soft_use_expires_seconds; in pfkey_xfrm_policy2msg()
2080 lifetime->sadb_lifetime_allocations = xp->curlft.packets; in pfkey_xfrm_policy2msg()
2081 lifetime->sadb_lifetime_bytes = xp->curlft.bytes; in pfkey_xfrm_policy2msg()
2082 lifetime->sadb_lifetime_addtime = xp->curlft.add_time; in pfkey_xfrm_policy2msg()
2083 lifetime->sadb_lifetime_usetime = xp->curlft.use_time; in pfkey_xfrm_policy2msg()
2089 if (xp->action == XFRM_POLICY_ALLOW) { in pfkey_xfrm_policy2msg()
2090 if (xp->xfrm_nr) in pfkey_xfrm_policy2msg()
2097 pol->sadb_x_policy_id = xp->index; in pfkey_xfrm_policy2msg()
2098 pol->sadb_x_policy_priority = xp->priority; in pfkey_xfrm_policy2msg()
2100 for (i=0; i<xp->xfrm_nr; i++) { in pfkey_xfrm_policy2msg()
2101 const struct xfrm_tmpl *t = xp->xfrm_vec + i; in pfkey_xfrm_policy2msg()
2140 if ((xfrm_ctx = xp->security)) { in pfkey_xfrm_policy2msg()
2141 int ctx_size = pfkey_xfrm_policy2sec_ctx_size(xp); in pfkey_xfrm_policy2msg()
2154 hdr->sadb_msg_reserved = atomic_read(&xp->refcnt); in pfkey_xfrm_policy2msg()
2159 static int key_notify_policy(struct xfrm_policy *xp, int dir, const struct km_event *c) in key_notify_policy() argument
2165 out_skb = pfkey_xfrm_policy2msg_prep(xp); in key_notify_policy()
2169 err = pfkey_xfrm_policy2msg(out_skb, xp, dir); in key_notify_policy()
2183 pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ALL, NULL, xp_net(xp)); in key_notify_policy()
2195 struct xfrm_policy *xp; in pfkey_spdadd() local
2210 xp = xfrm_policy_alloc(net, GFP_KERNEL); in pfkey_spdadd()
2211 if (xp == NULL) in pfkey_spdadd()
2214 xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ? in pfkey_spdadd()
2216 xp->priority = pol->sadb_x_policy_priority; in pfkey_spdadd()
2219 xp->family = pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.saddr); in pfkey_spdadd()
2220 xp->selector.family = xp->family; in pfkey_spdadd()
2221 xp->selector.prefixlen_s = sa->sadb_address_prefixlen; in pfkey_spdadd()
2222 xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto); in pfkey_spdadd()
2223 xp->selector.sport = ((struct sockaddr_in *)(sa+1))->sin_port; in pfkey_spdadd()
2224 if (xp->selector.sport) in pfkey_spdadd()
2225 xp->selector.sport_mask = htons(0xffff); in pfkey_spdadd()
2228 pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.daddr); in pfkey_spdadd()
2229 xp->selector.prefixlen_d = sa->sadb_address_prefixlen; in pfkey_spdadd()
2234 xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto); in pfkey_spdadd()
2236 xp->selector.dport = ((struct sockaddr_in *)(sa+1))->sin_port; in pfkey_spdadd()
2237 if (xp->selector.dport) in pfkey_spdadd()
2238 xp->selector.dport_mask = htons(0xffff); in pfkey_spdadd()
2249 err = security_xfrm_policy_alloc(&xp->security, uctx, GFP_KERNEL); in pfkey_spdadd()
2256 xp->lft.soft_byte_limit = XFRM_INF; in pfkey_spdadd()
2257 xp->lft.hard_byte_limit = XFRM_INF; in pfkey_spdadd()
2258 xp->lft.soft_packet_limit = XFRM_INF; in pfkey_spdadd()
2259 xp->lft.hard_packet_limit = XFRM_INF; in pfkey_spdadd()
2261 xp->lft.hard_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations); in pfkey_spdadd()
2262 xp->lft.hard_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes); in pfkey_spdadd()
2263 xp->lft.hard_add_expires_seconds = lifetime->sadb_lifetime_addtime; in pfkey_spdadd()
2264 xp->lft.hard_use_expires_seconds = lifetime->sadb_lifetime_usetime; in pfkey_spdadd()
2267 xp->lft.soft_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations); in pfkey_spdadd()
2268 xp->lft.soft_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes); in pfkey_spdadd()
2269 xp->lft.soft_add_expires_seconds = lifetime->sadb_lifetime_addtime; in pfkey_spdadd()
2270 xp->lft.soft_use_expires_seconds = lifetime->sadb_lifetime_usetime; in pfkey_spdadd()
2272 xp->xfrm_nr = 0; in pfkey_spdadd()
2274 (err = parse_ipsecrequests(xp, pol)) < 0) in pfkey_spdadd()
2277 err = xfrm_policy_insert(pol->sadb_x_policy_dir-1, xp, in pfkey_spdadd()
2280 xfrm_audit_policy_add(xp, err ? 0 : 1, true); in pfkey_spdadd()
2293 km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c); in pfkey_spdadd()
2294 xfrm_pol_put(xp); in pfkey_spdadd()
2298 xp->walk.dead = 1; in pfkey_spdadd()
2299 xfrm_policy_destroy(xp); in pfkey_spdadd()
2309 struct xfrm_policy *xp; in pfkey_spddelete() local
2355 xp = xfrm_policy_bysel_ctx(net, DUMMY_MARK, XFRM_POLICY_TYPE_MAIN, in pfkey_spddelete()
2359 if (xp == NULL) in pfkey_spddelete()
2362 xfrm_audit_policy_delete(xp, err ? 0 : 1, true); in pfkey_spddelete()
2371 km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c); in pfkey_spddelete()
2374 xfrm_pol_put(xp); in pfkey_spddelete()
2380 static int key_pol_get_resp(struct sock *sk, struct xfrm_policy *xp, const struct sadb_msg *hdr, in… in key_pol_get_resp() argument
2387 out_skb = pfkey_xfrm_policy2msg_prep(xp); in key_pol_get_resp()
2392 err = pfkey_xfrm_policy2msg(out_skb, xp, dir); in key_pol_get_resp()
2403 pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ONE, sk, xp_net(xp)); in key_pol_get_resp()
2593 struct xfrm_policy *xp; in pfkey_spdget() local
2604 xp = xfrm_policy_byid(net, DUMMY_MARK, XFRM_POLICY_TYPE_MAIN, in pfkey_spdget()
2606 if (xp == NULL) in pfkey_spdget()
2610 xfrm_audit_policy_delete(xp, err ? 0 : 1, true); in pfkey_spdget()
2618 km_policy_notify(xp, dir, &c); in pfkey_spdget()
2620 err = key_pol_get_resp(sk, xp, hdr, dir); in pfkey_spdget()
2624 xfrm_pol_put(xp); in pfkey_spdget()
2630 static int dump_sp(struct xfrm_policy *xp, int dir, int count, void *ptr) in dump_sp() argument
2640 out_skb = pfkey_xfrm_policy2msg_prep(xp); in dump_sp()
2644 err = pfkey_xfrm_policy2msg(out_skb, xp, dir); in dump_sp()
2963 static int key_notify_policy_expire(struct xfrm_policy *xp, const struct km_event *c) in key_notify_policy_expire() argument
3025 static int pfkey_send_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c) in pfkey_send_policy_notify() argument
3027 if (xp && xp->type != XFRM_POLICY_TYPE_MAIN) in pfkey_send_policy_notify()
3032 return key_notify_policy_expire(xp, c); in pfkey_send_policy_notify()
3036 return key_notify_policy(xp, dir, c); in pfkey_send_policy_notify()
3078 static int pfkey_send_acquire(struct xfrm_state *x, struct xfrm_tmpl *t, struct xfrm_policy *xp) in pfkey_send_acquire() argument
3161 pol->sadb_x_policy_id = xp->index; in pfkey_send_acquire()
3162 pol->sadb_x_policy_priority = xp->priority; in pfkey_send_acquire()
3191 struct xfrm_policy *xp; in pfkey_compile_policy() local
3223 xp = xfrm_policy_alloc(net, GFP_ATOMIC); in pfkey_compile_policy()
3224 if (xp == NULL) { in pfkey_compile_policy()
3229 xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ? in pfkey_compile_policy()
3232 xp->lft.soft_byte_limit = XFRM_INF; in pfkey_compile_policy()
3233 xp->lft.hard_byte_limit = XFRM_INF; in pfkey_compile_policy()
3234 xp->lft.soft_packet_limit = XFRM_INF; in pfkey_compile_policy()
3235 xp->lft.hard_packet_limit = XFRM_INF; in pfkey_compile_policy()
3236 xp->family = sk->sk_family; in pfkey_compile_policy()
3238 xp->xfrm_nr = 0; in pfkey_compile_policy()
3240 (*dir = parse_ipsecrequests(xp, pol)) < 0) in pfkey_compile_policy()
3259 *dir = security_xfrm_policy_alloc(&xp->security, uctx, GFP_ATOMIC); in pfkey_compile_policy()
3267 return xp; in pfkey_compile_policy()
3270 xp->walk.dead = 1; in pfkey_compile_policy()
3271 xfrm_policy_destroy(xp); in pfkey_compile_policy()