1345 static void copy_templates(struct xfrm_policy *xp, struct xfrm_user_tmpl *ut,  in copy_templates()  argument
1350 	xp->xfrm_nr = nr;  in copy_templates()
1352 		struct xfrm_tmpl *t = &xp->xfrm_vec[i];  in copy_templates()
1443 static void copy_from_user_policy(struct xfrm_policy *xp, struct xfrm_userpolicy_info *p)  in copy_from_user_policy()  argument
1445 	xp->priority = p->priority;  in copy_from_user_policy()
1446 	xp->index = p->index;  in copy_from_user_policy()
1447 	memcpy(&xp->selector, &p->sel, sizeof(xp->selector));  in copy_from_user_policy()
1448 	memcpy(&xp->lft, &p->lft, sizeof(xp->lft));  in copy_from_user_policy()
1449 	xp->action = p->action;  in copy_from_user_policy()
1450 	xp->flags = p->flags;  in copy_from_user_policy()
1451 	xp->family = p->sel.family;  in copy_from_user_policy()
1455 static void copy_to_user_policy(struct xfrm_policy *xp, struct xfrm_userpolicy_info *p, int dir)  in copy_to_user_policy()  argument
1458 	memcpy(&p->sel, &xp->selector, sizeof(p->sel));  in copy_to_user_policy()
1459 	memcpy(&p->lft, &xp->lft, sizeof(p->lft));  in copy_to_user_policy()
1460 	memcpy(&p->curlft, &xp->curlft, sizeof(p->curlft));  in copy_to_user_policy()
1461 	p->priority = xp->priority;  in copy_to_user_policy()
1462 	p->index = xp->index;  in copy_to_user_policy()
1463 	p->sel.family = xp->family;  in copy_to_user_policy()
1465 	p->action = xp->action;  in copy_to_user_policy()
1466 	p->flags = xp->flags;  in copy_to_user_policy()
1472 	struct xfrm_policy *xp = xfrm_policy_alloc(net, GFP_KERNEL);  in xfrm_policy_construct()  local
1475 	if (!xp) {  in xfrm_policy_construct()
1480 	copy_from_user_policy(xp, p);  in xfrm_policy_construct()
1482 	err = copy_from_user_policy_type(&xp->type, attrs);  in xfrm_policy_construct()
1486 	if (!(err = copy_from_user_tmpl(xp, attrs)))  in xfrm_policy_construct()
1487 		err = copy_from_user_sec_ctx(xp, attrs);  in xfrm_policy_construct()
1491 	xfrm_mark_get(attrs, &xp->mark);  in xfrm_policy_construct()
1493 	return xp;  in xfrm_policy_construct()
1496 	xp->walk.dead = 1;  in xfrm_policy_construct()
1497 	xfrm_policy_destroy(xp);  in xfrm_policy_construct()
1506 	struct xfrm_policy *xp;  in xfrm_add_policy()  local
1518 	xp = xfrm_policy_construct(net, p, attrs, &err);  in xfrm_add_policy()
1519 	if (!xp)  in xfrm_add_policy()
1527 	err = xfrm_policy_insert(p->dir, xp, excl);  in xfrm_add_policy()
1528 	xfrm_audit_policy_add(xp, err ? 0 : 1, true);  in xfrm_add_policy()
1531 		security_xfrm_policy_free(xp->security);  in xfrm_add_policy()
1532 		kfree(xp);  in xfrm_add_policy()
1539 	km_policy_notify(xp, p->dir, &c);  in xfrm_add_policy()
1541 	xfrm_pol_put(xp);  in xfrm_add_policy()
1546 static int copy_to_user_tmpl(struct xfrm_policy *xp, struct sk_buff *skb)  in copy_to_user_tmpl()  argument
1551 	if (xp->xfrm_nr == 0)  in copy_to_user_tmpl()
1554 	for (i = 0; i < xp->xfrm_nr; i++) {  in copy_to_user_tmpl()
1556 		struct xfrm_tmpl *kp = &xp->xfrm_vec[i];  in copy_to_user_tmpl()
1572 		       sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr, vec);  in copy_to_user_tmpl()
1583 static inline int copy_to_user_sec_ctx(struct xfrm_policy *xp, struct sk_buff *skb)  in copy_to_user_sec_ctx()  argument
1585 	if (xp->security)  in copy_to_user_sec_ctx()
1586 		return copy_sec_ctx(xp->security, skb);  in copy_to_user_sec_ctx()
1615 static int dump_one_policy(struct xfrm_policy *xp, int dir, int count, void *ptr)  in dump_one_policy()  argument
1630 	copy_to_user_policy(xp, p, dir);  in dump_one_policy()
1631 	err = copy_to_user_tmpl(xp, skb);  in dump_one_policy()
1633 		err = copy_to_user_sec_ctx(xp, skb);  in dump_one_policy()
1635 		err = copy_to_user_policy_type(xp->type, skb);  in dump_one_policy()
1637 		err = xfrm_mark_put(skb, &xp->mark);  in dump_one_policy()
1680 					  struct xfrm_policy *xp,  in xfrm_policy_netlink()  argument
1696 	err = dump_one_policy(xp, dir, 0, &info);  in xfrm_policy_netlink()
1709 	struct xfrm_policy *xp;  in xfrm_get_policy()  local
1730 		xp = xfrm_policy_byid(net, mark, type, p->dir, p->index, delete, &err);  in xfrm_get_policy()
1747 		xp = xfrm_policy_bysel_ctx(net, mark, type, p->dir, &p->sel,  in xfrm_get_policy()
1751 	if (xp == NULL)  in xfrm_get_policy()
1757 		resp_skb = xfrm_policy_netlink(skb, xp, p->dir, nlh->nlmsg_seq);  in xfrm_get_policy()
1765 		xfrm_audit_policy_delete(xp, err ? 0 : 1, true);  in xfrm_get_policy()
1774 		km_policy_notify(xp, p->dir, &c);  in xfrm_get_policy()
1778 	xfrm_pol_put(xp);  in xfrm_get_policy()
2004 	struct xfrm_policy *xp;  in xfrm_add_pol_expire()  local
2021 		xp = xfrm_policy_byid(net, mark, type, p->dir, p->index, 0, &err);  in xfrm_add_pol_expire()
2038 		xp = xfrm_policy_bysel_ctx(net, mark, type, p->dir,  in xfrm_add_pol_expire()
2042 	if (xp == NULL)  in xfrm_add_pol_expire()
2045 	if (unlikely(xp->walk.dead))  in xfrm_add_pol_expire()
2050 		xfrm_policy_delete(xp, p->dir);  in xfrm_add_pol_expire()
2051 		xfrm_audit_policy_delete(xp, 1, true);  in xfrm_add_pol_expire()
2056 	km_policy_expired(xp, p->dir, up->hard, nlh->nlmsg_pid);  in xfrm_add_pol_expire()
2059 	xfrm_pol_put(xp);  in xfrm_add_pol_expire()
2101 	struct xfrm_policy *xp;  in xfrm_add_acquire()  local
2121 	xp = xfrm_policy_construct(net, &ua->policy, attrs, &err);  in xfrm_add_acquire()
2122 	if (!xp)  in xfrm_add_acquire()
2128 	xp->mark.m = x->mark.m = mark.m;  in xfrm_add_acquire()
2129 	xp->mark.v = x->mark.v = mark.v;  in xfrm_add_acquire()
2132 	for (i = 0; i < xp->xfrm_nr; i++, ut++) {  in xfrm_add_acquire()
2133 		struct xfrm_tmpl *t = &xp->xfrm_vec[i];  in xfrm_add_acquire()
2141 		err = km_query(x, t, xp);  in xfrm_add_acquire()
2146 	kfree(xp);  in xfrm_add_acquire()
2707 					  struct xfrm_policy *xp)  in xfrm_acquire_msgsize()  argument
2710 	       + nla_total_size(sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr)  in xfrm_acquire_msgsize()
2717 			 struct xfrm_tmpl *xt, struct xfrm_policy *xp)  in build_acquire()  argument
2732 	copy_to_user_policy(xp, &ua->policy, XFRM_POLICY_OUT);  in build_acquire()
2738 	err = copy_to_user_tmpl(xp, skb);  in build_acquire()
2742 		err = copy_to_user_policy_type(xp->type, skb);  in build_acquire()
2744 		err = xfrm_mark_put(skb, &xp->mark);  in build_acquire()
2755 			     struct xfrm_policy *xp)  in xfrm_send_acquire()  argument
2760 	skb = nlmsg_new(xfrm_acquire_msgsize(x, xp), GFP_ATOMIC);  in xfrm_send_acquire()
2764 	if (build_acquire(skb, x, xt, xp) < 0)  in xfrm_send_acquire()
2779 	struct xfrm_policy *xp;  in xfrm_compile_policy()  local
2815 	xp = xfrm_policy_alloc(net, GFP_ATOMIC);  in xfrm_compile_policy()
2816 	if (xp == NULL) {  in xfrm_compile_policy()
2821 	copy_from_user_policy(xp, p);  in xfrm_compile_policy()
2822 	xp->type = XFRM_POLICY_TYPE_MAIN;  in xfrm_compile_policy()
2823 	copy_templates(xp, ut, nr);  in xfrm_compile_policy()
2827 	return xp;  in xfrm_compile_policy()
2830 static inline size_t xfrm_polexpire_msgsize(struct xfrm_policy *xp)  in xfrm_polexpire_msgsize()  argument
2833 	       + nla_total_size(sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr)  in xfrm_polexpire_msgsize()
2834 	       + nla_total_size(xfrm_user_sec_ctx_size(xp->security))  in xfrm_polexpire_msgsize()
2839 static int build_polexpire(struct sk_buff *skb, struct xfrm_policy *xp,  in build_polexpire()  argument
2852 	copy_to_user_policy(xp, &upe->pol, dir);  in build_polexpire()
2853 	err = copy_to_user_tmpl(xp, skb);  in build_polexpire()
2855 		err = copy_to_user_sec_ctx(xp, skb);  in build_polexpire()
2857 		err = copy_to_user_policy_type(xp->type, skb);  in build_polexpire()
2859 		err = xfrm_mark_put(skb, &xp->mark);  in build_polexpire()
2870 static int xfrm_exp_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c)  in xfrm_exp_policy_notify()  argument
2872 	struct net *net = xp_net(xp);  in xfrm_exp_policy_notify()
2875 	skb = nlmsg_new(xfrm_polexpire_msgsize(xp), GFP_ATOMIC);  in xfrm_exp_policy_notify()
2879 	if (build_polexpire(skb, xp, dir, c) < 0)  in xfrm_exp_policy_notify()
2885 static int xfrm_notify_policy(struct xfrm_policy *xp, int dir, const struct km_event *c)  in xfrm_notify_policy()  argument
2887 	int len = nla_total_size(sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr);  in xfrm_notify_policy()
2888 	struct net *net = xp_net(xp);  in xfrm_notify_policy()
2921 			id->index = xp->index;  in xfrm_notify_policy()
2923 			memcpy(&id->sel, &xp->selector, sizeof(id->sel));  in xfrm_notify_policy()
2933 	copy_to_user_policy(xp, p, dir);  in xfrm_notify_policy()
2934 	err = copy_to_user_tmpl(xp, skb);  in xfrm_notify_policy()
2936 		err = copy_to_user_policy_type(xp->type, skb);  in xfrm_notify_policy()
2938 		err = xfrm_mark_put(skb, &xp->mark);  in xfrm_notify_policy()
2979 static int xfrm_send_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c)  in xfrm_send_policy_notify()  argument
2986 		return xfrm_notify_policy(xp, dir, c);  in xfrm_send_policy_notify()
2990 		return xfrm_exp_policy_notify(xp, dir, c);  in xfrm_send_policy_notify()