Lines Matching refs:xp
1854 static int check_reqid(struct xfrm_policy *xp, int dir, int count, void *ptr) in check_reqid() argument
1859 for (i=0; i<xp->xfrm_nr; i++) { in check_reqid()
1860 if (xp->xfrm_vec[i].reqid == reqid) in check_reqid()
1888 parse_ipsecrequest(struct xfrm_policy *xp, struct sadb_x_ipsecrequest *rq) in parse_ipsecrequest() argument
1890 struct net *net = xp_net(xp); in parse_ipsecrequest()
1891 struct xfrm_tmpl *t = xp->xfrm_vec + xp->xfrm_nr; in parse_ipsecrequest()
1894 if (xp->xfrm_nr >= XFRM_MAX_DEPTH) in parse_ipsecrequest()
1930 t->encap_family = xp->family; in parse_ipsecrequest()
1934 xp->xfrm_nr++; in parse_ipsecrequest()
1939 parse_ipsecrequests(struct xfrm_policy *xp, struct sadb_x_policy *pol) in parse_ipsecrequests() argument
1949 if ((err = parse_ipsecrequest(xp, rq)) < 0) in parse_ipsecrequests()
1957 static inline int pfkey_xfrm_policy2sec_ctx_size(const struct xfrm_policy *xp) in pfkey_xfrm_policy2sec_ctx_size() argument
1959 struct xfrm_sec_ctx *xfrm_ctx = xp->security; in pfkey_xfrm_policy2sec_ctx_size()
1969 static int pfkey_xfrm_policy2msg_size(const struct xfrm_policy *xp) in pfkey_xfrm_policy2msg_size() argument
1972 int sockaddr_size = pfkey_sockaddr_size(xp->family); in pfkey_xfrm_policy2msg_size()
1976 for (i=0; i<xp->xfrm_nr; i++) { in pfkey_xfrm_policy2msg_size()
1977 t = xp->xfrm_vec + i; in pfkey_xfrm_policy2msg_size()
1986 (xp->xfrm_nr * sizeof(struct sadb_x_ipsecrequest)) + in pfkey_xfrm_policy2msg_size()
1988 pfkey_xfrm_policy2sec_ctx_size(xp); in pfkey_xfrm_policy2msg_size()
1991 static struct sk_buff * pfkey_xfrm_policy2msg_prep(const struct xfrm_policy *xp) in pfkey_xfrm_policy2msg_prep() argument
1996 size = pfkey_xfrm_policy2msg_size(xp); in pfkey_xfrm_policy2msg_prep()
2005 static int pfkey_xfrm_policy2msg(struct sk_buff *skb, const struct xfrm_policy *xp, int dir) in pfkey_xfrm_policy2msg() argument
2015 int sockaddr_size = pfkey_sockaddr_size(xp->family); in pfkey_xfrm_policy2msg()
2016 int socklen = pfkey_sockaddr_len(xp->family); in pfkey_xfrm_policy2msg()
2018 size = pfkey_xfrm_policy2msg_size(xp); in pfkey_xfrm_policy2msg()
2031 addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto); in pfkey_xfrm_policy2msg()
2032 addr->sadb_address_prefixlen = xp->selector.prefixlen_s; in pfkey_xfrm_policy2msg()
2034 if (!pfkey_sockaddr_fill(&xp->selector.saddr, in pfkey_xfrm_policy2msg()
2035 xp->selector.sport, in pfkey_xfrm_policy2msg()
2037 xp->family)) in pfkey_xfrm_policy2msg()
2047 addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto); in pfkey_xfrm_policy2msg()
2048 addr->sadb_address_prefixlen = xp->selector.prefixlen_d; in pfkey_xfrm_policy2msg()
2051 pfkey_sockaddr_fill(&xp->selector.daddr, xp->selector.dport, in pfkey_xfrm_policy2msg()
2053 xp->family); in pfkey_xfrm_policy2msg()
2061 lifetime->sadb_lifetime_allocations = _X2KEY(xp->lft.hard_packet_limit); in pfkey_xfrm_policy2msg()
2062 lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.hard_byte_limit); in pfkey_xfrm_policy2msg()
2063 lifetime->sadb_lifetime_addtime = xp->lft.hard_add_expires_seconds; in pfkey_xfrm_policy2msg()
2064 lifetime->sadb_lifetime_usetime = xp->lft.hard_use_expires_seconds; in pfkey_xfrm_policy2msg()
2071 lifetime->sadb_lifetime_allocations = _X2KEY(xp->lft.soft_packet_limit); in pfkey_xfrm_policy2msg()
2072 lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.soft_byte_limit); in pfkey_xfrm_policy2msg()
2073 lifetime->sadb_lifetime_addtime = xp->lft.soft_add_expires_seconds; in pfkey_xfrm_policy2msg()
2074 lifetime->sadb_lifetime_usetime = xp->lft.soft_use_expires_seconds; in pfkey_xfrm_policy2msg()
2081 lifetime->sadb_lifetime_allocations = xp->curlft.packets; in pfkey_xfrm_policy2msg()
2082 lifetime->sadb_lifetime_bytes = xp->curlft.bytes; in pfkey_xfrm_policy2msg()
2083 lifetime->sadb_lifetime_addtime = xp->curlft.add_time; in pfkey_xfrm_policy2msg()
2084 lifetime->sadb_lifetime_usetime = xp->curlft.use_time; in pfkey_xfrm_policy2msg()
2090 if (xp->action == XFRM_POLICY_ALLOW) { in pfkey_xfrm_policy2msg()
2091 if (xp->xfrm_nr) in pfkey_xfrm_policy2msg()
2098 pol->sadb_x_policy_id = xp->index; in pfkey_xfrm_policy2msg()
2099 pol->sadb_x_policy_priority = xp->priority; in pfkey_xfrm_policy2msg()
2101 for (i=0; i<xp->xfrm_nr; i++) { in pfkey_xfrm_policy2msg()
2102 const struct xfrm_tmpl *t = xp->xfrm_vec + i; in pfkey_xfrm_policy2msg()
2141 if ((xfrm_ctx = xp->security)) { in pfkey_xfrm_policy2msg()
2142 int ctx_size = pfkey_xfrm_policy2sec_ctx_size(xp); in pfkey_xfrm_policy2msg()
2155 hdr->sadb_msg_reserved = atomic_read(&xp->refcnt); in pfkey_xfrm_policy2msg()
2160 static int key_notify_policy(struct xfrm_policy *xp, int dir, const struct km_event *c) in key_notify_policy() argument
2166 out_skb = pfkey_xfrm_policy2msg_prep(xp); in key_notify_policy()
2170 err = pfkey_xfrm_policy2msg(out_skb, xp, dir); in key_notify_policy()
2184 pfkey_broadcast(out_skb, BROADCAST_ALL, NULL, xp_net(xp)); in key_notify_policy()
2196 struct xfrm_policy *xp; in pfkey_spdadd() local
2211 xp = xfrm_policy_alloc(net, GFP_KERNEL); in pfkey_spdadd()
2212 if (xp == NULL) in pfkey_spdadd()
2215 xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ? in pfkey_spdadd()
2217 xp->priority = pol->sadb_x_policy_priority; in pfkey_spdadd()
2220 xp->family = pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.saddr); in pfkey_spdadd()
2221 xp->selector.family = xp->family; in pfkey_spdadd()
2222 xp->selector.prefixlen_s = sa->sadb_address_prefixlen; in pfkey_spdadd()
2223 xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto); in pfkey_spdadd()
2224 xp->selector.sport = ((struct sockaddr_in *)(sa+1))->sin_port; in pfkey_spdadd()
2225 if (xp->selector.sport) in pfkey_spdadd()
2226 xp->selector.sport_mask = htons(0xffff); in pfkey_spdadd()
2229 pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.daddr); in pfkey_spdadd()
2230 xp->selector.prefixlen_d = sa->sadb_address_prefixlen; in pfkey_spdadd()
2235 xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto); in pfkey_spdadd()
2237 xp->selector.dport = ((struct sockaddr_in *)(sa+1))->sin_port; in pfkey_spdadd()
2238 if (xp->selector.dport) in pfkey_spdadd()
2239 xp->selector.dport_mask = htons(0xffff); in pfkey_spdadd()
2250 err = security_xfrm_policy_alloc(&xp->security, uctx, GFP_KERNEL); in pfkey_spdadd()
2257 xp->lft.soft_byte_limit = XFRM_INF; in pfkey_spdadd()
2258 xp->lft.hard_byte_limit = XFRM_INF; in pfkey_spdadd()
2259 xp->lft.soft_packet_limit = XFRM_INF; in pfkey_spdadd()
2260 xp->lft.hard_packet_limit = XFRM_INF; in pfkey_spdadd()
2262 xp->lft.hard_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations); in pfkey_spdadd()
2263 xp->lft.hard_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes); in pfkey_spdadd()
2264 xp->lft.hard_add_expires_seconds = lifetime->sadb_lifetime_addtime; in pfkey_spdadd()
2265 xp->lft.hard_use_expires_seconds = lifetime->sadb_lifetime_usetime; in pfkey_spdadd()
2268 xp->lft.soft_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations); in pfkey_spdadd()
2269 xp->lft.soft_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes); in pfkey_spdadd()
2270 xp->lft.soft_add_expires_seconds = lifetime->sadb_lifetime_addtime; in pfkey_spdadd()
2271 xp->lft.soft_use_expires_seconds = lifetime->sadb_lifetime_usetime; in pfkey_spdadd()
2273 xp->xfrm_nr = 0; in pfkey_spdadd()
2275 (err = parse_ipsecrequests(xp, pol)) < 0) in pfkey_spdadd()
2278 err = xfrm_policy_insert(pol->sadb_x_policy_dir-1, xp, in pfkey_spdadd()
2281 xfrm_audit_policy_add(xp, err ? 0 : 1, true); in pfkey_spdadd()
2294 km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c); in pfkey_spdadd()
2295 xfrm_pol_put(xp); in pfkey_spdadd()
2299 xp->walk.dead = 1; in pfkey_spdadd()
2300 xfrm_policy_destroy(xp); in pfkey_spdadd()
2310 struct xfrm_policy *xp; in pfkey_spddelete() local
2356 xp = xfrm_policy_bysel_ctx(net, DUMMY_MARK, XFRM_POLICY_TYPE_MAIN, in pfkey_spddelete()
2360 if (xp == NULL) in pfkey_spddelete()
2363 xfrm_audit_policy_delete(xp, err ? 0 : 1, true); in pfkey_spddelete()
2372 km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c); in pfkey_spddelete()
2375 xfrm_pol_put(xp); in pfkey_spddelete()
2381 static int key_pol_get_resp(struct sock *sk, struct xfrm_policy *xp, const struct sadb_msg *hdr, in… in key_pol_get_resp() argument
2388 out_skb = pfkey_xfrm_policy2msg_prep(xp); in key_pol_get_resp()
2393 err = pfkey_xfrm_policy2msg(out_skb, xp, dir); in key_pol_get_resp()
2404 pfkey_broadcast(out_skb, BROADCAST_ONE, sk, xp_net(xp)); in key_pol_get_resp()
2594 struct xfrm_policy *xp; in pfkey_spdget() local
2605 xp = xfrm_policy_byid(net, DUMMY_MARK, XFRM_POLICY_TYPE_MAIN, in pfkey_spdget()
2607 if (xp == NULL) in pfkey_spdget()
2611 xfrm_audit_policy_delete(xp, err ? 0 : 1, true); in pfkey_spdget()
2619 km_policy_notify(xp, dir, &c); in pfkey_spdget()
2621 err = key_pol_get_resp(sk, xp, hdr, dir); in pfkey_spdget()
2625 xfrm_pol_put(xp); in pfkey_spdget()
2631 static int dump_sp(struct xfrm_policy *xp, int dir, int count, void *ptr) in dump_sp() argument
2641 out_skb = pfkey_xfrm_policy2msg_prep(xp); in dump_sp()
2645 err = pfkey_xfrm_policy2msg(out_skb, xp, dir); in dump_sp()
2964 static int key_notify_policy_expire(struct xfrm_policy *xp, const struct km_event *c) in key_notify_policy_expire() argument
3026 static int pfkey_send_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c) in pfkey_send_policy_notify() argument
3028 if (xp && xp->type != XFRM_POLICY_TYPE_MAIN) in pfkey_send_policy_notify()
3033 return key_notify_policy_expire(xp, c); in pfkey_send_policy_notify()
3037 return key_notify_policy(xp, dir, c); in pfkey_send_policy_notify()
3079 static int pfkey_send_acquire(struct xfrm_state *x, struct xfrm_tmpl *t, struct xfrm_policy *xp) in pfkey_send_acquire() argument
3162 pol->sadb_x_policy_id = xp->index; in pfkey_send_acquire()
3163 pol->sadb_x_policy_priority = xp->priority; in pfkey_send_acquire()
3192 struct xfrm_policy *xp; in pfkey_compile_policy() local
3224 xp = xfrm_policy_alloc(net, GFP_ATOMIC); in pfkey_compile_policy()
3225 if (xp == NULL) { in pfkey_compile_policy()
3230 xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ? in pfkey_compile_policy()
3233 xp->lft.soft_byte_limit = XFRM_INF; in pfkey_compile_policy()
3234 xp->lft.hard_byte_limit = XFRM_INF; in pfkey_compile_policy()
3235 xp->lft.soft_packet_limit = XFRM_INF; in pfkey_compile_policy()
3236 xp->lft.hard_packet_limit = XFRM_INF; in pfkey_compile_policy()
3237 xp->family = sk->sk_family; in pfkey_compile_policy()
3239 xp->xfrm_nr = 0; in pfkey_compile_policy()
3241 (*dir = parse_ipsecrequests(xp, pol)) < 0) in pfkey_compile_policy()
3260 *dir = security_xfrm_policy_alloc(&xp->security, uctx, GFP_ATOMIC); in pfkey_compile_policy()
3268 return xp; in pfkey_compile_policy()
3271 xp->walk.dead = 1; in pfkey_compile_policy()
3272 xfrm_policy_destroy(xp); in pfkey_compile_policy()