1910 static int check_reqid(struct xfrm_policy *xp, int dir, int count, void *ptr)  in check_reqid()  argument
1915 	for (i=0; i<xp->xfrm_nr; i++) {  in check_reqid()
1916 		if (xp->xfrm_vec[i].reqid == reqid)  in check_reqid()
1944 parse_ipsecrequest(struct xfrm_policy *xp, struct sadb_x_ipsecrequest *rq)  in parse_ipsecrequest()  argument
1946 	struct net *net = xp_net(xp);  in parse_ipsecrequest()
1947 	struct xfrm_tmpl *t = xp->xfrm_vec + xp->xfrm_nr;  in parse_ipsecrequest()
1950 	if (xp->xfrm_nr >= XFRM_MAX_DEPTH)  in parse_ipsecrequest()
1983 		t->encap_family = xp->family;  in parse_ipsecrequest()
1987 	xp->xfrm_nr++;  in parse_ipsecrequest()
1992 parse_ipsecrequests(struct xfrm_policy *xp, struct sadb_x_policy *pol)  in parse_ipsecrequests()  argument
2006 		if ((err = parse_ipsecrequest(xp, rq)) < 0)  in parse_ipsecrequests()
2014 static inline int pfkey_xfrm_policy2sec_ctx_size(const struct xfrm_policy *xp)  in pfkey_xfrm_policy2sec_ctx_size()  argument
2016 	struct xfrm_sec_ctx *xfrm_ctx = xp->security;  in pfkey_xfrm_policy2sec_ctx_size()
2026 static int pfkey_xfrm_policy2msg_size(const struct xfrm_policy *xp)  in pfkey_xfrm_policy2msg_size()  argument
2029 	int sockaddr_size = pfkey_sockaddr_size(xp->family);  in pfkey_xfrm_policy2msg_size()
2033 	for (i=0; i<xp->xfrm_nr; i++) {  in pfkey_xfrm_policy2msg_size()
2034 		t = xp->xfrm_vec + i;  in pfkey_xfrm_policy2msg_size()
2043 		(xp->xfrm_nr * sizeof(struct sadb_x_ipsecrequest)) +  in pfkey_xfrm_policy2msg_size()
2045 		pfkey_xfrm_policy2sec_ctx_size(xp);  in pfkey_xfrm_policy2msg_size()
2048 static struct sk_buff * pfkey_xfrm_policy2msg_prep(const struct xfrm_policy *xp)  in pfkey_xfrm_policy2msg_prep()  argument
2053 	size = pfkey_xfrm_policy2msg_size(xp);  in pfkey_xfrm_policy2msg_prep()
2062 static int pfkey_xfrm_policy2msg(struct sk_buff *skb, const struct xfrm_policy *xp, int dir)  in pfkey_xfrm_policy2msg()  argument
2072 	int sockaddr_size = pfkey_sockaddr_size(xp->family);  in pfkey_xfrm_policy2msg()
2073 	int socklen = pfkey_sockaddr_len(xp->family);  in pfkey_xfrm_policy2msg()
2075 	size = pfkey_xfrm_policy2msg_size(xp);  in pfkey_xfrm_policy2msg()
2087 	addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto);  in pfkey_xfrm_policy2msg()
2088 	addr->sadb_address_prefixlen = xp->selector.prefixlen_s;  in pfkey_xfrm_policy2msg()
2090 	if (!pfkey_sockaddr_fill(&xp->selector.saddr,  in pfkey_xfrm_policy2msg()
2091 				 xp->selector.sport,  in pfkey_xfrm_policy2msg()
2093 				 xp->family))  in pfkey_xfrm_policy2msg()
2102 	addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto);  in pfkey_xfrm_policy2msg()
2103 	addr->sadb_address_prefixlen = xp->selector.prefixlen_d;  in pfkey_xfrm_policy2msg()
2106 	pfkey_sockaddr_fill(&xp->selector.daddr, xp->selector.dport,  in pfkey_xfrm_policy2msg()
2108 			    xp->family);  in pfkey_xfrm_policy2msg()
2115 	lifetime->sadb_lifetime_allocations =  _X2KEY(xp->lft.hard_packet_limit);  in pfkey_xfrm_policy2msg()
2116 	lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.hard_byte_limit);  in pfkey_xfrm_policy2msg()
2117 	lifetime->sadb_lifetime_addtime = xp->lft.hard_add_expires_seconds;  in pfkey_xfrm_policy2msg()
2118 	lifetime->sadb_lifetime_usetime = xp->lft.hard_use_expires_seconds;  in pfkey_xfrm_policy2msg()
2124 	lifetime->sadb_lifetime_allocations =  _X2KEY(xp->lft.soft_packet_limit);  in pfkey_xfrm_policy2msg()
2125 	lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.soft_byte_limit);  in pfkey_xfrm_policy2msg()
2126 	lifetime->sadb_lifetime_addtime = xp->lft.soft_add_expires_seconds;  in pfkey_xfrm_policy2msg()
2127 	lifetime->sadb_lifetime_usetime = xp->lft.soft_use_expires_seconds;  in pfkey_xfrm_policy2msg()
2133 	lifetime->sadb_lifetime_allocations = xp->curlft.packets;  in pfkey_xfrm_policy2msg()
2134 	lifetime->sadb_lifetime_bytes = xp->curlft.bytes;  in pfkey_xfrm_policy2msg()
2135 	lifetime->sadb_lifetime_addtime = xp->curlft.add_time;  in pfkey_xfrm_policy2msg()
2136 	lifetime->sadb_lifetime_usetime = xp->curlft.use_time;  in pfkey_xfrm_policy2msg()
2142 	if (xp->action == XFRM_POLICY_ALLOW) {  in pfkey_xfrm_policy2msg()
2143 		if (xp->xfrm_nr)  in pfkey_xfrm_policy2msg()
2150 	pol->sadb_x_policy_id = xp->index;  in pfkey_xfrm_policy2msg()
2151 	pol->sadb_x_policy_priority = xp->priority;  in pfkey_xfrm_policy2msg()
2153 	for (i=0; i<xp->xfrm_nr; i++) {  in pfkey_xfrm_policy2msg()
2154 		const struct xfrm_tmpl *t = xp->xfrm_vec + i;  in pfkey_xfrm_policy2msg()
2193 	if ((xfrm_ctx = xp->security)) {  in pfkey_xfrm_policy2msg()
2194 		int ctx_size = pfkey_xfrm_policy2sec_ctx_size(xp);  in pfkey_xfrm_policy2msg()
2207 	hdr->sadb_msg_reserved = refcount_read(&xp->refcnt);  in pfkey_xfrm_policy2msg()
2212 static int key_notify_policy(struct xfrm_policy *xp, int dir, const struct km_event *c)  in key_notify_policy()  argument
2218 	out_skb = pfkey_xfrm_policy2msg_prep(xp);  in key_notify_policy()
2222 	err = pfkey_xfrm_policy2msg(out_skb, xp, dir);  in key_notify_policy()
2238 	pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ALL, NULL, xp_net(xp));  in key_notify_policy()
2250 	struct xfrm_policy *xp;  in pfkey_spdadd()  local
2265 	xp = xfrm_policy_alloc(net, GFP_KERNEL);  in pfkey_spdadd()
2266 	if (xp == NULL)  in pfkey_spdadd()
2269 	xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?  in pfkey_spdadd()
2271 	xp->priority = pol->sadb_x_policy_priority;  in pfkey_spdadd()
2274 	xp->family = pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.saddr);  in pfkey_spdadd()
2275 	xp->selector.family = xp->family;  in pfkey_spdadd()
2276 	xp->selector.prefixlen_s = sa->sadb_address_prefixlen;  in pfkey_spdadd()
2277 	xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);  in pfkey_spdadd()
2278 	xp->selector.sport = ((struct sockaddr_in *)(sa+1))->sin_port;  in pfkey_spdadd()
2279 	if (xp->selector.sport)  in pfkey_spdadd()
2280 		xp->selector.sport_mask = htons(0xffff);  in pfkey_spdadd()
2283 	pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.daddr);  in pfkey_spdadd()
2284 	xp->selector.prefixlen_d = sa->sadb_address_prefixlen;  in pfkey_spdadd()
2289 	xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);  in pfkey_spdadd()
2291 	xp->selector.dport = ((struct sockaddr_in *)(sa+1))->sin_port;  in pfkey_spdadd()
2292 	if (xp->selector.dport)  in pfkey_spdadd()
2293 		xp->selector.dport_mask = htons(0xffff);  in pfkey_spdadd()
2304 		err = security_xfrm_policy_alloc(&xp->security, uctx, GFP_KERNEL);  in pfkey_spdadd()
2311 	xp->lft.soft_byte_limit = XFRM_INF;  in pfkey_spdadd()
2312 	xp->lft.hard_byte_limit = XFRM_INF;  in pfkey_spdadd()
2313 	xp->lft.soft_packet_limit = XFRM_INF;  in pfkey_spdadd()
2314 	xp->lft.hard_packet_limit = XFRM_INF;  in pfkey_spdadd()
2316 		xp->lft.hard_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);  in pfkey_spdadd()
2317 		xp->lft.hard_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);  in pfkey_spdadd()
2318 		xp->lft.hard_add_expires_seconds = lifetime->sadb_lifetime_addtime;  in pfkey_spdadd()
2319 		xp->lft.hard_use_expires_seconds = lifetime->sadb_lifetime_usetime;  in pfkey_spdadd()
2322 		xp->lft.soft_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);  in pfkey_spdadd()
2323 		xp->lft.soft_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);  in pfkey_spdadd()
2324 		xp->lft.soft_add_expires_seconds = lifetime->sadb_lifetime_addtime;  in pfkey_spdadd()
2325 		xp->lft.soft_use_expires_seconds = lifetime->sadb_lifetime_usetime;  in pfkey_spdadd()
2327 	xp->xfrm_nr = 0;  in pfkey_spdadd()
2329 	    (err = parse_ipsecrequests(xp, pol)) < 0)  in pfkey_spdadd()
2332 	err = xfrm_policy_insert(pol->sadb_x_policy_dir-1, xp,  in pfkey_spdadd()
2335 	xfrm_audit_policy_add(xp, err ? 0 : 1, true);  in pfkey_spdadd()
2348 	km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c);  in pfkey_spdadd()
2349 	xfrm_pol_put(xp);  in pfkey_spdadd()
2353 	xp->walk.dead = 1;  in pfkey_spdadd()
2354 	xfrm_policy_destroy(xp);  in pfkey_spdadd()
2364 	struct xfrm_policy *xp;  in pfkey_spddelete()  local
2410 	xp = xfrm_policy_bysel_ctx(net, &dummy_mark, 0, XFRM_POLICY_TYPE_MAIN,  in pfkey_spddelete()
2414 	if (xp == NULL)  in pfkey_spddelete()
2417 	xfrm_audit_policy_delete(xp, err ? 0 : 1, true);  in pfkey_spddelete()
2426 	km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c);  in pfkey_spddelete()
2429 	xfrm_pol_put(xp);  in pfkey_spddelete()
2433 static int key_pol_get_resp(struct sock *sk, struct xfrm_policy *xp, const struct sadb_msg *hdr, in…  in key_pol_get_resp()  argument
2440 	out_skb = pfkey_xfrm_policy2msg_prep(xp);  in key_pol_get_resp()
2445 	err = pfkey_xfrm_policy2msg(out_skb, xp, dir);  in key_pol_get_resp()
2458 	pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ONE, sk, xp_net(xp));  in key_pol_get_resp()
2650 	struct xfrm_policy *xp;  in pfkey_spdget()  local
2661 	xp = xfrm_policy_byid(net, &dummy_mark, 0, XFRM_POLICY_TYPE_MAIN,  in pfkey_spdget()
2663 	if (xp == NULL)  in pfkey_spdget()
2667 		xfrm_audit_policy_delete(xp, err ? 0 : 1, true);  in pfkey_spdget()
2675 		km_policy_notify(xp, dir, &c);  in pfkey_spdget()
2677 		err = key_pol_get_resp(sk, xp, hdr, dir);  in pfkey_spdget()
2681 	xfrm_pol_put(xp);  in pfkey_spdget()
2685 static int dump_sp(struct xfrm_policy *xp, int dir, int count, void *ptr)  in dump_sp()  argument
2695 	out_skb = pfkey_xfrm_policy2msg_prep(xp);  in dump_sp()
2699 	err = pfkey_xfrm_policy2msg(out_skb, xp, dir);  in dump_sp()
3023 static int key_notify_policy_expire(struct xfrm_policy *xp, const struct km_event *c)  in key_notify_policy_expire()  argument
3086 static int pfkey_send_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c)  in pfkey_send_policy_notify()  argument
3088 	if (xp && xp->type != XFRM_POLICY_TYPE_MAIN)  in pfkey_send_policy_notify()
3093 		return key_notify_policy_expire(xp, c);  in pfkey_send_policy_notify()
3097 		return key_notify_policy(xp, dir, c);  in pfkey_send_policy_notify()
3139 static int pfkey_send_acquire(struct xfrm_state *x, struct xfrm_tmpl *t, struct xfrm_policy *xp)  in pfkey_send_acquire()  argument
3220 	pol->sadb_x_policy_id = xp->index;  in pfkey_send_acquire()
3221 	pol->sadb_x_policy_priority = xp->priority;  in pfkey_send_acquire()
3251 	struct xfrm_policy *xp;  in pfkey_compile_policy()  local
3283 	xp = xfrm_policy_alloc(net, GFP_ATOMIC);  in pfkey_compile_policy()
3284 	if (xp == NULL) {  in pfkey_compile_policy()
3289 	xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?  in pfkey_compile_policy()
3292 	xp->lft.soft_byte_limit = XFRM_INF;  in pfkey_compile_policy()
3293 	xp->lft.hard_byte_limit = XFRM_INF;  in pfkey_compile_policy()
3294 	xp->lft.soft_packet_limit = XFRM_INF;  in pfkey_compile_policy()
3295 	xp->lft.hard_packet_limit = XFRM_INF;  in pfkey_compile_policy()
3296 	xp->family = sk->sk_family;  in pfkey_compile_policy()
3298 	xp->xfrm_nr = 0;  in pfkey_compile_policy()
3300 	    (*dir = parse_ipsecrequests(xp, pol)) < 0)  in pfkey_compile_policy()
3319 		*dir = security_xfrm_policy_alloc(&xp->security, uctx, GFP_ATOMIC);  in pfkey_compile_policy()
3327 	return xp;  in pfkey_compile_policy()
3330 	xp->walk.dead = 1;  in pfkey_compile_policy()
3331 	xfrm_policy_destroy(xp);  in pfkey_compile_policy()