1906 static int check_reqid(struct xfrm_policy *xp, int dir, int count, void *ptr)  in check_reqid()  argument
1911 	for (i=0; i<xp->xfrm_nr; i++) {  in check_reqid()
1912 		if (xp->xfrm_vec[i].reqid == reqid)  in check_reqid()
1940 parse_ipsecrequest(struct xfrm_policy *xp, struct sadb_x_ipsecrequest *rq)  in parse_ipsecrequest()  argument
1942 	struct net *net = xp_net(xp);  in parse_ipsecrequest()
1943 	struct xfrm_tmpl *t = xp->xfrm_vec + xp->xfrm_nr;  in parse_ipsecrequest()
1946 	if (xp->xfrm_nr >= XFRM_MAX_DEPTH)  in parse_ipsecrequest()
1979 		t->encap_family = xp->family;  in parse_ipsecrequest()
1983 	xp->xfrm_nr++;  in parse_ipsecrequest()
1988 parse_ipsecrequests(struct xfrm_policy *xp, struct sadb_x_policy *pol)  in parse_ipsecrequests()  argument
2002 		if ((err = parse_ipsecrequest(xp, rq)) < 0)  in parse_ipsecrequests()
2010 static inline int pfkey_xfrm_policy2sec_ctx_size(const struct xfrm_policy *xp)  in pfkey_xfrm_policy2sec_ctx_size()  argument
2012 	struct xfrm_sec_ctx *xfrm_ctx = xp->security;  in pfkey_xfrm_policy2sec_ctx_size()
2022 static int pfkey_xfrm_policy2msg_size(const struct xfrm_policy *xp)  in pfkey_xfrm_policy2msg_size()  argument
2025 	int sockaddr_size = pfkey_sockaddr_size(xp->family);  in pfkey_xfrm_policy2msg_size()
2029 	for (i=0; i<xp->xfrm_nr; i++) {  in pfkey_xfrm_policy2msg_size()
2030 		t = xp->xfrm_vec + i;  in pfkey_xfrm_policy2msg_size()
2039 		(xp->xfrm_nr * sizeof(struct sadb_x_ipsecrequest)) +  in pfkey_xfrm_policy2msg_size()
2041 		pfkey_xfrm_policy2sec_ctx_size(xp);  in pfkey_xfrm_policy2msg_size()
2044 static struct sk_buff * pfkey_xfrm_policy2msg_prep(const struct xfrm_policy *xp)  in pfkey_xfrm_policy2msg_prep()  argument
2049 	size = pfkey_xfrm_policy2msg_size(xp);  in pfkey_xfrm_policy2msg_prep()
2058 static int pfkey_xfrm_policy2msg(struct sk_buff *skb, const struct xfrm_policy *xp, int dir)  in pfkey_xfrm_policy2msg()  argument
2068 	int sockaddr_size = pfkey_sockaddr_size(xp->family);  in pfkey_xfrm_policy2msg()
2069 	int socklen = pfkey_sockaddr_len(xp->family);  in pfkey_xfrm_policy2msg()
2071 	size = pfkey_xfrm_policy2msg_size(xp);  in pfkey_xfrm_policy2msg()
2083 	addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto);  in pfkey_xfrm_policy2msg()
2084 	addr->sadb_address_prefixlen = xp->selector.prefixlen_s;  in pfkey_xfrm_policy2msg()
2086 	if (!pfkey_sockaddr_fill(&xp->selector.saddr,  in pfkey_xfrm_policy2msg()
2087 				 xp->selector.sport,  in pfkey_xfrm_policy2msg()
2089 				 xp->family))  in pfkey_xfrm_policy2msg()
2098 	addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto);  in pfkey_xfrm_policy2msg()
2099 	addr->sadb_address_prefixlen = xp->selector.prefixlen_d;  in pfkey_xfrm_policy2msg()
2102 	pfkey_sockaddr_fill(&xp->selector.daddr, xp->selector.dport,  in pfkey_xfrm_policy2msg()
2104 			    xp->family);  in pfkey_xfrm_policy2msg()
2111 	lifetime->sadb_lifetime_allocations =  _X2KEY(xp->lft.hard_packet_limit);  in pfkey_xfrm_policy2msg()
2112 	lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.hard_byte_limit);  in pfkey_xfrm_policy2msg()
2113 	lifetime->sadb_lifetime_addtime = xp->lft.hard_add_expires_seconds;  in pfkey_xfrm_policy2msg()
2114 	lifetime->sadb_lifetime_usetime = xp->lft.hard_use_expires_seconds;  in pfkey_xfrm_policy2msg()
2120 	lifetime->sadb_lifetime_allocations =  _X2KEY(xp->lft.soft_packet_limit);  in pfkey_xfrm_policy2msg()
2121 	lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.soft_byte_limit);  in pfkey_xfrm_policy2msg()
2122 	lifetime->sadb_lifetime_addtime = xp->lft.soft_add_expires_seconds;  in pfkey_xfrm_policy2msg()
2123 	lifetime->sadb_lifetime_usetime = xp->lft.soft_use_expires_seconds;  in pfkey_xfrm_policy2msg()
2129 	lifetime->sadb_lifetime_allocations = xp->curlft.packets;  in pfkey_xfrm_policy2msg()
2130 	lifetime->sadb_lifetime_bytes = xp->curlft.bytes;  in pfkey_xfrm_policy2msg()
2131 	lifetime->sadb_lifetime_addtime = xp->curlft.add_time;  in pfkey_xfrm_policy2msg()
2132 	lifetime->sadb_lifetime_usetime = xp->curlft.use_time;  in pfkey_xfrm_policy2msg()
2138 	if (xp->action == XFRM_POLICY_ALLOW) {  in pfkey_xfrm_policy2msg()
2139 		if (xp->xfrm_nr)  in pfkey_xfrm_policy2msg()
2146 	pol->sadb_x_policy_id = xp->index;  in pfkey_xfrm_policy2msg()
2147 	pol->sadb_x_policy_priority = xp->priority;  in pfkey_xfrm_policy2msg()
2149 	for (i=0; i<xp->xfrm_nr; i++) {  in pfkey_xfrm_policy2msg()
2150 		const struct xfrm_tmpl *t = xp->xfrm_vec + i;  in pfkey_xfrm_policy2msg()
2189 	if ((xfrm_ctx = xp->security)) {  in pfkey_xfrm_policy2msg()
2190 		int ctx_size = pfkey_xfrm_policy2sec_ctx_size(xp);  in pfkey_xfrm_policy2msg()
2203 	hdr->sadb_msg_reserved = refcount_read(&xp->refcnt);  in pfkey_xfrm_policy2msg()
2208 static int key_notify_policy(struct xfrm_policy *xp, int dir, const struct km_event *c)  in key_notify_policy()  argument
2214 	out_skb = pfkey_xfrm_policy2msg_prep(xp);  in key_notify_policy()
2218 	err = pfkey_xfrm_policy2msg(out_skb, xp, dir);  in key_notify_policy()
2234 	pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ALL, NULL, xp_net(xp));  in key_notify_policy()
2246 	struct xfrm_policy *xp;  in pfkey_spdadd()  local
2261 	xp = xfrm_policy_alloc(net, GFP_KERNEL);  in pfkey_spdadd()
2262 	if (xp == NULL)  in pfkey_spdadd()
2265 	xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?  in pfkey_spdadd()
2267 	xp->priority = pol->sadb_x_policy_priority;  in pfkey_spdadd()
2270 	xp->family = pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.saddr);  in pfkey_spdadd()
2271 	xp->selector.family = xp->family;  in pfkey_spdadd()
2272 	xp->selector.prefixlen_s = sa->sadb_address_prefixlen;  in pfkey_spdadd()
2273 	xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);  in pfkey_spdadd()
2274 	xp->selector.sport = ((struct sockaddr_in *)(sa+1))->sin_port;  in pfkey_spdadd()
2275 	if (xp->selector.sport)  in pfkey_spdadd()
2276 		xp->selector.sport_mask = htons(0xffff);  in pfkey_spdadd()
2279 	pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.daddr);  in pfkey_spdadd()
2280 	xp->selector.prefixlen_d = sa->sadb_address_prefixlen;  in pfkey_spdadd()
2285 	xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);  in pfkey_spdadd()
2287 	xp->selector.dport = ((struct sockaddr_in *)(sa+1))->sin_port;  in pfkey_spdadd()
2288 	if (xp->selector.dport)  in pfkey_spdadd()
2289 		xp->selector.dport_mask = htons(0xffff);  in pfkey_spdadd()
2300 		err = security_xfrm_policy_alloc(&xp->security, uctx, GFP_KERNEL);  in pfkey_spdadd()
2307 	xp->lft.soft_byte_limit = XFRM_INF;  in pfkey_spdadd()
2308 	xp->lft.hard_byte_limit = XFRM_INF;  in pfkey_spdadd()
2309 	xp->lft.soft_packet_limit = XFRM_INF;  in pfkey_spdadd()
2310 	xp->lft.hard_packet_limit = XFRM_INF;  in pfkey_spdadd()
2312 		xp->lft.hard_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);  in pfkey_spdadd()
2313 		xp->lft.hard_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);  in pfkey_spdadd()
2314 		xp->lft.hard_add_expires_seconds = lifetime->sadb_lifetime_addtime;  in pfkey_spdadd()
2315 		xp->lft.hard_use_expires_seconds = lifetime->sadb_lifetime_usetime;  in pfkey_spdadd()
2318 		xp->lft.soft_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);  in pfkey_spdadd()
2319 		xp->lft.soft_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);  in pfkey_spdadd()
2320 		xp->lft.soft_add_expires_seconds = lifetime->sadb_lifetime_addtime;  in pfkey_spdadd()
2321 		xp->lft.soft_use_expires_seconds = lifetime->sadb_lifetime_usetime;  in pfkey_spdadd()
2323 	xp->xfrm_nr = 0;  in pfkey_spdadd()
2325 	    (err = parse_ipsecrequests(xp, pol)) < 0)  in pfkey_spdadd()
2328 	err = xfrm_policy_insert(pol->sadb_x_policy_dir-1, xp,  in pfkey_spdadd()
2331 	xfrm_audit_policy_add(xp, err ? 0 : 1, true);  in pfkey_spdadd()
2344 	km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c);  in pfkey_spdadd()
2345 	xfrm_pol_put(xp);  in pfkey_spdadd()
2349 	xp->walk.dead = 1;  in pfkey_spdadd()
2350 	xfrm_policy_destroy(xp);  in pfkey_spdadd()
2360 	struct xfrm_policy *xp;  in pfkey_spddelete()  local
2406 	xp = xfrm_policy_bysel_ctx(net, &dummy_mark, 0, XFRM_POLICY_TYPE_MAIN,  in pfkey_spddelete()
2410 	if (xp == NULL)  in pfkey_spddelete()
2413 	xfrm_audit_policy_delete(xp, err ? 0 : 1, true);  in pfkey_spddelete()
2422 	km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c);  in pfkey_spddelete()
2425 	xfrm_pol_put(xp);  in pfkey_spddelete()
2429 static int key_pol_get_resp(struct sock *sk, struct xfrm_policy *xp, const struct sadb_msg *hdr, in…  in key_pol_get_resp()  argument
2436 	out_skb = pfkey_xfrm_policy2msg_prep(xp);  in key_pol_get_resp()
2441 	err = pfkey_xfrm_policy2msg(out_skb, xp, dir);  in key_pol_get_resp()
2454 	pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ONE, sk, xp_net(xp));  in key_pol_get_resp()
2646 	struct xfrm_policy *xp;  in pfkey_spdget()  local
2657 	xp = xfrm_policy_byid(net, &dummy_mark, 0, XFRM_POLICY_TYPE_MAIN,  in pfkey_spdget()
2659 	if (xp == NULL)  in pfkey_spdget()
2663 		xfrm_audit_policy_delete(xp, err ? 0 : 1, true);  in pfkey_spdget()
2671 		km_policy_notify(xp, dir, &c);  in pfkey_spdget()
2673 		err = key_pol_get_resp(sk, xp, hdr, dir);  in pfkey_spdget()
2677 	xfrm_pol_put(xp);  in pfkey_spdget()
2681 static int dump_sp(struct xfrm_policy *xp, int dir, int count, void *ptr)  in dump_sp()  argument
2691 	out_skb = pfkey_xfrm_policy2msg_prep(xp);  in dump_sp()
2695 	err = pfkey_xfrm_policy2msg(out_skb, xp, dir);  in dump_sp()
3019 static int key_notify_policy_expire(struct xfrm_policy *xp, const struct km_event *c)  in key_notify_policy_expire()  argument
3082 static int pfkey_send_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c)  in pfkey_send_policy_notify()  argument
3084 	if (xp && xp->type != XFRM_POLICY_TYPE_MAIN)  in pfkey_send_policy_notify()
3089 		return key_notify_policy_expire(xp, c);  in pfkey_send_policy_notify()
3093 		return key_notify_policy(xp, dir, c);  in pfkey_send_policy_notify()
3135 static int pfkey_send_acquire(struct xfrm_state *x, struct xfrm_tmpl *t, struct xfrm_policy *xp)  in pfkey_send_acquire()  argument
3216 	pol->sadb_x_policy_id = xp->index;  in pfkey_send_acquire()
3217 	pol->sadb_x_policy_priority = xp->priority;  in pfkey_send_acquire()
3247 	struct xfrm_policy *xp;  in pfkey_compile_policy()  local
3279 	xp = xfrm_policy_alloc(net, GFP_ATOMIC);  in pfkey_compile_policy()
3280 	if (xp == NULL) {  in pfkey_compile_policy()
3285 	xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?  in pfkey_compile_policy()
3288 	xp->lft.soft_byte_limit = XFRM_INF;  in pfkey_compile_policy()
3289 	xp->lft.hard_byte_limit = XFRM_INF;  in pfkey_compile_policy()
3290 	xp->lft.soft_packet_limit = XFRM_INF;  in pfkey_compile_policy()
3291 	xp->lft.hard_packet_limit = XFRM_INF;  in pfkey_compile_policy()
3292 	xp->family = sk->sk_family;  in pfkey_compile_policy()
3294 	xp->xfrm_nr = 0;  in pfkey_compile_policy()
3296 	    (*dir = parse_ipsecrequests(xp, pol)) < 0)  in pfkey_compile_policy()
3315 		*dir = security_xfrm_policy_alloc(&xp->security, uctx, GFP_ATOMIC);  in pfkey_compile_policy()
3323 	return xp;  in pfkey_compile_policy()
3326 	xp->walk.dead = 1;  in pfkey_compile_policy()
3327 	xfrm_policy_destroy(xp);  in pfkey_compile_policy()