1683 static void copy_templates(struct xfrm_policy *xp, struct xfrm_user_tmpl *ut,  in copy_templates()  argument
1688 	xp->xfrm_nr = nr;  in copy_templates()
1690 		struct xfrm_tmpl *t = &xp->xfrm_vec[i];  in copy_templates()
1813 static void copy_from_user_policy(struct xfrm_policy *xp, struct xfrm_userpolicy_info *p)  in copy_from_user_policy()  argument
1815 	xp->priority = p->priority;  in copy_from_user_policy()
1816 	xp->index = p->index;  in copy_from_user_policy()
1817 	memcpy(&xp->selector, &p->sel, sizeof(xp->selector));  in copy_from_user_policy()
1818 	memcpy(&xp->lft, &p->lft, sizeof(xp->lft));  in copy_from_user_policy()
1819 	xp->action = p->action;  in copy_from_user_policy()
1820 	xp->flags = p->flags;  in copy_from_user_policy()
1821 	xp->family = p->sel.family;  in copy_from_user_policy()
1825 static void copy_to_user_policy(struct xfrm_policy *xp, struct xfrm_userpolicy_info *p, int dir)  in copy_to_user_policy()  argument
1828 	memcpy(&p->sel, &xp->selector, sizeof(p->sel));  in copy_to_user_policy()
1829 	memcpy(&p->lft, &xp->lft, sizeof(p->lft));  in copy_to_user_policy()
1830 	memcpy(&p->curlft, &xp->curlft, sizeof(p->curlft));  in copy_to_user_policy()
1831 	p->priority = xp->priority;  in copy_to_user_policy()
1832 	p->index = xp->index;  in copy_to_user_policy()
1833 	p->sel.family = xp->family;  in copy_to_user_policy()
1835 	p->action = xp->action;  in copy_to_user_policy()
1836 	p->flags = xp->flags;  in copy_to_user_policy()
1846 	struct xfrm_policy *xp = xfrm_policy_alloc(net, GFP_KERNEL);  in xfrm_policy_construct()  local
1849 	if (!xp) {  in xfrm_policy_construct()
1854 	copy_from_user_policy(xp, p);  in xfrm_policy_construct()
1856 	err = copy_from_user_policy_type(&xp->type, attrs, extack);  in xfrm_policy_construct()
1860 	if (!(err = copy_from_user_tmpl(xp, attrs, extack)))  in xfrm_policy_construct()
1861 		err = copy_from_user_sec_ctx(xp, attrs);  in xfrm_policy_construct()
1865 	xfrm_mark_get(attrs, &xp->mark);  in xfrm_policy_construct()
1868 		xp->if_id = nla_get_u32(attrs[XFRMA_IF_ID]);  in xfrm_policy_construct()
1870 	return xp;  in xfrm_policy_construct()
1873 	xp->walk.dead = 1;  in xfrm_policy_construct()
1874 	xfrm_policy_destroy(xp);  in xfrm_policy_construct()
1884 	struct xfrm_policy *xp;  in xfrm_add_policy()  local
1896 	xp = xfrm_policy_construct(net, p, attrs, &err, extack);  in xfrm_add_policy()
1897 	if (!xp)  in xfrm_add_policy()
1905 	err = xfrm_policy_insert(p->dir, xp, excl);  in xfrm_add_policy()
1906 	xfrm_audit_policy_add(xp, err ? 0 : 1, true);  in xfrm_add_policy()
1909 		security_xfrm_policy_free(xp->security);  in xfrm_add_policy()
1910 		kfree(xp);  in xfrm_add_policy()
1917 	km_policy_notify(xp, p->dir, &c);  in xfrm_add_policy()
1919 	xfrm_pol_put(xp);  in xfrm_add_policy()
1924 static int copy_to_user_tmpl(struct xfrm_policy *xp, struct sk_buff *skb)  in copy_to_user_tmpl()  argument
1929 	if (xp->xfrm_nr == 0)  in copy_to_user_tmpl()
1932 	for (i = 0; i < xp->xfrm_nr; i++) {  in copy_to_user_tmpl()
1934 		struct xfrm_tmpl *kp = &xp->xfrm_vec[i];  in copy_to_user_tmpl()
1950 		       sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr, vec);  in copy_to_user_tmpl()
1961 static inline int copy_to_user_sec_ctx(struct xfrm_policy *xp, struct sk_buff *skb)  in copy_to_user_sec_ctx()  argument
1963 	if (xp->security)  in copy_to_user_sec_ctx()
1964 		return copy_sec_ctx(xp->security, skb);  in copy_to_user_sec_ctx()
1995 static int dump_one_policy(struct xfrm_policy *xp, int dir, int count, void *ptr)  in dump_one_policy()  argument
2011 	copy_to_user_policy(xp, p, dir);  in dump_one_policy()
2012 	err = copy_to_user_tmpl(xp, skb);  in dump_one_policy()
2014 		err = copy_to_user_sec_ctx(xp, skb);  in dump_one_policy()
2016 		err = copy_to_user_policy_type(xp->type, skb);  in dump_one_policy()
2018 		err = xfrm_mark_put(skb, &xp->mark);  in dump_one_policy()
2020 		err = xfrm_if_id_put(skb, xp->if_id);  in dump_one_policy()
2077 					  struct xfrm_policy *xp,  in xfrm_policy_netlink()  argument
2093 	err = dump_one_policy(xp, dir, 0, &info);  in xfrm_policy_netlink()
2196 	struct xfrm_policy *xp;  in xfrm_get_policy()  local
2222 		xp = xfrm_policy_byid(net, &m, if_id, type, p->dir,  in xfrm_get_policy()
2240 		xp = xfrm_policy_bysel_ctx(net, &m, if_id, type, p->dir,  in xfrm_get_policy()
2244 	if (xp == NULL)  in xfrm_get_policy()
2250 		resp_skb = xfrm_policy_netlink(skb, xp, p->dir, nlh->nlmsg_seq);  in xfrm_get_policy()
2258 		xfrm_audit_policy_delete(xp, err ? 0 : 1, true);  in xfrm_get_policy()
2267 		km_policy_notify(xp, p->dir, &c);  in xfrm_get_policy()
2271 	xfrm_pol_put(xp);  in xfrm_get_policy()
2505 	struct xfrm_policy *xp;  in xfrm_add_pol_expire()  local
2527 		xp = xfrm_policy_byid(net, &m, if_id, type, p->dir, p->index,  in xfrm_add_pol_expire()
2545 		xp = xfrm_policy_bysel_ctx(net, &m, if_id, type, p->dir,  in xfrm_add_pol_expire()
2549 	if (xp == NULL)  in xfrm_add_pol_expire()
2552 	if (unlikely(xp->walk.dead))  in xfrm_add_pol_expire()
2557 		xfrm_policy_delete(xp, p->dir);  in xfrm_add_pol_expire()
2558 		xfrm_audit_policy_delete(xp, 1, true);  in xfrm_add_pol_expire()
2560 	km_policy_expired(xp, p->dir, up->hard, nlh->nlmsg_pid);  in xfrm_add_pol_expire()
2563 	xfrm_pol_put(xp);  in xfrm_add_pol_expire()
2607 	struct xfrm_policy *xp;  in xfrm_add_acquire()  local
2630 	xp = xfrm_policy_construct(net, &ua->policy, attrs, &err, extack);  in xfrm_add_acquire()
2631 	if (!xp)  in xfrm_add_acquire()
2637 	xp->mark.m = x->mark.m = mark.m;  in xfrm_add_acquire()
2638 	xp->mark.v = x->mark.v = mark.v;  in xfrm_add_acquire()
2641 	for (i = 0; i < xp->xfrm_nr; i++, ut++) {  in xfrm_add_acquire()
2642 		struct xfrm_tmpl *t = &xp->xfrm_vec[i];  in xfrm_add_acquire()
2650 		err = km_query(x, t, xp);  in xfrm_add_acquire()
2655 	kfree(xp);  in xfrm_add_acquire()
3304 						struct xfrm_policy *xp)  in xfrm_acquire_msgsize()  argument
3307 	       + nla_total_size(sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr)  in xfrm_acquire_msgsize()
3314 			 struct xfrm_tmpl *xt, struct xfrm_policy *xp)  in build_acquire()  argument
3329 	copy_to_user_policy(xp, &ua->policy, XFRM_POLICY_OUT);  in build_acquire()
3335 	err = copy_to_user_tmpl(xp, skb);  in build_acquire()
3339 		err = copy_to_user_policy_type(xp->type, skb);  in build_acquire()
3341 		err = xfrm_mark_put(skb, &xp->mark);  in build_acquire()
3343 		err = xfrm_if_id_put(skb, xp->if_id);  in build_acquire()
3354 			     struct xfrm_policy *xp)  in xfrm_send_acquire()  argument
3360 	skb = nlmsg_new(xfrm_acquire_msgsize(x, xp), GFP_ATOMIC);  in xfrm_send_acquire()
3364 	err = build_acquire(skb, x, xt, xp);  in xfrm_send_acquire()
3379 	struct xfrm_policy *xp;  in xfrm_compile_policy()  local
3415 	xp = xfrm_policy_alloc(net, GFP_ATOMIC);  in xfrm_compile_policy()
3416 	if (xp == NULL) {  in xfrm_compile_policy()
3421 	copy_from_user_policy(xp, p);  in xfrm_compile_policy()
3422 	xp->type = XFRM_POLICY_TYPE_MAIN;  in xfrm_compile_policy()
3423 	copy_templates(xp, ut, nr);  in xfrm_compile_policy()
3427 	return xp;  in xfrm_compile_policy()
3430 static inline unsigned int xfrm_polexpire_msgsize(struct xfrm_policy *xp)  in xfrm_polexpire_msgsize()  argument
3433 	       + nla_total_size(sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr)  in xfrm_polexpire_msgsize()
3434 	       + nla_total_size(xfrm_user_sec_ctx_size(xp->security))  in xfrm_polexpire_msgsize()
3439 static int build_polexpire(struct sk_buff *skb, struct xfrm_policy *xp,  in build_polexpire()  argument
3452 	copy_to_user_policy(xp, &upe->pol, dir);  in build_polexpire()
3453 	err = copy_to_user_tmpl(xp, skb);  in build_polexpire()
3455 		err = copy_to_user_sec_ctx(xp, skb);  in build_polexpire()
3457 		err = copy_to_user_policy_type(xp->type, skb);  in build_polexpire()
3459 		err = xfrm_mark_put(skb, &xp->mark);  in build_polexpire()
3461 		err = xfrm_if_id_put(skb, xp->if_id);  in build_polexpire()
3472 static int xfrm_exp_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c)  in xfrm_exp_policy_notify()  argument
3474 	struct net *net = xp_net(xp);  in xfrm_exp_policy_notify()
3478 	skb = nlmsg_new(xfrm_polexpire_msgsize(xp), GFP_ATOMIC);  in xfrm_exp_policy_notify()
3482 	err = build_polexpire(skb, xp, dir, c);  in xfrm_exp_policy_notify()
3488 static int xfrm_notify_policy(struct xfrm_policy *xp, int dir, const struct km_event *c)  in xfrm_notify_policy()  argument
3490 	unsigned int len = nla_total_size(sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr);  in xfrm_notify_policy()
3491 	struct net *net = xp_net(xp);  in xfrm_notify_policy()
3525 			id->index = xp->index;  in xfrm_notify_policy()
3527 			memcpy(&id->sel, &xp->selector, sizeof(id->sel));  in xfrm_notify_policy()
3537 	copy_to_user_policy(xp, p, dir);  in xfrm_notify_policy()
3538 	err = copy_to_user_tmpl(xp, skb);  in xfrm_notify_policy()
3540 		err = copy_to_user_policy_type(xp->type, skb);  in xfrm_notify_policy()
3542 		err = xfrm_mark_put(skb, &xp->mark);  in xfrm_notify_policy()
3544 		err = xfrm_if_id_put(skb, xp->if_id);  in xfrm_notify_policy()
3585 static int xfrm_send_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c)  in xfrm_send_policy_notify()  argument
3592 		return xfrm_notify_policy(xp, dir, c);  in xfrm_send_policy_notify()
3596 		return xfrm_exp_policy_notify(xp, dir, c);  in xfrm_send_policy_notify()