1909 static int check_reqid(struct xfrm_policy *xp, int dir, int count, void *ptr)  in check_reqid()  argument
1914 	for (i=0; i<xp->xfrm_nr; i++) {  in check_reqid()
1915 		if (xp->xfrm_vec[i].reqid == reqid)  in check_reqid()
1943 parse_ipsecrequest(struct xfrm_policy *xp, struct sadb_x_policy *pol,  in parse_ipsecrequest()  argument
1946 	struct net *net = xp_net(xp);  in parse_ipsecrequest()
1947 	struct xfrm_tmpl *t = xp->xfrm_vec + xp->xfrm_nr;  in parse_ipsecrequest()
1950 	if (xp->xfrm_nr >= XFRM_MAX_DEPTH)  in parse_ipsecrequest()
1986 		t->encap_family = xp->family;  in parse_ipsecrequest()
1990 	xp->xfrm_nr++;  in parse_ipsecrequest()
1995 parse_ipsecrequests(struct xfrm_policy *xp, struct sadb_x_policy *pol)  in parse_ipsecrequests()  argument
2009 		if ((err = parse_ipsecrequest(xp, pol, rq)) < 0)  in parse_ipsecrequests()
2017 static inline int pfkey_xfrm_policy2sec_ctx_size(const struct xfrm_policy *xp)  in pfkey_xfrm_policy2sec_ctx_size()  argument
2019 	struct xfrm_sec_ctx *xfrm_ctx = xp->security;  in pfkey_xfrm_policy2sec_ctx_size()
2029 static int pfkey_xfrm_policy2msg_size(const struct xfrm_policy *xp)  in pfkey_xfrm_policy2msg_size()  argument
2032 	int sockaddr_size = pfkey_sockaddr_size(xp->family);  in pfkey_xfrm_policy2msg_size()
2036 	for (i=0; i<xp->xfrm_nr; i++) {  in pfkey_xfrm_policy2msg_size()
2037 		t = xp->xfrm_vec + i;  in pfkey_xfrm_policy2msg_size()
2046 		(xp->xfrm_nr * sizeof(struct sadb_x_ipsecrequest)) +  in pfkey_xfrm_policy2msg_size()
2048 		pfkey_xfrm_policy2sec_ctx_size(xp);  in pfkey_xfrm_policy2msg_size()
2051 static struct sk_buff * pfkey_xfrm_policy2msg_prep(const struct xfrm_policy *xp)  in pfkey_xfrm_policy2msg_prep()  argument
2056 	size = pfkey_xfrm_policy2msg_size(xp);  in pfkey_xfrm_policy2msg_prep()
2065 static int pfkey_xfrm_policy2msg(struct sk_buff *skb, const struct xfrm_policy *xp, int dir)  in pfkey_xfrm_policy2msg()  argument
2075 	int sockaddr_size = pfkey_sockaddr_size(xp->family);  in pfkey_xfrm_policy2msg()
2076 	int socklen = pfkey_sockaddr_len(xp->family);  in pfkey_xfrm_policy2msg()
2078 	size = pfkey_xfrm_policy2msg_size(xp);  in pfkey_xfrm_policy2msg()
2090 	addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto);  in pfkey_xfrm_policy2msg()
2091 	addr->sadb_address_prefixlen = xp->selector.prefixlen_s;  in pfkey_xfrm_policy2msg()
2093 	if (!pfkey_sockaddr_fill(&xp->selector.saddr,  in pfkey_xfrm_policy2msg()
2094 				 xp->selector.sport,  in pfkey_xfrm_policy2msg()
2096 				 xp->family))  in pfkey_xfrm_policy2msg()
2105 	addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto);  in pfkey_xfrm_policy2msg()
2106 	addr->sadb_address_prefixlen = xp->selector.prefixlen_d;  in pfkey_xfrm_policy2msg()
2109 	pfkey_sockaddr_fill(&xp->selector.daddr, xp->selector.dport,  in pfkey_xfrm_policy2msg()
2111 			    xp->family);  in pfkey_xfrm_policy2msg()
2118 	lifetime->sadb_lifetime_allocations =  _X2KEY(xp->lft.hard_packet_limit);  in pfkey_xfrm_policy2msg()
2119 	lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.hard_byte_limit);  in pfkey_xfrm_policy2msg()
2120 	lifetime->sadb_lifetime_addtime = xp->lft.hard_add_expires_seconds;  in pfkey_xfrm_policy2msg()
2121 	lifetime->sadb_lifetime_usetime = xp->lft.hard_use_expires_seconds;  in pfkey_xfrm_policy2msg()
2127 	lifetime->sadb_lifetime_allocations =  _X2KEY(xp->lft.soft_packet_limit);  in pfkey_xfrm_policy2msg()
2128 	lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.soft_byte_limit);  in pfkey_xfrm_policy2msg()
2129 	lifetime->sadb_lifetime_addtime = xp->lft.soft_add_expires_seconds;  in pfkey_xfrm_policy2msg()
2130 	lifetime->sadb_lifetime_usetime = xp->lft.soft_use_expires_seconds;  in pfkey_xfrm_policy2msg()
2136 	lifetime->sadb_lifetime_allocations = xp->curlft.packets;  in pfkey_xfrm_policy2msg()
2137 	lifetime->sadb_lifetime_bytes = xp->curlft.bytes;  in pfkey_xfrm_policy2msg()
2138 	lifetime->sadb_lifetime_addtime = xp->curlft.add_time;  in pfkey_xfrm_policy2msg()
2139 	lifetime->sadb_lifetime_usetime = xp->curlft.use_time;  in pfkey_xfrm_policy2msg()
2145 	if (xp->action == XFRM_POLICY_ALLOW) {  in pfkey_xfrm_policy2msg()
2146 		if (xp->xfrm_nr)  in pfkey_xfrm_policy2msg()
2153 	pol->sadb_x_policy_id = xp->index;  in pfkey_xfrm_policy2msg()
2154 	pol->sadb_x_policy_priority = xp->priority;  in pfkey_xfrm_policy2msg()
2156 	for (i=0; i<xp->xfrm_nr; i++) {  in pfkey_xfrm_policy2msg()
2157 		const struct xfrm_tmpl *t = xp->xfrm_vec + i;  in pfkey_xfrm_policy2msg()
2196 	if ((xfrm_ctx = xp->security)) {  in pfkey_xfrm_policy2msg()
2197 		int ctx_size = pfkey_xfrm_policy2sec_ctx_size(xp);  in pfkey_xfrm_policy2msg()
2210 	hdr->sadb_msg_reserved = refcount_read(&xp->refcnt);  in pfkey_xfrm_policy2msg()
2215 static int key_notify_policy(struct xfrm_policy *xp, int dir, const struct km_event *c)  in key_notify_policy()  argument
2221 	out_skb = pfkey_xfrm_policy2msg_prep(xp);  in key_notify_policy()
2225 	err = pfkey_xfrm_policy2msg(out_skb, xp, dir);  in key_notify_policy()
2241 	pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ALL, NULL, xp_net(xp));  in key_notify_policy()
2253 	struct xfrm_policy *xp;  in pfkey_spdadd()  local
2268 	xp = xfrm_policy_alloc(net, GFP_KERNEL);  in pfkey_spdadd()
2269 	if (xp == NULL)  in pfkey_spdadd()
2272 	xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?  in pfkey_spdadd()
2274 	xp->priority = pol->sadb_x_policy_priority;  in pfkey_spdadd()
2277 	xp->family = pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.saddr);  in pfkey_spdadd()
2278 	xp->selector.family = xp->family;  in pfkey_spdadd()
2279 	xp->selector.prefixlen_s = sa->sadb_address_prefixlen;  in pfkey_spdadd()
2280 	xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);  in pfkey_spdadd()
2281 	xp->selector.sport = ((struct sockaddr_in *)(sa+1))->sin_port;  in pfkey_spdadd()
2282 	if (xp->selector.sport)  in pfkey_spdadd()
2283 		xp->selector.sport_mask = htons(0xffff);  in pfkey_spdadd()
2286 	pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.daddr);  in pfkey_spdadd()
2287 	xp->selector.prefixlen_d = sa->sadb_address_prefixlen;  in pfkey_spdadd()
2292 	xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);  in pfkey_spdadd()
2294 	xp->selector.dport = ((struct sockaddr_in *)(sa+1))->sin_port;  in pfkey_spdadd()
2295 	if (xp->selector.dport)  in pfkey_spdadd()
2296 		xp->selector.dport_mask = htons(0xffff);  in pfkey_spdadd()
2307 		err = security_xfrm_policy_alloc(&xp->security, uctx, GFP_KERNEL);  in pfkey_spdadd()
2314 	xp->lft.soft_byte_limit = XFRM_INF;  in pfkey_spdadd()
2315 	xp->lft.hard_byte_limit = XFRM_INF;  in pfkey_spdadd()
2316 	xp->lft.soft_packet_limit = XFRM_INF;  in pfkey_spdadd()
2317 	xp->lft.hard_packet_limit = XFRM_INF;  in pfkey_spdadd()
2319 		xp->lft.hard_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);  in pfkey_spdadd()
2320 		xp->lft.hard_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);  in pfkey_spdadd()
2321 		xp->lft.hard_add_expires_seconds = lifetime->sadb_lifetime_addtime;  in pfkey_spdadd()
2322 		xp->lft.hard_use_expires_seconds = lifetime->sadb_lifetime_usetime;  in pfkey_spdadd()
2325 		xp->lft.soft_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);  in pfkey_spdadd()
2326 		xp->lft.soft_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);  in pfkey_spdadd()
2327 		xp->lft.soft_add_expires_seconds = lifetime->sadb_lifetime_addtime;  in pfkey_spdadd()
2328 		xp->lft.soft_use_expires_seconds = lifetime->sadb_lifetime_usetime;  in pfkey_spdadd()
2330 	xp->xfrm_nr = 0;  in pfkey_spdadd()
2332 	    (err = parse_ipsecrequests(xp, pol)) < 0)  in pfkey_spdadd()
2335 	err = xfrm_policy_insert(pol->sadb_x_policy_dir-1, xp,  in pfkey_spdadd()
2338 	xfrm_audit_policy_add(xp, err ? 0 : 1, true);  in pfkey_spdadd()
2351 	km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c);  in pfkey_spdadd()
2352 	xfrm_pol_put(xp);  in pfkey_spdadd()
2356 	xp->walk.dead = 1;  in pfkey_spdadd()
2357 	xfrm_policy_destroy(xp);  in pfkey_spdadd()
2367 	struct xfrm_policy *xp;  in pfkey_spddelete()  local
2413 	xp = xfrm_policy_bysel_ctx(net, &dummy_mark, 0, XFRM_POLICY_TYPE_MAIN,  in pfkey_spddelete()
2417 	if (xp == NULL)  in pfkey_spddelete()
2420 	xfrm_audit_policy_delete(xp, err ? 0 : 1, true);  in pfkey_spddelete()
2429 	km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c);  in pfkey_spddelete()
2432 	xfrm_pol_put(xp);  in pfkey_spddelete()
2436 static int key_pol_get_resp(struct sock *sk, struct xfrm_policy *xp, const struct sadb_msg *hdr, in…  in key_pol_get_resp()  argument
2443 	out_skb = pfkey_xfrm_policy2msg_prep(xp);  in key_pol_get_resp()
2448 	err = pfkey_xfrm_policy2msg(out_skb, xp, dir);  in key_pol_get_resp()
2461 	pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ONE, sk, xp_net(xp));  in key_pol_get_resp()
2653 	struct xfrm_policy *xp;  in pfkey_spdget()  local
2664 	xp = xfrm_policy_byid(net, &dummy_mark, 0, XFRM_POLICY_TYPE_MAIN,  in pfkey_spdget()
2666 	if (xp == NULL)  in pfkey_spdget()
2670 		xfrm_audit_policy_delete(xp, err ? 0 : 1, true);  in pfkey_spdget()
2678 		km_policy_notify(xp, dir, &c);  in pfkey_spdget()
2680 		err = key_pol_get_resp(sk, xp, hdr, dir);  in pfkey_spdget()
2684 	xfrm_pol_put(xp);  in pfkey_spdget()
2688 static int dump_sp(struct xfrm_policy *xp, int dir, int count, void *ptr)  in dump_sp()  argument
2698 	out_skb = pfkey_xfrm_policy2msg_prep(xp);  in dump_sp()
2702 	err = pfkey_xfrm_policy2msg(out_skb, xp, dir);  in dump_sp()
3038 static int key_notify_policy_expire(struct xfrm_policy *xp, const struct km_event *c)  in key_notify_policy_expire()  argument
3101 static int pfkey_send_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c)  in pfkey_send_policy_notify()  argument
3103 	if (xp && xp->type != XFRM_POLICY_TYPE_MAIN)  in pfkey_send_policy_notify()
3108 		return key_notify_policy_expire(xp, c);  in pfkey_send_policy_notify()
3112 		return key_notify_policy(xp, dir, c);  in pfkey_send_policy_notify()
3154 static int pfkey_send_acquire(struct xfrm_state *x, struct xfrm_tmpl *t, struct xfrm_policy *xp)  in pfkey_send_acquire()  argument
3236 	pol->sadb_x_policy_id = xp->index;  in pfkey_send_acquire()
3237 	pol->sadb_x_policy_priority = xp->priority;  in pfkey_send_acquire()
3270 	struct xfrm_policy *xp;  in pfkey_compile_policy()  local
3302 	xp = xfrm_policy_alloc(net, GFP_ATOMIC);  in pfkey_compile_policy()
3303 	if (xp == NULL) {  in pfkey_compile_policy()
3308 	xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?  in pfkey_compile_policy()
3311 	xp->lft.soft_byte_limit = XFRM_INF;  in pfkey_compile_policy()
3312 	xp->lft.hard_byte_limit = XFRM_INF;  in pfkey_compile_policy()
3313 	xp->lft.soft_packet_limit = XFRM_INF;  in pfkey_compile_policy()
3314 	xp->lft.hard_packet_limit = XFRM_INF;  in pfkey_compile_policy()
3315 	xp->family = sk->sk_family;  in pfkey_compile_policy()
3317 	xp->xfrm_nr = 0;  in pfkey_compile_policy()
3319 	    (*dir = parse_ipsecrequests(xp, pol)) < 0)  in pfkey_compile_policy()
3338 		*dir = security_xfrm_policy_alloc(&xp->security, uctx, GFP_ATOMIC);  in pfkey_compile_policy()
3346 	return xp;  in pfkey_compile_policy()
3349 	xp->walk.dead = 1;  in pfkey_compile_policy()
3350 	xfrm_policy_destroy(xp);  in pfkey_compile_policy()