Lines Matching refs:xp
1913 static int check_reqid(struct xfrm_policy *xp, int dir, int count, void *ptr)
1918 for (i=0; i<xp->xfrm_nr; i++) {
1919 if (xp->xfrm_vec[i].reqid == reqid)
1947 parse_ipsecrequest(struct xfrm_policy *xp, struct sadb_x_policy *pol,
1950 struct net *net = xp_net(xp);
1951 struct xfrm_tmpl *t = xp->xfrm_vec + xp->xfrm_nr;
1954 if (xp->xfrm_nr >= XFRM_MAX_DEPTH)
1990 t->encap_family = xp->family;
1994 xp->xfrm_nr++;
1999 parse_ipsecrequests(struct xfrm_policy *xp, struct sadb_x_policy *pol)
2013 if ((err = parse_ipsecrequest(xp, pol, rq)) < 0)
2021 static inline int pfkey_xfrm_policy2sec_ctx_size(const struct xfrm_policy *xp)
2023 struct xfrm_sec_ctx *xfrm_ctx = xp->security;
2033 static int pfkey_xfrm_policy2msg_size(const struct xfrm_policy *xp)
2036 int sockaddr_size = pfkey_sockaddr_size(xp->family);
2040 for (i=0; i<xp->xfrm_nr; i++) {
2041 t = xp->xfrm_vec + i;
2050 (xp->xfrm_nr * sizeof(struct sadb_x_ipsecrequest)) +
2052 pfkey_xfrm_policy2sec_ctx_size(xp);
2055 static struct sk_buff * pfkey_xfrm_policy2msg_prep(const struct xfrm_policy *xp)
2060 size = pfkey_xfrm_policy2msg_size(xp);
2069 static int pfkey_xfrm_policy2msg(struct sk_buff *skb, const struct xfrm_policy *xp, int dir)
2079 int sockaddr_size = pfkey_sockaddr_size(xp->family);
2080 int socklen = pfkey_sockaddr_len(xp->family);
2082 size = pfkey_xfrm_policy2msg_size(xp);
2094 addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto);
2095 addr->sadb_address_prefixlen = xp->selector.prefixlen_s;
2097 if (!pfkey_sockaddr_fill(&xp->selector.saddr,
2098 xp->selector.sport,
2100 xp->family))
2109 addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto);
2110 addr->sadb_address_prefixlen = xp->selector.prefixlen_d;
2113 pfkey_sockaddr_fill(&xp->selector.daddr, xp->selector.dport,
2115 xp->family);
2122 lifetime->sadb_lifetime_allocations = _X2KEY(xp->lft.hard_packet_limit);
2123 lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.hard_byte_limit);
2124 lifetime->sadb_lifetime_addtime = xp->lft.hard_add_expires_seconds;
2125 lifetime->sadb_lifetime_usetime = xp->lft.hard_use_expires_seconds;
2131 lifetime->sadb_lifetime_allocations = _X2KEY(xp->lft.soft_packet_limit);
2132 lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.soft_byte_limit);
2133 lifetime->sadb_lifetime_addtime = xp->lft.soft_add_expires_seconds;
2134 lifetime->sadb_lifetime_usetime = xp->lft.soft_use_expires_seconds;
2140 lifetime->sadb_lifetime_allocations = xp->curlft.packets;
2141 lifetime->sadb_lifetime_bytes = xp->curlft.bytes;
2142 lifetime->sadb_lifetime_addtime = xp->curlft.add_time;
2143 lifetime->sadb_lifetime_usetime = xp->curlft.use_time;
2149 if (xp->action == XFRM_POLICY_ALLOW) {
2150 if (xp->xfrm_nr)
2157 pol->sadb_x_policy_id = xp->index;
2158 pol->sadb_x_policy_priority = xp->priority;
2160 for (i=0; i<xp->xfrm_nr; i++) {
2161 const struct xfrm_tmpl *t = xp->xfrm_vec + i;
2200 if ((xfrm_ctx = xp->security)) {
2201 int ctx_size = pfkey_xfrm_policy2sec_ctx_size(xp);
2214 hdr->sadb_msg_reserved = refcount_read(&xp->refcnt);
2219 static int key_notify_policy(struct xfrm_policy *xp, int dir, const struct km_event *c)
2225 out_skb = pfkey_xfrm_policy2msg_prep(xp);
2229 err = pfkey_xfrm_policy2msg(out_skb, xp, dir);
2245 pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ALL, NULL, xp_net(xp));
2257 struct xfrm_policy *xp;
2272 xp = xfrm_policy_alloc(net, GFP_KERNEL);
2273 if (xp == NULL)
2276 xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?
2278 xp->priority = pol->sadb_x_policy_priority;
2281 xp->family = pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.saddr);
2282 xp->selector.family = xp->family;
2283 xp->selector.prefixlen_s = sa->sadb_address_prefixlen;
2284 xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);
2285 xp->selector.sport = ((struct sockaddr_in *)(sa+1))->sin_port;
2286 if (xp->selector.sport)
2287 xp->selector.sport_mask = htons(0xffff);
2290 pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.daddr);
2291 xp->selector.prefixlen_d = sa->sadb_address_prefixlen;
2296 xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);
2298 xp->selector.dport = ((struct sockaddr_in *)(sa+1))->sin_port;
2299 if (xp->selector.dport)
2300 xp->selector.dport_mask = htons(0xffff);
2311 err = security_xfrm_policy_alloc(&xp->security, uctx, GFP_KERNEL);
2318 xp->lft.soft_byte_limit = XFRM_INF;
2319 xp->lft.hard_byte_limit = XFRM_INF;
2320 xp->lft.soft_packet_limit = XFRM_INF;
2321 xp->lft.hard_packet_limit = XFRM_INF;
2323 xp->lft.hard_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);
2324 xp->lft.hard_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);
2325 xp->lft.hard_add_expires_seconds = lifetime->sadb_lifetime_addtime;
2326 xp->lft.hard_use_expires_seconds = lifetime->sadb_lifetime_usetime;
2329 xp->lft.soft_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);
2330 xp->lft.soft_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);
2331 xp->lft.soft_add_expires_seconds = lifetime->sadb_lifetime_addtime;
2332 xp->lft.soft_use_expires_seconds = lifetime->sadb_lifetime_usetime;
2334 xp->xfrm_nr = 0;
2336 (err = parse_ipsecrequests(xp, pol)) < 0)
2339 err = xfrm_policy_insert(pol->sadb_x_policy_dir-1, xp,
2342 xfrm_audit_policy_add(xp, err ? 0 : 1, true);
2355 km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c);
2356 xfrm_pol_put(xp);
2360 xp->walk.dead = 1;
2361 xfrm_policy_destroy(xp);
2371 struct xfrm_policy *xp;
2417 xp = xfrm_policy_bysel_ctx(net, &dummy_mark, 0, XFRM_POLICY_TYPE_MAIN,
2421 if (xp == NULL)
2424 xfrm_audit_policy_delete(xp, err ? 0 : 1, true);
2433 km_policy_notify(xp, pol->sadb_x_policy_dir-1, &c);
2436 xfrm_pol_put(xp);
2440 static int key_pol_get_resp(struct sock *sk, struct xfrm_policy *xp, const struct sadb_msg *hdr, int dir)
2447 out_skb = pfkey_xfrm_policy2msg_prep(xp);
2452 err = pfkey_xfrm_policy2msg(out_skb, xp, dir);
2465 pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ONE, sk, xp_net(xp));
2657 struct xfrm_policy *xp;
2668 xp = xfrm_policy_byid(net, &dummy_mark, 0, XFRM_POLICY_TYPE_MAIN,
2670 if (xp == NULL)
2674 xfrm_audit_policy_delete(xp, err ? 0 : 1, true);
2682 km_policy_notify(xp, dir, &c);
2684 err = key_pol_get_resp(sk, xp, hdr, dir);
2688 xfrm_pol_put(xp);
2692 static int dump_sp(struct xfrm_policy *xp, int dir, int count, void *ptr)
2702 out_skb = pfkey_xfrm_policy2msg_prep(xp);
2706 err = pfkey_xfrm_policy2msg(out_skb, xp, dir);
3042 static int key_notify_policy_expire(struct xfrm_policy *xp, const struct km_event *c)
3105 static int pfkey_send_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c)
3107 if (xp && xp->type != XFRM_POLICY_TYPE_MAIN)
3112 return key_notify_policy_expire(xp, c);
3116 return key_notify_policy(xp, dir, c);
3158 static int pfkey_send_acquire(struct xfrm_state *x, struct xfrm_tmpl *t, struct xfrm_policy *xp)
3240 pol->sadb_x_policy_id = xp->index;
3241 pol->sadb_x_policy_priority = xp->priority;
3274 struct xfrm_policy *xp;
3306 xp = xfrm_policy_alloc(net, GFP_ATOMIC);
3307 if (xp == NULL) {
3312 xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?
3315 xp->lft.soft_byte_limit = XFRM_INF;
3316 xp->lft.hard_byte_limit = XFRM_INF;
3317 xp->lft.soft_packet_limit = XFRM_INF;
3318 xp->lft.hard_packet_limit = XFRM_INF;
3319 xp->family = sk->sk_family;
3321 xp->xfrm_nr = 0;
3323 (*dir = parse_ipsecrequests(xp, pol)) < 0)
3342 *dir = security_xfrm_policy_alloc(&xp->security, uctx, GFP_ATOMIC);
3350 return xp;
3353 xp->walk.dead = 1;
3354 xfrm_policy_destroy(xp);