summaryrefslogtreecommitdiff
path: root/sys/netinet6/esp_input.c
Commit message (Collapse)AuthorAgeFilesLines
* Removing old, dead, KAME IPsec files as part of the move to theGeorge V. Neville-Neil2007-07-021-975/+0
| | | | | | | | | | new FAST_IPSEC based IPsec stack. Approved by: re Reviewed by: bz Notes: svn path=/head/; revision=171148
* With exception of the if_name() macro, all definitions in net_osdep.hBrooks Davis2006-08-041-2/+0
| | | | | | | | | | | were unused or already in if_var.h so add if_name() to if_var.h and remove net_osdep.h along with all references to it. Longer term we may want to kill off if_name() entierly since all modern BSDs have if_xname variables rendering it unnecessicary. Notes: svn path=/head/; revision=160981
* /* -> /*- for license, minor formatting changes, separate for KAMEWarner Losh2005-01-071-1/+1
| | | | Notes: svn path=/head/; revision=139826
* Apply error and success logic consistently to the function netisr_queue() andAndre Oppermann2004-08-271-2/+2
| | | | | | | | | | | | | | | | | | | | | its users. netisr_queue() now returns (0) on success and ERRNO on failure. At the moment ENXIO (netisr queue not functional) and ENOBUFS (netisr queue full) are supported. Previously it would return (1) on success but the return value of IF_HANDOFF() was interpreted wrongly and (0) was actually returned on success. Due to this schednetisr() was never called to kick the scheduling of the isr. However this was masked by other normal packets coming through netisr_dispatch() causing the dequeueing of waiting packets. PR: kern/70988 Found by: MOROHOSHI Akihiko <moro@remus.dti.ne.jp> MFC after: 3 days Notes: svn path=/head/; revision=134391
* - m_cat() may free the mbuf on 2nd arg, so m_pkthdr manipulation hasHajimu UMEMOTO2003-11-151-8/+6
| | | | | | | | | | | to happen before the call to m_cat(). - correct signedness mixups. - remove variable that is only assigned too but not referenced. Obtained from: KAME Notes: svn path=/head/; revision=122743
* correct stat to increment.Hajimu UMEMOTO2003-10-311-1/+1
| | | | | | | Obtained from: KAME Notes: svn path=/head/; revision=121814
* add ECN support in layer-3.Hajimu UMEMOTO2003-10-291-2/+8
| | | | | | | | | | | | - implement the tunnel egress rule in ip_ecn_egress() in ip_ecn.c. make ip{,6}_ecn_egress() return integer to tell the caller that this packet should be dropped. - handle ECN at fragment reassembly in ip_input.c and frag6.c. Obtained from: KAME Notes: svn path=/head/; revision=121684
* more strict sanity check for ESP tailSUZUKI Shinsuke2003-10-221-1/+1
| | | | | | | Obtained from: KAME Notes: svn path=/head/; revision=121335
* - fix typo in comment.Hajimu UMEMOTO2003-10-071-11/+3
| | | | | | | | | - style. Obtained from: KAME Notes: svn path=/head/; revision=120891
* Update netisr handling; Each SWI now registers its queue, and all queueJonathan Lemon2003-03-041-4/+2
| | | | | | | | | | | | | drain routines are done by swi_net, which allows for better queue control at some future point. Packets may also be directly dispatched to a netisr instead of queued, this may be of interest at some installations, but currently defaults to off. Reviewed by: hsu, silby, jayanth, sam Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=111888
* Back out M_* changes, per decision of the TRB.Warner Losh2003-02-191-3/+3
| | | | | | | Approved by: trb Notes: svn path=/head/; revision=111119
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.Alfred Perlstein2003-01-211-3/+3
| | | | | | | Merge M_NOWAIT/M_DONTWAIT into a single flag M_NOWAIT. Notes: svn path=/head/; revision=109623
* don't reference a pkthdr after M_MOVE_PKTHDR has "remove it"; insteadSam Leffler2003-01-061-6/+4
| | | | | | | | | reference the pkthdr now in the destination of the move Sponsored by: Vernier Networks Notes: svn path=/head/; revision=108825
* Correct mbuf packet header propagation. Previously, packet headersSam Leffler2002-12-301-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | were sometimes propagated using M_COPY_PKTHDR which actually did something between a "move" and a "copy" operation. This is replaced by M_MOVE_PKTHDR (which copies the pkthdr contents and "removes" it from the source mbuf) and m_dup_pkthdr which copies the packet header contents including any m_tag chain. This corrects numerous problems whereby mbuf tags could be lost during packet manipulations. These changes also introduce arguments to m_tag_copy and m_tag_copy_chain to specify if the tag copy work should potentially block. This introduces an incompatibility with openbsd which we may want to revisit. Note that move/dup of packet headers does not handle target mbufs that have a cluster bound to them. We may want to support this; for now we watch for it with an assert. Finally, M_COPYFLAGS was updated to include M_FIRSTFRAG|M_LASTFRAG. Supported by: Vernier Networks Reviewed by: Robert Watson <rwatson@FreeBSD.org> Notes: svn path=/head/; revision=108466
* check packet length before fetching ESP crypto checksum.Hajimu UMEMOTO2002-08-241-0/+8
| | | | | | | | Obtained from: KAME MFC after: 2 days Notes: svn path=/head/; revision=102347
* fixed to make mbuf chain.Hajimu UMEMOTO2002-07-181-1/+1
| | | | | | | | Obtained from: KAME MFC after: 1 week Notes: svn path=/head/; revision=100277
* just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD.SUZUKI Shinsuke2002-04-191-26/+10
| | | | | | | | | | (based on freebsd4-snap-20020128) Reviewed by: ume MFC after: 1 week Notes: svn path=/head/; revision=95023
* Corrected arguments to key_allocsa called fromHajimu UMEMOTO2002-03-251-4/+6
| | | | | | | | | | | {esp6, ah6}_ctlinput. Previous ones were uninitialized auto variables, which were completely bogus. Obtained from: KAME MFC after: 1 week Notes: svn path=/head/; revision=93133
* Fix another boatload of warnings (missing include) and a cosmeticPeter Wemm2002-02-281-0/+2
| | | | | | | -Wuninitialized warning. Notes: svn path=/head/; revision=91453
* Patches from KAME to remove usage of Varargs in existingJulian Elischer2001-09-071-13/+4
| | | | | | | | | | IPV4 code. For now they will still have some in the developing stuff (IPv6) Submitted by: Keiichi SHIMA / <keiichi@iij.ad.jp> Obtained from: KAME Notes: svn path=/head/; revision=83187
* Patches from Keiichi SHIMA <keiichi@iij.ad.jp>Julian Elischer2001-09-031-4/+3
| | | | | | | | | to make ip use the standard protosw structure again. Obtained from: Well, KAME I guess. Notes: svn path=/head/; revision=82884
* Sync with recent KAME.Hajimu UMEMOTO2001-06-111-36/+228
| | | | | | | | | | | | | | | | | | | | | This work was based on kame-20010528-freebsd43-snap.tgz and some critical problem after the snap was out were fixed. There are many many changes since last KAME merge. TODO: - The definitions of SADB_* in sys/net/pfkeyv2.h are still different from RFC2407/IANA assignment because of binary compatibility issue. It should be fixed under 5-CURRENT. - ip6po_m member of struct ip6_pktopts is no longer used. But, it is still there because of binary compatibility issue. It should be removed under 5-CURRENT. Reviewed by: itojun Obtained from: KAME MFC after: 3 weeks Notes: svn path=/head/; revision=78064
* Lock down the network interface queues. The queue mutex must be obtainedJonathan Lemon2000-11-251-11/+4
| | | | | | | | | | | | | | | | | before adding/removing packets from the queue. Also, the if_obytes and if_omcasts fields should only be manipulated under protection of the mutex. IF_ENQUEUE, IF_PREPEND, and IF_DEQUEUE perform all necessary locking on the queue. An IF_LOCK macro is provided, as well as the old (mutex-less) versions of the macros in the form _IF_ENQUEUE, _IF_QFULL, for code which needs them, but their use is discouraged. Two new macros are introduced: IF_DRAIN() to drain a queue, and IF_HANDOFF, which takes care of locking/enqueue, and also statistics updating/start if necessary. Notes: svn path=/head/; revision=69152
* add missing splx(), when outgoing interface queue is full on tunnelledJun-ichiro itojun Hagino2000-08-161-0/+2
| | | | | | | IPsec packet output. KAME PR 280. Notes: svn path=/head/; revision=64701
* sync with kame tree as of july00. tons of bug fixes/improvements.Jun-ichiro itojun Hagino2000-07-041-391/+222
| | | | | | | | | | API changes: - additional IPv6 ioctls - IPsec PF_KEY API was changed, it is mandatory to upgrade setkey(8). (also syntax change) Notes: svn path=/head/; revision=62587
* Remove unneeded #include <sys/kernel.h>Poul-Henning Kamp2000-04-291-1/+0
| | | | Notes: svn path=/head/; revision=59760
* Remove ~25 unneeded #include <sys/conf.h>Poul-Henning Kamp2000-04-191-1/+0
| | | | | | | Remove ~60 unneeded #include <sys/malloc.h> Notes: svn path=/head/; revision=59391
* IPSEC support in the kernel.Yoshinobu Inoue1999-12-221-0/+984
pr_input() routines prototype is also changed to support IPSEC and IPV6 chained protocol headers. Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project Notes: svn path=/head/; revision=55009
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-05 22:44:31 +0000