summaryrefslogtreecommitdiff
path: root/sys/netipsec/ipsec.c
AgeCommit message (Expand)Author
2018-02-28add missing staticmaxv
2018-02-28Dedup: merge ipsec4_setspidx_inpcb and ipsec6_setspidx_in6pcb.maxv
2018-02-28ipsec6_setspidx_in6pcb: call ipsec_setspidx() only once, just like themaxv
2018-02-27Dedup: merge ipsec4_set_policy and ipsec6_set_policy. The content of themaxv
2018-02-27Remove duplicate checks, and no need to initialize 'newsp' inmaxv
2018-02-27Dedup: mergemaxv
2018-02-27Use inpcb_hdr to reduce the diff betweenmaxv
2018-02-27Optimize: use ipsec_sp_hdrsiz instead of ipsec_hdrsiz, not to re-querymaxv
2018-02-26Dedup: call ipsec_in_reject directly. IPSEC_STAT_IN_POLVIO also getsmaxv
2018-02-26Reduce the diff between ipsec6_input and ipsec4_input.maxv
2018-02-26Dedup: merge ipsec4_in_reject and ipsec6_in_reject into ipsec_in_reject.maxv
2018-02-26Dedup: merge ipsec4_hdrsiz and ipsec6_hdrsiz into ipsec_hdrsiz.maxv
2018-02-26Dedup: merge ipsec4_checkpolicy and ipsec6_checkpolicy intomaxv
2018-02-26Fix nonsensical checks, neither in6p nor request is allowed to be NULL,maxv
2018-02-26Merge some minor (mostly stylistic) changes from last week.maxv
2018-02-21Fix ipsec4_get_ulp(). We should do "goto done" instead of "return",maxv
2018-02-21Use inpcb_hdr to reduce the diff between:maxv
2018-02-21Rename:maxv
2018-02-16Style, remove unused and misleading macros and comments, localify, andmaxv
2018-02-16Fix inverted logic, otherwise the kernel crashes when receiving a 1-bytemaxv
2018-02-16Style a bit, no functional change.maxv
2018-02-16Remove some more FreeBSD sysctl declarations that already have NetBSDmaxv
2018-02-16Remove ipsec_replay and ipsec_integrity from this place, they are alreadymaxv
2018-02-16Remove ip4_esp_randpad and ip6_esp_randpad, unused. Discussed withmaxv
2018-02-08Remove unused net_osdep.h include.maxv
2018-01-23Fix late NULL-checking (CID 1427782: Null pointer dereferences (REVERSE_INULL))ozaki-r
2017-11-21Use M_WAITOK to allocate mbufs wherever sleepableozaki-r
2017-10-17Fix buffer length for ipsec_logsastrozaki-r
2017-10-03Don't abuse key_checkrequest just for looking up savozaki-r
2017-09-28- sanitize key debugging so that we don't print extra newlines or unassociatedchristos
2017-09-19Share a global dummy SP between PCBsozaki-r
2017-08-10Add per-CPU rtcache to ipsec_reinject_ipstackozaki-r
2017-08-07Remove out-of-date log outputozaki-r
2017-08-03Introduce KEY_SA_UNREF and replace KEY_FREESAV with it where sav will never b...ozaki-r
2017-08-02Comment out unused functionsozaki-r
2017-08-02Don't use KEY_NEWSP for dummy SP entriesozaki-r
2017-08-02Make IPsec SPD MP-safeozaki-r
2017-07-26Fix indentationozaki-r
2017-07-26Provide and apply key_sp_refcnt (NFC)ozaki-r
2017-07-21Remove ipsecrequest#savozaki-r
2017-07-21Don't use key_lookup_sp that depends on unstable sp->req->savozaki-r
2017-07-21Don't use sp->req->sav when handling NAT-T ESP fragmentationozaki-r
2017-07-21Don't use unstable isr->sav for header size calculationsozaki-r
2017-07-19Look up sav instead of relying on unstable sp->req->savozaki-r
2017-07-19Remove invalid M_AUTHIPDGM check on ESP isr->savozaki-r
2017-07-18Restore a comment removed in previousozaki-r
2017-07-18Remove m_tag_find(PACKET_TAG_IPSEC_PENDING_TDB) because nobody sets the tagozaki-r
2017-07-12Omit unnecessary NULL checks for sav->sahozaki-r
2017-07-07Rename key_alloc* functions (NFC)ozaki-r
2017-06-14KNFozaki-r