summaryrefslogtreecommitdiff
path: root/sys/netipsec/xform_ah.c
AgeCommit message (Expand)Author
2022-05-22opencrypto: crypto_dispatch never fails now. Make it return void.riastradh
2022-05-22opencrypto: Rip out EAGAIN logic when unregistering crypto drivers.riastradh
2022-05-22opencrypto: Make crypto_freesession return void.riastradh
2022-05-22netipsec: Nothing uses xf_zeroize return value. Nix it.riastradh
2022-05-22opencrypto: Make crp_callback, krp_callback return void.riastradh
2019-11-01Fix ipsecif(4) IPV6_MINMTU does not work correctly.knakahara
2019-06-12make DPRINTF use varyadic cpp macros, and merge with IPSECLOG.christos
2019-01-27Merge the [pgoyette-compat] branchpgoyette
2018-05-31Constify ipseczeroes, and remove one use of it.maxv
2018-05-30Correctly handle the padding for IPv6-AH, as specified by RFC4302. Seen inmaxv
2018-05-30Introduce ah_authsiz, which computes the length of the ICV only. Use it inmaxv
2018-05-29Strengthen and simplify, once more.maxv
2018-05-29Fix non-INET6 buildsozaki-r
2018-05-18IP6_EXTHDR_GET -> M_REGION_GET, no functional change.maxv
2018-05-13Remove unused calls to nat_t_ports_get.maxv
2018-05-11ENOBUFS -> EACCES when updating the replay counter.maxv
2018-05-07Remove unused 'mp' argument from all the xf_output functions. Also cleanmaxv
2018-05-01When IP6_EXTHDR_GET fails, return ENOBUFS, and don't log an error (HDROPSmaxv
2018-05-01When the replay check fails, return EACCES instead of ENOBUFS.maxv
2018-04-28Remove IPSEC_SPLASSERT_SOFTNET, it has always been a no-op.maxv
2018-04-24Remove the M_AUTHIPDGM flag. It is equivalent to M_AUTHIPHDR, bothmaxv
2018-04-23Remove the kernel RH0 code. RH0 is deprecated by RFC5095, for securitymaxv
2018-04-19Remove extra long file paths from the headers.maxv
2018-04-19cosmeticmaxv
2018-04-18Simplify the IPv4 parser. Get the option length in 'optlen', and sanitizemaxv
2018-04-16Remove dead code.maxv
2018-04-13Remove duplicate, to better show that this place doesn't make a lot ofmaxv
2018-02-26Reinforce this area, make sure the length field fits the option. Normallymaxv
2018-02-16Add [ah/esp/ipcomp]_enable sysctls, and remove the FreeBSD #ifdefs.maxv
2018-02-16Remove some more FreeBSD sysctl declarations that already have NetBSDmaxv
2018-02-15Fix buffer overflow on sending an IPv6 packet with large optionsozaki-r
2018-02-15Commonalize error paths (NFC)ozaki-r
2018-02-15stylemaxv
2018-02-15Make sure the Authentication Header fits the mbuf chain, otherwise panic.maxv
2018-02-15Fix use-after-free, 'ah' may not be valid after m_makewritable andmaxv
2018-02-15Fix kernel panic (assertion failure) on receiving an IPv6 packet with large o...ozaki-r
2018-02-15Don't relook up an SP/SA in opencrpyto callbacksozaki-r
2018-01-24Reinforce and clarify.maxv
2018-01-24Fix a vulnerability in IPsec-IPv6-AH, that allows an attacker to remotelymaxv
2018-01-24Revert a part of rev1.49 (six months ago). The pointer given to memcpymaxv
2017-10-03Constify isr at many places (NFC)ozaki-r
2017-08-10Use pool_cache(9) instead of pool(9) for tdb_crypto objectsozaki-r
2017-08-09MP-ify SAD (savlist)ozaki-r
2017-08-03Introduce KEY_SA_UNREF and replace KEY_FREESAV with it where sav will never b...ozaki-r
2017-08-02Make IPsec SPD MP-safeozaki-r
2017-07-27Don't acquire global locks for IPsec if NET_MPSAFEozaki-r
2017-07-20Use pool to allocate tdb_cryptoozaki-r
2017-07-20Dedup error paths (NFC)ozaki-r
2017-07-20Fix a debug messageozaki-r
2017-07-19Hold a reference to an SP during opencrypto processingozaki-r