summaryrefslogtreecommitdiff
path: root/sys/netipsec
AgeCommit message (Expand)Author
2018-03-02Avoid data races on lifetime counters by using percpu(9)ozaki-r
2018-02-28add missing staticmaxv
2018-02-28Remove unused macros, and while here style.maxv
2018-02-28Remove duplicate IPSEC_STATINC(IPSEC_STAT_IN_POLVIO), ipsec_in_rejectmaxv
2018-02-28Dedup: merge ipsec4_setspidx_inpcb and ipsec6_setspidx_in6pcb.maxv
2018-02-28ipsec6_setspidx_in6pcb: call ipsec_setspidx() only once, just like themaxv
2018-02-27Dedup: merge ipsec4_set_policy and ipsec6_set_policy. The content of themaxv
2018-02-27Remove duplicate checks, and no need to initialize 'newsp' inmaxv
2018-02-27Dedup: mergemaxv
2018-02-27Use inpcb_hdr to reduce the diff betweenmaxv
2018-02-27Optimize: use ipsec_sp_hdrsiz instead of ipsec_hdrsiz, not to re-querymaxv
2018-02-26Dedup: call ipsec_in_reject directly. IPSEC_STAT_IN_POLVIO also getsmaxv
2018-02-26Reduce the diff between ipsec6_input and ipsec4_input.maxv
2018-02-26Dedup: merge ipsec4_in_reject and ipsec6_in_reject into ipsec_in_reject.maxv
2018-02-26Dedup: merge ipsec4_hdrsiz and ipsec6_hdrsiz into ipsec_hdrsiz.maxv
2018-02-26Dedup: merge ipsec4_checkpolicy and ipsec6_checkpolicy intomaxv
2018-02-26If 'skip' is lower than sizeof(struct ip), we are in trouble. So remove amaxv
2018-02-26m is never allowed to be NULL, so turn the KASSERT (and the null check)maxv
2018-02-26Fix nonsensical checks, neither in6p nor request is allowed to be NULL,maxv
2018-02-26Add XXX, it seems to me we need to free the mbuf here.maxv
2018-02-26Reinforce this area, make sure the length field fits the option. Normallymaxv
2018-02-26Fix mbuf mistake: we are using ip6 before it is pulled up properly.maxv
2018-02-26Merge some minor (mostly stylistic) changes from last week.maxv
2018-02-21Style, no functional change.maxv
2018-02-21Strengthen this check, to make sure there is room for an ip6_ext structure.maxv
2018-02-21Argh, in my previous commit in this file I forgot to fix the IPv6maxv
2018-02-21Fix ipsec4_get_ulp(). We should do "goto done" instead of "return",maxv
2018-02-21Use inpcb_hdr to reduce the diff between:maxv
2018-02-21Rename:maxv
2018-02-21Extend these #ifdef notyet. The m_copydata's in these branches are wrong,maxv
2018-02-16Style, remove unused and misleading macros and comments, localify, andmaxv
2018-02-16Fix inverted logic, otherwise the kernel crashes when receiving a 1-bytemaxv
2018-02-16Style a bit, no functional change.maxv
2018-02-16Remove unused.maxv
2018-02-16Add [ah/esp/ipcomp]_enable sysctls, and remove the FreeBSD #ifdefs.maxv
2018-02-16Remove some more FreeBSD sysctl declarations that already have NetBSDmaxv
2018-02-16Remove ipsec_replay and ipsec_integrity from this place, they are alreadymaxv
2018-02-16Remove ip4_esp_randpad and ip6_esp_randpad, unused. Discussed withmaxv
2018-02-15Style and simplify.maxv
2018-02-15Style a bit, and if we don't know the pad-filling policy usemaxv
2018-02-15Remove broken MROUTING code, rename ipo->ip4, and simplify.maxv
2018-02-15Fix the IPIP_STAT_IBYTES stats; we did m_adj(m, iphlen) which substractedmaxv
2018-02-15dedup againmaxv
2018-02-15dedupmaxv
2018-02-15Style and remove dead code.maxv
2018-02-15Fix buffer overflow on sending an IPv6 packet with large optionsozaki-r
2018-02-15Commonalize error paths (NFC)ozaki-r
2018-02-15stylemaxv
2018-02-15Make sure the Authentication Header fits the mbuf chain, otherwise panic.maxv
2018-02-15Fix use-after-free, 'ah' may not be valid after m_makewritable andmaxv