summaryrefslogtreecommitdiff
path: root/sys/netipsec
AgeCommit message (Expand)Author
2018-04-13Remove duplicate, to better show that this place doesn't make a lot ofmaxv
2018-04-09Removed the unnecessary order check of key_lookup_sayamaguchi
2018-04-06Fix unexpected failure when ipsecif(4) over IPv6 is changed port number only.knakahara
2018-04-06Add IPv4 ID when the ipsecif(4) packet can be fragmented. Implemented by hsue...knakahara
2018-04-03Remove ipsec_copy_policy and ipsec_copy_pcbpolicy. No functional change,maxv
2018-03-31typo in commentsmaxv
2018-03-19socket: report receive buffer overflowsroy
2018-03-13comment out confusing (and incorrect) code and add comment. Pointed out by ma...knakahara
2018-03-10Add KASSERTs.maxv
2018-03-10Fix the computation. Normally that's harmless since ip6_output recomputesmaxv
2018-03-09Fix ipsec(4) I/F esp_frag support.knakahara
2018-03-06Fix fragment processing in ipsec4_fragout(). Pointed out by maxv@n.o, thanks.knakahara
2018-03-05Improve stupid check, style, and fix leak (m, not m0).maxv
2018-03-05Call m_pullup earlier, fixes one branch.maxv
2018-03-03Reduce the diff between ipsec4_output and ipsec6_check_policy. While heremaxv
2018-03-03Dedup.maxv
2018-03-03Add KASSERTs, we don't want m_nextpkt in ipsec{4/6}_process_packet.maxv
2018-03-02Avoid data races on lifetime counters by using percpu(9)ozaki-r
2018-02-28add missing staticmaxv
2018-02-28Remove unused macros, and while here style.maxv
2018-02-28Remove duplicate IPSEC_STATINC(IPSEC_STAT_IN_POLVIO), ipsec_in_rejectmaxv
2018-02-28Dedup: merge ipsec4_setspidx_inpcb and ipsec6_setspidx_in6pcb.maxv
2018-02-28ipsec6_setspidx_in6pcb: call ipsec_setspidx() only once, just like themaxv
2018-02-27Dedup: merge ipsec4_set_policy and ipsec6_set_policy. The content of themaxv
2018-02-27Remove duplicate checks, and no need to initialize 'newsp' inmaxv
2018-02-27Dedup: mergemaxv
2018-02-27Use inpcb_hdr to reduce the diff betweenmaxv
2018-02-27Optimize: use ipsec_sp_hdrsiz instead of ipsec_hdrsiz, not to re-querymaxv
2018-02-26Dedup: call ipsec_in_reject directly. IPSEC_STAT_IN_POLVIO also getsmaxv
2018-02-26Reduce the diff between ipsec6_input and ipsec4_input.maxv
2018-02-26Dedup: merge ipsec4_in_reject and ipsec6_in_reject into ipsec_in_reject.maxv
2018-02-26Dedup: merge ipsec4_hdrsiz and ipsec6_hdrsiz into ipsec_hdrsiz.maxv
2018-02-26Dedup: merge ipsec4_checkpolicy and ipsec6_checkpolicy intomaxv
2018-02-26If 'skip' is lower than sizeof(struct ip), we are in trouble. So remove amaxv
2018-02-26m is never allowed to be NULL, so turn the KASSERT (and the null check)maxv
2018-02-26Fix nonsensical checks, neither in6p nor request is allowed to be NULL,maxv
2018-02-26Add XXX, it seems to me we need to free the mbuf here.maxv
2018-02-26Reinforce this area, make sure the length field fits the option. Normallymaxv
2018-02-26Fix mbuf mistake: we are using ip6 before it is pulled up properly.maxv
2018-02-26Merge some minor (mostly stylistic) changes from last week.maxv
2018-02-21Style, no functional change.maxv
2018-02-21Strengthen this check, to make sure there is room for an ip6_ext structure.maxv
2018-02-21Argh, in my previous commit in this file I forgot to fix the IPv6maxv
2018-02-21Fix ipsec4_get_ulp(). We should do "goto done" instead of "return",maxv
2018-02-21Use inpcb_hdr to reduce the diff between:maxv
2018-02-21Rename:maxv
2018-02-21Extend these #ifdef notyet. The m_copydata's in these branches are wrong,maxv
2018-02-16Style, remove unused and misleading macros and comments, localify, andmaxv
2018-02-16Fix inverted logic, otherwise the kernel crashes when receiving a 1-bytemaxv
2018-02-16Style a bit, no functional change.maxv