summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2.c
AgeCommit message (Expand)Author
2020-07-21Make sure to explicit_bzero() buffers holding sensitive SA data.tobhe
2020-07-18Add size to free(9) callskn
2020-07-18Add size to free(9) callskn
2020-07-15Add sizes to free(9) callskn
2020-04-23Add support for autmatically moving traffic between rdomains on ipsec(4)tobhe
2020-03-18Plug mem leak in SADB_REGISTER.Martin Pieuchot
2019-07-17Convert struct pkpcb malloc(9) to pool_get(9). PCB for pfkey isAlexander Bluhm
2019-02-04Avoid an mbuf double free in the oob soreceive() path. In theAlexander Bluhm
2019-02-01Export per-TDB counters to userland.Martin Pieuchot
2019-02-01Do not silently return if extensions do not match the filters.Martin Pieuchot
2019-01-13Fix an off-by-one in pfkeyv2_sysctl_policydumper() and get rid of aMartin Pieuchot
2018-12-18Fix the IPL of pfkeyv2_mtx to prevent a deadlock. The system can useVisa Hankala
2018-09-12Stop exporting TDB counters to userland, this change introduced aMartin Pieuchot
2018-08-31Cadd a TDB `tdb' instead of `sa'.Martin Pieuchot
2018-08-28Add per-TDB counters and a new SADB extension to export them toMartin Pieuchot
2018-07-10Remove net/raw_cb.h from includes and replace the RAWSNDQ, RAWRCVQ withClaudio Jeker
2018-07-10After removing raw_usrreq() from route and pfkey, the global sockaddrAlexander Bluhm
2018-07-09Inline the raw_usrreq() function into pfkeyv2_usrreq(). Similar to theClaudio Jeker
2018-06-25Push the NET_LOCK() down in pfkeyv2_send().Martin Pieuchot
2018-06-20Use the socket lock rather than the KERNEL_LOCK() in pfkey_sendup().Martin Pieuchot
2018-06-11Rename routing & pfkey tables for coherency with other PCB tables.Martin Pieuchot
2018-06-06Prefix fields of pfkey & routing PCBs, part 2, no functionnal change.Martin Pieuchot
2018-06-06Prefix fields of pfkey & routing PCBs, no functionnal change.Martin Pieuchot
2018-06-06Asseert that a pfkey or routing socket is referenced by a `fp' insteadMartin Pieuchot
2018-05-19As long we have no per socket locking, we must grab either net lockAlexander Bluhm
2018-05-16Fix kernel builds without IPSEC.Reyk Floeter
2018-05-14Use a SRP list to protect pfkeyv2 sockets, thus removing the need toMartin Pieuchot
2018-05-08Introduce rtm_sendup() a function to deliver routing messages to aMartin Pieuchot
2018-02-19Remove almost unused `flags' argument of suser().Martin Pieuchot
2017-11-20Flush flows using the radix-tree instead of a global list.Martin Pieuchot
2017-11-13Grab the KERNEL_LOCK() to iterate on the global list of PF_KEY sockets.Martin Pieuchot
2017-11-12Only use a single taskq to process incoming network packets as soon asMartin Pieuchot
2017-11-03After inlining of raw_detach we know the sizes for free; pointed outFlorian Obser
2017-11-03Inline trivial functions from raw_cb.c and tedu it.Florian Obser
2017-11-02Move PRU_DETACH out of pr_usrreq into per proto pr_detachFlorian Obser
2017-10-27Dump IPsec flows by iterating over the rafdix-tree.Martin Pieuchot
2017-10-16Last changes before running IPsec w/o KERNEL_LOCK().Martin Pieuchot
2017-10-09Reduces the scope of the NET_LOCK() in sysctl(2) path.Martin Pieuchot
2017-09-08If you use sys/param.h, you don't need sys/types.hTheo de Raadt
2017-08-11Remove NET_LOCK()'s argument.Martin Pieuchot
2017-07-26Consistantly use kp as the var name for struct keycb.Claudio Jeker
2017-07-03Both PF_ROUTE and PF_KEY need to start to take care of their own PCB listClaudio Jeker
2017-06-26Assert that the corresponding socket is locked when manipulating socketMartin Pieuchot
2017-06-26Allow updating the destination address of an existing TDB. Since thePatrick Wildt
2017-05-29Replace handrolled list with LIST_* macros. OK mpi@Claudio Jeker
2017-05-29Kill struct pfkey_version and move struct pfkeyv2_socket & dump_stateClaudio Jeker
2017-05-29PFKEY version 2 is the only pfkey version supported. No need for extraClaudio Jeker
2017-05-27Push the NET_LOCK down into PF_KEY so that it can be treated like PF_ROUTE.Claudio Jeker
2017-05-26There is only one version of pfkey in OpenBSD and this will not change anyClaudio Jeker
2017-05-16Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED().Martin Pieuchot
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-15 15:16:28 +0000