summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2.c
AgeCommit message (Expand)Author
2021-12-19There are occasions where the walker function in tdb_walk() mightAlexander Bluhm
2021-12-14To cache lookups, the policy ipo is linked to its SA tdb. ThereAlexander Bluhm
2021-12-08Start documenting the locking strategy of struct tdb fields. NoteAlexander Bluhm
2021-12-03Add tdb_delete_locked() to replace duplicate tdb deletion code inTobias Heider
2021-12-01Reintroduce the TDBF_DELETED flag. Checking next pointer to figureAlexander Bluhm
2021-11-29Using a void pointer for temporary allocated TDB in pfkeyv2 doesAlexander Bluhm
2021-11-26Replace TDBF_DELETED flag with check if tdb was already unlinked.Tobias Heider
2021-11-25Implement reference counting for IPsec tdbs. Not all cases areAlexander Bluhm
2021-10-25Call a locked variant of tdb_unlink() from tdb_walk(). Fixes aAlexander Bluhm
2021-10-22After deleting hifn(4) the only provider for the LZS compressionAlexander Bluhm
2021-07-20The current workaround to disable parallel IPsec did not work.Alexander Bluhm
2021-07-14Export SA replay counters via pfkey and print with ipsecctl.tobhe
2021-07-08Initialize `ipsec_acquire_pool' pool (9) within pfkey_init() instead ofmvs
2021-07-05Export tdb MTU to userland via SADB_GET. This helps debug path MTUtobhe
2021-05-30Declare all struct protosw as constant.Alexander Bluhm
2021-05-26Use `so_lock' to protect key management (PF_KEY) sockets. This can bemvs
2021-05-25As network features are not added dynamically, the domain structuresAlexander Bluhm
2021-05-25The arrays sadb_exts_allowed_out and sadb_exts_required_out areAlexander Bluhm
2021-05-04Initialize `ipsec_policy_pool' within pfkey_init() instead of doing thatmvs
2021-05-04Remove unused `spd_tables' declaration.mvs
2021-05-02Do soreserve() before `kp' allocation. This simplifies error path. Themvs
2020-12-14Make sure that the address families of a flow's source address,tobhe
2020-08-28Make sure not to pass NULL to explicit_bzero().tobhe
2020-08-07pfkey_get may allocate more memory than is needed to hold the SAtobhe
2020-08-05Use PFKEYV2_LIFETIME_CURRENT instead of magic number.tobhe
2020-07-21Make sure to explicit_bzero() buffers holding sensitive SA data.tobhe
2020-07-18Add size to free(9) callskn
2020-07-18Add size to free(9) callskn
2020-07-15Add sizes to free(9) callskn
2020-04-23Add support for autmatically moving traffic between rdomains on ipsec(4)tobhe
2020-03-18Plug mem leak in SADB_REGISTER.Martin Pieuchot
2019-07-17Convert struct pkpcb malloc(9) to pool_get(9). PCB for pfkey isAlexander Bluhm
2019-02-04Avoid an mbuf double free in the oob soreceive() path. In theAlexander Bluhm
2019-02-01Export per-TDB counters to userland.Martin Pieuchot
2019-02-01Do not silently return if extensions do not match the filters.Martin Pieuchot
2019-01-13Fix an off-by-one in pfkeyv2_sysctl_policydumper() and get rid of aMartin Pieuchot
2018-12-18Fix the IPL of pfkeyv2_mtx to prevent a deadlock. The system can useVisa Hankala
2018-09-12Stop exporting TDB counters to userland, this change introduced aMartin Pieuchot
2018-08-31Cadd a TDB `tdb' instead of `sa'.Martin Pieuchot
2018-08-28Add per-TDB counters and a new SADB extension to export them toMartin Pieuchot
2018-07-10Remove net/raw_cb.h from includes and replace the RAWSNDQ, RAWRCVQ withClaudio Jeker
2018-07-10After removing raw_usrreq() from route and pfkey, the global sockaddrAlexander Bluhm
2018-07-09Inline the raw_usrreq() function into pfkeyv2_usrreq(). Similar to theClaudio Jeker
2018-06-25Push the NET_LOCK() down in pfkeyv2_send().Martin Pieuchot
2018-06-20Use the socket lock rather than the KERNEL_LOCK() in pfkey_sendup().Martin Pieuchot
2018-06-11Rename routing & pfkey tables for coherency with other PCB tables.Martin Pieuchot
2018-06-06Prefix fields of pfkey & routing PCBs, part 2, no functionnal change.Martin Pieuchot
2018-06-06Prefix fields of pfkey & routing PCBs, no functionnal change.Martin Pieuchot
2018-06-06Asseert that a pfkey or routing socket is referenced by a `fp' insteadMartin Pieuchot
2018-05-19As long we have no per socket locking, we must grab either net lockAlexander Bluhm