sys/netipsec/key.c

407 	struct sadb_ext *ext[SADB_EXT_MAX + 1];
1713 		    (mhp->ext[idx] == NULL || mhp->extlen[idx] == 0))
1799 	if (mhp->ext[SADB_EXT_ADDRESS_SRC] == NULL ||
1800 	    mhp->ext[SADB_EXT_ADDRESS_DST] == NULL ||
1801 	    mhp->ext[SADB_X_EXT_POLICY] == NULL) {
1812 	if (mhp->ext[SADB_EXT_LIFETIME_HARD] != NULL) {
1819 		lft = (struct sadb_lifetime *)mhp->ext[SADB_EXT_LIFETIME_HARD];
1822 	src0 = (struct sadb_address *)mhp->ext[SADB_EXT_ADDRESS_SRC];
1823 	dst0 = (struct sadb_address *)mhp->ext[SADB_EXT_ADDRESS_DST];
1824 	xpl0 = (struct sadb_x_policy *)mhp->ext[SADB_X_EXT_POLICY];
2062 	if (mhp->ext[SADB_EXT_ADDRESS_SRC] == NULL ||
2063 	    mhp->ext[SADB_EXT_ADDRESS_DST] == NULL ||
2064 	    mhp->ext[SADB_X_EXT_POLICY] == NULL) {
2077 	src0 = (struct sadb_address *)mhp->ext[SADB_EXT_ADDRESS_SRC];
2078 	dst0 = (struct sadb_address *)mhp->ext[SADB_EXT_ADDRESS_DST];
2079 	xpl0 = (struct sadb_x_policy *)mhp->ext[SADB_X_EXT_POLICY];
2170 	if (mhp->ext[SADB_X_EXT_POLICY] == NULL ||
2176 	id = ((struct sadb_x_policy *)mhp->ext[SADB_X_EXT_POLICY])->sadb_x_policy_id;
2265 	if (mhp->ext[SADB_X_EXT_POLICY] == NULL ||
2272 	id = ((struct sadb_x_policy *)mhp->ext[SADB_X_EXT_POLICY])->sadb_x_policy_id;
2814 		if (mhp->ext[SADB_EXT_SA] == NULL) {
2822 		xsa = (const struct sadb_sa *)mhp->ext[SADB_EXT_SA];
3080 	if (mhp->ext[SADB_EXT_SA] != NULL) {
3083 		sa0 = (const struct sadb_sa *)mhp->ext[SADB_EXT_SA];
3110 	if (mhp->ext[SADB_EXT_KEY_AUTH] != NULL) {
3114 		key0 = (const struct sadb_key *)mhp->ext[SADB_EXT_KEY_AUTH];
3152 	if (mhp->ext[SADB_EXT_KEY_ENCRYPT] != NULL) {
3156 		key0 = (const struct sadb_key *)mhp->ext[SADB_EXT_KEY_ENCRYPT];
3242 	lft0 = (struct sadb_lifetime *)mhp->ext[SADB_EXT_LIFETIME_HARD];
3257 	lft0 = (struct sadb_lifetime *)mhp->ext[SADB_EXT_LIFETIME_SOFT];
4654 	if (mhp->ext[SADB_EXT_ADDRESS_SRC] == NULL ||
4655 	    mhp->ext[SADB_EXT_ADDRESS_DST] == NULL) {
4666 	if (mhp->ext[SADB_X_EXT_SA2] != NULL) {
4667 		mode = ((struct sadb_x_sa2 *)mhp->ext[SADB_X_EXT_SA2])->sadb_x_sa2_mode;
4668 		reqid = ((struct sadb_x_sa2 *)mhp->ext[SADB_X_EXT_SA2])->sadb_x_sa2_reqid;
4674 	src0 = (struct sadb_address *)(mhp->ext[SADB_EXT_ADDRESS_SRC]);
4675 	dst0 = (struct sadb_address *)(mhp->ext[SADB_EXT_ADDRESS_DST]);
4730 	if (mhp->ext[SADB_X_EXT_NAT_T_OAI] != NULL)
4732 	if (mhp->ext[SADB_X_EXT_NAT_T_OAR] != NULL)
4735 	if (mhp->ext[SADB_X_EXT_NAT_T_TYPE] != NULL &&
4736 	    mhp->ext[SADB_X_EXT_NAT_T_SPORT] != NULL &&
4737 	    mhp->ext[SADB_X_EXT_NAT_T_DPORT] != NULL) {
4750 		    mhp->ext[SADB_X_EXT_NAT_T_SPORT];
4752 		    mhp->ext[SADB_X_EXT_NAT_T_DPORT];
4762 	spi = key_do_getnewspi((struct sadb_spirange *)mhp->ext[SADB_EXT_SPIRANGE],
4982 	if (mhp->ext[SADB_EXT_SA] == NULL ||
4983 	    mhp->ext[SADB_EXT_ADDRESS_SRC] == NULL ||
4984 	    mhp->ext[SADB_EXT_ADDRESS_DST] == NULL ||
4986 	     mhp->ext[SADB_EXT_KEY_ENCRYPT] == NULL) ||
4988 	     mhp->ext[SADB_EXT_KEY_AUTH] == NULL) ||
4989 	    (mhp->ext[SADB_EXT_LIFETIME_HARD] != NULL &&
4990 	     mhp->ext[SADB_EXT_LIFETIME_SOFT] == NULL) ||
4991 	    (mhp->ext[SADB_EXT_LIFETIME_HARD] == NULL &&
4992 	     mhp->ext[SADB_EXT_LIFETIME_SOFT] != NULL)) {
5004 	if (mhp->ext[SADB_X_EXT_SA2] != NULL) {
5005 		mode = ((struct sadb_x_sa2 *)mhp->ext[SADB_X_EXT_SA2])->sadb_x_sa2_mode;
5006 		reqid = ((struct sadb_x_sa2 *)mhp->ext[SADB_X_EXT_SA2])->sadb_x_sa2_reqid;
5013 	sa0 = (struct sadb_sa *)mhp->ext[SADB_EXT_SA];
5014 	src0 = (struct sadb_address *)(mhp->ext[SADB_EXT_ADDRESS_SRC]);
5015 	dst0 = (struct sadb_address *)(mhp->ext[SADB_EXT_ADDRESS_DST]);
5031 	if (mhp->ext[SADB_X_EXT_NAT_T_TYPE] != NULL &&
5032 	    mhp->ext[SADB_X_EXT_NAT_T_SPORT] != NULL &&
5033 	    mhp->ext[SADB_X_EXT_NAT_T_DPORT] != NULL) {
5044 		    mhp->ext[SADB_X_EXT_NAT_T_TYPE];
5046 		    mhp->ext[SADB_X_EXT_NAT_T_SPORT];
5048 		    mhp->ext[SADB_X_EXT_NAT_T_DPORT];
5053 	if (mhp->ext[SADB_X_EXT_NAT_T_OAI] != NULL &&
5054 	    mhp->ext[SADB_X_EXT_NAT_T_OAR] != NULL) {
5061 		iaddr = (struct sadb_address *)mhp->ext[SADB_X_EXT_NAT_T_OAI];
5062 		raddr = (struct sadb_address *)mhp->ext[SADB_X_EXT_NAT_T_OAR];
5067 	if (mhp->ext[SADB_X_EXT_NAT_T_FRAG] != NULL) {
5074 		    mhp->ext[SADB_X_EXT_NAT_T_FRAG];
5271 	if (mhp->ext[SADB_EXT_SA] == NULL ||
5272 	    mhp->ext[SADB_EXT_ADDRESS_SRC] == NULL ||
5273 	    mhp->ext[SADB_EXT_ADDRESS_DST] == NULL ||
5275 	     mhp->ext[SADB_EXT_KEY_ENCRYPT] == NULL) ||
5277 	     mhp->ext[SADB_EXT_KEY_AUTH] == NULL) ||
5278 	    (mhp->ext[SADB_EXT_LIFETIME_HARD] != NULL &&
5279 	     mhp->ext[SADB_EXT_LIFETIME_SOFT] == NULL) ||
5280 	    (mhp->ext[SADB_EXT_LIFETIME_HARD] == NULL &&
5281 	     mhp->ext[SADB_EXT_LIFETIME_SOFT] != NULL)) {
5294 	if (mhp->ext[SADB_X_EXT_SA2] != NULL) {
5295 		mode = ((struct sadb_x_sa2 *)mhp->ext[SADB_X_EXT_SA2])->sadb_x_sa2_mode;
5296 		reqid = ((struct sadb_x_sa2 *)mhp->ext[SADB_X_EXT_SA2])->sadb_x_sa2_reqid;
5302 	sa0 = (struct sadb_sa *)mhp->ext[SADB_EXT_SA];
5303 	src0 = (struct sadb_address *)mhp->ext[SADB_EXT_ADDRESS_SRC];
5304 	dst0 = (struct sadb_address *)mhp->ext[SADB_EXT_ADDRESS_DST];
5320 	if (mhp->ext[SADB_X_EXT_NAT_T_TYPE] != NULL &&
5321 	    mhp->ext[SADB_X_EXT_NAT_T_SPORT] != NULL &&
5322 	    mhp->ext[SADB_X_EXT_NAT_T_DPORT] != NULL) {
5334 		    mhp->ext[SADB_X_EXT_NAT_T_TYPE];
5336 		    mhp->ext[SADB_X_EXT_NAT_T_SPORT];
5338 		    mhp->ext[SADB_X_EXT_NAT_T_DPORT];
5349 	if (mhp->ext[SADB_X_EXT_NAT_T_OAI] != NULL &&
5350 	    mhp->ext[SADB_X_EXT_NAT_T_OAR] != NULL) {
5357 		iaddr = (struct sadb_address *)mhp->ext[SADB_X_EXT_NAT_T_OAI];
5358 		raddr = (struct sadb_address *)mhp->ext[SADB_X_EXT_NAT_T_OAR];
5363 	if (mhp->ext[SADB_X_EXT_NAT_T_FRAG] != NULL) {
5370 		    mhp->ext[SADB_X_EXT_NAT_T_FRAG];
5467 	if (mhp->ext[SADB_EXT_IDENTITY_SRC] == NULL &&
5468 	    mhp->ext[SADB_EXT_IDENTITY_DST] == NULL) {
5474 	if (mhp->ext[SADB_EXT_IDENTITY_SRC] == NULL ||
5475 	    mhp->ext[SADB_EXT_IDENTITY_DST] == NULL) {
5480 	idsrc = (const struct sadb_ident *)mhp->ext[SADB_EXT_IDENTITY_SRC];
5481 	iddst = (const struct sadb_ident *)mhp->ext[SADB_EXT_IDENTITY_DST];
5599 	if (mhp->ext[SADB_EXT_ADDRESS_SRC] == NULL ||
5600 	    mhp->ext[SADB_EXT_ADDRESS_DST] == NULL) {
5613 	if (mhp->ext[SADB_EXT_SA] == NULL) {
5627 	sa0 = (struct sadb_sa *)mhp->ext[SADB_EXT_SA];
5628 	src0 = (struct sadb_address *)(mhp->ext[SADB_EXT_ADDRESS_SRC]);
5629 	dst0 = (struct sadb_address *)(mhp->ext[SADB_EXT_ADDRESS_DST]);
5645 	if (mhp->ext[SADB_X_EXT_NAT_T_SPORT] != NULL &&
5646 	    mhp->ext[SADB_X_EXT_NAT_T_DPORT] != NULL) {
5657 		    mhp->ext[SADB_X_EXT_NAT_T_SPORT];
5659 		    mhp->ext[SADB_X_EXT_NAT_T_DPORT];
5731 	src0 = (struct sadb_address *)(mhp->ext[SADB_EXT_ADDRESS_SRC]);
5732 	dst0 = (struct sadb_address *)(mhp->ext[SADB_EXT_ADDRESS_DST]);
5749 	if (mhp->ext[SADB_X_EXT_NAT_T_SPORT] != NULL &&
5750 	    mhp->ext[SADB_X_EXT_NAT_T_DPORT] != NULL) {
5761 		    mhp->ext[SADB_X_EXT_NAT_T_SPORT];
5763 		    mhp->ext[SADB_X_EXT_NAT_T_DPORT];
5867 	if (mhp->ext[SADB_EXT_SA] == NULL ||
5868 	    mhp->ext[SADB_EXT_ADDRESS_SRC] == NULL ||
5869 	    mhp->ext[SADB_EXT_ADDRESS_DST] == NULL) {
5882 	sa0 = (struct sadb_sa *)mhp->ext[SADB_EXT_SA];
5883 	src0 = (struct sadb_address *)mhp->ext[SADB_EXT_ADDRESS_SRC];
5884 	dst0 = (struct sadb_address *)mhp->ext[SADB_EXT_ADDRESS_DST];
5901 	if (mhp->ext[SADB_X_EXT_NAT_T_SPORT] != NULL &&
5902 	    mhp->ext[SADB_X_EXT_NAT_T_DPORT] != NULL) {
5913 		    mhp->ext[SADB_X_EXT_NAT_T_SPORT];
5915 		    mhp->ext[SADB_X_EXT_NAT_T_DPORT];
6603 	if (mhp->ext[SADB_EXT_ADDRESS_SRC] == NULL ||
6604 	    mhp->ext[SADB_EXT_ADDRESS_DST] == NULL ||
6605 	    mhp->ext[SADB_EXT_PROPOSAL] == NULL) {
6620 	src0 = (struct sadb_address *)mhp->ext[SADB_EXT_ADDRESS_SRC];
6621 	dst0 = (struct sadb_address *)mhp->ext[SADB_EXT_ADDRESS_DST];
6638 	if (mhp->ext[SADB_X_EXT_NAT_T_SPORT] != NULL &&
6639 	    mhp->ext[SADB_X_EXT_NAT_T_DPORT] != NULL) {
6650 		    mhp->ext[SADB_X_EXT_NAT_T_SPORT];
6652 		    mhp->ext[SADB_X_EXT_NAT_T_DPORT];
7435 	if (mh.ext[SADB_EXT_ADDRESS_SRC] != NULL
7436 	 && mh.ext[SADB_EXT_ADDRESS_DST] != NULL) {
7440 		src0 = (struct sadb_address *)(mh.ext[SADB_EXT_ADDRESS_SRC]);
7441 		dst0 = (struct sadb_address *)(mh.ext[SADB_EXT_ADDRESS_DST]);
7564 	struct sadb_ext *ext;
7578 	mhp->ext[0] = (struct sadb_ext *)mhp->msg;	/*XXX backward compat */
7588 		ext = (struct sadb_ext *)(mtod(n, caddr_t) + toff);
7591 		switch (ext->sadb_ext_type) {
7623 			if (mhp->ext[ext->sadb_ext_type] != NULL) {
7625 					"%u\n", __func__, ext->sadb_ext_type));
7633 				__func__, ext->sadb_ext_type));
7639 		extlen = PFKEY_UNUNIT64(ext->sadb_ext_len);
7641 		if (key_validate_ext(ext, extlen)) {
7652 		ext = (struct sadb_ext *)(mtod(n, caddr_t) + toff);
7654 		mhp->ext[ext->sadb_ext_type] = ext;
7655 		mhp->extoff[ext->sadb_ext_type] = off;
7656 		mhp->extlen[ext->sadb_ext_type] = extlen;
7669 key_validate_ext(ext, len)
7670 	const struct sadb_ext *ext;
7678 	if (len != PFKEY_UNUNIT64(ext->sadb_ext_len))
7682 	if (ext->sadb_ext_type >= sizeof(minsize) / sizeof(minsize[0]) ||
7683 	    ext->sadb_ext_type >= sizeof(maxsize) / sizeof(maxsize[0]))
7685 	if (!minsize[ext->sadb_ext_type] || len < minsize[ext->sadb_ext_type])
7687 	if (maxsize[ext->sadb_ext_type] && len > maxsize[ext->sadb_ext_type])
7691 	switch (ext->sadb_ext_type) {
7700 		if (((const struct sadb_ident *)ext)->sadb_ident_type ==
7716 		sa = (const struct sockaddr *)(((const u_int8_t*)ext)+baselen);