Lines Matching refs:sav
130 struct secasvar *sav = NULL; in ah4_input() local
161 if ((sav = key_allocsa(AF_INET, in ah4_input()
172 (uint64_t)VM_KERNEL_ADDRPERM(sav))); in ah4_input()
173 if (sav->state != SADB_SASTATE_MATURE in ah4_input()
174 && sav->state != SADB_SASTATE_DYING) { in ah4_input()
182 algo = ah_algorithm_lookup(sav->alg_auth); in ah4_input()
191 siz = (*algo->sumsiz)(sav); in ah4_input()
200 sizoff = (sav->flags & SADB_X_EXT_OLD) ? 0 : 4; in ah4_input()
259 if ((sav->flags & SADB_X_EXT_OLD) == 0 && sav->replay[0] != NULL) { in ah4_input()
260 if (ipsec_chkreplay(ntohl(((struct newah *)ah)->ah_seq), sav, 0)) { in ah4_input()
266 ipsec4_logpacketstr(ip, spi), ipsec_logsastr(sav))); in ah4_input()
297 if (ah4_calccksum(m, (caddr_t)cksum, siz1, algo, sav)) { in ah4_input()
302 IPSEC_STAT_INCREMENT(ipsecstat.in_ahhist[sav->alg_auth]); in ah4_input()
312 if (sav->flags & SADB_X_EXT_OLD) { in ah4_input()
323 ipsec4_logpacketstr(ip, spi), ipsec_logsastr(sav))); in ah4_input()
340 ipsec4_logpacketstr(ip, spi), ipsec_logsastr(sav))); in ah4_input()
348 if ((sav->flags & SADB_X_EXT_OLD) == 0 && sav->replay[0] != NULL) { in ah4_input()
349 if (ipsec_updatereplay(ntohl(((struct newah *)ah)->ah_seq), sav, 0)) { in ah4_input()
356 if (sav->flags & SADB_X_EXT_OLD) { in ah4_input()
363 if (ipsec4_tunnel_validate(m, (int)(off + stripsiz), nxt, sav, &ifamily)) { in ah4_input()
380 "in IPv4 AH input: %s\n", ipsec_logsastr(sav))); in ah4_input()
408 if (!key_checktunnelsanity(sav, AF_INET, in ah4_input()
412 ipsec4_logpacketstr(ip, spi), ipsec_logsastr(sav))); in ah4_input()
441 key_sa_recordxfer(sav, m); in ah4_input()
463 ifnet_t ipsec_if = sav->sah->ipsec_if; in ah4_input()
515 key_sa_recordxfer(sav, m); in ah4_input()
528 ifnet_t ipsec_if = sav->sah->ipsec_if; in ah4_input()
561 if (sav) { in ah4_input()
564 (uint64_t)VM_KERNEL_ADDRPERM(sav))); in ah4_input()
565 key_freesav(sav, KEY_SADB_UNLOCKED); in ah4_input()
571 if (sav) { in ah4_input()
574 (uint64_t)VM_KERNEL_ADDRPERM(sav))); in ah4_input()
575 key_freesav(sav, KEY_SADB_UNLOCKED); in ah4_input()
597 struct secasvar *sav = NULL; in ah6_input() local
620 if ((sav = key_allocsa(AF_INET6, in ah6_input()
631 (uint64_t)VM_KERNEL_ADDRPERM(sav))); in ah6_input()
632 if (sav->state != SADB_SASTATE_MATURE in ah6_input()
633 && sav->state != SADB_SASTATE_DYING) { in ah6_input()
641 algo = ah_algorithm_lookup(sav->alg_auth); in ah6_input()
650 siz = (*algo->sumsiz)(sav); in ah6_input()
659 sizoff = (sav->flags & SADB_X_EXT_OLD) ? 0 : 4; in ah6_input()
691 if ((sav->flags & SADB_X_EXT_OLD) == 0 && sav->replay[0] != NULL) { in ah6_input()
692 if (ipsec_chkreplay(ntohl(((struct newah *)ah)->ah_seq), sav, 0)) { in ah6_input()
699 ipsec_logsastr(sav))); in ah6_input()
716 if (ah6_calccksum(m, (caddr_t)cksum, siz1, algo, sav)) { in ah6_input()
721 IPSEC_STAT_INCREMENT(ipsec6stat.in_ahhist[sav->alg_auth]); in ah6_input()
726 if (sav->flags & SADB_X_EXT_OLD) { in ah6_input()
737 ipsec6_logpacketstr(ip6, spi), ipsec_logsastr(sav))); in ah6_input()
754 ipsec6_logpacketstr(ip6, spi), ipsec_logsastr(sav))); in ah6_input()
762 if ((sav->flags & SADB_X_EXT_OLD) == 0 && sav->replay[0] != NULL) { in ah6_input()
763 if (ipsec_updatereplay(ntohl(((struct newah *)ah)->ah_seq), sav, 0)) { in ah6_input()
770 if (sav->flags & SADB_X_EXT_OLD) { in ah6_input()
777 if (ipsec6_tunnel_validate(m, (int)(off + stripsiz), nxt, sav, &ifamily)) { in ah6_input()
792 "in IPv6 AH input: %s\n", ipsec_logsastr(sav))); in ah6_input()
815 if (!key_checktunnelsanity(sav, AF_INET6, in ah6_input()
820 ipsec_logsastr(sav))); in ah6_input()
832 key_sa_recordxfer(sav, m); in ah6_input()
854 ifnet_t ipsec_if = sav->sah->ipsec_if; in ah6_input()
903 key_sa_recordxfer(sav, m); in ah6_input()
911 ifnet_t ipsec_if = sav->sah->ipsec_if; in ah6_input()
933 if (sav) { in ah6_input()
936 (uint64_t)VM_KERNEL_ADDRPERM(sav))); in ah6_input()
937 key_freesav(sav, KEY_SADB_UNLOCKED); in ah6_input()
943 if (sav) { in ah6_input()
946 (uint64_t)VM_KERNEL_ADDRPERM(sav))); in ah6_input()
947 key_freesav(sav, KEY_SADB_UNLOCKED); in ah6_input()
961 struct secasvar *sav; in ah6_ctlinput() local
1018 sav = key_allocsa(AF_INET6, in ah6_ctlinput()
1023 if (sav) { in ah6_ctlinput()
1024 if (sav->state == SADB_SASTATE_MATURE || in ah6_ctlinput()
1025 sav->state == SADB_SASTATE_DYING) { in ah6_ctlinput()
1028 key_freesav(sav, KEY_SADB_UNLOCKED); in ah6_ctlinput()