Page MenuHomeFreeBSD
Differential D3960

IPsec SP priority support
ClosedPublic
Actions

Authored by fabient on Oct 21 2015, 10:23 AM.
Tags
None
Referenced Files
Unknown Object (File)
Feb 24 2025, 3:36 AM
Unknown Object (File)
Feb 24 2025, 3:23 AM
Unknown Object (File)
Feb 23 2025, 4:45 PM
Unknown Object (File)
Feb 22 2025, 9:34 AM
Unknown Object (File)
Jan 25 2025, 9:26 AM
Unknown Object (File)
Jan 19 2025, 5:53 PM
Unknown Object (File)
Dec 26 2024, 10:30 PM
Unknown Object (File)
Nov 30 2024, 9:17 AM
View All 84 Files
Subscribers
imp

Details

Reviewers
ae
gnn
Summary

Implement the sadb_x_policy_priority field as it is done in Linux: lower priority policies are inserted first.

Submitted by : Emeric Poupon emeric.poupon@stormshield.eu

Test Plan

Tested with ipsec-tools and strongSwan

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

fabient updated this revision to Diff 9573.Oct 21 2015, 10:23 AM
fabient retitled this revision from to IPsec SP priority support.
fabient updated this object.
fabient edited the test plan for this revision. (Show Details)
fabient added reviewers: ae, gnn.
fabient set the repository for this revision to rS FreeBSD src repository - subversion.
Herald added a subscriber: imp. · View Herald TranscriptOct 21 2015, 10:23 AM
ae accepted this revision.Oct 21 2015, 12:26 PM
ae edited edge metadata.
This revision is now accepted and ready to land.Oct 21 2015, 12:26 PM
fabient updated this revision to Diff 9708.Oct 26 2015, 3:19 PM
fabient edited edge metadata.

From internal review: Adding missing priority field when notifying acquire to userland.

This revision now requires review to proceed.Oct 26 2015, 3:19 PM
ae accepted this revision.Oct 27 2015, 8:50 AM
ae edited edge metadata.
This revision is now accepted and ready to land.Oct 27 2015, 8:50 AM
fabient closed this revision.Nov 17 2015, 2:42 PM

Commited as r290982

Revision Contents
Changeset List

PathSize
net/
2 lines
netipsec/
1 line
37 lines

Diff 9708

View Options

net/pfkeyv2.h

Show First 20 Lines • Show All 70 Lines • ▼ Show 20 Linesexec_gzip_imgact(imgp)
struct image_params *imgp; struct image_params *imgp;
{ {
int error; int error;
const u_char *p = (const u_char *) imgp->image_header; const u_char *p = (const u_char *) imgp->image_header;
struct imgact_gzip igz; struct imgact_gzip igz;
struct inflate infl; struct inflate infl;
struct vmspace *vmspace; struct vmspace *vmspace;
/*
* This image activator doesn't support an explicit interpreter.
*/
if (imgp->args->interpreter != -1) {
return (EINVAL);
}
/* If these four are not OK, it isn't a gzip file */ /* If these four are not OK, it isn't a gzip file */
if (p[0] != 0x1f) if (p[0] != 0x1f)
return -1; /* 0 Simply magic */ return -1; /* 0 Simply magic */
if (p[1] != 0x8b) if (p[1] != 0x8b)
return -1; /* 1 Simply magic */ return -1; /* 1 Simply magic */
if (p[2] != 0x08) if (p[2] != 0x08)
return -1; /* 2 Compression method */ return -1; /* 2 Compression method */
if (p[9] != 0x03) if (p[9] != 0x03)
▲ Show 20 Lines • Show All 304 Lines • Show Last 20 Lines
View Options

netipsec/ipsec.h

Show First 20 Lines • Show All 70 Lines • ▼ Show 20 Linesexec_gzip_imgact(imgp)
struct image_params *imgp; struct image_params *imgp;
{ {
int error; int error;
const u_char *p = (const u_char *) imgp->image_header; const u_char *p = (const u_char *) imgp->image_header;
struct imgact_gzip igz; struct imgact_gzip igz;
struct inflate infl; struct inflate infl;
struct vmspace *vmspace; struct vmspace *vmspace;
/*
* This image activator doesn't support an explicit interpreter.
*/
if (imgp->args->interpreter != -1) {
return (EINVAL);
}
/* If these four are not OK, it isn't a gzip file */ /* If these four are not OK, it isn't a gzip file */
if (p[0] != 0x1f) if (p[0] != 0x1f)
return -1; /* 0 Simply magic */ return -1; /* 0 Simply magic */
if (p[1] != 0x8b) if (p[1] != 0x8b)
return -1; /* 1 Simply magic */ return -1; /* 1 Simply magic */
if (p[2] != 0x08) if (p[2] != 0x08)
return -1; /* 2 Compression method */ return -1; /* 2 Compression method */
if (p[9] != 0x03) if (p[9] != 0x03)
▲ Show 20 Lines • Show All 304 Lines • Show Last 20 Lines
View Options

netipsec/key.c

Show First 20 Lines • Show All 70 Lines • ▼ Show 20 Linesexec_gzip_imgact(imgp)
struct image_params *imgp; struct image_params *imgp;
{ {
int error; int error;
const u_char *p = (const u_char *) imgp->image_header; const u_char *p = (const u_char *) imgp->image_header;
struct imgact_gzip igz; struct imgact_gzip igz;
struct inflate infl; struct inflate infl;
struct vmspace *vmspace; struct vmspace *vmspace;
/*
* This image activator doesn't support an explicit interpreter.
*/
if (imgp->args->interpreter != -1) {
return (EINVAL);
}
/* If these four are not OK, it isn't a gzip file */ /* If these four are not OK, it isn't a gzip file */
if (p[0] != 0x1f) if (p[0] != 0x1f)
return -1; /* 0 Simply magic */ return -1; /* 0 Simply magic */
if (p[1] != 0x8b) if (p[1] != 0x8b)
return -1; /* 1 Simply magic */ return -1; /* 1 Simply magic */
if (p[2] != 0x08) if (p[2] != 0x08)
return -1; /* 2 Compression method */ return -1; /* 2 Compression method */
if (p[9] != 0x03) if (p[9] != 0x03)
▲ Show 20 Lines • Show All 304 Lines • Show Last 20 Lines