41 #include <netlink-private/netlink.h> 42 #include <netlink/netlink.h> 43 #include <netlink/cache.h> 44 #include <netlink/object.h> 45 #include <netlink/xfrm/selector.h> 46 #include <netlink/xfrm/lifetime.h> 50 #define XFRM_SA_ATTR_SEL 0x01 51 #define XFRM_SA_ATTR_DADDR 0x02 52 #define XFRM_SA_ATTR_SPI 0x04 53 #define XFRM_SA_ATTR_PROTO 0x08 54 #define XFRM_SA_ATTR_SADDR 0x10 55 #define XFRM_SA_ATTR_LTIME_CFG 0x20 56 #define XFRM_SA_ATTR_LTIME_CUR 0x40 57 #define XFRM_SA_ATTR_STATS 0x80 58 #define XFRM_SA_ATTR_SEQ 0x100 59 #define XFRM_SA_ATTR_REQID 0x200 60 #define XFRM_SA_ATTR_FAMILY 0x400 61 #define XFRM_SA_ATTR_MODE 0x800 62 #define XFRM_SA_ATTR_REPLAY_WIN 0x1000 63 #define XFRM_SA_ATTR_FLAGS 0x2000 64 #define XFRM_SA_ATTR_ALG_AEAD 0x4000 65 #define XFRM_SA_ATTR_ALG_AUTH 0x8000 66 #define XFRM_SA_ATTR_ALG_CRYPT 0x10000 67 #define XFRM_SA_ATTR_ALG_COMP 0x20000 68 #define XFRM_SA_ATTR_ENCAP 0x40000 69 #define XFRM_SA_ATTR_TFCPAD 0x80000 70 #define XFRM_SA_ATTR_COADDR 0x100000 71 #define XFRM_SA_ATTR_MARK 0x200000 72 #define XFRM_SA_ATTR_SECCTX 0x400000 73 #define XFRM_SA_ATTR_REPLAY_MAXAGE 0x800000 74 #define XFRM_SA_ATTR_REPLAY_MAXDIFF 0x1000000 75 #define XFRM_SA_ATTR_REPLAY_STATE 0x2000000 76 #define XFRM_SA_ATTR_EXPIRE 0x4000000 78 static struct nl_cache_ops xfrmnl_sa_ops;
79 static struct nl_object_ops xfrm_sa_obj_ops;
82 static void xfrm_sa_alloc_data(
struct nl_object *c)
84 struct xfrmnl_sa* sa = nl_object_priv (c);
93 static void xfrm_sa_free_data(
struct nl_object *c)
95 struct xfrmnl_sa* sa = nl_object_priv (c);
100 xfrmnl_sel_put (sa->sel);
101 xfrmnl_ltime_cfg_put (sa->lft);
114 if (sa->encap->encap_oa)
122 if (sa->replay_state_esn)
123 free (sa->replay_state_esn);
126 static int xfrm_sa_clone(
struct nl_object *_dst,
struct nl_object *_src)
128 struct xfrmnl_sa* dst = nl_object_priv(_dst);
129 struct xfrmnl_sa* src = nl_object_priv(_src);
150 len =
sizeof (
struct xfrmnl_algo_aead) + ((src->aead->alg_key_len + 7) / 8);
151 if ((dst->aead = calloc (1, len)) == NULL)
153 memcpy ((
void *)dst->aead, (
void *)src->aead, len);
158 len =
sizeof (
struct xfrmnl_algo_auth) + ((src->auth->alg_key_len + 7) / 8);
159 if ((dst->auth = calloc (1, len)) == NULL)
161 memcpy ((
void *)dst->auth, (
void *)src->auth, len);
166 len =
sizeof (
struct xfrmnl_algo) + ((src->crypt->alg_key_len + 7) / 8);
167 if ((dst->crypt = calloc (1, len)) == NULL)
169 memcpy ((
void *)dst->crypt, (
void *)src->crypt, len);
174 len =
sizeof (
struct xfrmnl_algo) + ((src->comp->alg_key_len + 7) / 8);
175 if ((dst->comp = calloc (1, len)) == NULL)
177 memcpy ((
void *)dst->comp, (
void *)src->comp, len);
182 len =
sizeof (
struct xfrmnl_encap_tmpl);
183 if ((dst->encap = calloc (1, len)) == NULL)
185 memcpy ((
void *)dst->encap, (
void *)src->encap, len);
194 len =
sizeof (
struct xfrmnl_sec_ctx) + src->sec_ctx->ctx_len;
195 if ((dst->sec_ctx = calloc (1, len)) == NULL)
197 memcpy ((
void *)dst->sec_ctx, (
void *)src->sec_ctx, len);
200 if (src->replay_state_esn)
202 len =
sizeof (
struct xfrmnl_replay_state_esn) + (src->replay_state_esn->bmp_len *
sizeof (uint32_t));
203 if ((dst->replay_state_esn = calloc (1, len)) == NULL)
205 memcpy ((
void *)dst->replay_state_esn, (
void *)src->replay_state_esn, len);
211 static uint64_t xfrm_sa_compare(
struct nl_object *_a,
struct nl_object *_b,
212 uint64_t attrs,
int flags)
214 struct xfrmnl_sa* a = (
struct xfrmnl_sa *) _a;
215 struct xfrmnl_sa* b = (
struct xfrmnl_sa *) _b;
219 #define XFRM_SA_DIFF(ATTR, EXPR) ATTR_DIFF(attrs, XFRM_SA_ATTR_##ATTR, a, b, EXPR) 221 diff |= XFRM_SA_DIFF(DADDR,
nl_addr_cmp(a->id.daddr, b->id.daddr));
222 diff |= XFRM_SA_DIFF(SPI, a->id.spi != b->id.spi);
223 diff |= XFRM_SA_DIFF(PROTO, a->id.proto != b->id.proto);
224 diff |= XFRM_SA_DIFF(SADDR,
nl_addr_cmp(a->saddr, b->saddr));
226 diff |= XFRM_SA_DIFF(REQID, a->reqid != b->reqid);
227 diff |= XFRM_SA_DIFF(FAMILY,a->family != b->family);
228 diff |= XFRM_SA_DIFF(MODE,a->mode != b->mode);
229 diff |= XFRM_SA_DIFF(REPLAY_WIN,a->replay_window != b->replay_window);
230 diff |= XFRM_SA_DIFF(FLAGS,a->flags != b->flags);
231 diff |= XFRM_SA_DIFF(ALG_AEAD,(strcmp(a->aead->alg_name, b->aead->alg_name) ||
232 (a->aead->alg_key_len != b->aead->alg_key_len) ||
233 (a->aead->alg_icv_len != b->aead->alg_icv_len) ||
234 memcmp(a->aead->alg_key, b->aead->alg_key,
235 ((a->aead->alg_key_len + 7)/8))));
236 diff |= XFRM_SA_DIFF(ALG_AUTH,(strcmp(a->auth->alg_name, b->auth->alg_name) ||
237 (a->auth->alg_key_len != b->auth->alg_key_len) ||
238 (a->auth->alg_trunc_len != b->auth->alg_trunc_len) ||
239 memcmp(a->auth->alg_key, b->auth->alg_key,
240 ((a->auth->alg_key_len + 7)/8))));
241 diff |= XFRM_SA_DIFF(ALG_CRYPT,(strcmp(a->crypt->alg_name, b->crypt->alg_name) ||
242 (a->crypt->alg_key_len != b->crypt->alg_key_len) ||
243 memcmp(a->crypt->alg_key, b->crypt->alg_key,
244 ((a->crypt->alg_key_len + 7)/8))));
245 diff |= XFRM_SA_DIFF(ALG_COMP,(strcmp(a->comp->alg_name, b->comp->alg_name) ||
246 (a->comp->alg_key_len != b->comp->alg_key_len) ||
247 memcmp(a->comp->alg_key, b->comp->alg_key,
248 ((a->comp->alg_key_len + 7)/8))));
249 diff |= XFRM_SA_DIFF(ENCAP,((a->encap->encap_type != b->encap->encap_type) ||
250 (a->encap->encap_sport != b->encap->encap_sport) ||
251 (a->encap->encap_dport != b->encap->encap_dport) ||
252 nl_addr_cmp(a->encap->encap_oa, b->encap->encap_oa)));
253 diff |= XFRM_SA_DIFF(TFCPAD,a->tfcpad != b->tfcpad);
254 diff |= XFRM_SA_DIFF(COADDR,
nl_addr_cmp(a->coaddr, b->coaddr));
255 diff |= XFRM_SA_DIFF(MARK,(a->mark.m != b->mark.m) ||
256 (a->mark.v != b->mark.v));
257 diff |= XFRM_SA_DIFF(SECCTX,((a->sec_ctx->ctx_doi != b->sec_ctx->ctx_doi) ||
258 (a->sec_ctx->ctx_alg != b->sec_ctx->ctx_alg) ||
259 (a->sec_ctx->ctx_len != b->sec_ctx->ctx_len) ||
260 (a->sec_ctx->ctx_sid != b->sec_ctx->ctx_sid) ||
261 strcmp(a->sec_ctx->ctx_str, b->sec_ctx->ctx_str)));
262 diff |= XFRM_SA_DIFF(REPLAY_MAXAGE,a->replay_maxage != b->replay_maxage);
263 diff |= XFRM_SA_DIFF(REPLAY_MAXDIFF,a->replay_maxdiff != b->replay_maxdiff);
264 diff |= XFRM_SA_DIFF(EXPIRE,a->hard != b->hard);
267 found = AVAILABLE_MISMATCH (a, b, XFRM_SA_ATTR_REPLAY_STATE);
270 if (((a->replay_state_esn != NULL) && (b->replay_state_esn == NULL)) ||
271 ((a->replay_state_esn == NULL) && (b->replay_state_esn != NULL)))
276 if (a->replay_state_esn)
278 if (a->replay_state_esn->bmp_len != b->replay_state_esn->bmp_len)
282 uint32_t len =
sizeof (
struct xfrmnl_replay_state_esn) +
283 (a->replay_state_esn->bmp_len *
sizeof (uint32_t));
284 diff |= memcmp (a->replay_state_esn, b->replay_state_esn, len);
289 if ((a->replay_state.oseq != b->replay_state.oseq) ||
290 (a->replay_state.seq != b->replay_state.seq) ||
291 (a->replay_state.bitmap != b->replay_state.bitmap))
305 static const struct trans_tbl sa_attrs[] = {
306 __ADD(XFRM_SA_ATTR_SEL, selector),
307 __ADD(XFRM_SA_ATTR_DADDR, daddr),
308 __ADD(XFRM_SA_ATTR_SPI, spi),
309 __ADD(XFRM_SA_ATTR_PROTO, proto),
310 __ADD(XFRM_SA_ATTR_SADDR, saddr),
311 __ADD(XFRM_SA_ATTR_LTIME_CFG, lifetime_cfg),
312 __ADD(XFRM_SA_ATTR_LTIME_CUR, lifetime_cur),
313 __ADD(XFRM_SA_ATTR_STATS, stats),
314 __ADD(XFRM_SA_ATTR_SEQ, seqnum),
315 __ADD(XFRM_SA_ATTR_REQID, reqid),
316 __ADD(XFRM_SA_ATTR_FAMILY, family),
317 __ADD(XFRM_SA_ATTR_MODE, mode),
318 __ADD(XFRM_SA_ATTR_REPLAY_WIN, replay_window),
319 __ADD(XFRM_SA_ATTR_FLAGS, flags),
320 __ADD(XFRM_SA_ATTR_ALG_AEAD, alg_aead),
321 __ADD(XFRM_SA_ATTR_ALG_AUTH, alg_auth),
322 __ADD(XFRM_SA_ATTR_ALG_CRYPT, alg_crypto),
323 __ADD(XFRM_SA_ATTR_ALG_COMP, alg_comp),
324 __ADD(XFRM_SA_ATTR_ENCAP, encap),
325 __ADD(XFRM_SA_ATTR_TFCPAD, tfcpad),
326 __ADD(XFRM_SA_ATTR_COADDR, coaddr),
327 __ADD(XFRM_SA_ATTR_MARK, mark),
328 __ADD(XFRM_SA_ATTR_SECCTX, sec_ctx),
329 __ADD(XFRM_SA_ATTR_REPLAY_MAXAGE, replay_maxage),
330 __ADD(XFRM_SA_ATTR_REPLAY_MAXDIFF, replay_maxdiff),
331 __ADD(XFRM_SA_ATTR_REPLAY_STATE, replay_state),
332 __ADD(XFRM_SA_ATTR_EXPIRE, expire),
335 static char* xfrm_sa_attrs2str(
int attrs,
char *buf,
size_t len)
337 return __flags2str (attrs, buf, len, sa_attrs, ARRAY_SIZE(sa_attrs));
345 static const struct trans_tbl sa_flags[] = {
346 __ADD(XFRM_STATE_NOECN, no ecn),
347 __ADD(XFRM_STATE_DECAP_DSCP, decap dscp),
348 __ADD(XFRM_STATE_NOPMTUDISC, no pmtu discovery),
349 __ADD(XFRM_STATE_WILDRECV, wild receive),
350 __ADD(XFRM_STATE_ICMP, icmp),
351 __ADD(XFRM_STATE_AF_UNSPEC, unspecified),
352 __ADD(XFRM_STATE_ALIGN4, align4),
353 __ADD(XFRM_STATE_ESN, esn),
356 char* xfrmnl_sa_flags2str(
int flags,
char *buf,
size_t len)
358 return __flags2str (flags, buf, len, sa_flags, ARRAY_SIZE(sa_flags));
361 int xfrmnl_sa_str2flag(
const char *name)
363 return __str2flags (name, sa_flags, ARRAY_SIZE(sa_flags));
371 static const struct trans_tbl sa_modes[] = {
372 __ADD(XFRM_MODE_TRANSPORT, transport),
373 __ADD(XFRM_MODE_TUNNEL, tunnel),
374 __ADD(XFRM_MODE_ROUTEOPTIMIZATION, route optimization),
375 __ADD(XFRM_MODE_IN_TRIGGER, in trigger),
376 __ADD(XFRM_MODE_BEET, beet),
379 char* xfrmnl_sa_mode2str(
int mode,
char *buf,
size_t len)
381 return __type2str (mode, buf, len, sa_modes, ARRAY_SIZE(sa_modes));
384 int xfrmnl_sa_str2mode(
const char *name)
386 return __str2type (name, sa_modes, ARRAY_SIZE(sa_modes));
391 static void xfrm_sa_dump_line(
struct nl_object *a,
struct nl_dump_params *p)
393 char dst[INET6_ADDRSTRLEN+5], src[INET6_ADDRSTRLEN+5];
394 struct xfrmnl_sa* sa = (
struct xfrmnl_sa *) a;
395 char flags[128], mode[128];
396 time_t add_time, use_time;
397 struct tm *add_time_tm, *use_time_tm;
399 nl_dump_line(p,
"src %s dst %s family: %s\n",
nl_addr2str(sa->saddr, src,
sizeof(src)),
401 nl_af2str (sa->family, flags, sizeof (flags)));
403 nl_dump_line(p,
"\tproto %s spi 0x%x reqid %u\n",
404 nl_ip_proto2str (sa->id.proto, flags,
sizeof(flags)),
405 sa->id.spi, sa->reqid);
407 xfrmnl_sa_flags2str(sa->flags, flags, sizeof (flags));
408 xfrmnl_sa_mode2str(sa->mode, mode, sizeof (mode));
409 nl_dump_line(p,
"\tmode: %s flags: %s (0x%x) seq: %u replay window: %u\n",
410 mode, flags, sa->flags, sa->seq, sa->replay_window);
412 nl_dump_line(p,
"\tlifetime configuration: \n");
413 if (sa->lft->soft_byte_limit == XFRM_INF)
414 sprintf (flags,
"INF");
416 sprintf (flags,
"%" PRIu64, sa->lft->soft_byte_limit);
417 if (sa->lft->soft_packet_limit == XFRM_INF)
418 sprintf (mode,
"INF");
420 sprintf (mode,
"%" PRIu64, sa->lft->soft_packet_limit);
421 nl_dump_line(p,
"\t\tsoft limit: %s (bytes), %s (packets)\n", flags, mode);
422 if (sa->lft->hard_byte_limit == XFRM_INF)
423 sprintf (flags,
"INF");
425 sprintf (flags,
"%" PRIu64, sa->lft->hard_byte_limit);
426 if (sa->lft->hard_packet_limit == XFRM_INF)
427 sprintf (mode,
"INF");
429 sprintf (mode,
"%" PRIu64, sa->lft->hard_packet_limit);
430 nl_dump_line(p,
"\t\thard limit: %s (bytes), %s (packets)\n", flags, mode);
431 nl_dump_line(p,
"\t\tsoft add_time: %llu (seconds), soft use_time: %llu (seconds) \n",
432 sa->lft->soft_add_expires_seconds, sa->lft->soft_use_expires_seconds);
433 nl_dump_line(p,
"\t\thard add_time: %llu (seconds), hard use_time: %llu (seconds) \n",
434 sa->lft->hard_add_expires_seconds, sa->lft->hard_use_expires_seconds);
436 nl_dump_line(p,
"\tlifetime current: \n");
437 nl_dump_line(p,
"\t\t%llu bytes, %llu packets\n", sa->curlft.bytes, sa->curlft.packets);
438 if (sa->curlft.add_time != 0)
440 add_time = sa->curlft.add_time;
441 add_time_tm = gmtime (&add_time);
442 strftime (flags, 128,
"%Y-%m-%d %H-%M-%S", add_time_tm);
446 sprintf (flags,
"%s",
"-");
449 if (sa->curlft.use_time != 0)
451 use_time = sa->curlft.use_time;
452 use_time_tm = gmtime (&use_time);
453 strftime (mode, 128,
"%Y-%m-%d %H-%M-%S", use_time_tm);
457 sprintf (mode,
"%s",
"-");
459 nl_dump_line(p,
"\t\tadd_time: %s, use_time: %s\n", flags, mode);
463 nl_dump_line(p,
"\tAEAD Algo: \n");
464 nl_dump_line(p,
"\t\tName: %s Key len(bits): %u ICV Len(bits): %u\n",
465 sa->aead->alg_name, sa->aead->alg_key_len, sa->aead->alg_icv_len);
470 nl_dump_line(p,
"\tAuth Algo: \n");
471 nl_dump_line(p,
"\t\tName: %s Key len(bits): %u Trunc len(bits): %u\n",
472 sa->auth->alg_name, sa->auth->alg_key_len, sa->auth->alg_trunc_len);
477 nl_dump_line(p,
"\tEncryption Algo: \n");
478 nl_dump_line(p,
"\t\tName: %s Key len(bits): %u\n",
479 sa->crypt->alg_name, sa->crypt->alg_key_len);
484 nl_dump_line(p,
"\tCompression Algo: \n");
485 nl_dump_line(p,
"\t\tName: %s Key len(bits): %u\n",
486 sa->comp->alg_name, sa->comp->alg_key_len);
491 nl_dump_line(p,
"\tEncapsulation template: \n");
492 nl_dump_line(p,
"\t\tType: %d Src port: %d Dst port: %d Encap addr: %s\n",
493 sa->encap->encap_type, sa->encap->encap_sport, sa->encap->encap_dport,
494 nl_addr2str (sa->encap->encap_oa, dst, sizeof (dst)));
497 if (sa->ce_mask & XFRM_SA_ATTR_TFCPAD)
498 nl_dump_line(p,
"\tTFC Pad: %u\n", sa->tfcpad);
500 if (sa->ce_mask & XFRM_SA_ATTR_COADDR)
501 nl_dump_line(p,
"\tCO Address: %s\n",
nl_addr2str (sa->coaddr, dst, sizeof (dst)));
503 if (sa->ce_mask & XFRM_SA_ATTR_MARK)
504 nl_dump_line(p,
"\tMark mask: 0x%x Mark value: 0x%x\n", sa->mark.m, sa->mark.v);
506 if (sa->ce_mask & XFRM_SA_ATTR_SECCTX)
507 nl_dump_line(p,
"\tDOI: %d Algo: %d Len: %u SID: %u ctx: %s\n", sa->sec_ctx->ctx_doi,
508 sa->sec_ctx->ctx_alg, sa->sec_ctx->ctx_len, sa->sec_ctx->ctx_sid, sa->sec_ctx->ctx_str);
510 nl_dump_line(p,
"\treplay info: \n");
511 nl_dump_line(p,
"\t\tmax age %u max diff %u \n", sa->replay_maxage, sa->replay_maxdiff);
513 if (sa->ce_mask & XFRM_SA_ATTR_REPLAY_STATE)
515 nl_dump_line(p,
"\treplay state info: \n");
516 if (sa->replay_state_esn)
518 nl_dump_line(p,
"\t\toseq %u seq %u oseq_hi %u seq_hi %u replay window: %u \n",
519 sa->replay_state_esn->oseq, sa->replay_state_esn->seq,
520 sa->replay_state_esn->oseq_hi, sa->replay_state_esn->seq_hi,
521 sa->replay_state_esn->replay_window);
525 nl_dump_line(p,
"\t\toseq %u seq %u bitmap: %u \n", sa->replay_state.oseq,
526 sa->replay_state.seq, sa->replay_state.bitmap);
530 nl_dump_line(p,
"\tselector info: \n");
531 xfrmnl_sel_dump (sa->sel, p);
533 nl_dump_line(p,
"\tHard: %d\n", sa->hard);
538 static void xfrm_sa_dump_stats(
struct nl_object *a,
struct nl_dump_params *p)
540 struct xfrmnl_sa* sa = (
struct xfrmnl_sa*)a;
542 nl_dump_line(p,
"\tstats: \n");
543 nl_dump_line(p,
"\t\treplay window: %u replay: %u integrity failed: %u \n",
544 sa->stats.replay_window, sa->stats.replay, sa->stats.integrity_failed);
549 static void xfrm_sa_dump_details(
struct nl_object *a,
struct nl_dump_params *p)
551 xfrm_sa_dump_line(a, p);
552 xfrm_sa_dump_stats (a, p);
560 struct xfrmnl_sa* xfrmnl_sa_alloc(
void)
565 void xfrmnl_sa_put(
struct xfrmnl_sa* sa)
587 int xfrmnl_sa_alloc_cache(
struct nl_sock *sock,
struct nl_cache **result)
600 struct xfrmnl_sa* xfrmnl_sa_get(
struct nl_cache* cache,
struct nl_addr* daddr,
601 unsigned int spi,
unsigned int proto)
603 struct xfrmnl_sa *sa;
610 if (sa->id.proto == proto &&
627 static struct nla_policy xfrm_sa_policy[XFRMA_MAX+1] = {
628 [XFRMA_SA] = { .
minlen =
sizeof(
struct xfrm_usersa_info)},
629 [XFRMA_ALG_AUTH_TRUNC] = { .minlen =
sizeof(
struct xfrm_algo_auth)},
630 [XFRMA_ALG_AEAD] = { .minlen =
sizeof(
struct xfrm_algo_aead) },
631 [XFRMA_ALG_AUTH] = { .minlen =
sizeof(
struct xfrm_algo) },
632 [XFRMA_ALG_CRYPT] = { .minlen =
sizeof(
struct xfrm_algo) },
633 [XFRMA_ALG_COMP] = { .minlen =
sizeof(
struct xfrm_algo) },
634 [XFRMA_ENCAP] = { .minlen =
sizeof(
struct xfrm_encap_tmpl) },
635 [XFRMA_TMPL] = { .minlen =
sizeof(
struct xfrm_user_tmpl) },
636 [XFRMA_SEC_CTX] = { .minlen =
sizeof(
struct xfrm_sec_ctx) },
637 [XFRMA_LTIME_VAL] = { .minlen =
sizeof(
struct xfrm_lifetime_cur) },
638 [XFRMA_REPLAY_VAL] = { .minlen =
sizeof(
struct xfrm_replay_state) },
639 [XFRMA_REPLAY_THRESH] = { .type =
NLA_U32 },
640 [XFRMA_ETIMER_THRESH] = { .type =
NLA_U32 },
641 [XFRMA_SRCADDR] = { .minlen =
sizeof(xfrm_address_t) },
642 [XFRMA_COADDR] = { .minlen =
sizeof(xfrm_address_t) },
643 [XFRMA_MARK] = { .minlen =
sizeof(
struct xfrm_mark) },
644 [XFRMA_TFCPAD] = { .type =
NLA_U32 },
645 [XFRMA_REPLAY_ESN_VAL] = { .minlen =
sizeof(
struct xfrm_replay_state_esn) },
648 static int xfrm_sa_request_update(
struct nl_cache *c,
struct nl_sock *h)
650 struct xfrm_id sa_id;
652 memset (&sa_id, 0,
sizeof (sa_id));
654 &sa_id,
sizeof (sa_id));
657 int xfrmnl_sa_parse(
struct nlmsghdr *n,
struct xfrmnl_sa **result)
659 struct xfrmnl_sa* sa;
660 struct nlattr *tb[XFRMA_MAX + 1];
661 struct xfrm_usersa_info* sa_info;
662 struct xfrm_user_expire* ue;
664 struct nl_addr* addr;
666 sa = xfrmnl_sa_alloc();
672 sa->ce_msgtype = n->nlmsg_type;
673 if (n->nlmsg_type == XFRM_MSG_EXPIRE)
676 sa_info = &ue->state;
678 sa->ce_mask |= XFRM_SA_ATTR_EXPIRE;
680 else if (n->nlmsg_type == XFRM_MSG_DELSA)
682 sa_info = (
struct xfrm_usersa_info*)(
nlmsg_data(n) +
sizeof (
struct xfrm_usersa_id) + NLA_HDRLEN);
689 err =
nlmsg_parse(n,
sizeof(
struct xfrm_usersa_info), tb, XFRMA_MAX, xfrm_sa_policy);
693 if (sa_info->sel.family == AF_INET)
694 addr =
nl_addr_build (sa_info->sel.family, &sa_info->sel.daddr.a4, sizeof (sa_info->sel.daddr.a4));
696 addr =
nl_addr_build (sa_info->sel.family, &sa_info->sel.daddr.a6, sizeof (sa_info->sel.daddr.a6));
698 xfrmnl_sel_set_daddr (sa->sel, addr);
699 xfrmnl_sel_set_prefixlen_d (sa->sel, sa_info->sel.prefixlen_d);
701 if (sa_info->sel.family == AF_INET)
702 addr =
nl_addr_build (sa_info->sel.family, &sa_info->sel.saddr.a4, sizeof (sa_info->sel.saddr.a4));
704 addr =
nl_addr_build (sa_info->sel.family, &sa_info->sel.saddr.a6, sizeof (sa_info->sel.saddr.a6));
706 xfrmnl_sel_set_saddr (sa->sel, addr);
707 xfrmnl_sel_set_prefixlen_s (sa->sel, sa_info->sel.prefixlen_s);
709 xfrmnl_sel_set_dport (sa->sel, ntohs(sa_info->sel.dport));
710 xfrmnl_sel_set_dportmask (sa->sel, ntohs(sa_info->sel.dport_mask));
711 xfrmnl_sel_set_sport (sa->sel, ntohs(sa_info->sel.sport));
712 xfrmnl_sel_set_sportmask (sa->sel, ntohs(sa_info->sel.sport_mask));
713 xfrmnl_sel_set_family (sa->sel, sa_info->sel.family);
714 xfrmnl_sel_set_proto (sa->sel, sa_info->sel.proto);
715 xfrmnl_sel_set_ifindex (sa->sel, sa_info->sel.ifindex);
716 xfrmnl_sel_set_userid (sa->sel, sa_info->sel.user);
717 sa->ce_mask |= XFRM_SA_ATTR_SEL;
719 if (sa_info->family == AF_INET)
720 sa->id.daddr =
nl_addr_build (sa_info->family, &sa_info->id.daddr.a4, sizeof (sa_info->id.daddr.a4));
722 sa->id.daddr =
nl_addr_build (sa_info->family, &sa_info->id.daddr.a6, sizeof (sa_info->id.daddr.a6));
723 sa->id.spi = ntohl(sa_info->id.spi);
724 sa->id.proto = sa_info->id.proto;
725 sa->ce_mask |= (XFRM_SA_ATTR_DADDR | XFRM_SA_ATTR_SPI | XFRM_SA_ATTR_PROTO);
727 if (sa_info->family == AF_INET)
728 sa->saddr =
nl_addr_build (sa_info->family, &sa_info->saddr.a4, sizeof (sa_info->saddr.a4));
730 sa->saddr =
nl_addr_build (sa_info->family, &sa_info->saddr.a6, sizeof (sa_info->saddr.a6));
731 sa->ce_mask |= XFRM_SA_ATTR_SADDR;
733 sa->lft->soft_byte_limit = sa_info->lft.soft_byte_limit;
734 sa->lft->hard_byte_limit = sa_info->lft.hard_byte_limit;
735 sa->lft->soft_packet_limit = sa_info->lft.soft_packet_limit;
736 sa->lft->hard_packet_limit = sa_info->lft.hard_packet_limit;
737 sa->lft->soft_add_expires_seconds = sa_info->lft.soft_add_expires_seconds;
738 sa->lft->hard_add_expires_seconds = sa_info->lft.hard_add_expires_seconds;
739 sa->lft->soft_use_expires_seconds = sa_info->lft.soft_use_expires_seconds;
740 sa->lft->hard_use_expires_seconds = sa_info->lft.hard_use_expires_seconds;
741 sa->ce_mask |= XFRM_SA_ATTR_LTIME_CFG;
743 sa->curlft.bytes = sa_info->curlft.bytes;
744 sa->curlft.packets = sa_info->curlft.packets;
745 sa->curlft.add_time = sa_info->curlft.add_time;
746 sa->curlft.use_time = sa_info->curlft.use_time;
747 sa->ce_mask |= XFRM_SA_ATTR_LTIME_CUR;
749 sa->stats.replay_window = sa_info->stats.replay_window;
750 sa->stats.replay = sa_info->stats.replay;
751 sa->stats.integrity_failed = sa_info->stats.integrity_failed;
752 sa->ce_mask |= XFRM_SA_ATTR_STATS;
754 sa->seq = sa_info->seq;
755 sa->reqid = sa_info->reqid;
756 sa->family = sa_info->family;
757 sa->mode = sa_info->mode;
758 sa->replay_window = sa_info->replay_window;
759 sa->flags = sa_info->flags;
760 sa->ce_mask |= (XFRM_SA_ATTR_SEQ | XFRM_SA_ATTR_REQID |
761 XFRM_SA_ATTR_FAMILY | XFRM_SA_ATTR_MODE |
762 XFRM_SA_ATTR_REPLAY_WIN | XFRM_SA_ATTR_FLAGS);
764 if (tb[XFRMA_ALG_AEAD]) {
765 struct xfrm_algo_aead* aead =
nla_data(tb[XFRMA_ALG_AEAD]);
766 len =
sizeof (
struct xfrmnl_algo_aead) + ((aead->alg_key_len + 7) / 8);
767 if ((sa->aead = calloc (1, len)) == NULL)
772 memcpy ((
void *)sa->aead, (
void *)aead, len);
773 sa->ce_mask |= XFRM_SA_ATTR_ALG_AEAD;
776 if (tb[XFRMA_ALG_AUTH_TRUNC]) {
777 struct xfrm_algo_auth* auth =
nla_data(tb[XFRMA_ALG_AUTH_TRUNC]);
778 len =
sizeof (
struct xfrmnl_algo_auth) + ((auth->alg_key_len + 7) / 8);
779 if ((sa->auth = calloc (1, len)) == NULL)
784 memcpy ((
void *)sa->auth, (
void *)auth, len);
785 sa->ce_mask |= XFRM_SA_ATTR_ALG_AUTH;
788 if (tb[XFRMA_ALG_AUTH] && !sa->auth) {
789 struct xfrm_algo* auth =
nla_data(tb[XFRMA_ALG_AUTH]);
790 len =
sizeof (
struct xfrmnl_algo_auth) + ((auth->alg_key_len + 7) / 8);
791 if ((sa->auth = calloc (1, len)) == NULL)
796 strcpy(sa->auth->alg_name, auth->alg_name);
797 memcpy(sa->auth->alg_key, auth->alg_key, (auth->alg_key_len + 7) / 8);
798 sa->auth->alg_key_len = auth->alg_key_len;
799 sa->ce_mask |= XFRM_SA_ATTR_ALG_AUTH;
802 if (tb[XFRMA_ALG_CRYPT]) {
803 struct xfrm_algo* crypt =
nla_data(tb[XFRMA_ALG_CRYPT]);
804 len =
sizeof (
struct xfrmnl_algo) + ((crypt->alg_key_len + 7) / 8);
805 if ((sa->crypt = calloc (1, len)) == NULL)
810 memcpy ((
void *)sa->crypt, (
void *)crypt, len);
811 sa->ce_mask |= XFRM_SA_ATTR_ALG_CRYPT;
814 if (tb[XFRMA_ALG_COMP]) {
815 struct xfrm_algo* comp =
nla_data(tb[XFRMA_ALG_COMP]);
816 len =
sizeof (
struct xfrmnl_algo) + ((comp->alg_key_len + 7) / 8);
817 if ((sa->comp = calloc (1, len)) == NULL)
822 memcpy ((
void *)sa->comp, (
void *)comp, len);
823 sa->ce_mask |= XFRM_SA_ATTR_ALG_COMP;
826 if (tb[XFRMA_ENCAP]) {
827 struct xfrm_encap_tmpl* encap =
nla_data(tb[XFRMA_ENCAP]);
828 len =
sizeof (
struct xfrmnl_encap_tmpl);
829 if ((sa->encap = calloc (1, len)) == NULL)
834 sa->encap->encap_type = encap->encap_type;
835 sa->encap->encap_sport = ntohs(encap->encap_sport);
836 sa->encap->encap_dport = ntohs(encap->encap_dport);
837 if (sa_info->family == AF_INET)
838 sa->encap->encap_oa =
nl_addr_build (sa_info->family, &encap->encap_oa.a4, sizeof (encap->encap_oa.a4));
840 sa->encap->encap_oa =
nl_addr_build (sa_info->family, &encap->encap_oa.a6, sizeof (encap->encap_oa.a6));
841 sa->ce_mask |= XFRM_SA_ATTR_ENCAP;
844 if (tb[XFRMA_TFCPAD]) {
845 sa->tfcpad = *(uint32_t*)
nla_data(tb[XFRMA_TFCPAD]);
846 sa->ce_mask |= XFRM_SA_ATTR_TFCPAD;
849 if (tb[XFRMA_COADDR]) {
850 if (sa_info->family == AF_INET)
858 sizeof (uint32_t) * 4);
860 sa->ce_mask |= XFRM_SA_ATTR_COADDR;
863 if (tb[XFRMA_MARK]) {
864 struct xfrm_mark* m =
nla_data(tb[XFRMA_MARK]);
867 sa->ce_mask |= XFRM_SA_ATTR_MARK;
870 if (tb[XFRMA_SEC_CTX]) {
871 struct xfrm_sec_ctx* sec_ctx =
nla_data(tb[XFRMA_SEC_CTX]);
872 len =
sizeof (
struct xfrmnl_sec_ctx) + sec_ctx->ctx_len;
873 if ((sa->sec_ctx = calloc (1, len)) == NULL)
878 memcpy ((
void *)sa->sec_ctx, (
void *)sec_ctx, len);
879 sa->ce_mask |= XFRM_SA_ATTR_SECCTX;
882 if (tb[XFRMA_ETIMER_THRESH]) {
883 sa->replay_maxage = *(uint32_t*)
nla_data(tb[XFRMA_ETIMER_THRESH]);
884 sa->ce_mask |= XFRM_SA_ATTR_REPLAY_MAXAGE;
887 if (tb[XFRMA_REPLAY_THRESH]) {
888 sa->replay_maxdiff = *(uint32_t*)
nla_data(tb[XFRMA_REPLAY_THRESH]);
889 sa->ce_mask |= XFRM_SA_ATTR_REPLAY_MAXDIFF;
892 if (tb[XFRMA_REPLAY_ESN_VAL]) {
893 struct xfrm_replay_state_esn* esn =
nla_data (tb[XFRMA_REPLAY_ESN_VAL]);
894 len =
sizeof (
struct xfrmnl_replay_state_esn) + (sizeof (uint32_t) * esn->bmp_len);
895 if ((sa->replay_state_esn = calloc (1, len)) == NULL)
900 memcpy ((
void *)sa->replay_state_esn, (
void *)esn, len);
901 sa->ce_mask |= XFRM_SA_ATTR_REPLAY_STATE;
903 else if (tb[XFRMA_REPLAY_VAL])
905 struct xfrm_replay_state* replay_state =
nla_data (tb[XFRMA_REPLAY_VAL]);
906 sa->replay_state.oseq = replay_state->oseq;
907 sa->replay_state.seq = replay_state->seq;
908 sa->replay_state.bitmap = replay_state->bitmap;
909 sa->ce_mask |= XFRM_SA_ATTR_REPLAY_STATE;
910 sa->replay_state_esn = NULL;
921 static int xfrm_sa_update_cache (
struct nl_cache *cache,
struct nl_object *obj,
922 change_func_t change_cb,
void *data)
924 struct nl_object* old_sa;
925 struct xfrmnl_sa* sa = (
struct xfrmnl_sa*)obj;
951 if (old_sa == NULL && change_cb)
955 change_cb (cache, obj, NL_ACT_NEW, data);
962 change_cb (cache, obj, NL_ACT_CHANGE, data);
971 change_cb (cache, obj, NL_ACT_DEL, data);
982 return nl_cache_include (cache, obj, change_cb, data);
986 static int xfrm_sa_msg_parser(
struct nl_cache_ops *ops,
struct sockaddr_nl *who,
987 struct nlmsghdr *n,
struct nl_parser_param *pp)
989 struct xfrmnl_sa* sa;
992 if ((err = xfrmnl_sa_parse(n, &sa)) < 0)
995 err = pp->pp_cb((
struct nl_object *) sa, pp);
1006 int xfrmnl_sa_build_get_request(
struct nl_addr* daddr,
unsigned int spi,
unsigned int protocol,
unsigned int mark_v,
unsigned int mark_m,
struct nl_msg **result)
1009 struct xfrm_usersa_id sa_id;
1010 struct xfrm_mark mark;
1014 fprintf(stderr,
"APPLICATION BUG: %s:%d:%s: A valid destination address, spi must be specified\n",
1015 __FILE__, __LINE__, __PRETTY_FUNCTION__);
1017 return -NLE_MISSING_ATTR;
1020 memset(&sa_id, 0,
sizeof(sa_id));
1023 sa_id.spi = htonl(spi);
1024 sa_id.proto = protocol;
1029 if (
nlmsg_append(msg, &sa_id,
sizeof(sa_id), NLMSG_ALIGNTO) < 0)
1030 goto nla_put_failure;
1032 if ((mark_m & mark_v) != 0)
1034 memset(&mark, 0,
sizeof(
struct xfrm_mark));
1038 NLA_PUT (msg, XFRMA_MARK,
sizeof (
struct xfrm_mark), &mark);
1046 return -NLE_MSGSIZE;
1049 int xfrmnl_sa_get_kernel(
struct nl_sock* sock,
struct nl_addr* daddr,
unsigned int spi,
unsigned int protocol,
unsigned int mark_v,
unsigned int mark_m,
struct xfrmnl_sa** result)
1051 struct nl_msg *msg = NULL;
1052 struct nl_object *obj;
1055 if ((err = xfrmnl_sa_build_get_request(daddr, spi, protocol, mark_m, mark_v, &msg)) < 0)
1063 if ((err =
nl_pickup(sock, &xfrm_sa_msg_parser, &obj)) < 0)
1067 *result = (
struct xfrmnl_sa *) obj;
1070 if (err == 0 && obj)
1078 static int build_xfrm_sa_message(
struct xfrmnl_sa *tmpl,
int cmd,
int flags,
struct nl_msg **result)
1081 struct xfrm_usersa_info sa_info;
1083 struct nl_addr* addr;
1085 if (!(tmpl->ce_mask & XFRM_SA_ATTR_DADDR) ||
1086 !(tmpl->ce_mask & XFRM_SA_ATTR_SPI) ||
1087 !(tmpl->ce_mask & XFRM_SA_ATTR_PROTO))
1088 return -NLE_MISSING_ATTR;
1090 memset ((
void*)&sa_info, 0,
sizeof (sa_info));
1091 if (tmpl->ce_mask & XFRM_SA_ATTR_SEL)
1093 addr = xfrmnl_sel_get_daddr (tmpl->sel);
1095 addr = xfrmnl_sel_get_saddr (tmpl->sel);
1097 sa_info.sel.dport = htons (xfrmnl_sel_get_dport (tmpl->sel));
1098 sa_info.sel.dport_mask = htons (xfrmnl_sel_get_dportmask (tmpl->sel));
1099 sa_info.sel.sport = htons (xfrmnl_sel_get_sport (tmpl->sel));
1100 sa_info.sel.sport_mask = htons (xfrmnl_sel_get_sportmask (tmpl->sel));
1101 sa_info.sel.family = xfrmnl_sel_get_family (tmpl->sel);
1102 sa_info.sel.prefixlen_d = xfrmnl_sel_get_prefixlen_d (tmpl->sel);
1103 sa_info.sel.prefixlen_s = xfrmnl_sel_get_prefixlen_s (tmpl->sel);
1104 sa_info.sel.proto = xfrmnl_sel_get_proto (tmpl->sel);
1105 sa_info.sel.ifindex = xfrmnl_sel_get_ifindex (tmpl->sel);
1106 sa_info.sel.user = xfrmnl_sel_get_userid (tmpl->sel);
1110 sa_info.id.spi = htonl(tmpl->id.spi);
1111 sa_info.id.proto = tmpl->id.proto;
1113 if (tmpl->ce_mask & XFRM_SA_ATTR_SADDR)
1116 if (tmpl->ce_mask & XFRM_SA_ATTR_LTIME_CFG)
1118 sa_info.lft.soft_byte_limit = xfrmnl_ltime_cfg_get_soft_bytelimit (tmpl->lft);
1119 sa_info.lft.hard_byte_limit = xfrmnl_ltime_cfg_get_hard_bytelimit (tmpl->lft);
1120 sa_info.lft.soft_packet_limit = xfrmnl_ltime_cfg_get_soft_packetlimit (tmpl->lft);
1121 sa_info.lft.hard_packet_limit = xfrmnl_ltime_cfg_get_hard_packetlimit (tmpl->lft);
1122 sa_info.lft.soft_add_expires_seconds = xfrmnl_ltime_cfg_get_soft_addexpires (tmpl->lft);
1123 sa_info.lft.hard_add_expires_seconds = xfrmnl_ltime_cfg_get_hard_addexpires (tmpl->lft);
1124 sa_info.lft.soft_use_expires_seconds = xfrmnl_ltime_cfg_get_soft_useexpires (tmpl->lft);
1125 sa_info.lft.hard_use_expires_seconds = xfrmnl_ltime_cfg_get_hard_useexpires (tmpl->lft);
1132 if (tmpl->ce_mask & XFRM_SA_ATTR_REQID)
1133 sa_info.reqid = tmpl->reqid;
1135 if (tmpl->ce_mask & XFRM_SA_ATTR_FAMILY)
1136 sa_info.family = tmpl->family;
1138 if (tmpl->ce_mask & XFRM_SA_ATTR_MODE)
1139 sa_info.mode = tmpl->mode;
1141 if (tmpl->ce_mask & XFRM_SA_ATTR_REPLAY_WIN)
1142 sa_info.replay_window = tmpl->replay_window;
1144 if (tmpl->ce_mask & XFRM_SA_ATTR_FLAGS)
1145 sa_info.flags = tmpl->flags;
1151 if (
nlmsg_append(msg, &sa_info,
sizeof(sa_info), NLMSG_ALIGNTO) < 0)
1152 goto nla_put_failure;
1154 if (tmpl->ce_mask & XFRM_SA_ATTR_ALG_AEAD) {
1155 len =
sizeof (
struct xfrm_algo_aead) + ((tmpl->aead->alg_key_len + 7) / 8);
1156 NLA_PUT (msg, XFRMA_ALG_AEAD, len, tmpl->aead);
1159 if (tmpl->ce_mask & XFRM_SA_ATTR_ALG_AUTH) {
1162 if (tmpl->auth->alg_trunc_len) {
1163 len =
sizeof (
struct xfrm_algo_auth) + ((tmpl->auth->alg_key_len + 7) / 8);
1164 NLA_PUT (msg, XFRMA_ALG_AUTH_TRUNC, len, tmpl->auth);
1166 struct xfrm_algo *auth;
1168 len =
sizeof (
struct xfrm_algo) + ((tmpl->auth->alg_key_len + 7) / 8);
1175 strncpy(auth->alg_name, tmpl->auth->alg_name,
sizeof(auth->alg_name));
1176 auth->alg_key_len = tmpl->auth->alg_key_len;
1177 memcpy(auth->alg_key, tmpl->auth->alg_key, (tmpl->auth->alg_key_len + 7) / 8);
1178 NLA_PUT(msg, XFRMA_ALG_AUTH, len, auth);
1183 if (tmpl->ce_mask & XFRM_SA_ATTR_ALG_CRYPT) {
1184 len =
sizeof (
struct xfrm_algo) + ((tmpl->crypt->alg_key_len + 7) / 8);
1185 NLA_PUT (msg, XFRMA_ALG_CRYPT, len, tmpl->crypt);
1188 if (tmpl->ce_mask & XFRM_SA_ATTR_ALG_COMP) {
1189 len =
sizeof (
struct xfrm_algo) + ((tmpl->comp->alg_key_len + 7) / 8);
1190 NLA_PUT (msg, XFRMA_ALG_COMP, len, tmpl->comp);
1193 if (tmpl->ce_mask & XFRM_SA_ATTR_ENCAP) {
1194 struct xfrm_encap_tmpl* encap_tmpl;
1195 struct nlattr* encap_attr;
1197 len =
sizeof (
struct xfrm_encap_tmpl);
1200 goto nla_put_failure;
1201 encap_tmpl =
nla_data (encap_attr);
1202 encap_tmpl->encap_type = tmpl->encap->encap_type;
1203 encap_tmpl->encap_sport = htons (tmpl->encap->encap_sport);
1204 encap_tmpl->encap_dport = htons (tmpl->encap->encap_dport);
1208 if (tmpl->ce_mask & XFRM_SA_ATTR_TFCPAD) {
1212 if (tmpl->ce_mask & XFRM_SA_ATTR_COADDR) {
1213 NLA_PUT (msg, XFRMA_COADDR,
sizeof (xfrm_address_t), tmpl->coaddr);
1216 if (tmpl->ce_mask & XFRM_SA_ATTR_MARK) {
1217 NLA_PUT (msg, XFRMA_MARK,
sizeof (
struct xfrm_mark), &tmpl->mark);
1220 if (tmpl->ce_mask & XFRM_SA_ATTR_SECCTX) {
1221 len =
sizeof (
struct xfrm_sec_ctx) + tmpl->sec_ctx->ctx_len;
1222 NLA_PUT (msg, XFRMA_SEC_CTX, len, tmpl->sec_ctx);
1225 if (tmpl->ce_mask & XFRM_SA_ATTR_REPLAY_MAXAGE) {
1226 NLA_PUT_U32 (msg, XFRMA_ETIMER_THRESH, tmpl->replay_maxage);
1229 if (tmpl->ce_mask & XFRM_SA_ATTR_REPLAY_MAXDIFF) {
1230 NLA_PUT_U32 (msg, XFRMA_REPLAY_THRESH, tmpl->replay_maxdiff);
1233 if (tmpl->ce_mask & XFRM_SA_ATTR_REPLAY_STATE) {
1234 if (tmpl->replay_state_esn) {
1235 len =
sizeof (
struct xfrm_replay_state_esn) + (sizeof (uint32_t) * tmpl->replay_state_esn->bmp_len);
1236 NLA_PUT (msg, XFRMA_REPLAY_ESN_VAL, len, tmpl->replay_state_esn);
1239 NLA_PUT (msg, XFRMA_REPLAY_VAL,
sizeof (
struct xfrm_replay_state), &tmpl->replay_state);
1248 return -NLE_MSGSIZE;
1256 int xfrmnl_sa_build_add_request(
struct xfrmnl_sa* tmpl,
int flags,
struct nl_msg **result)
1258 return build_xfrm_sa_message (tmpl, XFRM_MSG_NEWSA, flags, result);
1261 int xfrmnl_sa_add(
struct nl_sock* sk,
struct xfrmnl_sa* tmpl,
int flags)
1266 if ((err = xfrmnl_sa_build_add_request(tmpl, flags, &msg)) < 0)
1282 int xfrmnl_sa_build_update_request(
struct xfrmnl_sa* tmpl,
int flags,
struct nl_msg **result)
1284 return build_xfrm_sa_message (tmpl, XFRM_MSG_UPDSA, flags, result);
1287 int xfrmnl_sa_update(
struct nl_sock* sk,
struct xfrmnl_sa* tmpl,
int flags)
1292 if ((err = xfrmnl_sa_build_update_request(tmpl, flags, &msg)) < 0)
1305 static int build_xfrm_sa_delete_message(
struct xfrmnl_sa *tmpl,
int cmd,
int flags,
struct nl_msg **result)
1308 struct xfrm_usersa_id sa_id;
1310 if (!(tmpl->ce_mask & XFRM_SA_ATTR_DADDR) ||
1311 !(tmpl->ce_mask & XFRM_SA_ATTR_SPI) ||
1312 !(tmpl->ce_mask & XFRM_SA_ATTR_PROTO))
1313 return -NLE_MISSING_ATTR;
1318 sa_id.spi = htonl(tmpl->id.spi);
1319 sa_id.proto = tmpl->id.proto;
1325 if (
nlmsg_append(msg, &sa_id,
sizeof(sa_id), NLMSG_ALIGNTO) < 0)
1326 goto nla_put_failure;
1328 if (tmpl->ce_mask & XFRM_SA_ATTR_MARK) {
1329 NLA_PUT (msg, XFRMA_MARK,
sizeof (
struct xfrm_mark), &tmpl->mark);
1337 return -NLE_MSGSIZE;
1345 int xfrmnl_sa_build_delete_request(
struct xfrmnl_sa* tmpl,
int flags,
struct nl_msg **result)
1347 return build_xfrm_sa_delete_message (tmpl, XFRM_MSG_DELSA, flags, result);
1350 int xfrmnl_sa_delete(
struct nl_sock* sk,
struct xfrmnl_sa* tmpl,
int flags)
1355 if ((err = xfrmnl_sa_build_delete_request(tmpl, flags, &msg)) < 0)
1374 struct xfrmnl_sel* xfrmnl_sa_get_sel (
struct xfrmnl_sa* sa)
1376 if (sa->ce_mask & XFRM_SA_ATTR_SEL)
1382 int xfrmnl_sa_set_sel (
struct xfrmnl_sa* sa,
struct xfrmnl_sel* sel)
1386 xfrmnl_sel_put (sa->sel);
1389 xfrmnl_sel_get (sel);
1391 sa->ce_mask |= XFRM_SA_ATTR_SEL;
1396 static inline int __assign_addr(
struct xfrmnl_sa* sa,
struct nl_addr **pos,
1397 struct nl_addr *
new,
int flag,
int nocheck)
1401 if (sa->ce_mask & XFRM_SA_ATTR_FAMILY)
1404 return -NLE_AF_MISMATCH;
1414 sa->ce_mask |= flag;
1420 struct nl_addr* xfrmnl_sa_get_daddr (
struct xfrmnl_sa* sa)
1422 if (sa->ce_mask & XFRM_SA_ATTR_DADDR)
1423 return sa->id.daddr;
1428 int xfrmnl_sa_set_daddr (
struct xfrmnl_sa* sa,
struct nl_addr* addr)
1430 return __assign_addr(sa, &sa->id.daddr, addr, XFRM_SA_ATTR_DADDR, 0);
1433 int xfrmnl_sa_get_spi (
struct xfrmnl_sa* sa)
1435 if (sa->ce_mask & XFRM_SA_ATTR_SPI)
1441 int xfrmnl_sa_set_spi (
struct xfrmnl_sa* sa,
unsigned int spi)
1444 sa->ce_mask |= XFRM_SA_ATTR_SPI;
1449 int xfrmnl_sa_get_proto (
struct xfrmnl_sa* sa)
1451 if (sa->ce_mask & XFRM_SA_ATTR_PROTO)
1452 return sa->id.proto;
1457 int xfrmnl_sa_set_proto (
struct xfrmnl_sa* sa,
unsigned int protocol)
1459 sa->id.proto = protocol;
1460 sa->ce_mask |= XFRM_SA_ATTR_PROTO;
1465 struct nl_addr* xfrmnl_sa_get_saddr (
struct xfrmnl_sa* sa)
1467 if (sa->ce_mask & XFRM_SA_ATTR_SADDR)
1473 int xfrmnl_sa_set_saddr (
struct xfrmnl_sa* sa,
struct nl_addr* addr)
1475 return __assign_addr(sa, &sa->saddr, addr, XFRM_SA_ATTR_SADDR, 1);
1478 struct xfrmnl_ltime_cfg* xfrmnl_sa_get_lifetime_cfg (
struct xfrmnl_sa* sa)
1480 if (sa->ce_mask & XFRM_SA_ATTR_LTIME_CFG)
1486 int xfrmnl_sa_set_lifetime_cfg (
struct xfrmnl_sa* sa,
struct xfrmnl_ltime_cfg* ltime)
1490 xfrmnl_ltime_cfg_put (sa->lft);
1493 xfrmnl_ltime_cfg_get (ltime);
1495 sa->ce_mask |= XFRM_SA_ATTR_LTIME_CFG;
1500 int xfrmnl_sa_get_curlifetime (
struct xfrmnl_sa* sa,
unsigned long long int* curr_bytes,
1501 unsigned long long int* curr_packets,
unsigned long long int* curr_add_time,
unsigned long long int* curr_use_time)
1503 if (sa == NULL || curr_bytes == NULL || curr_packets == NULL || curr_add_time == NULL || curr_use_time == NULL)
1506 if (sa->ce_mask & XFRM_SA_ATTR_LTIME_CUR)
1508 *curr_bytes = sa->curlft.bytes;
1509 *curr_packets = sa->curlft.packets;
1510 *curr_add_time = sa->curlft.add_time;
1511 *curr_use_time = sa->curlft.use_time;
1519 int xfrmnl_sa_get_stats (
struct xfrmnl_sa* sa,
unsigned long long int* replay_window,
1520 unsigned long long int* replay,
unsigned long long int* integrity_failed)
1522 if (sa == NULL || replay_window == NULL || replay == NULL || integrity_failed == NULL)
1525 if (sa->ce_mask & XFRM_SA_ATTR_STATS)
1527 *replay_window = sa->stats.replay_window;
1528 *replay = sa->stats.replay;
1529 *integrity_failed = sa->stats.integrity_failed;
1537 int xfrmnl_sa_get_seq (
struct xfrmnl_sa* sa)
1539 if (sa->ce_mask & XFRM_SA_ATTR_SEQ)
1545 int xfrmnl_sa_get_reqid (
struct xfrmnl_sa* sa)
1547 if (sa->ce_mask & XFRM_SA_ATTR_REQID)
1553 int xfrmnl_sa_set_reqid (
struct xfrmnl_sa* sa,
unsigned int reqid)
1556 sa->ce_mask |= XFRM_SA_ATTR_REQID;
1561 int xfrmnl_sa_get_family (
struct xfrmnl_sa* sa)
1563 if (sa->ce_mask & XFRM_SA_ATTR_FAMILY)
1569 int xfrmnl_sa_set_family (
struct xfrmnl_sa* sa,
unsigned int family)
1571 sa->family = family;
1572 sa->ce_mask |= XFRM_SA_ATTR_FAMILY;
1577 int xfrmnl_sa_get_mode (
struct xfrmnl_sa* sa)
1579 if (sa->ce_mask & XFRM_SA_ATTR_MODE)
1585 int xfrmnl_sa_set_mode (
struct xfrmnl_sa* sa,
unsigned int mode)
1588 sa->ce_mask |= XFRM_SA_ATTR_MODE;
1593 int xfrmnl_sa_get_replay_window (
struct xfrmnl_sa* sa)
1595 if (sa->ce_mask & XFRM_SA_ATTR_REPLAY_WIN)
1596 return sa->replay_window;
1601 int xfrmnl_sa_set_replay_window (
struct xfrmnl_sa* sa,
unsigned int replay_window)
1603 sa->replay_window = replay_window;
1604 sa->ce_mask |= XFRM_SA_ATTR_REPLAY_WIN;
1609 int xfrmnl_sa_get_flags (
struct xfrmnl_sa* sa)
1611 if (sa->ce_mask & XFRM_SA_ATTR_FLAGS)
1617 int xfrmnl_sa_set_flags (
struct xfrmnl_sa* sa,
unsigned int flags)
1620 sa->ce_mask |= XFRM_SA_ATTR_FLAGS;
1639 int xfrmnl_sa_get_aead_params (
struct xfrmnl_sa* sa,
char* alg_name,
unsigned int* key_len,
unsigned int* icv_len,
char* key)
1641 if (sa->ce_mask & XFRM_SA_ATTR_ALG_AEAD)
1644 strcpy (alg_name, sa->aead->alg_name);
1646 *key_len = sa->aead->alg_key_len;
1648 *icv_len = sa->aead->alg_icv_len;
1650 memcpy (key, sa->aead->alg_key, ((sa->aead->alg_key_len + 7)/8));
1658 int xfrmnl_sa_set_aead_params (
struct xfrmnl_sa* sa,
const char* alg_name,
unsigned int key_len,
unsigned int icv_len,
const char* key)
1660 size_t keysize =
sizeof (uint8_t) * ((key_len + 7)/8);
1661 uint32_t newlen =
sizeof (
struct xfrmnl_algo_aead) + keysize;
1666 if (strlen (alg_name) >=
sizeof (sa->aead->alg_name) || (sa->aead = calloc (1, newlen)) == NULL)
1670 strcpy (sa->aead->alg_name, alg_name);
1671 sa->aead->alg_key_len = key_len;
1672 sa->aead->alg_icv_len = icv_len;
1673 memcpy (sa->aead->alg_key, key, keysize);
1675 sa->ce_mask |= XFRM_SA_ATTR_ALG_AEAD;
1694 int xfrmnl_sa_get_auth_params (
struct xfrmnl_sa* sa,
char* alg_name,
unsigned int* key_len,
unsigned int* trunc_len,
char* key)
1696 if (sa->ce_mask & XFRM_SA_ATTR_ALG_AUTH)
1699 strcpy (alg_name, sa->auth->alg_name);
1701 *key_len = sa->auth->alg_key_len;
1703 *trunc_len = sa->auth->alg_trunc_len;
1705 memcpy (key, sa->auth->alg_key, (sa->auth->alg_key_len + 7)/8);
1713 int xfrmnl_sa_set_auth_params (
struct xfrmnl_sa* sa,
const char* alg_name,
unsigned int key_len,
unsigned int trunc_len,
const char* key)
1715 size_t keysize =
sizeof (uint8_t) * ((key_len + 7)/8);
1716 uint32_t newlen =
sizeof (
struct xfrmnl_algo_auth) + keysize;
1721 if (strlen (alg_name) >=
sizeof (sa->auth->alg_name) || (sa->auth = calloc (1, newlen)) == NULL)
1725 strcpy (sa->auth->alg_name, alg_name);
1726 sa->auth->alg_key_len = key_len;
1727 sa->auth->alg_trunc_len = trunc_len;
1728 memcpy (sa->auth->alg_key, key, keysize);
1730 sa->ce_mask |= XFRM_SA_ATTR_ALG_AUTH;
1748 int xfrmnl_sa_get_crypto_params (
struct xfrmnl_sa* sa,
char* alg_name,
unsigned int* key_len,
char* key)
1750 if (sa->ce_mask & XFRM_SA_ATTR_ALG_CRYPT)
1753 strcpy (alg_name, sa->crypt->alg_name);
1755 *key_len = sa->crypt->alg_key_len;
1757 memcpy (key, sa->crypt->alg_key, ((sa->crypt->alg_key_len + 7)/8));
1765 int xfrmnl_sa_set_crypto_params (
struct xfrmnl_sa* sa,
const char* alg_name,
unsigned int key_len,
const char* key)
1767 size_t keysize =
sizeof (uint8_t) * ((key_len + 7)/8);
1768 uint32_t newlen =
sizeof (
struct xfrmnl_algo) + keysize;
1773 if (strlen (alg_name) >=
sizeof (sa->crypt->alg_name) || (sa->crypt = calloc (1, newlen)) == NULL)
1777 strcpy (sa->crypt->alg_name, alg_name);
1778 sa->crypt->alg_key_len = key_len;
1779 memcpy (sa->crypt->alg_key, key, keysize);
1781 sa->ce_mask |= XFRM_SA_ATTR_ALG_CRYPT;
1799 int xfrmnl_sa_get_comp_params (
struct xfrmnl_sa* sa,
char* alg_name,
unsigned int* key_len,
char* key)
1801 if (sa->ce_mask & XFRM_SA_ATTR_ALG_COMP)
1804 strcpy (alg_name, sa->comp->alg_name);
1806 *key_len = sa->comp->alg_key_len;
1808 memcpy (key, sa->comp->alg_key, ((sa->comp->alg_key_len + 7)/8));
1816 int xfrmnl_sa_set_comp_params (
struct xfrmnl_sa* sa,
const char* alg_name,
unsigned int key_len,
const char* key)
1818 size_t keysize =
sizeof (uint8_t) * ((key_len + 7)/8);
1819 uint32_t newlen =
sizeof (
struct xfrmnl_algo) + keysize;
1824 if (strlen (alg_name) >=
sizeof (sa->comp->alg_name) || (sa->comp = calloc (1, newlen)) == NULL)
1828 strcpy (sa->comp->alg_name, alg_name);
1829 sa->comp->alg_key_len = key_len;
1830 memcpy (sa->comp->alg_key, key, keysize);
1832 sa->ce_mask |= XFRM_SA_ATTR_ALG_COMP;
1837 int xfrmnl_sa_get_encap_tmpl (
struct xfrmnl_sa* sa,
unsigned int* encap_type,
unsigned int* encap_sport,
unsigned int* encap_dport,
struct nl_addr** encap_oa)
1839 if (sa->ce_mask & XFRM_SA_ATTR_ENCAP)
1841 *encap_type = sa->encap->encap_type;
1842 *encap_sport = sa->encap->encap_sport;
1843 *encap_dport = sa->encap->encap_dport;
1852 int xfrmnl_sa_set_encap_tmpl (
struct xfrmnl_sa* sa,
unsigned int encap_type,
unsigned int encap_sport,
unsigned int encap_dport,
struct nl_addr* encap_oa)
1856 if (sa->encap->encap_oa)
1858 memset(sa->encap, 0, sizeof (*sa->encap));
1859 }
else if ((sa->encap = calloc(1,
sizeof(*sa->encap))) == NULL)
1863 sa->encap->encap_type = encap_type;
1864 sa->encap->encap_sport = encap_sport;
1865 sa->encap->encap_dport = encap_dport;
1867 sa->encap->encap_oa = encap_oa;
1869 sa->ce_mask |= XFRM_SA_ATTR_ENCAP;
1874 int xfrmnl_sa_get_tfcpad (
struct xfrmnl_sa* sa)
1876 if (sa->ce_mask & XFRM_SA_ATTR_TFCPAD)
1882 int xfrmnl_sa_set_tfcpad (
struct xfrmnl_sa* sa,
unsigned int tfcpad)
1884 sa->tfcpad = tfcpad;
1885 sa->ce_mask |= XFRM_SA_ATTR_TFCPAD;
1890 struct nl_addr* xfrmnl_sa_get_coaddr (
struct xfrmnl_sa* sa)
1892 if (sa->ce_mask & XFRM_SA_ATTR_COADDR)
1898 int xfrmnl_sa_set_coaddr (
struct xfrmnl_sa* sa,
struct nl_addr* coaddr)
1906 sa->coaddr = coaddr;
1908 sa->ce_mask |= XFRM_SA_ATTR_COADDR;
1913 int xfrmnl_sa_get_mark (
struct xfrmnl_sa* sa,
unsigned int* mark_mask,
unsigned int* mark_value)
1915 if (mark_mask == NULL || mark_value == NULL)
1918 if (sa->ce_mask & XFRM_SA_ATTR_MARK)
1920 *mark_mask = sa->mark.m;
1921 *mark_value = sa->mark.v;
1929 int xfrmnl_sa_set_mark (
struct xfrmnl_sa* sa,
unsigned int value,
unsigned int mask)
1933 sa->ce_mask |= XFRM_SA_ATTR_MARK;
1938 int xfrmnl_sa_get_sec_ctx (
struct xfrmnl_sa* sa,
unsigned int* doi,
unsigned int* alg,
unsigned int* len,
unsigned int* sid,
char* ctx_str)
1940 if (sa->ce_mask & XFRM_SA_ATTR_SECCTX)
1942 *doi = sa->sec_ctx->ctx_doi;
1943 *alg = sa->sec_ctx->ctx_alg;
1944 *len = sa->sec_ctx->ctx_len;
1945 *sid = sa->sec_ctx->ctx_sid;
1946 memcpy ((
void *)ctx_str, (
void *)sa->sec_ctx->ctx_str, sizeof (uint8_t) * sa->sec_ctx->ctx_len);
1954 int xfrmnl_sa_set_sec_ctx (
struct xfrmnl_sa* sa,
unsigned int doi,
unsigned int alg,
unsigned int len,
unsigned int sid,
const char* ctx_str)
1959 if ((sa->sec_ctx = calloc (1,
sizeof (
struct xfrmnl_sec_ctx) + (
sizeof (uint8_t) * len))) == NULL)
1963 sa->sec_ctx->ctx_doi = doi;
1964 sa->sec_ctx->ctx_alg = alg;
1965 sa->sec_ctx->ctx_len = len;
1966 sa->sec_ctx->ctx_sid = sid;
1967 memcpy (sa->sec_ctx->ctx_str, ctx_str, sizeof (uint8_t) * len);
1969 sa->ce_mask |= XFRM_SA_ATTR_SECCTX;
1975 int xfrmnl_sa_get_replay_maxage (
struct xfrmnl_sa* sa)
1977 if (sa->ce_mask & XFRM_SA_ATTR_REPLAY_MAXAGE)
1978 return sa->replay_maxage;
1983 int xfrmnl_sa_set_replay_maxage (
struct xfrmnl_sa* sa,
unsigned int replay_maxage)
1985 sa->replay_maxage = replay_maxage;
1986 sa->ce_mask |= XFRM_SA_ATTR_REPLAY_MAXAGE;
1991 int xfrmnl_sa_get_replay_maxdiff (
struct xfrmnl_sa* sa)
1993 if (sa->ce_mask & XFRM_SA_ATTR_REPLAY_MAXDIFF)
1994 return sa->replay_maxdiff;
1999 int xfrmnl_sa_set_replay_maxdiff (
struct xfrmnl_sa* sa,
unsigned int replay_maxdiff)
2001 sa->replay_maxdiff = replay_maxdiff;
2002 sa->ce_mask |= XFRM_SA_ATTR_REPLAY_MAXDIFF;
2007 int xfrmnl_sa_get_replay_state (
struct xfrmnl_sa* sa,
unsigned int* oseq,
unsigned int* seq,
unsigned int* bmp)
2009 if (sa->ce_mask & XFRM_SA_ATTR_REPLAY_STATE)
2011 if (sa->replay_state_esn == NULL)
2013 *oseq = sa->replay_state.oseq;
2014 *seq = sa->replay_state.seq;
2015 *bmp = sa->replay_state.bitmap;
2028 int xfrmnl_sa_set_replay_state (
struct xfrmnl_sa* sa,
unsigned int oseq,
unsigned int seq,
unsigned int bitmap)
2030 sa->replay_state.oseq = oseq;
2031 sa->replay_state.seq = seq;
2032 sa->replay_state.bitmap = bitmap;
2033 sa->ce_mask |= XFRM_SA_ATTR_REPLAY_STATE;
2038 int xfrmnl_sa_get_replay_state_esn (
struct xfrmnl_sa* sa,
unsigned int* oseq,
unsigned int* seq,
unsigned int* oseq_hi,
2039 unsigned int* seq_hi,
unsigned int* replay_window,
unsigned int* bmp_len,
unsigned int* bmp)
2041 if (sa->ce_mask & XFRM_SA_ATTR_REPLAY_STATE)
2043 if (sa->replay_state_esn)
2045 *oseq = sa->replay_state_esn->oseq;
2046 *seq = sa->replay_state_esn->seq;
2047 *oseq_hi= sa->replay_state_esn->oseq_hi;
2048 *seq_hi = sa->replay_state_esn->seq_hi;
2049 *replay_window = sa->replay_state_esn->replay_window;
2050 *bmp_len = sa->replay_state_esn->bmp_len;
2051 memcpy (bmp, sa->replay_state_esn->bmp, sa->replay_state_esn->bmp_len * sizeof (uint32_t));
2064 int xfrmnl_sa_set_replay_state_esn (
struct xfrmnl_sa* sa,
unsigned int oseq,
unsigned int seq,
2065 unsigned int oseq_hi,
unsigned int seq_hi,
unsigned int replay_window,
2066 unsigned int bmp_len,
unsigned int* bmp)
2069 if (sa->replay_state_esn)
2070 free (sa->replay_state_esn);
2072 if ((sa->replay_state_esn = calloc (1,
sizeof (
struct xfrmnl_replay_state_esn) + (
sizeof (uint32_t) * bmp_len))) == NULL)
2074 sa->replay_state_esn->oseq = oseq;
2075 sa->replay_state_esn->seq = seq;
2076 sa->replay_state_esn->oseq_hi = oseq_hi;
2077 sa->replay_state_esn->seq_hi = seq_hi;
2078 sa->replay_state_esn->replay_window = replay_window;
2079 sa->replay_state_esn->bmp_len = bmp_len;
2080 memcpy (sa->replay_state_esn->bmp, bmp, bmp_len * sizeof (uint32_t));
2081 sa->ce_mask |= XFRM_SA_ATTR_REPLAY_STATE;
2087 int xfrmnl_sa_is_hardexpiry_reached (
struct xfrmnl_sa* sa)
2089 if (sa->ce_mask & XFRM_SA_ATTR_EXPIRE)
2090 return (sa->hard > 0 ? 1: 0);
2095 int xfrmnl_sa_is_expiry_reached (
struct xfrmnl_sa* sa)
2097 if (sa->ce_mask & XFRM_SA_ATTR_EXPIRE)
2105 static struct nl_object_ops xfrm_sa_obj_ops = {
2106 .oo_name =
"xfrm/sa",
2107 .oo_size =
sizeof(
struct xfrmnl_sa),
2108 .oo_constructor = xfrm_sa_alloc_data,
2109 .oo_free_data = xfrm_sa_free_data,
2110 .oo_clone = xfrm_sa_clone,
2116 .oo_compare = xfrm_sa_compare,
2117 .oo_attrs2str = xfrm_sa_attrs2str,
2118 .oo_id_attrs = (XFRM_SA_ATTR_DADDR | XFRM_SA_ATTR_SPI | XFRM_SA_ATTR_PROTO),
2121 static struct nl_af_group xfrm_sa_groups[] = {
2122 { AF_UNSPEC, XFRMNLGRP_SA },
2123 { AF_UNSPEC, XFRMNLGRP_EXPIRE },
2124 { END_OF_GROUP_LIST },
2127 static struct nl_cache_ops xfrmnl_sa_ops = {
2128 .co_name =
"xfrm/sa",
2129 .co_hdrsize =
sizeof(
struct xfrm_usersa_info),
2131 { XFRM_MSG_NEWSA, NL_ACT_NEW,
"new" },
2132 { XFRM_MSG_DELSA, NL_ACT_DEL,
"del" },
2133 { XFRM_MSG_GETSA, NL_ACT_GET,
"get" },
2134 { XFRM_MSG_EXPIRE, NL_ACT_UNSPEC,
"expire"},
2135 { XFRM_MSG_UPDSA, NL_ACT_NEW,
"update"},
2136 END_OF_MSGTYPES_LIST,
2138 .co_protocol = NETLINK_XFRM,
2139 .co_groups = xfrm_sa_groups,
2140 .co_request_update = xfrm_sa_request_update,
2141 .co_msg_parser = xfrm_sa_msg_parser,
2142 .co_obj_ops = &xfrm_sa_obj_ops,
2143 .co_include_event = &xfrm_sa_update_cache
2151 static void __attribute__ ((constructor)) xfrm_sa_init(
void)
2156 static void __attribute__ ((destructor)) xfrm_sa_exit(
void)
int nl_send_auto_complete(struct nl_sock *sk, struct nl_msg *msg)
struct nl_addr * nl_addr_clone(const struct nl_addr *addr)
Clone existing abstract address object.
Dump object briefly on one line.
void nl_addr_set_prefixlen(struct nl_addr *addr, int prefixlen)
Set the prefix length of an abstract address.
void nlmsg_free(struct nl_msg *msg)
Release a reference from an netlink message.
int nl_addr_cmp(const struct nl_addr *a, const struct nl_addr *b)
Compare abstract addresses.
void * nlmsg_data(const struct nlmsghdr *nlh)
Return pointer to message payload.
struct nl_object * nl_object_alloc(struct nl_object_ops *ops)
Allocate a new object of kind specified by the operations handle.
int nl_cache_mngt_unregister(struct nl_cache_ops *ops)
Unregister a set of cache operations.
Attribute validation policy.
void nl_object_get(struct nl_object *obj)
Acquire a reference on a object.
struct nl_addr * nl_addr_build(int family, const void *buf, size_t size)
Allocate abstract address based on a binary address.
int nlmsg_parse(struct nlmsghdr *nlh, int hdrlen, struct nlattr *tb[], int maxtype, struct nla_policy *policy)
parse attributes of a netlink message
struct xfrmnl_ltime_cfg * xfrmnl_ltime_cfg_clone(struct xfrmnl_ltime_cfg *ltime)
Clone existing lifetime config object.
struct nlattr * nla_reserve(struct nl_msg *msg, int attrtype, int attrlen)
Reserve space for a attribute.
struct nl_addr * nl_addr_get(struct nl_addr *addr)
Increase the reference counter of an abstract address.
Dump all attributes but no statistics.
int nl_cache_mngt_register(struct nl_cache_ops *ops)
Register a set of cache operations.
struct nl_object * nl_cache_search(struct nl_cache *cache, struct nl_object *needle)
Search object in cache.
#define NLA_PUT(msg, attrtype, attrlen, data)
Add unspecific attribute to netlink message.
int nl_object_get_msgtype(const struct nl_object *obj)
Return the netlink message type the object was derived from.
void nl_cache_remove(struct nl_object *obj)
Remove object from cache.
void * nla_data(const struct nlattr *nla)
Return pointer to the payload section.
int xfrmnl_sel_cmp(struct xfrmnl_sel *a, struct xfrmnl_sel *b)
Compares two selector objects.
#define NLA_PUT_U32(msg, attrtype, value)
Add 32 bit integer attribute to netlink message.
uint16_t minlen
Minimal length of payload required.
int nl_send_simple(struct nl_sock *sk, int type, int flags, void *buf, size_t size)
Construct and transmit a Netlink message.
struct nl_object * nl_cache_get_next(struct nl_object *obj)
Return the next element in the cache.
int nlmsg_append(struct nl_msg *n, void *data, size_t len, int pad)
Append data to tail of a netlink message.
int nl_wait_for_ack(struct nl_sock *sk)
Wait for ACK.
void nl_object_put(struct nl_object *obj)
Release a reference from an object.
int nl_cache_move(struct nl_cache *cache, struct nl_object *obj)
Move object from one cache to another.
void nl_addr_put(struct nl_addr *addr)
Decrease the reference counter of an abstract address.
struct nl_msg * nlmsg_alloc_simple(int nlmsgtype, int flags)
Allocate a new netlink message.
struct xfrmnl_sel * xfrmnl_sel_alloc()
Allocate new selector object.
struct xfrmnl_sel * xfrmnl_sel_clone(struct xfrmnl_sel *sel)
Clone existing selector object.
struct xfrmnl_ltime_cfg * xfrmnl_ltime_cfg_alloc()
Allocate new lifetime config object.
int xfrmnl_ltime_cfg_cmp(struct xfrmnl_ltime_cfg *a, struct xfrmnl_ltime_cfg *b)
Compares two lifetime config objects.
int nl_pickup(struct nl_sock *sk, int(*parser)(struct nl_cache_ops *, struct sockaddr_nl *, struct nlmsghdr *, struct nl_parser_param *), struct nl_object **result)
Pickup netlink answer, parse is and return object.
void nl_dump(struct nl_dump_params *params, const char *fmt,...)
Dump a formatted character string.
int nl_send_auto(struct nl_sock *sk, struct nl_msg *msg)
Finalize and transmit Netlink message.
unsigned int nl_addr_get_len(const struct nl_addr *addr)
Get length of binary address of abstract address object.
Dump all attributes including statistics.
struct nl_object * nl_cache_get_first(struct nl_cache *cache)
Return the first element in the cache.
void * nl_addr_get_binary_addr(const struct nl_addr *addr)
Get binary address of abstract address object.
int nl_cache_alloc_and_fill(struct nl_cache_ops *ops, struct nl_sock *sock, struct nl_cache **result)
Allocate new cache and fill it.
uint32_t nl_object_diff(struct nl_object *a, struct nl_object *b)
Compute 32-bit bitmask representing difference in attribute values.
char * nl_addr2str(const struct nl_addr *addr, char *buf, size_t size)
Convert abstract address object to character string.
int nl_addr_get_family(const struct nl_addr *addr)
Return address family.