Home | History | Annotate | Download | only in netipsec

Lines Matching defs:sav

142     struct secasvar *sav, int flags)
158 KASSERT(sav != NULL);
160 saidx = &sav->sah->saidx;
162 if (sav->natt_type != 0) {
192 (u_long)ntohl(sav->spi));
213 if (sav->natt_type != 0)
231 if (sav->natt_type != 0) {
244 key_sa_recordxfer(sav, m);
403 struct secasvar *sav = NULL;
423 *error = key_checkrequest(isr, &saidx, &sav);
435 /* sav may be NULL here if we have an USE rule */
436 if (sav == NULL) {
463 KEY_SA_UNREF(&sav);
471 KASSERT(sav->tdb_xform != NULL);
472 *ret = sav;
489 struct secasvar *sav = NULL;
499 isr = ipsec_nextisr(m, isr, AF_INET, &error, &sav);
510 KASSERT(sav != NULL);
524 if (!(sav->natt_type & UDP_ENCAP_ESPINUDP)) {
527 if (ntohs(ip->ip_len) <= sav->esp_frag)
529 *mtu = sav->esp_frag;
530 KEY_SA_UNREF(&sav);
534 dst = &sav->sah->saidx.dst;
573 error = ipip_output(m, sav, &mp);
615 * NB: m & sav are ``passed to caller'' who's responsible for
618 if (sav->tdb_xform->xf_type != XF_IP4) {
627 error = (*sav->tdb_xform->xf_output)(m, isr, sav, i, off, 0);
629 error = ipsec_process_done(m, isr, sav, 0);
631 KEY_SA_UNREF(&sav);
635 KEY_SA_UNREF(&sav);
732 struct secasvar *sav = NULL;
741 isr = ipsec_nextisr(m, isr, AF_INET6, &error, &sav);
754 KASSERT(sav != NULL);
755 dst = &sav->sah->saidx.dst;
783 error = ipip_output(m, sav, &mp);
814 error = (*sav->tdb_xform->xf_output)(m, isr, sav, i, off, flags);
815 KEY_SA_UNREF(&sav);
819 KEY_SA_UNREF(&sav);