Date: Tue, 22 Nov 2016 08:56:29 +0000 (UTC) From: "Andrey V. Elsukov" <ae@FreeBSD.org> To: src-committers@freebsd.org, svn-src-projects@freebsd.org Subject: svn commit: r308959 - projects/ipsec/sys/netipsec Message-ID: <201611220856.uAM8uTqk041591@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: ae Date: Tue Nov 22 08:56:29 2016 New Revision: 308959 URL: https://svnweb.freebsd.org/changeset/base/308959 Log: Add key_checksockaddrs() function. It will be used to check that sockaddr structures from PF_KEY message are properly filled. Modified: projects/ipsec/sys/netipsec/key.c Modified: projects/ipsec/sys/netipsec/key.c ============================================================================== --- projects/ipsec/sys/netipsec/key.c Tue Nov 22 08:30:32 2016 (r308958) +++ projects/ipsec/sys/netipsec/key.c Tue Nov 22 08:56:29 2016 (r308959) @@ -654,6 +654,35 @@ key_getspgen(void) return (V_sp_genid); } +static int +key_checksockaddrs(struct sockaddr *src, struct sockaddr *dst) +{ + + /* family match */ + if (src->sa_family != dst->sa_family) + return (EINVAL); + /* sa_len match */ + if (src->sa_len != dst->sa_len) + return (EINVAL); + switch (src->sa_family) { +#ifdef INET + case AF_INET: + if (src->sa_len != sizeof(struct sockaddr_in)) + return (EINVAL); + break; +#endif +#ifdef INET6 + case AF_INET6: + if (src->sa_len != sizeof(struct sockaddr_in6)) + return (EINVAL); + break; +#endif + default: + return (EAFNOSUPPORT); + } + return (0); +} + /* * allocating a SP for OUTBOUND or INBOUND packet. * Must call key_freesp() later.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201611220856.uAM8uTqk041591>