sys/netipsec/ipsec.c

1064

IPSEC_ASSERT(sp->policy == IPSEC_POLICY_IPSEC,

sys/netipsec/ipsec.c

1128

IPSEC_ASSERT(sp->policy == IPSEC_POLICY_IPSEC,

sys/netipsec/ipsec.c

1282

IPSEC_ASSERT(sav != NULL, ("Null SA"));

sys/netipsec/ipsec.c

1283

IPSEC_ASSERT(sav->replay != NULL, ("Null replay state"));

sys/netipsec/ipsec.c

1411

IPSEC_ASSERT(sav != NULL, ("Null SA"));

sys/netipsec/ipsec.c

1412

IPSEC_ASSERT(sav->replay != NULL, ("Null replay state"));

sys/netipsec/ipsec.c

503

IPSEC_ASSERT(m->m_pkthdr.len >= sizeof(struct ip),

sys/netipsec/ipsec.c

700

IPSEC_ASSERT(m->m_pkthdr.len >= sizeof(struct ip6_hdr),

sys/netipsec/ipsec.c

903

IPSEC_ASSERT(idx < sp->tcount, ("Wrong IPsec request index %d", idx));

sys/netipsec/ipsec.c

919

IPSEC_ASSERT(sp->req[idx]->level == IPSEC_LEVEL_UNIQUE,

sys/netipsec/ipsec_input.c

130

IPSEC_ASSERT(m != NULL, ("null packet"));

sys/netipsec/ipsec_input.c

132

IPSEC_ASSERT(sproto == IPPROTO_ESP || sproto == IPPROTO_AH ||

sys/netipsec/ipsec_input.c

353

IPSEC_ASSERT(sav != NULL, ("null SA"));

sys/netipsec/ipsec_input.c

354

IPSEC_ASSERT(sav->sah != NULL, ("null SAH"));

sys/netipsec/ipsec_input.c

357

IPSEC_ASSERT(af == AF_INET, ("unexpected af %u", af));

sys/netipsec/ipsec_input.c

359

IPSEC_ASSERT(sproto == IPPROTO_ESP || sproto == IPPROTO_AH ||

sys/netipsec/ipsec_input.c

610

IPSEC_ASSERT(sav != NULL, ("null SA"));

sys/netipsec/ipsec_input.c

611

IPSEC_ASSERT(sav->sah != NULL, ("null SAH"));

sys/netipsec/ipsec_input.c

614

IPSEC_ASSERT(af == AF_INET6, ("unexpected af %u", af));

sys/netipsec/ipsec_input.c

616

IPSEC_ASSERT(sproto == IPPROTO_ESP || sproto == IPPROTO_AH ||

sys/netipsec/ipsec_mbuf.c

59

IPSEC_ASSERT(m0 != NULL, ("null mbuf"));

sys/netipsec/ipsec_mbuf.c

60

IPSEC_ASSERT(hlen < MHLEN, ("hlen too big: %u", hlen));

sys/netipsec/ipsec_output.c

1068

IPSEC_ASSERT(len < MHLEN, ("wrong length"));

sys/netipsec/ipsec_output.c

181

IPSEC_ASSERT(sav->tdb_xform != NULL, ("SA with NULL tdb_xform"));

sys/netipsec/ipsec_output.c

200

IPSEC_ASSERT(idx < sp->tcount, ("Wrong IPsec request index %d", idx));

sys/netipsec/ipsec_output.c

620

IPSEC_ASSERT(sav->tdb_xform != NULL, ("SA with NULL tdb_xform"));

sys/netipsec/ipsec_output.c

638

IPSEC_ASSERT(idx < sp->tcount, ("Wrong IPsec request index %d", idx));

sys/netipsec/ipsec_pcb.c

156

IPSEC_ASSERT(inp != NULL, ("null inp"));

sys/netipsec/ipsec_pcb.c

157

IPSEC_ASSERT(inp->inp_sp == NULL, ("inp_sp already initialized"));

sys/netipsec/ipsec_pcb.c

203

IPSEC_ASSERT(src->state == IPSEC_SPSTATE_PCB, ("SP isn't PCB"));

sys/netipsec/ipsec_pcb.c

248

IPSEC_ASSERT(new->inp_sp != NULL, ("new inp_sp is NULL"));

sys/netipsec/ipsec_pcb.c

249

IPSEC_ASSERT((new->inp_sp->flags & (

sys/netipsec/ipsec_pcb.c

415

IPSEC_ASSERT(sp != NULL,

sys/netipsec/key.c

1029

IPSEC_ASSERT(saidx->proto == IPPROTO_TCP,

sys/netipsec/key.c

1031

IPSEC_ASSERT(saidx->mode == IPSEC_MODE_TCPMD5,

sys/netipsec/key.c

1082

IPSEC_ASSERT(saidx != NULL, ("null saidx"));

sys/netipsec/key.c

1083

IPSEC_ASSERT(saidx->mode == IPSEC_MODE_TRANSPORT ||

sys/netipsec/key.c

1159

IPSEC_ASSERT(proto == IPPROTO_ESP || proto == IPPROTO_AH ||

sys/netipsec/key.c

1206

IPSEC_ASSERT(src != NULL, ("null src address"));

sys/netipsec/key.c

1207

IPSEC_ASSERT(dst != NULL, ("null dst address"));

sys/netipsec/key.c

1249

IPSEC_ASSERT(sp != NULL, ("null sp"));

sys/netipsec/key.c

1283

IPSEC_ASSERT(sp->spidx.dir == IPSEC_DIR_INBOUND ||

sys/netipsec/key.c

1348

IPSEC_ASSERT(spp[i]->spidx.dir == IPSEC_DIR_INBOUND ||

sys/netipsec/key.c

1390

IPSEC_ASSERT(spp[i]->spidx.dir == IPSEC_DIR_INBOUND ||

sys/netipsec/key.c

1425

IPSEC_ASSERT(sav != NULL, ("null sav"));

sys/netipsec/key.c

1486

IPSEC_ASSERT(spidx != NULL, ("null spidx"));

sys/netipsec/key.c

1558

IPSEC_ASSERT(xpl0 != NULL, ("null xpl0"));

sys/netipsec/key.c

1559

IPSEC_ASSERT(len >= sizeof(*xpl0), ("policy too short: %zu", len));

sys/netipsec/key.c

1868

IPSEC_ASSERT(sp != NULL, ("null policy"));

sys/netipsec/key.c

1952

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

1953

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

1970

IPSEC_ASSERT(len <= MHLEN, ("header too big %u", len));

sys/netipsec/key.c

2043

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

2044

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

2045

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

2046

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

2176

IPSEC_ASSERT(oldsp != NULL, ("null oldsp: refcount bug"));

sys/netipsec/key.c

2191

IPSEC_ASSERT(oldsp != NULL, ("null oldsp: refcount bug"));

sys/netipsec/key.c

2303

IPSEC_ASSERT(so != NULL, ("null so"));

sys/netipsec/key.c

2304

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

2305

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

2306

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

2413

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

2414

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

2415

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

2416

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

2466

IPSEC_ASSERT(off == len, ("length inconsistency (off %u len %u)",

sys/netipsec/key.c

2508

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

2509

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

2510

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

2511

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

2561

IPSEC_ASSERT(sp != NULL, ("null secpolicy"));

sys/netipsec/key.c

2562

IPSEC_ASSERT(sp->req == NULL, ("policy exists"));

sys/netipsec/key.c

2563

IPSEC_ASSERT(sp->policy == IPSEC_POLICY_IPSEC,

sys/netipsec/key.c

2623

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

2624

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

2625

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

2626

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

2703

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

2704

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

2705

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

2706

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

2870

IPSEC_ASSERT(sp != NULL, ("null secpolicy"));

sys/netipsec/key.c

3016

IPSEC_ASSERT(sah != NULL, ("NULL sah"));

sys/netipsec/key.c

3017

IPSEC_ASSERT(sah->state == SADB_SASTATE_DEAD,

sys/netipsec/key.c

3019

IPSEC_ASSERT(TAILQ_EMPTY(&sah->savtree_larval),

sys/netipsec/key.c

3021

IPSEC_ASSERT(TAILQ_EMPTY(&sah->savtree_alive),

sys/netipsec/key.c

3043

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

3044

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

3045

IPSEC_ASSERT(mhp->msg->sadb_msg_type == SADB_GETSPI ||

sys/netipsec/key.c

3269

IPSEC_ASSERT(sav != NULL, ("null sav"));

sys/netipsec/key.c

3270

IPSEC_ASSERT(sav->state == SADB_SASTATE_DEAD,

sys/netipsec/key.c

3272

IPSEC_ASSERT(sav->refcnt == 0, ("reference count %u > 0",

sys/netipsec/key.c

3438

IPSEC_ASSERT(sav->lft_h == NULL, ("lft_h is already initialized\n"));

sys/netipsec/key.c

3439

IPSEC_ASSERT(sav->lft_s == NULL, ("lft_s is already initialized\n"));

sys/netipsec/key.c

3460

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

3461

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

3462

IPSEC_ASSERT(sav->state == SADB_SASTATE_LARVAL,

sys/netipsec/key.c

5059

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

5060

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

5061

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

5062

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

5193

IPSEC_ASSERT(off == len,

sys/netipsec/key.c

5308

IPSEC_ASSERT(saidx->proto == IPPROTO_TCP, ("wrong proto"));

sys/netipsec/key.c

5472

IPSEC_ASSERT((sav->flags & SADB_X_EXT_F_CLONED) == 0,

sys/netipsec/key.c

5474

IPSEC_ASSERT(sav->state == SADB_SASTATE_MATURE ||

sys/netipsec/key.c

5573

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

5574

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

5575

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

5576

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

5800

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

5801

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

5802

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

5803

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

5971

IPSEC_ASSERT(sav->natt == NULL, ("natt is already initialized"));

sys/netipsec/key.c

6178

IPSEC_ASSERT(sah != NULL, ("null secashead"));

sys/netipsec/key.c

6179

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

6180

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

6250

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

6251

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

6252

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

6299

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

6300

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

6301

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

6302

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

6522

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

6523

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

6524

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

6525

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

6650

IPSEC_ASSERT(l <= MLEN,

sys/netipsec/key.c

6666

IPSEC_ASSERT((totlen % l) == 0, ("totlen=%u, l=%u", totlen, l));

sys/netipsec/key.c

6752

IPSEC_ASSERT(l <= MLEN,

sys/netipsec/key.c

6796

IPSEC_ASSERT(l <= MLEN,

sys/netipsec/key.c

6895

IPSEC_ASSERT(saidx != NULL, ("null saidx"));

sys/netipsec/key.c

6897

IPSEC_ASSERT(satype != 0, ("null satype, protocol %u", saidx->proto));

sys/netipsec/key.c

7293

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

7294

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

7295

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

7296

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

7419

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

7420

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

7421

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

7422

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

7549

IPSEC_ASSERT(off == len,

sys/netipsec/key.c

7567

IPSEC_ASSERT(so != NULL, ("NULL so"));

sys/netipsec/key.c

7608

IPSEC_ASSERT (sav != NULL, ("null sav"));

sys/netipsec/key.c

7609

IPSEC_ASSERT (sav->sah != NULL, ("null sa header"));

sys/netipsec/key.c

7617

IPSEC_ASSERT(satype != 0, ("invalid proto, satype %u", satype));

sys/netipsec/key.c

7797

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

7798

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

7799

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

7846

IPSEC_ASSERT(sah->state != SADB_SASTATE_DEAD,

sys/netipsec/key.c

7915

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

7916

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

7917

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

7918

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

7998

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

7999

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

8000

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

8001

IPSEC_ASSERT(mhp->msg != NULL, ("null msg"));

sys/netipsec/key.c

8088

IPSEC_ASSERT(so != NULL, ("null socket"));

sys/netipsec/key.c

8089

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

8333

IPSEC_ASSERT(m->m_len >= sizeof(struct sadb_msg),

sys/netipsec/key.c

835

IPSEC_ASSERT(dir == IPSEC_DIR_INBOUND || dir == IPSEC_DIR_OUTBOUND,

sys/netipsec/key.c

8355

IPSEC_ASSERT(m != NULL, ("null mbuf"));

sys/netipsec/key.c

8356

IPSEC_ASSERT(mhp != NULL, ("null msghdr"));

sys/netipsec/key.c

8357

IPSEC_ASSERT(m->m_len >= sizeof(struct sadb_msg),

sys/netipsec/key.c

8803

IPSEC_ASSERT(sav != NULL, ("Null secasvar"));

sys/netipsec/key.c

8804

IPSEC_ASSERT(m != NULL, ("Null mbuf"));

sys/netipsec/key.c

919

IPSEC_ASSERT(spidx != NULL, ("null spidx"));

sys/netipsec/key.c

920

IPSEC_ASSERT(dir == IPSEC_DIR_INBOUND || dir == IPSEC_DIR_OUTBOUND,

sys/netipsec/key_debug.c

703

IPSEC_ASSERT(sa != NULL, ("null sa"));

sys/netipsec/key_debug.c

729

IPSEC_ASSERT(sp != NULL, ("null sp"));

sys/netipsec/key_debug.c

749

IPSEC_ASSERT(spidx != NULL, ("null spidx"));

sys/netipsec/key_debug.c

769

IPSEC_ASSERT(saidx != NULL, ("null saidx"));

sys/netipsec/key_debug.c

784

IPSEC_ASSERT(lft != NULL, ("null lft"));

sys/netipsec/key_debug.c

796

IPSEC_ASSERT(sah != NULL, ("null sah"));

sys/netipsec/key_debug.c

817

IPSEC_ASSERT(rpl != NULL, ("null rpl"));

sys/netipsec/key_debug.c

842

IPSEC_ASSERT(natt != NULL, ("null natt"));

sys/netipsec/key_debug.c

857

IPSEC_ASSERT(sav != NULL, ("null sav"));

sys/netipsec/subr_ipsec.c

204

IPSEC_ASSERT(sav->tdb_xform == NULL,

sys/netipsec/udpencap.c

249

IPSEC_ASSERT(sav->natt != NULL, ("UDP encapsulation isn't required."));

sys/netipsec/udpencap.c

323

IPSEC_ASSERT(sav->natt != NULL, ("NAT-T isn't required"));

sys/netipsec/udpencap.c

324

IPSEC_ASSERT(proto == IPPROTO_UDP || proto == IPPROTO_TCP,

sys/netipsec/xform_ah.c

154

IPSEC_ASSERT(sav->tdb_authalgxform != NULL, ("null xform"));

sys/netipsec/xform_ah.c

548

IPSEC_ASSERT(sav != NULL, ("null SA"));

sys/netipsec/xform_ah.c

549

IPSEC_ASSERT(sav->key_auth != NULL, ("null authentication key"));

sys/netipsec/xform_ah.c

550

IPSEC_ASSERT(sav->tdb_authalgxform != NULL,

sys/netipsec/xform_ah.c

724

IPSEC_ASSERT(saidx->dst.sa.sa_family == AF_INET ||

sys/netipsec/xform_ah.c

871

IPSEC_ASSERT(sav != NULL, ("null SA"));

sys/netipsec/xform_ah.c

873

IPSEC_ASSERT(ahx != NULL, ("null authentication xform"));

sys/netipsec/xform_esp.c

116

IPSEC_ASSERT(sav->tdb_encalgxform != NULL,

sys/netipsec/xform_esp.c

284

IPSEC_ASSERT(sav != NULL, ("null SA"));

sys/netipsec/xform_esp.c

285

IPSEC_ASSERT(sav->tdb_encalgxform != NULL, ("null encoding xform"));

sys/netipsec/xform_esp.c

721

IPSEC_ASSERT(sav != NULL, ("null SA"));

sys/netipsec/xform_esp.c

724

IPSEC_ASSERT(espx != NULL, ("null encoding xform"));

sys/netipsec/xform_ipcomp.c

313

IPSEC_ASSERT(saidx->dst.sa.sa_family == AF_INET ||

sys/netipsec/xform_ipcomp.c

423

IPSEC_ASSERT(sav != NULL, ("null SA"));

sys/netipsec/xform_ipcomp.c

425

IPSEC_ASSERT(ipcompx != NULL, ("null compression xform"));

sys/netipsec/xform_tcp.c

237

IPSEC_ASSERT(m->m_len >= sizeof(*ip), ("unexpected mbuf len"));