opnsense-src/sys/netipsec
Andrey V. Elsukov 04207850a9 pfkey2: use correct value for a key length
The length of key data is specified via sadb_key_bits field.
Use specified size for buffer allocation and key copying.
Also add a check that the value of sadb_key_bits is not zero,
as explicitly required in RFC 2367.

PR:		241010
Submitted by:	jean-francois.hren at stormshield eu
MFC after:	1 week
2025-03-06 15:18:59 +03:00
..
ah.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
ah_var.h netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
esp.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
esp_var.h netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
ipcomp.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
ipcomp_var.h netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
ipsec.c netinet: allow per protocol random IP id control, single out IPSEC 2025-03-04 08:45:32 -08:00
ipsec.h netinet: allow per protocol random IP id control, single out IPSEC 2025-03-04 08:45:32 -08:00
ipsec6.h ipsec_output(): add mtu argument 2024-07-12 06:29:31 +03:00
ipsec_input.c ipsec_offload: kernel infrastructure 2024-07-12 07:27:58 +03:00
ipsec_mbuf.c sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
ipsec_mod.c Add UDP encapsulation of ESP in IPv6 2024-01-16 20:44:34 +00:00
ipsec_offload.c net: Include private header in more needed places 2024-11-13 14:30:59 -05:00
ipsec_offload.h ipsec_offload: add ipsec_accel_drv_sa_lifetime_fetch() 2024-08-20 15:42:13 +03:00
ipsec_output.c netinet: allow per protocol random IP id control, single out IPSEC 2025-03-04 08:45:32 -08:00
ipsec_pcb.c ipsec_offload: kernel infrastructure 2024-07-12 07:27:58 +03:00
ipsec_support.h ipsec: allow it to work with unmapped mbufs 2025-01-13 21:29:32 +02:00
key.c pfkey2: use correct value for a key length 2025-03-06 15:18:59 +03:00
key.h ipsec_offload: kernel infrastructure 2024-07-12 07:27:58 +03:00
key_debug.c pfkey: Fix some checks in kdebug_sadb() 2024-12-04 16:22:50 +00:00
key_debug.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
key_var.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
keydb.h ipsec_offload: kernel infrastructure 2024-07-12 07:27:58 +03:00
keysock.c sockets: provide correct pr_shutdown for keysock and SDP 2024-01-16 12:02:59 -08:00
keysock.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
subr_ipsec.c ipsec: allow it to work with unmapped mbufs 2025-01-13 21:29:32 +02:00
udpencap.c Fix KASSERT in 80044c78 causing build failures 2024-01-16 23:15:00 +00:00
xform.h sys: Remove $FreeBSD$: one-line .c comment pattern 2023-08-16 11:54:24 -06:00
xform_ah.c netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
xform_esp.c netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
xform_ipcomp.c netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
xform_tcp.c ipsec: allow it to work with unmapped mbufs 2025-01-13 21:29:32 +02:00