svn commit: r308959 - projects/ipsec/sys/netipsec

[Andrey V. Elsukov]

Author: ae
Date: Tue Nov 22 08:56:29 2016
New Revision: 308959
URL: https://svnweb.freebsd.org/changeset/base/308959

Log:
  Add key_checksockaddrs() function.
  
  It will be used to check that sockaddr structures from PF_KEY message are
  properly filled.

Modified:
  projects/ipsec/sys/netipsec/key.c

Modified: projects/ipsec/sys/netipsec/key.c
==============================================================================
--- projects/ipsec/sys/netipsec/key.c	Tue Nov 22 08:30:32 2016	(r308958)
+++ projects/ipsec/sys/netipsec/key.c	Tue Nov 22 08:56:29 2016	(r308959)
@@ -654,6 +654,35 @@ key_getspgen(void)
 	return (V_sp_genid);
 }
 
+static int
+key_checksockaddrs(struct sockaddr *src, struct sockaddr *dst)
+{
+
+	/* family match */
+	if (src->sa_family != dst->sa_family)
+		return (EINVAL);
+	/* sa_len match */
+	if (src->sa_len != dst->sa_len)
+		return (EINVAL);
+	switch (src->sa_family) {
+#ifdef INET
+	case AF_INET:
+		if (src->sa_len != sizeof(struct sockaddr_in))
+			return (EINVAL);
+		break;
+#endif
+#ifdef INET6
+	case AF_INET6:
+		if (src->sa_len != sizeof(struct sockaddr_in6))
+			return (EINVAL);
+		break;
+#endif
+	default:
+		return (EAFNOSUPPORT);
+	}
+	return (0);
+}
+
 /*
  * allocating a SP for OUTBOUND or INBOUND packet.
  * Must call key_freesp() later.