1 /*-
80 		if (tok->t_data)  in au_free_token()
81 			free(tok->t_data);  in au_free_token()
106 	 * Find an unused descriptor, remove it from the free list, mark as  in au_open()
111 		rec->used = 1;  in au_open()
125 			return (-1);  in au_open()
127 		rec->data = malloc (MAX_AUDIT_RECORD_SIZE * sizeof(u_char));  in au_open()
128 		if (rec->data == NULL) {  in au_open()
131 			return (-1);  in au_open()
142 			free(rec->data);  in au_open()
147 			return (-1);  in au_open()
149 		rec->desc = audit_rec_count;  in au_open()
159 	memset(rec->data, 0, MAX_AUDIT_RECORD_SIZE);  in au_open()
161 	TAILQ_INIT(&rec->token_q);  in au_open()
162 	rec->len = 0;  in au_open()
163 	rec->used = 1;  in au_open()
165 	return (rec->desc);  in au_open()
169  * Store the token with the record descriptor.
181 		return (-1); /* Invalid Token */  in au_write()
184 	/* Write the token to the record descriptor */  in au_write()
186 	if ((rec == NULL) || (rec->used == 0)) {  in au_write()
188 		return (-1); /* Invalid descriptor */  in au_write()
191 	if (rec->len + tok->len + AUDIT_TRAILER_SIZE > MAX_AUDIT_RECORD_SIZE) {  in au_write()
193 		return (-1);  in au_write()
198 	 * XXX Not locking here -- we should not be writing to  in au_write()
199 	 * XXX the same descriptor from different threads  in au_write()
201 	TAILQ_INSERT_TAIL(&rec->token_q, tok, tokens);  in au_write()
203 	rec->len += tok->len; /* grow record length by token size bytes */  in au_write()
218 au_assemble(au_record_t *rec, short event)  in au_assemble()
240 			return (-1);  in au_assemble()
242 		tot_rec_size = rec->len + AUDIT_HEADER_SIZE +  in au_assemble()
248 			return (-1);  in au_assemble()
261 			return (-1);  in au_assemble()
263 		tot_rec_size = rec->len + hdrsize + AUDIT_TRAILER_SIZE;  in au_assemble()
276 		return (-1);  in au_assemble()
283 		return (-1);  in au_assemble()
286 	TAILQ_INSERT_HEAD(&rec->token_q, header, tokens);  in au_assemble()
287 	TAILQ_INSERT_TAIL(&rec->token_q, trailer, tokens);  in au_assemble()
289 	rec->len = tot_rec_size;  in au_assemble()
290 	dptr = rec->data;  in au_assemble()
292 	TAILQ_FOREACH(tok, &rec->token_q, tokens) {  in au_assemble()
293 		memcpy(dptr, tok->t_data, tok->len);  in au_assemble()
294 		dptr += tok->len;  in au_assemble()
310 	while ((tok = TAILQ_FIRST(&rec->token_q)) != NULL) {  in au_teardown()
311 		TAILQ_REMOVE(&rec->token_q, tok, tokens);  in au_teardown()
312 		free(tok->t_data);  in au_teardown()
316 	rec->used = 0;  in au_teardown()
317 	rec->len = 0;  in au_teardown()
337 au_close(int d, int keep, short event)  in au_close()
344 	if ((rec == NULL) || (rec->used == 0)) {  in au_close()
346 		return (-1); /* Invalid descriptor */  in au_close()
354 	tot_rec_size = rec->len + MAX_AUDIT_HEADER_SIZE + AUDIT_TRAILER_SIZE;  in au_close()
363 		retval = -1;  in au_close()
372 		retval = -1;  in au_close()
377 	retval = audit(rec->data, rec->len);  in au_close()
387  * au_close(), except onto an in-memory buffer.  Buffer size as an argument,
391 au_close_buffer(int d, short event, u_char *buffer, size_t *buflen)  in au_close_buffer()
398 	if ((rec == NULL) || (rec->used == 0)) {  in au_close_buffer()
400 		return (-1);  in au_close_buffer()
404 	tot_rec_size = rec->len + MAX_AUDIT_HEADER_SIZE + AUDIT_TRAILER_SIZE;  in au_close_buffer()
412 		retval = -1;  in au_close_buffer()
418 		retval = -1;  in au_close_buffer()
422 	memcpy(buffer, rec->data, rec->len);  in au_close_buffer()
423 	*buflen = rec->len;  in au_close_buffer()
439 	if (tok->len > *buflen) {  in au_close_token()
445 	memcpy(buffer, tok->t_data, tok->len);  in au_close_token()
446 	*buflen = tok->len;  in au_close_token()