1498 ipsec_check_loopback_policy(mblk_t *data_mp, ip_recv_attr_t *ira,  in ipsec_check_loopback_policy()  argument
1501 	if (!(ira->ira_flags & IRAF_IPSEC_SECURE))  in ipsec_check_loopback_policy()
1504 	ASSERT(ira->ira_flags & IRAF_LOOPBACK);  in ipsec_check_loopback_policy()
1522 ipsec_check_ipsecin_unique(ip_recv_attr_t *ira, const char **reason,  in ipsec_check_ipsecin_unique()  argument
1530 	ASSERT(ira->ira_flags & IRAF_IPSEC_SECURE);  in ipsec_check_ipsecin_unique()
1531 	ASSERT(!(ira->ira_flags & IRAF_LOOPBACK));  in ipsec_check_ipsecin_unique()
1533 	ah_assoc = ira->ira_ipsec_ah_sa;  in ipsec_check_ipsecin_unique()
1534 	esp_assoc = ira->ira_ipsec_esp_sa;  in ipsec_check_ipsecin_unique()
1565 ipsec_check_ipsecin_action(ip_recv_attr_t *ira, mblk_t *mp, ipsec_action_t *ap,  in ipsec_check_ipsecin_action()  argument
1579 	if (ira->ira_flags & IRAF_LOOPBACK) {  in ipsec_check_ipsecin_action()
1587 		if (ap == ira->ira_ipsec_action ||  in ipsec_check_ipsecin_action()
1588 		    (ira->ira_flags & IRAF_TRUSTED_ICMP))  in ipsec_check_ipsecin_action()
1596 	ASSERT(!(ira->ira_flags & IRAF_TRUSTED_ICMP));  in ipsec_check_ipsecin_action()
1597 	ASSERT(ira->ira_flags & IRAF_IPSEC_SECURE);  in ipsec_check_ipsecin_action()
1599 	ah_assoc = ira->ira_ipsec_ah_sa;  in ipsec_check_ipsecin_action()
1600 	esp_assoc = ira->ira_ipsec_esp_sa;  in ipsec_check_ipsecin_action()
1602 	decaps = (ira->ira_flags & IRAF_IPSEC_DECAPS);  in ipsec_check_ipsecin_action()
1722 		if (ira->ira_ipsec_action != NULL) {  in ipsec_check_ipsecin_action()
1728 			IPACT_REFRELE(ira->ira_ipsec_action);  in ipsec_check_ipsecin_action()
1730 		ASSERT(ira->ira_flags & IRAF_IPSEC_SECURE);  in ipsec_check_ipsecin_action()
1731 		ASSERT(ira->ira_ipsec_action == NULL);  in ipsec_check_ipsecin_action()
1733 		ira->ira_ipsec_action = ap;  in ipsec_check_ipsecin_action()
1799 ipsec_check_ipsecin_latch(ip_recv_attr_t *ira, mblk_t *mp, ipsec_latch_t *ipl,  in ipsec_check_ipsecin_latch()  argument
1806 	ASSERT(ira->ira_flags & IRAF_IPSEC_SECURE);  in ipsec_check_ipsecin_latch()
1808 	if (!(ira->ira_flags & IRAF_LOOPBACK)) {  in ipsec_check_ipsecin_latch()
1814 		if (ira->ira_ipsec_ah_sa != NULL) {  in ipsec_check_ipsecin_latch()
1816 			    ira->ira_ipsec_ah_sa)) {  in ipsec_check_ipsecin_latch()
1823 		if (ira->ira_ipsec_esp_sa != NULL) {  in ipsec_check_ipsecin_latch()
1825 			    ira->ira_ipsec_esp_sa)) {  in ipsec_check_ipsecin_latch()
1837 		if (!ipsec_check_ipsecin_unique(ira, reason, counter,  in ipsec_check_ipsecin_latch()
1842 	return (ipsec_check_ipsecin_action(ira, mp, ap, ipha, ip6h, reason,  in ipsec_check_ipsecin_latch()
1857     ipha_t *ipha, ip6_t *ip6h, uint64_t pkt_unique, ip_recv_attr_t *ira,  in ipsec_check_ipsecin_policy()  argument
1873 	if (ira->ira_flags & IRAF_LOOPBACK)  in ipsec_check_ipsecin_policy()
1874 		return (ipsec_check_loopback_policy(data_mp, ira, ipsp));  in ipsec_check_ipsecin_policy()
1876 	ASSERT(ira->ira_flags & IRAF_IPSEC_SECURE);  in ipsec_check_ipsecin_policy()
1878 	if (ira->ira_ipsec_action != NULL) {  in ipsec_check_ipsecin_policy()
1883 		IPACT_REFRELE(ira->ira_ipsec_action);  in ipsec_check_ipsecin_policy()
1885 	ASSERT(ira->ira_ipsec_action == NULL);  in ipsec_check_ipsecin_policy()
1887 	if (!SA_IDS_MATCH(ira->ira_ipsec_ah_sa, ira->ira_ipsec_esp_sa)) {  in ipsec_check_ipsecin_policy()
1893 	if (!ipsec_check_ipsecin_unique(ira, &reason, &counter, pkt_unique,  in ipsec_check_ipsecin_policy()
1903 		if (ipsec_check_ipsecin_action(ira, data_mp, ap,  in ipsec_check_ipsecin_policy()
1915 	ASSERT(ira->ira_ipsec_action == NULL);  in ipsec_check_ipsecin_policy()
2116     ipha_t *ipha, ip6_t *ip6h, ip_recv_attr_t *ira, netstack_t *ns)  in ipsec_check_global_policy()  argument
2188 		if (!(ira->ira_flags & IRAF_IPSEC_SECURE)) {  in ipsec_check_global_policy()
2203 	if (ira->ira_flags & IRAF_IPSEC_SECURE) {  in ipsec_check_global_policy()
2205 		    pkt_unique, ira, ns));  in ipsec_check_global_policy()
2406 ipsec_latch_inbound(conn_t *connp, ip_recv_attr_t *ira)  in ipsec_latch_inbound()  argument
2415 		if (!(ira->ira_flags & IRAF_LOOPBACK)) {  in ipsec_latch_inbound()
2416 			ASSERT(ira->ira_flags & IRAF_IPSEC_SECURE);  in ipsec_latch_inbound()
2417 			if (ira->ira_ipsec_esp_sa != NULL)  in ipsec_latch_inbound()
2418 				sa = ira->ira_ipsec_esp_sa;  in ipsec_latch_inbound()
2420 				sa = ira->ira_ipsec_ah_sa;  in ipsec_latch_inbound()
2427 	if (ira->ira_flags & IRAF_IPSEC_SECURE) {  in ipsec_latch_inbound()
2438 			    ira->ira_ipsec_action);  in ipsec_latch_inbound()
2441 		connp->conn_latch_in_action = ira->ira_ipsec_action;  in ipsec_latch_inbound()
2455     ipha_t *ipha, ip6_t *ip6h, ip_recv_attr_t *ira)  in ipsec_check_inbound_policy()  argument
2472 	if (!(ira->ira_flags & IRAF_IPSEC_SECURE)) {  in ipsec_check_inbound_policy()
2539 			    ipha, ip6h, ira, ns);  in ipsec_check_inbound_policy()
2577 		    ipha, ip6h, ira, ns);  in ipsec_check_inbound_policy()
2595 		if (ipsec_check_ipsecin_latch(ira, mp, ipl, ap,  in ipsec_check_inbound_policy()
2621 	mp = ipsec_check_ipsecin_policy(mp, p, ipha, ip6h, unique_id, ira, ns);  in ipsec_check_inbound_policy()
2627 		ipsec_latch_inbound(connp, ira);  in ipsec_check_inbound_policy()
2974 ipsec_in_to_out_action(ip_recv_attr_t *ira)  in ipsec_in_to_out_action()  argument
2996 	ASSERT(ira->ira_flags & IRAF_IPSEC_SECURE);  in ipsec_in_to_out_action()
2998 	ah_assoc = ira->ira_ipsec_ah_sa;  in ipsec_in_to_out_action()
3001 	esp_assoc = ira->ira_ipsec_esp_sa;  in ipsec_in_to_out_action()
3016 	    !!(ira->ira_flags & IRAF_IPSEC_DECAPS);  in ipsec_in_to_out_action()
3046 	ap->ipa_want_se = !!(ira->ira_flags & IRAF_IPSEC_DECAPS);  in ipsec_in_to_out_action()
4022 ipsec_in_to_out(ip_recv_attr_t *ira, ip_xmit_attr_t *ixa, mblk_t *data_mp,  in ipsec_in_to_out()  argument
4031 	if (ira->ira_ipsec_action != NULL) {  in ipsec_in_to_out()
4033 		reflect_action = ira->ira_ipsec_action;  in ipsec_in_to_out()
4034 		ira->ira_ipsec_action = NULL;  in ipsec_in_to_out()
4035 	} else if (!(ira->ira_flags & IRAF_LOOPBACK))  in ipsec_in_to_out()
4036 		reflect_action = ipsec_in_to_out_action(ira);  in ipsec_in_to_out()
4067 	if (ira->ira_flags & IRAF_IPSEC_SECURE)  in ipsec_in_to_out()
4112 ipsec_in_release_refs(ip_recv_attr_t *ira)  in ipsec_in_release_refs()  argument
4114 	if (!(ira->ira_flags & IRAF_IPSEC_SECURE))  in ipsec_in_release_refs()
4117 	if (ira->ira_ipsec_ah_sa != NULL) {  in ipsec_in_release_refs()
4118 		IPSA_REFRELE(ira->ira_ipsec_ah_sa);  in ipsec_in_release_refs()
4119 		ira->ira_ipsec_ah_sa = NULL;  in ipsec_in_release_refs()
4121 	if (ira->ira_ipsec_esp_sa != NULL) {  in ipsec_in_release_refs()
4122 		IPSA_REFRELE(ira->ira_ipsec_esp_sa);  in ipsec_in_release_refs()
4123 		ira->ira_ipsec_esp_sa = NULL;  in ipsec_in_release_refs()
4125 	ira->ira_flags &= ~IRAF_IPSEC_SECURE;  in ipsec_in_release_refs()
4139 ipsec_out_to_in(ip_xmit_attr_t *ixa, ill_t *ill, ip_recv_attr_t *ira)  in ipsec_out_to_in()  argument
4145 	ira->ira_free_flags = 0;  in ipsec_out_to_in()
4146 	ira->ira_zoneid = ixa->ixa_zoneid;  in ipsec_out_to_in()
4147 	ira->ira_cred = ixa->ixa_cred;  in ipsec_out_to_in()
4148 	ira->ira_cpid = ixa->ixa_cpid;  in ipsec_out_to_in()
4149 	ira->ira_tsl = ixa->ixa_tsl;  in ipsec_out_to_in()
4150 	ira->ira_ill = ira->ira_rill = ill;  in ipsec_out_to_in()
4151 	ira->ira_flags = ixa->ixa_flags & IAF_MASK;  in ipsec_out_to_in()
4152 	ira->ira_no_loop_zoneid = ixa->ixa_no_loop_zoneid;  in ipsec_out_to_in()
4153 	ira->ira_pktlen = ixa->ixa_pktlen;  in ipsec_out_to_in()
4154 	ira->ira_ip_hdr_length = ixa->ixa_ip_hdr_length;  in ipsec_out_to_in()
4155 	ira->ira_protocol = ixa->ixa_protocol;  in ipsec_out_to_in()
4156 	ira->ira_mhip = NULL;  in ipsec_out_to_in()
4158 	ira->ira_flags |= IRAF_LOOPBACK | IRAF_L2SRC_LOOPBACK;  in ipsec_out_to_in()
4160 	ira->ira_sqp = ixa->ixa_sqp;  in ipsec_out_to_in()
4161 	ira->ira_ring = NULL;  in ipsec_out_to_in()
4163 	ira->ira_ruifindex = ill->ill_phyint->phyint_ifindex;  in ipsec_out_to_in()
4164 	ira->ira_rifindex = ira->ira_ruifindex;  in ipsec_out_to_in()
4169 	ira->ira_flags |= IRAF_IPSEC_SECURE;  in ipsec_out_to_in()
4171 	ira->ira_ipsec_ah_sa = NULL;  in ipsec_out_to_in()
4172 	ira->ira_ipsec_esp_sa = NULL;  in ipsec_out_to_in()
4183 	ira->ira_ipsec_action = act;  in ipsec_out_to_in()
5544 ipsec_tun_inbound(ip_recv_attr_t *ira, mblk_t *data_mp, ipsec_tun_pol_t *itp,  in ipsec_tun_inbound()  argument
5615 			if (!(ira->ira_flags & IRAF_IPSEC_SECURE)) {  in ipsec_tun_inbound()
5663 			mp = ip_recv_attr_to_mblk(ira);  in ipsec_tun_inbound()
5784 			if (!(ira->ira_flags & IRAF_IPSEC_SECURE)) {  in ipsec_tun_inbound()
5816 				    ira, ns);  in ipsec_tun_inbound()
5852 	if ((ira->ira_flags & IRAF_IPSEC_SECURE) && !global_present) {  in ipsec_tun_inbound()
5853 		if (ira->ira_flags & IRAF_TRUSTED_ICMP) {  in ipsec_tun_inbound()
5891 	    outer_ipv6, ira, ns);  in ipsec_tun_inbound()