171 #define	IS_V6_FRAGMENT(ipp)	(ipp.ipp_fields & IPPF_FRAGHDR)  argument
1140 	ipsec_prot_t *ipp;  in ipsec_check_action()  local
1143 	ipp = &act->ipa_apply;  in ipsec_check_action()
1145 	if (ipp->ipp_use_ah &&  in ipsec_check_action()
1146 	    ipss->ipsec_alglists[IPSEC_ALG_AUTH][ipp->ipp_auth_alg] == NULL) {  in ipsec_check_action()
1150 	if (ipp->ipp_use_espa &&  in ipsec_check_action()
1151 	    ipss->ipsec_alglists[IPSEC_ALG_AUTH][ipp->ipp_esp_auth_alg] ==  in ipsec_check_action()
1156 	if (ipp->ipp_use_esp &&  in ipsec_check_action()
1157 	    ipss->ipsec_alglists[IPSEC_ALG_ENCR][ipp->ipp_encr_alg] == NULL) {  in ipsec_check_action()
1162 	act_alg_adjust(IPSEC_ALG_AUTH, ipp->ipp_auth_alg,  in ipsec_check_action()
1163 	    &ipp->ipp_ah_minbits, &ipp->ipp_ah_maxbits, ns);  in ipsec_check_action()
1164 	act_alg_adjust(IPSEC_ALG_AUTH, ipp->ipp_esp_auth_alg,  in ipsec_check_action()
1165 	    &ipp->ipp_espa_minbits, &ipp->ipp_espa_maxbits, ns);  in ipsec_check_action()
1166 	act_alg_adjust(IPSEC_ALG_ENCR, ipp->ipp_encr_alg,  in ipsec_check_action()
1167 	    &ipp->ipp_espe_minbits, &ipp->ipp_espe_maxbits, ns);  in ipsec_check_action()
1169 	if (ipp->ipp_ah_minbits > ipp->ipp_ah_maxbits) {  in ipsec_check_action()
1173 	if (ipp->ipp_espa_minbits > ipp->ipp_espa_maxbits) {  in ipsec_check_action()
1177 	if (ipp->ipp_espe_minbits > ipp->ipp_espe_maxbits) {  in ipsec_check_action()
1192 	ipsec_prot_t *ipp;  in ipsec_setup_act()  local
1195 	ipp = &outact->ipa_apply;  in ipsec_setup_act()
1196 	ipp->ipp_auth_alg = (uint8_t)auth_alg;  in ipsec_setup_act()
1197 	ipp->ipp_encr_alg = (uint8_t)encr_alg;  in ipsec_setup_act()
1198 	ipp->ipp_esp_auth_alg = (uint8_t)eauth_alg;  in ipsec_setup_act()
1201 	    &ipp->ipp_ah_minbits, &ipp->ipp_ah_maxbits, ns);  in ipsec_setup_act()
1203 	    &ipp->ipp_espa_minbits, &ipp->ipp_espa_maxbits, ns);  in ipsec_setup_act()
1205 	    &ipp->ipp_espe_minbits, &ipp->ipp_espe_maxbits, ns);  in ipsec_setup_act()
1340 ipsec_prot_from_req(const ipsec_req_t *req, ipsec_prot_t *ipp)  in ipsec_prot_from_req()  argument
1342 	bzero(ipp, sizeof (*ipp));  in ipsec_prot_from_req()
1347 	ipp->ipp_use_ah = !!(req->ipsr_ah_req & IPSEC_PREF_REQUIRED);  in ipsec_prot_from_req()
1348 	ipp->ipp_use_esp = !!(req->ipsr_esp_req & IPSEC_PREF_REQUIRED);  in ipsec_prot_from_req()
1349 	ipp->ipp_use_espa = !!(req->ipsr_esp_auth_alg);  in ipsec_prot_from_req()
1350 	ipp->ipp_use_se = !!(req->ipsr_self_encap_req & IPSEC_PREF_REQUIRED);  in ipsec_prot_from_req()
1351 	ipp->ipp_use_unique = !!((req->ipsr_ah_req|req->ipsr_esp_req) &  in ipsec_prot_from_req()
1353 	ipp->ipp_encr_alg = req->ipsr_esp_alg;  in ipsec_prot_from_req()
1360 	ipp->ipp_auth_alg = (req->ipsr_auth_alg != SADB_AALG_ANY) ?  in ipsec_prot_from_req()
1362 	ipp->ipp_esp_auth_alg = (req->ipsr_esp_auth_alg != SADB_AALG_ANY) ?  in ipsec_prot_from_req()
1391 ipsec_req_from_prot(ipsec_prot_t *ipp, ipsec_req_t *req)  in ipsec_req_from_prot()  argument
1393 	req->ipsr_esp_alg = ipp->ipp_encr_alg;  in ipsec_req_from_prot()
1394 	req->ipsr_auth_alg = ipp->ipp_auth_alg;  in ipsec_req_from_prot()
1395 	req->ipsr_esp_auth_alg = ipp->ipp_esp_auth_alg;  in ipsec_req_from_prot()
1397 	if (ipp->ipp_use_unique) {  in ipsec_req_from_prot()
1401 	if (ipp->ipp_use_se)  in ipsec_req_from_prot()
1403 	if (ipp->ipp_use_ah)  in ipsec_req_from_prot()
1405 	if (ipp->ipp_use_esp)  in ipsec_req_from_prot()
1570 	ipsec_prot_t *ipp;  in ipsec_check_ipsecin_action()  local
1619 		ipp = &ap->ipa_act.ipa_apply;  in ipsec_check_ipsecin_action()
1628 		if (ipp->ipp_use_ah) {  in ipsec_check_ipsecin_action()
1637 			ASSERT(ipp->ipp_auth_alg != 0);  in ipsec_check_ipsecin_action()
1640 			    ipp->ipp_auth_alg) {  in ipsec_check_ipsecin_action()
1656 		if (ipp->ipp_use_esp) {  in ipsec_check_ipsecin_action()
1665 			ASSERT(ipp->ipp_encr_alg != 0);  in ipsec_check_ipsecin_action()
1668 			    ipp->ipp_encr_alg) {  in ipsec_check_ipsecin_action()
1678 			if (ipp->ipp_use_espa) {  in ipsec_check_ipsecin_action()
1680 				    ipp->ipp_esp_auth_alg) {  in ipsec_check_ipsecin_action()
1698 		if (ipp->ipp_use_se) {  in ipsec_check_ipsecin_action()
2699 	ip_pkt_t ipp;  in ipsec_init_inbound_sel()  local
2716 		bzero(&ipp, sizeof (ipp));  in ipsec_init_inbound_sel()
2738 			(void) ip_find_hdr_v6(spare_mp, ip6h, B_FALSE, &ipp,  in ipsec_init_inbound_sel()
2744 			(void) ip_find_hdr_v6(mp, ip6h, B_FALSE, &ipp, NULL);  in ipsec_init_inbound_sel()
2748 		if (port_policy_present && IS_V6_FRAGMENT(ipp) && !is_icmp) {  in ipsec_init_inbound_sel()
3079 		const ipsec_prot_t *ipp = &act->ipa_apply;  in ipsec_act_ovhd()  local
3081 		if (ipp->ipp_use_ah)  in ipsec_act_ovhd()
3083 		if (ipp->ipp_use_esp) {  in ipsec_act_ovhd()
3087 		if (ipp->ipp_use_se)  in ipsec_act_ovhd()
3221 			const ipsec_prot_t *ipp = &a[i].ipa_apply;  in ipsec_act_find()  local
3223 			ASSERT(ipp->ipp_use_ah || ipp->ipp_use_esp);  in ipsec_act_find()
3224 			want_ah |= ipp->ipp_use_ah;  in ipsec_act_find()
3225 			want_esp |= ipp->ipp_use_esp;  in ipsec_act_find()
3226 			want_se |= ipp->ipp_use_se;  in ipsec_act_find()
3227 			want_unique |= ipp->ipp_use_unique;  in ipsec_act_find()
3450 ipsec_policy_free(ipsec_policy_t *ipp)  in ipsec_policy_free()  argument
3452 	ASSERT(ipp->ipsp_refs == 0);  in ipsec_policy_free()
3453 	ASSERT(ipp->ipsp_sel != NULL);  in ipsec_policy_free()
3454 	ASSERT(ipp->ipsp_act != NULL);  in ipsec_policy_free()
3455 	ASSERT(ipp->ipsp_netstack != NULL);  in ipsec_policy_free()
3457 	ipsec_sel_rel(&ipp->ipsp_sel, ipp->ipsp_netstack);  in ipsec_policy_free()
3458 	IPACT_REFRELE(ipp->ipsp_act);  in ipsec_policy_free()
3459 	kmem_cache_free(ipsec_pol_cache, ipp);  in ipsec_policy_free()
3472 	ipsec_policy_t *ipp;  in ipsec_policy_create()  local
3478 	ipp = kmem_cache_alloc(ipsec_pol_cache, KM_NOSLEEP);  in ipsec_policy_create()
3482 	if ((ap == NULL) || (sp == NULL) || (ipp == NULL)) {  in ipsec_policy_create()
3488 		if (ipp != NULL)  in ipsec_policy_create()
3489 			kmem_cache_free(ipsec_pol_cache, ipp);  in ipsec_policy_create()
3493 	HASH_NULL(ipp, ipsp_hash);  in ipsec_policy_create()
3495 	ipp->ipsp_netstack = ns;	/* Needed for ipsec_policy_free */  in ipsec_policy_create()
3496 	ipp->ipsp_refs = 1;	/* caller's reference */  in ipsec_policy_create()
3497 	ipp->ipsp_sel = sp;  in ipsec_policy_create()
3498 	ipp->ipsp_act = ap;  in ipsec_policy_create()
3499 	ipp->ipsp_prio = prio;	/* rule priority */  in ipsec_policy_create()
3500 	ipp->ipsp_index = *index_ptr;  in ipsec_policy_create()
3503 	return (ipp);  in ipsec_policy_create()
3640 ipsec_check_policy(ipsec_policy_head_t *php, ipsec_policy_t *ipp, int direction)  in ipsec_check_policy()  argument
3646 	ipsec_selkey_t *selkey = &ipp->ipsp_sel->ipsl_key;  in ipsec_check_policy()
3680 		if (p2->ipsp_sel == ipp->ipsp_sel)  in ipsec_check_policy()
3693 	    (ipp->ipsp_act->ipa_act.ipa_type == IPSEC_ACT_APPLY)) {  in ipsec_check_policy()
3701 				return (ipsec_compare_action(p2, ipp));  in ipsec_check_policy()
3814 ipsec_enter_policy(ipsec_policy_head_t *php, ipsec_policy_t *ipp, int direction,  in ipsec_enter_policy()  argument
3818 	ipsec_selkey_t *selkey = &ipp->ipsp_sel->ipsl_key;  in ipsec_enter_policy()
3836 		HASHLIST_INSERT(ipp, ipsp_hash, pr->ipr_nonhash[af]);  in ipsec_enter_policy()
3839 		HASH_INSERT(ipp, ipsp_hash, pr->ipr_hash, hval);  in ipsec_enter_policy()
3843 	ipsec_insert_always(&php->iph_rulebyid, ipp);  in ipsec_enter_policy()
6265 	ip_pkt_t ipp;  in ipsec_fragcache_add()  local
6325 		bzero(&ipp, sizeof (ipp));  in ipsec_fragcache_add()
6326 		(void) ip_find_hdr_v6(mp, ip6h, B_FALSE, &ipp, NULL);  in ipsec_fragcache_add()
6327 		if (!(ipp.ipp_fields & IPPF_FRAGHDR)) {  in ipsec_fragcache_add()
6340 		fraghdr = ipp.ipp_fraghdr;  in ipsec_fragcache_add()
6742 			bzero(&ipp, sizeof (ipp));  in ipsec_fragcache_add()
6743 			(void) ip_find_hdr_v6(data_mp, ip6h, B_FALSE, &ipp,  in ipsec_fragcache_add()
6745 			fraghdr = ipp.ipp_fraghdr;  in ipsec_fragcache_add()