freebsd-dev/sys/netipsec
Robert Watson a152f8a361 Change semantics of socket close and detach. Add a new protocol switch
function, pru_close, to notify protocols that the file descriptor or
other consumer of a socket is closing the socket.  pru_abort is now a
notification of close also, and no longer detaches.  pru_detach is no
longer used to notify of close, and will be called during socket
tear-down by sofree() when all references to a socket evaporate after
an earlier call to abort or close the socket.  This means detach is now
an unconditional teardown of a socket, whereas previously sockets could
persist after detach of the protocol retained a reference.

This faciliates sharing mutexes between layers of the network stack as
the mutex is required during the checking and removal of references at
the head of sofree().  With this change, pru_detach can now assume that
the mutex will no longer be required by the socket layer after
completion, whereas before this was not necessarily true.

Reviewed by:	gnn
2006-07-21 17:11:15 +00:00
..
ah_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ah.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
esp_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
esp.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipcomp_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipcomp.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipip_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipsec6.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipsec_input.c Add a pseudo interface for packet filtering IPSec connections before or after 2006-06-26 22:30:08 +00:00
ipsec_mbuf.c promote fast ipsec's m_clone routine for public use; it is renamed 2006-03-15 21:11:11 +00:00
ipsec_osdep.h - Use suser_cred(9) instead of directly comparing cr_uid. 2006-06-27 11:41:21 +00:00
ipsec_output.c Add a pseudo interface for packet filtering IPSec connections before or after 2006-06-26 22:30:08 +00:00
ipsec.c Change '#if INET' and '#if INET6' to '#ifdef INET' and '#ifdef INET6'. 2006-06-04 19:32:32 +00:00
ipsec.h Add a pseudo interface for packet filtering IPSec connections before or after 2006-06-26 22:30:08 +00:00
key_debug.c Fix -Wundef warnings found when compiling i386 LINT, GENERIC and 2005-12-05 11:58:35 +00:00
key_debug.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
key_var.h First steps towards IPSec cleanup. 2006-03-25 13:38:52 +00:00
key.c Prevent disappearing SAD entries by implementing MPsafe refcounting. 2006-05-20 15:35:36 +00:00
key.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
keydb.h First steps towards IPSec cleanup. 2006-03-25 13:38:52 +00:00
keysock.c Change semantics of socket close and detach. Add a new protocol switch 2006-07-21 17:11:15 +00:00
keysock.h Fix stack corruptions on amd64. 2006-01-21 10:44:34 +00:00
xform_ah.c - The authsize field from auth_hash structure was removed. 2006-05-17 18:30:28 +00:00
xform_esp.c - The authsize field from auth_hash structure was removed. 2006-05-17 18:30:28 +00:00
xform_ipcomp.c Allow to use fast_ipsec(4) on debug.mpsafenet=0 and INVARIANTS-enabled 2006-03-23 23:26:34 +00:00
xform_ipip.c Add a pseudo interface for packet filtering IPSec connections before or after 2006-06-26 22:30:08 +00:00
xform_tcp.c First steps towards IPSec cleanup. 2006-03-25 13:38:52 +00:00
xform.h Fix more stack corruptions on amd64. 2006-03-30 18:57:04 +00:00