Andrey V. Elsukov 1a01e0e7ac Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hook ... from enc_hhook(). This should solve the problem when pf is used with if_enc(4) interface, and outbound packet with existing PCB checked by pf, and this leads to deadlock due to pf does its own PCB lookup and tries to take rlock when wlock is already held. Now we pass PCB pointer if it is known to the pfil hook, this helps to avoid extra PCB lookup and thus rlock acquiring is not needed. For inbound packets it is safe to pass NULL, because we do not held any PCB locks yet. PR: 220217 MFC after: 3 weeks Sponsored by: Yandex LLC		2017-07-31 11:04:35 +00:00
..
ah_var.h
ah.h
esp_var.h
esp.h
ipcomp_var.h
ipcomp.h
ipsec6.h
ipsec_input.c	Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hook	2017-07-31 11:04:35 +00:00
ipsec_mbuf.c
ipsec_mod.c
ipsec_output.c	Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hook	2017-07-31 11:04:35 +00:00
ipsec_pcb.c
ipsec_support.h
ipsec.c
ipsec.h	Add inpcb pointer to struct ipsec_ctx_data and pass it to the pfil hook	2017-07-31 11:04:35 +00:00
key_debug.c	Build kdebug_secreplay() function only when IPSEC_DEBUG is defined.	2017-06-01 10:04:12 +00:00
key_debug.h	Disable IPsec debugging code by default when IPSEC_DEBUG kernel option	2017-05-29 09:30:38 +00:00
key_var.h
key.c
key.h
keydb.h
keysock.c
keysock.h
subr_ipsec.c
udpencap.c
xform_ah.c	Disable IPsec debugging code by default when IPSEC_DEBUG kernel option	2017-05-29 09:30:38 +00:00
xform_esp.c	Disable IPsec debugging code by default when IPSEC_DEBUG kernel option	2017-05-29 09:30:38 +00:00
xform_ipcomp.c	Disable IPsec debugging code by default when IPSEC_DEBUG kernel option	2017-05-29 09:30:38 +00:00
xform_tcp.c
xform.h