[apple/xnu.git] / bsd / netinet6 / ipcomp_core.c

/*
 * Copyright (c) 2016 Apple Inc. All rights reserved.
 *
 * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
 *
 * This file contains Original Code and/or Modifications of Original Code
 * as defined in and that are subject to the Apple Public Source License
 * Version 2.0 (the 'License'). You may not use this file except in
 * compliance with the License. The rights granted to you under the License
 * may not be used to create, or enable the creation or redistribution of,
 * unlawful or unlicensed copies of an Apple operating system, or to
 * circumvent, violate, or enable the circumvention or violation of, any
 * terms of an Apple operating system software license agreement.
 *
 * Please obtain a copy of the License at
 * http://www.opensource.apple.com/apsl/ and read it before using this file.
 *
 * The Original Code and all software distributed under the License are
 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 * Please see the License for the specific language governing rights and
 * limitations under the License.
 *
 * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
 */

/*	$FreeBSD: src/sys/netinet6/ipcomp_core.c,v 1.1.2.2 2001/07/03 11:01:54 ume Exp $	*/
/*	$KAME: ipcomp_core.c,v 1.24 2000/10/23 04:24:22 itojun Exp $	*/

/*
 * Copyright (C) 1999 WIDE Project.
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the name of the project nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

/*
 * RFC2393 IP payload compression protocol (IPComp).
 */


#include <sys/param.h>
#include <sys/systm.h>
#include <sys/malloc.h>
#include <sys/mbuf.h>
#include <sys/domain.h>
#include <sys/protosw.h>
#include <sys/socket.h>
#include <sys/errno.h>
#include <sys/time.h>
#include <sys/kernel.h>
#include <sys/syslog.h>
#include <sys/queue.h>

#include <net/if.h>
#include <net/route.h>
#if IPCOMP_ZLIB
#include <libkern/zlib.h>
#endif
#include <kern/cpu_number.h>

#include <netinet6/ipcomp.h>
#if INET6
#include <netinet6/ipcomp6.h>
#endif
#include <netinet6/ipsec.h>
#if INET6
#include <netinet6/ipsec6.h>
#endif

#include <net/net_osdep.h>

#if IPCOMP_ZLIB
static void *deflate_alloc(void *, u_int, u_int);
static void deflate_free(void *, void *);
static int deflate_common(struct mbuf *, struct mbuf *, size_t *, int);
static int deflate_compress(struct mbuf *, struct mbuf *, size_t *);
static int deflate_decompress(struct mbuf *, struct mbuf *, size_t *);

/*
 * We need to use default window size (2^15 = 32Kbytes as of writing) for
 * inbound case.  Otherwise we get interop problem.
 * Use negative value to avoid Adler32 checksum.  This is an undocumented
 * feature in zlib (see ipsec wg mailing list archive in January 2000).
 */
static int deflate_policy = Z_DEFAULT_COMPRESSION;
static int deflate_window_out = -12;
static const int deflate_window_in = -1 * MAX_WBITS;	/* don't change it */
static int deflate_memlevel = MAX_MEM_LEVEL;

static z_stream	deflate_stream;
static z_stream	inflate_stream;
#endif /* IPCOMP_ZLIB */

#if IPCOMP_ZLIB
static const struct ipcomp_algorithm ipcomp_algorithms[] = {
	{ deflate_compress, deflate_decompress, 90 },
};
#else
static const struct ipcomp_algorithm ipcomp_algorithms[] __unused = {};
#endif

const struct ipcomp_algorithm *
ipcomp_algorithm_lookup(
#if IPCOMP_ZLIB
		int idx
#else
		__unused int idx
#endif
		)
{
#if IPCOMP_ZLIB
 	if (idx == SADB_X_CALG_DEFLATE) {
		/*
		 * Avert your gaze, ugly hack follows!
		 * We init here so our malloc can allocate using M_WAIT.
		 * We don't want to allocate if ipcomp isn't used, and we
		 * don't want to allocate on the input or output path.
		 * Allocation fails if we use M_NOWAIT because init allocates
		 * something like 256k (ouch).
		 */
		if (deflate_stream.zalloc == NULL) {
			deflate_stream.zalloc = deflate_alloc;
			deflate_stream.zfree = deflate_free;
			if (deflateInit2(&deflate_stream, deflate_policy, Z_DEFLATED,
					deflate_window_out, deflate_memlevel, Z_DEFAULT_STRATEGY)) {
				/* Allocation failed */
				bzero(&deflate_stream, sizeof(deflate_stream));
#if IPSEC_DEBUG
				printf("ipcomp_algorithm_lookup: deflateInit2 failed.\n");
#endif
			}
		}
		
		if (inflate_stream.zalloc == NULL) {
			inflate_stream.zalloc = deflate_alloc;
			inflate_stream.zfree = deflate_free;
			if (inflateInit2(&inflate_stream, deflate_window_in)) {
				/* Allocation failed */
				bzero(&inflate_stream, sizeof(inflate_stream));
#if IPSEC_DEBUG
				printf("ipcomp_algorithm_lookup: inflateInit2 failed.\n");
#endif
			}
		}

		return &ipcomp_algorithms[0];
	}
#endif /* IPCOMP_ZLIB */
	return NULL;
}

#if IPCOMP_ZLIB
static void *
deflate_alloc(
	__unused void *aux,
	u_int items,
	u_int siz)
{
	void *ptr;
	ptr = _MALLOC(items * siz, M_TEMP, M_NOWAIT);
	return ptr;
}

static void
deflate_free(
	__unused void *aux,
	void *ptr)
{
	FREE(ptr, M_TEMP);
}

/* @param mode 0: compress 1: decompress */
static int
deflate_common(struct mbuf *m, struct mbuf *md, size_t *lenp, int mode)
{
	struct mbuf *mprev;
	struct mbuf *p;
	struct mbuf *n = NULL, *n0 = NULL, **np;
	z_stream *zs;
	int error = 0;
	int zerror;
	size_t offset;

#define MOREBLOCK() \
do { \
	/* keep the reply buffer into our chain */		\
	if (n) {						\
		n->m_len = zs->total_out - offset;		\
		offset = zs->total_out;				\
		*np = n;					\
		np = &n->m_next;				\
		n = NULL;					\
	}							\
								\
	/* get a fresh reply buffer */				\
	MGET(n, M_DONTWAIT, MT_DATA);				\
	if (n) {						\
		MCLGET(n, M_DONTWAIT);				\
	}							\
	if (!n) {						\
		error = ENOBUFS;				\
		goto fail;					\
	}							\
	n->m_len = 0;						\
	n->m_len = M_TRAILINGSPACE(n);				\
	n->m_next = NULL;					\
	/*							\
	 * if this is the first reply buffer, reserve		\
	 * region for ipcomp header.				\
	 */							\
	if (*np == NULL) {					\
		n->m_len -= sizeof(struct ipcomp);		\
		n->m_data += sizeof(struct ipcomp);		\
	}							\
								\
	zs->next_out = mtod(n, u_int8_t *);			\
	zs->avail_out = n->m_len;				\
} while (0)

	for (mprev = m; mprev && mprev->m_next != md; mprev = mprev->m_next)
		;
	if (!mprev)
		panic("md is not in m in deflate_common");


	zs = mode ? &inflate_stream : &deflate_stream;
	if (zs->zalloc == NULL) {
		/*
		 * init is called in ipcomp_algorithm_lookup.
		 * if zs->zalloc is NULL, either init hasn't been called (unlikely)
		 * or init failed because of no memory.
		 */
		error = ENOBUFS;
		goto fail;
	}
	
	zs->next_in = 0;
	zs->avail_in = 0;
	zs->next_out = 0;
	zs->avail_out = 0;

	n0 = n = NULL;
	np = &n0;
	offset = 0;
	zerror = 0;
	p = md;
	while (p && p->m_len == 0) {
		p = p->m_next;
	}

	/* input stream and output stream are available */
	while (p && zs->avail_in == 0) {
		/* get input buffer */
		if (p && zs->avail_in == 0) {
			zs->next_in = mtod(p, u_int8_t *);
			zs->avail_in = p->m_len;
			p = p->m_next;
			while (p && p->m_len == 0) {
				p = p->m_next;
			}
		}

		/* get output buffer */
		if (zs->next_out == NULL || zs->avail_out == 0) {
			MOREBLOCK();
		}

		zerror = mode ? inflate(zs, Z_NO_FLUSH)
			      : deflate(zs, Z_NO_FLUSH);

		if (zerror == Z_STREAM_END)
			; /*once more.*/
		else if (zerror == Z_OK) {
			/* inflate: Z_OK can indicate the end of decode */
			if (mode && !p && zs->avail_out != 0)
				goto terminate;
			
			/* else once more.*/
		} else {
			if (zs->msg) {
				ipseclog((LOG_ERR, "ipcomp_%scompress: "
				    "%sflate(Z_NO_FLUSH): %s\n",
				    mode ? "de" : "", mode ? "in" : "de",
				    zs->msg));
			} else {
				ipseclog((LOG_ERR, "ipcomp_%scompress: "
				    "%sflate(Z_NO_FLUSH): unknown error (%d)\n",
				    mode ? "de" : "", mode ? "in" : "de",
				    zerror));
			}
			mode ? inflateReset(zs) : deflateReset(zs);
/*			mode ? inflateEnd(zs) : deflateEnd(zs);*/
			error = EINVAL;
			goto fail;
		}
	}

	if (zerror == Z_STREAM_END)
		goto terminate;

	/* termination */
	while (1) {
		/* get output buffer */
		if (zs->next_out == NULL || zs->avail_out == 0) {
			MOREBLOCK();
		}

		zerror = mode ? inflate(zs, Z_FINISH)
			      : deflate(zs, Z_FINISH);

		if (zerror == Z_STREAM_END)
			break;
		else if (zerror == Z_OK)
			; /*once more.*/
		else {
			if (zs->msg) {
				ipseclog((LOG_ERR, "ipcomp_%scompress: "
				    "%sflate(Z_FINISH): %s\n",
				    mode ? "de" : "", mode ? "in" : "de",
				    zs->msg));
			} else {
				ipseclog((LOG_ERR, "ipcomp_%scompress: "
				    "%sflate(Z_FINISH): unknown error (%d)\n",
				    mode ? "de" : "", mode ? "in" : "de",
				    zerror));
			}
			mode ? inflateReset(zs) : deflateReset(zs);
/*			mode ? inflateEnd(zs) : deflateEnd(zs); */
			error = EINVAL;
			goto fail;
		}
	}

terminate:
	/* keep the final reply buffer into our chain */
	if (n) {
		n->m_len = zs->total_out - offset;
		offset = zs->total_out;
		*np = n;
		np = &n->m_next;
		n = NULL;
	}

	/* switch the mbuf to the new one */
	mprev->m_next = n0;
	m_freem(md);
	*lenp = zs->total_out;

	/* reset the inflate/deflate state */
	zerror = mode ? inflateReset(zs) : deflateReset(zs);
	if (zerror != Z_OK) {
		/*
		 * A failure here is uncommon. If this does
		 * fail, the packet can still be used but
		 * the z_stream will be messed up so subsequent
		 * inflates/deflates will probably fail.
		 */
		if (zs->msg) {
			ipseclog((LOG_ERR, "ipcomp_%scompress: "
			    "%sflateEnd: %s\n",
			    mode ? "de" : "", mode ? "in" : "de",
			    zs->msg));
		} else {
			ipseclog((LOG_ERR, "ipcomp_%scompress: "
			    "%sflateEnd: unknown error (%d)\n",
			    mode ? "de" : "", mode ? "in" : "de",
			    zerror));
		}
	}

	return 0;

fail:
	if (m)
		m_freem(m);
	if (n)
		m_freem(n);
	if (n0)
		m_freem(n0);
	return error;
#undef MOREBLOCK
}

static int
deflate_compress(struct mbuf *m, struct mbuf *md, size_t *lenp)
{
	if (!m)
		panic("m == NULL in deflate_compress");
	if (!md)
		panic("md == NULL in deflate_compress");
	if (!lenp)
		panic("lenp == NULL in deflate_compress");

	return deflate_common(m, md, lenp, 0);
}

static int
deflate_decompress(struct mbuf *m, struct mbuf *md, size_t *lenp)
{
	if (!m)
		panic("m == NULL in deflate_decompress");
	if (!md)
		panic("md == NULL in deflate_decompress");
	if (!lenp)
		panic("lenp == NULL in deflate_decompress");

	return deflate_common(m, md, lenp, 1);
}
#endif /* IPCOMP_ZLIB */
Commit	Line	Data
39037602 A	1	/*
	2	* Copyright (c) 2016 Apple Inc. All rights reserved.
	3	*
	4	* @APPLE_OSREFERENCE_LICENSE_HEADER_START@
	5	*
	6	* This file contains Original Code and/or Modifications of Original Code
	7	* as defined in and that are subject to the Apple Public Source License
	8	* Version 2.0 (the 'License'). You may not use this file except in
	9	* compliance with the License. The rights granted to you under the License
	10	* may not be used to create, or enable the creation or redistribution of,
	11	* unlawful or unlicensed copies of an Apple operating system, or to
	12	* circumvent, violate, or enable the circumvention or violation of, any
	13	* terms of an Apple operating system software license agreement.
	14	*
	15	* Please obtain a copy of the License at
	16	* http://www.opensource.apple.com/apsl/ and read it before using this file.
	17	*
	18	* The Original Code and all software distributed under the License are
	19	* distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
	20	* EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
	21	* INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
	22	* FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
	23	* Please see the License for the specific language governing rights and
	24	* limitations under the License.
	25	*
	26	* @APPLE_OSREFERENCE_LICENSE_HEADER_END@
	27	*/
	28
9bccf70c A	29	/* $FreeBSD: src/sys/netinet6/ipcomp_core.c,v 1.1.2.2 2001/07/03 11:01:54 ume Exp $ */
9bccf70c A	30	/* $KAME: ipcomp_core.c,v 1.24 2000/10/23 04:24:22 itojun Exp $ */
1c79356b A	31
	32	/*
	33	* Copyright (C) 1999 WIDE Project.
	34	* All rights reserved.
	35	*
	36	* Redistribution and use in source and binary forms, with or without
	37	* modification, are permitted provided that the following conditions
	38	* are met:
	39	* 1. Redistributions of source code must retain the above copyright
	40	* notice, this list of conditions and the following disclaimer.
	41	* 2. Redistributions in binary form must reproduce the above copyright
	42	* notice, this list of conditions and the following disclaimer in the
	43	* documentation and/or other materials provided with the distribution.
	44	* 3. Neither the name of the project nor the names of its contributors
	45	* may be used to endorse or promote products derived from this software
	46	* without specific prior written permission.
	47	*
	48	* THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
	49	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	50	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	51	* ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
	52	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	53	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	54	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	55	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	56	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	57	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	58	* SUCH DAMAGE.
	59	*/
	60
	61	/*
	62	* RFC2393 IP payload compression protocol (IPComp).
	63	*/
	64
1c79356b A	65
	66	#include <sys/param.h>
	67	#include <sys/systm.h>
	68	#include <sys/malloc.h>
	69	#include <sys/mbuf.h>
	70	#include <sys/domain.h>
	71	#include <sys/protosw.h>
	72	#include <sys/socket.h>
	73	#include <sys/errno.h>
	74	#include <sys/time.h>
	75	#include <sys/kernel.h>
	76	#include <sys/syslog.h>
	77	#include <sys/queue.h>
	78
	79	#include <net/if.h>
	80	#include <net/route.h>
fe8ab488	81	#if IPCOMP_ZLIB
2d21ac55 A	82	#include <libkern/zlib.h>
2d21ac55 A	83	#endif
1c79356b A	84	#include <kern/cpu_number.h>
1c79356b A	85
1c79356b	86	#include <netinet6/ipcomp.h>
9bccf70c A	87	#if INET6
	88	#include <netinet6/ipcomp6.h>
	89	#endif
1c79356b	90	#include <netinet6/ipsec.h>
9bccf70c A	91	#if INET6
	92	#include <netinet6/ipsec6.h>
	93	#endif
1c79356b A	94
	95	#include <net/net_osdep.h>
	96
fe8ab488	97	#if IPCOMP_ZLIB
91447636 A	98	static void deflate_alloc(void , u_int, u_int);
	99	static void deflate_free(void , void );
	100	static int deflate_common(struct mbuf , struct mbuf , size_t *, int);
	101	static int deflate_compress(struct mbuf , struct mbuf , size_t *);
	102	static int deflate_decompress(struct mbuf , struct mbuf , size_t *);
1c79356b A	103
	104	/*
	105	* We need to use default window size (2^15 = 32Kbytes as of writing) for
	106	* inbound case. Otherwise we get interop problem.
	107	* Use negative value to avoid Adler32 checksum. This is an undocumented
	108	* feature in zlib (see ipsec wg mailing list archive in January 2000).
	109	*/
	110	static int deflate_policy = Z_DEFAULT_COMPRESSION;
	111	static int deflate_window_out = -12;
	112	static const int deflate_window_in = -1 * MAX_WBITS; /* don't change it */
	113	static int deflate_memlevel = MAX_MEM_LEVEL;
	114
9bccf70c A	115	static z_stream deflate_stream;
9bccf70c A	116	static z_stream inflate_stream;
fe8ab488	117	#endif /* IPCOMP_ZLIB */
9bccf70c	118
fe8ab488	119	#if IPCOMP_ZLIB
9bccf70c	120	static const struct ipcomp_algorithm ipcomp_algorithms[] = {
1c79356b	121	{ deflate_compress, deflate_decompress, 90 },
1c79356b	122	};
fe8ab488 A	123	#else
	124	static const struct ipcomp_algorithm ipcomp_algorithms[] __unused = {};
	125	#endif
1c79356b	126
9bccf70c	127	const struct ipcomp_algorithm *
2d21ac55	128	ipcomp_algorithm_lookup(
fe8ab488	129	#if IPCOMP_ZLIB
2d21ac55 A	130	int idx
	131	#else
	132	__unused int idx
	133	#endif
	134	)
9bccf70c	135	{
fe8ab488	136	#if IPCOMP_ZLIB
9bccf70c A	137	if (idx == SADB_X_CALG_DEFLATE) {
	138	/*
	139	* Avert your gaze, ugly hack follows!
	140	* We init here so our malloc can allocate using M_WAIT.
	141	* We don't want to allocate if ipcomp isn't used, and we
	142	* don't want to allocate on the input or output path.
	143	* Allocation fails if we use M_NOWAIT because init allocates
	144	* something like 256k (ouch).
	145	*/
	146	if (deflate_stream.zalloc == NULL) {
	147	deflate_stream.zalloc = deflate_alloc;
	148	deflate_stream.zfree = deflate_free;
	149	if (deflateInit2(&deflate_stream, deflate_policy, Z_DEFLATED,
	150	deflate_window_out, deflate_memlevel, Z_DEFAULT_STRATEGY)) {
	151	/* Allocation failed */
	152	bzero(&deflate_stream, sizeof(deflate_stream));
	153	#if IPSEC_DEBUG
	154	printf("ipcomp_algorithm_lookup: deflateInit2 failed.\n");
	155	#endif
	156	}
	157	}
	158
	159	if (inflate_stream.zalloc == NULL) {
	160	inflate_stream.zalloc = deflate_alloc;
	161	inflate_stream.zfree = deflate_free;
	162	if (inflateInit2(&inflate_stream, deflate_window_in)) {
	163	/* Allocation failed */
	164	bzero(&inflate_stream, sizeof(inflate_stream));
	165	#if IPSEC_DEBUG
	166	printf("ipcomp_algorithm_lookup: inflateInit2 failed.\n");
	167	#endif
	168	}
	169	}
	170
	171	return &ipcomp_algorithms[0];
	172	}
fe8ab488	173	#endif /* IPCOMP_ZLIB */
9bccf70c A	174	return NULL;
	175	}
	176
fe8ab488	177	#if IPCOMP_ZLIB
1c79356b	178	static void *
2d21ac55 A	179	deflate_alloc(
	180	__unused void *aux,
	181	u_int items,
	182	u_int siz)
1c79356b A	183	{
1c79356b A	184	void *ptr;
2d21ac55	185	ptr = _MALLOC(items * siz, M_TEMP, M_NOWAIT);
1c79356b A	186	return ptr;
	187	}
	188
	189	static void
2d21ac55 A	190	deflate_free(
	191	__unused void *aux,
	192	void *ptr)
1c79356b A	193	{
	194	FREE(ptr, M_TEMP);
	195	}
	196
39037602	197	/* @param mode 0: compress 1: decompress */
1c79356b	198	static int
39037602	199	deflate_common(struct mbuf m, struct mbuf md, size_t *lenp, int mode)
1c79356b A	200	{
	201	struct mbuf *mprev;
	202	struct mbuf *p;
9bccf70c A	203	struct mbuf n = NULL, n0 = NULL, **np;
9bccf70c A	204	z_stream *zs;
1c79356b A	205	int error = 0;
	206	int zerror;
	207	size_t offset;
9bccf70c A	208
	209	#define MOREBLOCK() \
	210	do { \
	211	/* keep the reply buffer into our chain */ \
	212	if (n) { \
	213	n->m_len = zs->total_out - offset; \
	214	offset = zs->total_out; \
	215	*np = n; \
	216	np = &n->m_next; \
	217	n = NULL; \
	218	} \
	219	\
	220	/* get a fresh reply buffer */ \
	221	MGET(n, M_DONTWAIT, MT_DATA); \
	222	if (n) { \
	223	MCLGET(n, M_DONTWAIT); \
	224	} \
	225	if (!n) { \
	226	error = ENOBUFS; \
	227	goto fail; \
	228	} \
	229	n->m_len = 0; \
	230	n->m_len = M_TRAILINGSPACE(n); \
	231	n->m_next = NULL; \
	232	/* \
	233	* if this is the first reply buffer, reserve \
	234	* region for ipcomp header. \
	235	*/ \
	236	if (*np == NULL) { \
	237	n->m_len -= sizeof(struct ipcomp); \
	238	n->m_data += sizeof(struct ipcomp); \
	239	} \
	240	\
	241	zs->next_out = mtod(n, u_int8_t *); \
	242	zs->avail_out = n->m_len; \
	243	} while (0)
1c79356b A	244
	245	for (mprev = m; mprev && mprev->m_next != md; mprev = mprev->m_next)
	246	;
	247	if (!mprev)
	248	panic("md is not in m in deflate_common");
	249
1c79356b	250
9bccf70c A	251	zs = mode ? &inflate_stream : &deflate_stream;
	252	if (zs->zalloc == NULL) {
	253	/*
	254	* init is called in ipcomp_algorithm_lookup.
	255	* if zs->zalloc is NULL, either init hasn't been called (unlikely)
	256	* or init failed because of no memory.
	257	*/
1c79356b A	258	error = ENOBUFS;
	259	goto fail;
	260	}
9bccf70c A	261
	262	zs->next_in = 0;
	263	zs->avail_in = 0;
	264	zs->next_out = 0;
	265	zs->avail_out = 0;
1c79356b A	266
	267	n0 = n = NULL;
	268	np = &n0;
	269	offset = 0;
1c79356b A	270	zerror = 0;
1c79356b A	271	p = md;
9bccf70c A	272	while (p && p->m_len == 0) {
	273	p = p->m_next;
	274	}
1c79356b	275
9bccf70c A	276	/* input stream and output stream are available */
9bccf70c A	277	while (p && zs->avail_in == 0) {
1c79356b	278	/* get input buffer */
9bccf70c A	279	if (p && zs->avail_in == 0) {
	280	zs->next_in = mtod(p, u_int8_t *);
	281	zs->avail_in = p->m_len;
1c79356b	282	p = p->m_next;
9bccf70c A	283	while (p && p->m_len == 0) {
9bccf70c A	284	p = p->m_next;
1c79356b A	285	}
	286	}
	287
	288	/* get output buffer */
9bccf70c A	289	if (zs->next_out == NULL \|\| zs->avail_out == 0) {
	290	MOREBLOCK();
	291	}
1c79356b	292
9bccf70c A	293	zerror = mode ? inflate(zs, Z_NO_FLUSH)
	294	: deflate(zs, Z_NO_FLUSH);
	295
	296	if (zerror == Z_STREAM_END)
	297	; /once more./
	298	else if (zerror == Z_OK) {
	299	/* inflate: Z_OK can indicate the end of decode */
	300	if (mode && !p && zs->avail_out != 0)
	301	goto terminate;
2d21ac55 A	302
2d21ac55 A	303	/* else once more.*/
9bccf70c A	304	} else {
	305	if (zs->msg) {
	306	ipseclog((LOG_ERR, "ipcomp_%scompress: "
	307	"%sflate(Z_NO_FLUSH): %s\n",
	308	mode ? "de" : "", mode ? "in" : "de",
	309	zs->msg));
	310	} else {
	311	ipseclog((LOG_ERR, "ipcomp_%scompress: "
	312	"%sflate(Z_NO_FLUSH): unknown error (%d)\n",
	313	mode ? "de" : "", mode ? "in" : "de",
	314	zerror));
1c79356b	315	}
9bccf70c A	316	mode ? inflateReset(zs) : deflateReset(zs);
	317	/* mode ? inflateEnd(zs) : deflateEnd(zs);*/
	318	error = EINVAL;
	319	goto fail;
	320	}
	321	}
1c79356b	322
9bccf70c A	323	if (zerror == Z_STREAM_END)
	324	goto terminate;
	325
	326	/* termination */
	327	while (1) {
	328	/* get output buffer */
	329	if (zs->next_out == NULL \|\| zs->avail_out == 0) {
	330	MOREBLOCK();
1c79356b A	331	}
1c79356b A	332
9bccf70c A	333	zerror = mode ? inflate(zs, Z_FINISH)
	334	: deflate(zs, Z_FINISH);
	335
	336	if (zerror == Z_STREAM_END)
1c79356b	337	break;
9bccf70c A	338	else if (zerror == Z_OK)
9bccf70c A	339	; /once more./
1c79356b	340	else {
9bccf70c A	341	if (zs->msg) {
	342	ipseclog((LOG_ERR, "ipcomp_%scompress: "
	343	"%sflate(Z_FINISH): %s\n",
	344	mode ? "de" : "", mode ? "in" : "de",
	345	zs->msg));
	346	} else {
	347	ipseclog((LOG_ERR, "ipcomp_%scompress: "
	348	"%sflate(Z_FINISH): unknown error (%d)\n",
	349	mode ? "de" : "", mode ? "in" : "de",
	350	zerror));
	351	}
	352	mode ? inflateReset(zs) : deflateReset(zs);
	353	/* mode ? inflateEnd(zs) : deflateEnd(zs); */
1c79356b A	354	error = EINVAL;
	355	goto fail;
	356	}
	357	}
9bccf70c A	358
9bccf70c A	359	terminate:
1c79356b A	360	/* keep the final reply buffer into our chain */
1c79356b A	361	if (n) {
9bccf70c A	362	n->m_len = zs->total_out - offset;
9bccf70c A	363	offset = zs->total_out;
1c79356b A	364	*np = n;
1c79356b A	365	np = &n->m_next;
9bccf70c	366	n = NULL;
1c79356b A	367	}
	368
	369	/* switch the mbuf to the new one */
	370	mprev->m_next = n0;
	371	m_freem(md);
9bccf70c A	372	*lenp = zs->total_out;
	373
	374	/* reset the inflate/deflate state */
	375	zerror = mode ? inflateReset(zs) : deflateReset(zs);
	376	if (zerror != Z_OK) {
	377	/*
	378	* A failure here is uncommon. If this does
	379	* fail, the packet can still be used but
	380	* the z_stream will be messed up so subsequent
	381	* inflates/deflates will probably fail.
	382	*/
	383	if (zs->msg) {
	384	ipseclog((LOG_ERR, "ipcomp_%scompress: "
	385	"%sflateEnd: %s\n",
	386	mode ? "de" : "", mode ? "in" : "de",
	387	zs->msg));
	388	} else {
	389	ipseclog((LOG_ERR, "ipcomp_%scompress: "
	390	"%sflateEnd: unknown error (%d)\n",
	391	mode ? "de" : "", mode ? "in" : "de",
	392	zerror));
	393	}
	394	}
1c79356b A	395
	396	return 0;
	397
	398	fail:
	399	if (m)
	400	m_freem(m);
9bccf70c A	401	if (n)
9bccf70c A	402	m_freem(n);
1c79356b A	403	if (n0)
	404	m_freem(n0);
	405	return error;
9bccf70c	406	#undef MOREBLOCK
1c79356b A	407	}
	408
	409	static int
39037602	410	deflate_compress(struct mbuf m, struct mbuf md, size_t *lenp)
1c79356b A	411	{
	412	if (!m)
	413	panic("m == NULL in deflate_compress");
	414	if (!md)
	415	panic("md == NULL in deflate_compress");
	416	if (!lenp)
	417	panic("lenp == NULL in deflate_compress");
	418
	419	return deflate_common(m, md, lenp, 0);
	420	}
	421
	422	static int
39037602	423	deflate_decompress(struct mbuf m, struct mbuf md, size_t *lenp)
1c79356b A	424	{
	425	if (!m)
	426	panic("m == NULL in deflate_decompress");
	427	if (!md)
	428	panic("md == NULL in deflate_decompress");
	429	if (!lenp)
	430	panic("lenp == NULL in deflate_decompress");
	431
	432	return deflate_common(m, md, lenp, 1);
	433	}
fe8ab488	434	#endif /* IPCOMP_ZLIB */