bsd/netkey/key_debug.c

   1 /*      $FreeBSD: src/sys/netkey/key_debug.c,v 1.10.2.5 2002/04/28 05:40:28 suz Exp $   */
   2 /*      $KAME: key_debug.c,v 1.26 2001/06/27 10:46:50 sakane Exp $      */
   3
   4 /*
   5  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
   6  * All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  * 1. Redistributions of source code must retain the above copyright
  12  *    notice, this list of conditions and the following disclaimer.
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  * 3. Neither the name of the project nor the names of its contributors
  17  *    may be used to endorse or promote products derived from this software
  18  *    without specific prior written permission.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
  21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
  24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  30  * SUCH DAMAGE.
  31  */
  32
  33 #include <sys/types.h>
  34 #include <sys/param.h>
  35 #ifdef KERNEL
  36 #include <sys/systm.h>
  37 #include <sys/mbuf.h>
  38 #include <sys/queue.h>
  39 #endif
  40 #include <sys/socket.h>
  41
  42 #include <net/route.h>
  43
  44 #include <netkey/key_var.h>
  45 #include <netkey/key_debug.h>
  46
  47 #include <netinet/in.h>
  48 #include <netinet6/ipsec.h>
  49
  50 #ifndef KERNEL
  51 #include <ctype.h>
  52 #include <stdio.h>
  53 #include <stdlib.h>
  54 #endif /* !KERNEL */
  55
  56 #if !defined(KERNEL) || (defined(KERNEL) && defined(IPSEC_DEBUG))
  57
  58 static void kdebug_sadb_prop(struct sadb_ext *);
  59 static void kdebug_sadb_identity(struct sadb_ext *);
  60 static void kdebug_sadb_supported(struct sadb_ext *);
  61 static void kdebug_sadb_lifetime(struct sadb_ext *);
  62 static void kdebug_sadb_sa(struct sadb_ext *);
  63 static void kdebug_sadb_address(struct sadb_ext *);
  64 static void kdebug_sadb_key(struct sadb_ext *);
  65 static void kdebug_sadb_x_sa2(struct sadb_ext *);
  66
  67 #ifdef KERNEL
  68 static void kdebug_secreplay(struct secreplay *);
  69 #endif
  70
  71 #ifndef KERNEL
  72 #define panic(param)    { printf(param); exit(-1); }
  73 #endif
  74
  75 /* NOTE: host byte order */
  76
  77 /* %%%: about struct sadb_msg */
  78 void
  79 kdebug_sadb(base)
  80         struct sadb_msg *base;
  81 {
  82         struct sadb_ext *ext;
  83         int tlen, extlen;
  84
  85         /* sanity check */
  86         if (base == NULL)
  87                 panic("kdebug_sadb: NULL pointer was passed.\n");
  88
  89         printf("sadb_msg{ version=%u type=%u errno=%u satype=%u\n",
  90             base->sadb_msg_version, base->sadb_msg_type,
  91             base->sadb_msg_errno, base->sadb_msg_satype);
  92         printf("  len=%u reserved=%u seq=%u pid=%u\n",
  93             base->sadb_msg_len, base->sadb_msg_reserved,
  94             base->sadb_msg_seq, base->sadb_msg_pid);
  95
  96         tlen = PFKEY_UNUNIT64(base->sadb_msg_len) - sizeof(struct sadb_msg);
  97         ext = (struct sadb_ext *)((caddr_t)base + sizeof(struct sadb_msg));
  98
  99         while (tlen > 0) {
 100                 printf("sadb_ext{ len=%u type=%u }\n",
 101                     ext->sadb_ext_len, ext->sadb_ext_type);
 102
 103                 if (ext->sadb_ext_len == 0) {
 104                         printf("kdebug_sadb: invalid ext_len=0 was passed.\n");
 105                         return;
 106                 }
 107                 if (ext->sadb_ext_len > tlen) {
 108                         printf("kdebug_sadb: ext_len exceeds end of buffer.\n");
 109                         return;
 110                 }
 111
 112                 switch (ext->sadb_ext_type) {
 113                 case SADB_EXT_SA:
 114                         kdebug_sadb_sa(ext);
 115                         break;
 116                 case SADB_EXT_LIFETIME_CURRENT:
 117                 case SADB_EXT_LIFETIME_HARD:
 118                 case SADB_EXT_LIFETIME_SOFT:
 119                         kdebug_sadb_lifetime(ext);
 120                         break;
 121                 case SADB_EXT_ADDRESS_SRC:
 122                 case SADB_EXT_ADDRESS_DST:
 123                 case SADB_EXT_ADDRESS_PROXY:
 124                         kdebug_sadb_address(ext);
 125                         break;
 126                 case SADB_EXT_KEY_AUTH:
 127                 case SADB_EXT_KEY_ENCRYPT:
 128                         kdebug_sadb_key(ext);
 129                         break;
 130                 case SADB_EXT_IDENTITY_SRC:
 131                 case SADB_EXT_IDENTITY_DST:
 132                         kdebug_sadb_identity(ext);
 133                         break;
 134                 case SADB_EXT_SENSITIVITY:
 135                         break;
 136                 case SADB_EXT_PROPOSAL:
 137                         kdebug_sadb_prop(ext);
 138                         break;
 139                 case SADB_EXT_SUPPORTED_AUTH:
 140                 case SADB_EXT_SUPPORTED_ENCRYPT:
 141                         kdebug_sadb_supported(ext);
 142                         break;
 143                 case SADB_EXT_SPIRANGE:
 144                 case SADB_X_EXT_KMPRIVATE:
 145                         break;
 146                 case SADB_X_EXT_POLICY:
 147                         kdebug_sadb_x_policy(ext);
 148                         break;
 149                 case SADB_X_EXT_SA2:
 150                         kdebug_sadb_x_sa2(ext);
 151                         break;
 152                 case SADB_EXT_SESSION_ID:
 153                         kdebug_sadb_session_id(ext);
 154                         break;
 155                 case SADB_EXT_SASTAT:
 156                         kdebug_sadb_sastat(ext);
 157                         break;
 158                 default:
 159                         printf("kdebug_sadb: invalid ext_type %u was passed.\n",
 160                             ext->sadb_ext_type);
 161                         return;
 162                 }
 163
 164                 extlen = PFKEY_UNUNIT64(ext->sadb_ext_len);
 165                 tlen -= extlen;
 166                 ext = (struct sadb_ext *)((caddr_t)ext + extlen);
 167         }
 168
 169         return;
 170 }
 171
 172 static void
 173 kdebug_sadb_prop(ext)
 174         struct sadb_ext *ext;
 175 {
 176         struct sadb_prop *prop = (struct sadb_prop *)ext;
 177         struct sadb_comb *comb;
 178         int len;
 179
 180         /* sanity check */
 181         if (ext == NULL)
 182                 panic("kdebug_sadb_prop: NULL pointer was passed.\n");
 183
 184         len = (PFKEY_UNUNIT64(prop->sadb_prop_len) - sizeof(*prop))
 185                 / sizeof(*comb);
 186         comb = (struct sadb_comb *)(prop + 1);
 187         printf("sadb_prop{ replay=%u\n", prop->sadb_prop_replay);
 188
 189         while (len--) {
 190                 printf("sadb_comb{ auth=%u encrypt=%u "
 191                         "flags=0x%04x reserved=0x%08x\n",
 192                         comb->sadb_comb_auth, comb->sadb_comb_encrypt,
 193                         comb->sadb_comb_flags, comb->sadb_comb_reserved);
 194
 195                 printf("  auth_minbits=%u auth_maxbits=%u "
 196                         "encrypt_minbits=%u encrypt_maxbits=%u\n",
 197                         comb->sadb_comb_auth_minbits,
 198                         comb->sadb_comb_auth_maxbits,
 199                         comb->sadb_comb_encrypt_minbits,
 200                         comb->sadb_comb_encrypt_maxbits);
 201
 202                 printf("  soft_alloc=%u hard_alloc=%u "
 203                         "soft_bytes=%lu hard_bytes=%lu\n",
 204                         comb->sadb_comb_soft_allocations,
 205                         comb->sadb_comb_hard_allocations,
 206                         (u_int32_t)comb->sadb_comb_soft_bytes,
 207                         (u_int32_t)comb->sadb_comb_hard_bytes);
 208
 209                 printf("  soft_alloc=%lu hard_alloc=%lu "
 210                         "soft_bytes=%lu hard_bytes=%lu }\n",
 211                         (u_int32_t)comb->sadb_comb_soft_addtime,
 212                         (u_int32_t)comb->sadb_comb_hard_addtime,
 213                         (u_int32_t)comb->sadb_comb_soft_usetime,
 214                         (u_int32_t)comb->sadb_comb_hard_usetime);
 215                 comb++;
 216         }
 217         printf("}\n");
 218
 219         return;
 220 }
 221
 222 static void
 223 kdebug_sadb_identity(ext)
 224         struct sadb_ext *ext;
 225 {
 226         struct sadb_ident *id = (struct sadb_ident *)ext;
 227         int len;
 228
 229         /* sanity check */
 230         if (ext == NULL)
 231                 panic("kdebug_sadb_identity: NULL pointer was passed.\n");
 232
 233         len = PFKEY_UNUNIT64(id->sadb_ident_len) - sizeof(*id);
 234         printf("sadb_ident_%s{",
 235             id->sadb_ident_exttype == SADB_EXT_IDENTITY_SRC ? "src" : "dst");
 236         switch (id->sadb_ident_type) {
 237         default:
 238                 printf(" type=%d id=%lu",
 239                         id->sadb_ident_type, (u_int32_t)id->sadb_ident_id);
 240                 if (len) {
 241 #ifdef KERNEL
 242                         ipsec_hexdump((caddr_t)(id + 1), len); /*XXX cast ?*/
 243 #else
 244                         char *p, *ep;
 245                         printf("\n  str=\"");
 246                         p = (char *)(id + 1);
 247                         ep = p + len;
 248                         for (/*nothing*/; *p && p < ep; p++) {
 249                                 if (isprint(*p))
 250                                         printf("%c", *p & 0xff);
 251                                 else
 252                                         printf("\\%03o", *p & 0xff);
 253                         }
 254 #endif
 255                         printf("\"");
 256                 }
 257                 break;
 258         }
 259
 260         printf(" }\n");
 261
 262         return;
 263 }
 264
 265 static void
 266 kdebug_sadb_supported(ext)
 267         struct sadb_ext *ext;
 268 {
 269         struct sadb_supported *sup = (struct sadb_supported *)ext;
 270         struct sadb_alg *alg;
 271         int len;
 272
 273         /* sanity check */
 274         if (ext == NULL)
 275                 panic("kdebug_sadb_supported: NULL pointer was passed.\n");
 276
 277         len = (PFKEY_UNUNIT64(sup->sadb_supported_len) - sizeof(*sup))
 278                 / sizeof(*alg);
 279         alg = (struct sadb_alg *)(sup + 1);
 280         printf("sadb_sup{\n");
 281         while (len--) {
 282                 printf("  { id=%d ivlen=%d min=%d max=%d }\n",
 283                         alg->sadb_alg_id, alg->sadb_alg_ivlen,
 284                         alg->sadb_alg_minbits, alg->sadb_alg_maxbits);
 285                 alg++;
 286         }
 287         printf("}\n");
 288
 289         return;
 290 }
 291
 292 static void
 293 kdebug_sadb_lifetime(ext)
 294         struct sadb_ext *ext;
 295 {
 296         struct sadb_lifetime *lft = (struct sadb_lifetime *)ext;
 297
 298         /* sanity check */
 299         if (ext == NULL)
 300                 printf("kdebug_sadb_lifetime: NULL pointer was passed.\n");
 301
 302         printf("sadb_lifetime{ alloc=%u, bytes=%u\n",
 303                 lft->sadb_lifetime_allocations,
 304                 (u_int32_t)lft->sadb_lifetime_bytes);
 305         printf("  addtime=%u, usetime=%u }\n",
 306                 (u_int32_t)lft->sadb_lifetime_addtime,
 307                 (u_int32_t)lft->sadb_lifetime_usetime);
 308
 309         return;
 310 }
 311
 312 static void
 313 kdebug_sadb_sa(ext)
 314         struct sadb_ext *ext;
 315 {
 316         struct sadb_sa *sa = (struct sadb_sa *)ext;
 317
 318         /* sanity check */
 319         if (ext == NULL)
 320                 panic("kdebug_sadb_sa: NULL pointer was passed.\n");
 321
 322         printf("sadb_sa{ spi=%u replay=%u state=%u\n",
 323             (u_int32_t)ntohl(sa->sadb_sa_spi), sa->sadb_sa_replay,
 324             sa->sadb_sa_state);
 325         printf("  auth=%u encrypt=%u flags=0x%08x }\n",
 326             sa->sadb_sa_auth, sa->sadb_sa_encrypt, sa->sadb_sa_flags);
 327
 328         return;
 329 }
 330
 331 static void
 332 kdebug_sadb_address(ext)
 333         struct sadb_ext *ext;
 334 {
 335         struct sadb_address *addr = (struct sadb_address *)ext;
 336
 337         /* sanity check */
 338         if (ext == NULL)
 339                 panic("kdebug_sadb_address: NULL pointer was passed.\n");
 340
 341         printf("sadb_address{ proto=%u prefixlen=%u reserved=0x%02x%02x }\n",
 342             addr->sadb_address_proto, addr->sadb_address_prefixlen,
 343             ((u_char *)&addr->sadb_address_reserved)[0],
 344             ((u_char *)&addr->sadb_address_reserved)[1]);
 345
 346         kdebug_sockaddr((struct sockaddr *)((caddr_t)ext + sizeof(*addr)));
 347
 348         return;
 349 }
 350
 351 static void
 352 kdebug_sadb_key(ext)
 353         struct sadb_ext *ext;
 354 {
 355         struct sadb_key *key = (struct sadb_key *)ext;
 356
 357         /* sanity check */
 358         if (ext == NULL)
 359                 panic("kdebug_sadb_key: NULL pointer was passed.\n");
 360
 361         printf("sadb_key{ bits=%u reserved=%u\n",
 362             key->sadb_key_bits, key->sadb_key_reserved);
 363         printf("  key=");
 364
 365         /* sanity check 2 */
 366         if ((key->sadb_key_bits >> 3) >
 367                 (PFKEY_UNUNIT64(key->sadb_key_len) - sizeof(struct sadb_key))) {
 368                 printf("kdebug_sadb_key: key length mismatch, bit:%d len:%ld.\n",
 369                         key->sadb_key_bits >> 3,
 370                         (long)PFKEY_UNUNIT64(key->sadb_key_len) - sizeof(struct sadb_key));
 371         }
 372
 373         ipsec_hexdump((caddr_t)key + sizeof(struct sadb_key),
 374                       key->sadb_key_bits >> 3);
 375         printf(" }\n");
 376         return;
 377 }
 378
 379 static void
 380 kdebug_sadb_x_sa2(ext)
 381         struct sadb_ext *ext;
 382 {
 383         struct sadb_x_sa2 *sa2 = (struct sadb_x_sa2 *)ext;
 384
 385         /* sanity check */
 386         if (ext == NULL)
 387                 panic("kdebug_sadb_x_sa2: NULL pointer was passed.\n");
 388
 389         printf("sadb_x_sa2{ mode=%u reqid=%u\n",
 390             sa2->sadb_x_sa2_mode, sa2->sadb_x_sa2_reqid);
 391         printf("  reserved1=%u reserved2=%u sequence=%u }\n",
 392             sa2->sadb_x_sa2_reserved1, sa2->sadb_x_sa2_reserved2,
 393             sa2->sadb_x_sa2_sequence);
 394
 395         return;
 396 }
 397
 398 static void
 399 kdebug_sadb_session_id(ext)
 400         struct sadb_ext *ext;
 401 {
 402        struct sadb_session_id *p = (__typeof__(p))ext;
 403
 404         /* sanity check */
 405         if (ext == NULL)
 406                 panic("kdebug_sadb_session_id: NULL pointer was passed.\n");
 407
 408         printf("sadb_session_id{ id0=%llx, id1=%llx}\n",
 409                 p->sadb_session_id_v[0],
 410                 p->sadb_session_id_v[1]);
 411
 412         return;
 413 }
 414
 415 static void
 416 kdebug_sadb_sastat(ext)
 417         struct sadb_ext *ext;
 418 {
 419        struct sadb_sastat *p = (__typeof__(p))ext;
 420         struct sastat      *stats;
 421         int    i;
 422
 423         /* sanity check */
 424         if (ext == NULL)
 425                 panic("kdebug_sadb_sastat: NULL pointer was passed.\n");
 426
 427         printf("sadb_sastat{ dir=%u num=%u\n",
 428                 p->sadb_sastat_dir, p->sadb_sastat_list_len);
 429         stats = (__typeof__(stats))(p + 1);
 430         for (i = 0; i < p->sadb_sastat_list_len; i++) {
 431                printf("  spi=%x,\n",
 432                       stats[i].spi);
 433         }
 434         printf("}\n");
 435
 436         return;
 437 }
 438
 439 void
 440 kdebug_sadb_x_policy(ext)
 441         struct sadb_ext *ext;
 442 {
 443         struct sadb_x_policy *xpl = (struct sadb_x_policy *)ext;
 444         struct sockaddr *addr;
 445
 446         /* sanity check */
 447         if (ext == NULL)
 448                 panic("kdebug_sadb_x_policy: NULL pointer was passed.\n");
 449
 450         printf("sadb_x_policy{ type=%u dir=%u id=%x }\n",
 451                 xpl->sadb_x_policy_type, xpl->sadb_x_policy_dir,
 452                 xpl->sadb_x_policy_id);
 453
 454         if (xpl->sadb_x_policy_type == IPSEC_POLICY_IPSEC) {
 455                 int tlen;
 456                 struct sadb_x_ipsecrequest *xisr;
 457
 458                 tlen = PFKEY_UNUNIT64(xpl->sadb_x_policy_len) - sizeof(*xpl);
 459                 xisr = (struct sadb_x_ipsecrequest *)(xpl + 1);
 460
 461                 while (tlen > 0) {
 462                         printf(" { len=%u proto=%u mode=%u level=%u reqid=%u\n",
 463                                 xisr->sadb_x_ipsecrequest_len,
 464                                 xisr->sadb_x_ipsecrequest_proto,
 465                                 xisr->sadb_x_ipsecrequest_mode,
 466                                 xisr->sadb_x_ipsecrequest_level,
 467                                 xisr->sadb_x_ipsecrequest_reqid);
 468
 469                         if (xisr->sadb_x_ipsecrequest_len > sizeof(*xisr)) {
 470                                 addr = (struct sockaddr *)(xisr + 1);
 471                                 kdebug_sockaddr(addr);
 472                                 addr = (struct sockaddr *)((caddr_t)addr
 473                                                         + addr->sa_len);
 474                                 kdebug_sockaddr(addr);
 475                         }
 476
 477                         printf(" }\n");
 478
 479                         /* prevent infinite loop */
 480                         if (xisr->sadb_x_ipsecrequest_len <= 0) {
 481                                 printf("kdebug_sadb_x_policy: wrong policy struct.\n");
 482                                 return;
 483                         }
 484                         /* prevent overflow */
 485                         if (xisr->sadb_x_ipsecrequest_len > tlen) {
 486                                 printf("invalid ipsec policy length\n");
 487                                 return;
 488                         }
 489
 490                         tlen -= xisr->sadb_x_ipsecrequest_len;
 491
 492                         xisr = (struct sadb_x_ipsecrequest *)((caddr_t)xisr
 493                                         + xisr->sadb_x_ipsecrequest_len);
 494                 }
 495
 496                 if (tlen != 0)
 497                         panic("kdebug_sadb_x_policy: wrong policy struct.\n");
 498         }
 499
 500         return;
 501 }
 502
 503 #ifdef KERNEL
 504 /* %%%: about SPD and SAD */
 505 void
 506 kdebug_secpolicy(sp)
 507         struct secpolicy *sp;
 508 {
 509         /* sanity check */
 510         if (sp == NULL)
 511                 panic("kdebug_secpolicy: NULL pointer was passed.\n");
 512
 513         printf("secpolicy{ refcnt=%u state=%u policy=%u\n",
 514                 sp->refcnt, sp->state, sp->policy);
 515
 516         kdebug_secpolicyindex(&sp->spidx);
 517
 518         switch (sp->policy) {
 519         case IPSEC_POLICY_DISCARD:
 520         case IPSEC_POLICY_GENERATE:
 521                 printf("  type=discard }\n");
 522                 break;
 523         case IPSEC_POLICY_NONE:
 524                 printf("  type=none }\n");
 525                 break;
 526         case IPSEC_POLICY_IPSEC:
 527             {
 528                 struct ipsecrequest *isr;
 529                 for (isr = sp->req; isr != NULL; isr = isr->next) {
 530
 531                         printf("  level=%u\n", isr->level);
 532                         kdebug_secasindex(&isr->saidx);
 533
 534                 }
 535                 printf("  }\n");
 536             }
 537                 break;
 538         case IPSEC_POLICY_BYPASS:
 539                 printf("  type=bypass }\n");
 540                 break;
 541         case IPSEC_POLICY_ENTRUST:
 542                 printf("  type=entrust }\n");
 543                 break;
 544         default:
 545                 printf("kdebug_secpolicy: Invalid policy found. %d\n",
 546                         sp->policy);
 547                 break;
 548         }
 549
 550         return;
 551 }
 552
 553 void
 554 kdebug_secpolicyindex(spidx)
 555         struct secpolicyindex *spidx;
 556 {
 557         /* sanity check */
 558         if (spidx == NULL)
 559                 panic("kdebug_secpolicyindex: NULL pointer was passed.\n");
 560
 561         printf("secpolicyindex{ dir=%u prefs=%u prefd=%u ul_proto=%u internal_if=%s\n",
 562                 spidx->dir, spidx->prefs, spidx->prefd, spidx->ul_proto,
 563            (spidx->internal_if) ? spidx->internal_if->if_xname : "N/A");
 564
 565         ipsec_hexdump((caddr_t)&spidx->src,
 566                 ((struct sockaddr *)&spidx->src)->sa_len);
 567         printf("\n");
 568         ipsec_hexdump((caddr_t)&spidx->dst,
 569                 ((struct sockaddr *)&spidx->dst)->sa_len);
 570         printf("}\n");
 571
 572         return;
 573 }
 574
 575 void
 576 kdebug_secasindex(saidx)
 577         struct secasindex *saidx;
 578 {
 579         /* sanity check */
 580         if (saidx == NULL)
 581                 panic("kdebug_secpolicyindex: NULL pointer was passed.\n");
 582
 583         printf("secasindex{ mode=%u proto=%u\n",
 584                 saidx->mode, saidx->proto);
 585
 586         ipsec_hexdump((caddr_t)&saidx->src,
 587                 ((struct sockaddr *)&saidx->src)->sa_len);
 588         printf("\n");
 589         ipsec_hexdump((caddr_t)&saidx->dst,
 590                 ((struct sockaddr *)&saidx->dst)->sa_len);
 591         printf("\n");
 592
 593         return;
 594 }
 595
 596 void
 597 kdebug_secasv(sav)
 598         struct secasvar *sav;
 599 {
 600         /* sanity check */
 601         if (sav == NULL)
 602                 panic("kdebug_secasv: NULL pointer was passed.\n");
 603
 604         printf("secas{");
 605         kdebug_secasindex(&sav->sah->saidx);
 606
 607         printf("  refcnt=%u state=%u auth=%u enc=%u\n",
 608             sav->refcnt, sav->state, sav->alg_auth, sav->alg_enc);
 609         printf("  spi=%u flags=%u\n",
 610             (u_int32_t)ntohl(sav->spi), sav->flags);
 611
 612         if (sav->key_auth != NULL)
 613                 kdebug_sadb_key((struct sadb_ext *)sav->key_auth);
 614         if (sav->key_enc != NULL)
 615                 kdebug_sadb_key((struct sadb_ext *)sav->key_enc);
 616         if (sav->iv != NULL) {
 617                 printf("  iv=");
 618                 ipsec_hexdump(sav->iv, sav->ivlen ? sav->ivlen : 8);
 619                 printf("\n");
 620         }
 621
 622         if (sav->replay != NULL)
 623                 kdebug_secreplay(sav->replay);
 624         if (sav->lft_c != NULL)
 625                 kdebug_sadb_lifetime((struct sadb_ext *)sav->lft_c);
 626         if (sav->lft_h != NULL)
 627                 kdebug_sadb_lifetime((struct sadb_ext *)sav->lft_h);
 628         if (sav->lft_s != NULL)
 629                 kdebug_sadb_lifetime((struct sadb_ext *)sav->lft_s);
 630
 631 #if notyet
 632         /* XXX: misc[123] ? */
 633 #endif
 634
 635         return;
 636 }
 637
 638 static void
 639 kdebug_secreplay(rpl)
 640         struct secreplay *rpl;
 641 {
 642         int len, l;
 643
 644         /* sanity check */
 645         if (rpl == NULL)
 646                 panic("kdebug_secreplay: NULL pointer was passed.\n");
 647
 648         printf(" secreplay{ count=%u wsize=%u seq=%u lastseq=%u",
 649             rpl->count, rpl->wsize, rpl->seq, rpl->lastseq);
 650
 651         if (rpl->bitmap == NULL) {
 652                 printf(" }\n");
 653                 return;
 654         }
 655
 656         printf("\n   bitmap { ");
 657
 658         for (len = 0; len < rpl->wsize; len++) {
 659                 for (l = 7; l >= 0; l--)
 660                         printf("%u", (((rpl->bitmap)[len] >> l) & 1) ? 1 : 0);
 661         }
 662         printf(" }\n");
 663
 664         return;
 665 }
 666
 667 void
 668 kdebug_mbufhdr(m)
 669         struct mbuf *m;
 670 {
 671         /* sanity check */
 672         if (m == NULL)
 673                 return;
 674
 675         printf("mbuf(0x%llx){ m_next:0x%llx m_nextpkt:0x%llx m_data:0x%llx "
 676             "m_len:%d m_type:0x%02x m_flags:0x%02x }\n",
 677             (uint64_t)VM_KERNEL_ADDRPERM(m),
 678             (uint64_t)VM_KERNEL_ADDRPERM(m->m_next),
 679             (uint64_t)VM_KERNEL_ADDRPERM(m->m_nextpkt),
 680             (uint64_t)VM_KERNEL_ADDRPERM(m->m_data),
 681             m->m_len, m->m_type, m->m_flags);
 682
 683         if (m->m_flags & M_PKTHDR) {
 684                 printf("  m_pkthdr{ len:%d rcvif:0x%llx }\n",
 685                     m->m_pkthdr.len,
 686                     (uint64_t)VM_KERNEL_ADDRPERM(m->m_pkthdr.rcvif));
 687         }
 688
 689         if (m->m_flags & M_EXT) {
 690                 printf("  m_ext{ ext_buf:0x%llx ext_free:0x%llx "
 691                        "ext_size:%u ext_ref:0x%llx }\n",
 692                         (uint64_t)VM_KERNEL_ADDRPERM(m->m_ext.ext_buf),
 693                         (uint64_t)VM_KERNEL_ADDRPERM(m->m_ext.ext_free),
 694                         m->m_ext.ext_size,
 695                         (uint64_t)VM_KERNEL_ADDRPERM(m->m_ext.ext_refs));
 696         }
 697
 698         return;
 699 }
 700
 701 void
 702 kdebug_mbuf(m0)
 703         struct mbuf *m0;
 704 {
 705         struct mbuf *m = m0;
 706         int i, j;
 707
 708         for (j = 0; m; m = m->m_next) {
 709                 kdebug_mbufhdr(m);
 710                 printf("  m_data:\n");
 711                 for (i = 0; i < m->m_len; i++) {
 712                         if (i && i % 32 == 0)
 713                                 printf("\n");
 714                         if (i % 4 == 0)
 715                                 printf(" ");
 716                         printf("%02x", mtod(m, u_char *)[i]);
 717                         j++;
 718                 }
 719                 printf("\n");
 720         }
 721
 722         return;
 723 }
 724 #endif /* KERNEL */
 725
 726 void
 727 kdebug_sockaddr(addr)
 728         struct sockaddr *addr;
 729 {
 730         struct sockaddr_in *sin4;
 731 #ifdef INET6
 732         struct sockaddr_in6 *sin6;
 733 #endif
 734
 735         /* sanity check */
 736         if (addr == NULL)
 737                 panic("kdebug_sockaddr: NULL pointer was passed.\n");
 738
 739         /* NOTE: We deal with port number as host byte order. */
 740         printf("sockaddr{ len=%u family=%u", addr->sa_len, addr->sa_family);
 741
 742         switch (addr->sa_family) {
 743         case AF_INET:
 744                 sin4 = (struct sockaddr_in *)addr;
 745                 printf(" port=%u\n", ntohs(sin4->sin_port));
 746                 ipsec_hexdump((caddr_t)&sin4->sin_addr, sizeof(sin4->sin_addr));
 747                 break;
 748 #ifdef INET6
 749         case AF_INET6:
 750                 sin6 = (struct sockaddr_in6 *)addr;
 751                 printf(" port=%u\n", ntohs(sin6->sin6_port));
 752                 printf("  flowinfo=0x%08x, scope_id=0x%08x\n",
 753                     sin6->sin6_flowinfo, sin6->sin6_scope_id);
 754                 ipsec_hexdump((caddr_t)&sin6->sin6_addr,
 755                     sizeof(sin6->sin6_addr));
 756                 break;
 757 #endif
 758         }
 759
 760         printf("  }\n");
 761
 762         return;
 763 }
 764
 765 void
 766 ipsec_bindump(buf, len)
 767         caddr_t buf;
 768         int len;
 769 {
 770         int i;
 771
 772         for (i = 0; i < len; i++)
 773                 printf("%c", (unsigned char)buf[i]);
 774
 775         return;
 776 }
 777
 778
 779 void
 780 ipsec_hexdump(buf, len)
 781         caddr_t buf;
 782         int len;
 783 {
 784         int i;
 785
 786         for (i = 0; i < len; i++) {
 787                 if (i != 0 && i % 32 == 0) printf("\n");
 788                 if (i % 4 == 0) printf(" ");
 789                 printf("%02x", (unsigned char)buf[i]);
 790         }
 791 #if 0
 792         if (i % 32 != 0) printf("\n");
 793 #endif
 794
 795         return;
 796 }
 797
 798 #endif /* !defined(KERNEL) || (defined(KERNEL) && defined(IPSEC_DEBUG)) */