diff -r 000000000000 -r af10295192d8 networksecurity/ipsec/ipsec6/src/ipsec.cpp
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/networksecurity/ipsec/ipsec6/src/ipsec.cpp	Tue Jan 26 15:23:49 2010 +0200
@@ -0,0 +1,322 @@
+// Copyright (c) 2005-2009 Nokia Corporation and/or its subsidiary(-ies).
+// All rights reserved.
+// This component and the accompanying materials are made available
+// under the terms of "Eclipse Public License v1.0"
+// which accompanies this distribution, and is available
+// at the URL "http://www.eclipse.org/legal/epl-v10.html".
+//
+// Initial Contributors:
+// Nokia Corporation - initial contribution.
+//
+// Contributors:
+//
+// Description:
+// ipsec.cpp - IPv6/IPv4 security policy protocol family
+// The CProtololFamilybase implementation.
+//
+
+
+
+/**
+ @file ipsec.cpp
+*/
+#include <nifmbuf.h>
+#include "ipsec.h"
+
+class CProtocolFamilyIpsec : public CProtocolFamilyBase
+	{
+public:
+	CProtocolFamilyIpsec();
+	~CProtocolFamilyIpsec();
+public:	
+	TInt Install();
+	TInt Remove();
+	CProtocolBase *NewProtocolL(TUint aSockType, TUint aProtocol);
+	TUint ProtocolList(TServerProtocolDesc *& aProtocolList);
+private:
+	};
+
+#if __WINS__ && _DEBUG
+int IPSEC_OBJECT_COUNT = 0;
+#endif
+
+void Panic(TIpsecPanic aPanic)
+	/**
+	* Panic the system.
+	*
+	* Only called in serious environmental (Socket Server) misbehaviour.
+	*
+	* @param aPanic The panic code.
+	*/
+	{
+	_LIT(KIpsec, "IPSEC");
+	
+	User::Panic(KIpsec, aPanic);
+	}
+
+// Force export of non-mangled name
+extern "C" { IMPORT_C CProtocolFamilyBase *Install(void); }
+EXPORT_C CProtocolFamilyBase *Install()
+	{
+#if __WINS__ && _DEBUG
+	ASSERT(IPSEC_OBJECT_COUNT == 0);
+#endif
+	return new CProtocolFamilyIpsec;
+	}
+
+CProtocolFamilyIpsec::CProtocolFamilyIpsec()
+	{
+	}
+
+
+CProtocolFamilyIpsec::~CProtocolFamilyIpsec()
+	{
+#if __WINS__ && _DEBUG
+	// The object count can be validly 1 here, because if the desctructor
+	// of the last object can trigger the protocol shutdown, the object count
+	// for that object is not yet decremented! (We get here from the destructor
+	// of that object!)
+	ASSERT(IPSEC_OBJECT_COUNT == 0 || IPSEC_OBJECT_COUNT == 1);
+#endif
+	}
+
+TInt CProtocolFamilyIpsec::Install()
+	{
+	// Nothing to initialize at this point.
+	return KErrNone;
+	}
+
+
+TInt CProtocolFamilyIpsec::Remove()
+	{
+	return KErrNone;
+	}
+
+
+TUint CProtocolFamilyIpsec::ProtocolList(TServerProtocolDesc *& aProtocolList)
+	/**
+	* Return the descriptions of impelemented protocols: SECPOL and PFKEY.
+	*/
+	{
+	// This function should be a leaving fn
+
+	TServerProtocolDesc *p = new (ELeave) TServerProtocolDesc[2]; // Esock catches this leave
+
+	// Support SECPOL and PFKEY protocols
+
+	IPSEC::IdentifySecpol(p[0]);
+	IPSEC::IdentifyPfkey(p[1]);
+	aProtocolList = p;
+	return 2;
+	}
+
+
+CProtocolBase* CProtocolFamilyIpsec::NewProtocolL(TUint aSockType,TUint aProtocol)
+	/**
+	* Return new protocol instance: SECPOL or PFKEY.
+	*/
+	{
+	if (aSockType == KSockRaw)
+		{
+		if (aProtocol == KProtocolSecpol)
+			return IPSEC::NewSecpolL();
+		else if (aProtocol == KProtocolKey)
+			return IPSEC::NewPfkeyL();
+		}
+	User::Leave(KErrNotSupported);
+	// NOTREACHED
+	return NULL;
+	}
+
+
+//
+// CProviderIpsecBase functions
+//
+CProviderIpsecBase::CProviderIpsecBase()
+	{
+	}
+
+CProviderIpsecBase::~CProviderIpsecBase()
+	{
+	iRecvQ.Free();			// Release all pending buffers.
+	iSAPlink.Deque();		// Dangerous, if not in the list!!!
+							// (make sure NewSAPL() adds to the list!)
+	}
+
+TInt CProviderIpsecBase::SecurityCheck(MProvdSecurityChecker *aChecker)
+	/**
+	* Capability check for the IPsec sockets.
+	*
+	* Both SECPOL and PFKEY sockets require the NetworkControl capability.
+	*
+	* @param aChecker The policy checker.
+	* @returns The result of the policy check.
+	*/
+	{
+	_LIT_SECURITY_POLICY_C1(KPolicyNetworkControl, ECapabilityNetworkControl);
+	return aChecker->CheckPolicy(KPolicyNetworkControl, "IPsec SAP");
+	}
+
+void CProviderIpsecBase::GetData(TDes8 &aDesc, TUint aOptions, TSockAddr* anAddr)
+	/**
+	* Return data to the application.
+	*
+	* This is shared between PFKEY and SECPOL.
+	*
+	* @param aDesc	The buffer to receive the packet
+	* @param aOptions Flags.
+	* @param anAddr	The source address of the packet
+	*/
+	{
+	RMBufPacket packet;
+
+	if (!iRecvQ.Remove(packet))
+		Panic(EIpsecPanic_NoData);
+
+	const RMBufPktInfo *const info = packet.Unpack();
+	packet.CopyOut(aDesc);
+	if (anAddr!=NULL)
+		{
+		*anAddr = info->iSrcAddr;
+		}
+
+	if (aOptions & KSockReadPeek)
+		{
+		packet.Pack();
+		iRecvQ.Prepend(packet);
+		iSocket->NewData(1);
+		}
+	else
+		{
+		iQueueLimit += info->iLength;
+		packet.Free();
+		}
+	}
+	
+void CProviderIpsecBase::Deliver(RMBufChain& aPacket)
+	/**
+	* Queue packets for SAP.
+	*
+	* @param aPacket	The packet
+	*/
+	{
+	if(iListening)
+		{	
+		iQueueLimit -= RMBufPacketBase::PeekInfoInChain(aPacket)->iLength;
+		iRecvQ.Append(aPacket);
+		iSocket->NewData(1);
+		}
+	else
+		aPacket.Free();
+	}
+
+void CProviderIpsecBase::Shutdown(TCloseType aOption)
+	{
+	switch(aOption)
+		{
+		case EStopInput:
+			iListening = 0;
+			iRecvQ.Free();
+			// *FALL THROUGH* to send the Error notify.
+		case EStopOutput:
+			// IPSEC SAPs do not currently have asynchronous output, all
+			// messages are processed as they arrive.
+			iSocket->Error(KErrNone,MSocketNotify::EErrorClose); // Complete KErrNone
+			break;
+
+		default:
+			// After this, the socket will be destroyed.
+			iListening = 0;
+			if (aOption != EImmediate)
+				{
+				iSocket->CanClose();
+				// *NOTE* No references to any member of this! CanClose
+				// may delete this!
+				}
+		}
+	}
+
+
+// Default implementations for functions, which currently don't have any
+// anything special to implement.
+
+void CProviderIpsecBase::ActiveOpen()
+	{
+	// PFKEY & POLICY are data gram sockets. The Socket Server
+	// should never call this function.
+	iSocket->Error(KErrNotSupported);
+	}
+
+void CProviderIpsecBase::ActiveOpen(const TDesC8&)
+	{
+	// PFKEY & POLICY are data gram sockets. The Socket Server
+	// should never call this function.
+	ActiveOpen();
+	}
+
+TInt CProviderIpsecBase::PassiveOpen(TUint)
+	{
+	// PFKEY & POLICY are data gram sockets. The Socket Server
+	// should never call this function.
+	return KErrNotSupported;
+	}
+
+TInt CProviderIpsecBase::PassiveOpen(TUint,const TDesC8&)
+	{
+	// PFKEY & POLICY are data gram sockets. The Socket Server
+	// should never call this function.
+	return KErrNotSupported;
+	}
+
+void CProviderIpsecBase::Shutdown(TCloseType aOption, const TDesC8& /*aDisconnectionData*/)
+	{
+	Shutdown(aOption);
+	}
+
+void CProviderIpsecBase::AutoBind()
+	{
+	// PFKEY & POLICY sockets do not use addresses or ports.
+	}
+
+void CProviderIpsecBase::LocalName(TSockAddr &) const
+	{
+	// PFKEY & POLICY sockets do not use addresses or ports.
+	}
+
+TInt CProviderIpsecBase::SetLocalName(TSockAddr&)
+	{
+	// PFKEY & POLICY sockets do not use addresses or ports.
+	return KErrNone;
+	}
+
+void CProviderIpsecBase::RemName(TSockAddr&) const
+	{
+	// PFKEY & POLICY sockets do not use addresses or ports.
+	}
+
+TInt CProviderIpsecBase::SetRemName(TSockAddr&)
+	{
+	// PFKEY & POLICY sockets do not use addresses or ports.
+	return KErrNone;
+	}
+
+TInt CProviderIpsecBase::GetOption(TUint,TUint,TDes8&) const
+	{
+	return KErrNotSupported;
+	}
+
+void CProviderIpsecBase::Ioctl(TUint,TUint,TDes8*)
+	{
+	// PFKEY & POLICY sockets do not implement any Iocctl
+	iSocket->Error(KErrNotSupported);
+	}
+
+void CProviderIpsecBase::CancelIoctl(TUint, TUint)
+	{
+	// PFKEY & POLICY sockets do not implement any Iocctl
+	}
+
+TInt CProviderIpsecBase::SetOption(TUint, TUint,const TDesC8 &)
+	{
+	return KErrNotSupported;
+	}