1 1.2 rmind /* $NetBSD: ip4_frag_1.c,v 1.2 2010/10/03 19:41:25 rmind Exp $ */ 2 1.1 rmind 3 1.1 rmind /*- 4 1.1 rmind * Copyright (c) 2010 The NetBSD Foundation, Inc. 5 1.1 rmind * All rights reserved. 6 1.1 rmind * 7 1.1 rmind * This code is derived from software developed for The NetBSD Foundation 8 1.1 rmind * by Mindaugas Rasiukevicius <rmind at NetBSD org>. 9 1.1 rmind * 10 1.1 rmind * Redistribution and use in source and binary forms, with or without 11 1.1 rmind * modification, are permitted provided that the following conditions 12 1.1 rmind * are met: 13 1.1 rmind * 1. Redistributions of source code must retain the above copyright 14 1.1 rmind * notice, this list of conditions and the following disclaimer. 15 1.1 rmind * 2. Redistributions in binary form must reproduce the above copyright 16 1.1 rmind * notice, this list of conditions and the following disclaimer in the 17 1.1 rmind * documentation and/or other materials provided with the distribution. 18 1.1 rmind * 19 1.1 rmind * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 20 1.1 rmind * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 21 1.1 rmind * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 22 1.1 rmind * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 23 1.1 rmind * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 24 1.1 rmind * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 25 1.1 rmind * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 26 1.1 rmind * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 27 1.1 rmind * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 28 1.1 rmind * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 29 1.1 rmind * POSSIBILITY OF SUCH DAMAGE. 30 1.1 rmind */ 31 1.1 rmind 32 1.1 rmind /* 33 1.1 rmind * Test various cases of IPv4 reassembly. 34 1.1 rmind */ 35 1.1 rmind 36 1.1 rmind #include <sys/cdefs.h> 37 1.1 rmind 38 1.1 rmind #include <stdio.h> 39 1.1 rmind #include <stdlib.h> 40 1.1 rmind #include <string.h> 41 1.1 rmind #include <stddef.h> 42 1.1 rmind #include <unistd.h> 43 1.1 rmind #include <netdb.h> 44 1.1 rmind #include <assert.h> 45 1.1 rmind #include <err.h> 46 1.1 rmind 47 1.1 rmind #include <sys/socket.h> 48 1.1 rmind #include <netinet/in_systm.h> 49 1.1 rmind #include <netinet/in.h> 50 1.1 rmind #include <netinet/ip.h> 51 1.1 rmind #include <netinet/udp.h> 52 1.1 rmind #include <netinet/ip_icmp.h> 53 1.1 rmind #include <arpa/inet.h> 54 1.1 rmind 55 1.1 rmind #define IP_SIZE sizeof(struct ip) 56 1.1 rmind #define ICMP_SIZE offsetof(struct icmp, icmp_ip) 57 1.1 rmind 58 1.1 rmind static void * 59 1.1 rmind xalloc(size_t sz) 60 1.1 rmind { 61 1.1 rmind void *ptr = calloc(1, sz); 62 1.1 rmind 63 1.1 rmind if (ptr == NULL) { 64 1.1 rmind err(EXIT_FAILURE, "calloc"); 65 1.1 rmind } 66 1.1 rmind return ptr; 67 1.1 rmind } 68 1.1 rmind 69 1.1 rmind static int 70 1.1 rmind create_socket(void) 71 1.1 rmind { 72 1.1 rmind int s, val = 1; 73 1.1 rmind 74 1.1 rmind s = socket(AF_INET, SOCK_RAW, IPPROTO_RAW); 75 1.1 rmind if (s == -1) { 76 1.1 rmind err(EXIT_FAILURE, "socket"); 77 1.1 rmind } 78 1.1 rmind if (setsockopt(s, IPPROTO_IP, IP_HDRINCL, &val, sizeof(val)) == -1) { 79 1.1 rmind err(EXIT_FAILURE, "setsockopt"); 80 1.1 rmind } 81 1.1 rmind return s; 82 1.1 rmind } 83 1.1 rmind 84 1.1 rmind void * 85 1.1 rmind create_ip_packet(in_addr_t target, int foff, size_t addlen) 86 1.1 rmind { 87 1.1 rmind struct ip *ip; 88 1.1 rmind unsigned int n; 89 1.1 rmind uint8_t *data; 90 1.1 rmind int first; 91 1.1 rmind 92 1.1 rmind /* Header at zero offset - first fragment. */ 93 1.1 rmind first = ((foff & IP_MF) == 0); 94 1.1 rmind if (first) { 95 1.1 rmind assert(addlen >= ICMP_SIZE); 96 1.1 rmind addlen -= ICMP_SIZE; 97 1.1 rmind } 98 1.1 rmind ip = xalloc(IP_SIZE + addlen); 99 1.1 rmind 100 1.1 rmind /* 101 1.1 rmind * IP header. 102 1.1 rmind * Note: ip_len and ip_off shall be in host byte order. 103 1.1 rmind */ 104 1.1 rmind ip->ip_v = IPVERSION; 105 1.1 rmind ip->ip_hl = 5; 106 1.1 rmind ip->ip_tos = 0; 107 1.1 rmind ip->ip_len = (5 << 2) + addlen; 108 1.1 rmind ip->ip_id = htons(1); 109 1.1 rmind ip->ip_off = foff; 110 1.1 rmind ip->ip_ttl = 64; 111 1.1 rmind ip->ip_p = IPPROTO_ICMP; 112 1.1 rmind ip->ip_sum = 0; 113 1.1 rmind 114 1.1 rmind ip->ip_src.s_addr = INADDR_ANY; 115 1.1 rmind ip->ip_dst.s_addr = target; 116 1.1 rmind 117 1.1 rmind /* Fill in some data. */ 118 1.1 rmind data = (void *)(ip + 1); 119 1.1 rmind if (first) { 120 1.1 rmind struct icmp *icmp = (void *)data; 121 1.1 rmind icmp->icmp_type = ICMP_ECHO; 122 1.1 rmind icmp->icmp_code = 0; 123 1.1 rmind icmp->icmp_cksum = 0; 124 1.1 rmind n = ICMP_SIZE; 125 1.1 rmind } else { 126 1.1 rmind n = 0; 127 1.1 rmind } 128 1.1 rmind for (data += n; n < addlen; n++) { 129 1.2 rmind *data = (0xf & n); 130 1.2 rmind data++; 131 1.1 rmind } 132 1.1 rmind return (void *)ip; 133 1.1 rmind } 134 1.1 rmind 135 1.1 rmind void 136 1.1 rmind send_packet(int s, void *p, in_addr_t target) 137 1.1 rmind { 138 1.1 rmind struct ip *ip = (struct ip *)p; 139 1.1 rmind struct sockaddr_in addr; 140 1.1 rmind ssize_t ret; 141 1.1 rmind 142 1.1 rmind memset(&addr, 0, sizeof(addr)); 143 1.1 rmind addr.sin_family = AF_INET; 144 1.1 rmind addr.sin_addr.s_addr = target; 145 1.1 rmind 146 1.1 rmind /* Note: total length was set host byte-order. */ 147 1.1 rmind ret = sendto(s, p, ip->ip_len, 0, 148 1.1 rmind (struct sockaddr *)&addr, sizeof(struct sockaddr_in)); 149 1.1 rmind if (ret == -1) { 150 1.1 rmind err(EXIT_FAILURE, "sendto"); 151 1.1 rmind } 152 1.1 rmind free(p); 153 1.1 rmind } 154 1.1 rmind 155 1.1 rmind void 156 1.1 rmind test_case_0(int sock, in_addr_t target) 157 1.1 rmind { 158 1.1 rmind void *p; 159 1.1 rmind 160 1.1 rmind /* 161 1.1 rmind * Case 0: normal reassembly. 162 1.1 rmind * => IP_STAT_FRAGMENTS 163 1.1 rmind */ 164 1.1 rmind 165 1.1 rmind p = create_ip_packet(target, 0 | IP_MF, 1480); 166 1.1 rmind send_packet(sock, p, target); 167 1.1 rmind 168 1.1 rmind p = create_ip_packet(target, 185, 1480); 169 1.1 rmind send_packet(sock, p, target); 170 1.1 rmind } 171 1.1 rmind 172 1.1 rmind void 173 1.1 rmind test_case_1(int sock, in_addr_t target) 174 1.1 rmind { 175 1.1 rmind void *p; 176 1.1 rmind 177 1.1 rmind /* 178 1.1 rmind * Case 1: ip_len of the first fragment and ip_off + hlen of other 179 1.1 rmind * fragments should be at least 68 (IP_MINFRAGSIZE - 1) bytes. 180 1.1 rmind * => IP_STAT_BADFRAGS (malformed) 181 1.1 rmind */ 182 1.1 rmind 183 1.1 rmind /* 20 + 48 == 68, OK */ 184 1.1 rmind p = create_ip_packet(target, 0 | IP_MF, 48); 185 1.1 rmind send_packet(sock, p, target); 186 1.1 rmind 187 1.1 rmind /* 20 + (5 * 8) = 60 < 68, ERR */ 188 1.1 rmind p = create_ip_packet(target, 6 - 1, 8); 189 1.1 rmind send_packet(sock, p, target); 190 1.1 rmind } 191 1.1 rmind 192 1.1 rmind void 193 1.1 rmind test_case_2(int sock, in_addr_t target) 194 1.1 rmind { 195 1.1 rmind void *p; 196 1.1 rmind struct ip *ip; 197 1.1 rmind 198 1.1 rmind /* 199 1.1 rmind * Case 2: mismatch of TOS. 200 1.1 rmind * => IP_STAT_BADFRAGS (malformed) 201 1.1 rmind */ 202 1.1 rmind 203 1.1 rmind p = create_ip_packet(target, 0 | IP_MF, 48); 204 1.1 rmind ip = (struct ip *)p; 205 1.1 rmind ip->ip_tos = 123; 206 1.1 rmind send_packet(sock, p, target); 207 1.1 rmind 208 1.1 rmind p = create_ip_packet(target, 6, 48); 209 1.1 rmind send_packet(sock, p, target); 210 1.1 rmind } 211 1.1 rmind 212 1.1 rmind void 213 1.1 rmind test_case_3(int sock, in_addr_t target) 214 1.1 rmind { 215 1.1 rmind void *p; 216 1.1 rmind 217 1.1 rmind /* 218 1.1 rmind * Case 3: data length is not multiple of 8 bytes. 219 1.1 rmind * => IP_STAT_BADFRAGS (malformed) 220 1.1 rmind */ 221 1.1 rmind 222 1.1 rmind p = create_ip_packet(target, 0 | IP_MF, 48); 223 1.1 rmind send_packet(sock, p, target); 224 1.1 rmind 225 1.1 rmind /* (48 + 1) & 0x7 != 0, ERR */ 226 1.1 rmind p = create_ip_packet(target, 6, 48 + 1); 227 1.1 rmind send_packet(sock, p, target); 228 1.1 rmind } 229 1.1 rmind 230 1.1 rmind void 231 1.1 rmind test_case_4(int sock, in_addr_t target) 232 1.1 rmind { 233 1.1 rmind void *p; 234 1.1 rmind 235 1.1 rmind /* 236 1.1 rmind * Case 4: fragment covering previous (duplicate). 237 1.1 rmind * => IP_STAT_FRAGDROPPED (dup, out of space) 238 1.1 rmind */ 239 1.1 rmind 240 1.1 rmind p = create_ip_packet(target, 0 | IP_MF, 48); 241 1.1 rmind send_packet(sock, p, target); 242 1.1 rmind 243 1.1 rmind p = create_ip_packet(target, 6 | IP_MF, 96); 244 1.1 rmind send_packet(sock, p, target); 245 1.1 rmind 246 1.1 rmind p = create_ip_packet(target, 6, 48); 247 1.1 rmind send_packet(sock, p, target); 248 1.1 rmind } 249 1.1 rmind 250 1.1 rmind void 251 1.1 rmind test_case_5(int sock, in_addr_t target) 252 1.1 rmind { 253 1.1 rmind void *p; 254 1.1 rmind int cnt, left, off; 255 1.1 rmind 256 1.1 rmind /* 257 1.1 rmind * Case 5: construct packet larger than IP_MAXPACKET. 258 1.1 rmind * => IP_STAT_TOOLONG (with length > max ip packet size) 259 1.1 rmind */ 260 1.1 rmind 261 1.1 rmind /* 262 1.1 rmind * Assumptions: 263 1.1 rmind * - 1500 MTU. Minus IP header - 1480. 264 1.1 rmind * - Bytes left: 65535 - (1480 * 44) = 415. 265 1.1 rmind */ 266 1.1 rmind cnt = IP_MAXPACKET / 1480; 267 1.1 rmind left = IP_MAXPACKET - (1480 * cnt); 268 1.1 rmind left = (left / 8) * 8; 269 1.1 rmind 270 1.1 rmind for (off = 0; cnt != 0; cnt--) { 271 1.1 rmind p = create_ip_packet(target, off | IP_MF, 1480); 272 1.1 rmind send_packet(sock, p, target); 273 1.1 rmind off += (1480 >> 3); 274 1.1 rmind } 275 1.1 rmind /* Add 8 bytes and thus cross IP_MAXPACKET limit. */ 276 1.1 rmind p = create_ip_packet(target, off, left + 8); 277 1.1 rmind send_packet(sock, p, target); 278 1.1 rmind } 279 1.1 rmind 280 1.1 rmind void 281 1.1 rmind test_case_6(int sock, in_addr_t target) 282 1.1 rmind { 283 1.1 rmind struct ip *ip; 284 1.1 rmind void *p; 285 1.1 rmind 286 1.1 rmind /* 287 1.1 rmind * Case 6: cause a fragment timeout. 288 1.1 rmind * => IP_STAT_FRAGTIMEOUT (fragments dropped after timeout) 289 1.1 rmind */ 290 1.1 rmind 291 1.1 rmind p = create_ip_packet(target, 0 | IP_MF, 48); 292 1.1 rmind ip = (struct ip *)p; 293 1.1 rmind ip->ip_id = htons(321); 294 1.1 rmind send_packet(sock, p, target); 295 1.1 rmind /* 296 1.1 rmind * Missing non-MF packet - timeout. 297 1.1 rmind */ 298 1.1 rmind } 299 1.1 rmind 300 1.1 rmind int 301 1.1 rmind main(int argc, char **argv) 302 1.1 rmind { 303 1.1 rmind struct hostent *he; 304 1.1 rmind in_addr_t target; 305 1.1 rmind int sock; 306 1.1 rmind 307 1.1 rmind if (argc < 2) { 308 1.1 rmind printf("%s: <target host>\n", argv[0]); 309 1.1 rmind exit(EXIT_SUCCESS); 310 1.1 rmind } 311 1.1 rmind 312 1.1 rmind he = gethostbyname(argv[1]); 313 1.1 rmind if (he == NULL) { 314 1.1 rmind err(EXIT_FAILURE, "gethostbyname"); 315 1.1 rmind } 316 1.1 rmind memcpy(&target, he->h_addr, sizeof(target)); 317 1.1 rmind 318 1.1 rmind sock = create_socket(); 319 1.1 rmind 320 1.1 rmind test_case_0(sock, target); 321 1.1 rmind test_case_1(sock, target); 322 1.1 rmind test_case_2(sock, target); 323 1.1 rmind test_case_3(sock, target); 324 1.1 rmind test_case_4(sock, target); 325 1.1 rmind test_case_5(sock, target); 326 1.1 rmind test_case_6(sock, target); 327 1.1 rmind 328 1.1 rmind close(sock); 329 1.1 rmind 330 1.1 rmind return 0; 331 1.1 rmind } 332