ip6_input.c revision 1.34 1 1.34 itojun /* $NetBSD: ip6_input.c,v 1.34 2001/02/07 08:59:48 itojun Exp $ */
2 1.34 itojun /* $KAME: ip6_input.c,v 1.170 2001/02/07 07:50:02 itojun Exp $ */
3 1.3 thorpej
4 1.2 itojun /*
5 1.2 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6 1.2 itojun * All rights reserved.
7 1.21 itojun *
8 1.2 itojun * Redistribution and use in source and binary forms, with or without
9 1.2 itojun * modification, are permitted provided that the following conditions
10 1.2 itojun * are met:
11 1.2 itojun * 1. Redistributions of source code must retain the above copyright
12 1.2 itojun * notice, this list of conditions and the following disclaimer.
13 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
14 1.2 itojun * notice, this list of conditions and the following disclaimer in the
15 1.2 itojun * documentation and/or other materials provided with the distribution.
16 1.2 itojun * 3. Neither the name of the project nor the names of its contributors
17 1.2 itojun * may be used to endorse or promote products derived from this software
18 1.2 itojun * without specific prior written permission.
19 1.21 itojun *
20 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.2 itojun * SUCH DAMAGE.
31 1.2 itojun */
32 1.2 itojun
33 1.2 itojun /*
34 1.2 itojun * Copyright (c) 1982, 1986, 1988, 1993
35 1.2 itojun * The Regents of the University of California. All rights reserved.
36 1.2 itojun *
37 1.2 itojun * Redistribution and use in source and binary forms, with or without
38 1.2 itojun * modification, are permitted provided that the following conditions
39 1.2 itojun * are met:
40 1.2 itojun * 1. Redistributions of source code must retain the above copyright
41 1.2 itojun * notice, this list of conditions and the following disclaimer.
42 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
43 1.2 itojun * notice, this list of conditions and the following disclaimer in the
44 1.2 itojun * documentation and/or other materials provided with the distribution.
45 1.2 itojun * 3. All advertising materials mentioning features or use of this software
46 1.2 itojun * must display the following acknowledgement:
47 1.2 itojun * This product includes software developed by the University of
48 1.2 itojun * California, Berkeley and its contributors.
49 1.2 itojun * 4. Neither the name of the University nor the names of its contributors
50 1.2 itojun * may be used to endorse or promote products derived from this software
51 1.2 itojun * without specific prior written permission.
52 1.2 itojun *
53 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
54 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
55 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
56 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
57 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
58 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
59 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
60 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
61 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
62 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
63 1.2 itojun * SUCH DAMAGE.
64 1.2 itojun *
65 1.2 itojun * @(#)ip_input.c 8.2 (Berkeley) 1/4/94
66 1.2 itojun */
67 1.2 itojun
68 1.2 itojun #include "opt_inet.h"
69 1.4 thorpej #include "opt_ipsec.h"
70 1.15 darrenr #include "opt_pfil_hooks.h"
71 1.2 itojun
72 1.2 itojun #include <sys/param.h>
73 1.2 itojun #include <sys/systm.h>
74 1.2 itojun #include <sys/malloc.h>
75 1.2 itojun #include <sys/mbuf.h>
76 1.2 itojun #include <sys/domain.h>
77 1.2 itojun #include <sys/protosw.h>
78 1.2 itojun #include <sys/socket.h>
79 1.2 itojun #include <sys/socketvar.h>
80 1.2 itojun #include <sys/errno.h>
81 1.2 itojun #include <sys/time.h>
82 1.2 itojun #include <sys/kernel.h>
83 1.2 itojun #include <sys/syslog.h>
84 1.2 itojun #include <sys/proc.h>
85 1.2 itojun
86 1.2 itojun #include <net/if.h>
87 1.2 itojun #include <net/if_types.h>
88 1.2 itojun #include <net/if_dl.h>
89 1.2 itojun #include <net/route.h>
90 1.2 itojun #include <net/netisr.h>
91 1.15 darrenr #ifdef PFIL_HOOKS
92 1.15 darrenr #include <net/pfil.h>
93 1.15 darrenr #endif
94 1.2 itojun
95 1.2 itojun #include <netinet/in.h>
96 1.9 itojun #include <netinet/in_systm.h>
97 1.9 itojun #ifdef INET
98 1.9 itojun #include <netinet/ip.h>
99 1.9 itojun #include <netinet/ip_icmp.h>
100 1.9 itojun #endif /*INET*/
101 1.14 itojun #include <netinet/ip6.h>
102 1.2 itojun #include <netinet6/in6_var.h>
103 1.11 itojun #include <netinet6/ip6_var.h>
104 1.2 itojun #include <netinet6/in6_pcb.h>
105 1.14 itojun #include <netinet/icmp6.h>
106 1.2 itojun #include <netinet6/in6_ifattach.h>
107 1.2 itojun #include <netinet6/nd6.h>
108 1.9 itojun #include <netinet6/in6_prefix.h>
109 1.2 itojun
110 1.9 itojun #ifdef IPV6FIREWALL
111 1.9 itojun #include <netinet6/ip6_fw.h>
112 1.9 itojun #endif
113 1.2 itojun
114 1.2 itojun #include <netinet6/ip6protosw.h>
115 1.2 itojun
116 1.2 itojun /* we need it for NLOOP. */
117 1.2 itojun #include "loop.h"
118 1.2 itojun #include "faith.h"
119 1.2 itojun
120 1.2 itojun #include "gif.h"
121 1.2 itojun #include "bpfilter.h"
122 1.2 itojun
123 1.9 itojun #include <net/net_osdep.h>
124 1.9 itojun
125 1.2 itojun extern struct domain inet6domain;
126 1.2 itojun
127 1.2 itojun u_char ip6_protox[IPPROTO_MAX];
128 1.2 itojun static int ip6qmaxlen = IFQ_MAXLEN;
129 1.2 itojun struct in6_ifaddr *in6_ifaddr;
130 1.2 itojun struct ifqueue ip6intrq;
131 1.2 itojun
132 1.2 itojun extern struct ifnet loif[NLOOP];
133 1.2 itojun int ip6_forward_srcrt; /* XXX */
134 1.2 itojun int ip6_sourcecheck; /* XXX */
135 1.2 itojun int ip6_sourcecheck_interval; /* XXX */
136 1.9 itojun
137 1.9 itojun #ifdef IPV6FIREWALL
138 1.9 itojun /* firewall hooks */
139 1.9 itojun ip6_fw_chk_t *ip6_fw_chk_ptr;
140 1.9 itojun ip6_fw_ctl_t *ip6_fw_ctl_ptr;
141 1.2 itojun #endif
142 1.2 itojun
143 1.29 thorpej #ifdef PFIL_HOOKS
144 1.29 thorpej struct pfil_head inet6_pfil_hook;
145 1.29 thorpej #endif
146 1.29 thorpej
147 1.2 itojun struct ip6stat ip6stat;
148 1.2 itojun
149 1.2 itojun static void ip6_init2 __P((void *));
150 1.2 itojun
151 1.5 itojun static int ip6_hopopts_input __P((u_int32_t *, u_int32_t *, struct mbuf **, int *));
152 1.2 itojun
153 1.2 itojun /*
154 1.2 itojun * IP6 initialization: fill in IP6 protocol switch table.
155 1.2 itojun * All protocols not implemented in kernel go to raw IP6 protocol handler.
156 1.2 itojun */
157 1.2 itojun void
158 1.2 itojun ip6_init()
159 1.2 itojun {
160 1.2 itojun register struct ip6protosw *pr;
161 1.2 itojun register int i;
162 1.2 itojun struct timeval tv;
163 1.2 itojun
164 1.2 itojun pr = (struct ip6protosw *)pffindproto(PF_INET6, IPPROTO_RAW, SOCK_RAW);
165 1.2 itojun if (pr == 0)
166 1.2 itojun panic("ip6_init");
167 1.2 itojun for (i = 0; i < IPPROTO_MAX; i++)
168 1.2 itojun ip6_protox[i] = pr - inet6sw;
169 1.2 itojun for (pr = (struct ip6protosw *)inet6domain.dom_protosw;
170 1.2 itojun pr < (struct ip6protosw *)inet6domain.dom_protoswNPROTOSW; pr++)
171 1.2 itojun if (pr->pr_domain->dom_family == PF_INET6 &&
172 1.2 itojun pr->pr_protocol && pr->pr_protocol != IPPROTO_RAW)
173 1.2 itojun ip6_protox[pr->pr_protocol] = pr - inet6sw;
174 1.2 itojun ip6intrq.ifq_maxlen = ip6qmaxlen;
175 1.2 itojun nd6_init();
176 1.2 itojun frag6_init();
177 1.9 itojun #ifdef IPV6FIREWALL
178 1.9 itojun ip6_fw_init();
179 1.9 itojun #endif
180 1.2 itojun /*
181 1.2 itojun * in many cases, random() here does NOT return random number
182 1.2 itojun * as initialization during bootstrap time occur in fixed order.
183 1.2 itojun */
184 1.2 itojun microtime(&tv);
185 1.2 itojun ip6_flow_seq = random() ^ tv.tv_usec;
186 1.2 itojun
187 1.2 itojun ip6_init2((void *)0);
188 1.29 thorpej
189 1.29 thorpej #ifdef PFIL_HOOKS
190 1.29 thorpej /* Register our Packet Filter hook. */
191 1.33 thorpej inet6_pfil_hook.ph_type = PFIL_TYPE_AF;
192 1.33 thorpej inet6_pfil_hook.ph_af = AF_INET6;
193 1.29 thorpej i = pfil_head_register(&inet6_pfil_hook);
194 1.29 thorpej if (i != 0)
195 1.29 thorpej printf("ip6_init: WARNING: unable to register pfil hook, "
196 1.29 thorpej "error %d\n", i);
197 1.29 thorpej #endif /* PFIL_HOOKS */
198 1.2 itojun }
199 1.2 itojun
200 1.2 itojun static void
201 1.2 itojun ip6_init2(dummy)
202 1.2 itojun void *dummy;
203 1.2 itojun {
204 1.2 itojun /*
205 1.2 itojun * to route local address of p2p link to loopback,
206 1.21 itojun * assign loopback address first.
207 1.2 itojun */
208 1.20 itojun in6_ifattach(&loif[0], NULL);
209 1.2 itojun
210 1.2 itojun /* nd6_timer_init */
211 1.19 thorpej callout_init(&nd6_timer_ch);
212 1.19 thorpej callout_reset(&nd6_timer_ch, hz, nd6_timer, NULL);
213 1.9 itojun /* router renumbering prefix list maintenance */
214 1.19 thorpej callout_init(&in6_rr_timer_ch);
215 1.19 thorpej callout_reset(&in6_rr_timer_ch, hz, in6_rr_timer, NULL);
216 1.2 itojun }
217 1.2 itojun
218 1.2 itojun /*
219 1.2 itojun * IP6 input interrupt handling. Just pass the packet to ip6_input.
220 1.2 itojun */
221 1.2 itojun void
222 1.2 itojun ip6intr()
223 1.2 itojun {
224 1.2 itojun int s;
225 1.2 itojun struct mbuf *m;
226 1.2 itojun
227 1.2 itojun for (;;) {
228 1.2 itojun s = splimp();
229 1.2 itojun IF_DEQUEUE(&ip6intrq, m);
230 1.2 itojun splx(s);
231 1.2 itojun if (m == 0)
232 1.2 itojun return;
233 1.2 itojun ip6_input(m);
234 1.2 itojun }
235 1.2 itojun }
236 1.2 itojun
237 1.2 itojun extern struct route_in6 ip6_forward_rt;
238 1.2 itojun
239 1.2 itojun void
240 1.2 itojun ip6_input(m)
241 1.2 itojun struct mbuf *m;
242 1.2 itojun {
243 1.9 itojun struct ip6_hdr *ip6;
244 1.2 itojun int off = sizeof(struct ip6_hdr), nest;
245 1.2 itojun u_int32_t plen;
246 1.5 itojun u_int32_t rtalert = ~0;
247 1.2 itojun int nxt, ours = 0;
248 1.9 itojun struct ifnet *deliverifp = NULL;
249 1.2 itojun
250 1.2 itojun #ifdef IPSEC
251 1.2 itojun /*
252 1.2 itojun * should the inner packet be considered authentic?
253 1.2 itojun * see comment in ah4_input().
254 1.2 itojun */
255 1.2 itojun if (m) {
256 1.2 itojun m->m_flags &= ~M_AUTHIPHDR;
257 1.2 itojun m->m_flags &= ~M_AUTHIPDGM;
258 1.2 itojun }
259 1.2 itojun #endif
260 1.9 itojun
261 1.2 itojun /*
262 1.2 itojun * mbuf statistics by kazu
263 1.2 itojun */
264 1.2 itojun if (m->m_flags & M_EXT) {
265 1.2 itojun if (m->m_next)
266 1.2 itojun ip6stat.ip6s_mext2m++;
267 1.2 itojun else
268 1.2 itojun ip6stat.ip6s_mext1++;
269 1.2 itojun } else {
270 1.2 itojun if (m->m_next) {
271 1.9 itojun if (m->m_flags & M_LOOP) {
272 1.2 itojun ip6stat.ip6s_m2m[loif[0].if_index]++; /*XXX*/
273 1.22 itojun } else if (m->m_pkthdr.rcvif->if_index <= 31)
274 1.2 itojun ip6stat.ip6s_m2m[m->m_pkthdr.rcvif->if_index]++;
275 1.2 itojun else
276 1.2 itojun ip6stat.ip6s_m2m[0]++;
277 1.2 itojun } else
278 1.2 itojun ip6stat.ip6s_m1++;
279 1.2 itojun }
280 1.2 itojun
281 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_receive);
282 1.9 itojun ip6stat.ip6s_total++;
283 1.9 itojun
284 1.9 itojun #ifndef PULLDOWN_TEST
285 1.9 itojun /* XXX is the line really necessary? */
286 1.2 itojun IP6_EXTHDR_CHECK(m, 0, sizeof(struct ip6_hdr), /*nothing*/);
287 1.9 itojun #endif
288 1.2 itojun
289 1.9 itojun if (m->m_len < sizeof(struct ip6_hdr)) {
290 1.9 itojun struct ifnet *inifp;
291 1.9 itojun inifp = m->m_pkthdr.rcvif;
292 1.9 itojun if ((m = m_pullup(m, sizeof(struct ip6_hdr))) == 0) {
293 1.9 itojun ip6stat.ip6s_toosmall++;
294 1.9 itojun in6_ifstat_inc(inifp, ifs6_in_hdrerr);
295 1.9 itojun return;
296 1.9 itojun }
297 1.2 itojun }
298 1.2 itojun
299 1.2 itojun ip6 = mtod(m, struct ip6_hdr *);
300 1.2 itojun
301 1.2 itojun if ((ip6->ip6_vfc & IPV6_VERSION_MASK) != IPV6_VERSION) {
302 1.2 itojun ip6stat.ip6s_badvers++;
303 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_hdrerr);
304 1.2 itojun goto bad;
305 1.2 itojun }
306 1.15 darrenr
307 1.15 darrenr #ifdef PFIL_HOOKS
308 1.15 darrenr /*
309 1.15 darrenr * Run through list of hooks for input packets. If there are any
310 1.15 darrenr * filters which require that additional packets in the flow are
311 1.15 darrenr * not fast-forwarded, they must clear the M_CANFASTFWD flag.
312 1.15 darrenr * Note that filters must _never_ set this flag, as another filter
313 1.15 darrenr * in the list may have previously cleared it.
314 1.15 darrenr */
315 1.29 thorpej if (pfil_run_hooks(&inet6_pfil_hook, &m, m->m_pkthdr.rcvif,
316 1.29 thorpej PFIL_IN) != 0)
317 1.29 thorpej return;
318 1.29 thorpej if (m == NULL)
319 1.29 thorpej return;
320 1.29 thorpej ip6 = mtod(m, struct ip6_hdr *);
321 1.15 darrenr #endif /* PFIL_HOOKS */
322 1.15 darrenr
323 1.2 itojun
324 1.2 itojun ip6stat.ip6s_nxthist[ip6->ip6_nxt]++;
325 1.2 itojun
326 1.9 itojun #ifdef IPV6FIREWALL
327 1.9 itojun /*
328 1.9 itojun * Check with the firewall...
329 1.9 itojun */
330 1.9 itojun if (ip6_fw_chk_ptr) {
331 1.9 itojun u_short port = 0;
332 1.9 itojun /* If ipfw says divert, we have to just drop packet */
333 1.9 itojun /* use port as a dummy argument */
334 1.9 itojun if ((*ip6_fw_chk_ptr)(&ip6, NULL, &port, &m)) {
335 1.9 itojun m_freem(m);
336 1.9 itojun m = NULL;
337 1.9 itojun }
338 1.9 itojun if (!m)
339 1.9 itojun return;
340 1.30 thorpej }
341 1.30 thorpej #endif
342 1.30 thorpej
343 1.30 thorpej #ifdef ALTQ
344 1.30 thorpej /* XXX Temporary until ALTQ is changed to use a pfil hook */
345 1.30 thorpej if (altq_input != NULL && (*altq_input)(m, AF_INET6) == 0) {
346 1.30 thorpej /* packet is dropped by traffic conditioner */
347 1.30 thorpej return;
348 1.9 itojun }
349 1.9 itojun #endif
350 1.9 itojun
351 1.2 itojun /*
352 1.2 itojun * Scope check
353 1.2 itojun */
354 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_src) ||
355 1.2 itojun IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_dst)) {
356 1.2 itojun ip6stat.ip6s_badscope++;
357 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_addrerr);
358 1.2 itojun goto bad;
359 1.2 itojun }
360 1.13 itojun /*
361 1.13 itojun * The following check is not documented in the spec. Malicious party
362 1.13 itojun * may be able to use IPv4 mapped addr to confuse tcp/udp stack and
363 1.13 itojun * bypass security checks (act as if it was from 127.0.0.1 by using
364 1.13 itojun * IPv6 src ::ffff:127.0.0.1). Be cautious.
365 1.13 itojun */
366 1.13 itojun if (IN6_IS_ADDR_V4MAPPED(&ip6->ip6_src) ||
367 1.13 itojun IN6_IS_ADDR_V4MAPPED(&ip6->ip6_dst)) {
368 1.13 itojun ip6stat.ip6s_badscope++;
369 1.13 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_addrerr);
370 1.13 itojun goto bad;
371 1.13 itojun }
372 1.17 itojun #if 0
373 1.13 itojun /*
374 1.17 itojun * Reject packets with IPv4 compatible addresses (auto tunnel).
375 1.17 itojun *
376 1.17 itojun * The code forbids auto tunnel relay case in RFC1933 (the check is
377 1.17 itojun * stronger than RFC1933). We may want to re-enable it if mech-xx
378 1.17 itojun * is revised to forbid relaying case.
379 1.13 itojun */
380 1.13 itojun if (IN6_IS_ADDR_V4COMPAT(&ip6->ip6_src) ||
381 1.13 itojun IN6_IS_ADDR_V4COMPAT(&ip6->ip6_dst)) {
382 1.13 itojun ip6stat.ip6s_badscope++;
383 1.13 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_addrerr);
384 1.13 itojun goto bad;
385 1.13 itojun }
386 1.13 itojun #endif
387 1.2 itojun if (IN6_IS_ADDR_LOOPBACK(&ip6->ip6_src) ||
388 1.2 itojun IN6_IS_ADDR_LOOPBACK(&ip6->ip6_dst)) {
389 1.2 itojun if (m->m_pkthdr.rcvif->if_flags & IFF_LOOPBACK) {
390 1.2 itojun ours = 1;
391 1.9 itojun deliverifp = m->m_pkthdr.rcvif;
392 1.2 itojun goto hbhcheck;
393 1.2 itojun } else {
394 1.2 itojun ip6stat.ip6s_badscope++;
395 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_addrerr);
396 1.2 itojun goto bad;
397 1.2 itojun }
398 1.2 itojun }
399 1.2 itojun
400 1.21 itojun #ifndef FAKE_LOOPBACK_IF
401 1.21 itojun if ((m->m_pkthdr.rcvif->if_flags & IFF_LOOPBACK) == 0)
402 1.21 itojun #else
403 1.21 itojun if (1)
404 1.21 itojun #endif
405 1.21 itojun {
406 1.2 itojun if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_src))
407 1.2 itojun ip6->ip6_src.s6_addr16[1]
408 1.2 itojun = htons(m->m_pkthdr.rcvif->if_index);
409 1.2 itojun if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_dst))
410 1.2 itojun ip6->ip6_dst.s6_addr16[1]
411 1.2 itojun = htons(m->m_pkthdr.rcvif->if_index);
412 1.2 itojun }
413 1.2 itojun
414 1.9 itojun /*
415 1.21 itojun * XXX we need this since we do not have "goto ours" hack route
416 1.21 itojun * for some of our ifaddrs on loopback interface.
417 1.21 itojun * we should correct it by changing in6_ifattach to install
418 1.21 itojun * "goto ours" hack route.
419 1.9 itojun */
420 1.21 itojun if ((m->m_pkthdr.rcvif->if_flags & IFF_LOOPBACK) != 0) {
421 1.21 itojun if (IN6_IS_ADDR_LINKLOCAL(&ip6->ip6_dst)) {
422 1.21 itojun ours = 1;
423 1.21 itojun deliverifp = m->m_pkthdr.rcvif;
424 1.21 itojun goto hbhcheck;
425 1.21 itojun }
426 1.9 itojun }
427 1.9 itojun
428 1.2 itojun /*
429 1.2 itojun * Multicast check
430 1.2 itojun */
431 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
432 1.2 itojun struct in6_multi *in6m = 0;
433 1.9 itojun
434 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_mcast);
435 1.2 itojun /*
436 1.2 itojun * See if we belong to the destination multicast group on the
437 1.2 itojun * arrival interface.
438 1.2 itojun */
439 1.2 itojun IN6_LOOKUP_MULTI(ip6->ip6_dst, m->m_pkthdr.rcvif, in6m);
440 1.2 itojun if (in6m)
441 1.2 itojun ours = 1;
442 1.2 itojun else if (!ip6_mrouter) {
443 1.2 itojun ip6stat.ip6s_notmember++;
444 1.2 itojun ip6stat.ip6s_cantforward++;
445 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_discard);
446 1.2 itojun goto bad;
447 1.2 itojun }
448 1.9 itojun deliverifp = m->m_pkthdr.rcvif;
449 1.2 itojun goto hbhcheck;
450 1.2 itojun }
451 1.2 itojun
452 1.2 itojun /*
453 1.2 itojun * Unicast check
454 1.2 itojun */
455 1.22 itojun if (ip6_forward_rt.ro_rt != NULL &&
456 1.22 itojun (ip6_forward_rt.ro_rt->rt_flags & RTF_UP) != 0 &&
457 1.22 itojun IN6_ARE_ADDR_EQUAL(&ip6->ip6_dst,
458 1.22 itojun &ip6_forward_rt.ro_dst.sin6_addr))
459 1.25 itojun ip6stat.ip6s_forward_cachehit++;
460 1.22 itojun else {
461 1.2 itojun if (ip6_forward_rt.ro_rt) {
462 1.22 itojun /* route is down or destination is different */
463 1.25 itojun ip6stat.ip6s_forward_cachemiss++;
464 1.2 itojun RTFREE(ip6_forward_rt.ro_rt);
465 1.2 itojun ip6_forward_rt.ro_rt = 0;
466 1.2 itojun }
467 1.22 itojun
468 1.2 itojun bzero(&ip6_forward_rt.ro_dst, sizeof(struct sockaddr_in6));
469 1.2 itojun ip6_forward_rt.ro_dst.sin6_len = sizeof(struct sockaddr_in6);
470 1.2 itojun ip6_forward_rt.ro_dst.sin6_family = AF_INET6;
471 1.2 itojun ip6_forward_rt.ro_dst.sin6_addr = ip6->ip6_dst;
472 1.2 itojun
473 1.9 itojun rtalloc((struct route *)&ip6_forward_rt);
474 1.2 itojun }
475 1.2 itojun
476 1.2 itojun #define rt6_key(r) ((struct sockaddr_in6 *)((r)->rt_nodes->rn_key))
477 1.2 itojun
478 1.2 itojun /*
479 1.2 itojun * Accept the packet if the forwarding interface to the destination
480 1.2 itojun * according to the routing table is the loopback interface,
481 1.2 itojun * unless the associated route has a gateway.
482 1.2 itojun * Note that this approach causes to accept a packet if there is a
483 1.2 itojun * route to the loopback interface for the destination of the packet.
484 1.2 itojun * But we think it's even useful in some situations, e.g. when using
485 1.2 itojun * a special daemon which wants to intercept the packet.
486 1.2 itojun */
487 1.2 itojun if (ip6_forward_rt.ro_rt &&
488 1.2 itojun (ip6_forward_rt.ro_rt->rt_flags &
489 1.2 itojun (RTF_HOST|RTF_GATEWAY)) == RTF_HOST &&
490 1.2 itojun #if 0
491 1.2 itojun /*
492 1.2 itojun * The check below is redundant since the comparison of
493 1.2 itojun * the destination and the key of the rtentry has
494 1.2 itojun * already done through looking up the routing table.
495 1.2 itojun */
496 1.2 itojun IN6_ARE_ADDR_EQUAL(&ip6->ip6_dst,
497 1.2 itojun &rt6_key(ip6_forward_rt.ro_rt)->sin6_addr) &&
498 1.2 itojun #endif
499 1.9 itojun ip6_forward_rt.ro_rt->rt_ifp->if_type == IFT_LOOP) {
500 1.2 itojun struct in6_ifaddr *ia6 =
501 1.2 itojun (struct in6_ifaddr *)ip6_forward_rt.ro_rt->rt_ifa;
502 1.2 itojun if (ia6->ia6_flags & IN6_IFF_ANYCAST)
503 1.2 itojun m->m_flags |= M_ANYCAST6;
504 1.24 itojun /*
505 1.24 itojun * packets to a tentative, duplicated, or somehow invalid
506 1.24 itojun * address must not be accepted.
507 1.24 itojun */
508 1.2 itojun if (!(ia6->ia6_flags & IN6_IFF_NOTREADY)) {
509 1.24 itojun /* this address is ready */
510 1.2 itojun ours = 1;
511 1.9 itojun deliverifp = ia6->ia_ifp; /* correct? */
512 1.2 itojun goto hbhcheck;
513 1.2 itojun } else {
514 1.24 itojun /* address is not ready, so discard the packet. */
515 1.34 itojun nd6log((LOG_INFO,
516 1.27 itojun "ip6_input: packet to an unready address %s->%s\n",
517 1.24 itojun ip6_sprintf(&ip6->ip6_src),
518 1.34 itojun ip6_sprintf(&ip6->ip6_dst)));
519 1.24 itojun
520 1.24 itojun goto bad;
521 1.2 itojun }
522 1.2 itojun }
523 1.2 itojun
524 1.2 itojun /*
525 1.2 itojun * FAITH(Firewall Aided Internet Translator)
526 1.2 itojun */
527 1.2 itojun #if defined(NFAITH) && 0 < NFAITH
528 1.2 itojun if (ip6_keepfaith) {
529 1.2 itojun if (ip6_forward_rt.ro_rt && ip6_forward_rt.ro_rt->rt_ifp
530 1.2 itojun && ip6_forward_rt.ro_rt->rt_ifp->if_type == IFT_FAITH) {
531 1.2 itojun /* XXX do we need more sanity checks? */
532 1.2 itojun ours = 1;
533 1.9 itojun deliverifp = ip6_forward_rt.ro_rt->rt_ifp; /*faith*/
534 1.9 itojun goto hbhcheck;
535 1.9 itojun }
536 1.9 itojun }
537 1.9 itojun #endif
538 1.9 itojun
539 1.9 itojun #if 0
540 1.9 itojun {
541 1.9 itojun /*
542 1.9 itojun * Last resort: check in6_ifaddr for incoming interface.
543 1.9 itojun * The code is here until I update the "goto ours hack" code above
544 1.9 itojun * working right.
545 1.9 itojun */
546 1.9 itojun struct ifaddr *ifa;
547 1.9 itojun for (ifa = m->m_pkthdr.rcvif->if_addrlist.tqh_first;
548 1.9 itojun ifa;
549 1.9 itojun ifa = ifa->ifa_list.tqe_next) {
550 1.9 itojun if (ifa->ifa_addr == NULL)
551 1.9 itojun continue; /* just for safety */
552 1.9 itojun if (ifa->ifa_addr->sa_family != AF_INET6)
553 1.9 itojun continue;
554 1.9 itojun if (IN6_ARE_ADDR_EQUAL(IFA_IN6(ifa), &ip6->ip6_dst)) {
555 1.9 itojun ours = 1;
556 1.9 itojun deliverifp = ifa->ifa_ifp;
557 1.2 itojun goto hbhcheck;
558 1.2 itojun }
559 1.2 itojun }
560 1.9 itojun }
561 1.2 itojun #endif
562 1.2 itojun
563 1.2 itojun /*
564 1.2 itojun * Now there is no reason to process the packet if it's not our own
565 1.2 itojun * and we're not a router.
566 1.2 itojun */
567 1.2 itojun if (!ip6_forwarding) {
568 1.2 itojun ip6stat.ip6s_cantforward++;
569 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_discard);
570 1.2 itojun goto bad;
571 1.2 itojun }
572 1.2 itojun
573 1.2 itojun hbhcheck:
574 1.2 itojun /*
575 1.2 itojun * Process Hop-by-Hop options header if it's contained.
576 1.2 itojun * m may be modified in ip6_hopopts_input().
577 1.2 itojun * If a JumboPayload option is included, plen will also be modified.
578 1.2 itojun */
579 1.2 itojun plen = (u_int32_t)ntohs(ip6->ip6_plen);
580 1.2 itojun if (ip6->ip6_nxt == IPPROTO_HOPOPTS) {
581 1.9 itojun struct ip6_hbh *hbh;
582 1.9 itojun
583 1.9 itojun if (ip6_hopopts_input(&plen, &rtalert, &m, &off)) {
584 1.9 itojun #if 0 /*touches NULL pointer*/
585 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_discard);
586 1.9 itojun #endif
587 1.2 itojun return; /* m have already been freed */
588 1.9 itojun }
589 1.22 itojun
590 1.2 itojun /* adjust pointer */
591 1.2 itojun ip6 = mtod(m, struct ip6_hdr *);
592 1.22 itojun
593 1.22 itojun /*
594 1.22 itojun * if the payload length field is 0 and the next header field
595 1.22 itojun * indicates Hop-by-Hop Options header, then a Jumbo Payload
596 1.22 itojun * option MUST be included.
597 1.22 itojun */
598 1.22 itojun if (ip6->ip6_plen == 0 && plen == 0) {
599 1.22 itojun /*
600 1.22 itojun * Note that if a valid jumbo payload option is
601 1.22 itojun * contained, ip6_hoptops_input() must set a valid
602 1.22 itojun * (non-zero) payload length to the variable plen.
603 1.22 itojun */
604 1.22 itojun ip6stat.ip6s_badoptions++;
605 1.22 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_discard);
606 1.22 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_hdrerr);
607 1.22 itojun icmp6_error(m, ICMP6_PARAM_PROB,
608 1.22 itojun ICMP6_PARAMPROB_HEADER,
609 1.22 itojun (caddr_t)&ip6->ip6_plen - (caddr_t)ip6);
610 1.22 itojun return;
611 1.22 itojun }
612 1.9 itojun #ifndef PULLDOWN_TEST
613 1.9 itojun /* ip6_hopopts_input() ensures that mbuf is contiguous */
614 1.9 itojun hbh = (struct ip6_hbh *)(ip6 + 1);
615 1.9 itojun #else
616 1.9 itojun IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m, sizeof(struct ip6_hdr),
617 1.9 itojun sizeof(struct ip6_hbh));
618 1.9 itojun if (hbh == NULL) {
619 1.9 itojun ip6stat.ip6s_tooshort++;
620 1.9 itojun return;
621 1.9 itojun }
622 1.9 itojun #endif
623 1.9 itojun nxt = hbh->ip6h_nxt;
624 1.2 itojun
625 1.2 itojun /*
626 1.2 itojun * accept the packet if a router alert option is included
627 1.2 itojun * and we act as an IPv6 router.
628 1.2 itojun */
629 1.5 itojun if (rtalert != ~0 && ip6_forwarding)
630 1.2 itojun ours = 1;
631 1.2 itojun } else
632 1.2 itojun nxt = ip6->ip6_nxt;
633 1.2 itojun
634 1.2 itojun /*
635 1.2 itojun * Check that the amount of data in the buffers
636 1.2 itojun * is as at least much as the IPv6 header would have us expect.
637 1.2 itojun * Trim mbufs if longer than we expect.
638 1.2 itojun * Drop packet if shorter than we expect.
639 1.2 itojun */
640 1.2 itojun if (m->m_pkthdr.len - sizeof(struct ip6_hdr) < plen) {
641 1.2 itojun ip6stat.ip6s_tooshort++;
642 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_truncated);
643 1.2 itojun goto bad;
644 1.2 itojun }
645 1.2 itojun if (m->m_pkthdr.len > sizeof(struct ip6_hdr) + plen) {
646 1.2 itojun if (m->m_len == m->m_pkthdr.len) {
647 1.2 itojun m->m_len = sizeof(struct ip6_hdr) + plen;
648 1.2 itojun m->m_pkthdr.len = sizeof(struct ip6_hdr) + plen;
649 1.2 itojun } else
650 1.2 itojun m_adj(m, sizeof(struct ip6_hdr) + plen - m->m_pkthdr.len);
651 1.2 itojun }
652 1.2 itojun
653 1.2 itojun /*
654 1.2 itojun * Forward if desirable.
655 1.2 itojun */
656 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
657 1.2 itojun /*
658 1.2 itojun * If we are acting as a multicast router, all
659 1.2 itojun * incoming multicast packets are passed to the
660 1.2 itojun * kernel-level multicast forwarding function.
661 1.2 itojun * The packet is returned (relatively) intact; if
662 1.2 itojun * ip6_mforward() returns a non-zero value, the packet
663 1.2 itojun * must be discarded, else it may be accepted below.
664 1.2 itojun */
665 1.2 itojun if (ip6_mrouter && ip6_mforward(ip6, m->m_pkthdr.rcvif, m)) {
666 1.2 itojun ip6stat.ip6s_cantforward++;
667 1.2 itojun m_freem(m);
668 1.2 itojun return;
669 1.2 itojun }
670 1.2 itojun if (!ours) {
671 1.2 itojun m_freem(m);
672 1.2 itojun return;
673 1.2 itojun }
674 1.22 itojun } else if (!ours) {
675 1.2 itojun ip6_forward(m, 0);
676 1.2 itojun return;
677 1.2 itojun }
678 1.25 itojun
679 1.25 itojun ip6 = mtod(m, struct ip6_hdr *);
680 1.25 itojun
681 1.25 itojun /*
682 1.25 itojun * Malicious party may be able to use IPv4 mapped addr to confuse
683 1.25 itojun * tcp/udp stack and bypass security checks (act as if it was from
684 1.25 itojun * 127.0.0.1 by using IPv6 src ::ffff:127.0.0.1). Be cautious.
685 1.25 itojun *
686 1.25 itojun * For SIIT end node behavior, you may want to disable the check.
687 1.25 itojun * However, you will become vulnerable to attacks using IPv4 mapped
688 1.25 itojun * source.
689 1.25 itojun */
690 1.25 itojun if (IN6_IS_ADDR_V4MAPPED(&ip6->ip6_src) ||
691 1.25 itojun IN6_IS_ADDR_V4MAPPED(&ip6->ip6_dst)) {
692 1.25 itojun ip6stat.ip6s_badscope++;
693 1.25 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_addrerr);
694 1.25 itojun goto bad;
695 1.25 itojun }
696 1.2 itojun
697 1.2 itojun /*
698 1.2 itojun * Tell launch routine the next header
699 1.2 itojun */
700 1.12 itojun #ifdef IFA_STATS
701 1.28 itojun if (deliverifp != NULL) {
702 1.9 itojun struct in6_ifaddr *ia6;
703 1.9 itojun ia6 = in6_ifawithifp(deliverifp, &ip6->ip6_dst);
704 1.9 itojun if (ia6)
705 1.9 itojun ia6->ia_ifa.ifa_data.ifad_inbytes += m->m_pkthdr.len;
706 1.9 itojun }
707 1.9 itojun #endif
708 1.2 itojun ip6stat.ip6s_delivered++;
709 1.9 itojun in6_ifstat_inc(deliverifp, ifs6_in_deliver);
710 1.2 itojun nest = 0;
711 1.2 itojun while (nxt != IPPROTO_DONE) {
712 1.2 itojun if (ip6_hdrnestlimit && (++nest > ip6_hdrnestlimit)) {
713 1.2 itojun ip6stat.ip6s_toomanyhdr++;
714 1.2 itojun goto bad;
715 1.2 itojun }
716 1.8 itojun
717 1.8 itojun /*
718 1.8 itojun * protection against faulty packet - there should be
719 1.8 itojun * more sanity checks in header chain processing.
720 1.8 itojun */
721 1.8 itojun if (m->m_pkthdr.len < off) {
722 1.8 itojun ip6stat.ip6s_tooshort++;
723 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_truncated);
724 1.8 itojun goto bad;
725 1.8 itojun }
726 1.8 itojun
727 1.2 itojun nxt = (*inet6sw[ip6_protox[nxt]].pr_input)(&m, &off, nxt);
728 1.2 itojun }
729 1.2 itojun return;
730 1.2 itojun bad:
731 1.2 itojun m_freem(m);
732 1.2 itojun }
733 1.2 itojun
734 1.2 itojun /*
735 1.2 itojun * Hop-by-Hop options header processing. If a valid jumbo payload option is
736 1.2 itojun * included, the real payload length will be stored in plenp.
737 1.2 itojun */
738 1.2 itojun static int
739 1.2 itojun ip6_hopopts_input(plenp, rtalertp, mp, offp)
740 1.2 itojun u_int32_t *plenp;
741 1.5 itojun u_int32_t *rtalertp; /* XXX: should be stored more smart way */
742 1.2 itojun struct mbuf **mp;
743 1.2 itojun int *offp;
744 1.2 itojun {
745 1.2 itojun register struct mbuf *m = *mp;
746 1.2 itojun int off = *offp, hbhlen;
747 1.2 itojun struct ip6_hbh *hbh;
748 1.2 itojun u_int8_t *opt;
749 1.2 itojun
750 1.2 itojun /* validation of the length of the header */
751 1.9 itojun #ifndef PULLDOWN_TEST
752 1.2 itojun IP6_EXTHDR_CHECK(m, off, sizeof(*hbh), -1);
753 1.2 itojun hbh = (struct ip6_hbh *)(mtod(m, caddr_t) + off);
754 1.2 itojun hbhlen = (hbh->ip6h_len + 1) << 3;
755 1.2 itojun
756 1.2 itojun IP6_EXTHDR_CHECK(m, off, hbhlen, -1);
757 1.2 itojun hbh = (struct ip6_hbh *)(mtod(m, caddr_t) + off);
758 1.9 itojun #else
759 1.9 itojun IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m,
760 1.9 itojun sizeof(struct ip6_hdr), sizeof(struct ip6_hbh));
761 1.9 itojun if (hbh == NULL) {
762 1.9 itojun ip6stat.ip6s_tooshort++;
763 1.9 itojun return -1;
764 1.9 itojun }
765 1.9 itojun hbhlen = (hbh->ip6h_len + 1) << 3;
766 1.9 itojun IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m, sizeof(struct ip6_hdr),
767 1.9 itojun hbhlen);
768 1.9 itojun if (hbh == NULL) {
769 1.9 itojun ip6stat.ip6s_tooshort++;
770 1.9 itojun return -1;
771 1.9 itojun }
772 1.9 itojun #endif
773 1.2 itojun off += hbhlen;
774 1.2 itojun hbhlen -= sizeof(struct ip6_hbh);
775 1.2 itojun opt = (u_int8_t *)hbh + sizeof(struct ip6_hbh);
776 1.2 itojun
777 1.2 itojun if (ip6_process_hopopts(m, (u_int8_t *)hbh + sizeof(struct ip6_hbh),
778 1.2 itojun hbhlen, rtalertp, plenp) < 0)
779 1.2 itojun return(-1);
780 1.2 itojun
781 1.2 itojun *offp = off;
782 1.2 itojun *mp = m;
783 1.2 itojun return(0);
784 1.2 itojun }
785 1.2 itojun
786 1.2 itojun /*
787 1.2 itojun * Search header for all Hop-by-hop options and process each option.
788 1.2 itojun * This function is separate from ip6_hopopts_input() in order to
789 1.2 itojun * handle a case where the sending node itself process its hop-by-hop
790 1.2 itojun * options header. In such a case, the function is called from ip6_output().
791 1.2 itojun */
792 1.2 itojun int
793 1.2 itojun ip6_process_hopopts(m, opthead, hbhlen, rtalertp, plenp)
794 1.2 itojun struct mbuf *m;
795 1.2 itojun u_int8_t *opthead;
796 1.2 itojun int hbhlen;
797 1.5 itojun u_int32_t *rtalertp;
798 1.2 itojun u_int32_t *plenp;
799 1.2 itojun {
800 1.2 itojun struct ip6_hdr *ip6;
801 1.2 itojun int optlen = 0;
802 1.2 itojun u_int8_t *opt = opthead;
803 1.2 itojun u_int16_t rtalert_val;
804 1.22 itojun u_int32_t jumboplen;
805 1.2 itojun
806 1.2 itojun for (; hbhlen > 0; hbhlen -= optlen, opt += optlen) {
807 1.2 itojun switch(*opt) {
808 1.2 itojun case IP6OPT_PAD1:
809 1.2 itojun optlen = 1;
810 1.2 itojun break;
811 1.2 itojun case IP6OPT_PADN:
812 1.2 itojun if (hbhlen < IP6OPT_MINLEN) {
813 1.2 itojun ip6stat.ip6s_toosmall++;
814 1.2 itojun goto bad;
815 1.2 itojun }
816 1.2 itojun optlen = *(opt + 1) + 2;
817 1.2 itojun break;
818 1.2 itojun case IP6OPT_RTALERT:
819 1.8 itojun /* XXX may need check for alignment */
820 1.2 itojun if (hbhlen < IP6OPT_RTALERT_LEN) {
821 1.2 itojun ip6stat.ip6s_toosmall++;
822 1.2 itojun goto bad;
823 1.2 itojun }
824 1.2 itojun if (*(opt + 1) != IP6OPT_RTALERT_LEN - 2)
825 1.2 itojun /* XXX: should we discard the packet? */
826 1.2 itojun log(LOG_ERR, "length of router alert opt is inconsitent(%d)",
827 1.2 itojun *(opt + 1));
828 1.2 itojun optlen = IP6OPT_RTALERT_LEN;
829 1.2 itojun bcopy((caddr_t)(opt + 2), (caddr_t)&rtalert_val, 2);
830 1.2 itojun *rtalertp = ntohs(rtalert_val);
831 1.2 itojun break;
832 1.2 itojun case IP6OPT_JUMBO:
833 1.22 itojun /* XXX may need check for alignment */
834 1.22 itojun if (hbhlen < IP6OPT_JUMBO_LEN) {
835 1.22 itojun ip6stat.ip6s_toosmall++;
836 1.22 itojun goto bad;
837 1.22 itojun }
838 1.22 itojun if (*(opt + 1) != IP6OPT_JUMBO_LEN - 2)
839 1.22 itojun /* XXX: should we discard the packet? */
840 1.22 itojun log(LOG_ERR, "length of jumbopayload opt "
841 1.27 itojun "is inconsistent(%d)\n",
842 1.22 itojun *(opt + 1));
843 1.22 itojun optlen = IP6OPT_JUMBO_LEN;
844 1.22 itojun
845 1.22 itojun /*
846 1.22 itojun * IPv6 packets that have non 0 payload length
847 1.22 itojun * must not contain a jumbo paylod option.
848 1.22 itojun */
849 1.22 itojun ip6 = mtod(m, struct ip6_hdr *);
850 1.22 itojun if (ip6->ip6_plen) {
851 1.22 itojun ip6stat.ip6s_badoptions++;
852 1.22 itojun icmp6_error(m, ICMP6_PARAM_PROB,
853 1.22 itojun ICMP6_PARAMPROB_HEADER,
854 1.22 itojun sizeof(struct ip6_hdr) +
855 1.22 itojun sizeof(struct ip6_hbh) +
856 1.22 itojun opt - opthead);
857 1.22 itojun return(-1);
858 1.22 itojun }
859 1.2 itojun
860 1.22 itojun /*
861 1.22 itojun * We may see jumbolen in unaligned location, so
862 1.22 itojun * we'd need to perform bcopy().
863 1.22 itojun */
864 1.22 itojun bcopy(opt + 2, &jumboplen, sizeof(jumboplen));
865 1.22 itojun jumboplen = (u_int32_t)htonl(jumboplen);
866 1.22 itojun
867 1.22 itojun #if 1
868 1.22 itojun /*
869 1.22 itojun * if there are multiple jumbo payload options,
870 1.22 itojun * *plenp will be non-zero and the packet will be
871 1.22 itojun * rejected.
872 1.22 itojun * the behavior may need some debate in ipngwg -
873 1.22 itojun * multiple options does not make sense, however,
874 1.22 itojun * there's no explicit mention in specification.
875 1.22 itojun */
876 1.22 itojun if (*plenp != 0) {
877 1.22 itojun ip6stat.ip6s_badoptions++;
878 1.22 itojun icmp6_error(m, ICMP6_PARAM_PROB,
879 1.22 itojun ICMP6_PARAMPROB_HEADER,
880 1.22 itojun sizeof(struct ip6_hdr) +
881 1.22 itojun sizeof(struct ip6_hbh) +
882 1.22 itojun opt + 2 - opthead);
883 1.22 itojun return(-1);
884 1.22 itojun }
885 1.8 itojun #endif
886 1.2 itojun
887 1.22 itojun /*
888 1.22 itojun * jumbo payload length must be larger than 65535.
889 1.22 itojun */
890 1.22 itojun if (jumboplen <= IPV6_MAXPACKET) {
891 1.22 itojun ip6stat.ip6s_badoptions++;
892 1.22 itojun icmp6_error(m, ICMP6_PARAM_PROB,
893 1.22 itojun ICMP6_PARAMPROB_HEADER,
894 1.22 itojun sizeof(struct ip6_hdr) +
895 1.22 itojun sizeof(struct ip6_hbh) +
896 1.22 itojun opt + 2 - opthead);
897 1.22 itojun return(-1);
898 1.22 itojun }
899 1.22 itojun *plenp = jumboplen;
900 1.22 itojun
901 1.22 itojun break;
902 1.2 itojun default: /* unknown option */
903 1.2 itojun if (hbhlen < IP6OPT_MINLEN) {
904 1.2 itojun ip6stat.ip6s_toosmall++;
905 1.2 itojun goto bad;
906 1.2 itojun }
907 1.2 itojun if ((optlen = ip6_unknown_opt(opt, m,
908 1.2 itojun sizeof(struct ip6_hdr) +
909 1.2 itojun sizeof(struct ip6_hbh) +
910 1.2 itojun opt - opthead)) == -1)
911 1.2 itojun return(-1);
912 1.2 itojun optlen += 2;
913 1.2 itojun break;
914 1.2 itojun }
915 1.2 itojun }
916 1.2 itojun
917 1.2 itojun return(0);
918 1.2 itojun
919 1.2 itojun bad:
920 1.2 itojun m_freem(m);
921 1.2 itojun return(-1);
922 1.2 itojun }
923 1.2 itojun
924 1.2 itojun /*
925 1.2 itojun * Unknown option processing.
926 1.2 itojun * The third argument `off' is the offset from the IPv6 header to the option,
927 1.2 itojun * which is necessary if the IPv6 header the and option header and IPv6 header
928 1.2 itojun * is not continuous in order to return an ICMPv6 error.
929 1.2 itojun */
930 1.2 itojun int
931 1.2 itojun ip6_unknown_opt(optp, m, off)
932 1.2 itojun u_int8_t *optp;
933 1.2 itojun struct mbuf *m;
934 1.2 itojun int off;
935 1.2 itojun {
936 1.2 itojun struct ip6_hdr *ip6;
937 1.2 itojun
938 1.2 itojun switch(IP6OPT_TYPE(*optp)) {
939 1.2 itojun case IP6OPT_TYPE_SKIP: /* ignore the option */
940 1.2 itojun return((int)*(optp + 1));
941 1.2 itojun case IP6OPT_TYPE_DISCARD: /* silently discard */
942 1.2 itojun m_freem(m);
943 1.2 itojun return(-1);
944 1.2 itojun case IP6OPT_TYPE_FORCEICMP: /* send ICMP even if multicasted */
945 1.2 itojun ip6stat.ip6s_badoptions++;
946 1.2 itojun icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_OPTION, off);
947 1.2 itojun return(-1);
948 1.2 itojun case IP6OPT_TYPE_ICMP: /* send ICMP if not multicasted */
949 1.2 itojun ip6stat.ip6s_badoptions++;
950 1.2 itojun ip6 = mtod(m, struct ip6_hdr *);
951 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) ||
952 1.2 itojun (m->m_flags & (M_BCAST|M_MCAST)))
953 1.2 itojun m_freem(m);
954 1.2 itojun else
955 1.2 itojun icmp6_error(m, ICMP6_PARAM_PROB,
956 1.2 itojun ICMP6_PARAMPROB_OPTION, off);
957 1.2 itojun return(-1);
958 1.2 itojun }
959 1.2 itojun
960 1.2 itojun m_freem(m); /* XXX: NOTREACHED */
961 1.2 itojun return(-1);
962 1.2 itojun }
963 1.2 itojun
964 1.2 itojun /*
965 1.9 itojun * Create the "control" list for this pcb.
966 1.9 itojun *
967 1.9 itojun * The routine will be called from upper layer handlers like tcp6_input().
968 1.9 itojun * Thus the routine assumes that the caller (tcp6_input) have already
969 1.9 itojun * called IP6_EXTHDR_CHECK() and all the extension headers are located in the
970 1.9 itojun * very first mbuf on the mbuf chain.
971 1.9 itojun * We may want to add some infinite loop prevention or sanity checks for safety.
972 1.9 itojun * (This applies only when you are using KAME mbuf chain restriction, i.e.
973 1.9 itojun * you are using IP6_EXTHDR_CHECK() not m_pulldown())
974 1.2 itojun */
975 1.2 itojun void
976 1.2 itojun ip6_savecontrol(in6p, mp, ip6, m)
977 1.2 itojun register struct in6pcb *in6p;
978 1.2 itojun register struct mbuf **mp;
979 1.2 itojun register struct ip6_hdr *ip6;
980 1.2 itojun register struct mbuf *m;
981 1.2 itojun {
982 1.2 itojun struct proc *p = curproc; /* XXX */
983 1.9 itojun int privileged;
984 1.2 itojun
985 1.9 itojun privileged = 0;
986 1.9 itojun if (p && !suser(p->p_ucred, &p->p_acflag))
987 1.9 itojun privileged++;
988 1.9 itojun
989 1.9 itojun #ifdef SO_TIMESTAMP
990 1.2 itojun if (in6p->in6p_socket->so_options & SO_TIMESTAMP) {
991 1.2 itojun struct timeval tv;
992 1.2 itojun
993 1.2 itojun microtime(&tv);
994 1.2 itojun *mp = sbcreatecontrol((caddr_t) &tv, sizeof(tv),
995 1.2 itojun SCM_TIMESTAMP, SOL_SOCKET);
996 1.2 itojun if (*mp)
997 1.2 itojun mp = &(*mp)->m_next;
998 1.2 itojun }
999 1.9 itojun #endif
1000 1.2 itojun if (in6p->in6p_flags & IN6P_RECVDSTADDR) {
1001 1.2 itojun *mp = sbcreatecontrol((caddr_t) &ip6->ip6_dst,
1002 1.2 itojun sizeof(struct in6_addr), IPV6_RECVDSTADDR,
1003 1.2 itojun IPPROTO_IPV6);
1004 1.2 itojun if (*mp)
1005 1.2 itojun mp = &(*mp)->m_next;
1006 1.2 itojun }
1007 1.2 itojun
1008 1.2 itojun #ifdef noyet
1009 1.2 itojun /* options were tossed above */
1010 1.2 itojun if (in6p->in6p_flags & IN6P_RECVOPTS)
1011 1.2 itojun /* broken */
1012 1.2 itojun /* ip6_srcroute doesn't do what we want here, need to fix */
1013 1.2 itojun if (in6p->in6p_flags & IPV6P_RECVRETOPTS)
1014 1.2 itojun /* broken */
1015 1.2 itojun #endif
1016 1.2 itojun
1017 1.2 itojun /* RFC 2292 sec. 5 */
1018 1.2 itojun if (in6p->in6p_flags & IN6P_PKTINFO) {
1019 1.2 itojun struct in6_pktinfo pi6;
1020 1.2 itojun bcopy(&ip6->ip6_dst, &pi6.ipi6_addr, sizeof(struct in6_addr));
1021 1.2 itojun if (IN6_IS_SCOPE_LINKLOCAL(&pi6.ipi6_addr))
1022 1.2 itojun pi6.ipi6_addr.s6_addr16[1] = 0;
1023 1.2 itojun pi6.ipi6_ifindex = (m && m->m_pkthdr.rcvif)
1024 1.2 itojun ? m->m_pkthdr.rcvif->if_index
1025 1.2 itojun : 0;
1026 1.2 itojun *mp = sbcreatecontrol((caddr_t) &pi6,
1027 1.2 itojun sizeof(struct in6_pktinfo), IPV6_PKTINFO,
1028 1.2 itojun IPPROTO_IPV6);
1029 1.2 itojun if (*mp)
1030 1.2 itojun mp = &(*mp)->m_next;
1031 1.2 itojun }
1032 1.2 itojun if (in6p->in6p_flags & IN6P_HOPLIMIT) {
1033 1.2 itojun int hlim = ip6->ip6_hlim & 0xff;
1034 1.2 itojun *mp = sbcreatecontrol((caddr_t) &hlim,
1035 1.2 itojun sizeof(int), IPV6_HOPLIMIT, IPPROTO_IPV6);
1036 1.2 itojun if (*mp)
1037 1.2 itojun mp = &(*mp)->m_next;
1038 1.2 itojun }
1039 1.2 itojun /* IN6P_NEXTHOP - for outgoing packet only */
1040 1.2 itojun
1041 1.2 itojun /*
1042 1.2 itojun * IPV6_HOPOPTS socket option. We require super-user privilege
1043 1.2 itojun * for the option, but it might be too strict, since there might
1044 1.2 itojun * be some hop-by-hop options which can be returned to normal user.
1045 1.2 itojun * See RFC 2292 section 6.
1046 1.2 itojun */
1047 1.9 itojun if ((in6p->in6p_flags & IN6P_HOPOPTS) && privileged) {
1048 1.2 itojun /*
1049 1.2 itojun * Check if a hop-by-hop options header is contatined in the
1050 1.2 itojun * received packet, and if so, store the options as ancillary
1051 1.2 itojun * data. Note that a hop-by-hop options header must be
1052 1.2 itojun * just after the IPv6 header, which fact is assured through
1053 1.2 itojun * the IPv6 input processing.
1054 1.2 itojun */
1055 1.2 itojun struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
1056 1.2 itojun if (ip6->ip6_nxt == IPPROTO_HOPOPTS) {
1057 1.9 itojun struct ip6_hbh *hbh;
1058 1.9 itojun int hbhlen;
1059 1.9 itojun
1060 1.9 itojun #ifndef PULLDOWN_TEST
1061 1.9 itojun hbh = (struct ip6_hbh *)(ip6 + 1);
1062 1.9 itojun hbhlen = (hbh->ip6h_len + 1) << 3;
1063 1.9 itojun #else
1064 1.9 itojun IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m,
1065 1.9 itojun sizeof(struct ip6_hdr), sizeof(struct ip6_hbh));
1066 1.9 itojun if (hbh == NULL) {
1067 1.9 itojun ip6stat.ip6s_tooshort++;
1068 1.9 itojun return;
1069 1.9 itojun }
1070 1.9 itojun hbhlen = (hbh->ip6h_len + 1) << 3;
1071 1.9 itojun IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m,
1072 1.9 itojun sizeof(struct ip6_hdr), hbhlen);
1073 1.9 itojun if (hbh == NULL) {
1074 1.9 itojun ip6stat.ip6s_tooshort++;
1075 1.9 itojun return;
1076 1.9 itojun }
1077 1.9 itojun #endif
1078 1.2 itojun
1079 1.2 itojun /*
1080 1.2 itojun * XXX: We copy whole the header even if a jumbo
1081 1.2 itojun * payload option is included, which option is to
1082 1.2 itojun * be removed before returning in the RFC 2292.
1083 1.2 itojun * But it's too painful operation...
1084 1.2 itojun */
1085 1.9 itojun *mp = sbcreatecontrol((caddr_t)hbh, hbhlen,
1086 1.2 itojun IPV6_HOPOPTS, IPPROTO_IPV6);
1087 1.2 itojun if (*mp)
1088 1.2 itojun mp = &(*mp)->m_next;
1089 1.2 itojun }
1090 1.2 itojun }
1091 1.2 itojun
1092 1.2 itojun /* IPV6_DSTOPTS and IPV6_RTHDR socket options */
1093 1.2 itojun if (in6p->in6p_flags & (IN6P_DSTOPTS | IN6P_RTHDR)) {
1094 1.2 itojun struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
1095 1.2 itojun int nxt = ip6->ip6_nxt, off = sizeof(struct ip6_hdr);;
1096 1.2 itojun
1097 1.2 itojun /*
1098 1.2 itojun * Search for destination options headers or routing
1099 1.2 itojun * header(s) through the header chain, and stores each
1100 1.2 itojun * header as ancillary data.
1101 1.2 itojun * Note that the order of the headers remains in
1102 1.2 itojun * the chain of ancillary data.
1103 1.2 itojun */
1104 1.2 itojun while(1) { /* is explicit loop prevention necessary? */
1105 1.9 itojun struct ip6_ext *ip6e;
1106 1.9 itojun int elen;
1107 1.9 itojun
1108 1.9 itojun #ifndef PULLDOWN_TEST
1109 1.9 itojun ip6e = (struct ip6_ext *)(mtod(m, caddr_t) + off);
1110 1.9 itojun if (nxt == IPPROTO_AH)
1111 1.9 itojun elen = (ip6e->ip6e_len + 2) << 2;
1112 1.9 itojun else
1113 1.9 itojun elen = (ip6e->ip6e_len + 1) << 3;
1114 1.9 itojun #else
1115 1.9 itojun IP6_EXTHDR_GET(ip6e, struct ip6_ext *, m, off,
1116 1.9 itojun sizeof(struct ip6_ext));
1117 1.9 itojun if (ip6e == NULL) {
1118 1.9 itojun ip6stat.ip6s_tooshort++;
1119 1.9 itojun return;
1120 1.9 itojun }
1121 1.9 itojun if (nxt == IPPROTO_AH)
1122 1.9 itojun elen = (ip6e->ip6e_len + 2) << 2;
1123 1.9 itojun else
1124 1.9 itojun elen = (ip6e->ip6e_len + 1) << 3;
1125 1.9 itojun IP6_EXTHDR_GET(ip6e, struct ip6_ext *, m, off, elen);
1126 1.9 itojun if (ip6e == NULL) {
1127 1.9 itojun ip6stat.ip6s_tooshort++;
1128 1.9 itojun return;
1129 1.9 itojun }
1130 1.9 itojun #endif
1131 1.2 itojun
1132 1.2 itojun switch(nxt) {
1133 1.2 itojun case IPPROTO_DSTOPTS:
1134 1.2 itojun if (!in6p->in6p_flags & IN6P_DSTOPTS)
1135 1.2 itojun break;
1136 1.2 itojun
1137 1.2 itojun /*
1138 1.2 itojun * We also require super-user privilege for
1139 1.2 itojun * the option.
1140 1.2 itojun * See the comments on IN6_HOPOPTS.
1141 1.2 itojun */
1142 1.9 itojun if (!privileged)
1143 1.2 itojun break;
1144 1.2 itojun
1145 1.9 itojun *mp = sbcreatecontrol((caddr_t)ip6e, elen,
1146 1.2 itojun IPV6_DSTOPTS,
1147 1.2 itojun IPPROTO_IPV6);
1148 1.2 itojun if (*mp)
1149 1.2 itojun mp = &(*mp)->m_next;
1150 1.2 itojun break;
1151 1.2 itojun
1152 1.2 itojun case IPPROTO_ROUTING:
1153 1.2 itojun if (!in6p->in6p_flags & IN6P_RTHDR)
1154 1.2 itojun break;
1155 1.2 itojun
1156 1.9 itojun *mp = sbcreatecontrol((caddr_t)ip6e, elen,
1157 1.2 itojun IPV6_RTHDR,
1158 1.2 itojun IPPROTO_IPV6);
1159 1.2 itojun if (*mp)
1160 1.2 itojun mp = &(*mp)->m_next;
1161 1.2 itojun break;
1162 1.2 itojun
1163 1.2 itojun case IPPROTO_UDP:
1164 1.2 itojun case IPPROTO_TCP:
1165 1.2 itojun case IPPROTO_ICMPV6:
1166 1.2 itojun default:
1167 1.2 itojun /*
1168 1.2 itojun * stop search if we encounter an upper
1169 1.2 itojun * layer protocol headers.
1170 1.2 itojun */
1171 1.2 itojun goto loopend;
1172 1.2 itojun
1173 1.2 itojun case IPPROTO_HOPOPTS:
1174 1.2 itojun case IPPROTO_AH: /* is it possible? */
1175 1.2 itojun break;
1176 1.2 itojun }
1177 1.2 itojun
1178 1.2 itojun /* proceed with the next header. */
1179 1.9 itojun off += elen;
1180 1.2 itojun nxt = ip6e->ip6e_nxt;
1181 1.2 itojun }
1182 1.2 itojun loopend:
1183 1.2 itojun }
1184 1.9 itojun if ((in6p->in6p_flags & IN6P_HOPOPTS) && privileged) {
1185 1.2 itojun /* to be done */
1186 1.2 itojun }
1187 1.9 itojun if ((in6p->in6p_flags & IN6P_DSTOPTS) && privileged) {
1188 1.2 itojun /* to be done */
1189 1.2 itojun }
1190 1.2 itojun /* IN6P_RTHDR - to be done */
1191 1.2 itojun
1192 1.2 itojun }
1193 1.2 itojun
1194 1.2 itojun /*
1195 1.2 itojun * Get pointer to the previous header followed by the header
1196 1.2 itojun * currently processed.
1197 1.2 itojun * XXX: This function supposes that
1198 1.2 itojun * M includes all headers,
1199 1.2 itojun * the next header field and the header length field of each header
1200 1.2 itojun * are valid, and
1201 1.2 itojun * the sum of each header length equals to OFF.
1202 1.2 itojun * Because of these assumptions, this function must be called very
1203 1.2 itojun * carefully. Moreover, it will not be used in the near future when
1204 1.2 itojun * we develop `neater' mechanism to process extension headers.
1205 1.2 itojun */
1206 1.2 itojun char *
1207 1.2 itojun ip6_get_prevhdr(m, off)
1208 1.2 itojun struct mbuf *m;
1209 1.2 itojun int off;
1210 1.2 itojun {
1211 1.2 itojun struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
1212 1.2 itojun
1213 1.2 itojun if (off == sizeof(struct ip6_hdr))
1214 1.2 itojun return(&ip6->ip6_nxt);
1215 1.2 itojun else {
1216 1.2 itojun int len, nxt;
1217 1.2 itojun struct ip6_ext *ip6e = NULL;
1218 1.2 itojun
1219 1.2 itojun nxt = ip6->ip6_nxt;
1220 1.2 itojun len = sizeof(struct ip6_hdr);
1221 1.2 itojun while (len < off) {
1222 1.2 itojun ip6e = (struct ip6_ext *)(mtod(m, caddr_t) + len);
1223 1.2 itojun
1224 1.2 itojun switch(nxt) {
1225 1.2 itojun case IPPROTO_FRAGMENT:
1226 1.2 itojun len += sizeof(struct ip6_frag);
1227 1.2 itojun break;
1228 1.2 itojun case IPPROTO_AH:
1229 1.2 itojun len += (ip6e->ip6e_len + 2) << 2;
1230 1.2 itojun break;
1231 1.2 itojun default:
1232 1.2 itojun len += (ip6e->ip6e_len + 1) << 3;
1233 1.2 itojun break;
1234 1.2 itojun }
1235 1.2 itojun nxt = ip6e->ip6e_nxt;
1236 1.2 itojun }
1237 1.2 itojun if (ip6e)
1238 1.2 itojun return(&ip6e->ip6e_nxt);
1239 1.2 itojun else
1240 1.2 itojun return NULL;
1241 1.18 itojun }
1242 1.18 itojun }
1243 1.18 itojun
1244 1.18 itojun /*
1245 1.18 itojun * get next header offset. m will be retained.
1246 1.18 itojun */
1247 1.18 itojun int
1248 1.18 itojun ip6_nexthdr(m, off, proto, nxtp)
1249 1.18 itojun struct mbuf *m;
1250 1.18 itojun int off;
1251 1.18 itojun int proto;
1252 1.18 itojun int *nxtp;
1253 1.18 itojun {
1254 1.18 itojun struct ip6_hdr ip6;
1255 1.18 itojun struct ip6_ext ip6e;
1256 1.18 itojun struct ip6_frag fh;
1257 1.18 itojun
1258 1.18 itojun /* just in case */
1259 1.18 itojun if (m == NULL)
1260 1.18 itojun panic("ip6_nexthdr: m == NULL");
1261 1.18 itojun if ((m->m_flags & M_PKTHDR) == 0 || m->m_pkthdr.len < off)
1262 1.18 itojun return -1;
1263 1.18 itojun
1264 1.18 itojun switch (proto) {
1265 1.18 itojun case IPPROTO_IPV6:
1266 1.18 itojun if (m->m_pkthdr.len < off + sizeof(ip6))
1267 1.18 itojun return -1;
1268 1.18 itojun m_copydata(m, off, sizeof(ip6), (caddr_t)&ip6);
1269 1.18 itojun if (nxtp)
1270 1.18 itojun *nxtp = ip6.ip6_nxt;
1271 1.18 itojun off += sizeof(ip6);
1272 1.18 itojun return off;
1273 1.18 itojun
1274 1.18 itojun case IPPROTO_FRAGMENT:
1275 1.18 itojun /*
1276 1.18 itojun * terminate parsing if it is not the first fragment,
1277 1.18 itojun * it does not make sense to parse through it.
1278 1.18 itojun */
1279 1.18 itojun if (m->m_pkthdr.len < off + sizeof(fh))
1280 1.18 itojun return -1;
1281 1.18 itojun m_copydata(m, off, sizeof(fh), (caddr_t)&fh);
1282 1.18 itojun if ((ntohs(fh.ip6f_offlg) & IP6F_OFF_MASK) != 0)
1283 1.18 itojun return -1;
1284 1.18 itojun if (nxtp)
1285 1.18 itojun *nxtp = fh.ip6f_nxt;
1286 1.18 itojun off += sizeof(struct ip6_frag);
1287 1.18 itojun return off;
1288 1.18 itojun
1289 1.18 itojun case IPPROTO_AH:
1290 1.18 itojun if (m->m_pkthdr.len < off + sizeof(ip6e))
1291 1.18 itojun return -1;
1292 1.18 itojun m_copydata(m, off, sizeof(ip6e), (caddr_t)&ip6e);
1293 1.18 itojun if (nxtp)
1294 1.18 itojun *nxtp = ip6e.ip6e_nxt;
1295 1.18 itojun off += (ip6e.ip6e_len + 2) << 2;
1296 1.18 itojun return off;
1297 1.18 itojun
1298 1.18 itojun case IPPROTO_HOPOPTS:
1299 1.18 itojun case IPPROTO_ROUTING:
1300 1.18 itojun case IPPROTO_DSTOPTS:
1301 1.18 itojun if (m->m_pkthdr.len < off + sizeof(ip6e))
1302 1.18 itojun return -1;
1303 1.18 itojun m_copydata(m, off, sizeof(ip6e), (caddr_t)&ip6e);
1304 1.18 itojun if (nxtp)
1305 1.18 itojun *nxtp = ip6e.ip6e_nxt;
1306 1.18 itojun off += (ip6e.ip6e_len + 1) << 3;
1307 1.18 itojun return off;
1308 1.18 itojun
1309 1.18 itojun case IPPROTO_NONE:
1310 1.18 itojun case IPPROTO_ESP:
1311 1.18 itojun case IPPROTO_IPCOMP:
1312 1.18 itojun /* give up */
1313 1.18 itojun return -1;
1314 1.18 itojun
1315 1.18 itojun default:
1316 1.18 itojun return -1;
1317 1.18 itojun }
1318 1.18 itojun
1319 1.18 itojun return -1;
1320 1.18 itojun }
1321 1.18 itojun
1322 1.18 itojun /*
1323 1.18 itojun * get offset for the last header in the chain. m will be kept untainted.
1324 1.18 itojun */
1325 1.18 itojun int
1326 1.18 itojun ip6_lasthdr(m, off, proto, nxtp)
1327 1.18 itojun struct mbuf *m;
1328 1.18 itojun int off;
1329 1.18 itojun int proto;
1330 1.18 itojun int *nxtp;
1331 1.18 itojun {
1332 1.18 itojun int newoff;
1333 1.18 itojun int nxt;
1334 1.18 itojun
1335 1.18 itojun if (!nxtp) {
1336 1.18 itojun nxt = -1;
1337 1.18 itojun nxtp = &nxt;
1338 1.18 itojun }
1339 1.18 itojun while (1) {
1340 1.18 itojun newoff = ip6_nexthdr(m, off, proto, nxtp);
1341 1.18 itojun if (newoff < 0)
1342 1.18 itojun return off;
1343 1.18 itojun else if (newoff < off)
1344 1.18 itojun return -1; /* invalid */
1345 1.18 itojun else if (newoff == off)
1346 1.18 itojun return newoff;
1347 1.18 itojun
1348 1.18 itojun off = newoff;
1349 1.18 itojun proto = *nxtp;
1350 1.2 itojun }
1351 1.2 itojun }
1352 1.2 itojun
1353 1.2 itojun /*
1354 1.2 itojun * System control for IP6
1355 1.2 itojun */
1356 1.2 itojun
1357 1.2 itojun u_char inet6ctlerrmap[PRC_NCMDS] = {
1358 1.2 itojun 0, 0, 0, 0,
1359 1.2 itojun 0, EMSGSIZE, EHOSTDOWN, EHOSTUNREACH,
1360 1.2 itojun EHOSTUNREACH, EHOSTUNREACH, ECONNREFUSED, ECONNREFUSED,
1361 1.2 itojun EMSGSIZE, EHOSTUNREACH, 0, 0,
1362 1.2 itojun 0, 0, 0, 0,
1363 1.2 itojun ENOPROTOOPT
1364 1.2 itojun };
1365 1.2 itojun
1366 1.23 mrg #include <uvm/uvm_extern.h>
1367 1.2 itojun #include <sys/sysctl.h>
1368 1.2 itojun
1369 1.2 itojun int
1370 1.2 itojun ip6_sysctl(name, namelen, oldp, oldlenp, newp, newlen)
1371 1.2 itojun int *name;
1372 1.2 itojun u_int namelen;
1373 1.2 itojun void *oldp;
1374 1.2 itojun size_t *oldlenp;
1375 1.2 itojun void *newp;
1376 1.2 itojun size_t newlen;
1377 1.2 itojun {
1378 1.26 itojun int old, error;
1379 1.26 itojun
1380 1.2 itojun /* All sysctl names at this level are terminal. */
1381 1.2 itojun if (namelen != 1)
1382 1.2 itojun return ENOTDIR;
1383 1.2 itojun
1384 1.2 itojun switch (name[0]) {
1385 1.2 itojun
1386 1.2 itojun case IPV6CTL_FORWARDING:
1387 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1388 1.2 itojun &ip6_forwarding);
1389 1.2 itojun case IPV6CTL_SENDREDIRECTS:
1390 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1391 1.2 itojun &ip6_sendredirects);
1392 1.2 itojun case IPV6CTL_DEFHLIM:
1393 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen, &ip6_defhlim);
1394 1.2 itojun case IPV6CTL_MAXFRAGPACKETS:
1395 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1396 1.2 itojun &ip6_maxfragpackets);
1397 1.2 itojun case IPV6CTL_ACCEPT_RTADV:
1398 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1399 1.2 itojun &ip6_accept_rtadv);
1400 1.2 itojun case IPV6CTL_KEEPFAITH:
1401 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen, &ip6_keepfaith);
1402 1.2 itojun case IPV6CTL_LOG_INTERVAL:
1403 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1404 1.2 itojun &ip6_log_interval);
1405 1.2 itojun case IPV6CTL_HDRNESTLIMIT:
1406 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1407 1.2 itojun &ip6_hdrnestlimit);
1408 1.2 itojun case IPV6CTL_DAD_COUNT:
1409 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen, &ip6_dad_count);
1410 1.2 itojun case IPV6CTL_AUTO_FLOWLABEL:
1411 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1412 1.2 itojun &ip6_auto_flowlabel);
1413 1.2 itojun case IPV6CTL_DEFMCASTHLIM:
1414 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1415 1.2 itojun &ip6_defmcasthlim);
1416 1.2 itojun case IPV6CTL_GIF_HLIM:
1417 1.2 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1418 1.2 itojun &ip6_gif_hlim);
1419 1.2 itojun case IPV6CTL_KAME_VERSION:
1420 1.2 itojun return sysctl_rdstring(oldp, oldlenp, newp, __KAME_VERSION);
1421 1.9 itojun case IPV6CTL_USE_DEPRECATED:
1422 1.9 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1423 1.9 itojun &ip6_use_deprecated);
1424 1.10 itojun case IPV6CTL_RR_PRUNE:
1425 1.10 itojun return sysctl_int(oldp, oldlenp, newp, newlen, &ip6_rr_prune);
1426 1.12 itojun #ifndef INET6_BINDV6ONLY
1427 1.11 itojun case IPV6CTL_BINDV6ONLY:
1428 1.11 itojun return sysctl_int(oldp, oldlenp, newp, newlen,
1429 1.11 itojun &ip6_bindv6only);
1430 1.26 itojun #endif
1431 1.26 itojun case IPV6CTL_ANONPORTMIN:
1432 1.26 itojun old = ip6_anonportmin;
1433 1.26 itojun error = sysctl_int(oldp, oldlenp, newp, newlen,
1434 1.26 itojun &ip6_anonportmin);
1435 1.26 itojun if (ip6_anonportmin >= ip6_anonportmax || ip6_anonportmin < 0 ||
1436 1.26 itojun ip6_anonportmin > 65535
1437 1.26 itojun #ifndef IPNOPRIVPORTS
1438 1.26 itojun || ip6_anonportmin < IPV6PORT_RESERVED
1439 1.26 itojun #endif
1440 1.26 itojun ) {
1441 1.26 itojun ip6_anonportmin = old;
1442 1.26 itojun return (EINVAL);
1443 1.26 itojun }
1444 1.26 itojun return (error);
1445 1.26 itojun case IPV6CTL_ANONPORTMAX:
1446 1.26 itojun old = ip6_anonportmax;
1447 1.26 itojun error = sysctl_int(oldp, oldlenp, newp, newlen,
1448 1.26 itojun &ip6_anonportmax);
1449 1.26 itojun if (ip6_anonportmin >= ip6_anonportmax || ip6_anonportmax < 0 ||
1450 1.26 itojun ip6_anonportmax > 65535
1451 1.26 itojun #ifndef IPNOPRIVPORTS
1452 1.26 itojun || ip6_anonportmax < IPV6PORT_RESERVED
1453 1.26 itojun #endif
1454 1.26 itojun ) {
1455 1.26 itojun ip6_anonportmax = old;
1456 1.26 itojun return (EINVAL);
1457 1.26 itojun }
1458 1.26 itojun return (error);
1459 1.26 itojun #ifndef IPNOPRIVPORTS
1460 1.26 itojun case IPV6CTL_LOWPORTMIN:
1461 1.26 itojun old = ip6_lowportmin;
1462 1.26 itojun error = sysctl_int(oldp, oldlenp, newp, newlen,
1463 1.26 itojun &ip6_lowportmin);
1464 1.26 itojun if (ip6_lowportmin >= ip6_lowportmax ||
1465 1.26 itojun ip6_lowportmin > IPV6PORT_RESERVEDMAX ||
1466 1.26 itojun ip6_lowportmin < IPV6PORT_RESERVEDMIN) {
1467 1.26 itojun ip6_lowportmin = old;
1468 1.26 itojun return (EINVAL);
1469 1.26 itojun }
1470 1.26 itojun return (error);
1471 1.26 itojun case IPV6CTL_LOWPORTMAX:
1472 1.26 itojun old = ip6_lowportmax;
1473 1.26 itojun error = sysctl_int(oldp, oldlenp, newp, newlen,
1474 1.26 itojun &ip6_lowportmax);
1475 1.26 itojun if (ip6_lowportmin >= ip6_lowportmax ||
1476 1.26 itojun ip6_lowportmax > IPV6PORT_RESERVEDMAX ||
1477 1.26 itojun ip6_lowportmax < IPV6PORT_RESERVEDMIN) {
1478 1.26 itojun ip6_lowportmax = old;
1479 1.26 itojun return (EINVAL);
1480 1.26 itojun }
1481 1.26 itojun return (error);
1482 1.11 itojun #endif
1483 1.2 itojun default:
1484 1.2 itojun return EOPNOTSUPP;
1485 1.2 itojun }
1486 1.2 itojun /* NOTREACHED */
1487 1.2 itojun }
1488