ip6_input.c revision 1.90 1 1.90 christos /* $NetBSD: ip6_input.c,v 1.90 2006/11/16 01:33:45 christos Exp $ */
2 1.40 itojun /* $KAME: ip6_input.c,v 1.188 2001/03/29 05:34:31 itojun Exp $ */
3 1.3 thorpej
4 1.2 itojun /*
5 1.2 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6 1.2 itojun * All rights reserved.
7 1.21 itojun *
8 1.2 itojun * Redistribution and use in source and binary forms, with or without
9 1.2 itojun * modification, are permitted provided that the following conditions
10 1.2 itojun * are met:
11 1.2 itojun * 1. Redistributions of source code must retain the above copyright
12 1.2 itojun * notice, this list of conditions and the following disclaimer.
13 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
14 1.2 itojun * notice, this list of conditions and the following disclaimer in the
15 1.2 itojun * documentation and/or other materials provided with the distribution.
16 1.2 itojun * 3. Neither the name of the project nor the names of its contributors
17 1.2 itojun * may be used to endorse or promote products derived from this software
18 1.2 itojun * without specific prior written permission.
19 1.21 itojun *
20 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.2 itojun * SUCH DAMAGE.
31 1.2 itojun */
32 1.2 itojun
33 1.2 itojun /*
34 1.2 itojun * Copyright (c) 1982, 1986, 1988, 1993
35 1.2 itojun * The Regents of the University of California. All rights reserved.
36 1.2 itojun *
37 1.2 itojun * Redistribution and use in source and binary forms, with or without
38 1.2 itojun * modification, are permitted provided that the following conditions
39 1.2 itojun * are met:
40 1.2 itojun * 1. Redistributions of source code must retain the above copyright
41 1.2 itojun * notice, this list of conditions and the following disclaimer.
42 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
43 1.2 itojun * notice, this list of conditions and the following disclaimer in the
44 1.2 itojun * documentation and/or other materials provided with the distribution.
45 1.65 agc * 3. Neither the name of the University nor the names of its contributors
46 1.2 itojun * may be used to endorse or promote products derived from this software
47 1.2 itojun * without specific prior written permission.
48 1.2 itojun *
49 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
50 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
51 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
52 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
53 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
54 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
55 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
56 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
57 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
58 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
59 1.2 itojun * SUCH DAMAGE.
60 1.2 itojun *
61 1.2 itojun * @(#)ip_input.c 8.2 (Berkeley) 1/4/94
62 1.2 itojun */
63 1.48 lukem
64 1.48 lukem #include <sys/cdefs.h>
65 1.90 christos __KERNEL_RCSID(0, "$NetBSD: ip6_input.c,v 1.90 2006/11/16 01:33:45 christos Exp $");
66 1.2 itojun
67 1.2 itojun #include "opt_inet.h"
68 1.85 rpaulo #include "opt_inet6.h"
69 1.4 thorpej #include "opt_ipsec.h"
70 1.15 darrenr #include "opt_pfil_hooks.h"
71 1.2 itojun
72 1.2 itojun #include <sys/param.h>
73 1.2 itojun #include <sys/systm.h>
74 1.2 itojun #include <sys/malloc.h>
75 1.2 itojun #include <sys/mbuf.h>
76 1.2 itojun #include <sys/domain.h>
77 1.2 itojun #include <sys/protosw.h>
78 1.2 itojun #include <sys/socket.h>
79 1.2 itojun #include <sys/socketvar.h>
80 1.2 itojun #include <sys/errno.h>
81 1.2 itojun #include <sys/time.h>
82 1.2 itojun #include <sys/kernel.h>
83 1.2 itojun #include <sys/syslog.h>
84 1.2 itojun #include <sys/proc.h>
85 1.46 simonb #include <sys/sysctl.h>
86 1.2 itojun
87 1.2 itojun #include <net/if.h>
88 1.2 itojun #include <net/if_types.h>
89 1.2 itojun #include <net/if_dl.h>
90 1.2 itojun #include <net/route.h>
91 1.2 itojun #include <net/netisr.h>
92 1.15 darrenr #ifdef PFIL_HOOKS
93 1.15 darrenr #include <net/pfil.h>
94 1.15 darrenr #endif
95 1.2 itojun
96 1.2 itojun #include <netinet/in.h>
97 1.9 itojun #include <netinet/in_systm.h>
98 1.9 itojun #ifdef INET
99 1.9 itojun #include <netinet/ip.h>
100 1.9 itojun #include <netinet/ip_icmp.h>
101 1.45 itojun #endif /* INET */
102 1.14 itojun #include <netinet/ip6.h>
103 1.2 itojun #include <netinet6/in6_var.h>
104 1.11 itojun #include <netinet6/ip6_var.h>
105 1.2 itojun #include <netinet6/in6_pcb.h>
106 1.14 itojun #include <netinet/icmp6.h>
107 1.81 rpaulo #include <netinet6/scope6_var.h>
108 1.2 itojun #include <netinet6/in6_ifattach.h>
109 1.2 itojun #include <netinet6/nd6.h>
110 1.2 itojun
111 1.37 itojun #ifdef IPSEC
112 1.37 itojun #include <netinet6/ipsec.h>
113 1.37 itojun #endif
114 1.37 itojun
115 1.2 itojun #include <netinet6/ip6protosw.h>
116 1.2 itojun
117 1.2 itojun #include "faith.h"
118 1.2 itojun #include "gif.h"
119 1.50 itojun
120 1.50 itojun #if NGIF > 0
121 1.50 itojun #include <netinet6/in6_gif.h>
122 1.50 itojun #endif
123 1.2 itojun
124 1.9 itojun #include <net/net_osdep.h>
125 1.9 itojun
126 1.2 itojun extern struct domain inet6domain;
127 1.2 itojun
128 1.2 itojun u_char ip6_protox[IPPROTO_MAX];
129 1.2 itojun static int ip6qmaxlen = IFQ_MAXLEN;
130 1.2 itojun struct in6_ifaddr *in6_ifaddr;
131 1.2 itojun struct ifqueue ip6intrq;
132 1.2 itojun
133 1.83 rpaulo extern struct callout in6_tmpaddrtimer_ch;
134 1.83 rpaulo
135 1.2 itojun int ip6_forward_srcrt; /* XXX */
136 1.2 itojun int ip6_sourcecheck; /* XXX */
137 1.2 itojun int ip6_sourcecheck_interval; /* XXX */
138 1.9 itojun
139 1.29 thorpej #ifdef PFIL_HOOKS
140 1.29 thorpej struct pfil_head inet6_pfil_hook;
141 1.29 thorpej #endif
142 1.29 thorpej
143 1.2 itojun struct ip6stat ip6stat;
144 1.2 itojun
145 1.2 itojun static void ip6_init2 __P((void *));
146 1.81 rpaulo static struct m_tag *ip6_setdstifaddr __P((struct mbuf *, struct in6_ifaddr *));
147 1.2 itojun
148 1.5 itojun static int ip6_hopopts_input __P((u_int32_t *, u_int32_t *, struct mbuf **, int *));
149 1.62 itojun static struct mbuf *ip6_pullexthdr __P((struct mbuf *, size_t, int));
150 1.2 itojun
151 1.2 itojun /*
152 1.2 itojun * IP6 initialization: fill in IP6 protocol switch table.
153 1.2 itojun * All protocols not implemented in kernel go to raw IP6 protocol handler.
154 1.2 itojun */
155 1.2 itojun void
156 1.2 itojun ip6_init()
157 1.2 itojun {
158 1.78 christos const struct ip6protosw *pr;
159 1.35 itojun int i;
160 1.2 itojun
161 1.78 christos pr = (const struct ip6protosw *)pffindproto(PF_INET6, IPPROTO_RAW, SOCK_RAW);
162 1.2 itojun if (pr == 0)
163 1.2 itojun panic("ip6_init");
164 1.2 itojun for (i = 0; i < IPPROTO_MAX; i++)
165 1.2 itojun ip6_protox[i] = pr - inet6sw;
166 1.78 christos for (pr = (const struct ip6protosw *)inet6domain.dom_protosw;
167 1.78 christos pr < (const struct ip6protosw *)inet6domain.dom_protoswNPROTOSW; pr++)
168 1.2 itojun if (pr->pr_domain->dom_family == PF_INET6 &&
169 1.2 itojun pr->pr_protocol && pr->pr_protocol != IPPROTO_RAW)
170 1.2 itojun ip6_protox[pr->pr_protocol] = pr - inet6sw;
171 1.2 itojun ip6intrq.ifq_maxlen = ip6qmaxlen;
172 1.81 rpaulo scope6_init();
173 1.81 rpaulo addrsel_policy_init();
174 1.2 itojun nd6_init();
175 1.2 itojun frag6_init();
176 1.83 rpaulo ip6_desync_factor = arc4random() % MAX_TEMP_DESYNC_FACTOR;
177 1.2 itojun
178 1.2 itojun ip6_init2((void *)0);
179 1.29 thorpej
180 1.29 thorpej #ifdef PFIL_HOOKS
181 1.29 thorpej /* Register our Packet Filter hook. */
182 1.33 thorpej inet6_pfil_hook.ph_type = PFIL_TYPE_AF;
183 1.33 thorpej inet6_pfil_hook.ph_af = AF_INET6;
184 1.29 thorpej i = pfil_head_register(&inet6_pfil_hook);
185 1.29 thorpej if (i != 0)
186 1.29 thorpej printf("ip6_init: WARNING: unable to register pfil hook, "
187 1.29 thorpej "error %d\n", i);
188 1.29 thorpej #endif /* PFIL_HOOKS */
189 1.2 itojun }
190 1.2 itojun
191 1.2 itojun static void
192 1.90 christos ip6_init2(void *dummy)
193 1.2 itojun {
194 1.2 itojun
195 1.2 itojun /* nd6_timer_init */
196 1.19 thorpej callout_init(&nd6_timer_ch);
197 1.19 thorpej callout_reset(&nd6_timer_ch, hz, nd6_timer, NULL);
198 1.83 rpaulo
199 1.83 rpaulo /* timer for regeneranation of temporary addresses randomize ID */
200 1.83 rpaulo callout_init(&in6_tmpaddrtimer_ch);
201 1.83 rpaulo callout_reset(&in6_tmpaddrtimer_ch,
202 1.83 rpaulo (ip6_temp_preferred_lifetime - ip6_desync_factor -
203 1.83 rpaulo ip6_temp_regen_advance) * hz,
204 1.83 rpaulo in6_tmpaddrtimer, NULL);
205 1.2 itojun }
206 1.2 itojun
207 1.2 itojun /*
208 1.2 itojun * IP6 input interrupt handling. Just pass the packet to ip6_input.
209 1.2 itojun */
210 1.2 itojun void
211 1.2 itojun ip6intr()
212 1.2 itojun {
213 1.2 itojun int s;
214 1.2 itojun struct mbuf *m;
215 1.2 itojun
216 1.2 itojun for (;;) {
217 1.41 thorpej s = splnet();
218 1.2 itojun IF_DEQUEUE(&ip6intrq, m);
219 1.2 itojun splx(s);
220 1.2 itojun if (m == 0)
221 1.2 itojun return;
222 1.83 rpaulo /* drop the packet if IPv6 operation is disabled on the IF */
223 1.83 rpaulo if ((ND_IFINFO(m->m_pkthdr.rcvif)->flags & ND6_IFF_IFDISABLED)) {
224 1.83 rpaulo m_freem(m);
225 1.83 rpaulo return;
226 1.83 rpaulo }
227 1.2 itojun ip6_input(m);
228 1.2 itojun }
229 1.2 itojun }
230 1.2 itojun
231 1.2 itojun extern struct route_in6 ip6_forward_rt;
232 1.2 itojun
233 1.2 itojun void
234 1.2 itojun ip6_input(m)
235 1.2 itojun struct mbuf *m;
236 1.2 itojun {
237 1.9 itojun struct ip6_hdr *ip6;
238 1.2 itojun int off = sizeof(struct ip6_hdr), nest;
239 1.2 itojun u_int32_t plen;
240 1.5 itojun u_int32_t rtalert = ~0;
241 1.2 itojun int nxt, ours = 0;
242 1.9 itojun struct ifnet *deliverifp = NULL;
243 1.64 itojun int srcrt = 0;
244 1.2 itojun
245 1.2 itojun #ifdef IPSEC
246 1.2 itojun /*
247 1.2 itojun * should the inner packet be considered authentic?
248 1.2 itojun * see comment in ah4_input().
249 1.2 itojun */
250 1.49 itojun m->m_flags &= ~M_AUTHIPHDR;
251 1.49 itojun m->m_flags &= ~M_AUTHIPDGM;
252 1.2 itojun #endif
253 1.9 itojun
254 1.2 itojun /*
255 1.81 rpaulo * make sure we don't have onion peering information into m_tag.
256 1.81 rpaulo */
257 1.81 rpaulo ip6_delaux(m);
258 1.81 rpaulo
259 1.81 rpaulo /*
260 1.44 itojun * mbuf statistics
261 1.2 itojun */
262 1.2 itojun if (m->m_flags & M_EXT) {
263 1.2 itojun if (m->m_next)
264 1.2 itojun ip6stat.ip6s_mext2m++;
265 1.2 itojun else
266 1.2 itojun ip6stat.ip6s_mext1++;
267 1.2 itojun } else {
268 1.40 itojun #define M2MMAX (sizeof(ip6stat.ip6s_m2m)/sizeof(ip6stat.ip6s_m2m[0]))
269 1.2 itojun if (m->m_next) {
270 1.9 itojun if (m->m_flags & M_LOOP) {
271 1.77 peter ip6stat.ip6s_m2m[lo0ifp->if_index]++; /* XXX */
272 1.40 itojun } else if (m->m_pkthdr.rcvif->if_index < M2MMAX)
273 1.2 itojun ip6stat.ip6s_m2m[m->m_pkthdr.rcvif->if_index]++;
274 1.2 itojun else
275 1.2 itojun ip6stat.ip6s_m2m[0]++;
276 1.2 itojun } else
277 1.2 itojun ip6stat.ip6s_m1++;
278 1.40 itojun #undef M2MMAX
279 1.2 itojun }
280 1.2 itojun
281 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_receive);
282 1.9 itojun ip6stat.ip6s_total++;
283 1.9 itojun
284 1.57 thorpej /*
285 1.57 thorpej * If the IPv6 header is not aligned, slurp it up into a new
286 1.57 thorpej * mbuf with space for link headers, in the event we forward
287 1.81 rpaulo * it. Otherwise, if it is aligned, make sure the entire base
288 1.57 thorpej * IPv6 header is in the first mbuf of the chain.
289 1.57 thorpej */
290 1.57 thorpej if (IP6_HDR_ALIGNED_P(mtod(m, caddr_t)) == 0) {
291 1.57 thorpej struct ifnet *inifp = m->m_pkthdr.rcvif;
292 1.57 thorpej if ((m = m_copyup(m, sizeof(struct ip6_hdr),
293 1.57 thorpej (max_linkhdr + 3) & ~3)) == NULL) {
294 1.57 thorpej /* XXXJRT new stat, please */
295 1.57 thorpej ip6stat.ip6s_toosmall++;
296 1.57 thorpej in6_ifstat_inc(inifp, ifs6_in_hdrerr);
297 1.57 thorpej return;
298 1.57 thorpej }
299 1.57 thorpej } else if (__predict_false(m->m_len < sizeof(struct ip6_hdr))) {
300 1.57 thorpej struct ifnet *inifp = m->m_pkthdr.rcvif;
301 1.55 itojun if ((m = m_pullup(m, sizeof(struct ip6_hdr))) == NULL) {
302 1.9 itojun ip6stat.ip6s_toosmall++;
303 1.9 itojun in6_ifstat_inc(inifp, ifs6_in_hdrerr);
304 1.9 itojun return;
305 1.9 itojun }
306 1.2 itojun }
307 1.2 itojun
308 1.2 itojun ip6 = mtod(m, struct ip6_hdr *);
309 1.2 itojun
310 1.2 itojun if ((ip6->ip6_vfc & IPV6_VERSION_MASK) != IPV6_VERSION) {
311 1.2 itojun ip6stat.ip6s_badvers++;
312 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_hdrerr);
313 1.2 itojun goto bad;
314 1.2 itojun }
315 1.15 darrenr
316 1.15 darrenr #ifdef PFIL_HOOKS
317 1.15 darrenr /*
318 1.15 darrenr * Run through list of hooks for input packets. If there are any
319 1.15 darrenr * filters which require that additional packets in the flow are
320 1.15 darrenr * not fast-forwarded, they must clear the M_CANFASTFWD flag.
321 1.15 darrenr * Note that filters must _never_ set this flag, as another filter
322 1.15 darrenr * in the list may have previously cleared it.
323 1.15 darrenr */
324 1.39 itojun /*
325 1.39 itojun * let ipfilter look at packet on the wire,
326 1.39 itojun * not the decapsulated packet.
327 1.39 itojun */
328 1.39 itojun #ifdef IPSEC
329 1.42 itojun if (!ipsec_getnhist(m))
330 1.39 itojun #else
331 1.39 itojun if (1)
332 1.39 itojun #endif
333 1.39 itojun {
334 1.64 itojun struct in6_addr odst;
335 1.64 itojun
336 1.64 itojun odst = ip6->ip6_dst;
337 1.39 itojun if (pfil_run_hooks(&inet6_pfil_hook, &m, m->m_pkthdr.rcvif,
338 1.39 itojun PFIL_IN) != 0)
339 1.39 itojun return;
340 1.39 itojun if (m == NULL)
341 1.39 itojun return;
342 1.39 itojun ip6 = mtod(m, struct ip6_hdr *);
343 1.64 itojun srcrt = !IN6_ARE_ADDR_EQUAL(&odst, &ip6->ip6_dst);
344 1.39 itojun }
345 1.15 darrenr #endif /* PFIL_HOOKS */
346 1.15 darrenr
347 1.2 itojun ip6stat.ip6s_nxthist[ip6->ip6_nxt]++;
348 1.2 itojun
349 1.30 thorpej #ifdef ALTQ
350 1.30 thorpej if (altq_input != NULL && (*altq_input)(m, AF_INET6) == 0) {
351 1.30 thorpej /* packet is dropped by traffic conditioner */
352 1.30 thorpej return;
353 1.9 itojun }
354 1.9 itojun #endif
355 1.9 itojun
356 1.2 itojun /*
357 1.44 itojun * Check against address spoofing/corruption.
358 1.2 itojun */
359 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_src) ||
360 1.2 itojun IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_dst)) {
361 1.55 itojun /*
362 1.55 itojun * XXX: "badscope" is not very suitable for a multicast source.
363 1.55 itojun */
364 1.2 itojun ip6stat.ip6s_badscope++;
365 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_addrerr);
366 1.2 itojun goto bad;
367 1.2 itojun }
368 1.13 itojun /*
369 1.44 itojun * The following check is not documented in specs. A malicious
370 1.44 itojun * party may be able to use IPv4 mapped addr to confuse tcp/udp stack
371 1.44 itojun * and bypass security checks (act as if it was from 127.0.0.1 by using
372 1.44 itojun * IPv6 src ::ffff:127.0.0.1). Be cautious.
373 1.35 itojun *
374 1.44 itojun * This check chokes if we are in an SIIT cloud. As none of BSDs
375 1.44 itojun * support IPv4-less kernel compilation, we cannot support SIIT
376 1.44 itojun * environment at all. So, it makes more sense for us to reject any
377 1.44 itojun * malicious packets for non-SIIT environment, than try to do a
378 1.52 wiz * partial support for SIIT environment.
379 1.13 itojun */
380 1.13 itojun if (IN6_IS_ADDR_V4MAPPED(&ip6->ip6_src) ||
381 1.13 itojun IN6_IS_ADDR_V4MAPPED(&ip6->ip6_dst)) {
382 1.13 itojun ip6stat.ip6s_badscope++;
383 1.13 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_addrerr);
384 1.13 itojun goto bad;
385 1.13 itojun }
386 1.17 itojun #if 0
387 1.13 itojun /*
388 1.17 itojun * Reject packets with IPv4 compatible addresses (auto tunnel).
389 1.17 itojun *
390 1.17 itojun * The code forbids auto tunnel relay case in RFC1933 (the check is
391 1.17 itojun * stronger than RFC1933). We may want to re-enable it if mech-xx
392 1.17 itojun * is revised to forbid relaying case.
393 1.13 itojun */
394 1.13 itojun if (IN6_IS_ADDR_V4COMPAT(&ip6->ip6_src) ||
395 1.13 itojun IN6_IS_ADDR_V4COMPAT(&ip6->ip6_dst)) {
396 1.13 itojun ip6stat.ip6s_badscope++;
397 1.13 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_addrerr);
398 1.13 itojun goto bad;
399 1.13 itojun }
400 1.13 itojun #endif
401 1.35 itojun
402 1.2 itojun /*
403 1.82 yamt * Disambiguate address scope zones (if there is ambiguity).
404 1.82 yamt * We first make sure that the original source or destination address
405 1.82 yamt * is not in our internal form for scoped addresses. Such addresses
406 1.82 yamt * are not necessarily invalid spec-wise, but we cannot accept them due
407 1.82 yamt * to the usage conflict.
408 1.82 yamt * in6_setscope() then also checks and rejects the cases where src or
409 1.82 yamt * dst are the loopback address and the receiving interface
410 1.82 yamt * is not loopback.
411 1.82 yamt */
412 1.88 bouyer if (__predict_false(
413 1.88 bouyer m_makewritable(&m, 0, sizeof(struct ip6_hdr), M_DONTWAIT)))
414 1.88 bouyer goto bad;
415 1.88 bouyer ip6 = mtod(m, struct ip6_hdr *);
416 1.82 yamt if (in6_clearscope(&ip6->ip6_src) || in6_clearscope(&ip6->ip6_dst)) {
417 1.82 yamt ip6stat.ip6s_badscope++; /* XXX */
418 1.82 yamt goto bad;
419 1.82 yamt }
420 1.82 yamt if (in6_setscope(&ip6->ip6_src, m->m_pkthdr.rcvif, NULL) ||
421 1.82 yamt in6_setscope(&ip6->ip6_dst, m->m_pkthdr.rcvif, NULL)) {
422 1.82 yamt ip6stat.ip6s_badscope++;
423 1.82 yamt goto bad;
424 1.82 yamt }
425 1.82 yamt
426 1.82 yamt /*
427 1.2 itojun * Multicast check
428 1.2 itojun */
429 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
430 1.2 itojun struct in6_multi *in6m = 0;
431 1.9 itojun
432 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_mcast);
433 1.2 itojun /*
434 1.2 itojun * See if we belong to the destination multicast group on the
435 1.2 itojun * arrival interface.
436 1.2 itojun */
437 1.2 itojun IN6_LOOKUP_MULTI(ip6->ip6_dst, m->m_pkthdr.rcvif, in6m);
438 1.2 itojun if (in6m)
439 1.2 itojun ours = 1;
440 1.2 itojun else if (!ip6_mrouter) {
441 1.2 itojun ip6stat.ip6s_notmember++;
442 1.2 itojun ip6stat.ip6s_cantforward++;
443 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_discard);
444 1.2 itojun goto bad;
445 1.2 itojun }
446 1.9 itojun deliverifp = m->m_pkthdr.rcvif;
447 1.2 itojun goto hbhcheck;
448 1.2 itojun }
449 1.2 itojun
450 1.2 itojun /*
451 1.2 itojun * Unicast check
452 1.2 itojun */
453 1.22 itojun if (ip6_forward_rt.ro_rt != NULL &&
454 1.55 itojun (ip6_forward_rt.ro_rt->rt_flags & RTF_UP) != 0 &&
455 1.22 itojun IN6_ARE_ADDR_EQUAL(&ip6->ip6_dst,
456 1.72 itojun &((struct sockaddr_in6 *)(&ip6_forward_rt.ro_dst))->sin6_addr))
457 1.25 itojun ip6stat.ip6s_forward_cachehit++;
458 1.22 itojun else {
459 1.35 itojun struct sockaddr_in6 *dst6;
460 1.35 itojun
461 1.2 itojun if (ip6_forward_rt.ro_rt) {
462 1.22 itojun /* route is down or destination is different */
463 1.25 itojun ip6stat.ip6s_forward_cachemiss++;
464 1.2 itojun RTFREE(ip6_forward_rt.ro_rt);
465 1.2 itojun ip6_forward_rt.ro_rt = 0;
466 1.2 itojun }
467 1.22 itojun
468 1.2 itojun bzero(&ip6_forward_rt.ro_dst, sizeof(struct sockaddr_in6));
469 1.35 itojun dst6 = (struct sockaddr_in6 *)&ip6_forward_rt.ro_dst;
470 1.35 itojun dst6->sin6_len = sizeof(struct sockaddr_in6);
471 1.35 itojun dst6->sin6_family = AF_INET6;
472 1.35 itojun dst6->sin6_addr = ip6->ip6_dst;
473 1.2 itojun
474 1.9 itojun rtalloc((struct route *)&ip6_forward_rt);
475 1.2 itojun }
476 1.2 itojun
477 1.2 itojun #define rt6_key(r) ((struct sockaddr_in6 *)((r)->rt_nodes->rn_key))
478 1.2 itojun
479 1.2 itojun /*
480 1.2 itojun * Accept the packet if the forwarding interface to the destination
481 1.2 itojun * according to the routing table is the loopback interface,
482 1.2 itojun * unless the associated route has a gateway.
483 1.2 itojun * Note that this approach causes to accept a packet if there is a
484 1.2 itojun * route to the loopback interface for the destination of the packet.
485 1.2 itojun * But we think it's even useful in some situations, e.g. when using
486 1.2 itojun * a special daemon which wants to intercept the packet.
487 1.2 itojun */
488 1.2 itojun if (ip6_forward_rt.ro_rt &&
489 1.2 itojun (ip6_forward_rt.ro_rt->rt_flags &
490 1.2 itojun (RTF_HOST|RTF_GATEWAY)) == RTF_HOST &&
491 1.55 itojun !(ip6_forward_rt.ro_rt->rt_flags & RTF_CLONED) &&
492 1.2 itojun #if 0
493 1.2 itojun /*
494 1.2 itojun * The check below is redundant since the comparison of
495 1.2 itojun * the destination and the key of the rtentry has
496 1.2 itojun * already done through looking up the routing table.
497 1.2 itojun */
498 1.2 itojun IN6_ARE_ADDR_EQUAL(&ip6->ip6_dst,
499 1.55 itojun &rt6_key(ip6_forward_rt.ro_rt)->sin6_addr) &&
500 1.2 itojun #endif
501 1.9 itojun ip6_forward_rt.ro_rt->rt_ifp->if_type == IFT_LOOP) {
502 1.2 itojun struct in6_ifaddr *ia6 =
503 1.2 itojun (struct in6_ifaddr *)ip6_forward_rt.ro_rt->rt_ifa;
504 1.2 itojun if (ia6->ia6_flags & IN6_IFF_ANYCAST)
505 1.2 itojun m->m_flags |= M_ANYCAST6;
506 1.24 itojun /*
507 1.24 itojun * packets to a tentative, duplicated, or somehow invalid
508 1.24 itojun * address must not be accepted.
509 1.24 itojun */
510 1.2 itojun if (!(ia6->ia6_flags & IN6_IFF_NOTREADY)) {
511 1.24 itojun /* this address is ready */
512 1.2 itojun ours = 1;
513 1.9 itojun deliverifp = ia6->ia_ifp; /* correct? */
514 1.2 itojun goto hbhcheck;
515 1.2 itojun } else {
516 1.24 itojun /* address is not ready, so discard the packet. */
517 1.34 itojun nd6log((LOG_INFO,
518 1.27 itojun "ip6_input: packet to an unready address %s->%s\n",
519 1.24 itojun ip6_sprintf(&ip6->ip6_src),
520 1.34 itojun ip6_sprintf(&ip6->ip6_dst)));
521 1.24 itojun
522 1.24 itojun goto bad;
523 1.2 itojun }
524 1.2 itojun }
525 1.2 itojun
526 1.2 itojun /*
527 1.55 itojun * FAITH (Firewall Aided Internet Translator)
528 1.2 itojun */
529 1.2 itojun #if defined(NFAITH) && 0 < NFAITH
530 1.2 itojun if (ip6_keepfaith) {
531 1.71 itojun if (ip6_forward_rt.ro_rt && ip6_forward_rt.ro_rt->rt_ifp &&
532 1.71 itojun ip6_forward_rt.ro_rt->rt_ifp->if_type == IFT_FAITH) {
533 1.2 itojun /* XXX do we need more sanity checks? */
534 1.2 itojun ours = 1;
535 1.45 itojun deliverifp = ip6_forward_rt.ro_rt->rt_ifp; /* faith */
536 1.9 itojun goto hbhcheck;
537 1.9 itojun }
538 1.9 itojun }
539 1.9 itojun #endif
540 1.9 itojun
541 1.9 itojun #if 0
542 1.9 itojun {
543 1.9 itojun /*
544 1.9 itojun * Last resort: check in6_ifaddr for incoming interface.
545 1.9 itojun * The code is here until I update the "goto ours hack" code above
546 1.9 itojun * working right.
547 1.9 itojun */
548 1.9 itojun struct ifaddr *ifa;
549 1.9 itojun for (ifa = m->m_pkthdr.rcvif->if_addrlist.tqh_first;
550 1.9 itojun ifa;
551 1.9 itojun ifa = ifa->ifa_list.tqe_next) {
552 1.9 itojun if (ifa->ifa_addr == NULL)
553 1.9 itojun continue; /* just for safety */
554 1.9 itojun if (ifa->ifa_addr->sa_family != AF_INET6)
555 1.9 itojun continue;
556 1.9 itojun if (IN6_ARE_ADDR_EQUAL(IFA_IN6(ifa), &ip6->ip6_dst)) {
557 1.9 itojun ours = 1;
558 1.9 itojun deliverifp = ifa->ifa_ifp;
559 1.2 itojun goto hbhcheck;
560 1.2 itojun }
561 1.2 itojun }
562 1.9 itojun }
563 1.2 itojun #endif
564 1.2 itojun
565 1.2 itojun /*
566 1.2 itojun * Now there is no reason to process the packet if it's not our own
567 1.2 itojun * and we're not a router.
568 1.2 itojun */
569 1.2 itojun if (!ip6_forwarding) {
570 1.2 itojun ip6stat.ip6s_cantforward++;
571 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_discard);
572 1.2 itojun goto bad;
573 1.2 itojun }
574 1.2 itojun
575 1.2 itojun hbhcheck:
576 1.2 itojun /*
577 1.81 rpaulo * record address information into m_tag, if we don't have one yet.
578 1.81 rpaulo * note that we are unable to record it, if the address is not listed
579 1.81 rpaulo * as our interface address (e.g. multicast addresses, addresses
580 1.81 rpaulo * within FAITH prefixes and such).
581 1.81 rpaulo */
582 1.81 rpaulo if (deliverifp && !ip6_getdstifaddr(m)) {
583 1.81 rpaulo struct in6_ifaddr *ia6;
584 1.81 rpaulo
585 1.81 rpaulo ia6 = in6_ifawithifp(deliverifp, &ip6->ip6_dst);
586 1.81 rpaulo if (ia6) {
587 1.81 rpaulo if (!ip6_setdstifaddr(m, ia6)) {
588 1.81 rpaulo /*
589 1.81 rpaulo * XXX maybe we should drop the packet here,
590 1.81 rpaulo * as we could not provide enough information
591 1.81 rpaulo * to the upper layers.
592 1.81 rpaulo */
593 1.81 rpaulo }
594 1.81 rpaulo }
595 1.81 rpaulo }
596 1.81 rpaulo
597 1.81 rpaulo /*
598 1.2 itojun * Process Hop-by-Hop options header if it's contained.
599 1.2 itojun * m may be modified in ip6_hopopts_input().
600 1.2 itojun * If a JumboPayload option is included, plen will also be modified.
601 1.2 itojun */
602 1.2 itojun plen = (u_int32_t)ntohs(ip6->ip6_plen);
603 1.2 itojun if (ip6->ip6_nxt == IPPROTO_HOPOPTS) {
604 1.9 itojun struct ip6_hbh *hbh;
605 1.9 itojun
606 1.9 itojun if (ip6_hopopts_input(&plen, &rtalert, &m, &off)) {
607 1.9 itojun #if 0 /*touches NULL pointer*/
608 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_discard);
609 1.9 itojun #endif
610 1.2 itojun return; /* m have already been freed */
611 1.9 itojun }
612 1.22 itojun
613 1.2 itojun /* adjust pointer */
614 1.2 itojun ip6 = mtod(m, struct ip6_hdr *);
615 1.22 itojun
616 1.22 itojun /*
617 1.49 itojun * if the payload length field is 0 and the next header field
618 1.22 itojun * indicates Hop-by-Hop Options header, then a Jumbo Payload
619 1.22 itojun * option MUST be included.
620 1.22 itojun */
621 1.22 itojun if (ip6->ip6_plen == 0 && plen == 0) {
622 1.22 itojun /*
623 1.22 itojun * Note that if a valid jumbo payload option is
624 1.83 rpaulo * contained, ip6_hopopts_input() must set a valid
625 1.55 itojun * (non-zero) payload length to the variable plen.
626 1.22 itojun */
627 1.22 itojun ip6stat.ip6s_badoptions++;
628 1.22 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_discard);
629 1.22 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_hdrerr);
630 1.22 itojun icmp6_error(m, ICMP6_PARAM_PROB,
631 1.22 itojun ICMP6_PARAMPROB_HEADER,
632 1.22 itojun (caddr_t)&ip6->ip6_plen - (caddr_t)ip6);
633 1.22 itojun return;
634 1.22 itojun }
635 1.9 itojun IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m, sizeof(struct ip6_hdr),
636 1.9 itojun sizeof(struct ip6_hbh));
637 1.9 itojun if (hbh == NULL) {
638 1.9 itojun ip6stat.ip6s_tooshort++;
639 1.9 itojun return;
640 1.9 itojun }
641 1.57 thorpej KASSERT(IP6_HDR_ALIGNED_P(hbh));
642 1.9 itojun nxt = hbh->ip6h_nxt;
643 1.2 itojun
644 1.2 itojun /*
645 1.2 itojun * accept the packet if a router alert option is included
646 1.2 itojun * and we act as an IPv6 router.
647 1.2 itojun */
648 1.5 itojun if (rtalert != ~0 && ip6_forwarding)
649 1.2 itojun ours = 1;
650 1.2 itojun } else
651 1.2 itojun nxt = ip6->ip6_nxt;
652 1.2 itojun
653 1.2 itojun /*
654 1.2 itojun * Check that the amount of data in the buffers
655 1.2 itojun * is as at least much as the IPv6 header would have us expect.
656 1.2 itojun * Trim mbufs if longer than we expect.
657 1.2 itojun * Drop packet if shorter than we expect.
658 1.2 itojun */
659 1.2 itojun if (m->m_pkthdr.len - sizeof(struct ip6_hdr) < plen) {
660 1.2 itojun ip6stat.ip6s_tooshort++;
661 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_truncated);
662 1.2 itojun goto bad;
663 1.2 itojun }
664 1.2 itojun if (m->m_pkthdr.len > sizeof(struct ip6_hdr) + plen) {
665 1.2 itojun if (m->m_len == m->m_pkthdr.len) {
666 1.2 itojun m->m_len = sizeof(struct ip6_hdr) + plen;
667 1.2 itojun m->m_pkthdr.len = sizeof(struct ip6_hdr) + plen;
668 1.2 itojun } else
669 1.2 itojun m_adj(m, sizeof(struct ip6_hdr) + plen - m->m_pkthdr.len);
670 1.2 itojun }
671 1.2 itojun
672 1.2 itojun /*
673 1.2 itojun * Forward if desirable.
674 1.2 itojun */
675 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
676 1.2 itojun /*
677 1.2 itojun * If we are acting as a multicast router, all
678 1.2 itojun * incoming multicast packets are passed to the
679 1.2 itojun * kernel-level multicast forwarding function.
680 1.2 itojun * The packet is returned (relatively) intact; if
681 1.2 itojun * ip6_mforward() returns a non-zero value, the packet
682 1.2 itojun * must be discarded, else it may be accepted below.
683 1.2 itojun */
684 1.2 itojun if (ip6_mrouter && ip6_mforward(ip6, m->m_pkthdr.rcvif, m)) {
685 1.2 itojun ip6stat.ip6s_cantforward++;
686 1.2 itojun m_freem(m);
687 1.2 itojun return;
688 1.2 itojun }
689 1.2 itojun if (!ours) {
690 1.2 itojun m_freem(m);
691 1.2 itojun return;
692 1.2 itojun }
693 1.22 itojun } else if (!ours) {
694 1.64 itojun ip6_forward(m, srcrt);
695 1.2 itojun return;
696 1.56 itojun }
697 1.25 itojun
698 1.25 itojun ip6 = mtod(m, struct ip6_hdr *);
699 1.25 itojun
700 1.25 itojun /*
701 1.25 itojun * Malicious party may be able to use IPv4 mapped addr to confuse
702 1.25 itojun * tcp/udp stack and bypass security checks (act as if it was from
703 1.25 itojun * 127.0.0.1 by using IPv6 src ::ffff:127.0.0.1). Be cautious.
704 1.25 itojun *
705 1.25 itojun * For SIIT end node behavior, you may want to disable the check.
706 1.25 itojun * However, you will become vulnerable to attacks using IPv4 mapped
707 1.25 itojun * source.
708 1.25 itojun */
709 1.25 itojun if (IN6_IS_ADDR_V4MAPPED(&ip6->ip6_src) ||
710 1.25 itojun IN6_IS_ADDR_V4MAPPED(&ip6->ip6_dst)) {
711 1.25 itojun ip6stat.ip6s_badscope++;
712 1.25 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_addrerr);
713 1.25 itojun goto bad;
714 1.25 itojun }
715 1.2 itojun
716 1.2 itojun /*
717 1.2 itojun * Tell launch routine the next header
718 1.2 itojun */
719 1.12 itojun #ifdef IFA_STATS
720 1.28 itojun if (deliverifp != NULL) {
721 1.9 itojun struct in6_ifaddr *ia6;
722 1.9 itojun ia6 = in6_ifawithifp(deliverifp, &ip6->ip6_dst);
723 1.9 itojun if (ia6)
724 1.9 itojun ia6->ia_ifa.ifa_data.ifad_inbytes += m->m_pkthdr.len;
725 1.9 itojun }
726 1.9 itojun #endif
727 1.2 itojun ip6stat.ip6s_delivered++;
728 1.9 itojun in6_ifstat_inc(deliverifp, ifs6_in_deliver);
729 1.2 itojun nest = 0;
730 1.40 itojun
731 1.2 itojun while (nxt != IPPROTO_DONE) {
732 1.2 itojun if (ip6_hdrnestlimit && (++nest > ip6_hdrnestlimit)) {
733 1.2 itojun ip6stat.ip6s_toomanyhdr++;
734 1.2 itojun goto bad;
735 1.2 itojun }
736 1.8 itojun
737 1.8 itojun /*
738 1.8 itojun * protection against faulty packet - there should be
739 1.8 itojun * more sanity checks in header chain processing.
740 1.8 itojun */
741 1.8 itojun if (m->m_pkthdr.len < off) {
742 1.8 itojun ip6stat.ip6s_tooshort++;
743 1.9 itojun in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_truncated);
744 1.8 itojun goto bad;
745 1.8 itojun }
746 1.8 itojun
747 1.37 itojun #ifdef IPSEC
748 1.37 itojun /*
749 1.37 itojun * enforce IPsec policy checking if we are seeing last header.
750 1.37 itojun * note that we do not visit this with protocols with pcb layer
751 1.37 itojun * code - like udp/tcp/raw ip.
752 1.37 itojun */
753 1.37 itojun if ((inet6sw[ip6_protox[nxt]].pr_flags & PR_LASTHDR) != 0 &&
754 1.37 itojun ipsec6_in_reject(m, NULL)) {
755 1.37 itojun ipsec6stat.in_polvio++;
756 1.37 itojun goto bad;
757 1.37 itojun }
758 1.37 itojun #endif
759 1.56 itojun
760 1.2 itojun nxt = (*inet6sw[ip6_protox[nxt]].pr_input)(&m, &off, nxt);
761 1.2 itojun }
762 1.2 itojun return;
763 1.2 itojun bad:
764 1.2 itojun m_freem(m);
765 1.2 itojun }
766 1.2 itojun
767 1.2 itojun /*
768 1.81 rpaulo * set/grab in6_ifaddr correspond to IPv6 destination address.
769 1.81 rpaulo */
770 1.81 rpaulo static struct m_tag *
771 1.81 rpaulo ip6_setdstifaddr(m, ia6)
772 1.81 rpaulo struct mbuf *m;
773 1.81 rpaulo struct in6_ifaddr *ia6;
774 1.81 rpaulo {
775 1.81 rpaulo struct m_tag *mtag;
776 1.81 rpaulo
777 1.81 rpaulo mtag = ip6_addaux(m);
778 1.81 rpaulo if (mtag)
779 1.81 rpaulo ((struct ip6aux *)(mtag + 1))->ip6a_dstia6 = ia6;
780 1.81 rpaulo return mtag; /* NULL if failed to set */
781 1.81 rpaulo }
782 1.81 rpaulo
783 1.81 rpaulo struct in6_ifaddr *
784 1.81 rpaulo ip6_getdstifaddr(m)
785 1.81 rpaulo struct mbuf *m;
786 1.81 rpaulo {
787 1.81 rpaulo struct m_tag *mtag;
788 1.81 rpaulo
789 1.81 rpaulo mtag = ip6_findaux(m);
790 1.81 rpaulo if (mtag)
791 1.81 rpaulo return ((struct ip6aux *)(mtag + 1))->ip6a_dstia6;
792 1.81 rpaulo else
793 1.81 rpaulo return NULL;
794 1.81 rpaulo }
795 1.81 rpaulo
796 1.81 rpaulo /*
797 1.2 itojun * Hop-by-Hop options header processing. If a valid jumbo payload option is
798 1.2 itojun * included, the real payload length will be stored in plenp.
799 1.2 itojun */
800 1.2 itojun static int
801 1.2 itojun ip6_hopopts_input(plenp, rtalertp, mp, offp)
802 1.2 itojun u_int32_t *plenp;
803 1.5 itojun u_int32_t *rtalertp; /* XXX: should be stored more smart way */
804 1.2 itojun struct mbuf **mp;
805 1.2 itojun int *offp;
806 1.2 itojun {
807 1.35 itojun struct mbuf *m = *mp;
808 1.2 itojun int off = *offp, hbhlen;
809 1.2 itojun struct ip6_hbh *hbh;
810 1.2 itojun
811 1.2 itojun /* validation of the length of the header */
812 1.9 itojun IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m,
813 1.9 itojun sizeof(struct ip6_hdr), sizeof(struct ip6_hbh));
814 1.9 itojun if (hbh == NULL) {
815 1.9 itojun ip6stat.ip6s_tooshort++;
816 1.9 itojun return -1;
817 1.9 itojun }
818 1.9 itojun hbhlen = (hbh->ip6h_len + 1) << 3;
819 1.9 itojun IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m, sizeof(struct ip6_hdr),
820 1.9 itojun hbhlen);
821 1.9 itojun if (hbh == NULL) {
822 1.9 itojun ip6stat.ip6s_tooshort++;
823 1.9 itojun return -1;
824 1.9 itojun }
825 1.57 thorpej KASSERT(IP6_HDR_ALIGNED_P(hbh));
826 1.2 itojun off += hbhlen;
827 1.2 itojun hbhlen -= sizeof(struct ip6_hbh);
828 1.2 itojun
829 1.2 itojun if (ip6_process_hopopts(m, (u_int8_t *)hbh + sizeof(struct ip6_hbh),
830 1.2 itojun hbhlen, rtalertp, plenp) < 0)
831 1.58 itojun return (-1);
832 1.2 itojun
833 1.2 itojun *offp = off;
834 1.2 itojun *mp = m;
835 1.58 itojun return (0);
836 1.2 itojun }
837 1.2 itojun
838 1.2 itojun /*
839 1.2 itojun * Search header for all Hop-by-hop options and process each option.
840 1.2 itojun * This function is separate from ip6_hopopts_input() in order to
841 1.2 itojun * handle a case where the sending node itself process its hop-by-hop
842 1.2 itojun * options header. In such a case, the function is called from ip6_output().
843 1.55 itojun *
844 1.55 itojun * The function assumes that hbh header is located right after the IPv6 header
845 1.55 itojun * (RFC2460 p7), opthead is pointer into data content in m, and opthead to
846 1.55 itojun * opthead + hbhlen is located in continuous memory region.
847 1.2 itojun */
848 1.2 itojun int
849 1.2 itojun ip6_process_hopopts(m, opthead, hbhlen, rtalertp, plenp)
850 1.2 itojun struct mbuf *m;
851 1.2 itojun u_int8_t *opthead;
852 1.2 itojun int hbhlen;
853 1.5 itojun u_int32_t *rtalertp;
854 1.2 itojun u_int32_t *plenp;
855 1.2 itojun {
856 1.2 itojun struct ip6_hdr *ip6;
857 1.2 itojun int optlen = 0;
858 1.2 itojun u_int8_t *opt = opthead;
859 1.2 itojun u_int16_t rtalert_val;
860 1.22 itojun u_int32_t jumboplen;
861 1.55 itojun const int erroff = sizeof(struct ip6_hdr) + sizeof(struct ip6_hbh);
862 1.2 itojun
863 1.2 itojun for (; hbhlen > 0; hbhlen -= optlen, opt += optlen) {
864 1.35 itojun switch (*opt) {
865 1.35 itojun case IP6OPT_PAD1:
866 1.35 itojun optlen = 1;
867 1.35 itojun break;
868 1.35 itojun case IP6OPT_PADN:
869 1.35 itojun if (hbhlen < IP6OPT_MINLEN) {
870 1.35 itojun ip6stat.ip6s_toosmall++;
871 1.35 itojun goto bad;
872 1.35 itojun }
873 1.35 itojun optlen = *(opt + 1) + 2;
874 1.35 itojun break;
875 1.35 itojun case IP6OPT_RTALERT:
876 1.35 itojun /* XXX may need check for alignment */
877 1.35 itojun if (hbhlen < IP6OPT_RTALERT_LEN) {
878 1.35 itojun ip6stat.ip6s_toosmall++;
879 1.35 itojun goto bad;
880 1.35 itojun }
881 1.35 itojun if (*(opt + 1) != IP6OPT_RTALERT_LEN - 2) {
882 1.55 itojun /* XXX stat */
883 1.55 itojun icmp6_error(m, ICMP6_PARAM_PROB,
884 1.55 itojun ICMP6_PARAMPROB_HEADER,
885 1.55 itojun erroff + opt + 1 - opthead);
886 1.55 itojun return (-1);
887 1.35 itojun }
888 1.35 itojun optlen = IP6OPT_RTALERT_LEN;
889 1.35 itojun bcopy((caddr_t)(opt + 2), (caddr_t)&rtalert_val, 2);
890 1.35 itojun *rtalertp = ntohs(rtalert_val);
891 1.35 itojun break;
892 1.35 itojun case IP6OPT_JUMBO:
893 1.22 itojun /* XXX may need check for alignment */
894 1.22 itojun if (hbhlen < IP6OPT_JUMBO_LEN) {
895 1.22 itojun ip6stat.ip6s_toosmall++;
896 1.22 itojun goto bad;
897 1.22 itojun }
898 1.35 itojun if (*(opt + 1) != IP6OPT_JUMBO_LEN - 2) {
899 1.55 itojun /* XXX stat */
900 1.55 itojun icmp6_error(m, ICMP6_PARAM_PROB,
901 1.55 itojun ICMP6_PARAMPROB_HEADER,
902 1.55 itojun erroff + opt + 1 - opthead);
903 1.55 itojun return (-1);
904 1.35 itojun }
905 1.22 itojun optlen = IP6OPT_JUMBO_LEN;
906 1.22 itojun
907 1.22 itojun /*
908 1.22 itojun * IPv6 packets that have non 0 payload length
909 1.35 itojun * must not contain a jumbo payload option.
910 1.22 itojun */
911 1.22 itojun ip6 = mtod(m, struct ip6_hdr *);
912 1.22 itojun if (ip6->ip6_plen) {
913 1.22 itojun ip6stat.ip6s_badoptions++;
914 1.22 itojun icmp6_error(m, ICMP6_PARAM_PROB,
915 1.55 itojun ICMP6_PARAMPROB_HEADER,
916 1.55 itojun erroff + opt - opthead);
917 1.55 itojun return (-1);
918 1.22 itojun }
919 1.2 itojun
920 1.22 itojun /*
921 1.22 itojun * We may see jumbolen in unaligned location, so
922 1.22 itojun * we'd need to perform bcopy().
923 1.22 itojun */
924 1.22 itojun bcopy(opt + 2, &jumboplen, sizeof(jumboplen));
925 1.22 itojun jumboplen = (u_int32_t)htonl(jumboplen);
926 1.22 itojun
927 1.22 itojun #if 1
928 1.22 itojun /*
929 1.22 itojun * if there are multiple jumbo payload options,
930 1.22 itojun * *plenp will be non-zero and the packet will be
931 1.22 itojun * rejected.
932 1.22 itojun * the behavior may need some debate in ipngwg -
933 1.22 itojun * multiple options does not make sense, however,
934 1.22 itojun * there's no explicit mention in specification.
935 1.22 itojun */
936 1.22 itojun if (*plenp != 0) {
937 1.22 itojun ip6stat.ip6s_badoptions++;
938 1.22 itojun icmp6_error(m, ICMP6_PARAM_PROB,
939 1.55 itojun ICMP6_PARAMPROB_HEADER,
940 1.55 itojun erroff + opt + 2 - opthead);
941 1.55 itojun return (-1);
942 1.22 itojun }
943 1.8 itojun #endif
944 1.2 itojun
945 1.22 itojun /*
946 1.22 itojun * jumbo payload length must be larger than 65535.
947 1.22 itojun */
948 1.22 itojun if (jumboplen <= IPV6_MAXPACKET) {
949 1.22 itojun ip6stat.ip6s_badoptions++;
950 1.22 itojun icmp6_error(m, ICMP6_PARAM_PROB,
951 1.55 itojun ICMP6_PARAMPROB_HEADER,
952 1.55 itojun erroff + opt + 2 - opthead);
953 1.55 itojun return (-1);
954 1.22 itojun }
955 1.22 itojun *plenp = jumboplen;
956 1.22 itojun
957 1.22 itojun break;
958 1.35 itojun default: /* unknown option */
959 1.35 itojun if (hbhlen < IP6OPT_MINLEN) {
960 1.35 itojun ip6stat.ip6s_toosmall++;
961 1.35 itojun goto bad;
962 1.35 itojun }
963 1.55 itojun optlen = ip6_unknown_opt(opt, m,
964 1.55 itojun erroff + opt - opthead);
965 1.55 itojun if (optlen == -1)
966 1.55 itojun return (-1);
967 1.35 itojun optlen += 2;
968 1.35 itojun break;
969 1.2 itojun }
970 1.2 itojun }
971 1.2 itojun
972 1.55 itojun return (0);
973 1.2 itojun
974 1.2 itojun bad:
975 1.2 itojun m_freem(m);
976 1.55 itojun return (-1);
977 1.2 itojun }
978 1.2 itojun
979 1.2 itojun /*
980 1.2 itojun * Unknown option processing.
981 1.2 itojun * The third argument `off' is the offset from the IPv6 header to the option,
982 1.2 itojun * which is necessary if the IPv6 header the and option header and IPv6 header
983 1.2 itojun * is not continuous in order to return an ICMPv6 error.
984 1.2 itojun */
985 1.2 itojun int
986 1.2 itojun ip6_unknown_opt(optp, m, off)
987 1.2 itojun u_int8_t *optp;
988 1.2 itojun struct mbuf *m;
989 1.2 itojun int off;
990 1.2 itojun {
991 1.2 itojun struct ip6_hdr *ip6;
992 1.2 itojun
993 1.35 itojun switch (IP6OPT_TYPE(*optp)) {
994 1.35 itojun case IP6OPT_TYPE_SKIP: /* ignore the option */
995 1.58 itojun return ((int)*(optp + 1));
996 1.35 itojun case IP6OPT_TYPE_DISCARD: /* silently discard */
997 1.35 itojun m_freem(m);
998 1.58 itojun return (-1);
999 1.35 itojun case IP6OPT_TYPE_FORCEICMP: /* send ICMP even if multicasted */
1000 1.35 itojun ip6stat.ip6s_badoptions++;
1001 1.35 itojun icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_OPTION, off);
1002 1.58 itojun return (-1);
1003 1.35 itojun case IP6OPT_TYPE_ICMP: /* send ICMP if not multicasted */
1004 1.35 itojun ip6stat.ip6s_badoptions++;
1005 1.35 itojun ip6 = mtod(m, struct ip6_hdr *);
1006 1.35 itojun if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) ||
1007 1.35 itojun (m->m_flags & (M_BCAST|M_MCAST)))
1008 1.35 itojun m_freem(m);
1009 1.35 itojun else
1010 1.35 itojun icmp6_error(m, ICMP6_PARAM_PROB,
1011 1.35 itojun ICMP6_PARAMPROB_OPTION, off);
1012 1.58 itojun return (-1);
1013 1.2 itojun }
1014 1.2 itojun
1015 1.2 itojun m_freem(m); /* XXX: NOTREACHED */
1016 1.58 itojun return (-1);
1017 1.2 itojun }
1018 1.2 itojun
1019 1.2 itojun /*
1020 1.9 itojun * Create the "control" list for this pcb.
1021 1.9 itojun *
1022 1.9 itojun * The routine will be called from upper layer handlers like tcp6_input().
1023 1.9 itojun * Thus the routine assumes that the caller (tcp6_input) have already
1024 1.9 itojun * called IP6_EXTHDR_CHECK() and all the extension headers are located in the
1025 1.9 itojun * very first mbuf on the mbuf chain.
1026 1.9 itojun * We may want to add some infinite loop prevention or sanity checks for safety.
1027 1.9 itojun * (This applies only when you are using KAME mbuf chain restriction, i.e.
1028 1.9 itojun * you are using IP6_EXTHDR_CHECK() not m_pulldown())
1029 1.2 itojun */
1030 1.2 itojun void
1031 1.2 itojun ip6_savecontrol(in6p, mp, ip6, m)
1032 1.35 itojun struct in6pcb *in6p;
1033 1.35 itojun struct mbuf **mp;
1034 1.35 itojun struct ip6_hdr *ip6;
1035 1.35 itojun struct mbuf *m;
1036 1.2 itojun {
1037 1.85 rpaulo #ifdef RFC2292
1038 1.85 rpaulo #define IS2292(x, y) ((in6p->in6p_flags & IN6P_RFC2292) ? (x) : (y))
1039 1.85 rpaulo #else
1040 1.85 rpaulo #define IS2292(x, y) (y)
1041 1.85 rpaulo #endif
1042 1.85 rpaulo
1043 1.9 itojun #ifdef SO_TIMESTAMP
1044 1.2 itojun if (in6p->in6p_socket->so_options & SO_TIMESTAMP) {
1045 1.2 itojun struct timeval tv;
1046 1.2 itojun
1047 1.2 itojun microtime(&tv);
1048 1.2 itojun *mp = sbcreatecontrol((caddr_t) &tv, sizeof(tv),
1049 1.63 itojun SCM_TIMESTAMP, SOL_SOCKET);
1050 1.2 itojun if (*mp)
1051 1.2 itojun mp = &(*mp)->m_next;
1052 1.2 itojun }
1053 1.9 itojun #endif
1054 1.87 rpaulo
1055 1.87 rpaulo /* some OSes call this logic with IPv4 packet, for SO_TIMESTAMP */
1056 1.87 rpaulo if ((ip6->ip6_vfc & IPV6_VERSION_MASK) != IPV6_VERSION)
1057 1.87 rpaulo return;
1058 1.87 rpaulo
1059 1.2 itojun /* RFC 2292 sec. 5 */
1060 1.35 itojun if ((in6p->in6p_flags & IN6P_PKTINFO) != 0) {
1061 1.2 itojun struct in6_pktinfo pi6;
1062 1.85 rpaulo
1063 1.2 itojun bcopy(&ip6->ip6_dst, &pi6.ipi6_addr, sizeof(struct in6_addr));
1064 1.81 rpaulo in6_clearscope(&pi6.ipi6_addr); /* XXX */
1065 1.84 christos pi6.ipi6_ifindex = m->m_pkthdr.rcvif ?
1066 1.84 christos m->m_pkthdr.rcvif->if_index : 0;
1067 1.2 itojun *mp = sbcreatecontrol((caddr_t) &pi6,
1068 1.85 rpaulo sizeof(struct in6_pktinfo),
1069 1.85 rpaulo IS2292(IPV6_2292PKTINFO, IPV6_PKTINFO), IPPROTO_IPV6);
1070 1.2 itojun if (*mp)
1071 1.2 itojun mp = &(*mp)->m_next;
1072 1.2 itojun }
1073 1.85 rpaulo
1074 1.2 itojun if (in6p->in6p_flags & IN6P_HOPLIMIT) {
1075 1.2 itojun int hlim = ip6->ip6_hlim & 0xff;
1076 1.85 rpaulo
1077 1.63 itojun *mp = sbcreatecontrol((caddr_t) &hlim, sizeof(int),
1078 1.85 rpaulo IS2292(IPV6_2292HOPLIMIT, IPV6_HOPLIMIT), IPPROTO_IPV6);
1079 1.85 rpaulo if (*mp)
1080 1.85 rpaulo mp = &(*mp)->m_next;
1081 1.85 rpaulo }
1082 1.85 rpaulo
1083 1.85 rpaulo if ((in6p->in6p_flags & IN6P_TCLASS) != 0) {
1084 1.85 rpaulo u_int32_t flowinfo;
1085 1.85 rpaulo int tclass;
1086 1.85 rpaulo
1087 1.85 rpaulo flowinfo = (u_int32_t)ntohl(ip6->ip6_flow & IPV6_FLOWINFO_MASK);
1088 1.85 rpaulo flowinfo >>= 20;
1089 1.85 rpaulo
1090 1.85 rpaulo tclass = flowinfo & 0xff;
1091 1.85 rpaulo *mp = sbcreatecontrol((caddr_t)&tclass, sizeof(tclass),
1092 1.85 rpaulo IPV6_TCLASS, IPPROTO_IPV6);
1093 1.85 rpaulo
1094 1.2 itojun if (*mp)
1095 1.2 itojun mp = &(*mp)->m_next;
1096 1.2 itojun }
1097 1.2 itojun
1098 1.2 itojun /*
1099 1.75 itojun * IPV6_HOPOPTS socket option. Recall that we required super-user
1100 1.75 itojun * privilege for the option (see ip6_ctloutput), but it might be too
1101 1.75 itojun * strict, since there might be some hop-by-hop options which can be
1102 1.75 itojun * returned to normal user.
1103 1.85 rpaulo * See also RFC3542 section 8 (or RFC2292 section 6).
1104 1.2 itojun */
1105 1.75 itojun if ((in6p->in6p_flags & IN6P_HOPOPTS) != 0) {
1106 1.2 itojun /*
1107 1.2 itojun * Check if a hop-by-hop options header is contatined in the
1108 1.2 itojun * received packet, and if so, store the options as ancillary
1109 1.2 itojun * data. Note that a hop-by-hop options header must be
1110 1.2 itojun * just after the IPv6 header, which fact is assured through
1111 1.2 itojun * the IPv6 input processing.
1112 1.2 itojun */
1113 1.78 christos struct ip6_hdr *xip6 = mtod(m, struct ip6_hdr *);
1114 1.78 christos if (xip6->ip6_nxt == IPPROTO_HOPOPTS) {
1115 1.9 itojun struct ip6_hbh *hbh;
1116 1.9 itojun int hbhlen;
1117 1.62 itojun struct mbuf *ext;
1118 1.9 itojun
1119 1.62 itojun ext = ip6_pullexthdr(m, sizeof(struct ip6_hdr),
1120 1.78 christos xip6->ip6_nxt);
1121 1.62 itojun if (ext == NULL) {
1122 1.9 itojun ip6stat.ip6s_tooshort++;
1123 1.9 itojun return;
1124 1.9 itojun }
1125 1.62 itojun hbh = mtod(ext, struct ip6_hbh *);
1126 1.9 itojun hbhlen = (hbh->ip6h_len + 1) << 3;
1127 1.62 itojun if (hbhlen != ext->m_len) {
1128 1.62 itojun m_freem(ext);
1129 1.9 itojun ip6stat.ip6s_tooshort++;
1130 1.9 itojun return;
1131 1.9 itojun }
1132 1.2 itojun
1133 1.2 itojun /*
1134 1.2 itojun * XXX: We copy whole the header even if a jumbo
1135 1.2 itojun * payload option is included, which option is to
1136 1.2 itojun * be removed before returning in the RFC 2292.
1137 1.85 rpaulo * Note: this constraint is removed in RFC3542.
1138 1.2 itojun */
1139 1.9 itojun *mp = sbcreatecontrol((caddr_t)hbh, hbhlen,
1140 1.85 rpaulo IS2292(IPV6_2292HOPOPTS, IPV6_HOPOPTS),
1141 1.85 rpaulo IPPROTO_IPV6);
1142 1.2 itojun if (*mp)
1143 1.2 itojun mp = &(*mp)->m_next;
1144 1.62 itojun m_freem(ext);
1145 1.2 itojun }
1146 1.2 itojun }
1147 1.2 itojun
1148 1.2 itojun /* IPV6_DSTOPTS and IPV6_RTHDR socket options */
1149 1.2 itojun if (in6p->in6p_flags & (IN6P_DSTOPTS | IN6P_RTHDR)) {
1150 1.78 christos struct ip6_hdr *xip6 = mtod(m, struct ip6_hdr *);
1151 1.78 christos int nxt = xip6->ip6_nxt, off = sizeof(struct ip6_hdr);
1152 1.2 itojun
1153 1.2 itojun /*
1154 1.2 itojun * Search for destination options headers or routing
1155 1.2 itojun * header(s) through the header chain, and stores each
1156 1.2 itojun * header as ancillary data.
1157 1.2 itojun * Note that the order of the headers remains in
1158 1.2 itojun * the chain of ancillary data.
1159 1.2 itojun */
1160 1.86 rpaulo for (;;) { /* is explicit loop prevention necessary? */
1161 1.62 itojun struct ip6_ext *ip6e = NULL;
1162 1.9 itojun int elen;
1163 1.62 itojun struct mbuf *ext = NULL;
1164 1.9 itojun
1165 1.62 itojun /*
1166 1.62 itojun * if it is not an extension header, don't try to
1167 1.62 itojun * pull it from the chain.
1168 1.62 itojun */
1169 1.62 itojun switch (nxt) {
1170 1.62 itojun case IPPROTO_DSTOPTS:
1171 1.62 itojun case IPPROTO_ROUTING:
1172 1.62 itojun case IPPROTO_HOPOPTS:
1173 1.62 itojun case IPPROTO_AH: /* is it possible? */
1174 1.62 itojun break;
1175 1.62 itojun default:
1176 1.62 itojun goto loopend;
1177 1.62 itojun }
1178 1.62 itojun
1179 1.62 itojun ext = ip6_pullexthdr(m, off, nxt);
1180 1.62 itojun if (ext == NULL) {
1181 1.9 itojun ip6stat.ip6s_tooshort++;
1182 1.9 itojun return;
1183 1.9 itojun }
1184 1.62 itojun ip6e = mtod(ext, struct ip6_ext *);
1185 1.9 itojun if (nxt == IPPROTO_AH)
1186 1.9 itojun elen = (ip6e->ip6e_len + 2) << 2;
1187 1.9 itojun else
1188 1.9 itojun elen = (ip6e->ip6e_len + 1) << 3;
1189 1.62 itojun if (elen != ext->m_len) {
1190 1.62 itojun m_freem(ext);
1191 1.9 itojun ip6stat.ip6s_tooshort++;
1192 1.9 itojun return;
1193 1.9 itojun }
1194 1.57 thorpej KASSERT(IP6_HDR_ALIGNED_P(ip6e));
1195 1.2 itojun
1196 1.35 itojun switch (nxt) {
1197 1.62 itojun case IPPROTO_DSTOPTS:
1198 1.35 itojun if (!in6p->in6p_flags & IN6P_DSTOPTS)
1199 1.35 itojun break;
1200 1.35 itojun
1201 1.35 itojun *mp = sbcreatecontrol((caddr_t)ip6e, elen,
1202 1.85 rpaulo IS2292(IPV6_2292DSTOPTS, IPV6_DSTOPTS),
1203 1.85 rpaulo IPPROTO_IPV6);
1204 1.35 itojun if (*mp)
1205 1.35 itojun mp = &(*mp)->m_next;
1206 1.35 itojun break;
1207 1.35 itojun
1208 1.35 itojun case IPPROTO_ROUTING:
1209 1.35 itojun if (!in6p->in6p_flags & IN6P_RTHDR)
1210 1.35 itojun break;
1211 1.35 itojun
1212 1.35 itojun *mp = sbcreatecontrol((caddr_t)ip6e, elen,
1213 1.85 rpaulo IS2292(IPV6_2292RTHDR, IPV6_RTHDR),
1214 1.85 rpaulo IPPROTO_IPV6);
1215 1.35 itojun if (*mp)
1216 1.35 itojun mp = &(*mp)->m_next;
1217 1.35 itojun break;
1218 1.35 itojun
1219 1.62 itojun case IPPROTO_HOPOPTS:
1220 1.62 itojun case IPPROTO_AH: /* is it possible? */
1221 1.62 itojun break;
1222 1.62 itojun
1223 1.35 itojun default:
1224 1.35 itojun /*
1225 1.62 itojun * other cases have been filtered in the above.
1226 1.62 itojun * none will visit this case. here we supply
1227 1.62 itojun * the code just in case (nxt overwritten or
1228 1.62 itojun * other cases).
1229 1.35 itojun */
1230 1.62 itojun m_freem(ext);
1231 1.35 itojun goto loopend;
1232 1.35 itojun
1233 1.2 itojun }
1234 1.2 itojun
1235 1.2 itojun /* proceed with the next header. */
1236 1.9 itojun off += elen;
1237 1.2 itojun nxt = ip6e->ip6e_nxt;
1238 1.62 itojun ip6e = NULL;
1239 1.62 itojun m_freem(ext);
1240 1.62 itojun ext = NULL;
1241 1.2 itojun }
1242 1.2 itojun loopend:
1243 1.62 itojun ;
1244 1.2 itojun }
1245 1.62 itojun }
1246 1.85 rpaulo #undef IS2292
1247 1.85 rpaulo
1248 1.85 rpaulo
1249 1.85 rpaulo void
1250 1.85 rpaulo ip6_notify_pmtu(struct in6pcb *in6p, struct sockaddr_in6 *dst, uint32_t *mtu)
1251 1.85 rpaulo {
1252 1.85 rpaulo struct socket *so;
1253 1.85 rpaulo struct mbuf *m_mtu;
1254 1.85 rpaulo struct ip6_mtuinfo mtuctl;
1255 1.85 rpaulo
1256 1.85 rpaulo so = in6p->in6p_socket;
1257 1.85 rpaulo
1258 1.85 rpaulo if (mtu == NULL)
1259 1.85 rpaulo return;
1260 1.85 rpaulo
1261 1.85 rpaulo #ifdef DIAGNOSTIC
1262 1.85 rpaulo if (so == NULL) /* I believe this is impossible */
1263 1.85 rpaulo panic("ip6_notify_pmtu: socket is NULL");
1264 1.85 rpaulo #endif
1265 1.85 rpaulo
1266 1.85 rpaulo memset(&mtuctl, 0, sizeof(mtuctl)); /* zero-clear for safety */
1267 1.85 rpaulo mtuctl.ip6m_mtu = *mtu;
1268 1.85 rpaulo mtuctl.ip6m_addr = *dst;
1269 1.85 rpaulo if (sa6_recoverscope(&mtuctl.ip6m_addr))
1270 1.85 rpaulo return;
1271 1.85 rpaulo
1272 1.85 rpaulo if ((m_mtu = sbcreatecontrol((caddr_t)&mtuctl, sizeof(mtuctl),
1273 1.85 rpaulo IPV6_PATHMTU, IPPROTO_IPV6)) == NULL)
1274 1.85 rpaulo return;
1275 1.85 rpaulo
1276 1.85 rpaulo if (sbappendaddr(&so->so_rcv, (struct sockaddr *)dst, NULL, m_mtu)
1277 1.85 rpaulo == 0) {
1278 1.85 rpaulo m_freem(m_mtu);
1279 1.85 rpaulo /* XXX: should count statistics */
1280 1.85 rpaulo } else
1281 1.85 rpaulo sorwakeup(so);
1282 1.85 rpaulo
1283 1.85 rpaulo return;
1284 1.85 rpaulo }
1285 1.62 itojun
1286 1.62 itojun /*
1287 1.62 itojun * pull single extension header from mbuf chain. returns single mbuf that
1288 1.62 itojun * contains the result, or NULL on error.
1289 1.62 itojun */
1290 1.62 itojun static struct mbuf *
1291 1.62 itojun ip6_pullexthdr(m, off, nxt)
1292 1.62 itojun struct mbuf *m;
1293 1.62 itojun size_t off;
1294 1.62 itojun int nxt;
1295 1.62 itojun {
1296 1.62 itojun struct ip6_ext ip6e;
1297 1.62 itojun size_t elen;
1298 1.62 itojun struct mbuf *n;
1299 1.62 itojun
1300 1.62 itojun #ifdef DIAGNOSTIC
1301 1.62 itojun switch (nxt) {
1302 1.62 itojun case IPPROTO_DSTOPTS:
1303 1.62 itojun case IPPROTO_ROUTING:
1304 1.62 itojun case IPPROTO_HOPOPTS:
1305 1.62 itojun case IPPROTO_AH: /* is it possible? */
1306 1.62 itojun break;
1307 1.62 itojun default:
1308 1.62 itojun printf("ip6_pullexthdr: invalid nxt=%d\n", nxt);
1309 1.2 itojun }
1310 1.62 itojun #endif
1311 1.2 itojun
1312 1.62 itojun m_copydata(m, off, sizeof(ip6e), (caddr_t)&ip6e);
1313 1.62 itojun if (nxt == IPPROTO_AH)
1314 1.62 itojun elen = (ip6e.ip6e_len + 2) << 2;
1315 1.62 itojun else
1316 1.62 itojun elen = (ip6e.ip6e_len + 1) << 3;
1317 1.62 itojun
1318 1.62 itojun MGET(n, M_DONTWAIT, MT_DATA);
1319 1.62 itojun if (n && elen >= MLEN) {
1320 1.62 itojun MCLGET(n, M_DONTWAIT);
1321 1.62 itojun if ((n->m_flags & M_EXT) == 0) {
1322 1.62 itojun m_free(n);
1323 1.62 itojun n = NULL;
1324 1.62 itojun }
1325 1.62 itojun }
1326 1.62 itojun if (!n)
1327 1.62 itojun return NULL;
1328 1.62 itojun
1329 1.62 itojun n->m_len = 0;
1330 1.62 itojun if (elen >= M_TRAILINGSPACE(n)) {
1331 1.62 itojun m_free(n);
1332 1.62 itojun return NULL;
1333 1.62 itojun }
1334 1.62 itojun
1335 1.62 itojun m_copydata(m, off, elen, mtod(n, caddr_t));
1336 1.62 itojun n->m_len = elen;
1337 1.62 itojun return n;
1338 1.2 itojun }
1339 1.2 itojun
1340 1.2 itojun /*
1341 1.2 itojun * Get pointer to the previous header followed by the header
1342 1.2 itojun * currently processed.
1343 1.2 itojun * XXX: This function supposes that
1344 1.2 itojun * M includes all headers,
1345 1.2 itojun * the next header field and the header length field of each header
1346 1.2 itojun * are valid, and
1347 1.2 itojun * the sum of each header length equals to OFF.
1348 1.2 itojun * Because of these assumptions, this function must be called very
1349 1.2 itojun * carefully. Moreover, it will not be used in the near future when
1350 1.2 itojun * we develop `neater' mechanism to process extension headers.
1351 1.2 itojun */
1352 1.58 itojun u_int8_t *
1353 1.2 itojun ip6_get_prevhdr(m, off)
1354 1.2 itojun struct mbuf *m;
1355 1.2 itojun int off;
1356 1.2 itojun {
1357 1.2 itojun struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
1358 1.2 itojun
1359 1.2 itojun if (off == sizeof(struct ip6_hdr))
1360 1.58 itojun return (&ip6->ip6_nxt);
1361 1.2 itojun else {
1362 1.2 itojun int len, nxt;
1363 1.2 itojun struct ip6_ext *ip6e = NULL;
1364 1.2 itojun
1365 1.2 itojun nxt = ip6->ip6_nxt;
1366 1.2 itojun len = sizeof(struct ip6_hdr);
1367 1.2 itojun while (len < off) {
1368 1.2 itojun ip6e = (struct ip6_ext *)(mtod(m, caddr_t) + len);
1369 1.2 itojun
1370 1.35 itojun switch (nxt) {
1371 1.2 itojun case IPPROTO_FRAGMENT:
1372 1.2 itojun len += sizeof(struct ip6_frag);
1373 1.2 itojun break;
1374 1.2 itojun case IPPROTO_AH:
1375 1.2 itojun len += (ip6e->ip6e_len + 2) << 2;
1376 1.2 itojun break;
1377 1.2 itojun default:
1378 1.2 itojun len += (ip6e->ip6e_len + 1) << 3;
1379 1.2 itojun break;
1380 1.2 itojun }
1381 1.2 itojun nxt = ip6e->ip6e_nxt;
1382 1.2 itojun }
1383 1.2 itojun if (ip6e)
1384 1.58 itojun return (&ip6e->ip6e_nxt);
1385 1.2 itojun else
1386 1.2 itojun return NULL;
1387 1.18 itojun }
1388 1.18 itojun }
1389 1.18 itojun
1390 1.18 itojun /*
1391 1.18 itojun * get next header offset. m will be retained.
1392 1.18 itojun */
1393 1.18 itojun int
1394 1.18 itojun ip6_nexthdr(m, off, proto, nxtp)
1395 1.18 itojun struct mbuf *m;
1396 1.18 itojun int off;
1397 1.18 itojun int proto;
1398 1.18 itojun int *nxtp;
1399 1.18 itojun {
1400 1.18 itojun struct ip6_hdr ip6;
1401 1.18 itojun struct ip6_ext ip6e;
1402 1.18 itojun struct ip6_frag fh;
1403 1.18 itojun
1404 1.18 itojun /* just in case */
1405 1.18 itojun if (m == NULL)
1406 1.18 itojun panic("ip6_nexthdr: m == NULL");
1407 1.18 itojun if ((m->m_flags & M_PKTHDR) == 0 || m->m_pkthdr.len < off)
1408 1.18 itojun return -1;
1409 1.18 itojun
1410 1.18 itojun switch (proto) {
1411 1.18 itojun case IPPROTO_IPV6:
1412 1.83 rpaulo /* do not chase beyond intermediate IPv6 headers */
1413 1.83 rpaulo if (off != 0)
1414 1.83 rpaulo return -1;
1415 1.18 itojun if (m->m_pkthdr.len < off + sizeof(ip6))
1416 1.18 itojun return -1;
1417 1.18 itojun m_copydata(m, off, sizeof(ip6), (caddr_t)&ip6);
1418 1.18 itojun if (nxtp)
1419 1.18 itojun *nxtp = ip6.ip6_nxt;
1420 1.18 itojun off += sizeof(ip6);
1421 1.18 itojun return off;
1422 1.18 itojun
1423 1.18 itojun case IPPROTO_FRAGMENT:
1424 1.18 itojun /*
1425 1.18 itojun * terminate parsing if it is not the first fragment,
1426 1.18 itojun * it does not make sense to parse through it.
1427 1.18 itojun */
1428 1.18 itojun if (m->m_pkthdr.len < off + sizeof(fh))
1429 1.18 itojun return -1;
1430 1.18 itojun m_copydata(m, off, sizeof(fh), (caddr_t)&fh);
1431 1.67 itojun if ((fh.ip6f_offlg & IP6F_OFF_MASK) != 0)
1432 1.18 itojun return -1;
1433 1.18 itojun if (nxtp)
1434 1.18 itojun *nxtp = fh.ip6f_nxt;
1435 1.18 itojun off += sizeof(struct ip6_frag);
1436 1.18 itojun return off;
1437 1.18 itojun
1438 1.18 itojun case IPPROTO_AH:
1439 1.18 itojun if (m->m_pkthdr.len < off + sizeof(ip6e))
1440 1.18 itojun return -1;
1441 1.18 itojun m_copydata(m, off, sizeof(ip6e), (caddr_t)&ip6e);
1442 1.18 itojun if (nxtp)
1443 1.18 itojun *nxtp = ip6e.ip6e_nxt;
1444 1.18 itojun off += (ip6e.ip6e_len + 2) << 2;
1445 1.47 itojun if (m->m_pkthdr.len < off)
1446 1.47 itojun return -1;
1447 1.18 itojun return off;
1448 1.18 itojun
1449 1.18 itojun case IPPROTO_HOPOPTS:
1450 1.18 itojun case IPPROTO_ROUTING:
1451 1.18 itojun case IPPROTO_DSTOPTS:
1452 1.18 itojun if (m->m_pkthdr.len < off + sizeof(ip6e))
1453 1.18 itojun return -1;
1454 1.18 itojun m_copydata(m, off, sizeof(ip6e), (caddr_t)&ip6e);
1455 1.18 itojun if (nxtp)
1456 1.18 itojun *nxtp = ip6e.ip6e_nxt;
1457 1.18 itojun off += (ip6e.ip6e_len + 1) << 3;
1458 1.47 itojun if (m->m_pkthdr.len < off)
1459 1.47 itojun return -1;
1460 1.18 itojun return off;
1461 1.18 itojun
1462 1.18 itojun case IPPROTO_NONE:
1463 1.18 itojun case IPPROTO_ESP:
1464 1.18 itojun case IPPROTO_IPCOMP:
1465 1.18 itojun /* give up */
1466 1.18 itojun return -1;
1467 1.18 itojun
1468 1.18 itojun default:
1469 1.18 itojun return -1;
1470 1.18 itojun }
1471 1.18 itojun }
1472 1.18 itojun
1473 1.18 itojun /*
1474 1.18 itojun * get offset for the last header in the chain. m will be kept untainted.
1475 1.18 itojun */
1476 1.18 itojun int
1477 1.18 itojun ip6_lasthdr(m, off, proto, nxtp)
1478 1.18 itojun struct mbuf *m;
1479 1.18 itojun int off;
1480 1.18 itojun int proto;
1481 1.18 itojun int *nxtp;
1482 1.18 itojun {
1483 1.18 itojun int newoff;
1484 1.18 itojun int nxt;
1485 1.18 itojun
1486 1.18 itojun if (!nxtp) {
1487 1.18 itojun nxt = -1;
1488 1.18 itojun nxtp = &nxt;
1489 1.18 itojun }
1490 1.86 rpaulo for (;;) {
1491 1.18 itojun newoff = ip6_nexthdr(m, off, proto, nxtp);
1492 1.18 itojun if (newoff < 0)
1493 1.18 itojun return off;
1494 1.18 itojun else if (newoff < off)
1495 1.18 itojun return -1; /* invalid */
1496 1.18 itojun else if (newoff == off)
1497 1.18 itojun return newoff;
1498 1.18 itojun
1499 1.18 itojun off = newoff;
1500 1.18 itojun proto = *nxtp;
1501 1.2 itojun }
1502 1.2 itojun }
1503 1.2 itojun
1504 1.81 rpaulo struct m_tag *
1505 1.81 rpaulo ip6_addaux(m)
1506 1.81 rpaulo struct mbuf *m;
1507 1.81 rpaulo {
1508 1.81 rpaulo struct m_tag *mtag;
1509 1.81 rpaulo
1510 1.81 rpaulo mtag = m_tag_find(m, PACKET_TAG_INET6, NULL);
1511 1.81 rpaulo if (!mtag) {
1512 1.81 rpaulo mtag = m_tag_get(PACKET_TAG_INET6, sizeof(struct ip6aux),
1513 1.81 rpaulo M_NOWAIT);
1514 1.81 rpaulo if (mtag) {
1515 1.81 rpaulo m_tag_prepend(m, mtag);
1516 1.81 rpaulo bzero(mtag + 1, sizeof(struct ip6aux));
1517 1.81 rpaulo }
1518 1.81 rpaulo }
1519 1.81 rpaulo return mtag;
1520 1.81 rpaulo }
1521 1.81 rpaulo
1522 1.81 rpaulo struct m_tag *
1523 1.81 rpaulo ip6_findaux(m)
1524 1.81 rpaulo struct mbuf *m;
1525 1.81 rpaulo {
1526 1.81 rpaulo struct m_tag *mtag;
1527 1.81 rpaulo
1528 1.81 rpaulo mtag = m_tag_find(m, PACKET_TAG_INET6, NULL);
1529 1.81 rpaulo return mtag;
1530 1.81 rpaulo }
1531 1.81 rpaulo
1532 1.81 rpaulo void
1533 1.81 rpaulo ip6_delaux(m)
1534 1.81 rpaulo struct mbuf *m;
1535 1.81 rpaulo {
1536 1.81 rpaulo struct m_tag *mtag;
1537 1.81 rpaulo
1538 1.81 rpaulo mtag = m_tag_find(m, PACKET_TAG_INET6, NULL);
1539 1.81 rpaulo if (mtag)
1540 1.81 rpaulo m_tag_delete(m, mtag);
1541 1.81 rpaulo }
1542 1.81 rpaulo
1543 1.2 itojun /*
1544 1.2 itojun * System control for IP6
1545 1.2 itojun */
1546 1.2 itojun
1547 1.2 itojun u_char inet6ctlerrmap[PRC_NCMDS] = {
1548 1.2 itojun 0, 0, 0, 0,
1549 1.2 itojun 0, EMSGSIZE, EHOSTDOWN, EHOSTUNREACH,
1550 1.2 itojun EHOSTUNREACH, EHOSTUNREACH, ECONNREFUSED, ECONNREFUSED,
1551 1.2 itojun EMSGSIZE, EHOSTUNREACH, 0, 0,
1552 1.2 itojun 0, 0, 0, 0,
1553 1.2 itojun ENOPROTOOPT
1554 1.2 itojun };
1555 1.2 itojun
1556 1.70 atatat SYSCTL_SETUP(sysctl_net_inet6_ip6_setup, "sysctl net.inet6.ip6 subtree setup")
1557 1.2 itojun {
1558 1.85 rpaulo #ifdef RFC2292
1559 1.85 rpaulo #define IS2292(x, y) ((in6p->in6p_flags & IN6P_RFC2292) ? (x) : (y))
1560 1.85 rpaulo #else
1561 1.85 rpaulo #define IS2292(x, y) (y)
1562 1.85 rpaulo #endif
1563 1.26 itojun
1564 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1565 1.73 atatat CTLFLAG_PERMANENT,
1566 1.70 atatat CTLTYPE_NODE, "net", NULL,
1567 1.70 atatat NULL, 0, NULL, 0,
1568 1.70 atatat CTL_NET, CTL_EOL);
1569 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1570 1.73 atatat CTLFLAG_PERMANENT,
1571 1.74 atatat CTLTYPE_NODE, "inet6",
1572 1.74 atatat SYSCTL_DESCR("PF_INET6 related settings"),
1573 1.70 atatat NULL, 0, NULL, 0,
1574 1.70 atatat CTL_NET, PF_INET6, CTL_EOL);
1575 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1576 1.73 atatat CTLFLAG_PERMANENT,
1577 1.74 atatat CTLTYPE_NODE, "ip6",
1578 1.74 atatat SYSCTL_DESCR("IPv6 related settings"),
1579 1.70 atatat NULL, 0, NULL, 0,
1580 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6, CTL_EOL);
1581 1.70 atatat
1582 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1583 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1584 1.74 atatat CTLTYPE_INT, "forwarding",
1585 1.74 atatat SYSCTL_DESCR("Enable forwarding of INET6 datagrams"),
1586 1.70 atatat NULL, 0, &ip6_forwarding, 0,
1587 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1588 1.70 atatat IPV6CTL_FORWARDING, CTL_EOL);
1589 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1590 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1591 1.74 atatat CTLTYPE_INT, "redirect",
1592 1.74 atatat SYSCTL_DESCR("Enable sending of ICMPv6 redirect messages"),
1593 1.70 atatat NULL, 0, &ip6_sendredirects, 0,
1594 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1595 1.70 atatat IPV6CTL_SENDREDIRECTS, CTL_EOL);
1596 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1597 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1598 1.74 atatat CTLTYPE_INT, "hlim",
1599 1.74 atatat SYSCTL_DESCR("Hop limit for an INET6 datagram"),
1600 1.70 atatat NULL, 0, &ip6_defhlim, 0,
1601 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1602 1.70 atatat IPV6CTL_DEFHLIM, CTL_EOL);
1603 1.70 atatat #ifdef notyet
1604 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1605 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1606 1.70 atatat CTLTYPE_INT, "mtu", NULL,
1607 1.70 atatat NULL, 0, &, 0,
1608 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1609 1.70 atatat IPV6CTL_DEFMTU, CTL_EOL);
1610 1.70 atatat #endif
1611 1.70 atatat #ifdef __no_idea__
1612 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1613 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1614 1.70 atatat CTLTYPE_INT, "forwsrcrt", NULL,
1615 1.70 atatat NULL, 0, &?, 0,
1616 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1617 1.70 atatat IPV6CTL_FORWSRCRT, CTL_EOL);
1618 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1619 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1620 1.70 atatat CTLTYPE_STRUCT, "mrtstats", NULL,
1621 1.70 atatat NULL, 0, &?, sizeof(?),
1622 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1623 1.70 atatat IPV6CTL_MRTSTATS, CTL_EOL);
1624 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1625 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1626 1.70 atatat CTLTYPE_?, "mrtproto", NULL,
1627 1.70 atatat NULL, 0, &?, sizeof(?),
1628 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1629 1.70 atatat IPV6CTL_MRTPROTO, CTL_EOL);
1630 1.70 atatat #endif
1631 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1632 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1633 1.74 atatat CTLTYPE_INT, "maxfragpackets",
1634 1.74 atatat SYSCTL_DESCR("Maximum number of fragments to buffer "
1635 1.74 atatat "for reassembly"),
1636 1.70 atatat NULL, 0, &ip6_maxfragpackets, 0,
1637 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1638 1.70 atatat IPV6CTL_MAXFRAGPACKETS, CTL_EOL);
1639 1.70 atatat #ifdef __no_idea__
1640 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1641 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1642 1.70 atatat CTLTYPE_INT, "sourcecheck", NULL,
1643 1.70 atatat NULL, 0, &?, 0,
1644 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1645 1.70 atatat IPV6CTL_SOURCECHECK, CTL_EOL);
1646 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1647 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1648 1.70 atatat CTLTYPE_INT, "sourcecheck_logint", NULL,
1649 1.70 atatat NULL, 0, &?, 0,
1650 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1651 1.70 atatat IPV6CTL_SOURCECHECK_LOGINT, CTL_EOL);
1652 1.70 atatat #endif
1653 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1654 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1655 1.74 atatat CTLTYPE_INT, "accept_rtadv",
1656 1.74 atatat SYSCTL_DESCR("Accept router advertisements"),
1657 1.70 atatat NULL, 0, &ip6_accept_rtadv, 0,
1658 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1659 1.70 atatat IPV6CTL_ACCEPT_RTADV, CTL_EOL);
1660 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1661 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1662 1.74 atatat CTLTYPE_INT, "keepfaith",
1663 1.74 atatat SYSCTL_DESCR("Activate faith interface"),
1664 1.70 atatat NULL, 0, &ip6_keepfaith, 0,
1665 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1666 1.70 atatat IPV6CTL_KEEPFAITH, CTL_EOL);
1667 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1668 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1669 1.74 atatat CTLTYPE_INT, "log_interval",
1670 1.74 atatat SYSCTL_DESCR("Minumum interval between logging "
1671 1.74 atatat "unroutable packets"),
1672 1.70 atatat NULL, 0, &ip6_log_interval, 0,
1673 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1674 1.70 atatat IPV6CTL_LOG_INTERVAL, CTL_EOL);
1675 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1676 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1677 1.74 atatat CTLTYPE_INT, "hdrnestlimit",
1678 1.74 atatat SYSCTL_DESCR("Maximum number of nested IPv6 headers"),
1679 1.70 atatat NULL, 0, &ip6_hdrnestlimit, 0,
1680 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1681 1.70 atatat IPV6CTL_HDRNESTLIMIT, CTL_EOL);
1682 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1683 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1684 1.74 atatat CTLTYPE_INT, "dad_count",
1685 1.74 atatat SYSCTL_DESCR("Number of Duplicate Address Detection "
1686 1.74 atatat "probes to send"),
1687 1.70 atatat NULL, 0, &ip6_dad_count, 0,
1688 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1689 1.70 atatat IPV6CTL_DAD_COUNT, CTL_EOL);
1690 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1691 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1692 1.74 atatat CTLTYPE_INT, "auto_flowlabel",
1693 1.74 atatat SYSCTL_DESCR("Assign random IPv6 flow labels"),
1694 1.70 atatat NULL, 0, &ip6_auto_flowlabel, 0,
1695 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1696 1.70 atatat IPV6CTL_AUTO_FLOWLABEL, CTL_EOL);
1697 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1698 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1699 1.74 atatat CTLTYPE_INT, "defmcasthlim",
1700 1.74 atatat SYSCTL_DESCR("Default multicast hop limit"),
1701 1.70 atatat NULL, 0, &ip6_defmcasthlim, 0,
1702 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1703 1.70 atatat IPV6CTL_DEFMCASTHLIM, CTL_EOL);
1704 1.51 itojun #if NGIF > 0
1705 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1706 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1707 1.74 atatat CTLTYPE_INT, "gifhlim",
1708 1.74 atatat SYSCTL_DESCR("Default hop limit for a gif tunnel datagram"),
1709 1.70 atatat NULL, 0, &ip6_gif_hlim, 0,
1710 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1711 1.70 atatat IPV6CTL_GIF_HLIM, CTL_EOL);
1712 1.70 atatat #endif /* NGIF */
1713 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1714 1.73 atatat CTLFLAG_PERMANENT,
1715 1.74 atatat CTLTYPE_STRING, "kame_version",
1716 1.74 atatat SYSCTL_DESCR("KAME Version"),
1717 1.78 christos NULL, 0, __UNCONST(__KAME_VERSION), 0,
1718 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1719 1.70 atatat IPV6CTL_KAME_VERSION, CTL_EOL);
1720 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1721 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1722 1.74 atatat CTLTYPE_INT, "use_deprecated",
1723 1.74 atatat SYSCTL_DESCR("Allow use of deprecated addresses as "
1724 1.74 atatat "source addresses"),
1725 1.70 atatat NULL, 0, &ip6_use_deprecated, 0,
1726 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1727 1.70 atatat IPV6CTL_USE_DEPRECATED, CTL_EOL);
1728 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1729 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1730 1.70 atatat CTLTYPE_INT, "rr_prune", NULL,
1731 1.70 atatat NULL, 0, &ip6_rr_prune, 0,
1732 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1733 1.70 atatat IPV6CTL_RR_PRUNE, CTL_EOL);
1734 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1735 1.73 atatat CTLFLAG_PERMANENT
1736 1.70 atatat #ifndef INET6_BINDV6ONLY
1737 1.73 atatat |CTLFLAG_READWRITE,
1738 1.70 atatat #endif
1739 1.74 atatat CTLTYPE_INT, "v6only",
1740 1.74 atatat SYSCTL_DESCR("Disallow PF_INET6 sockets from connecting "
1741 1.74 atatat "to PF_INET sockets"),
1742 1.70 atatat NULL, 0, &ip6_v6only, 0,
1743 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1744 1.70 atatat IPV6CTL_V6ONLY, CTL_EOL);
1745 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1746 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1747 1.74 atatat CTLTYPE_INT, "anonportmin",
1748 1.74 atatat SYSCTL_DESCR("Lowest ephemeral port number to assign"),
1749 1.70 atatat sysctl_net_inet_ip_ports, 0, &ip6_anonportmin, 0,
1750 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1751 1.70 atatat IPV6CTL_ANONPORTMIN, CTL_EOL);
1752 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1753 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1754 1.74 atatat CTLTYPE_INT, "anonportmax",
1755 1.74 atatat SYSCTL_DESCR("Highest ephemeral port number to assign"),
1756 1.70 atatat sysctl_net_inet_ip_ports, 0, &ip6_anonportmax, 0,
1757 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1758 1.70 atatat IPV6CTL_ANONPORTMAX, CTL_EOL);
1759 1.26 itojun #ifndef IPNOPRIVPORTS
1760 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1761 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1762 1.74 atatat CTLTYPE_INT, "lowportmin",
1763 1.74 atatat SYSCTL_DESCR("Lowest privileged ephemeral port number "
1764 1.74 atatat "to assign"),
1765 1.70 atatat sysctl_net_inet_ip_ports, 0, &ip6_lowportmin, 0,
1766 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1767 1.70 atatat IPV6CTL_LOWPORTMIN, CTL_EOL);
1768 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1769 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1770 1.74 atatat CTLTYPE_INT, "lowportmax",
1771 1.74 atatat SYSCTL_DESCR("Highest privileged ephemeral port number "
1772 1.74 atatat "to assign"),
1773 1.70 atatat sysctl_net_inet_ip_ports, 0, &ip6_lowportmax, 0,
1774 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1775 1.70 atatat IPV6CTL_LOWPORTMAX, CTL_EOL);
1776 1.70 atatat #endif /* IPNOPRIVPORTS */
1777 1.73 atatat sysctl_createv(clog, 0, NULL, NULL,
1778 1.73 atatat CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1779 1.83 rpaulo CTLTYPE_INT, "use_tempaddr",
1780 1.83 rpaulo SYSCTL_DESCR("Use temporary address"),
1781 1.83 rpaulo NULL, 0, &ip6_use_tempaddr, 0,
1782 1.83 rpaulo CTL_NET, PF_INET6, IPPROTO_IPV6,
1783 1.83 rpaulo CTL_CREATE, CTL_EOL);
1784 1.83 rpaulo sysctl_createv(clog, 0, NULL, NULL,
1785 1.83 rpaulo CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1786 1.83 rpaulo CTLTYPE_INT, "temppltime",
1787 1.83 rpaulo SYSCTL_DESCR("preferred lifetime of a temporary address"),
1788 1.83 rpaulo NULL, 0, &ip6_temp_preferred_lifetime, 0,
1789 1.83 rpaulo CTL_NET, PF_INET6, IPPROTO_IPV6,
1790 1.83 rpaulo CTL_CREATE, CTL_EOL);
1791 1.83 rpaulo sysctl_createv(clog, 0, NULL, NULL,
1792 1.83 rpaulo CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1793 1.83 rpaulo CTLTYPE_INT, "tempvltime",
1794 1.83 rpaulo SYSCTL_DESCR("valid lifetime of a temporary address"),
1795 1.83 rpaulo NULL, 0, &ip6_temp_valid_lifetime, 0,
1796 1.83 rpaulo CTL_NET, PF_INET6, IPPROTO_IPV6,
1797 1.83 rpaulo CTL_CREATE, CTL_EOL);
1798 1.83 rpaulo sysctl_createv(clog, 0, NULL, NULL,
1799 1.83 rpaulo CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1800 1.74 atatat CTLTYPE_INT, "maxfrags",
1801 1.74 atatat SYSCTL_DESCR("Maximum fragments in reassembly queue"),
1802 1.70 atatat NULL, 0, &ip6_maxfrags, 0,
1803 1.70 atatat CTL_NET, PF_INET6, IPPROTO_IPV6,
1804 1.70 atatat IPV6CTL_MAXFRAGS, CTL_EOL);
1805 1.79 rpaulo sysctl_createv(clog, 0, NULL, NULL,
1806 1.79 rpaulo CTLFLAG_PERMANENT,
1807 1.79 rpaulo CTLTYPE_STRUCT, "stats",
1808 1.79 rpaulo SYSCTL_DESCR("IPv6 statistics"),
1809 1.79 rpaulo NULL, 0, &ip6stat, sizeof(ip6stat),
1810 1.79 rpaulo CTL_NET, PF_INET6, IPPROTO_IPV6,
1811 1.79 rpaulo IPV6CTL_STATS, CTL_EOL);
1812 1.81 rpaulo sysctl_createv(clog, 0, NULL, NULL,
1813 1.81 rpaulo CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1814 1.81 rpaulo CTLTYPE_INT, "use_defaultzone",
1815 1.81 rpaulo SYSCTL_DESCR("Whether to use the default scope zones"),
1816 1.81 rpaulo NULL, 0, &ip6_use_defzone, 0,
1817 1.81 rpaulo CTL_NET, PF_INET6, IPPROTO_IPV6,
1818 1.81 rpaulo IPV6CTL_USE_DEFAULTZONE, CTL_EOL);
1819 1.83 rpaulo sysctl_createv(clog, 0, NULL, NULL,
1820 1.83 rpaulo CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1821 1.83 rpaulo CTLTYPE_INT, "mcast_pmtu",
1822 1.83 rpaulo SYSCTL_DESCR("Enable pMTU discovery for multicast packet"),
1823 1.83 rpaulo NULL, 0, &ip6_mcast_pmtu, 0,
1824 1.83 rpaulo CTL_NET, PF_INET6, IPPROTO_IPV6,
1825 1.83 rpaulo CTL_CREATE, CTL_EOL);
1826 1.2 itojun }
1827