src/sys/netinet/ip_input.c - diff

Return to ip_input.c CVS log

Up to [cvs.NetBSD.org] / src / sys / netinet

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/sys/netinet/ip_input.c between version 1.107 and 1.114.4.8

version 1.107, 2000/03/10 22:39:03

version 1.114.4.8, 2002/02/26 21:07:56

Line 138

/* just for gif_ttl */

#include <netinet/in_gif.h>

#include "gif.h"

#include <net/if_gre.h>

#include "gre.h"

#ifdef MROUTING

#include <netinet/ip_mroute.h>

#endif

#ifdef IPSEC

#include <netinet6/ipsec.h>

Line 200 struct in_ifaddrhashhead *in_ifaddrhasht

Line 206 struct in_ifaddrhashhead *in_ifaddrhasht

struct ifqueue ipintrq;

struct ipstat ipstat;

u_int16_t ip_id;

int ip_defttl;

struct ipqhead ipq;

int ipq_locked;

int ip_nfragpackets = 0;

int ip_maxfragpackets = 200;

static __inline int ipq_lock_try __P((void));

static __inline void ipq_unlock __P((void));

Line 281 static void save_rte __P((u_char *, stru

Line 288 static void save_rte __P((u_char *, stru

void

ip_init()

{

struct protosw *pr;

int i;

pool_init(&ipqent_pool, sizeof(struct ipqent), 0, 0, 0, "ipqepl",

0, NULL, NULL, M_IPQ);

Line 340 ipintr()

Line 347 ipintr()

void

ip_input(struct mbuf *m)

{

struct ip *ip = NULL;

struct ipq *fp;

struct in_ifaddr *ia;

struct ifaddr *ifa;

struct ipqent *ipqe;

int hlen = 0, mff, len;

int downmatch;

Line 456 ip_input(struct mbuf *m)

Line 463 ip_input(struct mbuf *m)

#endif

#ifdef PFIL_HOOKS

#ifdef IPSEC

* let ipfilter look at packet on the wire,

* not the decapsulated packet.

if (ipsec_gethist(m, NULL))

goto nofilt;

#endif

* Run through list of hooks for input packets. If there are any

* filters which require that additional packets in the flow are

Line 476 ip_input(struct mbuf *m)

Line 491 ip_input(struct mbuf *m)

return;

ip = mtod(m, struct ip *);

}

#ifdef IPSEC

nofilt:;

#endif

#endif /* PFIL_HOOKS */

Line 606 ip_input(struct mbuf *m)

Line 624 ip_input(struct mbuf *m)

ipstat.ips_cantforward++;

return;

}

#ifdef IPSEC

if (ipsec4_in_reject(m, NULL)) {

ipsecstat.in_polvio++;

goto bad;

}

#endif

ip_forward(m, 0);

}

return;

Line 684 found:

Line 709 found:

IPQ_UNLOCK();

}

#ifdef IPSEC

* enforce IPsec policy checking if we are seeing last header.

* note that we do not visit this with protocols with pcb layer

* code - like udp/tcp/raw ip.

if ((inetsw[ip_protox[ip->ip_p]].pr_flags & PR_LASTHDR) != 0 &&

ipsec4_in_reject(m, NULL)) {

ipsecstat.in_polvio++;

goto bad;

}

#endif

* Switch out to protocol's input routine.

Line 709 bad:

Line 747 bad:

struct mbuf *

ip_reass(ipqe, fp)

struct ipqent *ipqe;

struct ipq *fp;

{

struct mbuf *m = ipqe->ipqe_m;

struct ipqent *nq, *p, *q;

struct ip *ip;

struct mbuf *t;

int hlen = ipqe->ipqe_ip->ip_hl << 2;

Line 732 ip_reass(ipqe, fp)

Line 770 ip_reass(ipqe, fp)

* If first fragment to arrive, create a reassembly queue.

if (fp == 0) {

* Enforce upper bound on number of fragmented packets

* for which we attempt reassembly;

* If maxfrag is 0, never accept fragments.

* If maxfrag is -1, accept all fragments without limitation.

if (ip_maxfragpackets < 0)

;

else if (ip_nfragpackets >= ip_maxfragpackets)

goto dropfrag;

ip_nfragpackets++;

MALLOC(fp, struct ipq *, sizeof (struct ipq),

M_FTABLE, M_NOWAIT);

if (fp == NULL)

Line 847 insert:

Line 896 insert:

ip->ip_dst = fp->ipq_dst;

LIST_REMOVE(fp, ipq_q);

FREE(fp, M_FTABLE);

ip_nfragpackets--;

m->m_len += (ip->ip_hl << 2);

m->m_data -= (ip->ip_hl << 2);

/* some debugging cruft by sklower, below, will go away soon */

if (m->m_flags & M_PKTHDR) { /* XXX this should be done elsewhere */

int plen = 0;

for (t = m; t; t = t->m_next)

plen += t->m_len;

m->m_pkthdr.len = plen;

Line 873 void

Line 923 void

ip_freef(fp)

struct ipq *fp;

{

struct ipqent *q, *p;

IPQ_LOCK_CHECK();

Line 885 ip_freef(fp)

Line 935 ip_freef(fp)

}

LIST_REMOVE(fp, ipq_q);

FREE(fp, M_FTABLE);

ip_nfragpackets--;

}

Line 895 ip_freef(fp)

Line 946 ip_freef(fp)

void

ip_slowtimo()

{

struct ipq *fp, *nfp;

int s = splsoftnet();

IPQ_LOCK();

Line 906 ip_slowtimo()

Line 957 ip_slowtimo()

ip_freef(fp);

}

* If we are over the maximum number of fragments

* (due to the limit being lowered), drain off

* enough to get down to the new limit.

if (ip_maxfragpackets < 0)

;

else {

while (ip_nfragpackets > ip_maxfragpackets && ipq.lh_first)

ip_freef(ipq.lh_first);

}

IPQ_UNLOCK();

#ifdef GATEWAY

ipflow_slowtimo();

Line 946 int

Line 1008 int

ip_dooptions(m)

struct mbuf *m;

{

struct ip *ip = mtod(m, struct ip *);

u_char *cp, *cp0;

struct ip_timestamp *ipt;

struct in_ifaddr *ia;

int opt, optlen, cnt, off, code, type = ICMP_PARAMPROB, forward = 0;

struct in_addr dst;

n_time ntime;

Line 964 ip_dooptions(m)

Line 1026 ip_dooptions(m)

if (opt == IPOPT_NOP)

optlen = 1;

else {

if (cnt < IPOPT_OLEN + sizeof(*cp)) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

optlen = cp[IPOPT_OLEN];

if (optlen <= 0 || optlen > cnt) {

if (optlen < IPOPT_OLEN + sizeof(*cp) || optlen > cnt) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

Line 991 ip_dooptions(m)

Line 1057 ip_dooptions(m)

code = ICMP_UNREACH_NET_PROHIB;

goto bad;

}

if (optlen < IPOPT_OFFSET + sizeof(*cp)) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

if ((off = cp[IPOPT_OFFSET]) < IPOPT_MINOFF) {

code = &cp[IPOPT_OFFSET] - (u_char *)ip;

goto bad;

Line 1010 ip_dooptions(m)

Line 1080 ip_dooptions(m)

break;

}

off--; /* 0 origin */

if (off > optlen - sizeof(struct in_addr)) {

if ((off + sizeof(struct in_addr)) > optlen) {

* End of source route. Should be for us.

Line 1042 ip_dooptions(m)

Line 1112 ip_dooptions(m)

break;

case IPOPT_RR:

if (optlen < IPOPT_OFFSET + sizeof(*cp)) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

if ((off = cp[IPOPT_OFFSET]) < IPOPT_MINOFF) {

code = &cp[IPOPT_OFFSET] - (u_char *)ip;

goto bad;

Line 1050 ip_dooptions(m)

Line 1124 ip_dooptions(m)

* If no space remains, ignore.

off--; /* 0 origin */

if (off > optlen - sizeof(struct in_addr))

if ((off + sizeof(struct in_addr)) > optlen)

break;

bcopy((caddr_t)(&ip->ip_dst), (caddr_t)&ipaddr.sin_addr,

sizeof(ipaddr.sin_addr));

Line 1073 ip_dooptions(m)

Line 1147 ip_dooptions(m)

case IPOPT_TS:

code = cp - (u_char *)ip;

ipt = (struct ip_timestamp *)cp;

if (ipt->ipt_len < 5)

if (ipt->ipt_len < 4 || ipt->ipt_len > 40) {

code = (u_char *)&ipt->ipt_len - (u_char *)ip;

goto bad;

}

if (ipt->ipt_ptr < 5) {

code = (u_char *)&ipt->ipt_ptr - (u_char *)ip;

goto bad;

}

if (ipt->ipt_ptr > ipt->ipt_len - sizeof (int32_t)) {

if (++ipt->ipt_oflw == 0)

if (++ipt->ipt_oflw == 0) {

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip;

goto bad;

}

break;

}

cp0 = (cp + ipt->ipt_ptr - 1);

Line 1088 ip_dooptions(m)

Line 1171 ip_dooptions(m)

case IPOPT_TS_TSANDADDR:

if (ipt->ipt_ptr - 1 + sizeof(n_time) +

sizeof(struct in_addr) > ipt->ipt_len)

sizeof(struct in_addr) > ipt->ipt_len) {

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip;

goto bad;

}

ipaddr.sin_addr = dst;

ia = ifatoia(ifaof_ifpforaddr(sintosa(&ipaddr),

m->m_pkthdr.rcvif));

Line 1102 ip_dooptions(m)

Line 1188 ip_dooptions(m)

case IPOPT_TS_PRESPEC:

if (ipt->ipt_ptr - 1 + sizeof(n_time) +

sizeof(struct in_addr) > ipt->ipt_len)

sizeof(struct in_addr) > ipt->ipt_len) {

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip;

goto bad;

}

bcopy(cp0, &ipaddr.sin_addr,

sizeof(struct in_addr));

if (ifatoia(ifa_ifwithaddr(sintosa(&ipaddr)))

Line 1113 ip_dooptions(m)

Line 1202 ip_dooptions(m)

break;

default:

/* XXX can't take &ipt->ipt_flg */

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip + 1;

goto bad;

}

ntime = iptime();

Line 1146 struct in_ifaddr *

Line 1238 struct in_ifaddr *

ip_rtaddr(dst)

struct in_addr dst;

{

struct sockaddr_in *sin;

sin = satosin(&ipforward_rt.ro_dst);

Line 1197 save_rte(option, dst)

Line 1289 save_rte(option, dst)

struct mbuf *

ip_srcroute()

{

struct in_addr *p, *q;

struct mbuf *m;

if (ip_nhops == 0)

return ((struct mbuf *)0);

Line 1267 ip_srcroute()

Line 1359 ip_srcroute()

void

ip_stripoptions(m, mopt)

struct mbuf *m;

struct mbuf *mopt;

{

int i;

struct ip *ip = mtod(m, struct ip *);

caddr_t opts;

int olen;

olen = (ip->ip_hl << 2) - sizeof (struct ip);

Line 1314 ip_forward(m, srcrt)

Line 1406 ip_forward(m, srcrt)

struct mbuf *m;

int srcrt;

{

struct ip *ip = mtod(m, struct ip *);

struct sockaddr_in *sin;

struct rtentry *rt;

int error, type = 0, code = 0;

struct mbuf *mcopy;

n_long dest;

Line 1365 ip_forward(m, srcrt)

Line 1457 ip_forward(m, srcrt)

* Save at most 68 bytes of the packet in case

* we need to generate an ICMP message to the src.

* Pullup to avoid sharing mbuf cluster between m and mcopy.

mcopy = m_copy(m, 0, imin((int)ip->ip_len, 68));

mcopy = m_copym(m, 0, imin((int)ip->ip_len, 68), M_DONTWAIT);

if (mcopy)

mcopy = m_pullup(mcopy, ip->ip_hl << 2);

* If forwarding packet using same interface that it came in on,

Line 1403 ip_forward(m, srcrt)

Line 1498 ip_forward(m, srcrt)

#ifdef IPSEC

/* Don't lookup socket in forwading case */

ipsec_setsocket(m, NULL);

(void)ipsec_setsocket(m, NULL);

#endif

error = ip_output(m, (struct mbuf *)0, &ipforward_rt,

(IP_FORWARDING | (ip_directedbcast ? IP_ALLOWBROADCAST : 0)), 0);

Line 1514 ip_forward(m, srcrt)

Line 1609 ip_forward(m, srcrt)

void

ip_savecontrol(inp, mp, ip, m)

struct inpcb *inp;

struct mbuf **mp;

struct ip *ip;

struct mbuf *m;

{

if (inp->inp_socket->so_options & SO_TIMESTAMP) {

Line 1632 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1727 ip_sysctl(name, namelen, oldp, oldlenp,

case IPCTL_ANONPORTMIN:

old = anonportmin;

error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmin);

if (anonportmin >= anonportmax || anonportmin > 65535

if (anonportmin >= anonportmax || anonportmin < 0

|| anonportmin > 65535

#ifndef IPNOPRIVPORTS

|| anonportmin < IPPORT_RESERVED

#endif

Line 1644 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1740 ip_sysctl(name, namelen, oldp, oldlenp,

case IPCTL_ANONPORTMAX:

old = anonportmax;

error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmax);

if (anonportmin >= anonportmax || anonportmax > 65535

if (anonportmin >= anonportmax || anonportmax < 0

|| anonportmax > 65535

#ifndef IPNOPRIVPORTS

|| anonportmax < IPPORT_RESERVED

#endif

Line 1682 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1779 ip_sysctl(name, namelen, oldp, oldlenp,

&ip_gif_ttl));

#endif

#if NGRE > 0

case IPCTL_GRE_TTL:

return(sysctl_int(oldp, oldlenp, newp, newlen,

&ip_gre_ttl));

#endif

#ifndef IPNOPRIVPORTS

case IPCTL_LOWPORTMIN:

old = lowportmin;

error = sysctl_int(oldp, oldlenp, newp, newlen, &lowportmin);

if (lowportmin >= lowportmax

|| lowportmin > IPPORT_RESERVEDMAX

|| lowportmin < IPPORT_RESERVEDMIN

) {

lowportmin = old;

return (EINVAL);

}

return (error);

case IPCTL_LOWPORTMAX:

old = lowportmax;

error = sysctl_int(oldp, oldlenp, newp, newlen, &lowportmax);

if (lowportmin >= lowportmax

|| lowportmax > IPPORT_RESERVEDMAX

|| lowportmax < IPPORT_RESERVEDMIN

) {

lowportmax = old;

return (EINVAL);

}

return (error);

#endif

case IPCTL_MAXFRAGPACKETS:

return (sysctl_int(oldp, oldlenp, newp, newlen,

&ip_maxfragpackets));

default:

return (EOPNOTSUPP);

}

CVSweb <webmaster@jp.NetBSD.org>