src/sys/netinet/ip_input.c - diff

Return to ip_input.c CVS log

Up to [cvs.NetBSD.org] / src / sys / netinet

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/sys/netinet/ip_input.c between version 1.110 and 1.123

version 1.110, 2000/03/31 08:34:20

version 1.123, 2000/12/14 17:36:44

Line 120

#include <sys/proc.h>

#include <sys/pool.h>

#include <vm/vm.h>

#include <uvm/uvm_extern.h>

#include <sys/sysctl.h>

#include <net/if.h>

Line 134

Line 135

#include <netinet/in_pcb.h>

#include <netinet/in_var.h>

#include <netinet/ip_var.h>

#include <netinet/ip_mroute.h>

#include <netinet/ip_icmp.h>

/* just for gif_ttl */

#include <netinet/in_gif.h>

#include "gif.h"

#ifdef MROUTING

#include <netinet/ip_mroute.h>

#endif

#ifdef IPSEC

#include <netinet6/ipsec.h>

#include <netkey/key.h>

#include <netkey/key_debug.h>

#endif

#ifndef IPFORWARDING

Line 202 struct ifqueue ipintrq;

Line 205 struct ifqueue ipintrq;

struct ipstat ipstat;

u_int16_t ip_id;

#ifdef PFIL_HOOKS

struct pfil_head inet_pfil_hook;

#endif

struct ipqhead ipq;

int ipq_locked;

Line 301 ip_init()

Line 308 ip_init()

ip_id = time.tv_sec & 0xffff;

ipintrq.ifq_maxlen = ipqmaxlen;

TAILQ_INIT(&in_ifaddr);

in_ifaddrhashtbl =

in_ifaddrhashtbl = hashinit(IN_IFADDR_HASH_SIZE, HASH_LIST, M_IFADDR,

hashinit(IN_IFADDR_HASH_SIZE, M_IFADDR, M_WAITOK, &in_ifaddrhash);

M_WAITOK, &in_ifaddrhash);

if (ip_mtudisc != 0)

ip_mtudisc_timeout_q =

rt_timer_queue_create(ip_mtudisc_timeout);

#ifdef GATEWAY

ipflow_init();

#endif

#ifdef PFIL_HOOKS

/* Register our Packet Filter hook. */

inet_pfil_hook.ph_key = (void *)(u_long) AF_INET;

inet_pfil_hook.ph_dlt = DLT_RAW;

i = pfil_head_register(&inet_pfil_hook);

if (i != 0)

printf("ip_init: WARNING: unable to register pfil hook, "

"error %d\n", i);

#endif /* PFIL_HOOKS */

}

struct sockaddr_in ipaddr = { sizeof(ipaddr), AF_INET };

Line 347 ip_input(struct mbuf *m)

Line 364 ip_input(struct mbuf *m)

struct ipqent *ipqe;

int hlen = 0, mff, len;

int downmatch;

#ifdef PFIL_HOOKS

struct packet_filter_hook *pfh;

struct mbuf *m0;

int rv;

#endif /* PFIL_HOOKS */

#ifdef DIAGNOSTIC

if ((m->m_flags & M_PKTHDR) == 0)

Line 411 ip_input(struct mbuf *m)

Line 423 ip_input(struct mbuf *m)

goto bad;

}

/* Retrieve the packet length. */

* Convert fields to host representation.

len = ntohs(ip->ip_len);

NTOHS(ip->ip_len);

NTOHS(ip->ip_off);

len = ip->ip_len;

* Check for additional length bogosity

Line 463 ip_input(struct mbuf *m)

Line 471 ip_input(struct mbuf *m)

* Note that filters must _never_ set this flag, as another filter

* in the list may have previously cleared it.

m0 = m;

if (pfil_run_hooks(&inet_pfil_hook, &m, m->m_pkthdr.rcvif,

pfh = pfil_hook_get(PFIL_IN, &inetsw[ip_protox[IPPROTO_IP]].pr_pfh);

PFIL_IN) != 0)

for (; pfh; pfh = pfh->pfil_link.tqe_next)

return;

if (pfh->pfil_func) {

if (m == NULL)

rv = pfh->pfil_func(ip, hlen,

return;

m->m_pkthdr.rcvif, 0, &m0);

ip = mtod(m, struct ip *);

if (rv)

return;

m = m0;

if (m == NULL)

return;

ip = mtod(m, struct ip *);

}

#endif /* PFIL_HOOKS */

#ifdef ALTQ

/* XXX Temporary until ALTQ is changed to use a pfil hook */

if (altq_input != NULL && (*altq_input)(m, AF_INET) == 0) {

/* packet dropped by traffic conditioner */

return;

}

#endif

* Convert fields to host representation.

NTOHS(ip->ip_len);

NTOHS(ip->ip_off);

* Process options and, if not destined for us,

* ship it on. ip_dooptions returns 1 when an

Line 688 found:

Line 703 found:

* Switch out to protocol's input routine.

#if IFA_STATS

ia->ia_ifa.ifa_data.ifad_inbytes += ip->ip_len;

if (ia && ip)

ia->ia_ifa.ifa_data.ifad_inbytes += ip->ip_len;

#endif

ipstat.ips_delivered++;

{

Line 964 ip_dooptions(m)

Line 980 ip_dooptions(m)

if (opt == IPOPT_NOP)

optlen = 1;

else {

if (cnt < IPOPT_OLEN + sizeof(*cp)) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

optlen = cp[IPOPT_OLEN];

if (optlen <= 0 || optlen > cnt) {

if (optlen < IPOPT_OLEN + sizeof(*cp) || optlen > cnt) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

Line 991 ip_dooptions(m)

Line 1011 ip_dooptions(m)

code = ICMP_UNREACH_NET_PROHIB;

goto bad;

}

if (optlen < IPOPT_OFFSET + sizeof(*cp)) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

if ((off = cp[IPOPT_OFFSET]) < IPOPT_MINOFF) {

code = &cp[IPOPT_OFFSET] - (u_char *)ip;

goto bad;

Line 1010 ip_dooptions(m)

Line 1034 ip_dooptions(m)

break;

}

off--; /* 0 origin */

if (off > optlen - sizeof(struct in_addr)) {

if ((off + sizeof(struct in_addr)) > optlen) {

* End of source route. Should be for us.

Line 1042 ip_dooptions(m)

Line 1066 ip_dooptions(m)

break;

case IPOPT_RR:

if (optlen < IPOPT_OFFSET + sizeof(*cp)) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

if ((off = cp[IPOPT_OFFSET]) < IPOPT_MINOFF) {

code = &cp[IPOPT_OFFSET] - (u_char *)ip;

goto bad;

Line 1050 ip_dooptions(m)

Line 1078 ip_dooptions(m)

* If no space remains, ignore.

off--; /* 0 origin */

if (off > optlen - sizeof(struct in_addr))

if ((off + sizeof(struct in_addr)) > optlen)

break;

bcopy((caddr_t)(&ip->ip_dst), (caddr_t)&ipaddr.sin_addr,

sizeof(ipaddr.sin_addr));

Line 1073 ip_dooptions(m)

Line 1101 ip_dooptions(m)

case IPOPT_TS:

code = cp - (u_char *)ip;

ipt = (struct ip_timestamp *)cp;

if (ipt->ipt_len < 5)

if (ipt->ipt_len < 4 || ipt->ipt_len > 40) {

code = (u_char *)&ipt->ipt_len - (u_char *)ip;

goto bad;

}

if (ipt->ipt_ptr < 5) {

code = (u_char *)&ipt->ipt_ptr - (u_char *)ip;

goto bad;

}

if (ipt->ipt_ptr > ipt->ipt_len - sizeof (int32_t)) {

if (++ipt->ipt_oflw == 0)

if (++ipt->ipt_oflw == 0) {

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip;

goto bad;

}

break;

}

cp0 = (cp + ipt->ipt_ptr - 1);

Line 1088 ip_dooptions(m)

Line 1125 ip_dooptions(m)

case IPOPT_TS_TSANDADDR:

if (ipt->ipt_ptr - 1 + sizeof(n_time) +

sizeof(struct in_addr) > ipt->ipt_len)

sizeof(struct in_addr) > ipt->ipt_len) {

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip;

goto bad;

}

ipaddr.sin_addr = dst;

ia = ifatoia(ifaof_ifpforaddr(sintosa(&ipaddr),

m->m_pkthdr.rcvif));

Line 1102 ip_dooptions(m)

Line 1142 ip_dooptions(m)

case IPOPT_TS_PRESPEC:

if (ipt->ipt_ptr - 1 + sizeof(n_time) +

sizeof(struct in_addr) > ipt->ipt_len)

sizeof(struct in_addr) > ipt->ipt_len) {

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip;

goto bad;

}

bcopy(cp0, &ipaddr.sin_addr,

sizeof(struct in_addr));

if (ifatoia(ifa_ifwithaddr(sintosa(&ipaddr)))

Line 1113 ip_dooptions(m)

Line 1156 ip_dooptions(m)

break;

default:

/* XXX can't take &ipt->ipt_flg */

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip + 1;

goto bad;

}

ntime = iptime();

Line 1365 ip_forward(m, srcrt)

Line 1411 ip_forward(m, srcrt)

* Save at most 68 bytes of the packet in case

* we need to generate an ICMP message to the src.

* Pullup to avoid sharing mbuf cluster between m and mcopy.

mcopy = m_copy(m, 0, imin((int)ip->ip_len, 68));

mcopy = m_copym(m, 0, imin((int)ip->ip_len, 68), M_DONTWAIT);

if (mcopy)

mcopy = m_pullup(mcopy, ip->ip_hl << 2);

* If forwarding packet using same interface that it came in on,

Line 1632 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1681 ip_sysctl(name, namelen, oldp, oldlenp,

case IPCTL_ANONPORTMIN:

old = anonportmin;

error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmin);

if (anonportmin >= anonportmax || anonportmin > 65535

if (anonportmin >= anonportmax || anonportmin < 0

|| anonportmin > 65535

#ifndef IPNOPRIVPORTS

|| anonportmin < IPPORT_RESERVED

#endif

Line 1644 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1694 ip_sysctl(name, namelen, oldp, oldlenp,

case IPCTL_ANONPORTMAX:

old = anonportmax;

error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmax);

if (anonportmin >= anonportmax || anonportmax > 65535

if (anonportmin >= anonportmax || anonportmax < 0

|| anonportmax > 65535

#ifndef IPNOPRIVPORTS

|| anonportmax < IPPORT_RESERVED

#endif

Line 1682 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1733 ip_sysctl(name, namelen, oldp, oldlenp,

&ip_gif_ttl));

#endif

#ifndef IPNOPRIVPORTS

case IPCTL_LOWPORTMIN:

old = lowportmin;

error = sysctl_int(oldp, oldlenp, newp, newlen, &lowportmin);

if (lowportmin >= lowportmax

|| lowportmin > IPPORT_RESERVEDMAX

|| lowportmin < IPPORT_RESERVEDMIN

) {

lowportmin = old;

return (EINVAL);

}

return (error);

case IPCTL_LOWPORTMAX:

old = lowportmax;

error = sysctl_int(oldp, oldlenp, newp, newlen, &lowportmax);

if (lowportmin >= lowportmax

|| lowportmax > IPPORT_RESERVEDMAX

|| lowportmax < IPPORT_RESERVEDMIN

) {

lowportmax = old;

return (EINVAL);

}

return (error);

#endif

default:

return (EOPNOTSUPP);

}

CVSweb <webmaster@jp.NetBSD.org>