src/sys/netinet/ip_input.c - diff

Return to ip_input.c CVS log

Up to [cvs.NetBSD.org] / src / sys / netinet

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/sys/netinet/ip_input.c between version 1.114.4.1 and 1.129

version 1.114.4.1, 2000/08/26 16:38:33

version 1.129, 2001/03/02 02:05:36

Line 120

#include <sys/proc.h>

#include <sys/pool.h>

#include <vm/vm.h>

#include <uvm/uvm_extern.h>

#include <sys/sysctl.h>

#include <net/if.h>

Line 146

Line 147

#ifdef IPSEC

#include <netinet6/ipsec.h>

#include <netkey/key.h>

#include <netkey/key_debug.h>

#endif

#ifndef IPFORWARDING

Line 205 struct ifqueue ipintrq;

struct ipstat ipstat;

u_int16_t ip_id;

#ifdef PFIL_HOOKS

struct pfil_head inet_pfil_hook;

#endif

struct ipqhead ipq;

int ipq_locked;

Line 304 ip_init()

Line 308 ip_init()

ip_id = time.tv_sec & 0xffff;

ipintrq.ifq_maxlen = ipqmaxlen;

TAILQ_INIT(&in_ifaddr);

in_ifaddrhashtbl =

in_ifaddrhashtbl = hashinit(IN_IFADDR_HASH_SIZE, HASH_LIST, M_IFADDR,

hashinit(IN_IFADDR_HASH_SIZE, M_IFADDR, M_WAITOK, &in_ifaddrhash);

M_WAITOK, &in_ifaddrhash);

if (ip_mtudisc != 0)

ip_mtudisc_timeout_q =

rt_timer_queue_create(ip_mtudisc_timeout);

#ifdef GATEWAY

ipflow_init();

#endif

#ifdef PFIL_HOOKS

/* Register our Packet Filter hook. */

inet_pfil_hook.ph_type = PFIL_TYPE_AF;

inet_pfil_hook.ph_af = AF_INET;

i = pfil_head_register(&inet_pfil_hook);

if (i != 0)

printf("ip_init: WARNING: unable to register pfil hook, "

"error %d\n", i);

#endif /* PFIL_HOOKS */

}

struct sockaddr_in ipaddr = { sizeof(ipaddr), AF_INET };

Line 350 ip_input(struct mbuf *m)

Line 364 ip_input(struct mbuf *m)

struct ipqent *ipqe;

int hlen = 0, mff, len;

int downmatch;

#ifdef PFIL_HOOKS

struct packet_filter_hook *pfh;

struct mbuf *m0;

int rv;

#endif /* PFIL_HOOKS */

#ifdef DIAGNOSTIC

if ((m->m_flags & M_PKTHDR) == 0)

Line 409 ip_input(struct mbuf *m)

Line 418 ip_input(struct mbuf *m)

goto bad;

}

/* 127/8 must not appear on wire - RFC1122 */

if ((ntohl(ip->ip_dst.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET ||

(ntohl(ip->ip_src.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET) {

if ((m->m_pkthdr.rcvif->if_flags & IFF_LOOPBACK) == 0)

goto bad;

}

if (in_cksum(m, hlen) != 0) {

ipstat.ips_badsum++;

goto bad;

}

/* Retrieve the packet length. */

* Convert fields to host representation.

len = ntohs(ip->ip_len);

NTOHS(ip->ip_len);

NTOHS(ip->ip_off);

len = ip->ip_len;

* Check for additional length bogosity

Line 466 ip_input(struct mbuf *m)

Line 478 ip_input(struct mbuf *m)

* Note that filters must _never_ set this flag, as another filter

* in the list may have previously cleared it.

m0 = m;

pfh = pfil_hook_get(PFIL_IN, &inetsw[ip_protox[IPPROTO_IP]].pr_pfh);

* let ipfilter look at packet on the wire,

for (; pfh; pfh = pfh->pfil_link.tqe_next)

* not the decapsulated packet.

if (pfh->pfil_func) {

rv = pfh->pfil_func(ip, hlen,

#ifdef IPSEC

m->m_pkthdr.rcvif, 0, &m0);

if (!ipsec_gethist(m, NULL))

if (rv)

#else

return;

if (1)

m = m0;

#endif

if (m == NULL)

{

return;

if (pfil_run_hooks(&inet_pfil_hook, &m, m->m_pkthdr.rcvif,

ip = mtod(m, struct ip *);

PFIL_IN) != 0)

}

return;

if (m == NULL)

return;

ip = mtod(m, struct ip *);

}

#endif /* PFIL_HOOKS */

#ifdef ALTQ

/* XXX Temporary until ALTQ is changed to use a pfil hook */

if (altq_input != NULL && (*altq_input)(m, AF_INET) == 0) {

/* packet dropped by traffic conditioner */

return;

}

#endif

* Convert fields to host representation.

NTOHS(ip->ip_len);

NTOHS(ip->ip_off);

* Process options and, if not destined for us,

* ship it on. ip_dooptions returns 1 when an

Line 687 found:

Line 717 found:

IPQ_UNLOCK();

}

#ifdef IPSEC

* enforce IPsec policy checking if we are seeing last header.

* note that we do not visit this with protocols with pcb layer

* code - like udp/tcp/raw ip.

if ((inetsw[ip_protox[ip->ip_p]].pr_flags & PR_LASTHDR) != 0 &&

ipsec4_in_reject(m, NULL)) {

ipsecstat.in_polvio++;

goto bad;

}

#endif

* Switch out to protocol's input routine.

#if IFA_STATS

ia->ia_ifa.ifa_data.ifad_inbytes += ip->ip_len;

if (ia && ip)

ia->ia_ifa.ifa_data.ifad_inbytes += ip->ip_len;

#endif

ipstat.ips_delivered++;

{

Line 1398 ip_forward(m, srcrt)

Line 1442 ip_forward(m, srcrt)

* Save at most 68 bytes of the packet in case

* we need to generate an ICMP message to the src.

* Pullup to avoid sharing mbuf cluster between m and mcopy.

mcopy = m_copy(m, 0, imin((int)ip->ip_len, 68));

mcopy = m_copym(m, 0, imin((int)ip->ip_len, 68), M_DONTWAIT);

if (mcopy)

mcopy = m_pullup(mcopy, ip->ip_hl << 2);

* If forwarding packet using same interface that it came in on,

Line 1436 ip_forward(m, srcrt)

Line 1483 ip_forward(m, srcrt)

#ifdef IPSEC

/* Don't lookup socket in forwading case */

ipsec_setsocket(m, NULL);

(void)ipsec_setsocket(m, NULL);

#endif

error = ip_output(m, (struct mbuf *)0, &ipforward_rt,

(IP_FORWARDING | (ip_directedbcast ? IP_ALLOWBROADCAST : 0)), 0);

Line 1665 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1712 ip_sysctl(name, namelen, oldp, oldlenp,

case IPCTL_ANONPORTMIN:

old = anonportmin;

error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmin);

if (anonportmin >= anonportmax || anonportmin > 65535

if (anonportmin >= anonportmax || anonportmin < 0

|| anonportmin > 65535

#ifndef IPNOPRIVPORTS

|| anonportmin < IPPORT_RESERVED

#endif

Line 1677 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1725 ip_sysctl(name, namelen, oldp, oldlenp,

case IPCTL_ANONPORTMAX:

old = anonportmax;

error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmax);

if (anonportmin >= anonportmax || anonportmax > 65535

if (anonportmin >= anonportmax || anonportmax < 0

|| anonportmax > 65535

#ifndef IPNOPRIVPORTS

|| anonportmax < IPPORT_RESERVED

#endif

CVSweb <webmaster@jp.NetBSD.org>