src/sys/netinet/ip_input.c - diff

Return to ip_input.c CVS log

Up to [cvs.NetBSD.org] / src / sys / netinet

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/sys/netinet/ip_input.c between version 1.93.2.5 and 1.102

version 1.93.2.5, 2001/02/11 19:17:14

version 1.102, 2000/02/20 00:56:39

Line 120

#include <sys/proc.h>

#include <sys/pool.h>

#include <uvm/uvm_extern.h>

#include <vm/vm.h>

#include <sys/sysctl.h>

#include <net/if.h>

Line 140

Line 139

#include <netinet/in_gif.h>

#include "gif.h"

#ifdef MROUTING

#include <netinet/ip_mroute.h>

#endif

#ifdef IPSEC

#include <netinet6/ipsec.h>

#include <netkey/key.h>

#include <netkey/key_debug.h>

#endif

#ifndef IPFORWARDING

Line 204 struct in_ifaddrhashhead *in_ifaddrhasht

Line 200 struct in_ifaddrhashhead *in_ifaddrhasht

struct ifqueue ipintrq;

struct ipstat ipstat;

u_int16_t ip_id;

int ip_defttl;

#ifdef PFIL_HOOKS

struct pfil_head inet_pfil_hook;

#endif

struct ipqhead ipq;

int ipq_locked;

Line 288 static void save_rte __P((u_char *, stru

Line 281 static void save_rte __P((u_char *, stru

void

ip_init()

{

struct protosw *pr;

int i;

pool_init(&ipqent_pool, sizeof(struct ipqent), 0, 0, 0, "ipqepl",

0, NULL, NULL, M_IPQ);

Line 308 ip_init()

Line 301 ip_init()

ip_id = time.tv_sec & 0xffff;

ipintrq.ifq_maxlen = ipqmaxlen;

TAILQ_INIT(&in_ifaddr);

in_ifaddrhashtbl = hashinit(IN_IFADDR_HASH_SIZE, HASH_LIST, M_IFADDR,

in_ifaddrhashtbl =

M_WAITOK, &in_ifaddrhash);

hashinit(IN_IFADDR_HASH_SIZE, M_IFADDR, M_WAITOK, &in_ifaddrhash);

if (ip_mtudisc != 0)

ip_mtudisc_timeout_q =

rt_timer_queue_create(ip_mtudisc_timeout);

#ifdef GATEWAY

ipflow_init();

#endif

#ifdef PFIL_HOOKS

/* Register our Packet Filter hook. */

inet_pfil_hook.ph_type = PFIL_TYPE_AF;

inet_pfil_hook.ph_af = AF_INET;

i = pfil_head_register(&inet_pfil_hook);

if (i != 0)

printf("ip_init: WARNING: unable to register pfil hook, "

"error %d\n", i);

#endif /* PFIL_HOOKS */

}

struct sockaddr_in ipaddr = { sizeof(ipaddr), AF_INET };

Line 357 ipintr()

Line 340 ipintr()

void

ip_input(struct mbuf *m)

{

struct ip *ip = NULL;

struct ipq *fp;

struct in_ifaddr *ia;

struct ifaddr *ifa;

struct ipqent *ipqe;

int hlen = 0, mff, len;

int downmatch;

#ifdef PFIL_HOOKS

struct packet_filter_hook *pfh;

struct mbuf *m0;

int rv;

#endif /* PFIL_HOOKS */

#ifdef DIAGNOSTIC

if ((m->m_flags & M_PKTHDR) == 0)

Line 423 ip_input(struct mbuf *m)

Line 411 ip_input(struct mbuf *m)

goto bad;

}

/* Retrieve the packet length. */

len = ntohs(ip->ip_len);

* Convert fields to host representation.

NTOHS(ip->ip_len);

NTOHS(ip->ip_off);

len = ip->ip_len;

* Check for additional length bogosity

Line 471 ip_input(struct mbuf *m)

Line 463 ip_input(struct mbuf *m)

* Note that filters must _never_ set this flag, as another filter

* in the list may have previously cleared it.

m0 = m;

* let ipfilter look at packet on the wire,

pfh = pfil_hook_get(PFIL_IN, &inetsw[ip_protox[IPPROTO_IP]].pr_pfh);

* not the decapsulated packet.

for (; pfh; pfh = pfh->pfil_link.tqe_next)

if (pfh->pfil_func) {

#ifdef IPSEC

rv = pfh->pfil_func(ip, hlen,

if (!ipsec_gethist(m, NULL))

m->m_pkthdr.rcvif, 0, &m0);

#else

if (rv)

if (1)

return;

#endif

m = m0;

{

if (m == NULL)

if (pfil_run_hooks(&inet_pfil_hook, &m, m->m_pkthdr.rcvif,

return;

PFIL_IN) != 0)

ip = mtod(m, struct ip *);

return;

}

if (m == NULL)

return;

ip = mtod(m, struct ip *);

}

#endif /* PFIL_HOOKS */

#ifdef ALTQ

/* XXX Temporary until ALTQ is changed to use a pfil hook */

if (altq_input != NULL && (*altq_input)(m, AF_INET) == 0) {

/* packet dropped by traffic conditioner */

return;

}

#endif

* Convert fields to host representation.

NTOHS(ip->ip_len);

NTOHS(ip->ip_off);

* Process options and, if not destined for us,

* ship it on. ip_dooptions returns 1 when an

Line 714 found:

Line 688 found:

* Switch out to protocol's input routine.

#if IFA_STATS

if (ia && ip)

ia->ia_ifa.ifa_data.ifad_inbytes += ip->ip_len;

#endif

ipstat.ips_delivered++;

{

Line 736 bad:

Line 709 bad:

struct mbuf *

ip_reass(ipqe, fp)

struct ipqent *ipqe;

struct ipq *fp;

{

struct mbuf *m = ipqe->ipqe_m;

struct ipqent *nq, *p, *q;

struct ip *ip;

struct mbuf *t;

int hlen = ipqe->ipqe_ip->ip_hl << 2;

Line 870 insert:

Line 843 insert:

* Make header visible.

ip->ip_len = next;

ip->ip_ttl = 0; /* xxx */

ip->ip_sum = 0;

ip->ip_src = fp->ipq_src;

ip->ip_dst = fp->ipq_dst;

LIST_REMOVE(fp, ipq_q);

Line 878 insert:

Line 853 insert:

m->m_data -= (ip->ip_hl << 2);

/* some debugging cruft by sklower, below, will go away soon */

if (m->m_flags & M_PKTHDR) { /* XXX this should be done elsewhere */

int plen = 0;

for (t = m; t; t = t->m_next)

plen += t->m_len;

m->m_pkthdr.len = plen;

Line 900 void

Line 875 void

ip_freef(fp)

struct ipq *fp;

{

struct ipqent *q, *p;

IPQ_LOCK_CHECK();

Line 922 ip_freef(fp)

Line 897 ip_freef(fp)

void

ip_slowtimo()

{

struct ipq *fp, *nfp;

int s = splsoftnet();

IPQ_LOCK();

Line 973 int

Line 948 int

ip_dooptions(m)

struct mbuf *m;

{

struct ip *ip = mtod(m, struct ip *);

u_char *cp, *cp0;

struct ip_timestamp *ipt;

struct in_ifaddr *ia;

int opt, optlen, cnt, off, code, type = ICMP_PARAMPROB, forward = 0;

struct in_addr dst;

struct in_addr *sin, dst;

n_time ntime;

dst = ip->ip_dst;

Line 991 ip_dooptions(m)

Line 966 ip_dooptions(m)

if (opt == IPOPT_NOP)

optlen = 1;

else {

if (cnt < IPOPT_OLEN + sizeof(*cp)) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

optlen = cp[IPOPT_OLEN];

if (optlen < IPOPT_OLEN + sizeof(*cp) || optlen > cnt) {

if (optlen <= 0 || optlen > cnt) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

Line 1022 ip_dooptions(m)

Line 993 ip_dooptions(m)

code = ICMP_UNREACH_NET_PROHIB;

goto bad;

}

if (optlen < IPOPT_OFFSET + sizeof(*cp)) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

if ((off = cp[IPOPT_OFFSET]) < IPOPT_MINOFF) {

code = &cp[IPOPT_OFFSET] - (u_char *)ip;

goto bad;

Line 1045 ip_dooptions(m)

Line 1012 ip_dooptions(m)

break;

}

off--; /* 0 origin */

if ((off + sizeof(struct in_addr)) > optlen) {

if (off > optlen - sizeof(struct in_addr)) {

* End of source route. Should be for us.

Line 1077 ip_dooptions(m)

Line 1044 ip_dooptions(m)

break;

case IPOPT_RR:

if (optlen < IPOPT_OFFSET + sizeof(*cp)) {

code = &cp[IPOPT_OLEN] - (u_char *)ip;

goto bad;

}

if ((off = cp[IPOPT_OFFSET]) < IPOPT_MINOFF) {

code = &cp[IPOPT_OFFSET] - (u_char *)ip;

goto bad;

Line 1089 ip_dooptions(m)

Line 1052 ip_dooptions(m)

* If no space remains, ignore.

off--; /* 0 origin */

if ((off + sizeof(struct in_addr)) > optlen)

if (off > optlen - sizeof(struct in_addr))

break;

bcopy((caddr_t)(&ip->ip_dst), (caddr_t)&ipaddr.sin_addr,

sizeof(ipaddr.sin_addr));

Line 1112 ip_dooptions(m)

Line 1075 ip_dooptions(m)

case IPOPT_TS:

code = cp - (u_char *)ip;

ipt = (struct ip_timestamp *)cp;

if (ipt->ipt_len < 4 || ipt->ipt_len > 40) {

if (ipt->ipt_len < 5)

code = (u_char *)&ipt->ipt_len - (u_char *)ip;

goto bad;

}

if (ipt->ipt_ptr < 5) {

code = (u_char *)&ipt->ipt_ptr - (u_char *)ip;

goto bad;

}

if (ipt->ipt_ptr > ipt->ipt_len - sizeof (int32_t)) {

if (++ipt->ipt_oflw == 0) {

if (++ipt->ipt_oflw == 0)

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip;

goto bad;

}

break;

}

cp0 = (cp + ipt->ipt_ptr - 1);

sin = (struct in_addr *)(cp + ipt->ipt_ptr - 1);

switch (ipt->ipt_flg) {

case IPOPT_TS_TSONLY:

Line 1136 ip_dooptions(m)

Line 1090 ip_dooptions(m)

case IPOPT_TS_TSANDADDR:

if (ipt->ipt_ptr - 1 + sizeof(n_time) +

sizeof(struct in_addr) > ipt->ipt_len) {

sizeof(struct in_addr) > ipt->ipt_len)

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip;

goto bad;

}

ipaddr.sin_addr = dst;

ia = ifatoia(ifaof_ifpforaddr(sintosa(&ipaddr),

m->m_pkthdr.rcvif));

if (ia == 0)

continue;

bcopy(&ia->ia_addr.sin_addr,

bcopy((caddr_t)&ia->ia_addr.sin_addr,

cp0, sizeof(struct in_addr));

(caddr_t)sin, sizeof(struct in_addr));

ipt->ipt_ptr += sizeof(struct in_addr);

break;

case IPOPT_TS_PRESPEC:

if (ipt->ipt_ptr - 1 + sizeof(n_time) +

sizeof(struct in_addr) > ipt->ipt_len) {

sizeof(struct in_addr) > ipt->ipt_len)

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip;

goto bad;

}

bcopy((caddr_t)sin, (caddr_t)&ipaddr.sin_addr,

bcopy(cp0, &ipaddr.sin_addr,

sizeof(struct in_addr));

if (ifatoia(ifa_ifwithaddr(sintosa(&ipaddr)))

== NULL)

Line 1167 ip_dooptions(m)

Line 1115 ip_dooptions(m)

break;

default:

/* XXX can't take &ipt->ipt_flg */

code = (u_char *)&ipt->ipt_ptr -

(u_char *)ip + 1;

goto bad;

}

ntime = iptime();

cp0 = (u_char *) &ntime; /* XXX grumble, GCC... */

bcopy((caddr_t)&ntime, (caddr_t)cp + ipt->ipt_ptr - 1,

bcopy(cp0, (caddr_t)cp + ipt->ipt_ptr - 1,

sizeof(n_time));

ipt->ipt_ptr += sizeof(n_time);

}

Line 1203 struct in_ifaddr *

Line 1147 struct in_ifaddr *

ip_rtaddr(dst)

struct in_addr dst;

{

struct sockaddr_in *sin;

sin = satosin(&ipforward_rt.ro_dst);

Line 1254 save_rte(option, dst)

Line 1198 save_rte(option, dst)

struct mbuf *

ip_srcroute()

{

struct in_addr *p, *q;

struct mbuf *m;

if (ip_nhops == 0)

return ((struct mbuf *)0);

Line 1324 ip_srcroute()

Line 1268 ip_srcroute()

void

ip_stripoptions(m, mopt)

struct mbuf *m;

struct mbuf *mopt;

{

int i;

struct ip *ip = mtod(m, struct ip *);

caddr_t opts;

int olen;

olen = (ip->ip_hl << 2) - sizeof (struct ip);

Line 1371 ip_forward(m, srcrt)

Line 1315 ip_forward(m, srcrt)

struct mbuf *m;

int srcrt;

{

struct ip *ip = mtod(m, struct ip *);

struct sockaddr_in *sin;

struct rtentry *rt;

int error, type = 0, code = 0;

struct mbuf *mcopy;

n_long dest;

Line 1422 ip_forward(m, srcrt)

Line 1366 ip_forward(m, srcrt)

* Save at most 68 bytes of the packet in case

* we need to generate an ICMP message to the src.

* Pullup to avoid sharing mbuf cluster between m and mcopy.

mcopy = m_copym(m, 0, imin((int)ip->ip_len, 68), M_DONTWAIT);

mcopy = m_copy(m, 0, imin((int)ip->ip_len, 68));

if (mcopy)

mcopy = m_pullup(mcopy, ip->ip_hl << 2);

* If forwarding packet using same interface that it came in on,

Line 1462 ip_forward(m, srcrt)

Line 1403 ip_forward(m, srcrt)

}

#ifdef IPSEC

/* Don't lookup socket in forwading case */

m->m_pkthdr.rcvif = NULL;

(void)ipsec_setsocket(m, NULL);

#endif /*IPSEC*/

#endif

error = ip_output(m, (struct mbuf *)0, &ipforward_rt,

(IP_FORWARDING | (ip_directedbcast ? IP_ALLOWBROADCAST : 0)), 0);

if (error)

Line 1574 ip_forward(m, srcrt)

Line 1514 ip_forward(m, srcrt)

void

ip_savecontrol(inp, mp, ip, m)

struct inpcb *inp;

struct mbuf **mp;

struct ip *ip;

struct mbuf *m;

{

if (inp->inp_socket->so_options & SO_TIMESTAMP) {

Line 1692 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1632 ip_sysctl(name, namelen, oldp, oldlenp,

case IPCTL_ANONPORTMIN:

old = anonportmin;

error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmin);

if (anonportmin >= anonportmax || anonportmin < 0

if (anonportmin >= anonportmax || anonportmin > 65535

|| anonportmin > 65535

#ifndef IPNOPRIVPORTS

|| anonportmin < IPPORT_RESERVED

#endif

Line 1705 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1644 ip_sysctl(name, namelen, oldp, oldlenp,

case IPCTL_ANONPORTMAX:

old = anonportmax;

error = sysctl_int(oldp, oldlenp, newp, newlen, &anonportmax);

if (anonportmin >= anonportmax || anonportmax < 0

if (anonportmin >= anonportmax || anonportmax > 65535

|| anonportmax > 65535

#ifndef IPNOPRIVPORTS

|| anonportmax < IPPORT_RESERVED

#endif

Line 1744 ip_sysctl(name, namelen, oldp, oldlenp,

Line 1682 ip_sysctl(name, namelen, oldp, oldlenp,

&ip_gif_ttl));

#endif

#ifndef IPNOPRIVPORTS

case IPCTL_LOWPORTMIN:

old = lowportmin;

error = sysctl_int(oldp, oldlenp, newp, newlen, &lowportmin);

if (lowportmin >= lowportmax

|| lowportmin > IPPORT_RESERVEDMAX

|| lowportmin < IPPORT_RESERVEDMIN

) {

lowportmin = old;

return (EINVAL);

}

return (error);

case IPCTL_LOWPORTMAX:

old = lowportmax;

error = sysctl_int(oldp, oldlenp, newp, newlen, &lowportmax);

if (lowportmin >= lowportmax

|| lowportmax > IPPORT_RESERVEDMAX

|| lowportmax < IPPORT_RESERVEDMIN

) {

lowportmax = old;

return (EINVAL);

}

return (error);

#endif

default:

return (EOPNOTSUPP);

}

CVSweb <webmaster@jp.NetBSD.org>