src/sys/netinet6/ip6_input.c - diff

Return to ip6_input.c CVS log

Up to [cvs.NetBSD.org] / src / sys / netinet6

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/sys/netinet6/ip6_input.c between version 1.128 and 1.143

version 1.128, 2009/09/16 15:23:05

version 1.143, 2013/06/29 21:06:58

Line 64

#include <sys/cdefs.h>

__KERNEL_RCSID(0, "$NetBSD$");

#include "opt_gateway.h"

#include "opt_inet.h"

#include "opt_inet6.h"

#include "opt_ipsec.h"

#include "opt_pfil_hooks.h"

#include "opt_compat_netbsd.h"

#include <sys/param.h>

Line 84 __KERNEL_RCSID(0, "$NetBSD$");

#include <sys/syslog.h>

#include <sys/proc.h>

#include <sys/sysctl.h>

#include <sys/cprng.h>

#include <net/if.h>

#include <net/if_types.h>

#include <net/if_dl.h>

#include <net/route.h>

#include <net/netisr.h>

#ifdef PFIL_HOOKS

#include <net/pfil.h>

#endif

#include <netinet/in.h>

#include <netinet/in_systm.h>

Line 101 __KERNEL_RCSID(0, "$NetBSD$");

Line 100 __KERNEL_RCSID(0, "$NetBSD$");

#include <netinet/ip_icmp.h>

#endif /* INET */

#include <netinet/ip6.h>

#include <netinet/portalgo.h>

#include <netinet6/in6_var.h>

#include <netinet6/ip6_var.h>

#include <netinet6/ip6_private.h>

Line 111 __KERNEL_RCSID(0, "$NetBSD$");

#include <netinet6/nd6.h>

#ifdef IPSEC

#include <netinet6/ipsec.h>

#include <netinet6/ipsec_private.h>

#endif

#ifdef FAST_IPSEC

#include <netipsec/ipsec.h>

#include <netipsec/ipsec6.h>

#include <netipsec/key.h>

#endif /* FAST_IPSEC */

#endif /* IPSEC */

#ifdef COMPAT_50

#include <compat/sys/time.h>

Line 150 int ip6_forward_srcrt; /* XXX */

Line 145 int ip6_forward_srcrt; /* XXX */

int ip6_sourcecheck; /* XXX */

int ip6_sourcecheck_interval; /* XXX */

#ifdef PFIL_HOOKS

pfil_head_t *inet6_pfil_hook;

struct pfil_head inet6_pfil_hook;

#endif

percpu_t *ip6stat_percpu;

static void ip6_init2(void *);

static struct m_tag *ip6_setdstifaddr(struct mbuf *, const struct in6_ifaddr *);

static int ip6_hopopts_input(u_int32_t *, u_int32_t *, struct mbuf **, int *);

static int ip6_process_hopopts(struct mbuf *, u_int8_t *, int, u_int32_t *,

u_int32_t *);

static struct mbuf *ip6_pullexthdr(struct mbuf *, size_t, int);

static void sysctl_net_inet6_ip6_setup(struct sysctllog **);

Line 189 ip6_init(void)

Line 183 ip6_init(void)

addrsel_policy_init();

nd6_init();

frag6_init();

ip6_desync_factor = arc4random() % MAX_TEMP_DESYNC_FACTOR;

ip6_desync_factor = cprng_fast32() % MAX_TEMP_DESYNC_FACTOR;

ip6_init2((void *)0);

ip6_init2(NULL);

#ifdef GATEWAY

ip6flow_init(ip6_hashsize);

#endif

#ifdef PFIL_HOOKS

/* Register our Packet Filter hook. */

inet6_pfil_hook.ph_type = PFIL_TYPE_AF;

inet6_pfil_hook = pfil_head_create(PFIL_TYPE_AF, (void *)AF_INET6);

inet6_pfil_hook.ph_af = AF_INET6;

KASSERT(inet6_pfil_hook != NULL);

i = pfil_head_register(&inet6_pfil_hook);

if (i != 0)

printf("ip6_init: WARNING: unable to register pfil hook, "

"error %d\n", i);

#endif /* PFIL_HOOKS */

ip6stat_percpu = percpu_alloc(sizeof(uint64_t) * IP6_NSTATS);

}

Line 270 ip6_input(struct mbuf *m)

Line 257 ip6_input(struct mbuf *m)

struct sockaddr dst;

struct sockaddr_in6 dst6;

} u;

#ifdef FAST_IPSEC

#ifdef IPSEC

struct m_tag *mtag;

struct tdb_ident *tdbi;

struct secpolicy *sp;

int s, error;

#endif

#ifdef IPSEC

* should the inner packet be considered authentic?

* see comment in ah4_input().

m->m_flags &= ~M_AUTHIPHDR;

m->m_flags &= ~M_AUTHIPDGM;

#endif

* make sure we don't have onion peering information into m_tag.

Line 349 ip6_input(struct mbuf *m)

Line 327 ip6_input(struct mbuf *m)

goto bad;

}

#if defined(IPSEC)

/* IPv6 fast forwarding is not compatible with IPsec. */

m->m_flags &= ~M_CANFASTFWD;

#else

* Assume that we can create a fast-forward IP flow entry

* based on this packet.

m->m_flags |= M_CANFASTFWD;

#endif

#ifdef PFIL_HOOKS

* Run through list of hooks for input packets. If there are any

* filters which require that additional packets in the flow are

Line 372 ip6_input(struct mbuf *m)

Line 344 ip6_input(struct mbuf *m)

* let ipfilter look at packet on the wire,

* not the decapsulated packet.

#ifdef IPSEC

#if defined(IPSEC)

if (!ipsec_getnhist(m))

#elif defined(FAST_IPSEC)

if (!ipsec_indone(m))

#else

if (1)

Line 383 ip6_input(struct mbuf *m)

Line 353 ip6_input(struct mbuf *m)

struct in6_addr odst;

odst = ip6->ip6_dst;

if (pfil_run_hooks(&inet6_pfil_hook, &m, m->m_pkthdr.rcvif,

if (pfil_run_hooks(inet6_pfil_hook, &m, m->m_pkthdr.rcvif,

PFIL_IN) != 0)

return;

if (m == NULL)

Line 391 ip6_input(struct mbuf *m)

Line 361 ip6_input(struct mbuf *m)

ip6 = mtod(m, struct ip6_hdr *);

srcrt = !IN6_ARE_ADDR_EQUAL(&odst, &ip6->ip6_dst);

}

#endif /* PFIL_HOOKS */

IP6_STATINC(IP6_STAT_NXTHIST + ip6->ip6_nxt);

Line 784 ip6_input(struct mbuf *m)

Line 753 ip6_input(struct mbuf *m)

}

#ifdef IPSEC

* enforce IPsec policy checking if we are seeing last header.

* note that we do not visit this with protocols with pcb layer

* code - like udp/tcp/raw ip.

if ((inet6sw[ip6_protox[nxt]].pr_flags & PR_LASTHDR) != 0 &&

ipsec6_in_reject(m, NULL)) {

IPSEC6_STATINC(IPSEC_STAT_IN_POLVIO);

goto bad;

}

#endif

#ifdef FAST_IPSEC

* enforce IPsec policy checking if we are seeing last header.

* note that we do not visit this with protocols with pcb layer

Line 832 ip6_input(struct mbuf *m)

Line 789 ip6_input(struct mbuf *m)

if (error)

goto bad;

}

#endif /* FAST_IPSEC */

#endif /* IPSEC */

nxt = (*inet6sw[ip6_protox[nxt]].pr_input)(&m, &off, nxt);

Line 880 ip6_getdstifaddr(struct mbuf *m)

Line 837 ip6_getdstifaddr(struct mbuf *m)

* rtalertp - XXX: should be stored more smart way

static int

int

ip6_hopopts_input(u_int32_t *plenp, u_int32_t *rtalertp,

struct mbuf **mp, int *offp)

{

Line 925 ip6_hopopts_input(u_int32_t *plenp, u_in

Line 882 ip6_hopopts_input(u_int32_t *plenp, u_in

* (RFC2460 p7), opthead is pointer into data content in m, and opthead to

* opthead + hbhlen is located in continuous memory region.

int

static int

ip6_process_hopopts(struct mbuf *m, u_int8_t *opthead, int hbhlen,

u_int32_t *rtalertp, u_int32_t *plenp)

{

Line 1792 sysctl_net_inet6_ip6_setup(struct sysctl

Line 1749 sysctl_net_inet6_ip6_setup(struct sysctl

IPV6CTL_ACCEPT_RTADV, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "rtadv_maxroutes",

SYSCTL_DESCR("Maximum number of routes accepted via router advertisements"),

NULL, 0, &ip6_rtadv_maxroutes, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

IPV6CTL_RTADV_MAXROUTES, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT,

CTLTYPE_INT, "rtadv_numroutes",

SYSCTL_DESCR("Current number of routes accepted via router advertisements"),

NULL, 0, &nd6_numroutes, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

IPV6CTL_RTADV_NUMROUTES, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "keepfaith",

SYSCTL_DESCR("Activate faith interface"),

NULL, 0, &ip6_keepfaith, 0,

Line 1972 sysctl_net_inet6_ip6_setup(struct sysctl

Line 1943 sysctl_net_inet6_ip6_setup(struct sysctl

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

#endif

/* anonportalgo RFC6056 subtree */

const struct sysctlnode *portalgo_node;

sysctl_createv(clog, 0, NULL, &portalgo_node,

CTLFLAG_PERMANENT,

CTLTYPE_NODE, "anonportalgo",

SYSCTL_DESCR("Anonymous port algorithm selection (RFC 6056)"),

NULL, 0, NULL, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6, CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, &portalgo_node, NULL,

CTLFLAG_PERMANENT,

CTLTYPE_STRING, "available",

SYSCTL_DESCR("available algorithms"),

sysctl_portalgo_available, 0, NULL, PORTALGO_MAXLEN,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, &portalgo_node, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_STRING, "selected",

SYSCTL_DESCR("selected algorithm"),

sysctl_portalgo_selected6, 0, NULL, PORTALGO_MAXLEN,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, &portalgo_node, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_STRUCT, "reserve",

SYSCTL_DESCR("bitmap of reserved ports"),

sysctl_portalgo_reserve6, 0, NULL, 0,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "neighborgcthresh",

SYSCTL_DESCR("Maximum number of entries in neighbor"

" cache"),

NULL, 1, &ip6_neighborgcthresh, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "maxifprefixes",

SYSCTL_DESCR("Maximum number of prefixes created by"

" route advertisement per interface"),

NULL, 1, &ip6_maxifprefixes, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "maxifdefrouters",

SYSCTL_DESCR("Maximum number of default routers created"

" by route advertisement per interface"),

NULL, 1, &ip6_maxifdefrouters, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "maxdynroutes",

SYSCTL_DESCR("Maximum number of routes created via"

" redirect"),

NULL, 1, &ip6_maxdynroutes, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

}

void

CVSweb <webmaster@jp.NetBSD.org>