src/sys/netinet6/ip6_input.c - diff

Return to ip6_input.c CVS log

Up to [cvs.NetBSD.org] / src / sys / netinet6

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/sys/netinet6/ip6_input.c between version 1.136 and 1.144

version 1.136, 2012/01/10 20:01:56

version 1.144, 2013/10/04 14:23:14

Line 68 __KERNEL_RCSID(0, "$NetBSD$");

#include "opt_inet.h"

#include "opt_inet6.h"

#include "opt_ipsec.h"

#include "opt_pfil_hooks.h"

#include "opt_compat_netbsd.h"

#include <sys/param.h>

Line 92 __KERNEL_RCSID(0, "$NetBSD$");

Line 91 __KERNEL_RCSID(0, "$NetBSD$");

#include <net/if_dl.h>

#include <net/route.h>

#include <net/netisr.h>

#ifdef PFIL_HOOKS

#include <net/pfil.h>

#endif

#include <netinet/in.h>

#include <netinet/in_systm.h>

Line 103 __KERNEL_RCSID(0, "$NetBSD$");

Line 100 __KERNEL_RCSID(0, "$NetBSD$");

#include <netinet/ip_icmp.h>

#endif /* INET */

#include <netinet/ip6.h>

#include <netinet/portalgo.h>

#include <netinet6/in6_var.h>

#include <netinet6/ip6_var.h>

#include <netinet6/ip6_private.h>

Line 112 __KERNEL_RCSID(0, "$NetBSD$");

Line 110 __KERNEL_RCSID(0, "$NetBSD$");

#include <netinet6/in6_ifattach.h>

#include <netinet6/nd6.h>

#ifdef KAME_IPSEC

#ifdef IPSEC

#include <netinet6/ipsec.h>

#include <netinet6/ipsec_private.h>

#endif

#ifdef FAST_IPSEC

#include <netipsec/ipsec.h>

#include <netipsec/ipsec6.h>

#include <netipsec/key.h>

#endif /* FAST_IPSEC */

#endif /* IPSEC */

#ifdef COMPAT_50

#include <compat/sys/time.h>

Line 152 int ip6_forward_srcrt; /* XXX */

Line 145 int ip6_forward_srcrt; /* XXX */

int ip6_sourcecheck; /* XXX */

int ip6_sourcecheck_interval; /* XXX */

#ifdef PFIL_HOOKS

pfil_head_t *inet6_pfil_hook;

struct pfil_head inet6_pfil_hook;

#endif

percpu_t *ip6stat_percpu;

Line 198 ip6_init(void)

Line 189 ip6_init(void)

#ifdef GATEWAY

ip6flow_init(ip6_hashsize);

#endif

#ifdef PFIL_HOOKS

/* Register our Packet Filter hook. */

inet6_pfil_hook.ph_type = PFIL_TYPE_AF;

inet6_pfil_hook = pfil_head_create(PFIL_TYPE_AF, (void *)AF_INET6);

inet6_pfil_hook.ph_af = AF_INET6;

KASSERT(inet6_pfil_hook != NULL);

i = pfil_head_register(&inet6_pfil_hook);

if (i != 0)

printf("ip6_init: WARNING: unable to register pfil hook, "

"error %d\n", i);

#endif /* PFIL_HOOKS */

ip6stat_percpu = percpu_alloc(sizeof(uint64_t) * IP6_NSTATS);

}

Line 273 ip6_input(struct mbuf *m)

Line 257 ip6_input(struct mbuf *m)

struct sockaddr dst;

struct sockaddr_in6 dst6;

} u;

#ifdef FAST_IPSEC

#ifdef IPSEC

struct m_tag *mtag;

struct tdb_ident *tdbi;

struct secpolicy *sp;

int s, error;

#endif

#ifdef KAME_IPSEC

* should the inner packet be considered authentic?

* see comment in ah4_input().

m->m_flags &= ~M_AUTHIPHDR;

m->m_flags &= ~M_AUTHIPDGM;

#endif

* make sure we don't have onion peering information into m_tag.

Line 352 ip6_input(struct mbuf *m)

Line 327 ip6_input(struct mbuf *m)

goto bad;

}

#if defined(KAME_IPSEC)

/* IPv6 fast forwarding is not compatible with IPsec. */

m->m_flags &= ~M_CANFASTFWD;

#else

* Assume that we can create a fast-forward IP flow entry

* based on this packet.

m->m_flags |= M_CANFASTFWD;

#endif

#ifdef PFIL_HOOKS

* Run through list of hooks for input packets. If there are any

* filters which require that additional packets in the flow are

Line 375 ip6_input(struct mbuf *m)

Line 344 ip6_input(struct mbuf *m)

* let ipfilter look at packet on the wire,

* not the decapsulated packet.

#ifdef KAME_IPSEC

#if defined(IPSEC)

if (!ipsec_getnhist(m))

#elif defined(FAST_IPSEC)

if (!ipsec_indone(m))

#else

if (1)

Line 386 ip6_input(struct mbuf *m)

Line 353 ip6_input(struct mbuf *m)

struct in6_addr odst;

odst = ip6->ip6_dst;

if (pfil_run_hooks(&inet6_pfil_hook, &m, m->m_pkthdr.rcvif,

if (pfil_run_hooks(inet6_pfil_hook, &m, m->m_pkthdr.rcvif,

PFIL_IN) != 0)

return;

if (m == NULL)

Line 394 ip6_input(struct mbuf *m)

Line 361 ip6_input(struct mbuf *m)

ip6 = mtod(m, struct ip6_hdr *);

srcrt = !IN6_ARE_ADDR_EQUAL(&odst, &ip6->ip6_dst);

}

#endif /* PFIL_HOOKS */

IP6_STATINC(IP6_STAT_NXTHIST + ip6->ip6_nxt);

Line 786 ip6_input(struct mbuf *m)

Line 752 ip6_input(struct mbuf *m)

}

#ifdef KAME_IPSEC

#ifdef IPSEC

* enforce IPsec policy checking if we are seeing last header.

* note that we do not visit this with protocols with pcb layer

* code - like udp/tcp/raw ip.

if ((inet6sw[ip6_protox[nxt]].pr_flags & PR_LASTHDR) != 0 &&

ipsec6_in_reject(m, NULL)) {

IPSEC6_STATINC(IPSEC_STAT_IN_POLVIO);

goto bad;

}

#endif

#ifdef FAST_IPSEC

* enforce IPsec policy checking if we are seeing last header.

* note that we do not visit this with protocols with pcb layer

Line 835 ip6_input(struct mbuf *m)

Line 789 ip6_input(struct mbuf *m)

if (error)

goto bad;

}

#endif /* FAST_IPSEC */

#endif /* IPSEC */

nxt = (*inet6sw[ip6_protox[nxt]].pr_input)(&m, &off, nxt);

Line 852 static struct m_tag *

Line 806 static struct m_tag *

ip6_setdstifaddr(struct mbuf *m, const struct in6_ifaddr *ia)

{

struct m_tag *mtag;

struct ip6aux *ip6a;

mtag = ip6_addaux(m);

if (mtag != NULL) {

if (mtag == NULL)

struct ip6aux *ip6a;

return NULL;

ip6a = (struct ip6aux *)(mtag + 1);

in6_setscope(&ip6a->ip6a_src, ia->ia_ifp, &ip6a->ip6a_scope_id);

if (in6_setscope(&ip6a->ip6a_src, ia->ia_ifp, &ip6a->ip6a_scope_id)) {

ip6a->ip6a_src = ia->ia_addr.sin6_addr;

IP6_STATINC(IP6_STAT_BADSCOPE);

ip6a->ip6a_flags = ia->ia6_flags;

return NULL;

}

return mtag; /* NULL if failed to set */

ip6a->ip6a_src = ia->ia_addr.sin6_addr;

ip6a->ip6a_flags = ia->ia6_flags;

return mtag;

}

const struct ip6aux *

Line 1989 sysctl_net_inet6_ip6_setup(struct sysctl

Line 1947 sysctl_net_inet6_ip6_setup(struct sysctl

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

#endif

/* anonportalgo RFC6056 subtree */

const struct sysctlnode *portalgo_node;

sysctl_createv(clog, 0, NULL, &portalgo_node,

CTLFLAG_PERMANENT,

CTLTYPE_NODE, "anonportalgo",

SYSCTL_DESCR("Anonymous port algorithm selection (RFC 6056)"),

NULL, 0, NULL, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6, CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, &portalgo_node, NULL,

CTLFLAG_PERMANENT,

CTLTYPE_STRING, "available",

SYSCTL_DESCR("available algorithms"),

sysctl_portalgo_available, 0, NULL, PORTALGO_MAXLEN,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, &portalgo_node, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_STRING, "selected",

SYSCTL_DESCR("selected algorithm"),

sysctl_portalgo_selected6, 0, NULL, PORTALGO_MAXLEN,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, &portalgo_node, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_STRUCT, "reserve",

SYSCTL_DESCR("bitmap of reserved ports"),

sysctl_portalgo_reserve6, 0, NULL, 0,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "neighborgcthresh",

SYSCTL_DESCR("Maximum number of entries in neighbor"

" cache"),

NULL, 1, &ip6_neighborgcthresh, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "maxifprefixes",

SYSCTL_DESCR("Maximum number of prefixes created by"

" route advertisement per interface"),

NULL, 1, &ip6_maxifprefixes, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "maxifdefrouters",

SYSCTL_DESCR("Maximum number of default routers created"

" by route advertisement per interface"),

NULL, 1, &ip6_maxifdefrouters, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "maxdynroutes",

SYSCTL_DESCR("Maximum number of routes created via"

" redirect"),

NULL, 1, &ip6_maxdynroutes, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

}

void

CVSweb <webmaster@jp.NetBSD.org>