src/sys/netinet6/ip6_input.c - diff

Return to ip6_input.c CVS log

Up to [cvs.NetBSD.org] / src / sys / netinet6

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/sys/netinet6/ip6_input.c between version 1.144 and 1.153

version 1.144, 2013/10/04 14:23:14

version 1.153, 2015/12/12 23:34:25

Line 64

#include <sys/cdefs.h>

__KERNEL_RCSID(0, "$NetBSD$");

#ifdef _KERNEL_OPT

#include "opt_gateway.h"

#include "opt_inet.h"

#include "opt_inet6.h"

#include "opt_ipsec.h"

#include "opt_compat_netbsd.h"

#endif

#include <sys/param.h>

#include <sys/systm.h>

Line 90 __KERNEL_RCSID(0, "$NetBSD$");

Line 92 __KERNEL_RCSID(0, "$NetBSD$");

#include <net/if_types.h>

#include <net/if_dl.h>

#include <net/route.h>

#include <net/netisr.h>

#include <net/pktqueue.h>

#include <net/pfil.h>

#include <netinet/in.h>

#include <netinet/in_systm.h>

#ifdef INET

#include <netinet/ip.h>

#include <netinet/ip_var.h>

#include <netinet/ip_icmp.h>

#endif /* INET */

#include <netinet/ip6.h>

Line 135 __KERNEL_RCSID(0, "$NetBSD$");

Line 138 __KERNEL_RCSID(0, "$NetBSD$");

extern struct domain inet6domain;

u_char ip6_protox[IPPROTO_MAX];

static int ip6qmaxlen = IFQ_MAXLEN;

struct in6_ifaddr *in6_ifaddr;

struct ifqueue ip6intrq;

pktqueue_t *ip6_pktq __read_mostly;

extern callout_t in6_tmpaddrtimer_ch;

Line 150 pfil_head_t *inet6_pfil_hook;

Line 152 pfil_head_t *inet6_pfil_hook;

percpu_t *ip6stat_percpu;

static void ip6_init2(void *);

static void ip6intr(void *);

static struct m_tag *ip6_setdstifaddr(struct mbuf *, const struct in6_ifaddr *);

static int ip6_process_hopopts(struct mbuf *, u_int8_t *, int, u_int32_t *,

Line 178 ip6_init(void)

Line 181 ip6_init(void)

if (pr->pr_domain->dom_family == PF_INET6 &&

pr->pr_protocol && pr->pr_protocol != IPPROTO_RAW)

ip6_protox[pr->pr_protocol] = pr - inet6sw;

ip6intrq.ifq_maxlen = ip6qmaxlen;

ip6_pktq = pktq_create(IFQ_MAXLEN, ip6intr, NULL);

KASSERT(ip6_pktq != NULL);

scope6_init();

addrsel_policy_init();

nd6_init();

Line 215 ip6_init2(void *dummy)

Line 221 ip6_init2(void *dummy)

* IP6 input interrupt handling. Just pass the packet to ip6_input.

void

static void

ip6intr(void)

ip6intr(void *arg __unused)

{

int s;

struct mbuf *m;

mutex_enter(softnet_lock);

KERNEL_LOCK(1, NULL);

while ((m = pktq_dequeue(ip6_pktq)) != NULL) {

for (;;) {

const ifnet_t *ifp = m->m_pkthdr.rcvif;

s = splnet();

IF_DEQUEUE(&ip6intrq, m);

splx(s);

* Drop the packet if IPv6 is disabled on the interface.

if (m == 0)

break;

if ((ND_IFINFO(ifp)->flags & ND6_IFF_IFDISABLED)) {

/* drop the packet if IPv6 operation is disabled on the IF */

if ((ND_IFINFO(m->m_pkthdr.rcvif)->flags & ND6_IFF_IFDISABLED)) {

m_freem(m);

break;

continue;

}

ip6_input(m);

}

KERNEL_UNLOCK_ONE(NULL);

mutex_exit(softnet_lock);

}

Line 257 ip6_input(struct mbuf *m)

Line 259 ip6_input(struct mbuf *m)

struct sockaddr dst;

struct sockaddr_in6 dst6;

} u;

#ifdef IPSEC

struct m_tag *mtag;

struct tdb_ident *tdbi;

struct secpolicy *sp;

int s, error;

#endif

* make sure we don't have onion peering information into m_tag.

Line 345 ip6_input(struct mbuf *m)

Line 341 ip6_input(struct mbuf *m)

* not the decapsulated packet.

#if defined(IPSEC)

if (!ipsec_indone(m))

if (!ipsec_used || !ipsec_indone(m))

#else

if (1)

#endif

Line 753 ip6_input(struct mbuf *m)

Line 749 ip6_input(struct mbuf *m)

}

#ifdef IPSEC

if (ipsec_used) {

* enforce IPsec policy checking if we are seeing last header.

* note that we do not visit this with protocols with pcb layer

* code - like udp/tcp/raw ip.

if ((inet6sw[ip_protox[nxt]].pr_flags & PR_LASTHDR) != 0) {

* Check if the packet has already had IPsec processing

* done. If so, then just pass it along. This tag gets

* set during AH, ESP, etc. input handling, before the

* packet is returned to the ip input queue for delivery.

mtag = m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL);

s = splsoftnet();

if (mtag != NULL) {

tdbi = (struct tdb_ident *)(mtag + 1);

sp = ipsec_getpolicy(tdbi, IPSEC_DIR_INBOUND);

} else {

sp = ipsec_getpolicybyaddr(m, IPSEC_DIR_INBOUND,

IP_FORWARDING, &error);

}

if (sp != NULL) {

* Check security policy against packet attributes.

* enforce IPsec policy checking if we are seeing last

* header. note that we do not visit this with

* protocols with pcb layer code - like udp/tcp/raw ip.

error = ipsec_in_reject(sp, m);

if ((inet6sw[ip_protox[nxt]].pr_flags

KEY_FREESP(&sp);

& PR_LASTHDR) != 0) {

} else {

int error = ipsec6_input(m);

/* XXX error stat??? */

if (error)

error = EINVAL;

goto bad;

DPRINTF(("ip6_input: no SP, packet discarded\n"));/*XXX*/

}

splx(s);

if (error)

goto bad;

}

#endif /* IPSEC */

nxt = (*inet6sw[ip6_protox[nxt]].pr_input)(&m, &off, nxt);

}

return;

Line 1639 const u_char inet6ctlerrmap[PRC_NCMDS] =

Line 1611 const u_char inet6ctlerrmap[PRC_NCMDS] =

ENOPROTOOPT

};

extern int sysctl_net_inet6_addrctlpolicy(SYSCTLFN_ARGS);

static int

sysctl_net_inet6_ip6_stats(SYSCTLFN_ARGS)

{

Line 1657 sysctl_net_inet6_ip6_setup(struct sysctl

Line 1631 sysctl_net_inet6_ip6_setup(struct sysctl

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT,

CTLTYPE_NODE, "net", NULL,

NULL, 0, NULL, 0,

CTL_NET, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT,

CTLTYPE_NODE, "inet6",

SYSCTL_DESCR("PF_INET6 related settings"),

NULL, 0, NULL, 0,

Line 1884 sysctl_net_inet6_ip6_setup(struct sysctl

Line 1853 sysctl_net_inet6_ip6_setup(struct sysctl

#endif /* IPNOPRIVPORTS */

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "auto_linklocal",

SYSCTL_DESCR("Default value of per-interface flag for "

"adding an IPv6 link-local address to "

"interfaces when attached"),

NULL, 0, &ip6_auto_linklocal, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

IPV6CTL_AUTO_LINKLOCAL, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READONLY,

CTLTYPE_STRUCT, "addctlpolicy",

SYSCTL_DESCR("Return the current address control"

" policy"),

sysctl_net_inet6_addrctlpolicy, 0, NULL, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

IPV6CTL_ADDRCTLPOLICY, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "use_tempaddr",

SYSCTL_DESCR("Use temporary address"),

NULL, 0, &ip6_use_tempaddr, 0,

Line 1891 sysctl_net_inet6_ip6_setup(struct sysctl

Line 1877 sysctl_net_inet6_ip6_setup(struct sysctl

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "prefer_tempaddr",

SYSCTL_DESCR("Prefer temporary address as source "

"address"),

NULL, 0, &ip6_prefer_tempaddr, 0,

CTL_NET, PF_INET6, IPPROTO_IPV6,

CTL_CREATE, CTL_EOL);

sysctl_createv(clog, 0, NULL, NULL,

CTLFLAG_PERMANENT|CTLFLAG_READWRITE,

CTLTYPE_INT, "temppltime",

SYSCTL_DESCR("preferred lifetime of a temporary address"),

NULL, 0, &ip6_temp_preferred_lifetime, 0,

CVSweb <webmaster@jp.NetBSD.org>