Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

===================================================================
RCS file: /ftp/cvs/cvsroot/src/sys/netinet6/ip6_input.c,v
retrieving revision 1.22
retrieving revision 1.22.2.2
diff -u -p -r1.22 -r1.22.2.2
--- src/sys/netinet6/ip6_input.c	2000/06/13 14:43:44	1.22
+++ src/sys/netinet6/ip6_input.c	2000/08/27 01:25:08	1.22.2.2
@@ -1,5 +1,5 @@
-/*	$NetBSD: ip6_input.c,v 1.22 2000/06/13 14:43:44 itojun Exp $	*/
-/*	$KAME: ip6_input.c,v 1.94 2000/06/13 10:06:19 jinmei Exp $	*/
+/*	$NetBSD: ip6_input.c,v 1.22.2.2 2000/08/27 01:25:08 itojun Exp $	*/
+/*	$KAME: ip6_input.c,v 1.119 2000/08/26 10:00:45 itojun Exp $	*/
 
 /*
  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
@@ -488,16 +488,25 @@ ip6_input(m)
 	    ip6_forward_rt.ro_rt->rt_ifp->if_type == IFT_LOOP) {
 		struct in6_ifaddr *ia6 =
 			(struct in6_ifaddr *)ip6_forward_rt.ro_rt->rt_ifa;
-		/* packet to tentative address must not be received */
 		if (ia6->ia6_flags & IN6_IFF_ANYCAST)
 			m->m_flags |= M_ANYCAST6;
+		/*
+		 * packets to a tentative, duplicated, or somehow invalid
+		 * address must not be accepted.
+		 */
 		if (!(ia6->ia6_flags & IN6_IFF_NOTREADY)) {
-			/* this interface is ready */
+			/* this address is ready */
 			ours = 1;
 			deliverifp = ia6->ia_ifp;	/* correct? */
 			goto hbhcheck;
 		} else {
-			/* this interface is not ready, fall through */
+			/* address is not ready, so discard the packet. */
+			log(LOG_INFO,
+			    "ip6_input: packet to an unready address %s->%s",
+			    ip6_sprintf(&ip6->ip6_src),
+			    ip6_sprintf(&ip6->ip6_dst));
+
+			goto bad;
 		}
 	}
 
@@ -1337,6 +1346,8 @@ ip6_sysctl(name, namelen, oldp, oldlenp,
 	void *newp;
 	size_t newlen;
 {
+	int old, error;
+
 	/* All sysctl names at this level are terminal. */
 	if (namelen != 1)
 		return ENOTDIR;
@@ -1388,6 +1399,58 @@ ip6_sysctl(name, namelen, oldp, oldlenp,
 		return sysctl_int(oldp, oldlenp, newp, newlen,
 				&ip6_bindv6only);
 #endif
+	case IPV6CTL_ANONPORTMIN:
+		old = ip6_anonportmin;
+		error = sysctl_int(oldp, oldlenp, newp, newlen,
+		    &ip6_anonportmin);
+		if (ip6_anonportmin >= ip6_anonportmax || ip6_anonportmin < 0 ||
+		    ip6_anonportmin > 65535
+#ifndef IPNOPRIVPORTS
+		    || ip6_anonportmin < IPV6PORT_RESERVED
+#endif
+		    ) {
+			ip6_anonportmin = old;
+			return (EINVAL);
+		}
+		return (error);
+	case IPV6CTL_ANONPORTMAX:
+		old = ip6_anonportmax;
+		error = sysctl_int(oldp, oldlenp, newp, newlen,
+		    &ip6_anonportmax);
+		if (ip6_anonportmin >= ip6_anonportmax || ip6_anonportmax < 0 ||
+		    ip6_anonportmax > 65535
+#ifndef IPNOPRIVPORTS
+		    || ip6_anonportmax < IPV6PORT_RESERVED
+#endif
+		    ) {
+			ip6_anonportmax = old;
+			return (EINVAL);
+		}
+		return (error);
+#ifndef IPNOPRIVPORTS
+	case IPV6CTL_LOWPORTMIN:
+		old = ip6_lowportmin;
+		error = sysctl_int(oldp, oldlenp, newp, newlen,
+		    &ip6_lowportmin);
+		if (ip6_lowportmin >= ip6_lowportmax ||
+		    ip6_lowportmin > IPV6PORT_RESERVEDMAX ||
+		    ip6_lowportmin < IPV6PORT_RESERVEDMIN) {
+			ip6_lowportmin = old;
+			return (EINVAL);
+		}
+		return (error);
+	case IPV6CTL_LOWPORTMAX:
+		old = ip6_lowportmax;
+		error = sysctl_int(oldp, oldlenp, newp, newlen,
+		    &ip6_lowportmax);
+		if (ip6_lowportmin >= ip6_lowportmax ||
+		    ip6_lowportmax > IPV6PORT_RESERVEDMAX ||
+		    ip6_lowportmax < IPV6PORT_RESERVEDMIN) {
+			ip6_lowportmax = old;
+			return (EINVAL);
+		}
+		return (error);
+#endif
 	default:
 		return EOPNOTSUPP;
 	}