Annotation of sys/netinet6/route6.c, Revision 1.1.1.1
1.1 nbrk 1: /* $OpenBSD: route6.c,v 1.16 2007/05/31 23:17:38 mcbride Exp $ */
2: /* $KAME: route6.c,v 1.22 2000/12/03 00:54:00 itojun Exp $ */
3:
4: /*
5: * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6: * All rights reserved.
7: *
8: * Redistribution and use in source and binary forms, with or without
9: * modification, are permitted provided that the following conditions
10: * are met:
11: * 1. Redistributions of source code must retain the above copyright
12: * notice, this list of conditions and the following disclaimer.
13: * 2. Redistributions in binary form must reproduce the above copyright
14: * notice, this list of conditions and the following disclaimer in the
15: * documentation and/or other materials provided with the distribution.
16: * 3. Neither the name of the project nor the names of its contributors
17: * may be used to endorse or promote products derived from this software
18: * without specific prior written permission.
19: *
20: * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21: * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22: * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23: * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24: * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25: * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26: * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27: * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28: * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29: * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30: * SUCH DAMAGE.
31: */
32:
33: #include <sys/param.h>
34: #include <sys/mbuf.h>
35: #include <sys/socket.h>
36: #include <sys/systm.h>
37:
38: #include <net/if.h>
39:
40: #include <netinet/in.h>
41: #include <netinet6/in6_var.h>
42: #include <netinet/ip6.h>
43: #include <netinet6/ip6_var.h>
44:
45: #include <netinet/icmp6.h>
46:
47: #if 0
48: static int ip6_rthdr0(struct mbuf *, struct ip6_hdr *, struct ip6_rthdr0 *);
49: #endif
50:
51: int
52: route6_input(mp, offp, proto)
53: struct mbuf **mp;
54: int *offp, proto; /* proto is unused */
55: {
56: struct ip6_hdr *ip6;
57: struct mbuf *m = *mp;
58: struct ip6_rthdr *rh;
59: int off = *offp, rhlen;
60:
61: ip6 = mtod(m, struct ip6_hdr *);
62: IP6_EXTHDR_GET(rh, struct ip6_rthdr *, m, off, sizeof(*rh));
63: if (rh == NULL) {
64: ip6stat.ip6s_tooshort++;
65: return IPPROTO_DONE;
66: }
67:
68: switch (rh->ip6r_type) {
69: #if 0
70: /*
71: * See http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf
72: * for why IPV6_RTHDR_TYPE_0 is banned here.
73: *
74: * We return ICMPv6 parameter problem so that innocent people
75: * (not an attacker) would notice about the use of IPV6_RTHDR_TYPE_0.
76: * Since there's no amplification, and ICMPv6 error will be rate-
77: * controlled, it shouldn't cause any problem.
78: * If you are concerned about this, you may want to use the following
79: * code fragment:
80: *
81: * case IPV6_RTHDR_TYPE_0:
82: * m_freem(m);
83: * return (IPPROTO_DONE);
84: */
85: case IPV6_RTHDR_TYPE_0:
86: rhlen = (rh->ip6r_len + 1) << 3;
87: if (rh->ip6r_segleft == 0)
88: break; /* Final dst. Just ignore the header. */
89: /*
90: * note on option length:
91: * maximum rhlen: 2048
92: * max mbuf m_pulldown can handle: MCLBYTES == usually 2048
93: * so, here we are assuming that m_pulldown can handle
94: * rhlen == 2048 case. this may not be a good thing to
95: * assume - we may want to avoid pulling it up altogether.
96: */
97: IP6_EXTHDR_GET(rh, struct ip6_rthdr *, m, off, rhlen);
98: if (rh == NULL) {
99: ip6stat.ip6s_tooshort++;
100: return IPPROTO_DONE;
101: }
102: if (ip6_rthdr0(m, ip6, (struct ip6_rthdr0 *)rh))
103: return (IPPROTO_DONE);
104: break;
105: #endif
106: default:
107: /* unknown routing type */
108: if (rh->ip6r_segleft == 0) {
109: rhlen = (rh->ip6r_len + 1) << 3;
110: break; /* Final dst. Just ignore the header. */
111: }
112: ip6stat.ip6s_badoptions++;
113: icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_HEADER,
114: (caddr_t)&rh->ip6r_type - (caddr_t)ip6);
115: return (IPPROTO_DONE);
116: }
117:
118: *offp += rhlen;
119: return (rh->ip6r_nxt);
120: }
121:
122: #if 0
123: /*
124: * Type0 routing header processing
125: *
126: * RFC2292 backward compatibility warning: no support for strict/loose bitmap,
127: * as it was dropped between RFC1883 and RFC2460.
128: */
129: static int
130: ip6_rthdr0(m, ip6, rh0)
131: struct mbuf *m;
132: struct ip6_hdr *ip6;
133: struct ip6_rthdr0 *rh0;
134: {
135: int addrs, index;
136: struct in6_addr *nextaddr, tmpaddr;
137:
138: if (rh0->ip6r0_segleft == 0)
139: return (0);
140:
141: if (rh0->ip6r0_len % 2) {
142: /*
143: * Type 0 routing header can't contain more than 23 addresses.
144: * RFC 2460: this limitation was removed since strict/loose
145: * bitmap field was deleted.
146: */
147: ip6stat.ip6s_badoptions++;
148: icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_HEADER,
149: (caddr_t)&rh0->ip6r0_len - (caddr_t)ip6);
150: return (-1);
151: }
152:
153: if ((addrs = rh0->ip6r0_len / 2) < rh0->ip6r0_segleft) {
154: ip6stat.ip6s_badoptions++;
155: icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_HEADER,
156: (caddr_t)&rh0->ip6r0_segleft - (caddr_t)ip6);
157: return (-1);
158: }
159:
160: index = addrs - rh0->ip6r0_segleft;
161: rh0->ip6r0_segleft--;
162: nextaddr = ((struct in6_addr *)(rh0 + 1)) + index;
163:
164: /*
165: * reject invalid addresses. be proactive about malicious use of
166: * IPv4 mapped/compat address.
167: * XXX need more checks?
168: */
169: if (IN6_IS_ADDR_MULTICAST(nextaddr) ||
170: IN6_IS_ADDR_UNSPECIFIED(nextaddr) ||
171: IN6_IS_ADDR_V4MAPPED(nextaddr) ||
172: IN6_IS_ADDR_V4COMPAT(nextaddr)) {
173: ip6stat.ip6s_badoptions++;
174: goto bad;
175: }
176: if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) ||
177: IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_dst) ||
178: IN6_IS_ADDR_V4MAPPED(&ip6->ip6_dst) ||
179: IN6_IS_ADDR_V4COMPAT(&ip6->ip6_dst)) {
180: ip6stat.ip6s_badoptions++;
181: goto bad;
182: }
183:
184: /*
185: * Swap the IPv6 destination address and nextaddr. Forward the packet.
186: */
187: tmpaddr = *nextaddr;
188: *nextaddr = ip6->ip6_dst;
189: if (IN6_IS_ADDR_LINKLOCAL(nextaddr))
190: nextaddr->s6_addr16[1] = 0;
191: ip6->ip6_dst = tmpaddr;
192: if (IN6_IS_ADDR_LINKLOCAL(&ip6->ip6_dst))
193: ip6->ip6_dst.s6_addr16[1] = htons(m->m_pkthdr.rcvif->if_index);
194:
195: ip6_forward(m, 1);
196:
197: return (-1); /* m would be freed in ip6_forward() */
198:
199: bad:
200: m_freem(m);
201: return (-1);
202: }
203: #endif
CVSweb
![[BACK]](/icons/back.gif){kind=icon}
Return to route6.c CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / sys / netinet6