FreeBSD/Linux Kernel Cross Reference
sys/netinet6/route6.c
1 /*-
2 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 *
29 * $KAME: route6.c,v 1.24 2001/03/14 03:07:05 itojun Exp $
30 */
31
32 #include <sys/cdefs.h>
33 __FBSDID("$FreeBSD$");
34
35 #include "opt_inet.h"
36 #include "opt_inet6.h"
37
38 #include <sys/param.h>
39 #include <sys/mbuf.h>
40 #include <sys/socket.h>
41 #include <sys/systm.h>
42 #include <sys/queue.h>
43
44 #include <net/if.h>
45
46 #include <netinet/in.h>
47 #include <netinet6/in6_var.h>
48 #include <netinet/ip6.h>
49 #include <netinet6/ip6_var.h>
50 #include <netinet6/scope6_var.h>
51
52 #include <netinet/icmp6.h>
53
54 extern int ip6_rthdr0_allowed;
55
56 static int ip6_rthdr0 __P((struct mbuf *, struct ip6_hdr *,
57 struct ip6_rthdr0 *));
58
59 int
60 route6_input(mp, offp, proto)
61 struct mbuf **mp;
62 int *offp, proto; /* proto is unused */
63 {
64 struct ip6_hdr *ip6;
65 struct mbuf *m = *mp;
66 struct ip6_rthdr *rh;
67 int off = *offp, rhlen;
68 struct ip6aux *ip6a;
69
70 ip6a = ip6_findaux(m);
71 if (ip6a) {
72 /* XXX reject home-address option before rthdr */
73 if (ip6a->ip6a_flags & IP6A_SWAP) {
74 ip6stat.ip6s_badoptions++;
75 m_freem(m);
76 return IPPROTO_DONE;
77 }
78 }
79
80 #ifndef PULLDOWN_TEST
81 IP6_EXTHDR_CHECK(m, off, sizeof(*rh), IPPROTO_DONE);
82 ip6 = mtod(m, struct ip6_hdr *);
83 rh = (struct ip6_rthdr *)((caddr_t)ip6 + off);
84 #else
85 ip6 = mtod(m, struct ip6_hdr *);
86 IP6_EXTHDR_GET(rh, struct ip6_rthdr *, m, off, sizeof(*rh));
87 if (rh == NULL) {
88 ip6stat.ip6s_tooshort++;
89 return IPPROTO_DONE;
90 }
91 #endif
92
93 switch (rh->ip6r_type) {
94 case IPV6_RTHDR_TYPE_0:
95 if (!ip6_rthdr0_allowed)
96 return (IPPROTO_DONE);
97 rhlen = (rh->ip6r_len + 1) << 3;
98 #ifndef PULLDOWN_TEST
99 /*
100 * note on option length:
101 * due to IP6_EXTHDR_CHECK assumption, we cannot handle
102 * very big routing header (max rhlen == 2048).
103 */
104 IP6_EXTHDR_CHECK(m, off, rhlen, IPPROTO_DONE);
105 #else
106 /*
107 * note on option length:
108 * maximum rhlen: 2048
109 * max mbuf m_pulldown can handle: MCLBYTES == usually 2048
110 * so, here we are assuming that m_pulldown can handle
111 * rhlen == 2048 case. this may not be a good thing to
112 * assume - we may want to avoid pulling it up altogether.
113 */
114 IP6_EXTHDR_GET(rh, struct ip6_rthdr *, m, off, rhlen);
115 if (rh == NULL) {
116 ip6stat.ip6s_tooshort++;
117 return IPPROTO_DONE;
118 }
119 #endif
120 if (ip6_rthdr0(m, ip6, (struct ip6_rthdr0 *)rh))
121 return (IPPROTO_DONE);
122 break;
123 default:
124 /* unknown routing type */
125 if (rh->ip6r_segleft == 0) {
126 rhlen = (rh->ip6r_len + 1) << 3;
127 break; /* Final dst. Just ignore the header. */
128 }
129 ip6stat.ip6s_badoptions++;
130 icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_HEADER,
131 (caddr_t)&rh->ip6r_type - (caddr_t)ip6);
132 return (IPPROTO_DONE);
133 }
134
135 *offp += rhlen;
136 return (rh->ip6r_nxt);
137 }
138
139 /*
140 * Type0 routing header processing
141 *
142 * RFC2292 backward compatibility warning: no support for strict/loose bitmap,
143 * as it was dropped between RFC1883 and RFC2460.
144 */
145 static int
146 ip6_rthdr0(m, ip6, rh0)
147 struct mbuf *m;
148 struct ip6_hdr *ip6;
149 struct ip6_rthdr0 *rh0;
150 {
151 int addrs, index;
152 struct in6_addr *nextaddr, tmpaddr;
153 struct in6_ifaddr *ifa;
154
155 if (rh0->ip6r0_segleft == 0)
156 return (0);
157
158 if (rh0->ip6r0_len % 2
159 #ifdef COMPAT_RFC1883
160 || rh0->ip6r0_len > 46
161 #endif
162 ) {
163 /*
164 * Type 0 routing header can't contain more than 23 addresses.
165 * RFC 2462: this limitation was removed since strict/loose
166 * bitmap field was deleted.
167 */
168 ip6stat.ip6s_badoptions++;
169 icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_HEADER,
170 (caddr_t)&rh0->ip6r0_len - (caddr_t)ip6);
171 return (-1);
172 }
173
174 if ((addrs = rh0->ip6r0_len / 2) < rh0->ip6r0_segleft) {
175 ip6stat.ip6s_badoptions++;
176 icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_HEADER,
177 (caddr_t)&rh0->ip6r0_segleft - (caddr_t)ip6);
178 return (-1);
179 }
180
181 index = addrs - rh0->ip6r0_segleft;
182 rh0->ip6r0_segleft--;
183 nextaddr = ((struct in6_addr *)(rh0 + 1)) + index;
184
185 /*
186 * reject invalid addresses. be proactive about malicious use of
187 * IPv4 mapped/compat address.
188 * XXX need more checks?
189 */
190 if (IN6_IS_ADDR_MULTICAST(nextaddr) ||
191 IN6_IS_ADDR_UNSPECIFIED(nextaddr) ||
192 IN6_IS_ADDR_V4MAPPED(nextaddr) ||
193 IN6_IS_ADDR_V4COMPAT(nextaddr)) {
194 ip6stat.ip6s_badoptions++;
195 m_freem(m);
196 return (-1);
197 }
198 if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) ||
199 IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_dst) ||
200 IN6_IS_ADDR_V4MAPPED(&ip6->ip6_dst) ||
201 IN6_IS_ADDR_V4COMPAT(&ip6->ip6_dst)) {
202 ip6stat.ip6s_badoptions++;
203 m_freem(m);
204 return (-1);
205 }
206
207 /*
208 * Determine the scope zone of the next hop, based on the interface
209 * of the current hop. [RFC4007, Section 9]
210 * Then disambiguate the scope zone for the next hop (if necessary).
211 */
212 if ((ifa = ip6_getdstifaddr(m)) == NULL)
213 goto bad;
214 if (in6_setscope(nextaddr, ifa->ia_ifp, NULL) != 0) {
215 ip6stat.ip6s_badscope++;
216 goto bad;
217 }
218
219 /*
220 * Swap the IPv6 destination address and nextaddr. Forward the packet.
221 */
222 tmpaddr = *nextaddr;
223 *nextaddr = ip6->ip6_dst;
224 in6_clearscope(nextaddr); /* XXX */
225 ip6->ip6_dst = tmpaddr;
226
227 #ifdef COMPAT_RFC1883
228 if (rh0->ip6r0_slmap[index / 8] & (1 << (7 - (index % 8))))
229 ip6_forward(m, IPV6_SRCRT_NEIGHBOR);
230 else
231 ip6_forward(m, IPV6_SRCRT_NOTNEIGHBOR);
232 #else
233 ip6_forward(m, 1);
234 #endif
235
236 return (-1); /* m would be freed in ip6_forward() */
237
238 bad:
239 m_freem(m);
240 return (-1);
241 }
Cache object: a080a9b8e059cdc85e14df3c0b6bfb15
|