xnu-344.tar.gz

[apple/xnu.git] / bsd / netinet6 / route6.c

diff --git a/bsd/netinet6/route6.c b/bsd/netinet6/route6.c
index 25d86cf553612f684a450dcfe73bee089851fe74..7867df06f7527aa652f875dc9d2e5f6fe7579934 100644 (file)
--- a/bsd/netinet6/route6.c
+++ b/bsd/netinet6/route6.c
@@ -1,4 +1,5 @@
-/*     $KAME: route6.c,v 1.10 2000/02/22 14:04:34 itojun Exp $ */
+/*     $FreeBSD: src/sys/netinet6/route6.c,v 1.1.2.3 2001/07/03 11:01:55 ume Exp $     */
+/*     $KAME: route6.c,v 1.24 2001/03/14 03:07:05 itojun Exp $ */
 
 /*
  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
@@ -32,6 +33,7 @@
 #include <sys/param.h>
 #include <sys/mbuf.h>
 #include <sys/socket.h>
+#include <sys/queue.h>
 
 #include <net/if.h>
 
@@ -42,24 +44,30 @@
 
 #include <netinet/icmp6.h>
 
-#if MIP6
-#include <netinet6/mip6.h>
-#include <net/if_types.h>
-#endif
-
 static int ip6_rthdr0 __P((struct mbuf *, struct ip6_hdr *,
     struct ip6_rthdr0 *));
 
-
 int
 route6_input(mp, offp, proto)
        struct mbuf **mp;
        int *offp, proto;       /* proto is unused */
 {
-       register struct ip6_hdr *ip6;
-       register struct mbuf *m = *mp;
-       register struct ip6_rthdr *rh;
+       struct ip6_hdr *ip6;
+       struct mbuf *m = *mp;
+       struct ip6_rthdr *rh;
        int off = *offp, rhlen;
+       struct mbuf *n;
+
+       n = ip6_findaux(m);
+       if (n) {
+               struct ip6aux *ip6a = mtod(n, struct ip6aux *);
+               /* XXX reject home-address option before rthdr */
+               if (ip6a->ip6a_flags & IP6A_SWAP) {
+                       ip6stat.ip6s_badoptions++;
+                       m_freem(m);
+                       return IPPROTO_DONE;
+               }
+       }
 
 #ifndef PULLDOWN_TEST
        IP6_EXTHDR_CHECK(m, off, sizeof(*rh), IPPROTO_DONE);
@@ -74,39 +82,55 @@ route6_input(mp, offp, proto)
        }
 #endif
 
-       switch(rh->ip6r_type) {
-        case IPV6_RTHDR_TYPE_0:
-                rhlen = (rh->ip6r_len + 1) << 3;
+       switch (rh->ip6r_type) {
+       case IPV6_RTHDR_TYPE_0:
+               rhlen = (rh->ip6r_len + 1) << 3;
 #ifndef PULLDOWN_TEST
-                IP6_EXTHDR_CHECK(m, off, rhlen, IPPROTO_DONE);
+               /*
+                * note on option length:
+                * due to IP6_EXTHDR_CHECK assumption, we cannot handle
+                * very big routing header (max rhlen == 2048).
+                */
+               IP6_EXTHDR_CHECK(m, off, rhlen, IPPROTO_DONE);
 #else
-                IP6_EXTHDR_GET(rh, struct ip6_rthdr *, m, off, rhlen);
-                if (rh == NULL) {
+               /*
+                * note on option length:
+                * maximum rhlen: 2048
+                * max mbuf m_pulldown can handle: MCLBYTES == usually 2048
+                * so, here we are assuming that m_pulldown can handle
+                * rhlen == 2048 case.  this may not be a good thing to
+                * assume - we may want to avoid pulling it up altogether.
+                */
+               IP6_EXTHDR_GET(rh, struct ip6_rthdr *, m, off, rhlen);
+               if (rh == NULL) {
                        ip6stat.ip6s_tooshort++;
                        return IPPROTO_DONE;
-                }
+               }
 #endif
-                if (ip6_rthdr0(m, ip6, (struct ip6_rthdr0 *)rh))
-                        return(IPPROTO_DONE);
-                break;
-        default:
-                /* unknown routing type */
-                if (rh->ip6r_segleft == 0) {
-                        rhlen = (rh->ip6r_len + 1) << 3;
-                        break; /* Final dst. Just ignore the header. */
-                }
-                ip6stat.ip6s_badoptions++;
-                icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_HEADER,
-                            (caddr_t)&rh->ip6r_type - (caddr_t)ip6);
-                return(IPPROTO_DONE);
-       }       
-       
+               if (ip6_rthdr0(m, ip6, (struct ip6_rthdr0 *)rh))
+                       return(IPPROTO_DONE);
+               break;
+       default:
+               /* unknown routing type */
+               if (rh->ip6r_segleft == 0) {
+                       rhlen = (rh->ip6r_len + 1) << 3;
+                       break;  /* Final dst. Just ignore the header. */
+               }
+               ip6stat.ip6s_badoptions++;
+               icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_HEADER,
+                           (caddr_t)&rh->ip6r_type - (caddr_t)ip6);
+               return(IPPROTO_DONE);
+       }
+
        *offp += rhlen;
        return(rh->ip6r_nxt);
 }
 
 /*
  * Type0 routing header processing
+ *
+ * RFC2292 backward compatibility warning: no support for strict/loose bitmap,
+ * as it was dropped between RFC1883 and RFC2460.
  */
 static int
 ip6_rthdr0(m, ip6, rh0)
@@ -145,7 +169,8 @@ ip6_rthdr0(m, ip6, rh0)
 
        index = addrs - rh0->ip6r0_segleft;
        rh0->ip6r0_segleft--;
-       nextaddr = ((struct in6_addr *)(rh0 + 1)) + index;
+       /* note that ip6r0_addr does not exist in RFC2292bis */
+       nextaddr = rh0->ip6r0_addr + index;
 
        /*
         * reject invalid addresses.  be proactive about malicious use of
@@ -163,7 +188,7 @@ ip6_rthdr0(m, ip6, rh0)
        if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) ||
            IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_dst) ||
            IN6_IS_ADDR_V4MAPPED(&ip6->ip6_dst) ||
-           IN6_IS_ADDR_V4COMPAT(nextaddr)) {
+           IN6_IS_ADDR_V4COMPAT(&ip6->ip6_dst)) {
                ip6stat.ip6s_badoptions++;
                m_freem(m);
                return(-1);