1*5217Swnj /* ip_input.c 1.23 81/12/09 */ 24571Swnj 34495Swnj #include "../h/param.h" 44543Swnj #include "../h/systm.h" 54640Swnj #include "../h/clock.h" 64640Swnj #include "../h/mbuf.h" 74898Swnj #include "../h/protosw.h" 84923Swnj #include "../h/socket.h" 95084Swnj #include "../net/in.h" 105084Swnj #include "../net/in_systm.h" 114951Swnj #include "../net/if.h" 125084Swnj #include "../net/ip.h" /* belongs before in.h */ 134898Swnj #include "../net/ip_var.h" 144801Swnj #include "../net/ip_icmp.h" 154801Swnj #include "../net/tcp.h" 164495Swnj 174898Swnj u_char ip_protox[IPPROTO_MAX]; 184898Swnj 194801Swnj /* 205172Swnj * IP initialization: fill in IP protocol switch table. 215161Swnj * All protocols not implemented in kernel go to raw IP protocol handler. 224801Swnj */ 234801Swnj ip_init() 244801Swnj { 254898Swnj register struct protosw *pr; 264898Swnj register int i; 274495Swnj 284951Swnj COUNT(IP_INIT); 294898Swnj pr = pffindproto(PF_INET, IPPROTO_RAW); 304898Swnj if (pr == 0) 314898Swnj panic("ip_init"); 324898Swnj for (i = 0; i < IPPROTO_MAX; i++) 334898Swnj ip_protox[i] = pr - protosw; 344898Swnj for (pr = protosw; pr <= protoswLAST; pr++) 354898Swnj if (pr->pr_family == PF_INET && 364898Swnj pr->pr_protocol && pr->pr_protocol != IPPROTO_RAW) 374898Swnj ip_protox[pr->pr_protocol] = pr - protosw; 384801Swnj ipq.next = ipq.prev = &ipq; 394801Swnj ip_id = time & 0xffff; 404801Swnj } 414801Swnj 424898Swnj u_char ipcksum = 1; 434640Swnj struct ip *ip_reass(); 444640Swnj 454640Swnj /* 464640Swnj * Ip input routine. Checksum and byte swap header. If fragmented 474640Swnj * try to reassamble. If complete and fragment queue exists, discard. 484640Swnj * Process options. Pass to next level. 494640Swnj */ 505084Swnj ipintr() 514495Swnj { 524923Swnj register struct ip *ip; 535084Swnj register struct mbuf *m; 54*5217Swnj struct mbuf *m0, *mopt; 554640Swnj register int i; 564495Swnj register struct ipq *fp; 575084Swnj int hlen, s; 584495Swnj 59*5217Swnj printf("ipintr\n"); 605084Swnj COUNT(IPINTR); 615084Swnj next: 624640Swnj /* 635084Swnj * Get next datagram off input queue and get IP header 645084Swnj * in first mbuf. 654640Swnj */ 665084Swnj s = splimp(); 675084Swnj IF_DEQUEUE(&ipintrq, m); 685084Swnj splx(s); 69*5217Swnj if (m == 0) { 70*5217Swnj printf("ipintr returns\n"); 715084Swnj return; 72*5217Swnj } 73*5217Swnj printf("ipintr dequeued %x\n", m); 745046Swnj if (m->m_len < sizeof (struct ip) && 75*5217Swnj m_pullup(m, sizeof (struct ip)) == 0) { 76*5217Swnj printf("ipintr pullup drop\n"); 775046Swnj goto bad; 78*5217Swnj } 794640Swnj ip = mtod(m, struct ip *); 80*5217Swnj printf("ipintr ip->ip_hl %d\n", ip->ip_hl); 815161Swnj if ((hlen = ip->ip_hl << 2) > m->m_len) { 825161Swnj if (m_pullup(m, hlen) == 0) 835161Swnj goto bad; 845161Swnj ip = mtod(m, struct ip *); 855161Swnj } 864951Swnj if (ipcksum) 87*5217Swnj if (ip->ip_sum = in_cksum(m, hlen)) { 885161Swnj printf("ip_sum %x\n", ip->ip_sum); /* XXX */ 894951Swnj ipstat.ips_badsum++; 904951Swnj goto bad; 914495Swnj } 92*5217Swnj printf("cksum passed\n"); 934951Swnj 94*5217Swnj #if vax 954951Swnj /* 964951Swnj * Convert fields to host representation. 974951Swnj */ 984907Swnj ip->ip_len = ntohs((u_short)ip->ip_len); 994640Swnj ip->ip_id = ntohs(ip->ip_id); 1004951Swnj ip->ip_off = ntohs((u_short)ip->ip_off); 101*5217Swnj #endif 1024495Swnj 1034543Swnj /* 1044640Swnj * Check that the amount of data in the buffers 1054640Swnj * is as at least much as the IP header would have us expect. 1064640Swnj * Trim mbufs if longer than we expect. 1074640Swnj * Drop packet if shorter than we expect. 1084543Swnj */ 1094640Swnj i = 0; 1105161Swnj m0 = m; 1115161Swnj for (; m != NULL; m = m->m_next) 1124495Swnj i += m->m_len; 1134640Swnj m = m0; 114*5217Swnj printf("ip->ip_len %d, i %d\n", ip->ip_len , i); 1154640Swnj if (i != ip->ip_len) { 1165161Swnj if (i < ip->ip_len) { 1175161Swnj ipstat.ips_tooshort++; 1184951Swnj goto bad; 1195161Swnj } 1204640Swnj m_adj(m, ip->ip_len - i); 1214495Swnj } 1224495Swnj 1234640Swnj /* 1244640Swnj * Process options and, if not destined for us, 1254640Swnj * ship it on. 1264640Swnj */ 127*5217Swnj printf("ipintr at option code\n"); 1284543Swnj if (hlen > sizeof (struct ip)) 1294907Swnj ip_dooptions(ip); 1305084Swnj if (ifnet && ip->ip_dst.s_addr != ifnet->if_addr.s_addr && 1315045Swnj if_ifwithaddr(ip->ip_dst) == 0) { 1324640Swnj if (--ip->ip_ttl == 0) { 1334907Swnj icmp_error(ip, ICMP_TIMXCEED, 0); 1345084Swnj goto next; 1354495Swnj } 136*5217Swnj mopt = m_get(M_DONTWAIT); 137*5217Swnj if (mopt == 0) 138*5217Swnj goto bad; 139*5217Swnj ip_stripoptions(ip, mopt); 140*5217Swnj (void) ip_output(m0, mopt); 1415084Swnj goto next; 1424543Swnj } 1434495Swnj 1444640Swnj /* 1454640Swnj * Look for queue of fragments 1464640Swnj * of this datagram. 1474640Swnj */ 1484640Swnj for (fp = ipq.next; fp != &ipq; fp = fp->next) 1494640Swnj if (ip->ip_id == fp->ipq_id && 1504640Swnj ip->ip_src.s_addr == fp->ipq_src.s_addr && 1514640Swnj ip->ip_dst.s_addr == fp->ipq_dst.s_addr && 1524640Swnj ip->ip_p == fp->ipq_p) 1534640Swnj goto found; 1544640Swnj fp = 0; 1554640Swnj found: 1564495Swnj 1574640Swnj /* 1584640Swnj * Adjust ip_len to not reflect header, 1594640Swnj * set ip_mff if more fragments are expected, 1604640Swnj * convert offset of this to bytes. 1614640Swnj */ 1624640Swnj ip->ip_len -= hlen; 1634898Swnj ((struct ipasfrag *)ip)->ipf_mff = 0; 1644640Swnj if (ip->ip_off & IP_MF) 1654898Swnj ((struct ipasfrag *)ip)->ipf_mff = 1; 1664640Swnj ip->ip_off <<= 3; 1674495Swnj 1684640Swnj /* 1694640Swnj * If datagram marked as having more fragments 1704640Swnj * or if this is not the first fragment, 1714640Swnj * attempt reassembly; if it succeeds, proceed. 1724640Swnj */ 1734898Swnj if (((struct ipasfrag *)ip)->ipf_mff || ip->ip_off) { 1744898Swnj ip = ip_reass((struct ipasfrag *)ip, fp); 1754640Swnj if (ip == 0) 1765084Swnj goto next; 1774640Swnj hlen = ip->ip_hl << 2; 1784640Swnj m = dtom(ip); 1794640Swnj } else 1804640Swnj if (fp) 1814640Swnj (void) ip_freef(fp); 1824951Swnj 1834951Swnj /* 1844951Swnj * Switch out to protocol's input routine. 1854951Swnj */ 186*5217Swnj printf("ipintr switching out to protocol %d\n", ip->ip_p); 1874898Swnj (*protosw[ip_protox[ip->ip_p]].pr_input)(m); 1885084Swnj goto next; 1894951Swnj bad: 1904951Swnj m_freem(m); 1915084Swnj goto next; 1924640Swnj } 1934495Swnj 1944640Swnj /* 1954640Swnj * Take incoming datagram fragment and try to 1964951Swnj * reassemble it into whole datagram. If a chain for 1974640Swnj * reassembly of this datagram already exists, then it 1984640Swnj * is given as fp; otherwise have to make a chain. 1994640Swnj */ 2004640Swnj struct ip * 2014640Swnj ip_reass(ip, fp) 2024898Swnj register struct ipasfrag *ip; 2034640Swnj register struct ipq *fp; 2044640Swnj { 2054640Swnj register struct mbuf *m = dtom(ip); 2064898Swnj register struct ipasfrag *q; 2074640Swnj struct mbuf *t; 2084640Swnj int hlen = ip->ip_hl << 2; 2094640Swnj int i, next; 2104951Swnj COUNT(IP_REASS); 2114543Swnj 2124640Swnj /* 2134640Swnj * Presence of header sizes in mbufs 2144640Swnj * would confuse code below. 2154640Swnj */ 2164640Swnj m->m_off += hlen; 2174640Swnj m->m_len -= hlen; 2184495Swnj 2194640Swnj /* 2204640Swnj * If first fragment to arrive, create a reassembly queue. 2214640Swnj */ 2224640Swnj if (fp == 0) { 2234640Swnj if ((t = m_get(1)) == NULL) 2244640Swnj goto dropfrag; 2254640Swnj t->m_off = MMINOFF; 2264640Swnj fp = mtod(t, struct ipq *); 2274640Swnj insque(fp, &ipq); 2284640Swnj fp->ipq_ttl = IPFRAGTTL; 2294640Swnj fp->ipq_p = ip->ip_p; 2304640Swnj fp->ipq_id = ip->ip_id; 2314898Swnj fp->ipq_next = fp->ipq_prev = (struct ipasfrag *)fp; 2324898Swnj fp->ipq_src = ((struct ip *)ip)->ip_src; 2334898Swnj fp->ipq_dst = ((struct ip *)ip)->ip_dst; 2345161Swnj q = (struct ipasfrag *)fp; 2355161Swnj goto insert; 2364640Swnj } 2374495Swnj 2384640Swnj /* 2394640Swnj * Find a segment which begins after this one does. 2404640Swnj */ 2414898Swnj for (q = fp->ipq_next; q != (struct ipasfrag *)fp; q = q->ipf_next) 2424640Swnj if (q->ip_off > ip->ip_off) 2434640Swnj break; 2444495Swnj 2454640Swnj /* 2464640Swnj * If there is a preceding segment, it may provide some of 2474640Swnj * our data already. If so, drop the data from the incoming 2484640Swnj * segment. If it provides all of our data, drop us. 2494640Swnj */ 2504898Swnj if (q->ipf_prev != (struct ipasfrag *)fp) { 2514898Swnj i = q->ipf_prev->ip_off + q->ipf_prev->ip_len - ip->ip_off; 2524640Swnj if (i > 0) { 2534640Swnj if (i >= ip->ip_len) 2544640Swnj goto dropfrag; 2554640Swnj m_adj(dtom(ip), i); 2564640Swnj ip->ip_off += i; 2574640Swnj ip->ip_len -= i; 2584640Swnj } 2594640Swnj } 2604543Swnj 2614640Swnj /* 2624640Swnj * While we overlap succeeding segments trim them or, 2634640Swnj * if they are completely covered, dequeue them. 2644640Swnj */ 2654898Swnj while (q != (struct ipasfrag *)fp && ip->ip_off + ip->ip_len > q->ip_off) { 2664640Swnj i = (ip->ip_off + ip->ip_len) - q->ip_off; 2674640Swnj if (i < q->ip_len) { 2684640Swnj q->ip_len -= i; 2694640Swnj m_adj(dtom(q), i); 2704640Swnj break; 2714495Swnj } 2724898Swnj q = q->ipf_next; 2734898Swnj m_freem(dtom(q->ipf_prev)); 2744898Swnj ip_deq(q->ipf_prev); 2754543Swnj } 2764495Swnj 2775161Swnj insert: 2784640Swnj /* 2794640Swnj * Stick new segment in its place; 2804640Swnj * check for complete reassembly. 2814640Swnj */ 2824898Swnj ip_enq(ip, q->ipf_prev); 2834640Swnj next = 0; 2844898Swnj for (q = fp->ipq_next; q != (struct ipasfrag *)fp; q = q->ipf_next) { 2854640Swnj if (q->ip_off != next) 2864640Swnj return (0); 2874640Swnj next += q->ip_len; 2884640Swnj } 2894898Swnj if (q->ipf_prev->ipf_mff) 2904640Swnj return (0); 2914495Swnj 2924640Swnj /* 2934640Swnj * Reassembly is complete; concatenate fragments. 2944640Swnj */ 2954640Swnj q = fp->ipq_next; 2964640Swnj m = dtom(q); 2974640Swnj t = m->m_next; 2984640Swnj m->m_next = 0; 2994640Swnj m_cat(m, t); 3004898Swnj while ((q = q->ipf_next) != (struct ipasfrag *)fp) 3014640Swnj m_cat(m, dtom(q)); 3024495Swnj 3034640Swnj /* 3044640Swnj * Create header for new ip packet by 3054640Swnj * modifying header of first packet; 3064640Swnj * dequeue and discard fragment reassembly header. 3074640Swnj * Make header visible. 3084640Swnj */ 3094640Swnj ip = fp->ipq_next; 3104640Swnj ip->ip_len = next; 3114898Swnj ((struct ip *)ip)->ip_src = fp->ipq_src; 3124898Swnj ((struct ip *)ip)->ip_dst = fp->ipq_dst; 3134640Swnj remque(fp); 3144907Swnj (void) m_free(dtom(fp)); 3154640Swnj m = dtom(ip); 3164898Swnj m->m_len += sizeof (struct ipasfrag); 3174898Swnj m->m_off -= sizeof (struct ipasfrag); 3184898Swnj return ((struct ip *)ip); 3194495Swnj 3204640Swnj dropfrag: 3214640Swnj m_freem(m); 3224640Swnj return (0); 3234495Swnj } 3244495Swnj 3254640Swnj /* 3264640Swnj * Free a fragment reassembly header and all 3274640Swnj * associated datagrams. 3284640Swnj */ 3294640Swnj struct ipq * 3304640Swnj ip_freef(fp) 3314640Swnj struct ipq *fp; 3324495Swnj { 3334898Swnj register struct ipasfrag *q; 3344640Swnj struct mbuf *m; 3354951Swnj COUNT(IP_FREEF); 3364495Swnj 3374898Swnj for (q = fp->ipq_next; q != (struct ipasfrag *)fp; q = q->ipf_next) 3384640Swnj m_freem(dtom(q)); 3394640Swnj m = dtom(fp); 3404640Swnj fp = fp->next; 3414640Swnj remque(fp->prev); 3424907Swnj (void) m_free(m); 3434640Swnj return (fp); 3444495Swnj } 3454495Swnj 3464640Swnj /* 3474640Swnj * Put an ip fragment on a reassembly chain. 3484640Swnj * Like insque, but pointers in middle of structure. 3494640Swnj */ 3504640Swnj ip_enq(p, prev) 3514898Swnj register struct ipasfrag *p, *prev; 3524495Swnj { 3534951Swnj 3544640Swnj COUNT(IP_ENQ); 3554898Swnj p->ipf_prev = prev; 3564898Swnj p->ipf_next = prev->ipf_next; 3574898Swnj prev->ipf_next->ipf_prev = p; 3584898Swnj prev->ipf_next = p; 3594495Swnj } 3604495Swnj 3614640Swnj /* 3624640Swnj * To ip_enq as remque is to insque. 3634640Swnj */ 3644640Swnj ip_deq(p) 3654898Swnj register struct ipasfrag *p; 3664640Swnj { 3674951Swnj 3684640Swnj COUNT(IP_DEQ); 3694898Swnj p->ipf_prev->ipf_next = p->ipf_next; 3704898Swnj p->ipf_next->ipf_prev = p->ipf_prev; 3714495Swnj } 3724495Swnj 3734640Swnj /* 3744640Swnj * IP timer processing; 3754640Swnj * if a timer expires on a reassembly 3764640Swnj * queue, discard it. 3774640Swnj */ 3784801Swnj ip_slowtimo() 3794495Swnj { 3804495Swnj register struct ipq *fp; 3814640Swnj int s = splnet(); 3824951Swnj 3834801Swnj COUNT(IP_SLOWTIMO); 3844644Swnj for (fp = ipq.next; fp != &ipq; ) 3854640Swnj if (--fp->ipq_ttl == 0) 3864640Swnj fp = ip_freef(fp); 3874640Swnj else 3884640Swnj fp = fp->next; 3894640Swnj splx(s); 3904495Swnj } 3914495Swnj 3924951Swnj /* 3934951Swnj * Drain off all datagram fragments. 3944951Swnj */ 3954801Swnj ip_drain() 3964801Swnj { 3974801Swnj 3984951Swnj COUNT(IP_DRAIN); 3994951Swnj while (ipq.next != &ipq) 4004951Swnj (void) ip_freef(ipq.next); 4014801Swnj } 4024923Swnj 4034640Swnj /* 4044640Swnj * Do option processing on a datagram, 4054640Swnj * possibly discarding it if bad options 4064640Swnj * are encountered. 4074640Swnj */ 4084640Swnj ip_dooptions(ip) 4094640Swnj struct ip *ip; 4104495Swnj { 4114640Swnj register u_char *cp; 4124907Swnj int opt, optlen, cnt; 4134923Swnj struct in_addr *sin; 4144801Swnj register struct ip_timestamp *ipt; 4154951Swnj register struct ifnet *ifp; 4164951Swnj struct in_addr t; 4174495Swnj 4184951Swnj COUNT(IP_DOOPTIONS); 4194640Swnj cp = (u_char *)(ip + 1); 4204640Swnj cnt = (ip->ip_hl << 2) - sizeof (struct ip); 4214640Swnj for (; cnt > 0; cnt -= optlen, cp += optlen) { 4224640Swnj opt = cp[0]; 4234640Swnj if (opt == IPOPT_EOL) 4244640Swnj break; 4254640Swnj if (opt == IPOPT_NOP) 4264640Swnj optlen = 1; 4274640Swnj else 4284640Swnj optlen = cp[1]; 4294640Swnj switch (opt) { 4304495Swnj 4314640Swnj default: 4324640Swnj break; 4334495Swnj 4344951Swnj /* 4354951Swnj * Source routing with record. 4364951Swnj * Find interface with current destination address. 4374951Swnj * If none on this machine then drop if strictly routed, 4384951Swnj * or do nothing if loosely routed. 4394951Swnj * Record interface address and bring up next address 4404951Swnj * component. If strictly routed make sure next 4414951Swnj * address on directly accessible net. 4424951Swnj */ 4434640Swnj case IPOPT_LSRR: 4444801Swnj if (cp[2] < 4 || cp[2] > optlen - (sizeof (long) - 1)) 4454640Swnj break; 4464923Swnj sin = (struct in_addr *)(cp + cp[2]); 4474951Swnj ifp = if_ifwithaddr(*sin); 4484951Swnj if (ifp == 0) { 4494951Swnj if (opt == IPOPT_SSRR) 4504951Swnj goto bad; 4514951Swnj break; 4524640Swnj } 4534951Swnj t = ip->ip_dst; ip->ip_dst = *sin; *sin = t; 4544951Swnj cp[2] += 4; 4554951Swnj if (cp[2] > optlen - (sizeof (long) - 1)) 4564951Swnj break; 4574951Swnj ip->ip_dst = sin[1]; 4584951Swnj if (opt == IPOPT_SSRR && if_ifonnetof(ip->ip_dst)==0) 4594951Swnj goto bad; 4604640Swnj break; 4614495Swnj 4624640Swnj case IPOPT_TS: 4634801Swnj ipt = (struct ip_timestamp *)cp; 4644801Swnj if (ipt->ipt_len < 5) 4654640Swnj goto bad; 4664801Swnj if (ipt->ipt_ptr > ipt->ipt_len - sizeof (long)) { 4674801Swnj if (++ipt->ipt_oflw == 0) 4684640Swnj goto bad; 4694495Swnj break; 4704640Swnj } 4714923Swnj sin = (struct in_addr *)(cp+cp[2]); 4724801Swnj switch (ipt->ipt_flg) { 4734495Swnj 4744640Swnj case IPOPT_TS_TSONLY: 4754640Swnj break; 4764640Swnj 4774640Swnj case IPOPT_TS_TSANDADDR: 4784801Swnj if (ipt->ipt_ptr + 8 > ipt->ipt_len) 4794640Swnj goto bad; 4804951Swnj /* stamp with ``first'' interface address */ 4814951Swnj *sin++ = ifnet->if_addr; 4824640Swnj break; 4834640Swnj 4844640Swnj case IPOPT_TS_PRESPEC: 4854951Swnj if (if_ifwithaddr(*sin) == 0) 4864951Swnj continue; 4874801Swnj if (ipt->ipt_ptr + 8 > ipt->ipt_len) 4884640Swnj goto bad; 4894801Swnj ipt->ipt_ptr += 4; 4904640Swnj break; 4914640Swnj 4924495Swnj default: 4934640Swnj goto bad; 4944495Swnj } 4954923Swnj *(n_time *)sin = iptime(); 4964801Swnj ipt->ipt_ptr += 4; 4974640Swnj } 4984495Swnj } 4994907Swnj return; 5004640Swnj bad: 5014640Swnj /* SHOULD FORCE ICMP MESSAGE */ 5024907Swnj return; 5034495Swnj } 5044495Swnj 5054640Swnj /* 5064951Swnj * Strip out IP options, at higher 5074951Swnj * level protocol in the kernel. 5084951Swnj * Second argument is buffer to which options 5094951Swnj * will be moved, and return value is their length. 5104640Swnj */ 511*5217Swnj ip_stripoptions(ip, mopt) 5124640Swnj struct ip *ip; 513*5217Swnj struct mbuf *mopt; 5144495Swnj { 5154640Swnj register int i; 5164640Swnj register struct mbuf *m; 5174640Swnj int olen; 5184951Swnj COUNT(IP_STRIPOPTIONS); 5194640Swnj 5204640Swnj olen = (ip->ip_hl<<2) - sizeof (struct ip); 5214951Swnj m = dtom(ip); 5224951Swnj ip++; 523*5217Swnj if (mopt) { 524*5217Swnj mopt->m_len = olen; 525*5217Swnj mopt->m_off = MMINOFF; 526*5217Swnj bcopy((caddr_t)ip, mtod(m, caddr_t), (unsigned)olen); 527*5217Swnj } 5284640Swnj i = m->m_len - (sizeof (struct ip) + olen); 5294907Swnj bcopy((caddr_t)ip+olen, (caddr_t)ip, (unsigned)i); 5304640Swnj m->m_len -= i; 5314495Swnj } 532