xref: /csrg-svn/sys/netinet/ip_input.c (revision 5217)
1*5217Swnj /* ip_input.c 1.23 81/12/09 */
24571Swnj 
34495Swnj #include "../h/param.h"
44543Swnj #include "../h/systm.h"
54640Swnj #include "../h/clock.h"
64640Swnj #include "../h/mbuf.h"
74898Swnj #include "../h/protosw.h"
84923Swnj #include "../h/socket.h"
95084Swnj #include "../net/in.h"
105084Swnj #include "../net/in_systm.h"
114951Swnj #include "../net/if.h"
125084Swnj #include "../net/ip.h"			/* belongs before in.h */
134898Swnj #include "../net/ip_var.h"
144801Swnj #include "../net/ip_icmp.h"
154801Swnj #include "../net/tcp.h"
164495Swnj 
174898Swnj u_char	ip_protox[IPPROTO_MAX];
184898Swnj 
194801Swnj /*
205172Swnj  * IP initialization: fill in IP protocol switch table.
215161Swnj  * All protocols not implemented in kernel go to raw IP protocol handler.
224801Swnj  */
234801Swnj ip_init()
244801Swnj {
254898Swnj 	register struct protosw *pr;
264898Swnj 	register int i;
274495Swnj 
284951Swnj COUNT(IP_INIT);
294898Swnj 	pr = pffindproto(PF_INET, IPPROTO_RAW);
304898Swnj 	if (pr == 0)
314898Swnj 		panic("ip_init");
324898Swnj 	for (i = 0; i < IPPROTO_MAX; i++)
334898Swnj 		ip_protox[i] = pr - protosw;
344898Swnj 	for (pr = protosw; pr <= protoswLAST; pr++)
354898Swnj 		if (pr->pr_family == PF_INET &&
364898Swnj 		    pr->pr_protocol && pr->pr_protocol != IPPROTO_RAW)
374898Swnj 			ip_protox[pr->pr_protocol] = pr - protosw;
384801Swnj 	ipq.next = ipq.prev = &ipq;
394801Swnj 	ip_id = time & 0xffff;
404801Swnj }
414801Swnj 
424898Swnj u_char	ipcksum = 1;
434640Swnj struct	ip *ip_reass();
444640Swnj 
454640Swnj /*
464640Swnj  * Ip input routine.  Checksum and byte swap header.  If fragmented
474640Swnj  * try to reassamble.  If complete and fragment queue exists, discard.
484640Swnj  * Process options.  Pass to next level.
494640Swnj  */
505084Swnj ipintr()
514495Swnj {
524923Swnj 	register struct ip *ip;
535084Swnj 	register struct mbuf *m;
54*5217Swnj 	struct mbuf *m0, *mopt;
554640Swnj 	register int i;
564495Swnj 	register struct ipq *fp;
575084Swnj 	int hlen, s;
584495Swnj 
59*5217Swnj printf("ipintr\n");
605084Swnj COUNT(IPINTR);
615084Swnj next:
624640Swnj 	/*
635084Swnj 	 * Get next datagram off input queue and get IP header
645084Swnj 	 * in first mbuf.
654640Swnj 	 */
665084Swnj 	s = splimp();
675084Swnj 	IF_DEQUEUE(&ipintrq, m);
685084Swnj 	splx(s);
69*5217Swnj 	if (m == 0) {
70*5217Swnj printf("ipintr returns\n");
715084Swnj 		return;
72*5217Swnj 	}
73*5217Swnj printf("ipintr dequeued %x\n", m);
745046Swnj 	if (m->m_len < sizeof (struct ip) &&
75*5217Swnj 	    m_pullup(m, sizeof (struct ip)) == 0) {
76*5217Swnj printf("ipintr pullup drop\n");
775046Swnj 		goto bad;
78*5217Swnj 	}
794640Swnj 	ip = mtod(m, struct ip *);
80*5217Swnj printf("ipintr ip->ip_hl %d\n", ip->ip_hl);
815161Swnj 	if ((hlen = ip->ip_hl << 2) > m->m_len) {
825161Swnj 		if (m_pullup(m, hlen) == 0)
835161Swnj 			goto bad;
845161Swnj 		ip = mtod(m, struct ip *);
855161Swnj 	}
864951Swnj 	if (ipcksum)
87*5217Swnj 		if (ip->ip_sum = in_cksum(m, hlen)) {
885161Swnj 			printf("ip_sum %x\n", ip->ip_sum);	/* XXX */
894951Swnj 			ipstat.ips_badsum++;
904951Swnj 			goto bad;
914495Swnj 		}
92*5217Swnj printf("cksum passed\n");
934951Swnj 
94*5217Swnj #if vax
954951Swnj 	/*
964951Swnj 	 * Convert fields to host representation.
974951Swnj 	 */
984907Swnj 	ip->ip_len = ntohs((u_short)ip->ip_len);
994640Swnj 	ip->ip_id = ntohs(ip->ip_id);
1004951Swnj 	ip->ip_off = ntohs((u_short)ip->ip_off);
101*5217Swnj #endif
1024495Swnj 
1034543Swnj 	/*
1044640Swnj 	 * Check that the amount of data in the buffers
1054640Swnj 	 * is as at least much as the IP header would have us expect.
1064640Swnj 	 * Trim mbufs if longer than we expect.
1074640Swnj 	 * Drop packet if shorter than we expect.
1084543Swnj 	 */
1094640Swnj 	i = 0;
1105161Swnj 	m0 = m;
1115161Swnj 	for (; m != NULL; m = m->m_next)
1124495Swnj 		i += m->m_len;
1134640Swnj 	m = m0;
114*5217Swnj printf("ip->ip_len %d, i %d\n", ip->ip_len , i);
1154640Swnj 	if (i != ip->ip_len) {
1165161Swnj 		if (i < ip->ip_len) {
1175161Swnj 			ipstat.ips_tooshort++;
1184951Swnj 			goto bad;
1195161Swnj 		}
1204640Swnj 		m_adj(m, ip->ip_len - i);
1214495Swnj 	}
1224495Swnj 
1234640Swnj 	/*
1244640Swnj 	 * Process options and, if not destined for us,
1254640Swnj 	 * ship it on.
1264640Swnj 	 */
127*5217Swnj printf("ipintr at option code\n");
1284543Swnj 	if (hlen > sizeof (struct ip))
1294907Swnj 		ip_dooptions(ip);
1305084Swnj 	if (ifnet && ip->ip_dst.s_addr != ifnet->if_addr.s_addr &&
1315045Swnj 	    if_ifwithaddr(ip->ip_dst) == 0) {
1324640Swnj 		if (--ip->ip_ttl == 0) {
1334907Swnj 			icmp_error(ip, ICMP_TIMXCEED, 0);
1345084Swnj 			goto next;
1354495Swnj 		}
136*5217Swnj 		mopt = m_get(M_DONTWAIT);
137*5217Swnj 		if (mopt == 0)
138*5217Swnj 			goto bad;
139*5217Swnj 		ip_stripoptions(ip, mopt);
140*5217Swnj 		(void) ip_output(m0, mopt);
1415084Swnj 		goto next;
1424543Swnj 	}
1434495Swnj 
1444640Swnj 	/*
1454640Swnj 	 * Look for queue of fragments
1464640Swnj 	 * of this datagram.
1474640Swnj 	 */
1484640Swnj 	for (fp = ipq.next; fp != &ipq; fp = fp->next)
1494640Swnj 		if (ip->ip_id == fp->ipq_id &&
1504640Swnj 		    ip->ip_src.s_addr == fp->ipq_src.s_addr &&
1514640Swnj 		    ip->ip_dst.s_addr == fp->ipq_dst.s_addr &&
1524640Swnj 		    ip->ip_p == fp->ipq_p)
1534640Swnj 			goto found;
1544640Swnj 	fp = 0;
1554640Swnj found:
1564495Swnj 
1574640Swnj 	/*
1584640Swnj 	 * Adjust ip_len to not reflect header,
1594640Swnj 	 * set ip_mff if more fragments are expected,
1604640Swnj 	 * convert offset of this to bytes.
1614640Swnj 	 */
1624640Swnj 	ip->ip_len -= hlen;
1634898Swnj 	((struct ipasfrag *)ip)->ipf_mff = 0;
1644640Swnj 	if (ip->ip_off & IP_MF)
1654898Swnj 		((struct ipasfrag *)ip)->ipf_mff = 1;
1664640Swnj 	ip->ip_off <<= 3;
1674495Swnj 
1684640Swnj 	/*
1694640Swnj 	 * If datagram marked as having more fragments
1704640Swnj 	 * or if this is not the first fragment,
1714640Swnj 	 * attempt reassembly; if it succeeds, proceed.
1724640Swnj 	 */
1734898Swnj 	if (((struct ipasfrag *)ip)->ipf_mff || ip->ip_off) {
1744898Swnj 		ip = ip_reass((struct ipasfrag *)ip, fp);
1754640Swnj 		if (ip == 0)
1765084Swnj 			goto next;
1774640Swnj 		hlen = ip->ip_hl << 2;
1784640Swnj 		m = dtom(ip);
1794640Swnj 	} else
1804640Swnj 		if (fp)
1814640Swnj 			(void) ip_freef(fp);
1824951Swnj 
1834951Swnj 	/*
1844951Swnj 	 * Switch out to protocol's input routine.
1854951Swnj 	 */
186*5217Swnj printf("ipintr switching out to protocol %d\n", ip->ip_p);
1874898Swnj 	(*protosw[ip_protox[ip->ip_p]].pr_input)(m);
1885084Swnj 	goto next;
1894951Swnj bad:
1904951Swnj 	m_freem(m);
1915084Swnj 	goto next;
1924640Swnj }
1934495Swnj 
1944640Swnj /*
1954640Swnj  * Take incoming datagram fragment and try to
1964951Swnj  * reassemble it into whole datagram.  If a chain for
1974640Swnj  * reassembly of this datagram already exists, then it
1984640Swnj  * is given as fp; otherwise have to make a chain.
1994640Swnj  */
2004640Swnj struct ip *
2014640Swnj ip_reass(ip, fp)
2024898Swnj 	register struct ipasfrag *ip;
2034640Swnj 	register struct ipq *fp;
2044640Swnj {
2054640Swnj 	register struct mbuf *m = dtom(ip);
2064898Swnj 	register struct ipasfrag *q;
2074640Swnj 	struct mbuf *t;
2084640Swnj 	int hlen = ip->ip_hl << 2;
2094640Swnj 	int i, next;
2104951Swnj COUNT(IP_REASS);
2114543Swnj 
2124640Swnj 	/*
2134640Swnj 	 * Presence of header sizes in mbufs
2144640Swnj 	 * would confuse code below.
2154640Swnj 	 */
2164640Swnj 	m->m_off += hlen;
2174640Swnj 	m->m_len -= hlen;
2184495Swnj 
2194640Swnj 	/*
2204640Swnj 	 * If first fragment to arrive, create a reassembly queue.
2214640Swnj 	 */
2224640Swnj 	if (fp == 0) {
2234640Swnj 		if ((t = m_get(1)) == NULL)
2244640Swnj 			goto dropfrag;
2254640Swnj 		t->m_off = MMINOFF;
2264640Swnj 		fp = mtod(t, struct ipq *);
2274640Swnj 		insque(fp, &ipq);
2284640Swnj 		fp->ipq_ttl = IPFRAGTTL;
2294640Swnj 		fp->ipq_p = ip->ip_p;
2304640Swnj 		fp->ipq_id = ip->ip_id;
2314898Swnj 		fp->ipq_next = fp->ipq_prev = (struct ipasfrag *)fp;
2324898Swnj 		fp->ipq_src = ((struct ip *)ip)->ip_src;
2334898Swnj 		fp->ipq_dst = ((struct ip *)ip)->ip_dst;
2345161Swnj 		q = (struct ipasfrag *)fp;
2355161Swnj 		goto insert;
2364640Swnj 	}
2374495Swnj 
2384640Swnj 	/*
2394640Swnj 	 * Find a segment which begins after this one does.
2404640Swnj 	 */
2414898Swnj 	for (q = fp->ipq_next; q != (struct ipasfrag *)fp; q = q->ipf_next)
2424640Swnj 		if (q->ip_off > ip->ip_off)
2434640Swnj 			break;
2444495Swnj 
2454640Swnj 	/*
2464640Swnj 	 * If there is a preceding segment, it may provide some of
2474640Swnj 	 * our data already.  If so, drop the data from the incoming
2484640Swnj 	 * segment.  If it provides all of our data, drop us.
2494640Swnj 	 */
2504898Swnj 	if (q->ipf_prev != (struct ipasfrag *)fp) {
2514898Swnj 		i = q->ipf_prev->ip_off + q->ipf_prev->ip_len - ip->ip_off;
2524640Swnj 		if (i > 0) {
2534640Swnj 			if (i >= ip->ip_len)
2544640Swnj 				goto dropfrag;
2554640Swnj 			m_adj(dtom(ip), i);
2564640Swnj 			ip->ip_off += i;
2574640Swnj 			ip->ip_len -= i;
2584640Swnj 		}
2594640Swnj 	}
2604543Swnj 
2614640Swnj 	/*
2624640Swnj 	 * While we overlap succeeding segments trim them or,
2634640Swnj 	 * if they are completely covered, dequeue them.
2644640Swnj 	 */
2654898Swnj 	while (q != (struct ipasfrag *)fp && ip->ip_off + ip->ip_len > q->ip_off) {
2664640Swnj 		i = (ip->ip_off + ip->ip_len) - q->ip_off;
2674640Swnj 		if (i < q->ip_len) {
2684640Swnj 			q->ip_len -= i;
2694640Swnj 			m_adj(dtom(q), i);
2704640Swnj 			break;
2714495Swnj 		}
2724898Swnj 		q = q->ipf_next;
2734898Swnj 		m_freem(dtom(q->ipf_prev));
2744898Swnj 		ip_deq(q->ipf_prev);
2754543Swnj 	}
2764495Swnj 
2775161Swnj insert:
2784640Swnj 	/*
2794640Swnj 	 * Stick new segment in its place;
2804640Swnj 	 * check for complete reassembly.
2814640Swnj 	 */
2824898Swnj 	ip_enq(ip, q->ipf_prev);
2834640Swnj 	next = 0;
2844898Swnj 	for (q = fp->ipq_next; q != (struct ipasfrag *)fp; q = q->ipf_next) {
2854640Swnj 		if (q->ip_off != next)
2864640Swnj 			return (0);
2874640Swnj 		next += q->ip_len;
2884640Swnj 	}
2894898Swnj 	if (q->ipf_prev->ipf_mff)
2904640Swnj 		return (0);
2914495Swnj 
2924640Swnj 	/*
2934640Swnj 	 * Reassembly is complete; concatenate fragments.
2944640Swnj 	 */
2954640Swnj 	q = fp->ipq_next;
2964640Swnj 	m = dtom(q);
2974640Swnj 	t = m->m_next;
2984640Swnj 	m->m_next = 0;
2994640Swnj 	m_cat(m, t);
3004898Swnj 	while ((q = q->ipf_next) != (struct ipasfrag *)fp)
3014640Swnj 		m_cat(m, dtom(q));
3024495Swnj 
3034640Swnj 	/*
3044640Swnj 	 * Create header for new ip packet by
3054640Swnj 	 * modifying header of first packet;
3064640Swnj 	 * dequeue and discard fragment reassembly header.
3074640Swnj 	 * Make header visible.
3084640Swnj 	 */
3094640Swnj 	ip = fp->ipq_next;
3104640Swnj 	ip->ip_len = next;
3114898Swnj 	((struct ip *)ip)->ip_src = fp->ipq_src;
3124898Swnj 	((struct ip *)ip)->ip_dst = fp->ipq_dst;
3134640Swnj 	remque(fp);
3144907Swnj 	(void) m_free(dtom(fp));
3154640Swnj 	m = dtom(ip);
3164898Swnj 	m->m_len += sizeof (struct ipasfrag);
3174898Swnj 	m->m_off -= sizeof (struct ipasfrag);
3184898Swnj 	return ((struct ip *)ip);
3194495Swnj 
3204640Swnj dropfrag:
3214640Swnj 	m_freem(m);
3224640Swnj 	return (0);
3234495Swnj }
3244495Swnj 
3254640Swnj /*
3264640Swnj  * Free a fragment reassembly header and all
3274640Swnj  * associated datagrams.
3284640Swnj  */
3294640Swnj struct ipq *
3304640Swnj ip_freef(fp)
3314640Swnj 	struct ipq *fp;
3324495Swnj {
3334898Swnj 	register struct ipasfrag *q;
3344640Swnj 	struct mbuf *m;
3354951Swnj COUNT(IP_FREEF);
3364495Swnj 
3374898Swnj 	for (q = fp->ipq_next; q != (struct ipasfrag *)fp; q = q->ipf_next)
3384640Swnj 		m_freem(dtom(q));
3394640Swnj 	m = dtom(fp);
3404640Swnj 	fp = fp->next;
3414640Swnj 	remque(fp->prev);
3424907Swnj 	(void) m_free(m);
3434640Swnj 	return (fp);
3444495Swnj }
3454495Swnj 
3464640Swnj /*
3474640Swnj  * Put an ip fragment on a reassembly chain.
3484640Swnj  * Like insque, but pointers in middle of structure.
3494640Swnj  */
3504640Swnj ip_enq(p, prev)
3514898Swnj 	register struct ipasfrag *p, *prev;
3524495Swnj {
3534951Swnj 
3544640Swnj COUNT(IP_ENQ);
3554898Swnj 	p->ipf_prev = prev;
3564898Swnj 	p->ipf_next = prev->ipf_next;
3574898Swnj 	prev->ipf_next->ipf_prev = p;
3584898Swnj 	prev->ipf_next = p;
3594495Swnj }
3604495Swnj 
3614640Swnj /*
3624640Swnj  * To ip_enq as remque is to insque.
3634640Swnj  */
3644640Swnj ip_deq(p)
3654898Swnj 	register struct ipasfrag *p;
3664640Swnj {
3674951Swnj 
3684640Swnj COUNT(IP_DEQ);
3694898Swnj 	p->ipf_prev->ipf_next = p->ipf_next;
3704898Swnj 	p->ipf_next->ipf_prev = p->ipf_prev;
3714495Swnj }
3724495Swnj 
3734640Swnj /*
3744640Swnj  * IP timer processing;
3754640Swnj  * if a timer expires on a reassembly
3764640Swnj  * queue, discard it.
3774640Swnj  */
3784801Swnj ip_slowtimo()
3794495Swnj {
3804495Swnj 	register struct ipq *fp;
3814640Swnj 	int s = splnet();
3824951Swnj 
3834801Swnj COUNT(IP_SLOWTIMO);
3844644Swnj 	for (fp = ipq.next; fp != &ipq; )
3854640Swnj 		if (--fp->ipq_ttl == 0)
3864640Swnj 			fp = ip_freef(fp);
3874640Swnj 		else
3884640Swnj 			fp = fp->next;
3894640Swnj 	splx(s);
3904495Swnj }
3914495Swnj 
3924951Swnj /*
3934951Swnj  * Drain off all datagram fragments.
3944951Swnj  */
3954801Swnj ip_drain()
3964801Swnj {
3974801Swnj 
3984951Swnj COUNT(IP_DRAIN);
3994951Swnj 	while (ipq.next != &ipq)
4004951Swnj 		(void) ip_freef(ipq.next);
4014801Swnj }
4024923Swnj 
4034640Swnj /*
4044640Swnj  * Do option processing on a datagram,
4054640Swnj  * possibly discarding it if bad options
4064640Swnj  * are encountered.
4074640Swnj  */
4084640Swnj ip_dooptions(ip)
4094640Swnj 	struct ip *ip;
4104495Swnj {
4114640Swnj 	register u_char *cp;
4124907Swnj 	int opt, optlen, cnt;
4134923Swnj 	struct in_addr *sin;
4144801Swnj 	register struct ip_timestamp *ipt;
4154951Swnj 	register struct ifnet *ifp;
4164951Swnj 	struct in_addr t;
4174495Swnj 
4184951Swnj COUNT(IP_DOOPTIONS);
4194640Swnj 	cp = (u_char *)(ip + 1);
4204640Swnj 	cnt = (ip->ip_hl << 2) - sizeof (struct ip);
4214640Swnj 	for (; cnt > 0; cnt -= optlen, cp += optlen) {
4224640Swnj 		opt = cp[0];
4234640Swnj 		if (opt == IPOPT_EOL)
4244640Swnj 			break;
4254640Swnj 		if (opt == IPOPT_NOP)
4264640Swnj 			optlen = 1;
4274640Swnj 		else
4284640Swnj 			optlen = cp[1];
4294640Swnj 		switch (opt) {
4304495Swnj 
4314640Swnj 		default:
4324640Swnj 			break;
4334495Swnj 
4344951Swnj 		/*
4354951Swnj 		 * Source routing with record.
4364951Swnj 		 * Find interface with current destination address.
4374951Swnj 		 * If none on this machine then drop if strictly routed,
4384951Swnj 		 * or do nothing if loosely routed.
4394951Swnj 		 * Record interface address and bring up next address
4404951Swnj 		 * component.  If strictly routed make sure next
4414951Swnj 		 * address on directly accessible net.
4424951Swnj 		 */
4434640Swnj 		case IPOPT_LSRR:
4444801Swnj 			if (cp[2] < 4 || cp[2] > optlen - (sizeof (long) - 1))
4454640Swnj 				break;
4464923Swnj 			sin = (struct in_addr *)(cp + cp[2]);
4474951Swnj 			ifp = if_ifwithaddr(*sin);
4484951Swnj 			if (ifp == 0) {
4494951Swnj 				if (opt == IPOPT_SSRR)
4504951Swnj 					goto bad;
4514951Swnj 				break;
4524640Swnj 			}
4534951Swnj 			t = ip->ip_dst; ip->ip_dst = *sin; *sin = t;
4544951Swnj 			cp[2] += 4;
4554951Swnj 			if (cp[2] > optlen - (sizeof (long) - 1))
4564951Swnj 				break;
4574951Swnj 			ip->ip_dst = sin[1];
4584951Swnj 			if (opt == IPOPT_SSRR && if_ifonnetof(ip->ip_dst)==0)
4594951Swnj 				goto bad;
4604640Swnj 			break;
4614495Swnj 
4624640Swnj 		case IPOPT_TS:
4634801Swnj 			ipt = (struct ip_timestamp *)cp;
4644801Swnj 			if (ipt->ipt_len < 5)
4654640Swnj 				goto bad;
4664801Swnj 			if (ipt->ipt_ptr > ipt->ipt_len - sizeof (long)) {
4674801Swnj 				if (++ipt->ipt_oflw == 0)
4684640Swnj 					goto bad;
4694495Swnj 				break;
4704640Swnj 			}
4714923Swnj 			sin = (struct in_addr *)(cp+cp[2]);
4724801Swnj 			switch (ipt->ipt_flg) {
4734495Swnj 
4744640Swnj 			case IPOPT_TS_TSONLY:
4754640Swnj 				break;
4764640Swnj 
4774640Swnj 			case IPOPT_TS_TSANDADDR:
4784801Swnj 				if (ipt->ipt_ptr + 8 > ipt->ipt_len)
4794640Swnj 					goto bad;
4804951Swnj 				/* stamp with ``first'' interface address */
4814951Swnj 				*sin++ = ifnet->if_addr;
4824640Swnj 				break;
4834640Swnj 
4844640Swnj 			case IPOPT_TS_PRESPEC:
4854951Swnj 				if (if_ifwithaddr(*sin) == 0)
4864951Swnj 					continue;
4874801Swnj 				if (ipt->ipt_ptr + 8 > ipt->ipt_len)
4884640Swnj 					goto bad;
4894801Swnj 				ipt->ipt_ptr += 4;
4904640Swnj 				break;
4914640Swnj 
4924495Swnj 			default:
4934640Swnj 				goto bad;
4944495Swnj 			}
4954923Swnj 			*(n_time *)sin = iptime();
4964801Swnj 			ipt->ipt_ptr += 4;
4974640Swnj 		}
4984495Swnj 	}
4994907Swnj 	return;
5004640Swnj bad:
5014640Swnj 	/* SHOULD FORCE ICMP MESSAGE */
5024907Swnj 	return;
5034495Swnj }
5044495Swnj 
5054640Swnj /*
5064951Swnj  * Strip out IP options, at higher
5074951Swnj  * level protocol in the kernel.
5084951Swnj  * Second argument is buffer to which options
5094951Swnj  * will be moved, and return value is their length.
5104640Swnj  */
511*5217Swnj ip_stripoptions(ip, mopt)
5124640Swnj 	struct ip *ip;
513*5217Swnj 	struct mbuf *mopt;
5144495Swnj {
5154640Swnj 	register int i;
5164640Swnj 	register struct mbuf *m;
5174640Swnj 	int olen;
5184951Swnj COUNT(IP_STRIPOPTIONS);
5194640Swnj 
5204640Swnj 	olen = (ip->ip_hl<<2) - sizeof (struct ip);
5214951Swnj 	m = dtom(ip);
5224951Swnj 	ip++;
523*5217Swnj 	if (mopt) {
524*5217Swnj 		mopt->m_len = olen;
525*5217Swnj 		mopt->m_off = MMINOFF;
526*5217Swnj 		bcopy((caddr_t)ip, mtod(m, caddr_t), (unsigned)olen);
527*5217Swnj 	}
5284640Swnj 	i = m->m_len - (sizeof (struct ip) + olen);
5294907Swnj 	bcopy((caddr_t)ip+olen, (caddr_t)ip, (unsigned)i);
5304640Swnj 	m->m_len -= i;
5314495Swnj }
532