CVS log for kame/kame/sys/netinet6/ip6_input.c

Up to [KAME snap] / kame / kame / sys / netinet6

Request diff between arbitrary revisions - Display revisions graphically

Keyword substitution: kv
Default branch: MAIN

ANSIfy, to reduce diffs with *BSDs.
based on diff from dunceor at gmail.com.
XXX not tested yet, sorry, we need to ressurect buildlab configs.

random thoughts:
- IGMPv3 support needs a serious cleanup.  argument passing is horrible, style
  does not meet style(9) at all.  i'm afraid there could be a lot of bugs.
- DCCP/SCTP/NAT-PT need someone to maintain them, otherwise we should drop
  them at once.
- we should pick a platform (one of *BSD) and try to get KAME tree in sync
  with more recent version of *BSD.  otherwise, KAME tree gets more and more
  out-of-date.

clarifying some points in the previous code comment as well as some minor
style changes

comment on "drop packets with more than 1 routing header" code.
suggested by jinmei.

drop packets with more than 1 routing headers.
from claudio@openbsd

ignore "unrecognized" router alert options so that the router can
forward packets containing such a router alert option.  Actually, this code
only treats IP6OPT_RTALERT_MLD as "recognized".

pointed out by Andrew McDonald

cleanup SCOPEDROUTING (unifdef -USCOPEDROUTING)

removed an unexpected white character in an indentation.

It is preferable to use NIST > 0 rather than IFT_IST to know isatap is used.

Bug fix for ISATAP

added temporary debug printf for the new scope code

style

in ip6_input() make sure that the original source or destination address
is not in our internal form for scoped addresses.  Such addresses
are not necessarily invalid spec-wise, but we cannot accept them due
to the usage conflict.

revised scope-related interfaces, clarifying the relationship between
the kernel-internal form and the public sockaddr_in6 form.

changed the word '2292bis' to 'RFC3542' when appropriate.

removed a freebsd4-specific include file

remove freebsd[234]-specific code, since they are no longer supported in KAME-SNAP

make it compilable on netbsd/openbsd

added a knob to enable path MTU discovery for multicast packets.
(by default, it is disabled)

fixed PF malfunction for inbound IPv6 traffic on freebsd5

remove a duplicated block that was introduced in v1.349 when merging
freebsd-5.3.
reported by Joerg Sonnenberger <joerg@britannica.bec.de>

- sys/netipsec (FAST_IPSEC) has #define for time_second
- use pfil_hook for PF

sync w/ 2.0.
needs checking/fixing: igmp3, pf, altq, dccp, sctp
FAST_IPSEC path is not considered, intentionally.

NIST > 0 would be better to know ISATAP is configured.

New Mobile IPv6 code which also supports NEMO.

makes ISATAP compilable on OpenBSD

sync with freebsd53 and makes it compilable
(their behavior is not confirmed yet...)

another clarification of rfc2462bis:
disable IPv6 operation if DAD fails for some EUI-64 link-local addresses.
export get_hw_ifid() (and rename it) as a subroutine for this process.

remove support for freebsd[23], simplify #ifdef

comment wording

do not check super user privilege in ip6_savecontrol.  It is meaningless and
can even be harmful.

nuke some bsdi #ifdef.  make pf.c compatible w/ nd6_output() arg.

de-support freebsd2

simplify #ifdef by de-support bsdi[34] and freebsd[23].

make it compilable on freebsd521+kame

ToDo: reflect changes in freebsd521, test, ...

- Removed an unnecessary if-condition.

- Applies per-interface MSF at ICMPv6 layer (instead of IP layer).
  This is to prevent MLDv2 packets from being filtered by per-interface MSF.
- Applies per-socket MSF for raw-socket/ICMPv6 socket

restructure of header files based on draft-ietf-mip6-mipext-advapi-00.

reorder to meet w/ old code

knf

makes MLDv2 compilable
(behavior is not confirmed yet...)

move away from in6_{get,set}pktaddrs framework, go back to embedded
scopeid in s6_addr16[1].  this is to make *BSD merge easier.

TODO: check missing/removed scope border code
TODO: variable name re-sync w/ *BSD platforms
TODO: fix non-netbsd platforms
TODO: fix mip6, sctp, dccp, mldv2

increase nxt stat after packet filtering ops

changed mobility header protocol no. and MIP6 related ICMPv6 type no.
based on IANA assignment.

fixed an endian bug on fragment header scanning

Reported by  Masahito Endo <masaxmasa@tahi.org>

a 2292bis cleanup:
  now ip6_savecontrol() simply takes mbuf ** just like ip_savecontrol(), since
  RFC3542 doesn't require to keep history of control information.
  removed ip6_recvpktopts{} accordingly.

freebsd[345] calls ip6_savecontrol with IPv4 packet, weird!

- remove a couple of NULL checks (should panic)
- DIAGNOSTIC is not for printf()
- IN6P_HOPOPTS should only be set on privileged in6p (ip6_output.c)
  so panic if mismatch happens
- ip6_savecontrol() argument is redundant

use 2292bis def for router alert opt

randomize flowlabel/fragment ID.

more comment wording

comment wording

- sync with Freebsd 5.1-RELEASE
- removed FreeBSD-specific ifdef for M_MOVE_PKTHDR(), since all *BSDs have M_MOVE_PKTHDR() now

suppress ICMPv6 redirect if packet filter rewrote ip6_dst to some address
on the incoming interface.  cedric@openbsd