1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39#include "slirp.h"
40#include "ip_icmp.h"
41
42static struct ip *ip_reass(Slirp *slirp, struct ip *ip, struct ipq *fp);
43static void ip_freef(Slirp *slirp, struct ipq *fp);
44static void ip_enq(register struct ipasfrag *p,
45 register struct ipasfrag *prev);
46static void ip_deq(register struct ipasfrag *p);
47
48
49
50
51
52void
53ip_init(Slirp *slirp)
54{
55 slirp->ipq.ip_link.next = slirp->ipq.ip_link.prev = &slirp->ipq.ip_link;
56 udp_init(slirp);
57 tcp_init(slirp);
58 icmp_init(slirp);
59}
60
61void ip_cleanup(Slirp *slirp)
62{
63 udp_cleanup(slirp);
64 tcp_cleanup(slirp);
65 icmp_cleanup(slirp);
66}
67
68
69
70
71
72void
73ip_input(struct mbuf *m)
74{
75 Slirp *slirp = m->slirp;
76 register struct ip *ip;
77 int hlen;
78
79 if (!slirp->in_enabled) {
80 goto bad;
81 }
82
83 DEBUG_CALL("ip_input");
84 DEBUG_ARG("m = %p", m);
85 DEBUG_ARG("m_len = %d", m->m_len);
86
87 if (m->m_len < sizeof (struct ip)) {
88 goto bad;
89 }
90
91 ip = mtod(m, struct ip *);
92
93 if (ip->ip_v != IPVERSION) {
94 goto bad;
95 }
96
97 hlen = ip->ip_hl << 2;
98 if (hlen<sizeof(struct ip ) || hlen>m->m_len) {
99 goto bad;
100 }
101
102
103
104
105
106 if(cksum(m,hlen)) {
107 goto bad;
108 }
109
110
111
112
113 NTOHS(ip->ip_len);
114 if (ip->ip_len < hlen) {
115 goto bad;
116 }
117 NTOHS(ip->ip_id);
118 NTOHS(ip->ip_off);
119
120
121
122
123
124
125
126 if (m->m_len < ip->ip_len) {
127 goto bad;
128 }
129
130
131 if (m->m_len > ip->ip_len)
132 m_adj(m, ip->ip_len - m->m_len);
133
134
135 if (ip->ip_ttl == 0) {
136 icmp_send_error(m, ICMP_TIMXCEED, ICMP_TIMXCEED_INTRANS, 0, "ttl");
137 goto bad;
138 }
139
140
141
142
143
144
145
146
147
148
149 if (ip->ip_off &~ IP_DF) {
150 register struct ipq *fp;
151 struct qlink *l;
152
153
154
155
156 for (l = slirp->ipq.ip_link.next; l != &slirp->ipq.ip_link;
157 l = l->next) {
158 fp = container_of(l, struct ipq, ip_link);
159 if (ip->ip_id == fp->ipq_id &&
160 ip->ip_src.s_addr == fp->ipq_src.s_addr &&
161 ip->ip_dst.s_addr == fp->ipq_dst.s_addr &&
162 ip->ip_p == fp->ipq_p)
163 goto found;
164 }
165 fp = NULL;
166 found:
167
168
169
170
171
172
173 ip->ip_len -= hlen;
174 if (ip->ip_off & IP_MF)
175 ip->ip_tos |= 1;
176 else
177 ip->ip_tos &= ~1;
178
179 ip->ip_off <<= 3;
180
181
182
183
184
185
186 if (ip->ip_tos & 1 || ip->ip_off) {
187 ip = ip_reass(slirp, ip, fp);
188 if (ip == NULL)
189 return;
190 m = dtom(slirp, ip);
191 } else
192 if (fp)
193 ip_freef(slirp, fp);
194
195 } else
196 ip->ip_len -= hlen;
197
198
199
200
201 switch (ip->ip_p) {
202 case IPPROTO_TCP:
203 tcp_input(m, hlen, (struct socket *)NULL, AF_INET);
204 break;
205 case IPPROTO_UDP:
206 udp_input(m, hlen);
207 break;
208 case IPPROTO_ICMP:
209 icmp_input(m, hlen);
210 break;
211 default:
212 m_free(m);
213 }
214 return;
215bad:
216 m_free(m);
217}
218
219#define iptofrag(P) ((struct ipasfrag *)(((char*)(P)) - sizeof(struct qlink)))
220#define fragtoip(P) ((struct ip*)(((char*)(P)) + sizeof(struct qlink)))
221
222
223
224
225
226
227static struct ip *
228ip_reass(Slirp *slirp, struct ip *ip, struct ipq *fp)
229{
230 register struct mbuf *m = dtom(slirp, ip);
231 register struct ipasfrag *q;
232 int hlen = ip->ip_hl << 2;
233 int i, next;
234
235 DEBUG_CALL("ip_reass");
236 DEBUG_ARG("ip = %p", ip);
237 DEBUG_ARG("fp = %p", fp);
238 DEBUG_ARG("m = %p", m);
239
240
241
242
243
244
245 m->m_data += hlen;
246 m->m_len -= hlen;
247
248
249
250
251 if (fp == NULL) {
252 struct mbuf *t = m_get(slirp);
253
254 if (t == NULL) {
255 goto dropfrag;
256 }
257 fp = mtod(t, struct ipq *);
258 insque(&fp->ip_link, &slirp->ipq.ip_link);
259 fp->ipq_ttl = IPFRAGTTL;
260 fp->ipq_p = ip->ip_p;
261 fp->ipq_id = ip->ip_id;
262 fp->frag_link.next = fp->frag_link.prev = &fp->frag_link;
263 fp->ipq_src = ip->ip_src;
264 fp->ipq_dst = ip->ip_dst;
265 q = (struct ipasfrag *)fp;
266 goto insert;
267 }
268
269
270
271
272 for (q = fp->frag_link.next; q != (struct ipasfrag *)&fp->frag_link;
273 q = q->ipf_next)
274 if (q->ipf_off > ip->ip_off)
275 break;
276
277
278
279
280
281
282 if (q->ipf_prev != &fp->frag_link) {
283 struct ipasfrag *pq = q->ipf_prev;
284 i = pq->ipf_off + pq->ipf_len - ip->ip_off;
285 if (i > 0) {
286 if (i >= ip->ip_len)
287 goto dropfrag;
288 m_adj(dtom(slirp, ip), i);
289 ip->ip_off += i;
290 ip->ip_len -= i;
291 }
292 }
293
294
295
296
297
298 while (q != (struct ipasfrag*)&fp->frag_link &&
299 ip->ip_off + ip->ip_len > q->ipf_off) {
300 i = (ip->ip_off + ip->ip_len) - q->ipf_off;
301 if (i < q->ipf_len) {
302 q->ipf_len -= i;
303 q->ipf_off += i;
304 m_adj(dtom(slirp, q), i);
305 break;
306 }
307 q = q->ipf_next;
308 m_free(dtom(slirp, q->ipf_prev));
309 ip_deq(q->ipf_prev);
310 }
311
312insert:
313
314
315
316
317 ip_enq(iptofrag(ip), q->ipf_prev);
318 next = 0;
319 for (q = fp->frag_link.next; q != (struct ipasfrag*)&fp->frag_link;
320 q = q->ipf_next) {
321 if (q->ipf_off != next)
322 return NULL;
323 next += q->ipf_len;
324 }
325 if (((struct ipasfrag *)(q->ipf_prev))->ipf_tos & 1)
326 return NULL;
327
328
329
330
331 q = fp->frag_link.next;
332 m = dtom(slirp, q);
333
334 q = (struct ipasfrag *) q->ipf_next;
335 while (q != (struct ipasfrag*)&fp->frag_link) {
336 struct mbuf *t = dtom(slirp, q);
337 q = (struct ipasfrag *) q->ipf_next;
338 m_cat(m, t);
339 }
340
341
342
343
344
345
346
347 q = fp->frag_link.next;
348
349
350
351
352
353
354
355
356 if (m->m_flags & M_EXT) {
357 int delta = (char *)q - m->m_dat;
358 q = (struct ipasfrag *)(m->m_ext + delta);
359 }
360
361 ip = fragtoip(q);
362 ip->ip_len = next;
363 ip->ip_tos &= ~1;
364 ip->ip_src = fp->ipq_src;
365 ip->ip_dst = fp->ipq_dst;
366 remque(&fp->ip_link);
367 (void) m_free(dtom(slirp, fp));
368 m->m_len += (ip->ip_hl << 2);
369 m->m_data -= (ip->ip_hl << 2);
370
371 return ip;
372
373dropfrag:
374 m_free(m);
375 return NULL;
376}
377
378
379
380
381
382static void
383ip_freef(Slirp *slirp, struct ipq *fp)
384{
385 register struct ipasfrag *q, *p;
386
387 for (q = fp->frag_link.next; q != (struct ipasfrag*)&fp->frag_link; q = p) {
388 p = q->ipf_next;
389 ip_deq(q);
390 m_free(dtom(slirp, q));
391 }
392 remque(&fp->ip_link);
393 (void) m_free(dtom(slirp, fp));
394}
395
396
397
398
399
400static void
401ip_enq(register struct ipasfrag *p, register struct ipasfrag *prev)
402{
403 DEBUG_CALL("ip_enq");
404 DEBUG_ARG("prev = %p", prev);
405 p->ipf_prev = prev;
406 p->ipf_next = prev->ipf_next;
407 ((struct ipasfrag *)(prev->ipf_next))->ipf_prev = p;
408 prev->ipf_next = p;
409}
410
411
412
413
414static void
415ip_deq(register struct ipasfrag *p)
416{
417 ((struct ipasfrag *)(p->ipf_prev))->ipf_next = p->ipf_next;
418 ((struct ipasfrag *)(p->ipf_next))->ipf_prev = p->ipf_prev;
419}
420
421
422
423
424
425
426void
427ip_slowtimo(Slirp *slirp)
428{
429 struct qlink *l;
430
431 DEBUG_CALL("ip_slowtimo");
432
433 l = slirp->ipq.ip_link.next;
434
435 if (l == NULL)
436 return;
437
438 while (l != &slirp->ipq.ip_link) {
439 struct ipq *fp = container_of(l, struct ipq, ip_link);
440 l = l->next;
441 if (--fp->ipq_ttl == 0) {
442 ip_freef(slirp, fp);
443 }
444 }
445}
446
447
448
449
450
451
452
453
454void
455ip_stripoptions(register struct mbuf *m, struct mbuf *mopt)
456{
457 register int i;
458 struct ip *ip = mtod(m, struct ip *);
459 register char *opts;
460 int olen;
461
462 olen = (ip->ip_hl<<2) - sizeof (struct ip);
463 opts = (char *)(ip + 1);
464 i = m->m_len - (sizeof (struct ip) + olen);
465 memcpy(opts, opts + olen, (unsigned)i);
466 m->m_len -= olen;
467
468 ip->ip_hl = sizeof(struct ip) >> 2;
469}
470