be2ac88c59
DoS in an improved fashion over the existing code. Reviewed by: silby (in a previous iteration) Sponsored by: DARPA, NAI Labs
341 lines
12 KiB
C
341 lines
12 KiB
C
/*
|
|
* Copyright (c) 1982, 1986, 1990, 1993
|
|
* The Regents of the University of California. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. All advertising materials mentioning features or use of this software
|
|
* must display the following acknowledgement:
|
|
* This product includes software developed by the University of
|
|
* California, Berkeley and its contributors.
|
|
* 4. Neither the name of the University nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*
|
|
* @(#)in_pcb.h 8.1 (Berkeley) 6/10/93
|
|
* $FreeBSD$
|
|
*/
|
|
|
|
#ifndef _NETINET_IN_PCB_H_
|
|
#define _NETINET_IN_PCB_H_
|
|
|
|
#include <sys/queue.h>
|
|
|
|
#include <netinet6/ipsec.h> /* for IPSEC */
|
|
|
|
#define in6pcb inpcb /* for KAME src sync over BSD*'s */
|
|
#define in6p_sp inp_sp /* for KAME src sync over BSD*'s */
|
|
|
|
/*
|
|
* Common structure pcb for internet protocol implementation.
|
|
* Here are stored pointers to local and foreign host table
|
|
* entries, local and foreign socket numbers, and pointers
|
|
* up (to a socket structure) and down (to a protocol-specific)
|
|
* control block.
|
|
*/
|
|
LIST_HEAD(inpcbhead, inpcb);
|
|
LIST_HEAD(inpcbporthead, inpcbport);
|
|
typedef u_quad_t inp_gen_t;
|
|
|
|
/*
|
|
* PCB with AF_INET6 null bind'ed laddr can receive AF_INET input packet.
|
|
* So, AF_INET6 null laddr is also used as AF_INET null laddr,
|
|
* by utilize following structure. (At last, same as INRIA)
|
|
*/
|
|
struct in_addr_4in6 {
|
|
u_int32_t ia46_pad32[3];
|
|
struct in_addr ia46_addr4;
|
|
};
|
|
|
|
/*
|
|
* NOTE: ipv6 addrs should be 64-bit aligned, per RFC 2553.
|
|
* in_conninfo has some extra padding to accomplish this.
|
|
*/
|
|
struct in_endpoints {
|
|
u_int16_t ie_fport; /* foreign port */
|
|
u_int16_t ie_lport; /* local port */
|
|
/* protocol dependent part, local and foreign addr */
|
|
union {
|
|
/* foreign host table entry */
|
|
struct in_addr_4in6 ie46_foreign;
|
|
struct in6_addr ie6_foreign;
|
|
} ie_dependfaddr;
|
|
union {
|
|
/* local host table entry */
|
|
struct in_addr_4in6 ie46_local;
|
|
struct in6_addr ie6_local;
|
|
} ie_dependladdr;
|
|
#define ie_faddr ie_dependfaddr.ie46_foreign.ia46_addr4
|
|
#define ie_laddr ie_dependladdr.ie46_local.ia46_addr4
|
|
#define ie6_faddr ie_dependfaddr.ie6_foreign
|
|
#define ie6_laddr ie_dependladdr.ie6_local
|
|
};
|
|
|
|
/*
|
|
* XXX
|
|
* At some point struct route should possibly change to:
|
|
* struct rtentry *rt
|
|
* struct in_endpoints *ie;
|
|
*/
|
|
struct in_conninfo {
|
|
u_int8_t inc_flags;
|
|
u_int8_t inc_len;
|
|
u_int16_t inc_pad; /* XXX alignment for in_endpoints */
|
|
/* protocol dependent part; cached route */
|
|
struct in_endpoints inc_ie;
|
|
union {
|
|
/* placeholder for routing entry */
|
|
struct route inc4_route;
|
|
struct route_in6 inc6_route;
|
|
} inc_dependroute;
|
|
};
|
|
#define inc_isipv6 inc_flags /* temp compatability */
|
|
#define inc_fport inc_ie.ie_fport
|
|
#define inc_lport inc_ie.ie_lport
|
|
#define inc_faddr inc_ie.ie_faddr
|
|
#define inc_laddr inc_ie.ie_laddr
|
|
#define inc_route inc_dependroute.inc4_route
|
|
#define inc6_faddr inc_ie.ie6_faddr
|
|
#define inc6_laddr inc_ie.ie6_laddr
|
|
#define inc6_route inc_dependroute.inc6_route
|
|
|
|
/*
|
|
* NB: the zone allocator is type-stable EXCEPT FOR THE FIRST TWO LONGS
|
|
* of the structure. Therefore, it is important that the members in
|
|
* that position not contain any information which is required to be
|
|
* stable.
|
|
*/
|
|
struct icmp6_filter;
|
|
|
|
struct inpcb {
|
|
LIST_ENTRY(inpcb) inp_hash; /* hash list */
|
|
LIST_ENTRY(inpcb) inp_list; /* list for all PCBs of this proto */
|
|
u_int32_t inp_flow;
|
|
|
|
/* local and foreign ports, local and foreign addr */
|
|
struct in_conninfo inp_inc;
|
|
|
|
caddr_t inp_ppcb; /* pointer to per-protocol pcb */
|
|
struct inpcbinfo *inp_pcbinfo; /* PCB list info */
|
|
struct socket *inp_socket; /* back pointer to socket */
|
|
/* list for this PCB's local port */
|
|
int inp_flags; /* generic IP/datagram flags */
|
|
|
|
struct inpcbpolicy *inp_sp; /* for IPSEC */
|
|
u_char inp_vflag;
|
|
#define INP_IPV4 0x1
|
|
#define INP_IPV6 0x2
|
|
u_char inp_ip_ttl; /* time to live proto */
|
|
u_char inp_ip_p; /* protocol proto */
|
|
|
|
/* protocol dependent part; options */
|
|
struct {
|
|
u_char inp4_ip_tos; /* type of service proto */
|
|
struct mbuf *inp4_options; /* IP options */
|
|
struct ip_moptions *inp4_moptions; /* IP multicast options */
|
|
} inp_depend4;
|
|
#define inp_fport inp_inc.inc_fport
|
|
#define inp_lport inp_inc.inc_lport
|
|
#define inp_faddr inp_inc.inc_faddr
|
|
#define inp_laddr inp_inc.inc_laddr
|
|
#define inp_route inp_inc.inc_route
|
|
#define inp_ip_tos inp_depend4.inp4_ip_tos
|
|
#define inp_options inp_depend4.inp4_options
|
|
#define inp_moptions inp_depend4.inp4_moptions
|
|
struct {
|
|
/* IP options */
|
|
struct mbuf *inp6_options;
|
|
/* IP6 options for outgoing packets */
|
|
struct ip6_pktopts *inp6_outputopts;
|
|
/* IP multicast options */
|
|
struct ip6_moptions *inp6_moptions;
|
|
/* ICMPv6 code type filter */
|
|
struct icmp6_filter *inp6_icmp6filt;
|
|
/* IPV6_CHECKSUM setsockopt */
|
|
int inp6_cksum;
|
|
u_short inp6_ifindex;
|
|
short inp6_hops;
|
|
u_int8_t inp6_hlim;
|
|
} inp_depend6;
|
|
LIST_ENTRY(inpcb) inp_portlist;
|
|
struct inpcbport *inp_phd; /* head of this list */
|
|
inp_gen_t inp_gencnt; /* generation count of this instance */
|
|
#define in6p_faddr inp_inc.inc6_faddr
|
|
#define in6p_laddr inp_inc.inc6_laddr
|
|
#define in6p_route inp_inc.inc6_route
|
|
#define in6p_ip6_hlim inp_depend6.inp6_hlim
|
|
#define in6p_hops inp_depend6.inp6_hops /* default hop limit */
|
|
#define in6p_ip6_nxt inp_ip_p
|
|
#define in6p_flowinfo inp_flow
|
|
#define in6p_vflag inp_vflag
|
|
#define in6p_options inp_depend6.inp6_options
|
|
#define in6p_outputopts inp_depend6.inp6_outputopts
|
|
#define in6p_moptions inp_depend6.inp6_moptions
|
|
#define in6p_icmp6filt inp_depend6.inp6_icmp6filt
|
|
#define in6p_cksum inp_depend6.inp6_cksum
|
|
#define inp6_ifindex inp_depend6.inp6_ifindex
|
|
#define in6p_flags inp_flags /* for KAME src sync over BSD*'s */
|
|
#define in6p_socket inp_socket /* for KAME src sync over BSD*'s */
|
|
#define in6p_lport inp_lport /* for KAME src sync over BSD*'s */
|
|
#define in6p_fport inp_fport /* for KAME src sync over BSD*'s */
|
|
#define in6p_ppcb inp_ppcb /* for KAME src sync over BSD*'s */
|
|
};
|
|
/*
|
|
* The range of the generation count, as used in this implementation,
|
|
* is 9e19. We would have to create 300 billion connections per
|
|
* second for this number to roll over in a year. This seems sufficiently
|
|
* unlikely that we simply don't concern ourselves with that possibility.
|
|
*/
|
|
|
|
/*
|
|
* Interface exported to userland by various protocols which use
|
|
* inpcbs. Hack alert -- only define if struct xsocket is in scope.
|
|
*/
|
|
#ifdef _SYS_SOCKETVAR_H_
|
|
struct xinpcb {
|
|
size_t xi_len; /* length of this structure */
|
|
struct inpcb xi_inp;
|
|
struct xsocket xi_socket;
|
|
u_quad_t xi_alignment_hack;
|
|
};
|
|
|
|
struct xinpgen {
|
|
size_t xig_len; /* length of this structure */
|
|
u_int xig_count; /* number of PCBs at this time */
|
|
inp_gen_t xig_gen; /* generation count at this time */
|
|
so_gen_t xig_sogen; /* socket generation count at this time */
|
|
};
|
|
#endif /* _SYS_SOCKETVAR_H_ */
|
|
|
|
struct inpcbport {
|
|
LIST_ENTRY(inpcbport) phd_hash;
|
|
struct inpcbhead phd_pcblist;
|
|
u_short phd_port;
|
|
};
|
|
|
|
struct inpcbinfo { /* XXX documentation, prefixes */
|
|
struct inpcbhead *hashbase;
|
|
u_long hashmask;
|
|
struct inpcbporthead *porthashbase;
|
|
u_long porthashmask;
|
|
struct inpcbhead *listhead;
|
|
u_short lastport;
|
|
u_short lastlow;
|
|
u_short lasthi;
|
|
struct vm_zone *ipi_zone; /* zone to allocate pcbs from */
|
|
u_int ipi_count; /* number of pcbs in this list */
|
|
u_quad_t ipi_gencnt; /* current generation count */
|
|
};
|
|
|
|
#define INP_PCBHASH(faddr, lport, fport, mask) \
|
|
(((faddr) ^ ((faddr) >> 16) ^ ntohs((lport) ^ (fport))) & (mask))
|
|
#define INP_PCBPORTHASH(lport, mask) \
|
|
(ntohs((lport)) & (mask))
|
|
|
|
/* flags in inp_flags: */
|
|
#define INP_RECVOPTS 0x01 /* receive incoming IP options */
|
|
#define INP_RECVRETOPTS 0x02 /* receive IP options for reply */
|
|
#define INP_RECVDSTADDR 0x04 /* receive IP dst address */
|
|
#define INP_HDRINCL 0x08 /* user supplies entire IP header */
|
|
#define INP_HIGHPORT 0x10 /* user wants "high" port binding */
|
|
#define INP_LOWPORT 0x20 /* user wants "low" port binding */
|
|
#define INP_ANONPORT 0x40 /* port chosen for user */
|
|
#define INP_RECVIF 0x80 /* receive incoming interface */
|
|
#define INP_MTUDISC 0x100 /* user can do MTU discovery */
|
|
#define INP_FAITH 0x200 /* accept FAITH'ed connections */
|
|
|
|
#define IN6P_IPV6_V6ONLY 0x008000 /* restrict AF_INET6 socket for v6 */
|
|
|
|
#define IN6P_PKTINFO 0x010000 /* receive IP6 dst and I/F */
|
|
#define IN6P_HOPLIMIT 0x020000 /* receive hoplimit */
|
|
#define IN6P_HOPOPTS 0x040000 /* receive hop-by-hop options */
|
|
#define IN6P_DSTOPTS 0x080000 /* receive dst options after rthdr */
|
|
#define IN6P_RTHDR 0x100000 /* receive routing header */
|
|
#define IN6P_RTHDRDSTOPTS 0x200000 /* receive dstoptions before rthdr */
|
|
#define IN6P_AUTOFLOWLABEL 0x800000 /* attach flowlabel automatically */
|
|
#define IN6P_BINDV6ONLY 0x10000000 /* do not grab IPv4 traffic */
|
|
|
|
#define INP_CONTROLOPTS (INP_RECVOPTS|INP_RECVRETOPTS|INP_RECVDSTADDR|\
|
|
INP_RECVIF|\
|
|
IN6P_PKTINFO|IN6P_HOPLIMIT|IN6P_HOPOPTS|\
|
|
IN6P_DSTOPTS|IN6P_RTHDR|IN6P_RTHDRDSTOPTS|\
|
|
IN6P_AUTOFLOWLABEL)
|
|
#define INP_UNMAPPABLEOPTS (IN6P_HOPOPTS|IN6P_DSTOPTS|IN6P_RTHDR|\
|
|
IN6P_AUTOFLOWLABEL)
|
|
|
|
/* for KAME src sync over BSD*'s */
|
|
#define IN6P_HIGHPORT INP_HIGHPORT
|
|
#define IN6P_LOWPORT INP_LOWPORT
|
|
#define IN6P_ANONPORT INP_ANONPORT
|
|
#define IN6P_RECVIF INP_RECVIF
|
|
#define IN6P_MTUDISC INP_MTUDISC
|
|
#define IN6P_FAITH INP_FAITH
|
|
#define IN6P_CONTROLOPTS INP_CONTROLOPTS
|
|
/*
|
|
* socket AF version is {newer than,or include}
|
|
* actual datagram AF version
|
|
*/
|
|
|
|
#define INPLOOKUP_WILDCARD 1
|
|
#define sotoinpcb(so) ((struct inpcb *)(so)->so_pcb)
|
|
#define sotoin6pcb(so) sotoinpcb(so) /* for KAME src sync over BSD*'s */
|
|
|
|
#define INP_SOCKAF(so) so->so_proto->pr_domain->dom_family
|
|
|
|
#define INP_CHECK_SOCKAF(so, af) (INP_SOCKAF(so) == af)
|
|
|
|
#ifdef _KERNEL
|
|
extern int ipport_lowfirstauto;
|
|
extern int ipport_lowlastauto;
|
|
extern int ipport_firstauto;
|
|
extern int ipport_lastauto;
|
|
extern int ipport_hifirstauto;
|
|
extern int ipport_hilastauto;
|
|
|
|
void in_pcbpurgeif0 __P((struct inpcb *, struct ifnet *));
|
|
void in_losing __P((struct inpcb *));
|
|
void in_rtchange __P((struct inpcb *, int));
|
|
int in_pcballoc __P((struct socket *, struct inpcbinfo *, struct thread *));
|
|
int in_pcbbind __P((struct inpcb *, struct sockaddr *, struct thread *));
|
|
int in_pcbconnect __P((struct inpcb *, struct sockaddr *, struct thread *));
|
|
void in_pcbdetach __P((struct inpcb *));
|
|
void in_pcbdisconnect __P((struct inpcb *));
|
|
int in_pcbinshash __P((struct inpcb *));
|
|
int in_pcbladdr __P((struct inpcb *, struct sockaddr *,
|
|
struct sockaddr_in **));
|
|
struct inpcb *
|
|
in_pcblookup_local __P((struct inpcbinfo *,
|
|
struct in_addr, u_int, int));
|
|
struct inpcb *
|
|
in_pcblookup_hash __P((struct inpcbinfo *,
|
|
struct in_addr, u_int, struct in_addr, u_int,
|
|
int, struct ifnet *));
|
|
void in_pcbnotifyall __P((struct inpcbhead *, struct in_addr,
|
|
int, void (*)(struct inpcb *, int)));
|
|
void in_pcbrehash __P((struct inpcb *));
|
|
int in_setpeeraddr __P((struct socket *so, struct sockaddr **nam));
|
|
int in_setsockaddr __P((struct socket *so, struct sockaddr **nam));
|
|
void in_pcbremlists __P((struct inpcb *inp));
|
|
int prison_xinpcb __P((struct proc *p, struct inpcb *inp));
|
|
#endif /* _KERNEL */
|
|
|
|
#endif /* !_NETINET_IN_PCB_H_ */
|