3 * Linux INET6 implementation
6 * Pedro Roque <roque@di.fc.ul.pt>
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License
10 * as published by the Free Software Foundation; either version
11 * 2 of the License, or (at your option) any later version.
14 #include <linux/capability.h>
15 #include <linux/errno.h>
16 #include <linux/types.h>
17 #include <linux/kernel.h>
18 #include <linux/interrupt.h>
19 #include <linux/socket.h>
20 #include <linux/sockios.h>
21 #include <linux/in6.h>
22 #include <linux/ipv6.h>
23 #include <linux/route.h>
24 #include <linux/slab.h>
27 #include <net/ndisc.h>
28 #include <net/addrconf.h>
29 #include <net/transp_v6.h>
30 #include <net/ip6_route.h>
31 #include <net/tcp_states.h>
33 #include <linux/errqueue.h>
34 #include <asm/uaccess.h>
36 int ip6_datagram_connect(struct sock
*sk
, struct sockaddr
*uaddr
, int addr_len
)
38 struct sockaddr_in6
*usin
= (struct sockaddr_in6
*) uaddr
;
39 struct inet_sock
*inet
= inet_sk(sk
);
40 struct ipv6_pinfo
*np
= inet6_sk(sk
);
41 struct in6_addr
*daddr
, *final_p
, final
;
42 struct dst_entry
*dst
;
44 struct ip6_flowlabel
*flowlabel
= NULL
;
45 struct ipv6_txoptions
*opt
;
49 if (usin
->sin6_family
== AF_INET
) {
50 if (__ipv6_only_sock(sk
))
52 err
= ip4_datagram_connect(sk
, uaddr
, addr_len
);
56 if (addr_len
< SIN6_LEN_RFC2133
)
59 if (usin
->sin6_family
!= AF_INET6
)
62 memset(&fl
, 0, sizeof(fl
));
64 fl
.fl6_flowlabel
= usin
->sin6_flowinfo
&IPV6_FLOWINFO_MASK
;
65 if (fl
.fl6_flowlabel
&IPV6_FLOWLABEL_MASK
) {
66 flowlabel
= fl6_sock_lookup(sk
, fl
.fl6_flowlabel
);
67 if (flowlabel
== NULL
)
69 ipv6_addr_copy(&usin
->sin6_addr
, &flowlabel
->dst
);
73 addr_type
= ipv6_addr_type(&usin
->sin6_addr
);
75 if (addr_type
== IPV6_ADDR_ANY
) {
79 usin
->sin6_addr
.s6_addr
[15] = 0x01;
82 daddr
= &usin
->sin6_addr
;
84 if (addr_type
== IPV6_ADDR_MAPPED
) {
85 struct sockaddr_in sin
;
87 if (__ipv6_only_sock(sk
)) {
91 sin
.sin_family
= AF_INET
;
92 sin
.sin_addr
.s_addr
= daddr
->s6_addr32
[3];
93 sin
.sin_port
= usin
->sin6_port
;
95 err
= ip4_datagram_connect(sk
,
96 (struct sockaddr
*) &sin
,
103 ipv6_addr_set_v4mapped(inet
->inet_daddr
, &np
->daddr
);
105 if (ipv6_addr_any(&np
->saddr
))
106 ipv6_addr_set_v4mapped(inet
->inet_saddr
, &np
->saddr
);
108 if (ipv6_addr_any(&np
->rcv_saddr
)) {
109 ipv6_addr_set_v4mapped(inet
->inet_rcv_saddr
,
111 if (sk
->sk_prot
->rehash
)
112 sk
->sk_prot
->rehash(sk
);
118 if (addr_type
&IPV6_ADDR_LINKLOCAL
) {
119 if (addr_len
>= sizeof(struct sockaddr_in6
) &&
120 usin
->sin6_scope_id
) {
121 if (sk
->sk_bound_dev_if
&&
122 sk
->sk_bound_dev_if
!= usin
->sin6_scope_id
) {
126 sk
->sk_bound_dev_if
= usin
->sin6_scope_id
;
129 if (!sk
->sk_bound_dev_if
&& (addr_type
& IPV6_ADDR_MULTICAST
))
130 sk
->sk_bound_dev_if
= np
->mcast_oif
;
132 /* Connect to link-local address requires an interface */
133 if (!sk
->sk_bound_dev_if
) {
139 ipv6_addr_copy(&np
->daddr
, daddr
);
140 np
->flow_label
= fl
.fl6_flowlabel
;
142 inet
->inet_dport
= usin
->sin6_port
;
145 * Check for a route to destination an obtain the
146 * destination cache for it.
149 fl
.proto
= sk
->sk_protocol
;
150 ipv6_addr_copy(&fl
.fl6_dst
, &np
->daddr
);
151 ipv6_addr_copy(&fl
.fl6_src
, &np
->saddr
);
152 fl
.oif
= sk
->sk_bound_dev_if
;
153 fl
.mark
= sk
->sk_mark
;
154 fl
.fl_ip_dport
= inet
->inet_dport
;
155 fl
.fl_ip_sport
= inet
->inet_sport
;
157 if (!fl
.oif
&& (addr_type
&IPV6_ADDR_MULTICAST
))
158 fl
.oif
= np
->mcast_oif
;
160 security_sk_classify_flow(sk
, &fl
);
162 opt
= flowlabel
? flowlabel
->opt
: np
->opt
;
163 final_p
= fl6_update_dst(&fl
, opt
, &final
);
165 err
= ip6_dst_lookup(sk
, &dst
, &fl
);
169 ipv6_addr_copy(&fl
.fl6_dst
, final_p
);
171 err
= __xfrm_lookup(sock_net(sk
), &dst
, &fl
, sk
, XFRM_LOOKUP_WAIT
);
174 err
= ip6_dst_blackhole(sk
, &dst
, &fl
);
179 /* source address lookup done in ip6_dst_lookup */
181 if (ipv6_addr_any(&np
->saddr
))
182 ipv6_addr_copy(&np
->saddr
, &fl
.fl6_src
);
184 if (ipv6_addr_any(&np
->rcv_saddr
)) {
185 ipv6_addr_copy(&np
->rcv_saddr
, &fl
.fl6_src
);
186 inet
->inet_rcv_saddr
= LOOPBACK4_IPV6
;
187 if (sk
->sk_prot
->rehash
)
188 sk
->sk_prot
->rehash(sk
);
191 ip6_dst_store(sk
, dst
,
192 ipv6_addr_equal(&fl
.fl6_dst
, &np
->daddr
) ?
194 #ifdef CONFIG_IPV6_SUBTREES
195 ipv6_addr_equal(&fl
.fl6_src
, &np
->saddr
) ?
200 sk
->sk_state
= TCP_ESTABLISHED
;
202 fl6_sock_release(flowlabel
);
206 void ipv6_icmp_error(struct sock
*sk
, struct sk_buff
*skb
, int err
,
207 __be16 port
, u32 info
, u8
*payload
)
209 struct ipv6_pinfo
*np
= inet6_sk(sk
);
210 struct icmp6hdr
*icmph
= icmp6_hdr(skb
);
211 struct sock_exterr_skb
*serr
;
216 skb
= skb_clone(skb
, GFP_ATOMIC
);
220 skb
->protocol
= htons(ETH_P_IPV6
);
222 serr
= SKB_EXT_ERR(skb
);
223 serr
->ee
.ee_errno
= err
;
224 serr
->ee
.ee_origin
= SO_EE_ORIGIN_ICMP6
;
225 serr
->ee
.ee_type
= icmph
->icmp6_type
;
226 serr
->ee
.ee_code
= icmph
->icmp6_code
;
228 serr
->ee
.ee_info
= info
;
229 serr
->ee
.ee_data
= 0;
230 serr
->addr_offset
= (u8
*)&(((struct ipv6hdr
*)(icmph
+ 1))->daddr
) -
231 skb_network_header(skb
);
234 __skb_pull(skb
, payload
- skb
->data
);
235 skb_reset_transport_header(skb
);
237 if (sock_queue_err_skb(sk
, skb
))
241 void ipv6_local_error(struct sock
*sk
, int err
, struct flowi
*fl
, u32 info
)
243 struct ipv6_pinfo
*np
= inet6_sk(sk
);
244 struct sock_exterr_skb
*serr
;
251 skb
= alloc_skb(sizeof(struct ipv6hdr
), GFP_ATOMIC
);
255 skb
->protocol
= htons(ETH_P_IPV6
);
257 skb_put(skb
, sizeof(struct ipv6hdr
));
258 skb_reset_network_header(skb
);
260 ipv6_addr_copy(&iph
->daddr
, &fl
->fl6_dst
);
262 serr
= SKB_EXT_ERR(skb
);
263 serr
->ee
.ee_errno
= err
;
264 serr
->ee
.ee_origin
= SO_EE_ORIGIN_LOCAL
;
265 serr
->ee
.ee_type
= 0;
266 serr
->ee
.ee_code
= 0;
268 serr
->ee
.ee_info
= info
;
269 serr
->ee
.ee_data
= 0;
270 serr
->addr_offset
= (u8
*)&iph
->daddr
- skb_network_header(skb
);
271 serr
->port
= fl
->fl_ip_dport
;
273 __skb_pull(skb
, skb_tail_pointer(skb
) - skb
->data
);
274 skb_reset_transport_header(skb
);
276 if (sock_queue_err_skb(sk
, skb
))
280 void ipv6_local_rxpmtu(struct sock
*sk
, struct flowi
*fl
, u32 mtu
)
282 struct ipv6_pinfo
*np
= inet6_sk(sk
);
285 struct ip6_mtuinfo
*mtu_info
;
287 if (!np
->rxopt
.bits
.rxpmtu
)
290 skb
= alloc_skb(sizeof(struct ipv6hdr
), GFP_ATOMIC
);
294 skb_put(skb
, sizeof(struct ipv6hdr
));
295 skb_reset_network_header(skb
);
297 ipv6_addr_copy(&iph
->daddr
, &fl
->fl6_dst
);
299 mtu_info
= IP6CBMTU(skb
);
305 mtu_info
->ip6m_mtu
= mtu
;
306 mtu_info
->ip6m_addr
.sin6_family
= AF_INET6
;
307 mtu_info
->ip6m_addr
.sin6_port
= 0;
308 mtu_info
->ip6m_addr
.sin6_flowinfo
= 0;
309 mtu_info
->ip6m_addr
.sin6_scope_id
= fl
->oif
;
310 ipv6_addr_copy(&mtu_info
->ip6m_addr
.sin6_addr
, &ipv6_hdr(skb
)->daddr
);
312 __skb_pull(skb
, skb_tail_pointer(skb
) - skb
->data
);
313 skb_reset_transport_header(skb
);
315 skb
= xchg(&np
->rxpmtu
, skb
);
320 * Handle MSG_ERRQUEUE
322 int ipv6_recv_error(struct sock
*sk
, struct msghdr
*msg
, int len
)
324 struct ipv6_pinfo
*np
= inet6_sk(sk
);
325 struct sock_exterr_skb
*serr
;
326 struct sk_buff
*skb
, *skb2
;
327 struct sockaddr_in6
*sin
;
329 struct sock_extended_err ee
;
330 struct sockaddr_in6 offender
;
336 skb
= skb_dequeue(&sk
->sk_error_queue
);
342 msg
->msg_flags
|= MSG_TRUNC
;
345 err
= skb_copy_datagram_iovec(skb
, 0, msg
->msg_iov
, copied
);
349 sock_recv_timestamp(msg
, sk
, skb
);
351 serr
= SKB_EXT_ERR(skb
);
353 sin
= (struct sockaddr_in6
*)msg
->msg_name
;
355 const unsigned char *nh
= skb_network_header(skb
);
356 sin
->sin6_family
= AF_INET6
;
357 sin
->sin6_flowinfo
= 0;
358 sin
->sin6_port
= serr
->port
;
359 sin
->sin6_scope_id
= 0;
360 if (skb
->protocol
== htons(ETH_P_IPV6
)) {
361 ipv6_addr_copy(&sin
->sin6_addr
,
362 (struct in6_addr
*)(nh
+ serr
->addr_offset
));
365 (*(__be32
*)(nh
+ serr
->addr_offset
- 24) &
367 if (ipv6_addr_type(&sin
->sin6_addr
) & IPV6_ADDR_LINKLOCAL
)
368 sin
->sin6_scope_id
= IP6CB(skb
)->iif
;
370 ipv6_addr_set_v4mapped(*(__be32
*)(nh
+ serr
->addr_offset
),
375 memcpy(&errhdr
.ee
, &serr
->ee
, sizeof(struct sock_extended_err
));
376 sin
= &errhdr
.offender
;
377 sin
->sin6_family
= AF_UNSPEC
;
378 if (serr
->ee
.ee_origin
!= SO_EE_ORIGIN_LOCAL
) {
379 sin
->sin6_family
= AF_INET6
;
380 sin
->sin6_flowinfo
= 0;
381 sin
->sin6_scope_id
= 0;
382 if (skb
->protocol
== htons(ETH_P_IPV6
)) {
383 ipv6_addr_copy(&sin
->sin6_addr
, &ipv6_hdr(skb
)->saddr
);
385 datagram_recv_ctl(sk
, msg
, skb
);
386 if (ipv6_addr_type(&sin
->sin6_addr
) & IPV6_ADDR_LINKLOCAL
)
387 sin
->sin6_scope_id
= IP6CB(skb
)->iif
;
389 struct inet_sock
*inet
= inet_sk(sk
);
391 ipv6_addr_set_v4mapped(ip_hdr(skb
)->saddr
,
393 if (inet
->cmsg_flags
)
394 ip_cmsg_recv(msg
, skb
);
398 put_cmsg(msg
, SOL_IPV6
, IPV6_RECVERR
, sizeof(errhdr
), &errhdr
);
400 /* Now we could try to dump offended packet options */
402 msg
->msg_flags
|= MSG_ERRQUEUE
;
405 /* Reset and regenerate socket error */
406 spin_lock_bh(&sk
->sk_error_queue
.lock
);
408 if ((skb2
= skb_peek(&sk
->sk_error_queue
)) != NULL
) {
409 sk
->sk_err
= SKB_EXT_ERR(skb2
)->ee
.ee_errno
;
410 spin_unlock_bh(&sk
->sk_error_queue
.lock
);
411 sk
->sk_error_report(sk
);
413 spin_unlock_bh(&sk
->sk_error_queue
.lock
);
423 * Handle IPV6_RECVPATHMTU
425 int ipv6_recv_rxpmtu(struct sock
*sk
, struct msghdr
*msg
, int len
)
427 struct ipv6_pinfo
*np
= inet6_sk(sk
);
429 struct sockaddr_in6
*sin
;
430 struct ip6_mtuinfo mtu_info
;
435 skb
= xchg(&np
->rxpmtu
, NULL
);
441 msg
->msg_flags
|= MSG_TRUNC
;
444 err
= skb_copy_datagram_iovec(skb
, 0, msg
->msg_iov
, copied
);
448 sock_recv_timestamp(msg
, sk
, skb
);
450 memcpy(&mtu_info
, IP6CBMTU(skb
), sizeof(mtu_info
));
452 sin
= (struct sockaddr_in6
*)msg
->msg_name
;
454 sin
->sin6_family
= AF_INET6
;
455 sin
->sin6_flowinfo
= 0;
457 sin
->sin6_scope_id
= mtu_info
.ip6m_addr
.sin6_scope_id
;
458 ipv6_addr_copy(&sin
->sin6_addr
, &mtu_info
.ip6m_addr
.sin6_addr
);
461 put_cmsg(msg
, SOL_IPV6
, IPV6_PATHMTU
, sizeof(mtu_info
), &mtu_info
);
472 int datagram_recv_ctl(struct sock
*sk
, struct msghdr
*msg
, struct sk_buff
*skb
)
474 struct ipv6_pinfo
*np
= inet6_sk(sk
);
475 struct inet6_skb_parm
*opt
= IP6CB(skb
);
476 unsigned char *nh
= skb_network_header(skb
);
478 if (np
->rxopt
.bits
.rxinfo
) {
479 struct in6_pktinfo src_info
;
481 src_info
.ipi6_ifindex
= opt
->iif
;
482 ipv6_addr_copy(&src_info
.ipi6_addr
, &ipv6_hdr(skb
)->daddr
);
483 put_cmsg(msg
, SOL_IPV6
, IPV6_PKTINFO
, sizeof(src_info
), &src_info
);
486 if (np
->rxopt
.bits
.rxhlim
) {
487 int hlim
= ipv6_hdr(skb
)->hop_limit
;
488 put_cmsg(msg
, SOL_IPV6
, IPV6_HOPLIMIT
, sizeof(hlim
), &hlim
);
491 if (np
->rxopt
.bits
.rxtclass
) {
492 int tclass
= (ntohl(*(__be32
*)ipv6_hdr(skb
)) >> 20) & 0xff;
493 put_cmsg(msg
, SOL_IPV6
, IPV6_TCLASS
, sizeof(tclass
), &tclass
);
496 if (np
->rxopt
.bits
.rxflow
&& (*(__be32
*)nh
& IPV6_FLOWINFO_MASK
)) {
497 __be32 flowinfo
= *(__be32
*)nh
& IPV6_FLOWINFO_MASK
;
498 put_cmsg(msg
, SOL_IPV6
, IPV6_FLOWINFO
, sizeof(flowinfo
), &flowinfo
);
501 /* HbH is allowed only once */
502 if (np
->rxopt
.bits
.hopopts
&& opt
->hop
) {
503 u8
*ptr
= nh
+ opt
->hop
;
504 put_cmsg(msg
, SOL_IPV6
, IPV6_HOPOPTS
, (ptr
[1]+1)<<3, ptr
);
508 (np
->rxopt
.bits
.dstopts
|| np
->rxopt
.bits
.srcrt
)) {
510 * Silly enough, but we need to reparse in order to
511 * report extension headers (except for HbH)
514 * Also note that IPV6_RECVRTHDRDSTOPTS is NOT
515 * (and WILL NOT be) defined because
516 * IPV6_RECVDSTOPTS is more generic. --yoshfuji
518 unsigned int off
= sizeof(struct ipv6hdr
);
519 u8 nexthdr
= ipv6_hdr(skb
)->nexthdr
;
521 while (off
<= opt
->lastopt
) {
526 case IPPROTO_DSTOPTS
:
528 len
= (ptr
[1] + 1) << 3;
529 if (np
->rxopt
.bits
.dstopts
)
530 put_cmsg(msg
, SOL_IPV6
, IPV6_DSTOPTS
, len
, ptr
);
532 case IPPROTO_ROUTING
:
534 len
= (ptr
[1] + 1) << 3;
535 if (np
->rxopt
.bits
.srcrt
)
536 put_cmsg(msg
, SOL_IPV6
, IPV6_RTHDR
, len
, ptr
);
540 len
= (ptr
[1] + 2) << 2;
544 len
= (ptr
[1] + 1) << 3;
552 /* socket options in old style */
553 if (np
->rxopt
.bits
.rxoinfo
) {
554 struct in6_pktinfo src_info
;
556 src_info
.ipi6_ifindex
= opt
->iif
;
557 ipv6_addr_copy(&src_info
.ipi6_addr
, &ipv6_hdr(skb
)->daddr
);
558 put_cmsg(msg
, SOL_IPV6
, IPV6_2292PKTINFO
, sizeof(src_info
), &src_info
);
560 if (np
->rxopt
.bits
.rxohlim
) {
561 int hlim
= ipv6_hdr(skb
)->hop_limit
;
562 put_cmsg(msg
, SOL_IPV6
, IPV6_2292HOPLIMIT
, sizeof(hlim
), &hlim
);
564 if (np
->rxopt
.bits
.ohopopts
&& opt
->hop
) {
565 u8
*ptr
= nh
+ opt
->hop
;
566 put_cmsg(msg
, SOL_IPV6
, IPV6_2292HOPOPTS
, (ptr
[1]+1)<<3, ptr
);
568 if (np
->rxopt
.bits
.odstopts
&& opt
->dst0
) {
569 u8
*ptr
= nh
+ opt
->dst0
;
570 put_cmsg(msg
, SOL_IPV6
, IPV6_2292DSTOPTS
, (ptr
[1]+1)<<3, ptr
);
572 if (np
->rxopt
.bits
.osrcrt
&& opt
->srcrt
) {
573 struct ipv6_rt_hdr
*rthdr
= (struct ipv6_rt_hdr
*)(nh
+ opt
->srcrt
);
574 put_cmsg(msg
, SOL_IPV6
, IPV6_2292RTHDR
, (rthdr
->hdrlen
+1) << 3, rthdr
);
576 if (np
->rxopt
.bits
.odstopts
&& opt
->dst1
) {
577 u8
*ptr
= nh
+ opt
->dst1
;
578 put_cmsg(msg
, SOL_IPV6
, IPV6_2292DSTOPTS
, (ptr
[1]+1)<<3, ptr
);
583 int datagram_send_ctl(struct net
*net
,
584 struct msghdr
*msg
, struct flowi
*fl
,
585 struct ipv6_txoptions
*opt
,
586 int *hlimit
, int *tclass
, int *dontfrag
)
588 struct in6_pktinfo
*src_info
;
589 struct cmsghdr
*cmsg
;
590 struct ipv6_rt_hdr
*rthdr
;
591 struct ipv6_opt_hdr
*hdr
;
595 for (cmsg
= CMSG_FIRSTHDR(msg
); cmsg
; cmsg
= CMSG_NXTHDR(msg
, cmsg
)) {
598 if (!CMSG_OK(msg
, cmsg
)) {
603 if (cmsg
->cmsg_level
!= SOL_IPV6
)
606 switch (cmsg
->cmsg_type
) {
608 case IPV6_2292PKTINFO
:
610 struct net_device
*dev
= NULL
;
612 if (cmsg
->cmsg_len
< CMSG_LEN(sizeof(struct in6_pktinfo
))) {
617 src_info
= (struct in6_pktinfo
*)CMSG_DATA(cmsg
);
619 if (src_info
->ipi6_ifindex
) {
620 if (fl
->oif
&& src_info
->ipi6_ifindex
!= fl
->oif
)
622 fl
->oif
= src_info
->ipi6_ifindex
;
625 addr_type
= __ipv6_addr_type(&src_info
->ipi6_addr
);
629 dev
= dev_get_by_index_rcu(net
, fl
->oif
);
634 } else if (addr_type
& IPV6_ADDR_LINKLOCAL
) {
639 if (addr_type
!= IPV6_ADDR_ANY
) {
640 int strict
= __ipv6_addr_src_scope(addr_type
) <= IPV6_ADDR_SCOPE_LINKLOCAL
;
641 if (!ipv6_chk_addr(net
, &src_info
->ipi6_addr
,
642 strict
? dev
: NULL
, 0))
645 ipv6_addr_copy(&fl
->fl6_src
, &src_info
->ipi6_addr
);
657 if (cmsg
->cmsg_len
< CMSG_LEN(4)) {
662 if (fl
->fl6_flowlabel
&IPV6_FLOWINFO_MASK
) {
663 if ((fl
->fl6_flowlabel
^*(__be32
*)CMSG_DATA(cmsg
))&~IPV6_FLOWINFO_MASK
) {
668 fl
->fl6_flowlabel
= IPV6_FLOWINFO_MASK
& *(__be32
*)CMSG_DATA(cmsg
);
671 case IPV6_2292HOPOPTS
:
673 if (opt
->hopopt
|| cmsg
->cmsg_len
< CMSG_LEN(sizeof(struct ipv6_opt_hdr
))) {
678 hdr
= (struct ipv6_opt_hdr
*)CMSG_DATA(cmsg
);
679 len
= ((hdr
->hdrlen
+ 1) << 3);
680 if (cmsg
->cmsg_len
< CMSG_LEN(len
)) {
684 if (!capable(CAP_NET_RAW
)) {
688 opt
->opt_nflen
+= len
;
692 case IPV6_2292DSTOPTS
:
693 if (cmsg
->cmsg_len
< CMSG_LEN(sizeof(struct ipv6_opt_hdr
))) {
698 hdr
= (struct ipv6_opt_hdr
*)CMSG_DATA(cmsg
);
699 len
= ((hdr
->hdrlen
+ 1) << 3);
700 if (cmsg
->cmsg_len
< CMSG_LEN(len
)) {
704 if (!capable(CAP_NET_RAW
)) {
712 opt
->opt_flen
+= len
;
717 case IPV6_RTHDRDSTOPTS
:
718 if (cmsg
->cmsg_len
< CMSG_LEN(sizeof(struct ipv6_opt_hdr
))) {
723 hdr
= (struct ipv6_opt_hdr
*)CMSG_DATA(cmsg
);
724 len
= ((hdr
->hdrlen
+ 1) << 3);
725 if (cmsg
->cmsg_len
< CMSG_LEN(len
)) {
729 if (!capable(CAP_NET_RAW
)) {
733 if (cmsg
->cmsg_type
== IPV6_DSTOPTS
) {
734 opt
->opt_flen
+= len
;
737 opt
->opt_nflen
+= len
;
744 if (cmsg
->cmsg_len
< CMSG_LEN(sizeof(struct ipv6_rt_hdr
))) {
749 rthdr
= (struct ipv6_rt_hdr
*)CMSG_DATA(cmsg
);
751 switch (rthdr
->type
) {
752 #if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
753 case IPV6_SRCRT_TYPE_2
:
754 if (rthdr
->hdrlen
!= 2 ||
755 rthdr
->segments_left
!= 1) {
766 len
= ((rthdr
->hdrlen
+ 1) << 3);
768 if (cmsg
->cmsg_len
< CMSG_LEN(len
)) {
773 /* segments left must also match */
774 if ((rthdr
->hdrlen
>> 1) != rthdr
->segments_left
) {
779 opt
->opt_nflen
+= len
;
782 if (cmsg
->cmsg_type
== IPV6_2292RTHDR
&& opt
->dst1opt
) {
783 int dsthdrlen
= ((opt
->dst1opt
->hdrlen
+1)<<3);
785 opt
->opt_nflen
+= dsthdrlen
;
786 opt
->dst0opt
= opt
->dst1opt
;
788 opt
->opt_flen
-= dsthdrlen
;
793 case IPV6_2292HOPLIMIT
:
795 if (cmsg
->cmsg_len
!= CMSG_LEN(sizeof(int))) {
800 *hlimit
= *(int *)CMSG_DATA(cmsg
);
801 if (*hlimit
< -1 || *hlimit
> 0xff) {
813 if (cmsg
->cmsg_len
!= CMSG_LEN(sizeof(int))) {
817 tc
= *(int *)CMSG_DATA(cmsg
);
818 if (tc
< -1 || tc
> 0xff)
832 if (cmsg
->cmsg_len
!= CMSG_LEN(sizeof(int))) {
836 df
= *(int *)CMSG_DATA(cmsg
);
837 if (df
< 0 || df
> 1)
846 LIMIT_NETDEBUG(KERN_DEBUG
"invalid cmsg type: %d\n",