Page MenuHomeFreeBSD

pf: remove the last hand-rolled IPv6 extension header loop
ClosedPublic

Authored by kp on Oct 4 2024, 12:44 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Sep 30, 7:55 AM
Unknown Object (File)
Sun, Sep 28, 7:11 AM
Unknown Object (File)
Aug 14 2025, 10:19 PM
Unknown Object (File)
Jul 5 2025, 11:51 PM
Unknown Object (File)
Jun 28 2025, 3:47 PM
Unknown Object (File)
Jun 27 2025, 1:19 AM
Unknown Object (File)
Jun 26 2025, 7:26 PM
Unknown Object (File)
Jun 26 2025, 4:00 AM

Details

Summary

Replace the IPv6 header walking loop in pf_test_state_icmp() with
the common function pf_walk_header6(). For that, pf_walk_header6()
can now extract both the information wether it is a fragment and
the final protocol if it is the first fragment. This allows to
match the icmp6 too big packet of a first fragment to the reassembled
packet's state. This is neccesary if a refragmented fragment is
to big for the Path-MTU.
Note that pd.proto contains the real protocol number for the first
fragment and IPPROTO_FRAGMENT for later fragments. pd.virtual_protocol
is set to PF_VPROTO_FRAGMENT for all fragments.
ok mcbride@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, 90b3c57e94
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable