mirror of
https://git.FreeBSD.org/src.git
synced 2024-12-18 10:35:55 +00:00
4078ffb154
using it. Not checking this may have caused the wrong IP address to be used when processing certain IP options (see example below). This also caused the wrong route to be passed to ip_output() when forwarding, but fortunately ip_output() is smart enough to detect this. This example demonstrates the wrong behavior of the Record Route option observed with this bug. Host ``freebsd'' is acting as the gateway for the ``sysv''. 1. On the gateway, we add the route to the destination. The new route will use the primary address of the loopback interface, 127.0.0.1: : freebsd# route add 10.0.0.66 -iface lo0 -reject : add host 10.0.0.66: gateway lo0 2. From the client, we ping the destination. We see the correct replies. Please note that this also causes the relevant route on the ``freebsd'' gateway to be cached in ipforward_rt variable: : sysv# ping -snv 10.0.0.66 : PING 10.0.0.66: 56 data bytes : ICMP Host Unreachable from gateway 192.168.0.115 : ICMP Host Unreachable from gateway 192.168.0.115 : ICMP Host Unreachable from gateway 192.168.0.115 : : ----10.0.0.66 PING Statistics---- : 3 packets transmitted, 0 packets received, 100% packet loss 3. On the gateway, we delete the route to the destination, thus making the destination reachable through the `default' route: : freebsd# route delete 10.0.0.66 : delete host 10.0.0.66 4. From the client, we ping destination again, now with the RR option turned on. The surprise here is the 127.0.0.1 in the first reply. This is caused by the bug in ip_rtaddr() not checking the cached route is still up befor use. The debug code also shows that the wrong (down) route is further passed to ip_output(). The latter detects that the route is down, and replaces the bogus route with the valid one, so we see the correct replies (192.168.0.115) on further probes: : sysv# ping -snRv 10.0.0.66 : PING 10.0.0.66: 56 data bytes : 64 bytes from 10.0.0.66: icmp_seq=0. time=10. ms : IP options: <record route> 127.0.0.1, 10.0.0.65, 10.0.0.66, : 192.168.0.65, 192.168.0.115, 192.168.0.120, : 0.0.0.0(Current), 0.0.0.0, 0.0.0.0 : 64 bytes from 10.0.0.66: icmp_seq=1. time=0. ms : IP options: <record route> 192.168.0.115, 10.0.0.65, 10.0.0.66, : 192.168.0.65, 192.168.0.115, 192.168.0.120, : 0.0.0.0(Current), 0.0.0.0, 0.0.0.0 : 64 bytes from 10.0.0.66: icmp_seq=2. time=0. ms : IP options: <record route> 192.168.0.115, 10.0.0.65, 10.0.0.66, : 192.168.0.65, 192.168.0.115, 192.168.0.120, : 0.0.0.0(Current), 0.0.0.0, 0.0.0.0 : : ----10.0.0.66 PING Statistics---- : 3 packets transmitted, 3 packets received, 0% packet loss : round-trip (ms) min/avg/max = 0/3/10 |
||
|---|---|---|
| .. | ||
| libalias | ||
| accf_data.c | ||
| accf_http.c | ||
| fil.c | ||
| icmp6.h | ||
| icmp_var.h | ||
| if_atm.c | ||
| if_atm.h | ||
| if_ether.c | ||
| if_ether.h | ||
| if_fddi.h | ||
| igmp_var.h | ||
| igmp.c | ||
| igmp.h | ||
| in_cksum.c | ||
| in_gif.c | ||
| in_gif.h | ||
| in_hostcache.c | ||
| in_hostcache.h | ||
| in_pcb.c | ||
| in_pcb.h | ||
| in_proto.c | ||
| in_rmx.c | ||
| in_systm.h | ||
| in_var.h | ||
| in.c | ||
| in.h | ||
| ip6.h | ||
| ip_auth.c | ||
| ip_auth.h | ||
| ip_compat.h | ||
| ip_divert.c | ||
| ip_dummynet.c | ||
| ip_dummynet.h | ||
| ip_ecn.c | ||
| ip_ecn.h | ||
| ip_encap.c | ||
| ip_encap.h | ||
| ip_fil.c | ||
| ip_fil.h | ||
| ip_flow.c | ||
| ip_flow.h | ||
| ip_frag.c | ||
| ip_frag.h | ||
| ip_ftp_pxy.c | ||
| ip_fw.c | ||
| ip_fw.h | ||
| ip_icmp.c | ||
| ip_icmp.h | ||
| ip_input.c | ||
| ip_log.c | ||
| ip_mroute.c | ||
| ip_mroute.h | ||
| ip_nat.c | ||
| ip_nat.h | ||
| ip_output.c | ||
| ip_proxy.c | ||
| ip_proxy.h | ||
| ip_raudio_pxy.c | ||
| ip_rcmd_pxy.c | ||
| ip_state.c | ||
| ip_state.h | ||
| ip_var.h | ||
| ip.h | ||
| ipl.h | ||
| ipprotosw.h | ||
| mlfk_ipl.c | ||
| raw_ip.c | ||
| tcp_debug.c | ||
| tcp_debug.h | ||
| tcp_fsm.h | ||
| tcp_input.c | ||
| tcp_output.c | ||
| tcp_reass.c | ||
| tcp_seq.h | ||
| tcp_subr.c | ||
| tcp_timer.c | ||
| tcp_timer.h | ||
| tcp_timewait.c | ||
| tcp_usrreq.c | ||
| tcp_var.h | ||
| tcp.h | ||
| tcpip.h | ||
| udp_usrreq.c | ||
| udp_var.h | ||
| udp.h | ||