[ofw] IPv6 send_mgr_filter_ip() next IP protocol problem

Smith, Stan stan.smith at intel.com
Wed Nov 10 15:30:28 PST 2010


Hello,
 In the function send_mgr_filter_ip(), when determining the next encapsulated IP protocol, your code needs to detect and process IPPROTO_HOPOPTS to discover the real next IP protocol.

Such that if( p_ipv6_hdr->NextHeader == IPPROTO_HOPOPTS ), then you need to process IPV6_EXTENSION_HEADER(s) to determine the real next protocol via p_ext->NextHeader.
See http://en.wikipedia.org/wiki/IPv6_packet.
As the code stands now, in send_mgr_filter_ip(), the switch( prot ) fails as IPPROTO_HOPOPTS qualifies as an unsupported protocol.

I found processing the IPv6 extension header(s) when first setting 'prot' a convenient location.

stan.



More information about the ofw mailing list