[ofw] IPv6 send_mgr_filter_ip() next IP protocol problem
Smith, Stan
stan.smith at intel.com
Wed Nov 10 15:30:28 PST 2010
Hello,
In the function send_mgr_filter_ip(), when determining the next encapsulated IP protocol, your code needs to detect and process IPPROTO_HOPOPTS to discover the real next IP protocol.
Such that if( p_ipv6_hdr->NextHeader == IPPROTO_HOPOPTS ), then you need to process IPV6_EXTENSION_HEADER(s) to determine the real next protocol via p_ext->NextHeader.
See http://en.wikipedia.org/wiki/IPv6_packet.
As the code stands now, in send_mgr_filter_ip(), the switch( prot ) fails as IPPROTO_HOPOPTS qualifies as an unsupported protocol.
I found processing the IPv6 extension header(s) when first setting 'prot' a convenient location.
stan.
More information about the ofw
mailing list