]> git.proxmox.com Git - mirror_frr.git/blame - ospf6d/ospf6_message.c
projects / mirror_frr.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
ospf6d: Make ospf6_lsa_lock follow normal FRR pattern
[mirror_frr.git] / ospf6d / ospf6_message.c
CommitLineData
718e3744 1/*
508e53e2 2 * Copyright (C) 2003 Yasuhiro Ohara
718e3744 3 *
4 * This file is part of GNU Zebra.
5 *
6 * GNU Zebra is free software; you can redistribute it and/or modify it
7 * under the terms of the GNU General Public License as published by the
8 * Free Software Foundation; either version 2, or (at your option) any
9 * later version.
10 *
11 * GNU Zebra is distributed in the hope that it will be useful, but
12 * WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * General Public License for more details.
15 *
896014f4
DL		 16 * You should have received a copy of the GNU General Public License along
17 * with this program; see the file COPYING; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
718e3744 19 */
20
508e53e2 21#include <zebra.h>
22
3b4cd3a9 23#include "memory.h"
508e53e2 24#include "log.h"
25#include "vty.h"
26#include "command.h"
27#include "thread.h"
28#include "linklist.h"
4ba03be5 29#include "lib_errors.h"
508e53e2 30
508e53e2 31#include "ospf6_proto.h"
32#include "ospf6_lsa.h"
33#include "ospf6_lsdb.h"
c527acf1 34#include "ospf6_top.h"
508e53e2 35#include "ospf6_network.h"
36#include "ospf6_message.h"
718e3744 37
508e53e2 38#include "ospf6_area.h"
39#include "ospf6_neighbor.h"
40#include "ospf6_interface.h"
718e3744 41
abc7ef44
DO		 42/* for structures and macros ospf6_lsa_examin() needs */
43#include "ospf6_abr.h"
44#include "ospf6_asbr.h"
45#include "ospf6_intra.h"
46
508e53e2 47#include "ospf6_flood.h"
049207c3 48#include "ospf6d.h"
718e3744 49
681b84e8
DT		 50#include <netinet/ip6.h>
51
508e53e2 52unsigned char conf_debug_ospf6_message[6] = {0x03, 0, 0, 0, 0, 0};
d62a17ae 53static const struct message ospf6_message_type_str[] = {
54 {OSPF6_MESSAGE_TYPE_HELLO, "Hello"},
55 {OSPF6_MESSAGE_TYPE_DBDESC, "DbDesc"},
56 {OSPF6_MESSAGE_TYPE_LSREQ, "LSReq"},
57 {OSPF6_MESSAGE_TYPE_LSUPDATE, "LSUpdate"},
58 {OSPF6_MESSAGE_TYPE_LSACK, "LSAck"},
59 {0}};
718e3744 60
abc7ef44
DO		 61/* Minimum (besides the standard OSPF packet header) lengths for OSPF
62 packets of particular types, offset is the "type" field. */
d7c0a89a 63const uint16_t ospf6_packet_minlen[OSPF6_MESSAGE_TYPE_ALL] = {
d62a17ae 64 0,
65 OSPF6_HELLO_MIN_SIZE,
66 OSPF6_DB_DESC_MIN_SIZE,
67 OSPF6_LS_REQ_MIN_SIZE,
68 OSPF6_LS_UPD_MIN_SIZE,
69 OSPF6_LS_ACK_MIN_SIZE};
abc7ef44
DO		 70
71/* Minimum (besides the standard LSA header) lengths for LSAs of particular
72 types, offset is the "LSA function code" portion of "LSA type" field. */
d7c0a89a 73const uint16_t ospf6_lsa_minlen[OSPF6_LSTYPE_SIZE] = {
d62a17ae 74 0,
75 /* 0x2001 */ OSPF6_ROUTER_LSA_MIN_SIZE,
76 /* 0x2002 */ OSPF6_NETWORK_LSA_MIN_SIZE,
77 /* 0x2003 */ OSPF6_INTER_PREFIX_LSA_MIN_SIZE,
78 /* 0x2004 */ OSPF6_INTER_ROUTER_LSA_FIX_SIZE,
79 /* 0x4005 */ OSPF6_AS_EXTERNAL_LSA_MIN_SIZE,
80 /* 0x2006 */ 0,
81 /* 0x2007 */ OSPF6_AS_EXTERNAL_LSA_MIN_SIZE,
82 /* 0x0008 */ OSPF6_LINK_LSA_MIN_SIZE,
83 /* 0x2009 */ OSPF6_INTRA_PREFIX_LSA_MIN_SIZE};
abc7ef44 84
508e53e2 85/* print functions */
718e3744 86
d62a17ae 87static void ospf6_header_print(struct ospf6_header *oh)
718e3744 88{
d62a17ae 89 char router_id[16], area_id[16];
90 inet_ntop(AF_INET, &oh->router_id, router_id, sizeof(router_id));
91 inet_ntop(AF_INET, &oh->area_id, area_id, sizeof(area_id));
92
93 zlog_debug(" OSPFv%d Type:%d Len:%hu Router-ID:%s", oh->version,
94 oh->type, ntohs(oh->length), router_id);
95 zlog_debug(" Area-ID:%s Cksum:%hx Instance-ID:%d", area_id,
96 ntohs(oh->checksum), oh->instance_id);
718e3744 97}
98
d62a17ae 99void ospf6_hello_print(struct ospf6_header *oh)
718e3744 100{
d62a17ae 101 struct ospf6_hello *hello;
102 char options[16];
103 char drouter[16], bdrouter[16], neighbor[16];
104 char *p;
105
106 ospf6_header_print(oh);
107 assert(oh->type == OSPF6_MESSAGE_TYPE_HELLO);
108
109 hello = (struct ospf6_hello *)((caddr_t)oh
110 + sizeof(struct ospf6_header));
111
112 inet_ntop(AF_INET, &hello->drouter, drouter, sizeof(drouter));
113 inet_ntop(AF_INET, &hello->bdrouter, bdrouter, sizeof(bdrouter));
114 ospf6_options_printbuf(hello->options, options, sizeof(options));
115
116 zlog_debug(" I/F-Id:%ld Priority:%d Option:%s",
d7c0a89a 117 (unsigned long)ntohl(hello->interface_id), hello->priority,
d62a17ae 118 options);
119 zlog_debug(" HelloInterval:%hu DeadInterval:%hu",
120 ntohs(hello->hello_interval), ntohs(hello->dead_interval));
121 zlog_debug(" DR:%s BDR:%s", drouter, bdrouter);
122
123 for (p = (char *)((caddr_t)hello + sizeof(struct ospf6_hello));
d7c0a89a
QY		 124 p + sizeof(uint32_t) <= OSPF6_MESSAGE_END(oh);
125 p += sizeof(uint32_t)) {
d62a17ae 126 inet_ntop(AF_INET, (void *)p, neighbor, sizeof(neighbor));
127 zlog_debug(" Neighbor: %s", neighbor);
128 }
129
130 assert(p == OSPF6_MESSAGE_END(oh));
718e3744 131}
132
d62a17ae 133void ospf6_dbdesc_print(struct ospf6_header *oh)
718e3744 134{
d62a17ae 135 struct ospf6_dbdesc *dbdesc;
136 char options[16];
137 char *p;
508e53e2 138
d62a17ae 139 ospf6_header_print(oh);
140 assert(oh->type == OSPF6_MESSAGE_TYPE_DBDESC);
508e53e2 141
d62a17ae 142 dbdesc = (struct ospf6_dbdesc *)((caddr_t)oh
143 + sizeof(struct ospf6_header));
508e53e2 144
d62a17ae 145 ospf6_options_printbuf(dbdesc->options, options, sizeof(options));
508e53e2 146
d62a17ae 147 zlog_debug(" MBZ: %#x Option: %s IfMTU: %hu", dbdesc->reserved1,
148 options, ntohs(dbdesc->ifmtu));
149 zlog_debug(" MBZ: %#x Bits: %s%s%s SeqNum: %#lx", dbdesc->reserved2,
150 (CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_IBIT) ? "I" : "-"),
151 (CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_MBIT) ? "M" : "-"),
152 (CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_MSBIT) ? "m" : "s"),
d7c0a89a 153 (unsigned long)ntohl(dbdesc->seqnum));
508e53e2 154
d62a17ae 155 for (p = (char *)((caddr_t)dbdesc + sizeof(struct ospf6_dbdesc));
156 p + sizeof(struct ospf6_lsa_header) <= OSPF6_MESSAGE_END(oh);
157 p += sizeof(struct ospf6_lsa_header))
158 ospf6_lsa_header_print_raw((struct ospf6_lsa_header *)p);
508e53e2 159
d62a17ae 160 assert(p == OSPF6_MESSAGE_END(oh));
718e3744 161}
162
d62a17ae 163void ospf6_lsreq_print(struct ospf6_header *oh)
718e3744 164{
d62a17ae 165 char id[16], adv_router[16];
166 char *p;
167
168 ospf6_header_print(oh);
169 assert(oh->type == OSPF6_MESSAGE_TYPE_LSREQ);
170
171 for (p = (char *)((caddr_t)oh + sizeof(struct ospf6_header));
172 p + sizeof(struct ospf6_lsreq_entry) <= OSPF6_MESSAGE_END(oh);
173 p += sizeof(struct ospf6_lsreq_entry)) {
174 struct ospf6_lsreq_entry *e = (struct ospf6_lsreq_entry *)p;
175 inet_ntop(AF_INET, &e->adv_router, adv_router,
176 sizeof(adv_router));
177 inet_ntop(AF_INET, &e->id, id, sizeof(id));
178 zlog_debug(" [%s Id:%s Adv:%s]", ospf6_lstype_name(e->type),
179 id, adv_router);
180 }
181
182 assert(p == OSPF6_MESSAGE_END(oh));
718e3744 183}
184
d62a17ae 185void ospf6_lsupdate_print(struct ospf6_header *oh)
718e3744 186{
d62a17ae 187 struct ospf6_lsupdate *lsupdate;
d7c0a89a 188 unsigned long num;
d62a17ae 189 char *p;
718e3744 190
d62a17ae 191 ospf6_header_print(oh);
192 assert(oh->type == OSPF6_MESSAGE_TYPE_LSUPDATE);
718e3744 193
d62a17ae 194 lsupdate = (struct ospf6_lsupdate *)((caddr_t)oh
195 + sizeof(struct ospf6_header));
718e3744 196
d62a17ae 197 num = ntohl(lsupdate->lsa_number);
198 zlog_debug(" Number of LSA: %ld", num);
718e3744 199
d62a17ae 200 for (p = (char *)((caddr_t)lsupdate + sizeof(struct ospf6_lsupdate));
201 p < OSPF6_MESSAGE_END(oh)
202 && p + OSPF6_LSA_SIZE(p) <= OSPF6_MESSAGE_END(oh);
203 p += OSPF6_LSA_SIZE(p)) {
204 ospf6_lsa_header_print_raw((struct ospf6_lsa_header *)p);
205 }
718e3744 206
d62a17ae 207 assert(p == OSPF6_MESSAGE_END(oh));
718e3744 208}
209
d62a17ae 210void ospf6_lsack_print(struct ospf6_header *oh)
718e3744 211{
d62a17ae 212 char *p;
718e3744 213
d62a17ae 214 ospf6_header_print(oh);
215 assert(oh->type == OSPF6_MESSAGE_TYPE_LSACK);
718e3744 216
d62a17ae 217 for (p = (char *)((caddr_t)oh + sizeof(struct ospf6_header));
218 p + sizeof(struct ospf6_lsa_header) <= OSPF6_MESSAGE_END(oh);
219 p += sizeof(struct ospf6_lsa_header))
220 ospf6_lsa_header_print_raw((struct ospf6_lsa_header *)p);
508e53e2 221
d62a17ae 222 assert(p == OSPF6_MESSAGE_END(oh));
718e3744 223}
224
d62a17ae 225static void ospf6_hello_recv(struct in6_addr *src, struct in6_addr *dst,
226 struct ospf6_interface *oi,
227 struct ospf6_header *oh)
718e3744 228{
d62a17ae 229 struct ospf6_hello *hello;
230 struct ospf6_neighbor *on;
231 char *p;
232 int twoway = 0;
233 int neighborchange = 0;
234 int neighbor_ifindex_change = 0;
235 int backupseen = 0;
236
237 hello = (struct ospf6_hello *)((caddr_t)oh
238 + sizeof(struct ospf6_header));
239
240 /* HelloInterval check */
241 if (ntohs(hello->hello_interval) != oi->hello_interval) {
242 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
243 zlog_debug("HelloInterval mismatch");
244 return;
245 }
246
247 /* RouterDeadInterval check */
248 if (ntohs(hello->dead_interval) != oi->dead_interval) {
249 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
250 zlog_debug("RouterDeadInterval mismatch");
251 return;
252 }
253
254 /* E-bit check */
255 if (OSPF6_OPT_ISSET(hello->options, OSPF6_OPT_E)
256 != OSPF6_OPT_ISSET(oi->area->options, OSPF6_OPT_E)) {
257 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
258 zlog_debug("E-bit mismatch");
259 return;
260 }
261
262 /* Find neighbor, create if not exist */
263 on = ospf6_neighbor_lookup(oh->router_id, oi);
264 if (on == NULL) {
265 on = ospf6_neighbor_create(oh->router_id, oi);
266 on->prev_drouter = on->drouter = hello->drouter;
267 on->prev_bdrouter = on->bdrouter = hello->bdrouter;
268 on->priority = hello->priority;
269 }
270
271 /* Always override neighbor's source address */
272 memcpy(&on->linklocal_addr, src, sizeof(struct in6_addr));
273
274 /* Neighbor ifindex check */
275 if (on->ifindex != (ifindex_t)ntohl(hello->interface_id)) {
276 on->ifindex = ntohl(hello->interface_id);
277 neighbor_ifindex_change++;
278 }
279
280 /* TwoWay check */
281 for (p = (char *)((caddr_t)hello + sizeof(struct ospf6_hello));
d7c0a89a
QY		 282 p + sizeof(uint32_t) <= OSPF6_MESSAGE_END(oh);
283 p += sizeof(uint32_t)) {
284 uint32_t *router_id = (uint32_t *)p;
d62a17ae 285
286 if (*router_id == oi->area->ospf6->router_id)
287 twoway++;
288 }
289
290 assert(p == OSPF6_MESSAGE_END(oh));
291
292 /* RouterPriority check */
293 if (on->priority != hello->priority) {
294 on->priority = hello->priority;
295 neighborchange++;
296 }
297
298 /* DR check */
299 if (on->drouter != hello->drouter) {
300 on->prev_drouter = on->drouter;
301 on->drouter = hello->drouter;
302 if (on->prev_drouter == on->router_id
303 || on->drouter == on->router_id)
304 neighborchange++;
305 }
306
307 /* BDR check */
308 if (on->bdrouter != hello->bdrouter) {
309 on->prev_bdrouter = on->bdrouter;
310 on->bdrouter = hello->bdrouter;
311 if (on->prev_bdrouter == on->router_id
312 || on->bdrouter == on->router_id)
313 neighborchange++;
314 }
315
316 /* BackupSeen check */
317 if (oi->state == OSPF6_INTERFACE_WAITING) {
318 if (hello->bdrouter == on->router_id)
319 backupseen++;
320 else if (hello->drouter == on->router_id
321 && hello->bdrouter == htonl(0))
322 backupseen++;
323 }
324
43855e3d
CS		 325 oi->hello_in++;
326
d62a17ae 327 /* Execute neighbor events */
328 thread_execute(master, hello_received, on, 0);
329 if (twoway)
330 thread_execute(master, twoway_received, on, 0);
331 else
332 thread_execute(master, oneway_received, on, 0);
333
334 /* Schedule interface events */
335 if (backupseen)
336 thread_add_event(master, backup_seen, oi, 0, NULL);
337 if (neighborchange)
338 thread_add_event(master, neighbor_change, oi, 0, NULL);
339
340 if (neighbor_ifindex_change && on->state == OSPF6_NEIGHBOR_FULL)
341 OSPF6_ROUTER_LSA_SCHEDULE(oi->area);
718e3744 342}
343
d62a17ae 344static void ospf6_dbdesc_recv_master(struct ospf6_header *oh,
345 struct ospf6_neighbor *on)
718e3744 346{
d62a17ae 347 struct ospf6_dbdesc *dbdesc;
348 char *p;
349
350 dbdesc = (struct ospf6_dbdesc *)((caddr_t)oh
351 + sizeof(struct ospf6_header));
352
353 if (on->state < OSPF6_NEIGHBOR_INIT) {
354 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
355 zlog_debug("Neighbor state less than Init, ignore");
356 return;
357 }
358
359 switch (on->state) {
360 case OSPF6_NEIGHBOR_TWOWAY:
361 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
362 zlog_debug("Neighbor state is 2-Way, ignore");
363 return;
364
365 case OSPF6_NEIGHBOR_INIT:
366 thread_execute(master, twoway_received, on, 0);
367 if (on->state != OSPF6_NEIGHBOR_EXSTART) {
368 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
369 zlog_debug(
370 "Neighbor state is not ExStart, ignore");
371 return;
372 }
373 /* else fall through to ExStart */
374 /* fallthru */
375 case OSPF6_NEIGHBOR_EXSTART:
376 /* if neighbor obeys us as our slave, schedule negotiation_done
377 and process LSA Headers. Otherwise, ignore this message */
378 if (!CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_MSBIT)
379 && !CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_IBIT)
380 && ntohl(dbdesc->seqnum) == on->dbdesc_seqnum) {
381 /* execute NegotiationDone */
382 thread_execute(master, negotiation_done, on, 0);
383
384 /* Record neighbor options */
385 memcpy(on->options, dbdesc->options,
386 sizeof(on->options));
387 } else {
388 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
389 zlog_debug("Negotiation failed");
390 return;
391 }
392 /* fall through to exchange */
393
394 case OSPF6_NEIGHBOR_EXCHANGE:
395 if (!memcmp(dbdesc, &on->dbdesc_last,
396 sizeof(struct ospf6_dbdesc))) {
397 /* Duplicated DatabaseDescription is dropped by master
398 */
399 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
400 zlog_debug(
401 "Duplicated dbdesc discarded by Master, ignore");
402 return;
403 }
404
405 if (CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_MSBIT)) {
406 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
407 zlog_debug("Master/Slave bit mismatch");
408 thread_add_event(master, seqnumber_mismatch, on, 0,
409 NULL);
410 return;
411 }
412
413 if (CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_IBIT)) {
414 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
415 zlog_debug("Initialize bit mismatch");
416 thread_add_event(master, seqnumber_mismatch, on, 0,
417 NULL);
418 return;
419 }
420
421 if (memcmp(on->options, dbdesc->options, sizeof(on->options))) {
422 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
423 zlog_debug("Option field mismatch");
424 thread_add_event(master, seqnumber_mismatch, on, 0,
425 NULL);
426 return;
427 }
428
429 if (ntohl(dbdesc->seqnum) != on->dbdesc_seqnum) {
430 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
431 zlog_debug(
432 "Sequence number mismatch (%#lx expected)",
d7c0a89a 433 (unsigned long)on->dbdesc_seqnum);
d62a17ae 434 thread_add_event(master, seqnumber_mismatch, on, 0,
435 NULL);
436 return;
437 }
438 break;
439
440 case OSPF6_NEIGHBOR_LOADING:
441 case OSPF6_NEIGHBOR_FULL:
442 if (!memcmp(dbdesc, &on->dbdesc_last,
443 sizeof(struct ospf6_dbdesc))) {
444 /* Duplicated DatabaseDescription is dropped by master
445 */
446 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
447 zlog_debug(
448 "Duplicated dbdesc discarded by Master, ignore");
449 return;
450 }
451
452 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
453 zlog_debug("Not duplicate dbdesc in state %s",
454 ospf6_neighbor_state_str[on->state]);
455 thread_add_event(master, seqnumber_mismatch, on, 0, NULL);
456 return;
457
458 default:
459 assert(0);
460 break;
461 }
462
463 /* Process LSA headers */
464 for (p = (char *)((caddr_t)dbdesc + sizeof(struct ospf6_dbdesc));
465 p + sizeof(struct ospf6_lsa_header) <= OSPF6_MESSAGE_END(oh);
466 p += sizeof(struct ospf6_lsa_header)) {
467 struct ospf6_lsa *his, *mine;
468 struct ospf6_lsdb *lsdb = NULL;
469
470 his = ospf6_lsa_create_headeronly((struct ospf6_lsa_header *)p);
471
472 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
473 zlog_debug("%s", his->name);
474
475 switch (OSPF6_LSA_SCOPE(his->header->type)) {
476 case OSPF6_SCOPE_LINKLOCAL:
477 lsdb = on->ospf6_if->lsdb;
478 break;
479 case OSPF6_SCOPE_AREA:
480 lsdb = on->ospf6_if->area->lsdb;
481 break;
482 case OSPF6_SCOPE_AS:
483 lsdb = on->ospf6_if->area->ospf6->lsdb;
484 break;
485 case OSPF6_SCOPE_RESERVED:
486 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
487 zlog_debug("Ignoring LSA of reserved scope");
488 ospf6_lsa_delete(his);
489 continue;
490 break;
491 }
492
493 if (ntohs(his->header->type) == OSPF6_LSTYPE_AS_EXTERNAL
494 && IS_AREA_STUB(on->ospf6_if->area)) {
495 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
496 zlog_debug(
497 "SeqNumMismatch (E-bit mismatch), discard");
498 ospf6_lsa_delete(his);
499 thread_add_event(master, seqnumber_mismatch, on, 0,
500 NULL);
501 return;
502 }
503
504 mine = ospf6_lsdb_lookup(his->header->type, his->header->id,
505 his->header->adv_router, lsdb);
506 if (mine == NULL) {
507 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
508 zlog_debug("Add request (No database copy)");
509 ospf6_lsdb_add(ospf6_lsa_copy(his), on->request_list);
510 } else if (ospf6_lsa_compare(his, mine) < 0) {
511 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
512 zlog_debug("Add request (Received MoreRecent)");
513 ospf6_lsdb_add(ospf6_lsa_copy(his), on->request_list);
514 } else {
515 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
516 zlog_debug("Discard (Existing MoreRecent)");
517 }
518 ospf6_lsa_delete(his);
519 }
520
521 assert(p == OSPF6_MESSAGE_END(oh));
522
523 /* Increment sequence number */
524 on->dbdesc_seqnum++;
525
526 /* schedule send lsreq */
527 if (on->request_list->count)
528 thread_add_event(master, ospf6_lsreq_send, on, 0,
529 &on->thread_send_lsreq);
530
531 THREAD_OFF(on->thread_send_dbdesc);
532
533 /* More bit check */
534 if (!CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_MBIT)
535 && !CHECK_FLAG(on->dbdesc_bits, OSPF6_DBDESC_MBIT))
536 thread_add_event(master, exchange_done, on, 0, NULL);
537 else {
538 on->thread_send_dbdesc = NULL;
539 thread_add_event(master, ospf6_dbdesc_send_newone, on, 0,
540 &on->thread_send_dbdesc);
541 }
542
543 /* save last received dbdesc */
544 memcpy(&on->dbdesc_last, dbdesc, sizeof(struct ospf6_dbdesc));
718e3744 545}
546
d62a17ae 547static void ospf6_dbdesc_recv_slave(struct ospf6_header *oh,
548 struct ospf6_neighbor *on)
718e3744 549{
d62a17ae 550 struct ospf6_dbdesc *dbdesc;
551 char *p;
552
553 dbdesc = (struct ospf6_dbdesc *)((caddr_t)oh
554 + sizeof(struct ospf6_header));
555
556 if (on->state < OSPF6_NEIGHBOR_INIT) {
557 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
558 zlog_debug("Neighbor state less than Init, ignore");
559 return;
560 }
561
562 switch (on->state) {
563 case OSPF6_NEIGHBOR_TWOWAY:
564 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
565 zlog_debug("Neighbor state is 2-Way, ignore");
566 return;
567
568 case OSPF6_NEIGHBOR_INIT:
569 thread_execute(master, twoway_received, on, 0);
570 if (on->state != OSPF6_NEIGHBOR_EXSTART) {
571 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
572 zlog_debug(
573 "Neighbor state is not ExStart, ignore");
574 return;
575 }
576 /* else fall through to ExStart */
577 /* fallthru */
578 case OSPF6_NEIGHBOR_EXSTART:
579 /* If the neighbor is Master, act as Slave. Schedule
580 negotiation_done
581 and process LSA Headers. Otherwise, ignore this message */
582 if (CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_IBIT)
583 && CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_MBIT)
584 && CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_MSBIT)
585 && ntohs(oh->length)
586 == sizeof(struct ospf6_header)
587 + sizeof(struct ospf6_dbdesc)) {
588 /* set the master/slave bit to slave */
589 UNSET_FLAG(on->dbdesc_bits, OSPF6_DBDESC_MSBIT);
590
591 /* set the DD sequence number to one specified by master
592 */
593 on->dbdesc_seqnum = ntohl(dbdesc->seqnum);
594
595 /* schedule NegotiationDone */
596 thread_execute(master, negotiation_done, on, 0);
597
598 /* Record neighbor options */
599 memcpy(on->options, dbdesc->options,
600 sizeof(on->options));
601 } else {
602 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
603 zlog_debug("Negotiation failed");
604 return;
605 }
606 break;
607
608 case OSPF6_NEIGHBOR_EXCHANGE:
609 if (!memcmp(dbdesc, &on->dbdesc_last,
610 sizeof(struct ospf6_dbdesc))) {
611 /* Duplicated DatabaseDescription causes slave to
612 * retransmit */
613 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
614 zlog_debug(
615 "Duplicated dbdesc causes retransmit");
616 THREAD_OFF(on->thread_send_dbdesc);
617 on->thread_send_dbdesc = NULL;
618 thread_add_event(master, ospf6_dbdesc_send, on, 0,
619 &on->thread_send_dbdesc);
620 return;
621 }
622
623 if (!CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_MSBIT)) {
624 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
625 zlog_debug("Master/Slave bit mismatch");
626 thread_add_event(master, seqnumber_mismatch, on, 0,
627 NULL);
628 return;
629 }
630
631 if (CHECK_FLAG(dbdesc->bits, OSPF6_DBDESC_IBIT)) {
632 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
633 zlog_debug("Initialize bit mismatch");
634 thread_add_event(master, seqnumber_mismatch, on, 0,
635 NULL);
636 return;
637 }
638
639 if (memcmp(on->options, dbdesc->options, sizeof(on->options))) {
640 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
641 zlog_debug("Option field mismatch");
642 thread_add_event(master, seqnumber_mismatch, on, 0,
643 NULL);
644 return;
645 }
646
647 if (ntohl(dbdesc->seqnum) != on->dbdesc_seqnum + 1) {
648 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
649 zlog_debug(
650 "Sequence number mismatch (%#lx expected)",
d7c0a89a 651 (unsigned long)on->dbdesc_seqnum + 1);
d62a17ae 652 thread_add_event(master, seqnumber_mismatch, on, 0,
653 NULL);
654 return;
655 }
656 break;
657
658 case OSPF6_NEIGHBOR_LOADING:
659 case OSPF6_NEIGHBOR_FULL:
660 if (!memcmp(dbdesc, &on->dbdesc_last,
661 sizeof(struct ospf6_dbdesc))) {
662 /* Duplicated DatabaseDescription causes slave to
663 * retransmit */
664 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
665 zlog_debug(
666 "Duplicated dbdesc causes retransmit");
667 THREAD_OFF(on->thread_send_dbdesc);
668 thread_add_event(master, ospf6_dbdesc_send, on, 0,
669 &on->thread_send_dbdesc);
670 return;
671 }
672
673 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
674 zlog_debug("Not duplicate dbdesc in state %s",
675 ospf6_neighbor_state_str[on->state]);
676 thread_add_event(master, seqnumber_mismatch, on, 0, NULL);
677 return;
678
679 default:
680 assert(0);
681 break;
682 }
683
684 /* Process LSA headers */
685 for (p = (char *)((caddr_t)dbdesc + sizeof(struct ospf6_dbdesc));
686 p + sizeof(struct ospf6_lsa_header) <= OSPF6_MESSAGE_END(oh);
687 p += sizeof(struct ospf6_lsa_header)) {
688 struct ospf6_lsa *his, *mine;
689 struct ospf6_lsdb *lsdb = NULL;
690
691 his = ospf6_lsa_create_headeronly((struct ospf6_lsa_header *)p);
692
693 switch (OSPF6_LSA_SCOPE(his->header->type)) {
694 case OSPF6_SCOPE_LINKLOCAL:
695 lsdb = on->ospf6_if->lsdb;
696 break;
697 case OSPF6_SCOPE_AREA:
698 lsdb = on->ospf6_if->area->lsdb;
699 break;
700 case OSPF6_SCOPE_AS:
701 lsdb = on->ospf6_if->area->ospf6->lsdb;
702 break;
703 case OSPF6_SCOPE_RESERVED:
704 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
705 zlog_debug("Ignoring LSA of reserved scope");
706 ospf6_lsa_delete(his);
707 continue;
708 break;
709 }
710
711 if (OSPF6_LSA_SCOPE(his->header->type) == OSPF6_SCOPE_AS
712 && IS_AREA_STUB(on->ospf6_if->area)) {
713 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
714 zlog_debug("E-bit mismatch with LSA Headers");
715 ospf6_lsa_delete(his);
716 thread_add_event(master, seqnumber_mismatch, on, 0,
717 NULL);
718 return;
719 }
720
721 mine = ospf6_lsdb_lookup(his->header->type, his->header->id,
722 his->header->adv_router, lsdb);
723 if (mine == NULL || ospf6_lsa_compare(his, mine) < 0) {
724 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
725 zlog_debug("Add request-list: %s", his->name);
726 ospf6_lsdb_add(ospf6_lsa_copy(his), on->request_list);
727 }
728 ospf6_lsa_delete(his);
729 }
730
731 assert(p == OSPF6_MESSAGE_END(oh));
732
733 /* Set sequence number to Master's */
734 on->dbdesc_seqnum = ntohl(dbdesc->seqnum);
735
736 /* schedule send lsreq */
737 if (on->request_list->count)
738 thread_add_event(master, ospf6_lsreq_send, on, 0,
739 &on->thread_send_lsreq);
740
741 THREAD_OFF(on->thread_send_dbdesc);
742 thread_add_event(master, ospf6_dbdesc_send_newone, on, 0,
743 &on->thread_send_dbdesc);
744
745 /* save last received dbdesc */
746 memcpy(&on->dbdesc_last, dbdesc, sizeof(struct ospf6_dbdesc));
718e3744 747}
748
d62a17ae 749static void ospf6_dbdesc_recv(struct in6_addr *src, struct in6_addr *dst,
750 struct ospf6_interface *oi,
751 struct ospf6_header *oh)
718e3744 752{
d62a17ae 753 struct ospf6_neighbor *on;
754 struct ospf6_dbdesc *dbdesc;
755
756 on = ospf6_neighbor_lookup(oh->router_id, oi);
757 if (on == NULL) {
758 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
759 zlog_debug("Neighbor not found, ignore");
760 return;
761 }
762
763 dbdesc = (struct ospf6_dbdesc *)((caddr_t)oh
764 + sizeof(struct ospf6_header));
765
766 /* Interface MTU check */
767 if (!oi->mtu_ignore && ntohs(dbdesc->ifmtu) != oi->ifmtu) {
768 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
769 zlog_debug("I/F MTU mismatch");
770 return;
771 }
772
773 if (dbdesc->reserved1 || dbdesc->reserved2) {
774 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
775 zlog_debug(
776 "Non-0 reserved field in %s's DbDesc, correct",
777 on->name);
778 dbdesc->reserved1 = 0;
779 dbdesc->reserved2 = 0;
780 }
781
43855e3d
CS		 782 oi->db_desc_in++;
783
d62a17ae 784 if (ntohl(oh->router_id) < ntohl(ospf6->router_id))
785 ospf6_dbdesc_recv_master(oh, on);
786 else if (ntohl(ospf6->router_id) < ntohl(oh->router_id))
787 ospf6_dbdesc_recv_slave(oh, on);
788 else {
789 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
790 zlog_debug("Can't decide which is master, ignore");
791 }
718e3744 792}
793
d62a17ae 794static void ospf6_lsreq_recv(struct in6_addr *src, struct in6_addr *dst,
795 struct ospf6_interface *oi,
796 struct ospf6_header *oh)
718e3744 797{
d62a17ae 798 struct ospf6_neighbor *on;
799 char *p;
800 struct ospf6_lsreq_entry *e;
801 struct ospf6_lsdb *lsdb = NULL;
802 struct ospf6_lsa *lsa;
803
804 on = ospf6_neighbor_lookup(oh->router_id, oi);
805 if (on == NULL) {
806 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
807 zlog_debug("Neighbor not found, ignore");
808 return;
809 }
810
811 if (on->state != OSPF6_NEIGHBOR_EXCHANGE
812 && on->state != OSPF6_NEIGHBOR_LOADING
813 && on->state != OSPF6_NEIGHBOR_FULL) {
814 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
815 zlog_debug("Neighbor state less than Exchange, ignore");
816 return;
817 }
818
43855e3d
CS		 819 oi->ls_req_in++;
820
d62a17ae 821 /* Process each request */
822 for (p = (char *)((caddr_t)oh + sizeof(struct ospf6_header));
823 p + sizeof(struct ospf6_lsreq_entry) <= OSPF6_MESSAGE_END(oh);
824 p += sizeof(struct ospf6_lsreq_entry)) {
825 e = (struct ospf6_lsreq_entry *)p;
826
827 switch (OSPF6_LSA_SCOPE(e->type)) {
828 case OSPF6_SCOPE_LINKLOCAL:
829 lsdb = on->ospf6_if->lsdb;
830 break;
831 case OSPF6_SCOPE_AREA:
832 lsdb = on->ospf6_if->area->lsdb;
833 break;
834 case OSPF6_SCOPE_AS:
835 lsdb = on->ospf6_if->area->ospf6->lsdb;
836 break;
837 default:
838 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
839 zlog_debug("Ignoring LSA of reserved scope");
840 continue;
841 break;
842 }
843
844 /* Find database copy */
845 lsa = ospf6_lsdb_lookup(e->type, e->id, e->adv_router, lsdb);
846 if (lsa == NULL) {
847 char id[16], adv_router[16];
848 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV)) {
849 inet_ntop(AF_INET, &e->id, id, sizeof(id));
850 inet_ntop(AF_INET, &e->adv_router, adv_router,
851 sizeof(adv_router));
852 zlog_debug(
853 "Can't find requested [%s Id:%s Adv:%s]",
854 ospf6_lstype_name(e->type), id,
855 adv_router);
856 }
857 thread_add_event(master, bad_lsreq, on, 0, NULL);
858 return;
859 }
860
861 ospf6_lsdb_add(ospf6_lsa_copy(lsa), on->lsupdate_list);
862 }
863
864 assert(p == OSPF6_MESSAGE_END(oh));
865
866 /* schedule send lsupdate */
867 THREAD_OFF(on->thread_send_lsupdate);
868 thread_add_event(master, ospf6_lsupdate_send_neighbor, on, 0,
869 &on->thread_send_lsupdate);
718e3744 870}
871
abc7ef44
DO		 872/* Verify, that the specified memory area contains exactly N valid IPv6
873 prefixes as specified by RFC5340, A.4.1. */
d62a17ae 874static unsigned ospf6_prefixes_examin(
875 struct ospf6_prefix *current, /* start of buffer */
876 unsigned length,
d7c0a89a 877 const uint32_t req_num_pfxs /* always compared with the actual number
d62a17ae 878 of prefixes */
d7c0a89a 879)
abc7ef44 880{
d7c0a89a
QY		 881 uint8_t requested_pfx_bytes;
882 uint32_t real_num_pfxs = 0;
d62a17ae 883
884 while (length) {
885 if (length < OSPF6_PREFIX_MIN_SIZE) {
886 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN,
887 RECV))
888 zlog_debug("%s: undersized IPv6 prefix header",
889 __func__);
890 return MSG_NG;
891 }
892 /* safe to look deeper */
893 if (current->prefix_length > IPV6_MAX_BITLEN) {
894 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN,
895 RECV))
896 zlog_debug("%s: invalid PrefixLength (%u bits)",
897 __func__, current->prefix_length);
898 return MSG_NG;
899 }
900 /* covers both fixed- and variable-sized fields */
901 requested_pfx_bytes =
902 OSPF6_PREFIX_MIN_SIZE
903 + OSPF6_PREFIX_SPACE(current->prefix_length);
904 if (requested_pfx_bytes > length) {
905 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN,
906 RECV))
907 zlog_debug("%s: undersized IPv6 prefix",
908 __func__);
909 return MSG_NG;
910 }
911 /* next prefix */
912 length -= requested_pfx_bytes;
913 current = (struct ospf6_prefix *)((caddr_t)current
914 + requested_pfx_bytes);
915 real_num_pfxs++;
916 }
917 if (real_num_pfxs != req_num_pfxs) {
918 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
919 zlog_debug(
920 "%s: IPv6 prefix number mismatch (%u required, %u real)",
921 __func__, req_num_pfxs, real_num_pfxs);
922 return MSG_NG;
923 }
924 return MSG_OK;
abc7ef44
DO		 925}
926
927/* Verify an LSA to have a valid length and dispatch further (where
928 appropriate) to check if the contents, including nested IPv6 prefixes,
929 is properly sized/aligned within the LSA. Note that this function gets
930 LSA type in network byte order, uses in host byte order and passes to
931 ospf6_lstype_name() in network byte order again. */
d62a17ae 932static unsigned ospf6_lsa_examin(struct ospf6_lsa_header *lsah,
d7c0a89a
QY		 933 const uint16_t lsalen,
934 const uint8_t headeronly)
abc7ef44 935{
d62a17ae 936 struct ospf6_intra_prefix_lsa *intra_prefix_lsa;
937 struct ospf6_as_external_lsa *as_external_lsa;
938 struct ospf6_link_lsa *link_lsa;
939 unsigned exp_length;
d7c0a89a
QY		 940 uint8_t ltindex;
941 uint16_t lsatype;
d62a17ae 942
943 /* In case an additional minimum length constraint is defined for
944 current
945 LSA type, make sure that this constraint is met. */
946 lsatype = ntohs(lsah->type);
947 ltindex = lsatype & OSPF6_LSTYPE_FCODE_MASK;
948 if (ltindex < OSPF6_LSTYPE_SIZE && ospf6_lsa_minlen[ltindex]
949 && lsalen < ospf6_lsa_minlen[ltindex] + OSPF6_LSA_HEADER_SIZE) {
950 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
951 zlog_debug("%s: undersized (%u B) LSA", __func__,
952 lsalen);
953 return MSG_NG;
954 }
955 switch (lsatype) {
956 case OSPF6_LSTYPE_ROUTER:
957 /* RFC5340 A.4.3, LSA header + OSPF6_ROUTER_LSA_MIN_SIZE bytes
958 followed
959 by N>=0 interface descriptions. */
960 if ((lsalen - OSPF6_LSA_HEADER_SIZE - OSPF6_ROUTER_LSA_MIN_SIZE)
961 % OSPF6_ROUTER_LSDESC_FIX_SIZE) {
962 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN,
963 RECV))
964 zlog_debug(
965 "%s: interface description alignment error",
966 __func__);
967 return MSG_NG;
968 }
969 break;
970 case OSPF6_LSTYPE_NETWORK:
971 /* RFC5340 A.4.4, LSA header + OSPF6_NETWORK_LSA_MIN_SIZE bytes
972 followed by N>=0 attached router descriptions. */
973 if ((lsalen - OSPF6_LSA_HEADER_SIZE
974 - OSPF6_NETWORK_LSA_MIN_SIZE)
975 % OSPF6_NETWORK_LSDESC_FIX_SIZE) {
976 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN,
977 RECV))
978 zlog_debug(
979 "%s: router description alignment error",
980 __func__);
981 return MSG_NG;
982 }
983 break;
984 case OSPF6_LSTYPE_INTER_PREFIX:
985 /* RFC5340 A.4.5, LSA header + OSPF6_INTER_PREFIX_LSA_MIN_SIZE
986 bytes
987 followed by 3-4 fields of a single IPv6 prefix. */
988 if (headeronly)
989 break;
990 return ospf6_prefixes_examin(
991 (struct ospf6_prefix
992 *)((caddr_t)lsah + OSPF6_LSA_HEADER_SIZE
993 + OSPF6_INTER_PREFIX_LSA_MIN_SIZE),
994 lsalen - OSPF6_LSA_HEADER_SIZE
995 - OSPF6_INTER_PREFIX_LSA_MIN_SIZE,
996 1);
997 case OSPF6_LSTYPE_INTER_ROUTER:
998 /* RFC5340 A.4.6, fixed-size LSA. */
999 if (lsalen
1000 > OSPF6_LSA_HEADER_SIZE + OSPF6_INTER_ROUTER_LSA_FIX_SIZE) {
1001 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN,
1002 RECV))
1003 zlog_debug("%s: oversized (%u B) LSA", __func__,
1004 lsalen);
1005 return MSG_NG;
1006 }
1007 break;
1008 case OSPF6_LSTYPE_AS_EXTERNAL: /* RFC5340 A.4.7, same as A.4.8. */
1009 case OSPF6_LSTYPE_TYPE_7:
1010 /* RFC5340 A.4.8, LSA header + OSPF6_AS_EXTERNAL_LSA_MIN_SIZE
1011 bytes
1012 followed by 3-4 fields of IPv6 prefix and 3 conditional LSA
1013 fields:
1014 16 bytes of forwarding address, 4 bytes of external route
1015 tag,
1016 4 bytes of referenced link state ID. */
1017 if (headeronly)
1018 break;
1019 as_external_lsa =
1020 (struct ospf6_as_external_lsa
1021 *)((caddr_t)lsah + OSPF6_LSA_HEADER_SIZE);
1022 exp_length =
1023 OSPF6_LSA_HEADER_SIZE + OSPF6_AS_EXTERNAL_LSA_MIN_SIZE;
1024 /* To find out if the last optional field (Referenced Link State
1025 ID) is
1026 assumed in this LSA, we need to access fixed fields of the
1027 IPv6
1028 prefix before ospf6_prefix_examin() confirms its sizing. */
1029 if (exp_length + OSPF6_PREFIX_MIN_SIZE > lsalen) {
1030 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN,
1031 RECV))
1032 zlog_debug("%s: undersized (%u B) LSA header",
1033 __func__, lsalen);
1034 return MSG_NG;
1035 }
1036 /* forwarding address */
1037 if (CHECK_FLAG(as_external_lsa->bits_metric, OSPF6_ASBR_BIT_F))
1038 exp_length += 16;
1039 /* external route tag */
1040 if (CHECK_FLAG(as_external_lsa->bits_metric, OSPF6_ASBR_BIT_T))
1041 exp_length += 4;
1042 /* referenced link state ID */
1043 if (as_external_lsa->prefix.u._prefix_referenced_lstype)
1044 exp_length += 4;
1045 /* All the fixed-size fields (mandatory and optional) must fit.
1046 I.e.,
1047 this check does not include any IPv6 prefix fields. */
1048 if (exp_length > lsalen) {
1049 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN,
1050 RECV))
1051 zlog_debug("%s: undersized (%u B) LSA header",
1052 __func__, lsalen);
1053 return MSG_NG;
1054 }
1055 /* The last call completely covers the remainder (IPv6 prefix).
1056 */
1057 return ospf6_prefixes_examin(
1058 (struct ospf6_prefix
1059 *)((caddr_t)as_external_lsa
1060 + OSPF6_AS_EXTERNAL_LSA_MIN_SIZE),
1061 lsalen - exp_length, 1);
1062 case OSPF6_LSTYPE_LINK:
1063 /* RFC5340 A.4.9, LSA header + OSPF6_LINK_LSA_MIN_SIZE bytes
1064 followed
1065 by N>=0 IPv6 prefix blocks (with N declared beforehand). */
1066 if (headeronly)
1067 break;
1068 link_lsa = (struct ospf6_link_lsa *)((caddr_t)lsah
1069 + OSPF6_LSA_HEADER_SIZE);
1070 return ospf6_prefixes_examin(
1071 (struct ospf6_prefix *)((caddr_t)link_lsa
1072 + OSPF6_LINK_LSA_MIN_SIZE),
1073 lsalen - OSPF6_LSA_HEADER_SIZE
1074 - OSPF6_LINK_LSA_MIN_SIZE,
1075 ntohl(link_lsa->prefix_num) /* 32 bits */
9d303b37 1076 );
d62a17ae 1077 case OSPF6_LSTYPE_INTRA_PREFIX:
1078 /* RFC5340 A.4.10, LSA header + OSPF6_INTRA_PREFIX_LSA_MIN_SIZE
1079 bytes
1080 followed by N>=0 IPv6 prefixes (with N declared beforehand).
1081 */
1082 if (headeronly)
1083 break;
1084 intra_prefix_lsa =
1085 (struct ospf6_intra_prefix_lsa
1086 *)((caddr_t)lsah + OSPF6_LSA_HEADER_SIZE);
1087 return ospf6_prefixes_examin(
1088 (struct ospf6_prefix
1089 *)((caddr_t)intra_prefix_lsa
1090 + OSPF6_INTRA_PREFIX_LSA_MIN_SIZE),
1091 lsalen - OSPF6_LSA_HEADER_SIZE
1092 - OSPF6_INTRA_PREFIX_LSA_MIN_SIZE,
1093 ntohs(intra_prefix_lsa->prefix_num) /* 16 bits */
9d303b37 1094 );
d62a17ae 1095 }
1096 /* No additional validation is possible for unknown LSA types, which are
1097 themselves valid in OPSFv3, hence the default decision is to accept.
1098 */
1099 return MSG_OK;
abc7ef44
DO		 1100}
1101
1102/* Verify if the provided input buffer is a valid sequence of LSAs. This
1103 includes verification of LSA blocks length/alignment and dispatching
1104 of deeper-level checks. */
1105static unsigned
d62a17ae 1106ospf6_lsaseq_examin(struct ospf6_lsa_header *lsah, /* start of buffered data */
d7c0a89a 1107 size_t length, const uint8_t headeronly,
d62a17ae 1108 /* When declared_num_lsas is not 0, compare it to the real
1109 number of LSAs
1110 and treat the difference as an error. */
d7c0a89a 1111 const uint32_t declared_num_lsas)
abc7ef44 1112{
d7c0a89a 1113 uint32_t counted_lsas = 0;
d62a17ae 1114
1115 while (length) {
d7c0a89a 1116 uint16_t lsalen;
d62a17ae 1117 if (length < OSPF6_LSA_HEADER_SIZE) {
1118 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN,
1119 RECV))
1120 zlog_debug(
1121 "%s: undersized (%zu B) trailing (#%u) LSA header",
1122 __func__, length, counted_lsas);
1123 return MSG_NG;
1124 }
1125 /* save on ntohs() calls here and in the LSA validator */
1126 lsalen = OSPF6_LSA_SIZE(lsah);
1127 if (lsalen < OSPF6_LSA_HEADER_SIZE) {
1128 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN,
1129 RECV))
1130 zlog_debug(
1131 "%s: malformed LSA header #%u, declared length is %u B",
1132 __func__, counted_lsas, lsalen);
1133 return MSG_NG;
1134 }
1135 if (headeronly) {
1136 /* less checks here and in ospf6_lsa_examin() */
1137 if (MSG_OK != ospf6_lsa_examin(lsah, lsalen, 1)) {
1138 if (IS_OSPF6_DEBUG_MESSAGE(
1139 OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1140 zlog_debug(
1141 "%s: anomaly in header-only %s LSA #%u",
1142 __func__,
1143 ospf6_lstype_name(lsah->type),
1144 counted_lsas);
1145 return MSG_NG;
1146 }
1147 lsah = (struct ospf6_lsa_header
1148 *)((caddr_t)lsah
1149 + OSPF6_LSA_HEADER_SIZE);
1150 length -= OSPF6_LSA_HEADER_SIZE;
1151 } else {
1152 /* make sure the input buffer is deep enough before
1153 * further checks */
1154 if (lsalen > length) {
1155 if (IS_OSPF6_DEBUG_MESSAGE(
1156 OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1157 zlog_debug(
1158 "%s: anomaly in %s LSA #%u: declared length is %u B, buffered length is %zu B",
1159 __func__,
1160 ospf6_lstype_name(lsah->type),
1161 counted_lsas, lsalen, length);
1162 return MSG_NG;
1163 }
1164 if (MSG_OK != ospf6_lsa_examin(lsah, lsalen, 0)) {
1165 if (IS_OSPF6_DEBUG_MESSAGE(
1166 OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1167 zlog_debug(
1168 "%s: anomaly in %s LSA #%u",
1169 __func__,
1170 ospf6_lstype_name(lsah->type),
1171 counted_lsas);
1172 return MSG_NG;
1173 }
1174 lsah = (struct ospf6_lsa_header *)((caddr_t)lsah
1175 + lsalen);
1176 length -= lsalen;
1177 }
1178 counted_lsas++;
1179 }
1180
1181 if (declared_num_lsas && counted_lsas != declared_num_lsas) {
1182 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1183 zlog_debug(
1184 "%s: #LSAs declared (%u) does not match actual (%u)",
1185 __func__, declared_num_lsas, counted_lsas);
1186 return MSG_NG;
1187 }
1188 return MSG_OK;
abc7ef44
DO		 1189}
1190
1191/* Verify a complete OSPF packet for proper sizing/alignment. */
d62a17ae 1192static unsigned ospf6_packet_examin(struct ospf6_header *oh,
1193 const unsigned bytesonwire)
abc7ef44 1194{
d62a17ae 1195 struct ospf6_lsupdate *lsupd;
1196 unsigned test;
1197
1198 /* length, 1st approximation */
1199 if (bytesonwire < OSPF6_HEADER_SIZE) {
1200 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1201 zlog_debug("%s: undersized (%u B) packet", __func__,
1202 bytesonwire);
1203 return MSG_NG;
1204 }
1205 /* Now it is safe to access header fields. */
1206 if (bytesonwire != ntohs(oh->length)) {
1207 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1208 zlog_debug(
1ba43456
CS		 1209 "%s: %s packet length error (%u real, %u declared)",
1210 __func__, lookup_msg(ospf6_message_type_str,
1211 oh->type, NULL),
1212 bytesonwire, ntohs(oh->length));
d62a17ae 1213 return MSG_NG;
1214 }
1215 /* version check */
1216 if (oh->version != OSPFV3_VERSION) {
1217 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1218 zlog_debug("%s: invalid (%u) protocol version",
1219 __func__, oh->version);
1220 return MSG_NG;
1221 }
1222 /* length, 2nd approximation */
1223 if (oh->type < OSPF6_MESSAGE_TYPE_ALL && ospf6_packet_minlen[oh->type]
1224 && bytesonwire
1225 < OSPF6_HEADER_SIZE + ospf6_packet_minlen[oh->type]) {
1226 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1227 zlog_debug("%s: undersized (%u B) %s packet", __func__,
1228 bytesonwire,
1229 lookup_msg(ospf6_message_type_str, oh->type,
1230 NULL));
1231 return MSG_NG;
1232 }
1233 /* type-specific deeper validation */
1234 switch (oh->type) {
1235 case OSPF6_MESSAGE_TYPE_HELLO:
1236 /* RFC5340 A.3.2, packet header + OSPF6_HELLO_MIN_SIZE bytes
1237 followed
1238 by N>=0 router-IDs. */
1239 if (0
1240 == (bytesonwire - OSPF6_HEADER_SIZE - OSPF6_HELLO_MIN_SIZE)
1241 % 4)
1242 return MSG_OK;
1243 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1244 zlog_debug("%s: alignment error in %s packet", __func__,
1245 lookup_msg(ospf6_message_type_str, oh->type,
1246 NULL));
1247 return MSG_NG;
1248 case OSPF6_MESSAGE_TYPE_DBDESC:
1249 /* RFC5340 A.3.3, packet header + OSPF6_DB_DESC_MIN_SIZE bytes
1250 followed
1251 by N>=0 header-only LSAs. */
1252 test = ospf6_lsaseq_examin(
1253 (struct ospf6_lsa_header *)((caddr_t)oh
1254 + OSPF6_HEADER_SIZE
1255 + OSPF6_DB_DESC_MIN_SIZE),
1256 bytesonwire - OSPF6_HEADER_SIZE
1257 - OSPF6_DB_DESC_MIN_SIZE,
1258 1, 0);
1259 break;
1260 case OSPF6_MESSAGE_TYPE_LSREQ:
1261 /* RFC5340 A.3.4, packet header + N>=0 LS description blocks. */
1262 if (0
1263 == (bytesonwire - OSPF6_HEADER_SIZE - OSPF6_LS_REQ_MIN_SIZE)
1264 % OSPF6_LSREQ_LSDESC_FIX_SIZE)
1265 return MSG_OK;
1266 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1267 zlog_debug("%s: alignment error in %s packet", __func__,
1268 lookup_msg(ospf6_message_type_str, oh->type,
1269 NULL));
1270 return MSG_NG;
1271 case OSPF6_MESSAGE_TYPE_LSUPDATE:
1272 /* RFC5340 A.3.5, packet header + OSPF6_LS_UPD_MIN_SIZE bytes
1273 followed
1274 by N>=0 full LSAs (with N declared beforehand). */
1275 lsupd = (struct ospf6_lsupdate *)((caddr_t)oh
1276 + OSPF6_HEADER_SIZE);
1277 test = ospf6_lsaseq_examin(
1278 (struct ospf6_lsa_header *)((caddr_t)lsupd
1279 + OSPF6_LS_UPD_MIN_SIZE),
1280 bytesonwire - OSPF6_HEADER_SIZE - OSPF6_LS_UPD_MIN_SIZE,
1281 0, ntohl(lsupd->lsa_number) /* 32 bits */
9d303b37 1282 );
d62a17ae 1283 break;
1284 case OSPF6_MESSAGE_TYPE_LSACK:
1285 /* RFC5340 A.3.6, packet header + N>=0 header-only LSAs. */
1286 test = ospf6_lsaseq_examin(
1287 (struct ospf6_lsa_header *)((caddr_t)oh
1288 + OSPF6_HEADER_SIZE
1289 + OSPF6_LS_ACK_MIN_SIZE),
1290 bytesonwire - OSPF6_HEADER_SIZE - OSPF6_LS_ACK_MIN_SIZE,
1291 1, 0);
1292 break;
1293 default:
1294 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1295 zlog_debug("%s: invalid (%u) message type", __func__,
1296 oh->type);
1297 return MSG_NG;
1298 }
1299 if (test != MSG_OK
1300 && IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1301 zlog_debug("%s: anomaly in %s packet", __func__,
1302 lookup_msg(ospf6_message_type_str, oh->type, NULL));
1303 return test;
abc7ef44
DO		 1304}
1305
1306/* Verify particular fields of otherwise correct received OSPF packet to
1307 meet the requirements of RFC. */
d62a17ae 1308static int ospf6_rxpacket_examin(struct ospf6_interface *oi,
1309 struct ospf6_header *oh,
1310 const unsigned bytesonwire)
abc7ef44 1311{
d62a17ae 1312 char buf[2][INET_ADDRSTRLEN];
1313
1314 if (MSG_OK != ospf6_packet_examin(oh, bytesonwire))
1315 return MSG_NG;
1316
1317 /* Area-ID check */
1318 if (oh->area_id != oi->area->area_id) {
1319 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV)) {
1320 if (oh->area_id == OSPF_AREA_BACKBONE)
1321 zlog_debug(
1322 "%s: Message may be via Virtual Link: not supported",
1323 __func__);
1324 else
1325 zlog_debug(
1326 "%s: Area-ID mismatch (my %s, rcvd %s)",
1327 __func__,
1328 inet_ntop(AF_INET, &oi->area->area_id,
1329 buf[0], INET_ADDRSTRLEN),
1330 inet_ntop(AF_INET, &oh->area_id, buf[1],
1331 INET_ADDRSTRLEN));
1332 }
1333 return MSG_NG;
1334 }
1335
1336 /* Instance-ID check */
1337 if (oh->instance_id != oi->instance_id) {
1338 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1339 zlog_debug("%s: Instance-ID mismatch (my %u, rcvd %u)",
1340 __func__, oi->instance_id, oh->instance_id);
1341 return MSG_NG;
1342 }
1343
1344 /* Router-ID check */
1345 if (oh->router_id == oi->area->ospf6->router_id) {
1346 zlog_warn("%s: Duplicate Router-ID (%s)", __func__,
1347 inet_ntop(AF_INET, &oh->router_id, buf[0],
1348 INET_ADDRSTRLEN));
1349 return MSG_NG;
1350 }
1351 return MSG_OK;
abc7ef44
DO		 1352}
1353
d62a17ae 1354static void ospf6_lsupdate_recv(struct in6_addr *src, struct in6_addr *dst,
1355 struct ospf6_interface *oi,
1356 struct ospf6_header *oh)
718e3744 1357{
d62a17ae 1358 struct ospf6_neighbor *on;
1359 struct ospf6_lsupdate *lsupdate;
1360 char *p;
1361
1362 on = ospf6_neighbor_lookup(oh->router_id, oi);
1363 if (on == NULL) {
1364 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1365 zlog_debug("Neighbor not found, ignore");
1366 return;
1367 }
1368
1369 if (on->state != OSPF6_NEIGHBOR_EXCHANGE
1370 && on->state != OSPF6_NEIGHBOR_LOADING
1371 && on->state != OSPF6_NEIGHBOR_FULL) {
1372 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1373 zlog_debug("Neighbor state less than Exchange, ignore");
1374 return;
1375 }
1376
1377 lsupdate = (struct ospf6_lsupdate *)((caddr_t)oh
1378 + sizeof(struct ospf6_header));
718e3744 1379
43855e3d
CS		 1380 oi->ls_upd_in++;
1381
d62a17ae 1382 /* Process LSAs */
1383 for (p = (char *)((caddr_t)lsupdate + sizeof(struct ospf6_lsupdate));
1384 p < OSPF6_MESSAGE_END(oh)
1385 && p + OSPF6_LSA_SIZE(p) <= OSPF6_MESSAGE_END(oh);
1386 p += OSPF6_LSA_SIZE(p)) {
1387 ospf6_receive_lsa(on, (struct ospf6_lsa_header *)p);
1388 }
1389
1390 assert(p == OSPF6_MESSAGE_END(oh));
508e53e2 1391}
1392
d62a17ae 1393static void ospf6_lsack_recv(struct in6_addr *src, struct in6_addr *dst,
1394 struct ospf6_interface *oi,
1395 struct ospf6_header *oh)
508e53e2 1396{
d62a17ae 1397 struct ospf6_neighbor *on;
1398 char *p;
1399 struct ospf6_lsa *his, *mine;
1400 struct ospf6_lsdb *lsdb = NULL;
1401
1402 assert(oh->type == OSPF6_MESSAGE_TYPE_LSACK);
1403
1404 on = ospf6_neighbor_lookup(oh->router_id, oi);
1405 if (on == NULL) {
1406 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1407 zlog_debug("Neighbor not found, ignore");
1408 return;
1409 }
1410
1411 if (on->state != OSPF6_NEIGHBOR_EXCHANGE
1412 && on->state != OSPF6_NEIGHBOR_LOADING
1413 && on->state != OSPF6_NEIGHBOR_FULL) {
1414 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1415 zlog_debug("Neighbor state less than Exchange, ignore");
1416 return;
1417 }
1418
43855e3d
CS		 1419 oi->ls_ack_in++;
1420
d62a17ae 1421 for (p = (char *)((caddr_t)oh + sizeof(struct ospf6_header));
1422 p + sizeof(struct ospf6_lsa_header) <= OSPF6_MESSAGE_END(oh);
1423 p += sizeof(struct ospf6_lsa_header)) {
1424 his = ospf6_lsa_create_headeronly((struct ospf6_lsa_header *)p);
1425
1426 switch (OSPF6_LSA_SCOPE(his->header->type)) {
1427 case OSPF6_SCOPE_LINKLOCAL:
1428 lsdb = on->ospf6_if->lsdb;
1429 break;
1430 case OSPF6_SCOPE_AREA:
1431 lsdb = on->ospf6_if->area->lsdb;
1432 break;
1433 case OSPF6_SCOPE_AS:
1434 lsdb = on->ospf6_if->area->ospf6->lsdb;
1435 break;
1436 case OSPF6_SCOPE_RESERVED:
1437 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1438 zlog_debug("Ignoring LSA of reserved scope");
1439 ospf6_lsa_delete(his);
1440 continue;
1441 break;
1442 }
1443
1444 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1445 zlog_debug("%s acknowledged by %s", his->name,
1446 on->name);
1447
1448 /* Find database copy */
1449 mine = ospf6_lsdb_lookup(his->header->type, his->header->id,
1450 his->header->adv_router, lsdb);
1451 if (mine == NULL) {
1452 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1453 zlog_debug("No database copy");
1454 ospf6_lsa_delete(his);
1455 continue;
1456 }
1457
1458 /* Check if the LSA is on his retrans-list */
1459 mine = ospf6_lsdb_lookup(his->header->type, his->header->id,
1460 his->header->adv_router,
1461 on->retrans_list);
1462 if (mine == NULL) {
1463 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1464 zlog_debug("Not on %s's retrans-list",
1465 on->name);
1466 ospf6_lsa_delete(his);
1467 continue;
1468 }
1469
1470 if (ospf6_lsa_compare(his, mine) != 0) {
1471 /* Log this questionable acknowledgement,
1472 and examine the next one. */
1473 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1474 zlog_debug("Questionable acknowledgement");
1475 ospf6_lsa_delete(his);
1476 continue;
1477 }
1478
1479 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV))
1480 zlog_debug(
1481 "Acknowledged, remove from %s's retrans-list",
1482 on->name);
1483
1484 ospf6_decrement_retrans_count(mine);
1485 if (OSPF6_LSA_IS_MAXAGE(mine))
1486 ospf6_maxage_remove(on->ospf6_if->area->ospf6);
1487 ospf6_lsdb_remove(mine, on->retrans_list);
1488 ospf6_lsa_delete(his);
1489 }
1490
1491 assert(p == OSPF6_MESSAGE_END(oh));
508e53e2 1492}
1493
d7c0a89a
QY		 1494static uint8_t *recvbuf = NULL;
1495static uint8_t *sendbuf = NULL;
6ac29a51 1496static unsigned int iobuflen = 0;
3b4cd3a9 1497
d62a17ae 1498int ospf6_iobuf_size(unsigned int size)
3b4cd3a9 1499{
d7c0a89a 1500 uint8_t *recvnew, *sendnew;
d62a17ae 1501
1502 if (size <= iobuflen)
1503 return iobuflen;
1504
1505 recvnew = XMALLOC(MTYPE_OSPF6_MESSAGE, size);
1506 sendnew = XMALLOC(MTYPE_OSPF6_MESSAGE, size);
d62a17ae 1507
0a22ddfb
QY		 1508 XFREE(MTYPE_OSPF6_MESSAGE, recvbuf);
1509 XFREE(MTYPE_OSPF6_MESSAGE, sendbuf);
d62a17ae 1510 recvbuf = recvnew;
1511 sendbuf = sendnew;
1512 iobuflen = size;
1513
1514 return iobuflen;
3b4cd3a9 1515}
508e53e2 1516
d62a17ae 1517void ospf6_message_terminate(void)
ae2254aa 1518{
e1b36e13
QY		 1519 XFREE(MTYPE_OSPF6_MESSAGE, recvbuf);
1520 XFREE(MTYPE_OSPF6_MESSAGE, sendbuf);
d62a17ae 1521
1522 iobuflen = 0;
ae2254aa
TG		 1523}
1524
d62a17ae 1525int ospf6_receive(struct thread *thread)
508e53e2 1526{
d62a17ae 1527 int sockfd;
1528 unsigned int len;
1529 char srcname[64], dstname[64];
1530 struct in6_addr src, dst;
1531 ifindex_t ifindex;
1532 struct iovec iovector[2];
1533 struct ospf6_interface *oi;
1534 struct ospf6_header *oh;
7df1f362 1535 struct ospf6 *ospf6;
d62a17ae 1536
1537 /* add next read thread */
7df1f362 1538 ospf6 = THREAD_ARG(thread);
d62a17ae 1539 sockfd = THREAD_FD(thread);
7df1f362
K		 1540
1541 thread_add_read(master, ospf6_receive, ospf6, ospf6->fd,
1542 &ospf6->t_ospf6_receive);
d62a17ae 1543
1544 /* initialize */
1545 memset(&src, 0, sizeof(src));
1546 memset(&dst, 0, sizeof(dst));
1547 ifindex = 0;
1548 memset(recvbuf, 0, iobuflen);
1549 iovector[0].iov_base = recvbuf;
1550 iovector[0].iov_len = iobuflen;
1551 iovector[1].iov_base = NULL;
1552 iovector[1].iov_len = 0;
1553
1554 /* receive message */
7df1f362 1555 len = ospf6_recvmsg(&src, &dst, &ifindex, iovector, sockfd);
d62a17ae 1556 if (len > iobuflen) {
1c50c1c0 1557 flog_err(EC_LIB_DEVELOPMENT, "Excess message read");
d62a17ae 1558 return 0;
1559 }
1560
c5d28568 1561 oi = ospf6_interface_lookup_by_ifindex(ifindex, ospf6->vrf_id);
d62a17ae 1562 if (oi == NULL || oi->area == NULL
1563 || CHECK_FLAG(oi->flag, OSPF6_INTERFACE_DISABLE)) {
e4c42d65
DS		 1564 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1565 zlog_debug("Message received on disabled interface");
d62a17ae 1566 return 0;
1567 }
1568 if (CHECK_FLAG(oi->flag, OSPF6_INTERFACE_PASSIVE)) {
1569 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
1570 zlog_debug("%s: Ignore message on passive interface %s",
1571 __func__, oi->interface->name);
1572 return 0;
1573 }
1574
1575 oh = (struct ospf6_header *)recvbuf;
1576 if (ospf6_rxpacket_examin(oi, oh, len) != MSG_OK)
1577 return 0;
1578
1579 /* Being here means, that no sizing/alignment issues were detected in
1580 the input packet. This renders the additional checks performed below
1581 and also in the type-specific dispatching functions a dead code,
1582 which can be dismissed in a cleanup-focused review round later. */
1583
1584 /* Log */
1585 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, RECV)) {
1586 inet_ntop(AF_INET6, &src, srcname, sizeof(srcname));
1587 inet_ntop(AF_INET6, &dst, dstname, sizeof(dstname));
1588 zlog_debug("%s received on %s",
1589 lookup_msg(ospf6_message_type_str, oh->type, NULL),
1590 oi->interface->name);
1591 zlog_debug(" src: %s", srcname);
1592 zlog_debug(" dst: %s", dstname);
1593
1594 switch (oh->type) {
1595 case OSPF6_MESSAGE_TYPE_HELLO:
1596 ospf6_hello_print(oh);
1597 break;
1598 case OSPF6_MESSAGE_TYPE_DBDESC:
1599 ospf6_dbdesc_print(oh);
1600 break;
1601 case OSPF6_MESSAGE_TYPE_LSREQ:
1602 ospf6_lsreq_print(oh);
1603 break;
1604 case OSPF6_MESSAGE_TYPE_LSUPDATE:
1605 ospf6_lsupdate_print(oh);
1606 break;
1607 case OSPF6_MESSAGE_TYPE_LSACK:
1608 ospf6_lsack_print(oh);
1609 break;
1610 default:
1611 assert(0);
1612 }
1613 }
1614
1615 switch (oh->type) {
1616 case OSPF6_MESSAGE_TYPE_HELLO:
1617 ospf6_hello_recv(&src, &dst, oi, oh);
1618 break;
1619
1620 case OSPF6_MESSAGE_TYPE_DBDESC:
1621 ospf6_dbdesc_recv(&src, &dst, oi, oh);
1622 break;
1623
1624 case OSPF6_MESSAGE_TYPE_LSREQ:
1625 ospf6_lsreq_recv(&src, &dst, oi, oh);
1626 break;
1627
1628 case OSPF6_MESSAGE_TYPE_LSUPDATE:
1629 ospf6_lsupdate_recv(&src, &dst, oi, oh);
1630 break;
1631
1632 case OSPF6_MESSAGE_TYPE_LSACK:
1633 ospf6_lsack_recv(&src, &dst, oi, oh);
1634 break;
1635
1636 default:
1637 assert(0);
1638 }
1639
1640 return 0;
718e3744 1641}
1642
d62a17ae 1643static void ospf6_send(struct in6_addr *src, struct in6_addr *dst,
1644 struct ospf6_interface *oi, struct ospf6_header *oh)
718e3744 1645{
d62a17ae 1646 unsigned int len;
1647 char srcname[64], dstname[64];
1648 struct iovec iovector[2];
1649
1650 /* initialize */
1651 iovector[0].iov_base = (caddr_t)oh;
1652 iovector[0].iov_len = ntohs(oh->length);
1653 iovector[1].iov_base = NULL;
1654 iovector[1].iov_len = 0;
1655
1656 /* fill OSPF header */
1657 oh->version = OSPFV3_VERSION;
1658 /* message type must be set before */
1659 /* message length must be set before */
1660 oh->router_id = oi->area->ospf6->router_id;
1661 oh->area_id = oi->area->area_id;
1662 /* checksum is calculated by kernel */
1663 oh->instance_id = oi->instance_id;
1664 oh->reserved = 0;
1665
1666 /* Log */
1667 if (IS_OSPF6_DEBUG_MESSAGE(oh->type, SEND)) {
1668 inet_ntop(AF_INET6, dst, dstname, sizeof(dstname));
1669 if (src)
1670 inet_ntop(AF_INET6, src, srcname, sizeof(srcname));
1671 else
1672 memset(srcname, 0, sizeof(srcname));
1673 zlog_debug("%s send on %s",
1674 lookup_msg(ospf6_message_type_str, oh->type, NULL),
1675 oi->interface->name);
1676 zlog_debug(" src: %s", srcname);
1677 zlog_debug(" dst: %s", dstname);
1678
1679 switch (oh->type) {
1680 case OSPF6_MESSAGE_TYPE_HELLO:
1681 ospf6_hello_print(oh);
1682 break;
1683 case OSPF6_MESSAGE_TYPE_DBDESC:
1684 ospf6_dbdesc_print(oh);
1685 break;
1686 case OSPF6_MESSAGE_TYPE_LSREQ:
1687 ospf6_lsreq_print(oh);
1688 break;
1689 case OSPF6_MESSAGE_TYPE_LSUPDATE:
1690 ospf6_lsupdate_print(oh);
1691 break;
1692 case OSPF6_MESSAGE_TYPE_LSACK:
1693 ospf6_lsack_print(oh);
1694 break;
1695 default:
1696 zlog_debug("Unknown message");
1697 assert(0);
1698 break;
1699 }
1700 }
1701
1702 /* send message */
7df1f362
K		 1703 if (oi->area->ospf6->fd != -1) {
1704 len = ospf6_sendmsg(src, dst, &oi->interface->ifindex, iovector,
1705 oi->area->ospf6->fd);
1706 if (len != ntohs(oh->length))
1707 flog_err(EC_LIB_DEVELOPMENT,
1708 "Could not send entire message");
1709 }
718e3744 1710}
1711
d62a17ae 1712static uint32_t ospf6_packet_max(struct ospf6_interface *oi)
681b84e8 1713{
d62a17ae 1714 assert(oi->ifmtu > sizeof(struct ip6_hdr));
1715 return oi->ifmtu - (sizeof(struct ip6_hdr));
681b84e8
DT		 1716}
1717
d62a17ae 1718int ospf6_hello_send(struct thread *thread)
718e3744 1719{
d62a17ae 1720 struct ospf6_interface *oi;
1721 struct ospf6_header *oh;
1722 struct ospf6_hello *hello;
d7c0a89a 1723 uint8_t *p;
d62a17ae 1724 struct listnode *node, *nnode;
1725 struct ospf6_neighbor *on;
1726
1727 oi = (struct ospf6_interface *)THREAD_ARG(thread);
1728 oi->thread_send_hello = (struct thread *)NULL;
1729
1730 if (oi->state <= OSPF6_INTERFACE_DOWN) {
1731 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_HELLO, SEND))
1732 zlog_debug("Unable to send Hello on down interface %s",
1733 oi->interface->name);
1734 return 0;
1735 }
1736
1737 if (iobuflen == 0) {
1738 zlog_debug("Unable to send Hello on interface %s iobuflen is 0",
1739 oi->interface->name);
1740 return 0;
1741 }
1742
1743 /* set next thread */
1744 thread_add_timer(master, ospf6_hello_send, oi, oi->hello_interval,
1745 &oi->thread_send_hello);
1746
1747 memset(sendbuf, 0, iobuflen);
1748 oh = (struct ospf6_header *)sendbuf;
1749 hello = (struct ospf6_hello *)((caddr_t)oh
1750 + sizeof(struct ospf6_header));
1751
1752 hello->interface_id = htonl(oi->interface->ifindex);
1753 hello->priority = oi->priority;
1754 hello->options[0] = oi->area->options[0];
1755 hello->options[1] = oi->area->options[1];
1756 hello->options[2] = oi->area->options[2];
1757 hello->hello_interval = htons(oi->hello_interval);
1758 hello->dead_interval = htons(oi->dead_interval);
1759 hello->drouter = oi->drouter;
1760 hello->bdrouter = oi->bdrouter;
1761
d7c0a89a 1762 p = (uint8_t *)((caddr_t)hello + sizeof(struct ospf6_hello));
d62a17ae 1763
1764 for (ALL_LIST_ELEMENTS(oi->neighbor_list, node, nnode, on)) {
1765 if (on->state < OSPF6_NEIGHBOR_INIT)
1766 continue;
1767
d7c0a89a 1768 if (p - sendbuf + sizeof(uint32_t) > ospf6_packet_max(oi)) {
d62a17ae 1769 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_HELLO,
1770 SEND))
1771 zlog_debug(
1772 "sending Hello message: exceeds I/F MTU");
1773 break;
1774 }
1775
d7c0a89a
QY		 1776 memcpy(p, &on->router_id, sizeof(uint32_t));
1777 p += sizeof(uint32_t);
d62a17ae 1778 }
1779
1780 oh->type = OSPF6_MESSAGE_TYPE_HELLO;
1781 oh->length = htons(p - sendbuf);
1782
43855e3d
CS		 1783 oi->hello_out++;
1784
d62a17ae 1785 ospf6_send(oi->linklocal_addr, &allspfrouters6, oi, oh);
1786 return 0;
718e3744 1787}
1788
d62a17ae 1789int ospf6_dbdesc_send(struct thread *thread)
718e3744 1790{
d62a17ae 1791 struct ospf6_neighbor *on;
1792 struct ospf6_header *oh;
1793 struct ospf6_dbdesc *dbdesc;
d7c0a89a 1794 uint8_t *p;
d62a17ae 1795 struct ospf6_lsa *lsa;
1796 struct in6_addr *dst;
1797
1798 on = (struct ospf6_neighbor *)THREAD_ARG(thread);
1799 on->thread_send_dbdesc = (struct thread *)NULL;
1800
1801 if (on->state < OSPF6_NEIGHBOR_EXSTART) {
1802 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_DBDESC, SEND))
1803 zlog_debug(
1804 "Quit to send DbDesc to neighbor %s state %s",
1805 on->name, ospf6_neighbor_state_str[on->state]);
1806 return 0;
1807 }
1808
1809 /* set next thread if master */
1810 if (CHECK_FLAG(on->dbdesc_bits, OSPF6_DBDESC_MSBIT))
1811 thread_add_timer(master, ospf6_dbdesc_send, on,
1812 on->ospf6_if->rxmt_interval,
1813 &on->thread_send_dbdesc);
1814
1815 memset(sendbuf, 0, iobuflen);
1816 oh = (struct ospf6_header *)sendbuf;
1817 dbdesc = (struct ospf6_dbdesc *)((caddr_t)oh
1818 + sizeof(struct ospf6_header));
1819
1820 /* if this is initial one, initialize sequence number for DbDesc */
1821 if (CHECK_FLAG(on->dbdesc_bits, OSPF6_DBDESC_IBIT)
1822 && (on->dbdesc_seqnum == 0)) {
1823 on->dbdesc_seqnum = monotime(NULL);
1824 }
1825
1826 dbdesc->options[0] = on->ospf6_if->area->options[0];
1827 dbdesc->options[1] = on->ospf6_if->area->options[1];
1828 dbdesc->options[2] = on->ospf6_if->area->options[2];
1829 dbdesc->ifmtu = htons(on->ospf6_if->ifmtu);
1830 dbdesc->bits = on->dbdesc_bits;
1831 dbdesc->seqnum = htonl(on->dbdesc_seqnum);
1832
1833 /* if this is not initial one, set LSA headers in dbdesc */
d7c0a89a 1834 p = (uint8_t *)((caddr_t)dbdesc + sizeof(struct ospf6_dbdesc));
d62a17ae 1835 if (!CHECK_FLAG(on->dbdesc_bits, OSPF6_DBDESC_IBIT)) {
1836 for (ALL_LSDB(on->dbdesc_list, lsa)) {
1837 ospf6_lsa_age_update_to_send(lsa,
1838 on->ospf6_if->transdelay);
1839
1840 /* MTU check */
1841 if (p - sendbuf + sizeof(struct ospf6_lsa_header)
1842 > ospf6_packet_max(on->ospf6_if)) {
1843 ospf6_lsdb_lsa_unlock(lsa);
1844 break;
1845 }
1846 memcpy(p, lsa->header, sizeof(struct ospf6_lsa_header));
1847 p += sizeof(struct ospf6_lsa_header);
1848 }
1849 }
1850
1851 oh->type = OSPF6_MESSAGE_TYPE_DBDESC;
1852 oh->length = htons(p - sendbuf);
1853
1854
1855 if (on->ospf6_if->state == OSPF6_INTERFACE_POINTTOPOINT)
1856 dst = &allspfrouters6;
1857 else
1858 dst = &on->linklocal_addr;
1859
43855e3d
CS		 1860 on->ospf6_if->db_desc_out++;
1861
d62a17ae 1862 ospf6_send(on->ospf6_if->linklocal_addr, dst, on->ospf6_if, oh);
1863
1864 return 0;
718e3744 1865}
1866
d62a17ae 1867int ospf6_dbdesc_send_newone(struct thread *thread)
718e3744 1868{
d62a17ae 1869 struct ospf6_neighbor *on;
e2e60c48 1870 struct ospf6_lsa *lsa;
d62a17ae 1871 unsigned int size = 0;
1872
1873 on = (struct ospf6_neighbor *)THREAD_ARG(thread);
1874 ospf6_lsdb_remove_all(on->dbdesc_list);
1875
1876 /* move LSAs from summary_list to dbdesc_list (within neighbor
1877 structure)
1878 so that ospf6_send_dbdesc () can send those LSAs */
1879 size = sizeof(struct ospf6_lsa_header) + sizeof(struct ospf6_dbdesc);
e2e60c48 1880 for (ALL_LSDB(on->summary_list, lsa)) {
d62a17ae 1881 if (size + sizeof(struct ospf6_lsa_header)
1882 > ospf6_packet_max(on->ospf6_if)) {
1883 ospf6_lsdb_lsa_unlock(lsa);
1884 break;
1885 }
1886
1887 ospf6_lsdb_add(ospf6_lsa_copy(lsa), on->dbdesc_list);
1888 ospf6_lsdb_remove(lsa, on->summary_list);
1889 size += sizeof(struct ospf6_lsa_header);
1890 }
1891
1892 if (on->summary_list->count == 0)
1893 UNSET_FLAG(on->dbdesc_bits, OSPF6_DBDESC_MBIT);
1894
1895 /* If slave, More bit check must be done here */
1896 if (!CHECK_FLAG(on->dbdesc_bits, OSPF6_DBDESC_MSBIT) && /* Slave */
1897 !CHECK_FLAG(on->dbdesc_last.bits, OSPF6_DBDESC_MBIT)
1898 && !CHECK_FLAG(on->dbdesc_bits, OSPF6_DBDESC_MBIT))
1899 thread_add_event(master, exchange_done, on, 0, NULL);
1900
1901 thread_execute(master, ospf6_dbdesc_send, on, 0);
1902 return 0;
508e53e2 1903}
718e3744 1904
d62a17ae 1905int ospf6_lsreq_send(struct thread *thread)
508e53e2 1906{
d62a17ae 1907 struct ospf6_neighbor *on;
1908 struct ospf6_header *oh;
1909 struct ospf6_lsreq_entry *e;
d7c0a89a 1910 uint8_t *p;
d62a17ae 1911 struct ospf6_lsa *lsa, *last_req;
1912
1913 on = (struct ospf6_neighbor *)THREAD_ARG(thread);
1914 on->thread_send_lsreq = (struct thread *)NULL;
1915
1916 /* LSReq will be sent only in ExStart or Loading */
1917 if (on->state != OSPF6_NEIGHBOR_EXCHANGE
1918 && on->state != OSPF6_NEIGHBOR_LOADING) {
1919 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_LSREQ, SEND))
1920 zlog_debug("Quit to send LSReq to neighbor %s state %s",
1921 on->name,
1922 ospf6_neighbor_state_str[on->state]);
1923 return 0;
1924 }
1925
1926 /* schedule loading_done if request list is empty */
1927 if (on->request_list->count == 0) {
1928 thread_add_event(master, loading_done, on, 0, NULL);
1929 return 0;
1930 }
1931
1932 memset(sendbuf, 0, iobuflen);
1933 oh = (struct ospf6_header *)sendbuf;
1934 last_req = NULL;
1935
1936 /* set Request entries in lsreq */
d7c0a89a 1937 p = (uint8_t *)((caddr_t)oh + sizeof(struct ospf6_header));
d62a17ae 1938 for (ALL_LSDB(on->request_list, lsa)) {
1939 /* MTU check */
1940 if (p - sendbuf + sizeof(struct ospf6_lsreq_entry)
1941 > ospf6_packet_max(on->ospf6_if)) {
1942 ospf6_lsdb_lsa_unlock(lsa);
1943 break;
1944 }
1945
1946 e = (struct ospf6_lsreq_entry *)p;
1947 e->type = lsa->header->type;
1948 e->id = lsa->header->id;
1949 e->adv_router = lsa->header->adv_router;
1950 p += sizeof(struct ospf6_lsreq_entry);
1951 last_req = lsa;
1952 }
1953
1954 if (last_req != NULL) {
744ba569
DS		 1955 if (on->last_ls_req != NULL)
1956 on->last_ls_req = ospf6_lsa_unlock(on->last_ls_req);
1957
d62a17ae 1958 ospf6_lsa_lock(last_req);
1959 on->last_ls_req = last_req;
1960 }
1961
1962 oh->type = OSPF6_MESSAGE_TYPE_LSREQ;
1963 oh->length = htons(p - sendbuf);
1964
43855e3d
CS		 1965 on->ospf6_if->ls_req_out++;
1966
d62a17ae 1967 if (on->ospf6_if->state == OSPF6_INTERFACE_POINTTOPOINT)
1968 ospf6_send(on->ospf6_if->linklocal_addr, &allspfrouters6,
1969 on->ospf6_if, oh);
1970 else
1971 ospf6_send(on->ospf6_if->linklocal_addr, &on->linklocal_addr,
1972 on->ospf6_if, oh);
1973
1974 /* set next thread */
1975 if (on->request_list->count != 0) {
1976 on->thread_send_lsreq = NULL;
1977 thread_add_timer(master, ospf6_lsreq_send, on,
1978 on->ospf6_if->rxmt_interval,
1979 &on->thread_send_lsreq);
1980 }
1981
1982 return 0;
718e3744 1983}
1984
1ba43456
CS		 1985static void ospf6_send_lsupdate(struct ospf6_neighbor *on,
1986 struct ospf6_interface *oi,
1987 struct ospf6_header *oh)
1988{
1989
1990 if (on) {
43855e3d
CS		 1991 on->ospf6_if->ls_upd_out++;
1992
996c9314
LB		 1993 if ((on->ospf6_if->state == OSPF6_INTERFACE_POINTTOPOINT)
1994 || (on->ospf6_if->state == OSPF6_INTERFACE_DR)
1995 || (on->ospf6_if->state == OSPF6_INTERFACE_BDR)) {
1ba43456
CS		 1996 ospf6_send(on->ospf6_if->linklocal_addr,
1997 &allspfrouters6, on->ospf6_if, oh);
1998 } else {
1999 ospf6_send(on->ospf6_if->linklocal_addr,
2000 &on->linklocal_addr, on->ospf6_if, oh);
2001 }
2002 } else if (oi) {
43855e3d
CS		 2003
2004 oi->ls_upd_out++;
2005
996c9314
LB		 2006 if ((oi->state == OSPF6_INTERFACE_POINTTOPOINT)
2007 || (oi->state == OSPF6_INTERFACE_DR)
2008 || (oi->state == OSPF6_INTERFACE_BDR)) {
1ba43456
CS		 2009 ospf6_send(oi->linklocal_addr, &allspfrouters6, oi, oh);
2010 } else {
2011 ospf6_send(oi->linklocal_addr, &alldrouters6, oi, oh);
2012 }
2013 }
2014}
2015
d62a17ae 2016int ospf6_lsupdate_send_neighbor(struct thread *thread)
718e3744 2017{
d62a17ae 2018 struct ospf6_neighbor *on;
2019 struct ospf6_header *oh;
2020 struct ospf6_lsupdate *lsupdate;
d7c0a89a 2021 uint8_t *p;
d62a17ae 2022 int lsa_cnt;
e2e60c48 2023 struct ospf6_lsa *lsa;
d62a17ae 2024
2025 on = (struct ospf6_neighbor *)THREAD_ARG(thread);
2026 on->thread_send_lsupdate = (struct thread *)NULL;
2027
2028 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_LSUPDATE, SEND))
2029 zlog_debug("LSUpdate to neighbor %s", on->name);
2030
2031 if (on->state < OSPF6_NEIGHBOR_EXCHANGE) {
2032 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_LSUPDATE, SEND))
2033 zlog_debug("Quit to send (neighbor state %s)",
2034 ospf6_neighbor_state_str[on->state]);
2035 return 0;
2036 }
2037
2038 memset(sendbuf, 0, iobuflen);
2039 oh = (struct ospf6_header *)sendbuf;
2040 lsupdate = (struct ospf6_lsupdate *)((caddr_t)oh
2041 + sizeof(struct ospf6_header));
2042
d7c0a89a 2043 p = (uint8_t *)((caddr_t)lsupdate + sizeof(struct ospf6_lsupdate));
d62a17ae 2044 lsa_cnt = 0;
2045
2046 /* lsupdate_list lists those LSA which doesn't need to be
2047 retransmitted. remove those from the list */
e2e60c48 2048 for (ALL_LSDB(on->lsupdate_list, lsa)) {
d62a17ae 2049 /* MTU check */
2050 if ((p - sendbuf + (unsigned int)OSPF6_LSA_SIZE(lsa->header))
2051 > ospf6_packet_max(on->ospf6_if)) {
1ba43456
CS		 2052 if (lsa_cnt) {
2053 oh->type = OSPF6_MESSAGE_TYPE_LSUPDATE;
2054 oh->length = htons(p - sendbuf);
2055 lsupdate->lsa_number = htonl(lsa_cnt);
2056
2057 ospf6_send_lsupdate(on, NULL, oh);
2058
2059 memset(sendbuf, 0, iobuflen);
2060 oh = (struct ospf6_header *)sendbuf;
996c9314
LB		 2061 lsupdate = (struct ospf6_lsupdate
2062 *)((caddr_t)oh
2063 + sizeof(struct
2064 ospf6_header));
1ba43456 2065
d7c0a89a
QY		 2066 p = (uint8_t *)((caddr_t)lsupdate
2067 + sizeof(struct
2068 ospf6_lsupdate));
1ba43456
CS		 2069 lsa_cnt = 0;
2070 }
d62a17ae 2071 }
2072
2073 ospf6_lsa_age_update_to_send(lsa, on->ospf6_if->transdelay);
2074 memcpy(p, lsa->header, OSPF6_LSA_SIZE(lsa->header));
2075 p += OSPF6_LSA_SIZE(lsa->header);
2076 lsa_cnt++;
2077
e2e60c48 2078 assert(lsa->lock == 2);
d62a17ae 2079 ospf6_lsdb_remove(lsa, on->lsupdate_list);
2080 }
2081
2082 if (lsa_cnt) {
2083 oh->type = OSPF6_MESSAGE_TYPE_LSUPDATE;
2084 oh->length = htons(p - sendbuf);
2085 lsupdate->lsa_number = htonl(lsa_cnt);
1ba43456 2086 ospf6_send_lsupdate(on, NULL, oh);
d62a17ae 2087 }
2088
2089 /* The addresses used for retransmissions are different from those sent
2090 the
2091 first time and so we need to separate them here.
2092 */
2093 memset(sendbuf, 0, iobuflen);
2094 oh = (struct ospf6_header *)sendbuf;
2095 lsupdate = (struct ospf6_lsupdate *)((caddr_t)oh
2096 + sizeof(struct ospf6_header));
d7c0a89a 2097 p = (uint8_t *)((caddr_t)lsupdate + sizeof(struct ospf6_lsupdate));
d62a17ae 2098 lsa_cnt = 0;
2099
2100 for (ALL_LSDB(on->retrans_list, lsa)) {
2101 /* MTU check */
2102 if ((p - sendbuf + (unsigned int)OSPF6_LSA_SIZE(lsa->header))
2103 > ospf6_packet_max(on->ospf6_if)) {
1ba43456
CS		 2104 if (lsa_cnt) {
2105 oh->type = OSPF6_MESSAGE_TYPE_LSUPDATE;
2106 oh->length = htons(p - sendbuf);
2107 lsupdate->lsa_number = htonl(lsa_cnt);
2108
996c9314
LB		 2109 if (on->ospf6_if->state
2110 == OSPF6_INTERFACE_POINTTOPOINT) {
1ba43456
CS		 2111 ospf6_send(on->ospf6_if->linklocal_addr,
2112 &allspfrouters6,
2113 on->ospf6_if, oh);
2114 } else {
2115 ospf6_send(on->ospf6_if->linklocal_addr,
2116 &on->linklocal_addr,
2117 on->ospf6_if, oh);
2118 }
2119
2120 memset(sendbuf, 0, iobuflen);
2121 oh = (struct ospf6_header *)sendbuf;
996c9314
LB		 2122 lsupdate = (struct ospf6_lsupdate
2123 *)((caddr_t)oh
2124 + sizeof(struct
2125 ospf6_header));
d7c0a89a
QY		 2126 p = (uint8_t *)((caddr_t)lsupdate
2127 + sizeof(struct
2128 ospf6_lsupdate));
1ba43456
CS		 2129 lsa_cnt = 0;
2130 }
d62a17ae 2131 }
2132
2133 ospf6_lsa_age_update_to_send(lsa, on->ospf6_if->transdelay);
2134 memcpy(p, lsa->header, OSPF6_LSA_SIZE(lsa->header));
2135 p += OSPF6_LSA_SIZE(lsa->header);
2136 lsa_cnt++;
2137 }
2138
2139 if (lsa_cnt) {
2140 oh->type = OSPF6_MESSAGE_TYPE_LSUPDATE;
2141 oh->length = htons(p - sendbuf);
2142 lsupdate->lsa_number = htonl(lsa_cnt);
2143
2144 if (on->ospf6_if->state == OSPF6_INTERFACE_POINTTOPOINT)
2145 ospf6_send(on->ospf6_if->linklocal_addr,
2146 &allspfrouters6, on->ospf6_if, oh);
2147 else
2148 ospf6_send(on->ospf6_if->linklocal_addr,
2149 &on->linklocal_addr, on->ospf6_if, oh);
2150 }
2151
2152 if (on->lsupdate_list->count != 0) {
2153 on->thread_send_lsupdate = NULL;
2154 thread_add_event(master, ospf6_lsupdate_send_neighbor, on, 0,
2155 &on->thread_send_lsupdate);
2156 } else if (on->retrans_list->count != 0) {
2157 on->thread_send_lsupdate = NULL;
2158 thread_add_timer(master, ospf6_lsupdate_send_neighbor, on,
2159 on->ospf6_if->rxmt_interval,
2160 &on->thread_send_lsupdate);
2161 }
2162 return 0;
718e3744 2163}
2164
76249532
CS		 2165int ospf6_lsupdate_send_neighbor_now(struct ospf6_neighbor *on,
2166 struct ospf6_lsa *lsa)
2167{
2168 struct ospf6_header *oh;
2169 struct ospf6_lsupdate *lsupdate;
d7c0a89a 2170 uint8_t *p;
76249532
CS		 2171 int lsa_cnt = 0;
2172
2173 memset(sendbuf, 0, iobuflen);
2174 oh = (struct ospf6_header *)sendbuf;
2175 lsupdate = (struct ospf6_lsupdate *)((caddr_t)oh
2176 + sizeof(struct ospf6_header));
2177
d7c0a89a 2178 p = (uint8_t *)((caddr_t)lsupdate + sizeof(struct ospf6_lsupdate));
76249532
CS		 2179 ospf6_lsa_age_update_to_send(lsa, on->ospf6_if->transdelay);
2180 memcpy(p, lsa->header, OSPF6_LSA_SIZE(lsa->header));
2181 p += OSPF6_LSA_SIZE(lsa->header);
2182 lsa_cnt++;
2183
2184 oh->type = OSPF6_MESSAGE_TYPE_LSUPDATE;
2185 oh->length = htons(p - sendbuf);
2186 lsupdate->lsa_number = htonl(lsa_cnt);
2187
996c9314
LB		 2188 if (IS_OSPF6_DEBUG_FLOODING
2189 || IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_LSUPDATE, SEND))
15569c58
DA		 2190 zlog_debug("%s: Send lsupdate with lsa %s (age %u)", __func__,
2191 lsa->name, ntohs(lsa->header->age));
76249532
CS		 2192
2193 ospf6_send_lsupdate(on, NULL, oh);
2194
2195 return 0;
2196}
2197
d62a17ae 2198int ospf6_lsupdate_send_interface(struct thread *thread)
718e3744 2199{
d62a17ae 2200 struct ospf6_interface *oi;
2201 struct ospf6_header *oh;
2202 struct ospf6_lsupdate *lsupdate;
d7c0a89a 2203 uint8_t *p;
d62a17ae 2204 int lsa_cnt;
e2e60c48 2205 struct ospf6_lsa *lsa;
d62a17ae 2206
2207 oi = (struct ospf6_interface *)THREAD_ARG(thread);
2208 oi->thread_send_lsupdate = (struct thread *)NULL;
2209
2210 if (oi->state <= OSPF6_INTERFACE_WAITING) {
2211 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_LSUPDATE, SEND))
2212 zlog_debug(
2213 "Quit to send LSUpdate to interface %s state %s",
2214 oi->interface->name,
2215 ospf6_interface_state_str[oi->state]);
2216 return 0;
2217 }
2218
2219 /* if we have nothing to send, return */
2220 if (oi->lsupdate_list->count == 0)
2221 return 0;
2222
2223 memset(sendbuf, 0, iobuflen);
2224 oh = (struct ospf6_header *)sendbuf;
2225 lsupdate = (struct ospf6_lsupdate *)((caddr_t)oh
2226 + sizeof(struct ospf6_header));
2227
d7c0a89a 2228 p = (uint8_t *)((caddr_t)lsupdate + sizeof(struct ospf6_lsupdate));
d62a17ae 2229 lsa_cnt = 0;
2230
e2e60c48 2231 for (ALL_LSDB(oi->lsupdate_list, lsa)) {
d62a17ae 2232 /* MTU check */
2233 if ((p - sendbuf + ((unsigned int)OSPF6_LSA_SIZE(lsa->header)))
2234 > ospf6_packet_max(oi)) {
1ba43456
CS		 2235 if (lsa_cnt) {
2236 oh->type = OSPF6_MESSAGE_TYPE_LSUPDATE;
2237 oh->length = htons(p - sendbuf);
2238 lsupdate->lsa_number = htonl(lsa_cnt);
2239
2240 ospf6_send_lsupdate(NULL, oi, oh);
43855e3d 2241 if (IS_OSPF6_DEBUG_MESSAGE(
996c9314 2242 OSPF6_MESSAGE_TYPE_LSUPDATE, SEND))
43855e3d 2243 zlog_debug("%s: LSUpdate length %d",
15569c58 2244 __func__, ntohs(oh->length));
1ba43456
CS		 2245
2246 memset(sendbuf, 0, iobuflen);
2247 oh = (struct ospf6_header *)sendbuf;
996c9314
LB		 2248 lsupdate = (struct ospf6_lsupdate
2249 *)((caddr_t)oh
2250 + sizeof(struct
2251 ospf6_header));
1ba43456 2252
d7c0a89a
QY		 2253 p = (uint8_t *)((caddr_t)lsupdate
2254 + sizeof(struct
2255 ospf6_lsupdate));
1ba43456
CS		 2256 lsa_cnt = 0;
2257 }
d62a17ae 2258 }
2259
2260 ospf6_lsa_age_update_to_send(lsa, oi->transdelay);
2261 memcpy(p, lsa->header, OSPF6_LSA_SIZE(lsa->header));
2262 p += OSPF6_LSA_SIZE(lsa->header);
2263 lsa_cnt++;
2264
e2e60c48 2265 assert(lsa->lock == 2);
d62a17ae 2266 ospf6_lsdb_remove(lsa, oi->lsupdate_list);
2267 }
2268
2269 if (lsa_cnt) {
d62a17ae 2270 oh->type = OSPF6_MESSAGE_TYPE_LSUPDATE;
2271 oh->length = htons(p - sendbuf);
1ba43456 2272 lsupdate->lsa_number = htonl(lsa_cnt);
d62a17ae 2273
1ba43456 2274 ospf6_send_lsupdate(NULL, oi, oh);
d62a17ae 2275 }
2276
2277 if (oi->lsupdate_list->count > 0) {
2278 oi->thread_send_lsupdate = NULL;
2279 thread_add_event(master, ospf6_lsupdate_send_interface, oi, 0,
2280 &oi->thread_send_lsupdate);
2281 }
2282
2283 return 0;
718e3744 2284}
2285
d62a17ae 2286int ospf6_lsack_send_neighbor(struct thread *thread)
718e3744 2287{
d62a17ae 2288 struct ospf6_neighbor *on;
2289 struct ospf6_header *oh;
d7c0a89a 2290 uint8_t *p;
e2e60c48 2291 struct ospf6_lsa *lsa;
d62a17ae 2292 int lsa_cnt = 0;
2293
2294 on = (struct ospf6_neighbor *)THREAD_ARG(thread);
2295 on->thread_send_lsack = (struct thread *)NULL;
2296
2297 if (on->state < OSPF6_NEIGHBOR_EXCHANGE) {
2298 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_LSACK, SEND))
2299 zlog_debug("Quit to send LSAck to neighbor %s state %s",
2300 on->name,
2301 ospf6_neighbor_state_str[on->state]);
2302 return 0;
2303 }
2304
2305 /* if we have nothing to send, return */
2306 if (on->lsack_list->count == 0)
2307 return 0;
2308
2309 memset(sendbuf, 0, iobuflen);
2310 oh = (struct ospf6_header *)sendbuf;
2311
d7c0a89a 2312 p = (uint8_t *)((caddr_t)oh + sizeof(struct ospf6_header));
d62a17ae 2313
e2e60c48 2314 for (ALL_LSDB(on->lsack_list, lsa)) {
d62a17ae 2315 /* MTU check */
2316 if (p - sendbuf + sizeof(struct ospf6_lsa_header)
2317 > ospf6_packet_max(on->ospf6_if)) {
2318 /* if we run out of packet size/space here,
2319 better to try again soon. */
1ba43456
CS		 2320 if (lsa_cnt) {
2321 oh->type = OSPF6_MESSAGE_TYPE_LSACK;
2322 oh->length = htons(p - sendbuf);
2323
43855e3d
CS		 2324 on->ospf6_if->ls_ack_out++;
2325
1ba43456 2326 ospf6_send(on->ospf6_if->linklocal_addr,
996c9314
LB		 2327 &on->linklocal_addr, on->ospf6_if,
2328 oh);
1ba43456
CS		 2329
2330 memset(sendbuf, 0, iobuflen);
2331 oh = (struct ospf6_header *)sendbuf;
d7c0a89a
QY		 2332 p = (uint8_t *)((caddr_t)oh
2333 + sizeof(struct ospf6_header));
1ba43456
CS		 2334 lsa_cnt = 0;
2335 }
d62a17ae 2336 }
2337
2338 ospf6_lsa_age_update_to_send(lsa, on->ospf6_if->transdelay);
2339 memcpy(p, lsa->header, sizeof(struct ospf6_lsa_header));
2340 p += sizeof(struct ospf6_lsa_header);
2341
e2e60c48 2342 assert(lsa->lock == 2);
d62a17ae 2343 ospf6_lsdb_remove(lsa, on->lsack_list);
2344 lsa_cnt++;
2345 }
2346
2347 if (lsa_cnt) {
2348 oh->type = OSPF6_MESSAGE_TYPE_LSACK;
2349 oh->length = htons(p - sendbuf);
2350
43855e3d
CS		 2351 on->ospf6_if->ls_ack_out++;
2352
d62a17ae 2353 ospf6_send(on->ospf6_if->linklocal_addr, &on->linklocal_addr,
2354 on->ospf6_if, oh);
2355 }
2356
2357 if (on->lsack_list->count > 0)
2358 thread_add_event(master, ospf6_lsack_send_neighbor, on, 0,
2359 &on->thread_send_lsack);
2360
2361 return 0;
718e3744 2362}
2363
d62a17ae 2364int ospf6_lsack_send_interface(struct thread *thread)
718e3744 2365{
d62a17ae 2366 struct ospf6_interface *oi;
2367 struct ospf6_header *oh;
d7c0a89a 2368 uint8_t *p;
e2e60c48 2369 struct ospf6_lsa *lsa;
d62a17ae 2370 int lsa_cnt = 0;
2371
2372 oi = (struct ospf6_interface *)THREAD_ARG(thread);
2373 oi->thread_send_lsack = (struct thread *)NULL;
2374
2375 if (oi->state <= OSPF6_INTERFACE_WAITING) {
2376 if (IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_LSACK, SEND))
2377 zlog_debug(
2378 "Quit to send LSAck to interface %s state %s",
2379 oi->interface->name,
2380 ospf6_interface_state_str[oi->state]);
2381 return 0;
2382 }
2383
2384 /* if we have nothing to send, return */
2385 if (oi->lsack_list->count == 0)
2386 return 0;
2387
2388 memset(sendbuf, 0, iobuflen);
2389 oh = (struct ospf6_header *)sendbuf;
2390
d7c0a89a 2391 p = (uint8_t *)((caddr_t)oh + sizeof(struct ospf6_header));
d62a17ae 2392
e2e60c48 2393 for (ALL_LSDB(oi->lsack_list, lsa)) {
d62a17ae 2394 /* MTU check */
2395 if (p - sendbuf + sizeof(struct ospf6_lsa_header)
2396 > ospf6_packet_max(oi)) {
2397 /* if we run out of packet size/space here,
2398 better to try again soon. */
2399 THREAD_OFF(oi->thread_send_lsack);
2400 thread_add_event(master, ospf6_lsack_send_interface, oi,
2401 0, &oi->thread_send_lsack);
2402
2403 ospf6_lsdb_lsa_unlock(lsa);
2404 break;
2405 }
2406
2407 ospf6_lsa_age_update_to_send(lsa, oi->transdelay);
2408 memcpy(p, lsa->header, sizeof(struct ospf6_lsa_header));
2409 p += sizeof(struct ospf6_lsa_header);
2410
e2e60c48 2411 assert(lsa->lock == 2);
d62a17ae 2412 ospf6_lsdb_remove(lsa, oi->lsack_list);
2413 lsa_cnt++;
2414 }
2415
2416 if (lsa_cnt) {
2417 oh->type = OSPF6_MESSAGE_TYPE_LSACK;
2418 oh->length = htons(p - sendbuf);
2419
2420 if ((oi->state == OSPF6_INTERFACE_POINTTOPOINT)
2421 || (oi->state == OSPF6_INTERFACE_DR)
2422 || (oi->state == OSPF6_INTERFACE_BDR))
2423 ospf6_send(oi->linklocal_addr, &allspfrouters6, oi, oh);
2424 else
2425 ospf6_send(oi->linklocal_addr, &alldrouters6, oi, oh);
2426 }
2427
2428 if (oi->lsack_list->count > 0)
2429 thread_add_event(master, ospf6_lsack_send_interface, oi, 0,
2430 &oi->thread_send_lsack);
2431
2432 return 0;
718e3744 2433}
2434
6b0655a2 2435
508e53e2 2436/* Commands */
2437DEFUN (debug_ospf6_message,
2438 debug_ospf6_message_cmd,
1d68dbfe 2439 "debug ospf6 message <unknown|hello|dbdesc|lsreq|lsupdate|lsack|all> [<send|recv>]",
508e53e2 2440 DEBUG_STR
2441 OSPF6_STR
2442 "Debug OSPFv3 message\n"
2443 "Debug Unknown message\n"
2444 "Debug Hello message\n"
2445 "Debug Database Description message\n"
2446 "Debug Link State Request message\n"
2447 "Debug Link State Update message\n"
2448 "Debug Link State Acknowledgement message\n"
2449 "Debug All message\n"
1d68dbfe
DW		 2450 "Debug only sending message\n"
2451 "Debug only receiving message\n")
718e3744 2452{
d62a17ae 2453 int idx_packet = 3;
2454 int idx_send_recv = 4;
2455 unsigned char level = 0;
2456 int type = 0;
2457 int i;
2458
2459 /* check type */
2460 if (!strncmp(argv[idx_packet]->arg, "u", 1))
2461 type = OSPF6_MESSAGE_TYPE_UNKNOWN;
2462 else if (!strncmp(argv[idx_packet]->arg, "h", 1))
2463 type = OSPF6_MESSAGE_TYPE_HELLO;
2464 else if (!strncmp(argv[idx_packet]->arg, "d", 1))
2465 type = OSPF6_MESSAGE_TYPE_DBDESC;
2466 else if (!strncmp(argv[idx_packet]->arg, "lsr", 3))
2467 type = OSPF6_MESSAGE_TYPE_LSREQ;
2468 else if (!strncmp(argv[idx_packet]->arg, "lsu", 3))
2469 type = OSPF6_MESSAGE_TYPE_LSUPDATE;
2470 else if (!strncmp(argv[idx_packet]->arg, "lsa", 3))
2471 type = OSPF6_MESSAGE_TYPE_LSACK;
2472 else if (!strncmp(argv[idx_packet]->arg, "a", 1))
2473 type = OSPF6_MESSAGE_TYPE_ALL;
2474
2475 if (argc == 4)
2476 level = OSPF6_DEBUG_MESSAGE_SEND | OSPF6_DEBUG_MESSAGE_RECV;
2477 else if (!strncmp(argv[idx_send_recv]->arg, "s", 1))
2478 level = OSPF6_DEBUG_MESSAGE_SEND;
2479 else if (!strncmp(argv[idx_send_recv]->arg, "r", 1))
2480 level = OSPF6_DEBUG_MESSAGE_RECV;
2481
2482 if (type == OSPF6_MESSAGE_TYPE_ALL) {
2483 for (i = 0; i < 6; i++)
2484 OSPF6_DEBUG_MESSAGE_ON(i, level);
2485 } else
2486 OSPF6_DEBUG_MESSAGE_ON(type, level);
2487
2488 return CMD_SUCCESS;
718e3744 2489}
2490
508e53e2 2491DEFUN (no_debug_ospf6_message,
2492 no_debug_ospf6_message_cmd,
1d68dbfe 2493 "no debug ospf6 message <unknown|hello|dbdesc|lsreq|lsupdate|lsack|all> [<send|recv>]",
508e53e2 2494 NO_STR
2495 DEBUG_STR
2496 OSPF6_STR
2497 "Debug OSPFv3 message\n"
2498 "Debug Unknown message\n"
2499 "Debug Hello message\n"
2500 "Debug Database Description message\n"
2501 "Debug Link State Request message\n"
2502 "Debug Link State Update message\n"
2503 "Debug Link State Acknowledgement message\n"
2504 "Debug All message\n"
1d68dbfe
DW		 2505 "Debug only sending message\n"
2506 "Debug only receiving message\n")
508e53e2 2507{
d62a17ae 2508 int idx_packet = 4;
2509 int idx_send_recv = 5;
2510 unsigned char level = 0;
2511 int type = 0;
2512 int i;
2513
2514 /* check type */
2515 if (!strncmp(argv[idx_packet]->arg, "u", 1))
2516 type = OSPF6_MESSAGE_TYPE_UNKNOWN;
2517 else if (!strncmp(argv[idx_packet]->arg, "h", 1))
2518 type = OSPF6_MESSAGE_TYPE_HELLO;
2519 else if (!strncmp(argv[idx_packet]->arg, "d", 1))
2520 type = OSPF6_MESSAGE_TYPE_DBDESC;
2521 else if (!strncmp(argv[idx_packet]->arg, "lsr", 3))
2522 type = OSPF6_MESSAGE_TYPE_LSREQ;
2523 else if (!strncmp(argv[idx_packet]->arg, "lsu", 3))
2524 type = OSPF6_MESSAGE_TYPE_LSUPDATE;
2525 else if (!strncmp(argv[idx_packet]->arg, "lsa", 3))
2526 type = OSPF6_MESSAGE_TYPE_LSACK;
2527 else if (!strncmp(argv[idx_packet]->arg, "a", 1))
2528 type = OSPF6_MESSAGE_TYPE_ALL;
2529
2530 if (argc == 5)
2531 level = OSPF6_DEBUG_MESSAGE_SEND | OSPF6_DEBUG_MESSAGE_RECV;
2532 else if (!strncmp(argv[idx_send_recv]->arg, "s", 1))
2533 level = OSPF6_DEBUG_MESSAGE_SEND;
2534 else if (!strncmp(argv[idx_send_recv]->arg, "r", 1))
2535 level = OSPF6_DEBUG_MESSAGE_RECV;
2536
2537 if (type == OSPF6_MESSAGE_TYPE_ALL) {
2538 for (i = 0; i < 6; i++)
2539 OSPF6_DEBUG_MESSAGE_OFF(i, level);
2540 } else
2541 OSPF6_DEBUG_MESSAGE_OFF(type, level);
2542
2543 return CMD_SUCCESS;
718e3744 2544}
2545
508e53e2 2546
d62a17ae 2547int config_write_ospf6_debug_message(struct vty *vty)
718e3744 2548{
d62a17ae 2549 const char *type_str[] = {"unknown", "hello", "dbdesc",
2550 "lsreq", "lsupdate", "lsack"};
2551 unsigned char s = 0, r = 0;
2552 int i;
2553
2554 for (i = 0; i < 6; i++) {
2555 if (IS_OSPF6_DEBUG_MESSAGE(i, SEND))
2556 s |= 1 << i;
2557 if (IS_OSPF6_DEBUG_MESSAGE(i, RECV))
2558 r |= 1 << i;
2559 }
2560
2561 if (s == 0x3f && r == 0x3f) {
2562 vty_out(vty, "debug ospf6 message all\n");
2563 return 0;
2564 }
2565
2566 if (s == 0x3f && r == 0) {
2567 vty_out(vty, "debug ospf6 message all send\n");
2568 return 0;
2569 } else if (s == 0 && r == 0x3f) {
2570 vty_out(vty, "debug ospf6 message all recv\n");
2571 return 0;
2572 }
2573
2574 /* Unknown message is logged by default */
2575 if (!IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, SEND)
2576 && !IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
2577 vty_out(vty, "no debug ospf6 message unknown\n");
2578 else if (!IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, SEND))
2579 vty_out(vty, "no debug ospf6 message unknown send\n");
2580 else if (!IS_OSPF6_DEBUG_MESSAGE(OSPF6_MESSAGE_TYPE_UNKNOWN, RECV))
2581 vty_out(vty, "no debug ospf6 message unknown recv\n");
2582
2583 for (i = 1; i < 6; i++) {
2584 if (IS_OSPF6_DEBUG_MESSAGE(i, SEND)
2585 && IS_OSPF6_DEBUG_MESSAGE(i, RECV))
2586 vty_out(vty, "debug ospf6 message %s\n", type_str[i]);
2587 else if (IS_OSPF6_DEBUG_MESSAGE(i, SEND))
2588 vty_out(vty, "debug ospf6 message %s send\n",
2589 type_str[i]);
2590 else if (IS_OSPF6_DEBUG_MESSAGE(i, RECV))
2591 vty_out(vty, "debug ospf6 message %s recv\n",
2592 type_str[i]);
2593 }
2594
2595 return 0;
718e3744 2596}
2597
d62a17ae 2598void install_element_ospf6_debug_message(void)
508e53e2 2599{
d62a17ae 2600 install_element(ENABLE_NODE, &debug_ospf6_message_cmd);
2601 install_element(ENABLE_NODE, &no_debug_ospf6_message_cmd);
2602 install_element(CONFIG_NODE, &debug_ospf6_message_cmd);
2603 install_element(CONFIG_NODE, &no_debug_ospf6_message_cmd);
508e53e2 2604}
FRRouting mirror