bsd/net/pf_norm.c

110 #define PFFRAG_SEENLAST	0x0001		/* Seen the last fragment for this */
111 #define PFFRAG_NOBUFFER	0x0002		/* Non-buffering fragment cache */
120 	u_int8_t	fr_p;		/* protocol of this fragment */
122 	u_int16_t	fr_max;		/* fragment data max */
483 /* Removes a fragment from the fragment queue and frees the fragment */
542 		/* We do not have a previous fragment */
548 	 * Find a fragment after the current one:
593 		/* This fragment is completely overlapped, lose it */
626 			DPFPRINTF(("missing fragment at %d, next %d, max %d\n",
667 	/* Remove from fragment queue */
752 	 * Find a fragment after the current one:
782 			 * fragment that has already been passed.
863 			/* Need to chop off the tail of this fragment */
905 		/* Need to glue together two separate fragment descriptors */
938 		 * We must keep tracking the overall fragment even when
959 		/* Remove from fragment queue */
985 		/* This fragment has been deemed bad.  Don't reass */
987 			DPFPRINTF(("fragcache[%d]: dropping overall fragment\n",
1019 	/* strip off headers up to the fragment payload */
1046 		/* We do not have a previous fragment */
1052 	 * Find a fragment after the current one:
1098 		/* This fragment is completely overlapped, lose it */
1133 			DPFPRINTF(("missing fragment at %d, next %d, max %d\n",
1159 	/* Remove from fragment queue */
1224 	 * in the current fragment where:
1226 	 *    first octet in the fragment,
1228 	 *   IPv6 headers of the fragment.
1280 	 * Find a fragment after the current one:
1311 			 * fragment that has already been passed.
1393 			/* Need to chop off the tail of this fragment */
1435 		/* Need to glue together two separate fragment descriptors */
1468 		 * We must keep tracking the overall fragment even when
1488 		/* Remove from fragment queue */
1514 		/* This fragment has been deemed bad.  Don't reass */
1516 			DPFPRINTF(("frag6cache[%u]: dropping overall fragment\n",
1601 	 * We're dealing with a fragment now. Don't allow fragments
1630 		/* Check if we saw the last fragment already */
1635 		/* Get an entry for the fragment queue */
1670 		/* non-buffering fragment cache (drops or masks overlaps) */
1675 			 * Already passed the fragment cache in the
1684 		/* Check if we saw the last fragment already */
1776 	DPFPRINTF(("dropping bad IPv4 fragment\n"));
1869 			goto fragment;
1968 fragment:
1993 		/* Check if we saw the last fragment already */
1998 		/* Get an entry for the fragment queue */
2024 		/* non-buffering fragment cache (overlaps: see RFC 5722) */
2030 		/* Check if we saw the last fragment already */
2071 	DPFPRINTF(("dropping bad IPv6 fragment\n"));