netpfil/ipfw/ip_fw2.c

978 	 * We store in ulp a pointer to the upper layer protocol header.
981 	 * ulp is NULL if not found.
983 	void *ulp = NULL;		/* upper layer protocol pointer. */
1040 		while (ulp == NULL && offset == 0) {
1043 				PULLUP_TO(hlen, ulp, struct icmp6_hdr);
1044 				icmp6_type = ICMP6(ulp)->icmp6_type;
1048 				PULLUP_TO(hlen, ulp, struct tcphdr);
1049 				dst_port = TCP(ulp)->th_dport;
1050 				src_port = TCP(ulp)->th_sport;
1052 				args->f_id._flags = TCP(ulp)->th_flags;
1056 				PULLUP_TO(hlen, ulp, struct sctphdr);
1057 				src_port = SCTP(ulp)->src_port;
1058 				dst_port = SCTP(ulp)->dest_port;
1062 				PULLUP_TO(hlen, ulp, struct udphdr);
1063 				dst_port = UDP(ulp)->uh_dport;
1064 				src_port = UDP(ulp)->uh_sport;
1068 				PULLUP_TO(hlen, ulp, struct ip6_hbh);
1070 				hlen += (((struct ip6_hbh *)ulp)->ip6h_len + 1) << 3;
1071 				proto = ((struct ip6_hbh *)ulp)->ip6h_nxt;
1072 				ulp = NULL;
1076 				PULLUP_TO(hlen, ulp, struct ip6_rthdr);
1077 				switch (((struct ip6_rthdr *)ulp)->ip6r_type) {
1089 						    ulp)->ip6r_type);
1095 				hlen += (((struct ip6_rthdr *)ulp)->ip6r_len + 1) << 3;
1096 				proto = ((struct ip6_rthdr *)ulp)->ip6r_nxt;
1097 				ulp = NULL;
1101 				PULLUP_TO(hlen, ulp, struct ip6_frag);
1104 				proto = ((struct ip6_frag *)ulp)->ip6f_nxt;
1105 				offset = ((struct ip6_frag *)ulp)->ip6f_offlg &
1107 				ip6f_mf = ((struct ip6_frag *)ulp)->ip6f_offlg &
1119 				    ntohl(((struct ip6_frag *)ulp)->ip6f_ident);
1120 				ulp = NULL;
1124 				PULLUP_TO(hlen, ulp, struct ip6_hbh);
1126 				hlen += (((struct ip6_hbh *)ulp)->ip6h_len + 1) << 3;
1127 				proto = ((struct ip6_hbh *)ulp)->ip6h_nxt;
1128 				ulp = NULL;
1132 				PULLUP_TO(hlen, ulp, struct ip6_ext);
1134 				hlen += (((struct ip6_ext *)ulp)->ip6e_len + 2) << 2;
1135 				proto = ((struct ip6_ext *)ulp)->ip6e_nxt;
1136 				ulp = NULL;
1140 				PULLUP_TO(hlen, ulp, uint32_t);	/* SPI, Seq# */
1152 				ulp = ip; /* non-NULL to get out of loop. */
1157 				PULLUP_TO(hlen, ulp, struct ip6_ext);
1162 				PULLUP_TO(hlen, ulp, struct pim);
1166 				PULLUP_TO(hlen, ulp, struct carp_header);
1167 				if (((struct carp_header *)ulp)->carp_version !=
1170 				if (((struct carp_header *)ulp)->carp_type !=
1176 				PULLUP_TO(hlen, ulp, struct ip6_hdr);
1180 				PULLUP_TO(hlen, ulp, struct ip);
1190 				PULLUP_TO(hlen, ulp, struct ip6_ext);
1220 				PULLUP_TO(hlen, ulp, struct tcphdr);
1221 				dst_port = TCP(ulp)->th_dport;
1222 				src_port = TCP(ulp)->th_sport;
1224 				args->f_id._flags = TCP(ulp)->th_flags;
1228 				PULLUP_TO(hlen, ulp, struct sctphdr);
1229 				src_port = SCTP(ulp)->src_port;
1230 				dst_port = SCTP(ulp)->dest_port;
1234 				PULLUP_TO(hlen, ulp, struct udphdr);
1235 				dst_port = UDP(ulp)->uh_dport;
1236 				src_port = UDP(ulp)->uh_sport;
1240 				PULLUP_TO(hlen, ulp, struct icmphdr);
1241 				//args->f_id.flags = ICMP(ulp)->icmp_type;
1636 				    icmptype_match(ICMP(ulp), (ipfw_insn_u32 *)cmd) );
1644 					ICMP6(ulp)->icmp6_type,
1728 				    tcp = TCP(ulp);
1745 				    flags_match(cmd, TCP(ulp)->th_flags));
1749 				if (proto == IPPROTO_TCP && offset == 0 && ulp){
1750 					PULLUP_LEN(hlen, ulp,
1751 					    (TCP(ulp)->th_off << 2));
1752 					match = tcpopts_match(TCP(ulp), cmd);
1759 					TCP(ulp)->th_seq);
1765 					TCP(ulp)->th_ack);
1774 				    x = ntohs(TCP(ulp)->th_win);
1791 				    (TCP(ulp)->th_flags &
2125 					TCP(ulp) : NULL))
2325 				     is_icmp_query(ICMP(ulp))) &&