bsd/net/pf_norm.c

110 #define PFFRAG_SEENLAST	0x0001		/* Seen the last fragment for this */
111 #define PFFRAG_NOBUFFER	0x0002		/* Non-buffering fragment cache */
120 	u_int8_t	fr_p;		/* protocol of this fragment */
122 	u_int16_t	fr_max;		/* fragment data max */
487 /* Removes a fragment from the fragment queue and frees the fragment */
546 		/* We do not have a previous fragment */
552 	 * Find a fragment after the current one:
597 		/* This fragment is completely overlapped, lose it */
630 			DPFPRINTF(("missing fragment at %d, next %d, max %d\n",
671 	/* Remove from fragment queue */
757 	 * Find a fragment after the current one:
787 			 * fragment that has already been passed.
868 			/* Need to chop off the tail of this fragment */
910 		/* Need to glue together two separate fragment descriptors */
943 		 * We must keep tracking the overall fragment even when
964 		/* Remove from fragment queue */
990 		/* This fragment has been deemed bad.  Don't reass */
992 			DPFPRINTF(("fragcache[%d]: dropping overall fragment\n",
1025 	/* strip off headers up to the fragment payload */
1052 		/* We do not have a previous fragment */
1058 	 * Find a fragment after the current one:
1104 		/* This fragment is completely overlapped, lose it */
1139 			DPFPRINTF(("missing fragment at %d, next %d, max %d\n",
1165 	/* Remove from fragment queue */
1231 	 * in the current fragment where:
1233 	 *    first octet in the fragment,
1235 	 *   IPv6 headers of the fragment.
1287 	 * Find a fragment after the current one:
1318 			 * fragment that has already been passed.
1400 			/* Need to chop off the tail of this fragment */
1442 		/* Need to glue together two separate fragment descriptors */
1475 		 * We must keep tracking the overall fragment even when
1495 		/* Remove from fragment queue */
1521 		/* This fragment has been deemed bad.  Don't reass */
1523 			DPFPRINTF(("frag6cache[%u]: dropping overall fragment\n",
1608 	 * We're dealing with a fragment now. Don't allow fragments
1637 		/* Check if we saw the last fragment already */
1642 		/* Get an entry for the fragment queue */
1679 		/* non-buffering fragment cache (drops or masks overlaps) */
1684 			 * Already passed the fragment cache in the
1693 		/* Check if we saw the last fragment already */
1785 	DPFPRINTF(("dropping bad IPv4 fragment\n"));
1878 			goto fragment;
1977 fragment:
2003 		/* Check if we saw the last fragment already */
2008 		/* Get an entry for the fragment queue */
2034 		/* non-buffering fragment cache (overlaps: see RFC 5722) */
2040 		/* Check if we saw the last fragment already */
2081 	DPFPRINTF(("dropping bad IPv6 fragment\n"));