#include "common.h"
#include "buffer.h"

Include dependency graph for proto.h:

This graph shows which files directly or indirectly include this file:

Data Structures
struct	openvpn_ethhdr

struct	openvpn_8021qhdr

struct	openvpn_arp

struct	openvpn_iphdr

struct	openvpn_ipv6hdr

struct	openvpn_icmp6hdr

struct	openvpn_udphdr

struct	openvpn_tcphdr

struct	ip_tcp_udp_hdr

Macros
#define	DEV_TYPE_UNDEF 0

#define	DEV_TYPE_NULL 1

#define	DEV_TYPE_TUN 2 /* point-to-point IP tunnel */

#define	DEV_TYPE_TAP 3 /* ethernet (802.3) tunnel */

#define	TOP_UNDEF 0

#define	TOP_NET30 1

#define	TOP_P2P 2

#define	TOP_SUBNET 3

#define	OPENVPN_ETH_ALEN 6 /* ethernet address length */

#define	OPENVPN_ETH_P_IPV4 0x0800 /* IPv4 protocol */

#define	OPENVPN_ETH_P_IPV6 0x86DD /* IPv6 protocol */

#define	OPENVPN_ETH_P_ARP 0x0806 /* ARP protocol */

#define	OPENVPN_ETH_P_8021Q 0x8100 /* 802.1Q protocol */

#define	OPENVPN_8021Q_MASK_PCP htons(0xE000) /* mask PCP out of pcp_cfi_vid */

#define	OPENVPN_8021Q_MASK_CFI htons(0x1000) /* mask CFI out of pcp_cfi_vid */

#define	OPENVPN_8021Q_MASK_VID htons(0x0FFF) /* mask VID out of pcp_cfi_vid */

#define	SIZE_ETH_TO_8021Q_HDR

#define	ARP_MAC_ADDR_TYPE 0x0001

#define	ARP_REQUEST 0x0001

#define	ARP_REPLY 0x0002

#define	OPENVPN_IPH_GET_VER(v) (((v) >> 4) & 0x0F)

#define	OPENVPN_IPH_GET_LEN(v) (((v) & 0x0F) << 2)

#define	OPENVPN_IP_OFFMASK 0x1fff

#define	OPENVPN_IPPROTO_IGMP 2 /* IGMP protocol */

#define	OPENVPN_IPPROTO_TCP 6 /* TCP protocol */

#define	OPENVPN_IPPROTO_UDP 17 /* UDP protocol */

#define	OPENVPN_IPPROTO_ICMPV6 58 /* ICMPV6 protocol */

#define	OPENVPN_ICMP6_DESTINATION_UNREACHABLE 1

#define	OPENVPN_ND_ROUTER_SOLICIT 133

#define	OPENVPN_ND_ROUTER_ADVERT 134

#define	OPENVPN_ND_NEIGHBOR_SOLICIT 135

#define	OPENVPN_ND_NEIGHBOR_ADVERT 136

#define	OPENVPN_ND_INVERSE_SOLICIT 141

#define	OPENVPN_ND_INVERSE_ADVERT 142

#define	OPENVPN_ICMP6_DU_NOROUTE 0

#define	OPENVPN_ICMP6_DU_COMMUNICATION_PROHIBTED 1

#define	OPENVPN_TCPH_GET_DOFF(d) (((d) & 0xF0) >> 2)

#define	OPENVPN_TCPH_FIN_MASK (1<<0)

#define	OPENVPN_TCPH_SYN_MASK (1<<1)

#define	OPENVPN_TCPH_RST_MASK (1<<2)

#define	OPENVPN_TCPH_PSH_MASK (1<<3)

#define	OPENVPN_TCPH_ACK_MASK (1<<4)

#define	OPENVPN_TCPH_URG_MASK (1<<5)

#define	OPENVPN_TCPH_ECE_MASK (1<<6)

#define	OPENVPN_TCPH_CWR_MASK (1<<7)

#define	OPENVPN_TCPOPT_EOL 0

#define	OPENVPN_TCPOPT_NOP 1

#define	OPENVPN_TCPOPT_MAXSEG 2

#define	OPENVPN_TCPOLEN_MAXSEG 4

#define	ADJUST_CHECKSUM(acc, cksum)

#define	ADD_CHECKSUM_32(acc, u32)

#define	SUB_CHECKSUM_32(acc, u32)

#define	MTU_TO_MSS(mtu)

#define	OPENVPN_8021Q_MIN_VID 1

#define	OPENVPN_8021Q_MAX_VID 4094

Functions
static int	get_tun_ip_ver (int tunnel_type, struct buffer buf, int ip_hdr_offset)

bool	is_ipv4 (int tunnel_type, struct buffer *buf)

bool	is_ipv6 (int tunnel_type, struct buffer *buf)

uint16_t	ip_checksum (const sa_family_t af, const uint8_t payload, const int len_payload, const uint8_t src_addr, const uint8_t *dest_addr, const int proto)
	Calculates an IP or IPv6 checksum with a pseudo header as required by TCP, UDP and ICMPv6. More...

Macro Definition Documentation

◆ ADD_CHECKSUM_32

#define ADD_CHECKSUM_32	(	acc,
		u32
	)

Value:

{ \
        acc += (u32) & 0xffff; \
        acc += (u32) >> 16;    \
}

Definition at line 240 of file proto.h.

Referenced by client_nat_transform().

◆ ADJUST_CHECKSUM

#define ADJUST_CHECKSUM	(	acc,
		cksum
	)

Value:

{ \
        int _acc = acc; \
        _acc += (cksum); \
        if (_acc < 0) { \
            _acc = -_acc; \
            _acc = (_acc >> 16) + (_acc & 0xffff); \
            _acc += _acc >> 16; \
            (cksum) = (uint16_t) ~_acc; \
        } else { \
            _acc = (_acc >> 16) + (_acc & 0xffff); \
            _acc += _acc >> 16; \
            (cksum) = (uint16_t) _acc; \
        } \
}

Definition at line 225 of file proto.h.

Referenced by client_nat_transform(), and mss_fixup_dowork().

◆ ARP_MAC_ADDR_TYPE

#define ARP_MAC_ADDR_TYPE 0x0001

Definition at line 89 of file proto.h.

◆ ARP_REPLY

#define ARP_REPLY 0x0002

Definition at line 97 of file proto.h.

◆ ARP_REQUEST

#define ARP_REQUEST 0x0001

Definition at line 96 of file proto.h.

◆ DEV_TYPE_NULL

#define DEV_TYPE_NULL 1

Definition at line 36 of file proto.h.

Referenced by dev_type_enum(), dev_type_string(), is_tun_p2p(), open_null(), and open_tun().

◆ DEV_TYPE_TAP

#define DEV_TYPE_TAP 3 /* ethernet (802.3) tunnel */

◆ DEV_TYPE_TUN

#define DEV_TYPE_TUN 2 /* point-to-point IP tunnel */

◆ DEV_TYPE_UNDEF

#define DEV_TYPE_UNDEF 0

Definition at line 35 of file proto.h.

Referenced by dev_type_enum(), multi_init(), and options_postprocess_verify_ce().

◆ MTU_TO_MSS

#define MTU_TO_MSS ( mtu )

Value:

(mtu - sizeof(struct openvpn_iphdr) \

- sizeof(struct openvpn_tcphdr))

openvpn_tcphdr

Definition: proto.h:178

openvpn_iphdr

Definition: proto.h:106

Definition at line 258 of file proto.h.

Referenced by process_ip_header().

◆ OPENVPN_8021Q_MASK_CFI

#define OPENVPN_8021Q_MASK_CFI htons(0x1000) /* mask CFI out of pcp_cfi_vid */

Definition at line 74 of file proto.h.

◆ OPENVPN_8021Q_MASK_PCP

#define OPENVPN_8021Q_MASK_PCP htons(0xE000) /* mask PCP out of pcp_cfi_vid */

Definition at line 73 of file proto.h.

◆ OPENVPN_8021Q_MASK_VID

#define OPENVPN_8021Q_MASK_VID htons(0x0FFF) /* mask VID out of pcp_cfi_vid */

Definition at line 75 of file proto.h.

Referenced by vlanhdr_get_vid(), and vlanhdr_set_vid().

◆ OPENVPN_8021Q_MAX_VID

#define OPENVPN_8021Q_MAX_VID 4094

Definition at line 337 of file proto.h.

Referenced by add_option().

◆ OPENVPN_8021Q_MIN_VID

#define OPENVPN_8021Q_MIN_VID 1

Definition at line 336 of file proto.h.

Referenced by add_option().

◆ OPENVPN_ETH_ALEN

#define OPENVPN_ETH_ALEN 6 /* ethernet address length */

Definition at line 54 of file proto.h.

Referenced by ipv6_send_icmp_unreachable(), and mroute_copy_ether_to_addr().

◆ OPENVPN_ETH_P_8021Q

#define OPENVPN_ETH_P_8021Q 0x8100 /* 802.1Q protocol */

Definition at line 63 of file proto.h.

Referenced by is_ipv_X(), vlan_decapsulate(), vlan_encapsulate(), and vlan_is_tagged().

◆ OPENVPN_ETH_P_ARP

#define OPENVPN_ETH_P_ARP 0x0806 /* ARP protocol */

Definition at line 62 of file proto.h.

◆ OPENVPN_ETH_P_IPV4

#define OPENVPN_ETH_P_IPV4 0x0800 /* IPv4 protocol */

Definition at line 60 of file proto.h.

Referenced by get_tun_ip_ver(), and is_ipv_X().

◆ OPENVPN_ETH_P_IPV6

#define OPENVPN_ETH_P_IPV6 0x86DD /* IPv6 protocol */

Definition at line 61 of file proto.h.

Referenced by get_tun_ip_ver(), ipv6_send_icmp_unreachable(), and is_ipv_X().

◆ OPENVPN_ICMP6_DESTINATION_UNREACHABLE

#define OPENVPN_ICMP6_DESTINATION_UNREACHABLE 1

Definition at line 150 of file proto.h.

Referenced by ipv6_send_icmp_unreachable().

◆ OPENVPN_ICMP6_DU_COMMUNICATION_PROHIBTED

#define OPENVPN_ICMP6_DU_COMMUNICATION_PROHIBTED 1

Definition at line 159 of file proto.h.

◆ OPENVPN_ICMP6_DU_NOROUTE

#define OPENVPN_ICMP6_DU_NOROUTE 0

Definition at line 158 of file proto.h.

Referenced by ipv6_send_icmp_unreachable().

◆ OPENVPN_IP_OFFMASK

#define OPENVPN_IP_OFFMASK 0x1fff

Definition at line 115 of file proto.h.

Referenced by mss_fixup_ipv4().

◆ OPENVPN_IPH_GET_LEN

#define OPENVPN_IPH_GET_LEN ( v ) (((v) & 0x0F) << 2)

Definition at line 108 of file proto.h.

Referenced by ip_checksum(), and mss_fixup_ipv4().

◆ OPENVPN_IPH_GET_VER

#define OPENVPN_IPH_GET_VER ( v ) (((v) >> 4) & 0x0F)

Definition at line 107 of file proto.h.

Referenced by get_tun_ip_ver(), is_ip_packet_valid(), is_ipv_X(), mroute_extract_addr_ip(), and open_null().

◆ OPENVPN_IPPROTO_ICMPV6

#define OPENVPN_IPPROTO_ICMPV6 58 /* ICMPV6 protocol */

Definition at line 123 of file proto.h.

Referenced by ipv6_send_icmp_unreachable().

◆ OPENVPN_IPPROTO_IGMP

#define OPENVPN_IPPROTO_IGMP 2 /* IGMP protocol */

Definition at line 120 of file proto.h.

Referenced by mroute_extract_addr_ip().

◆ OPENVPN_IPPROTO_TCP

#define OPENVPN_IPPROTO_TCP 6 /* TCP protocol */

Definition at line 121 of file proto.h.

Referenced by client_nat_transform(), mss_fixup_ipv4(), and mss_fixup_ipv6().

◆ OPENVPN_IPPROTO_UDP

#define OPENVPN_IPPROTO_UDP 17 /* UDP protocol */

Definition at line 122 of file proto.h.

Referenced by client_nat_transform(), and dhcp_extract_router_msg().

◆ OPENVPN_ND_INVERSE_ADVERT

#define OPENVPN_ND_INVERSE_ADVERT 142

Definition at line 156 of file proto.h.

◆ OPENVPN_ND_INVERSE_SOLICIT

#define OPENVPN_ND_INVERSE_SOLICIT 141

Definition at line 155 of file proto.h.

◆ OPENVPN_ND_NEIGHBOR_ADVERT

#define OPENVPN_ND_NEIGHBOR_ADVERT 136

Definition at line 154 of file proto.h.

◆ OPENVPN_ND_NEIGHBOR_SOLICIT

#define OPENVPN_ND_NEIGHBOR_SOLICIT 135

Definition at line 153 of file proto.h.

◆ OPENVPN_ND_ROUTER_ADVERT

#define OPENVPN_ND_ROUTER_ADVERT 134

Definition at line 152 of file proto.h.

◆ OPENVPN_ND_ROUTER_SOLICIT

#define OPENVPN_ND_ROUTER_SOLICIT 133

Definition at line 151 of file proto.h.

◆ OPENVPN_TCPH_ACK_MASK

#define OPENVPN_TCPH_ACK_MASK (1<<4)

Definition at line 191 of file proto.h.

◆ OPENVPN_TCPH_CWR_MASK

#define OPENVPN_TCPH_CWR_MASK (1<<7)

Definition at line 194 of file proto.h.

◆ OPENVPN_TCPH_ECE_MASK

#define OPENVPN_TCPH_ECE_MASK (1<<6)

Definition at line 193 of file proto.h.

◆ OPENVPN_TCPH_FIN_MASK

#define OPENVPN_TCPH_FIN_MASK (1<<0)

Definition at line 187 of file proto.h.

◆ OPENVPN_TCPH_GET_DOFF

#define OPENVPN_TCPH_GET_DOFF ( d ) (((d) & 0xF0) >> 2)

Definition at line 184 of file proto.h.

Referenced by mss_fixup_dowork().

◆ OPENVPN_TCPH_PSH_MASK

#define OPENVPN_TCPH_PSH_MASK (1<<3)

Definition at line 190 of file proto.h.

◆ OPENVPN_TCPH_RST_MASK

#define OPENVPN_TCPH_RST_MASK (1<<2)

Definition at line 189 of file proto.h.

◆ OPENVPN_TCPH_SYN_MASK

#define OPENVPN_TCPH_SYN_MASK (1<<1)

Definition at line 188 of file proto.h.

Referenced by mss_fixup_ipv4(), and mss_fixup_ipv6().

◆ OPENVPN_TCPH_URG_MASK

#define OPENVPN_TCPH_URG_MASK (1<<5)

Definition at line 192 of file proto.h.

◆ OPENVPN_TCPOLEN_MAXSEG

#define OPENVPN_TCPOLEN_MAXSEG 4

Definition at line 205 of file proto.h.

Referenced by mss_fixup_dowork().

◆ OPENVPN_TCPOPT_EOL

#define OPENVPN_TCPOPT_EOL 0

Definition at line 202 of file proto.h.

Referenced by mss_fixup_dowork().

◆ OPENVPN_TCPOPT_MAXSEG

#define OPENVPN_TCPOPT_MAXSEG 2

Definition at line 204 of file proto.h.

Referenced by mss_fixup_dowork().

◆ OPENVPN_TCPOPT_NOP

#define OPENVPN_TCPOPT_NOP 1

Definition at line 203 of file proto.h.

Referenced by mss_fixup_dowork().

◆ SIZE_ETH_TO_8021Q_HDR

#define SIZE_ETH_TO_8021Q_HDR

Value:

(sizeof(struct openvpn_8021qhdr) \

- sizeof(struct openvpn_ethhdr))

openvpn_ethhdr

Definition: proto.h:55

openvpn_8021qhdr

Definition: proto.h:67

Definition at line 84 of file proto.h.

Referenced by vlan_decapsulate(), and vlan_encapsulate().

◆ SUB_CHECKSUM_32

#define SUB_CHECKSUM_32	(	acc,
		u32
	)

Value:

{ \
        acc -= (u32) & 0xffff; \
        acc -= (u32) >> 16;    \
}

Definition at line 245 of file proto.h.

Referenced by client_nat_transform().

◆ TOP_NET30

#define TOP_NET30 1

Definition at line 43 of file proto.h.

Referenced by do_ifconfig_ipv4(), do_init_route_list(), helper_client_server(), ifconfig_sanity_check(), init_options(), multi_init(), multi_select_virtual_addr(), parse_topology(), and print_topology().

◆ TOP_P2P

#define TOP_P2P 2

Definition at line 44 of file proto.h.

Referenced by do_ifconfig_ipv4(), do_init_route_list(), helper_client_server(), ifconfig_sanity_check(), multi_select_virtual_addr(), parse_topology(), and print_topology().

◆ TOP_SUBNET

#define TOP_SUBNET 3

Definition at line 45 of file proto.h.

Referenced by do_ifconfig_ipv4(), helper_client_server(), ifconfig_options_string(), init_tun(), is_tun_p2p(), multi_select_virtual_addr(), multi_set_virtual_addr_env(), options_postprocess_verify_ce(), parse_topology(), print_topology(), tuntap_dhcp_mask(), and tuntap_set_ptp().

◆ TOP_UNDEF

#define TOP_UNDEF 0

Definition at line 42 of file proto.h.

Referenced by parse_topology(), and print_topology().

Function Documentation

◆ get_tun_ip_ver()

static int get_tun_ip_ver	(	int	tunnel_type,
		struct buffer *	buf,
		int *	ip_hdr_offset
	)

inlinestatic

Definition at line 266 of file proto.h.

References BLEN, BPTR, DEV_TYPE_TAP, DEV_TYPE_TUN, ip_checksum(), is_ipv4(), is_ipv6(), likely, OPENVPN_ETH_P_IPV4, OPENVPN_ETH_P_IPV6, OPENVPN_IPH_GET_VER, and openvpn_ethhdr::proto.

Referenced by drop_if_recursive_routing().

◆ ip_checksum()

uint16_t ip_checksum	(	const sa_family_t	af,
		const uint8_t *	payload,
		const int	len_payload,
		const uint8_t *	src_addr,
		const uint8_t *	dest_addr,
		const int	proto
	)

Calculates an IP or IPv6 checksum with a pseudo header as required by TCP, UDP and ICMPv6.

Parameters

af	- Address family for which the checksum is calculated AF_INET or AF_INET6
payload	- the TCP, ICMPv6 or UDP packet
len_payload	- length of payload
src_addr	- Source address of the packet
dest_addr	- Destination address of the packet
proto	next - header or IP protocol of the packet

Returns: The calculated checksum in host order

Definition at line 125 of file proto.c.

References BLEN, BPTR, buf_set_read(), counter_format, D_PACKET_TRUNC_DEBUG, D_PACKET_TRUNC_ERR, buffer::data, is_ipv4(), msg, OPENVPN_IPH_GET_LEN, openvpn_iphdr::tot_len, verify_align_4, and openvpn_iphdr::version_len.

Referenced by dhcp_extract_router_msg(), get_tun_ip_ver(), and ipv6_send_icmp_unreachable().

◆ is_ipv4()

bool is_ipv4	(	int	tunnel_type,
		struct buffer *	buf
	)

Definition at line 113 of file proto.c.

References is_ipv_X().

Referenced by get_tun_ip_ver(), ip_checksum(), and process_ip_header().

◆ is_ipv6()

bool is_ipv6	(	int	tunnel_type,
		struct buffer *	buf
	)

Definition at line 118 of file proto.c.

References is_ipv_X().

Referenced by get_tun_ip_ver(), ipv6_send_icmp_unreachable(), and process_ip_header().

Data Structures

Macros

Functions

Macro Definition Documentation

◆ ADD_CHECKSUM_32

◆ ADJUST_CHECKSUM

◆ ARP_MAC_ADDR_TYPE

◆ ARP_REPLY

◆ ARP_REQUEST

◆ DEV_TYPE_NULL

◆ DEV_TYPE_TAP

◆ DEV_TYPE_TUN

◆ DEV_TYPE_UNDEF

◆ MTU_TO_MSS

◆ OPENVPN_8021Q_MASK_CFI

◆ OPENVPN_8021Q_MASK_PCP

◆ OPENVPN_8021Q_MASK_VID

◆ OPENVPN_8021Q_MAX_VID

◆ OPENVPN_8021Q_MIN_VID

◆ OPENVPN_ETH_ALEN

◆ OPENVPN_ETH_P_8021Q

◆ OPENVPN_ETH_P_ARP

◆ OPENVPN_ETH_P_IPV4

◆ OPENVPN_ETH_P_IPV6

◆ OPENVPN_ICMP6_DESTINATION_UNREACHABLE

◆ OPENVPN_ICMP6_DU_COMMUNICATION_PROHIBTED

◆ OPENVPN_ICMP6_DU_NOROUTE

◆ OPENVPN_IP_OFFMASK

◆ OPENVPN_IPH_GET_LEN

◆ OPENVPN_IPH_GET_VER

◆ OPENVPN_IPPROTO_ICMPV6

◆ OPENVPN_IPPROTO_IGMP

◆ OPENVPN_IPPROTO_TCP

◆ OPENVPN_IPPROTO_UDP

◆ OPENVPN_ND_INVERSE_ADVERT

◆ OPENVPN_ND_INVERSE_SOLICIT

◆ OPENVPN_ND_NEIGHBOR_ADVERT

◆ OPENVPN_ND_NEIGHBOR_SOLICIT

◆ OPENVPN_ND_ROUTER_ADVERT

◆ OPENVPN_ND_ROUTER_SOLICIT

◆ OPENVPN_TCPH_ACK_MASK

◆ OPENVPN_TCPH_CWR_MASK

◆ OPENVPN_TCPH_ECE_MASK

◆ OPENVPN_TCPH_FIN_MASK

◆ OPENVPN_TCPH_GET_DOFF

◆ OPENVPN_TCPH_PSH_MASK

◆ OPENVPN_TCPH_RST_MASK

◆ OPENVPN_TCPH_SYN_MASK

◆ OPENVPN_TCPH_URG_MASK

◆ OPENVPN_TCPOLEN_MAXSEG

◆ OPENVPN_TCPOPT_EOL

◆ OPENVPN_TCPOPT_MAXSEG

◆ OPENVPN_TCPOPT_NOP

◆ SIZE_ETH_TO_8021Q_HDR

◆ SUB_CHECKSUM_32

◆ TOP_NET30

◆ TOP_P2P

◆ TOP_SUBNET

◆ TOP_UNDEF

Function Documentation

◆ get_tun_ip_ver()

◆ ip_checksum()

◆ is_ipv4()

◆ is_ipv6()