1 /* 2 * Copyright (c) 2016 Antonin Décimo, Jean-Raphaël Gaglione 3 * 4 * Redistribution and use in source and binary forms, with or without 5 * modification, are permitted provided that the following conditions 6 * are met: 7 * 1. Redistributions of source code must retain the above copyright 8 * notice, this list of conditions and the following disclaimer. 9 * 2. Redistributions in binary form must reproduce the above copyright 10 * notice, this list of conditions and the following disclaimer in the 11 * documentation and/or other materials provided with the distribution. 12 * 3. Neither the name of the project nor the names of its contributors 13 * may be used to endorse or promote products derived from this software 14 * without specific prior written permission. 15 * 16 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 17 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 19 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 20 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 24 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 26 * SUCH DAMAGE. 27 */ 28 29 /* \summary: Home Networking Control Protocol (HNCP) printer */ 30 31 #include <config.h> 32 33 #include "netdissect-stdinc.h" 34 35 #include <string.h> 36 37 #include "netdissect.h" 38 #include "addrtoname.h" 39 #include "extract.h" 40 41 static void 42 hncp_print_rec(netdissect_options *ndo, 43 const u_char *cp, u_int length, int indent); 44 45 void 46 hncp_print(netdissect_options *ndo, 47 const u_char *cp, u_int length) 48 { 49 ndo->ndo_protocol = "hncp"; 50 ND_PRINT("hncp (%u)", length); 51 hncp_print_rec(ndo, cp, length, 1); 52 } 53 54 /* RFC7787 */ 55 #define DNCP_REQUEST_NETWORK_STATE 1 56 #define DNCP_REQUEST_NODE_STATE 2 57 #define DNCP_NODE_ENDPOINT 3 58 #define DNCP_NETWORK_STATE 4 59 #define DNCP_NODE_STATE 5 60 #define DNCP_PEER 8 61 #define DNCP_KEEP_ALIVE_INTERVAL 9 62 #define DNCP_TRUST_VERDICT 10 63 64 /* RFC7788 */ 65 #define HNCP_HNCP_VERSION 32 66 #define HNCP_EXTERNAL_CONNECTION 33 67 #define HNCP_DELEGATED_PREFIX 34 68 #define HNCP_PREFIX_POLICY 43 69 #define HNCP_DHCPV4_DATA 37 /* This is correct, see RFC 7788 Errata ID 5113. */ 70 #define HNCP_DHCPV6_DATA 38 /* idem */ 71 #define HNCP_ASSIGNED_PREFIX 35 72 #define HNCP_NODE_ADDRESS 36 73 #define HNCP_DNS_DELEGATED_ZONE 39 74 #define HNCP_DOMAIN_NAME 40 75 #define HNCP_NODE_NAME 41 76 #define HNCP_MANAGED_PSK 42 77 78 /* See type_mask in hncp_print_rec below */ 79 #define RANGE_DNCP_RESERVED 0x10000 80 #define RANGE_HNCP_UNASSIGNED 0x10001 81 #define RANGE_DNCP_PRIVATE_USE 0x10002 82 #define RANGE_DNCP_FUTURE_USE 0x10003 83 84 static const struct tok type_values[] = { 85 { DNCP_REQUEST_NETWORK_STATE, "Request network state" }, 86 { DNCP_REQUEST_NODE_STATE, "Request node state" }, 87 { DNCP_NODE_ENDPOINT, "Node endpoint" }, 88 { DNCP_NETWORK_STATE, "Network state" }, 89 { DNCP_NODE_STATE, "Node state" }, 90 { DNCP_PEER, "Peer" }, 91 { DNCP_KEEP_ALIVE_INTERVAL, "Keep-alive interval" }, 92 { DNCP_TRUST_VERDICT, "Trust-Verdict" }, 93 94 { HNCP_HNCP_VERSION, "HNCP-Version" }, 95 { HNCP_EXTERNAL_CONNECTION, "External-Connection" }, 96 { HNCP_DELEGATED_PREFIX, "Delegated-Prefix" }, 97 { HNCP_PREFIX_POLICY, "Prefix-Policy" }, 98 { HNCP_DHCPV4_DATA, "DHCPv4-Data" }, 99 { HNCP_DHCPV6_DATA, "DHCPv6-Data" }, 100 { HNCP_ASSIGNED_PREFIX, "Assigned-Prefix" }, 101 { HNCP_NODE_ADDRESS, "Node-Address" }, 102 { HNCP_DNS_DELEGATED_ZONE, "DNS-Delegated-Zone" }, 103 { HNCP_DOMAIN_NAME, "Domain-Name" }, 104 { HNCP_NODE_NAME, "Node-Name" }, 105 { HNCP_MANAGED_PSK, "Managed-PSK" }, 106 107 { RANGE_DNCP_RESERVED, "Reserved" }, 108 { RANGE_HNCP_UNASSIGNED, "Unassigned" }, 109 { RANGE_DNCP_PRIVATE_USE, "Private use" }, 110 { RANGE_DNCP_FUTURE_USE, "Future use" }, 111 112 { 0, NULL} 113 }; 114 115 #define DH4OPT_DNS_SERVERS 6 /* RFC2132 */ 116 #define DH4OPT_NTP_SERVERS 42 /* RFC2132 */ 117 #define DH4OPT_DOMAIN_SEARCH 119 /* RFC3397 */ 118 119 static const struct tok dh4opt_str[] = { 120 { DH4OPT_DNS_SERVERS, "DNS-server" }, 121 { DH4OPT_NTP_SERVERS, "NTP-server"}, 122 { DH4OPT_DOMAIN_SEARCH, "DNS-search" }, 123 { 0, NULL } 124 }; 125 126 #define DH6OPT_DNS_SERVERS 23 /* RFC3646 */ 127 #define DH6OPT_DOMAIN_LIST 24 /* RFC3646 */ 128 #define DH6OPT_SNTP_SERVERS 31 /* RFC4075 */ 129 130 static const struct tok dh6opt_str[] = { 131 { DH6OPT_DNS_SERVERS, "DNS-server" }, 132 { DH6OPT_DOMAIN_LIST, "DNS-search-list" }, 133 { DH6OPT_SNTP_SERVERS, "SNTP-servers" }, 134 { 0, NULL } 135 }; 136 137 /* 138 * For IPv4-mapped IPv6 addresses, length of the prefix that precedes 139 * the 4 bytes of IPv4 address at the end of the IPv6 address. 140 */ 141 #define IPV4_MAPPED_HEADING_LEN 12 142 143 /* 144 * Is an IPv6 address an IPv4-mapped address? 145 */ 146 static int 147 is_ipv4_mapped_address(const u_char *addr) 148 { 149 /* The value of the prefix */ 150 static const u_char ipv4_mapped_heading[IPV4_MAPPED_HEADING_LEN] = 151 { 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xFF, 0xFF }; 152 153 return memcmp(addr, ipv4_mapped_heading, IPV4_MAPPED_HEADING_LEN) == 0; 154 } 155 156 static const char * 157 format_nid(netdissect_options *ndo, const u_char *data) 158 { 159 static char buf[4][sizeof("01:01:01:01")]; 160 static int i = 0; 161 i = (i + 1) % 4; 162 snprintf(buf[i], sizeof(buf[i]), "%02x:%02x:%02x:%02x", 163 GET_U_1(data), GET_U_1(data + 1), GET_U_1(data + 2), 164 GET_U_1(data + 3)); 165 return buf[i]; 166 } 167 168 static const char * 169 format_256(netdissect_options *ndo, const u_char *data) 170 { 171 static char buf[4][sizeof("0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef")]; 172 static int i = 0; 173 i = (i + 1) % 4; 174 snprintf(buf[i], sizeof(buf[i]), "%016" PRIx64 "%016" PRIx64 "%016" PRIx64 "%016" PRIx64, 175 GET_BE_U_8(data), 176 GET_BE_U_8(data + 8), 177 GET_BE_U_8(data + 16), 178 GET_BE_U_8(data + 24) 179 ); 180 return buf[i]; 181 } 182 183 static const char * 184 format_interval(const uint32_t n) 185 { 186 static char buf[4][sizeof("0000000.000s")]; 187 static int i = 0; 188 i = (i + 1) % 4; 189 snprintf(buf[i], sizeof(buf[i]), "%u.%03us", n / 1000, n % 1000); 190 return buf[i]; 191 } 192 193 static const char * 194 format_ip6addr(netdissect_options *ndo, const u_char *cp) 195 { 196 if (is_ipv4_mapped_address(cp)) 197 return GET_IPADDR_STRING(cp + IPV4_MAPPED_HEADING_LEN); 198 else 199 return GET_IP6ADDR_STRING(cp); 200 } 201 202 static int 203 print_prefix(netdissect_options *ndo, const u_char *prefix, u_int max_length) 204 { 205 int plenbytes; 206 char buf[sizeof("xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx::/128")]; 207 208 if (GET_U_1(prefix) >= 96 && max_length >= IPV4_MAPPED_HEADING_LEN + 1 && 209 is_ipv4_mapped_address(prefix + 1)) { 210 nd_ipv4 addr; 211 u_int plen; 212 213 plen = GET_U_1(prefix) - 96; 214 if (32 < plen) 215 return -1; 216 max_length -= 1; 217 218 memset(&addr, 0, sizeof(addr)); 219 plenbytes = (plen + 7) / 8; 220 if (max_length < (u_int)plenbytes + IPV4_MAPPED_HEADING_LEN) 221 return -3; 222 memcpy(&addr, prefix + IPV4_MAPPED_HEADING_LEN + 1, plenbytes); 223 if (plen % 8) { 224 ((u_char *)&addr)[plenbytes - 1] &= 225 ((0xff00 >> (plen % 8)) & 0xff); 226 } 227 snprintf(buf, sizeof(buf), "%s/%u", ipaddr_string(ndo, (const u_char *)&addr), plen); /* local buffer, not packet data; don't use GET_IPADDR_STRING() */ 228 plenbytes += 1 + IPV4_MAPPED_HEADING_LEN; 229 } else { 230 plenbytes = decode_prefix6(ndo, prefix, max_length, buf, sizeof(buf)); 231 if (plenbytes < 0) 232 return plenbytes; 233 } 234 235 ND_PRINT("%s", buf); 236 return plenbytes; 237 } 238 239 static int 240 print_dns_label(netdissect_options *ndo, 241 const u_char *cp, u_int max_length, int print) 242 { 243 u_int length = 0; 244 while (length < max_length) { 245 u_int lab_length = GET_U_1(cp + length); 246 length++; 247 if (lab_length == 0) 248 return (int)length; 249 if (length > 1 && print) 250 ND_PRINT("."); 251 if (length+lab_length > max_length) { 252 if (print) 253 nd_printjnp(ndo, cp+length, max_length-length); 254 break; 255 } 256 if (print) 257 nd_printjnp(ndo, cp+length, lab_length); 258 length += lab_length; 259 } 260 if (print) 261 ND_PRINT("[|DNS]"); 262 return -1; 263 } 264 265 static int 266 dhcpv4_print(netdissect_options *ndo, 267 const u_char *cp, u_int length, int indent) 268 { 269 u_int i, t; 270 const uint8_t *tlv, *value; 271 uint8_t type, optlen; 272 273 i = 0; 274 while (i < length) { 275 if (i + 2 > length) 276 return -1; 277 tlv = cp + i; 278 type = GET_U_1(tlv); 279 optlen = GET_U_1(tlv + 1); 280 value = tlv + 2; 281 282 ND_PRINT("\n"); 283 for (t = indent; t > 0; t--) 284 ND_PRINT("\t"); 285 286 ND_PRINT("%s", tok2str(dh4opt_str, "Unknown", type)); 287 ND_PRINT(" (%u)", optlen + 2 ); 288 if (i + 2 + optlen > length) 289 return -1; 290 291 switch (type) { 292 case DH4OPT_DNS_SERVERS: 293 case DH4OPT_NTP_SERVERS: { 294 if (optlen < 4 || optlen % 4 != 0) { 295 return -1; 296 } 297 for (t = 0; t < optlen; t += 4) 298 ND_PRINT(" %s", GET_IPADDR_STRING(value + t)); 299 } 300 break; 301 case DH4OPT_DOMAIN_SEARCH: { 302 const u_char *tp = value; 303 while (tp < value + optlen) { 304 ND_PRINT(" "); 305 if ((tp = fqdn_print(ndo, tp, value + optlen)) == NULL) 306 return -1; 307 } 308 } 309 break; 310 } 311 312 i += 2 + optlen; 313 } 314 return 0; 315 } 316 317 static int 318 dhcpv6_print(netdissect_options *ndo, 319 const u_char *cp, u_int length, int indent) 320 { 321 u_int i, t; 322 const u_char *tlv, *value; 323 uint16_t type, optlen; 324 325 i = 0; 326 while (i < length) { 327 if (i + 4 > length) 328 return -1; 329 tlv = cp + i; 330 type = GET_BE_U_2(tlv); 331 optlen = GET_BE_U_2(tlv + 2); 332 value = tlv + 4; 333 334 ND_PRINT("\n"); 335 for (t = indent; t > 0; t--) 336 ND_PRINT("\t"); 337 338 ND_PRINT("%s", tok2str(dh6opt_str, "Unknown", type)); 339 ND_PRINT(" (%u)", optlen + 4 ); 340 if (i + 4 + optlen > length) 341 return -1; 342 343 switch (type) { 344 case DH6OPT_DNS_SERVERS: 345 case DH6OPT_SNTP_SERVERS: { 346 if (optlen % 16 != 0) { 347 nd_print_invalid(ndo); 348 return -1; 349 } 350 for (t = 0; t < optlen; t += 16) 351 ND_PRINT(" %s", GET_IP6ADDR_STRING(value + t)); 352 } 353 break; 354 case DH6OPT_DOMAIN_LIST: { 355 const u_char *tp = value; 356 while (tp < value + optlen) { 357 ND_PRINT(" "); 358 if ((tp = fqdn_print(ndo, tp, value + optlen)) == NULL) 359 return -1; 360 } 361 } 362 break; 363 } 364 365 i += 4 + optlen; 366 } 367 return 0; 368 } 369 370 /* Determine in-line mode */ 371 static int 372 is_in_line(netdissect_options *ndo, int indent) 373 { 374 return indent - 1 >= ndo->ndo_vflag && ndo->ndo_vflag < 3; 375 } 376 377 static void 378 print_type_in_line(netdissect_options *ndo, 379 uint32_t type, int count, int indent, int *first_one) 380 { 381 if (count > 0) { 382 if (*first_one) { 383 *first_one = 0; 384 if (indent > 1) { 385 u_int t; 386 ND_PRINT("\n"); 387 for (t = indent; t > 0; t--) 388 ND_PRINT("\t"); 389 } else { 390 ND_PRINT(" "); 391 } 392 } else { 393 ND_PRINT(", "); 394 } 395 ND_PRINT("%s", tok2str(type_values, "Easter Egg", type)); 396 if (count > 1) 397 ND_PRINT(" (x%d)", count); 398 } 399 } 400 401 static void 402 hncp_print_rec(netdissect_options *ndo, 403 const u_char *cp, u_int length, int indent) 404 { 405 const int in_line = is_in_line(ndo, indent); 406 int first_one = 1; 407 408 u_int i, t; 409 410 uint32_t last_type_mask = 0xffffffffU; 411 int last_type_count = -1; 412 413 const uint8_t *tlv, *value; 414 uint16_t type, bodylen; 415 uint32_t type_mask; 416 417 i = 0; 418 while (i < length) { 419 tlv = cp + i; 420 421 if (!in_line) { 422 ND_PRINT("\n"); 423 for (t = indent; t > 0; t--) 424 ND_PRINT("\t"); 425 } 426 427 ND_TCHECK_4(tlv); 428 if (i + 4 > length) 429 goto invalid; 430 431 type = GET_BE_U_2(tlv); 432 bodylen = GET_BE_U_2(tlv + 2); 433 value = tlv + 4; 434 ND_TCHECK_LEN(value, bodylen); 435 if (i + bodylen + 4 > length) 436 goto invalid; 437 438 type_mask = 439 (type == 0) ? RANGE_DNCP_RESERVED: 440 (44 <= type && type <= 511) ? RANGE_HNCP_UNASSIGNED: 441 (768 <= type && type <= 1023) ? RANGE_DNCP_PRIVATE_USE: 442 RANGE_DNCP_FUTURE_USE; 443 if (type == 6 || type == 7) 444 type_mask = RANGE_DNCP_FUTURE_USE; 445 446 /* defined types */ 447 { 448 t = 0; 449 while (1) { 450 u_int key = type_values[t++].v; 451 if (key > 0xffff) 452 break; 453 if (key == type) { 454 type_mask = type; 455 break; 456 } 457 } 458 } 459 460 if (in_line) { 461 if (last_type_mask == type_mask) { 462 last_type_count++; 463 } else { 464 print_type_in_line(ndo, last_type_mask, last_type_count, indent, &first_one); 465 last_type_mask = type_mask; 466 last_type_count = 1; 467 } 468 469 goto skip_multiline; 470 } 471 472 ND_PRINT("%s", tok2str(type_values, "Easter Egg (42)", type_mask) ); 473 if (type_mask > 0xffff) 474 ND_PRINT(": type=%u", type ); 475 ND_PRINT(" (%u)", bodylen + 4 ); 476 477 switch (type_mask) { 478 479 case DNCP_REQUEST_NETWORK_STATE: { 480 if (bodylen != 0) 481 nd_print_invalid(ndo); 482 } 483 break; 484 485 case DNCP_REQUEST_NODE_STATE: { 486 const char *node_identifier; 487 if (bodylen != 4) { 488 nd_print_invalid(ndo); 489 break; 490 } 491 node_identifier = format_nid(ndo, value); 492 ND_PRINT(" NID: %s", node_identifier); 493 } 494 break; 495 496 case DNCP_NODE_ENDPOINT: { 497 const char *node_identifier; 498 uint32_t endpoint_identifier; 499 if (bodylen != 8) { 500 nd_print_invalid(ndo); 501 break; 502 } 503 node_identifier = format_nid(ndo, value); 504 endpoint_identifier = GET_BE_U_4(value + 4); 505 ND_PRINT(" NID: %s EPID: %08x", 506 node_identifier, 507 endpoint_identifier 508 ); 509 } 510 break; 511 512 case DNCP_NETWORK_STATE: { 513 uint64_t hash; 514 if (bodylen != 8) { 515 nd_print_invalid(ndo); 516 break; 517 } 518 hash = GET_BE_U_8(value); 519 ND_PRINT(" hash: %016" PRIx64, hash); 520 } 521 break; 522 523 case DNCP_NODE_STATE: { 524 const char *node_identifier, *interval; 525 uint32_t sequence_number; 526 uint64_t hash; 527 if (bodylen < 20) { 528 nd_print_invalid(ndo); 529 break; 530 } 531 node_identifier = format_nid(ndo, value); 532 sequence_number = GET_BE_U_4(value + 4); 533 interval = format_interval(GET_BE_U_4(value + 8)); 534 hash = GET_BE_U_8(value + 12); 535 ND_PRINT(" NID: %s seqno: %u %s hash: %016" PRIx64, 536 node_identifier, 537 sequence_number, 538 interval, 539 hash 540 ); 541 hncp_print_rec(ndo, value+20, bodylen-20, indent+1); 542 } 543 break; 544 545 case DNCP_PEER: { 546 const char *peer_node_identifier; 547 uint32_t peer_endpoint_identifier, endpoint_identifier; 548 if (bodylen != 12) { 549 nd_print_invalid(ndo); 550 break; 551 } 552 peer_node_identifier = format_nid(ndo, value); 553 peer_endpoint_identifier = GET_BE_U_4(value + 4); 554 endpoint_identifier = GET_BE_U_4(value + 8); 555 ND_PRINT(" Peer-NID: %s Peer-EPID: %08x Local-EPID: %08x", 556 peer_node_identifier, 557 peer_endpoint_identifier, 558 endpoint_identifier 559 ); 560 } 561 break; 562 563 case DNCP_KEEP_ALIVE_INTERVAL: { 564 uint32_t endpoint_identifier; 565 const char *interval; 566 if (bodylen < 8) { 567 nd_print_invalid(ndo); 568 break; 569 } 570 endpoint_identifier = GET_BE_U_4(value); 571 interval = format_interval(GET_BE_U_4(value + 4)); 572 ND_PRINT(" EPID: %08x Interval: %s", 573 endpoint_identifier, 574 interval 575 ); 576 } 577 break; 578 579 case DNCP_TRUST_VERDICT: { 580 if (bodylen <= 36) { 581 nd_print_invalid(ndo); 582 break; 583 } 584 ND_PRINT(" Verdict: %u Fingerprint: %s Common Name: ", 585 GET_U_1(value), 586 format_256(ndo, value + 4)); 587 nd_printjnp(ndo, value + 36, bodylen - 36); 588 } 589 break; 590 591 case HNCP_HNCP_VERSION: { 592 uint16_t capabilities; 593 uint8_t M, P, H, L; 594 if (bodylen < 5) { 595 nd_print_invalid(ndo); 596 break; 597 } 598 capabilities = GET_BE_U_2(value + 2); 599 M = (uint8_t)((capabilities >> 12) & 0xf); 600 P = (uint8_t)((capabilities >> 8) & 0xf); 601 H = (uint8_t)((capabilities >> 4) & 0xf); 602 L = (uint8_t)(capabilities & 0xf); 603 ND_PRINT(" M: %u P: %u H: %u L: %u User-agent: ", 604 M, P, H, L 605 ); 606 nd_printjnp(ndo, value + 4, bodylen - 4); 607 } 608 break; 609 610 case HNCP_EXTERNAL_CONNECTION: { 611 /* Container TLV */ 612 hncp_print_rec(ndo, value, bodylen, indent+1); 613 } 614 break; 615 616 case HNCP_DELEGATED_PREFIX: { 617 int l; 618 if (bodylen < 9 || bodylen < 9 + (GET_U_1(value + 8) + 7) / 8) { 619 nd_print_invalid(ndo); 620 break; 621 } 622 ND_PRINT(" VLSO: %s PLSO: %s Prefix: ", 623 format_interval(GET_BE_U_4(value)), 624 format_interval(GET_BE_U_4(value + 4)) 625 ); 626 l = print_prefix(ndo, value + 8, bodylen - 8); 627 if (l == -1) { 628 ND_PRINT("(length is invalid)"); 629 break; 630 } 631 if (l < 0) { 632 /* 633 * We've already checked that we've captured the 634 * entire TLV, based on its length, so this will 635 * either be -1, meaning "the prefix length is 636 * greater than the longest possible address of 637 * that type" (i.e., > 32 for IPv4 or > 128 for 638 * IPv6", or -3, meaning "the prefix runs past 639 * the end of the TLV". 640 */ 641 nd_print_invalid(ndo); 642 break; 643 } 644 l += 8 + (-l & 3); 645 646 if (bodylen >= l) 647 hncp_print_rec(ndo, value + l, bodylen - l, indent+1); 648 } 649 break; 650 651 case HNCP_PREFIX_POLICY: { 652 uint8_t policy; 653 int l; 654 if (bodylen < 1) { 655 nd_print_invalid(ndo); 656 break; 657 } 658 policy = GET_U_1(value); 659 ND_PRINT(" type: "); 660 if (policy == 0) { 661 if (bodylen != 1) { 662 nd_print_invalid(ndo); 663 break; 664 } 665 ND_PRINT("Internet connectivity"); 666 } else if (policy >= 1 && policy <= 128) { 667 ND_PRINT("Dest-Prefix: "); 668 l = print_prefix(ndo, value, bodylen); 669 if (l == -1) { 670 ND_PRINT("(length is invalid)"); 671 break; 672 } 673 if (l < 0) { 674 /* 675 * We've already checked that we've captured the 676 * entire TLV, based on its length, so this will 677 * either be -1, meaning "the prefix length is 678 * greater than the longest possible address of 679 * that type" (i.e., > 32 for IPv4 or > 128 for 680 * IPv6", or -3, meaning "the prefix runs past 681 * the end of the TLV". 682 */ 683 nd_print_invalid(ndo); 684 break; 685 } 686 } else if (policy == 129) { 687 ND_PRINT("DNS domain: "); 688 print_dns_label(ndo, value+1, bodylen-1, 1); 689 } else if (policy == 130) { 690 ND_PRINT("Opaque UTF-8: "); 691 nd_printjnp(ndo, value + 1, bodylen - 1); 692 } else if (policy == 131) { 693 if (bodylen != 1) { 694 nd_print_invalid(ndo); 695 break; 696 } 697 ND_PRINT("Restrictive assignment"); 698 } else if (policy >= 132) { 699 ND_PRINT("Unknown (%u)", policy); /* Reserved for future additions */ 700 } 701 } 702 break; 703 704 case HNCP_DHCPV4_DATA: { 705 if (bodylen == 0) { 706 nd_print_invalid(ndo); 707 break; 708 } 709 if (dhcpv4_print(ndo, value, bodylen, indent+1) != 0) 710 goto invalid; 711 } 712 break; 713 714 case HNCP_DHCPV6_DATA: { 715 if (bodylen == 0) { 716 nd_print_invalid(ndo); 717 break; 718 } 719 if (dhcpv6_print(ndo, value, bodylen, indent+1) != 0) { 720 nd_print_invalid(ndo); 721 break; 722 } 723 } 724 break; 725 726 case HNCP_ASSIGNED_PREFIX: { 727 uint8_t prty; 728 int l; 729 if (bodylen < 6 || bodylen < 6 + (GET_U_1(value + 5) + 7) / 8) { 730 nd_print_invalid(ndo); 731 break; 732 } 733 prty = GET_U_1(value + 4) & 0xf; 734 ND_PRINT(" EPID: %08x Prty: %u", 735 GET_BE_U_4(value), 736 prty 737 ); 738 ND_PRINT(" Prefix: "); 739 if ((l = print_prefix(ndo, value + 5, bodylen - 5)) < 0) { 740 nd_print_invalid(ndo); 741 break; 742 } 743 l += 5; 744 l += -l & 3; 745 746 if (bodylen >= l) 747 hncp_print_rec(ndo, value + l, bodylen - l, indent+1); 748 } 749 break; 750 751 case HNCP_NODE_ADDRESS: { 752 uint32_t endpoint_identifier; 753 const char *ip_address; 754 if (bodylen < 20) { 755 nd_print_invalid(ndo); 756 break; 757 } 758 endpoint_identifier = GET_BE_U_4(value); 759 ip_address = format_ip6addr(ndo, value + 4); 760 ND_PRINT(" EPID: %08x IP Address: %s", 761 endpoint_identifier, 762 ip_address 763 ); 764 765 hncp_print_rec(ndo, value + 20, bodylen - 20, indent+1); 766 } 767 break; 768 769 case HNCP_DNS_DELEGATED_ZONE: { 770 const char *ip_address; 771 int len; 772 if (bodylen < 17) { 773 nd_print_invalid(ndo); 774 break; 775 } 776 ip_address = format_ip6addr(ndo, value); 777 ND_PRINT(" IP-Address: %s %c%c%c ", 778 ip_address, 779 (GET_U_1(value + 16) & 4) ? 'l' : '-', 780 (GET_U_1(value + 16) & 2) ? 'b' : '-', 781 (GET_U_1(value + 16) & 1) ? 's' : '-' 782 ); 783 len = print_dns_label(ndo, value+17, bodylen-17, 1); 784 if (len < 0) { 785 nd_print_invalid(ndo); 786 break; 787 } 788 len += 17; 789 len += -len & 3; 790 if (bodylen >= len) 791 hncp_print_rec(ndo, value+len, bodylen-len, indent+1); 792 } 793 break; 794 795 case HNCP_DOMAIN_NAME: { 796 if (bodylen == 0) { 797 nd_print_invalid(ndo); 798 break; 799 } 800 ND_PRINT(" Domain: "); 801 print_dns_label(ndo, value, bodylen, 1); 802 } 803 break; 804 805 case HNCP_NODE_NAME: { 806 u_int l; 807 if (bodylen < 17) { 808 nd_print_invalid(ndo); 809 break; 810 } 811 l = GET_U_1(value + 16); 812 if (bodylen < 17 + l) { 813 nd_print_invalid(ndo); 814 break; 815 } 816 ND_PRINT(" IP-Address: %s Name: ", 817 format_ip6addr(ndo, value) 818 ); 819 if (l < 64) { 820 ND_PRINT("\""); 821 nd_printjnp(ndo, value + 17, l); 822 ND_PRINT("\""); 823 } else { 824 nd_print_invalid(ndo); 825 } 826 l += 17; 827 l = roundup2(l, 4); 828 if (bodylen >= l) 829 hncp_print_rec(ndo, value + l, bodylen - l, indent+1); 830 } 831 break; 832 833 case HNCP_MANAGED_PSK: { 834 if (bodylen < 32) { 835 nd_print_invalid(ndo); 836 break; 837 } 838 ND_PRINT(" PSK: %s", format_256(ndo, value)); 839 hncp_print_rec(ndo, value + 32, bodylen - 32, indent+1); 840 } 841 break; 842 843 case RANGE_DNCP_RESERVED: 844 case RANGE_HNCP_UNASSIGNED: 845 case RANGE_DNCP_PRIVATE_USE: 846 case RANGE_DNCP_FUTURE_USE: 847 break; 848 849 } 850 skip_multiline: 851 852 i += 4 + roundup2(bodylen, 4); 853 } 854 print_type_in_line(ndo, last_type_mask, last_type_count, indent, &first_one); 855 856 return; 857 858 trunc: 859 nd_print_trunc(ndo); 860 return; 861 862 invalid: 863 nd_print_invalid(ndo); 864 } 865