/*
 * Copyright (C) 1998 WIDE Project.
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the name of the project nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#include <sys/cdefs.h>
#ifndef lint
__RCSID("$NetBSD: print-ip6opts.c,v 1.10 2026/03/19 00:05:13 christos Exp $");
#endif

/* \summary: IPv6 header option printer */

#include <config.h>

#include "netdissect-stdinc.h"

#define ND_LONGJMP_FROM_TCHECK
#include "netdissect.h"
#include "addrtoname.h"
#include "extract.h"

#include "ip6.h"

static int
ip6_sopt_print(netdissect_options *ndo, const u_char *bp, const u_int len)
{
    unsigned int i, opttype, optlen;

    for (i = 0; i < len; i += optlen) {
	opttype = GET_U_1(bp + i);
	if (opttype == IP6OPT_PAD1)
	    optlen = 1;
	else {
	    ND_ICHECKMSG_U("remaining length", (u_int)(len - i), <,
			   IP6OPT_MINLEN);
	    optlen = GET_U_1(bp + i + 1) + 2;
	}
	ND_ICHECKMSG_U("remaining length", (u_int)(len - i), <, optlen);
	ND_TCHECK_LEN(bp + i, optlen);

	switch (opttype) {
	case IP6OPT_PAD1:
            ND_PRINT(", pad1");
	    break;
	case IP6OPT_PADN:
            ND_PRINT(", padn");
	    break;
	default:
	    ND_PRINT(", unknown subopt-type 0x%02x len=%u", opttype, optlen - 2);
	    break;
	}
    }
    return 0;

invalid:
    return -1;
}

static int
ip6_opt_process(netdissect_options *ndo, const u_char *bp, const u_int len,
		int *found_jumbop, uint32_t *payload_len)
{
    unsigned int i, opttype, optlen;
    int found_jumbo = 0;
    uint32_t jumbolen = 0;

    if (len == 0)
        return 0;
    for (i = 0; i < len; i += optlen) {
	opttype = GET_U_1(bp + i);
	if (opttype == IP6OPT_PAD1)
	    optlen = 1;
	else {
	    ND_ICHECKMSG_U("remaining length", (u_int)(len - i), <,
			   IP6OPT_MINLEN);
	    optlen = GET_U_1(bp + i + 1) + 2;
	}
	ND_ICHECKMSG_U("remaining length", (u_int)(len - i), <, optlen);
	ND_TCHECK_LEN(bp + i, optlen);

	switch (opttype) {
	case IP6OPT_PAD1:
	    if (ndo->ndo_vflag)
                ND_PRINT("(pad1)");
	    break;
	case IP6OPT_PADN:
	    if (ndo->ndo_vflag)
                ND_PRINT("(padn)");
	    break;
	case IP6OPT_ROUTER_ALERT:
	    ND_ICHECKMSG_U("(rtalert) remaining length", (u_int)(len - i), <,
			   IP6OPT_RTALERT_LEN);
	    ND_ICHECKMSG_U("(rtalert) length", optlen - 2, !=,
			   IP6OPT_RTALERT_LEN - 2);
	    if (ndo->ndo_vflag)
		ND_PRINT("(rtalert: 0x%04x) ", GET_BE_U_2(bp + i + 2));
	    break;
	case IP6OPT_JUMBO:
	    ND_ICHECKMSG_U("(jumbo) remaining length", (u_int)(len - i), <,
			   IP6OPT_JUMBO_LEN);
	    ND_ICHECKMSG_U("(jumbo) length", optlen - 2, !=,
			   IP6OPT_JUMBO_LEN - 2);
	    jumbolen = GET_BE_U_4(bp + i + 2);
	    if (found_jumbo) {
		/* More than one Jumbo Payload option */
		if (ndo->ndo_vflag)
		    ND_PRINT("(jumbo: %u - already seen) ", jumbolen);
	    } else {
		found_jumbo = 1;
		if (payload_len == NULL) {
		    /* Not a hop-by-hop option - not valid */
		    if (ndo->ndo_vflag)
			ND_PRINT("(jumbo: %u - not a hop-by-hop option) ", jumbolen);
		} else if (*payload_len != 0) {
		    /* Payload length was non-zero - not valid */
		    if (ndo->ndo_vflag)
			ND_PRINT("(jumbo: %u - payload len != 0) ", jumbolen);
		} else {
		    /*
		     * This is a hop-by-hop option, and Payload length
		     * was zero in the IPv6 header.
		     */
		    if (jumbolen < 65536) {
			/* Too short */
			if (ndo->ndo_vflag)
			    ND_PRINT("(jumbo: %u - < 65536) ", jumbolen);
		    } else {
			/* OK, this is valid */
			*found_jumbop = 1;
			*payload_len = jumbolen;
			if (ndo->ndo_vflag)
			    ND_PRINT("(jumbo: %u) ", jumbolen);
		    }
		}
	    }
	    break;
        case IP6OPT_HOME_ADDRESS:
	    ND_ICHECKMSG_U("(homeaddr) remaining length", (u_int)(len - i), <,
			   IP6OPT_HOMEADDR_MINLEN);
	    ND_ICHECKMSG_U("(homeaddr) length", optlen - 2, <,
			   IP6OPT_HOMEADDR_MINLEN - 2);
	    if (ndo->ndo_vflag) {
		ND_PRINT("(homeaddr: %s", GET_IP6ADDR_STRING(bp + i + 2));
		if (optlen > IP6OPT_HOMEADDR_MINLEN) {
		    if (ip6_sopt_print(ndo, bp + i + IP6OPT_HOMEADDR_MINLEN,
				       (optlen - IP6OPT_HOMEADDR_MINLEN)) == -1)
			goto invalid;
		}
		ND_PRINT(")");
	    }
	    break;
	default:
	    if (ndo->ndo_vflag)
		ND_PRINT("(unknown opt-type 0x%02x len=%u)", opttype, optlen - 2);
	    break;
	}
    }
    if (ndo->ndo_vflag)
        ND_PRINT(" ");
    return 0;

invalid:
    return -1;
}

int
hbhopt_process(netdissect_options *ndo, const u_char *bp, int *found_jumbo,
	       uint32_t *jumbolen)
{
    const struct ip6_hbh *dp = (const struct ip6_hbh *)bp;
    u_int hbhlen = 0;

    ndo->ndo_protocol = "hbh";
    hbhlen = (GET_U_1(dp->ip6h_len) + 1) << 3;
    ND_TCHECK_LEN(dp, hbhlen);
    nd_print_protocol_caps(ndo);
    ND_PRINT(" ");
    if (ip6_opt_process(ndo, (const u_char *)dp + sizeof(*dp),
			hbhlen - sizeof(*dp), found_jumbo, jumbolen) == -1)
	goto invalid;
    return hbhlen;

invalid:
    nd_print_invalid(ndo);
    return -1;
}

int
dstopt_process(netdissect_options *ndo, const u_char *bp)
{
    const struct ip6_dest *dp = (const struct ip6_dest *)bp;
    u_int dstoptlen = 0;

    ndo->ndo_protocol = "dstopt";
    dstoptlen = (GET_U_1(dp->ip6d_len) + 1) << 3;
    ND_TCHECK_LEN(dp, dstoptlen);
    nd_print_protocol_caps(ndo);
    ND_PRINT(" ");
    if (ndo->ndo_vflag) {
	/*
	 * The Jumbo Payload option is a hop-by-hop option; we don't
	 * honor Jumbo Payload destination options, reporting them
	 * as invalid.
	 */
	if (ip6_opt_process(ndo, (const u_char *)dp + sizeof(*dp),
			    dstoptlen - sizeof(*dp), NULL, NULL) == -1)
	    goto invalid;
    }

    return dstoptlen;

invalid:
    nd_print_invalid(ndo);
    return -1;
}

.