- ND_TCHECK_SIZE(dp);
-
- if (ndo->ndo_vflag) {
- ND_PRINT("frag (0x%08x:%u|%u)",
- EXTRACT_BE_U_4(dp->ip6f_ident),
- EXTRACT_BE_U_2(dp->ip6f_offlg) & IP6F_OFF_MASK,
- (u_int)(sizeof(struct ip6_hdr) + EXTRACT_BE_U_2(ip6->ip6_plen) -
- (bp - bp2) - sizeof(struct ip6_frag)));
- } else {
- ND_PRINT("frag (%u|%u)",
- EXTRACT_BE_U_2(dp->ip6f_offlg) & IP6F_OFF_MASK,
- (u_int)(sizeof(struct ip6_hdr) + EXTRACT_BE_U_2(ip6->ip6_plen) -
- (bp - bp2) - sizeof(struct ip6_frag)));
- }
+ ND_PRINT("frag (");
+ if (ndo->ndo_vflag)
+ ND_PRINT("0x%08x:", GET_BE_U_4(dp->ip6f_ident));
+ else
+ ND_TCHECK_4(dp->ip6f_ident);
+ ND_PRINT("%u|", GET_BE_U_2(dp->ip6f_offlg) & IP6F_OFF_MASK);
+ if ((bp - bp2) + sizeof(struct ip6_frag) >
+ sizeof(struct ip6_hdr) + GET_BE_U_2(ip6->ip6_plen))
+ ND_PRINT("[length < 0] (invalid))");
+ else
+ ND_PRINT("%zu)",
+ sizeof(struct ip6_hdr) + GET_BE_U_2(ip6->ip6_plen) -
+ (bp - bp2) - sizeof(struct ip6_frag));