]> The Tcpdump Group git mirrors - tcpdump/blobdiff - print-ip6.c
CI: Add warning exemptions for Sun C (suncc-5.14) on Solaris 10
[tcpdump] / print-ip6.c
index 827151eb3d068dd6dcfb4bde41a31ea76bee7b55..269b41fb2a7aabc87b2cf811126734728a49b027 100644 (file)
@@ -21,9 +21,7 @@
 
 /* \summary: IPv6 printer */
 
-#ifdef HAVE_CONFIG_H
 #include <config.h>
-#endif
 
 #include "netdissect-stdinc.h"
 
@@ -249,7 +247,6 @@ ip6_print(netdissect_options *ndo, const u_char *bp, u_int length)
        ND_ICHECK_ZU(length, <, sizeof (struct ip6_hdr));
        ND_ICHECKMSG_U("version", IP6_VERSION(ip6), !=, 6);
 
-       ND_TCHECK_SIZE(ip6);
        payload_len = GET_BE_U_2(ip6->ip6_plen);
        /*
         * RFC 1883 says:
@@ -276,7 +273,7 @@ ip6_print(netdissect_options *ndo, const u_char *bp, u_int length)
        if (payload_len != 0) {
                len = payload_len + sizeof(struct ip6_hdr);
                if (len > length) {
-                       ND_PRINT("[payload+header length %u > length %u]",
+                       ND_PRINT("[header+payload length %u > length %u]",
                                 len, length);
                        nd_print_invalid(ndo);
                        ND_PRINT(" ");
@@ -295,17 +292,20 @@ ip6_print(netdissect_options *ndo, const u_char *bp, u_int length)
            if (flow & 0x000fffff)
                ND_PRINT("flowlabel 0x%05x, ", flow & 0x000fffff);
 
-           ND_PRINT("hlim %u, next-header %s (%u) payload length: %u) ",
+           ND_PRINT("hlim %u, next-header %s (%u), payload length %u) ",
                         GET_U_1(ip6->ip6_hlim),
                         tok2str(ipproto_values,"unknown",nh),
                         nh,
                         payload_len);
        }
+       ND_TCHECK_SIZE(ip6);
 
        /*
-        * Cut off the snapshot length to the end of the IP payload.
+        * Cut off the snapshot length to the end of the IP payload
+        * or the end of the data in which it's contained, whichever
+        * comes first.
         */
-       if (!nd_push_snaplen(ndo, bp, len)) {
+       if (!nd_push_snaplen(ndo, bp, ND_MIN(length, len))) {
                (*ndo->ndo_error)(ndo, S_ERR_ND_MEM_ALLOC,
                        "%s: can't push snaplen on buffer stack", __func__);
        }
@@ -328,7 +328,7 @@ ip6_print(netdissect_options *ndo, const u_char *bp, u_int length)
                    nh != IPPROTO_TCP && nh != IPPROTO_UDP &&
                    nh != IPPROTO_DCCP && nh != IPPROTO_SCTP) {
                        ND_PRINT("%s > %s: ", GET_IP6ADDR_STRING(ip6->ip6_src),
-                                    GET_IP6ADDR_STRING(ip6->ip6_dst));
+                                GET_IP6ADDR_STRING(ip6->ip6_dst));
                }
 
                switch (nh) {
@@ -387,7 +387,7 @@ ip6_print(netdissect_options *ndo, const u_char *bp, u_int length)
                case IPPROTO_MOBILITY_OLD:
                case IPPROTO_MOBILITY:
                        /*
-                        * XXX - we don't use "advance"; RFC 3775 says that
+                        * RFC 3775 says that
                         * the next header field in a mobility header
                         * should be IPPROTO_NONE, but speaks of
                         * the possibility of a future extension in
@@ -435,7 +435,7 @@ ip6_print(netdissect_options *ndo, const u_char *bp, u_int length)
                                if (len < total_advance)
                                        goto trunc;
                                if (len > length) {
-                                       ND_PRINT("[payload+header length %u > length %u]",
+                                       ND_PRINT("[header+payload length %u > length %u]",
                                                 len, length);
                                        nd_print_invalid(ndo);
                                        ND_PRINT(" ");