ipsec: IPSec protection for multi-point tunnel interfaces

[vpp.git] / src / vnet / buffer.h

diff --git a/src/vnet/buffer.h b/src/vnet/buffer.h
index aed72c5..5293561 100644 (file)
--- a/src/vnet/buffer.h
+++ b/src/vnet/buffer.h
@@ -168,7 +168,7 @@ typedef struct
          };
 
          /* Rewrite length */
-         u32 save_rewrite_length;
+         u8 save_rewrite_length;
 
          /* MFIB RPF ID */
          u32 rpf_id;
@@ -185,9 +185,8 @@ typedef struct
        /* reassembly */
        union
        {
-         /* group input/output/handoff to simplify the code, this way:
-          * we can handoff while keeping input variables intact
-          * and also we can write the output and still use next_index later */
+         /* group input/output to simplify the code, this way
+          * we can handoff while keeping input variables intact */
          struct
          {
            /* input variables */
@@ -201,23 +200,28 @@ typedef struct
            {
              u16 owner_thread_index;
            };
-           /* output variables */
-           struct
+         };
+         /* output variables */
+         struct
+         {
+           union
            {
-             union
+             /* shallow virtual reassembly output variables */
+             struct
              {
-               /* shallow virtual reassembly output variables */
-               struct
-               {
-                 u8 ip_proto;  /* protocol in ip header */
-                 u16 l4_src_port;      /* tcp/udp/icmp src port */
-                 u16 l4_dst_port;      /* tcp/udp/icmp dst port */
-               };
-               /* full reassembly output variables */
-               struct
-               {
-                 u16 estimated_mtu;    /* estimated MTU calculated during reassembly */
-               };
+               u16 l4_src_port;        /* tcp/udp/icmp src port */
+               u16 l4_dst_port;        /* tcp/udp/icmp dst port */
+               u32 tcp_ack_number;
+               u8 save_rewrite_length;
+               u8 ip_proto;    /* protocol in ip header */
+               u8 icmp_type_or_tcp_flags;
+               u8 is_non_first_fragment;
+               u32 tcp_seq_number;
+             };
+             /* full reassembly output variables */
+             struct
+             {
+               u16 estimated_mtu;      /* estimated MTU calculated during reassembly */
              };
            };
          };
@@ -250,7 +254,7 @@ typedef struct
       u8 pyld_proto:3;         /* dpo_proto_t */
       u8 rsvd:5;
       /* Rewrite length */
-      u32 save_rewrite_length;
+      u8 save_rewrite_length;
       /* Save the mpls header length including all label stack */
       u8 mpls_hdr_length;
       /*
@@ -380,6 +384,28 @@ typedef struct
   };
 } vnet_buffer_opaque_t;
 
+#define VNET_REWRITE_TOTAL_BYTES (VLIB_BUFFER_PRE_DATA_SIZE)
+
+STATIC_ASSERT (STRUCT_SIZE_OF (vnet_buffer_opaque_t, ip.save_rewrite_length)
+              == STRUCT_SIZE_OF (vnet_buffer_opaque_t,
+                                 ip.reass.save_rewrite_length)
+              && STRUCT_SIZE_OF (vnet_buffer_opaque_t,
+                                 ip.reass.save_rewrite_length) ==
+              STRUCT_SIZE_OF (vnet_buffer_opaque_t, mpls.save_rewrite_length)
+              && STRUCT_SIZE_OF (vnet_buffer_opaque_t,
+                                 mpls.save_rewrite_length) == 1
+              && VNET_REWRITE_TOTAL_BYTES < UINT8_MAX,
+              "save_rewrite_length member must be able to hold the max value of rewrite length");
+
+STATIC_ASSERT (STRUCT_OFFSET_OF (vnet_buffer_opaque_t, ip.save_rewrite_length)
+              == STRUCT_OFFSET_OF (vnet_buffer_opaque_t,
+                                   ip.reass.save_rewrite_length)
+              && STRUCT_OFFSET_OF (vnet_buffer_opaque_t,
+                                   mpls.save_rewrite_length) ==
+              STRUCT_OFFSET_OF (vnet_buffer_opaque_t,
+                                ip.reass.save_rewrite_length),
+              "save_rewrite_length must be aligned so that reass doesn't overwrite it");
+
 /*
  * The opaque field of the vlib_buffer_t is interpreted as a
  * vnet_buffer_opaque_t. Hence it should be big enough to accommodate one.