Skip to main content

packet_formats/icmp/
ndp.rs

1// Copyright 2018 The Fuchsia Authors. All rights reserved.
2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5//! Messages used for NDP (ICMPv6).
6
7use core::num::NonZeroU8;
8use core::time::Duration;
9
10use net_types::ip::{Ipv6, Ipv6Addr};
11use zerocopy::byteorder::network_endian::{U16, U32};
12use zerocopy::{FromBytes, Immutable, IntoBytes, KnownLayout, SplitByteSlice, Unaligned};
13
14use crate::icmp::{IcmpIpExt, IcmpPacket, IcmpPacketRaw, IcmpZeroCode};
15use crate::utils::NonZeroDuration;
16
17/// An ICMPv6 packet with an NDP message.
18#[allow(missing_docs)]
19#[derive(Debug)]
20pub enum NdpPacket<B: SplitByteSlice> {
21    RouterSolicitation(IcmpPacket<Ipv6, B, RouterSolicitation>),
22    RouterAdvertisement(IcmpPacket<Ipv6, B, RouterAdvertisement>),
23    NeighborSolicitation(IcmpPacket<Ipv6, B, NeighborSolicitation>),
24    NeighborAdvertisement(IcmpPacket<Ipv6, B, NeighborAdvertisement>),
25    Redirect(IcmpPacket<Ipv6, B, Redirect>),
26}
27
28/// A raw ICMPv6 packet with an NDP message.
29#[allow(missing_docs)]
30#[derive(Debug)]
31pub enum NdpPacketRaw<B: SplitByteSlice> {
32    RouterSolicitation(IcmpPacketRaw<Ipv6, B, RouterSolicitation>),
33    RouterAdvertisement(IcmpPacketRaw<Ipv6, B, RouterAdvertisement>),
34    NeighborSolicitation(IcmpPacketRaw<Ipv6, B, NeighborSolicitation>),
35    NeighborAdvertisement(IcmpPacketRaw<Ipv6, B, NeighborAdvertisement>),
36    Redirect(IcmpPacketRaw<Ipv6, B, Redirect>),
37}
38
39/// A non-zero lifetime conveyed through NDP.
40#[derive(Copy, Clone, Debug, Eq, PartialEq, PartialOrd, Ord)]
41pub enum NonZeroNdpLifetime {
42    /// A finite lifetime greater than zero.
43    ///
44    /// Note that the finite lifetime is not statically guaranteed to be less
45    /// than the infinite value representation of a field. E.g. for Prefix
46    /// Information option lifetime 32-bit fields, infinity is represented as
47    /// all 1s but it is possible for this variant to hold a value representing
48    /// X seconds where X is >= 2^32.
49    Finite(NonZeroDuration),
50
51    /// An infinite lifetime.
52    Infinite,
53}
54
55impl NonZeroNdpLifetime {
56    /// Returns a `Some(NonZeroNdpLifetime)` if the passed lifetime is non-zero;
57    /// otherwise `None`.
58    pub fn from_u32_with_infinite(lifetime: u32) -> Option<NonZeroNdpLifetime> {
59        // Per RFC 4861 section 4.6.2,
60        //
61        //   Valid Lifetime
62        //                  32-bit unsigned integer.  The length of time in
63        //                  seconds (relative to the time the packet is sent)
64        //                  that the prefix is valid for the purpose of on-link
65        //                  determination.  A value of all one bits
66        //                  (0xffffffff) represents infinity.  The Valid
67        //                  Lifetime is also used by [ADDRCONF].
68        //
69        //   Preferred Lifetime
70        //                  32-bit unsigned integer.  The length of time in
71        //                  seconds (relative to the time the packet is sent)
72        //                  that addresses generated from the prefix via
73        //                  stateless address autoconfiguration remain
74        //                  preferred [ADDRCONF].  A value of all one bits
75        //                  (0xffffffff) represents infinity.  See [ADDRCONF].
76        match lifetime {
77            u32::MAX => Some(NonZeroNdpLifetime::Infinite),
78            finite => NonZeroDuration::new(Duration::from_secs(finite.into()))
79                .map(NonZeroNdpLifetime::Finite),
80        }
81    }
82
83    /// Returns the minimum finite duration.
84    pub fn min_finite_duration(self, other: NonZeroDuration) -> NonZeroDuration {
85        match self {
86            NonZeroNdpLifetime::Finite(lifetime) => core::cmp::min(lifetime, other),
87            NonZeroNdpLifetime::Infinite => other,
88        }
89    }
90}
91
92/// A records parser for NDP options.
93///
94/// See [`Options`] for more details.
95///
96/// [`Options`]: packet::records::options::Options
97pub type Options<B> = packet::records::options::Options<B, options::NdpOptionsImpl>;
98
99/// A builder for a sequence of NDP options.
100///
101/// See [`OptionSequenceBuilder`] for more details.
102///
103/// [`OptionSequenceBuilder`]: packet::records::options::OptionSequenceBuilder
104pub type OptionSequenceBuilder<'a, I> =
105    packet::records::options::OptionSequenceBuilder<options::NdpOptionBuilder<'a>, I>;
106
107/// An NDP Router Solicitation.
108#[derive(
109    Copy,
110    Clone,
111    Default,
112    Debug,
113    KnownLayout,
114    FromBytes,
115    IntoBytes,
116    Immutable,
117    Unaligned,
118    PartialEq,
119    Eq,
120)]
121#[repr(C)]
122pub struct RouterSolicitation {
123    _reserved: [u8; 4],
124}
125
126impl_icmp_message!(Ipv6, RouterSolicitation, RouterSolicitation, IcmpZeroCode, Options<B>);
127
128/// The preference for a route as defined by [RFC 4191 section 2.1].
129///
130/// [RFC 4191 section 2.1]: https://datatracker.ietf.org/doc/html/rfc4191#section-2.1
131#[allow(missing_docs)]
132#[derive(Copy, Clone, Debug, PartialEq, Eq)]
133pub enum RoutePreference {
134    // We don't want to store invalid states like Reserved, as this MUST NOT be sent nor processed.
135    // From RFC 4191 section 2.1:
136    //   10      Reserved - MUST NOT be sent
137    //   ...
138    //   If the Reserved (10) value is received, the Route Information Option MUST be ignored.
139    High,
140    Medium,
141    Low,
142}
143
144impl Default for RoutePreference {
145    fn default() -> RoutePreference {
146        // As per RFC 4191 section 2.1,
147        //
148        //   Preference values are encoded as a two-bit signed integer, as
149        //   follows:
150        //
151        //      01      High
152        //      00      Medium (default)
153        //      11      Low
154        //      10      Reserved - MUST NOT be sent
155        RoutePreference::Medium
156    }
157}
158
159impl From<RoutePreference> for u8 {
160    fn from(v: RoutePreference) -> u8 {
161        // As per RFC 4191 section 2.1,
162        //
163        //   Preference values are encoded as a two-bit signed integer, as
164        //   follows:
165        //
166        //      01      High
167        //      00      Medium (default)
168        //      11      Low
169        //      10      Reserved - MUST NOT be sent
170        match v {
171            RoutePreference::High => 0b01,
172            RoutePreference::Medium => 0b00,
173            RoutePreference::Low => 0b11,
174        }
175    }
176}
177
178impl TryFrom<u8> for RoutePreference {
179    type Error = ();
180
181    fn try_from(v: u8) -> Result<Self, Self::Error> {
182        // As per RFC 4191 section 2.1,
183        //
184        //   Preference values are encoded as a two-bit signed integer, as
185        //   follows:
186        //
187        //      01      High
188        //      00      Medium (default)
189        //      11      Low
190        //      10      Reserved - MUST NOT be sent
191        match v {
192            0b01 => Ok(RoutePreference::High),
193            0b00 => Ok(RoutePreference::Medium),
194            0b11 => Ok(RoutePreference::Low),
195            _ => Err(()),
196        }
197    }
198}
199
200/// An NDP Router Advertisement.
201#[derive(
202    Copy, Clone, Debug, KnownLayout, FromBytes, IntoBytes, Immutable, Unaligned, PartialEq, Eq,
203)]
204#[repr(C)]
205pub struct RouterAdvertisement {
206    current_hop_limit: u8,
207    configuration_mo: u8,
208    router_lifetime: U16,
209    reachable_time: U32,
210    retransmit_timer: U32,
211}
212
213impl_icmp_message!(Ipv6, RouterAdvertisement, RouterAdvertisement, IcmpZeroCode, Options<B>);
214
215impl RouterAdvertisement {
216    /// Managed address configuration flag.
217    ///
218    /// When set, it indicates that addresses are available via Dynamic Host Configuration Protocol
219    /// (DHCPv6).
220    ///
221    /// If set, the "Pther configuration" flag is redundant and can be ignored because DHCPv6 will
222    /// return all available configuration information.
223    const MANAGED_FLAG: u8 = 0x80;
224
225    /// Other configuration flag.
226    ///
227    /// When set, it indicates that other configuration information is available via DHCPv6.
228    /// Examples of such information are DNS-related information or information on other servers
229    /// within the network.
230    const OTHER_CONFIGURATION_FLAG: u8 = 0x40;
231
232    // As per RFC 4191 section 2.2,
233    //
234    //      0                   1                   2                   3
235    //      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
236    //     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
237    //     |     Type      |     Code      |          Checksum             |
238    //     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
239    //     | Cur Hop Limit |M|O|H|Prf|Resvd|       Router Lifetime         |
240    //     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
241    //     |                         Reachable Time                        |
242    //     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
243    //     |                          Retrans Timer                        |
244    //     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
245    //
246    //  Fields:
247    //
248    //   Prf (Default Router Preference)
249    //            2-bit signed integer.  Indicates whether to prefer this
250    //            router over other default routers.  If the Router Lifetime
251    //            is zero, the preference value MUST be set to (00) by the
252    //            sender and MUST be ignored by the receiver.  If the Reserved
253    //            (10) value is received, the receiver MUST treat the value as
254    //            if it were (00).
255    const DEFAULT_ROUTER_PREFERENCE_SHIFT: u8 = 3;
256    const DEFAULT_ROUTER_PREFERENCE_MASK: u8 = 0b11 << Self::DEFAULT_ROUTER_PREFERENCE_SHIFT;
257
258    /// Creates a new Router Advertisement with the specified field values.
259    ///
260    /// Equivalent to calling `with_prf` with a default preference value.
261    pub fn new(
262        current_hop_limit: u8,
263        managed_flag: bool,
264        other_config_flag: bool,
265        router_lifetime: u16,
266        reachable_time: u32,
267        retransmit_timer: u32,
268    ) -> Self {
269        Self::with_prf(
270            current_hop_limit,
271            managed_flag,
272            other_config_flag,
273            RoutePreference::default(),
274            router_lifetime,
275            reachable_time,
276            retransmit_timer,
277        )
278    }
279
280    /// Creates a new Router Advertisement with the specified field values.
281    pub fn with_prf(
282        current_hop_limit: u8,
283        managed_flag: bool,
284        other_config_flag: bool,
285        preference: RoutePreference,
286        router_lifetime: u16,
287        reachable_time: u32,
288        retransmit_timer: u32,
289    ) -> Self {
290        let mut configuration_mo = 0;
291
292        if managed_flag {
293            configuration_mo |= Self::MANAGED_FLAG;
294        }
295
296        if other_config_flag {
297            configuration_mo |= Self::OTHER_CONFIGURATION_FLAG;
298        }
299
300        configuration_mo |= (u8::from(preference) << Self::DEFAULT_ROUTER_PREFERENCE_SHIFT)
301            & Self::DEFAULT_ROUTER_PREFERENCE_MASK;
302
303        Self {
304            current_hop_limit,
305            configuration_mo,
306            router_lifetime: U16::new(router_lifetime),
307            reachable_time: U32::new(reachable_time),
308            retransmit_timer: U32::new(retransmit_timer),
309        }
310    }
311
312    /// Returns the current hop limit field.
313    ///
314    /// A value of `None` means unspecified by the source of the Router Advertisement.
315    pub fn current_hop_limit(&self) -> Option<NonZeroU8> {
316        NonZeroU8::new(self.current_hop_limit)
317    }
318
319    /// Returns the router lifetime.
320    ///
321    /// A value of `None` indicates that the router is not a default router and SHOULD
322    /// NOT appear in the default router list.
323    pub fn router_lifetime(&self) -> Option<NonZeroDuration> {
324        // As per RFC 4861 section 4.2, the Router Lifetime field is held in units
325        // of seconds.
326        NonZeroDuration::new(Duration::from_secs(self.router_lifetime.get().into()))
327    }
328
329    /// Returns the reachable time.
330    ///
331    /// A value of `None` means unspecified by the source of the Router Advertisement.
332    pub fn reachable_time(&self) -> Option<NonZeroDuration> {
333        // As per RFC 4861 section 4.2, the Reachable Time field is held in units
334        // of milliseconds.
335        NonZeroDuration::new(Duration::from_millis(self.reachable_time.get().into()))
336    }
337
338    /// Returns the retransmit timer.
339    ///
340    /// A value of `None` means unspecified by the source of the Router Advertisement.
341    pub fn retransmit_timer(&self) -> Option<NonZeroDuration> {
342        // As per RFC 4861 section 4.2, the Retransmit Timer field is held in units
343        // of milliseconds
344        NonZeroDuration::new(Duration::from_millis(self.retransmit_timer.get().into()))
345    }
346
347    /// Returns the default router preference.
348    pub fn preference(&self) -> RoutePreference {
349        let preference = (self.configuration_mo & Self::DEFAULT_ROUTER_PREFERENCE_MASK)
350            >> Self::DEFAULT_ROUTER_PREFERENCE_SHIFT;
351        // Per RFC 4191:
352        //  If the Reserved (10) value is received, the receiver MUST treat the
353        //  value as if it were (00).
354        RoutePreference::try_from(preference).unwrap_or_default()
355    }
356}
357
358/// An NDP Neighbor Solicitation.
359#[derive(
360    Copy, Clone, Debug, KnownLayout, FromBytes, IntoBytes, Immutable, Unaligned, PartialEq, Eq,
361)]
362#[repr(C)]
363pub struct NeighborSolicitation {
364    _reserved: [u8; 4],
365    target_address: Ipv6Addr,
366}
367
368impl_icmp_message!(Ipv6, NeighborSolicitation, NeighborSolicitation, IcmpZeroCode, Options<B>);
369
370impl NeighborSolicitation {
371    /// Creates a new neighbor solicitation message with the provided
372    /// `target_address`.
373    pub fn new(target_address: Ipv6Addr) -> Self {
374        Self { _reserved: [0; 4], target_address }
375    }
376
377    /// Get the target address in neighbor solicitation message.
378    pub fn target_address(&self) -> &Ipv6Addr {
379        &self.target_address
380    }
381}
382
383/// An NDP Neighbor Advertisement.
384#[derive(
385    Copy, Clone, Debug, KnownLayout, FromBytes, IntoBytes, Immutable, Unaligned, PartialEq, Eq,
386)]
387#[repr(C)]
388pub struct NeighborAdvertisement {
389    flags_rso: u8,
390    _reserved: [u8; 3],
391    target_address: Ipv6Addr,
392}
393
394impl_icmp_message!(Ipv6, NeighborAdvertisement, NeighborAdvertisement, IcmpZeroCode, Options<B>);
395
396impl NeighborAdvertisement {
397    /// Router flag.
398    ///
399    /// When set, the R-bit indicates that the sender is a router. The R-bit is
400    /// used by Neighbor Unreachability Detection to detect a router that
401    /// changes to a host.
402    const FLAG_ROUTER: u8 = 0x80;
403
404    /// Solicited flag.
405    ///
406    /// When set, the S-bit indicates that the advertisement was sent in
407    /// response to a Neighbor Solicitation from the Destination address. The
408    /// S-bit is used as a reachability confirmation for Neighbor Unreachability
409    /// Detection.  It MUST NOT be set in multicast advertisements or in
410    /// unsolicited unicast advertisements.
411    const FLAG_SOLICITED: u8 = 0x40;
412
413    /// Override flag.
414    ///
415    /// When set, the O-bit indicates that the advertisement should override an
416    /// existing cache entry and update the cached link-layer address. When it
417    /// is not set the advertisement will not update a cached link-layer address
418    /// though it will update an existing Neighbor Cache entry for which no
419    /// link-layer address is known.  It SHOULD NOT be set in solicited
420    /// advertisements for anycast addresses and in solicited proxy
421    /// advertisements. It SHOULD be set in other solicited advertisements and
422    /// in unsolicited advertisements.
423    const FLAG_OVERRIDE: u8 = 0x20;
424
425    /// Creates a new neighbor advertisement message with the provided
426    /// `router_flag`, `solicited_flag`, `override_flag` and `target_address`.
427    pub fn new(
428        router_flag: bool,
429        solicited_flag: bool,
430        override_flag: bool,
431        target_address: Ipv6Addr,
432    ) -> Self {
433        let mut flags_rso = 0;
434
435        if router_flag {
436            flags_rso |= Self::FLAG_ROUTER;
437        }
438
439        if solicited_flag {
440            flags_rso |= Self::FLAG_SOLICITED;
441        }
442
443        if override_flag {
444            flags_rso |= Self::FLAG_OVERRIDE;
445        }
446
447        Self { flags_rso, _reserved: [0; 3], target_address }
448    }
449
450    /// Returns the target_address of an NA message.
451    pub fn target_address(&self) -> &Ipv6Addr {
452        &self.target_address
453    }
454
455    /// Returns the router flag.
456    pub fn router_flag(&self) -> bool {
457        (self.flags_rso & Self::FLAG_ROUTER) != 0
458    }
459
460    /// Returns the solicited flag.
461    pub fn solicited_flag(&self) -> bool {
462        (self.flags_rso & Self::FLAG_SOLICITED) != 0
463    }
464
465    /// Returns the override flag.
466    pub fn override_flag(&self) -> bool {
467        (self.flags_rso & Self::FLAG_OVERRIDE) != 0
468    }
469}
470
471/// An ICMPv6 Redirect Message.
472#[derive(
473    Copy, Clone, Debug, KnownLayout, FromBytes, IntoBytes, Immutable, Unaligned, PartialEq, Eq,
474)]
475#[repr(C)]
476pub struct Redirect {
477    _reserved: [u8; 4],
478    target_address: Ipv6Addr,
479    destination_address: Ipv6Addr,
480}
481
482impl_icmp_message!(Ipv6, Redirect, Redirect, IcmpZeroCode, Options<B>);
483
484/// Parsing and serialization of NDP options.
485pub mod options {
486    use core::num::NonZeroUsize;
487    use core::time::Duration;
488
489    use byteorder::{ByteOrder, NetworkEndian};
490    use net_types::UnicastAddress;
491    use net_types::ip::{IpAddress as _, Ipv6Addr, Subnet, SubnetError};
492    use packet::BufferView as _;
493    use packet::records::options::{
494        LengthEncoding, OptionBuilder, OptionLayout, OptionParseErr, OptionParseLayout, OptionsImpl,
495    };
496    use zerocopy::byteorder::network_endian::U32;
497    use zerocopy::{FromBytes, Immutable, IntoBytes, KnownLayout, Ref, SplitByteSlice, Unaligned};
498
499    use super::NonZeroNdpLifetime;
500    use crate::utils::NonZeroDuration;
501
502    /// A `u32` value representing an infinite lifetime for various NDP options' lifetime fields.
503    pub const INFINITE_LIFETIME_SECONDS: u32 = u32::MAX;
504
505    /// A value representing an infinite lifetime for various NDP options'
506    /// lifetime fields.
507    pub const INFINITE_LIFETIME: NonZeroDuration =
508        NonZeroDuration::from_secs(INFINITE_LIFETIME_SECONDS as u64).unwrap();
509
510    /// The number of reserved bytes immediately following the kind and length
511    /// bytes in a Redirected Header option.
512    ///
513    /// See [RFC 4861 section 4.6.3] for more information.
514    ///
515    /// [RFC 4861 section 4.6.3]: https://tools.ietf.org/html/rfc4861#section-4.6.3
516    const REDIRECTED_HEADER_OPTION_RESERVED_BYTES_LENGTH: usize = 6;
517
518    /// The length of an NDP MTU option, excluding the first 2 bytes (kind and length bytes).
519    ///
520    /// See [RFC 4861 section 4.6.3] for more information.
521    ///
522    /// [RFC 4861 section 4.6.3]: https://tools.ietf.org/html/rfc4861#section-4.6.3
523    const MTU_OPTION_LENGTH: usize = 6;
524
525    /// The number of reserved bytes immediately following the kind and length
526    /// bytes in an MTU option.
527    ///
528    /// See [RFC 4861 section 4.6.4] for more information.
529    ///
530    /// [RFC 4861 section 4.6.4]: https://tools.ietf.org/html/rfc4861#section-4.6.4
531    const MTU_OPTION_RESERVED_BYTES_LENGTH: usize = 2;
532
533    /// Minimum number of bytes in a Nonce option, excluding the kind and length bytes.
534    ///
535    /// See [RFC 3971 section 5.3.2] for more information.
536    ///
537    /// [RFC 3971 section 5.3.2]: https://tools.ietf.org/html/rfc3971#section-5.3.2
538    pub const MIN_NONCE_LENGTH: usize = 6;
539
540    /// Minimum number of bytes in a Recursive DNS Server option, excluding the
541    /// kind and length bytes.
542    ///
543    /// This guarantees that a valid Recurisve DNS Server option holds at least
544    /// 1 address.
545    ///
546    /// See [RFC 8106 section 5.3.1] for more information.
547    ///
548    /// [RFC 8106 section 5.3.1]: https://tools.ietf.org/html/rfc8106#section-5.1
549    const MIN_RECURSIVE_DNS_SERVER_OPTION_LENGTH: usize = 22;
550
551    /// The number of reserved bytes immediately following the kind and length
552    /// bytes in a Recursive DNS Server option.
553    ///
554    /// See [RFC 8106 section 5.3.1] for more information.
555    ///
556    /// [RFC 8106 section 5.3.1]: https://tools.ietf.org/html/rfc8106#section-5.1
557    const RECURSIVE_DNS_SERVER_OPTION_RESERVED_BYTES_LENGTH: usize = 2;
558
559    /// The number of reserved bits immediately following (on the right of) the preference.
560    ///
561    /// See [RFC 4191 section 2.3] for more information.
562    ///
563    /// [RFC 4191 section 2.3]: https://tools.ietf.org/html/rfc4191#section-2.3
564    const ROUTE_INFORMATION_PREFERENCE_RESERVED_BITS_RIGHT: u8 = 3;
565
566    /// A mask to keep only the valid bits for the preference in the Route Information option.
567    ///
568    /// See [RFC 4191 section 2.3] for more information.
569    ///
570    /// [RFC 4191 section 2.3]: https://tools.ietf.org/html/rfc4191#section-2.3
571    const ROUTE_INFORMATION_PREFERENCE_MASK: u8 = 0x18;
572
573    /// The length of an NDP option is specified in units of 8 octets.
574    ///
575    /// See [RFC 4861 section 4.6] for more information.
576    ///
577    /// [RFC 4861 section 4.6]: https://tools.ietf.org/html/rfc4861#section-4.6
578    const OPTION_BYTES_PER_LENGTH_UNIT: usize = 8;
579
580    /// Recursive DNS Server that is advertised by a router in Router Advertisements.
581    ///
582    /// See [RFC 8106 section 5.1].
583    ///
584    /// [RFC 8106 section 5.1]: https://tools.ietf.org/html/rfc8106#section-5.1
585    #[derive(Debug, PartialEq, Eq, Clone)]
586    pub struct RecursiveDnsServer<'a> {
587        lifetime: u32,
588        addresses: &'a [Ipv6Addr],
589    }
590
591    impl<'a> RecursiveDnsServer<'a> {
592        /// The `u32` value representing an infinite lifetime for a RecursiveDnsServer option.
593        pub const INFINITE_LIFETIME: u32 = INFINITE_LIFETIME_SECONDS;
594
595        /// Returns a new `RecursiveDnsServer`.
596        pub fn new(lifetime: u32, addresses: &'a [Ipv6Addr]) -> RecursiveDnsServer<'a> {
597            RecursiveDnsServer { lifetime, addresses }
598        }
599
600        /// Returns the length of time (relative to the time the packet is sent) that
601        /// the DNS servers are valid for name resolution.
602        ///
603        /// A value of [`INFINITE_LIFETIME`] represents infinity; a value of `None`
604        /// means that the servers MUST no longer be used.
605        pub fn lifetime(&self) -> Option<NonZeroDuration> {
606            NonZeroDuration::new(Duration::from_secs(self.lifetime.into()))
607        }
608
609        /// Returns the recursive DNS server addresses.
610        pub fn iter_addresses(&self) -> &'a [Ipv6Addr] {
611            self.addresses
612        }
613
614        /// Parses a Recursive DNS Server option from raw bytes (starting immediately
615        /// after the kind and length bytes).
616        pub fn parse(data: &'a [u8]) -> Result<Self, OptionParseErr> {
617            if data.len() < MIN_RECURSIVE_DNS_SERVER_OPTION_LENGTH {
618                return Err(OptionParseErr);
619            }
620
621            // Skip the reserved bytes which immediately follow the kind and length
622            // bytes.
623            let (_, data) = data.split_at(RECURSIVE_DNS_SERVER_OPTION_RESERVED_BYTES_LENGTH);
624
625            // As per RFC 8106 section 5.1, the 32 bit lifetime field immediately
626            // follows the reserved field.
627            let (lifetime, data) = Ref::<_, U32>::from_prefix(data).map_err(|_| OptionParseErr)?;
628
629            // As per RFC 8106 section 5.1, the list of addresses immediately
630            // follows the lifetime field.
631            let addresses = Ref::into_ref(
632                Ref::<_, [Ipv6Addr]>::from_bytes(data)
633                    .map_err(Into::into)
634                    .map_err(|_: zerocopy::SizeError<_, _>| OptionParseErr)?,
635            );
636
637            // As per RFC 8106 section 5.3.1, the addresses should all be unicast.
638            if !addresses.iter().all(UnicastAddress::is_unicast) {
639                return Err(OptionParseErr);
640            }
641
642            Ok(Self::new(lifetime.get(), addresses))
643        }
644    }
645
646    /// The first 6 bytes of the Route Information option following the Type and
647    /// Length fields.
648    ///
649    /// As per [RFC 4191 section 2.3],
650    ///
651    /// ```text
652    ///   Route Information Option
653    ///
654    ///      0                   1                   2                   3
655    ///       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
656    ///      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
657    ///      |     Type      |    Length     | Prefix Length |Resvd|Prf|Resvd|
658    ///      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
659    ///      |                        Route Lifetime                         |
660    ///      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
661    ///      |                   Prefix (Variable Length)                    |
662    ///      .                                                               .
663    ///      .                                                               .
664    ///      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
665    /// ```
666    ///
667    /// [RFC 4191 section 2.3]: https://datatracker.ietf.org/doc/html/rfc4191#section-2.3
668    #[derive(KnownLayout, FromBytes, IntoBytes, Immutable, Unaligned)]
669    #[repr(C)]
670    struct RouteInformationHeader {
671        prefix_length: u8,
672        flags: u8,
673        route_lifetime: U32,
674    }
675
676    impl RouteInformationHeader {
677        // As per RFC 4191 section 2.3,
678        //
679        //   Route Information Option
680        //
681        //      0                   1                   2                   3
682        //       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
683        //      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
684        //      |     Type      |    Length     | Prefix Length |Resvd|Prf|Resvd|
685        //      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
686        //      |                        Route Lifetime                         |
687        //      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
688        //      |                   Prefix (Variable Length)                    |
689        //      .                                                               .
690        //      .                                                               .
691        //      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
692        const PREFERENCE_SHIFT: u8 = 3;
693        const PREFERENCE_MASK: u8 = 0b11 << Self::PREFERENCE_SHIFT;
694
695        fn set_preference(&mut self, preference: super::RoutePreference) {
696            let preference: u8 = preference.into();
697
698            self.flags &= !Self::PREFERENCE_MASK;
699            self.flags |= (preference << Self::PREFERENCE_SHIFT) & Self::PREFERENCE_MASK;
700        }
701    }
702
703    /// Builder for a Route Information option.
704    ///
705    /// See [RFC 4191 section 2.3].
706    ///
707    /// [RFC 4191 section 2.3]: https://datatracker.ietf.org/doc/html/rfc4191#section-2.3
708    #[derive(Debug, PartialEq, Eq)]
709    pub struct RouteInformation {
710        prefix: Subnet<Ipv6Addr>,
711        route_lifetime_seconds: u32,
712        preference: super::RoutePreference,
713    }
714
715    impl RouteInformation {
716        /// Returns a new Route Information option builder.
717        pub fn new(
718            prefix: Subnet<Ipv6Addr>,
719            route_lifetime_seconds: u32,
720            preference: super::RoutePreference,
721        ) -> Self {
722            Self { prefix, route_lifetime_seconds, preference }
723        }
724
725        /// The prefix represented as a [`Subnet`].
726        pub fn prefix(&self) -> &Subnet<Ipv6Addr> {
727            &self.prefix
728        }
729
730        /// The preference of the route.
731        pub fn preference(&self) -> super::RoutePreference {
732            self.preference
733        }
734
735        /// Returns the lifetime of the route.
736        pub fn route_lifetime(&self) -> Option<NonZeroNdpLifetime> {
737            NonZeroNdpLifetime::from_u32_with_infinite(self.route_lifetime_seconds)
738        }
739
740        fn prefix_bytes_len(&self) -> usize {
741            let RouteInformation { prefix, route_lifetime_seconds: _, preference: _ } = self;
742
743            let prefix_length = prefix.prefix();
744            // As per RFC 4191 section 2.3,
745            //
746            //    Length     8-bit unsigned integer.  The length of the option
747            //               (including the Type and Length fields) in units of 8
748            //               octets.  The Length field is 1, 2, or 3 depending on the
749            //               Prefix Length.  If Prefix Length is greater than 64, then
750            //               Length must be 3.  If Prefix Length is greater than 0,
751            //               then Length must be 2 or 3.  If Prefix Length is zero,
752            //               then Length must be 1, 2, or 3.
753            //
754            // This function only returns the length of the prefix bytes in units of
755            // 1 octet.
756            if prefix_length == 0 {
757                0
758            } else if prefix_length <= 64 {
759                core::mem::size_of::<Ipv6Addr>() / 2
760            } else {
761                core::mem::size_of::<Ipv6Addr>()
762            }
763        }
764
765        fn serialized_len(&self) -> usize {
766            core::mem::size_of::<RouteInformationHeader>() + self.prefix_bytes_len()
767        }
768
769        fn serialize(&self, buffer: &mut [u8]) {
770            let (mut hdr, buffer) = Ref::<_, RouteInformationHeader>::from_prefix(buffer)
771                .expect("expected buffer to hold enough bytes for serialization");
772
773            let prefix_bytes_len = self.prefix_bytes_len();
774            let RouteInformation { prefix, route_lifetime_seconds, preference } = self;
775
776            hdr.prefix_length = prefix.prefix();
777            hdr.set_preference(*preference);
778            hdr.route_lifetime.set(*route_lifetime_seconds);
779            buffer[..prefix_bytes_len]
780                .copy_from_slice(&prefix.network().bytes()[..prefix_bytes_len])
781        }
782    }
783
784    /// Number of bytes in a Prefix Information option, excluding the kind
785    /// and length bytes.
786    ///
787    /// See [RFC 4861 section 4.6.2] for more information.
788    ///
789    /// [RFC 4861 section 4.6.2]: https://tools.ietf.org/html/rfc4861#section-4.6.2
790    const PREFIX_INFORMATION_OPTION_LENGTH: usize = 30;
791
792    /// Prefix information that is advertised by a router in Router Advertisements.
793    ///
794    /// See [RFC 4861 section 4.6.2].
795    ///
796    /// [RFC 4861 section 4.6.2]: https://tools.ietf.org/html/rfc4861#section-4.6.2
797    #[derive(
798        Debug, KnownLayout, FromBytes, IntoBytes, Immutable, Unaligned, PartialEq, Eq, Clone,
799    )]
800    #[repr(C)]
801    pub struct PrefixInformation {
802        prefix_length: u8,
803        flags_la: u8,
804        valid_lifetime: U32,
805        preferred_lifetime: U32,
806        _reserved: [u8; 4],
807        prefix: Ipv6Addr,
808    }
809
810    impl PrefixInformation {
811        /// The on-link flag within the 4th byte in the prefix information buffer.
812        ///
813        /// See [RFC 4861 section 4.6.2] for more information.
814        ///
815        /// [RFC 4861 section 4.6.2]: https://tools.ietf.org/html/rfc4861#section-4.6.2
816        const ON_LINK_FLAG: u8 = 0x80;
817
818        /// The autonomous address configuration flag within the 4th byte in the
819        /// prefix information buffer
820        ///
821        /// See [RFC 4861 section 4.6.2] for more information.
822        ///
823        /// [RFC 4861 section 4.6.2]: https://tools.ietf.org/html/rfc4861#section-4.6.2
824        const AUTONOMOUS_ADDRESS_CONFIGURATION_FLAG: u8 = 0x40;
825
826        /// Create a new `PrefixInformation`.
827        pub fn new(
828            prefix_length: u8,
829            on_link_flag: bool,
830            autonomous_address_configuration_flag: bool,
831            valid_lifetime: u32,
832            preferred_lifetime: u32,
833            prefix: Ipv6Addr,
834        ) -> Self {
835            let mut flags_la = 0;
836
837            if on_link_flag {
838                flags_la |= Self::ON_LINK_FLAG;
839            }
840
841            if autonomous_address_configuration_flag {
842                flags_la |= Self::AUTONOMOUS_ADDRESS_CONFIGURATION_FLAG;
843            }
844
845            Self {
846                prefix_length,
847                flags_la,
848                valid_lifetime: U32::new(valid_lifetime),
849                preferred_lifetime: U32::new(preferred_lifetime),
850                _reserved: [0; 4],
851                prefix,
852            }
853        }
854
855        /// The number of leading bits in the prefix that are valid.
856        pub fn prefix_length(&self) -> u8 {
857            self.prefix_length
858        }
859
860        /// Is this prefix on the link?
861        ///
862        /// Returns `true` if the prefix is on-link. `false` means that
863        /// no statement is made about on or off-link properties of the
864        /// prefix; nodes MUST NOT conclude that an address derived
865        /// from this prefix is off-link if `false`.
866        pub fn on_link_flag(&self) -> bool {
867            (self.flags_la & Self::ON_LINK_FLAG) != 0
868        }
869
870        /// Can this prefix be used for stateless address configuration?
871        pub fn autonomous_address_configuration_flag(&self) -> bool {
872            (self.flags_la & Self::AUTONOMOUS_ADDRESS_CONFIGURATION_FLAG) != 0
873        }
874
875        /// Get the length of time (relative to the time the packet is sent) that
876        /// the prefix is valid for the purpose of on-link determination and SLAAC.
877        ///
878        /// `None` indicates that the prefix has no valid lifetime and should
879        /// not be considered valid.
880        pub fn valid_lifetime(&self) -> Option<NonZeroNdpLifetime> {
881            NonZeroNdpLifetime::from_u32_with_infinite(self.valid_lifetime.get())
882        }
883
884        /// Get the length of time (relative to the time the packet is sent) that
885        /// addresses generated from the prefix via SLAAC remains preferred.
886        ///
887        /// `None` indicates that the prefix has no preferred lifetime and
888        /// should not be considered preferred.
889        pub fn preferred_lifetime(&self) -> Option<NonZeroNdpLifetime> {
890            NonZeroNdpLifetime::from_u32_with_infinite(self.preferred_lifetime.get())
891        }
892
893        /// An IPv6 address or a prefix of an IPv6 address.
894        ///
895        /// The number of valid leading bits in this prefix is available
896        /// from [`PrefixInformation::prefix_length`];
897        // TODO(https://fxbug.dev/42173363): Consider merging prefix and prefix_length and return a
898        // Subnet.
899        pub fn prefix(&self) -> &Ipv6Addr {
900            &self.prefix
901        }
902
903        /// Gets the prefix as a [`Subnet`].
904        pub fn subnet(&self) -> Result<Subnet<Ipv6Addr>, SubnetError> {
905            Subnet::new(self.prefix, self.prefix_length)
906        }
907    }
908
909    /// Consts for NDP option types.
910    pub mod option_types {
911        /// Prefix Information (https://datatracker.ietf.org/doc/html/rfc4861#section-4.6.2)
912        pub const PREFIX_INFORMATION: u8 = 3;
913
914        /// Recursive DNS Server (https://datatracker.ietf.org/doc/html/rfc8106#section-5.1)
915        pub const RECURSIVE_DNS_SERVER: u8 = 25;
916
917        /// DNS Search List (https://datatracker.ietf.org/doc/html/rfc8106#section-5.2)
918        pub const DNS_SEARCH_LIST: u8 = 31;
919
920        /// 6LoWPAN Context Option (https://datatracker.ietf.org/doc/html/rfc6775#section-4.2)
921        pub const SIXLOWPAN_CONTEXT: u8 = 34;
922
923        /// Captive Portal (https://datatracker.ietf.org/doc/html/rfc8910#section-2.3)
924        pub const CAPTIVE_PORTAL: u8 = 37;
925
926        /// PREF64 (https://datatracker.ietf.org/doc/html/rfc8781#name-option-format)
927        pub const PREF64: u8 = 38;
928
929        /// May return a debug string for a given option type.
930        pub fn debug_name(option_type: u8) -> Option<&'static str> {
931            // Match with preceding `super::...` namespace to avoid accidentally binding
932            // SOME_VARIABLE instead of matching against a named constant.
933            match option_type {
934                super::option_types::PREFIX_INFORMATION => Some("PREFIX_INFORMATION"),
935                super::option_types::RECURSIVE_DNS_SERVER => Some("RECURSIVE_DNS_SERVER"),
936                super::option_types::DNS_SEARCH_LIST => Some("DNS_SEARCH_LIST"),
937                super::option_types::SIXLOWPAN_CONTEXT => Some("SIXLOWPAN_CONTEXT"),
938                super::option_types::CAPTIVE_PORTAL => Some("CAPTIVE_PORTAL"),
939                super::option_types::PREF64 => Some("PREF64"),
940                _ => None,
941            }
942        }
943    }
944
945    use option_types::{PREFIX_INFORMATION, RECURSIVE_DNS_SERVER};
946
947    create_protocol_enum!(
948        /// The types of NDP options that may be found in NDP messages.
949        #[allow(missing_docs)]
950        pub enum NdpOptionType: u8 {
951            SourceLinkLayerAddress, 1, "Source Link-Layer Address";
952            TargetLinkLayerAddress, 2, "Target Link-Layer Address";
953            PrefixInformation, PREFIX_INFORMATION, "Prefix Information";
954            RedirectedHeader, 4, "Redirected Header";
955            Mtu, 5, "MTU";
956            Nonce, 14, "Nonce";
957            RouteInformation, 24, "Route Information";
958            RecursiveDnsServer, RECURSIVE_DNS_SERVER, "Recursive DNS Server";
959        }
960    );
961
962    /// Nonce option used to make sure an advertisement is a fresh response to
963    /// a solicitation sent earlier.
964    ///
965    /// See [RFC 3971 section 5.3.2].
966    ///
967    /// [RFC 3971 section 5.3.2]: https://tools.ietf.org/html/rfc3971#section-5.3.2
968    #[derive(Debug, PartialEq, Eq, Copy, Clone, PartialOrd, Ord)]
969    pub struct NdpNonce<B: SplitByteSlice> {
970        nonce: B,
971    }
972
973    impl<B: SplitByteSlice> NdpNonce<B> {
974        /// The bytes of the nonce.
975        pub fn bytes(&self) -> &[u8] {
976            let Self { nonce } = self;
977            nonce.deref()
978        }
979
980        /// Constructs an `NdpNonce` from a `B: SplitByteSlice`, returning an error
981        /// if the resulting nonce would not have a valid length.
982        pub fn new(value: B) -> Result<Self, InvalidNonceError> {
983            let bytes = value.deref();
984            // As per RFC 3971 section 5.3.2, the length of the random number
985            // must be selected such that the length of the Nonce option
986            // (including the type and length bytes) is a multiple of 8 octets.
987            let nonce_option_length_bytes = bytes.len() + 2;
988            if nonce_option_length_bytes % 8 != 0 {
989                return Err(InvalidNonceError::ResultsInNonMultipleOf8);
990            }
991
992            let nonce_option_length_in_groups_of_8_bytes = nonce_option_length_bytes / 8;
993
994            // The nonce options's length (in terms of groups of 8 octets) would
995            // be too large to fit in a `u8`.
996            match u8::try_from(nonce_option_length_in_groups_of_8_bytes) {
997                Ok(_) => (),
998                Err(_) => return Err(InvalidNonceError::TooLong),
999            };
1000
1001            Ok(Self { nonce: value })
1002        }
1003    }
1004
1005    impl<B: SplitByteSlice> AsRef<[u8]> for NdpNonce<B> {
1006        fn as_ref(&self) -> &[u8] {
1007            self.bytes()
1008        }
1009    }
1010
1011    // Provide a `From` implementation for `[u8; MIN_NONCE_LENGTH]` since this
1012    // is a common conversion and is convenient to make infallible.
1013    impl<'a> From<&'a [u8; MIN_NONCE_LENGTH]> for NdpNonce<&'a [u8]> {
1014        fn from(value: &'a [u8; MIN_NONCE_LENGTH]) -> Self {
1015            Self { nonce: &value[..] }
1016        }
1017    }
1018
1019    /// Errors that may occur when constructing a Nonce option.
1020    #[derive(Debug, PartialEq, Eq, Copy, Clone)]
1021    pub enum InvalidNonceError {
1022        /// The nonce's length is such that the nonce option's length would not
1023        /// be a multiple of 8 octets.
1024        ResultsInNonMultipleOf8,
1025        /// The nonce is too long.
1026        TooLong,
1027    }
1028
1029    /// NDP options that may be found in NDP messages.
1030    #[allow(missing_docs)]
1031    #[derive(Debug, PartialEq, Eq)]
1032    pub enum NdpOption<'a> {
1033        SourceLinkLayerAddress(&'a [u8]),
1034        TargetLinkLayerAddress(&'a [u8]),
1035        PrefixInformation(&'a PrefixInformation),
1036
1037        RedirectedHeader { original_packet: &'a [u8] },
1038
1039        Mtu(u32),
1040        Nonce(NdpNonce<&'a [u8]>),
1041
1042        RecursiveDnsServer(RecursiveDnsServer<'a>),
1043        RouteInformation(RouteInformation),
1044    }
1045
1046    impl<'a> NdpOption<'a> {
1047        /// Accessor for the `Nonce` case.
1048        pub fn nonce(self) -> Option<NdpNonce<&'a [u8]>> {
1049            match self {
1050                NdpOption::Nonce(nonce) => Some(nonce),
1051                _ => None,
1052            }
1053        }
1054
1055        /// Accessor for the `SourceLinkLayerAddress` case.
1056        pub fn source_link_layer_address(self) -> Option<&'a [u8]> {
1057            match self {
1058                NdpOption::SourceLinkLayerAddress(a) => Some(a),
1059                _ => None,
1060            }
1061        }
1062
1063        /// Accessor for the `TargetLinkLayerAddress` case.
1064        pub fn target_link_layer_address(self) -> Option<&'a [u8]> {
1065            match self {
1066                NdpOption::TargetLinkLayerAddress(a) => Some(a),
1067                _ => None,
1068            }
1069        }
1070    }
1071
1072    /// An implementation of [`OptionsImpl`] for NDP options.
1073    #[derive(Debug)]
1074    pub struct NdpOptionsImpl;
1075
1076    impl<'a> OptionLayout for NdpOptionsImpl {
1077        type KindLenField = u8;
1078
1079        // For NDP options the length should be multiplied by 8.
1080        const LENGTH_ENCODING: LengthEncoding = LengthEncoding::TypeLengthValue {
1081            option_len_multiplier: NonZeroUsize::new(8).unwrap(),
1082        };
1083    }
1084
1085    impl OptionParseLayout for NdpOptionsImpl {
1086        // TODO(https://fxbug.dev/42129573): Return more verbose logs on parsing errors.
1087        type Error = OptionParseErr;
1088
1089        // NDP options don't have END_OF_OPTIONS or NOP.
1090        const END_OF_OPTIONS: Option<u8> = None;
1091        const NOP: Option<u8> = None;
1092    }
1093
1094    impl OptionsImpl for NdpOptionsImpl {
1095        type Option<'a> = NdpOption<'a>;
1096
1097        fn parse<'a>(
1098            kind: u8,
1099            mut data: &'a [u8],
1100        ) -> Result<Option<NdpOption<'a>>, OptionParseErr> {
1101            let kind = if let Ok(k) = NdpOptionType::try_from(kind) {
1102                k
1103            } else {
1104                return Ok(None);
1105            };
1106
1107            let opt = match kind {
1108                NdpOptionType::SourceLinkLayerAddress => NdpOption::SourceLinkLayerAddress(data),
1109                NdpOptionType::TargetLinkLayerAddress => NdpOption::TargetLinkLayerAddress(data),
1110                NdpOptionType::PrefixInformation => {
1111                    let data = Ref::<_, PrefixInformation>::from_bytes(data)
1112                        .map_err(|_| OptionParseErr)?;
1113                    NdpOption::PrefixInformation(Ref::into_ref(data))
1114                }
1115                NdpOptionType::RedirectedHeader => NdpOption::RedirectedHeader {
1116                    original_packet: &data[REDIRECTED_HEADER_OPTION_RESERVED_BYTES_LENGTH..],
1117                },
1118                NdpOptionType::Mtu => NdpOption::Mtu(NetworkEndian::read_u32(
1119                    &data[MTU_OPTION_RESERVED_BYTES_LENGTH..],
1120                )),
1121                NdpOptionType::Nonce => NdpOption::Nonce(
1122                    NdpNonce::new(data).map_err(|_: InvalidNonceError| OptionParseErr)?,
1123                ),
1124                NdpOptionType::RecursiveDnsServer => {
1125                    NdpOption::RecursiveDnsServer(RecursiveDnsServer::parse(data)?)
1126                }
1127                NdpOptionType::RouteInformation => {
1128                    // RouteInfoFixed represents the part of the RouteInformation option
1129                    // with a known and fixed length. See RFC 4191 section 2.3.
1130                    #[derive(KnownLayout, FromBytes, Immutable, Unaligned)]
1131                    #[repr(C)]
1132                    struct RouteInfoFixed {
1133                        prefix_length: u8,
1134                        preference_raw: u8,
1135                        route_lifetime_seconds: U32,
1136                    }
1137
1138                    let mut buf = &mut data;
1139
1140                    let fixed = buf.take_obj_front::<RouteInfoFixed>().ok_or(OptionParseErr)?;
1141
1142                    // The preference is preceded and followed by two 3-bit reserved fields.
1143                    let preference = super::RoutePreference::try_from(
1144                        (fixed.preference_raw & ROUTE_INFORMATION_PREFERENCE_MASK)
1145                            >> ROUTE_INFORMATION_PREFERENCE_RESERVED_BITS_RIGHT,
1146                    )
1147                    .map_err(|()| OptionParseErr)?;
1148
1149                    // We need to check whether the remaining buffer length storing the prefix is
1150                    // valid.
1151                    // From RFC 4191 section 2.3:
1152                    //   The length of the option (including the Type and Length fields) in units
1153                    //   of 8 octets.  The Length field is 1, 2, or 3 depending on the Prefix
1154                    //   Length.  If Prefix Length is greater than 64, then Length must be 3.  If
1155                    //   Prefix Length is greater than 0, then Length must be 2 or 3.  If Prefix
1156                    //   Length is zero, then Length must be 1, 2, or 3.
1157                    // The RFC refers to the length of the body which is Route Lifetime + Prefix,
1158                    // i.e. the prefix contained in the buffer can have a length from 0 to 2
1159                    // (included) octets i.e. 0 to 16 bytes.
1160                    let buf_len = buf.len();
1161                    if buf_len % OPTION_BYTES_PER_LENGTH_UNIT != 0 {
1162                        return Err(OptionParseErr);
1163                    }
1164                    let length = buf_len / OPTION_BYTES_PER_LENGTH_UNIT;
1165                    match (fixed.prefix_length, length) {
1166                        (65..=128, 2) => {}
1167                        (1..=64, 1 | 2) => {}
1168                        (0, 0 | 1 | 2) => {}
1169                        _ => return Err(OptionParseErr),
1170                    }
1171
1172                    let mut prefix_buf = [0; 16];
1173                    // It is safe to copy because we validated the remaining length of the buffer.
1174                    prefix_buf[..buf_len].copy_from_slice(&buf);
1175                    let prefix = Ipv6Addr::from_bytes(prefix_buf);
1176
1177                    NdpOption::RouteInformation(RouteInformation::new(
1178                        Subnet::new(prefix, fixed.prefix_length).map_err(|_| OptionParseErr)?,
1179                        fixed.route_lifetime_seconds.get(),
1180                        preference,
1181                    ))
1182                }
1183            };
1184
1185            Ok(Some(opt))
1186        }
1187    }
1188
1189    /// Builder for NDP options that may be found in NDP messages.
1190    #[allow(missing_docs)]
1191    #[derive(Debug)]
1192    pub enum NdpOptionBuilder<'a> {
1193        SourceLinkLayerAddress(&'a [u8]),
1194        TargetLinkLayerAddress(&'a [u8]),
1195        PrefixInformation(PrefixInformation),
1196
1197        RedirectedHeader { original_packet: &'a [u8] },
1198
1199        Mtu(u32),
1200        Nonce(NdpNonce<&'a [u8]>),
1201
1202        RouteInformation(RouteInformation),
1203        RecursiveDnsServer(RecursiveDnsServer<'a>),
1204    }
1205
1206    impl<'a> From<&NdpOptionBuilder<'a>> for NdpOptionType {
1207        fn from(v: &NdpOptionBuilder<'a>) -> Self {
1208            match v {
1209                NdpOptionBuilder::SourceLinkLayerAddress(_) => {
1210                    NdpOptionType::SourceLinkLayerAddress
1211                }
1212                NdpOptionBuilder::TargetLinkLayerAddress(_) => {
1213                    NdpOptionType::TargetLinkLayerAddress
1214                }
1215                NdpOptionBuilder::PrefixInformation(_) => NdpOptionType::PrefixInformation,
1216                NdpOptionBuilder::RedirectedHeader { .. } => NdpOptionType::RedirectedHeader,
1217                NdpOptionBuilder::Mtu { .. } => NdpOptionType::Mtu,
1218                NdpOptionBuilder::Nonce(_) => NdpOptionType::Nonce,
1219                NdpOptionBuilder::RouteInformation(_) => NdpOptionType::RouteInformation,
1220                NdpOptionBuilder::RecursiveDnsServer(_) => NdpOptionType::RecursiveDnsServer,
1221            }
1222        }
1223    }
1224
1225    impl<'a> OptionBuilder for NdpOptionBuilder<'a> {
1226        type Layout = NdpOptionsImpl;
1227
1228        fn serialized_len(&self) -> usize {
1229            match self {
1230                NdpOptionBuilder::SourceLinkLayerAddress(data)
1231                | NdpOptionBuilder::TargetLinkLayerAddress(data) => data.len(),
1232                NdpOptionBuilder::PrefixInformation(_) => PREFIX_INFORMATION_OPTION_LENGTH,
1233                NdpOptionBuilder::RedirectedHeader { original_packet } => {
1234                    REDIRECTED_HEADER_OPTION_RESERVED_BYTES_LENGTH + original_packet.len()
1235                }
1236                NdpOptionBuilder::Mtu(_) => MTU_OPTION_LENGTH,
1237                NdpOptionBuilder::Nonce(NdpNonce { nonce }) => nonce.len(),
1238                NdpOptionBuilder::RouteInformation(o) => o.serialized_len(),
1239                NdpOptionBuilder::RecursiveDnsServer(RecursiveDnsServer {
1240                    lifetime,
1241                    addresses,
1242                }) => {
1243                    RECURSIVE_DNS_SERVER_OPTION_RESERVED_BYTES_LENGTH
1244                        + core::mem::size_of_val(lifetime)
1245                        + core::mem::size_of_val(*addresses)
1246                }
1247            }
1248        }
1249
1250        fn option_kind(&self) -> u8 {
1251            NdpOptionType::from(self).into()
1252        }
1253
1254        fn serialize_into(&self, buffer: &mut [u8]) {
1255            match self {
1256                NdpOptionBuilder::SourceLinkLayerAddress(data)
1257                | NdpOptionBuilder::TargetLinkLayerAddress(data) => buffer.copy_from_slice(data),
1258                NdpOptionBuilder::PrefixInformation(pfx_info) => {
1259                    buffer.copy_from_slice(pfx_info.as_bytes());
1260                }
1261                NdpOptionBuilder::RedirectedHeader { original_packet } => {
1262                    // As per RFC 4861 section 4.6.3, the first 6 bytes following the kind and length
1263                    // bytes are reserved so we zero them. The IP header + data field immediately
1264                    // follows.
1265                    let (reserved_bytes, original_packet_bytes) =
1266                        buffer.split_at_mut(REDIRECTED_HEADER_OPTION_RESERVED_BYTES_LENGTH);
1267                    reserved_bytes
1268                        .copy_from_slice(&[0; REDIRECTED_HEADER_OPTION_RESERVED_BYTES_LENGTH]);
1269                    original_packet_bytes.copy_from_slice(original_packet);
1270                }
1271                NdpOptionBuilder::Mtu(mtu) => {
1272                    // As per RFC 4861 section 4.6.4, the first 2 bytes following the kind and length
1273                    // bytes are reserved so we zero them. The MTU field immediately follows.
1274                    let (reserved_bytes, mtu_bytes) =
1275                        buffer.split_at_mut(MTU_OPTION_RESERVED_BYTES_LENGTH);
1276                    reserved_bytes.copy_from_slice(&[0; MTU_OPTION_RESERVED_BYTES_LENGTH]);
1277                    mtu_bytes.copy_from_slice(U32::new(*mtu).as_bytes());
1278                }
1279                NdpOptionBuilder::Nonce(NdpNonce { nonce }) => {
1280                    buffer.copy_from_slice(nonce);
1281                }
1282                NdpOptionBuilder::RouteInformation(p) => p.serialize(buffer),
1283                NdpOptionBuilder::RecursiveDnsServer(RecursiveDnsServer {
1284                    lifetime,
1285                    addresses,
1286                }) => {
1287                    // As per RFC 8106 section 5.1, the first 2 bytes following the kind and length
1288                    // bytes are reserved so we zero them.
1289                    let (reserved_bytes, buffer) =
1290                        buffer.split_at_mut(RECURSIVE_DNS_SERVER_OPTION_RESERVED_BYTES_LENGTH);
1291                    reserved_bytes
1292                        .copy_from_slice(&[0; RECURSIVE_DNS_SERVER_OPTION_RESERVED_BYTES_LENGTH]);
1293
1294                    // As per RFC 8106 section 5.1, the 32 bit lifetime field immediately
1295                    // follows the reserved field, with the list of addresses immediately
1296                    // following the lifetime field.
1297                    let (lifetime_bytes, addresses_bytes) =
1298                        buffer.split_at_mut(core::mem::size_of_val(lifetime));
1299                    lifetime_bytes.copy_from_slice(U32::new(*lifetime).as_bytes());
1300                    addresses_bytes.copy_from_slice(addresses.as_bytes());
1301                }
1302            }
1303        }
1304    }
1305}
1306
1307#[cfg(test)]
1308mod tests {
1309    use byteorder::{ByteOrder, NetworkEndian};
1310    use net_types::ip::{Ip, IpAddress, Subnet};
1311    use packet::{EmptyBuf, InnerPacketBuilder, PacketBuilder, ParseBuffer, Serializer};
1312    use test_case::test_case;
1313    use zerocopy::Ref;
1314
1315    use super::*;
1316    use crate::icmp::{IcmpPacketBuilder, IcmpParseArgs};
1317    use crate::ipv6::{Ipv6Header, Ipv6Packet};
1318
1319    #[test]
1320    fn parse_serialize_redirected_header() {
1321        let expected_packet = [1, 2, 3, 4, 5, 6, 7, 8];
1322        let options =
1323            &[options::NdpOptionBuilder::RedirectedHeader { original_packet: &expected_packet }];
1324        let serialized = OptionSequenceBuilder::new(options.iter())
1325            .into_serializer()
1326            .serialize_vec_outer()
1327            .unwrap();
1328        // 8 bytes for the kind, length and reserved byes + the bytes for the packet.
1329        let mut expected = [0; 16];
1330        // The first two bytes are the kind and length bytes, respectively. This is then
1331        // followed by 6 reserved bytes.
1332        //
1333        // NDP options hold the number of bytes in units of 8 bytes.
1334        (&mut expected[..2]).copy_from_slice(&[4, 2]);
1335        (&mut expected[8..]).copy_from_slice(&expected_packet);
1336        assert_eq!(serialized.as_ref(), expected);
1337
1338        let parsed = Options::parse(&expected[..]).unwrap();
1339        let parsed = parsed.iter().collect::<Vec<options::NdpOption<'_>>>();
1340        assert_eq!(parsed.len(), 1);
1341        assert_eq!(
1342            options::NdpOption::RedirectedHeader { original_packet: &expected_packet },
1343            parsed[0]
1344        );
1345    }
1346
1347    #[test]
1348    fn parse_serialize_mtu_option() {
1349        let expected_mtu = 5781;
1350        let options = &[options::NdpOptionBuilder::Mtu(expected_mtu)];
1351        let serialized = OptionSequenceBuilder::new(options.iter())
1352            .into_serializer()
1353            .serialize_vec_outer()
1354            .unwrap();
1355        // An MTU option is exactly 8 bytes.
1356        //
1357        // The first two bytes are the kind and length bytes, respectively. This is then
1358        // followed by 2 reserved bytes.
1359        let mut expected = [5, 1, 0, 0, 0, 0, 0, 0];
1360        NetworkEndian::write_u32(&mut expected[4..], expected_mtu);
1361        assert_eq!(serialized.as_ref(), expected);
1362
1363        let parsed = Options::parse(&expected[..]).unwrap();
1364        let parsed = parsed.iter().collect::<Vec<options::NdpOption<'_>>>();
1365        assert_eq!(parsed.len(), 1);
1366        assert_eq!(options::NdpOption::Mtu(expected_mtu), parsed[0]);
1367    }
1368
1369    #[test_case(
1370        options::MIN_NONCE_LENGTH - 1 =>
1371            matches Err(options::InvalidNonceError::ResultsInNonMultipleOf8);
1372        "resulting nonce option length must be multiple of 8")]
1373    #[test_case(
1374        options::MIN_NONCE_LENGTH => matches Ok(_);
1375        "MIN_NONCE_LENGTH must validate successfully")]
1376    #[test_case(
1377        usize::from(u8::MAX) * 8 - 2 => matches Ok(_);
1378        "maximum possible nonce length must validate successfully")]
1379    #[test_case(
1380        usize::from(u8::MAX) * 8 - 2 + 8 =>
1381            matches Err(options::InvalidNonceError::TooLong);
1382        "nonce option's length must fit in u8")]
1383    fn nonce_length_validation(
1384        length: usize,
1385    ) -> Result<options::NdpNonce<&'static [u8]>, options::InvalidNonceError> {
1386        const LEN: usize = (u8::MAX as usize + 1) * 8;
1387        const BYTES: [u8; LEN] = [0u8; LEN];
1388        options::NdpNonce::new(&BYTES[..length])
1389    }
1390
1391    #[test]
1392    fn parse_serialize_nonce_option() {
1393        let expected_nonce: [u8; 6] = [1, 2, 3, 4, 5, 6];
1394        let nonce = options::NdpNonce::new(&expected_nonce[..]).expect("should be valid nonce");
1395        let options = &[options::NdpOptionBuilder::Nonce(nonce)];
1396        let serialized = OptionSequenceBuilder::new(options.iter())
1397            .into_serializer()
1398            .serialize_vec_outer()
1399            .unwrap();
1400
1401        // The first two bytes are the kind and length bytes, respectively,
1402        // followed by the nonce bytes.
1403        let mut expected_bytes: [u8; 8] = [14, 1, 0, 0, 0, 0, 0, 0];
1404        expected_bytes[2..].copy_from_slice(&expected_nonce);
1405
1406        assert_eq!(serialized.as_ref(), expected_bytes);
1407
1408        let parsed = Options::parse(&expected_bytes[..]).unwrap();
1409        let parsed = parsed.iter().collect::<Vec<options::NdpOption<'_>>>();
1410        assert_eq!(parsed.len(), 1);
1411        assert_eq!(parsed[0], options::NdpOption::Nonce(nonce));
1412    }
1413
1414    #[test]
1415    fn parse_serialize_prefix_option() {
1416        let expected_prefix_info = options::PrefixInformation::new(
1417            120,
1418            true,
1419            false,
1420            100,
1421            100,
1422            Ipv6Addr::from([0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 192, 168, 0, 0]),
1423        );
1424        let options = &[options::NdpOptionBuilder::PrefixInformation(expected_prefix_info.clone())];
1425        let serialized = OptionSequenceBuilder::new(options.iter())
1426            .into_serializer()
1427            .serialize_vec_outer()
1428            .unwrap();
1429        // A Prefix Information option is exactly 32 bytes.
1430        //
1431        // The first two bytes are the kind and length bytes, respectively. This is then
1432        // immediately followed by the prefix information fields.
1433        let mut expected = [0; 32];
1434        expected[0] = 3;
1435        expected[1] = 4;
1436        (&mut expected[2..]).copy_from_slice(expected_prefix_info.as_bytes());
1437        assert_eq!(serialized.as_ref(), expected);
1438
1439        let parsed = Options::parse(&expected[..]).unwrap();
1440        let parsed = parsed.iter().collect::<Vec<options::NdpOption<'_>>>();
1441        assert_eq!(parsed.len(), 1);
1442        assert_eq!(options::NdpOption::PrefixInformation(&expected_prefix_info), parsed[0]);
1443    }
1444
1445    #[test]
1446    fn parse_serialize_rdnss_option() {
1447        let test = |addrs: &[Ipv6Addr]| {
1448            let lifetime = 120;
1449            let expected_rdnss = options::RecursiveDnsServer::new(lifetime, addrs);
1450            let options = &[options::NdpOptionBuilder::RecursiveDnsServer(expected_rdnss.clone())];
1451            let serialized = OptionSequenceBuilder::new(options.iter())
1452                .into_serializer()
1453                .serialize_vec_outer()
1454                .unwrap();
1455            // 8 bytes for the kind, length, reserved and lifetime bytes + the bytes for
1456            // the addresses.
1457            let mut expected = vec![0; 8 + addrs.len() * usize::from(Ipv6Addr::BYTES)];
1458            // The first two bytes are the kind and length bytes, respectively. This is then
1459            // followed by 2 reserved bytes.
1460            //
1461            // NDP options hold the number of bytes in units of 8 bytes.
1462            (&mut expected[..4]).copy_from_slice(&[
1463                25,
1464                1 + u8::try_from(addrs.len()).unwrap() * 2,
1465                0,
1466                0,
1467            ]);
1468            // The lifetime field.
1469            NetworkEndian::write_u32(&mut expected[4..8], lifetime);
1470            // The list of addressess.
1471            (&mut expected[8..]).copy_from_slice(addrs.as_bytes());
1472            assert_eq!(serialized.as_ref(), expected.as_slice());
1473
1474            let parsed = Options::parse(&expected[..])
1475                .expect("should have parsed a valid recursive dns erver option");
1476            let parsed = parsed.iter().collect::<Vec<options::NdpOption<'_>>>();
1477            assert_eq!(parsed.len(), 1);
1478
1479            // Also check that parsing RDNSS alone works as expected.
1480            assert_eq!(
1481                options::RecursiveDnsServer::parse(&expected[2..]).expect("parsing should succeed"),
1482                expected_rdnss
1483            );
1484
1485            assert_eq!(options::NdpOption::RecursiveDnsServer(expected_rdnss), parsed[0]);
1486        };
1487        test(&[Ipv6Addr::from([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16])]);
1488        test(&[
1489            Ipv6Addr::from([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16]),
1490            Ipv6Addr::from([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 17]),
1491        ]);
1492    }
1493
1494    #[test]
1495    fn parse_serialize_rdnss_option_error() {
1496        let addrs = [
1497            Ipv6Addr::from([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16]),
1498            Ipv6Addr::from([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 17]),
1499        ];
1500        let lifetime = 120;
1501        // 8 bytes for the kind, length, reserved and lifetime bytes + the bytes for
1502        // the addresses.
1503        let mut buf = vec![0; 8 + addrs.len() * usize::from(Ipv6Addr::BYTES)];
1504        // The first two bytes are the kind and length bytes, respectively. This is then
1505        // followed by 2 reserved bytes.
1506        //
1507        // NDP options hold the number of bytes in units of 8 bytes.
1508        (&mut buf[..4]).copy_from_slice(&[25, 1 + u8::try_from(addrs.len()).unwrap() * 2, 0, 0]);
1509        // The lifetime field.
1510        NetworkEndian::write_u32(&mut buf[4..8], lifetime);
1511        // The list of addressess.
1512        (&mut buf[8..]).copy_from_slice(addrs.as_bytes());
1513
1514        // Sanity check to make sure `buf` is normally valid.
1515        let _parsed = Options::parse(&buf[..])
1516            .expect("should have parsed a valid recursive dns erver option");
1517
1518        // The option must hold at least 1 address.
1519        let _err = Options::parse(&buf[..8]).expect_err(
1520            "should not have parsed a recursive dns server option that has no addresses",
1521        );
1522
1523        // The option must hold full IPv6 addresses.
1524        let _err = Options::parse(&buf[..buf.len()-1])
1525            .expect_err("should not have parsed a recursive dns server option that cuts off in the middle of an address");
1526
1527        // The option must only hold unicast addresses; unspecified is not allowed.
1528        (&mut buf[8..8 + usize::from(Ipv6Addr::BYTES)])
1529            .copy_from_slice(Ipv6::UNSPECIFIED_ADDRESS.as_bytes());
1530        let _parsed = Options::parse(&buf[..]).expect_err(
1531            "should not have parsed a recursive dns erver option with an unspecified address",
1532        );
1533
1534        // The option must only hold unicast addresses; multicast is not allowed.
1535        (&mut buf[8..8 + usize::from(Ipv6Addr::BYTES)])
1536            .copy_from_slice(Ipv6::ALL_NODES_LINK_LOCAL_MULTICAST_ADDRESS.as_bytes());
1537        let _parsed = Options::parse(&buf[..]).expect_err(
1538            "should not have parsed a recursive dns erver option with a multicast address",
1539        );
1540    }
1541
1542    #[test]
1543    fn parse_neighbor_solicitation() {
1544        use crate::icmp::testdata::ndp_neighbor::*;
1545        let mut buf = SOLICITATION_IP_PACKET_BYTES;
1546        let ip = buf.parse::<Ipv6Packet<_>>().unwrap();
1547        let ipv6_builder = ip.builder();
1548        let (src_ip, dst_ip) = (ip.src_ip(), ip.dst_ip());
1549        let icmp = buf
1550            .parse_with::<_, IcmpPacket<_, _, NeighborSolicitation>>(IcmpParseArgs::new(
1551                src_ip, dst_ip,
1552            ))
1553            .unwrap();
1554
1555        assert_eq!(icmp.message().target_address.ipv6_bytes(), TARGET_ADDRESS);
1556        let collected = icmp.ndp_options().iter().collect::<Vec<options::NdpOption<'_>>>();
1557        for option in collected.iter() {
1558            match option {
1559                options::NdpOption::SourceLinkLayerAddress(address) => {
1560                    assert_eq!(address, &SOURCE_LINK_LAYER_ADDRESS);
1561                }
1562                o => panic!("Found unexpected option: {:?}", o),
1563            }
1564        }
1565        let option_builders =
1566            [options::NdpOptionBuilder::SourceLinkLayerAddress(&SOURCE_LINK_LAYER_ADDRESS)];
1567        let serialized = OptionSequenceBuilder::new(option_builders.iter())
1568            .into_serializer()
1569            .wrap_in(IcmpPacketBuilder::<Ipv6, _>::new(
1570                src_ip,
1571                dst_ip,
1572                IcmpZeroCode,
1573                *icmp.message(),
1574            ))
1575            .wrap_in(ipv6_builder)
1576            .serialize_vec_outer()
1577            .unwrap()
1578            .as_ref()
1579            .to_vec();
1580        assert_eq!(&serialized, &SOLICITATION_IP_PACKET_BYTES)
1581    }
1582
1583    #[test]
1584    fn parse_neighbor_advertisement() {
1585        use crate::icmp::testdata::ndp_neighbor::*;
1586        let mut buf = ADVERTISEMENT_IP_PACKET_BYTES;
1587        let ip = buf.parse::<Ipv6Packet<_>>().unwrap();
1588        let ipv6_builder = ip.builder();
1589        let (src_ip, dst_ip) = (ip.src_ip(), ip.dst_ip());
1590        let icmp = buf
1591            .parse_with::<_, IcmpPacket<_, _, NeighborAdvertisement>>(IcmpParseArgs::new(
1592                src_ip, dst_ip,
1593            ))
1594            .unwrap();
1595        assert_eq!(icmp.message().target_address.ipv6_bytes(), TARGET_ADDRESS);
1596        assert_eq!(icmp.ndp_options().iter().count(), 0);
1597
1598        let serialized = EmptyBuf
1599            .wrap_in(IcmpPacketBuilder::<Ipv6, _>::new(
1600                src_ip,
1601                dst_ip,
1602                IcmpZeroCode,
1603                *icmp.message(),
1604            ))
1605            .wrap_in(ipv6_builder)
1606            .serialize_vec_outer()
1607            .unwrap()
1608            .as_ref()
1609            .to_vec();
1610        assert_eq!(&serialized, &ADVERTISEMENT_IP_PACKET_BYTES);
1611    }
1612
1613    #[test]
1614    fn parse_router_advertisement() {
1615        use crate::icmp::ndp::options::RouteInformation;
1616        use crate::icmp::testdata::ndp_router::*;
1617
1618        let mut buf = ADVERTISEMENT_IP_PACKET_BYTES;
1619        let ip = buf.parse::<Ipv6Packet<_>>().unwrap();
1620        let ipv6_builder = ip.builder();
1621        let (src_ip, dst_ip) = (ip.src_ip(), ip.dst_ip());
1622        let icmp = buf
1623            .parse_with::<_, IcmpPacket<_, _, RouterAdvertisement>>(IcmpParseArgs::new(
1624                src_ip, dst_ip,
1625            ))
1626            .unwrap();
1627        assert_eq!(icmp.message().current_hop_limit(), HOP_LIMIT);
1628        assert_eq!(icmp.message().router_lifetime(), LIFETIME);
1629        assert_eq!(icmp.message().reachable_time(), REACHABLE_TIME);
1630        assert_eq!(icmp.message().retransmit_timer(), RETRANS_TIMER);
1631
1632        assert_eq!(icmp.ndp_options().iter().count(), 5);
1633
1634        let collected = icmp.ndp_options().iter().collect::<Vec<options::NdpOption<'_>>>();
1635        for option in collected.iter() {
1636            match option {
1637                options::NdpOption::SourceLinkLayerAddress(address) => {
1638                    assert_eq!(address, &SOURCE_LINK_LAYER_ADDRESS);
1639                }
1640                options::NdpOption::PrefixInformation(info) => {
1641                    assert_eq!(info.on_link_flag(), PREFIX_INFO_ON_LINK_FLAG);
1642                    assert_eq!(
1643                        info.autonomous_address_configuration_flag(),
1644                        PREFIX_INFO_AUTONOMOUS_ADDRESS_CONFIGURATION_FLAG
1645                    );
1646                    assert_eq!(
1647                        info.valid_lifetime(),
1648                        NonZeroNdpLifetime::from_u32_with_infinite(
1649                            PREFIX_INFO_VALID_LIFETIME_SECONDS
1650                        )
1651                    );
1652                    assert_eq!(
1653                        info.preferred_lifetime(),
1654                        NonZeroNdpLifetime::from_u32_with_infinite(
1655                            PREFIX_INFO_PREFERRED_LIFETIME_SECONDS
1656                        )
1657                    );
1658                    assert_eq!(info.prefix_length(), PREFIX_INFO_PREFIX.prefix());
1659                    assert_eq!(info.prefix(), &PREFIX_INFO_PREFIX.network());
1660                }
1661                options::NdpOption::RouteInformation(_) => {
1662                    // Tested below
1663                }
1664                o => panic!("Found unexpected option: {:?}", o),
1665            }
1666        }
1667
1668        let mut route_information_options = collected
1669            .iter()
1670            .filter_map(|o| match o {
1671                options::NdpOption::RouteInformation(info) => Some(info),
1672                _ => None,
1673            })
1674            .collect::<Vec<&RouteInformation>>();
1675        // We must not make any assumptions on the order of received data, therefore we sort them.
1676        // From RFC 4861 section 4.6.2:
1677        //   Options in Neighbor Discovery packets can appear in any order; receivers MUST be
1678        //   prepared to process them independently of their order.
1679        route_information_options.sort_by_key(|o| o.prefix().prefix());
1680        assert_eq!(
1681            route_information_options,
1682            [
1683                &options::RouteInformation::new(
1684                    ROUTE_INFO_LOW_PREF_PREFIX,
1685                    ROUTE_INFO_LOW_PREF_VALID_LIFETIME_SECONDS,
1686                    ROUTE_INFO_LOW_PREF,
1687                ),
1688                &options::RouteInformation::new(
1689                    ROUTE_INFO_MEDIUM_PREF_PREFIX,
1690                    ROUTE_INFO_MEDIUM_PREF_VALID_LIFETIME_SECONDS,
1691                    ROUTE_INFO_MEDIUM_PREF,
1692                ),
1693                &options::RouteInformation::new(
1694                    ROUTE_INFO_HIGH_PREF_PREFIX,
1695                    ROUTE_INFO_HIGH_PREF_VALID_LIFETIME_SECONDS,
1696                    ROUTE_INFO_HIGH_PREF,
1697                )
1698            ]
1699        );
1700
1701        let option_builders = [
1702            options::NdpOptionBuilder::SourceLinkLayerAddress(&SOURCE_LINK_LAYER_ADDRESS),
1703            options::NdpOptionBuilder::PrefixInformation(options::PrefixInformation::new(
1704                PREFIX_INFO_PREFIX.prefix(),
1705                PREFIX_INFO_ON_LINK_FLAG,
1706                PREFIX_INFO_AUTONOMOUS_ADDRESS_CONFIGURATION_FLAG,
1707                PREFIX_INFO_VALID_LIFETIME_SECONDS,
1708                PREFIX_INFO_PREFERRED_LIFETIME_SECONDS,
1709                PREFIX_INFO_PREFIX.network(),
1710            )),
1711            options::NdpOptionBuilder::RouteInformation(options::RouteInformation::new(
1712                ROUTE_INFO_HIGH_PREF_PREFIX,
1713                ROUTE_INFO_HIGH_PREF_VALID_LIFETIME_SECONDS,
1714                ROUTE_INFO_HIGH_PREF,
1715            )),
1716            options::NdpOptionBuilder::RouteInformation(options::RouteInformation::new(
1717                ROUTE_INFO_MEDIUM_PREF_PREFIX,
1718                ROUTE_INFO_MEDIUM_PREF_VALID_LIFETIME_SECONDS,
1719                ROUTE_INFO_MEDIUM_PREF,
1720            )),
1721            options::NdpOptionBuilder::RouteInformation(options::RouteInformation::new(
1722                ROUTE_INFO_LOW_PREF_PREFIX,
1723                ROUTE_INFO_LOW_PREF_VALID_LIFETIME_SECONDS,
1724                ROUTE_INFO_LOW_PREF,
1725            )),
1726        ];
1727        let serialized = OptionSequenceBuilder::new(option_builders.iter())
1728            .into_serializer()
1729            .wrap_in(IcmpPacketBuilder::<Ipv6, _>::new(
1730                src_ip,
1731                dst_ip,
1732                IcmpZeroCode,
1733                *icmp.message(),
1734            ))
1735            .wrap_in(ipv6_builder)
1736            .serialize_vec_outer()
1737            .unwrap()
1738            .as_ref()
1739            .to_vec();
1740        assert_eq!(&serialized, &ADVERTISEMENT_IP_PACKET_BYTES);
1741    }
1742
1743    struct SerializeRATest {
1744        hop_limit: u8,
1745        managed_flag: bool,
1746        other_config_flag: bool,
1747        preference: RoutePreference,
1748        router_lifetime_seconds: u16,
1749        reachable_time_seconds: u32,
1750        retransmit_timer_seconds: u32,
1751    }
1752
1753    #[test_case(
1754        SerializeRATest{
1755            hop_limit: 1,
1756            managed_flag: true,
1757            other_config_flag: false,
1758            preference: RoutePreference::High,
1759            router_lifetime_seconds: 1_000,
1760            reachable_time_seconds: 1_000_000,
1761            retransmit_timer_seconds: 5,
1762        }; "test_1")]
1763    #[test_case(
1764        SerializeRATest{
1765            hop_limit: 64,
1766            managed_flag: false,
1767            other_config_flag: true,
1768            preference: RoutePreference::Low,
1769            router_lifetime_seconds: 5,
1770            reachable_time_seconds: 23425621,
1771            retransmit_timer_seconds: 13252521,
1772        }; "test_2")]
1773    fn serialize_router_advertisement(test: SerializeRATest) {
1774        let SerializeRATest {
1775            hop_limit,
1776            managed_flag,
1777            other_config_flag,
1778            preference,
1779            router_lifetime_seconds,
1780            reachable_time_seconds,
1781            retransmit_timer_seconds,
1782        } = test;
1783
1784        const SRC_IP: Ipv6Addr =
1785            Ipv6Addr::from_bytes([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16]);
1786        const DST_IP: Ipv6Addr =
1787            Ipv6Addr::from_bytes([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 17]);
1788        let icmp = IcmpPacketBuilder::<Ipv6, _>::new(
1789            SRC_IP,
1790            DST_IP,
1791            IcmpZeroCode,
1792            RouterAdvertisement::with_prf(
1793                hop_limit,
1794                managed_flag,
1795                other_config_flag,
1796                preference,
1797                router_lifetime_seconds,
1798                reachable_time_seconds,
1799                retransmit_timer_seconds,
1800            ),
1801        );
1802        let serialized = icmp.wrap_body(EmptyBuf).serialize_vec_outer().unwrap();
1803
1804        // As per RFC 4191 section 2.2,
1805        //
1806        //      0                   1                   2                   3
1807        //      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
1808        //     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1809        //     |     Type      |     Code      |          Checksum             |
1810        //     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1811        //     | Cur Hop Limit |M|O|H|Prf|Resvd|       Router Lifetime         |
1812        //     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1813        //     |                         Reachable Time                        |
1814        //     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1815        //     |                          Retrans Timer                        |
1816        //     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1817        //
1818        // As  per RFC 4861 section 4.2,
1819        //
1820        //    ICMP Fields:
1821        //
1822        //      Type           134
1823        //
1824        //      Code           0
1825        const RA_LEN: u32 = 16;
1826        let mut expected = [0; RA_LEN as usize];
1827        expected[0] = 134;
1828        expected[4] = hop_limit;
1829        if managed_flag {
1830            expected[5] |= 1 << 7;
1831        }
1832        if other_config_flag {
1833            expected[5] |= 1 << 6;
1834        }
1835        expected[5] |= u8::from(preference) << 3;
1836        let (mut router_lifetime, _rest) = Ref::<_, U16>::from_prefix(&mut expected[6..]).unwrap();
1837        router_lifetime.set(router_lifetime_seconds);
1838        let (mut reachable_time, _rest) = Ref::<_, U32>::from_prefix(&mut expected[8..]).unwrap();
1839        reachable_time.set(reachable_time_seconds);
1840        let (mut retransmit_timer, _rest) =
1841            Ref::<_, U32>::from_prefix(&mut expected[12..]).unwrap();
1842        retransmit_timer.set(retransmit_timer_seconds);
1843
1844        let mut c = internet_checksum::Checksum::new();
1845        // Checksum pseudo-header.
1846        c.add_bytes(SRC_IP.bytes());
1847        c.add_bytes(DST_IP.bytes());
1848        c.add_bytes(U32::new(RA_LEN).as_bytes());
1849        c.add_bytes(&[0, crate::ip::Ipv6Proto::Icmpv6.into()]);
1850        // Checksum actual message.
1851        c.add_bytes(&expected[..]);
1852        expected[2..4].copy_from_slice(&c.checksum()[..]);
1853
1854        assert_eq!(serialized.as_ref(), &expected[..]);
1855    }
1856
1857    struct SerializeRioTest {
1858        prefix_length: u8,
1859        route_lifetime_seconds: u32,
1860        preference: RoutePreference,
1861        expected_option_length: u8,
1862    }
1863
1864    // As per RFC 4191 section 2.3,
1865    //
1866    //    Length     8-bit unsigned integer.  The length of the option
1867    //               (including the Type and Length fields) in units of 8
1868    //               octets.  The Length field is 1, 2, or 3 depending on the
1869    //               Prefix Length.  If Prefix Length is greater than 64, then
1870    //               Length must be 3.  If Prefix Length is greater than 0,
1871    //               then Length must be 2 or 3.  If Prefix Length is zero,
1872    //               then Length must be 1, 2, or 3.
1873    #[test_case(
1874        SerializeRioTest{
1875            prefix_length: 0,
1876            route_lifetime_seconds: 1,
1877            preference: RoutePreference::High,
1878            expected_option_length: 8,
1879        }; "prefix_length_0")]
1880    #[test_case(
1881        SerializeRioTest{
1882            prefix_length: 1,
1883            route_lifetime_seconds: 1000,
1884            preference: RoutePreference::Medium,
1885            expected_option_length: 16,
1886        }; "prefix_length_1")]
1887    #[test_case(
1888        SerializeRioTest{
1889            prefix_length: 64,
1890            route_lifetime_seconds: 100000,
1891            preference: RoutePreference::Low,
1892            expected_option_length: 16,
1893        }; "prefix_length_64")]
1894    #[test_case(
1895        SerializeRioTest{
1896            prefix_length: 65,
1897            route_lifetime_seconds: 1000000,
1898            preference: RoutePreference::Medium,
1899            expected_option_length: 24,
1900        }; "prefix_length_65")]
1901    #[test_case(
1902        SerializeRioTest{
1903            prefix_length: 128,
1904            route_lifetime_seconds: 10000000,
1905            preference: RoutePreference::Medium,
1906            expected_option_length: 24,
1907        }; "prefix_length_128")]
1908    fn serialize_route_information_option(test: SerializeRioTest) {
1909        const IPV6ADDR: Ipv6Addr =
1910            Ipv6Addr::new([0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff]);
1911
1912        let SerializeRioTest {
1913            prefix_length,
1914            route_lifetime_seconds,
1915            preference,
1916            expected_option_length,
1917        } = test;
1918        let prefix = IPV6ADDR.mask(prefix_length);
1919
1920        let option_builders =
1921            [options::NdpOptionBuilder::RouteInformation(options::RouteInformation::new(
1922                Subnet::new(prefix, prefix_length).unwrap(),
1923                route_lifetime_seconds,
1924                preference,
1925            ))];
1926
1927        let serialized = OptionSequenceBuilder::new(option_builders.iter())
1928            .into_serializer()
1929            .serialize_vec_outer()
1930            .unwrap();
1931
1932        // As per RFC 4191 section 2.3,
1933        //
1934        //   Route Information Option
1935        //
1936        //      0                   1                   2                   3
1937        //       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
1938        //      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1939        //      |     Type      |    Length     | Prefix Length |Resvd|Prf|Resvd|
1940        //      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1941        //      |                        Route Lifetime                         |
1942        //      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1943        //      |                   Prefix (Variable Length)                    |
1944        //      .                                                               .
1945        //      .                                                               .
1946        //      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1947        //
1948        //   Fields:
1949        //
1950        //   Type        24
1951        //
1952        //   Length      8-bit unsigned integer.  The length of the option
1953        //               (including the Type and Length fields) in units of 8
1954        //               octets.  The Length field is 1, 2, or 3 depending on the
1955        //               Prefix Length.  If Prefix Length is greater than 64, then
1956        //               Length must be 3.  If Prefix Length is greater than 0,
1957        //               then Length must be 2 or 3.  If Prefix Length is zero,
1958        //               then Length must be 1, 2, or 3.
1959        let mut expected = [0; 24];
1960        expected[0] = 24;
1961        expected[1] = expected_option_length / 8;
1962        expected[2] = prefix_length;
1963        expected[3] = u8::from(preference) << 3;
1964        let (mut lifetime_seconds, _rest) = Ref::<_, U32>::from_prefix(&mut expected[4..]).unwrap();
1965        lifetime_seconds.set(route_lifetime_seconds);
1966        expected[8..].copy_from_slice(prefix.bytes());
1967
1968        assert_eq!(serialized.as_ref(), &expected[..expected_option_length.into()]);
1969    }
1970
1971    #[test_case(0, None)]
1972    #[test_case(
1973        1,
1974        Some(NonZeroNdpLifetime::Finite(NonZeroDuration::new(
1975            Duration::from_secs(1),
1976        ).unwrap()))
1977    )]
1978    #[test_case(
1979        u32::MAX - 1,
1980        Some(NonZeroNdpLifetime::Finite(NonZeroDuration::new(
1981            Duration::from_secs(u64::from(u32::MAX) - 1),
1982        ).unwrap()))
1983    )]
1984    #[test_case(u32::MAX, Some(NonZeroNdpLifetime::Infinite))]
1985    fn non_zero_ndp_lifetime_non_zero_or_max_u32_from_u32_with_infinite(
1986        t: u32,
1987        expected: Option<NonZeroNdpLifetime>,
1988    ) {
1989        assert_eq!(NonZeroNdpLifetime::from_u32_with_infinite(t), expected)
1990    }
1991
1992    const MIN_NON_ZERO_DURATION: Duration = Duration::new(0, 1);
1993    #[test_case(
1994        NonZeroNdpLifetime::Infinite,
1995        NonZeroDuration::new(MIN_NON_ZERO_DURATION).unwrap(),
1996        NonZeroDuration::new(MIN_NON_ZERO_DURATION).unwrap()
1997    )]
1998    #[test_case(
1999        NonZeroNdpLifetime::Infinite,
2000        NonZeroDuration::new(Duration::MAX).unwrap(),
2001        NonZeroDuration::new(Duration::MAX).unwrap()
2002    )]
2003    #[test_case(
2004        NonZeroNdpLifetime::Finite(NonZeroDuration::new(
2005            Duration::from_secs(2)).unwrap()
2006        ),
2007        NonZeroDuration::new(Duration::from_secs(1)).unwrap(),
2008        NonZeroDuration::new(Duration::from_secs(1)).unwrap()
2009    )]
2010    #[test_case(
2011        NonZeroNdpLifetime::Finite(NonZeroDuration::new(
2012            Duration::from_secs(3)).unwrap()
2013        ),
2014        NonZeroDuration::new(Duration::from_secs(4)).unwrap(),
2015        NonZeroDuration::new(Duration::from_secs(3)).unwrap()
2016    )]
2017    fn non_zero_ndp_lifetime_min_finite_duration(
2018        lifetime: NonZeroNdpLifetime,
2019        duration: NonZeroDuration,
2020        expected: NonZeroDuration,
2021    ) {
2022        assert_eq!(lifetime.min_finite_duration(duration), expected)
2023    }
2024}