From: Ondrej Zajicek (work) <santiago@crfreenet.org>
Date: Tue, 18 Dec 2018 18:16:23 +0000 (+0100)
Subject: IO: Workaround for broken FreeBSD behavior
X-Git-Tag: v2.0.3~7
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c2d29dd197cbff6c143a570576c81bee20fc06eb;p=thirdparty%2Fbird.git

IO: Workaround for broken FreeBSD behavior

FreeBSD silently changes TTL to 1 when MSG_DONTROUTE is used, even when
it is explicitly set to another value. That breaks TTL security sockets,
including BFD which always uses TTL 255. Bad FreeBSD!
---

diff --git a/sysdep/unix/io.c b/sysdep/unix/io.c
index 8c9052a3e..a511e88ed 100644
--- a/sysdep/unix/io.c
+++ b/sysdep/unix/io.c
@@ -1566,7 +1566,9 @@ sk_sendmsg(sock *s)
   };
 
 #ifdef CONFIG_DONTROUTE_UNICAST
-  if (ipa_is_ip4(s->daddr) && ip4_is_unicast(ipa_to_ip4(s->daddr)))
+  /* FreeBSD silently changes TTL to 1 when MSG_DONTROUTE is used, therefore we
+     cannot use it for other cases (e.g. when TTL security is used). */
+  if (ipa_is_ip4(s->daddr) && ip4_is_unicast(ipa_to_ip4(s->daddr)) && (s->ttl == 1))
     flags = MSG_DONTROUTE;
 #endif