]>
Commit | Line | Data |
---|---|---|
1c79356b A |
1 | /* |
2 | * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. | |
3 | * All rights reserved. | |
9bccf70c | 4 | * |
1c79356b A |
5 | * Redistribution and use in source and binary forms, with or without |
6 | * modification, are permitted provided that the following conditions | |
7 | * are met: | |
8 | * 1. Redistributions of source code must retain the above copyright | |
9 | * notice, this list of conditions and the following disclaimer. | |
10 | * 2. Redistributions in binary form must reproduce the above copyright | |
11 | * notice, this list of conditions and the following disclaimer in the | |
12 | * documentation and/or other materials provided with the distribution. | |
13 | * 3. Neither the name of the project nor the names of its contributors | |
14 | * may be used to endorse or promote products derived from this software | |
15 | * without specific prior written permission. | |
9bccf70c | 16 | * |
1c79356b A |
17 | * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND |
18 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
19 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | |
20 | * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE | |
21 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | |
22 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | |
23 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
24 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | |
25 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | |
26 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
27 | * SUCH DAMAGE. | |
9bccf70c A |
28 | * |
29 | * $FreeBSD: src/sys/netinet6/raw_ip6.c,v 1.7.2.4 2001/07/29 19:32:40 ume Exp $ | |
1c79356b A |
30 | */ |
31 | ||
32 | /* | |
33 | * Copyright (c) 1982, 1986, 1988, 1993 | |
34 | * The Regents of the University of California. All rights reserved. | |
35 | * | |
36 | * Redistribution and use in source and binary forms, with or without | |
37 | * modification, are permitted provided that the following conditions | |
38 | * are met: | |
39 | * 1. Redistributions of source code must retain the above copyright | |
40 | * notice, this list of conditions and the following disclaimer. | |
41 | * 2. Redistributions in binary form must reproduce the above copyright | |
42 | * notice, this list of conditions and the following disclaimer in the | |
43 | * documentation and/or other materials provided with the distribution. | |
44 | * 3. All advertising materials mentioning features or use of this software | |
45 | * must display the following acknowledgement: | |
46 | * This product includes software developed by the University of | |
47 | * California, Berkeley and its contributors. | |
48 | * 4. Neither the name of the University nor the names of its contributors | |
49 | * may be used to endorse or promote products derived from this software | |
50 | * without specific prior written permission. | |
51 | * | |
52 | * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND | |
53 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
54 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | |
55 | * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE | |
56 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | |
57 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | |
58 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
59 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | |
60 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | |
61 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
62 | * SUCH DAMAGE. | |
63 | * | |
64 | * @(#)raw_ip.c 8.2 (Berkeley) 1/4/94 | |
65 | */ | |
1c79356b A |
66 | #include <sys/param.h> |
67 | #include <sys/malloc.h> | |
68 | #include <sys/proc.h> | |
69 | #include <sys/mbuf.h> | |
70 | #include <sys/socket.h> | |
71 | #include <sys/protosw.h> | |
72 | #include <sys/socketvar.h> | |
73 | #include <sys/errno.h> | |
74 | #include <sys/systm.h> | |
75 | ||
76 | #include <net/if.h> | |
77 | #include <net/route.h> | |
78 | #include <net/if_types.h> | |
79 | ||
80 | #include <netinet/in.h> | |
81 | #include <netinet/in_var.h> | |
82 | #include <netinet/in_systm.h> | |
83 | #include <netinet/ip6.h> | |
84 | #include <netinet6/ip6_var.h> | |
85 | #include <netinet6/ip6_mroute.h> | |
86 | #include <netinet/icmp6.h> | |
1c79356b | 87 | #include <netinet/in_pcb.h> |
1c79356b A |
88 | #include <netinet6/in6_pcb.h> |
89 | #include <netinet6/nd6.h> | |
90 | #include <netinet6/ip6protosw.h> | |
9bccf70c A |
91 | #if ENABLE_DEFAULT_SCOPE |
92 | #include <netinet6/scope6_var.h> | |
93 | #endif | |
94 | #include <netinet6/raw_ip6.h> | |
91447636 | 95 | #include <netinet6/ip6_fw.h> |
1c79356b A |
96 | |
97 | #if IPSEC | |
98 | #include <netinet6/ipsec.h> | |
9bccf70c A |
99 | #include <netinet6/ipsec6.h> |
100 | extern int ipsec_bypass; | |
91447636 | 101 | extern lck_mtx_t *sadb_mutex; |
1c79356b A |
102 | #endif /*IPSEC*/ |
103 | ||
104 | ||
105 | #include "faith.h" | |
9bccf70c A |
106 | #if defined(NFAITH) && 0 < NFAITH |
107 | #include <net/if_faith.h> | |
108 | #endif | |
1c79356b | 109 | |
9bccf70c A |
110 | #define satosin6(sa) ((struct sockaddr_in6 *)(sa)) |
111 | #define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa)) | |
1c79356b A |
112 | |
113 | /* | |
114 | * Raw interface to IP6 protocol. | |
115 | */ | |
116 | ||
9bccf70c A |
117 | extern struct inpcbhead ripcb; |
118 | extern struct inpcbinfo ripcbinfo; | |
1c79356b A |
119 | extern u_long rip_sendspace; |
120 | extern u_long rip_recvspace; | |
91447636 | 121 | extern u_long route_generation; |
1c79356b | 122 | |
9bccf70c A |
123 | struct rip6stat rip6stat; |
124 | ||
1c79356b A |
125 | /* |
126 | * Setup generic address and protocol structures | |
127 | * for raw_input routine, then pass them along with | |
128 | * mbuf chain. | |
129 | */ | |
130 | int | |
91447636 A |
131 | rip6_input( |
132 | struct mbuf **mp, | |
133 | int *offp) | |
1c79356b A |
134 | { |
135 | struct mbuf *m = *mp; | |
136 | register struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *); | |
137 | register struct inpcb *in6p; | |
138 | struct inpcb *last = 0; | |
9bccf70c | 139 | struct mbuf *opts = NULL; |
1c79356b | 140 | struct sockaddr_in6 rip6src; |
9bccf70c A |
141 | int proto = ip6->ip6_nxt; |
142 | ||
143 | rip6stat.rip6s_ipackets++; | |
1c79356b A |
144 | |
145 | #if defined(NFAITH) && 0 < NFAITH | |
9bccf70c A |
146 | if (faithprefix(&ip6->ip6_dst)) { |
147 | /* XXX send icmp6 host/port unreach? */ | |
148 | m_freem(m); | |
149 | return IPPROTO_DONE; | |
1c79356b A |
150 | } |
151 | #endif | |
9bccf70c | 152 | |
1c79356b | 153 | init_sin6(&rip6src, m); /* general init */ |
1c79356b | 154 | |
91447636 | 155 | lck_rw_lock_shared(ripcbinfo.mtx); |
1c79356b | 156 | LIST_FOREACH(in6p, &ripcb, inp_list) { |
9bccf70c | 157 | if ((in6p->in6p_vflag & INP_IPV6) == 0) |
1c79356b A |
158 | continue; |
159 | if (in6p->in6p_ip6_nxt && | |
160 | in6p->in6p_ip6_nxt != proto) | |
161 | continue; | |
162 | if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) && | |
163 | !IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &ip6->ip6_dst)) | |
164 | continue; | |
165 | if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr) && | |
166 | !IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, &ip6->ip6_src)) | |
167 | continue; | |
9bccf70c A |
168 | if (in6p->in6p_cksum != -1) { |
169 | rip6stat.rip6s_isum++; | |
170 | if (in6_cksum(m, ip6->ip6_nxt, *offp, | |
171 | m->m_pkthdr.len - *offp)) { | |
172 | rip6stat.rip6s_badsum++; | |
173 | continue; | |
174 | } | |
1c79356b A |
175 | } |
176 | if (last) { | |
177 | struct mbuf *n = m_copy(m, 0, (int)M_COPYALL); | |
9bccf70c A |
178 | |
179 | #if IPSEC | |
180 | /* | |
181 | * Check AH/ESP integrity. | |
182 | */ | |
91447636 A |
183 | if (ipsec_bypass == 0 && n) { |
184 | lck_mtx_lock(sadb_mutex); | |
185 | if (ipsec6_in_reject_so(n, last->inp_socket)) { | |
186 | m_freem(n); | |
187 | ipsec6stat.in_polvio++; | |
188 | /* do not inject data into pcb */ | |
189 | } | |
190 | lck_mtx_unlock(sadb_mutex); | |
9bccf70c A |
191 | } else |
192 | #endif /*IPSEC*/ | |
1c79356b A |
193 | if (n) { |
194 | if (last->in6p_flags & IN6P_CONTROLOPTS || | |
195 | last->in6p_socket->so_options & SO_TIMESTAMP) | |
9bccf70c | 196 | ip6_savecontrol(last, &opts, ip6, n); |
1c79356b A |
197 | /* strip intermediate headers */ |
198 | m_adj(n, *offp); | |
199 | if (sbappendaddr(&last->in6p_socket->so_rcv, | |
200 | (struct sockaddr *)&rip6src, | |
91447636 | 201 | n, opts, NULL) == 0) { |
9bccf70c | 202 | rip6stat.rip6s_fullsock++; |
1c79356b A |
203 | } else |
204 | sorwakeup(last->in6p_socket); | |
9bccf70c | 205 | opts = NULL; |
1c79356b A |
206 | } |
207 | } | |
208 | last = in6p; | |
209 | } | |
91447636 | 210 | lck_rw_done(ripcbinfo.mtx); |
9bccf70c A |
211 | #if IPSEC |
212 | /* | |
213 | * Check AH/ESP integrity. | |
214 | */ | |
91447636 A |
215 | if (ipsec_bypass == 0 && last) { |
216 | lck_mtx_lock(sadb_mutex); | |
217 | if (ipsec6_in_reject_so(m, last->inp_socket)) { | |
218 | m_freem(m); | |
219 | ipsec6stat.in_polvio++; | |
220 | ip6stat.ip6s_delivered--; | |
221 | /* do not inject data into pcb */ | |
222 | } | |
223 | lck_mtx_unlock(sadb_mutex); | |
9bccf70c A |
224 | } else |
225 | #endif /*IPSEC*/ | |
1c79356b A |
226 | if (last) { |
227 | if (last->in6p_flags & IN6P_CONTROLOPTS || | |
228 | last->in6p_socket->so_options & SO_TIMESTAMP) | |
9bccf70c | 229 | ip6_savecontrol(last, &opts, ip6, m); |
1c79356b A |
230 | /* strip intermediate headers */ |
231 | m_adj(m, *offp); | |
232 | if (sbappendaddr(&last->in6p_socket->so_rcv, | |
91447636 | 233 | (struct sockaddr *)&rip6src, m, opts, NULL) == 0) { |
9bccf70c | 234 | rip6stat.rip6s_fullsock++; |
1c79356b A |
235 | } else |
236 | sorwakeup(last->in6p_socket); | |
237 | } else { | |
9bccf70c A |
238 | rip6stat.rip6s_nosock++; |
239 | if (m->m_flags & M_MCAST) | |
240 | rip6stat.rip6s_nosockmcast++; | |
1c79356b A |
241 | if (proto == IPPROTO_NONE) |
242 | m_freem(m); | |
243 | else { | |
244 | char *prvnxtp = ip6_get_prevhdr(m, *offp); /* XXX */ | |
245 | icmp6_error(m, ICMP6_PARAM_PROB, | |
246 | ICMP6_PARAMPROB_NEXTHEADER, | |
247 | prvnxtp - mtod(m, char *)); | |
248 | } | |
249 | ip6stat.ip6s_delivered--; | |
250 | } | |
251 | return IPPROTO_DONE; | |
252 | } | |
253 | ||
254 | void | |
91447636 A |
255 | rip6_ctlinput( |
256 | int cmd, | |
257 | struct sockaddr *sa, | |
258 | void *d) | |
1c79356b | 259 | { |
1c79356b A |
260 | struct ip6_hdr *ip6; |
261 | struct mbuf *m; | |
262 | int off = 0; | |
9bccf70c A |
263 | struct ip6ctlparam *ip6cp = NULL; |
264 | const struct sockaddr_in6 *sa6_src = NULL; | |
91447636 | 265 | void (*notify)(struct inpcb *, int) = in6_rtchange; |
1c79356b A |
266 | |
267 | if (sa->sa_family != AF_INET6 || | |
268 | sa->sa_len != sizeof(struct sockaddr_in6)) | |
269 | return; | |
270 | ||
271 | if ((unsigned)cmd >= PRC_NCMDS) | |
272 | return; | |
273 | if (PRC_IS_REDIRECT(cmd)) | |
274 | notify = in6_rtchange, d = NULL; | |
275 | else if (cmd == PRC_HOSTDEAD) | |
276 | d = NULL; | |
277 | else if (inet6ctlerrmap[cmd] == 0) | |
278 | return; | |
279 | ||
280 | /* if the parameter is from icmp6, decode it. */ | |
281 | if (d != NULL) { | |
9bccf70c | 282 | ip6cp = (struct ip6ctlparam *)d; |
1c79356b A |
283 | m = ip6cp->ip6c_m; |
284 | ip6 = ip6cp->ip6c_ip6; | |
285 | off = ip6cp->ip6c_off; | |
9bccf70c | 286 | sa6_src = ip6cp->ip6c_src; |
1c79356b A |
287 | } else { |
288 | m = NULL; | |
289 | ip6 = NULL; | |
9bccf70c | 290 | sa6_src = &sa6_any; |
1c79356b A |
291 | } |
292 | ||
91447636 | 293 | (void) in6_pcbnotify(&ripcbinfo, sa, 0, (struct sockaddr *)sa6_src, |
9bccf70c | 294 | 0, cmd, notify); |
1c79356b A |
295 | } |
296 | ||
297 | /* | |
298 | * Generate IPv6 header and pass packet to ip6_output. | |
299 | * Tack on options user may have setup with control call. | |
300 | */ | |
301 | int | |
91447636 A |
302 | rip6_output( |
303 | register struct mbuf *m, | |
304 | struct socket *so, | |
305 | struct sockaddr_in6 *dstsock, | |
306 | struct mbuf *control) | |
1c79356b A |
307 | { |
308 | struct in6_addr *dst; | |
309 | struct ip6_hdr *ip6; | |
310 | struct inpcb *in6p; | |
311 | u_int plen = m->m_pkthdr.len; | |
312 | int error = 0; | |
313 | struct ip6_pktopts opt, *optp = 0; | |
314 | struct ifnet *oifp = NULL; | |
315 | int type = 0, code = 0; /* for ICMPv6 output statistics only */ | |
316 | int priv = 0; | |
317 | ||
318 | in6p = sotoin6pcb(so); | |
319 | ||
320 | priv = 0; | |
9bccf70c | 321 | if (so->so_uid == 0) |
1c79356b | 322 | priv = 1; |
1c79356b A |
323 | dst = &dstsock->sin6_addr; |
324 | if (control) { | |
325 | if ((error = ip6_setpktoptions(control, &opt, priv, 0)) != 0) | |
326 | goto bad; | |
327 | optp = &opt; | |
328 | } else | |
329 | optp = in6p->in6p_outputopts; | |
330 | ||
331 | /* | |
332 | * For an ICMPv6 packet, we should know its type and code | |
333 | * to update statistics. | |
334 | */ | |
335 | if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) { | |
336 | struct icmp6_hdr *icmp6; | |
337 | if (m->m_len < sizeof(struct icmp6_hdr) && | |
338 | (m = m_pullup(m, sizeof(struct icmp6_hdr))) == NULL) { | |
339 | error = ENOBUFS; | |
340 | goto bad; | |
341 | } | |
342 | icmp6 = mtod(m, struct icmp6_hdr *); | |
343 | type = icmp6->icmp6_type; | |
344 | code = icmp6->icmp6_code; | |
345 | } | |
346 | ||
347 | M_PREPEND(m, sizeof(*ip6), M_WAIT); | |
348 | ip6 = mtod(m, struct ip6_hdr *); | |
349 | ||
350 | /* | |
351 | * Next header might not be ICMP6 but use its pseudo header anyway. | |
352 | */ | |
353 | ip6->ip6_dst = *dst; | |
354 | ||
355 | /* | |
356 | * If the scope of the destination is link-local, embed the interface | |
357 | * index in the address. | |
358 | * | |
9bccf70c | 359 | * XXX advanced-api value overrides sin6_scope_id |
1c79356b A |
360 | */ |
361 | if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_dst)) { | |
362 | struct in6_pktinfo *pi; | |
363 | ||
364 | /* | |
365 | * XXX Boundary check is assumed to be already done in | |
366 | * ip6_setpktoptions(). | |
367 | */ | |
368 | if (optp && (pi = optp->ip6po_pktinfo) && pi->ipi6_ifindex) { | |
369 | ip6->ip6_dst.s6_addr16[1] = htons(pi->ipi6_ifindex); | |
370 | oifp = ifindex2ifnet[pi->ipi6_ifindex]; | |
9bccf70c | 371 | } else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) && |
1c79356b A |
372 | in6p->in6p_moptions && |
373 | in6p->in6p_moptions->im6o_multicast_ifp) { | |
374 | oifp = in6p->in6p_moptions->im6o_multicast_ifp; | |
375 | ip6->ip6_dst.s6_addr16[1] = htons(oifp->if_index); | |
376 | } else if (dstsock->sin6_scope_id) { | |
377 | /* boundary check */ | |
9bccf70c | 378 | if (dstsock->sin6_scope_id < 0 |
1c79356b A |
379 | || if_index < dstsock->sin6_scope_id) { |
380 | error = ENXIO; /* XXX EINVAL? */ | |
381 | goto bad; | |
382 | } | |
383 | ip6->ip6_dst.s6_addr16[1] | |
384 | = htons(dstsock->sin6_scope_id & 0xffff);/*XXX*/ | |
385 | } | |
386 | } | |
387 | ||
388 | /* | |
389 | * Source address selection. | |
390 | */ | |
391 | { | |
392 | struct in6_addr *in6a; | |
91447636 | 393 | struct in6_addr storage; |
1c79356b A |
394 | |
395 | if ((in6a = in6_selectsrc(dstsock, optp, | |
396 | in6p->in6p_moptions, | |
397 | &in6p->in6p_route, | |
398 | &in6p->in6p_laddr, | |
91447636 | 399 | &storage, &error)) == 0) { |
1c79356b A |
400 | if (error == 0) |
401 | error = EADDRNOTAVAIL; | |
402 | goto bad; | |
403 | } | |
404 | ip6->ip6_src = *in6a; | |
405 | if (in6p->in6p_route.ro_rt) | |
406 | oifp = ifindex2ifnet[in6p->in6p_route.ro_rt->rt_ifp->if_index]; | |
407 | } | |
9bccf70c A |
408 | ip6->ip6_flow = (ip6->ip6_flow & ~IPV6_FLOWINFO_MASK) | |
409 | (in6p->in6p_flowinfo & IPV6_FLOWINFO_MASK); | |
410 | ip6->ip6_vfc = (ip6->ip6_vfc & ~IPV6_VERSION_MASK) | | |
411 | (IPV6_VERSION & IPV6_VERSION_MASK); | |
412 | /* ip6_plen will be filled in ip6_output, so not fill it here. */ | |
1c79356b A |
413 | ip6->ip6_nxt = in6p->in6p_ip6_nxt; |
414 | ip6->ip6_hlim = in6_selecthlim(in6p, oifp); | |
415 | ||
416 | if (so->so_proto->pr_protocol == IPPROTO_ICMPV6 || | |
417 | in6p->in6p_cksum != -1) { | |
418 | struct mbuf *n; | |
419 | int off; | |
420 | u_int16_t *p; | |
421 | ||
1c79356b A |
422 | /* compute checksum */ |
423 | if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) | |
424 | off = offsetof(struct icmp6_hdr, icmp6_cksum); | |
425 | else | |
426 | off = in6p->in6p_cksum; | |
427 | if (plen < off + 1) { | |
428 | error = EINVAL; | |
429 | goto bad; | |
430 | } | |
431 | off += sizeof(struct ip6_hdr); | |
432 | ||
433 | n = m; | |
434 | while (n && n->m_len <= off) { | |
435 | off -= n->m_len; | |
436 | n = n->m_next; | |
437 | } | |
438 | if (!n) | |
439 | goto bad; | |
440 | p = (u_int16_t *)(mtod(n, caddr_t) + off); | |
441 | *p = 0; | |
442 | *p = in6_cksum(m, ip6->ip6_nxt, sizeof(*ip6), plen); | |
443 | } | |
444 | ||
445 | #if IPSEC | |
9bccf70c A |
446 | if (ipsec_bypass == 0 && ipsec_setsocket(m, so) != 0) { |
447 | error = ENOBUFS; | |
448 | goto bad; | |
449 | } | |
1c79356b A |
450 | #endif /*IPSEC*/ |
451 | ||
91447636 A |
452 | if (in6p->in6p_route.ro_rt && in6p->in6p_route.ro_rt->generation_id != route_generation) { |
453 | rtfree(in6p->in6p_route.ro_rt); | |
454 | in6p->in6p_route.ro_rt = (struct rtentry *)0; | |
455 | } | |
456 | ||
9bccf70c | 457 | error = ip6_output(m, optp, &in6p->in6p_route, 0, |
91447636 | 458 | in6p->in6p_moptions, &oifp, 0); |
1c79356b A |
459 | if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) { |
460 | if (oifp) | |
461 | icmp6_ifoutstat_inc(oifp, type, code); | |
462 | icmp6stat.icp6s_outhist[type]++; | |
9bccf70c A |
463 | } else |
464 | rip6stat.rip6s_opackets++; | |
1c79356b A |
465 | |
466 | goto freectl; | |
467 | ||
468 | bad: | |
469 | if (m) | |
470 | m_freem(m); | |
471 | ||
472 | freectl: | |
473 | if (optp == &opt && optp->ip6po_rthdr && optp->ip6po_route.ro_rt) | |
9bccf70c | 474 | rtfree(optp->ip6po_route.ro_rt); |
1c79356b A |
475 | if (control) { |
476 | if (optp == &opt) | |
477 | ip6_clearpktopts(optp, 0, -1); | |
478 | m_freem(control); | |
479 | } | |
480 | return(error); | |
481 | } | |
482 | ||
91447636 A |
483 | static void |
484 | load_ip6fw() | |
485 | { | |
486 | ip6_fw_init(); | |
487 | } | |
488 | ||
1c79356b A |
489 | /* |
490 | * Raw IPv6 socket option processing. | |
491 | */ | |
492 | int | |
91447636 A |
493 | rip6_ctloutput( |
494 | struct socket *so, | |
495 | struct sockopt *sopt) | |
1c79356b A |
496 | { |
497 | int error; | |
498 | ||
499 | if (sopt->sopt_level == IPPROTO_ICMPV6) | |
500 | /* | |
501 | * XXX: is it better to call icmp6_ctloutput() directly | |
502 | * from protosw? | |
503 | */ | |
504 | return(icmp6_ctloutput(so, sopt)); | |
505 | else if (sopt->sopt_level != IPPROTO_IPV6) | |
506 | return (EINVAL); | |
507 | ||
508 | error = 0; | |
509 | ||
510 | switch (sopt->sopt_dir) { | |
511 | case SOPT_GET: | |
512 | switch (sopt->sopt_name) { | |
91447636 A |
513 | case IPV6_FW_ADD: |
514 | case IPV6_FW_GET: | |
515 | if (ip6_fw_ctl_ptr == 0) | |
516 | load_ip6fw(); | |
517 | if (ip6_fw_ctl_ptr) | |
518 | error = ip6_fw_ctl_ptr(sopt); | |
519 | else | |
520 | error = ENOPROTOOPT; | |
521 | break; | |
522 | ||
1c79356b A |
523 | case MRT6_INIT: |
524 | case MRT6_DONE: | |
525 | case MRT6_ADD_MIF: | |
526 | case MRT6_DEL_MIF: | |
527 | case MRT6_ADD_MFC: | |
528 | case MRT6_DEL_MFC: | |
529 | case MRT6_PIM: | |
530 | error = ip6_mrouter_get(so, sopt); | |
531 | break; | |
532 | default: | |
533 | error = ip6_ctloutput(so, sopt); | |
534 | break; | |
535 | } | |
536 | break; | |
537 | ||
538 | case SOPT_SET: | |
539 | switch (sopt->sopt_name) { | |
91447636 A |
540 | case IPV6_FW_ADD: |
541 | case IPV6_FW_DEL: | |
542 | case IPV6_FW_FLUSH: | |
543 | case IPV6_FW_ZERO: | |
544 | if (ip6_fw_ctl_ptr == 0) | |
545 | load_ip6fw(); | |
546 | if (ip6_fw_ctl_ptr) | |
547 | error = ip6_fw_ctl_ptr(sopt); | |
548 | else | |
549 | error = ENOPROTOOPT; | |
550 | break; | |
551 | ||
1c79356b A |
552 | case MRT6_INIT: |
553 | case MRT6_DONE: | |
554 | case MRT6_ADD_MIF: | |
555 | case MRT6_DEL_MIF: | |
556 | case MRT6_ADD_MFC: | |
557 | case MRT6_DEL_MFC: | |
558 | case MRT6_PIM: | |
559 | error = ip6_mrouter_set(so, sopt); | |
560 | break; | |
561 | default: | |
562 | error = ip6_ctloutput(so, sopt); | |
563 | break; | |
564 | } | |
565 | break; | |
566 | } | |
567 | ||
568 | return (error); | |
569 | } | |
570 | ||
571 | static int | |
572 | rip6_attach(struct socket *so, int proto, struct proc *p) | |
573 | { | |
574 | struct inpcb *inp; | |
575 | int error, s; | |
576 | ||
577 | inp = sotoinpcb(so); | |
578 | if (inp) | |
579 | panic("rip6_attach"); | |
91447636 | 580 | if (p && (error = proc_suser(p)) != 0) |
1c79356b A |
581 | return error; |
582 | ||
9bccf70c A |
583 | error = soreserve(so, rip_sendspace, rip_recvspace); |
584 | if (error) | |
585 | return error; | |
1c79356b A |
586 | s = splnet(); |
587 | error = in_pcballoc(so, &ripcbinfo, p); | |
588 | splx(s); | |
589 | if (error) | |
590 | return error; | |
591 | inp = (struct inpcb *)so->so_pcb; | |
592 | inp->inp_vflag |= INP_IPV6; | |
593 | inp->in6p_ip6_nxt = (long)proto; | |
594 | inp->in6p_hops = -1; /* use kernel default */ | |
595 | inp->in6p_cksum = -1; | |
1c79356b | 596 | MALLOC(inp->in6p_icmp6filt, struct icmp6_filter *, |
55e303ae A |
597 | sizeof(struct icmp6_filter), M_PCB, M_WAITOK); |
598 | if (inp->in6p_icmp6filt == NULL) | |
599 | return (ENOMEM); | |
1c79356b A |
600 | ICMP6_FILTER_SETPASSALL(inp->in6p_icmp6filt); |
601 | return 0; | |
602 | } | |
603 | ||
604 | static int | |
605 | rip6_detach(struct socket *so) | |
606 | { | |
607 | struct inpcb *inp; | |
608 | ||
609 | inp = sotoinpcb(so); | |
610 | if (inp == 0) | |
611 | panic("rip6_detach"); | |
9bccf70c | 612 | /* xxx: RSVP */ |
1c79356b A |
613 | if (so == ip6_mrouter) |
614 | ip6_mrouter_done(); | |
1c79356b A |
615 | if (inp->in6p_icmp6filt) { |
616 | FREE(inp->in6p_icmp6filt, M_PCB); | |
617 | inp->in6p_icmp6filt = NULL; | |
618 | } | |
619 | in6_pcbdetach(inp); | |
620 | return 0; | |
621 | } | |
622 | ||
623 | static int | |
624 | rip6_abort(struct socket *so) | |
625 | { | |
626 | soisdisconnected(so); | |
627 | return rip6_detach(so); | |
628 | } | |
629 | ||
630 | static int | |
631 | rip6_disconnect(struct socket *so) | |
632 | { | |
633 | struct inpcb *inp = sotoinpcb(so); | |
634 | ||
635 | if ((so->so_state & SS_ISCONNECTED) == 0) | |
636 | return ENOTCONN; | |
637 | inp->in6p_faddr = in6addr_any; | |
638 | return rip6_abort(so); | |
639 | } | |
640 | ||
641 | static int | |
642 | rip6_bind(struct socket *so, struct sockaddr *nam, struct proc *p) | |
643 | { | |
644 | struct inpcb *inp = sotoinpcb(so); | |
645 | struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam; | |
646 | struct ifaddr *ia = NULL; | |
647 | ||
648 | if (nam->sa_len != sizeof(*addr)) | |
649 | return EINVAL; | |
650 | ||
91447636 | 651 | if (TAILQ_EMPTY(&ifnet_head) || addr->sin6_family != AF_INET6) |
1c79356b | 652 | return EADDRNOTAVAIL; |
9bccf70c A |
653 | #if ENABLE_DEFAULT_SCOPE |
654 | if (addr->sin6_scope_id == 0) { /* not change if specified */ | |
655 | addr->sin6_scope_id = scope6_addr2default(&addr->sin6_addr); | |
656 | } | |
657 | #endif | |
1c79356b A |
658 | if (!IN6_IS_ADDR_UNSPECIFIED(&addr->sin6_addr) && |
659 | (ia = ifa_ifwithaddr((struct sockaddr *)addr)) == 0) | |
660 | return EADDRNOTAVAIL; | |
661 | if (ia && | |
662 | ((struct in6_ifaddr *)ia)->ia6_flags & | |
663 | (IN6_IFF_ANYCAST|IN6_IFF_NOTREADY| | |
664 | IN6_IFF_DETACHED|IN6_IFF_DEPRECATED)) { | |
91447636 | 665 | if (ia) ifafree(ia); |
1c79356b A |
666 | return(EADDRNOTAVAIL); |
667 | } | |
91447636 | 668 | ifafree(ia); |
1c79356b A |
669 | inp->in6p_laddr = addr->sin6_addr; |
670 | return 0; | |
671 | } | |
672 | ||
673 | static int | |
674 | rip6_connect(struct socket *so, struct sockaddr *nam, struct proc *p) | |
675 | { | |
676 | struct inpcb *inp = sotoinpcb(so); | |
677 | struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam; | |
678 | struct in6_addr *in6a = NULL; | |
91447636 | 679 | struct in6_addr storage; |
1c79356b | 680 | int error = 0; |
9bccf70c A |
681 | #if ENABLE_DEFAULT_SCOPE |
682 | struct sockaddr_in6 tmp; | |
683 | #endif | |
1c79356b A |
684 | |
685 | if (nam->sa_len != sizeof(*addr)) | |
686 | return EINVAL; | |
91447636 | 687 | if (TAILQ_EMPTY(&ifnet_head)) |
1c79356b A |
688 | return EADDRNOTAVAIL; |
689 | if (addr->sin6_family != AF_INET6) | |
690 | return EAFNOSUPPORT; | |
9bccf70c A |
691 | #if ENABLE_DEFAULT_SCOPE |
692 | if (addr->sin6_scope_id == 0) { /* not change if specified */ | |
693 | /* avoid overwrites */ | |
694 | tmp = *addr; | |
695 | addr = &tmp; | |
696 | addr->sin6_scope_id = scope6_addr2default(&addr->sin6_addr); | |
697 | } | |
698 | #endif | |
1c79356b A |
699 | /* Source address selection. XXX: need pcblookup? */ |
700 | in6a = in6_selectsrc(addr, inp->in6p_outputopts, | |
701 | inp->in6p_moptions, &inp->in6p_route, | |
91447636 | 702 | &inp->in6p_laddr, &storage, &error); |
1c79356b A |
703 | if (in6a == NULL) |
704 | return (error ? error : EADDRNOTAVAIL); | |
705 | inp->in6p_laddr = *in6a; | |
706 | inp->in6p_faddr = addr->sin6_addr; | |
707 | soisconnected(so); | |
708 | return 0; | |
709 | } | |
710 | ||
711 | static int | |
712 | rip6_shutdown(struct socket *so) | |
713 | { | |
714 | socantsendmore(so); | |
715 | return 0; | |
716 | } | |
717 | ||
718 | static int | |
719 | rip6_send(struct socket *so, int flags, struct mbuf *m, struct sockaddr *nam, | |
720 | struct mbuf *control, struct proc *p) | |
721 | { | |
722 | struct inpcb *inp = sotoinpcb(so); | |
723 | struct sockaddr_in6 tmp; | |
724 | struct sockaddr_in6 *dst; | |
725 | ||
9bccf70c | 726 | /* always copy sockaddr to avoid overwrites */ |
1c79356b A |
727 | if (so->so_state & SS_ISCONNECTED) { |
728 | if (nam) { | |
729 | m_freem(m); | |
730 | return EISCONN; | |
731 | } | |
732 | /* XXX */ | |
733 | bzero(&tmp, sizeof(tmp)); | |
734 | tmp.sin6_family = AF_INET6; | |
735 | tmp.sin6_len = sizeof(struct sockaddr_in6); | |
736 | bcopy(&inp->in6p_faddr, &tmp.sin6_addr, | |
737 | sizeof(struct in6_addr)); | |
738 | dst = &tmp; | |
739 | } else { | |
740 | if (nam == NULL) { | |
741 | m_freem(m); | |
742 | return ENOTCONN; | |
743 | } | |
9bccf70c A |
744 | tmp = *(struct sockaddr_in6 *)nam; |
745 | dst = &tmp; | |
1c79356b | 746 | } |
9bccf70c A |
747 | #if ENABLE_DEFAULT_SCOPE |
748 | if (dst->sin6_scope_id == 0) { /* not change if specified */ | |
749 | dst->sin6_scope_id = scope6_addr2default(&dst->sin6_addr); | |
750 | } | |
751 | #endif | |
1c79356b A |
752 | return rip6_output(m, so, dst, control); |
753 | } | |
754 | ||
755 | struct pr_usrreqs rip6_usrreqs = { | |
756 | rip6_abort, pru_accept_notsupp, rip6_attach, rip6_bind, rip6_connect, | |
757 | pru_connect2_notsupp, in6_control, rip6_detach, rip6_disconnect, | |
758 | pru_listen_notsupp, in6_setpeeraddr, pru_rcvd_notsupp, | |
9bccf70c | 759 | pru_rcvoob_notsupp, rip6_send, pru_sense_null, rip6_shutdown, |
91447636 | 760 | in6_setsockaddr, sosend, soreceive, pru_sopoll_notsupp |
1c79356b | 761 | }; |