]>
Commit | Line | Data |
---|---|---|
1c79356b A |
1 | /* |
2 | * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. | |
3 | * All rights reserved. | |
9bccf70c | 4 | * |
1c79356b A |
5 | * Redistribution and use in source and binary forms, with or without |
6 | * modification, are permitted provided that the following conditions | |
7 | * are met: | |
8 | * 1. Redistributions of source code must retain the above copyright | |
9 | * notice, this list of conditions and the following disclaimer. | |
10 | * 2. Redistributions in binary form must reproduce the above copyright | |
11 | * notice, this list of conditions and the following disclaimer in the | |
12 | * documentation and/or other materials provided with the distribution. | |
13 | * 3. Neither the name of the project nor the names of its contributors | |
14 | * may be used to endorse or promote products derived from this software | |
15 | * without specific prior written permission. | |
9bccf70c | 16 | * |
1c79356b A |
17 | * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND |
18 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
19 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | |
20 | * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE | |
21 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | |
22 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | |
23 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
24 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | |
25 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | |
26 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
27 | * SUCH DAMAGE. | |
9bccf70c A |
28 | * |
29 | * $FreeBSD: src/sys/netinet6/raw_ip6.c,v 1.7.2.4 2001/07/29 19:32:40 ume Exp $ | |
1c79356b A |
30 | */ |
31 | ||
32 | /* | |
33 | * Copyright (c) 1982, 1986, 1988, 1993 | |
34 | * The Regents of the University of California. All rights reserved. | |
35 | * | |
36 | * Redistribution and use in source and binary forms, with or without | |
37 | * modification, are permitted provided that the following conditions | |
38 | * are met: | |
39 | * 1. Redistributions of source code must retain the above copyright | |
40 | * notice, this list of conditions and the following disclaimer. | |
41 | * 2. Redistributions in binary form must reproduce the above copyright | |
42 | * notice, this list of conditions and the following disclaimer in the | |
43 | * documentation and/or other materials provided with the distribution. | |
44 | * 3. All advertising materials mentioning features or use of this software | |
45 | * must display the following acknowledgement: | |
46 | * This product includes software developed by the University of | |
47 | * California, Berkeley and its contributors. | |
48 | * 4. Neither the name of the University nor the names of its contributors | |
49 | * may be used to endorse or promote products derived from this software | |
50 | * without specific prior written permission. | |
51 | * | |
52 | * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND | |
53 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
54 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | |
55 | * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE | |
56 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | |
57 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | |
58 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
59 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | |
60 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | |
61 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
62 | * SUCH DAMAGE. | |
63 | * | |
64 | * @(#)raw_ip.c 8.2 (Berkeley) 1/4/94 | |
65 | */ | |
1c79356b A |
66 | #include <sys/param.h> |
67 | #include <sys/malloc.h> | |
68 | #include <sys/proc.h> | |
69 | #include <sys/mbuf.h> | |
70 | #include <sys/socket.h> | |
71 | #include <sys/protosw.h> | |
72 | #include <sys/socketvar.h> | |
73 | #include <sys/errno.h> | |
74 | #include <sys/systm.h> | |
75 | ||
76 | #include <net/if.h> | |
77 | #include <net/route.h> | |
78 | #include <net/if_types.h> | |
79 | ||
80 | #include <netinet/in.h> | |
81 | #include <netinet/in_var.h> | |
82 | #include <netinet/in_systm.h> | |
83 | #include <netinet/ip6.h> | |
84 | #include <netinet6/ip6_var.h> | |
85 | #include <netinet6/ip6_mroute.h> | |
86 | #include <netinet/icmp6.h> | |
1c79356b | 87 | #include <netinet/in_pcb.h> |
1c79356b A |
88 | #include <netinet6/in6_pcb.h> |
89 | #include <netinet6/nd6.h> | |
90 | #include <netinet6/ip6protosw.h> | |
9bccf70c A |
91 | #if ENABLE_DEFAULT_SCOPE |
92 | #include <netinet6/scope6_var.h> | |
93 | #endif | |
94 | #include <netinet6/raw_ip6.h> | |
91447636 | 95 | #include <netinet6/ip6_fw.h> |
1c79356b A |
96 | |
97 | #if IPSEC | |
98 | #include <netinet6/ipsec.h> | |
9bccf70c A |
99 | #include <netinet6/ipsec6.h> |
100 | extern int ipsec_bypass; | |
1c79356b A |
101 | #endif /*IPSEC*/ |
102 | ||
9bccf70c A |
103 | #define satosin6(sa) ((struct sockaddr_in6 *)(sa)) |
104 | #define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa)) | |
1c79356b A |
105 | |
106 | /* | |
107 | * Raw interface to IP6 protocol. | |
108 | */ | |
109 | ||
9bccf70c A |
110 | extern struct inpcbhead ripcb; |
111 | extern struct inpcbinfo ripcbinfo; | |
1c79356b A |
112 | extern u_long rip_sendspace; |
113 | extern u_long rip_recvspace; | |
91447636 | 114 | extern u_long route_generation; |
1c79356b | 115 | |
9bccf70c A |
116 | struct rip6stat rip6stat; |
117 | ||
1c79356b A |
118 | /* |
119 | * Setup generic address and protocol structures | |
120 | * for raw_input routine, then pass them along with | |
121 | * mbuf chain. | |
122 | */ | |
123 | int | |
91447636 A |
124 | rip6_input( |
125 | struct mbuf **mp, | |
126 | int *offp) | |
1c79356b A |
127 | { |
128 | struct mbuf *m = *mp; | |
129 | register struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *); | |
130 | register struct inpcb *in6p; | |
131 | struct inpcb *last = 0; | |
9bccf70c | 132 | struct mbuf *opts = NULL; |
1c79356b | 133 | struct sockaddr_in6 rip6src; |
9bccf70c A |
134 | int proto = ip6->ip6_nxt; |
135 | ||
136 | rip6stat.rip6s_ipackets++; | |
1c79356b A |
137 | |
138 | #if defined(NFAITH) && 0 < NFAITH | |
9bccf70c A |
139 | if (faithprefix(&ip6->ip6_dst)) { |
140 | /* XXX send icmp6 host/port unreach? */ | |
141 | m_freem(m); | |
142 | return IPPROTO_DONE; | |
1c79356b A |
143 | } |
144 | #endif | |
9bccf70c | 145 | |
1c79356b | 146 | init_sin6(&rip6src, m); /* general init */ |
1c79356b | 147 | |
91447636 | 148 | lck_rw_lock_shared(ripcbinfo.mtx); |
1c79356b | 149 | LIST_FOREACH(in6p, &ripcb, inp_list) { |
9bccf70c | 150 | if ((in6p->in6p_vflag & INP_IPV6) == 0) |
1c79356b A |
151 | continue; |
152 | if (in6p->in6p_ip6_nxt && | |
153 | in6p->in6p_ip6_nxt != proto) | |
154 | continue; | |
155 | if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) && | |
156 | !IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &ip6->ip6_dst)) | |
157 | continue; | |
158 | if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr) && | |
159 | !IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, &ip6->ip6_src)) | |
160 | continue; | |
9bccf70c A |
161 | if (in6p->in6p_cksum != -1) { |
162 | rip6stat.rip6s_isum++; | |
163 | if (in6_cksum(m, ip6->ip6_nxt, *offp, | |
164 | m->m_pkthdr.len - *offp)) { | |
165 | rip6stat.rip6s_badsum++; | |
166 | continue; | |
167 | } | |
1c79356b A |
168 | } |
169 | if (last) { | |
170 | struct mbuf *n = m_copy(m, 0, (int)M_COPYALL); | |
9bccf70c A |
171 | |
172 | #if IPSEC | |
173 | /* | |
174 | * Check AH/ESP integrity. | |
175 | */ | |
2d21ac55 | 176 | if (ipsec_bypass == 0 && n && ipsec6_in_reject_so(n, last->inp_socket)) { |
91447636 | 177 | m_freem(n); |
2d21ac55 | 178 | IPSEC_STAT_INCREMENT(ipsec6stat.in_polvio); |
91447636 | 179 | /* do not inject data into pcb */ |
9bccf70c A |
180 | } else |
181 | #endif /*IPSEC*/ | |
1c79356b A |
182 | if (n) { |
183 | if (last->in6p_flags & IN6P_CONTROLOPTS || | |
184 | last->in6p_socket->so_options & SO_TIMESTAMP) | |
9bccf70c | 185 | ip6_savecontrol(last, &opts, ip6, n); |
1c79356b A |
186 | /* strip intermediate headers */ |
187 | m_adj(n, *offp); | |
188 | if (sbappendaddr(&last->in6p_socket->so_rcv, | |
189 | (struct sockaddr *)&rip6src, | |
91447636 | 190 | n, opts, NULL) == 0) { |
9bccf70c | 191 | rip6stat.rip6s_fullsock++; |
1c79356b A |
192 | } else |
193 | sorwakeup(last->in6p_socket); | |
9bccf70c | 194 | opts = NULL; |
1c79356b A |
195 | } |
196 | } | |
197 | last = in6p; | |
198 | } | |
91447636 | 199 | lck_rw_done(ripcbinfo.mtx); |
9bccf70c A |
200 | #if IPSEC |
201 | /* | |
202 | * Check AH/ESP integrity. | |
203 | */ | |
2d21ac55 | 204 | if (ipsec_bypass == 0 && last && ipsec6_in_reject_so(m, last->inp_socket)) { |
91447636 | 205 | m_freem(m); |
2d21ac55 | 206 | IPSEC_STAT_INCREMENT(ipsec6stat.in_polvio); |
91447636 A |
207 | ip6stat.ip6s_delivered--; |
208 | /* do not inject data into pcb */ | |
9bccf70c A |
209 | } else |
210 | #endif /*IPSEC*/ | |
1c79356b A |
211 | if (last) { |
212 | if (last->in6p_flags & IN6P_CONTROLOPTS || | |
213 | last->in6p_socket->so_options & SO_TIMESTAMP) | |
9bccf70c | 214 | ip6_savecontrol(last, &opts, ip6, m); |
1c79356b A |
215 | /* strip intermediate headers */ |
216 | m_adj(m, *offp); | |
217 | if (sbappendaddr(&last->in6p_socket->so_rcv, | |
91447636 | 218 | (struct sockaddr *)&rip6src, m, opts, NULL) == 0) { |
9bccf70c | 219 | rip6stat.rip6s_fullsock++; |
1c79356b A |
220 | } else |
221 | sorwakeup(last->in6p_socket); | |
222 | } else { | |
9bccf70c A |
223 | rip6stat.rip6s_nosock++; |
224 | if (m->m_flags & M_MCAST) | |
225 | rip6stat.rip6s_nosockmcast++; | |
1c79356b A |
226 | if (proto == IPPROTO_NONE) |
227 | m_freem(m); | |
228 | else { | |
229 | char *prvnxtp = ip6_get_prevhdr(m, *offp); /* XXX */ | |
230 | icmp6_error(m, ICMP6_PARAM_PROB, | |
231 | ICMP6_PARAMPROB_NEXTHEADER, | |
232 | prvnxtp - mtod(m, char *)); | |
233 | } | |
234 | ip6stat.ip6s_delivered--; | |
235 | } | |
236 | return IPPROTO_DONE; | |
237 | } | |
238 | ||
239 | void | |
91447636 A |
240 | rip6_ctlinput( |
241 | int cmd, | |
242 | struct sockaddr *sa, | |
243 | void *d) | |
1c79356b | 244 | { |
1c79356b A |
245 | struct ip6_hdr *ip6; |
246 | struct mbuf *m; | |
247 | int off = 0; | |
9bccf70c A |
248 | struct ip6ctlparam *ip6cp = NULL; |
249 | const struct sockaddr_in6 *sa6_src = NULL; | |
91447636 | 250 | void (*notify)(struct inpcb *, int) = in6_rtchange; |
1c79356b A |
251 | |
252 | if (sa->sa_family != AF_INET6 || | |
253 | sa->sa_len != sizeof(struct sockaddr_in6)) | |
254 | return; | |
255 | ||
256 | if ((unsigned)cmd >= PRC_NCMDS) | |
257 | return; | |
258 | if (PRC_IS_REDIRECT(cmd)) | |
259 | notify = in6_rtchange, d = NULL; | |
260 | else if (cmd == PRC_HOSTDEAD) | |
261 | d = NULL; | |
262 | else if (inet6ctlerrmap[cmd] == 0) | |
263 | return; | |
264 | ||
265 | /* if the parameter is from icmp6, decode it. */ | |
266 | if (d != NULL) { | |
9bccf70c | 267 | ip6cp = (struct ip6ctlparam *)d; |
1c79356b A |
268 | m = ip6cp->ip6c_m; |
269 | ip6 = ip6cp->ip6c_ip6; | |
270 | off = ip6cp->ip6c_off; | |
9bccf70c | 271 | sa6_src = ip6cp->ip6c_src; |
1c79356b A |
272 | } else { |
273 | m = NULL; | |
274 | ip6 = NULL; | |
9bccf70c | 275 | sa6_src = &sa6_any; |
1c79356b A |
276 | } |
277 | ||
2d21ac55 | 278 | (void) in6_pcbnotify(&ripcbinfo, sa, 0, (const struct sockaddr *)sa6_src, |
9bccf70c | 279 | 0, cmd, notify); |
1c79356b A |
280 | } |
281 | ||
282 | /* | |
283 | * Generate IPv6 header and pass packet to ip6_output. | |
284 | * Tack on options user may have setup with control call. | |
285 | */ | |
286 | int | |
91447636 A |
287 | rip6_output( |
288 | register struct mbuf *m, | |
289 | struct socket *so, | |
290 | struct sockaddr_in6 *dstsock, | |
291 | struct mbuf *control) | |
1c79356b A |
292 | { |
293 | struct in6_addr *dst; | |
294 | struct ip6_hdr *ip6; | |
295 | struct inpcb *in6p; | |
296 | u_int plen = m->m_pkthdr.len; | |
297 | int error = 0; | |
298 | struct ip6_pktopts opt, *optp = 0; | |
299 | struct ifnet *oifp = NULL; | |
300 | int type = 0, code = 0; /* for ICMPv6 output statistics only */ | |
301 | int priv = 0; | |
302 | ||
303 | in6p = sotoin6pcb(so); | |
304 | ||
305 | priv = 0; | |
9bccf70c | 306 | if (so->so_uid == 0) |
1c79356b | 307 | priv = 1; |
1c79356b A |
308 | dst = &dstsock->sin6_addr; |
309 | if (control) { | |
310 | if ((error = ip6_setpktoptions(control, &opt, priv, 0)) != 0) | |
311 | goto bad; | |
312 | optp = &opt; | |
313 | } else | |
314 | optp = in6p->in6p_outputopts; | |
315 | ||
316 | /* | |
317 | * For an ICMPv6 packet, we should know its type and code | |
318 | * to update statistics. | |
319 | */ | |
320 | if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) { | |
321 | struct icmp6_hdr *icmp6; | |
322 | if (m->m_len < sizeof(struct icmp6_hdr) && | |
323 | (m = m_pullup(m, sizeof(struct icmp6_hdr))) == NULL) { | |
324 | error = ENOBUFS; | |
325 | goto bad; | |
326 | } | |
327 | icmp6 = mtod(m, struct icmp6_hdr *); | |
328 | type = icmp6->icmp6_type; | |
329 | code = icmp6->icmp6_code; | |
330 | } | |
331 | ||
332 | M_PREPEND(m, sizeof(*ip6), M_WAIT); | |
333 | ip6 = mtod(m, struct ip6_hdr *); | |
334 | ||
335 | /* | |
336 | * Next header might not be ICMP6 but use its pseudo header anyway. | |
337 | */ | |
338 | ip6->ip6_dst = *dst; | |
339 | ||
340 | /* | |
341 | * If the scope of the destination is link-local, embed the interface | |
342 | * index in the address. | |
343 | * | |
9bccf70c | 344 | * XXX advanced-api value overrides sin6_scope_id |
1c79356b A |
345 | */ |
346 | if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_dst)) { | |
347 | struct in6_pktinfo *pi; | |
348 | ||
349 | /* | |
350 | * XXX Boundary check is assumed to be already done in | |
351 | * ip6_setpktoptions(). | |
352 | */ | |
353 | if (optp && (pi = optp->ip6po_pktinfo) && pi->ipi6_ifindex) { | |
354 | ip6->ip6_dst.s6_addr16[1] = htons(pi->ipi6_ifindex); | |
355 | oifp = ifindex2ifnet[pi->ipi6_ifindex]; | |
9bccf70c | 356 | } else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) && |
1c79356b A |
357 | in6p->in6p_moptions && |
358 | in6p->in6p_moptions->im6o_multicast_ifp) { | |
359 | oifp = in6p->in6p_moptions->im6o_multicast_ifp; | |
360 | ip6->ip6_dst.s6_addr16[1] = htons(oifp->if_index); | |
361 | } else if (dstsock->sin6_scope_id) { | |
362 | /* boundary check */ | |
9bccf70c | 363 | if (dstsock->sin6_scope_id < 0 |
1c79356b A |
364 | || if_index < dstsock->sin6_scope_id) { |
365 | error = ENXIO; /* XXX EINVAL? */ | |
366 | goto bad; | |
367 | } | |
368 | ip6->ip6_dst.s6_addr16[1] | |
369 | = htons(dstsock->sin6_scope_id & 0xffff);/*XXX*/ | |
370 | } | |
371 | } | |
372 | ||
373 | /* | |
374 | * Source address selection. | |
375 | */ | |
376 | { | |
377 | struct in6_addr *in6a; | |
91447636 | 378 | struct in6_addr storage; |
1c79356b A |
379 | |
380 | if ((in6a = in6_selectsrc(dstsock, optp, | |
381 | in6p->in6p_moptions, | |
382 | &in6p->in6p_route, | |
383 | &in6p->in6p_laddr, | |
91447636 | 384 | &storage, &error)) == 0) { |
1c79356b A |
385 | if (error == 0) |
386 | error = EADDRNOTAVAIL; | |
387 | goto bad; | |
388 | } | |
389 | ip6->ip6_src = *in6a; | |
390 | if (in6p->in6p_route.ro_rt) | |
391 | oifp = ifindex2ifnet[in6p->in6p_route.ro_rt->rt_ifp->if_index]; | |
392 | } | |
9bccf70c A |
393 | ip6->ip6_flow = (ip6->ip6_flow & ~IPV6_FLOWINFO_MASK) | |
394 | (in6p->in6p_flowinfo & IPV6_FLOWINFO_MASK); | |
395 | ip6->ip6_vfc = (ip6->ip6_vfc & ~IPV6_VERSION_MASK) | | |
396 | (IPV6_VERSION & IPV6_VERSION_MASK); | |
397 | /* ip6_plen will be filled in ip6_output, so not fill it here. */ | |
1c79356b A |
398 | ip6->ip6_nxt = in6p->in6p_ip6_nxt; |
399 | ip6->ip6_hlim = in6_selecthlim(in6p, oifp); | |
400 | ||
401 | if (so->so_proto->pr_protocol == IPPROTO_ICMPV6 || | |
402 | in6p->in6p_cksum != -1) { | |
403 | struct mbuf *n; | |
404 | int off; | |
405 | u_int16_t *p; | |
406 | ||
1c79356b A |
407 | /* compute checksum */ |
408 | if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) | |
409 | off = offsetof(struct icmp6_hdr, icmp6_cksum); | |
410 | else | |
411 | off = in6p->in6p_cksum; | |
412 | if (plen < off + 1) { | |
413 | error = EINVAL; | |
414 | goto bad; | |
415 | } | |
416 | off += sizeof(struct ip6_hdr); | |
417 | ||
418 | n = m; | |
419 | while (n && n->m_len <= off) { | |
420 | off -= n->m_len; | |
421 | n = n->m_next; | |
422 | } | |
423 | if (!n) | |
424 | goto bad; | |
425 | p = (u_int16_t *)(mtod(n, caddr_t) + off); | |
426 | *p = 0; | |
427 | *p = in6_cksum(m, ip6->ip6_nxt, sizeof(*ip6), plen); | |
428 | } | |
429 | ||
430 | #if IPSEC | |
9bccf70c A |
431 | if (ipsec_bypass == 0 && ipsec_setsocket(m, so) != 0) { |
432 | error = ENOBUFS; | |
433 | goto bad; | |
434 | } | |
1c79356b A |
435 | #endif /*IPSEC*/ |
436 | ||
91447636 A |
437 | if (in6p->in6p_route.ro_rt && in6p->in6p_route.ro_rt->generation_id != route_generation) { |
438 | rtfree(in6p->in6p_route.ro_rt); | |
439 | in6p->in6p_route.ro_rt = (struct rtentry *)0; | |
440 | } | |
441 | ||
9bccf70c | 442 | error = ip6_output(m, optp, &in6p->in6p_route, 0, |
91447636 | 443 | in6p->in6p_moptions, &oifp, 0); |
1c79356b A |
444 | if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) { |
445 | if (oifp) | |
446 | icmp6_ifoutstat_inc(oifp, type, code); | |
447 | icmp6stat.icp6s_outhist[type]++; | |
9bccf70c A |
448 | } else |
449 | rip6stat.rip6s_opackets++; | |
1c79356b A |
450 | |
451 | goto freectl; | |
452 | ||
453 | bad: | |
454 | if (m) | |
455 | m_freem(m); | |
456 | ||
457 | freectl: | |
2d21ac55 | 458 | if (optp == &opt && optp->ip6po_rthdr && optp->ip6po_route.ro_rt) { |
9bccf70c | 459 | rtfree(optp->ip6po_route.ro_rt); |
2d21ac55 A |
460 | optp->ip6po_route.ro_rt = NULL; |
461 | } | |
1c79356b A |
462 | if (control) { |
463 | if (optp == &opt) | |
464 | ip6_clearpktopts(optp, 0, -1); | |
465 | m_freem(control); | |
466 | } | |
467 | return(error); | |
468 | } | |
469 | ||
91447636 | 470 | static void |
2d21ac55 | 471 | load_ip6fw(void) |
91447636 A |
472 | { |
473 | ip6_fw_init(); | |
474 | } | |
475 | ||
1c79356b A |
476 | /* |
477 | * Raw IPv6 socket option processing. | |
478 | */ | |
479 | int | |
91447636 A |
480 | rip6_ctloutput( |
481 | struct socket *so, | |
482 | struct sockopt *sopt) | |
1c79356b A |
483 | { |
484 | int error; | |
485 | ||
486 | if (sopt->sopt_level == IPPROTO_ICMPV6) | |
487 | /* | |
488 | * XXX: is it better to call icmp6_ctloutput() directly | |
489 | * from protosw? | |
490 | */ | |
491 | return(icmp6_ctloutput(so, sopt)); | |
492 | else if (sopt->sopt_level != IPPROTO_IPV6) | |
493 | return (EINVAL); | |
494 | ||
495 | error = 0; | |
496 | ||
497 | switch (sopt->sopt_dir) { | |
498 | case SOPT_GET: | |
499 | switch (sopt->sopt_name) { | |
91447636 A |
500 | case IPV6_FW_ADD: |
501 | case IPV6_FW_GET: | |
502 | if (ip6_fw_ctl_ptr == 0) | |
503 | load_ip6fw(); | |
504 | if (ip6_fw_ctl_ptr) | |
505 | error = ip6_fw_ctl_ptr(sopt); | |
506 | else | |
507 | error = ENOPROTOOPT; | |
508 | break; | |
509 | ||
1c79356b A |
510 | case MRT6_INIT: |
511 | case MRT6_DONE: | |
512 | case MRT6_ADD_MIF: | |
513 | case MRT6_DEL_MIF: | |
514 | case MRT6_ADD_MFC: | |
515 | case MRT6_DEL_MFC: | |
516 | case MRT6_PIM: | |
517 | error = ip6_mrouter_get(so, sopt); | |
518 | break; | |
519 | default: | |
520 | error = ip6_ctloutput(so, sopt); | |
521 | break; | |
522 | } | |
523 | break; | |
524 | ||
525 | case SOPT_SET: | |
526 | switch (sopt->sopt_name) { | |
91447636 A |
527 | case IPV6_FW_ADD: |
528 | case IPV6_FW_DEL: | |
529 | case IPV6_FW_FLUSH: | |
530 | case IPV6_FW_ZERO: | |
531 | if (ip6_fw_ctl_ptr == 0) | |
532 | load_ip6fw(); | |
533 | if (ip6_fw_ctl_ptr) | |
534 | error = ip6_fw_ctl_ptr(sopt); | |
535 | else | |
536 | error = ENOPROTOOPT; | |
537 | break; | |
538 | ||
1c79356b A |
539 | case MRT6_INIT: |
540 | case MRT6_DONE: | |
541 | case MRT6_ADD_MIF: | |
542 | case MRT6_DEL_MIF: | |
543 | case MRT6_ADD_MFC: | |
544 | case MRT6_DEL_MFC: | |
545 | case MRT6_PIM: | |
546 | error = ip6_mrouter_set(so, sopt); | |
547 | break; | |
548 | default: | |
549 | error = ip6_ctloutput(so, sopt); | |
550 | break; | |
551 | } | |
552 | break; | |
553 | } | |
554 | ||
555 | return (error); | |
556 | } | |
557 | ||
558 | static int | |
2d21ac55 | 559 | rip6_attach(struct socket *so, int proto, __unused struct proc *p) |
1c79356b A |
560 | { |
561 | struct inpcb *inp; | |
2d21ac55 | 562 | int error; |
1c79356b A |
563 | |
564 | inp = sotoinpcb(so); | |
565 | if (inp) | |
566 | panic("rip6_attach"); | |
91447636 | 567 | if (p && (error = proc_suser(p)) != 0) |
1c79356b A |
568 | return error; |
569 | ||
9bccf70c A |
570 | error = soreserve(so, rip_sendspace, rip_recvspace); |
571 | if (error) | |
572 | return error; | |
1c79356b | 573 | error = in_pcballoc(so, &ripcbinfo, p); |
1c79356b A |
574 | if (error) |
575 | return error; | |
576 | inp = (struct inpcb *)so->so_pcb; | |
577 | inp->inp_vflag |= INP_IPV6; | |
578 | inp->in6p_ip6_nxt = (long)proto; | |
579 | inp->in6p_hops = -1; /* use kernel default */ | |
580 | inp->in6p_cksum = -1; | |
1c79356b | 581 | MALLOC(inp->in6p_icmp6filt, struct icmp6_filter *, |
55e303ae A |
582 | sizeof(struct icmp6_filter), M_PCB, M_WAITOK); |
583 | if (inp->in6p_icmp6filt == NULL) | |
584 | return (ENOMEM); | |
1c79356b A |
585 | ICMP6_FILTER_SETPASSALL(inp->in6p_icmp6filt); |
586 | return 0; | |
587 | } | |
588 | ||
589 | static int | |
590 | rip6_detach(struct socket *so) | |
591 | { | |
592 | struct inpcb *inp; | |
593 | ||
594 | inp = sotoinpcb(so); | |
595 | if (inp == 0) | |
596 | panic("rip6_detach"); | |
9bccf70c | 597 | /* xxx: RSVP */ |
1c79356b A |
598 | if (so == ip6_mrouter) |
599 | ip6_mrouter_done(); | |
1c79356b A |
600 | if (inp->in6p_icmp6filt) { |
601 | FREE(inp->in6p_icmp6filt, M_PCB); | |
602 | inp->in6p_icmp6filt = NULL; | |
603 | } | |
604 | in6_pcbdetach(inp); | |
605 | return 0; | |
606 | } | |
607 | ||
608 | static int | |
609 | rip6_abort(struct socket *so) | |
610 | { | |
611 | soisdisconnected(so); | |
612 | return rip6_detach(so); | |
613 | } | |
614 | ||
615 | static int | |
616 | rip6_disconnect(struct socket *so) | |
617 | { | |
618 | struct inpcb *inp = sotoinpcb(so); | |
619 | ||
620 | if ((so->so_state & SS_ISCONNECTED) == 0) | |
621 | return ENOTCONN; | |
622 | inp->in6p_faddr = in6addr_any; | |
623 | return rip6_abort(so); | |
624 | } | |
625 | ||
626 | static int | |
2d21ac55 | 627 | rip6_bind(struct socket *so, struct sockaddr *nam, __unused struct proc *p) |
1c79356b A |
628 | { |
629 | struct inpcb *inp = sotoinpcb(so); | |
630 | struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam; | |
631 | struct ifaddr *ia = NULL; | |
632 | ||
633 | if (nam->sa_len != sizeof(*addr)) | |
634 | return EINVAL; | |
635 | ||
91447636 | 636 | if (TAILQ_EMPTY(&ifnet_head) || addr->sin6_family != AF_INET6) |
1c79356b | 637 | return EADDRNOTAVAIL; |
9bccf70c A |
638 | #if ENABLE_DEFAULT_SCOPE |
639 | if (addr->sin6_scope_id == 0) { /* not change if specified */ | |
640 | addr->sin6_scope_id = scope6_addr2default(&addr->sin6_addr); | |
641 | } | |
642 | #endif | |
1c79356b A |
643 | if (!IN6_IS_ADDR_UNSPECIFIED(&addr->sin6_addr) && |
644 | (ia = ifa_ifwithaddr((struct sockaddr *)addr)) == 0) | |
645 | return EADDRNOTAVAIL; | |
646 | if (ia && | |
647 | ((struct in6_ifaddr *)ia)->ia6_flags & | |
648 | (IN6_IFF_ANYCAST|IN6_IFF_NOTREADY| | |
649 | IN6_IFF_DETACHED|IN6_IFF_DEPRECATED)) { | |
91447636 | 650 | if (ia) ifafree(ia); |
1c79356b A |
651 | return(EADDRNOTAVAIL); |
652 | } | |
2d21ac55 A |
653 | if (ia != NULL) |
654 | ifafree(ia); | |
1c79356b A |
655 | inp->in6p_laddr = addr->sin6_addr; |
656 | return 0; | |
657 | } | |
658 | ||
659 | static int | |
2d21ac55 | 660 | rip6_connect(struct socket *so, struct sockaddr *nam, __unused struct proc *p) |
1c79356b A |
661 | { |
662 | struct inpcb *inp = sotoinpcb(so); | |
663 | struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam; | |
664 | struct in6_addr *in6a = NULL; | |
91447636 | 665 | struct in6_addr storage; |
1c79356b | 666 | int error = 0; |
9bccf70c A |
667 | #if ENABLE_DEFAULT_SCOPE |
668 | struct sockaddr_in6 tmp; | |
669 | #endif | |
1c79356b A |
670 | |
671 | if (nam->sa_len != sizeof(*addr)) | |
672 | return EINVAL; | |
91447636 | 673 | if (TAILQ_EMPTY(&ifnet_head)) |
1c79356b A |
674 | return EADDRNOTAVAIL; |
675 | if (addr->sin6_family != AF_INET6) | |
676 | return EAFNOSUPPORT; | |
9bccf70c A |
677 | #if ENABLE_DEFAULT_SCOPE |
678 | if (addr->sin6_scope_id == 0) { /* not change if specified */ | |
679 | /* avoid overwrites */ | |
680 | tmp = *addr; | |
681 | addr = &tmp; | |
682 | addr->sin6_scope_id = scope6_addr2default(&addr->sin6_addr); | |
683 | } | |
684 | #endif | |
1c79356b A |
685 | /* Source address selection. XXX: need pcblookup? */ |
686 | in6a = in6_selectsrc(addr, inp->in6p_outputopts, | |
687 | inp->in6p_moptions, &inp->in6p_route, | |
91447636 | 688 | &inp->in6p_laddr, &storage, &error); |
1c79356b A |
689 | if (in6a == NULL) |
690 | return (error ? error : EADDRNOTAVAIL); | |
691 | inp->in6p_laddr = *in6a; | |
692 | inp->in6p_faddr = addr->sin6_addr; | |
693 | soisconnected(so); | |
694 | return 0; | |
695 | } | |
696 | ||
697 | static int | |
698 | rip6_shutdown(struct socket *so) | |
699 | { | |
700 | socantsendmore(so); | |
701 | return 0; | |
702 | } | |
703 | ||
704 | static int | |
2d21ac55 A |
705 | rip6_send(struct socket *so, __unused int flags, struct mbuf *m, struct sockaddr *nam, |
706 | struct mbuf *control, __unused struct proc *p) | |
1c79356b A |
707 | { |
708 | struct inpcb *inp = sotoinpcb(so); | |
709 | struct sockaddr_in6 tmp; | |
710 | struct sockaddr_in6 *dst; | |
711 | ||
9bccf70c | 712 | /* always copy sockaddr to avoid overwrites */ |
1c79356b A |
713 | if (so->so_state & SS_ISCONNECTED) { |
714 | if (nam) { | |
715 | m_freem(m); | |
716 | return EISCONN; | |
717 | } | |
718 | /* XXX */ | |
719 | bzero(&tmp, sizeof(tmp)); | |
720 | tmp.sin6_family = AF_INET6; | |
721 | tmp.sin6_len = sizeof(struct sockaddr_in6); | |
722 | bcopy(&inp->in6p_faddr, &tmp.sin6_addr, | |
723 | sizeof(struct in6_addr)); | |
724 | dst = &tmp; | |
725 | } else { | |
726 | if (nam == NULL) { | |
727 | m_freem(m); | |
728 | return ENOTCONN; | |
729 | } | |
9bccf70c A |
730 | tmp = *(struct sockaddr_in6 *)nam; |
731 | dst = &tmp; | |
1c79356b | 732 | } |
9bccf70c A |
733 | #if ENABLE_DEFAULT_SCOPE |
734 | if (dst->sin6_scope_id == 0) { /* not change if specified */ | |
735 | dst->sin6_scope_id = scope6_addr2default(&dst->sin6_addr); | |
736 | } | |
737 | #endif | |
1c79356b A |
738 | return rip6_output(m, so, dst, control); |
739 | } | |
740 | ||
741 | struct pr_usrreqs rip6_usrreqs = { | |
742 | rip6_abort, pru_accept_notsupp, rip6_attach, rip6_bind, rip6_connect, | |
743 | pru_connect2_notsupp, in6_control, rip6_detach, rip6_disconnect, | |
744 | pru_listen_notsupp, in6_setpeeraddr, pru_rcvd_notsupp, | |
9bccf70c | 745 | pru_rcvoob_notsupp, rip6_send, pru_sense_null, rip6_shutdown, |
91447636 | 746 | in6_setsockaddr, sosend, soreceive, pru_sopoll_notsupp |
1c79356b | 747 | }; |
2d21ac55 A |
748 | |
749 | __private_extern__ struct pr_usrreqs icmp6_dgram_usrreqs = { | |
750 | rip6_abort, pru_accept_notsupp, icmp6_dgram_attach, rip6_bind, rip6_connect, | |
751 | pru_connect2_notsupp, in6_control, rip6_detach, rip6_disconnect, | |
752 | pru_listen_notsupp, in6_setpeeraddr, pru_rcvd_notsupp, | |
753 | pru_rcvoob_notsupp, icmp6_dgram_send, pru_sense_null, rip6_shutdown, | |
754 | in6_setsockaddr, sosend, soreceive, pru_sopoll_notsupp | |
755 | }; | |
756 | ||
757 | ||
758 |