2 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 * $FreeBSD: src/sys/netinet6/raw_ip6.c,v 1.7.2.4 2001/07/29 19:32:40 ume Exp $
33 * Copyright (c) 1982, 1986, 1988, 1993
34 * The Regents of the University of California. All rights reserved.
36 * Redistribution and use in source and binary forms, with or without
37 * modification, are permitted provided that the following conditions
39 * 1. Redistributions of source code must retain the above copyright
40 * notice, this list of conditions and the following disclaimer.
41 * 2. Redistributions in binary form must reproduce the above copyright
42 * notice, this list of conditions and the following disclaimer in the
43 * documentation and/or other materials provided with the distribution.
44 * 3. All advertising materials mentioning features or use of this software
45 * must display the following acknowledgement:
46 * This product includes software developed by the University of
47 * California, Berkeley and its contributors.
48 * 4. Neither the name of the University nor the names of its contributors
49 * may be used to endorse or promote products derived from this software
50 * without specific prior written permission.
52 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
53 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
54 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
55 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
56 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
57 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
58 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
59 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
60 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
61 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
64 * @(#)raw_ip.c 8.2 (Berkeley) 1/4/94
66 #include <sys/param.h>
67 #include <sys/malloc.h>
70 #include <sys/socket.h>
71 #include <sys/protosw.h>
72 #include <sys/socketvar.h>
73 #include <sys/errno.h>
74 #include <sys/systm.h>
77 #include <net/route.h>
78 #include <net/if_types.h>
80 #include <netinet/in.h>
81 #include <netinet/in_var.h>
82 #include <netinet/in_systm.h>
83 #include <netinet/ip6.h>
84 #include <netinet6/ip6_var.h>
85 #include <netinet6/ip6_mroute.h>
86 #include <netinet/icmp6.h>
87 #include <netinet/in_pcb.h>
88 #include <netinet6/in6_pcb.h>
89 #include <netinet6/nd6.h>
90 #include <netinet6/ip6protosw.h>
91 #if ENABLE_DEFAULT_SCOPE
92 #include <netinet6/scope6_var.h>
94 #include <netinet6/raw_ip6.h>
95 #include <netinet6/ip6_fw.h>
98 #include <netinet6/ipsec.h>
99 #include <netinet6/ipsec6.h>
100 extern int ipsec_bypass
;
101 extern lck_mtx_t
*sadb_mutex
;
106 #if defined(NFAITH) && 0 < NFAITH
107 #include <net/if_faith.h>
110 #define satosin6(sa) ((struct sockaddr_in6 *)(sa))
111 #define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa))
114 * Raw interface to IP6 protocol.
117 extern struct inpcbhead ripcb
;
118 extern struct inpcbinfo ripcbinfo
;
119 extern u_long rip_sendspace
;
120 extern u_long rip_recvspace
;
121 extern u_long route_generation
;
123 struct rip6stat rip6stat
;
126 * Setup generic address and protocol structures
127 * for raw_input routine, then pass them along with
135 struct mbuf
*m
= *mp
;
136 register struct ip6_hdr
*ip6
= mtod(m
, struct ip6_hdr
*);
137 register struct inpcb
*in6p
;
138 struct inpcb
*last
= 0;
139 struct mbuf
*opts
= NULL
;
140 struct sockaddr_in6 rip6src
;
141 int proto
= ip6
->ip6_nxt
;
143 rip6stat
.rip6s_ipackets
++;
145 #if defined(NFAITH) && 0 < NFAITH
146 if (faithprefix(&ip6
->ip6_dst
)) {
147 /* XXX send icmp6 host/port unreach? */
153 init_sin6(&rip6src
, m
); /* general init */
155 lck_rw_lock_shared(ripcbinfo
.mtx
);
156 LIST_FOREACH(in6p
, &ripcb
, inp_list
) {
157 if ((in6p
->in6p_vflag
& INP_IPV6
) == 0)
159 if (in6p
->in6p_ip6_nxt
&&
160 in6p
->in6p_ip6_nxt
!= proto
)
162 if (!IN6_IS_ADDR_UNSPECIFIED(&in6p
->in6p_laddr
) &&
163 !IN6_ARE_ADDR_EQUAL(&in6p
->in6p_laddr
, &ip6
->ip6_dst
))
165 if (!IN6_IS_ADDR_UNSPECIFIED(&in6p
->in6p_faddr
) &&
166 !IN6_ARE_ADDR_EQUAL(&in6p
->in6p_faddr
, &ip6
->ip6_src
))
168 if (in6p
->in6p_cksum
!= -1) {
169 rip6stat
.rip6s_isum
++;
170 if (in6_cksum(m
, ip6
->ip6_nxt
, *offp
,
171 m
->m_pkthdr
.len
- *offp
)) {
172 rip6stat
.rip6s_badsum
++;
177 struct mbuf
*n
= m_copy(m
, 0, (int)M_COPYALL
);
181 * Check AH/ESP integrity.
183 if (ipsec_bypass
== 0 && n
) {
184 lck_mtx_lock(sadb_mutex
);
185 if (ipsec6_in_reject_so(n
, last
->inp_socket
)) {
187 ipsec6stat
.in_polvio
++;
188 /* do not inject data into pcb */
190 lck_mtx_unlock(sadb_mutex
);
194 if (last
->in6p_flags
& IN6P_CONTROLOPTS
||
195 last
->in6p_socket
->so_options
& SO_TIMESTAMP
)
196 ip6_savecontrol(last
, &opts
, ip6
, n
);
197 /* strip intermediate headers */
199 if (sbappendaddr(&last
->in6p_socket
->so_rcv
,
200 (struct sockaddr
*)&rip6src
,
201 n
, opts
, NULL
) == 0) {
202 rip6stat
.rip6s_fullsock
++;
204 sorwakeup(last
->in6p_socket
);
210 lck_rw_done(ripcbinfo
.mtx
);
213 * Check AH/ESP integrity.
215 if (ipsec_bypass
== 0 && last
) {
216 lck_mtx_lock(sadb_mutex
);
217 if (ipsec6_in_reject_so(m
, last
->inp_socket
)) {
219 ipsec6stat
.in_polvio
++;
220 ip6stat
.ip6s_delivered
--;
221 /* do not inject data into pcb */
223 lck_mtx_unlock(sadb_mutex
);
227 if (last
->in6p_flags
& IN6P_CONTROLOPTS
||
228 last
->in6p_socket
->so_options
& SO_TIMESTAMP
)
229 ip6_savecontrol(last
, &opts
, ip6
, m
);
230 /* strip intermediate headers */
232 if (sbappendaddr(&last
->in6p_socket
->so_rcv
,
233 (struct sockaddr
*)&rip6src
, m
, opts
, NULL
) == 0) {
234 rip6stat
.rip6s_fullsock
++;
236 sorwakeup(last
->in6p_socket
);
238 rip6stat
.rip6s_nosock
++;
239 if (m
->m_flags
& M_MCAST
)
240 rip6stat
.rip6s_nosockmcast
++;
241 if (proto
== IPPROTO_NONE
)
244 char *prvnxtp
= ip6_get_prevhdr(m
, *offp
); /* XXX */
245 icmp6_error(m
, ICMP6_PARAM_PROB
,
246 ICMP6_PARAMPROB_NEXTHEADER
,
247 prvnxtp
- mtod(m
, char *));
249 ip6stat
.ip6s_delivered
--;
263 struct ip6ctlparam
*ip6cp
= NULL
;
264 const struct sockaddr_in6
*sa6_src
= NULL
;
265 void (*notify
)(struct inpcb
*, int) = in6_rtchange
;
267 if (sa
->sa_family
!= AF_INET6
||
268 sa
->sa_len
!= sizeof(struct sockaddr_in6
))
271 if ((unsigned)cmd
>= PRC_NCMDS
)
273 if (PRC_IS_REDIRECT(cmd
))
274 notify
= in6_rtchange
, d
= NULL
;
275 else if (cmd
== PRC_HOSTDEAD
)
277 else if (inet6ctlerrmap
[cmd
] == 0)
280 /* if the parameter is from icmp6, decode it. */
282 ip6cp
= (struct ip6ctlparam
*)d
;
284 ip6
= ip6cp
->ip6c_ip6
;
285 off
= ip6cp
->ip6c_off
;
286 sa6_src
= ip6cp
->ip6c_src
;
293 (void) in6_pcbnotify(&ripcbinfo
, sa
, 0, (struct sockaddr
*)sa6_src
,
298 * Generate IPv6 header and pass packet to ip6_output.
299 * Tack on options user may have setup with control call.
303 register struct mbuf
*m
,
305 struct sockaddr_in6
*dstsock
,
306 struct mbuf
*control
)
308 struct in6_addr
*dst
;
311 u_int plen
= m
->m_pkthdr
.len
;
313 struct ip6_pktopts opt
, *optp
= 0;
314 struct ifnet
*oifp
= NULL
;
315 int type
= 0, code
= 0; /* for ICMPv6 output statistics only */
318 in6p
= sotoin6pcb(so
);
323 dst
= &dstsock
->sin6_addr
;
325 if ((error
= ip6_setpktoptions(control
, &opt
, priv
, 0)) != 0)
329 optp
= in6p
->in6p_outputopts
;
332 * For an ICMPv6 packet, we should know its type and code
333 * to update statistics.
335 if (so
->so_proto
->pr_protocol
== IPPROTO_ICMPV6
) {
336 struct icmp6_hdr
*icmp6
;
337 if (m
->m_len
< sizeof(struct icmp6_hdr
) &&
338 (m
= m_pullup(m
, sizeof(struct icmp6_hdr
))) == NULL
) {
342 icmp6
= mtod(m
, struct icmp6_hdr
*);
343 type
= icmp6
->icmp6_type
;
344 code
= icmp6
->icmp6_code
;
347 M_PREPEND(m
, sizeof(*ip6
), M_WAIT
);
348 ip6
= mtod(m
, struct ip6_hdr
*);
351 * Next header might not be ICMP6 but use its pseudo header anyway.
356 * If the scope of the destination is link-local, embed the interface
357 * index in the address.
359 * XXX advanced-api value overrides sin6_scope_id
361 if (IN6_IS_SCOPE_LINKLOCAL(&ip6
->ip6_dst
)) {
362 struct in6_pktinfo
*pi
;
365 * XXX Boundary check is assumed to be already done in
366 * ip6_setpktoptions().
368 if (optp
&& (pi
= optp
->ip6po_pktinfo
) && pi
->ipi6_ifindex
) {
369 ip6
->ip6_dst
.s6_addr16
[1] = htons(pi
->ipi6_ifindex
);
370 oifp
= ifindex2ifnet
[pi
->ipi6_ifindex
];
371 } else if (IN6_IS_ADDR_MULTICAST(&ip6
->ip6_dst
) &&
372 in6p
->in6p_moptions
&&
373 in6p
->in6p_moptions
->im6o_multicast_ifp
) {
374 oifp
= in6p
->in6p_moptions
->im6o_multicast_ifp
;
375 ip6
->ip6_dst
.s6_addr16
[1] = htons(oifp
->if_index
);
376 } else if (dstsock
->sin6_scope_id
) {
378 if (dstsock
->sin6_scope_id
< 0
379 || if_index
< dstsock
->sin6_scope_id
) {
380 error
= ENXIO
; /* XXX EINVAL? */
383 ip6
->ip6_dst
.s6_addr16
[1]
384 = htons(dstsock
->sin6_scope_id
& 0xffff);/*XXX*/
389 * Source address selection.
392 struct in6_addr
*in6a
;
393 struct in6_addr storage
;
395 if ((in6a
= in6_selectsrc(dstsock
, optp
,
399 &storage
, &error
)) == 0) {
401 error
= EADDRNOTAVAIL
;
404 ip6
->ip6_src
= *in6a
;
405 if (in6p
->in6p_route
.ro_rt
)
406 oifp
= ifindex2ifnet
[in6p
->in6p_route
.ro_rt
->rt_ifp
->if_index
];
408 ip6
->ip6_flow
= (ip6
->ip6_flow
& ~IPV6_FLOWINFO_MASK
) |
409 (in6p
->in6p_flowinfo
& IPV6_FLOWINFO_MASK
);
410 ip6
->ip6_vfc
= (ip6
->ip6_vfc
& ~IPV6_VERSION_MASK
) |
411 (IPV6_VERSION
& IPV6_VERSION_MASK
);
412 /* ip6_plen will be filled in ip6_output, so not fill it here. */
413 ip6
->ip6_nxt
= in6p
->in6p_ip6_nxt
;
414 ip6
->ip6_hlim
= in6_selecthlim(in6p
, oifp
);
416 if (so
->so_proto
->pr_protocol
== IPPROTO_ICMPV6
||
417 in6p
->in6p_cksum
!= -1) {
422 /* compute checksum */
423 if (so
->so_proto
->pr_protocol
== IPPROTO_ICMPV6
)
424 off
= offsetof(struct icmp6_hdr
, icmp6_cksum
);
426 off
= in6p
->in6p_cksum
;
427 if (plen
< off
+ 1) {
431 off
+= sizeof(struct ip6_hdr
);
434 while (n
&& n
->m_len
<= off
) {
440 p
= (u_int16_t
*)(mtod(n
, caddr_t
) + off
);
442 *p
= in6_cksum(m
, ip6
->ip6_nxt
, sizeof(*ip6
), plen
);
446 if (ipsec_bypass
== 0 && ipsec_setsocket(m
, so
) != 0) {
452 if (in6p
->in6p_route
.ro_rt
&& in6p
->in6p_route
.ro_rt
->generation_id
!= route_generation
) {
453 rtfree(in6p
->in6p_route
.ro_rt
);
454 in6p
->in6p_route
.ro_rt
= (struct rtentry
*)0;
457 error
= ip6_output(m
, optp
, &in6p
->in6p_route
, 0,
458 in6p
->in6p_moptions
, &oifp
, 0);
459 if (so
->so_proto
->pr_protocol
== IPPROTO_ICMPV6
) {
461 icmp6_ifoutstat_inc(oifp
, type
, code
);
462 icmp6stat
.icp6s_outhist
[type
]++;
464 rip6stat
.rip6s_opackets
++;
473 if (optp
== &opt
&& optp
->ip6po_rthdr
&& optp
->ip6po_route
.ro_rt
)
474 rtfree(optp
->ip6po_route
.ro_rt
);
477 ip6_clearpktopts(optp
, 0, -1);
490 * Raw IPv6 socket option processing.
495 struct sockopt
*sopt
)
499 if (sopt
->sopt_level
== IPPROTO_ICMPV6
)
501 * XXX: is it better to call icmp6_ctloutput() directly
504 return(icmp6_ctloutput(so
, sopt
));
505 else if (sopt
->sopt_level
!= IPPROTO_IPV6
)
510 switch (sopt
->sopt_dir
) {
512 switch (sopt
->sopt_name
) {
515 if (ip6_fw_ctl_ptr
== 0)
518 error
= ip6_fw_ctl_ptr(sopt
);
530 error
= ip6_mrouter_get(so
, sopt
);
533 error
= ip6_ctloutput(so
, sopt
);
539 switch (sopt
->sopt_name
) {
544 if (ip6_fw_ctl_ptr
== 0)
547 error
= ip6_fw_ctl_ptr(sopt
);
559 error
= ip6_mrouter_set(so
, sopt
);
562 error
= ip6_ctloutput(so
, sopt
);
572 rip6_attach(struct socket
*so
, int proto
, struct proc
*p
)
579 panic("rip6_attach");
580 if (p
&& (error
= proc_suser(p
)) != 0)
583 error
= soreserve(so
, rip_sendspace
, rip_recvspace
);
587 error
= in_pcballoc(so
, &ripcbinfo
, p
);
591 inp
= (struct inpcb
*)so
->so_pcb
;
592 inp
->inp_vflag
|= INP_IPV6
;
593 inp
->in6p_ip6_nxt
= (long)proto
;
594 inp
->in6p_hops
= -1; /* use kernel default */
595 inp
->in6p_cksum
= -1;
596 MALLOC(inp
->in6p_icmp6filt
, struct icmp6_filter
*,
597 sizeof(struct icmp6_filter
), M_PCB
, M_WAITOK
);
598 if (inp
->in6p_icmp6filt
== NULL
)
600 ICMP6_FILTER_SETPASSALL(inp
->in6p_icmp6filt
);
605 rip6_detach(struct socket
*so
)
611 panic("rip6_detach");
613 if (so
== ip6_mrouter
)
615 if (inp
->in6p_icmp6filt
) {
616 FREE(inp
->in6p_icmp6filt
, M_PCB
);
617 inp
->in6p_icmp6filt
= NULL
;
624 rip6_abort(struct socket
*so
)
626 soisdisconnected(so
);
627 return rip6_detach(so
);
631 rip6_disconnect(struct socket
*so
)
633 struct inpcb
*inp
= sotoinpcb(so
);
635 if ((so
->so_state
& SS_ISCONNECTED
) == 0)
637 inp
->in6p_faddr
= in6addr_any
;
638 return rip6_abort(so
);
642 rip6_bind(struct socket
*so
, struct sockaddr
*nam
, struct proc
*p
)
644 struct inpcb
*inp
= sotoinpcb(so
);
645 struct sockaddr_in6
*addr
= (struct sockaddr_in6
*)nam
;
646 struct ifaddr
*ia
= NULL
;
648 if (nam
->sa_len
!= sizeof(*addr
))
651 if (TAILQ_EMPTY(&ifnet_head
) || addr
->sin6_family
!= AF_INET6
)
652 return EADDRNOTAVAIL
;
653 #if ENABLE_DEFAULT_SCOPE
654 if (addr
->sin6_scope_id
== 0) { /* not change if specified */
655 addr
->sin6_scope_id
= scope6_addr2default(&addr
->sin6_addr
);
658 if (!IN6_IS_ADDR_UNSPECIFIED(&addr
->sin6_addr
) &&
659 (ia
= ifa_ifwithaddr((struct sockaddr
*)addr
)) == 0)
660 return EADDRNOTAVAIL
;
662 ((struct in6_ifaddr
*)ia
)->ia6_flags
&
663 (IN6_IFF_ANYCAST
|IN6_IFF_NOTREADY
|
664 IN6_IFF_DETACHED
|IN6_IFF_DEPRECATED
)) {
666 return(EADDRNOTAVAIL
);
669 inp
->in6p_laddr
= addr
->sin6_addr
;
674 rip6_connect(struct socket
*so
, struct sockaddr
*nam
, struct proc
*p
)
676 struct inpcb
*inp
= sotoinpcb(so
);
677 struct sockaddr_in6
*addr
= (struct sockaddr_in6
*)nam
;
678 struct in6_addr
*in6a
= NULL
;
679 struct in6_addr storage
;
681 #if ENABLE_DEFAULT_SCOPE
682 struct sockaddr_in6 tmp
;
685 if (nam
->sa_len
!= sizeof(*addr
))
687 if (TAILQ_EMPTY(&ifnet_head
))
688 return EADDRNOTAVAIL
;
689 if (addr
->sin6_family
!= AF_INET6
)
691 #if ENABLE_DEFAULT_SCOPE
692 if (addr
->sin6_scope_id
== 0) { /* not change if specified */
693 /* avoid overwrites */
696 addr
->sin6_scope_id
= scope6_addr2default(&addr
->sin6_addr
);
699 /* Source address selection. XXX: need pcblookup? */
700 in6a
= in6_selectsrc(addr
, inp
->in6p_outputopts
,
701 inp
->in6p_moptions
, &inp
->in6p_route
,
702 &inp
->in6p_laddr
, &storage
, &error
);
704 return (error
? error
: EADDRNOTAVAIL
);
705 inp
->in6p_laddr
= *in6a
;
706 inp
->in6p_faddr
= addr
->sin6_addr
;
712 rip6_shutdown(struct socket
*so
)
719 rip6_send(struct socket
*so
, int flags
, struct mbuf
*m
, struct sockaddr
*nam
,
720 struct mbuf
*control
, struct proc
*p
)
722 struct inpcb
*inp
= sotoinpcb(so
);
723 struct sockaddr_in6 tmp
;
724 struct sockaddr_in6
*dst
;
726 /* always copy sockaddr to avoid overwrites */
727 if (so
->so_state
& SS_ISCONNECTED
) {
733 bzero(&tmp
, sizeof(tmp
));
734 tmp
.sin6_family
= AF_INET6
;
735 tmp
.sin6_len
= sizeof(struct sockaddr_in6
);
736 bcopy(&inp
->in6p_faddr
, &tmp
.sin6_addr
,
737 sizeof(struct in6_addr
));
744 tmp
= *(struct sockaddr_in6
*)nam
;
747 #if ENABLE_DEFAULT_SCOPE
748 if (dst
->sin6_scope_id
== 0) { /* not change if specified */
749 dst
->sin6_scope_id
= scope6_addr2default(&dst
->sin6_addr
);
752 return rip6_output(m
, so
, dst
, control
);
755 struct pr_usrreqs rip6_usrreqs
= {
756 rip6_abort
, pru_accept_notsupp
, rip6_attach
, rip6_bind
, rip6_connect
,
757 pru_connect2_notsupp
, in6_control
, rip6_detach
, rip6_disconnect
,
758 pru_listen_notsupp
, in6_setpeeraddr
, pru_rcvd_notsupp
,
759 pru_rcvoob_notsupp
, rip6_send
, pru_sense_null
, rip6_shutdown
,
760 in6_setsockaddr
, sosend
, soreceive
, pru_sopoll_notsupp