/*
- * Copyright (c) 2000 Apple Computer, Inc. All rights reserved.
+ * Copyright (c) 2000-2020 Apple Inc. All rights reserved.
*
- * @APPLE_LICENSE_HEADER_START@
- *
- * The contents of this file constitute Original Code as defined in and
- * are subject to the Apple Public Source License Version 1.1 (the
- * "License"). You may not use this file except in compliance with the
- * License. Please obtain a copy of the License at
- * http://www.apple.com/publicsource and read it before using this file.
- *
- * This Original Code and all software distributed under the License are
- * distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY KIND, EITHER
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
+ *
+ * This file contains Original Code and/or Modifications of Original Code
+ * as defined in and that are subject to the Apple Public Source License
+ * Version 2.0 (the 'License'). You may not use this file except in
+ * compliance with the License. The rights granted to you under the License
+ * may not be used to create, or enable the creation or redistribution of,
+ * unlawful or unlicensed copies of an Apple operating system, or to
+ * circumvent, violate, or enable the circumvention or violation of, any
+ * terms of an Apple operating system software license agreement.
+ *
+ * Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this file.
+ *
+ * The Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
* EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
* INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT. Please see the
- * License for the specific language governing rights and limitations
- * under the License.
- *
- * @APPLE_LICENSE_HEADER_END@
+ * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
+ * Please see the License for the specific language governing rights and
+ * limitations under the License.
+ *
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
*/
/*
* Copyright (c) 1982, 1986, 1990, 1993
* @(#)in_pcb.h 8.1 (Berkeley) 6/10/93
* $FreeBSD: src/sys/netinet/in_pcb.h,v 1.32.2.4 2001/08/13 16:26:17 ume Exp $
*/
+/*
+ * NOTICE: This file was modified by SPARTA, Inc. in 2007 to introduce
+ * support for mandatory and extensible security protections. This notice
+ * is included in support of clause 2.2 (b) of the Apple Public License,
+ * Version 2.0.
+ */
#ifndef _NETINET_IN_PCB_H_
#define _NETINET_IN_PCB_H_
#include <sys/appleapiopts.h>
+#include <sys/types.h>
#include <sys/queue.h>
+#ifdef BSD_KERNEL_PRIVATE
+#include <sys/bitstring.h>
+#include <sys/tree.h>
+#include <kern/locks.h>
+#include <kern/zalloc.h>
+#include <netinet/in_stat.h>
+#endif /* BSD_KERNEL_PRIVATE */
+#if !KERNEL
+#include <TargetConditionals.h>
+#endif
-
+#if IPSEC
#include <netinet6/ipsec.h> /* for IPSEC */
+#endif /* IPSEC */
-#ifdef __APPLE_API_PRIVATE
+#if NECP
+#include <net/necp.h>
+#endif
-#define in6pcb inpcb /* for KAME src sync over BSD*'s */
-#define in6p_sp inp_sp /* for KAME src sync over BSD*'s */
+#ifdef BSD_KERNEL_PRIVATE
/*
- * Common structure pcb for internet protocol implementation.
- * Here are stored pointers to local and foreign host table
- * entries, local and foreign socket numbers, and pointers
- * up (to a socket structure) and down (to a protocol-specific)
- * control block.
+ * struct inpcb is the common protocol control block structure used in most
+ * IP transport protocols.
+ *
+ * Pointers to local and foreign host table entries, local and foreign socket
+ * numbers, and pointers up (to a socket structure) and down (to a
+ * protocol-specific control block) are stored here.
*/
LIST_HEAD(inpcbhead, inpcb);
LIST_HEAD(inpcbporthead, inpcbport);
-typedef u_quad_t inp_gen_t;
+#endif /* BSD_KERNEL_PRIVATE */
+typedef u_quad_t inp_gen_t;
/*
* PCB with AF_INET6 null bind'ed laddr can receive AF_INET input packet.
- * So, AF_INET6 null laddr is also used as AF_INET null laddr,
- * by utilize following structure. (At last, same as INRIA)
+ * So, AF_INET6 null laddr is also used as AF_INET null laddr, by utilizing
+ * the following structure.
*/
struct in_addr_4in6 {
- u_int32_t ia46_pad32[3];
- struct in_addr ia46_addr4;
+ u_int32_t ia46_pad32[3];
+ struct in_addr ia46_addr4;
};
+#ifdef BSD_KERNEL_PRIVATE
/*
* NB: the zone allocator is type-stable EXCEPT FOR THE FIRST TWO LONGS
* of the structure. Therefore, it is important that the members in
* that position not contain any information which is required to be
* stable.
*/
-struct icmp6_filter;
+struct icmp6_filter;
+struct ifnet;
+
+struct inp_stat {
+ u_int64_t rxpackets;
+ u_int64_t rxbytes;
+ u_int64_t txpackets;
+ u_int64_t txbytes;
+};
+/*
+ * struct inpcb captures the network layer state for TCP, UDP and raw IPv6
+ * and IPv6 sockets. In the case of TCP, further per-connection state is
+ * hung off of inp_ppcb most of the time.
+ */
struct inpcb {
- LIST_ENTRY(inpcb) inp_hash; /* hash list */
- struct in_addr inp_faddr; /* foreign host table entry */
- struct in_addr inp_laddr; /* local host table entry */
- u_short inp_fport; /* foreign port */
- u_short inp_lport; /* local port */
- LIST_ENTRY(inpcb) inp_list; /* list for all PCBs of this proto */
- caddr_t inp_ppcb; /* pointer to per-protocol pcb */
- struct inpcbinfo *inp_pcbinfo; /* PCB list info */
- struct socket *inp_socket; /* back pointer to socket */
- u_char nat_owner; /* Used to NAT TCP/UDP traffic */
- u_long nat_cookie; /* Cookie stored and returned to NAT */
- LIST_ENTRY(inpcb) inp_portlist; /* list for this PCB's local port */
- struct inpcbport *inp_phd; /* head of this list */
- inp_gen_t inp_gencnt; /* generation count of this instance */
- int inp_flags; /* generic IP/datagram flags */
- u_int32_t inp_flow;
-
- u_char inp_vflag;
-#define INP_IPV4 0x1
-#define INP_IPV6 0x2
-
- u_char inp_ip_ttl; /* time to live proto */
- u_char inp_ip_p; /* protocol proto */
- /* protocol dependent part */
+ decl_lck_mtx_data(, inpcb_mtx); /* inpcb per-socket mutex */
+ LIST_ENTRY(inpcb) inp_hash; /* hash list */
+ LIST_ENTRY(inpcb) inp_list; /* list for all PCBs of this proto */
+ void *inp_ppcb; /* pointer to per-protocol pcb */
+ struct inpcbinfo *inp_pcbinfo; /* PCB list info */
+ struct socket *inp_socket; /* back pointer to socket */
+ LIST_ENTRY(inpcb) inp_portlist; /* list for this PCB's local port */
+ RB_ENTRY(inpcb) infc_link; /* link for flowhash RB tree */
+ struct inpcbport *inp_phd; /* head of this list */
+ inp_gen_t inp_gencnt; /* generation count of this instance */
+ int inp_hash_element; /* array index of pcb's hash list */
+ int inp_wantcnt; /* wanted count; atomically updated */
+ int inp_state; /* state (INUSE/CACHED/DEAD) */
+ u_short inp_fport; /* foreign port */
+ u_short inp_lport; /* local port */
+ u_int32_t inp_flags; /* generic IP/datagram flags */
+ u_int32_t inp_flags2; /* generic IP/datagram flags #2 */
+ u_int32_t inp_flow; /* IPv6 flow information */
+
+ u_char inp_sndinprog_cnt; /* outstanding send operations */
+ uint32_t inp_sndingprog_waiters;/* waiters for outstanding send */
+ u_char inp_vflag; /* INP_IPV4 or INP_IPV6 */
+
+ u_char inp_ip_ttl; /* time to live proto */
+ u_char inp_ip_p; /* protocol proto */
+
+ struct ifnet *inp_boundifp; /* interface for INP_BOUND_IF */
+ struct ifnet *inp_last_outifp; /* last known outgoing interface */
+ u_int32_t inp_flowhash; /* flow hash */
+
+ /* Protocol-dependent part */
union {
/* foreign host table entry */
- struct in_addr_4in6 inp46_foreign;
- struct in6_addr inp6_foreign;
+ struct in_addr_4in6 inp46_foreign;
+ struct in6_addr inp6_foreign;
} inp_dependfaddr;
union {
/* local host table entry */
- struct in_addr_4in6 inp46_local;
- struct in6_addr inp6_local;
+ struct in_addr_4in6 inp46_local;
+ struct in6_addr inp6_local;
} inp_dependladdr;
union {
/* placeholder for routing entry */
- struct route inp4_route;
- struct route_in6 inp6_route;
+ struct route inp4_route;
+ struct route_in6 inp6_route;
} inp_dependroute;
struct {
/* type of service proto */
/* IP multicast options */
struct ip_moptions *inp4_moptions;
} inp_depend4;
-#define inp_faddr inp_dependfaddr.inp46_foreign.ia46_addr4
-#define inp_laddr inp_dependladdr.inp46_local.ia46_addr4
-#define inp_route inp_dependroute.inp4_route
-#define inp_ip_tos inp_depend4.inp4_ip_tos
-#define inp_options inp_depend4.inp4_options
-#define inp_moptions inp_depend4.inp4_moptions
struct {
/* IP options */
struct mbuf *inp6_options;
- u_int8_t inp6_hlim;
- u_int8_t unused_uint8_1;
- ushort unused_uint16_1;
/* IP6 options for outgoing packets */
- struct ip6_pktopts *inp6_outputopts;
+ struct ip6_pktopts *inp6_outputopts;
/* IP multicast options */
- struct ip6_moptions *inp6_moptions;
+ struct ip6_moptions *inp6_moptions;
/* ICMPv6 code type filter */
- struct icmp6_filter *inp6_icmp6filt;
+ struct icmp6_filter *inp6_icmp6filt;
/* IPV6_CHECKSUM setsockopt */
- int inp6_cksum;
- u_short inp6_ifindex;
- short inp6_hops;
+ int inp6_cksum;
+ short inp6_hops;
} inp_depend6;
-#define in6p_faddr inp_dependfaddr.inp6_foreign
-#define in6p_laddr inp_dependladdr.inp6_local
-#define in6p_route inp_dependroute.inp6_route
-#define in6p_ip6_hlim inp_depend6.inp6_hlim
-#define in6p_hops inp_depend6.inp6_hops /* default hop limit */
-#define in6p_ip6_nxt inp_ip_p
-#define in6p_flowinfo inp_flow
-#define in6p_vflag inp_vflag
-#define in6p_options inp_depend6.inp6_options
-#define in6p_outputopts inp_depend6.inp6_outputopts
-#define in6p_moptions inp_depend6.inp6_moptions
-#define in6p_icmp6filt inp_depend6.inp6_icmp6filt
-#define in6p_cksum inp_depend6.inp6_cksum
-#define inp6_ifindex inp_depend6.inp6_ifindex
-#define in6p_flags inp_flags /* for KAME src sync over BSD*'s */
-#define in6p_socket inp_socket /* for KAME src sync over BSD*'s */
-#define in6p_lport inp_lport /* for KAME src sync over BSD*'s */
-#define in6p_fport inp_fport /* for KAME src sync over BSD*'s */
-#define in6p_ppcb inp_ppcb /* for KAME src sync over BSD*'s */
-
- int hash_element; /* Array index of pcb's hash list */
- caddr_t inp_saved_ppcb; /* place to save pointer while cached */
- struct inpcbpolicy *inp_sp;
- u_long reserved[3]; /* For future use */
+
+ caddr_t inp_saved_ppcb; /* place to save pointer while cached */
+#if IPSEC
+ struct inpcbpolicy *inp_sp; /* for IPsec */
+#endif /* IPSEC */
+#if NECP
+ struct {
+ char *inp_domain;
+ char *inp_account;
+ } inp_necp_attributes;
+ struct necp_inpcb_result inp_policyresult;
+ uuid_t necp_client_uuid;
+ necp_client_flow_cb necp_cb;
+#endif
+ u_char *inp_keepalive_data; /* for keepalive offload */
+ u_int8_t inp_keepalive_datalen; /* keepalive data length */
+ u_int8_t inp_keepalive_type; /* type of application */
+ u_int16_t inp_keepalive_interval; /* keepalive interval */
+ uint32_t inp_nstat_refcnt __attribute__((aligned(4)));
+ struct inp_stat *inp_stat;
+ struct inp_stat *inp_cstat; /* cellular data */
+ struct inp_stat *inp_wstat; /* Wi-Fi data */
+ struct inp_stat *inp_Wstat; /* Wired data */
+ u_int8_t inp_stat_store[sizeof(struct inp_stat) + sizeof(u_int64_t)];
+ u_int8_t inp_cstat_store[sizeof(struct inp_stat) + sizeof(u_int64_t)];
+ u_int8_t inp_wstat_store[sizeof(struct inp_stat) + sizeof(u_int64_t)];
+ u_int8_t inp_Wstat_store[sizeof(struct inp_stat) + sizeof(u_int64_t)];
+ activity_bitmap_t inp_nw_activity;
+ u_int64_t inp_start_timestamp;
+
+ char inp_last_proc_name[MAXCOMLEN + 1];
+ char inp_e_proc_name[MAXCOMLEN + 1];
};
-#endif /* __APPLE_API_PRIVATE */
-/*
- * The range of the generation count, as used in this implementation,
- * is 9e19. We would have to create 300 billion connections per
- * second for this number to roll over in a year. This seems sufficiently
- * unlikely that we simply don't concern ourselves with that possibility.
- */
+
+#define INP_ADD_STAT(_inp, _cnt_cellular, _cnt_wifi, _cnt_wired, _a, _n) \
+do { \
+ locked_add_64(&((_inp)->inp_stat->_a), (_n)); \
+ if (_cnt_cellular) \
+ locked_add_64(&((_inp)->inp_cstat->_a), (_n)); \
+ if (_cnt_wifi) \
+ locked_add_64(&((_inp)->inp_wstat->_a), (_n)); \
+ if (_cnt_wired) \
+ locked_add_64(&((_inp)->inp_Wstat->_a), (_n)); \
+} while (0);
+#endif /* BSD_KERNEL_PRIVATE */
/*
* Interface exported to userland by various protocols which use
* inpcbs. Hack alert -- only define if struct xsocket is in scope.
*/
-#ifdef _SYS_SOCKETVAR_H_
-struct xinpcb {
- size_t xi_len; /* length of this structure */
- struct inpcb xi_inp;
- struct xsocket xi_socket;
- u_quad_t xi_alignment_hack;
+#pragma pack(4)
+
+#if defined(__LP64__)
+struct _inpcb_list_entry {
+ u_int32_t le_next;
+ u_int32_t le_prev;
};
+#define _INPCB_PTR(x) u_int32_t
+#define _INPCB_LIST_ENTRY(x) struct _inpcb_list_entry
+#else /* !__LP64__ */
+#define _INPCB_PTR(x) x
+#define _INPCB_LIST_ENTRY(x) LIST_ENTRY(x)
+#endif /* !__LP64__ */
+
+#ifdef XNU_KERNEL_PRIVATE
+/*
+ * This is a copy of the inpcb as it shipped in Panther. This structure
+ * is filled out in a copy function. This allows the inpcb to change
+ * without breaking userland tools.
+ *
+ * CAUTION: Many fields may not be filled out. Fewer may be filled out
+ * in the future. Code defensively.
+ */
+struct inpcb_compat {
+#else
+struct inpcbinfo;
+struct inpcbport;
+struct mbuf;
+struct ip6_pktopts;
+struct ip6_moptions;
+struct icmp6_filter;
+struct inpcbpolicy;
-struct xinpgen {
- size_t xig_len; /* length of this structure */
- u_int xig_count; /* number of PCBs at this time */
- inp_gen_t xig_gen; /* generation count at this time */
- so_gen_t xig_sogen; /* socket generation count at this time */
+struct inpcb {
+#endif /* KERNEL_PRIVATE */
+ _INPCB_LIST_ENTRY(inpcb) inp_hash; /* hash list */
+ struct in_addr reserved1; /* reserved */
+ struct in_addr reserved2; /* reserved */
+ u_short inp_fport; /* foreign port */
+ u_short inp_lport; /* local port */
+ _INPCB_LIST_ENTRY(inpcb) inp_list; /* list for all peer PCBs */
+ _INPCB_PTR(caddr_t) inp_ppcb; /* per-protocol pcb */
+ _INPCB_PTR(struct inpcbinfo *) inp_pcbinfo; /* PCB list info */
+ _INPCB_PTR(void *) inp_socket; /* back pointer to socket */
+ u_char nat_owner; /* Used to NAT TCP/UDP traffic */
+ u_int32_t nat_cookie; /* Cookie stored and returned to NAT */
+ _INPCB_LIST_ENTRY(inpcb) inp_portlist; /* this PCB's local port list */
+ _INPCB_PTR(struct inpcbport *) inp_phd; /* head of this list */
+ inp_gen_t inp_gencnt; /* generation count of this instance */
+ int inp_flags; /* generic IP/datagram flags */
+ u_int32_t inp_flow;
+
+ u_char inp_vflag;
+
+ u_char inp_ip_ttl; /* time to live proto */
+ u_char inp_ip_p; /* protocol proto */
+ /* protocol dependent part */
+ union {
+ /* foreign host table entry */
+ struct in_addr_4in6 inp46_foreign;
+ struct in6_addr inp6_foreign;
+ } inp_dependfaddr;
+ union {
+ /* local host table entry */
+ struct in_addr_4in6 inp46_local;
+ struct in6_addr inp6_local;
+ } inp_dependladdr;
+ union {
+ /* placeholder for routing entry */
+ u_char inp4_route[20];
+ u_char inp6_route[32];
+ } inp_dependroute;
+ struct {
+ /* type of service proto */
+ u_char inp4_ip_tos;
+ /* IP options */
+ _INPCB_PTR(struct mbuf *) inp4_options;
+ /* IP multicast options */
+ _INPCB_PTR(struct ip_moptions *) inp4_moptions;
+ } inp_depend4;
+
+ struct {
+ /* IP options */
+ _INPCB_PTR(struct mbuf *) inp6_options;
+ u_int8_t inp6_hlim;
+ u_int8_t unused_uint8_1;
+ ushort unused_uint16_1;
+ /* IP6 options for outgoing packets */
+ _INPCB_PTR(struct ip6_pktopts *) inp6_outputopts;
+ /* IP multicast options */
+ _INPCB_PTR(struct ip6_moptions *) inp6_moptions;
+ /* ICMPv6 code type filter */
+ _INPCB_PTR(struct icmp6_filter *) inp6_icmp6filt;
+ /* IPV6_CHECKSUM setsockopt */
+ int inp6_cksum;
+ u_short inp6_ifindex;
+ short inp6_hops;
+ } inp_depend6;
+
+ int hash_element; /* Array index of pcb's hash list */
+ _INPCB_PTR(caddr_t) inp_saved_ppcb; /* pointer while cached */
+ _INPCB_PTR(struct inpcbpolicy *) inp_sp;
+ u_int32_t reserved[3]; /* reserved */
+};
+
+struct xinpcb {
+ u_int32_t xi_len; /* length of this structure */
+#ifdef XNU_KERNEL_PRIVATE
+ struct inpcb_compat xi_inp;
+#else
+ struct inpcb xi_inp;
+#endif
+ struct xsocket xi_socket;
+ u_quad_t xi_alignment_hack;
+};
+
+#if XNU_TARGET_OS_OSX || KERNEL || !(TARGET_OS_IPHONE && !TARGET_OS_SIMULATOR)
+struct inpcb64_list_entry {
+ u_int64_t le_next;
+ u_int64_t le_prev;
+};
+
+struct xinpcb64 {
+ u_int64_t xi_len; /* length of this structure */
+ u_int64_t xi_inpp;
+ u_short inp_fport; /* foreign port */
+ u_short inp_lport; /* local port */
+ struct inpcb64_list_entry inp_list; /* list for all PCBs */
+ u_int64_t inp_ppcb; /* ptr to per-protocol PCB */
+ u_int64_t inp_pcbinfo; /* PCB list info */
+ struct inpcb64_list_entry inp_portlist; /* this PCB's local port list */
+ u_int64_t inp_phd; /* head of this list */
+ inp_gen_t inp_gencnt; /* current generation count */
+ int inp_flags; /* generic IP/datagram flags */
+ u_int32_t inp_flow;
+ u_char inp_vflag;
+ u_char inp_ip_ttl; /* time to live */
+ u_char inp_ip_p; /* protocol */
+ union { /* foreign host table entry */
+ struct in_addr_4in6 inp46_foreign;
+ struct in6_addr inp6_foreign;
+ } inp_dependfaddr;
+ union { /* local host table entry */
+ struct in_addr_4in6 inp46_local;
+ struct in6_addr inp6_local;
+ } inp_dependladdr;
+ struct {
+ u_char inp4_ip_tos; /* type of service */
+ } inp_depend4;
+ struct {
+ u_int8_t inp6_hlim;
+ int inp6_cksum;
+ u_short inp6_ifindex;
+ short inp6_hops;
+ } inp_depend6;
+ struct xsocket64 xi_socket;
+ u_quad_t xi_alignment_hack;
};
-#endif /* _SYS_SOCKETVAR_H_ */
+#endif /* XNU_TARGET_OS_OSX || KERNEL || !(TARGET_OS_IPHONE && !TARGET_OS_SIMULATOR) */
+
+#ifdef PRIVATE
+struct xinpcb_list_entry {
+ u_int64_t le_next;
+ u_int64_t le_prev;
+};
+
+struct xinpcb_n {
+ u_int32_t xi_len; /* length of this structure */
+ u_int32_t xi_kind; /* XSO_INPCB */
+ u_int64_t xi_inpp;
+ u_short inp_fport; /* foreign port */
+ u_short inp_lport; /* local port */
+ u_int64_t inp_ppcb; /* pointer to per-protocol pcb */
+ inp_gen_t inp_gencnt; /* generation count of this instance */
+ int inp_flags; /* generic IP/datagram flags */
+ u_int32_t inp_flow;
+ u_char inp_vflag;
+ u_char inp_ip_ttl; /* time to live */
+ u_char inp_ip_p; /* protocol */
+ union { /* foreign host table entry */
+ struct in_addr_4in6 inp46_foreign;
+ struct in6_addr inp6_foreign;
+ } inp_dependfaddr;
+ union { /* local host table entry */
+ struct in_addr_4in6 inp46_local;
+ struct in6_addr inp6_local;
+ } inp_dependladdr;
+ struct {
+ u_char inp4_ip_tos; /* type of service */
+ } inp_depend4;
+ struct {
+ u_int8_t inp6_hlim;
+ int inp6_cksum;
+ u_short inp6_ifindex;
+ short inp6_hops;
+ } inp_depend6;
+ u_int32_t inp_flowhash;
+ u_int32_t inp_flags2;
+};
+#endif /* PRIVATE */
+
+struct xinpgen {
+ u_int32_t xig_len; /* length of this structure */
+ u_int xig_count; /* number of PCBs at this time */
+ inp_gen_t xig_gen; /* generation count at this time */
+ so_gen_t xig_sogen; /* current socket generation count */
+};
+
+#pragma pack()
+
+/*
+ * These defines are for use with the inpcb.
+ */
+#define INP_IPV4 0x1
+#define INP_IPV6 0x2
+#define inp_faddr inp_dependfaddr.inp46_foreign.ia46_addr4
+#define inp_laddr inp_dependladdr.inp46_local.ia46_addr4
+#define in6p_faddr inp_dependfaddr.inp6_foreign
+#define in6p_laddr inp_dependladdr.inp6_local
+
+#ifdef BSD_KERNEL_PRIVATE
+#define inp_route inp_dependroute.inp4_route
+#define inp_ip_tos inp_depend4.inp4_ip_tos
+#define inp_options inp_depend4.inp4_options
+#define inp_moptions inp_depend4.inp4_moptions
+#define in6p_route inp_dependroute.inp6_route
+#define in6p_ip6_hlim inp_depend6.inp6_hlim
+#define in6p_hops inp_depend6.inp6_hops /* default hop limit */
+#define in6p_ip6_nxt inp_ip_p
+#define in6p_vflag inp_vflag
+#define in6p_options inp_depend6.inp6_options
+#define in6p_outputopts inp_depend6.inp6_outputopts
+#define in6p_moptions inp_depend6.inp6_moptions
+#define in6p_icmp6filt inp_depend6.inp6_icmp6filt
+#define in6p_cksum inp_depend6.inp6_cksum
+#define in6p_ifindex inp_depend6.inp6_ifindex
+#define in6p_flags inp_flags
+#define in6p_flags2 inp_flags2
+#define in6p_socket inp_socket
+#define in6p_lport inp_lport
+#define in6p_fport inp_fport
+#define in6p_ppcb inp_ppcb
+#define in6p_state inp_state
+#define in6p_wantcnt inp_wantcnt
+#define in6p_last_outifp inp_last_outifp
+#define in6pcb inpcb
+#if IPSEC
+#define in6p_sp inp_sp
+#endif /* IPSEC */
+#define INP_INC_IFNET_STAT(_inp_, _stat_) { \
+ if ((_inp_)->inp_last_outifp != NULL) { \
+ if ((_inp_)->inp_vflag & INP_IPV6) { \
+ (_inp_)->inp_last_outifp->if_ipv6_stat->_stat_++;\
+ } else { \
+ (_inp_)->inp_last_outifp->if_ipv4_stat->_stat_++;\
+ }\
+ }\
+}
-#ifdef __APPLE_API_PRIVATE
struct inpcbport {
LIST_ENTRY(inpcbport) phd_hash;
struct inpcbhead phd_pcblist;
u_short phd_port;
};
-struct inpcbinfo { /* XXX documentation, prefixes */
- struct inpcbhead *hashbase;
-#ifdef __APPLE__
- u_long hashsize; /* in elements */
-#endif
- u_long hashmask;
- struct inpcbporthead *porthashbase;
- u_long porthashmask;
- struct inpcbhead *listhead;
- u_short lastport;
- u_short lastlow;
- u_short lasthi;
- void *ipi_zone; /* zone to allocate pcbs from */
- u_int ipi_count; /* number of pcbs in this list */
- u_quad_t ipi_gencnt; /* current generation count */
-#ifdef __APPLE__
- u_char all_owners;
- struct socket nat_dummy_socket;
- struct inpcb *last_pcb;
- caddr_t dummy_cb;
-#endif
+struct intimercount {
+ u_int32_t intimer_lazy; /* lazy requests for timer scheduling */
+ u_int32_t intimer_fast; /* fast requests, can be coalesced */
+ u_int32_t intimer_nodelay; /* fast requests, never coalesced */
+};
+
+typedef void (*inpcb_timer_func_t)(struct inpcbinfo *);
+
+/*
+ * Global data structure for each high-level protocol (UDP, TCP, ...) in both
+ * IPv4 and IPv6. Holds inpcb lists and information for managing them. Each
+ * pcbinfo is protected by a RW lock: ipi_lock.
+ *
+ * All INPCB pcbinfo entries are linked together via ipi_entry.
+ */
+struct inpcbinfo {
+ /*
+ * Glue to all PCB infos, as well as garbage collector and
+ * timer callbacks, protected by inpcb_lock. Callout request
+ * counts are atomically updated.
+ */
+ TAILQ_ENTRY(inpcbinfo) ipi_entry;
+ inpcb_timer_func_t ipi_gc;
+ inpcb_timer_func_t ipi_timer;
+ struct intimercount ipi_gc_req;
+ struct intimercount ipi_timer_req;
+
+ /*
+ * Per-protocol lock protecting pcb list, pcb count, etc.
+ */
+ lck_rw_t *ipi_lock;
+
+ /*
+ * List and count of pcbs on the protocol.
+ */
+ struct inpcbhead *ipi_listhead;
+ uint32_t ipi_count;
+
+ /*
+ * Count of pcbs marked with INP2_TIMEWAIT flag.
+ */
+ uint32_t ipi_twcount;
+
+ /*
+ * Generation count -- incremented each time a connection is
+ * allocated or freed.
+ */
+ uint64_t ipi_gencnt;
+
+ /*
+ * Fields associated with port lookup and allocation.
+ */
+ uint16_t ipi_lastport;
+ uint16_t ipi_lastlow;
+ uint16_t ipi_lasthi;
+
+ /*
+ * Zone from which inpcbs are allocated for this protocol.
+ */
+ struct zone *ipi_zone;
+
+ /*
+ * Per-protocol hash of pcbs, hashed by local and foreign
+ * addresses and port numbers.
+ */
+ struct inpcbhead *ipi_hashbase;
+ u_long ipi_hashmask;
+
+ /*
+ * Per-protocol hash of pcbs, hashed by only local port number.
+ */
+ struct inpcbporthead *ipi_porthashbase;
+ u_long ipi_porthashmask;
+
+ /*
+ * Misc.
+ */
+ lck_attr_t *ipi_lock_attr;
+ lck_grp_t *ipi_lock_grp;
+ lck_grp_attr_t *ipi_lock_grp_attr;
+
+#define INPCBINFO_UPDATE_MSS 0x1
+#define INPCBINFO_HANDLE_LQM_ABORT 0x2
+ u_int32_t ipi_flags;
};
#define INP_PCBHASH(faddr, lport, fport, mask) \
#define INP_PCBPORTHASH(lport, mask) \
(ntohs((lport)) & (mask))
-/* flags in inp_flags: */
-#define INP_RECVOPTS 0x01 /* receive incoming IP options */
-#define INP_RECVRETOPTS 0x02 /* receive IP options for reply */
-#define INP_RECVDSTADDR 0x04 /* receive IP dst address */
-#define INP_HDRINCL 0x08 /* user supplies entire IP header */
-#define INP_HIGHPORT 0x10 /* user wants "high" port binding */
-#define INP_LOWPORT 0x20 /* user wants "low" port binding */
-#define INP_ANONPORT 0x40 /* port chosen for user */
-#define INP_RECVIF 0x80 /* receive incoming interface */
-#define INP_MTUDISC 0x100 /* user can do MTU discovery */
-#ifdef __APPLE__
-#define INP_STRIPHDR 0x200 /* Strip headers in raw_ip, for OT support */
-#endif
-#define INP_FAITH 0x400 /* accept FAITH'ed connections */
-
-#define IN6P_IPV6_V6ONLY 0x008000 /* restrict AF_INET6 socket for v6 */
-
-#define IN6P_PKTINFO 0x010000 /* receive IP6 dst and I/F */
-#define IN6P_HOPLIMIT 0x020000 /* receive hoplimit */
-#define IN6P_HOPOPTS 0x040000 /* receive hop-by-hop options */
-#define IN6P_DSTOPTS 0x080000 /* receive dst options after rthdr */
-#define IN6P_RTHDR 0x100000 /* receive routing header */
-#define IN6P_RTHDRDSTOPTS 0x200000 /* receive dstoptions before rthdr */
-#define IN6P_AUTOFLOWLABEL 0x800000 /* attach flowlabel automatically */
-#define IN6P_BINDV6ONLY 0x10000000 /* do not grab IPv4 traffic */
-
-#define INP_CONTROLOPTS (INP_RECVOPTS|INP_RECVRETOPTS|INP_RECVDSTADDR|\
- INP_RECVIF|\
- IN6P_PKTINFO|IN6P_HOPLIMIT|IN6P_HOPOPTS|\
- IN6P_DSTOPTS|IN6P_RTHDR|IN6P_RTHDRDSTOPTS|\
- IN6P_AUTOFLOWLABEL)
-#define INP_UNMAPPABLEOPTS (IN6P_HOPOPTS|IN6P_DSTOPTS|IN6P_RTHDR|\
- IN6P_AUTOFLOWLABEL)
-
- /* for KAME src sync over BSD*'s */
-#define IN6P_HIGHPORT INP_HIGHPORT
-#define IN6P_LOWPORT INP_LOWPORT
-#define IN6P_ANONPORT INP_ANONPORT
-#define IN6P_RECVIF INP_RECVIF
-#define IN6P_MTUDISC INP_MTUDISC
-#define IN6P_FAITH INP_FAITH
-#define IN6P_CONTROLOPTS INP_CONTROLOPTS
- /*
- * socket AF version is {newer than,or include}
- * actual datagram AF version
- */
+#define INP_IS_FLOW_CONTROLLED(_inp_) \
+ ((_inp_)->inp_flags & INP_FLOW_CONTROLLED)
+#define INP_IS_FLOW_SUSPENDED(_inp_) \
+ (((_inp_)->inp_flags & INP_FLOW_SUSPENDED) || \
+ ((_inp_)->inp_socket->so_flags & SOF_SUSPENDED))
+#define INP_WAIT_FOR_IF_FEEDBACK(_inp_) \
+ (((_inp_)->inp_flags & (INP_FLOW_CONTROLLED | INP_FLOW_SUSPENDED)) != 0)
+
+#define INP_NO_CELLULAR(_inp) \
+ ((_inp)->inp_flags & INP_NO_IFT_CELLULAR)
+#define INP_NO_EXPENSIVE(_inp) \
+ ((_inp)->inp_flags2 & INP2_NO_IFF_EXPENSIVE)
+#define INP_NO_CONSTRAINED(_inp) \
+ ((_inp)->inp_flags2 & INP2_NO_IFF_CONSTRAINED)
+#define INP_AWDL_UNRESTRICTED(_inp) \
+ ((_inp)->inp_flags2 & INP2_AWDL_UNRESTRICTED)
+#define INP_INTCOPROC_ALLOWED(_inp) \
+ ((_inp)->inp_flags2 & INP2_INTCOPROC_ALLOWED)
+
+#endif /* BSD_KERNEL_PRIVATE */
-#define INPLOOKUP_WILDCARD 1
-#ifdef __APPLE__
-#define INPCB_ALL_OWNERS 0xff
-#define INPCB_NO_OWNER 0x0
-#define INPCB_OWNED_BY_X 0x80
-#define INPCB_MAX_IDS 7
-#endif
+/*
+ * Flags for inp_flags.
+ *
+ * Some of these are publicly defined for legacy reasons, as they are
+ * (unfortunately) used by certain applications to determine, at compile
+ * time, whether or not the OS supports certain features.
+ */
+#ifdef BSD_KERNEL_PRIVATE
+#define INP_RECVOPTS 0x00000001 /* receive incoming IP options */
+#define INP_RECVRETOPTS 0x00000002 /* receive IP options for reply */
+#define INP_RECVDSTADDR 0x00000004 /* receive IP dst address */
+#define INP_HDRINCL 0x00000008 /* user supplies entire IP header */
+#define INP_HIGHPORT 0x00000010 /* user wants "high" port binding */
+#define INP_LOWPORT 0x00000020 /* user wants "low" port binding */
+#endif /* BSD_KERNEL_PRIVATE */
+
+#define INP_ANONPORT 0x00000040 /* port chosen for user */
+
+#ifdef BSD_KERNEL_PRIVATE
+#define INP_RECVIF 0x00000080 /* receive incoming interface */
+#define INP_MTUDISC 0x00000100 /* unused */
+#define INP_STRIPHDR 0x00000200 /* strip hdrs in raw_ip (for OT) */
+#define INP_RECV_ANYIF 0x00000400 /* don't restrict inbound iface */
+#define INP_INADDR_ANY 0x00000800 /* local address wasn't specified */
+#define INP_IN6ADDR_ANY INP_INADDR_ANY
+#define INP_RECVTTL 0x00001000 /* receive incoming IP TTL */
+#define INP_UDP_NOCKSUM 0x00002000 /* turn off outbound UDP checksum */
+#define INP_BOUND_IF 0x00004000 /* bind socket to an interface */
+#endif /* BSD_KERNEL_PRIVATE */
+
+#define IN6P_IPV6_V6ONLY 0x00008000 /* restrict AF_INET6 socket for v6 */
+
+#ifdef BSD_KERNEL_PRIVATE
+#define IN6P_PKTINFO 0x00010000 /* receive IP6 dst and I/F */
+#define IN6P_HOPLIMIT 0x00020000 /* receive hoplimit */
+#define IN6P_HOPOPTS 0x00040000 /* receive hop-by-hop options */
+#define IN6P_DSTOPTS 0x00080000 /* receive dst options after rthdr */
+#define IN6P_RTHDR 0x00100000 /* receive routing header */
+#define IN6P_RTHDRDSTOPTS 0x00200000 /* receive dstoptions before rthdr */
+#define IN6P_TCLASS 0x00400000 /* receive traffic class value */
+#define INP_RECVTOS IN6P_TCLASS /* receive incoming IP TOS */
+#define IN6P_AUTOFLOWLABEL 0x00800000 /* attach flowlabel automatically */
+#endif /* BSD_KERNEL_PRIVATE */
+
+#define IN6P_BINDV6ONLY 0x01000000 /* do not grab IPv4 traffic */
+
+#ifdef BSD_KERNEL_PRIVATE
+#define IN6P_RFC2292 0x02000000 /* used RFC2292 API on the socket */
+#define IN6P_MTU 0x04000000 /* receive path MTU for IPv6 */
+#define INP_PKTINFO 0x08000000 /* rcv and snd PKTINFO for IPv4 */
+#define INP_FLOW_SUSPENDED 0x10000000 /* flow suspended */
+#define INP_NO_IFT_CELLULAR 0x20000000 /* do not use cellular interface */
+#define INP_FLOW_CONTROLLED 0x40000000 /* flow controlled */
+#define INP_FC_FEEDBACK 0x80000000 /* got interface flow adv feedback */
+
+#define INP_CONTROLOPTS \
+ (INP_RECVOPTS|INP_RECVRETOPTS|INP_RECVDSTADDR|INP_RECVIF|INP_RECVTTL| \
+ INP_PKTINFO|IN6P_PKTINFO|IN6P_HOPLIMIT|IN6P_HOPOPTS|IN6P_DSTOPTS| \
+ IN6P_RTHDR|IN6P_RTHDRDSTOPTS|IN6P_TCLASS|IN6P_RFC2292|IN6P_MTU)
+
+#define INP_UNMAPPABLEOPTS \
+ (IN6P_HOPOPTS|IN6P_DSTOPTS|IN6P_RTHDR|IN6P_AUTOFLOWLABEL)
-#define sotoinpcb(so) ((struct inpcb *)(so)->so_pcb)
-#define sotoin6pcb(so) sotoinpcb(so) /* for KAME src sync over BSD*'s */
-
-#define INP_SOCKAF(so) so->so_proto->pr_domain->dom_family
-
-#define INP_CHECK_SOCKAF(so, af) (INP_SOCKAF(so) == af)
-
-#ifdef KERNEL
-extern int ipport_lowfirstauto;
-extern int ipport_lowlastauto;
-extern int ipport_firstauto;
-extern int ipport_lastauto;
-extern int ipport_hifirstauto;
-extern int ipport_hilastauto;
-
-void in_pcbpurgeif0 __P((struct inpcb *, struct ifnet *));
-void in_losing __P((struct inpcb *));
-void in_rtchange __P((struct inpcb *, int));
-int in_pcballoc __P((struct socket *, struct inpcbinfo *, struct proc *));
-int in_pcbbind __P((struct inpcb *, struct sockaddr *, struct proc *));
-int in_pcbconnect __P((struct inpcb *, struct sockaddr *, struct proc *));
-void in_pcbdetach __P((struct inpcb *));
-void in_pcbdisconnect __P((struct inpcb *));
-int in_pcbinshash __P((struct inpcb *));
-int in_pcbladdr __P((struct inpcb *, struct sockaddr *,
- struct sockaddr_in **));
-struct inpcb *
- in_pcblookup_local __P((struct inpcbinfo *,
- struct in_addr, u_int, int));
-struct inpcb *
- in_pcblookup_hash __P((struct inpcbinfo *,
- struct in_addr, u_int, struct in_addr, u_int,
- int, struct ifnet *));
-void in_pcbnotifyall __P((struct inpcbhead *, struct in_addr,
- int, void (*)(struct inpcb *, int)));
-void in_pcbrehash __P((struct inpcb *));
-int in_setpeeraddr __P((struct socket *so, struct sockaddr **nam));
-int in_setsockaddr __P((struct socket *so, struct sockaddr **nam));
-
-#ifdef __APPLE__
-int
-in_pcb_grab_port __P((struct inpcbinfo *pcbinfo,
- u_short options,
- struct in_addr laddr,
- u_short *lport,
- struct in_addr faddr,
- u_short fport,
- u_int cookie,
- u_char owner_id));
-
-int
-in_pcb_letgo_port __P((struct inpcbinfo *pcbinfo,
- struct in_addr laddr,
- u_short lport,
- struct in_addr faddr,
- u_short fport, u_char owner_id));
-
-u_char
-in_pcb_get_owner __P((struct inpcbinfo *pcbinfo,
- struct in_addr laddr,
- u_short lport,
- struct in_addr faddr,
- u_short fport,
- u_int *cookie));
-
-void in_pcb_nat_init(struct inpcbinfo *pcbinfo, int afamily, int pfamily,
- int protocol);
-
-int
-in_pcb_new_share_client(struct inpcbinfo *pcbinfo, u_char *owner_id);
-
-int
-in_pcb_rem_share_client(struct inpcbinfo *pcbinfo, u_char owner_id);
-#endif /* __APPLE__ */
-
-void in_pcbremlists __P((struct inpcb *inp));
-#ifndef __APPLE__
-int prison_xinpcb __P((struct proc *p, struct inpcb *inp));
-#endif
-#endif /* _KERNEL */
-#endif /* __APPLE_API_PRIVATE */
+/*
+ * Flags for inp_flags2.
+ *
+ * Overflowed INP flags; use INP2 prefix to avoid misuse.
+ */
+#define INP2_TIMEWAIT 0x00000001 /* in TIMEWAIT */
+#define INP2_IN_FCTREE 0x00000002 /* in inp_fc_tree */
+#define INP2_WANT_APP_POLICY 0x00000004 /* necp app policy check is desired */
+#define INP2_NO_IFF_EXPENSIVE 0x00000008 /* do not use expensive interface */
+#define INP2_INHASHLIST 0x00000010 /* pcb is in inp_hash list */
+#define INP2_AWDL_UNRESTRICTED 0x00000020 /* AWDL restricted mode allowed */
+#define INP2_KEEPALIVE_OFFLOAD 0x00000040 /* Enable UDP or TCP keepalive offload */
+#define INP2_INTCOPROC_ALLOWED 0x00000080 /* Allow communication via internal co-processor interfaces */
+#define INP2_CONNECT_IN_PROGRESS 0x00000100 /* A connect call is in progress, so binds are intermediate steps */
+#define INP2_CLAT46_FLOW 0x00000200 /* The flow is going to use CLAT46 path */
+#define INP2_EXTERNAL_PORT 0x00000400 /* The port is registered externally, for NECP listeners */
+#define INP2_NO_IFF_CONSTRAINED 0x00000800 /* do not use constrained interface */
+#define INP2_DONTFRAG 0x00001000 /* mark the DF bit in the IP header to avoid fragmentation */
+/*
+ * Flags passed to in_pcblookup*() functions.
+ */
+#define INPLOOKUP_WILDCARD 1
+
+#define sotoinpcb(so) ((struct inpcb *)(so)->so_pcb)
+#define sotoin6pcb(so) sotoinpcb(so)
+
+struct sysctl_req;
+
+extern int ipport_lowfirstauto;
+extern int ipport_lowlastauto;
+extern int ipport_firstauto;
+extern int ipport_lastauto;
+extern int ipport_hifirstauto;
+extern int ipport_hilastauto;
+extern int allow_udp_port_exhaustion;
+#define UDP_RANDOM_PORT_RESERVE 4096
+
+/* freshly allocated PCB, it's in use */
+#define INPCB_STATE_INUSE 0x1
+/* this pcb is sitting in a a cache */
+#define INPCB_STATE_CACHED 0x2
+/* should treat as gone, will be garbage collected and freed */
+#define INPCB_STATE_DEAD 0x3
+
+/* marked as ready to be garbaged collected, should be treated as not found */
+#define WNT_STOPUSING 0xffff
+/* that pcb is being acquired, do not recycle this time */
+#define WNT_ACQUIRE 0x1
+/* release acquired mode, can be garbage collected when wantcnt is null */
+#define WNT_RELEASE 0x2
+
+extern void in_pcbinit(void);
+extern void in_pcbinfo_attach(struct inpcbinfo *);
+extern int in_pcbinfo_detach(struct inpcbinfo *);
+
+/* type of timer to be scheduled by inpcb_gc_sched and inpcb_timer_sched */
+enum {
+ INPCB_TIMER_LAZY = 0x1,
+ INPCB_TIMER_FAST,
+ INPCB_TIMER_NODELAY
+};
+extern void inpcb_gc_sched(struct inpcbinfo *, u_int32_t type);
+extern void inpcb_timer_sched(struct inpcbinfo *, u_int32_t type);
+
+extern void in_losing(struct inpcb *);
+extern void in_rtchange(struct inpcb *, int);
+extern int in_pcballoc(struct socket *, struct inpcbinfo *, struct proc *);
+extern int in_pcbbind(struct inpcb *, struct sockaddr *, struct proc *);
+extern int in_pcbconnect(struct inpcb *, struct sockaddr *, struct proc *,
+ unsigned int, struct ifnet **);
+extern void in_pcbdetach(struct inpcb *);
+extern void in_pcbdispose(struct inpcb *);
+extern void in_pcbdisconnect(struct inpcb *);
+extern int in_pcbinshash(struct inpcb *, int);
+extern int in_pcbladdr(struct inpcb *, struct sockaddr *, struct in_addr *,
+ unsigned int, struct ifnet **, int);
+extern struct inpcb *in_pcblookup_local(struct inpcbinfo *, struct in_addr,
+ u_int, int);
+extern struct inpcb *in_pcblookup_local_and_cleanup(struct inpcbinfo *,
+ struct in_addr, u_int, int);
+extern struct inpcb *in_pcblookup_hash(struct inpcbinfo *, struct in_addr,
+ u_int, struct in_addr, u_int, int, struct ifnet *);
+extern int in_pcblookup_hash_exists(struct inpcbinfo *, struct in_addr,
+ u_int, struct in_addr, u_int, int, uid_t *, gid_t *, struct ifnet *);
+extern void in_pcbnotifyall(struct inpcbinfo *, struct in_addr, int,
+ void (*)(struct inpcb *, int));
+extern void in_pcbrehash(struct inpcb *);
+extern int in_getpeeraddr(struct socket *, struct sockaddr **);
+extern int in_getsockaddr(struct socket *, struct sockaddr **);
+extern int in_getsockaddr_s(struct socket *, struct sockaddr_in *);
+extern int in_pcb_checkstate(struct inpcb *, int, int);
+extern void in_pcbremlists(struct inpcb *);
+extern void inpcb_to_compat(struct inpcb *, struct inpcb_compat *);
+#if XNU_TARGET_OS_OSX
+extern void inpcb_to_xinpcb64(struct inpcb *, struct xinpcb64 *);
+#endif /* XNU_TARGET_OS_OSX */
+
+extern int get_pcblist_n(short, struct sysctl_req *, struct inpcbinfo *);
+
+extern void inpcb_get_ports_used(u_int32_t, int, u_int32_t, bitstr_t *,
+ struct inpcbinfo *);
+#define INPCB_OPPORTUNISTIC_THROTTLEON 0x0001
+#define INPCB_OPPORTUNISTIC_SETCMD 0x0002
+extern uint32_t inpcb_count_opportunistic(unsigned int, struct inpcbinfo *,
+ u_int32_t);
+extern uint32_t inpcb_find_anypcb_byaddr(struct ifaddr *, struct inpcbinfo *);
+extern void inp_route_copyout(struct inpcb *, struct route *);
+extern void inp_route_copyin(struct inpcb *, struct route *);
+extern int inp_bindif(struct inpcb *, unsigned int, struct ifnet **);
+extern void inp_set_nocellular(struct inpcb *);
+extern void inp_clear_nocellular(struct inpcb *);
+extern void inp_set_noexpensive(struct inpcb *);
+extern void inp_set_noconstrained(struct inpcb *);
+extern void inp_set_awdl_unrestricted(struct inpcb *);
+extern boolean_t inp_get_awdl_unrestricted(struct inpcb *);
+extern void inp_clear_awdl_unrestricted(struct inpcb *);
+extern void inp_set_intcoproc_allowed(struct inpcb *);
+extern boolean_t inp_get_intcoproc_allowed(struct inpcb *);
+extern void inp_clear_intcoproc_allowed(struct inpcb *);
+#if NECP
+extern void inp_update_necp_policy(struct inpcb *, struct sockaddr *, struct sockaddr *, u_int);
+extern void inp_set_want_app_policy(struct inpcb *);
+extern void inp_clear_want_app_policy(struct inpcb *);
+#endif /* NECP */
+extern u_int32_t inp_calc_flowhash(struct inpcb *);
+extern void inp_reset_fc_state(struct inpcb *);
+extern int inp_set_fc_state(struct inpcb *, int advcode);
+extern void inp_fc_unthrottle_tcp(struct inpcb *);
+extern void inp_fc_throttle_tcp(struct inpcb *inp);
+extern void inp_flowadv(uint32_t);
+extern int inp_flush(struct inpcb *, int);
+extern int inp_findinpcb_procinfo(struct inpcbinfo *, uint32_t, struct so_procinfo *);
+extern void inp_get_soprocinfo(struct inpcb *, struct so_procinfo *);
+extern int inp_update_policy(struct inpcb *);
+extern boolean_t inp_restricted_recv(struct inpcb *, struct ifnet *);
+extern boolean_t inp_restricted_send(struct inpcb *, struct ifnet *);
+extern void inp_incr_sndbytes_total(struct socket *, int);
+extern void inp_decr_sndbytes_total(struct socket *, int);
+extern void inp_count_sndbytes(struct inpcb *, u_int32_t);
+extern void inp_incr_sndbytes_unsent(struct socket *, int32_t);
+extern void inp_decr_sndbytes_unsent(struct socket *, int32_t);
+extern int32_t inp_get_sndbytes_allunsent(struct socket *, u_int32_t);
+extern void inp_decr_sndbytes_allunsent(struct socket *, u_int32_t);
+extern void inp_set_activity_bitmap(struct inpcb *inp);
+extern void inp_get_activity_bitmap(struct inpcb *inp, activity_bitmap_t *b);
+extern void inp_update_last_owner(struct socket *so, struct proc *p, struct proc *ep);
+extern void inp_copy_last_owner(struct socket *so, struct socket *head);
+#endif /* BSD_KERNEL_PRIVATE */
+#ifdef KERNEL_PRIVATE
+/* exported for PPP */
+extern void inp_clear_INP_INADDR_ANY(struct socket *);
+extern int inp_limit_companion_link(struct inpcbinfo *pcbinfo, u_int32_t limit);
+extern int inp_recover_companion_link(struct inpcbinfo *pcbinfo);
+#endif /* KERNEL_PRIVATE */
#endif /* !_NETINET_IN_PCB_H_ */