Deleted Added
full compact
raw_ip6.c (122062) raw_ip6.c (122875)
1/*
2 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 *
1/*
2 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 *
29 * $FreeBSD: head/sys/netinet6/raw_ip6.c 122062 2003-11-04 16:02:05Z ume $
29 * $FreeBSD: head/sys/netinet6/raw_ip6.c 122875 2003-11-18 00:39:07Z rwatson $
30 */
31
32/*
33 * Copyright (c) 1982, 1986, 1988, 1993
34 * The Regents of the University of California. All rights reserved.
35 *
36 * Redistribution and use in source and binary forms, with or without
37 * modification, are permitted provided that the following conditions
38 * are met:
39 * 1. Redistributions of source code must retain the above copyright
40 * notice, this list of conditions and the following disclaimer.
41 * 2. Redistributions in binary form must reproduce the above copyright
42 * notice, this list of conditions and the following disclaimer in the
43 * documentation and/or other materials provided with the distribution.
44 * 3. All advertising materials mentioning features or use of this software
45 * must display the following acknowledgement:
46 * This product includes software developed by the University of
47 * California, Berkeley and its contributors.
48 * 4. Neither the name of the University nor the names of its contributors
49 * may be used to endorse or promote products derived from this software
50 * without specific prior written permission.
51 *
52 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
53 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
54 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
55 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
56 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
57 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
58 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
59 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
60 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
61 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
62 * SUCH DAMAGE.
63 *
64 * @(#)raw_ip.c 8.2 (Berkeley) 1/4/94
65 */
66
67#include "opt_ipsec.h"
68#include "opt_inet6.h"
69
70#include <sys/param.h>
71#include <sys/errno.h>
72#include <sys/lock.h>
73#include <sys/malloc.h>
74#include <sys/mbuf.h>
75#include <sys/proc.h>
76#include <sys/protosw.h>
77#include <sys/signalvar.h>
78#include <sys/socket.h>
79#include <sys/socketvar.h>
80#include <sys/sx.h>
81#include <sys/systm.h>
82
83#include <net/if.h>
84#include <net/if_types.h>
85#include <net/route.h>
86
87#include <netinet/in.h>
88#include <netinet/in_var.h>
89#include <netinet/in_systm.h>
90#include <netinet/icmp6.h>
91#include <netinet/in_pcb.h>
92#include <netinet/ip6.h>
93#include <netinet6/ip6protosw.h>
94#include <netinet6/ip6_mroute.h>
95#include <netinet6/in6_pcb.h>
96#include <netinet6/ip6_var.h>
97#include <netinet6/nd6.h>
98#include <netinet6/raw_ip6.h>
99#ifdef ENABLE_DEFAULT_SCOPE
100#include <netinet6/scope6_var.h>
101#endif
102
103#ifdef IPSEC
104#include <netinet6/ipsec.h>
105#include <netinet6/ipsec6.h>
106#endif /*IPSEC*/
107
108#ifdef FAST_IPSEC
109#include <netipsec/ipsec.h>
110#include <netipsec/ipsec6.h>
111#endif /* FAST_IPSEC */
112
113#include <machine/stdarg.h>
114
115#define satosin6(sa) ((struct sockaddr_in6 *)(sa))
116#define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa))
117
118/*
119 * Raw interface to IP6 protocol.
120 */
121
122extern struct inpcbhead ripcb;
123extern struct inpcbinfo ripcbinfo;
124extern u_long rip_sendspace;
125extern u_long rip_recvspace;
126
127struct rip6stat rip6stat;
128
129/*
130 * Setup generic address and protocol structures
131 * for raw_input routine, then pass them along with
132 * mbuf chain.
133 */
134int
135rip6_input(mp, offp, proto)
136 struct mbuf **mp;
137 int *offp, proto;
138{
139 struct mbuf *m = *mp;
140 register struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
141 register struct inpcb *in6p;
142 struct inpcb *last = 0;
143 struct mbuf *opts = NULL;
144 struct sockaddr_in6 fromsa;
145
146 rip6stat.rip6s_ipackets++;
147
148 if (faithprefix_p != NULL && (*faithprefix_p)(&ip6->ip6_dst)) {
149 /* XXX send icmp6 host/port unreach? */
150 m_freem(m);
151 return IPPROTO_DONE;
152 }
153
154 init_sin6(&fromsa, m); /* general init */
155
156 LIST_FOREACH(in6p, &ripcb, inp_list) {
157 if ((in6p->in6p_vflag & INP_IPV6) == 0)
158 continue;
159 if (in6p->in6p_ip6_nxt &&
160 in6p->in6p_ip6_nxt != proto)
161 continue;
162 if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) &&
163 !IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &ip6->ip6_dst))
164 continue;
165 if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr) &&
166 !IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, &ip6->ip6_src))
167 continue;
168 if (in6p->in6p_cksum != -1) {
169 rip6stat.rip6s_isum++;
170 if (in6_cksum(m, ip6->ip6_nxt, *offp,
171 m->m_pkthdr.len - *offp)) {
172 rip6stat.rip6s_badsum++;
173 continue;
174 }
175 }
176 if (last) {
177 struct mbuf *n = m_copy(m, 0, (int)M_COPYALL);
178
179#ifdef IPSEC
180 /*
181 * Check AH/ESP integrity.
182 */
183 if (n && ipsec6_in_reject_so(n, last->inp_socket)) {
184 m_freem(n);
185 ipsec6stat.in_polvio++;
186 /* do not inject data into pcb */
187 } else
188#endif /*IPSEC*/
189#ifdef FAST_IPSEC
190 /*
191 * Check AH/ESP integrity.
192 */
193 if (n && ipsec6_in_reject(n, last)) {
194 m_freem(n);
195 /* do not inject data into pcb */
196 } else
197#endif /*FAST_IPSEC*/
198 if (n) {
199 if (last->in6p_flags & IN6P_CONTROLOPTS ||
200 last->in6p_socket->so_options & SO_TIMESTAMP)
201 ip6_savecontrol(last, n, &opts);
202 /* strip intermediate headers */
203 m_adj(n, *offp);
204 if (sbappendaddr(&last->in6p_socket->so_rcv,
205 (struct sockaddr *)&fromsa,
206 n, opts) == 0) {
207 m_freem(n);
208 if (opts)
209 m_freem(opts);
210 rip6stat.rip6s_fullsock++;
211 } else
212 sorwakeup(last->in6p_socket);
213 opts = NULL;
214 }
215 }
216 last = in6p;
217 }
218#ifdef IPSEC
219 /*
220 * Check AH/ESP integrity.
221 */
222 if (last && ipsec6_in_reject_so(m, last->inp_socket)) {
223 m_freem(m);
224 ipsec6stat.in_polvio++;
225 ip6stat.ip6s_delivered--;
226 /* do not inject data into pcb */
227 } else
228#endif /*IPSEC*/
229#ifdef FAST_IPSEC
230 /*
231 * Check AH/ESP integrity.
232 */
233 if (last && ipsec6_in_reject(m, last)) {
234 m_freem(m);
235 ip6stat.ip6s_delivered--;
236 /* do not inject data into pcb */
237 } else
238#endif /*FAST_IPSEC*/
239 if (last) {
240 if (last->in6p_flags & IN6P_CONTROLOPTS ||
241 last->in6p_socket->so_options & SO_TIMESTAMP)
242 ip6_savecontrol(last, m, &opts);
243 /* strip intermediate headers */
244 m_adj(m, *offp);
245 if (sbappendaddr(&last->in6p_socket->so_rcv,
246 (struct sockaddr *)&fromsa, m, opts) == 0) {
247 m_freem(m);
248 if (opts)
249 m_freem(opts);
250 rip6stat.rip6s_fullsock++;
251 } else
252 sorwakeup(last->in6p_socket);
253 } else {
254 rip6stat.rip6s_nosock++;
255 if (m->m_flags & M_MCAST)
256 rip6stat.rip6s_nosockmcast++;
257 if (proto == IPPROTO_NONE)
258 m_freem(m);
259 else {
260 char *prvnxtp = ip6_get_prevhdr(m, *offp); /* XXX */
261 icmp6_error(m, ICMP6_PARAM_PROB,
262 ICMP6_PARAMPROB_NEXTHEADER,
263 prvnxtp - mtod(m, char *));
264 }
265 ip6stat.ip6s_delivered--;
266 }
267 return IPPROTO_DONE;
268}
269
270void
271rip6_ctlinput(cmd, sa, d)
272 int cmd;
273 struct sockaddr *sa;
274 void *d;
275{
276 struct ip6_hdr *ip6;
277 struct mbuf *m;
278 int off = 0;
279 struct ip6ctlparam *ip6cp = NULL;
280 const struct sockaddr_in6 *sa6_src = NULL;
281 struct inpcb *(*notify) __P((struct inpcb *, int)) = in6_rtchange;
282
283 if (sa->sa_family != AF_INET6 ||
284 sa->sa_len != sizeof(struct sockaddr_in6))
285 return;
286
287 if ((unsigned)cmd >= PRC_NCMDS)
288 return;
289 if (PRC_IS_REDIRECT(cmd))
290 notify = in6_rtchange, d = NULL;
291 else if (cmd == PRC_HOSTDEAD)
292 d = NULL;
293 else if (inet6ctlerrmap[cmd] == 0)
294 return;
295
296 /* if the parameter is from icmp6, decode it. */
297 if (d != NULL) {
298 ip6cp = (struct ip6ctlparam *)d;
299 m = ip6cp->ip6c_m;
300 ip6 = ip6cp->ip6c_ip6;
301 off = ip6cp->ip6c_off;
302 sa6_src = ip6cp->ip6c_src;
303 } else {
304 m = NULL;
305 ip6 = NULL;
306 sa6_src = &sa6_any;
307 }
308
309 (void) in6_pcbnotify(&ripcb, sa, 0, (const struct sockaddr *)sa6_src,
310 0, cmd, notify);
311}
312
313/*
314 * Generate IPv6 header and pass packet to ip6_output.
315 * Tack on options user may have setup with control call.
316 */
317int
318#if __STDC__
319rip6_output(struct mbuf *m, ...)
320#else
321rip6_output(m, va_alist)
322 struct mbuf *m;
323 va_dcl
324#endif
325{
326 struct mbuf *control;
327 struct socket *so;
328 struct sockaddr_in6 *dstsock;
329 struct in6_addr *dst;
330 struct ip6_hdr *ip6;
331 struct inpcb *in6p;
332 u_int plen = m->m_pkthdr.len;
333 int error = 0;
334 struct ip6_pktopts opt, *stickyopt = NULL;
335 struct ifnet *oifp = NULL;
336 int type = 0, code = 0; /* for ICMPv6 output statistics only */
337 int priv = 0;
338 struct in6_addr *in6a;
339 va_list ap;
340
341 va_start(ap, m);
342 so = va_arg(ap, struct socket *);
343 dstsock = va_arg(ap, struct sockaddr_in6 *);
344 control = va_arg(ap, struct mbuf *);
345 va_end(ap);
346
347 in6p = sotoin6pcb(so);
348 stickyopt = in6p->in6p_outputopts;
349
350 priv = 0;
351 if (so->so_cred->cr_uid == 0)
352 priv = 1;
353 dst = &dstsock->sin6_addr;
354 if (control) {
355 if ((error = ip6_setpktoptions(control, &opt,
356 stickyopt, priv, 0,
357 so->so_proto->pr_protocol))
358 != 0) {
359 goto bad;
360 }
361 in6p->in6p_outputopts = &opt;
362 }
363
364 /*
365 * For an ICMPv6 packet, we should know its type and code
366 * to update statistics.
367 */
368 if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) {
369 struct icmp6_hdr *icmp6;
370 if (m->m_len < sizeof(struct icmp6_hdr) &&
371 (m = m_pullup(m, sizeof(struct icmp6_hdr))) == NULL) {
372 error = ENOBUFS;
373 goto bad;
374 }
375 icmp6 = mtod(m, struct icmp6_hdr *);
376 type = icmp6->icmp6_type;
377 code = icmp6->icmp6_code;
378 }
379
380 M_PREPEND(m, sizeof(*ip6), M_TRYWAIT);
381 ip6 = mtod(m, struct ip6_hdr *);
382
383 /*
384 * Next header might not be ICMP6 but use its pseudo header anyway.
385 */
386 ip6->ip6_dst = *dst;
387
388 /*
389 * If the scope of the destination is link-local, embed the interface
390 * index in the address.
391 *
392 * XXX advanced-api value overrides sin6_scope_id
393 */
394 if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_dst)) {
395 struct in6_pktinfo *pi;
396
397 /*
398 * XXX Boundary check is assumed to be already done in
399 * ip6_setpktoptions().
400 */
401 if (in6p->in6p_outputopts &&
402 (pi = in6p->in6p_outputopts->ip6po_pktinfo) &&
403 pi->ipi6_ifindex) {
404 ip6->ip6_dst.s6_addr16[1] = htons(pi->ipi6_ifindex);
405 oifp = ifnet_byindex(pi->ipi6_ifindex);
406 } else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) &&
407 in6p->in6p_moptions &&
408 in6p->in6p_moptions->im6o_multicast_ifp) {
409 oifp = in6p->in6p_moptions->im6o_multicast_ifp;
410 ip6->ip6_dst.s6_addr16[1] = htons(oifp->if_index);
411 } else if (dstsock->sin6_scope_id) {
412 /* boundary check */
413 if (dstsock->sin6_scope_id < 0 ||
414 if_index < dstsock->sin6_scope_id) {
415 error = ENXIO; /* XXX EINVAL? */
416 goto bad;
417 }
418 ip6->ip6_dst.s6_addr16[1] =
419 htons(dstsock->sin6_scope_id & 0xffff); /* XXX */
420 }
421 }
422
423 /*
424 * Source address selection.
425 */
426 if ((in6a = in6_selectsrc(dstsock, in6p->in6p_outputopts,
427 in6p->in6p_moptions, &in6p->in6p_route, &in6p->in6p_laddr,
428 &error)) == 0) {
429 if (error == 0)
430 error = EADDRNOTAVAIL;
431 goto bad;
432 }
433 ip6->ip6_src = *in6a;
434 if (in6p->in6p_route.ro_rt)
435 oifp = ifnet_byindex(in6p->in6p_route.ro_rt->rt_ifp->if_index);
436 ip6->ip6_flow = (ip6->ip6_flow & ~IPV6_FLOWINFO_MASK) |
437 (in6p->in6p_flowinfo & IPV6_FLOWINFO_MASK);
438 ip6->ip6_vfc = (ip6->ip6_vfc & ~IPV6_VERSION_MASK) |
439 (IPV6_VERSION & IPV6_VERSION_MASK);
440 /* ip6_plen will be filled in ip6_output, so not fill it here. */
441 ip6->ip6_nxt = in6p->in6p_ip6_nxt;
442 ip6->ip6_hlim = in6_selecthlim(in6p, oifp);
443
444 if (so->so_proto->pr_protocol == IPPROTO_ICMPV6 ||
445 in6p->in6p_cksum != -1) {
446 struct mbuf *n;
447 int off;
448 u_int16_t *p;
449
450 /* compute checksum */
451 if (so->so_proto->pr_protocol == IPPROTO_ICMPV6)
452 off = offsetof(struct icmp6_hdr, icmp6_cksum);
453 else
454 off = in6p->in6p_cksum;
455 if (plen < off + 1) {
456 error = EINVAL;
457 goto bad;
458 }
459 off += sizeof(struct ip6_hdr);
460
461 n = m;
462 while (n && n->m_len <= off) {
463 off -= n->m_len;
464 n = n->m_next;
465 }
466 if (!n)
467 goto bad;
468 p = (u_int16_t *)(mtod(n, caddr_t) + off);
469 *p = 0;
470 *p = in6_cksum(m, ip6->ip6_nxt, sizeof(*ip6), plen);
471 }
472
473#ifdef IPSEC
474 if (ipsec_setsocket(m, so) != 0) {
475 error = ENOBUFS;
476 goto bad;
477 }
478#endif /*IPSEC*/
479
480 error = ip6_output(m, in6p->in6p_outputopts, &in6p->in6p_route, 0,
481 in6p->in6p_moptions, &oifp, in6p);
482 if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) {
483 if (oifp)
484 icmp6_ifoutstat_inc(oifp, type, code);
485 icmp6stat.icp6s_outhist[type]++;
486 } else
487 rip6stat.rip6s_opackets++;
488
489 goto freectl;
490
491 bad:
492 if (m)
493 m_freem(m);
494
495 freectl:
496 if (control) {
497 ip6_clearpktopts(in6p->in6p_outputopts, -1);
498 in6p->in6p_outputopts = stickyopt;
499 m_freem(control);
500 }
501 return (error);
502}
503
504/*
505 * Raw IPv6 socket option processing.
506 */
507int
508rip6_ctloutput(so, sopt)
509 struct socket *so;
510 struct sockopt *sopt;
511{
512 int error;
513
514 if (sopt->sopt_level == IPPROTO_ICMPV6)
515 /*
516 * XXX: is it better to call icmp6_ctloutput() directly
517 * from protosw?
518 */
519 return (icmp6_ctloutput(so, sopt));
520 else if (sopt->sopt_level != IPPROTO_IPV6)
521 return (EINVAL);
522
523 error = 0;
524
525 switch (sopt->sopt_dir) {
526 case SOPT_GET:
527 switch (sopt->sopt_name) {
528 case MRT6_INIT:
529 case MRT6_DONE:
530 case MRT6_ADD_MIF:
531 case MRT6_DEL_MIF:
532 case MRT6_ADD_MFC:
533 case MRT6_DEL_MFC:
534 case MRT6_PIM:
535 error = ip6_mrouter_get(so, sopt);
536 break;
537 case IPV6_CHECKSUM:
538 error = ip6_raw_ctloutput(so, sopt);
539 break;
540 default:
541 error = ip6_ctloutput(so, sopt);
542 break;
543 }
544 break;
545
546 case SOPT_SET:
547 switch (sopt->sopt_name) {
548 case MRT6_INIT:
549 case MRT6_DONE:
550 case MRT6_ADD_MIF:
551 case MRT6_DEL_MIF:
552 case MRT6_ADD_MFC:
553 case MRT6_DEL_MFC:
554 case MRT6_PIM:
555 error = ip6_mrouter_set(so, sopt);
556 break;
557 case IPV6_CHECKSUM:
558 error = ip6_raw_ctloutput(so, sopt);
559 break;
560 default:
561 error = ip6_ctloutput(so, sopt);
562 break;
563 }
564 break;
565 }
566
567 return (error);
568}
569
570static int
571rip6_attach(struct socket *so, int proto, struct thread *td)
572{
573 struct inpcb *inp;
574 int error, s;
575
576 inp = sotoinpcb(so);
577 if (inp)
578 panic("rip6_attach");
579 if (td && (error = suser(td)) != 0)
580 return error;
581
582 error = soreserve(so, rip_sendspace, rip_recvspace);
583 if (error)
584 return error;
585 s = splnet();
586 error = in_pcballoc(so, &ripcbinfo, td);
587 splx(s);
588 if (error)
589 return error;
590 inp = (struct inpcb *)so->so_pcb;
591 inp->inp_vflag |= INP_IPV6;
592 inp->in6p_ip6_nxt = (long)proto;
593 inp->in6p_hops = -1; /* use kernel default */
594 inp->in6p_cksum = -1;
595 MALLOC(inp->in6p_icmp6filt, struct icmp6_filter *,
596 sizeof(struct icmp6_filter), M_PCB, M_NOWAIT);
597 ICMP6_FILTER_SETPASSALL(inp->in6p_icmp6filt);
598 return 0;
599}
600
601static int
602rip6_detach(struct socket *so)
603{
604 struct inpcb *inp;
605
606 inp = sotoinpcb(so);
607 if (inp == 0)
608 panic("rip6_detach");
609 /* xxx: RSVP */
610 if (so == ip6_mrouter)
611 ip6_mrouter_done();
612 if (inp->in6p_icmp6filt) {
613 FREE(inp->in6p_icmp6filt, M_PCB);
614 inp->in6p_icmp6filt = NULL;
615 }
616 in6_pcbdetach(inp);
617 return 0;
618}
619
620static int
621rip6_abort(struct socket *so)
622{
623 soisdisconnected(so);
624 return rip6_detach(so);
625}
626
627static int
628rip6_disconnect(struct socket *so)
629{
630 struct inpcb *inp = sotoinpcb(so);
631
632 if ((so->so_state & SS_ISCONNECTED) == 0)
633 return ENOTCONN;
634 inp->in6p_faddr = in6addr_any;
635 return rip6_abort(so);
636}
637
638static int
639rip6_bind(struct socket *so, struct sockaddr *nam, struct thread *td)
640{
641 struct inpcb *inp = sotoinpcb(so);
642 struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam;
643 struct ifaddr *ia = NULL;
644
645 if (nam->sa_len != sizeof(*addr))
646 return EINVAL;
647 if (TAILQ_EMPTY(&ifnet) || addr->sin6_family != AF_INET6)
648 return EADDRNOTAVAIL;
649#ifdef ENABLE_DEFAULT_SCOPE
650 if (addr->sin6_scope_id == 0) { /* not change if specified */
651 addr->sin6_scope_id = scope6_addr2default(&addr->sin6_addr);
652 }
653#endif
654 if (!IN6_IS_ADDR_UNSPECIFIED(&addr->sin6_addr) &&
655 (ia = ifa_ifwithaddr((struct sockaddr *)addr)) == 0)
656 return EADDRNOTAVAIL;
657 if (ia &&
658 ((struct in6_ifaddr *)ia)->ia6_flags &
659 (IN6_IFF_ANYCAST|IN6_IFF_NOTREADY|
660 IN6_IFF_DETACHED|IN6_IFF_DEPRECATED)) {
661 return (EADDRNOTAVAIL);
662 }
663 inp->in6p_laddr = addr->sin6_addr;
664 return 0;
665}
666
667static int
668rip6_connect(struct socket *so, struct sockaddr *nam, struct thread *td)
669{
670 struct inpcb *inp = sotoinpcb(so);
671 struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam;
672 struct in6_addr *in6a = NULL;
673 int error = 0;
674#ifdef ENABLE_DEFAULT_SCOPE
675 struct sockaddr_in6 tmp;
676#endif
677
678 if (nam->sa_len != sizeof(*addr))
679 return EINVAL;
680 if (TAILQ_EMPTY(&ifnet))
681 return EADDRNOTAVAIL;
682 if (addr->sin6_family != AF_INET6)
683 return EAFNOSUPPORT;
684#ifdef ENABLE_DEFAULT_SCOPE
685 if (addr->sin6_scope_id == 0) { /* not change if specified */
686 /* avoid overwrites */
687 tmp = *addr;
688 addr = &tmp;
689 addr->sin6_scope_id = scope6_addr2default(&addr->sin6_addr);
690 }
691#endif
692 /* Source address selection. XXX: need pcblookup? */
693 in6a = in6_selectsrc(addr, inp->in6p_outputopts,
694 inp->in6p_moptions, &inp->in6p_route,
695 &inp->in6p_laddr, &error);
696 if (in6a == NULL)
697 return (error ? error : EADDRNOTAVAIL);
698 inp->in6p_laddr = *in6a;
699 inp->in6p_faddr = addr->sin6_addr;
700 soisconnected(so);
701 return 0;
702}
703
704static int
705rip6_shutdown(struct socket *so)
706{
707 socantsendmore(so);
708 return 0;
709}
710
711static int
712rip6_send(struct socket *so, int flags, struct mbuf *m, struct sockaddr *nam,
713 struct mbuf *control, struct thread *td)
714{
715 struct inpcb *inp = sotoinpcb(so);
716 struct sockaddr_in6 tmp;
717 struct sockaddr_in6 *dst;
718
719 /* always copy sockaddr to avoid overwrites */
720 if (so->so_state & SS_ISCONNECTED) {
721 if (nam) {
722 m_freem(m);
723 return EISCONN;
724 }
725 /* XXX */
726 bzero(&tmp, sizeof(tmp));
727 tmp.sin6_family = AF_INET6;
728 tmp.sin6_len = sizeof(struct sockaddr_in6);
729 bcopy(&inp->in6p_faddr, &tmp.sin6_addr,
730 sizeof(struct in6_addr));
731 dst = &tmp;
732 } else {
733 if (nam == NULL) {
734 m_freem(m);
735 return ENOTCONN;
736 }
737 tmp = *(struct sockaddr_in6 *)nam;
738 dst = &tmp;
739 }
740#ifdef ENABLE_DEFAULT_SCOPE
741 if (dst->sin6_scope_id == 0) { /* not change if specified */
742 dst->sin6_scope_id = scope6_addr2default(&dst->sin6_addr);
743 }
744#endif
745 return rip6_output(m, so, dst, control);
746}
747
748struct pr_usrreqs rip6_usrreqs = {
749 rip6_abort, pru_accept_notsupp, rip6_attach, rip6_bind, rip6_connect,
750 pru_connect2_notsupp, in6_control, rip6_detach, rip6_disconnect,
751 pru_listen_notsupp, in6_setpeeraddr, pru_rcvd_notsupp,
752 pru_rcvoob_notsupp, rip6_send, pru_sense_null, rip6_shutdown,
30 */
31
32/*
33 * Copyright (c) 1982, 1986, 1988, 1993
34 * The Regents of the University of California. All rights reserved.
35 *
36 * Redistribution and use in source and binary forms, with or without
37 * modification, are permitted provided that the following conditions
38 * are met:
39 * 1. Redistributions of source code must retain the above copyright
40 * notice, this list of conditions and the following disclaimer.
41 * 2. Redistributions in binary form must reproduce the above copyright
42 * notice, this list of conditions and the following disclaimer in the
43 * documentation and/or other materials provided with the distribution.
44 * 3. All advertising materials mentioning features or use of this software
45 * must display the following acknowledgement:
46 * This product includes software developed by the University of
47 * California, Berkeley and its contributors.
48 * 4. Neither the name of the University nor the names of its contributors
49 * may be used to endorse or promote products derived from this software
50 * without specific prior written permission.
51 *
52 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
53 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
54 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
55 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
56 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
57 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
58 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
59 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
60 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
61 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
62 * SUCH DAMAGE.
63 *
64 * @(#)raw_ip.c 8.2 (Berkeley) 1/4/94
65 */
66
67#include "opt_ipsec.h"
68#include "opt_inet6.h"
69
70#include <sys/param.h>
71#include <sys/errno.h>
72#include <sys/lock.h>
73#include <sys/malloc.h>
74#include <sys/mbuf.h>
75#include <sys/proc.h>
76#include <sys/protosw.h>
77#include <sys/signalvar.h>
78#include <sys/socket.h>
79#include <sys/socketvar.h>
80#include <sys/sx.h>
81#include <sys/systm.h>
82
83#include <net/if.h>
84#include <net/if_types.h>
85#include <net/route.h>
86
87#include <netinet/in.h>
88#include <netinet/in_var.h>
89#include <netinet/in_systm.h>
90#include <netinet/icmp6.h>
91#include <netinet/in_pcb.h>
92#include <netinet/ip6.h>
93#include <netinet6/ip6protosw.h>
94#include <netinet6/ip6_mroute.h>
95#include <netinet6/in6_pcb.h>
96#include <netinet6/ip6_var.h>
97#include <netinet6/nd6.h>
98#include <netinet6/raw_ip6.h>
99#ifdef ENABLE_DEFAULT_SCOPE
100#include <netinet6/scope6_var.h>
101#endif
102
103#ifdef IPSEC
104#include <netinet6/ipsec.h>
105#include <netinet6/ipsec6.h>
106#endif /*IPSEC*/
107
108#ifdef FAST_IPSEC
109#include <netipsec/ipsec.h>
110#include <netipsec/ipsec6.h>
111#endif /* FAST_IPSEC */
112
113#include <machine/stdarg.h>
114
115#define satosin6(sa) ((struct sockaddr_in6 *)(sa))
116#define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa))
117
118/*
119 * Raw interface to IP6 protocol.
120 */
121
122extern struct inpcbhead ripcb;
123extern struct inpcbinfo ripcbinfo;
124extern u_long rip_sendspace;
125extern u_long rip_recvspace;
126
127struct rip6stat rip6stat;
128
129/*
130 * Setup generic address and protocol structures
131 * for raw_input routine, then pass them along with
132 * mbuf chain.
133 */
134int
135rip6_input(mp, offp, proto)
136 struct mbuf **mp;
137 int *offp, proto;
138{
139 struct mbuf *m = *mp;
140 register struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
141 register struct inpcb *in6p;
142 struct inpcb *last = 0;
143 struct mbuf *opts = NULL;
144 struct sockaddr_in6 fromsa;
145
146 rip6stat.rip6s_ipackets++;
147
148 if (faithprefix_p != NULL && (*faithprefix_p)(&ip6->ip6_dst)) {
149 /* XXX send icmp6 host/port unreach? */
150 m_freem(m);
151 return IPPROTO_DONE;
152 }
153
154 init_sin6(&fromsa, m); /* general init */
155
156 LIST_FOREACH(in6p, &ripcb, inp_list) {
157 if ((in6p->in6p_vflag & INP_IPV6) == 0)
158 continue;
159 if (in6p->in6p_ip6_nxt &&
160 in6p->in6p_ip6_nxt != proto)
161 continue;
162 if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) &&
163 !IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &ip6->ip6_dst))
164 continue;
165 if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr) &&
166 !IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, &ip6->ip6_src))
167 continue;
168 if (in6p->in6p_cksum != -1) {
169 rip6stat.rip6s_isum++;
170 if (in6_cksum(m, ip6->ip6_nxt, *offp,
171 m->m_pkthdr.len - *offp)) {
172 rip6stat.rip6s_badsum++;
173 continue;
174 }
175 }
176 if (last) {
177 struct mbuf *n = m_copy(m, 0, (int)M_COPYALL);
178
179#ifdef IPSEC
180 /*
181 * Check AH/ESP integrity.
182 */
183 if (n && ipsec6_in_reject_so(n, last->inp_socket)) {
184 m_freem(n);
185 ipsec6stat.in_polvio++;
186 /* do not inject data into pcb */
187 } else
188#endif /*IPSEC*/
189#ifdef FAST_IPSEC
190 /*
191 * Check AH/ESP integrity.
192 */
193 if (n && ipsec6_in_reject(n, last)) {
194 m_freem(n);
195 /* do not inject data into pcb */
196 } else
197#endif /*FAST_IPSEC*/
198 if (n) {
199 if (last->in6p_flags & IN6P_CONTROLOPTS ||
200 last->in6p_socket->so_options & SO_TIMESTAMP)
201 ip6_savecontrol(last, n, &opts);
202 /* strip intermediate headers */
203 m_adj(n, *offp);
204 if (sbappendaddr(&last->in6p_socket->so_rcv,
205 (struct sockaddr *)&fromsa,
206 n, opts) == 0) {
207 m_freem(n);
208 if (opts)
209 m_freem(opts);
210 rip6stat.rip6s_fullsock++;
211 } else
212 sorwakeup(last->in6p_socket);
213 opts = NULL;
214 }
215 }
216 last = in6p;
217 }
218#ifdef IPSEC
219 /*
220 * Check AH/ESP integrity.
221 */
222 if (last && ipsec6_in_reject_so(m, last->inp_socket)) {
223 m_freem(m);
224 ipsec6stat.in_polvio++;
225 ip6stat.ip6s_delivered--;
226 /* do not inject data into pcb */
227 } else
228#endif /*IPSEC*/
229#ifdef FAST_IPSEC
230 /*
231 * Check AH/ESP integrity.
232 */
233 if (last && ipsec6_in_reject(m, last)) {
234 m_freem(m);
235 ip6stat.ip6s_delivered--;
236 /* do not inject data into pcb */
237 } else
238#endif /*FAST_IPSEC*/
239 if (last) {
240 if (last->in6p_flags & IN6P_CONTROLOPTS ||
241 last->in6p_socket->so_options & SO_TIMESTAMP)
242 ip6_savecontrol(last, m, &opts);
243 /* strip intermediate headers */
244 m_adj(m, *offp);
245 if (sbappendaddr(&last->in6p_socket->so_rcv,
246 (struct sockaddr *)&fromsa, m, opts) == 0) {
247 m_freem(m);
248 if (opts)
249 m_freem(opts);
250 rip6stat.rip6s_fullsock++;
251 } else
252 sorwakeup(last->in6p_socket);
253 } else {
254 rip6stat.rip6s_nosock++;
255 if (m->m_flags & M_MCAST)
256 rip6stat.rip6s_nosockmcast++;
257 if (proto == IPPROTO_NONE)
258 m_freem(m);
259 else {
260 char *prvnxtp = ip6_get_prevhdr(m, *offp); /* XXX */
261 icmp6_error(m, ICMP6_PARAM_PROB,
262 ICMP6_PARAMPROB_NEXTHEADER,
263 prvnxtp - mtod(m, char *));
264 }
265 ip6stat.ip6s_delivered--;
266 }
267 return IPPROTO_DONE;
268}
269
270void
271rip6_ctlinput(cmd, sa, d)
272 int cmd;
273 struct sockaddr *sa;
274 void *d;
275{
276 struct ip6_hdr *ip6;
277 struct mbuf *m;
278 int off = 0;
279 struct ip6ctlparam *ip6cp = NULL;
280 const struct sockaddr_in6 *sa6_src = NULL;
281 struct inpcb *(*notify) __P((struct inpcb *, int)) = in6_rtchange;
282
283 if (sa->sa_family != AF_INET6 ||
284 sa->sa_len != sizeof(struct sockaddr_in6))
285 return;
286
287 if ((unsigned)cmd >= PRC_NCMDS)
288 return;
289 if (PRC_IS_REDIRECT(cmd))
290 notify = in6_rtchange, d = NULL;
291 else if (cmd == PRC_HOSTDEAD)
292 d = NULL;
293 else if (inet6ctlerrmap[cmd] == 0)
294 return;
295
296 /* if the parameter is from icmp6, decode it. */
297 if (d != NULL) {
298 ip6cp = (struct ip6ctlparam *)d;
299 m = ip6cp->ip6c_m;
300 ip6 = ip6cp->ip6c_ip6;
301 off = ip6cp->ip6c_off;
302 sa6_src = ip6cp->ip6c_src;
303 } else {
304 m = NULL;
305 ip6 = NULL;
306 sa6_src = &sa6_any;
307 }
308
309 (void) in6_pcbnotify(&ripcb, sa, 0, (const struct sockaddr *)sa6_src,
310 0, cmd, notify);
311}
312
313/*
314 * Generate IPv6 header and pass packet to ip6_output.
315 * Tack on options user may have setup with control call.
316 */
317int
318#if __STDC__
319rip6_output(struct mbuf *m, ...)
320#else
321rip6_output(m, va_alist)
322 struct mbuf *m;
323 va_dcl
324#endif
325{
326 struct mbuf *control;
327 struct socket *so;
328 struct sockaddr_in6 *dstsock;
329 struct in6_addr *dst;
330 struct ip6_hdr *ip6;
331 struct inpcb *in6p;
332 u_int plen = m->m_pkthdr.len;
333 int error = 0;
334 struct ip6_pktopts opt, *stickyopt = NULL;
335 struct ifnet *oifp = NULL;
336 int type = 0, code = 0; /* for ICMPv6 output statistics only */
337 int priv = 0;
338 struct in6_addr *in6a;
339 va_list ap;
340
341 va_start(ap, m);
342 so = va_arg(ap, struct socket *);
343 dstsock = va_arg(ap, struct sockaddr_in6 *);
344 control = va_arg(ap, struct mbuf *);
345 va_end(ap);
346
347 in6p = sotoin6pcb(so);
348 stickyopt = in6p->in6p_outputopts;
349
350 priv = 0;
351 if (so->so_cred->cr_uid == 0)
352 priv = 1;
353 dst = &dstsock->sin6_addr;
354 if (control) {
355 if ((error = ip6_setpktoptions(control, &opt,
356 stickyopt, priv, 0,
357 so->so_proto->pr_protocol))
358 != 0) {
359 goto bad;
360 }
361 in6p->in6p_outputopts = &opt;
362 }
363
364 /*
365 * For an ICMPv6 packet, we should know its type and code
366 * to update statistics.
367 */
368 if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) {
369 struct icmp6_hdr *icmp6;
370 if (m->m_len < sizeof(struct icmp6_hdr) &&
371 (m = m_pullup(m, sizeof(struct icmp6_hdr))) == NULL) {
372 error = ENOBUFS;
373 goto bad;
374 }
375 icmp6 = mtod(m, struct icmp6_hdr *);
376 type = icmp6->icmp6_type;
377 code = icmp6->icmp6_code;
378 }
379
380 M_PREPEND(m, sizeof(*ip6), M_TRYWAIT);
381 ip6 = mtod(m, struct ip6_hdr *);
382
383 /*
384 * Next header might not be ICMP6 but use its pseudo header anyway.
385 */
386 ip6->ip6_dst = *dst;
387
388 /*
389 * If the scope of the destination is link-local, embed the interface
390 * index in the address.
391 *
392 * XXX advanced-api value overrides sin6_scope_id
393 */
394 if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_dst)) {
395 struct in6_pktinfo *pi;
396
397 /*
398 * XXX Boundary check is assumed to be already done in
399 * ip6_setpktoptions().
400 */
401 if (in6p->in6p_outputopts &&
402 (pi = in6p->in6p_outputopts->ip6po_pktinfo) &&
403 pi->ipi6_ifindex) {
404 ip6->ip6_dst.s6_addr16[1] = htons(pi->ipi6_ifindex);
405 oifp = ifnet_byindex(pi->ipi6_ifindex);
406 } else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) &&
407 in6p->in6p_moptions &&
408 in6p->in6p_moptions->im6o_multicast_ifp) {
409 oifp = in6p->in6p_moptions->im6o_multicast_ifp;
410 ip6->ip6_dst.s6_addr16[1] = htons(oifp->if_index);
411 } else if (dstsock->sin6_scope_id) {
412 /* boundary check */
413 if (dstsock->sin6_scope_id < 0 ||
414 if_index < dstsock->sin6_scope_id) {
415 error = ENXIO; /* XXX EINVAL? */
416 goto bad;
417 }
418 ip6->ip6_dst.s6_addr16[1] =
419 htons(dstsock->sin6_scope_id & 0xffff); /* XXX */
420 }
421 }
422
423 /*
424 * Source address selection.
425 */
426 if ((in6a = in6_selectsrc(dstsock, in6p->in6p_outputopts,
427 in6p->in6p_moptions, &in6p->in6p_route, &in6p->in6p_laddr,
428 &error)) == 0) {
429 if (error == 0)
430 error = EADDRNOTAVAIL;
431 goto bad;
432 }
433 ip6->ip6_src = *in6a;
434 if (in6p->in6p_route.ro_rt)
435 oifp = ifnet_byindex(in6p->in6p_route.ro_rt->rt_ifp->if_index);
436 ip6->ip6_flow = (ip6->ip6_flow & ~IPV6_FLOWINFO_MASK) |
437 (in6p->in6p_flowinfo & IPV6_FLOWINFO_MASK);
438 ip6->ip6_vfc = (ip6->ip6_vfc & ~IPV6_VERSION_MASK) |
439 (IPV6_VERSION & IPV6_VERSION_MASK);
440 /* ip6_plen will be filled in ip6_output, so not fill it here. */
441 ip6->ip6_nxt = in6p->in6p_ip6_nxt;
442 ip6->ip6_hlim = in6_selecthlim(in6p, oifp);
443
444 if (so->so_proto->pr_protocol == IPPROTO_ICMPV6 ||
445 in6p->in6p_cksum != -1) {
446 struct mbuf *n;
447 int off;
448 u_int16_t *p;
449
450 /* compute checksum */
451 if (so->so_proto->pr_protocol == IPPROTO_ICMPV6)
452 off = offsetof(struct icmp6_hdr, icmp6_cksum);
453 else
454 off = in6p->in6p_cksum;
455 if (plen < off + 1) {
456 error = EINVAL;
457 goto bad;
458 }
459 off += sizeof(struct ip6_hdr);
460
461 n = m;
462 while (n && n->m_len <= off) {
463 off -= n->m_len;
464 n = n->m_next;
465 }
466 if (!n)
467 goto bad;
468 p = (u_int16_t *)(mtod(n, caddr_t) + off);
469 *p = 0;
470 *p = in6_cksum(m, ip6->ip6_nxt, sizeof(*ip6), plen);
471 }
472
473#ifdef IPSEC
474 if (ipsec_setsocket(m, so) != 0) {
475 error = ENOBUFS;
476 goto bad;
477 }
478#endif /*IPSEC*/
479
480 error = ip6_output(m, in6p->in6p_outputopts, &in6p->in6p_route, 0,
481 in6p->in6p_moptions, &oifp, in6p);
482 if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) {
483 if (oifp)
484 icmp6_ifoutstat_inc(oifp, type, code);
485 icmp6stat.icp6s_outhist[type]++;
486 } else
487 rip6stat.rip6s_opackets++;
488
489 goto freectl;
490
491 bad:
492 if (m)
493 m_freem(m);
494
495 freectl:
496 if (control) {
497 ip6_clearpktopts(in6p->in6p_outputopts, -1);
498 in6p->in6p_outputopts = stickyopt;
499 m_freem(control);
500 }
501 return (error);
502}
503
504/*
505 * Raw IPv6 socket option processing.
506 */
507int
508rip6_ctloutput(so, sopt)
509 struct socket *so;
510 struct sockopt *sopt;
511{
512 int error;
513
514 if (sopt->sopt_level == IPPROTO_ICMPV6)
515 /*
516 * XXX: is it better to call icmp6_ctloutput() directly
517 * from protosw?
518 */
519 return (icmp6_ctloutput(so, sopt));
520 else if (sopt->sopt_level != IPPROTO_IPV6)
521 return (EINVAL);
522
523 error = 0;
524
525 switch (sopt->sopt_dir) {
526 case SOPT_GET:
527 switch (sopt->sopt_name) {
528 case MRT6_INIT:
529 case MRT6_DONE:
530 case MRT6_ADD_MIF:
531 case MRT6_DEL_MIF:
532 case MRT6_ADD_MFC:
533 case MRT6_DEL_MFC:
534 case MRT6_PIM:
535 error = ip6_mrouter_get(so, sopt);
536 break;
537 case IPV6_CHECKSUM:
538 error = ip6_raw_ctloutput(so, sopt);
539 break;
540 default:
541 error = ip6_ctloutput(so, sopt);
542 break;
543 }
544 break;
545
546 case SOPT_SET:
547 switch (sopt->sopt_name) {
548 case MRT6_INIT:
549 case MRT6_DONE:
550 case MRT6_ADD_MIF:
551 case MRT6_DEL_MIF:
552 case MRT6_ADD_MFC:
553 case MRT6_DEL_MFC:
554 case MRT6_PIM:
555 error = ip6_mrouter_set(so, sopt);
556 break;
557 case IPV6_CHECKSUM:
558 error = ip6_raw_ctloutput(so, sopt);
559 break;
560 default:
561 error = ip6_ctloutput(so, sopt);
562 break;
563 }
564 break;
565 }
566
567 return (error);
568}
569
570static int
571rip6_attach(struct socket *so, int proto, struct thread *td)
572{
573 struct inpcb *inp;
574 int error, s;
575
576 inp = sotoinpcb(so);
577 if (inp)
578 panic("rip6_attach");
579 if (td && (error = suser(td)) != 0)
580 return error;
581
582 error = soreserve(so, rip_sendspace, rip_recvspace);
583 if (error)
584 return error;
585 s = splnet();
586 error = in_pcballoc(so, &ripcbinfo, td);
587 splx(s);
588 if (error)
589 return error;
590 inp = (struct inpcb *)so->so_pcb;
591 inp->inp_vflag |= INP_IPV6;
592 inp->in6p_ip6_nxt = (long)proto;
593 inp->in6p_hops = -1; /* use kernel default */
594 inp->in6p_cksum = -1;
595 MALLOC(inp->in6p_icmp6filt, struct icmp6_filter *,
596 sizeof(struct icmp6_filter), M_PCB, M_NOWAIT);
597 ICMP6_FILTER_SETPASSALL(inp->in6p_icmp6filt);
598 return 0;
599}
600
601static int
602rip6_detach(struct socket *so)
603{
604 struct inpcb *inp;
605
606 inp = sotoinpcb(so);
607 if (inp == 0)
608 panic("rip6_detach");
609 /* xxx: RSVP */
610 if (so == ip6_mrouter)
611 ip6_mrouter_done();
612 if (inp->in6p_icmp6filt) {
613 FREE(inp->in6p_icmp6filt, M_PCB);
614 inp->in6p_icmp6filt = NULL;
615 }
616 in6_pcbdetach(inp);
617 return 0;
618}
619
620static int
621rip6_abort(struct socket *so)
622{
623 soisdisconnected(so);
624 return rip6_detach(so);
625}
626
627static int
628rip6_disconnect(struct socket *so)
629{
630 struct inpcb *inp = sotoinpcb(so);
631
632 if ((so->so_state & SS_ISCONNECTED) == 0)
633 return ENOTCONN;
634 inp->in6p_faddr = in6addr_any;
635 return rip6_abort(so);
636}
637
638static int
639rip6_bind(struct socket *so, struct sockaddr *nam, struct thread *td)
640{
641 struct inpcb *inp = sotoinpcb(so);
642 struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam;
643 struct ifaddr *ia = NULL;
644
645 if (nam->sa_len != sizeof(*addr))
646 return EINVAL;
647 if (TAILQ_EMPTY(&ifnet) || addr->sin6_family != AF_INET6)
648 return EADDRNOTAVAIL;
649#ifdef ENABLE_DEFAULT_SCOPE
650 if (addr->sin6_scope_id == 0) { /* not change if specified */
651 addr->sin6_scope_id = scope6_addr2default(&addr->sin6_addr);
652 }
653#endif
654 if (!IN6_IS_ADDR_UNSPECIFIED(&addr->sin6_addr) &&
655 (ia = ifa_ifwithaddr((struct sockaddr *)addr)) == 0)
656 return EADDRNOTAVAIL;
657 if (ia &&
658 ((struct in6_ifaddr *)ia)->ia6_flags &
659 (IN6_IFF_ANYCAST|IN6_IFF_NOTREADY|
660 IN6_IFF_DETACHED|IN6_IFF_DEPRECATED)) {
661 return (EADDRNOTAVAIL);
662 }
663 inp->in6p_laddr = addr->sin6_addr;
664 return 0;
665}
666
667static int
668rip6_connect(struct socket *so, struct sockaddr *nam, struct thread *td)
669{
670 struct inpcb *inp = sotoinpcb(so);
671 struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam;
672 struct in6_addr *in6a = NULL;
673 int error = 0;
674#ifdef ENABLE_DEFAULT_SCOPE
675 struct sockaddr_in6 tmp;
676#endif
677
678 if (nam->sa_len != sizeof(*addr))
679 return EINVAL;
680 if (TAILQ_EMPTY(&ifnet))
681 return EADDRNOTAVAIL;
682 if (addr->sin6_family != AF_INET6)
683 return EAFNOSUPPORT;
684#ifdef ENABLE_DEFAULT_SCOPE
685 if (addr->sin6_scope_id == 0) { /* not change if specified */
686 /* avoid overwrites */
687 tmp = *addr;
688 addr = &tmp;
689 addr->sin6_scope_id = scope6_addr2default(&addr->sin6_addr);
690 }
691#endif
692 /* Source address selection. XXX: need pcblookup? */
693 in6a = in6_selectsrc(addr, inp->in6p_outputopts,
694 inp->in6p_moptions, &inp->in6p_route,
695 &inp->in6p_laddr, &error);
696 if (in6a == NULL)
697 return (error ? error : EADDRNOTAVAIL);
698 inp->in6p_laddr = *in6a;
699 inp->in6p_faddr = addr->sin6_addr;
700 soisconnected(so);
701 return 0;
702}
703
704static int
705rip6_shutdown(struct socket *so)
706{
707 socantsendmore(so);
708 return 0;
709}
710
711static int
712rip6_send(struct socket *so, int flags, struct mbuf *m, struct sockaddr *nam,
713 struct mbuf *control, struct thread *td)
714{
715 struct inpcb *inp = sotoinpcb(so);
716 struct sockaddr_in6 tmp;
717 struct sockaddr_in6 *dst;
718
719 /* always copy sockaddr to avoid overwrites */
720 if (so->so_state & SS_ISCONNECTED) {
721 if (nam) {
722 m_freem(m);
723 return EISCONN;
724 }
725 /* XXX */
726 bzero(&tmp, sizeof(tmp));
727 tmp.sin6_family = AF_INET6;
728 tmp.sin6_len = sizeof(struct sockaddr_in6);
729 bcopy(&inp->in6p_faddr, &tmp.sin6_addr,
730 sizeof(struct in6_addr));
731 dst = &tmp;
732 } else {
733 if (nam == NULL) {
734 m_freem(m);
735 return ENOTCONN;
736 }
737 tmp = *(struct sockaddr_in6 *)nam;
738 dst = &tmp;
739 }
740#ifdef ENABLE_DEFAULT_SCOPE
741 if (dst->sin6_scope_id == 0) { /* not change if specified */
742 dst->sin6_scope_id = scope6_addr2default(&dst->sin6_addr);
743 }
744#endif
745 return rip6_output(m, so, dst, control);
746}
747
748struct pr_usrreqs rip6_usrreqs = {
749 rip6_abort, pru_accept_notsupp, rip6_attach, rip6_bind, rip6_connect,
750 pru_connect2_notsupp, in6_control, rip6_detach, rip6_disconnect,
751 pru_listen_notsupp, in6_setpeeraddr, pru_rcvd_notsupp,
752 pru_rcvoob_notsupp, rip6_send, pru_sense_null, rip6_shutdown,
753 in6_setsockaddr, sosend, soreceive, sopoll
753 in6_setsockaddr, sosend, soreceive, sopoll, pru_sosetlabel_null
754};
754};