17 */
18
19#include "opt_atalk.h"
20#include "opt_inet.h"
21#include "opt_inet6.h"
22#include "opt_ipx.h"
23#include "opt_mac.h"
24
25#include <sys/param.h>
26#include <sys/proc.h>
27#include <sys/systm.h>
28#include <sys/mac.h>
29#include <sys/mbuf.h>
30#include <sys/module.h>
31#include <sys/socket.h>
32#include <sys/filio.h>
33#include <sys/sockio.h>
34#include <sys/ttycom.h>
35#include <sys/poll.h>
36#include <sys/signalvar.h>
37#include <sys/filedesc.h>
38#include <sys/kernel.h>
39#include <sys/sysctl.h>
40#include <sys/conf.h>
41#include <sys/uio.h>
42#include <sys/vnode.h>
43#include <sys/malloc.h>
44#include <sys/random.h>
45
46#include <net/if.h>
47#include <net/if_types.h>
48#include <net/netisr.h>
49#include <net/route.h>
50#ifdef INET
51#include <netinet/in.h>
52#endif
53#include <net/bpf.h>
54#include <net/if_tun.h>
55
56#include <sys/queue.h>
57
58/*
59 * tun_list is protected by global tunmtx. Other mutable fields are
60 * protected by tun->tun_mtx, or by their owning subsystem. tun_dev is
61 * static for the duration of a tunnel interface.
62 */
63struct tun_softc {
64 TAILQ_ENTRY(tun_softc) tun_list;
65 struct cdev *tun_dev;
66 u_short tun_flags; /* misc flags */
67#define TUN_OPEN 0x0001
68#define TUN_INITED 0x0002
69#define TUN_RCOLL 0x0004
70#define TUN_IASET 0x0008
71#define TUN_DSTADDR 0x0010
72#define TUN_LMODE 0x0020
73#define TUN_RWAIT 0x0040
74#define TUN_ASYNC 0x0080
75#define TUN_IFHEAD 0x0100
76
77#define TUN_READY (TUN_OPEN | TUN_INITED)
78
79 /*
80 * XXXRW: tun_pid is used to exclusively lock /dev/tun. Is this
81 * actually needed? Can we just return EBUSY if already open?
82 * Problem is that this involved inherent races when a tun device
83 * is handed off from one process to another, as opposed to just
84 * being slightly stale informationally.
85 */
86 pid_t tun_pid; /* owning pid */
87 struct ifnet tun_if; /* the interface */
88 struct sigio *tun_sigio; /* information for async I/O */
89 struct selinfo tun_rsel; /* read select */
90 struct mtx tun_mtx; /* protect mutable softc fields */
91};
92
93#define TUNDEBUG if (tundebug) if_printf
94#define TUNNAME "tun"
95
96/*
97 * All mutable global variables in if_tun are locked using tunmtx, with
98 * the exception of tundebug, which is used unlocked, and tunclones,
99 * which is static after setup.
100 */
101static struct mtx tunmtx;
102static MALLOC_DEFINE(M_TUN, TUNNAME, "Tunnel Interface");
103static int tundebug = 0;
104static struct clonedevs *tunclones;
105static TAILQ_HEAD(,tun_softc) tunhead = TAILQ_HEAD_INITIALIZER(tunhead);
106SYSCTL_INT(_debug, OID_AUTO, if_tun_debug, CTLFLAG_RW, &tundebug, 0, "");
107
108static void tunclone(void *arg, char *name, int namelen, struct cdev **dev);
109static void tuncreate(struct cdev *dev);
110static int tunifioctl(struct ifnet *, u_long, caddr_t);
111static int tuninit(struct ifnet *);
112static int tunmodevent(module_t, int, void *);
113static int tunoutput(struct ifnet *, struct mbuf *, struct sockaddr *,
114 struct rtentry *rt);
115static void tunstart(struct ifnet *);
116
117static d_open_t tunopen;
118static d_close_t tunclose;
119static d_read_t tunread;
120static d_write_t tunwrite;
121static d_ioctl_t tunioctl;
122static d_poll_t tunpoll;
123
124static struct cdevsw tun_cdevsw = {
125 .d_version = D_VERSION,
126 .d_flags = D_PSEUDO | D_NEEDGIANT,
127 .d_open = tunopen,
128 .d_close = tunclose,
129 .d_read = tunread,
130 .d_write = tunwrite,
131 .d_ioctl = tunioctl,
132 .d_poll = tunpoll,
133 .d_name = TUNNAME,
134};
135
136static void
137tunclone(void *arg, char *name, int namelen, struct cdev **dev)
138{
139 int u, i;
140
| 17 */
18
19#include "opt_atalk.h"
20#include "opt_inet.h"
21#include "opt_inet6.h"
22#include "opt_ipx.h"
23#include "opt_mac.h"
24
25#include <sys/param.h>
26#include <sys/proc.h>
27#include <sys/systm.h>
28#include <sys/mac.h>
29#include <sys/mbuf.h>
30#include <sys/module.h>
31#include <sys/socket.h>
32#include <sys/filio.h>
33#include <sys/sockio.h>
34#include <sys/ttycom.h>
35#include <sys/poll.h>
36#include <sys/signalvar.h>
37#include <sys/filedesc.h>
38#include <sys/kernel.h>
39#include <sys/sysctl.h>
40#include <sys/conf.h>
41#include <sys/uio.h>
42#include <sys/vnode.h>
43#include <sys/malloc.h>
44#include <sys/random.h>
45
46#include <net/if.h>
47#include <net/if_types.h>
48#include <net/netisr.h>
49#include <net/route.h>
50#ifdef INET
51#include <netinet/in.h>
52#endif
53#include <net/bpf.h>
54#include <net/if_tun.h>
55
56#include <sys/queue.h>
57
58/*
59 * tun_list is protected by global tunmtx. Other mutable fields are
60 * protected by tun->tun_mtx, or by their owning subsystem. tun_dev is
61 * static for the duration of a tunnel interface.
62 */
63struct tun_softc {
64 TAILQ_ENTRY(tun_softc) tun_list;
65 struct cdev *tun_dev;
66 u_short tun_flags; /* misc flags */
67#define TUN_OPEN 0x0001
68#define TUN_INITED 0x0002
69#define TUN_RCOLL 0x0004
70#define TUN_IASET 0x0008
71#define TUN_DSTADDR 0x0010
72#define TUN_LMODE 0x0020
73#define TUN_RWAIT 0x0040
74#define TUN_ASYNC 0x0080
75#define TUN_IFHEAD 0x0100
76
77#define TUN_READY (TUN_OPEN | TUN_INITED)
78
79 /*
80 * XXXRW: tun_pid is used to exclusively lock /dev/tun. Is this
81 * actually needed? Can we just return EBUSY if already open?
82 * Problem is that this involved inherent races when a tun device
83 * is handed off from one process to another, as opposed to just
84 * being slightly stale informationally.
85 */
86 pid_t tun_pid; /* owning pid */
87 struct ifnet tun_if; /* the interface */
88 struct sigio *tun_sigio; /* information for async I/O */
89 struct selinfo tun_rsel; /* read select */
90 struct mtx tun_mtx; /* protect mutable softc fields */
91};
92
93#define TUNDEBUG if (tundebug) if_printf
94#define TUNNAME "tun"
95
96/*
97 * All mutable global variables in if_tun are locked using tunmtx, with
98 * the exception of tundebug, which is used unlocked, and tunclones,
99 * which is static after setup.
100 */
101static struct mtx tunmtx;
102static MALLOC_DEFINE(M_TUN, TUNNAME, "Tunnel Interface");
103static int tundebug = 0;
104static struct clonedevs *tunclones;
105static TAILQ_HEAD(,tun_softc) tunhead = TAILQ_HEAD_INITIALIZER(tunhead);
106SYSCTL_INT(_debug, OID_AUTO, if_tun_debug, CTLFLAG_RW, &tundebug, 0, "");
107
108static void tunclone(void *arg, char *name, int namelen, struct cdev **dev);
109static void tuncreate(struct cdev *dev);
110static int tunifioctl(struct ifnet *, u_long, caddr_t);
111static int tuninit(struct ifnet *);
112static int tunmodevent(module_t, int, void *);
113static int tunoutput(struct ifnet *, struct mbuf *, struct sockaddr *,
114 struct rtentry *rt);
115static void tunstart(struct ifnet *);
116
117static d_open_t tunopen;
118static d_close_t tunclose;
119static d_read_t tunread;
120static d_write_t tunwrite;
121static d_ioctl_t tunioctl;
122static d_poll_t tunpoll;
123
124static struct cdevsw tun_cdevsw = {
125 .d_version = D_VERSION,
126 .d_flags = D_PSEUDO | D_NEEDGIANT,
127 .d_open = tunopen,
128 .d_close = tunclose,
129 .d_read = tunread,
130 .d_write = tunwrite,
131 .d_ioctl = tunioctl,
132 .d_poll = tunpoll,
133 .d_name = TUNNAME,
134};
135
136static void
137tunclone(void *arg, char *name, int namelen, struct cdev **dev)
138{
139 int u, i;
140
|
142 return;
143
144 if (strcmp(name, TUNNAME) == 0) {
145 u = -1;
146 } else if (dev_stdclone(name, NULL, TUNNAME, &u) != 1)
147 return; /* Don't recognise the name */
148 if (u != -1 && u > IF_MAXUNIT)
149 return; /* Unit number too high */
150
151 /* find any existing device, or allocate new unit number */
152 i = clone_create(&tunclones, &tun_cdevsw, &u, dev, 0);
153 if (i) {
154 /* No preexisting struct cdev *, create one */
155 *dev = make_dev(&tun_cdevsw, unit2minor(u),
156 UID_UUCP, GID_DIALER, 0600, "tun%d", u);
157 if (*dev != NULL)
158 (*dev)->si_flags |= SI_CHEAPCLONE;
159 }
160}
161
162static void
163tun_destroy(struct tun_softc *tp)
164{
165 struct cdev *dev;
166
167 /* Unlocked read. */
168 KASSERT((tp->tun_flags & TUN_OPEN) == 0,
169 ("tununits is out of sync - unit %d", tp->tun_if.if_dunit));
170
171 dev = tp->tun_dev;
172 bpfdetach(&tp->tun_if);
173 if_detach(&tp->tun_if);
174 destroy_dev(dev);
175 mtx_destroy(&tp->tun_mtx);
176 free(tp, M_TUN);
177}
178
179static int
180tunmodevent(module_t mod, int type, void *data)
181{
182 static eventhandler_tag tag;
183 struct tun_softc *tp;
184
185 switch (type) {
186 case MOD_LOAD:
187 mtx_init(&tunmtx, "tunmtx", NULL, MTX_DEF);
188 clone_setup(&tunclones);
189 tag = EVENTHANDLER_REGISTER(dev_clone, tunclone, 0, 1000);
190 if (tag == NULL)
191 return (ENOMEM);
192 break;
193 case MOD_UNLOAD:
194 EVENTHANDLER_DEREGISTER(dev_clone, tag);
195
196 mtx_lock(&tunmtx);
197 while ((tp = TAILQ_FIRST(&tunhead)) != NULL) {
198 TAILQ_REMOVE(&tunhead, tp, tun_list);
199 mtx_unlock(&tunmtx);
200 tun_destroy(tp);
201 mtx_lock(&tunmtx);
202 }
203 mtx_unlock(&tunmtx);
204 clone_cleanup(&tunclones);
205 mtx_destroy(&tunmtx);
206 break;
207 }
208 return 0;
209}
210
211static moduledata_t tun_mod = {
212 "if_tun",
213 tunmodevent,
214 0
215};
216
217DECLARE_MODULE(if_tun, tun_mod, SI_SUB_PSEUDO, SI_ORDER_ANY);
218
219static void
220tunstart(struct ifnet *ifp)
221{
222 struct tun_softc *tp = ifp->if_softc;
223
224 mtx_lock(&tp->tun_mtx);
225 if (tp->tun_flags & TUN_RWAIT) {
226 tp->tun_flags &= ~TUN_RWAIT;
227 wakeup(tp);
228 }
229 if (tp->tun_flags & TUN_ASYNC && tp->tun_sigio) {
230 mtx_unlock(&tp->tun_mtx);
231 pgsigio(&tp->tun_sigio, SIGIO, 0);
232 } else
233 mtx_unlock(&tp->tun_mtx);
234 selwakeuppri(&tp->tun_rsel, PZERO + 1);
235}
236
237static void
238tuncreate(struct cdev *dev)
239{
240 struct tun_softc *sc;
241 struct ifnet *ifp;
242
243 dev->si_flags &= ~SI_CHEAPCLONE;
244
245 MALLOC(sc, struct tun_softc *, sizeof(*sc), M_TUN, M_WAITOK | M_ZERO);
246 mtx_init(&sc->tun_mtx, "tun_mtx", NULL, MTX_DEF);
247 sc->tun_flags = TUN_INITED;
248 sc->tun_dev = dev;
249 mtx_lock(&tunmtx);
250 TAILQ_INSERT_TAIL(&tunhead, sc, tun_list);
251 mtx_unlock(&tunmtx);
252
253 ifp = &sc->tun_if;
254 if_initname(ifp, TUNNAME, dev2unit(dev));
255 ifp->if_mtu = TUNMTU;
256 ifp->if_ioctl = tunifioctl;
257 ifp->if_output = tunoutput;
258 ifp->if_start = tunstart;
259 ifp->if_flags = IFF_POINTOPOINT | IFF_MULTICAST;
260 ifp->if_type = IFT_PPP;
261 ifp->if_snd.ifq_maxlen = ifqmaxlen;
262 ifp->if_softc = sc;
263 if_attach(ifp);
264 bpfattach(ifp, DLT_NULL, sizeof(u_int));
265 dev->si_drv1 = sc;
266}
267
268static int
269tunopen(struct cdev *dev, int flag, int mode, struct thread *td)
270{
271 struct ifnet *ifp;
272 struct tun_softc *tp;
273
274 /*
275 * XXXRW: Non-atomic test and set of dev->si_drv1 requires
276 * synchronization.
277 */
278 tp = dev->si_drv1;
279 if (!tp) {
280 tuncreate(dev);
281 tp = dev->si_drv1;
282 }
283
284 /*
285 * XXXRW: This use of tun_pid is subject to error due to the
286 * fact that a reference to the tunnel can live beyond the
287 * death of the process that created it. Can we replace this
288 * with a simple busy flag?
289 */
290 mtx_lock(&tp->tun_mtx);
291 if (tp->tun_pid != 0 && tp->tun_pid != td->td_proc->p_pid) {
292 mtx_unlock(&tp->tun_mtx);
293 return (EBUSY);
294 }
295 tp->tun_pid = td->td_proc->p_pid;
296
297 tp->tun_flags |= TUN_OPEN;
298 mtx_unlock(&tp->tun_mtx);
299 ifp = &tp->tun_if;
300 TUNDEBUG(ifp, "open\n");
301
302 return (0);
303}
304
305/*
306 * tunclose - close the device - mark i/f down & delete
307 * routing info
308 */
309static int
310tunclose(struct cdev *dev, int foo, int bar, struct thread *td)
311{
312 struct tun_softc *tp;
313 struct ifnet *ifp;
314 int s;
315
316 tp = dev->si_drv1;
317 ifp = &tp->tun_if;
318
319 mtx_lock(&tp->tun_mtx);
320 tp->tun_flags &= ~TUN_OPEN;
321 tp->tun_pid = 0;
322 mtx_unlock(&tp->tun_mtx);
323
324 /*
325 * junk all pending output
326 */
327 IF_DRAIN(&ifp->if_snd);
328
329 if (ifp->if_flags & IFF_UP) {
330 s = splimp();
331 if_down(ifp);
332 splx(s);
333 }
334
335 if (ifp->if_flags & IFF_RUNNING) {
336 struct ifaddr *ifa;
337
338 s = splimp();
339 /* find internet addresses and delete routes */
340 TAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link)
341 if (ifa->ifa_addr->sa_family == AF_INET)
342 /* Unlocked read. */
343 rtinit(ifa, (int)RTM_DELETE,
344 tp->tun_flags & TUN_DSTADDR ? RTF_HOST : 0);
345 ifp->if_flags &= ~IFF_RUNNING;
346 splx(s);
347 }
348
349 funsetown(&tp->tun_sigio);
350 selwakeuppri(&tp->tun_rsel, PZERO + 1);
351 TUNDEBUG (ifp, "closed\n");
352 return (0);
353}
354
355static int
356tuninit(struct ifnet *ifp)
357{
358 struct tun_softc *tp = ifp->if_softc;
359 struct ifaddr *ifa;
360 int error = 0;
361
362 TUNDEBUG(ifp, "tuninit\n");
363
364 ifp->if_flags |= IFF_UP | IFF_RUNNING;
365 getmicrotime(&ifp->if_lastchange);
366
367 for (ifa = TAILQ_FIRST(&ifp->if_addrhead); ifa;
368 ifa = TAILQ_NEXT(ifa, ifa_link)) {
369 if (ifa->ifa_addr == NULL)
370 error = EFAULT;
371 /* XXX: Should maybe return straight off? */
372 else {
373#ifdef INET
374 if (ifa->ifa_addr->sa_family == AF_INET) {
375 struct sockaddr_in *si;
376
377 si = (struct sockaddr_in *)ifa->ifa_addr;
378 mtx_lock(&tp->tun_mtx);
379 if (si->sin_addr.s_addr)
380 tp->tun_flags |= TUN_IASET;
381
382 si = (struct sockaddr_in *)ifa->ifa_dstaddr;
383 if (si && si->sin_addr.s_addr)
384 tp->tun_flags |= TUN_DSTADDR;
385 mtx_unlock(&tp->tun_mtx);
386 }
387#endif
388 }
389 }
390 return (error);
391}
392
393/*
394 * Process an ioctl request.
395 */
396static int
397tunifioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
398{
399 struct ifreq *ifr = (struct ifreq *)data;
400 struct tun_softc *tp = ifp->if_softc;
401 struct ifstat *ifs;
402 int error = 0, s;
403
404 s = splimp();
405 switch(cmd) {
406 case SIOCGIFSTATUS:
407 ifs = (struct ifstat *)data;
408 mtx_lock(&tp->tun_mtx);
409 if (tp->tun_pid)
410 sprintf(ifs->ascii + strlen(ifs->ascii),
411 "\tOpened by PID %d\n", tp->tun_pid);
412 mtx_unlock(&tp->tun_mtx);
413 break;
414 case SIOCSIFADDR:
415 error = tuninit(ifp);
416 TUNDEBUG(ifp, "address set, error=%d\n", error);
417 break;
418 case SIOCSIFDSTADDR:
419 error = tuninit(ifp);
420 TUNDEBUG(ifp, "destination address set, error=%d\n", error);
421 break;
422 case SIOCSIFMTU:
423 ifp->if_mtu = ifr->ifr_mtu;
424 TUNDEBUG(ifp, "mtu set\n");
425 break;
426 case SIOCSIFFLAGS:
427 case SIOCADDMULTI:
428 case SIOCDELMULTI:
429 break;
430 default:
431 error = EINVAL;
432 }
433 splx(s);
434 return (error);
435}
436
437/*
438 * tunoutput - queue packets from higher level ready to put out.
439 */
440static int
441tunoutput(
442 struct ifnet *ifp,
443 struct mbuf *m0,
444 struct sockaddr *dst,
445 struct rtentry *rt)
446{
447 struct tun_softc *tp = ifp->if_softc;
448 u_short cached_tun_flags;
449 int error;
450
451 TUNDEBUG (ifp, "tunoutput\n");
452
453#ifdef MAC
454 error = mac_check_ifnet_transmit(ifp, m0);
455 if (error) {
456 m_freem(m0);
457 return (error);
458 }
459#endif
460
461 /* Could be unlocked read? */
462 mtx_lock(&tp->tun_mtx);
463 cached_tun_flags = tp->tun_flags;
464 mtx_unlock(&tp->tun_mtx);
465 if ((cached_tun_flags & TUN_READY) != TUN_READY) {
466 TUNDEBUG (ifp, "not ready 0%o\n", tp->tun_flags);
467 m_freem (m0);
468 return (EHOSTDOWN);
469 }
470
471 if ((ifp->if_flags & IFF_UP) != IFF_UP) {
472 m_freem (m0);
473 return (EHOSTDOWN);
474 }
475
476 /* BPF write needs to be handled specially */
477 if (dst->sa_family == AF_UNSPEC) {
478 dst->sa_family = *(mtod(m0, int *));
479 m0->m_len -= sizeof(int);
480 m0->m_pkthdr.len -= sizeof(int);
481 m0->m_data += sizeof(int);
482 }
483
484 if (ifp->if_bpf) {
485 uint32_t af = dst->sa_family;
486 bpf_mtap2(ifp->if_bpf, &af, sizeof(af), m0);
487 }
488
489 /* prepend sockaddr? this may abort if the mbuf allocation fails */
490 if (cached_tun_flags & TUN_LMODE) {
491 /* allocate space for sockaddr */
492 M_PREPEND(m0, dst->sa_len, M_DONTWAIT);
493
494 /* if allocation failed drop packet */
495 if (m0 == NULL) {
496 ifp->if_iqdrops++;
497 ifp->if_oerrors++;
498 return (ENOBUFS);
499 } else {
500 bcopy(dst, m0->m_data, dst->sa_len);
501 }
502 }
503
504 if (cached_tun_flags & TUN_IFHEAD) {
505 /* Prepend the address family */
506 M_PREPEND(m0, 4, M_DONTWAIT);
507
508 /* if allocation failed drop packet */
509 if (m0 == NULL) {
510 ifp->if_iqdrops++;
511 ifp->if_oerrors++;
512 return (ENOBUFS);
513 } else
514 *(u_int32_t *)m0->m_data = htonl(dst->sa_family);
515 } else {
516#ifdef INET
517 if (dst->sa_family != AF_INET)
518#endif
519 {
520 m_freem(m0);
521 return (EAFNOSUPPORT);
522 }
523 }
524
525 IFQ_HANDOFF(ifp, m0, error);
526 if (error) {
527 ifp->if_collisions++;
528 return (ENOBUFS);
529 }
530 ifp->if_opackets++;
531 return (0);
532}
533
534/*
535 * the cdevsw interface is now pretty minimal.
536 */
537static int
538tunioctl(struct cdev *dev, u_long cmd, caddr_t data, int flag, struct thread *td)
539{
540 int s;
541 int error;
542 struct tun_softc *tp = dev->si_drv1;
543 struct tuninfo *tunp;
544
545 switch (cmd) {
546 case TUNSIFINFO:
547 tunp = (struct tuninfo *)data;
548 if (tunp->mtu < IF_MINMTU)
549 return (EINVAL);
550 if (tp->tun_if.if_mtu != tunp->mtu
551 && (error = suser(td)) != 0)
552 return (error);
553 tp->tun_if.if_mtu = tunp->mtu;
554 tp->tun_if.if_type = tunp->type;
555 tp->tun_if.if_baudrate = tunp->baudrate;
556 break;
557 case TUNGIFINFO:
558 tunp = (struct tuninfo *)data;
559 tunp->mtu = tp->tun_if.if_mtu;
560 tunp->type = tp->tun_if.if_type;
561 tunp->baudrate = tp->tun_if.if_baudrate;
562 break;
563 case TUNSDEBUG:
564 tundebug = *(int *)data;
565 break;
566 case TUNGDEBUG:
567 *(int *)data = tundebug;
568 break;
569 case TUNSLMODE:
570 mtx_lock(&tp->tun_mtx);
571 if (*(int *)data) {
572 tp->tun_flags |= TUN_LMODE;
573 tp->tun_flags &= ~TUN_IFHEAD;
574 } else
575 tp->tun_flags &= ~TUN_LMODE;
576 mtx_unlock(&tp->tun_mtx);
577 break;
578 case TUNSIFHEAD:
579 mtx_lock(&tp->tun_mtx);
580 if (*(int *)data) {
581 tp->tun_flags |= TUN_IFHEAD;
582 tp->tun_flags &= ~TUN_LMODE;
583 } else
584 tp->tun_flags &= ~TUN_IFHEAD;
585 mtx_unlock(&tp->tun_mtx);
586 break;
587 case TUNGIFHEAD:
588 /* Could be unlocked read? */
589 mtx_lock(&tp->tun_mtx);
590 *(int *)data = (tp->tun_flags & TUN_IFHEAD) ? 1 : 0;
591 mtx_unlock(&tp->tun_mtx);
592 break;
593 case TUNSIFMODE:
594 /* deny this if UP */
595 if (tp->tun_if.if_flags & IFF_UP)
596 return(EBUSY);
597
598 switch (*(int *)data & ~IFF_MULTICAST) {
599 case IFF_POINTOPOINT:
600 case IFF_BROADCAST:
601 tp->tun_if.if_flags &=
602 ~(IFF_BROADCAST|IFF_POINTOPOINT|IFF_MULTICAST);
603 tp->tun_if.if_flags |= *(int *)data;
604 break;
605 default:
606 return(EINVAL);
607 }
608 break;
609 case TUNSIFPID:
610 mtx_lock(&tp->tun_mtx);
611 tp->tun_pid = curthread->td_proc->p_pid;
612 mtx_unlock(&tp->tun_mtx);
613 break;
614 case FIONBIO:
615 break;
616 case FIOASYNC:
617 mtx_lock(&tp->tun_mtx);
618 if (*(int *)data)
619 tp->tun_flags |= TUN_ASYNC;
620 else
621 tp->tun_flags &= ~TUN_ASYNC;
622 mtx_unlock(&tp->tun_mtx);
623 break;
624 case FIONREAD:
625 s = splimp();
626 if (tp->tun_if.if_snd.ifq_head) {
627 struct mbuf *mb = tp->tun_if.if_snd.ifq_head;
628 for( *(int *)data = 0; mb != 0; mb = mb->m_next)
629 *(int *)data += mb->m_len;
630 } else
631 *(int *)data = 0;
632 splx(s);
633 break;
634 case FIOSETOWN:
635 return (fsetown(*(int *)data, &tp->tun_sigio));
636
637 case FIOGETOWN:
638 *(int *)data = fgetown(&tp->tun_sigio);
639 return (0);
640
641 /* This is deprecated, FIOSETOWN should be used instead. */
642 case TIOCSPGRP:
643 return (fsetown(-(*(int *)data), &tp->tun_sigio));
644
645 /* This is deprecated, FIOGETOWN should be used instead. */
646 case TIOCGPGRP:
647 *(int *)data = -fgetown(&tp->tun_sigio);
648 return (0);
649
650 default:
651 return (ENOTTY);
652 }
653 return (0);
654}
655
656/*
657 * The cdevsw read interface - reads a packet at a time, or at
658 * least as much of a packet as can be read.
659 */
660static int
661tunread(struct cdev *dev, struct uio *uio, int flag)
662{
663 struct tun_softc *tp = dev->si_drv1;
664 struct ifnet *ifp = &tp->tun_if;
665 struct mbuf *m;
666 int error=0, len, s;
667
668 TUNDEBUG (ifp, "read\n");
669 mtx_lock(&tp->tun_mtx);
670 if ((tp->tun_flags & TUN_READY) != TUN_READY) {
671 mtx_unlock(&tp->tun_mtx);
672 TUNDEBUG (ifp, "not ready 0%o\n", tp->tun_flags);
673 return (EHOSTDOWN);
674 }
675
676 tp->tun_flags &= ~TUN_RWAIT;
677 mtx_unlock(&tp->tun_mtx);
678
679 s = splimp();
680 do {
681 IF_DEQUEUE(&ifp->if_snd, m);
682 if (m == NULL) {
683 if (flag & IO_NDELAY) {
684 splx(s);
685 return (EWOULDBLOCK);
686 }
687 mtx_lock(&tp->tun_mtx);
688 tp->tun_flags |= TUN_RWAIT;
689 mtx_unlock(&tp->tun_mtx);
690 if((error = tsleep(tp, PCATCH | (PZERO + 1),
691 "tunread", 0)) != 0) {
692 splx(s);
693 return (error);
694 }
695 }
696 } while (m == NULL);
697 splx(s);
698
699 while (m && uio->uio_resid > 0 && error == 0) {
700 len = min(uio->uio_resid, m->m_len);
701 if (len != 0)
702 error = uiomove(mtod(m, void *), len, uio);
703 m = m_free(m);
704 }
705
706 if (m) {
707 TUNDEBUG(ifp, "Dropping mbuf\n");
708 m_freem(m);
709 }
710 return (error);
711}
712
713/*
714 * the cdevsw write interface - an atomic write is a packet - or else!
715 */
716static int
717tunwrite(struct cdev *dev, struct uio *uio, int flag)
718{
719 struct tun_softc *tp = dev->si_drv1;
720 struct ifnet *ifp = &tp->tun_if;
721 struct mbuf *top, **mp, *m;
722 int error=0, tlen, mlen;
723 uint32_t family;
724 int isr;
725
726 TUNDEBUG(ifp, "tunwrite\n");
727
728 if ((ifp->if_flags & IFF_UP) != IFF_UP)
729 /* ignore silently */
730 return (0);
731
732 if (uio->uio_resid == 0)
733 return (0);
734
735 if (uio->uio_resid < 0 || uio->uio_resid > TUNMRU) {
736 TUNDEBUG(ifp, "len=%d!\n", uio->uio_resid);
737 return (EIO);
738 }
739 tlen = uio->uio_resid;
740
741 /* get a header mbuf */
742 MGETHDR(m, M_DONTWAIT, MT_DATA);
743 if (m == NULL)
744 return (ENOBUFS);
745 mlen = MHLEN;
746
747 top = 0;
748 mp = ⊤
749 while (error == 0 && uio->uio_resid > 0) {
750 m->m_len = min(mlen, uio->uio_resid);
751 error = uiomove(mtod(m, void *), m->m_len, uio);
752 *mp = m;
753 mp = &m->m_next;
754 if (uio->uio_resid > 0) {
755 MGET (m, M_DONTWAIT, MT_DATA);
756 if (m == 0) {
757 error = ENOBUFS;
758 break;
759 }
760 mlen = MLEN;
761 }
762 }
763 if (error) {
764 if (top)
765 m_freem (top);
766 ifp->if_ierrors++;
767 return (error);
768 }
769
770 top->m_pkthdr.len = tlen;
771 top->m_pkthdr.rcvif = ifp;
772#ifdef MAC
773 mac_create_mbuf_from_ifnet(ifp, top);
774#endif
775
776 /* Could be unlocked read? */
777 mtx_lock(&tp->tun_mtx);
778 if (tp->tun_flags & TUN_IFHEAD) {
779 mtx_unlock(&tp->tun_mtx);
780 if (top->m_len < sizeof(family) &&
781 (top = m_pullup(top, sizeof(family))) == NULL)
782 return (ENOBUFS);
783 family = ntohl(*mtod(top, u_int32_t *));
784 m_adj(top, sizeof(family));
785 } else {
786 mtx_unlock(&tp->tun_mtx);
787 family = AF_INET;
788 }
789
790 BPF_MTAP2(ifp, &family, sizeof(family), top);
791
792 switch (family) {
793#ifdef INET
794 case AF_INET:
795 isr = NETISR_IP;
796 break;
797#endif
798#ifdef INET6
799 case AF_INET6:
800 isr = NETISR_IPV6;
801 break;
802#endif
803#ifdef IPX
804 case AF_IPX:
805 isr = NETISR_IPX;
806 break;
807#endif
808#ifdef NETATALK
809 case AF_APPLETALK:
810 isr = NETISR_ATALK2;
811 break;
812#endif
813 default:
814 m_freem(m);
815 return (EAFNOSUPPORT);
816 }
817 /* First chunk of an mbuf contains good junk */
818 if (harvest.point_to_point)
819 random_harvest(m, 16, 3, 0, RANDOM_NET);
820 ifp->if_ibytes += top->m_pkthdr.len;
821 ifp->if_ipackets++;
822 netisr_dispatch(isr, top);
823 return (0);
824}
825
826/*
827 * tunpoll - the poll interface, this is only useful on reads
828 * really. The write detect always returns true, write never blocks
829 * anyway, it either accepts the packet or drops it.
830 */
831static int
832tunpoll(struct cdev *dev, int events, struct thread *td)
833{
834 int s;
835 struct tun_softc *tp = dev->si_drv1;
836 struct ifnet *ifp = &tp->tun_if;
837 int revents = 0;
838
839 s = splimp();
840 TUNDEBUG(ifp, "tunpoll\n");
841
842 if (events & (POLLIN | POLLRDNORM)) {
843 if (ifp->if_snd.ifq_len > 0) {
844 TUNDEBUG(ifp, "tunpoll q=%d\n", ifp->if_snd.ifq_len);
845 revents |= events & (POLLIN | POLLRDNORM);
846 } else {
847 TUNDEBUG(ifp, "tunpoll waiting\n");
848 selrecord(td, &tp->tun_rsel);
849 }
850 }
851 if (events & (POLLOUT | POLLWRNORM))
852 revents |= events & (POLLOUT | POLLWRNORM);
853
854 splx(s);
855 return (revents);
856}
| 142 return;
143
144 if (strcmp(name, TUNNAME) == 0) {
145 u = -1;
146 } else if (dev_stdclone(name, NULL, TUNNAME, &u) != 1)
147 return; /* Don't recognise the name */
148 if (u != -1 && u > IF_MAXUNIT)
149 return; /* Unit number too high */
150
151 /* find any existing device, or allocate new unit number */
152 i = clone_create(&tunclones, &tun_cdevsw, &u, dev, 0);
153 if (i) {
154 /* No preexisting struct cdev *, create one */
155 *dev = make_dev(&tun_cdevsw, unit2minor(u),
156 UID_UUCP, GID_DIALER, 0600, "tun%d", u);
157 if (*dev != NULL)
158 (*dev)->si_flags |= SI_CHEAPCLONE;
159 }
160}
161
162static void
163tun_destroy(struct tun_softc *tp)
164{
165 struct cdev *dev;
166
167 /* Unlocked read. */
168 KASSERT((tp->tun_flags & TUN_OPEN) == 0,
169 ("tununits is out of sync - unit %d", tp->tun_if.if_dunit));
170
171 dev = tp->tun_dev;
172 bpfdetach(&tp->tun_if);
173 if_detach(&tp->tun_if);
174 destroy_dev(dev);
175 mtx_destroy(&tp->tun_mtx);
176 free(tp, M_TUN);
177}
178
179static int
180tunmodevent(module_t mod, int type, void *data)
181{
182 static eventhandler_tag tag;
183 struct tun_softc *tp;
184
185 switch (type) {
186 case MOD_LOAD:
187 mtx_init(&tunmtx, "tunmtx", NULL, MTX_DEF);
188 clone_setup(&tunclones);
189 tag = EVENTHANDLER_REGISTER(dev_clone, tunclone, 0, 1000);
190 if (tag == NULL)
191 return (ENOMEM);
192 break;
193 case MOD_UNLOAD:
194 EVENTHANDLER_DEREGISTER(dev_clone, tag);
195
196 mtx_lock(&tunmtx);
197 while ((tp = TAILQ_FIRST(&tunhead)) != NULL) {
198 TAILQ_REMOVE(&tunhead, tp, tun_list);
199 mtx_unlock(&tunmtx);
200 tun_destroy(tp);
201 mtx_lock(&tunmtx);
202 }
203 mtx_unlock(&tunmtx);
204 clone_cleanup(&tunclones);
205 mtx_destroy(&tunmtx);
206 break;
207 }
208 return 0;
209}
210
211static moduledata_t tun_mod = {
212 "if_tun",
213 tunmodevent,
214 0
215};
216
217DECLARE_MODULE(if_tun, tun_mod, SI_SUB_PSEUDO, SI_ORDER_ANY);
218
219static void
220tunstart(struct ifnet *ifp)
221{
222 struct tun_softc *tp = ifp->if_softc;
223
224 mtx_lock(&tp->tun_mtx);
225 if (tp->tun_flags & TUN_RWAIT) {
226 tp->tun_flags &= ~TUN_RWAIT;
227 wakeup(tp);
228 }
229 if (tp->tun_flags & TUN_ASYNC && tp->tun_sigio) {
230 mtx_unlock(&tp->tun_mtx);
231 pgsigio(&tp->tun_sigio, SIGIO, 0);
232 } else
233 mtx_unlock(&tp->tun_mtx);
234 selwakeuppri(&tp->tun_rsel, PZERO + 1);
235}
236
237static void
238tuncreate(struct cdev *dev)
239{
240 struct tun_softc *sc;
241 struct ifnet *ifp;
242
243 dev->si_flags &= ~SI_CHEAPCLONE;
244
245 MALLOC(sc, struct tun_softc *, sizeof(*sc), M_TUN, M_WAITOK | M_ZERO);
246 mtx_init(&sc->tun_mtx, "tun_mtx", NULL, MTX_DEF);
247 sc->tun_flags = TUN_INITED;
248 sc->tun_dev = dev;
249 mtx_lock(&tunmtx);
250 TAILQ_INSERT_TAIL(&tunhead, sc, tun_list);
251 mtx_unlock(&tunmtx);
252
253 ifp = &sc->tun_if;
254 if_initname(ifp, TUNNAME, dev2unit(dev));
255 ifp->if_mtu = TUNMTU;
256 ifp->if_ioctl = tunifioctl;
257 ifp->if_output = tunoutput;
258 ifp->if_start = tunstart;
259 ifp->if_flags = IFF_POINTOPOINT | IFF_MULTICAST;
260 ifp->if_type = IFT_PPP;
261 ifp->if_snd.ifq_maxlen = ifqmaxlen;
262 ifp->if_softc = sc;
263 if_attach(ifp);
264 bpfattach(ifp, DLT_NULL, sizeof(u_int));
265 dev->si_drv1 = sc;
266}
267
268static int
269tunopen(struct cdev *dev, int flag, int mode, struct thread *td)
270{
271 struct ifnet *ifp;
272 struct tun_softc *tp;
273
274 /*
275 * XXXRW: Non-atomic test and set of dev->si_drv1 requires
276 * synchronization.
277 */
278 tp = dev->si_drv1;
279 if (!tp) {
280 tuncreate(dev);
281 tp = dev->si_drv1;
282 }
283
284 /*
285 * XXXRW: This use of tun_pid is subject to error due to the
286 * fact that a reference to the tunnel can live beyond the
287 * death of the process that created it. Can we replace this
288 * with a simple busy flag?
289 */
290 mtx_lock(&tp->tun_mtx);
291 if (tp->tun_pid != 0 && tp->tun_pid != td->td_proc->p_pid) {
292 mtx_unlock(&tp->tun_mtx);
293 return (EBUSY);
294 }
295 tp->tun_pid = td->td_proc->p_pid;
296
297 tp->tun_flags |= TUN_OPEN;
298 mtx_unlock(&tp->tun_mtx);
299 ifp = &tp->tun_if;
300 TUNDEBUG(ifp, "open\n");
301
302 return (0);
303}
304
305/*
306 * tunclose - close the device - mark i/f down & delete
307 * routing info
308 */
309static int
310tunclose(struct cdev *dev, int foo, int bar, struct thread *td)
311{
312 struct tun_softc *tp;
313 struct ifnet *ifp;
314 int s;
315
316 tp = dev->si_drv1;
317 ifp = &tp->tun_if;
318
319 mtx_lock(&tp->tun_mtx);
320 tp->tun_flags &= ~TUN_OPEN;
321 tp->tun_pid = 0;
322 mtx_unlock(&tp->tun_mtx);
323
324 /*
325 * junk all pending output
326 */
327 IF_DRAIN(&ifp->if_snd);
328
329 if (ifp->if_flags & IFF_UP) {
330 s = splimp();
331 if_down(ifp);
332 splx(s);
333 }
334
335 if (ifp->if_flags & IFF_RUNNING) {
336 struct ifaddr *ifa;
337
338 s = splimp();
339 /* find internet addresses and delete routes */
340 TAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link)
341 if (ifa->ifa_addr->sa_family == AF_INET)
342 /* Unlocked read. */
343 rtinit(ifa, (int)RTM_DELETE,
344 tp->tun_flags & TUN_DSTADDR ? RTF_HOST : 0);
345 ifp->if_flags &= ~IFF_RUNNING;
346 splx(s);
347 }
348
349 funsetown(&tp->tun_sigio);
350 selwakeuppri(&tp->tun_rsel, PZERO + 1);
351 TUNDEBUG (ifp, "closed\n");
352 return (0);
353}
354
355static int
356tuninit(struct ifnet *ifp)
357{
358 struct tun_softc *tp = ifp->if_softc;
359 struct ifaddr *ifa;
360 int error = 0;
361
362 TUNDEBUG(ifp, "tuninit\n");
363
364 ifp->if_flags |= IFF_UP | IFF_RUNNING;
365 getmicrotime(&ifp->if_lastchange);
366
367 for (ifa = TAILQ_FIRST(&ifp->if_addrhead); ifa;
368 ifa = TAILQ_NEXT(ifa, ifa_link)) {
369 if (ifa->ifa_addr == NULL)
370 error = EFAULT;
371 /* XXX: Should maybe return straight off? */
372 else {
373#ifdef INET
374 if (ifa->ifa_addr->sa_family == AF_INET) {
375 struct sockaddr_in *si;
376
377 si = (struct sockaddr_in *)ifa->ifa_addr;
378 mtx_lock(&tp->tun_mtx);
379 if (si->sin_addr.s_addr)
380 tp->tun_flags |= TUN_IASET;
381
382 si = (struct sockaddr_in *)ifa->ifa_dstaddr;
383 if (si && si->sin_addr.s_addr)
384 tp->tun_flags |= TUN_DSTADDR;
385 mtx_unlock(&tp->tun_mtx);
386 }
387#endif
388 }
389 }
390 return (error);
391}
392
393/*
394 * Process an ioctl request.
395 */
396static int
397tunifioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
398{
399 struct ifreq *ifr = (struct ifreq *)data;
400 struct tun_softc *tp = ifp->if_softc;
401 struct ifstat *ifs;
402 int error = 0, s;
403
404 s = splimp();
405 switch(cmd) {
406 case SIOCGIFSTATUS:
407 ifs = (struct ifstat *)data;
408 mtx_lock(&tp->tun_mtx);
409 if (tp->tun_pid)
410 sprintf(ifs->ascii + strlen(ifs->ascii),
411 "\tOpened by PID %d\n", tp->tun_pid);
412 mtx_unlock(&tp->tun_mtx);
413 break;
414 case SIOCSIFADDR:
415 error = tuninit(ifp);
416 TUNDEBUG(ifp, "address set, error=%d\n", error);
417 break;
418 case SIOCSIFDSTADDR:
419 error = tuninit(ifp);
420 TUNDEBUG(ifp, "destination address set, error=%d\n", error);
421 break;
422 case SIOCSIFMTU:
423 ifp->if_mtu = ifr->ifr_mtu;
424 TUNDEBUG(ifp, "mtu set\n");
425 break;
426 case SIOCSIFFLAGS:
427 case SIOCADDMULTI:
428 case SIOCDELMULTI:
429 break;
430 default:
431 error = EINVAL;
432 }
433 splx(s);
434 return (error);
435}
436
437/*
438 * tunoutput - queue packets from higher level ready to put out.
439 */
440static int
441tunoutput(
442 struct ifnet *ifp,
443 struct mbuf *m0,
444 struct sockaddr *dst,
445 struct rtentry *rt)
446{
447 struct tun_softc *tp = ifp->if_softc;
448 u_short cached_tun_flags;
449 int error;
450
451 TUNDEBUG (ifp, "tunoutput\n");
452
453#ifdef MAC
454 error = mac_check_ifnet_transmit(ifp, m0);
455 if (error) {
456 m_freem(m0);
457 return (error);
458 }
459#endif
460
461 /* Could be unlocked read? */
462 mtx_lock(&tp->tun_mtx);
463 cached_tun_flags = tp->tun_flags;
464 mtx_unlock(&tp->tun_mtx);
465 if ((cached_tun_flags & TUN_READY) != TUN_READY) {
466 TUNDEBUG (ifp, "not ready 0%o\n", tp->tun_flags);
467 m_freem (m0);
468 return (EHOSTDOWN);
469 }
470
471 if ((ifp->if_flags & IFF_UP) != IFF_UP) {
472 m_freem (m0);
473 return (EHOSTDOWN);
474 }
475
476 /* BPF write needs to be handled specially */
477 if (dst->sa_family == AF_UNSPEC) {
478 dst->sa_family = *(mtod(m0, int *));
479 m0->m_len -= sizeof(int);
480 m0->m_pkthdr.len -= sizeof(int);
481 m0->m_data += sizeof(int);
482 }
483
484 if (ifp->if_bpf) {
485 uint32_t af = dst->sa_family;
486 bpf_mtap2(ifp->if_bpf, &af, sizeof(af), m0);
487 }
488
489 /* prepend sockaddr? this may abort if the mbuf allocation fails */
490 if (cached_tun_flags & TUN_LMODE) {
491 /* allocate space for sockaddr */
492 M_PREPEND(m0, dst->sa_len, M_DONTWAIT);
493
494 /* if allocation failed drop packet */
495 if (m0 == NULL) {
496 ifp->if_iqdrops++;
497 ifp->if_oerrors++;
498 return (ENOBUFS);
499 } else {
500 bcopy(dst, m0->m_data, dst->sa_len);
501 }
502 }
503
504 if (cached_tun_flags & TUN_IFHEAD) {
505 /* Prepend the address family */
506 M_PREPEND(m0, 4, M_DONTWAIT);
507
508 /* if allocation failed drop packet */
509 if (m0 == NULL) {
510 ifp->if_iqdrops++;
511 ifp->if_oerrors++;
512 return (ENOBUFS);
513 } else
514 *(u_int32_t *)m0->m_data = htonl(dst->sa_family);
515 } else {
516#ifdef INET
517 if (dst->sa_family != AF_INET)
518#endif
519 {
520 m_freem(m0);
521 return (EAFNOSUPPORT);
522 }
523 }
524
525 IFQ_HANDOFF(ifp, m0, error);
526 if (error) {
527 ifp->if_collisions++;
528 return (ENOBUFS);
529 }
530 ifp->if_opackets++;
531 return (0);
532}
533
534/*
535 * the cdevsw interface is now pretty minimal.
536 */
537static int
538tunioctl(struct cdev *dev, u_long cmd, caddr_t data, int flag, struct thread *td)
539{
540 int s;
541 int error;
542 struct tun_softc *tp = dev->si_drv1;
543 struct tuninfo *tunp;
544
545 switch (cmd) {
546 case TUNSIFINFO:
547 tunp = (struct tuninfo *)data;
548 if (tunp->mtu < IF_MINMTU)
549 return (EINVAL);
550 if (tp->tun_if.if_mtu != tunp->mtu
551 && (error = suser(td)) != 0)
552 return (error);
553 tp->tun_if.if_mtu = tunp->mtu;
554 tp->tun_if.if_type = tunp->type;
555 tp->tun_if.if_baudrate = tunp->baudrate;
556 break;
557 case TUNGIFINFO:
558 tunp = (struct tuninfo *)data;
559 tunp->mtu = tp->tun_if.if_mtu;
560 tunp->type = tp->tun_if.if_type;
561 tunp->baudrate = tp->tun_if.if_baudrate;
562 break;
563 case TUNSDEBUG:
564 tundebug = *(int *)data;
565 break;
566 case TUNGDEBUG:
567 *(int *)data = tundebug;
568 break;
569 case TUNSLMODE:
570 mtx_lock(&tp->tun_mtx);
571 if (*(int *)data) {
572 tp->tun_flags |= TUN_LMODE;
573 tp->tun_flags &= ~TUN_IFHEAD;
574 } else
575 tp->tun_flags &= ~TUN_LMODE;
576 mtx_unlock(&tp->tun_mtx);
577 break;
578 case TUNSIFHEAD:
579 mtx_lock(&tp->tun_mtx);
580 if (*(int *)data) {
581 tp->tun_flags |= TUN_IFHEAD;
582 tp->tun_flags &= ~TUN_LMODE;
583 } else
584 tp->tun_flags &= ~TUN_IFHEAD;
585 mtx_unlock(&tp->tun_mtx);
586 break;
587 case TUNGIFHEAD:
588 /* Could be unlocked read? */
589 mtx_lock(&tp->tun_mtx);
590 *(int *)data = (tp->tun_flags & TUN_IFHEAD) ? 1 : 0;
591 mtx_unlock(&tp->tun_mtx);
592 break;
593 case TUNSIFMODE:
594 /* deny this if UP */
595 if (tp->tun_if.if_flags & IFF_UP)
596 return(EBUSY);
597
598 switch (*(int *)data & ~IFF_MULTICAST) {
599 case IFF_POINTOPOINT:
600 case IFF_BROADCAST:
601 tp->tun_if.if_flags &=
602 ~(IFF_BROADCAST|IFF_POINTOPOINT|IFF_MULTICAST);
603 tp->tun_if.if_flags |= *(int *)data;
604 break;
605 default:
606 return(EINVAL);
607 }
608 break;
609 case TUNSIFPID:
610 mtx_lock(&tp->tun_mtx);
611 tp->tun_pid = curthread->td_proc->p_pid;
612 mtx_unlock(&tp->tun_mtx);
613 break;
614 case FIONBIO:
615 break;
616 case FIOASYNC:
617 mtx_lock(&tp->tun_mtx);
618 if (*(int *)data)
619 tp->tun_flags |= TUN_ASYNC;
620 else
621 tp->tun_flags &= ~TUN_ASYNC;
622 mtx_unlock(&tp->tun_mtx);
623 break;
624 case FIONREAD:
625 s = splimp();
626 if (tp->tun_if.if_snd.ifq_head) {
627 struct mbuf *mb = tp->tun_if.if_snd.ifq_head;
628 for( *(int *)data = 0; mb != 0; mb = mb->m_next)
629 *(int *)data += mb->m_len;
630 } else
631 *(int *)data = 0;
632 splx(s);
633 break;
634 case FIOSETOWN:
635 return (fsetown(*(int *)data, &tp->tun_sigio));
636
637 case FIOGETOWN:
638 *(int *)data = fgetown(&tp->tun_sigio);
639 return (0);
640
641 /* This is deprecated, FIOSETOWN should be used instead. */
642 case TIOCSPGRP:
643 return (fsetown(-(*(int *)data), &tp->tun_sigio));
644
645 /* This is deprecated, FIOGETOWN should be used instead. */
646 case TIOCGPGRP:
647 *(int *)data = -fgetown(&tp->tun_sigio);
648 return (0);
649
650 default:
651 return (ENOTTY);
652 }
653 return (0);
654}
655
656/*
657 * The cdevsw read interface - reads a packet at a time, or at
658 * least as much of a packet as can be read.
659 */
660static int
661tunread(struct cdev *dev, struct uio *uio, int flag)
662{
663 struct tun_softc *tp = dev->si_drv1;
664 struct ifnet *ifp = &tp->tun_if;
665 struct mbuf *m;
666 int error=0, len, s;
667
668 TUNDEBUG (ifp, "read\n");
669 mtx_lock(&tp->tun_mtx);
670 if ((tp->tun_flags & TUN_READY) != TUN_READY) {
671 mtx_unlock(&tp->tun_mtx);
672 TUNDEBUG (ifp, "not ready 0%o\n", tp->tun_flags);
673 return (EHOSTDOWN);
674 }
675
676 tp->tun_flags &= ~TUN_RWAIT;
677 mtx_unlock(&tp->tun_mtx);
678
679 s = splimp();
680 do {
681 IF_DEQUEUE(&ifp->if_snd, m);
682 if (m == NULL) {
683 if (flag & IO_NDELAY) {
684 splx(s);
685 return (EWOULDBLOCK);
686 }
687 mtx_lock(&tp->tun_mtx);
688 tp->tun_flags |= TUN_RWAIT;
689 mtx_unlock(&tp->tun_mtx);
690 if((error = tsleep(tp, PCATCH | (PZERO + 1),
691 "tunread", 0)) != 0) {
692 splx(s);
693 return (error);
694 }
695 }
696 } while (m == NULL);
697 splx(s);
698
699 while (m && uio->uio_resid > 0 && error == 0) {
700 len = min(uio->uio_resid, m->m_len);
701 if (len != 0)
702 error = uiomove(mtod(m, void *), len, uio);
703 m = m_free(m);
704 }
705
706 if (m) {
707 TUNDEBUG(ifp, "Dropping mbuf\n");
708 m_freem(m);
709 }
710 return (error);
711}
712
713/*
714 * the cdevsw write interface - an atomic write is a packet - or else!
715 */
716static int
717tunwrite(struct cdev *dev, struct uio *uio, int flag)
718{
719 struct tun_softc *tp = dev->si_drv1;
720 struct ifnet *ifp = &tp->tun_if;
721 struct mbuf *top, **mp, *m;
722 int error=0, tlen, mlen;
723 uint32_t family;
724 int isr;
725
726 TUNDEBUG(ifp, "tunwrite\n");
727
728 if ((ifp->if_flags & IFF_UP) != IFF_UP)
729 /* ignore silently */
730 return (0);
731
732 if (uio->uio_resid == 0)
733 return (0);
734
735 if (uio->uio_resid < 0 || uio->uio_resid > TUNMRU) {
736 TUNDEBUG(ifp, "len=%d!\n", uio->uio_resid);
737 return (EIO);
738 }
739 tlen = uio->uio_resid;
740
741 /* get a header mbuf */
742 MGETHDR(m, M_DONTWAIT, MT_DATA);
743 if (m == NULL)
744 return (ENOBUFS);
745 mlen = MHLEN;
746
747 top = 0;
748 mp = ⊤
749 while (error == 0 && uio->uio_resid > 0) {
750 m->m_len = min(mlen, uio->uio_resid);
751 error = uiomove(mtod(m, void *), m->m_len, uio);
752 *mp = m;
753 mp = &m->m_next;
754 if (uio->uio_resid > 0) {
755 MGET (m, M_DONTWAIT, MT_DATA);
756 if (m == 0) {
757 error = ENOBUFS;
758 break;
759 }
760 mlen = MLEN;
761 }
762 }
763 if (error) {
764 if (top)
765 m_freem (top);
766 ifp->if_ierrors++;
767 return (error);
768 }
769
770 top->m_pkthdr.len = tlen;
771 top->m_pkthdr.rcvif = ifp;
772#ifdef MAC
773 mac_create_mbuf_from_ifnet(ifp, top);
774#endif
775
776 /* Could be unlocked read? */
777 mtx_lock(&tp->tun_mtx);
778 if (tp->tun_flags & TUN_IFHEAD) {
779 mtx_unlock(&tp->tun_mtx);
780 if (top->m_len < sizeof(family) &&
781 (top = m_pullup(top, sizeof(family))) == NULL)
782 return (ENOBUFS);
783 family = ntohl(*mtod(top, u_int32_t *));
784 m_adj(top, sizeof(family));
785 } else {
786 mtx_unlock(&tp->tun_mtx);
787 family = AF_INET;
788 }
789
790 BPF_MTAP2(ifp, &family, sizeof(family), top);
791
792 switch (family) {
793#ifdef INET
794 case AF_INET:
795 isr = NETISR_IP;
796 break;
797#endif
798#ifdef INET6
799 case AF_INET6:
800 isr = NETISR_IPV6;
801 break;
802#endif
803#ifdef IPX
804 case AF_IPX:
805 isr = NETISR_IPX;
806 break;
807#endif
808#ifdef NETATALK
809 case AF_APPLETALK:
810 isr = NETISR_ATALK2;
811 break;
812#endif
813 default:
814 m_freem(m);
815 return (EAFNOSUPPORT);
816 }
817 /* First chunk of an mbuf contains good junk */
818 if (harvest.point_to_point)
819 random_harvest(m, 16, 3, 0, RANDOM_NET);
820 ifp->if_ibytes += top->m_pkthdr.len;
821 ifp->if_ipackets++;
822 netisr_dispatch(isr, top);
823 return (0);
824}
825
826/*
827 * tunpoll - the poll interface, this is only useful on reads
828 * really. The write detect always returns true, write never blocks
829 * anyway, it either accepts the packet or drops it.
830 */
831static int
832tunpoll(struct cdev *dev, int events, struct thread *td)
833{
834 int s;
835 struct tun_softc *tp = dev->si_drv1;
836 struct ifnet *ifp = &tp->tun_if;
837 int revents = 0;
838
839 s = splimp();
840 TUNDEBUG(ifp, "tunpoll\n");
841
842 if (events & (POLLIN | POLLRDNORM)) {
843 if (ifp->if_snd.ifq_len > 0) {
844 TUNDEBUG(ifp, "tunpoll q=%d\n", ifp->if_snd.ifq_len);
845 revents |= events & (POLLIN | POLLRDNORM);
846 } else {
847 TUNDEBUG(ifp, "tunpoll waiting\n");
848 selrecord(td, &tp->tun_rsel);
849 }
850 }
851 if (events & (POLLOUT | POLLWRNORM))
852 revents |= events & (POLLOUT | POLLWRNORM);
853
854 splx(s);
855 return (revents);
856}
|