1/*-
2 * SPDX-License-Identifier: BSD-4-Clause
3 *
4 * Copyright (c) 1995 Gordon Ross, Adam Glass
5 * Copyright (c) 1992 Regents of the University of California.
6 * All rights reserved.
7 *
8 * This software was developed by the Computer Systems Engineering group
9 * at Lawrence Berkeley Laboratory under DARPA contract BG 91-66 and
10 * contributed to Berkeley.
11 *
12 * Redistribution and use in source and binary forms, with or without
13 * modification, are permitted provided that the following conditions
14 * are met:
15 * 1. Redistributions of source code must retain the above copyright
16 *    notice, this list of conditions and the following disclaimer.
17 * 2. Redistributions in binary form must reproduce the above copyright
18 *    notice, this list of conditions and the following disclaimer in the
19 *    documentation and/or other materials provided with the distribution.
20 * 3. All advertising materials mentioning features or use of this software
21 *    must display the following acknowledgement:
22 *	This product includes software developed by the University of
23 *	California, Lawrence Berkeley Laboratory and its contributors.
24 * 4. Neither the name of the University nor the names of its contributors
25 *    may be used to endorse or promote products derived from this software
26 *    without specific prior written permission.
27 *
28 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
29 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
30 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
31 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
32 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
33 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
34 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
35 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
36 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
37 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
38 * SUCH DAMAGE.
39 *
40 * based on:
41 *      nfs/krpc_subr.c
42 *	$NetBSD: krpc_subr.c,v 1.10 1995/08/08 20:43:43 gwr Exp $
43 */
44
45#define IN_HISTORICAL_NETS		/* include class masks */
46
47#include <sys/cdefs.h>
48#include "opt_bootp.h"
49#include "opt_nfs.h"
50#include "opt_rootdevname.h"
51
52#include <sys/param.h>
53#include <sys/systm.h>
54#include <sys/endian.h>
55#include <sys/jail.h>
56#include <sys/kernel.h>
57#include <sys/sockio.h>
58#include <sys/malloc.h>
59#include <sys/mount.h>
60#include <sys/mbuf.h>
61#include <sys/proc.h>
62#include <sys/reboot.h>
63#include <sys/socket.h>
64#include <sys/socketvar.h>
65#include <sys/sysctl.h>
66#include <sys/uio.h>
67
68#include <net/if.h>
69#include <net/if_var.h>
70#include <net/route.h>
71#include <net/route/route_ctl.h>
72
73#include <netinet/in.h>
74#include <netinet/in_var.h>
75#include <net/if_types.h>
76#include <net/if_dl.h>
77#include <net/vnet.h>
78
79#include <nfs/nfsproto.h>
80#include <nfsclient/nfs.h>
81#include <nfs/nfsdiskless.h>
82#include <nfs/krpc.h>
83#include <nfs/xdr_subs.h>
84
85#define BOOTP_MIN_LEN		300	/* Minimum size of bootp udp packet */
86
87#ifndef BOOTP_SETTLE_DELAY
88#define BOOTP_SETTLE_DELAY 3
89#endif
90
91/*
92 * Wait 10 seconds for interface appearance
93 * USB ethernet adapters might require some time to pop up
94 */
95#ifndef	BOOTP_IFACE_WAIT_TIMEOUT
96#define	BOOTP_IFACE_WAIT_TIMEOUT	10
97#endif
98
99/*
100 * What is the longest we will wait before re-sending a request?
101 * Note this is also the frequency of "RPC timeout" messages.
102 * The re-send loop count sup linearly to this maximum, so the
103 * first complaint will happen after (1+2+3+4+5)=15 seconds.
104 */
105#define	MAX_RESEND_DELAY 5	/* seconds */
106
107/* Definitions from RFC951 */
108struct bootp_packet {
109	u_int8_t op;
110	u_int8_t htype;
111	u_int8_t hlen;
112	u_int8_t hops;
113	u_int32_t xid;
114	u_int16_t secs;
115	u_int16_t flags;
116	struct in_addr ciaddr;
117	struct in_addr yiaddr;
118	struct in_addr siaddr;
119	struct in_addr giaddr;
120	unsigned char chaddr[16];
121	char sname[64];
122	char file[128];
123	unsigned char vend[1222];
124};
125
126struct bootpc_ifcontext {
127	STAILQ_ENTRY(bootpc_ifcontext) next;
128	struct bootp_packet call;
129	struct bootp_packet reply;
130	int replylen;
131	int overload;
132	union {
133		struct ifreq _ifreq;
134		struct in_aliasreq _in_alias_req;
135	} _req;
136#define	ireq	_req._ifreq
137#define	iareq	_req._in_alias_req
138	if_t ifp;
139	struct sockaddr_dl *sdl;
140	struct sockaddr_in myaddr;
141	struct sockaddr_in netmask;
142	struct sockaddr_in gw;
143	int gotgw;
144	int gotnetmask;
145	int gotrootpath;
146	int outstanding;
147	int sentmsg;
148	u_int32_t xid;
149	enum {
150		IF_BOOTP_UNRESOLVED,
151		IF_BOOTP_RESOLVED,
152		IF_BOOTP_FAILED,
153		IF_DHCP_UNRESOLVED,
154		IF_DHCP_OFFERED,
155		IF_DHCP_RESOLVED,
156		IF_DHCP_FAILED,
157	} state;
158	int dhcpquerytype;		/* dhcp type sent */
159	struct in_addr dhcpserver;
160	int gotdhcpserver;
161	uint16_t mtu;
162};
163
164#define TAG_MAXLEN 1024
165struct bootpc_tagcontext {
166	char buf[TAG_MAXLEN + 1];
167	int overload;
168	int badopt;
169	int badtag;
170	int foundopt;
171	int taglen;
172};
173
174struct bootpc_globalcontext {
175	STAILQ_HEAD(, bootpc_ifcontext) interfaces;
176	u_int32_t xid;
177	int any_root_overrides;
178	int gotrootpath;
179	int gotgw;
180	int ifnum;
181	int secs;
182	int starttime;
183	struct bootp_packet reply;
184	int replylen;
185	struct bootpc_ifcontext *setrootfs;
186	struct bootpc_ifcontext *sethostname;
187	struct bootpc_tagcontext tmptag;
188	struct bootpc_tagcontext tag;
189};
190
191#define IPPORT_BOOTPC 68
192#define IPPORT_BOOTPS 67
193
194#define BOOTP_REQUEST 1
195#define BOOTP_REPLY 2
196
197/* Common tags */
198#define TAG_PAD		  0  /* Pad option, implicit length 1 */
199#define TAG_SUBNETMASK	  1  /* RFC 950 subnet mask */
200#define TAG_ROUTERS	  3  /* Routers (in order of preference) */
201#define TAG_HOSTNAME	 12  /* Client host name */
202#define TAG_ROOT	 17  /* Root path */
203#define TAG_INTF_MTU	 26  /* Interface MTU Size (RFC2132) */
204
205/* DHCP specific tags */
206#define TAG_OVERLOAD	 52  /* Option Overload */
207#define TAG_MAXMSGSIZE   57  /* Maximum DHCP Message Size */
208
209#define TAG_END		255  /* End Option (i.e. no more options) */
210
211/* Overload values */
212#define OVERLOAD_FILE     1
213#define OVERLOAD_SNAME    2
214
215/* Site specific tags: */
216#define TAG_ROOTOPTS	130
217#define TAG_COOKIE	134	/* ascii info for userland, via sysctl */
218
219#define TAG_DHCP_MSGTYPE 53
220#define TAG_DHCP_REQ_ADDR 50
221#define TAG_DHCP_SERVERID 54
222#define TAG_DHCP_LEASETIME 51
223
224#define TAG_VENDOR_INDENTIFIER 60
225
226#define DHCP_NOMSG    0
227#define DHCP_DISCOVER 1
228#define DHCP_OFFER    2
229#define DHCP_REQUEST  3
230#define DHCP_ACK      5
231
232/* NFS read/write block size */
233#ifndef BOOTP_BLOCKSIZE
234#define	BOOTP_BLOCKSIZE	8192
235#endif
236
237static char bootp_cookie[128];
238static struct socket *bootp_so;
239SYSCTL_STRING(_kern, OID_AUTO, bootp_cookie, CTLFLAG_RD,
240	bootp_cookie, 0, "Cookie (T134) supplied by bootp server");
241
242/* mountd RPC */
243static int	md_mount(struct sockaddr_in *mdsin, char *path, u_char *fhp,
244		    int *fhsizep, struct nfs_args *args, struct thread *td);
245static int	setfs(struct sockaddr_in *addr, char *path, char *p,
246		    const struct in_addr *siaddr);
247static int	getdec(char **ptr);
248static int	getip(char **ptr, struct in_addr *ip);
249static void	mountopts(struct nfs_args *args, char *p);
250static int	xdr_opaque_decode(struct mbuf **ptr, u_char *buf, int len);
251static int	xdr_int_decode(struct mbuf **ptr, int *iptr);
252static void	print_in_addr(struct in_addr addr);
253static void	print_sin_addr(struct sockaddr_in *addr);
254static void	clear_sinaddr(struct sockaddr_in *sin);
255static void	allocifctx(struct bootpc_globalcontext *gctx);
256static void	bootpc_compose_query(struct bootpc_ifcontext *ifctx,
257		    struct thread *td);
258static unsigned char *bootpc_tag(struct bootpc_tagcontext *tctx,
259		    struct bootp_packet *bp, int len, int tag);
260static void bootpc_tag_helper(struct bootpc_tagcontext *tctx,
261		    unsigned char *start, int len, int tag);
262
263#ifdef BOOTP_DEBUG
264void bootpboot_p_iflist(void);
265#endif
266
267static int	bootpc_call(struct bootpc_globalcontext *gctx,
268		    struct thread *td);
269
270static void	bootpc_fakeup_interface(struct bootpc_ifcontext *ifctx,
271		    struct thread *td);
272
273static void	bootpc_adjust_interface(struct bootpc_ifcontext *ifctx,
274		    struct bootpc_globalcontext *gctx, struct thread *td);
275
276static void	bootpc_decode_reply(struct nfsv3_diskless *nd,
277		    struct bootpc_ifcontext *ifctx,
278		    struct bootpc_globalcontext *gctx);
279
280static int	bootpc_received(struct bootpc_globalcontext *gctx,
281		    struct bootpc_ifcontext *ifctx);
282
283static __inline int bootpc_ifctx_isresolved(struct bootpc_ifcontext *ifctx);
284static __inline int bootpc_ifctx_isunresolved(struct bootpc_ifcontext *ifctx);
285static __inline int bootpc_ifctx_isfailed(struct bootpc_ifcontext *ifctx);
286
287/*
288 * In order to have multiple active interfaces with address 0.0.0.0
289 * and be able to send data to a selected interface, we first set
290 * mask to /8 on all interfaces, and temporarily set it to /0 when
291 * doing sosend().
292 */
293
294#ifdef BOOTP_DEBUG
295static u_int
296bootpboot_p_ifa(void *ifp, struct ifaddr *ifa, u_int count __unused)
297{
298
299	printf("%s flags %x, addr ",
300	       if_name(ifp), if_getflags(ifp));
301	print_sin_addr((struct sockaddr_in *) ifa->ifa_addr);
302	printf(", broadcast ");
303	print_sin_addr((struct sockaddr_in *) ifa->ifa_dstaddr);
304	printf(", netmask ");
305	print_sin_addr((struct sockaddr_in *) ifa->ifa_netmask);
306	printf("\n");
307
308	return (0);
309}
310
311void
312bootpboot_p_iflist(void)
313{
314	struct epoch_tracker et;
315	struct if_iter iter;
316	if_t ifp;
317
318	printf("Interface list:\n");
319	NET_EPOCH_ENTER(et);
320	for (ifp = if_iter_start(&iter); ifp != NULL; ifp = if_iter_next(&iter))
321		if_foreach_addr_type(ifp, AF_INET, bootpboot_p_ifa, ifp);
322	if_iter_finish(&iter);
323	NET_EPOCH_EXIT(et);
324}
325#endif /* defined(BOOTP_DEBUG) */
326
327static void
328clear_sinaddr(struct sockaddr_in *sin)
329{
330
331	bzero(sin, sizeof(*sin));
332	sin->sin_len = sizeof(*sin);
333	sin->sin_family = AF_INET;
334	sin->sin_addr.s_addr = INADDR_ANY; /* XXX: htonl(INAADDR_ANY) ? */
335	sin->sin_port = 0;
336}
337
338static void
339allocifctx(struct bootpc_globalcontext *gctx)
340{
341	struct bootpc_ifcontext *ifctx;
342
343	ifctx = malloc(sizeof(*ifctx), M_TEMP, M_WAITOK | M_ZERO);
344	ifctx->xid = gctx->xid;
345#ifdef BOOTP_NO_DHCP
346	ifctx->state = IF_BOOTP_UNRESOLVED;
347#else
348	ifctx->state = IF_DHCP_UNRESOLVED;
349#endif
350	gctx->xid += 0x100;
351	STAILQ_INSERT_TAIL(&gctx->interfaces, ifctx, next);
352}
353
354static __inline int
355bootpc_ifctx_isresolved(struct bootpc_ifcontext *ifctx)
356{
357
358	if (ifctx->state == IF_BOOTP_RESOLVED ||
359	    ifctx->state == IF_DHCP_RESOLVED)
360		return 1;
361	return 0;
362}
363
364static __inline int
365bootpc_ifctx_isunresolved(struct bootpc_ifcontext *ifctx)
366{
367
368	if (ifctx->state == IF_BOOTP_UNRESOLVED ||
369	    ifctx->state == IF_DHCP_UNRESOLVED)
370		return 1;
371	return 0;
372}
373
374static __inline int
375bootpc_ifctx_isfailed(struct bootpc_ifcontext *ifctx)
376{
377
378	if (ifctx->state == IF_BOOTP_FAILED ||
379	    ifctx->state == IF_DHCP_FAILED)
380		return 1;
381	return 0;
382}
383
384static int
385bootpc_received(struct bootpc_globalcontext *gctx,
386    struct bootpc_ifcontext *ifctx)
387{
388	unsigned char dhcpreplytype;
389	char *p;
390
391	/*
392	 * Need timeout for fallback to less
393	 * desirable alternative.
394	 */
395
396	/* This call used for the side effect (badopt flag) */
397	(void) bootpc_tag(&gctx->tmptag, &gctx->reply,
398			  gctx->replylen,
399			  TAG_END);
400
401	/* If packet is invalid, ignore it */
402	if (gctx->tmptag.badopt != 0)
403		return 0;
404
405	p = bootpc_tag(&gctx->tmptag, &gctx->reply,
406		       gctx->replylen, TAG_DHCP_MSGTYPE);
407	if (p != NULL)
408		dhcpreplytype = *p;
409	else
410		dhcpreplytype = DHCP_NOMSG;
411
412	switch (ifctx->dhcpquerytype) {
413	case DHCP_DISCOVER:
414		if (dhcpreplytype != DHCP_OFFER 	/* Normal DHCP offer */
415#ifndef BOOTP_FORCE_DHCP
416		    && dhcpreplytype != DHCP_NOMSG	/* Fallback to BOOTP */
417#endif
418			)
419			return 0;
420		break;
421	case DHCP_REQUEST:
422		if (dhcpreplytype != DHCP_ACK)
423			return 0;
424	case DHCP_NOMSG:
425		break;
426	}
427
428	/* Ignore packet unless it gives us a root tag we didn't have */
429
430	if ((ifctx->state == IF_BOOTP_RESOLVED ||
431	     (ifctx->dhcpquerytype == DHCP_DISCOVER &&
432	      (ifctx->state == IF_DHCP_OFFERED ||
433	       ifctx->state == IF_DHCP_RESOLVED))) &&
434	    (bootpc_tag(&gctx->tmptag, &ifctx->reply,
435			ifctx->replylen,
436			TAG_ROOT) != NULL ||
437	     bootpc_tag(&gctx->tmptag, &gctx->reply,
438			gctx->replylen,
439			TAG_ROOT) == NULL))
440		return 0;
441
442	bcopy(&gctx->reply, &ifctx->reply, gctx->replylen);
443	ifctx->replylen = gctx->replylen;
444
445	/* XXX: Only reset if 'perfect' response */
446	if (ifctx->state == IF_BOOTP_UNRESOLVED)
447		ifctx->state = IF_BOOTP_RESOLVED;
448	else if (ifctx->state == IF_DHCP_UNRESOLVED &&
449		 ifctx->dhcpquerytype == DHCP_DISCOVER) {
450		if (dhcpreplytype == DHCP_OFFER)
451			ifctx->state = IF_DHCP_OFFERED;
452		else
453			ifctx->state = IF_BOOTP_RESOLVED;	/* Fallback */
454	} else if (ifctx->state == IF_DHCP_OFFERED &&
455		   ifctx->dhcpquerytype == DHCP_REQUEST)
456		ifctx->state = IF_DHCP_RESOLVED;
457
458	if (ifctx->dhcpquerytype == DHCP_DISCOVER &&
459	    ifctx->state != IF_BOOTP_RESOLVED) {
460		p = bootpc_tag(&gctx->tmptag, &ifctx->reply,
461			       ifctx->replylen, TAG_DHCP_SERVERID);
462		if (p != NULL && gctx->tmptag.taglen == 4) {
463			memcpy(&ifctx->dhcpserver, p, 4);
464			ifctx->gotdhcpserver = 1;
465		} else
466			ifctx->gotdhcpserver = 0;
467		return 1;
468	}
469
470	ifctx->gotrootpath = (bootpc_tag(&gctx->tmptag, &ifctx->reply,
471					 ifctx->replylen,
472					 TAG_ROOT) != NULL);
473	ifctx->gotgw = (bootpc_tag(&gctx->tmptag, &ifctx->reply,
474				   ifctx->replylen,
475				   TAG_ROUTERS) != NULL);
476	ifctx->gotnetmask = (bootpc_tag(&gctx->tmptag, &ifctx->reply,
477					ifctx->replylen,
478					TAG_SUBNETMASK) != NULL);
479	return 1;
480}
481
482static int
483bootpc_call(struct bootpc_globalcontext *gctx, struct thread *td)
484{
485	struct sockaddr_in *sin, dst;
486	struct uio auio;
487	struct sockopt sopt;
488	struct iovec aio;
489	int error, on, rcvflg, timo, len;
490	time_t atimo;
491	time_t rtimo;
492	struct timeval tv;
493	struct bootpc_ifcontext *ifctx;
494	int outstanding;
495	int gotrootpath;
496	int retry;
497	const char *s;
498
499	tv.tv_sec = 1;
500	tv.tv_usec = 0;
501	bzero(&sopt, sizeof(sopt));
502	sopt.sopt_dir = SOPT_SET;
503	sopt.sopt_level = SOL_SOCKET;
504	sopt.sopt_name = SO_RCVTIMEO;
505	sopt.sopt_val = &tv;
506	sopt.sopt_valsize = sizeof tv;
507
508	error = sosetopt(bootp_so, &sopt);
509	if (error != 0)
510		goto out;
511
512	/*
513	 * Enable broadcast.
514	 */
515	on = 1;
516	sopt.sopt_name = SO_BROADCAST;
517	sopt.sopt_val = &on;
518	sopt.sopt_valsize = sizeof on;
519
520	error = sosetopt(bootp_so, &sopt);
521	if (error != 0)
522		goto out;
523
524	/*
525	 * Disable routing.
526	 */
527
528	on = 1;
529	sopt.sopt_name = SO_DONTROUTE;
530	sopt.sopt_val = &on;
531	sopt.sopt_valsize = sizeof on;
532
533	error = sosetopt(bootp_so, &sopt);
534	if (error != 0)
535		goto out;
536
537	/*
538	 * Bind the local endpoint to a bootp client port.
539	 */
540	sin = &dst;
541	clear_sinaddr(sin);
542	sin->sin_port = htons(IPPORT_BOOTPC);
543	error = sobind(bootp_so, (struct sockaddr *)sin, td);
544	if (error != 0) {
545		printf("bind failed\n");
546		goto out;
547	}
548
549	/*
550	 * Setup socket address for the server.
551	 */
552	sin = &dst;
553	clear_sinaddr(sin);
554	sin->sin_addr.s_addr = INADDR_BROADCAST;
555	sin->sin_port = htons(IPPORT_BOOTPS);
556
557	/*
558	 * Send it, repeatedly, until a reply is received,
559	 * but delay each re-send by an increasing amount.
560	 * If the delay hits the maximum, start complaining.
561	 */
562	timo = 0;
563	rtimo = 0;
564	for (;;) {
565		outstanding = 0;
566		gotrootpath = 0;
567
568		STAILQ_FOREACH(ifctx, &gctx->interfaces, next) {
569			if (bootpc_ifctx_isresolved(ifctx) != 0 &&
570			    bootpc_tag(&gctx->tmptag, &ifctx->reply,
571				       ifctx->replylen,
572				       TAG_ROOT) != NULL)
573				gotrootpath = 1;
574		}
575
576		STAILQ_FOREACH(ifctx, &gctx->interfaces, next) {
577			struct in_aliasreq *ifra = &ifctx->iareq;
578			sin = (struct sockaddr_in *)&ifra->ifra_mask;
579
580			ifctx->outstanding = 0;
581			if (bootpc_ifctx_isresolved(ifctx)  != 0 &&
582			    gotrootpath != 0) {
583				continue;
584			}
585			if (bootpc_ifctx_isfailed(ifctx) != 0)
586				continue;
587
588			outstanding++;
589			ifctx->outstanding = 1;
590
591			/* Proceed to next step in DHCP negotiation */
592			if ((ifctx->state == IF_DHCP_OFFERED &&
593			     ifctx->dhcpquerytype != DHCP_REQUEST) ||
594			    (ifctx->state == IF_DHCP_UNRESOLVED &&
595			     ifctx->dhcpquerytype != DHCP_DISCOVER) ||
596			    (ifctx->state == IF_BOOTP_UNRESOLVED &&
597			     ifctx->dhcpquerytype != DHCP_NOMSG)) {
598				ifctx->sentmsg = 0;
599				bootpc_compose_query(ifctx, td);
600			}
601
602			/* Send BOOTP request (or re-send). */
603
604			if (ifctx->sentmsg == 0) {
605				switch(ifctx->dhcpquerytype) {
606				case DHCP_DISCOVER:
607					s = "DHCP Discover";
608					break;
609				case DHCP_REQUEST:
610					s = "DHCP Request";
611					break;
612				case DHCP_NOMSG:
613				default:
614					s = "BOOTP Query";
615					break;
616				}
617				printf("Sending %s packet from "
618				       "interface %s (%*D)\n",
619				       s,
620				       ifctx->ireq.ifr_name,
621				       ifctx->sdl->sdl_alen,
622				       (unsigned char *) LLADDR(ifctx->sdl),
623				       ":");
624				ifctx->sentmsg = 1;
625			}
626
627			aio.iov_base = (caddr_t) &ifctx->call;
628			aio.iov_len = sizeof(ifctx->call);
629
630			auio.uio_iov = &aio;
631			auio.uio_iovcnt = 1;
632			auio.uio_segflg = UIO_SYSSPACE;
633			auio.uio_rw = UIO_WRITE;
634			auio.uio_offset = 0;
635			auio.uio_resid = sizeof(ifctx->call);
636			auio.uio_td = td;
637
638			/* Set netmask to 0.0.0.0 */
639			clear_sinaddr(sin);
640			error = ifioctl(bootp_so, SIOCAIFADDR, (caddr_t)ifra,
641			    td);
642			if (error != 0)
643				panic("%s: SIOCAIFADDR, error=%d", __func__,
644				    error);
645
646			error = sosend(bootp_so, (struct sockaddr *) &dst,
647				       &auio, NULL, NULL, 0, td);
648			if (error != 0)
649				printf("%s: sosend: %d state %08x\n", __func__,
650				    error, (int )bootp_so->so_state);
651
652			/* Set netmask to 255.0.0.0 */
653			sin->sin_addr.s_addr = htonl(0xff000000);
654			error = ifioctl(bootp_so, SIOCAIFADDR, (caddr_t)ifra,
655			    td);
656			if (error != 0)
657				panic("%s: SIOCAIFADDR, error=%d", __func__,
658				    error);
659		}
660
661		if (outstanding == 0 &&
662		    (rtimo == 0 || time_second >= rtimo)) {
663			error = 0;
664			goto out;
665		}
666
667		/* Determine new timeout. */
668		if (timo < MAX_RESEND_DELAY)
669			timo++;
670		else {
671			printf("DHCP/BOOTP timeout for server ");
672			print_sin_addr(&dst);
673			printf("\n");
674		}
675
676		/*
677		 * Wait for up to timo seconds for a reply.
678		 * The socket receive timeout was set to 1 second.
679		 */
680		atimo = timo + time_second;
681		while (time_second < atimo) {
682			aio.iov_base = (caddr_t) &gctx->reply;
683			aio.iov_len = sizeof(gctx->reply);
684
685			auio.uio_iov = &aio;
686			auio.uio_iovcnt = 1;
687			auio.uio_segflg = UIO_SYSSPACE;
688			auio.uio_rw = UIO_READ;
689			auio.uio_offset = 0;
690			auio.uio_resid = sizeof(gctx->reply);
691			auio.uio_td = td;
692
693			rcvflg = 0;
694			error = soreceive(bootp_so, NULL, &auio,
695					  NULL, NULL, &rcvflg);
696			gctx->secs = time_second - gctx->starttime;
697			STAILQ_FOREACH(ifctx, &gctx->interfaces, next) {
698				if (bootpc_ifctx_isresolved(ifctx) != 0 ||
699				    bootpc_ifctx_isfailed(ifctx) != 0)
700					continue;
701
702				ifctx->call.secs = htons(gctx->secs);
703			}
704			if (error == EWOULDBLOCK)
705				continue;
706			if (error != 0)
707				goto out;
708			len = sizeof(gctx->reply) - auio.uio_resid;
709
710			/* Do we have the required number of bytes ? */
711			if (len < BOOTP_MIN_LEN)
712				continue;
713			gctx->replylen = len;
714
715			/* Is it a reply? */
716			if (gctx->reply.op != BOOTP_REPLY)
717				continue;
718
719			/* Is this an answer to our query */
720			STAILQ_FOREACH(ifctx, &gctx->interfaces, next) {
721				if (gctx->reply.xid != ifctx->call.xid)
722					continue;
723
724				/* Same HW address size ? */
725				if (gctx->reply.hlen != ifctx->call.hlen)
726					continue;
727
728				/* Correct HW address ? */
729				if (bcmp(gctx->reply.chaddr,
730					 ifctx->call.chaddr,
731					 ifctx->call.hlen) != 0)
732					continue;
733
734				break;
735			}
736
737			if (ifctx != NULL) {
738				s =  bootpc_tag(&gctx->tmptag,
739						&gctx->reply,
740						gctx->replylen,
741						TAG_DHCP_MSGTYPE);
742				if (s != NULL) {
743					switch (*s) {
744					case DHCP_OFFER:
745						s = "DHCP Offer";
746						break;
747					case DHCP_ACK:
748						s = "DHCP Ack";
749						break;
750					default:
751						s = "DHCP (unexpected)";
752						break;
753					}
754				} else
755					s = "BOOTP Reply";
756
757				printf("Received %s packet"
758				       " on %s from ",
759				       s,
760				       ifctx->ireq.ifr_name);
761				print_in_addr(gctx->reply.siaddr);
762				if (gctx->reply.giaddr.s_addr !=
763				    htonl(INADDR_ANY)) {
764					printf(" via ");
765					print_in_addr(gctx->reply.giaddr);
766				}
767				if (bootpc_received(gctx, ifctx) != 0) {
768					printf(" (accepted)");
769					if (ifctx->outstanding) {
770						ifctx->outstanding = 0;
771						outstanding--;
772					}
773					/* Network settle delay */
774					if (outstanding == 0)
775						atimo = time_second +
776							BOOTP_SETTLE_DELAY;
777				} else
778					printf(" (ignored)");
779				if (ifctx->gotrootpath ||
780				    gctx->any_root_overrides) {
781					gotrootpath = 1;
782					rtimo = time_second +
783						BOOTP_SETTLE_DELAY;
784					if (ifctx->gotrootpath)
785						printf(" (got root path)");
786				}
787				printf("\n");
788			}
789		} /* while secs */
790#ifdef BOOTP_TIMEOUT
791		if (gctx->secs > BOOTP_TIMEOUT && BOOTP_TIMEOUT > 0)
792			break;
793#endif
794		/* Force a retry if halfway in DHCP negotiation */
795		retry = 0;
796		STAILQ_FOREACH(ifctx, &gctx->interfaces, next)
797			if (ifctx->state == IF_DHCP_OFFERED) {
798				if (ifctx->dhcpquerytype == DHCP_DISCOVER)
799					retry = 1;
800				else
801					ifctx->state = IF_DHCP_UNRESOLVED;
802			}
803
804		if (retry != 0)
805			continue;
806
807		if (gotrootpath != 0) {
808			gctx->gotrootpath = gotrootpath;
809			if (rtimo != 0 && time_second >= rtimo)
810				break;
811		}
812	} /* forever send/receive */
813
814	/*
815	 * XXX: These are errors of varying seriousness being silently
816	 * ignored
817	 */
818
819	STAILQ_FOREACH(ifctx, &gctx->interfaces, next)
820		if (bootpc_ifctx_isresolved(ifctx) == 0) {
821			printf("%s timeout for interface %s\n",
822			       ifctx->dhcpquerytype != DHCP_NOMSG ?
823			       "DHCP" : "BOOTP",
824			       ifctx->ireq.ifr_name);
825		}
826
827	if (gctx->gotrootpath != 0) {
828#if 0
829		printf("Got a root path, ignoring remaining timeout\n");
830#endif
831		error = 0;
832		goto out;
833	}
834#ifndef BOOTP_NFSROOT
835	STAILQ_FOREACH(ifctx, &gctx->interfaces, next)
836		if (bootpc_ifctx_isresolved(ifctx) != 0) {
837			error = 0;
838			goto out;
839		}
840#endif
841	error = ETIMEDOUT;
842
843out:
844	return (error);
845}
846
847static void
848bootpc_fakeup_interface(struct bootpc_ifcontext *ifctx, struct thread *td)
849{
850	struct ifreq *ifr;
851	struct in_aliasreq *ifra;
852	struct sockaddr_in *sin;
853	int error;
854
855	ifr = &ifctx->ireq;
856	ifra = &ifctx->iareq;
857
858	/*
859	 * Bring up the interface.
860	 *
861	 * Get the old interface flags and or IFF_UP into them; if
862	 * IFF_UP set blindly, interface selection can be clobbered.
863	 */
864	error = ifioctl(bootp_so, SIOCGIFFLAGS, (caddr_t)ifr, td);
865	if (error != 0)
866		panic("%s: SIOCGIFFLAGS, error=%d", __func__, error);
867	ifr->ifr_flags |= IFF_UP;
868	error = ifioctl(bootp_so, SIOCSIFFLAGS, (caddr_t)ifr, td);
869	if (error != 0)
870		panic("%s: SIOCSIFFLAGS, error=%d", __func__, error);
871
872	/*
873	 * Do enough of ifconfig(8) so that the chosen interface
874	 * can talk to the servers. Set address to 0.0.0.0/8 and
875	 * broadcast address to local broadcast.
876	 */
877	sin = (struct sockaddr_in *)&ifra->ifra_addr;
878	clear_sinaddr(sin);
879	sin = (struct sockaddr_in *)&ifra->ifra_mask;
880	clear_sinaddr(sin);
881	sin->sin_addr.s_addr = htonl(0xff000000);
882	sin = (struct sockaddr_in *)&ifra->ifra_broadaddr;
883	clear_sinaddr(sin);
884	sin->sin_addr.s_addr = htonl(INADDR_BROADCAST);
885	error = ifioctl(bootp_so, SIOCAIFADDR, (caddr_t)ifra, td);
886	if (error != 0)
887		panic("%s: SIOCAIFADDR, error=%d", __func__, error);
888}
889
890static void
891bootpc_shutdown_interface(struct bootpc_ifcontext *ifctx, struct thread *td)
892{
893	struct ifreq *ifr;
894	struct sockaddr_in *sin;
895	int error;
896
897	ifr = &ifctx->ireq;
898
899	printf("Shutdown interface %s\n", ifctx->ireq.ifr_name);
900	error = ifioctl(bootp_so, SIOCGIFFLAGS, (caddr_t)ifr, td);
901	if (error != 0)
902		panic("%s: SIOCGIFFLAGS, error=%d", __func__, error);
903	ifr->ifr_flags &= ~IFF_UP;
904	error = ifioctl(bootp_so, SIOCSIFFLAGS, (caddr_t)ifr, td);
905	if (error != 0)
906		panic("%s: SIOCSIFFLAGS, error=%d", __func__, error);
907
908	sin = (struct sockaddr_in *) &ifr->ifr_addr;
909	clear_sinaddr(sin);
910	error = ifioctl(bootp_so, SIOCDIFADDR, (caddr_t) ifr, td);
911	if (error != 0)
912		panic("%s: SIOCDIFADDR, error=%d", __func__, error);
913}
914
915static void
916bootpc_adjust_interface(struct bootpc_ifcontext *ifctx,
917    struct bootpc_globalcontext *gctx, struct thread *td)
918{
919	int error;
920	struct sockaddr_in *sin;
921	struct ifreq *ifr;
922	struct in_aliasreq *ifra;
923	struct sockaddr_in *myaddr;
924	struct sockaddr_in *netmask;
925
926	ifr = &ifctx->ireq;
927	ifra = &ifctx->iareq;
928	myaddr = &ifctx->myaddr;
929	netmask = &ifctx->netmask;
930
931	if (bootpc_ifctx_isresolved(ifctx) == 0) {
932		/* Shutdown interfaces where BOOTP failed */
933		bootpc_shutdown_interface(ifctx, td);
934		return;
935	}
936
937	printf("Adjusted interface %s", ifctx->ireq.ifr_name);
938
939	/* Do BOOTP interface options */
940	if (ifctx->mtu != 0) {
941		printf(" (MTU=%d%s)", ifctx->mtu,
942		    (ifctx->mtu > 1514) ? "/JUMBO" : "");
943		ifr->ifr_mtu = ifctx->mtu;
944		error = ifioctl(bootp_so, SIOCSIFMTU, (caddr_t) ifr, td);
945		if (error != 0)
946			panic("%s: SIOCSIFMTU, error=%d", __func__, error);
947	}
948	printf("\n");
949
950	/*
951	 * Do enough of ifconfig(8) so that the chosen interface
952	 * can talk to the servers.  (just set the address)
953	 */
954	sin = (struct sockaddr_in *) &ifr->ifr_addr;
955	clear_sinaddr(sin);
956	error = ifioctl(bootp_so, SIOCDIFADDR, (caddr_t) ifr, td);
957	if (error != 0)
958		panic("%s: SIOCDIFADDR, error=%d", __func__, error);
959
960	bcopy(myaddr, &ifra->ifra_addr, sizeof(*myaddr));
961	bcopy(netmask, &ifra->ifra_mask, sizeof(*netmask));
962	clear_sinaddr(&ifra->ifra_broadaddr);
963	ifra->ifra_broadaddr.sin_addr.s_addr = myaddr->sin_addr.s_addr |
964	    ~netmask->sin_addr.s_addr;
965
966	error = ifioctl(bootp_so, SIOCAIFADDR, (caddr_t)ifra, td);
967	if (error != 0)
968		panic("%s: SIOCAIFADDR, error=%d", __func__, error);
969}
970
971static void
972bootpc_add_default_route(struct bootpc_ifcontext *ifctx)
973{
974	int error;
975	struct sockaddr_in defdst;
976	struct sockaddr_in defmask;
977	struct rt_addrinfo info;
978	struct rib_cmd_info rc;
979
980	if (ifctx->gw.sin_addr.s_addr == htonl(INADDR_ANY))
981		return;
982
983	clear_sinaddr(&defdst);
984	clear_sinaddr(&defmask);
985
986	bzero((caddr_t)&info, sizeof(info));
987	info.rti_flags = RTF_UP | RTF_GATEWAY | RTF_STATIC;
988	info.rti_info[RTAX_DST] = (struct sockaddr *)&defdst;
989	info.rti_info[RTAX_NETMASK] = (struct sockaddr *)&defmask;
990	info.rti_info[RTAX_GATEWAY] = (struct sockaddr *)&ifctx->gw;
991
992	error = rib_action(RT_DEFAULT_FIB, RTM_ADD, &info, &rc);
993
994	if (error != 0) {
995		printf("%s: RTM_ADD, error=%d\n", __func__, error);
996	}
997}
998
999static void
1000bootpc_remove_default_route(struct bootpc_ifcontext *ifctx)
1001{
1002	int error;
1003	struct sockaddr_in defdst;
1004	struct sockaddr_in defmask;
1005	struct rt_addrinfo info;
1006	struct rib_cmd_info rc;
1007
1008	if (ifctx->gw.sin_addr.s_addr == htonl(INADDR_ANY))
1009		return;
1010
1011	clear_sinaddr(&defdst);
1012	clear_sinaddr(&defmask);
1013
1014	bzero((caddr_t)&info, sizeof(info));
1015	info.rti_flags = RTF_UP | RTF_GATEWAY | RTF_STATIC;
1016	info.rti_info[RTAX_DST] = (struct sockaddr *)&defdst;
1017	info.rti_info[RTAX_NETMASK] = (struct sockaddr *)&defmask;
1018	info.rti_info[RTAX_GATEWAY] = (struct sockaddr *)&ifctx->gw;
1019
1020	error = rib_action(RT_DEFAULT_FIB, RTM_DELETE, &info, &rc);
1021	if (error != 0) {
1022		printf("%s: RTM_DELETE, error=%d\n", __func__, error);
1023	}
1024}
1025
1026static int
1027setfs(struct sockaddr_in *addr, char *path, char *p,
1028    const struct in_addr *siaddr)
1029{
1030
1031	if (getip(&p, &addr->sin_addr) == 0) {
1032		if (siaddr != NULL && *p == '/')
1033			bcopy(siaddr, &addr->sin_addr, sizeof(struct in_addr));
1034		else
1035			return 0;
1036	} else {
1037		if (*p != ':')
1038			return 0;
1039		p++;
1040	}
1041
1042	addr->sin_len = sizeof(struct sockaddr_in);
1043	addr->sin_family = AF_INET;
1044
1045	strlcpy(path, p, MNAMELEN);
1046	return 1;
1047}
1048
1049static int
1050getip(char **ptr, struct in_addr *addr)
1051{
1052	char *p;
1053	unsigned int ip;
1054	int val;
1055
1056	p = *ptr;
1057	ip = 0;
1058	if (((val = getdec(&p)) < 0) || (val > 255))
1059		return 0;
1060	ip = val << 24;
1061	if (*p != '.')
1062		return 0;
1063	p++;
1064	if (((val = getdec(&p)) < 0) || (val > 255))
1065		return 0;
1066	ip |= (val << 16);
1067	if (*p != '.')
1068		return 0;
1069	p++;
1070	if (((val = getdec(&p)) < 0) || (val > 255))
1071		return 0;
1072	ip |= (val << 8);
1073	if (*p != '.')
1074		return 0;
1075	p++;
1076	if (((val = getdec(&p)) < 0) || (val > 255))
1077		return 0;
1078	ip |= val;
1079
1080	addr->s_addr = htonl(ip);
1081	*ptr = p;
1082	return 1;
1083}
1084
1085static int
1086getdec(char **ptr)
1087{
1088	char *p;
1089	int ret;
1090
1091	p = *ptr;
1092	ret = 0;
1093	if ((*p < '0') || (*p > '9'))
1094		return -1;
1095	while ((*p >= '0') && (*p <= '9')) {
1096		ret = ret * 10 + (*p - '0');
1097		p++;
1098	}
1099	*ptr = p;
1100	return ret;
1101}
1102
1103static void
1104mountopts(struct nfs_args *args, char *p)
1105{
1106	args->version = NFS_ARGSVERSION;
1107	args->rsize = BOOTP_BLOCKSIZE;
1108	args->wsize = BOOTP_BLOCKSIZE;
1109	args->flags = NFSMNT_RSIZE | NFSMNT_WSIZE | NFSMNT_RESVPORT;
1110	args->sotype = SOCK_DGRAM;
1111	if (p != NULL)
1112		nfs_parse_options(p, args);
1113}
1114
1115static int
1116xdr_opaque_decode(struct mbuf **mptr, u_char *buf, int len)
1117{
1118	struct mbuf *m;
1119	int alignedlen;
1120
1121	m = *mptr;
1122	alignedlen = ( len + 3 ) & ~3;
1123
1124	if (m->m_len < alignedlen) {
1125		m = m_pullup(m, alignedlen);
1126		if (m == NULL) {
1127			*mptr = NULL;
1128			return EBADRPC;
1129		}
1130	}
1131	bcopy(mtod(m, u_char *), buf, len);
1132	m_adj(m, alignedlen);
1133	*mptr = m;
1134	return 0;
1135}
1136
1137static int
1138xdr_int_decode(struct mbuf **mptr, int *iptr)
1139{
1140	u_int32_t i;
1141
1142	if (xdr_opaque_decode(mptr, (u_char *) &i, sizeof(u_int32_t)) != 0)
1143		return EBADRPC;
1144	*iptr = fxdr_unsigned(u_int32_t, i);
1145	return 0;
1146}
1147
1148static void
1149print_sin_addr(struct sockaddr_in *sin)
1150{
1151
1152	print_in_addr(sin->sin_addr);
1153}
1154
1155static void
1156print_in_addr(struct in_addr addr)
1157{
1158	unsigned int ip;
1159
1160	ip = ntohl(addr.s_addr);
1161	printf("%d.%d.%d.%d",
1162	       ip >> 24, (ip >> 16) & 255, (ip >> 8) & 255, ip & 255);
1163}
1164
1165static void
1166bootpc_compose_query(struct bootpc_ifcontext *ifctx, struct thread *td)
1167{
1168	unsigned char *vendp;
1169	unsigned char vendor_client[64];
1170	uint32_t leasetime;
1171	uint8_t vendor_client_len;
1172
1173	ifctx->gotrootpath = 0;
1174
1175	bzero((caddr_t) &ifctx->call, sizeof(ifctx->call));
1176
1177	/* bootpc part */
1178	ifctx->call.op = BOOTP_REQUEST; 	/* BOOTREQUEST */
1179	ifctx->call.htype = 1;			/* 10mb ethernet */
1180	ifctx->call.hlen = ifctx->sdl->sdl_alen;/* Hardware address length */
1181	ifctx->call.hops = 0;
1182	if (bootpc_ifctx_isunresolved(ifctx) != 0)
1183		ifctx->xid++;
1184	ifctx->call.xid = txdr_unsigned(ifctx->xid);
1185	bcopy(LLADDR(ifctx->sdl), &ifctx->call.chaddr, ifctx->sdl->sdl_alen);
1186
1187	vendp = ifctx->call.vend;
1188	*vendp++ = 99;		/* RFC1048 cookie */
1189	*vendp++ = 130;
1190	*vendp++ = 83;
1191	*vendp++ = 99;
1192	*vendp++ = TAG_MAXMSGSIZE;
1193	*vendp++ = 2;
1194	*vendp++ = (sizeof(struct bootp_packet) >> 8) & 255;
1195	*vendp++ = sizeof(struct bootp_packet) & 255;
1196
1197	snprintf(vendor_client, sizeof(vendor_client), "%s:%s:%s",
1198		ostype, MACHINE, osrelease);
1199	vendor_client_len = strlen(vendor_client);
1200	*vendp++ = TAG_VENDOR_INDENTIFIER;
1201	*vendp++ = vendor_client_len;
1202	memcpy(vendp, vendor_client, vendor_client_len);
1203	vendp += vendor_client_len;
1204	ifctx->dhcpquerytype = DHCP_NOMSG;
1205	switch (ifctx->state) {
1206	case IF_DHCP_UNRESOLVED:
1207		*vendp++ = TAG_DHCP_MSGTYPE;
1208		*vendp++ = 1;
1209		*vendp++ = DHCP_DISCOVER;
1210		ifctx->dhcpquerytype = DHCP_DISCOVER;
1211		ifctx->gotdhcpserver = 0;
1212		break;
1213	case IF_DHCP_OFFERED:
1214		*vendp++ = TAG_DHCP_MSGTYPE;
1215		*vendp++ = 1;
1216		*vendp++ = DHCP_REQUEST;
1217		ifctx->dhcpquerytype = DHCP_REQUEST;
1218		*vendp++ = TAG_DHCP_REQ_ADDR;
1219		*vendp++ = 4;
1220		memcpy(vendp, &ifctx->reply.yiaddr, 4);
1221		vendp += 4;
1222		if (ifctx->gotdhcpserver != 0) {
1223			*vendp++ = TAG_DHCP_SERVERID;
1224			*vendp++ = 4;
1225			memcpy(vendp, &ifctx->dhcpserver, 4);
1226			vendp += 4;
1227		}
1228		*vendp++ = TAG_DHCP_LEASETIME;
1229		*vendp++ = 4;
1230		leasetime = htonl(300);
1231		memcpy(vendp, &leasetime, 4);
1232		vendp += 4;
1233		break;
1234	default:
1235		break;
1236	}
1237	*vendp = TAG_END;
1238
1239	ifctx->call.secs = 0;
1240	ifctx->call.flags = htons(0x8000); /* We need a broadcast answer */
1241}
1242
1243static int
1244bootpc_hascookie(struct bootp_packet *bp)
1245{
1246
1247	return (bp->vend[0] == 99 && bp->vend[1] == 130 &&
1248		bp->vend[2] == 83 && bp->vend[3] == 99);
1249}
1250
1251static void
1252bootpc_tag_helper(struct bootpc_tagcontext *tctx,
1253    unsigned char *start, int len, int tag)
1254{
1255	unsigned char *j;
1256	unsigned char *ej;
1257	unsigned char code;
1258
1259	if (tctx->badtag != 0 || tctx->badopt != 0)
1260		return;
1261
1262	j = start;
1263	ej = j + len;
1264
1265	while (j < ej) {
1266		code = *j++;
1267		if (code == TAG_PAD)
1268			continue;
1269		if (code == TAG_END)
1270			return;
1271		if (j >= ej || j + *j + 1 > ej) {
1272			tctx->badopt = 1;
1273			return;
1274		}
1275		len = *j++;
1276		if (code == tag) {
1277			if (tctx->taglen + len > TAG_MAXLEN) {
1278				tctx->badtag = 1;
1279				return;
1280			}
1281			tctx->foundopt = 1;
1282			if (len > 0)
1283				memcpy(tctx->buf + tctx->taglen,
1284				       j, len);
1285			tctx->taglen += len;
1286		}
1287		if (code == TAG_OVERLOAD)
1288			tctx->overload = *j;
1289
1290		j += len;
1291	}
1292}
1293
1294static unsigned char *
1295bootpc_tag(struct bootpc_tagcontext *tctx,
1296    struct bootp_packet *bp, int len, int tag)
1297{
1298	tctx->overload = 0;
1299	tctx->badopt = 0;
1300	tctx->badtag = 0;
1301	tctx->foundopt = 0;
1302	tctx->taglen = 0;
1303
1304	if (bootpc_hascookie(bp) == 0)
1305		return NULL;
1306
1307	bootpc_tag_helper(tctx, &bp->vend[4],
1308			  (unsigned char *) bp + len - &bp->vend[4], tag);
1309
1310	if ((tctx->overload & OVERLOAD_FILE) != 0)
1311		bootpc_tag_helper(tctx,
1312				  (unsigned char *) bp->file,
1313				  sizeof(bp->file),
1314				  tag);
1315	if ((tctx->overload & OVERLOAD_SNAME) != 0)
1316		bootpc_tag_helper(tctx,
1317				  (unsigned char *) bp->sname,
1318				  sizeof(bp->sname),
1319				  tag);
1320
1321	if (tctx->badopt != 0 || tctx->badtag != 0 || tctx->foundopt == 0)
1322		return NULL;
1323	tctx->buf[tctx->taglen] = '\0';
1324	return tctx->buf;
1325}
1326
1327static void
1328bootpc_decode_reply(struct nfsv3_diskless *nd, struct bootpc_ifcontext *ifctx,
1329    struct bootpc_globalcontext *gctx)
1330{
1331	char *p, *s;
1332
1333	ifctx->gotgw = 0;
1334	ifctx->gotnetmask = 0;
1335
1336	clear_sinaddr(&ifctx->myaddr);
1337	clear_sinaddr(&ifctx->netmask);
1338	clear_sinaddr(&ifctx->gw);
1339
1340	ifctx->myaddr.sin_addr = ifctx->reply.yiaddr;
1341
1342	printf("%s at ", ifctx->ireq.ifr_name);
1343	print_sin_addr(&ifctx->myaddr);
1344	printf(" server ");
1345	print_in_addr(ifctx->reply.siaddr);
1346
1347	ifctx->gw.sin_addr = ifctx->reply.giaddr;
1348	if (ifctx->reply.giaddr.s_addr != htonl(INADDR_ANY)) {
1349		printf(" via gateway ");
1350		print_in_addr(ifctx->reply.giaddr);
1351	}
1352
1353	/* This call used for the side effect (overload flag) */
1354	(void) bootpc_tag(&gctx->tmptag,
1355			  &ifctx->reply, ifctx->replylen, TAG_END);
1356
1357	if ((gctx->tmptag.overload & OVERLOAD_SNAME) == 0)
1358		if (ifctx->reply.sname[0] != '\0')
1359			printf(" server name %s", ifctx->reply.sname);
1360	if ((gctx->tmptag.overload & OVERLOAD_FILE) == 0)
1361		if (ifctx->reply.file[0] != '\0')
1362			printf(" boot file %s", ifctx->reply.file);
1363
1364	printf("\n");
1365
1366	p = bootpc_tag(&gctx->tag, &ifctx->reply, ifctx->replylen,
1367		       TAG_SUBNETMASK);
1368	if (p != NULL) {
1369		if (gctx->tag.taglen != 4)
1370			panic("bootpc: subnet mask len is %d",
1371			      gctx->tag.taglen);
1372		bcopy(p, &ifctx->netmask.sin_addr, 4);
1373		ifctx->gotnetmask = 1;
1374		printf("subnet mask ");
1375		print_sin_addr(&ifctx->netmask);
1376		printf(" ");
1377	}
1378
1379	p = bootpc_tag(&gctx->tag, &ifctx->reply, ifctx->replylen,
1380		       TAG_ROUTERS);
1381	if (p != NULL) {
1382		/* Routers */
1383		if (gctx->tag.taglen % 4)
1384			panic("bootpc: Router Len is %d", gctx->tag.taglen);
1385		if (gctx->tag.taglen > 0) {
1386			bcopy(p, &ifctx->gw.sin_addr, 4);
1387			printf("router ");
1388			print_sin_addr(&ifctx->gw);
1389			printf(" ");
1390			ifctx->gotgw = 1;
1391			gctx->gotgw = 1;
1392		}
1393	}
1394
1395	/*
1396	 * Choose a root filesystem.  If a value is forced in the environment
1397	 * and it contains "nfs:", use it unconditionally.  Otherwise, if the
1398	 * kernel is compiled with the ROOTDEVNAME option, then use it if:
1399	 *  - The server doesn't provide a pathname.
1400	 *  - The boothowto flags include RB_DFLTROOT (user said to override
1401	 *    the server value).
1402	 */
1403	p = NULL;
1404	if ((s = kern_getenv("vfs.root.mountfrom")) != NULL) {
1405		if ((p = strstr(s, "nfs:")) != NULL)
1406			p = strdup(p + 4, M_TEMP);
1407		freeenv(s);
1408	}
1409	if (p == NULL) {
1410		p = bootpc_tag(&gctx->tag, &ifctx->reply, ifctx->replylen,
1411		       TAG_ROOT);
1412		if (p != NULL)
1413			ifctx->gotrootpath = 1;
1414	}
1415#ifdef ROOTDEVNAME
1416	if ((p == NULL || (boothowto & RB_DFLTROOT) != 0) &&
1417	    (p = strstr(ROOTDEVNAME, "nfs:")) != NULL) {
1418		p += 4;
1419	}
1420#endif
1421	if (p != NULL) {
1422		if (gctx->setrootfs != NULL) {
1423			printf("rootfs %s (ignored) ", p);
1424		} else 	if (setfs(&nd->root_saddr,
1425				  nd->root_hostnam, p, &ifctx->reply.siaddr)) {
1426			if (*p == '/') {
1427				printf("root_server ");
1428				print_sin_addr(&nd->root_saddr);
1429				printf(" ");
1430			}
1431			printf("rootfs %s ", p);
1432			gctx->gotrootpath = 1;
1433			gctx->setrootfs = ifctx;
1434
1435			p = bootpc_tag(&gctx->tag, &ifctx->reply,
1436				       ifctx->replylen,
1437				       TAG_ROOTOPTS);
1438			if (p != NULL) {
1439				mountopts(&nd->root_args, p);
1440				printf("rootopts %s ", p);
1441			}
1442		} else
1443			panic("Failed to set rootfs to %s", p);
1444	}
1445
1446	p = bootpc_tag(&gctx->tag, &ifctx->reply, ifctx->replylen,
1447		       TAG_HOSTNAME);
1448	if (p != NULL) {
1449		if (gctx->tag.taglen >= MAXHOSTNAMELEN)
1450			panic("bootpc: hostname >= %d bytes",
1451			      MAXHOSTNAMELEN);
1452		if (gctx->sethostname != NULL) {
1453			printf("hostname %s (ignored) ", p);
1454		} else {
1455			strcpy(nd->my_hostnam, p);
1456			mtx_lock(&prison0.pr_mtx);
1457			strcpy(prison0.pr_hostname, p);
1458			mtx_unlock(&prison0.pr_mtx);
1459			printf("hostname %s ", p);
1460			gctx->sethostname = ifctx;
1461		}
1462	}
1463	p = bootpc_tag(&gctx->tag, &ifctx->reply, ifctx->replylen,
1464			TAG_COOKIE);
1465	if (p != NULL) {        /* store in a sysctl variable */
1466		int i, l = sizeof(bootp_cookie) - 1;
1467		for (i = 0; i < l && p[i] != '\0'; i++)
1468			bootp_cookie[i] = p[i];
1469		p[i] = '\0';
1470	}
1471
1472	p = bootpc_tag(&gctx->tag, &ifctx->reply, ifctx->replylen,
1473		       TAG_INTF_MTU);
1474	if (p != NULL) {
1475		ifctx->mtu = be16dec(p);
1476	}
1477
1478	printf("\n");
1479
1480	if (ifctx->gotnetmask == 0) {
1481		/*
1482		 * If there is no netmask, use historical default,
1483		 * but we really need the right mask from the server.
1484		 */
1485		printf("%s: no netmask received!\n", ifctx->ireq.ifr_name);
1486		if (IN_CLASSA(ntohl(ifctx->myaddr.sin_addr.s_addr)))
1487			ifctx->netmask.sin_addr.s_addr = htonl(IN_CLASSA_NET);
1488		else if (IN_CLASSB(ntohl(ifctx->myaddr.sin_addr.s_addr)))
1489			ifctx->netmask.sin_addr.s_addr = htonl(IN_CLASSB_NET);
1490		else
1491			ifctx->netmask.sin_addr.s_addr = htonl(IN_CLASSC_NET);
1492	}
1493}
1494
1495static u_int
1496bootpc_init_ifa_cb(void *arg, struct ifaddr *ifa, u_int count)
1497{
1498	struct sockaddr_dl *sdl = (struct sockaddr_dl *)ifa->ifa_addr;
1499
1500	if (count != 0)
1501		return (0);
1502
1503	if (sdl->sdl_type != IFT_ETHER)
1504		return (0);
1505
1506	*(struct sockaddr_dl **)arg = sdl;
1507
1508	return (1);
1509}
1510
1511void
1512bootpc_init(void)
1513{
1514	struct epoch_tracker et;
1515	struct bootpc_ifcontext *ifctx = NULL;	/* Interface BOOTP contexts */
1516	struct bootpc_globalcontext *gctx; 	/* Global BOOTP context */
1517	struct sockaddr_dl *sdl;
1518	struct if_iter iter;
1519	if_t ifp;
1520	int error;
1521#ifndef BOOTP_WIRED_TO
1522	int ifcnt;
1523#endif
1524	struct nfsv3_diskless *nd;
1525	struct thread *td;
1526	int timeout;
1527	int delay;
1528	char *s;
1529
1530	timeout = BOOTP_IFACE_WAIT_TIMEOUT * hz;
1531	delay = hz / 10;
1532
1533	nd = &nfsv3_diskless;
1534	td = curthread;
1535
1536	/*
1537	 * If already filled in, don't touch it here
1538	 */
1539	if (nfs_diskless_valid != 0)
1540		return;
1541
1542	/*
1543	 * If "vfs.root.mountfrom" is set and the value is something other
1544	 * than "nfs:", it means the user doesn't want to mount root via nfs,
1545	 * there's no reason to continue with bootpc
1546	 */
1547	if ((s = kern_getenv("vfs.root.mountfrom")) != NULL) {
1548		if ((strncmp(s, "nfs:", 4)) != 0) {
1549			printf("%s: vfs.root.mountfrom set to %s. "
1550			       "BOOTP aborted.\n", __func__, s);
1551			freeenv(s);
1552			return;
1553		}
1554		freeenv(s);
1555	}
1556
1557	gctx = malloc(sizeof(*gctx), M_TEMP, M_WAITOK | M_ZERO);
1558	STAILQ_INIT(&gctx->interfaces);
1559	gctx->xid = ~0xFFFF;
1560	gctx->starttime = time_second;
1561
1562	/*
1563	 * If ROOTDEVNAME is defined or vfs.root.mountfrom is set then we have
1564	 * root-path overrides that can potentially let us boot even if we don't
1565	 * get a root path from the server, so we can treat that as a non-error.
1566	 */
1567#ifdef ROOTDEVNAME
1568	gctx->any_root_overrides = 1;
1569#else
1570	gctx->any_root_overrides = testenv("vfs.root.mountfrom");
1571#endif
1572
1573	/*
1574	 * Find a network interface.
1575	 */
1576	CURVNET_SET(TD_TO_VNET(td));
1577#ifdef BOOTP_WIRED_TO
1578	printf("%s: wired to interface '%s'\n", __func__,
1579	       __XSTRING(BOOTP_WIRED_TO));
1580	allocifctx(gctx);
1581#else
1582	/*
1583	 * Preallocate interface context storage, if another interface
1584	 * attaches and wins the race, it won't be eligible for bootp.
1585	 */
1586	ifcnt = 0;
1587	NET_EPOCH_ENTER(et);
1588	for (if_t ifp = if_iter_start(&iter); ifp != NULL; ifp = if_iter_next(&iter)) {
1589		if ((if_getflags(ifp) &
1590		    (IFF_LOOPBACK | IFF_POINTOPOINT | IFF_BROADCAST)) ==
1591		    IFF_BROADCAST)
1592			ifcnt++;
1593	}
1594	if_iter_finish(&iter);
1595	NET_EPOCH_EXIT(et);
1596	if (ifcnt == 0) {
1597		printf("WARNING: BOOTP found no eligible network interfaces, skipping!\n");
1598		goto out;
1599	}
1600
1601	for (; ifcnt > 0; ifcnt--)
1602		allocifctx(gctx);
1603#endif
1604
1605retry:
1606	ifctx = STAILQ_FIRST(&gctx->interfaces);
1607	NET_EPOCH_ENTER(et);
1608	for (ifp = if_iter_start(&iter); ifp != NULL; ifp = if_iter_next(&iter)) {
1609		if (ifctx == NULL)
1610			break;
1611#ifdef BOOTP_WIRED_TO
1612		if (strcmp(if_name(ifp), __XSTRING(BOOTP_WIRED_TO)) != 0)
1613			continue;
1614#else
1615		if ((if_getflags(ifp) &
1616		     (IFF_LOOPBACK | IFF_POINTOPOINT | IFF_BROADCAST)) !=
1617		    IFF_BROADCAST)
1618			break;
1619		switch (if_getalloctype(ifp)) {
1620			case IFT_ETHER:
1621				break;
1622			default:
1623				continue;
1624		}
1625#endif
1626		strlcpy(ifctx->ireq.ifr_name, if_name(ifp),
1627		    sizeof(ifctx->ireq.ifr_name));
1628		ifctx->ifp = ifp;
1629
1630		/* Get HW address */
1631		sdl = NULL;
1632		if_foreach_addr_type(ifp, AF_LINK, bootpc_init_ifa_cb, &sdl);
1633		if (sdl == NULL)
1634			panic("bootpc: Unable to find HW address for %s",
1635			    ifctx->ireq.ifr_name);
1636		ifctx->sdl = sdl;
1637
1638		ifctx = STAILQ_NEXT(ifctx, next);
1639	}
1640	if_iter_finish(&iter);
1641	NET_EPOCH_EXIT(et);
1642	CURVNET_RESTORE();
1643
1644	if (STAILQ_EMPTY(&gctx->interfaces) ||
1645	    STAILQ_FIRST(&gctx->interfaces)->ifp == NULL) {
1646		if (timeout > 0) {
1647			pause("bootpc", delay);
1648			timeout -= delay;
1649			goto retry;
1650		}
1651#ifdef BOOTP_WIRED_TO
1652		panic("%s: Could not find interface specified "
1653		      "by BOOTP_WIRED_TO: "
1654		      __XSTRING(BOOTP_WIRED_TO), __func__);
1655#else
1656		panic("%s: no suitable interface", __func__);
1657#endif
1658	}
1659
1660	error = socreate(AF_INET, &bootp_so, SOCK_DGRAM, 0, td->td_ucred, td);
1661	if (error != 0)
1662		panic("%s: socreate, error=%d", __func__, error);
1663
1664	STAILQ_FOREACH(ifctx, &gctx->interfaces, next)
1665		bootpc_fakeup_interface(ifctx, td);
1666
1667	STAILQ_FOREACH(ifctx, &gctx->interfaces, next)
1668		bootpc_compose_query(ifctx, td);
1669
1670	error = bootpc_call(gctx, td);
1671	if (error != 0) {
1672		printf("BOOTP call failed\n");
1673	}
1674
1675	mountopts(&nd->root_args, NULL);
1676
1677	STAILQ_FOREACH(ifctx, &gctx->interfaces, next)
1678		if (bootpc_ifctx_isresolved(ifctx) != 0)
1679			bootpc_decode_reply(nd, ifctx, gctx);
1680
1681#ifdef BOOTP_NFSROOT
1682	if (gctx->gotrootpath == 0 && gctx->any_root_overrides == 0)
1683		panic("bootpc: No root path offered");
1684#endif
1685
1686	STAILQ_FOREACH(ifctx, &gctx->interfaces, next)
1687		bootpc_adjust_interface(ifctx, gctx, td);
1688
1689	soclose(bootp_so);
1690
1691	STAILQ_FOREACH(ifctx, &gctx->interfaces, next)
1692		if (ifctx->gotrootpath != 0)
1693			break;
1694	if (ifctx == NULL) {
1695		STAILQ_FOREACH(ifctx, &gctx->interfaces, next)
1696			if (bootpc_ifctx_isresolved(ifctx) != 0)
1697				break;
1698	}
1699	if (ifctx == NULL)
1700		goto out;
1701
1702	if (gctx->gotrootpath != 0) {
1703		struct epoch_tracker et;
1704
1705		kern_setenv("boot.netif.name", if_name(ifctx->ifp));
1706
1707		NET_EPOCH_ENTER(et);
1708		bootpc_add_default_route(ifctx);
1709		NET_EPOCH_EXIT(et);
1710		error = md_mount(&nd->root_saddr, nd->root_hostnam,
1711				 nd->root_fh, &nd->root_fhsize,
1712				 &nd->root_args, td);
1713		NET_EPOCH_ENTER(et);
1714		bootpc_remove_default_route(ifctx);
1715		NET_EPOCH_EXIT(et);
1716		if (error != 0) {
1717			if (gctx->any_root_overrides == 0)
1718				panic("nfs_boot: mount root, error=%d", error);
1719			else
1720				goto out;
1721		}
1722		rootdevnames[0] = "nfs:";
1723		nfs_diskless_valid = 3;
1724	}
1725
1726	strcpy(nd->myif.ifra_name, ifctx->ireq.ifr_name);
1727	bcopy(&ifctx->myaddr, &nd->myif.ifra_addr, sizeof(ifctx->myaddr));
1728	bcopy(&ifctx->myaddr, &nd->myif.ifra_broadaddr, sizeof(ifctx->myaddr));
1729	((struct sockaddr_in *) &nd->myif.ifra_broadaddr)->sin_addr.s_addr =
1730		ifctx->myaddr.sin_addr.s_addr |
1731		~ ifctx->netmask.sin_addr.s_addr;
1732	bcopy(&ifctx->netmask, &nd->myif.ifra_mask, sizeof(ifctx->netmask));
1733	bcopy(&ifctx->gw, &nd->mygateway, sizeof(ifctx->gw));
1734
1735out:
1736	while((ifctx = STAILQ_FIRST(&gctx->interfaces)) != NULL) {
1737		STAILQ_REMOVE_HEAD(&gctx->interfaces, next);
1738		free(ifctx, M_TEMP);
1739	}
1740	free(gctx, M_TEMP);
1741}
1742
1743/*
1744 * RPC: mountd/mount
1745 * Given a server pathname, get an NFS file handle.
1746 * Also, sets sin->sin_port to the NFS service port.
1747 */
1748static int
1749md_mount(struct sockaddr_in *mdsin, char *path, u_char *fhp, int *fhsizep,
1750    struct nfs_args *args, struct thread *td)
1751{
1752	struct mbuf *m;
1753	int error;
1754	int authunixok;
1755	int authcount;
1756	int authver;
1757
1758#define	RPCPROG_MNT	100005
1759#define	RPCMNT_VER1	1
1760#define RPCMNT_VER3	3
1761#define	RPCMNT_MOUNT	1
1762#define	AUTH_SYS	1		/* unix style (uid, gids) */
1763#define AUTH_UNIX	AUTH_SYS
1764
1765	/* XXX honor v2/v3 flags in args->flags? */
1766#ifdef BOOTP_NFSV3
1767	/* First try NFS v3 */
1768	/* Get port number for MOUNTD. */
1769	error = krpc_portmap(mdsin, RPCPROG_MNT, RPCMNT_VER3,
1770			     &mdsin->sin_port, td);
1771	if (error == 0) {
1772		m = xdr_string_encode(path, strlen(path));
1773
1774		/* Do RPC to mountd. */
1775		error = krpc_call(mdsin, RPCPROG_MNT, RPCMNT_VER3,
1776				  RPCMNT_MOUNT, &m, NULL, td);
1777	}
1778	if (error == 0) {
1779		args->flags |= NFSMNT_NFSV3;
1780	} else {
1781#endif
1782		/* Fallback to NFS v2 */
1783
1784		/* Get port number for MOUNTD. */
1785		error = krpc_portmap(mdsin, RPCPROG_MNT, RPCMNT_VER1,
1786				     &mdsin->sin_port, td);
1787		if (error != 0)
1788			return error;
1789
1790		m = xdr_string_encode(path, strlen(path));
1791
1792		/* Do RPC to mountd. */
1793		error = krpc_call(mdsin, RPCPROG_MNT, RPCMNT_VER1,
1794				  RPCMNT_MOUNT, &m, NULL, td);
1795		if (error != 0)
1796			return error;	/* message already freed */
1797
1798#ifdef BOOTP_NFSV3
1799	}
1800#endif
1801
1802	if (xdr_int_decode(&m, &error) != 0 || error != 0)
1803		goto bad;
1804
1805	if ((args->flags & NFSMNT_NFSV3) != 0) {
1806		if (xdr_int_decode(&m, fhsizep) != 0 ||
1807		    *fhsizep > NFSX_V3FHMAX ||
1808		    *fhsizep <= 0)
1809			goto bad;
1810	} else
1811		*fhsizep = NFSX_V2FH;
1812
1813	if (xdr_opaque_decode(&m, fhp, *fhsizep) != 0)
1814		goto bad;
1815
1816	if (args->flags & NFSMNT_NFSV3) {
1817		if (xdr_int_decode(&m, &authcount) != 0)
1818			goto bad;
1819		authunixok = 0;
1820		if (authcount < 0 || authcount > 100)
1821			goto bad;
1822		while (authcount > 0) {
1823			if (xdr_int_decode(&m, &authver) != 0)
1824				goto bad;
1825			if (authver == AUTH_UNIX)
1826				authunixok = 1;
1827			authcount--;
1828		}
1829		if (authunixok == 0)
1830			goto bad;
1831	}
1832
1833	/* Set port number for NFS use. */
1834	error = krpc_portmap(mdsin, NFS_PROG,
1835			     (args->flags &
1836			      NFSMNT_NFSV3) ? NFS_VER3 : NFS_VER2,
1837			     &mdsin->sin_port, td);
1838
1839	goto out;
1840
1841bad:
1842	error = EBADRPC;
1843
1844out:
1845	m_freem(m);
1846	return error;
1847}
1848
1849SYSINIT(bootp_rootconf, SI_SUB_ROOT_CONF, SI_ORDER_FIRST, bootpc_init, NULL);
1850