xref: /freebsd/sys/netinet/in.c (revision 2f35e7d9fa03f27543f347cd6277af5bfc6a7e95)
1c398230bSWarner Losh /*-
251369649SPedro F. Giffuni  * SPDX-License-Identifier: BSD-3-Clause
351369649SPedro F. Giffuni  *
4df8bae1dSRodney W. Grimes  * Copyright (c) 1982, 1986, 1991, 1993
5df8bae1dSRodney W. Grimes  *	The Regents of the University of California.  All rights reserved.
681d96ce8SMax Laier  * Copyright (C) 2001 WIDE Project.  All rights reserved.
7df8bae1dSRodney W. Grimes  *
8df8bae1dSRodney W. Grimes  * Redistribution and use in source and binary forms, with or without
9df8bae1dSRodney W. Grimes  * modification, are permitted provided that the following conditions
10df8bae1dSRodney W. Grimes  * are met:
11df8bae1dSRodney W. Grimes  * 1. Redistributions of source code must retain the above copyright
12df8bae1dSRodney W. Grimes  *    notice, this list of conditions and the following disclaimer.
13df8bae1dSRodney W. Grimes  * 2. Redistributions in binary form must reproduce the above copyright
14df8bae1dSRodney W. Grimes  *    notice, this list of conditions and the following disclaimer in the
15df8bae1dSRodney W. Grimes  *    documentation and/or other materials provided with the distribution.
16fbbd9655SWarner Losh  * 3. Neither the name of the University nor the names of its contributors
17df8bae1dSRodney W. Grimes  *    may be used to endorse or promote products derived from this software
18df8bae1dSRodney W. Grimes  *    without specific prior written permission.
19df8bae1dSRodney W. Grimes  *
20df8bae1dSRodney W. Grimes  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21df8bae1dSRodney W. Grimes  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22df8bae1dSRodney W. Grimes  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23df8bae1dSRodney W. Grimes  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24df8bae1dSRodney W. Grimes  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25df8bae1dSRodney W. Grimes  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26df8bae1dSRodney W. Grimes  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27df8bae1dSRodney W. Grimes  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28df8bae1dSRodney W. Grimes  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29df8bae1dSRodney W. Grimes  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30df8bae1dSRodney W. Grimes  * SUCH DAMAGE.
31df8bae1dSRodney W. Grimes  *
322180b925SGarrett Wollman  *	@(#)in.c	8.4 (Berkeley) 1/9/95
33df8bae1dSRodney W. Grimes  */
34df8bae1dSRodney W. Grimes 
354b421e2dSMike Silbersack #include <sys/cdefs.h>
364b421e2dSMike Silbersack __FBSDID("$FreeBSD$");
374b421e2dSMike Silbersack 
38*2f35e7d9SMike Karels #define IN_HISTORICAL_NETS		/* include class masks */
39*2f35e7d9SMike Karels 
40df8bae1dSRodney W. Grimes #include <sys/param.h>
41c3322cb9SGleb Smirnoff #include <sys/eventhandler.h>
4226f9a767SRodney W. Grimes #include <sys/systm.h>
4351a53488SBruce Evans #include <sys/sockio.h>
44df8bae1dSRodney W. Grimes #include <sys/malloc.h>
45acd3428bSRobert Watson #include <sys/priv.h>
46df8bae1dSRodney W. Grimes #include <sys/socket.h>
475ce0eb7fSBjoern A. Zeeb #include <sys/jail.h>
48f6d24a78SPoul-Henning Kamp #include <sys/kernel.h>
49cc0a3c8cSAndrey V. Elsukov #include <sys/lock.h>
505ce0eb7fSBjoern A. Zeeb #include <sys/proc.h>
51f6d24a78SPoul-Henning Kamp #include <sys/sysctl.h>
52ebc90701SQing Li #include <sys/syslog.h>
53f7a39160SGleb Smirnoff #include <sys/sx.h>
54df8bae1dSRodney W. Grimes 
55df8bae1dSRodney W. Grimes #include <net/if.h>
56df813b7eSQing Li #include <net/if_var.h>
57e162ea60SGeorge V. Neville-Neil #include <net/if_arp.h>
58ebc90701SQing Li #include <net/if_dl.h>
596e6b3f7cSQing Li #include <net/if_llatbl.h>
606a800098SYoshinobu Inoue #include <net/if_types.h>
61df8bae1dSRodney W. Grimes #include <net/route.h>
6281728a53SAlexander V. Chernikov #include <net/route/nhop.h>
6381728a53SAlexander V. Chernikov #include <net/route/route_ctl.h>
64ebc90701SQing Li #include <net/vnet.h>
65df8bae1dSRodney W. Grimes 
6608b68b0eSGleb Smirnoff #include <netinet/if_ether.h>
67df8bae1dSRodney W. Grimes #include <netinet/in.h>
68936f4a42SAlexander V. Chernikov #include <netinet/in_fib.h>
69df8bae1dSRodney W. Grimes #include <netinet/in_var.h>
70e43cc4aeSHajimu UMEMOTO #include <netinet/in_pcb.h>
7171498f30SBruce M Simpson #include <netinet/ip_var.h>
7208b68b0eSGleb Smirnoff #include <netinet/ip_carp.h>
73d10910e6SBruce M Simpson #include <netinet/igmp_var.h>
74eddfbb76SRobert Watson #include <netinet/udp.h>
75eddfbb76SRobert Watson #include <netinet/udp_var.h>
7655166637SPoul-Henning Kamp 
7777b89ad8SGleb Smirnoff static int in_aifaddr_ioctl(u_long, caddr_t, struct ifnet *, struct thread *);
78338e227aSLuiz Otavio O Souza static int in_difaddr_ioctl(u_long, caddr_t, struct ifnet *, struct thread *);
796952c3e1SAndrey V. Elsukov static int in_gifaddr_ioctl(u_long, caddr_t, struct ifnet *, struct thread *);
806a800098SYoshinobu Inoue 
814d77a549SAlfred Perlstein static void	in_socktrim(struct sockaddr_in *);
82ec002feeSBruce M Simpson static void	in_purgemaddrs(struct ifnet *);
83df8bae1dSRodney W. Grimes 
84130aebbaSAlexander V. Chernikov static bool	ia_need_loopback_route(const struct in_ifaddr *);
85130aebbaSAlexander V. Chernikov 
865f901c92SAndrew Turner VNET_DEFINE_STATIC(int, nosameprefix);
8708b68b0eSGleb Smirnoff #define	V_nosameprefix			VNET(nosameprefix)
886df8a710SGleb Smirnoff SYSCTL_INT(_net_inet_ip, OID_AUTO, no_same_prefix, CTLFLAG_VNET | CTLFLAG_RW,
8908b68b0eSGleb Smirnoff 	&VNET_NAME(nosameprefix), 0,
901ae95409SGleb Smirnoff 	"Refuse to create same prefixes on different interfaces");
91477180fbSGarrett Wollman 
92fd076593SMike Karels VNET_DEFINE_STATIC(bool, broadcast_lowest);
93fd076593SMike Karels #define	V_broadcast_lowest		VNET(broadcast_lowest)
94fd076593SMike Karels SYSCTL_BOOL(_net_inet_ip, OID_AUTO, broadcast_lowest, CTLFLAG_VNET | CTLFLAG_RW,
95fd076593SMike Karels 	&VNET_NAME(broadcast_lowest), 0,
96fd076593SMike Karels 	"Treat lowest address on a subnet (host 0) as broadcast");
97fd076593SMike Karels 
9882cea7e6SBjoern A. Zeeb VNET_DECLARE(struct inpcbinfo, ripcbinfo);
9982cea7e6SBjoern A. Zeeb #define	V_ripcbinfo			VNET(ripcbinfo)
10082cea7e6SBjoern A. Zeeb 
101f7a39160SGleb Smirnoff static struct sx in_control_sx;
102f7a39160SGleb Smirnoff SX_SYSINIT(in_control_sx, &in_control_sx, "in_control");
103f7a39160SGleb Smirnoff 
104df8bae1dSRodney W. Grimes /*
105df8bae1dSRodney W. Grimes  * Return 1 if an internet address is for a ``local'' host
106b365d954SGleb Smirnoff  * (one to which we have a connection).
107df8bae1dSRodney W. Grimes  */
10826f9a767SRodney W. Grimes int
109f2565d68SRobert Watson in_localaddr(struct in_addr in)
110df8bae1dSRodney W. Grimes {
1113e85b721SEd Maste 	u_long i = ntohl(in.s_addr);
1123e85b721SEd Maste 	struct in_ifaddr *ia;
113df8bae1dSRodney W. Grimes 
1142144431cSGleb Smirnoff 	NET_EPOCH_ASSERT();
1152144431cSGleb Smirnoff 
116d7c5a620SMatt Macy 	CK_STAILQ_FOREACH(ia, &V_in_ifaddrhead, ia_link) {
1172144431cSGleb Smirnoff 		if ((i & ia->ia_subnetmask) == ia->ia_subnet)
1182d9cfabaSRobert Watson 			return (1);
1192d9cfabaSRobert Watson 	}
1202144431cSGleb Smirnoff 
121df8bae1dSRodney W. Grimes 	return (0);
122df8bae1dSRodney W. Grimes }
123df8bae1dSRodney W. Grimes 
124df8bae1dSRodney W. Grimes /*
1252eccc90bSAndre Oppermann  * Return 1 if an internet address is for the local host and configured
1262eccc90bSAndre Oppermann  * on one of its interfaces.
1272eccc90bSAndre Oppermann  */
128c8ee75f2SGleb Smirnoff bool
129f2565d68SRobert Watson in_localip(struct in_addr in)
1302eccc90bSAndre Oppermann {
1312eccc90bSAndre Oppermann 	struct in_ifaddr *ia;
1322eccc90bSAndre Oppermann 
133c8ee75f2SGleb Smirnoff 	NET_EPOCH_ASSERT();
134c8ee75f2SGleb Smirnoff 
135c8ee75f2SGleb Smirnoff 	CK_LIST_FOREACH(ia, INADDR_HASH(in.s_addr), ia_hash)
136c8ee75f2SGleb Smirnoff 		if (IA_SIN(ia)->sin_addr.s_addr == in.s_addr)
137c8ee75f2SGleb Smirnoff 			return (true);
138c8ee75f2SGleb Smirnoff 
139c8ee75f2SGleb Smirnoff 	return (false);
1402eccc90bSAndre Oppermann }
1412eccc90bSAndre Oppermann 
1422eccc90bSAndre Oppermann /*
1439c89392fSGleb Smirnoff  * Like in_localip(), but FIB-aware.
1449c89392fSGleb Smirnoff  */
1459c89392fSGleb Smirnoff bool
1469c89392fSGleb Smirnoff in_localip_fib(struct in_addr in, uint16_t fib)
1479c89392fSGleb Smirnoff {
1489c89392fSGleb Smirnoff 	struct in_ifaddr *ia;
1499c89392fSGleb Smirnoff 
1509c89392fSGleb Smirnoff 	NET_EPOCH_ASSERT();
1519c89392fSGleb Smirnoff 
1529c89392fSGleb Smirnoff 	CK_LIST_FOREACH(ia, INADDR_HASH(in.s_addr), ia_hash)
1539c89392fSGleb Smirnoff 		if (IA_SIN(ia)->sin_addr.s_addr == in.s_addr &&
1549c89392fSGleb Smirnoff 		    ia->ia_ifa.ifa_ifp->if_fib == fib)
1559c89392fSGleb Smirnoff 			return (true);
1569c89392fSGleb Smirnoff 
1579c89392fSGleb Smirnoff 	return (false);
1589c89392fSGleb Smirnoff }
1599c89392fSGleb Smirnoff 
1609c89392fSGleb Smirnoff /*
16128ebe80cSGleb Smirnoff  * Return 1 if an internet address is configured on an interface.
16228ebe80cSGleb Smirnoff  */
16328ebe80cSGleb Smirnoff int
16428ebe80cSGleb Smirnoff in_ifhasaddr(struct ifnet *ifp, struct in_addr in)
16528ebe80cSGleb Smirnoff {
16628ebe80cSGleb Smirnoff 	struct ifaddr *ifa;
16728ebe80cSGleb Smirnoff 	struct in_ifaddr *ia;
16828ebe80cSGleb Smirnoff 
169b8a6e03fSGleb Smirnoff 	NET_EPOCH_ASSERT();
170b8a6e03fSGleb Smirnoff 
171d7c5a620SMatt Macy 	CK_STAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link) {
17228ebe80cSGleb Smirnoff 		if (ifa->ifa_addr->sa_family != AF_INET)
17328ebe80cSGleb Smirnoff 			continue;
17428ebe80cSGleb Smirnoff 		ia = (struct in_ifaddr *)ifa;
175b8a6e03fSGleb Smirnoff 		if (ia->ia_addr.sin_addr.s_addr == in.s_addr)
17628ebe80cSGleb Smirnoff 			return (1);
17728ebe80cSGleb Smirnoff 	}
17828ebe80cSGleb Smirnoff 
17928ebe80cSGleb Smirnoff 	return (0);
18028ebe80cSGleb Smirnoff }
18128ebe80cSGleb Smirnoff 
18228ebe80cSGleb Smirnoff /*
183f7a39160SGleb Smirnoff  * Return a reference to the interface address which is different to
184f7a39160SGleb Smirnoff  * the supplied one but with same IP address value.
185f7a39160SGleb Smirnoff  */
186f7a39160SGleb Smirnoff static struct in_ifaddr *
1879fdbf7eeSAlexander V. Chernikov in_localip_more(struct in_ifaddr *original_ia)
188f7a39160SGleb Smirnoff {
189c8ee75f2SGleb Smirnoff 	struct epoch_tracker et;
1909fdbf7eeSAlexander V. Chernikov 	in_addr_t original_addr = IA_SIN(original_ia)->sin_addr.s_addr;
1919fdbf7eeSAlexander V. Chernikov 	uint32_t original_fib = original_ia->ia_ifa.ifa_ifp->if_fib;
1929fdbf7eeSAlexander V. Chernikov 	struct in_ifaddr *ia;
193f7a39160SGleb Smirnoff 
194c8ee75f2SGleb Smirnoff 	NET_EPOCH_ENTER(et);
195c8ee75f2SGleb Smirnoff 	CK_LIST_FOREACH(ia, INADDR_HASH(original_addr), ia_hash) {
1969fdbf7eeSAlexander V. Chernikov 		in_addr_t addr = IA_SIN(ia)->sin_addr.s_addr;
1979fdbf7eeSAlexander V. Chernikov 		uint32_t fib = ia->ia_ifa.ifa_ifp->if_fib;
1989fdbf7eeSAlexander V. Chernikov 		if (!V_rt_add_addr_allfibs && (original_fib != fib))
1999fdbf7eeSAlexander V. Chernikov 			continue;
2009fdbf7eeSAlexander V. Chernikov 		if ((original_ia != ia) && (original_addr == addr)) {
2019fdbf7eeSAlexander V. Chernikov 			ifa_ref(&ia->ia_ifa);
202c8ee75f2SGleb Smirnoff 			NET_EPOCH_EXIT(et);
2039fdbf7eeSAlexander V. Chernikov 			return (ia);
204f7a39160SGleb Smirnoff 		}
205f7a39160SGleb Smirnoff 	}
206c8ee75f2SGleb Smirnoff 	NET_EPOCH_EXIT(et);
207f7a39160SGleb Smirnoff 
208f7a39160SGleb Smirnoff 	return (NULL);
209f7a39160SGleb Smirnoff }
210f7a39160SGleb Smirnoff 
211f7a39160SGleb Smirnoff /*
2124b631fc8SAlexander V. Chernikov  * Tries to find first IPv4 address in the provided fib.
2134b631fc8SAlexander V. Chernikov  * Prefers non-loopback addresses and return loopback IFF
2144b631fc8SAlexander V. Chernikov  * @loopback_ok is set.
2154b631fc8SAlexander V. Chernikov  *
2164b631fc8SAlexander V. Chernikov  * Returns ifa or NULL.
2174b631fc8SAlexander V. Chernikov  */
2184b631fc8SAlexander V. Chernikov struct in_ifaddr *
2194b631fc8SAlexander V. Chernikov in_findlocal(uint32_t fibnum, bool loopback_ok)
2204b631fc8SAlexander V. Chernikov {
2214b631fc8SAlexander V. Chernikov 	struct in_ifaddr *ia = NULL, *ia_lo = NULL;
2224b631fc8SAlexander V. Chernikov 
2234b631fc8SAlexander V. Chernikov 	NET_EPOCH_ASSERT();
2244b631fc8SAlexander V. Chernikov 
2254b631fc8SAlexander V. Chernikov 	CK_STAILQ_FOREACH(ia, &V_in_ifaddrhead, ia_link) {
2264b631fc8SAlexander V. Chernikov 		uint32_t ia_fib = ia->ia_ifa.ifa_ifp->if_fib;
2274b631fc8SAlexander V. Chernikov 		if (!V_rt_add_addr_allfibs && (fibnum != ia_fib))
2284b631fc8SAlexander V. Chernikov 			continue;
2294b631fc8SAlexander V. Chernikov 
2304b631fc8SAlexander V. Chernikov 		if (!IN_LOOPBACK(ntohl(IA_SIN(ia)->sin_addr.s_addr)))
2314b631fc8SAlexander V. Chernikov 			break;
2324b631fc8SAlexander V. Chernikov 		if (loopback_ok)
2334b631fc8SAlexander V. Chernikov 			ia_lo = ia;
2344b631fc8SAlexander V. Chernikov 	}
2354b631fc8SAlexander V. Chernikov 
2364b631fc8SAlexander V. Chernikov 	if (ia == NULL)
2374b631fc8SAlexander V. Chernikov 		ia = ia_lo;
2384b631fc8SAlexander V. Chernikov 
2394b631fc8SAlexander V. Chernikov 	return (ia);
2404b631fc8SAlexander V. Chernikov }
2414b631fc8SAlexander V. Chernikov 
2424b631fc8SAlexander V. Chernikov /*
243df8bae1dSRodney W. Grimes  * Determine whether an IP address is in a reserved set of addresses
244df8bae1dSRodney W. Grimes  * that may not be forwarded, or whether datagrams to that destination
245df8bae1dSRodney W. Grimes  * may be forwarded.
246df8bae1dSRodney W. Grimes  */
24726f9a767SRodney W. Grimes int
248f2565d68SRobert Watson in_canforward(struct in_addr in)
249df8bae1dSRodney W. Grimes {
2503e85b721SEd Maste 	u_long i = ntohl(in.s_addr);
251df8bae1dSRodney W. Grimes 
2526c1c6ae5SRodney W. Grimes 	if (IN_EXPERIMENTAL(i) || IN_MULTICAST(i) || IN_LINKLOCAL(i) ||
2536c1c6ae5SRodney W. Grimes 	    IN_ZERONET(i) || IN_LOOPBACK(i))
254df8bae1dSRodney W. Grimes 		return (0);
255df8bae1dSRodney W. Grimes 	return (1);
256df8bae1dSRodney W. Grimes }
257df8bae1dSRodney W. Grimes 
258df8bae1dSRodney W. Grimes /*
259df8bae1dSRodney W. Grimes  * Trim a mask in a sockaddr
260df8bae1dSRodney W. Grimes  */
2610312fbe9SPoul-Henning Kamp static void
262f2565d68SRobert Watson in_socktrim(struct sockaddr_in *ap)
263df8bae1dSRodney W. Grimes {
2643e85b721SEd Maste     char *cplim = (char *) &ap->sin_addr;
2653e85b721SEd Maste     char *cp = (char *) (&ap->sin_addr + 1);
266df8bae1dSRodney W. Grimes 
267df8bae1dSRodney W. Grimes     ap->sin_len = 0;
268df00058dSGarrett Wollman     while (--cp >= cplim)
269df8bae1dSRodney W. Grimes 	if (*cp) {
270df8bae1dSRodney W. Grimes 	    (ap)->sin_len = cp - (char *) (ap) + 1;
271df8bae1dSRodney W. Grimes 	    break;
272df8bae1dSRodney W. Grimes 	}
273df8bae1dSRodney W. Grimes }
274df8bae1dSRodney W. Grimes 
275df8bae1dSRodney W. Grimes /*
276df8bae1dSRodney W. Grimes  * Generic internet control operations (ioctl's).
277df8bae1dSRodney W. Grimes  */
27826f9a767SRodney W. Grimes int
279f2565d68SRobert Watson in_control(struct socket *so, u_long cmd, caddr_t data, struct ifnet *ifp,
280f2565d68SRobert Watson     struct thread *td)
281df8bae1dSRodney W. Grimes {
282f7a39160SGleb Smirnoff 	struct ifreq *ifr = (struct ifreq *)data;
283f7a39160SGleb Smirnoff 	struct sockaddr_in *addr = (struct sockaddr_in *)&ifr->ifr_addr;
284a68cc388SGleb Smirnoff 	struct epoch_tracker et;
285821b5cafSGleb Smirnoff 	struct ifaddr *ifa;
286f7a39160SGleb Smirnoff 	struct in_ifaddr *ia;
287f7a39160SGleb Smirnoff 	int error;
288f7a39160SGleb Smirnoff 
289f7a39160SGleb Smirnoff 	if (ifp == NULL)
290f7a39160SGleb Smirnoff 		return (EADDRNOTAVAIL);
29171212473SGleb Smirnoff 
29271212473SGleb Smirnoff 	/*
293f7a39160SGleb Smirnoff 	 * Filter out 4 ioctls we implement directly.  Forward the rest
294f7a39160SGleb Smirnoff 	 * to specific functions and ifp->if_ioctl().
295bbb3fb61SRobert Watson 	 */
2966a800098SYoshinobu Inoue 	switch (cmd) {
297bbb3fb61SRobert Watson 	case SIOCGIFADDR:
298bbb3fb61SRobert Watson 	case SIOCGIFBRDADDR:
299bbb3fb61SRobert Watson 	case SIOCGIFDSTADDR:
300bbb3fb61SRobert Watson 	case SIOCGIFNETMASK:
301f7a39160SGleb Smirnoff 		break;
3026952c3e1SAndrey V. Elsukov 	case SIOCGIFALIAS:
3036952c3e1SAndrey V. Elsukov 		sx_xlock(&in_control_sx);
3046952c3e1SAndrey V. Elsukov 		error = in_gifaddr_ioctl(cmd, data, ifp, td);
3056952c3e1SAndrey V. Elsukov 		sx_xunlock(&in_control_sx);
3066952c3e1SAndrey V. Elsukov 		return (error);
3076d00fd9cSGleb Smirnoff 	case SIOCDIFADDR:
308f7a39160SGleb Smirnoff 		sx_xlock(&in_control_sx);
309338e227aSLuiz Otavio O Souza 		error = in_difaddr_ioctl(cmd, data, ifp, td);
310f7a39160SGleb Smirnoff 		sx_xunlock(&in_control_sx);
311f7a39160SGleb Smirnoff 		return (error);
31277b89ad8SGleb Smirnoff 	case OSIOCAIFADDR:	/* 9.x compat */
3136d00fd9cSGleb Smirnoff 	case SIOCAIFADDR:
314f7a39160SGleb Smirnoff 		sx_xlock(&in_control_sx);
31577b89ad8SGleb Smirnoff 		error = in_aifaddr_ioctl(cmd, data, ifp, td);
316f7a39160SGleb Smirnoff 		sx_xunlock(&in_control_sx);
317f7a39160SGleb Smirnoff 		return (error);
318bbb3fb61SRobert Watson 	case SIOCSIFADDR:
319bbb3fb61SRobert Watson 	case SIOCSIFBRDADDR:
320bbb3fb61SRobert Watson 	case SIOCSIFDSTADDR:
321bbb3fb61SRobert Watson 	case SIOCSIFNETMASK:
32256cf9dc1SGleb Smirnoff 		/* We no longer support that old commands. */
3236d00fd9cSGleb Smirnoff 		return (EINVAL);
324bbb3fb61SRobert Watson 	default:
325f7a39160SGleb Smirnoff 		if (ifp->if_ioctl == NULL)
326bbb3fb61SRobert Watson 			return (EOPNOTSUPP);
327bbb3fb61SRobert Watson 		return ((*ifp->if_ioctl)(ifp, cmd, data));
3286a800098SYoshinobu Inoue 	}
3296a800098SYoshinobu Inoue 
330821b5cafSGleb Smirnoff 	if (addr->sin_addr.s_addr != INADDR_ANY &&
331821b5cafSGleb Smirnoff 	    prison_check_ip4(td->td_ucred, &addr->sin_addr) != 0)
332821b5cafSGleb Smirnoff 		return (EADDRNOTAVAIL);
333821b5cafSGleb Smirnoff 
334cf7b18f1SRobert Watson 	/*
335a7f77a39SXin LI 	 * Find address for this interface, if it exists.  If an
336a7f77a39SXin LI 	 * address was specified, find that one instead of the
337a7f77a39SXin LI 	 * first one on the interface, if possible.
338df8bae1dSRodney W. Grimes 	 */
339a68cc388SGleb Smirnoff 	NET_EPOCH_ENTER(et);
340d7c5a620SMatt Macy 	CK_STAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link) {
3419706c950SGleb Smirnoff 		if (ifa->ifa_addr->sa_family != AF_INET)
3429706c950SGleb Smirnoff 			continue;
343821b5cafSGleb Smirnoff 		ia = (struct in_ifaddr *)ifa;
344821b5cafSGleb Smirnoff 		if (ia->ia_addr.sin_addr.s_addr == addr->sin_addr.s_addr)
345df8bae1dSRodney W. Grimes 			break;
346ca925d9cSJonathan Lemon 	}
347a7f77a39SXin LI 	if (ifa == NULL)
348d7c5a620SMatt Macy 		CK_STAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link)
349a7f77a39SXin LI 			if (ifa->ifa_addr->sa_family == AF_INET) {
350a7f77a39SXin LI 				ia = (struct in_ifaddr *)ifa;
351a7f77a39SXin LI 				if (prison_check_ip4(td->td_ucred,
352a7f77a39SXin LI 				    &ia->ia_addr.sin_addr) == 0)
353a7f77a39SXin LI 					break;
354a7f77a39SXin LI 			}
355f7a39160SGleb Smirnoff 
356821b5cafSGleb Smirnoff 	if (ifa == NULL) {
357a68cc388SGleb Smirnoff 		NET_EPOCH_EXIT(et);
358f7a39160SGleb Smirnoff 		return (EADDRNOTAVAIL);
359ac0aa473SBill Fenner 	}
360df8bae1dSRodney W. Grimes 
361588885f2SRobert Watson 	error = 0;
362df8bae1dSRodney W. Grimes 	switch (cmd) {
363f7a39160SGleb Smirnoff 	case SIOCGIFADDR:
364f7a39160SGleb Smirnoff 		*addr = ia->ia_addr;
365f7a39160SGleb Smirnoff 		break;
3668c0fec80SRobert Watson 
367f7a39160SGleb Smirnoff 	case SIOCGIFBRDADDR:
368f7a39160SGleb Smirnoff 		if ((ifp->if_flags & IFF_BROADCAST) == 0) {
369f7a39160SGleb Smirnoff 			error = EINVAL;
370df8bae1dSRodney W. Grimes 			break;
371df8bae1dSRodney W. Grimes 		}
372f7a39160SGleb Smirnoff 		*addr = ia->ia_broadaddr;
373f7a39160SGleb Smirnoff 		break;
374f7a39160SGleb Smirnoff 
375f7a39160SGleb Smirnoff 	case SIOCGIFDSTADDR:
376f7a39160SGleb Smirnoff 		if ((ifp->if_flags & IFF_POINTOPOINT) == 0) {
377f7a39160SGleb Smirnoff 			error = EINVAL;
378f7a39160SGleb Smirnoff 			break;
379f7a39160SGleb Smirnoff 		}
380f7a39160SGleb Smirnoff 		*addr = ia->ia_dstaddr;
381f7a39160SGleb Smirnoff 		break;
382f7a39160SGleb Smirnoff 
383f7a39160SGleb Smirnoff 	case SIOCGIFNETMASK:
384f7a39160SGleb Smirnoff 		*addr = ia->ia_sockmask;
385f7a39160SGleb Smirnoff 		break;
386f7a39160SGleb Smirnoff 	}
387f7a39160SGleb Smirnoff 
388a68cc388SGleb Smirnoff 	NET_EPOCH_EXIT(et);
389f7a39160SGleb Smirnoff 
390f7a39160SGleb Smirnoff 	return (error);
3911067217dSGarrett Wollman }
392f7a39160SGleb Smirnoff 
393f7a39160SGleb Smirnoff static int
39477b89ad8SGleb Smirnoff in_aifaddr_ioctl(u_long cmd, caddr_t data, struct ifnet *ifp, struct thread *td)
395f7a39160SGleb Smirnoff {
396f7a39160SGleb Smirnoff 	const struct in_aliasreq *ifra = (struct in_aliasreq *)data;
397f7a39160SGleb Smirnoff 	const struct sockaddr_in *addr = &ifra->ifra_addr;
398f7a39160SGleb Smirnoff 	const struct sockaddr_in *broadaddr = &ifra->ifra_broadaddr;
399f7a39160SGleb Smirnoff 	const struct sockaddr_in *mask = &ifra->ifra_mask;
400f7a39160SGleb Smirnoff 	const struct sockaddr_in *dstaddr = &ifra->ifra_dstaddr;
40177b89ad8SGleb Smirnoff 	const int vhid = (cmd == SIOCAIFADDR) ? ifra->ifra_vhid : 0;
402a68cc388SGleb Smirnoff 	struct epoch_tracker et;
403f7a39160SGleb Smirnoff 	struct ifaddr *ifa;
404f7a39160SGleb Smirnoff 	struct in_ifaddr *ia;
405f7a39160SGleb Smirnoff 	bool iaIsFirst;
406f7a39160SGleb Smirnoff 	int error = 0;
407f7a39160SGleb Smirnoff 
408f7a39160SGleb Smirnoff 	error = priv_check(td, PRIV_NET_ADDIFADDR);
409f7a39160SGleb Smirnoff 	if (error)
410f7a39160SGleb Smirnoff 		return (error);
411f7a39160SGleb Smirnoff 
412f7a39160SGleb Smirnoff 	/*
413f7a39160SGleb Smirnoff 	 * ifra_addr must be present and be of INET family.
414f7a39160SGleb Smirnoff 	 * ifra_broadaddr/ifra_dstaddr and ifra_mask are optional.
415f7a39160SGleb Smirnoff 	 */
416f7a39160SGleb Smirnoff 	if (addr->sin_len != sizeof(struct sockaddr_in) ||
417f7a39160SGleb Smirnoff 	    addr->sin_family != AF_INET)
418f7a39160SGleb Smirnoff 		return (EINVAL);
419f7a39160SGleb Smirnoff 	if (broadaddr->sin_len != 0 &&
420f7a39160SGleb Smirnoff 	    (broadaddr->sin_len != sizeof(struct sockaddr_in) ||
421f7a39160SGleb Smirnoff 	    broadaddr->sin_family != AF_INET))
422f7a39160SGleb Smirnoff 		return (EINVAL);
423f7a39160SGleb Smirnoff 	if (mask->sin_len != 0 &&
424f7a39160SGleb Smirnoff 	    (mask->sin_len != sizeof(struct sockaddr_in) ||
425f7a39160SGleb Smirnoff 	    mask->sin_family != AF_INET))
426f7a39160SGleb Smirnoff 		return (EINVAL);
427f7a39160SGleb Smirnoff 	if ((ifp->if_flags & IFF_POINTOPOINT) &&
428f7a39160SGleb Smirnoff 	    (dstaddr->sin_len != sizeof(struct sockaddr_in) ||
429f7a39160SGleb Smirnoff 	     dstaddr->sin_addr.s_addr == INADDR_ANY))
430f7a39160SGleb Smirnoff 		return (EDESTADDRREQ);
431620cf65cSArtem Khramov 	if (vhid != 0 && carp_attach_p == NULL)
432f7a39160SGleb Smirnoff 		return (EPROTONOSUPPORT);
433f7a39160SGleb Smirnoff 
434f7a39160SGleb Smirnoff 	/*
435f7a39160SGleb Smirnoff 	 * See whether address already exist.
436f7a39160SGleb Smirnoff 	 */
437f7a39160SGleb Smirnoff 	iaIsFirst = true;
438f7a39160SGleb Smirnoff 	ia = NULL;
439a68cc388SGleb Smirnoff 	NET_EPOCH_ENTER(et);
440d7c5a620SMatt Macy 	CK_STAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link) {
4419706c950SGleb Smirnoff 		struct in_ifaddr *it;
442f7a39160SGleb Smirnoff 
4439706c950SGleb Smirnoff 		if (ifa->ifa_addr->sa_family != AF_INET)
444f7a39160SGleb Smirnoff 			continue;
445f7a39160SGleb Smirnoff 
4469706c950SGleb Smirnoff 		it = (struct in_ifaddr *)ifa;
447f7a39160SGleb Smirnoff 		if (it->ia_addr.sin_addr.s_addr == addr->sin_addr.s_addr &&
448f7a39160SGleb Smirnoff 		    prison_check_ip4(td->td_ucred, &addr->sin_addr) == 0)
449f7a39160SGleb Smirnoff 			ia = it;
4503f740d43SAndrey V. Elsukov 		else
4513f740d43SAndrey V. Elsukov 			iaIsFirst = false;
4521067217dSGarrett Wollman 	}
453a68cc388SGleb Smirnoff 	NET_EPOCH_EXIT(et);
454f7a39160SGleb Smirnoff 
455f7a39160SGleb Smirnoff 	if (ia != NULL)
456338e227aSLuiz Otavio O Souza 		(void )in_difaddr_ioctl(cmd, data, ifp, td);
457f7a39160SGleb Smirnoff 
45846758960SGleb Smirnoff 	ifa = ifa_alloc(sizeof(struct in_ifaddr), M_WAITOK);
45946758960SGleb Smirnoff 	ia = (struct in_ifaddr *)ifa;
46059562606SGarrett Wollman 	ifa->ifa_addr = (struct sockaddr *)&ia->ia_addr;
46159562606SGarrett Wollman 	ifa->ifa_dstaddr = (struct sockaddr *)&ia->ia_dstaddr;
46259562606SGarrett Wollman 	ifa->ifa_netmask = (struct sockaddr *)&ia->ia_sockmask;
4632d9db0bcSEric van Gyzen 	callout_init_rw(&ia->ia_garp_timer, &ifp->if_addr_lock,
4642d9db0bcSEric van Gyzen 	    CALLOUT_RETURNUNLOCKED);
46519fc74fbSJeffrey Hsu 
466f7a39160SGleb Smirnoff 	ia->ia_ifp = ifp;
467f7a39160SGleb Smirnoff 	ia->ia_addr = *addr;
468f7a39160SGleb Smirnoff 	if (mask->sin_len != 0) {
469f7a39160SGleb Smirnoff 		ia->ia_sockmask = *mask;
470f7a39160SGleb Smirnoff 		ia->ia_subnetmask = ntohl(ia->ia_sockmask.sin_addr.s_addr);
471f7a39160SGleb Smirnoff 	} else {
472*2f35e7d9SMike Karels 		in_addr_t i = ntohl(addr->sin_addr.s_addr);
473*2f35e7d9SMike Karels 
474f7a39160SGleb Smirnoff 		/*
475*2f35e7d9SMike Karels 	 	 * If netmask isn't supplied, use historical default.
47620d59403SMike Karels 		 * This is deprecated for interfaces other than loopback
47720d59403SMike Karels 		 * or point-to-point; warn in other cases.  In the future
47820d59403SMike Karels 		 * we should return an error rather than warning.
479f7a39160SGleb Smirnoff 	 	 */
48020d59403SMike Karels 		if ((ifp->if_flags & (IFF_POINTOPOINT | IFF_LOOPBACK)) == 0)
48120d59403SMike Karels 			printf("%s: set address: WARNING: network mask "
482*2f35e7d9SMike Karels 			     "should be specified; using historical default\n",
48320d59403SMike Karels 			     ifp->if_xname);
484*2f35e7d9SMike Karels 		if (IN_CLASSA(i))
485*2f35e7d9SMike Karels 			ia->ia_subnetmask = IN_CLASSA_NET;
486*2f35e7d9SMike Karels 		else if (IN_CLASSB(i))
487*2f35e7d9SMike Karels 			ia->ia_subnetmask = IN_CLASSB_NET;
488*2f35e7d9SMike Karels 		else
489*2f35e7d9SMike Karels 			ia->ia_subnetmask = IN_CLASSC_NET;
490f7a39160SGleb Smirnoff 		ia->ia_sockmask.sin_addr.s_addr = htonl(ia->ia_subnetmask);
491f7a39160SGleb Smirnoff 	}
492f7a39160SGleb Smirnoff 	ia->ia_subnet = ntohl(addr->sin_addr.s_addr) & ia->ia_subnetmask;
493f7a39160SGleb Smirnoff 	in_socktrim(&ia->ia_sockmask);
494f7a39160SGleb Smirnoff 
495df8bae1dSRodney W. Grimes 	if (ifp->if_flags & IFF_BROADCAST) {
496f7a39160SGleb Smirnoff 		if (broadaddr->sin_len != 0) {
497f7a39160SGleb Smirnoff 			ia->ia_broadaddr = *broadaddr;
498f7a39160SGleb Smirnoff 		} else if (ia->ia_subnetmask == IN_RFC3021_MASK) {
499f7a39160SGleb Smirnoff 			ia->ia_broadaddr.sin_addr.s_addr = INADDR_BROADCAST;
500f7a39160SGleb Smirnoff 			ia->ia_broadaddr.sin_len = sizeof(struct sockaddr_in);
501f7a39160SGleb Smirnoff 			ia->ia_broadaddr.sin_family = AF_INET;
502f7a39160SGleb Smirnoff 		} else {
503f7a39160SGleb Smirnoff 			ia->ia_broadaddr.sin_addr.s_addr =
504f7a39160SGleb Smirnoff 			    htonl(ia->ia_subnet | ~ia->ia_subnetmask);
505f7a39160SGleb Smirnoff 			ia->ia_broadaddr.sin_len = sizeof(struct sockaddr_in);
506df8bae1dSRodney W. Grimes 			ia->ia_broadaddr.sin_family = AF_INET;
507df8bae1dSRodney W. Grimes 		}
508f7a39160SGleb Smirnoff 	}
509f7a39160SGleb Smirnoff 
510f7a39160SGleb Smirnoff 	if (ifp->if_flags & IFF_POINTOPOINT)
511f7a39160SGleb Smirnoff 		ia->ia_dstaddr = *dstaddr;
512f7a39160SGleb Smirnoff 
5135af464bbSSteven Hartland 	if (vhid != 0) {
5145af464bbSSteven Hartland 		error = (*carp_attach_p)(&ia->ia_ifa, vhid);
5155af464bbSSteven Hartland 		if (error)
5165af464bbSSteven Hartland 			return (error);
5175af464bbSSteven Hartland 	}
5185af464bbSSteven Hartland 
519a49b317cSAlexander V. Chernikov 	/* if_addrhead is already referenced by ifa_alloc() */
520137f91e8SJohn Baldwin 	IF_ADDR_WLOCK(ifp);
521d7c5a620SMatt Macy 	CK_STAILQ_INSERT_TAIL(&ifp->if_addrhead, ifa, ifa_link);
522137f91e8SJohn Baldwin 	IF_ADDR_WUNLOCK(ifp);
523f7a39160SGleb Smirnoff 
5248c0fec80SRobert Watson 	ifa_ref(ifa);			/* in_ifaddrhead */
525c8ee75f2SGleb Smirnoff 	sx_assert(&in_control_sx, SA_XLOCKED);
526d7c5a620SMatt Macy 	CK_STAILQ_INSERT_TAIL(&V_in_ifaddrhead, ia, ia_link);
527c8ee75f2SGleb Smirnoff 	CK_LIST_INSERT_HEAD(INADDR_HASH(ia->ia_addr.sin_addr.s_addr), ia,
528c8ee75f2SGleb Smirnoff 	    ia_hash);
529df8bae1dSRodney W. Grimes 
530f7a39160SGleb Smirnoff 	/*
531f7a39160SGleb Smirnoff 	 * Give the interface a chance to initialize
532f7a39160SGleb Smirnoff 	 * if this is its first address,
533f7a39160SGleb Smirnoff 	 * and to validate the address if necessary.
534f7a39160SGleb Smirnoff 	 */
535d34165f7SSteven Hartland 	if (ifp->if_ioctl != NULL) {
536f7a39160SGleb Smirnoff 		error = (*ifp->if_ioctl)(ifp, SIOCSIFADDR, (caddr_t)ia);
537f7a39160SGleb Smirnoff 		if (error)
5385af464bbSSteven Hartland 			goto fail1;
539d34165f7SSteven Hartland 	}
540f7a39160SGleb Smirnoff 
541f7a39160SGleb Smirnoff 	/*
542f7a39160SGleb Smirnoff 	 * Add route for the network.
543f7a39160SGleb Smirnoff 	 */
544f7a39160SGleb Smirnoff 	if (vhid == 0) {
545130aebbaSAlexander V. Chernikov 		error = in_addprefix(ia);
546f7a39160SGleb Smirnoff 		if (error)
5475af464bbSSteven Hartland 			goto fail1;
548df8bae1dSRodney W. Grimes 	}
549df8bae1dSRodney W. Grimes 
550588885f2SRobert Watson 	/*
551f7a39160SGleb Smirnoff 	 * Add a loopback route to self.
552588885f2SRobert Watson 	 */
553130aebbaSAlexander V. Chernikov 	if (vhid == 0 && ia_need_loopback_route(ia)) {
554f7a39160SGleb Smirnoff 		struct in_ifaddr *eia;
555df8bae1dSRodney W. Grimes 
556f7a39160SGleb Smirnoff 		eia = in_localip_more(ia);
557f7a39160SGleb Smirnoff 
558f7a39160SGleb Smirnoff 		if (eia == NULL) {
559f7a39160SGleb Smirnoff 			error = ifa_add_loopback_route((struct ifaddr *)ia,
560f7a39160SGleb Smirnoff 			    (struct sockaddr *)&ia->ia_addr);
561f7a39160SGleb Smirnoff 			if (error)
5625af464bbSSteven Hartland 				goto fail2;
563f7a39160SGleb Smirnoff 		} else
564f7a39160SGleb Smirnoff 			ifa_free(&eia->ia_ifa);
565588885f2SRobert Watson 	}
566df8bae1dSRodney W. Grimes 
567f7a39160SGleb Smirnoff 	if (iaIsFirst && (ifp->if_flags & IFF_MULTICAST)) {
568f7a39160SGleb Smirnoff 		struct in_addr allhosts_addr;
569f7a39160SGleb Smirnoff 		struct in_ifinfo *ii;
570df8bae1dSRodney W. Grimes 
571c75aa354SBruce M Simpson 		ii = ((struct in_ifinfo *)ifp->if_afdata[AF_INET]);
572f7a39160SGleb Smirnoff 		allhosts_addr.s_addr = htonl(INADDR_ALLHOSTS_GROUP);
573df8bae1dSRodney W. Grimes 
574f7a39160SGleb Smirnoff 		error = in_joingroup(ifp, &allhosts_addr, NULL,
575f7a39160SGleb Smirnoff 			&ii->ii_allhosts);
576f7a39160SGleb Smirnoff 	}
577f7a39160SGleb Smirnoff 
57864d63b1eSAndrey V. Elsukov 	/*
57964d63b1eSAndrey V. Elsukov 	 * Note: we don't need extra reference for ifa, since we called
58064d63b1eSAndrey V. Elsukov 	 * with sx lock held, and ifaddr can not be deleted in concurrent
58164d63b1eSAndrey V. Elsukov 	 * thread.
58264d63b1eSAndrey V. Elsukov 	 */
58364d63b1eSAndrey V. Elsukov 	EVENTHANDLER_INVOKE(ifaddr_event_ext, ifp, ifa, IFADDR_EVENT_ADD);
584f7a39160SGleb Smirnoff 
585f7a39160SGleb Smirnoff 	return (error);
586f7a39160SGleb Smirnoff 
5875af464bbSSteven Hartland fail2:
588f7a39160SGleb Smirnoff 	if (vhid == 0)
589f7a39160SGleb Smirnoff 		(void )in_scrubprefix(ia, LLE_STATIC);
590f7a39160SGleb Smirnoff 
5915af464bbSSteven Hartland fail1:
592f7a39160SGleb Smirnoff 	if (ia->ia_ifa.ifa_carp)
593338e227aSLuiz Otavio O Souza 		(*carp_detach_p)(&ia->ia_ifa, false);
594f7a39160SGleb Smirnoff 
595f7a39160SGleb Smirnoff 	IF_ADDR_WLOCK(ifp);
596d7c5a620SMatt Macy 	CK_STAILQ_REMOVE(&ifp->if_addrhead, &ia->ia_ifa, ifaddr, ifa_link);
597f7a39160SGleb Smirnoff 	IF_ADDR_WUNLOCK(ifp);
598a49b317cSAlexander V. Chernikov 	ifa_free(&ia->ia_ifa);		/* if_addrhead */
599f7a39160SGleb Smirnoff 
600c8ee75f2SGleb Smirnoff 	sx_assert(&in_control_sx, SA_XLOCKED);
601d7c5a620SMatt Macy 	CK_STAILQ_REMOVE(&V_in_ifaddrhead, ia, in_ifaddr, ia_link);
602c8ee75f2SGleb Smirnoff 	CK_LIST_REMOVE(ia, ia_hash);
603a49b317cSAlexander V. Chernikov 	ifa_free(&ia->ia_ifa);		/* in_ifaddrhead */
604f7a39160SGleb Smirnoff 
605f7a39160SGleb Smirnoff 	return (error);
606f7a39160SGleb Smirnoff }
607f7a39160SGleb Smirnoff 
608f7a39160SGleb Smirnoff static int
609338e227aSLuiz Otavio O Souza in_difaddr_ioctl(u_long cmd, caddr_t data, struct ifnet *ifp, struct thread *td)
610f7a39160SGleb Smirnoff {
611f7a39160SGleb Smirnoff 	const struct ifreq *ifr = (struct ifreq *)data;
6126224cd89SNathan Whitehorn 	const struct sockaddr_in *addr = (const struct sockaddr_in *)
6136224cd89SNathan Whitehorn 	    &ifr->ifr_addr;
614f7a39160SGleb Smirnoff 	struct ifaddr *ifa;
615f7a39160SGleb Smirnoff 	struct in_ifaddr *ia;
616f7a39160SGleb Smirnoff 	bool deleteAny, iaIsLast;
617f7a39160SGleb Smirnoff 	int error;
618f7a39160SGleb Smirnoff 
619f7a39160SGleb Smirnoff 	if (td != NULL) {
620f7a39160SGleb Smirnoff 		error = priv_check(td, PRIV_NET_DELIFADDR);
621f7a39160SGleb Smirnoff 		if (error)
622f7a39160SGleb Smirnoff 			return (error);
623f7a39160SGleb Smirnoff 	}
624f7a39160SGleb Smirnoff 
625f7a39160SGleb Smirnoff 	if (addr->sin_len != sizeof(struct sockaddr_in) ||
626f7a39160SGleb Smirnoff 	    addr->sin_family != AF_INET)
627f7a39160SGleb Smirnoff 		deleteAny = true;
628f7a39160SGleb Smirnoff 	else
629f7a39160SGleb Smirnoff 		deleteAny = false;
630f7a39160SGleb Smirnoff 
631f7a39160SGleb Smirnoff 	iaIsLast = true;
632f7a39160SGleb Smirnoff 	ia = NULL;
633f7a39160SGleb Smirnoff 	IF_ADDR_WLOCK(ifp);
634d7c5a620SMatt Macy 	CK_STAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link) {
6359706c950SGleb Smirnoff 		struct in_ifaddr *it;
636f7a39160SGleb Smirnoff 
6379706c950SGleb Smirnoff 		if (ifa->ifa_addr->sa_family != AF_INET)
638f7a39160SGleb Smirnoff 			continue;
639f7a39160SGleb Smirnoff 
6409706c950SGleb Smirnoff 		it = (struct in_ifaddr *)ifa;
641f7a39160SGleb Smirnoff 		if (deleteAny && ia == NULL && (td == NULL ||
642f7a39160SGleb Smirnoff 		    prison_check_ip4(td->td_ucred, &it->ia_addr.sin_addr) == 0))
643f7a39160SGleb Smirnoff 			ia = it;
644f7a39160SGleb Smirnoff 
645f7a39160SGleb Smirnoff 		if (it->ia_addr.sin_addr.s_addr == addr->sin_addr.s_addr &&
646f7a39160SGleb Smirnoff 		    (td == NULL || prison_check_ip4(td->td_ucred,
647f7a39160SGleb Smirnoff 		    &addr->sin_addr) == 0))
648f7a39160SGleb Smirnoff 			ia = it;
649f7a39160SGleb Smirnoff 
650f7a39160SGleb Smirnoff 		if (it != ia)
651f7a39160SGleb Smirnoff 			iaIsLast = false;
652f7a39160SGleb Smirnoff 	}
653f7a39160SGleb Smirnoff 
654f7a39160SGleb Smirnoff 	if (ia == NULL) {
655f7a39160SGleb Smirnoff 		IF_ADDR_WUNLOCK(ifp);
656f7a39160SGleb Smirnoff 		return (EADDRNOTAVAIL);
657f7a39160SGleb Smirnoff 	}
658f7a39160SGleb Smirnoff 
659d7c5a620SMatt Macy 	CK_STAILQ_REMOVE(&ifp->if_addrhead, &ia->ia_ifa, ifaddr, ifa_link);
660f7a39160SGleb Smirnoff 	IF_ADDR_WUNLOCK(ifp);
661f7a39160SGleb Smirnoff 	ifa_free(&ia->ia_ifa);		/* if_addrhead */
662f7a39160SGleb Smirnoff 
663c8ee75f2SGleb Smirnoff 	sx_assert(&in_control_sx, SA_XLOCKED);
664d7c5a620SMatt Macy 	CK_STAILQ_REMOVE(&V_in_ifaddrhead, ia, in_ifaddr, ia_link);
665c8ee75f2SGleb Smirnoff 	CK_LIST_REMOVE(ia, ia_hash);
666f7a39160SGleb Smirnoff 
667089cdfadSRuslan Ermilov 	/*
668237bf7f7SGleb Smirnoff 	 * in_scrubprefix() kills the interface route.
669089cdfadSRuslan Ermilov 	 */
670237bf7f7SGleb Smirnoff 	in_scrubprefix(ia, LLE_STATIC);
671588885f2SRobert Watson 
672c655b7c4SDavid Greenman 	/*
673089cdfadSRuslan Ermilov 	 * in_ifadown gets rid of all the rest of
674089cdfadSRuslan Ermilov 	 * the routes.  This is not quite the right
675089cdfadSRuslan Ermilov 	 * thing to do, but at least if we are running
676089cdfadSRuslan Ermilov 	 * a routing process they will come back.
677089cdfadSRuslan Ermilov 	 */
67891854268SRuslan Ermilov 	in_ifadown(&ia->ia_ifa, 1);
6790f02fdacSBrian Somers 
68008b68b0eSGleb Smirnoff 	if (ia->ia_ifa.ifa_carp)
68159b2022fSLuiz Otavio O Souza 		(*carp_detach_p)(&ia->ia_ifa, cmd == SIOCAIFADDR);
68208b68b0eSGleb Smirnoff 
683f7e083afSBruce M Simpson 	/*
684f7e083afSBruce M Simpson 	 * If this is the last IPv4 address configured on this
685f7e083afSBruce M Simpson 	 * interface, leave the all-hosts group.
686d10910e6SBruce M Simpson 	 * No state-change report need be transmitted.
687f7e083afSBruce M Simpson 	 */
688f7a39160SGleb Smirnoff 	if (iaIsLast && (ifp->if_flags & IFF_MULTICAST)) {
689f7a39160SGleb Smirnoff 		struct in_ifinfo *ii;
690f7a39160SGleb Smirnoff 
691c75aa354SBruce M Simpson 		ii = ((struct in_ifinfo *)ifp->if_afdata[AF_INET]);
692d10910e6SBruce M Simpson 		if (ii->ii_allhosts) {
693f3e1324bSStephen Hurd 			(void)in_leavegroup(ii->ii_allhosts, NULL);
694d10910e6SBruce M Simpson 			ii->ii_allhosts = NULL;
695d10910e6SBruce M Simpson 		}
696f7a39160SGleb Smirnoff 	}
6976d00fd9cSGleb Smirnoff 
6982d9db0bcSEric van Gyzen 	IF_ADDR_WLOCK(ifp);
6992d9db0bcSEric van Gyzen 	if (callout_stop(&ia->ia_garp_timer) == 1) {
7002d9db0bcSEric van Gyzen 		ifa_free(&ia->ia_ifa);
7012d9db0bcSEric van Gyzen 	}
7022d9db0bcSEric van Gyzen 	IF_ADDR_WUNLOCK(ifp);
7032d9db0bcSEric van Gyzen 
70464d63b1eSAndrey V. Elsukov 	EVENTHANDLER_INVOKE(ifaddr_event_ext, ifp, &ia->ia_ifa,
70564d63b1eSAndrey V. Elsukov 	    IFADDR_EVENT_DEL);
706a49b317cSAlexander V. Chernikov 	ifa_free(&ia->ia_ifa);		/* in_ifaddrhead */
707f7a39160SGleb Smirnoff 
708f7a39160SGleb Smirnoff 	return (0);
709df8bae1dSRodney W. Grimes }
710df8bae1dSRodney W. Grimes 
7116952c3e1SAndrey V. Elsukov static int
7126952c3e1SAndrey V. Elsukov in_gifaddr_ioctl(u_long cmd, caddr_t data, struct ifnet *ifp, struct thread *td)
7136952c3e1SAndrey V. Elsukov {
7146952c3e1SAndrey V. Elsukov 	struct in_aliasreq *ifra = (struct in_aliasreq *)data;
7156952c3e1SAndrey V. Elsukov 	const struct sockaddr_in *addr = &ifra->ifra_addr;
7166952c3e1SAndrey V. Elsukov 	struct epoch_tracker et;
7176952c3e1SAndrey V. Elsukov 	struct ifaddr *ifa;
7186952c3e1SAndrey V. Elsukov 	struct in_ifaddr *ia;
7196952c3e1SAndrey V. Elsukov 
7206952c3e1SAndrey V. Elsukov 	/*
7216952c3e1SAndrey V. Elsukov 	 * ifra_addr must be present and be of INET family.
7226952c3e1SAndrey V. Elsukov 	 */
7236952c3e1SAndrey V. Elsukov 	if (addr->sin_len != sizeof(struct sockaddr_in) ||
7246952c3e1SAndrey V. Elsukov 	    addr->sin_family != AF_INET)
7256952c3e1SAndrey V. Elsukov 		return (EINVAL);
7266952c3e1SAndrey V. Elsukov 
7276952c3e1SAndrey V. Elsukov 	/*
7286952c3e1SAndrey V. Elsukov 	 * See whether address exist.
7296952c3e1SAndrey V. Elsukov 	 */
7306952c3e1SAndrey V. Elsukov 	ia = NULL;
7316952c3e1SAndrey V. Elsukov 	NET_EPOCH_ENTER(et);
7326952c3e1SAndrey V. Elsukov 	CK_STAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link) {
7336952c3e1SAndrey V. Elsukov 		struct in_ifaddr *it;
7346952c3e1SAndrey V. Elsukov 
7356952c3e1SAndrey V. Elsukov 		if (ifa->ifa_addr->sa_family != AF_INET)
7366952c3e1SAndrey V. Elsukov 			continue;
7376952c3e1SAndrey V. Elsukov 
7386952c3e1SAndrey V. Elsukov 		it = (struct in_ifaddr *)ifa;
7396952c3e1SAndrey V. Elsukov 		if (it->ia_addr.sin_addr.s_addr == addr->sin_addr.s_addr &&
7406952c3e1SAndrey V. Elsukov 		    prison_check_ip4(td->td_ucred, &addr->sin_addr) == 0) {
7416952c3e1SAndrey V. Elsukov 			ia = it;
7426952c3e1SAndrey V. Elsukov 			break;
7436952c3e1SAndrey V. Elsukov 		}
7446952c3e1SAndrey V. Elsukov 	}
7456952c3e1SAndrey V. Elsukov 	if (ia == NULL) {
7466952c3e1SAndrey V. Elsukov 		NET_EPOCH_EXIT(et);
7476952c3e1SAndrey V. Elsukov 		return (EADDRNOTAVAIL);
7486952c3e1SAndrey V. Elsukov 	}
7496952c3e1SAndrey V. Elsukov 
7506952c3e1SAndrey V. Elsukov 	ifra->ifra_mask = ia->ia_sockmask;
7516952c3e1SAndrey V. Elsukov 	if ((ifp->if_flags & IFF_POINTOPOINT) &&
7526952c3e1SAndrey V. Elsukov 	    ia->ia_dstaddr.sin_family == AF_INET)
7536952c3e1SAndrey V. Elsukov 		ifra->ifra_dstaddr = ia->ia_dstaddr;
7546952c3e1SAndrey V. Elsukov 	else if ((ifp->if_flags & IFF_BROADCAST) &&
7556952c3e1SAndrey V. Elsukov 	    ia->ia_broadaddr.sin_family == AF_INET)
7566952c3e1SAndrey V. Elsukov 		ifra->ifra_broadaddr = ia->ia_broadaddr;
7576952c3e1SAndrey V. Elsukov 	else
7586952c3e1SAndrey V. Elsukov 		memset(&ifra->ifra_broadaddr, 0,
7596952c3e1SAndrey V. Elsukov 		    sizeof(ifra->ifra_broadaddr));
7606952c3e1SAndrey V. Elsukov 
7616952c3e1SAndrey V. Elsukov 	NET_EPOCH_EXIT(et);
7626952c3e1SAndrey V. Elsukov 	return (0);
7636952c3e1SAndrey V. Elsukov }
7646952c3e1SAndrey V. Elsukov 
76581728a53SAlexander V. Chernikov static int
76681728a53SAlexander V. Chernikov in_match_ifaddr(const struct rtentry *rt, const struct nhop_object *nh, void *arg)
76781728a53SAlexander V. Chernikov {
76881728a53SAlexander V. Chernikov 
76981728a53SAlexander V. Chernikov 	if (nh->nh_ifa == (struct ifaddr *)arg)
77081728a53SAlexander V. Chernikov 		return (1);
77181728a53SAlexander V. Chernikov 
77281728a53SAlexander V. Chernikov 	return (0);
77381728a53SAlexander V. Chernikov }
77481728a53SAlexander V. Chernikov 
77581728a53SAlexander V. Chernikov static int
77681728a53SAlexander V. Chernikov in_handle_prefix_route(uint32_t fibnum, int cmd,
777130aebbaSAlexander V. Chernikov     struct sockaddr_in *dst, struct sockaddr_in *netmask, struct ifaddr *ifa,
778130aebbaSAlexander V. Chernikov     struct ifnet *ifp)
77981728a53SAlexander V. Chernikov {
78081728a53SAlexander V. Chernikov 
78181728a53SAlexander V. Chernikov 	NET_EPOCH_ASSERT();
78281728a53SAlexander V. Chernikov 
78381728a53SAlexander V. Chernikov 	/* Prepare gateway */
78481728a53SAlexander V. Chernikov 	struct sockaddr_dl_short sdl = {
78581728a53SAlexander V. Chernikov 		.sdl_family = AF_LINK,
78681728a53SAlexander V. Chernikov 		.sdl_len = sizeof(struct sockaddr_dl_short),
78781728a53SAlexander V. Chernikov 		.sdl_type = ifa->ifa_ifp->if_type,
78881728a53SAlexander V. Chernikov 		.sdl_index = ifa->ifa_ifp->if_index,
78981728a53SAlexander V. Chernikov 	};
79081728a53SAlexander V. Chernikov 
79181728a53SAlexander V. Chernikov 	struct rt_addrinfo info = {
79281728a53SAlexander V. Chernikov 		.rti_ifa = ifa,
793130aebbaSAlexander V. Chernikov 		.rti_ifp = ifp,
79481728a53SAlexander V. Chernikov 		.rti_flags = RTF_PINNED | ((netmask != NULL) ? 0 : RTF_HOST),
79581728a53SAlexander V. Chernikov 		.rti_info = {
79681728a53SAlexander V. Chernikov 			[RTAX_DST] = (struct sockaddr *)dst,
79781728a53SAlexander V. Chernikov 			[RTAX_NETMASK] = (struct sockaddr *)netmask,
79881728a53SAlexander V. Chernikov 			[RTAX_GATEWAY] = (struct sockaddr *)&sdl,
79981728a53SAlexander V. Chernikov 		},
80081728a53SAlexander V. Chernikov 		/* Ensure we delete the prefix IFF prefix ifa matches */
80181728a53SAlexander V. Chernikov 		.rti_filter = in_match_ifaddr,
80281728a53SAlexander V. Chernikov 		.rti_filterdata = ifa,
80381728a53SAlexander V. Chernikov 	};
80481728a53SAlexander V. Chernikov 
80581728a53SAlexander V. Chernikov 	return (rib_handle_ifaddr_info(fibnum, cmd, &info));
80681728a53SAlexander V. Chernikov }
80781728a53SAlexander V. Chernikov 
80881728a53SAlexander V. Chernikov /*
809130aebbaSAlexander V. Chernikov  * Routing table interaction with interface addresses.
810130aebbaSAlexander V. Chernikov  *
811130aebbaSAlexander V. Chernikov  * In general, two types of routes needs to be installed:
812130aebbaSAlexander V. Chernikov  * a) "interface" or "prefix" route, telling user that the addresses
813130aebbaSAlexander V. Chernikov  *   behind the ifa prefix are reached directly.
814130aebbaSAlexander V. Chernikov  * b) "loopback" route installed for the ifa address, telling user that
815130aebbaSAlexander V. Chernikov  *   the address belongs to local system.
816130aebbaSAlexander V. Chernikov  *
817130aebbaSAlexander V. Chernikov  * Handling for (a) and (b) differs in multi-fib aspects, hence they
818130aebbaSAlexander V. Chernikov  *  are implemented in different functions below.
819130aebbaSAlexander V. Chernikov  *
820130aebbaSAlexander V. Chernikov  * The cases above may intersect - /32 interface aliases results in
821130aebbaSAlexander V. Chernikov  *  the same prefix produced by (a) and (b). This blurs the definition
822130aebbaSAlexander V. Chernikov  *  of the "loopback" route and complicate interactions. The interaction
823130aebbaSAlexander V. Chernikov  *  table is defined below. The case numbers are used in the multiple
824130aebbaSAlexander V. Chernikov  *  functions below to refer to the particular test case.
825130aebbaSAlexander V. Chernikov  *
82681728a53SAlexander V. Chernikov  * There can be multiple options:
827130aebbaSAlexander V. Chernikov  * 1) Adding address with prefix on non-p2p/non-loopback interface.
828130aebbaSAlexander V. Chernikov  *  Example: 192.0.2.1/24. Action:
829130aebbaSAlexander V. Chernikov  *  * add "prefix" route towards 192.0.2.0/24 via @ia interface,
830130aebbaSAlexander V. Chernikov  *    using @ia as an address source.
831130aebbaSAlexander V. Chernikov  *  * add "loopback" route towards 192.0.2.1 via V_loif, saving
832130aebbaSAlexander V. Chernikov  *   @ia ifp in the gateway and using @ia as an address source.
833130aebbaSAlexander V. Chernikov  *
834130aebbaSAlexander V. Chernikov  * 2) Adding address with /32 mask to non-p2p/non-loopback interface.
835130aebbaSAlexander V. Chernikov  *  Example: 192.0.2.2/32. Action:
836130aebbaSAlexander V. Chernikov  *  * add "prefix" host route via V_loif, using @ia as an address source.
837130aebbaSAlexander V. Chernikov  *
83881728a53SAlexander V. Chernikov  * 3) Adding address with or without prefix to p2p interface.
839130aebbaSAlexander V. Chernikov  *  Example: 10.0.0.1/24->10.0.0.2. Action:
840130aebbaSAlexander V. Chernikov  *  * add "prefix" host route towards 10.0.0.2 via this interface, using @ia
841130aebbaSAlexander V. Chernikov  *    as an address source. Note: no sense in installing full /24 as the interface
842130aebbaSAlexander V. Chernikov  *    is point-to-point.
843130aebbaSAlexander V. Chernikov  *  * add "loopback" route towards 10.0.9.1 via V_loif, saving
844130aebbaSAlexander V. Chernikov  *   @ia ifp in the gateway and using @ia as an address source.
845130aebbaSAlexander V. Chernikov  *
84681728a53SAlexander V. Chernikov  * 4) Adding address with or without prefix to loopback interface.
847130aebbaSAlexander V. Chernikov  *  Example: 192.0.2.1/24. Action:
848130aebbaSAlexander V. Chernikov  *  * add "prefix" host route via @ia interface, using @ia as an address source.
849130aebbaSAlexander V. Chernikov  *    Note: Skip installing /24 prefix as it would introduce TTL loop
850130aebbaSAlexander V. Chernikov  *    for the traffic destined to these addresses.
851130aebbaSAlexander V. Chernikov  */
852130aebbaSAlexander V. Chernikov 
853130aebbaSAlexander V. Chernikov /*
854130aebbaSAlexander V. Chernikov  * Checks if @ia needs to install loopback route to @ia address via
855130aebbaSAlexander V. Chernikov  *  ifa_maintain_loopback_route().
856130aebbaSAlexander V. Chernikov  *
857130aebbaSAlexander V. Chernikov  * Return true on success.
858130aebbaSAlexander V. Chernikov  */
859130aebbaSAlexander V. Chernikov static bool
860130aebbaSAlexander V. Chernikov ia_need_loopback_route(const struct in_ifaddr *ia)
861130aebbaSAlexander V. Chernikov {
862130aebbaSAlexander V. Chernikov 	struct ifnet *ifp = ia->ia_ifp;
863130aebbaSAlexander V. Chernikov 
864130aebbaSAlexander V. Chernikov 	/* Case 4: Skip loopback interfaces */
865130aebbaSAlexander V. Chernikov 	if ((ifp->if_flags & IFF_LOOPBACK) ||
866130aebbaSAlexander V. Chernikov 	    (ia->ia_addr.sin_addr.s_addr == INADDR_ANY))
867130aebbaSAlexander V. Chernikov 		return (false);
868130aebbaSAlexander V. Chernikov 
869130aebbaSAlexander V. Chernikov 	/* Clash avoidance: Skip p2p interfaces with both addresses are equal */
870130aebbaSAlexander V. Chernikov 	if ((ifp->if_flags & IFF_POINTOPOINT) &&
871130aebbaSAlexander V. Chernikov 	    ia->ia_dstaddr.sin_addr.s_addr == ia->ia_addr.sin_addr.s_addr)
872130aebbaSAlexander V. Chernikov 		return (false);
873130aebbaSAlexander V. Chernikov 
874130aebbaSAlexander V. Chernikov 	/* Case 2: skip /32 prefixes */
875130aebbaSAlexander V. Chernikov 	if (!(ifp->if_flags & IFF_POINTOPOINT) &&
876130aebbaSAlexander V. Chernikov 	    (ia->ia_sockmask.sin_addr.s_addr == INADDR_BROADCAST))
877130aebbaSAlexander V. Chernikov 		return (false);
878130aebbaSAlexander V. Chernikov 
879130aebbaSAlexander V. Chernikov 	return (true);
880130aebbaSAlexander V. Chernikov }
881130aebbaSAlexander V. Chernikov 
882130aebbaSAlexander V. Chernikov /*
883130aebbaSAlexander V. Chernikov  * Calculate "prefix" route corresponding to @ia.
884130aebbaSAlexander V. Chernikov  */
885130aebbaSAlexander V. Chernikov static void
886130aebbaSAlexander V. Chernikov ia_getrtprefix(const struct in_ifaddr *ia, struct in_addr *prefix, struct in_addr *mask)
887130aebbaSAlexander V. Chernikov {
888130aebbaSAlexander V. Chernikov 
889130aebbaSAlexander V. Chernikov 	if (ia->ia_ifp->if_flags & IFF_POINTOPOINT) {
890130aebbaSAlexander V. Chernikov 		/* Case 3: return host route for dstaddr */
891130aebbaSAlexander V. Chernikov 		*prefix = ia->ia_dstaddr.sin_addr;
892130aebbaSAlexander V. Chernikov 		mask->s_addr = INADDR_BROADCAST;
893130aebbaSAlexander V. Chernikov 	} else if (ia->ia_ifp->if_flags & IFF_LOOPBACK) {
894130aebbaSAlexander V. Chernikov 		/* Case 4: return host route for ifaddr */
895130aebbaSAlexander V. Chernikov 		*prefix = ia->ia_addr.sin_addr;
896130aebbaSAlexander V. Chernikov 		mask->s_addr = INADDR_BROADCAST;
897130aebbaSAlexander V. Chernikov 	} else {
898130aebbaSAlexander V. Chernikov 		/* Cases 1,2: return actual ia prefix */
899130aebbaSAlexander V. Chernikov 		*prefix = ia->ia_addr.sin_addr;
900130aebbaSAlexander V. Chernikov 		*mask = ia->ia_sockmask.sin_addr;
901130aebbaSAlexander V. Chernikov 		prefix->s_addr &= mask->s_addr;
902130aebbaSAlexander V. Chernikov 	}
903130aebbaSAlexander V. Chernikov }
904130aebbaSAlexander V. Chernikov 
905130aebbaSAlexander V. Chernikov /*
906130aebbaSAlexander V. Chernikov  * Adds or delete interface "prefix" route corresponding to @ifa.
907130aebbaSAlexander V. Chernikov  *  Returns 0 on success or errno.
90881728a53SAlexander V. Chernikov  */
90981728a53SAlexander V. Chernikov int
91081728a53SAlexander V. Chernikov in_handle_ifaddr_route(int cmd, struct in_ifaddr *ia)
91181728a53SAlexander V. Chernikov {
91281728a53SAlexander V. Chernikov 	struct ifaddr *ifa = &ia->ia_ifa;
91381728a53SAlexander V. Chernikov 	struct in_addr daddr, maddr;
91481728a53SAlexander V. Chernikov 	struct sockaddr_in *pmask;
91581728a53SAlexander V. Chernikov 	struct epoch_tracker et;
91681728a53SAlexander V. Chernikov 	int error;
91781728a53SAlexander V. Chernikov 
918130aebbaSAlexander V. Chernikov 	ia_getrtprefix(ia, &daddr, &maddr);
91981728a53SAlexander V. Chernikov 
92081728a53SAlexander V. Chernikov 	struct sockaddr_in mask = {
92181728a53SAlexander V. Chernikov 		.sin_family = AF_INET,
92281728a53SAlexander V. Chernikov 		.sin_len = sizeof(struct sockaddr_in),
92381728a53SAlexander V. Chernikov 		.sin_addr = maddr,
92481728a53SAlexander V. Chernikov 	};
92581728a53SAlexander V. Chernikov 
926130aebbaSAlexander V. Chernikov 	pmask = (maddr.s_addr != INADDR_BROADCAST) ? &mask : NULL;
92781728a53SAlexander V. Chernikov 
92881728a53SAlexander V. Chernikov 	struct sockaddr_in dst = {
92981728a53SAlexander V. Chernikov 		.sin_family = AF_INET,
93081728a53SAlexander V. Chernikov 		.sin_len = sizeof(struct sockaddr_in),
93181728a53SAlexander V. Chernikov 		.sin_addr.s_addr = daddr.s_addr & maddr.s_addr,
93281728a53SAlexander V. Chernikov 	};
93381728a53SAlexander V. Chernikov 
934130aebbaSAlexander V. Chernikov 	struct ifnet *ifp = ia->ia_ifp;
935130aebbaSAlexander V. Chernikov 
936130aebbaSAlexander V. Chernikov 	if ((maddr.s_addr == INADDR_BROADCAST) &&
937130aebbaSAlexander V. Chernikov 	    (!(ia->ia_ifp->if_flags & (IFF_POINTOPOINT|IFF_LOOPBACK)))) {
938130aebbaSAlexander V. Chernikov 		/* Case 2: host route on broadcast interface */
939130aebbaSAlexander V. Chernikov 		ifp = V_loif;
940130aebbaSAlexander V. Chernikov 	}
941130aebbaSAlexander V. Chernikov 
94281728a53SAlexander V. Chernikov 	uint32_t fibnum = ifa->ifa_ifp->if_fib;
94381728a53SAlexander V. Chernikov 	NET_EPOCH_ENTER(et);
944130aebbaSAlexander V. Chernikov 	error = in_handle_prefix_route(fibnum, cmd, &dst, pmask, ifa, ifp);
94581728a53SAlexander V. Chernikov 	NET_EPOCH_EXIT(et);
94681728a53SAlexander V. Chernikov 
94781728a53SAlexander V. Chernikov 	return (error);
94881728a53SAlexander V. Chernikov }
94981728a53SAlexander V. Chernikov 
950ccbb9c35SQing Li /*
951d68cf57bSAlexander V. Chernikov  * Check if we have a route for the given prefix already.
95248321abeSMax Laier  */
953d68cf57bSAlexander V. Chernikov static bool
954130aebbaSAlexander V. Chernikov in_hasrtprefix(struct in_ifaddr *target)
95548321abeSMax Laier {
9562144431cSGleb Smirnoff 	struct epoch_tracker et;
95748321abeSMax Laier 	struct in_ifaddr *ia;
958bfb26eecSGleb Smirnoff 	struct in_addr prefix, mask, p, m;
959d68cf57bSAlexander V. Chernikov 	bool result = false;
96048321abeSMax Laier 
961130aebbaSAlexander V. Chernikov 	ia_getrtprefix(target, &prefix, &mask);
96248321abeSMax Laier 
9630cfee0c2SAlan Somers 	/* Look for an existing address with the same prefix, mask, and fib */
9642144431cSGleb Smirnoff 	NET_EPOCH_ENTER(et);
965d7c5a620SMatt Macy 	CK_STAILQ_FOREACH(ia, &V_in_ifaddrhead, ia_link) {
966130aebbaSAlexander V. Chernikov 		ia_getrtprefix(ia, &p, &m);
967bfb26eecSGleb Smirnoff 
968bfb26eecSGleb Smirnoff 		if (prefix.s_addr != p.s_addr ||
969bfb26eecSGleb Smirnoff 		    mask.s_addr != m.s_addr)
970bfb26eecSGleb Smirnoff 			continue;
971130aebbaSAlexander V. Chernikov 
9720cfee0c2SAlan Somers 		if (target->ia_ifp->if_fib != ia->ia_ifp->if_fib)
9730cfee0c2SAlan Somers 			continue;
97448321abeSMax Laier 
97548321abeSMax Laier 		/*
97648321abeSMax Laier 		 * If we got a matching prefix route inserted by other
97748321abeSMax Laier 		 * interface address, we are done here.
97848321abeSMax Laier 		 */
9791ae95409SGleb Smirnoff 		if (ia->ia_flags & IFA_ROUTE) {
980d68cf57bSAlexander V. Chernikov 			result = true;
981d68cf57bSAlexander V. Chernikov 			break;
982d68cf57bSAlexander V. Chernikov 		}
983d68cf57bSAlexander V. Chernikov 	}
9842144431cSGleb Smirnoff 	NET_EPOCH_EXIT(et);
9850cfee0c2SAlan Somers 
986d68cf57bSAlexander V. Chernikov 	return (result);
987d68cf57bSAlexander V. Chernikov }
988d68cf57bSAlexander V. Chernikov 
989d68cf57bSAlexander V. Chernikov int
990130aebbaSAlexander V. Chernikov in_addprefix(struct in_ifaddr *target)
991d68cf57bSAlexander V. Chernikov {
992d68cf57bSAlexander V. Chernikov 	int error;
993d68cf57bSAlexander V. Chernikov 
994130aebbaSAlexander V. Chernikov 	if (in_hasrtprefix(target)) {
995d68cf57bSAlexander V. Chernikov 		if (V_nosameprefix)
996d68cf57bSAlexander V. Chernikov 			return (EEXIST);
997d68cf57bSAlexander V. Chernikov 		else {
998d68cf57bSAlexander V. Chernikov 			rt_addrmsg(RTM_ADD, &target->ia_ifa,
999d68cf57bSAlexander V. Chernikov 			    target->ia_ifp->if_fib);
10001ae95409SGleb Smirnoff 			return (0);
10011ae95409SGleb Smirnoff 		}
100248321abeSMax Laier 	}
100348321abeSMax Laier 
100448321abeSMax Laier 	/*
100548321abeSMax Laier 	 * No-one seem to have this prefix route, so we try to insert it.
100648321abeSMax Laier 	 */
100781728a53SAlexander V. Chernikov 	rt_addrmsg(RTM_ADD, &target->ia_ifa, target->ia_ifp->if_fib);
100881728a53SAlexander V. Chernikov 	error = in_handle_ifaddr_route(RTM_ADD, target);
100948321abeSMax Laier 	if (!error)
101048321abeSMax Laier 		target->ia_flags |= IFA_ROUTE;
1011460473a0SBjoern A. Zeeb 	return (error);
101248321abeSMax Laier }
101348321abeSMax Laier 
101448321abeSMax Laier /*
10153e7a2321SAlexander V. Chernikov  * Removes either all lle entries for given @ia, or lle
10163e7a2321SAlexander V. Chernikov  * corresponding to @ia address.
10173e7a2321SAlexander V. Chernikov  */
10183e7a2321SAlexander V. Chernikov static void
10193e7a2321SAlexander V. Chernikov in_scrubprefixlle(struct in_ifaddr *ia, int all, u_int flags)
10203e7a2321SAlexander V. Chernikov {
10213e7a2321SAlexander V. Chernikov 	struct sockaddr_in addr, mask;
10223e7a2321SAlexander V. Chernikov 	struct sockaddr *saddr, *smask;
10233e7a2321SAlexander V. Chernikov 	struct ifnet *ifp;
10243e7a2321SAlexander V. Chernikov 
10253e7a2321SAlexander V. Chernikov 	saddr = (struct sockaddr *)&addr;
10263e7a2321SAlexander V. Chernikov 	bzero(&addr, sizeof(addr));
10273e7a2321SAlexander V. Chernikov 	addr.sin_len = sizeof(addr);
10283e7a2321SAlexander V. Chernikov 	addr.sin_family = AF_INET;
10293e7a2321SAlexander V. Chernikov 	smask = (struct sockaddr *)&mask;
10303e7a2321SAlexander V. Chernikov 	bzero(&mask, sizeof(mask));
10313e7a2321SAlexander V. Chernikov 	mask.sin_len = sizeof(mask);
10323e7a2321SAlexander V. Chernikov 	mask.sin_family = AF_INET;
10333e7a2321SAlexander V. Chernikov 	mask.sin_addr.s_addr = ia->ia_subnetmask;
10343e7a2321SAlexander V. Chernikov 	ifp = ia->ia_ifp;
10353e7a2321SAlexander V. Chernikov 
103626a60575SAlexander V. Chernikov 	if (all) {
103726a60575SAlexander V. Chernikov 		/*
103826a60575SAlexander V. Chernikov 		 * Remove all L2 entries matching given prefix.
103926a60575SAlexander V. Chernikov 		 * Convert address to host representation to avoid
104026a60575SAlexander V. Chernikov 		 * doing this on every callback. ia_subnetmask is already
104126a60575SAlexander V. Chernikov 		 * stored in host representation.
104226a60575SAlexander V. Chernikov 		 */
104326a60575SAlexander V. Chernikov 		addr.sin_addr.s_addr = ntohl(ia->ia_addr.sin_addr.s_addr);
10443e7a2321SAlexander V. Chernikov 		lltable_prefix_free(AF_INET, saddr, smask, flags);
104526a60575SAlexander V. Chernikov 	} else {
104626a60575SAlexander V. Chernikov 		/* Remove interface address only */
104726a60575SAlexander V. Chernikov 		addr.sin_addr.s_addr = ia->ia_addr.sin_addr.s_addr;
10483e7a2321SAlexander V. Chernikov 		lltable_delete_addr(LLTABLE(ifp), LLE_IFADDR, saddr);
10493e7a2321SAlexander V. Chernikov 	}
105026a60575SAlexander V. Chernikov }
10513e7a2321SAlexander V. Chernikov 
10523e7a2321SAlexander V. Chernikov /*
105348321abeSMax Laier  * If there is no other address in the system that can serve a route to the
105448321abeSMax Laier  * same prefix, remove the route.  Hand over the route to the new address
105548321abeSMax Laier  * otherwise.
105648321abeSMax Laier  */
105708b68b0eSGleb Smirnoff int
10585b84dc78SQing Li in_scrubprefix(struct in_ifaddr *target, u_int flags)
105948321abeSMax Laier {
10602144431cSGleb Smirnoff 	struct epoch_tracker et;
106148321abeSMax Laier 	struct in_ifaddr *ia;
106255174c34SGleb Smirnoff 	struct in_addr prefix, mask, p, m;
10637278b62aSAlan Somers 	int error = 0;
106448321abeSMax Laier 
1065df813b7eSQing Li 	/*
1066df813b7eSQing Li 	 * Remove the loopback route to the interface address.
1067df813b7eSQing Li 	 */
1068130aebbaSAlexander V. Chernikov 	if (ia_need_loopback_route(target) && (flags & LLE_STATIC)) {
1069f7a39160SGleb Smirnoff 		struct in_ifaddr *eia;
1070c7ab6602SQing Li 
1071f7a39160SGleb Smirnoff 		eia = in_localip_more(target);
1072f7a39160SGleb Smirnoff 
1073f7a39160SGleb Smirnoff 		if (eia != NULL) {
1074f7a39160SGleb Smirnoff 			error = ifa_switch_loopback_route((struct ifaddr *)eia,
107559c180c3SAlexander V. Chernikov 			    (struct sockaddr *)&target->ia_addr);
1076f7a39160SGleb Smirnoff 			ifa_free(&eia->ia_ifa);
1077f7a39160SGleb Smirnoff 		} else {
10789bb7d0f4SQing Li 			error = ifa_del_loopback_route((struct ifaddr *)target,
10799bb7d0f4SQing Li 			    (struct sockaddr *)&target->ia_addr);
10805b84dc78SQing Li 		}
1081ebc90701SQing Li 	}
1082ebc90701SQing Li 
1083130aebbaSAlexander V. Chernikov 	ia_getrtprefix(target, &prefix, &mask);
108448321abeSMax Laier 
1085ccbb9c35SQing Li 	if ((target->ia_flags & IFA_ROUTE) == 0) {
1086d68cf57bSAlexander V. Chernikov 		rt_addrmsg(RTM_DELETE, &target->ia_ifa, target->ia_ifp->if_fib);
108726a60575SAlexander V. Chernikov 
108826a60575SAlexander V. Chernikov 		/*
108926a60575SAlexander V. Chernikov 		 * Removing address from !IFF_UP interface or
109026a60575SAlexander V. Chernikov 		 * prefix which exists on other interface (along with route).
109126a60575SAlexander V. Chernikov 		 * No entries should exist here except target addr.
109226a60575SAlexander V. Chernikov 		 * Given that, delete this entry only.
109326a60575SAlexander V. Chernikov 		 */
109426a60575SAlexander V. Chernikov 		in_scrubprefixlle(target, 0, flags);
1095ccbb9c35SQing Li 		return (0);
1096ccbb9c35SQing Li 	}
1097ccbb9c35SQing Li 
10982144431cSGleb Smirnoff 	NET_EPOCH_ENTER(et);
1099d7c5a620SMatt Macy 	CK_STAILQ_FOREACH(ia, &V_in_ifaddrhead, ia_link) {
1100130aebbaSAlexander V. Chernikov 		ia_getrtprefix(ia, &p, &m);
110155174c34SGleb Smirnoff 
110255174c34SGleb Smirnoff 		if (prefix.s_addr != p.s_addr ||
110355174c34SGleb Smirnoff 		    mask.s_addr != m.s_addr)
110455174c34SGleb Smirnoff 			continue;
110548321abeSMax Laier 
110655174c34SGleb Smirnoff 		if ((ia->ia_ifp->if_flags & IFF_UP) == 0)
110748321abeSMax Laier 			continue;
110848321abeSMax Laier 
110948321abeSMax Laier 		/*
111048321abeSMax Laier 		 * If we got a matching prefix address, move IFA_ROUTE and
111148321abeSMax Laier 		 * the route itself to it.  Make sure that routing daemons
111248321abeSMax Laier 		 * get a heads-up.
111348321abeSMax Laier 		 */
111408b68b0eSGleb Smirnoff 		if ((ia->ia_flags & IFA_ROUTE) == 0) {
111579d51435SSergey Kandaurov 			ifa_ref(&ia->ia_ifa);
11162144431cSGleb Smirnoff 			NET_EPOCH_EXIT(et);
111781728a53SAlexander V. Chernikov 			error = in_handle_ifaddr_route(RTM_DELETE, target);
111892322284SQing Li 			if (error == 0)
111948321abeSMax Laier 				target->ia_flags &= ~IFA_ROUTE;
112092322284SQing Li 			else
112192322284SQing Li 				log(LOG_INFO, "in_scrubprefix: err=%d, old prefix delete failed\n",
112292322284SQing Li 					error);
11233e7a2321SAlexander V. Chernikov 			/* Scrub all entries IFF interface is different */
11243e7a2321SAlexander V. Chernikov 			in_scrubprefixlle(target, target->ia_ifp != ia->ia_ifp,
11253e7a2321SAlexander V. Chernikov 			    flags);
112681728a53SAlexander V. Chernikov 			error = in_handle_ifaddr_route(RTM_ADD, ia);
112748321abeSMax Laier 			if (error == 0)
112848321abeSMax Laier 				ia->ia_flags |= IFA_ROUTE;
112992322284SQing Li 			else
113092322284SQing Li 				log(LOG_INFO, "in_scrubprefix: err=%d, new prefix add failed\n",
113192322284SQing Li 					error);
113279d51435SSergey Kandaurov 			ifa_free(&ia->ia_ifa);
1133460473a0SBjoern A. Zeeb 			return (error);
113448321abeSMax Laier 		}
113548321abeSMax Laier 	}
11362144431cSGleb Smirnoff 	NET_EPOCH_EXIT(et);
113748321abeSMax Laier 
113848321abeSMax Laier 	/*
1139c9d763bfSQing Li 	 * remove all L2 entries on the given prefix
1140c9d763bfSQing Li 	 */
11413e7a2321SAlexander V. Chernikov 	in_scrubprefixlle(target, 1, flags);
1142c9d763bfSQing Li 
1143c9d763bfSQing Li 	/*
114448321abeSMax Laier 	 * As no-one seem to have this prefix, we can remove the route.
114548321abeSMax Laier 	 */
114681728a53SAlexander V. Chernikov 	rt_addrmsg(RTM_DELETE, &target->ia_ifa, target->ia_ifp->if_fib);
114781728a53SAlexander V. Chernikov 	error = in_handle_ifaddr_route(RTM_DELETE, target);
114892322284SQing Li 	if (error == 0)
114948321abeSMax Laier 		target->ia_flags &= ~IFA_ROUTE;
115092322284SQing Li 	else
115192322284SQing Li 		log(LOG_INFO, "in_scrubprefix: err=%d, prefix delete failed\n", error);
115292322284SQing Li 	return (error);
115348321abeSMax Laier }
115448321abeSMax Laier 
115589856f7eSBjoern A. Zeeb void
115689856f7eSBjoern A. Zeeb in_ifscrub_all(void)
115789856f7eSBjoern A. Zeeb {
115889856f7eSBjoern A. Zeeb 	struct ifnet *ifp;
115989856f7eSBjoern A. Zeeb 	struct ifaddr *ifa, *nifa;
116089856f7eSBjoern A. Zeeb 	struct ifaliasreq ifr;
116189856f7eSBjoern A. Zeeb 
116289856f7eSBjoern A. Zeeb 	IFNET_RLOCK();
11634f6c66ccSMatt Macy 	CK_STAILQ_FOREACH(ifp, &V_ifnet, if_link) {
116489856f7eSBjoern A. Zeeb 		/* Cannot lock here - lock recursion. */
1165a68cc388SGleb Smirnoff 		/* NET_EPOCH_ENTER(et); */
1166d7c5a620SMatt Macy 		CK_STAILQ_FOREACH_SAFE(ifa, &ifp->if_addrhead, ifa_link, nifa) {
116789856f7eSBjoern A. Zeeb 			if (ifa->ifa_addr->sa_family != AF_INET)
116889856f7eSBjoern A. Zeeb 				continue;
116989856f7eSBjoern A. Zeeb 
117089856f7eSBjoern A. Zeeb 			/*
117189856f7eSBjoern A. Zeeb 			 * This is ugly but the only way for legacy IP to
117289856f7eSBjoern A. Zeeb 			 * cleanly remove addresses and everything attached.
117389856f7eSBjoern A. Zeeb 			 */
117489856f7eSBjoern A. Zeeb 			bzero(&ifr, sizeof(ifr));
117589856f7eSBjoern A. Zeeb 			ifr.ifra_addr = *ifa->ifa_addr;
117689856f7eSBjoern A. Zeeb 			if (ifa->ifa_dstaddr)
117789856f7eSBjoern A. Zeeb 			ifr.ifra_broadaddr = *ifa->ifa_dstaddr;
117889856f7eSBjoern A. Zeeb 			(void)in_control(NULL, SIOCDIFADDR, (caddr_t)&ifr,
117989856f7eSBjoern A. Zeeb 			    ifp, NULL);
118089856f7eSBjoern A. Zeeb 		}
1181a68cc388SGleb Smirnoff 		/* NET_EPOCH_EXIT(et); */
118289856f7eSBjoern A. Zeeb 		in_purgemaddrs(ifp);
118389856f7eSBjoern A. Zeeb 		igmp_domifdetach(ifp);
118489856f7eSBjoern A. Zeeb 	}
118589856f7eSBjoern A. Zeeb 	IFNET_RUNLOCK();
118689856f7eSBjoern A. Zeeb }
118789856f7eSBjoern A. Zeeb 
118890cc51a1SRyan Stone int
118990cc51a1SRyan Stone in_ifaddr_broadcast(struct in_addr in, struct in_ifaddr *ia)
119090cc51a1SRyan Stone {
119190cc51a1SRyan Stone 
119290cc51a1SRyan Stone 	return ((in.s_addr == ia->ia_broadaddr.sin_addr.s_addr ||
119390cc51a1SRyan Stone 	     /*
1194fd076593SMike Karels 	      * Optionally check for old-style (host 0) broadcast, but
119590cc51a1SRyan Stone 	      * taking into account that RFC 3021 obsoletes it.
119690cc51a1SRyan Stone 	      */
1197fd076593SMike Karels 	    (V_broadcast_lowest && ia->ia_subnetmask != IN_RFC3021_MASK &&
119890cc51a1SRyan Stone 	    ntohl(in.s_addr) == ia->ia_subnet)) &&
119990cc51a1SRyan Stone 	     /*
120090cc51a1SRyan Stone 	      * Check for an all one subnetmask. These
120190cc51a1SRyan Stone 	      * only exist when an interface gets a secondary
120290cc51a1SRyan Stone 	      * address.
120390cc51a1SRyan Stone 	      */
120490cc51a1SRyan Stone 	    ia->ia_subnetmask != (u_long)0xffffffff);
120590cc51a1SRyan Stone }
120690cc51a1SRyan Stone 
1207df8bae1dSRodney W. Grimes /*
1208df8bae1dSRodney W. Grimes  * Return 1 if the address might be a local broadcast address.
1209df8bae1dSRodney W. Grimes  */
121026f9a767SRodney W. Grimes int
1211f2565d68SRobert Watson in_broadcast(struct in_addr in, struct ifnet *ifp)
1212df8bae1dSRodney W. Grimes {
12133e85b721SEd Maste 	struct ifaddr *ifa;
121411f2a7cdSRyan Stone 	int found;
1215df8bae1dSRodney W. Grimes 
1216b8a6e03fSGleb Smirnoff 	NET_EPOCH_ASSERT();
1217b8a6e03fSGleb Smirnoff 
1218df8bae1dSRodney W. Grimes 	if (in.s_addr == INADDR_BROADCAST ||
1219df8bae1dSRodney W. Grimes 	    in.s_addr == INADDR_ANY)
1220460473a0SBjoern A. Zeeb 		return (1);
1221df8bae1dSRodney W. Grimes 	if ((ifp->if_flags & IFF_BROADCAST) == 0)
1222460473a0SBjoern A. Zeeb 		return (0);
122311f2a7cdSRyan Stone 	found = 0;
1224df8bae1dSRodney W. Grimes 	/*
1225df8bae1dSRodney W. Grimes 	 * Look through the list of addresses for a match
1226df8bae1dSRodney W. Grimes 	 * with a broadcast address.
1227df8bae1dSRodney W. Grimes 	 */
1228d7c5a620SMatt Macy 	CK_STAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link)
1229df8bae1dSRodney W. Grimes 		if (ifa->ifa_addr->sa_family == AF_INET &&
123011f2a7cdSRyan Stone 		    in_ifaddr_broadcast(in, (struct in_ifaddr *)ifa)) {
123111f2a7cdSRyan Stone 			found = 1;
123211f2a7cdSRyan Stone 			break;
123311f2a7cdSRyan Stone 		}
123411f2a7cdSRyan Stone 	return (found);
1235df8bae1dSRodney W. Grimes }
1236ec002feeSBruce M Simpson 
1237df8bae1dSRodney W. Grimes /*
1238b1c53bc9SRobert Watson  * On interface removal, clean up IPv4 data structures hung off of the ifnet.
1239b1c53bc9SRobert Watson  */
1240b1c53bc9SRobert Watson void
1241f2565d68SRobert Watson in_ifdetach(struct ifnet *ifp)
1242b1c53bc9SRobert Watson {
1243f3e1324bSStephen Hurd 	IN_MULTI_LOCK();
1244603724d3SBjoern A. Zeeb 	in_pcbpurgeif0(&V_ripcbinfo, ifp);
1245603724d3SBjoern A. Zeeb 	in_pcbpurgeif0(&V_udbinfo, ifp);
1246e06e816fSKevin Lo 	in_pcbpurgeif0(&V_ulitecbinfo, ifp);
1247ec002feeSBruce M Simpson 	in_purgemaddrs(ifp);
1248f3e1324bSStephen Hurd 	IN_MULTI_UNLOCK();
12493689652cSHans Petter Selasky 
12503689652cSHans Petter Selasky 	/*
12513689652cSHans Petter Selasky 	 * Make sure all multicast deletions invoking if_ioctl() are
12523689652cSHans Petter Selasky 	 * completed before returning. Else we risk accessing a freed
12533689652cSHans Petter Selasky 	 * ifnet structure pointer.
12543689652cSHans Petter Selasky 	 */
12553689652cSHans Petter Selasky 	inm_release_wait(NULL);
1256b1c53bc9SRobert Watson }
12576e6b3f7cSQing Li 
1258d10910e6SBruce M Simpson /*
1259d10910e6SBruce M Simpson  * Delete all IPv4 multicast address records, and associated link-layer
1260d10910e6SBruce M Simpson  * multicast address records, associated with ifp.
1261d10910e6SBruce M Simpson  * XXX It looks like domifdetach runs AFTER the link layer cleanup.
126256663a40SBruce M Simpson  * XXX This should not race with ifma_protospec being set during
126356663a40SBruce M Simpson  * a new allocation, if it does, we have bigger problems.
1264d10910e6SBruce M Simpson  */
1265d10910e6SBruce M Simpson static void
1266d10910e6SBruce M Simpson in_purgemaddrs(struct ifnet *ifp)
1267d10910e6SBruce M Simpson {
1268f3e1324bSStephen Hurd 	struct in_multi_head purgeinms;
1269f3e1324bSStephen Hurd 	struct in_multi		*inm;
1270b6f6f880SMatt Macy 	struct ifmultiaddr	*ifma, *next;
1271d10910e6SBruce M Simpson 
1272f3e1324bSStephen Hurd 	SLIST_INIT(&purgeinms);
1273f3e1324bSStephen Hurd 	IN_MULTI_LIST_LOCK();
1274d10910e6SBruce M Simpson 
1275d10910e6SBruce M Simpson 	/*
1276d10910e6SBruce M Simpson 	 * Extract list of in_multi associated with the detaching ifp
1277d10910e6SBruce M Simpson 	 * which the PF_INET layer is about to release.
1278d10910e6SBruce M Simpson 	 * We need to do this as IF_ADDR_LOCK() may be re-acquired
1279d10910e6SBruce M Simpson 	 * by code further down.
1280d10910e6SBruce M Simpson 	 */
1281b6f6f880SMatt Macy 	IF_ADDR_WLOCK(ifp);
1282b6f6f880SMatt Macy  restart:
1283d7c5a620SMatt Macy 	CK_STAILQ_FOREACH_SAFE(ifma, &ifp->if_multiaddrs, ifma_link, next) {
128456663a40SBruce M Simpson 		if (ifma->ifma_addr->sa_family != AF_INET ||
128556663a40SBruce M Simpson 		    ifma->ifma_protospec == NULL)
1286d10910e6SBruce M Simpson 			continue;
1287d10910e6SBruce M Simpson 		inm = (struct in_multi *)ifma->ifma_protospec;
1288f3e1324bSStephen Hurd 		inm_rele_locked(&purgeinms, inm);
1289b6f6f880SMatt Macy 		if (__predict_false(ifma_restart)) {
1290b6f6f880SMatt Macy 			ifma_restart = true;
1291b6f6f880SMatt Macy 			goto restart;
1292d10910e6SBruce M Simpson 		}
1293b6f6f880SMatt Macy 	}
1294b6f6f880SMatt Macy 	IF_ADDR_WUNLOCK(ifp);
1295d10910e6SBruce M Simpson 
1296f3e1324bSStephen Hurd 	inm_release_list_deferred(&purgeinms);
1297d10910e6SBruce M Simpson 	igmp_ifdetach(ifp);
1298f3e1324bSStephen Hurd 	IN_MULTI_LIST_UNLOCK();
1299d10910e6SBruce M Simpson }
1300d10910e6SBruce M Simpson 
13016e6b3f7cSQing Li struct in_llentry {
13026e6b3f7cSQing Li 	struct llentry		base;
13036e6b3f7cSQing Li };
13046e6b3f7cSQing Li 
130511cdad98SAlexander V. Chernikov #define	IN_LLTBL_DEFAULT_HSIZE	32
130611cdad98SAlexander V. Chernikov #define	IN_LLTBL_HASH(k, h) \
130711cdad98SAlexander V. Chernikov 	(((((((k >> 8) ^ k) >> 8) ^ k) >> 8) ^ k) & ((h) - 1))
130811cdad98SAlexander V. Chernikov 
1309a93cda78SKip Macy /*
131011cdad98SAlexander V. Chernikov  * Do actual deallocation of @lle.
13112769d062SConrad Meyer  */
13122769d062SConrad Meyer static void
13134f6c66ccSMatt Macy in_lltable_destroy_lle_unlocked(epoch_context_t ctx)
13142769d062SConrad Meyer {
13154f6c66ccSMatt Macy 	struct llentry *lle;
13162769d062SConrad Meyer 
13174f6c66ccSMatt Macy 	lle = __containerof(ctx, struct llentry, lle_epoch_ctx);
13182769d062SConrad Meyer 	LLE_LOCK_DESTROY(lle);
13192769d062SConrad Meyer 	LLE_REQ_DESTROY(lle);
13202769d062SConrad Meyer 	free(lle, M_LLTABLE);
13212769d062SConrad Meyer }
13222769d062SConrad Meyer 
13232769d062SConrad Meyer /*
132411cdad98SAlexander V. Chernikov  * Called by LLE_FREE_LOCKED when number of references
132511cdad98SAlexander V. Chernikov  * drops to zero.
1326a93cda78SKip Macy  */
1327a93cda78SKip Macy static void
132811cdad98SAlexander V. Chernikov in_lltable_destroy_lle(struct llentry *lle)
1329a93cda78SKip Macy {
133011cdad98SAlexander V. Chernikov 
1331a93cda78SKip Macy 	LLE_WUNLOCK(lle);
13322a4bd982SGleb Smirnoff 	NET_EPOCH_CALL(in_lltable_destroy_lle_unlocked, &lle->lle_epoch_ctx);
1333a93cda78SKip Macy }
1334a93cda78SKip Macy 
13356e6b3f7cSQing Li static struct llentry *
1336314294deSAlexander V. Chernikov in_lltable_new(struct in_addr addr4, u_int flags)
13376e6b3f7cSQing Li {
13386e6b3f7cSQing Li 	struct in_llentry *lle;
13396e6b3f7cSQing Li 
134090b357f6SGleb Smirnoff 	lle = malloc(sizeof(struct in_llentry), M_LLTABLE, M_NOWAIT | M_ZERO);
13416e6b3f7cSQing Li 	if (lle == NULL)		/* NB: caller generates msg */
13426e6b3f7cSQing Li 		return NULL;
13436e6b3f7cSQing Li 
13446e6b3f7cSQing Li 	/*
13456e6b3f7cSQing Li 	 * For IPv4 this will trigger "arpresolve" to generate
13466e6b3f7cSQing Li 	 * an ARP request.
13476e6b3f7cSQing Li 	 */
1348a98c06f1SGleb Smirnoff 	lle->base.la_expire = time_uptime; /* mark expired */
1349314294deSAlexander V. Chernikov 	lle->base.r_l3addr.addr4 = addr4;
13506e6b3f7cSQing Li 	lle->base.lle_refcnt = 1;
135111cdad98SAlexander V. Chernikov 	lle->base.lle_free = in_lltable_destroy_lle;
13526e6b3f7cSQing Li 	LLE_LOCK_INIT(&lle->base);
1353f8aee88fSAlexander V. Chernikov 	LLE_REQ_INIT(&lle->base);
13540447c136SAlexander V. Chernikov 	callout_init(&lle->base.lle_timer, 1);
1355ea537929SGleb Smirnoff 
1356ea537929SGleb Smirnoff 	return (&lle->base);
13576e6b3f7cSQing Li }
13586e6b3f7cSQing Li 
1359c9d763bfSQing Li #define IN_ARE_MASKED_ADDR_EQUAL(d, a, m)	(		\
13603e7a2321SAlexander V. Chernikov 	((((d).s_addr ^ (a).s_addr) & (m).s_addr)) == 0 )
1361c9d763bfSQing Li 
136211cdad98SAlexander V. Chernikov static int
13633e7a2321SAlexander V. Chernikov in_lltable_match_prefix(const struct sockaddr *saddr,
13643e7a2321SAlexander V. Chernikov     const struct sockaddr *smask, u_int flags, struct llentry *lle)
1365c9d763bfSQing Li {
13663e7a2321SAlexander V. Chernikov 	struct in_addr addr, mask, lle_addr;
13673e7a2321SAlexander V. Chernikov 
13683e7a2321SAlexander V. Chernikov 	addr = ((const struct sockaddr_in *)saddr)->sin_addr;
13693e7a2321SAlexander V. Chernikov 	mask = ((const struct sockaddr_in *)smask)->sin_addr;
13703e7a2321SAlexander V. Chernikov 	lle_addr.s_addr = ntohl(lle->r_l3addr.addr4.s_addr);
13713e7a2321SAlexander V. Chernikov 
13723e7a2321SAlexander V. Chernikov 	if (IN_ARE_MASKED_ADDR_EQUAL(lle_addr, addr, mask) == 0)
13733e7a2321SAlexander V. Chernikov 		return (0);
13743e7a2321SAlexander V. Chernikov 
13753e7a2321SAlexander V. Chernikov 	if (lle->la_flags & LLE_IFADDR) {
13765b84dc78SQing Li 		/*
13773e7a2321SAlexander V. Chernikov 		 * Delete LLE_IFADDR records IFF address & flag matches.
13783e7a2321SAlexander V. Chernikov 		 * Note that addr is the interface address within prefix
13793e7a2321SAlexander V. Chernikov 		 * being matched.
13803e7a2321SAlexander V. Chernikov 		 * Note also we should handle 'ifdown' cases without removing
13813e7a2321SAlexander V. Chernikov 		 * ifaddr macs.
13825b84dc78SQing Li 		 */
13833e7a2321SAlexander V. Chernikov 		if (addr.s_addr == lle_addr.s_addr && (flags & LLE_STATIC) != 0)
13843e7a2321SAlexander V. Chernikov 			return (1);
13853e7a2321SAlexander V. Chernikov 		return (0);
13863e7a2321SAlexander V. Chernikov 	}
13873e7a2321SAlexander V. Chernikov 
13883e7a2321SAlexander V. Chernikov 	/* flags & LLE_STATIC means deleting both dynamic and static entries */
13893e7a2321SAlexander V. Chernikov 	if ((flags & LLE_STATIC) || !(lle->la_flags & LLE_STATIC))
139011cdad98SAlexander V. Chernikov 		return (1);
139111cdad98SAlexander V. Chernikov 
139211cdad98SAlexander V. Chernikov 	return (0);
139311cdad98SAlexander V. Chernikov }
139411cdad98SAlexander V. Chernikov 
139511cdad98SAlexander V. Chernikov static void
139611cdad98SAlexander V. Chernikov in_lltable_free_entry(struct lltable *llt, struct llentry *lle)
139711cdad98SAlexander V. Chernikov {
139811cdad98SAlexander V. Chernikov 	size_t pkts_dropped;
139911cdad98SAlexander V. Chernikov 
140011cdad98SAlexander V. Chernikov 	LLE_WLOCK_ASSERT(lle);
140111cdad98SAlexander V. Chernikov 	KASSERT(llt != NULL, ("lltable is NULL"));
140211cdad98SAlexander V. Chernikov 
140311cdad98SAlexander V. Chernikov 	/* Unlink entry from table if not already */
140411cdad98SAlexander V. Chernikov 	if ((lle->la_flags & LLE_LINKED) != 0) {
1405f6960e20SMatt Macy 		IF_AFDATA_WLOCK_ASSERT(llt->llt_ifp);
140611cdad98SAlexander V. Chernikov 		lltable_unlink_entry(llt, lle);
140711cdad98SAlexander V. Chernikov 	}
140811cdad98SAlexander V. Chernikov 
140911cdad98SAlexander V. Chernikov 	/* Drop hold queue */
1410e162ea60SGeorge V. Neville-Neil 	pkts_dropped = llentry_free(lle);
1411e162ea60SGeorge V. Neville-Neil 	ARPSTAT_ADD(dropped, pkts_dropped);
1412c9d763bfSQing Li }
1413c9d763bfSQing Li 
14146e6b3f7cSQing Li static int
1415c7ab6602SQing Li in_lltable_rtcheck(struct ifnet *ifp, u_int flags, const struct sockaddr *l3addr)
14166e6b3f7cSQing Li {
1417936f4a42SAlexander V. Chernikov 	struct nhop_object *nh;
1418936f4a42SAlexander V. Chernikov 	struct in_addr addr;
14196e6b3f7cSQing Li 
14206e6b3f7cSQing Li 	KASSERT(l3addr->sa_family == AF_INET,
14216e6b3f7cSQing Li 	    ("sin_family %d", l3addr->sa_family));
14226e6b3f7cSQing Li 
1423936f4a42SAlexander V. Chernikov 	addr = ((const struct sockaddr_in *)l3addr)->sin_addr;
142413e255faSMarko Zec 
1425936f4a42SAlexander V. Chernikov 	nh = fib4_lookup(ifp->if_fib, addr, 0, NHR_NONE, 0);
1426936f4a42SAlexander V. Chernikov 	if (nh == NULL)
14276cf8e330SQing Li 		return (EINVAL);
14286cf8e330SQing Li 
142913e255faSMarko Zec 	/*
143013e255faSMarko Zec 	 * If the gateway for an existing host route matches the target L3
14316cf8e330SQing Li 	 * address, which is a special route inserted by some implementation
14326cf8e330SQing Li 	 * such as MANET, and the interface is of the correct type, then
14336cf8e330SQing Li 	 * allow for ARP to proceed.
143413e255faSMarko Zec 	 */
1435936f4a42SAlexander V. Chernikov 	if (nh->nh_flags & NHF_GATEWAY) {
1436936f4a42SAlexander V. Chernikov 		if (!(nh->nh_flags & NHF_HOST) || nh->nh_ifp->if_type != IFT_ETHER ||
1437936f4a42SAlexander V. Chernikov 		    (nh->nh_ifp->if_flags & (IFF_NOARP | IFF_STATICARP)) != 0 ||
1438936f4a42SAlexander V. Chernikov 		    memcmp(nh->gw_sa.sa_data, l3addr->sa_data,
143915d25219SQing Li 		    sizeof(in_addr_t)) != 0) {
1440db92413eSQing Li 			return (EINVAL);
1441db92413eSQing Li 		}
144215d25219SQing Li 	}
1443db92413eSQing Li 
1444db92413eSQing Li 	/*
1445db92413eSQing Li 	 * Make sure that at least the destination address is covered
1446db92413eSQing Li 	 * by the route. This is for handling the case where 2 or more
1447db92413eSQing Li 	 * interfaces have the same prefix. An incoming packet arrives
1448db92413eSQing Li 	 * on one interface and the corresponding outgoing packet leaves
1449db92413eSQing Li 	 * another interface.
1450db92413eSQing Li 	 */
1451936f4a42SAlexander V. Chernikov 	if ((nh->nh_ifp != ifp) && (nh->nh_flags & NHF_HOST) == 0) {
1452936f4a42SAlexander V. Chernikov 		struct in_ifaddr *ia = (struct in_ifaddr *)ifaof_ifpforaddr(l3addr, ifp);
1453936f4a42SAlexander V. Chernikov 		struct in_addr dst_addr, mask_addr;
1454db92413eSQing Li 
1455936f4a42SAlexander V. Chernikov 		if (ia == NULL)
1456936f4a42SAlexander V. Chernikov 			return (EINVAL);
1457936f4a42SAlexander V. Chernikov 
1458b3664a14SQing Li 		/*
1459936f4a42SAlexander V. Chernikov 		 * ifaof_ifpforaddr() returns _best matching_ IFA.
1460936f4a42SAlexander V. Chernikov 		 * It is possible that ifa prefix does not cover our address.
1461936f4a42SAlexander V. Chernikov 		 * Explicitly verify and fail if that's the case.
1462b3664a14SQing Li 		 */
1463936f4a42SAlexander V. Chernikov 		dst_addr = IA_SIN(ia)->sin_addr;
1464936f4a42SAlexander V. Chernikov 		mask_addr.s_addr = htonl(ia->ia_subnetmask);
1465936f4a42SAlexander V. Chernikov 
1466936f4a42SAlexander V. Chernikov 		if (!IN_ARE_MASKED_ADDR_EQUAL(dst_addr, addr, mask_addr))
1467b3664a14SQing Li 			return (EINVAL);
1468db92413eSQing Li 	}
1469db92413eSQing Li 
147015d25219SQing Li 	return (0);
14716e6b3f7cSQing Li }
14726e6b3f7cSQing Li 
147311cdad98SAlexander V. Chernikov static inline uint32_t
147411cdad98SAlexander V. Chernikov in_lltable_hash_dst(const struct in_addr dst, uint32_t hsize)
147511cdad98SAlexander V. Chernikov {
147611cdad98SAlexander V. Chernikov 
147711cdad98SAlexander V. Chernikov 	return (IN_LLTBL_HASH(dst.s_addr, hsize));
147811cdad98SAlexander V. Chernikov }
147911cdad98SAlexander V. Chernikov 
148011cdad98SAlexander V. Chernikov static uint32_t
148111cdad98SAlexander V. Chernikov in_lltable_hash(const struct llentry *lle, uint32_t hsize)
148211cdad98SAlexander V. Chernikov {
148311cdad98SAlexander V. Chernikov 
1484314294deSAlexander V. Chernikov 	return (in_lltable_hash_dst(lle->r_l3addr.addr4, hsize));
148511cdad98SAlexander V. Chernikov }
148611cdad98SAlexander V. Chernikov 
148711cdad98SAlexander V. Chernikov static void
148811cdad98SAlexander V. Chernikov in_lltable_fill_sa_entry(const struct llentry *lle, struct sockaddr *sa)
148911cdad98SAlexander V. Chernikov {
149011cdad98SAlexander V. Chernikov 	struct sockaddr_in *sin;
149111cdad98SAlexander V. Chernikov 
149211cdad98SAlexander V. Chernikov 	sin = (struct sockaddr_in *)sa;
149311cdad98SAlexander V. Chernikov 	bzero(sin, sizeof(*sin));
149411cdad98SAlexander V. Chernikov 	sin->sin_family = AF_INET;
149511cdad98SAlexander V. Chernikov 	sin->sin_len = sizeof(*sin);
1496314294deSAlexander V. Chernikov 	sin->sin_addr = lle->r_l3addr.addr4;
149711cdad98SAlexander V. Chernikov }
149811cdad98SAlexander V. Chernikov 
1499b4b1367aSAlexander V. Chernikov static inline struct llentry *
1500b4b1367aSAlexander V. Chernikov in_lltable_find_dst(struct lltable *llt, struct in_addr dst)
1501b4b1367aSAlexander V. Chernikov {
1502b4b1367aSAlexander V. Chernikov 	struct llentry *lle;
1503b4b1367aSAlexander V. Chernikov 	struct llentries *lleh;
150411cdad98SAlexander V. Chernikov 	u_int hashidx;
1505b4b1367aSAlexander V. Chernikov 
15063a749863SAlexander V. Chernikov 	hashidx = in_lltable_hash_dst(dst, llt->llt_hsize);
150711cdad98SAlexander V. Chernikov 	lleh = &llt->lle_head[hashidx];
15084f6c66ccSMatt Macy 	CK_LIST_FOREACH(lle, lleh, lle_next) {
1509b4b1367aSAlexander V. Chernikov 		if (lle->la_flags & LLE_DELETED)
1510b4b1367aSAlexander V. Chernikov 			continue;
1511314294deSAlexander V. Chernikov 		if (lle->r_l3addr.addr4.s_addr == dst.s_addr)
1512b4b1367aSAlexander V. Chernikov 			break;
1513b4b1367aSAlexander V. Chernikov 	}
1514b4b1367aSAlexander V. Chernikov 
1515b4b1367aSAlexander V. Chernikov 	return (lle);
1516b4b1367aSAlexander V. Chernikov }
1517b4b1367aSAlexander V. Chernikov 
15183e7a2321SAlexander V. Chernikov static void
15193e7a2321SAlexander V. Chernikov in_lltable_delete_entry(struct lltable *llt, struct llentry *lle)
1520b4b1367aSAlexander V. Chernikov {
1521b4b1367aSAlexander V. Chernikov 
1522b4b1367aSAlexander V. Chernikov 	lle->la_flags |= LLE_DELETED;
1523b4b1367aSAlexander V. Chernikov 	EVENTHANDLER_INVOKE(lle_event, lle, LLENTRY_DELETED);
1524b4b1367aSAlexander V. Chernikov #ifdef DIAGNOSTIC
1525b4b1367aSAlexander V. Chernikov 	log(LOG_INFO, "ifaddr cache = %p is deleted\n", lle);
1526b4b1367aSAlexander V. Chernikov #endif
1527b4b1367aSAlexander V. Chernikov 	llentry_free(lle);
1528b4b1367aSAlexander V. Chernikov }
1529b4b1367aSAlexander V. Chernikov 
1530b4b1367aSAlexander V. Chernikov static struct llentry *
15315a255516SAlexander V. Chernikov in_lltable_alloc(struct lltable *llt, u_int flags, const struct sockaddr *l3addr)
1532b4b1367aSAlexander V. Chernikov {
1533b4b1367aSAlexander V. Chernikov 	const struct sockaddr_in *sin = (const struct sockaddr_in *)l3addr;
1534b4b1367aSAlexander V. Chernikov 	struct ifnet *ifp = llt->llt_ifp;
1535b4b1367aSAlexander V. Chernikov 	struct llentry *lle;
15364fb3a820SAlexander V. Chernikov 	char linkhdr[LLE_MAX_LINKHDR];
15374fb3a820SAlexander V. Chernikov 	size_t linkhdrsize;
15384fb3a820SAlexander V. Chernikov 	int lladdr_off;
1539b4b1367aSAlexander V. Chernikov 
1540b4b1367aSAlexander V. Chernikov 	KASSERT(l3addr->sa_family == AF_INET,
1541b4b1367aSAlexander V. Chernikov 	    ("sin_family %d", l3addr->sa_family));
1542b4b1367aSAlexander V. Chernikov 
1543b4b1367aSAlexander V. Chernikov 	/*
1544b4b1367aSAlexander V. Chernikov 	 * A route that covers the given address must have
1545b4b1367aSAlexander V. Chernikov 	 * been installed 1st because we are doing a resolution,
1546b4b1367aSAlexander V. Chernikov 	 * verify this.
1547b4b1367aSAlexander V. Chernikov 	 */
1548b4b1367aSAlexander V. Chernikov 	if (!(flags & LLE_IFADDR) &&
1549b4b1367aSAlexander V. Chernikov 	    in_lltable_rtcheck(ifp, flags, l3addr) != 0)
1550b4b1367aSAlexander V. Chernikov 		return (NULL);
1551b4b1367aSAlexander V. Chernikov 
1552314294deSAlexander V. Chernikov 	lle = in_lltable_new(sin->sin_addr, flags);
1553b4b1367aSAlexander V. Chernikov 	if (lle == NULL) {
1554b4b1367aSAlexander V. Chernikov 		log(LOG_INFO, "lla_lookup: new lle malloc failed\n");
1555b4b1367aSAlexander V. Chernikov 		return (NULL);
1556b4b1367aSAlexander V. Chernikov 	}
1557b4b1367aSAlexander V. Chernikov 	lle->la_flags = flags;
1558f8aee88fSAlexander V. Chernikov 	if (flags & LLE_STATIC)
1559f8aee88fSAlexander V. Chernikov 		lle->r_flags |= RLLE_VALID;
1560b4b1367aSAlexander V. Chernikov 	if ((flags & LLE_IFADDR) == LLE_IFADDR) {
15614fb3a820SAlexander V. Chernikov 		linkhdrsize = LLE_MAX_LINKHDR;
15624fb3a820SAlexander V. Chernikov 		if (lltable_calc_llheader(ifp, AF_INET, IF_LLADDR(ifp),
15632769d062SConrad Meyer 		    linkhdr, &linkhdrsize, &lladdr_off) != 0) {
15642a4bd982SGleb Smirnoff 			NET_EPOCH_CALL(in_lltable_destroy_lle_unlocked, &lle->lle_epoch_ctx);
15654fb3a820SAlexander V. Chernikov 			return (NULL);
15662769d062SConrad Meyer 		}
15674fb3a820SAlexander V. Chernikov 		lltable_set_entry_addr(ifp, lle, linkhdr, linkhdrsize,
15684fb3a820SAlexander V. Chernikov 		    lladdr_off);
1569ddd208f7SAlexander V. Chernikov 		lle->la_flags |= LLE_STATIC;
1570f8aee88fSAlexander V. Chernikov 		lle->r_flags |= (RLLE_VALID | RLLE_IFADDR);
1571b4b1367aSAlexander V. Chernikov 	}
1572b4b1367aSAlexander V. Chernikov 
1573b4b1367aSAlexander V. Chernikov 	return (lle);
1574b4b1367aSAlexander V. Chernikov }
1575b4b1367aSAlexander V. Chernikov 
15766e6b3f7cSQing Li /*
15776e6b3f7cSQing Li  * Return NULL if not found or marked for deletion.
15786e6b3f7cSQing Li  * If found return lle read locked.
15796e6b3f7cSQing Li  */
15806e6b3f7cSQing Li static struct llentry *
15816e6b3f7cSQing Li in_lltable_lookup(struct lltable *llt, u_int flags, const struct sockaddr *l3addr)
15826e6b3f7cSQing Li {
15836e6b3f7cSQing Li 	const struct sockaddr_in *sin = (const struct sockaddr_in *)l3addr;
15846e6b3f7cSQing Li 	struct llentry *lle;
15856e6b3f7cSQing Li 
15866e4cd746SMarius Strobl 	IF_AFDATA_LOCK_ASSERT(llt->llt_ifp);
15876e6b3f7cSQing Li 	KASSERT(l3addr->sa_family == AF_INET,
15886e6b3f7cSQing Li 	    ("sin_family %d", l3addr->sa_family));
158949cf58e5SMark Johnston 	KASSERT((flags & (LLE_UNLOCKED | LLE_EXCLUSIVE)) !=
159049cf58e5SMark Johnston 	    (LLE_UNLOCKED | LLE_EXCLUSIVE),
159149cf58e5SMark Johnston 	    ("wrong lle request flags: %#x", flags));
1592b4b1367aSAlexander V. Chernikov 
159349cf58e5SMark Johnston 	lle = in_lltable_find_dst(llt, sin->sin_addr);
1594b4b1367aSAlexander V. Chernikov 	if (lle == NULL)
15956e6b3f7cSQing Li 		return (NULL);
1596f8aee88fSAlexander V. Chernikov 	if (flags & LLE_UNLOCKED)
1597f8aee88fSAlexander V. Chernikov 		return (lle);
1598f8aee88fSAlexander V. Chernikov 
15996e6b3f7cSQing Li 	if (flags & LLE_EXCLUSIVE)
16006e6b3f7cSQing Li 		LLE_WLOCK(lle);
16016e6b3f7cSQing Li 	else
16026e6b3f7cSQing Li 		LLE_RLOCK(lle);
1603b4b1367aSAlexander V. Chernikov 
1604c06cc56eSMark Johnston 	/*
1605c06cc56eSMark Johnston 	 * If the afdata lock is not held, the LLE may have been unlinked while
1606c06cc56eSMark Johnston 	 * we were blocked on the LLE lock.  Check for this case.
1607c06cc56eSMark Johnston 	 */
1608c06cc56eSMark Johnston 	if (__predict_false((lle->la_flags & LLE_LINKED) == 0)) {
1609c06cc56eSMark Johnston 		if (flags & LLE_EXCLUSIVE)
1610c06cc56eSMark Johnston 			LLE_WUNLOCK(lle);
1611c06cc56eSMark Johnston 		else
1612c06cc56eSMark Johnston 			LLE_RUNLOCK(lle);
1613c06cc56eSMark Johnston 		return (NULL);
1614c06cc56eSMark Johnston 	}
16156e6b3f7cSQing Li 	return (lle);
16166e6b3f7cSQing Li }
16176e6b3f7cSQing Li 
16186e6b3f7cSQing Li static int
161911cdad98SAlexander V. Chernikov in_lltable_dump_entry(struct lltable *llt, struct llentry *lle,
162011cdad98SAlexander V. Chernikov     struct sysctl_req *wr)
16216e6b3f7cSQing Li {
16226e6b3f7cSQing Li 	struct ifnet *ifp = llt->llt_ifp;
16236e6b3f7cSQing Li 	/* XXX stack use */
16246e6b3f7cSQing Li 	struct {
16256e6b3f7cSQing Li 		struct rt_msghdr	rtm;
16269711a168SGleb Smirnoff 		struct sockaddr_in	sin;
16276e6b3f7cSQing Li 		struct sockaddr_dl	sdl;
16286e6b3f7cSQing Li 	} arpc;
16296e6b3f7cSQing Li 	struct sockaddr_dl *sdl;
163011cdad98SAlexander V. Chernikov 	int error;
16316e6b3f7cSQing Li 
163211cdad98SAlexander V. Chernikov 	bzero(&arpc, sizeof(arpc));
16336e6b3f7cSQing Li 	/* skip deleted entries */
163493704ac5SQing Li 	if ((lle->la_flags & LLE_DELETED) == LLE_DELETED)
163511cdad98SAlexander V. Chernikov 		return (0);
1636813dd6aeSBjoern A. Zeeb 	/* Skip if jailed and not a valid IP of the prison. */
163711cdad98SAlexander V. Chernikov 	lltable_fill_sa_entry(lle,(struct sockaddr *)&arpc.sin);
1638514ef08cSBrooks Davis 	if (prison_if(wr->td->td_ucred, (struct sockaddr *)&arpc.sin) != 0)
163911cdad98SAlexander V. Chernikov 		return (0);
16406e6b3f7cSQing Li 	/*
16416e6b3f7cSQing Li 	 * produce a msg made of:
16426e6b3f7cSQing Li 	 *  struct rt_msghdr;
16439711a168SGleb Smirnoff 	 *  struct sockaddr_in; (IPv4)
16446e6b3f7cSQing Li 	 *  struct sockaddr_dl;
16456e6b3f7cSQing Li 	 */
16466e6b3f7cSQing Li 	arpc.rtm.rtm_msglen = sizeof(arpc);
1647c0e9a8a1SHartmut Brandt 	arpc.rtm.rtm_version = RTM_VERSION;
1648c0e9a8a1SHartmut Brandt 	arpc.rtm.rtm_type = RTM_GET;
1649c0e9a8a1SHartmut Brandt 	arpc.rtm.rtm_flags = RTF_UP;
1650c0e9a8a1SHartmut Brandt 	arpc.rtm.rtm_addrs = RTA_DST | RTA_GATEWAY;
16516e6b3f7cSQing Li 
16526e6b3f7cSQing Li 	/* publish */
16539711a168SGleb Smirnoff 	if (lle->la_flags & LLE_PUB)
16546e6b3f7cSQing Li 		arpc.rtm.rtm_flags |= RTF_ANNOUNCE;
16556e6b3f7cSQing Li 
16566e6b3f7cSQing Li 	sdl = &arpc.sdl;
16576e6b3f7cSQing Li 	sdl->sdl_family = AF_LINK;
16586e6b3f7cSQing Li 	sdl->sdl_len = sizeof(*sdl);
16596e6b3f7cSQing Li 	sdl->sdl_index = ifp->if_index;
16606e6b3f7cSQing Li 	sdl->sdl_type = ifp->if_type;
166193704ac5SQing Li 	if ((lle->la_flags & LLE_VALID) == LLE_VALID) {
166293704ac5SQing Li 		sdl->sdl_alen = ifp->if_addrlen;
16634fb3a820SAlexander V. Chernikov 		bcopy(lle->ll_addr, LLADDR(sdl), ifp->if_addrlen);
166493704ac5SQing Li 	} else {
166593704ac5SQing Li 		sdl->sdl_alen = 0;
166693704ac5SQing Li 		bzero(LLADDR(sdl), ifp->if_addrlen);
166793704ac5SQing Li 	}
16686e6b3f7cSQing Li 
16696e6b3f7cSQing Li 	arpc.rtm.rtm_rmx.rmx_expire =
16706e6b3f7cSQing Li 	    lle->la_flags & LLE_STATIC ? 0 : lle->la_expire;
16718eca593cSQing Li 	arpc.rtm.rtm_flags |= (RTF_HOST | RTF_LLDATA);
16726e6b3f7cSQing Li 	if (lle->la_flags & LLE_STATIC)
16736e6b3f7cSQing Li 		arpc.rtm.rtm_flags |= RTF_STATIC;
16744a336ef4SAlexander V. Chernikov 	if (lle->la_flags & LLE_IFADDR)
16754a336ef4SAlexander V. Chernikov 		arpc.rtm.rtm_flags |= RTF_PINNED;
16766e6b3f7cSQing Li 	arpc.rtm.rtm_index = ifp->if_index;
16776e6b3f7cSQing Li 	error = SYSCTL_OUT(wr, &arpc, sizeof(arpc));
167811cdad98SAlexander V. Chernikov 
167911cdad98SAlexander V. Chernikov 	return (error);
16806e6b3f7cSQing Li }
16816e6b3f7cSQing Li 
16823a749863SAlexander V. Chernikov static struct lltable *
16833a749863SAlexander V. Chernikov in_lltattach(struct ifnet *ifp)
16846e6b3f7cSQing Li {
1685d10910e6SBruce M Simpson 	struct lltable *llt;
16866e6b3f7cSQing Li 
16873a749863SAlexander V. Chernikov 	llt = lltable_allocate_htbl(IN_LLTBL_DEFAULT_HSIZE);
1688721cd2e0SAlexander V. Chernikov  	llt->llt_af = AF_INET;
1689721cd2e0SAlexander V. Chernikov  	llt->llt_ifp = ifp;
1690d10910e6SBruce M Simpson 
16916e6b3f7cSQing Li 	llt->llt_lookup = in_lltable_lookup;
16925a255516SAlexander V. Chernikov 	llt->llt_alloc_entry = in_lltable_alloc;
16933e7a2321SAlexander V. Chernikov 	llt->llt_delete_entry = in_lltable_delete_entry;
169411cdad98SAlexander V. Chernikov 	llt->llt_dump_entry = in_lltable_dump_entry;
169511cdad98SAlexander V. Chernikov 	llt->llt_hash = in_lltable_hash;
169611cdad98SAlexander V. Chernikov 	llt->llt_fill_sa_entry = in_lltable_fill_sa_entry;
169711cdad98SAlexander V. Chernikov 	llt->llt_free_entry = in_lltable_free_entry;
169811cdad98SAlexander V. Chernikov 	llt->llt_match_prefix = in_lltable_match_prefix;
1699f3a3b061SAlexander V. Chernikov 	llt->llt_mark_used = llentry_mark_used;
1700721cd2e0SAlexander V. Chernikov  	lltable_link(llt);
1701d10910e6SBruce M Simpson 
17023a749863SAlexander V. Chernikov 	return (llt);
17033a749863SAlexander V. Chernikov }
17043a749863SAlexander V. Chernikov 
17053a749863SAlexander V. Chernikov void *
17063a749863SAlexander V. Chernikov in_domifattach(struct ifnet *ifp)
17073a749863SAlexander V. Chernikov {
17083a749863SAlexander V. Chernikov 	struct in_ifinfo *ii;
17093a749863SAlexander V. Chernikov 
1710721cd2e0SAlexander V. Chernikov 	ii = malloc(sizeof(struct in_ifinfo), M_IFADDR, M_WAITOK|M_ZERO);
171141cb42a6SAlexander V. Chernikov 
17123a749863SAlexander V. Chernikov 	ii->ii_llt = in_lltattach(ifp);
1713d10910e6SBruce M Simpson 	ii->ii_igmp = igmp_domifattach(ifp);
1714d10910e6SBruce M Simpson 
171541cb42a6SAlexander V. Chernikov 	return (ii);
17166e6b3f7cSQing Li }
17176e6b3f7cSQing Li 
17186e6b3f7cSQing Li void
1719d10910e6SBruce M Simpson in_domifdetach(struct ifnet *ifp, void *aux)
17206e6b3f7cSQing Li {
1721d10910e6SBruce M Simpson 	struct in_ifinfo *ii = (struct in_ifinfo *)aux;
17226e6b3f7cSQing Li 
1723d10910e6SBruce M Simpson 	igmp_domifdetach(ifp);
1724d10910e6SBruce M Simpson 	lltable_free(ii->ii_llt);
1725d10910e6SBruce M Simpson 	free(ii, M_IFADDR);
17266e6b3f7cSQing Li }
1727