1686cdd19SJun-ichiro itojun Hagino /* $FreeBSD$ */ 288ff5695SSUZUKI Shinsuke /* $KAME: ip6_output.c,v 1.279 2002/01/26 06:12:30 jinmei Exp $ */ 3686cdd19SJun-ichiro itojun Hagino 4caf43b02SWarner Losh /*- 582cd038dSYoshinobu Inoue * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 682cd038dSYoshinobu Inoue * All rights reserved. 782cd038dSYoshinobu Inoue * 882cd038dSYoshinobu Inoue * Redistribution and use in source and binary forms, with or without 982cd038dSYoshinobu Inoue * modification, are permitted provided that the following conditions 1082cd038dSYoshinobu Inoue * are met: 1182cd038dSYoshinobu Inoue * 1. Redistributions of source code must retain the above copyright 1282cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer. 1382cd038dSYoshinobu Inoue * 2. Redistributions in binary form must reproduce the above copyright 1482cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer in the 1582cd038dSYoshinobu Inoue * documentation and/or other materials provided with the distribution. 1682cd038dSYoshinobu Inoue * 3. Neither the name of the project nor the names of its contributors 1782cd038dSYoshinobu Inoue * may be used to endorse or promote products derived from this software 1882cd038dSYoshinobu Inoue * without specific prior written permission. 1982cd038dSYoshinobu Inoue * 2082cd038dSYoshinobu Inoue * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 2182cd038dSYoshinobu Inoue * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 2282cd038dSYoshinobu Inoue * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 2382cd038dSYoshinobu Inoue * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 2482cd038dSYoshinobu Inoue * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 2582cd038dSYoshinobu Inoue * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 2682cd038dSYoshinobu Inoue * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 2782cd038dSYoshinobu Inoue * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 2882cd038dSYoshinobu Inoue * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 2982cd038dSYoshinobu Inoue * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 3082cd038dSYoshinobu Inoue * SUCH DAMAGE. 3182cd038dSYoshinobu Inoue */ 3282cd038dSYoshinobu Inoue 33caf43b02SWarner Losh /*- 3482cd038dSYoshinobu Inoue * Copyright (c) 1982, 1986, 1988, 1990, 1993 3582cd038dSYoshinobu Inoue * The Regents of the University of California. All rights reserved. 3682cd038dSYoshinobu Inoue * 3782cd038dSYoshinobu Inoue * Redistribution and use in source and binary forms, with or without 3882cd038dSYoshinobu Inoue * modification, are permitted provided that the following conditions 3982cd038dSYoshinobu Inoue * are met: 4082cd038dSYoshinobu Inoue * 1. Redistributions of source code must retain the above copyright 4182cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer. 4282cd038dSYoshinobu Inoue * 2. Redistributions in binary form must reproduce the above copyright 4382cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer in the 4482cd038dSYoshinobu Inoue * documentation and/or other materials provided with the distribution. 4582cd038dSYoshinobu Inoue * 4. Neither the name of the University nor the names of its contributors 4682cd038dSYoshinobu Inoue * may be used to endorse or promote products derived from this software 4782cd038dSYoshinobu Inoue * without specific prior written permission. 4882cd038dSYoshinobu Inoue * 4982cd038dSYoshinobu Inoue * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 5082cd038dSYoshinobu Inoue * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 5182cd038dSYoshinobu Inoue * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 5282cd038dSYoshinobu Inoue * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 5382cd038dSYoshinobu Inoue * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 5482cd038dSYoshinobu Inoue * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 5582cd038dSYoshinobu Inoue * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 5682cd038dSYoshinobu Inoue * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 5782cd038dSYoshinobu Inoue * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 5882cd038dSYoshinobu Inoue * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 5982cd038dSYoshinobu Inoue * SUCH DAMAGE. 6082cd038dSYoshinobu Inoue * 6182cd038dSYoshinobu Inoue * @(#)ip_output.c 8.3 (Berkeley) 1/21/94 6282cd038dSYoshinobu Inoue */ 6382cd038dSYoshinobu Inoue 64210d0432SYoshinobu Inoue #include "opt_ip6fw.h" 65686cdd19SJun-ichiro itojun Hagino #include "opt_inet.h" 66686cdd19SJun-ichiro itojun Hagino #include "opt_inet6.h" 67686cdd19SJun-ichiro itojun Hagino #include "opt_ipsec.h" 6882cd038dSYoshinobu Inoue 6982cd038dSYoshinobu Inoue #include <sys/param.h> 7082cd038dSYoshinobu Inoue #include <sys/malloc.h> 7182cd038dSYoshinobu Inoue #include <sys/mbuf.h> 72b40ce416SJulian Elischer #include <sys/proc.h> 7382cd038dSYoshinobu Inoue #include <sys/errno.h> 7482cd038dSYoshinobu Inoue #include <sys/protosw.h> 7582cd038dSYoshinobu Inoue #include <sys/socket.h> 7682cd038dSYoshinobu Inoue #include <sys/socketvar.h> 7782cd038dSYoshinobu Inoue #include <sys/systm.h> 7882cd038dSYoshinobu Inoue #include <sys/kernel.h> 7982cd038dSYoshinobu Inoue 8082cd038dSYoshinobu Inoue #include <net/if.h> 8182cd038dSYoshinobu Inoue #include <net/route.h> 82c4ac87eaSDarren Reed #include <net/pfil.h> 8382cd038dSYoshinobu Inoue 8482cd038dSYoshinobu Inoue #include <netinet/in.h> 8582cd038dSYoshinobu Inoue #include <netinet/in_var.h> 8633841545SHajimu UMEMOTO #include <netinet6/in6_var.h> 87686cdd19SJun-ichiro itojun Hagino #include <netinet/ip6.h> 88686cdd19SJun-ichiro itojun Hagino #include <netinet/icmp6.h> 8982cd038dSYoshinobu Inoue #include <netinet6/ip6_var.h> 90686cdd19SJun-ichiro itojun Hagino #include <netinet/in_pcb.h> 9197d8d152SAndre Oppermann #include <netinet/tcp_var.h> 9282cd038dSYoshinobu Inoue #include <netinet6/nd6.h> 9382cd038dSYoshinobu Inoue 9482cd038dSYoshinobu Inoue #ifdef IPSEC 9582cd038dSYoshinobu Inoue #include <netinet6/ipsec.h> 96686cdd19SJun-ichiro itojun Hagino #ifdef INET6 9782cd038dSYoshinobu Inoue #include <netinet6/ipsec6.h> 986a800098SYoshinobu Inoue #endif 99686cdd19SJun-ichiro itojun Hagino #include <netkey/key.h> 10082cd038dSYoshinobu Inoue #endif /* IPSEC */ 10182cd038dSYoshinobu Inoue 102b9234fafSSam Leffler #ifdef FAST_IPSEC 103b9234fafSSam Leffler #include <netipsec/ipsec.h> 104b9234fafSSam Leffler #include <netipsec/ipsec6.h> 105b9234fafSSam Leffler #include <netipsec/key.h> 106b9234fafSSam Leffler #endif /* FAST_IPSEC */ 107b9234fafSSam Leffler 10882cd038dSYoshinobu Inoue #include <netinet6/ip6_fw.h> 10982cd038dSYoshinobu Inoue 11033841545SHajimu UMEMOTO #include <net/net_osdep.h> 11133841545SHajimu UMEMOTO 1121469c434SHajimu UMEMOTO #include <netinet6/ip6protosw.h> 1131469c434SHajimu UMEMOTO 11482cd038dSYoshinobu Inoue static MALLOC_DEFINE(M_IPMOPTS, "ip6_moptions", "internet multicast options"); 11582cd038dSYoshinobu Inoue 11682cd038dSYoshinobu Inoue struct ip6_exthdrs { 11782cd038dSYoshinobu Inoue struct mbuf *ip6e_ip6; 11882cd038dSYoshinobu Inoue struct mbuf *ip6e_hbh; 11982cd038dSYoshinobu Inoue struct mbuf *ip6e_dest1; 12082cd038dSYoshinobu Inoue struct mbuf *ip6e_rthdr; 12182cd038dSYoshinobu Inoue struct mbuf *ip6e_dest2; 12282cd038dSYoshinobu Inoue }; 12382cd038dSYoshinobu Inoue 124f95d4633SHajimu UMEMOTO static int ip6_pcbopt __P((int, u_char *, int, struct ip6_pktopts **, 125f95d4633SHajimu UMEMOTO int, int)); 12682cd038dSYoshinobu Inoue static int ip6_pcbopts __P((struct ip6_pktopts **, struct mbuf *, 1277efe5d92SHajimu UMEMOTO struct socket *, struct sockopt *)); 128f95d4633SHajimu UMEMOTO static int ip6_getpcbopt __P((struct ip6_pktopts *, int, struct sockopt *)); 129f95d4633SHajimu UMEMOTO static int ip6_setpktoption __P((int, u_char *, int, struct ip6_pktopts *, int, 130f95d4633SHajimu UMEMOTO int, int, int)); 131f95d4633SHajimu UMEMOTO 13282cd038dSYoshinobu Inoue static int ip6_setmoptions __P((int, struct ip6_moptions **, struct mbuf *)); 13382cd038dSYoshinobu Inoue static int ip6_getmoptions __P((int, struct ip6_moptions *, struct mbuf **)); 13482cd038dSYoshinobu Inoue static int ip6_copyexthdr __P((struct mbuf **, caddr_t, int)); 13582cd038dSYoshinobu Inoue static int ip6_insertfraghdr __P((struct mbuf *, struct mbuf *, int, 13682cd038dSYoshinobu Inoue struct ip6_frag **)); 13782cd038dSYoshinobu Inoue static int ip6_insert_jumboopt __P((struct ip6_exthdrs *, u_int32_t)); 13882cd038dSYoshinobu Inoue static int ip6_splithdr __P((struct mbuf *, struct ip6_exthdrs *)); 13931b3783cSHajimu UMEMOTO static int ip6_getpmtu __P((struct route_in6 *, struct route_in6 *, 140f95d4633SHajimu UMEMOTO struct ifnet *, struct in6_addr *, u_long *, int *)); 14182cd038dSYoshinobu Inoue 1427efe5d92SHajimu UMEMOTO 14382cd038dSYoshinobu Inoue /* 14482cd038dSYoshinobu Inoue * IP6 output. The packet in mbuf chain m contains a skeletal IP6 14582cd038dSYoshinobu Inoue * header (with pri, len, nxt, hlim, src, dst). 14682cd038dSYoshinobu Inoue * This function may modify ver and hlim only. 14782cd038dSYoshinobu Inoue * The mbuf chain containing the packet will be freed. 14882cd038dSYoshinobu Inoue * The mbuf opt, if present, will not be freed. 14933841545SHajimu UMEMOTO * 15033841545SHajimu UMEMOTO * type of "mtu": rt_rmx.rmx_mtu is u_long, ifnet.ifr_mtu is int, and 15133841545SHajimu UMEMOTO * nd_ifinfo.linkmtu is u_int32_t. so we use u_long to hold largest one, 15233841545SHajimu UMEMOTO * which is rt_rmx.rmx_mtu. 15382cd038dSYoshinobu Inoue */ 15482cd038dSYoshinobu Inoue int 1555d846453SSam Leffler ip6_output(m0, opt, ro, flags, im6o, ifpp, inp) 15682cd038dSYoshinobu Inoue struct mbuf *m0; 15782cd038dSYoshinobu Inoue struct ip6_pktopts *opt; 15882cd038dSYoshinobu Inoue struct route_in6 *ro; 15982cd038dSYoshinobu Inoue int flags; 16082cd038dSYoshinobu Inoue struct ip6_moptions *im6o; 16182cd038dSYoshinobu Inoue struct ifnet **ifpp; /* XXX: just for statistics */ 1625d846453SSam Leffler struct inpcb *inp; 16382cd038dSYoshinobu Inoue { 16482cd038dSYoshinobu Inoue struct ip6_hdr *ip6, *mhip6; 165686cdd19SJun-ichiro itojun Hagino struct ifnet *ifp, *origifp; 16682cd038dSYoshinobu Inoue struct mbuf *m = m0; 16782cd038dSYoshinobu Inoue int hlen, tlen, len, off; 16882cd038dSYoshinobu Inoue struct route_in6 ip6route; 16982cd038dSYoshinobu Inoue struct sockaddr_in6 *dst; 17082cd038dSYoshinobu Inoue int error = 0; 1715da9f8faSJosef Karthauser struct in6_ifaddr *ia = NULL; 17282cd038dSYoshinobu Inoue u_long mtu; 173f95d4633SHajimu UMEMOTO int alwaysfrag, dontfrag; 17482cd038dSYoshinobu Inoue u_int32_t optlen = 0, plen = 0, unfragpartlen = 0; 17582cd038dSYoshinobu Inoue struct ip6_exthdrs exthdrs; 17682cd038dSYoshinobu Inoue struct in6_addr finaldst; 17782cd038dSYoshinobu Inoue struct route_in6 *ro_pmtu = NULL; 17882cd038dSYoshinobu Inoue int hdrsplit = 0; 17982cd038dSYoshinobu Inoue int needipsec = 0; 180da0f4099SHajimu UMEMOTO #if defined(IPSEC) || defined(FAST_IPSEC) 181b9234fafSSam Leffler int needipsectun = 0; 182b9234fafSSam Leffler struct secpolicy *sp = NULL; 183da0f4099SHajimu UMEMOTO #endif /*IPSEC || FAST_IPSEC*/ 184b9234fafSSam Leffler 185b9234fafSSam Leffler ip6 = mtod(m, struct ip6_hdr *); 18603a1bc3eSSUZUKI Shinsuke finaldst = ip6->ip6_dst; 18782cd038dSYoshinobu Inoue 18882cd038dSYoshinobu Inoue #define MAKE_EXTHDR(hp, mp) \ 189686cdd19SJun-ichiro itojun Hagino do { \ 19082cd038dSYoshinobu Inoue if (hp) { \ 19182cd038dSYoshinobu Inoue struct ip6_ext *eh = (struct ip6_ext *)(hp); \ 19282cd038dSYoshinobu Inoue error = ip6_copyexthdr((mp), (caddr_t)(hp), \ 19382cd038dSYoshinobu Inoue ((eh)->ip6e_len + 1) << 3); \ 19482cd038dSYoshinobu Inoue if (error) \ 19582cd038dSYoshinobu Inoue goto freehdrs; \ 19682cd038dSYoshinobu Inoue } \ 1977efe5d92SHajimu UMEMOTO } while (/*CONSTCOND*/ 0) 19882cd038dSYoshinobu Inoue 19982cd038dSYoshinobu Inoue bzero(&exthdrs, sizeof(exthdrs)); 200686cdd19SJun-ichiro itojun Hagino 20182cd038dSYoshinobu Inoue if (opt) { 20282cd038dSYoshinobu Inoue /* Hop-by-Hop options header */ 20382cd038dSYoshinobu Inoue MAKE_EXTHDR(opt->ip6po_hbh, &exthdrs.ip6e_hbh); 20482cd038dSYoshinobu Inoue /* Destination options header(1st part) */ 20529bc2c48SHajimu UMEMOTO if (opt->ip6po_rthdr) { 20629bc2c48SHajimu UMEMOTO /* 20729bc2c48SHajimu UMEMOTO * Destination options header(1st part) 20829bc2c48SHajimu UMEMOTO * This only makes sence with a routing header. 20929bc2c48SHajimu UMEMOTO * See Section 9.2 of RFC 3542. 21029bc2c48SHajimu UMEMOTO * Disabling this part just for MIP6 convenience is 21129bc2c48SHajimu UMEMOTO * a bad idea. We need to think carefully about a 21229bc2c48SHajimu UMEMOTO * way to make the advanced API coexist with MIP6 21329bc2c48SHajimu UMEMOTO * options, which might automatically be inserted in 21429bc2c48SHajimu UMEMOTO * the kernel. 21529bc2c48SHajimu UMEMOTO */ 21682cd038dSYoshinobu Inoue MAKE_EXTHDR(opt->ip6po_dest1, &exthdrs.ip6e_dest1); 21729bc2c48SHajimu UMEMOTO } 21882cd038dSYoshinobu Inoue /* Routing header */ 21982cd038dSYoshinobu Inoue MAKE_EXTHDR(opt->ip6po_rthdr, &exthdrs.ip6e_rthdr); 22082cd038dSYoshinobu Inoue /* Destination options header(2nd part) */ 22182cd038dSYoshinobu Inoue MAKE_EXTHDR(opt->ip6po_dest2, &exthdrs.ip6e_dest2); 22282cd038dSYoshinobu Inoue } 22382cd038dSYoshinobu Inoue 22482cd038dSYoshinobu Inoue #ifdef IPSEC 22582cd038dSYoshinobu Inoue /* get a security policy for this packet */ 226f073c60fSHajimu UMEMOTO if (inp == NULL) 22782cd038dSYoshinobu Inoue sp = ipsec6_getpolicybyaddr(m, IPSEC_DIR_OUTBOUND, 0, &error); 22882cd038dSYoshinobu Inoue else 229f073c60fSHajimu UMEMOTO sp = ipsec6_getpolicybypcb(m, IPSEC_DIR_OUTBOUND, inp, &error); 23082cd038dSYoshinobu Inoue 23182cd038dSYoshinobu Inoue if (sp == NULL) { 23282cd038dSYoshinobu Inoue ipsec6stat.out_inval++; 233686cdd19SJun-ichiro itojun Hagino goto freehdrs; 23482cd038dSYoshinobu Inoue } 23582cd038dSYoshinobu Inoue 23682cd038dSYoshinobu Inoue error = 0; 23782cd038dSYoshinobu Inoue 23882cd038dSYoshinobu Inoue /* check policy */ 23982cd038dSYoshinobu Inoue switch (sp->policy) { 24082cd038dSYoshinobu Inoue case IPSEC_POLICY_DISCARD: 24182cd038dSYoshinobu Inoue /* 24282cd038dSYoshinobu Inoue * This packet is just discarded. 24382cd038dSYoshinobu Inoue */ 24482cd038dSYoshinobu Inoue ipsec6stat.out_polvio++; 245686cdd19SJun-ichiro itojun Hagino goto freehdrs; 24682cd038dSYoshinobu Inoue 24782cd038dSYoshinobu Inoue case IPSEC_POLICY_BYPASS: 24882cd038dSYoshinobu Inoue case IPSEC_POLICY_NONE: 24982cd038dSYoshinobu Inoue /* no need to do IPsec. */ 25082cd038dSYoshinobu Inoue needipsec = 0; 25182cd038dSYoshinobu Inoue break; 25282cd038dSYoshinobu Inoue 25382cd038dSYoshinobu Inoue case IPSEC_POLICY_IPSEC: 25482cd038dSYoshinobu Inoue if (sp->req == NULL) { 255686cdd19SJun-ichiro itojun Hagino /* acquire a policy */ 256686cdd19SJun-ichiro itojun Hagino error = key_spdacquire(sp); 257686cdd19SJun-ichiro itojun Hagino goto freehdrs; 25882cd038dSYoshinobu Inoue } 25982cd038dSYoshinobu Inoue needipsec = 1; 26082cd038dSYoshinobu Inoue break; 26182cd038dSYoshinobu Inoue 26282cd038dSYoshinobu Inoue case IPSEC_POLICY_ENTRUST: 26382cd038dSYoshinobu Inoue default: 26482cd038dSYoshinobu Inoue printf("ip6_output: Invalid policy found. %d\n", sp->policy); 26582cd038dSYoshinobu Inoue } 26682cd038dSYoshinobu Inoue #endif /* IPSEC */ 267b9234fafSSam Leffler #ifdef FAST_IPSEC 268b9234fafSSam Leffler /* get a security policy for this packet */ 269b9234fafSSam Leffler if (inp == NULL) 270b9234fafSSam Leffler sp = ipsec_getpolicybyaddr(m, IPSEC_DIR_OUTBOUND, 0, &error); 271b9234fafSSam Leffler else 272b9234fafSSam Leffler sp = ipsec_getpolicybysock(m, IPSEC_DIR_OUTBOUND, inp, &error); 273b9234fafSSam Leffler 274b9234fafSSam Leffler if (sp == NULL) { 275b9234fafSSam Leffler newipsecstat.ips_out_inval++; 276b9234fafSSam Leffler goto freehdrs; 277b9234fafSSam Leffler } 278b9234fafSSam Leffler 279b9234fafSSam Leffler error = 0; 280b9234fafSSam Leffler 281b9234fafSSam Leffler /* check policy */ 282b9234fafSSam Leffler switch (sp->policy) { 283b9234fafSSam Leffler case IPSEC_POLICY_DISCARD: 284b9234fafSSam Leffler /* 285b9234fafSSam Leffler * This packet is just discarded. 286b9234fafSSam Leffler */ 287b9234fafSSam Leffler newipsecstat.ips_out_polvio++; 288b9234fafSSam Leffler goto freehdrs; 289b9234fafSSam Leffler 290b9234fafSSam Leffler case IPSEC_POLICY_BYPASS: 291b9234fafSSam Leffler case IPSEC_POLICY_NONE: 292b9234fafSSam Leffler /* no need to do IPsec. */ 293b9234fafSSam Leffler needipsec = 0; 294b9234fafSSam Leffler break; 295b9234fafSSam Leffler 296b9234fafSSam Leffler case IPSEC_POLICY_IPSEC: 297b9234fafSSam Leffler if (sp->req == NULL) { 298b9234fafSSam Leffler /* acquire a policy */ 299b9234fafSSam Leffler error = key_spdacquire(sp); 300b9234fafSSam Leffler goto freehdrs; 301b9234fafSSam Leffler } 302b9234fafSSam Leffler needipsec = 1; 303b9234fafSSam Leffler break; 304b9234fafSSam Leffler 305b9234fafSSam Leffler case IPSEC_POLICY_ENTRUST: 306b9234fafSSam Leffler default: 307b9234fafSSam Leffler printf("ip6_output: Invalid policy found. %d\n", sp->policy); 308b9234fafSSam Leffler } 309b9234fafSSam Leffler #endif /* FAST_IPSEC */ 31082cd038dSYoshinobu Inoue 31182cd038dSYoshinobu Inoue /* 31282cd038dSYoshinobu Inoue * Calculate the total length of the extension header chain. 31382cd038dSYoshinobu Inoue * Keep the length of the unfragmentable part for fragmentation. 31482cd038dSYoshinobu Inoue */ 31582cd038dSYoshinobu Inoue optlen = 0; 31682cd038dSYoshinobu Inoue if (exthdrs.ip6e_hbh) optlen += exthdrs.ip6e_hbh->m_len; 31782cd038dSYoshinobu Inoue if (exthdrs.ip6e_dest1) optlen += exthdrs.ip6e_dest1->m_len; 31882cd038dSYoshinobu Inoue if (exthdrs.ip6e_rthdr) optlen += exthdrs.ip6e_rthdr->m_len; 31982cd038dSYoshinobu Inoue unfragpartlen = optlen + sizeof(struct ip6_hdr); 32082cd038dSYoshinobu Inoue /* NOTE: we don't add AH/ESP length here. do that later. */ 32182cd038dSYoshinobu Inoue if (exthdrs.ip6e_dest2) optlen += exthdrs.ip6e_dest2->m_len; 32282cd038dSYoshinobu Inoue 32382cd038dSYoshinobu Inoue /* 32482cd038dSYoshinobu Inoue * If we need IPsec, or there is at least one extension header, 32582cd038dSYoshinobu Inoue * separate IP6 header from the payload. 32682cd038dSYoshinobu Inoue */ 32782cd038dSYoshinobu Inoue if ((needipsec || optlen) && !hdrsplit) { 32882cd038dSYoshinobu Inoue if ((error = ip6_splithdr(m, &exthdrs)) != 0) { 32982cd038dSYoshinobu Inoue m = NULL; 33082cd038dSYoshinobu Inoue goto freehdrs; 33182cd038dSYoshinobu Inoue } 33282cd038dSYoshinobu Inoue m = exthdrs.ip6e_ip6; 33382cd038dSYoshinobu Inoue hdrsplit++; 33482cd038dSYoshinobu Inoue } 33582cd038dSYoshinobu Inoue 33682cd038dSYoshinobu Inoue /* adjust pointer */ 33782cd038dSYoshinobu Inoue ip6 = mtod(m, struct ip6_hdr *); 33882cd038dSYoshinobu Inoue 33982cd038dSYoshinobu Inoue /* adjust mbuf packet header length */ 34082cd038dSYoshinobu Inoue m->m_pkthdr.len += optlen; 34182cd038dSYoshinobu Inoue plen = m->m_pkthdr.len - sizeof(*ip6); 34282cd038dSYoshinobu Inoue 34382cd038dSYoshinobu Inoue /* If this is a jumbo payload, insert a jumbo payload option. */ 34482cd038dSYoshinobu Inoue if (plen > IPV6_MAXPACKET) { 34582cd038dSYoshinobu Inoue if (!hdrsplit) { 34682cd038dSYoshinobu Inoue if ((error = ip6_splithdr(m, &exthdrs)) != 0) { 34782cd038dSYoshinobu Inoue m = NULL; 34882cd038dSYoshinobu Inoue goto freehdrs; 34982cd038dSYoshinobu Inoue } 35082cd038dSYoshinobu Inoue m = exthdrs.ip6e_ip6; 35182cd038dSYoshinobu Inoue hdrsplit++; 35282cd038dSYoshinobu Inoue } 35382cd038dSYoshinobu Inoue /* adjust pointer */ 35482cd038dSYoshinobu Inoue ip6 = mtod(m, struct ip6_hdr *); 35582cd038dSYoshinobu Inoue if ((error = ip6_insert_jumboopt(&exthdrs, plen)) != 0) 35682cd038dSYoshinobu Inoue goto freehdrs; 35782cd038dSYoshinobu Inoue ip6->ip6_plen = 0; 35882cd038dSYoshinobu Inoue } else 35982cd038dSYoshinobu Inoue ip6->ip6_plen = htons(plen); 36082cd038dSYoshinobu Inoue 36182cd038dSYoshinobu Inoue /* 36282cd038dSYoshinobu Inoue * Concatenate headers and fill in next header fields. 36382cd038dSYoshinobu Inoue * Here we have, on "m" 36482cd038dSYoshinobu Inoue * IPv6 payload 36582cd038dSYoshinobu Inoue * and we insert headers accordingly. Finally, we should be getting: 36682cd038dSYoshinobu Inoue * IPv6 hbh dest1 rthdr ah* [esp* dest2 payload] 36782cd038dSYoshinobu Inoue * 36882cd038dSYoshinobu Inoue * during the header composing process, "m" points to IPv6 header. 36982cd038dSYoshinobu Inoue * "mprev" points to an extension header prior to esp. 37082cd038dSYoshinobu Inoue */ 37182cd038dSYoshinobu Inoue { 37282cd038dSYoshinobu Inoue u_char *nexthdrp = &ip6->ip6_nxt; 37382cd038dSYoshinobu Inoue struct mbuf *mprev = m; 37482cd038dSYoshinobu Inoue 37582cd038dSYoshinobu Inoue /* 37682cd038dSYoshinobu Inoue * we treat dest2 specially. this makes IPsec processing 37788ff5695SSUZUKI Shinsuke * much easier. the goal here is to make mprev point the 37888ff5695SSUZUKI Shinsuke * mbuf prior to dest2. 37982cd038dSYoshinobu Inoue * 38082cd038dSYoshinobu Inoue * result: IPv6 dest2 payload 38182cd038dSYoshinobu Inoue * m and mprev will point to IPv6 header. 38282cd038dSYoshinobu Inoue */ 38382cd038dSYoshinobu Inoue if (exthdrs.ip6e_dest2) { 38482cd038dSYoshinobu Inoue if (!hdrsplit) 38582cd038dSYoshinobu Inoue panic("assumption failed: hdr not split"); 38682cd038dSYoshinobu Inoue exthdrs.ip6e_dest2->m_next = m->m_next; 38782cd038dSYoshinobu Inoue m->m_next = exthdrs.ip6e_dest2; 38882cd038dSYoshinobu Inoue *mtod(exthdrs.ip6e_dest2, u_char *) = ip6->ip6_nxt; 38982cd038dSYoshinobu Inoue ip6->ip6_nxt = IPPROTO_DSTOPTS; 39082cd038dSYoshinobu Inoue } 39182cd038dSYoshinobu Inoue 39282cd038dSYoshinobu Inoue #define MAKE_CHAIN(m, mp, p, i)\ 393686cdd19SJun-ichiro itojun Hagino do {\ 39482cd038dSYoshinobu Inoue if (m) {\ 39582cd038dSYoshinobu Inoue if (!hdrsplit) \ 39682cd038dSYoshinobu Inoue panic("assumption failed: hdr not split"); \ 39782cd038dSYoshinobu Inoue *mtod((m), u_char *) = *(p);\ 39882cd038dSYoshinobu Inoue *(p) = (i);\ 39982cd038dSYoshinobu Inoue p = mtod((m), u_char *);\ 40082cd038dSYoshinobu Inoue (m)->m_next = (mp)->m_next;\ 40182cd038dSYoshinobu Inoue (mp)->m_next = (m);\ 40282cd038dSYoshinobu Inoue (mp) = (m);\ 40382cd038dSYoshinobu Inoue }\ 4047efe5d92SHajimu UMEMOTO } while (/*CONSTCOND*/ 0) 40582cd038dSYoshinobu Inoue /* 40682cd038dSYoshinobu Inoue * result: IPv6 hbh dest1 rthdr dest2 payload 40782cd038dSYoshinobu Inoue * m will point to IPv6 header. mprev will point to the 40882cd038dSYoshinobu Inoue * extension header prior to dest2 (rthdr in the above case). 40982cd038dSYoshinobu Inoue */ 4107efe5d92SHajimu UMEMOTO MAKE_CHAIN(exthdrs.ip6e_hbh, mprev, nexthdrp, IPPROTO_HOPOPTS); 4117efe5d92SHajimu UMEMOTO MAKE_CHAIN(exthdrs.ip6e_dest1, mprev, nexthdrp, 4127efe5d92SHajimu UMEMOTO IPPROTO_DSTOPTS); 4137efe5d92SHajimu UMEMOTO MAKE_CHAIN(exthdrs.ip6e_rthdr, mprev, nexthdrp, 4147efe5d92SHajimu UMEMOTO IPPROTO_ROUTING); 41582cd038dSYoshinobu Inoue 416b9234fafSSam Leffler #if defined(IPSEC) || defined(FAST_IPSEC) 41782cd038dSYoshinobu Inoue if (!needipsec) 41882cd038dSYoshinobu Inoue goto skip_ipsec2; 41982cd038dSYoshinobu Inoue 42082cd038dSYoshinobu Inoue /* 42182cd038dSYoshinobu Inoue * pointers after IPsec headers are not valid any more. 42282cd038dSYoshinobu Inoue * other pointers need a great care too. 42382cd038dSYoshinobu Inoue * (IPsec routines should not mangle mbufs prior to AH/ESP) 42482cd038dSYoshinobu Inoue */ 42582cd038dSYoshinobu Inoue exthdrs.ip6e_dest2 = NULL; 42682cd038dSYoshinobu Inoue 42782cd038dSYoshinobu Inoue { 42882cd038dSYoshinobu Inoue struct ip6_rthdr *rh = NULL; 42982cd038dSYoshinobu Inoue int segleft_org = 0; 43082cd038dSYoshinobu Inoue struct ipsec_output_state state; 43182cd038dSYoshinobu Inoue 43282cd038dSYoshinobu Inoue if (exthdrs.ip6e_rthdr) { 43382cd038dSYoshinobu Inoue rh = mtod(exthdrs.ip6e_rthdr, struct ip6_rthdr *); 43482cd038dSYoshinobu Inoue segleft_org = rh->ip6r_segleft; 43582cd038dSYoshinobu Inoue rh->ip6r_segleft = 0; 43682cd038dSYoshinobu Inoue } 43782cd038dSYoshinobu Inoue 43882cd038dSYoshinobu Inoue bzero(&state, sizeof(state)); 43982cd038dSYoshinobu Inoue state.m = m; 44082cd038dSYoshinobu Inoue error = ipsec6_output_trans(&state, nexthdrp, mprev, sp, flags, 44182cd038dSYoshinobu Inoue &needipsectun); 44282cd038dSYoshinobu Inoue m = state.m; 44382cd038dSYoshinobu Inoue if (error) { 44482cd038dSYoshinobu Inoue /* mbuf is already reclaimed in ipsec6_output_trans. */ 44582cd038dSYoshinobu Inoue m = NULL; 44682cd038dSYoshinobu Inoue switch (error) { 44782cd038dSYoshinobu Inoue case EHOSTUNREACH: 44882cd038dSYoshinobu Inoue case ENETUNREACH: 44982cd038dSYoshinobu Inoue case EMSGSIZE: 45082cd038dSYoshinobu Inoue case ENOBUFS: 45182cd038dSYoshinobu Inoue case ENOMEM: 45282cd038dSYoshinobu Inoue break; 45382cd038dSYoshinobu Inoue default: 45482cd038dSYoshinobu Inoue printf("ip6_output (ipsec): error code %d\n", error); 4557efe5d92SHajimu UMEMOTO /* FALLTHROUGH */ 45682cd038dSYoshinobu Inoue case ENOENT: 45782cd038dSYoshinobu Inoue /* don't show these error codes to the user */ 45882cd038dSYoshinobu Inoue error = 0; 45982cd038dSYoshinobu Inoue break; 46082cd038dSYoshinobu Inoue } 46182cd038dSYoshinobu Inoue goto bad; 46282cd038dSYoshinobu Inoue } 46382cd038dSYoshinobu Inoue if (exthdrs.ip6e_rthdr) { 46482cd038dSYoshinobu Inoue /* ah6_output doesn't modify mbuf chain */ 46582cd038dSYoshinobu Inoue rh->ip6r_segleft = segleft_org; 46682cd038dSYoshinobu Inoue } 46782cd038dSYoshinobu Inoue } 46882cd038dSYoshinobu Inoue skip_ipsec2:; 46982cd038dSYoshinobu Inoue #endif 47082cd038dSYoshinobu Inoue } 47182cd038dSYoshinobu Inoue 47282cd038dSYoshinobu Inoue /* 4737efe5d92SHajimu UMEMOTO * If there is a routing header, replace the destination address field 47482cd038dSYoshinobu Inoue * with the first hop of the routing header. 47582cd038dSYoshinobu Inoue */ 47682cd038dSYoshinobu Inoue if (exthdrs.ip6e_rthdr) { 47782cd038dSYoshinobu Inoue struct ip6_rthdr *rh = 47882cd038dSYoshinobu Inoue (struct ip6_rthdr *)(mtod(exthdrs.ip6e_rthdr, 47982cd038dSYoshinobu Inoue struct ip6_rthdr *)); 48082cd038dSYoshinobu Inoue struct ip6_rthdr0 *rh0; 481c302f5bcSHajimu UMEMOTO struct in6_addr *addrs; 48282cd038dSYoshinobu Inoue 48382cd038dSYoshinobu Inoue switch (rh->ip6r_type) { 48482cd038dSYoshinobu Inoue case IPV6_RTHDR_TYPE_0: 48582cd038dSYoshinobu Inoue rh0 = (struct ip6_rthdr0 *)rh; 486aef03e95SSUZUKI Shinsuke addrs = (struct in6_addr *)(rh0 + 1); 487c302f5bcSHajimu UMEMOTO 488c302f5bcSHajimu UMEMOTO ip6->ip6_dst = *addrs; 489c302f5bcSHajimu UMEMOTO bcopy((caddr_t)(addrs + 1), (caddr_t)addrs, 49082cd038dSYoshinobu Inoue sizeof(struct in6_addr)*(rh0->ip6r0_segleft - 1) 49182cd038dSYoshinobu Inoue ); 492c302f5bcSHajimu UMEMOTO *(addrs + rh0->ip6r0_segleft - 1) = finaldst; 49382cd038dSYoshinobu Inoue break; 49482cd038dSYoshinobu Inoue default: /* is it possible? */ 49582cd038dSYoshinobu Inoue error = EINVAL; 49682cd038dSYoshinobu Inoue goto bad; 49782cd038dSYoshinobu Inoue } 49882cd038dSYoshinobu Inoue } 49982cd038dSYoshinobu Inoue 50082cd038dSYoshinobu Inoue /* Source address validation */ 50182cd038dSYoshinobu Inoue if (IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_src) && 50282cd038dSYoshinobu Inoue (flags & IPV6_DADOUTPUT) == 0) { 50382cd038dSYoshinobu Inoue error = EOPNOTSUPP; 50482cd038dSYoshinobu Inoue ip6stat.ip6s_badscope++; 50582cd038dSYoshinobu Inoue goto bad; 50682cd038dSYoshinobu Inoue } 50782cd038dSYoshinobu Inoue if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_src)) { 50882cd038dSYoshinobu Inoue error = EOPNOTSUPP; 50982cd038dSYoshinobu Inoue ip6stat.ip6s_badscope++; 51082cd038dSYoshinobu Inoue goto bad; 51182cd038dSYoshinobu Inoue } 51282cd038dSYoshinobu Inoue 51382cd038dSYoshinobu Inoue ip6stat.ip6s_localout++; 51482cd038dSYoshinobu Inoue 51582cd038dSYoshinobu Inoue /* 51682cd038dSYoshinobu Inoue * Route packet. 51782cd038dSYoshinobu Inoue */ 51882cd038dSYoshinobu Inoue if (ro == 0) { 51982cd038dSYoshinobu Inoue ro = &ip6route; 52082cd038dSYoshinobu Inoue bzero((caddr_t)ro, sizeof(*ro)); 52182cd038dSYoshinobu Inoue } 52282cd038dSYoshinobu Inoue ro_pmtu = ro; 52382cd038dSYoshinobu Inoue if (opt && opt->ip6po_rthdr) 52482cd038dSYoshinobu Inoue ro = &opt->ip6po_route; 52582cd038dSYoshinobu Inoue dst = (struct sockaddr_in6 *)&ro->ro_dst; 5267efe5d92SHajimu UMEMOTO 52782cd038dSYoshinobu Inoue /* 52882cd038dSYoshinobu Inoue * If there is a cached route, 52982cd038dSYoshinobu Inoue * check that it is to the same destination 53082cd038dSYoshinobu Inoue * and is still up. If not, free it and try again. 53182cd038dSYoshinobu Inoue */ 53282cd038dSYoshinobu Inoue if (ro->ro_rt && ((ro->ro_rt->rt_flags & RTF_UP) == 0 || 5331183d014SHajimu UMEMOTO dst->sin6_family != AF_INET6 || 53482cd038dSYoshinobu Inoue !IN6_ARE_ADDR_EQUAL(&dst->sin6_addr, &ip6->ip6_dst))) { 53582cd038dSYoshinobu Inoue RTFREE(ro->ro_rt); 53682cd038dSYoshinobu Inoue ro->ro_rt = (struct rtentry *)0; 53782cd038dSYoshinobu Inoue } 53882cd038dSYoshinobu Inoue if (ro->ro_rt == 0) { 53982cd038dSYoshinobu Inoue bzero(dst, sizeof(*dst)); 54082cd038dSYoshinobu Inoue dst->sin6_family = AF_INET6; 54182cd038dSYoshinobu Inoue dst->sin6_len = sizeof(struct sockaddr_in6); 54282cd038dSYoshinobu Inoue dst->sin6_addr = ip6->ip6_dst; 54382cd038dSYoshinobu Inoue } 544f95d4633SHajimu UMEMOTO 545f95d4633SHajimu UMEMOTO /* 546f95d4633SHajimu UMEMOTO * if specified, try to fill in the traffic class field. 547f95d4633SHajimu UMEMOTO * do not override if a non-zero value is already set. 548f95d4633SHajimu UMEMOTO * we check the diffserv field and the ecn field separately. 549f95d4633SHajimu UMEMOTO */ 550f95d4633SHajimu UMEMOTO if (opt && opt->ip6po_tclass >= 0) { 551f95d4633SHajimu UMEMOTO int mask = 0; 552f95d4633SHajimu UMEMOTO 553f95d4633SHajimu UMEMOTO if ((ip6->ip6_flow & htonl(0xfc << 20)) == 0) 554f95d4633SHajimu UMEMOTO mask |= 0xfc; 555f95d4633SHajimu UMEMOTO if ((ip6->ip6_flow & htonl(0x03 << 20)) == 0) 556f95d4633SHajimu UMEMOTO mask |= 0x03; 557f95d4633SHajimu UMEMOTO if (mask != 0) 558f95d4633SHajimu UMEMOTO ip6->ip6_flow |= htonl((opt->ip6po_tclass & mask) << 20); 559f95d4633SHajimu UMEMOTO } 560f95d4633SHajimu UMEMOTO 561f95d4633SHajimu UMEMOTO /* fill in or override the hop limit field, if necessary. */ 562f95d4633SHajimu UMEMOTO if (opt && opt->ip6po_hlim != -1) 563f95d4633SHajimu UMEMOTO ip6->ip6_hlim = opt->ip6po_hlim & 0xff; 564f95d4633SHajimu UMEMOTO else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) { 565f95d4633SHajimu UMEMOTO if (im6o != NULL) 566f95d4633SHajimu UMEMOTO ip6->ip6_hlim = im6o->im6o_multicast_hlim; 567f95d4633SHajimu UMEMOTO else 568f95d4633SHajimu UMEMOTO ip6->ip6_hlim = ip6_defmcasthlim; 569f95d4633SHajimu UMEMOTO } 570f95d4633SHajimu UMEMOTO 571b9234fafSSam Leffler #if defined(IPSEC) || defined(FAST_IPSEC) 57282cd038dSYoshinobu Inoue if (needipsec && needipsectun) { 57382cd038dSYoshinobu Inoue struct ipsec_output_state state; 57482cd038dSYoshinobu Inoue 57582cd038dSYoshinobu Inoue /* 57682cd038dSYoshinobu Inoue * All the extension headers will become inaccessible 57782cd038dSYoshinobu Inoue * (since they can be encrypted). 57882cd038dSYoshinobu Inoue * Don't panic, we need no more updates to extension headers 57982cd038dSYoshinobu Inoue * on inner IPv6 packet (since they are now encapsulated). 58082cd038dSYoshinobu Inoue * 58182cd038dSYoshinobu Inoue * IPv6 [ESP|AH] IPv6 [extension headers] payload 58282cd038dSYoshinobu Inoue */ 58382cd038dSYoshinobu Inoue bzero(&exthdrs, sizeof(exthdrs)); 58482cd038dSYoshinobu Inoue exthdrs.ip6e_ip6 = m; 58582cd038dSYoshinobu Inoue 58682cd038dSYoshinobu Inoue bzero(&state, sizeof(state)); 58782cd038dSYoshinobu Inoue state.m = m; 58882cd038dSYoshinobu Inoue state.ro = (struct route *)ro; 58982cd038dSYoshinobu Inoue state.dst = (struct sockaddr *)dst; 59082cd038dSYoshinobu Inoue 59182cd038dSYoshinobu Inoue error = ipsec6_output_tunnel(&state, sp, flags); 59282cd038dSYoshinobu Inoue 59382cd038dSYoshinobu Inoue m = state.m; 59482cd038dSYoshinobu Inoue ro = (struct route_in6 *)state.ro; 59582cd038dSYoshinobu Inoue dst = (struct sockaddr_in6 *)state.dst; 59682cd038dSYoshinobu Inoue if (error) { 59782cd038dSYoshinobu Inoue /* mbuf is already reclaimed in ipsec6_output_tunnel. */ 59882cd038dSYoshinobu Inoue m0 = m = NULL; 59982cd038dSYoshinobu Inoue m = NULL; 60082cd038dSYoshinobu Inoue switch (error) { 60182cd038dSYoshinobu Inoue case EHOSTUNREACH: 60282cd038dSYoshinobu Inoue case ENETUNREACH: 60382cd038dSYoshinobu Inoue case EMSGSIZE: 60482cd038dSYoshinobu Inoue case ENOBUFS: 60582cd038dSYoshinobu Inoue case ENOMEM: 60682cd038dSYoshinobu Inoue break; 60782cd038dSYoshinobu Inoue default: 60882cd038dSYoshinobu Inoue printf("ip6_output (ipsec): error code %d\n", error); 6097efe5d92SHajimu UMEMOTO /* FALLTHROUGH */ 61082cd038dSYoshinobu Inoue case ENOENT: 61182cd038dSYoshinobu Inoue /* don't show these error codes to the user */ 61282cd038dSYoshinobu Inoue error = 0; 61382cd038dSYoshinobu Inoue break; 61482cd038dSYoshinobu Inoue } 61582cd038dSYoshinobu Inoue goto bad; 61682cd038dSYoshinobu Inoue } 61782cd038dSYoshinobu Inoue 61882cd038dSYoshinobu Inoue exthdrs.ip6e_ip6 = m; 61982cd038dSYoshinobu Inoue } 620686cdd19SJun-ichiro itojun Hagino #endif /* IPSEC */ 62182cd038dSYoshinobu Inoue 62282cd038dSYoshinobu Inoue if (!IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) { 62382cd038dSYoshinobu Inoue /* Unicast */ 62482cd038dSYoshinobu Inoue 62582cd038dSYoshinobu Inoue #define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa)) 62682cd038dSYoshinobu Inoue #define sin6tosa(sin6) ((struct sockaddr *)(sin6)) 62782cd038dSYoshinobu Inoue /* xxx 62882cd038dSYoshinobu Inoue * interface selection comes here 62982cd038dSYoshinobu Inoue * if an interface is specified from an upper layer, 63082cd038dSYoshinobu Inoue * ifp must point it. 63182cd038dSYoshinobu Inoue */ 632686cdd19SJun-ichiro itojun Hagino if (ro->ro_rt == 0) { 633686cdd19SJun-ichiro itojun Hagino /* 634686cdd19SJun-ichiro itojun Hagino * non-bsdi always clone routes, if parent is 635686cdd19SJun-ichiro itojun Hagino * PRF_CLONING. 636686cdd19SJun-ichiro itojun Hagino */ 63782cd038dSYoshinobu Inoue rtalloc((struct route *)ro); 638686cdd19SJun-ichiro itojun Hagino } 63982cd038dSYoshinobu Inoue if (ro->ro_rt == 0) { 64082cd038dSYoshinobu Inoue ip6stat.ip6s_noroute++; 64182cd038dSYoshinobu Inoue error = EHOSTUNREACH; 64282cd038dSYoshinobu Inoue /* XXX in6_ifstat_inc(ifp, ifs6_out_discard); */ 64382cd038dSYoshinobu Inoue goto bad; 64482cd038dSYoshinobu Inoue } 64568974f29SSam Leffler /* XXX rt not locked */ 64682cd038dSYoshinobu Inoue ia = ifatoia6(ro->ro_rt->rt_ifa); 64782cd038dSYoshinobu Inoue ifp = ro->ro_rt->rt_ifp; 64897d8d152SAndre Oppermann ro->ro_rt->rt_rmx.rmx_pksent++; 64982cd038dSYoshinobu Inoue if (ro->ro_rt->rt_flags & RTF_GATEWAY) 65082cd038dSYoshinobu Inoue dst = (struct sockaddr_in6 *)ro->ro_rt->rt_gateway; 65182cd038dSYoshinobu Inoue m->m_flags &= ~(M_BCAST | M_MCAST); /* just in case */ 65282cd038dSYoshinobu Inoue 65382cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_request); 65482cd038dSYoshinobu Inoue 65582cd038dSYoshinobu Inoue /* 656686cdd19SJun-ichiro itojun Hagino * Check if the outgoing interface conflicts with 65782cd038dSYoshinobu Inoue * the interface specified by ifi6_ifindex (if specified). 65882cd038dSYoshinobu Inoue * Note that loopback interface is always okay. 659686cdd19SJun-ichiro itojun Hagino * (this may happen when we are sending a packet to one of 660686cdd19SJun-ichiro itojun Hagino * our own addresses.) 66182cd038dSYoshinobu Inoue */ 66282cd038dSYoshinobu Inoue if (opt && opt->ip6po_pktinfo 66382cd038dSYoshinobu Inoue && opt->ip6po_pktinfo->ipi6_ifindex) { 66482cd038dSYoshinobu Inoue if (!(ifp->if_flags & IFF_LOOPBACK) 66582cd038dSYoshinobu Inoue && ifp->if_index != opt->ip6po_pktinfo->ipi6_ifindex) { 66682cd038dSYoshinobu Inoue ip6stat.ip6s_noroute++; 66782cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_discard); 66882cd038dSYoshinobu Inoue error = EHOSTUNREACH; 66982cd038dSYoshinobu Inoue goto bad; 67082cd038dSYoshinobu Inoue } 67182cd038dSYoshinobu Inoue } 67282cd038dSYoshinobu Inoue 67382cd038dSYoshinobu Inoue if (opt && opt->ip6po_hlim != -1) 67482cd038dSYoshinobu Inoue ip6->ip6_hlim = opt->ip6po_hlim & 0xff; 67582cd038dSYoshinobu Inoue } else { 67682cd038dSYoshinobu Inoue /* Multicast */ 67782cd038dSYoshinobu Inoue struct in6_multi *in6m; 67882cd038dSYoshinobu Inoue 67982cd038dSYoshinobu Inoue m->m_flags = (m->m_flags & ~M_BCAST) | M_MCAST; 68082cd038dSYoshinobu Inoue 68182cd038dSYoshinobu Inoue /* 68282cd038dSYoshinobu Inoue * See if the caller provided any multicast options 68382cd038dSYoshinobu Inoue */ 68482cd038dSYoshinobu Inoue ifp = NULL; 68582cd038dSYoshinobu Inoue if (im6o != NULL) { 68682cd038dSYoshinobu Inoue ip6->ip6_hlim = im6o->im6o_multicast_hlim; 68782cd038dSYoshinobu Inoue if (im6o->im6o_multicast_ifp != NULL) 68882cd038dSYoshinobu Inoue ifp = im6o->im6o_multicast_ifp; 68982cd038dSYoshinobu Inoue } else 69082cd038dSYoshinobu Inoue ip6->ip6_hlim = ip6_defmcasthlim; 69182cd038dSYoshinobu Inoue 69282cd038dSYoshinobu Inoue /* 69382cd038dSYoshinobu Inoue * See if the caller provided the outgoing interface 69482cd038dSYoshinobu Inoue * as an ancillary data. 69582cd038dSYoshinobu Inoue * Boundary check for ifindex is assumed to be already done. 69682cd038dSYoshinobu Inoue */ 69782cd038dSYoshinobu Inoue if (opt && opt->ip6po_pktinfo && opt->ip6po_pktinfo->ipi6_ifindex) 698f9132cebSJonathan Lemon ifp = ifnet_byindex(opt->ip6po_pktinfo->ipi6_ifindex); 69982cd038dSYoshinobu Inoue 70082cd038dSYoshinobu Inoue /* 70182cd038dSYoshinobu Inoue * If the destination is a node-local scope multicast, 70282cd038dSYoshinobu Inoue * the packet should be loop-backed only. 70382cd038dSYoshinobu Inoue */ 7049a4f9608SHajimu UMEMOTO if (IN6_IS_ADDR_MC_INTFACELOCAL(&ip6->ip6_dst)) { 70582cd038dSYoshinobu Inoue /* 70682cd038dSYoshinobu Inoue * If the outgoing interface is already specified, 70782cd038dSYoshinobu Inoue * it should be a loopback interface. 70882cd038dSYoshinobu Inoue */ 70982cd038dSYoshinobu Inoue if (ifp && (ifp->if_flags & IFF_LOOPBACK) == 0) { 71082cd038dSYoshinobu Inoue ip6stat.ip6s_badscope++; 71182cd038dSYoshinobu Inoue error = ENETUNREACH; /* XXX: better error? */ 71282cd038dSYoshinobu Inoue /* XXX correct ifp? */ 71382cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_discard); 71482cd038dSYoshinobu Inoue goto bad; 71582cd038dSYoshinobu Inoue } else { 71682cd038dSYoshinobu Inoue ifp = &loif[0]; 71782cd038dSYoshinobu Inoue } 71882cd038dSYoshinobu Inoue } 71982cd038dSYoshinobu Inoue 72082cd038dSYoshinobu Inoue if (opt && opt->ip6po_hlim != -1) 72182cd038dSYoshinobu Inoue ip6->ip6_hlim = opt->ip6po_hlim & 0xff; 72282cd038dSYoshinobu Inoue 72382cd038dSYoshinobu Inoue /* 72482cd038dSYoshinobu Inoue * If caller did not provide an interface lookup a 72582cd038dSYoshinobu Inoue * default in the routing table. This is either a 72682cd038dSYoshinobu Inoue * default for the speicfied group (i.e. a host 72782cd038dSYoshinobu Inoue * route), or a multicast default (a route for the 72882cd038dSYoshinobu Inoue * ``net'' ff00::/8). 72982cd038dSYoshinobu Inoue */ 73082cd038dSYoshinobu Inoue if (ifp == NULL) { 73168974f29SSam Leffler if (ro->ro_rt == 0) 73282cd038dSYoshinobu Inoue ro->ro_rt = rtalloc1((struct sockaddr *) 73382cd038dSYoshinobu Inoue &ro->ro_dst, 0, 0UL); 73468974f29SSam Leffler else 73568974f29SSam Leffler RT_LOCK(ro->ro_rt); 73682cd038dSYoshinobu Inoue if (ro->ro_rt == 0) { 73782cd038dSYoshinobu Inoue ip6stat.ip6s_noroute++; 73882cd038dSYoshinobu Inoue error = EHOSTUNREACH; 73982cd038dSYoshinobu Inoue /* XXX in6_ifstat_inc(ifp, ifs6_out_discard) */ 74082cd038dSYoshinobu Inoue goto bad; 74182cd038dSYoshinobu Inoue } 74282cd038dSYoshinobu Inoue ia = ifatoia6(ro->ro_rt->rt_ifa); 74382cd038dSYoshinobu Inoue ifp = ro->ro_rt->rt_ifp; 74497d8d152SAndre Oppermann ro->ro_rt->rt_rmx.rmx_pksent++; 745d1dd20beSSam Leffler RT_UNLOCK(ro->ro_rt); 74682cd038dSYoshinobu Inoue } 74782cd038dSYoshinobu Inoue 74882cd038dSYoshinobu Inoue if ((flags & IPV6_FORWARDING) == 0) 74982cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_request); 75082cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_mcast); 75182cd038dSYoshinobu Inoue 75282cd038dSYoshinobu Inoue /* 75382cd038dSYoshinobu Inoue * Confirm that the outgoing interface supports multicast. 75482cd038dSYoshinobu Inoue */ 75582cd038dSYoshinobu Inoue if ((ifp->if_flags & IFF_MULTICAST) == 0) { 75682cd038dSYoshinobu Inoue ip6stat.ip6s_noroute++; 75782cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_discard); 75882cd038dSYoshinobu Inoue error = ENETUNREACH; 75982cd038dSYoshinobu Inoue goto bad; 76082cd038dSYoshinobu Inoue } 76182cd038dSYoshinobu Inoue IN6_LOOKUP_MULTI(ip6->ip6_dst, ifp, in6m); 76282cd038dSYoshinobu Inoue if (in6m != NULL && 76382cd038dSYoshinobu Inoue (im6o == NULL || im6o->im6o_multicast_loop)) { 76482cd038dSYoshinobu Inoue /* 76582cd038dSYoshinobu Inoue * If we belong to the destination multicast group 76682cd038dSYoshinobu Inoue * on the outgoing interface, and the caller did not 76782cd038dSYoshinobu Inoue * forbid loopback, loop back a copy. 76882cd038dSYoshinobu Inoue */ 76982cd038dSYoshinobu Inoue ip6_mloopback(ifp, m, dst); 77091ec0a1eSYoshinobu Inoue } else { 77191ec0a1eSYoshinobu Inoue /* 77291ec0a1eSYoshinobu Inoue * If we are acting as a multicast router, perform 77391ec0a1eSYoshinobu Inoue * multicast forwarding as if the packet had just 77491ec0a1eSYoshinobu Inoue * arrived on the interface to which we are about 77591ec0a1eSYoshinobu Inoue * to send. The multicast forwarding function 77691ec0a1eSYoshinobu Inoue * recursively calls this function, using the 77791ec0a1eSYoshinobu Inoue * IPV6_FORWARDING flag to prevent infinite recursion. 77891ec0a1eSYoshinobu Inoue * 77991ec0a1eSYoshinobu Inoue * Multicasts that are looped back by ip6_mloopback(), 78091ec0a1eSYoshinobu Inoue * above, will be forwarded by the ip6_input() routine, 78191ec0a1eSYoshinobu Inoue * if necessary. 78291ec0a1eSYoshinobu Inoue */ 78391ec0a1eSYoshinobu Inoue if (ip6_mrouter && (flags & IPV6_FORWARDING) == 0) { 784686cdd19SJun-ichiro itojun Hagino if (ip6_mforward(ip6, ifp, m) != 0) { 78591ec0a1eSYoshinobu Inoue m_freem(m); 78691ec0a1eSYoshinobu Inoue goto done; 78791ec0a1eSYoshinobu Inoue } 78891ec0a1eSYoshinobu Inoue } 78982cd038dSYoshinobu Inoue } 79082cd038dSYoshinobu Inoue /* 79182cd038dSYoshinobu Inoue * Multicasts with a hoplimit of zero may be looped back, 79282cd038dSYoshinobu Inoue * above, but must not be transmitted on a network. 79382cd038dSYoshinobu Inoue * Also, multicasts addressed to the loopback interface 79482cd038dSYoshinobu Inoue * are not sent -- the above call to ip6_mloopback() will 79582cd038dSYoshinobu Inoue * loop back a copy if this host actually belongs to the 79682cd038dSYoshinobu Inoue * destination group on the loopback interface. 79782cd038dSYoshinobu Inoue */ 798f95d4633SHajimu UMEMOTO if (ip6->ip6_hlim == 0 || (ifp->if_flags & IFF_LOOPBACK) || 799f95d4633SHajimu UMEMOTO IN6_IS_ADDR_MC_INTFACELOCAL(&ip6->ip6_dst)) { 80082cd038dSYoshinobu Inoue m_freem(m); 80182cd038dSYoshinobu Inoue goto done; 80282cd038dSYoshinobu Inoue } 80382cd038dSYoshinobu Inoue } 80482cd038dSYoshinobu Inoue 80582cd038dSYoshinobu Inoue /* 80682cd038dSYoshinobu Inoue * Fill the outgoing inteface to tell the upper layer 80782cd038dSYoshinobu Inoue * to increment per-interface statistics. 80882cd038dSYoshinobu Inoue */ 80982cd038dSYoshinobu Inoue if (ifpp) 81082cd038dSYoshinobu Inoue *ifpp = ifp; 81182cd038dSYoshinobu Inoue 81231b3783cSHajimu UMEMOTO /* Determine path MTU. */ 813f95d4633SHajimu UMEMOTO if ((error = ip6_getpmtu(ro_pmtu, ro, ifp, &finaldst, &mtu, 814f95d4633SHajimu UMEMOTO &alwaysfrag)) != 0) 81531b3783cSHajimu UMEMOTO goto bad; 81682cd038dSYoshinobu Inoue 81733841545SHajimu UMEMOTO /* 8188b00e59dSHajimu UMEMOTO * The caller of this function may specify to use the minimum MTU 8198b00e59dSHajimu UMEMOTO * in some cases. 8208b00e59dSHajimu UMEMOTO * An advanced API option (IPV6_USE_MIN_MTU) can also override MTU 8218b00e59dSHajimu UMEMOTO * setting. The logic is a bit complicated; by default, unicast 8228b00e59dSHajimu UMEMOTO * packets will follow path MTU while multicast packets will be sent at 8238b00e59dSHajimu UMEMOTO * the minimum MTU. If IP6PO_MINMTU_ALL is specified, all packets 8248b00e59dSHajimu UMEMOTO * including unicast ones will be sent at the minimum MTU. Multicast 8258b00e59dSHajimu UMEMOTO * packets will always be sent at the minimum MTU unless 8268b00e59dSHajimu UMEMOTO * IP6PO_MINMTU_DISABLE is explicitly specified. 8278b00e59dSHajimu UMEMOTO * See RFC 3542 for more details. 82833841545SHajimu UMEMOTO */ 8298b00e59dSHajimu UMEMOTO if (mtu > IPV6_MMTU) { 8308b00e59dSHajimu UMEMOTO if ((flags & IPV6_MINMTU)) 83133841545SHajimu UMEMOTO mtu = IPV6_MMTU; 8328b00e59dSHajimu UMEMOTO else if (opt && opt->ip6po_minmtu == IP6PO_MINMTU_ALL) 8338b00e59dSHajimu UMEMOTO mtu = IPV6_MMTU; 8348b00e59dSHajimu UMEMOTO else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) && 8358b00e59dSHajimu UMEMOTO (opt == NULL || 8368b00e59dSHajimu UMEMOTO opt->ip6po_minmtu != IP6PO_MINMTU_DISABLE)) { 8378b00e59dSHajimu UMEMOTO mtu = IPV6_MMTU; 8388b00e59dSHajimu UMEMOTO } 8398b00e59dSHajimu UMEMOTO } 84033841545SHajimu UMEMOTO 841686cdd19SJun-ichiro itojun Hagino /* Fake scoped addresses */ 842686cdd19SJun-ichiro itojun Hagino if ((ifp->if_flags & IFF_LOOPBACK) != 0) { 84382cd038dSYoshinobu Inoue /* 844686cdd19SJun-ichiro itojun Hagino * If source or destination address is a scoped address, and 845686cdd19SJun-ichiro itojun Hagino * the packet is going to be sent to a loopback interface, 846686cdd19SJun-ichiro itojun Hagino * we should keep the original interface. 84782cd038dSYoshinobu Inoue */ 848686cdd19SJun-ichiro itojun Hagino 849686cdd19SJun-ichiro itojun Hagino /* 850686cdd19SJun-ichiro itojun Hagino * XXX: this is a very experimental and temporary solution. 851686cdd19SJun-ichiro itojun Hagino * We eventually have sockaddr_in6 and use the sin6_scope_id 852686cdd19SJun-ichiro itojun Hagino * field of the structure here. 853686cdd19SJun-ichiro itojun Hagino * We rely on the consistency between two scope zone ids 85488ff5695SSUZUKI Shinsuke * of source and destination, which should already be assured. 85588ff5695SSUZUKI Shinsuke * Larger scopes than link will be supported in the future. 856686cdd19SJun-ichiro itojun Hagino */ 85733841545SHajimu UMEMOTO origifp = NULL; 858686cdd19SJun-ichiro itojun Hagino if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_src)) 859f9132cebSJonathan Lemon origifp = ifnet_byindex(ntohs(ip6->ip6_src.s6_addr16[1])); 860686cdd19SJun-ichiro itojun Hagino else if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_dst)) 861f9132cebSJonathan Lemon origifp = ifnet_byindex(ntohs(ip6->ip6_dst.s6_addr16[1])); 86233841545SHajimu UMEMOTO /* 86333841545SHajimu UMEMOTO * XXX: origifp can be NULL even in those two cases above. 86433841545SHajimu UMEMOTO * For example, if we remove the (only) link-local address 86533841545SHajimu UMEMOTO * from the loopback interface, and try to send a link-local 86633841545SHajimu UMEMOTO * address without link-id information. Then the source 86733841545SHajimu UMEMOTO * address is ::1, and the destination address is the 86833841545SHajimu UMEMOTO * link-local address with its s6_addr16[1] being zero. 86933841545SHajimu UMEMOTO * What is worse, if the packet goes to the loopback interface 87033841545SHajimu UMEMOTO * by a default rejected route, the null pointer would be 87133841545SHajimu UMEMOTO * passed to looutput, and the kernel would hang. 87233841545SHajimu UMEMOTO * The following last resort would prevent such disaster. 87333841545SHajimu UMEMOTO */ 87433841545SHajimu UMEMOTO if (origifp == NULL) 875686cdd19SJun-ichiro itojun Hagino origifp = ifp; 876686cdd19SJun-ichiro itojun Hagino } 877686cdd19SJun-ichiro itojun Hagino else 878686cdd19SJun-ichiro itojun Hagino origifp = ifp; 87933841545SHajimu UMEMOTO /* 88033841545SHajimu UMEMOTO * clear embedded scope identifiers if necessary. 88133841545SHajimu UMEMOTO * in6_clearscope will touch the addresses only when necessary. 88233841545SHajimu UMEMOTO */ 88333841545SHajimu UMEMOTO in6_clearscope(&ip6->ip6_src); 88433841545SHajimu UMEMOTO in6_clearscope(&ip6->ip6_dst); 88582cd038dSYoshinobu Inoue 88682cd038dSYoshinobu Inoue /* 88782cd038dSYoshinobu Inoue * Check with the firewall... 88882cd038dSYoshinobu Inoue */ 88920cb9f9eSHajimu UMEMOTO if (ip6_fw_enable && ip6_fw_chk_ptr) { 89082cd038dSYoshinobu Inoue u_short port = 0; 891686cdd19SJun-ichiro itojun Hagino m->m_pkthdr.rcvif = NULL; /* XXX */ 89282cd038dSYoshinobu Inoue /* If ipfw says divert, we have to just drop packet */ 89382cd038dSYoshinobu Inoue if ((*ip6_fw_chk_ptr)(&ip6, ifp, &port, &m)) { 89482cd038dSYoshinobu Inoue m_freem(m); 89582cd038dSYoshinobu Inoue goto done; 89682cd038dSYoshinobu Inoue } 89782cd038dSYoshinobu Inoue if (!m) { 89882cd038dSYoshinobu Inoue error = EACCES; 89982cd038dSYoshinobu Inoue goto done; 90082cd038dSYoshinobu Inoue } 90182cd038dSYoshinobu Inoue } 90282cd038dSYoshinobu Inoue 90382cd038dSYoshinobu Inoue /* 90482cd038dSYoshinobu Inoue * If the outgoing packet contains a hop-by-hop options header, 90582cd038dSYoshinobu Inoue * it must be examined and processed even by the source node. 90682cd038dSYoshinobu Inoue * (RFC 2460, section 4.) 90782cd038dSYoshinobu Inoue */ 90882cd038dSYoshinobu Inoue if (exthdrs.ip6e_hbh) { 90933841545SHajimu UMEMOTO struct ip6_hbh *hbh = mtod(exthdrs.ip6e_hbh, struct ip6_hbh *); 910283f9f8aSHajimu UMEMOTO u_int32_t dummy; /* XXX unused */ 911283f9f8aSHajimu UMEMOTO u_int32_t plen = 0; /* XXX: ip6_process will check the value */ 91282cd038dSYoshinobu Inoue 91333841545SHajimu UMEMOTO #ifdef DIAGNOSTIC 91433841545SHajimu UMEMOTO if ((hbh->ip6h_len + 1) << 3 > exthdrs.ip6e_hbh->m_len) 91533841545SHajimu UMEMOTO panic("ip6e_hbh is not continuous"); 91633841545SHajimu UMEMOTO #endif 91782cd038dSYoshinobu Inoue /* 91882cd038dSYoshinobu Inoue * XXX: if we have to send an ICMPv6 error to the sender, 91982cd038dSYoshinobu Inoue * we need the M_LOOP flag since icmp6_error() expects 92082cd038dSYoshinobu Inoue * the IPv6 and the hop-by-hop options header are 92182cd038dSYoshinobu Inoue * continuous unless the flag is set. 92282cd038dSYoshinobu Inoue */ 92382cd038dSYoshinobu Inoue m->m_flags |= M_LOOP; 92482cd038dSYoshinobu Inoue m->m_pkthdr.rcvif = ifp; 9257efe5d92SHajimu UMEMOTO if (ip6_process_hopopts(m, (u_int8_t *)(hbh + 1), 9267efe5d92SHajimu UMEMOTO ((hbh->ip6h_len + 1) << 3) - sizeof(struct ip6_hbh), 927283f9f8aSHajimu UMEMOTO &dummy, &plen) < 0) { 92882cd038dSYoshinobu Inoue /* m was already freed at this point */ 92982cd038dSYoshinobu Inoue error = EINVAL;/* better error? */ 93082cd038dSYoshinobu Inoue goto done; 93182cd038dSYoshinobu Inoue } 93282cd038dSYoshinobu Inoue m->m_flags &= ~M_LOOP; /* XXX */ 93382cd038dSYoshinobu Inoue m->m_pkthdr.rcvif = NULL; 93482cd038dSYoshinobu Inoue } 93582cd038dSYoshinobu Inoue 936c21fd232SAndre Oppermann /* Jump over all PFIL processing if hooks are not active. */ 937c21fd232SAndre Oppermann if (inet6_pfil_hook.ph_busy_count == -1) 938c21fd232SAndre Oppermann goto passout; 939c21fd232SAndre Oppermann 940c21fd232SAndre Oppermann /* Run through list of hooks for output packets. */ 941d6a8d588SMax Laier error = pfil_run_hooks(&inet6_pfil_hook, &m, ifp, PFIL_OUT, inp); 942b140bc1fSSam Leffler if (error != 0 || m == NULL) 943c4ac87eaSDarren Reed goto done; 944c4ac87eaSDarren Reed ip6 = mtod(m, struct ip6_hdr *); 9457efe5d92SHajimu UMEMOTO 946c21fd232SAndre Oppermann passout: 94782cd038dSYoshinobu Inoue /* 94882cd038dSYoshinobu Inoue * Send the packet to the outgoing interface. 94982cd038dSYoshinobu Inoue * If necessary, do IPv6 fragmentation before sending. 950f95d4633SHajimu UMEMOTO * 951f95d4633SHajimu UMEMOTO * the logic here is rather complex: 952f95d4633SHajimu UMEMOTO * 1: normal case (dontfrag == 0, alwaysfrag == 0) 953f95d4633SHajimu UMEMOTO * 1-a: send as is if tlen <= path mtu 954f95d4633SHajimu UMEMOTO * 1-b: fragment if tlen > path mtu 955f95d4633SHajimu UMEMOTO * 956f95d4633SHajimu UMEMOTO * 2: if user asks us not to fragment (dontfrag == 1) 957f95d4633SHajimu UMEMOTO * 2-a: send as is if tlen <= interface mtu 958f95d4633SHajimu UMEMOTO * 2-b: error if tlen > interface mtu 959f95d4633SHajimu UMEMOTO * 960f95d4633SHajimu UMEMOTO * 3: if we always need to attach fragment header (alwaysfrag == 1) 961f95d4633SHajimu UMEMOTO * always fragment 962f95d4633SHajimu UMEMOTO * 963f95d4633SHajimu UMEMOTO * 4: if dontfrag == 1 && alwaysfrag == 1 964f95d4633SHajimu UMEMOTO * error, as we cannot handle this conflicting request 96582cd038dSYoshinobu Inoue */ 96682cd038dSYoshinobu Inoue tlen = m->m_pkthdr.len; 96782cd038dSYoshinobu Inoue 968f95d4633SHajimu UMEMOTO if (opt && (opt->ip6po_flags & IP6PO_DONTFRAG)) 969f95d4633SHajimu UMEMOTO dontfrag = 1; 970f95d4633SHajimu UMEMOTO else 971f95d4633SHajimu UMEMOTO dontfrag = 0; 972f95d4633SHajimu UMEMOTO if (dontfrag && alwaysfrag) { /* case 4 */ 973f95d4633SHajimu UMEMOTO /* conflicting request - can't transmit */ 974f95d4633SHajimu UMEMOTO error = EMSGSIZE; 975f95d4633SHajimu UMEMOTO goto bad; 976f95d4633SHajimu UMEMOTO } 977f95d4633SHajimu UMEMOTO if (dontfrag && tlen > IN6_LINKMTU(ifp)) { /* case 2-b */ 978f95d4633SHajimu UMEMOTO /* 979f95d4633SHajimu UMEMOTO * Even if the DONTFRAG option is specified, we cannot send the 980f95d4633SHajimu UMEMOTO * packet when the data length is larger than the MTU of the 981f95d4633SHajimu UMEMOTO * outgoing interface. 982f95d4633SHajimu UMEMOTO * Notify the error by sending IPV6_PATHMTU ancillary data as 983f95d4633SHajimu UMEMOTO * well as returning an error code (the latter is not described 984f95d4633SHajimu UMEMOTO * in the API spec.) 985f95d4633SHajimu UMEMOTO */ 986f95d4633SHajimu UMEMOTO u_int32_t mtu32; 987f95d4633SHajimu UMEMOTO struct ip6ctlparam ip6cp; 988f95d4633SHajimu UMEMOTO 989f95d4633SHajimu UMEMOTO mtu32 = (u_int32_t)mtu; 990f95d4633SHajimu UMEMOTO bzero(&ip6cp, sizeof(ip6cp)); 991f95d4633SHajimu UMEMOTO ip6cp.ip6c_cmdarg = (void *)&mtu32; 992f95d4633SHajimu UMEMOTO pfctlinput2(PRC_MSGSIZE, (struct sockaddr *)&ro_pmtu->ro_dst, 993f95d4633SHajimu UMEMOTO (void *)&ip6cp); 994f95d4633SHajimu UMEMOTO 995f95d4633SHajimu UMEMOTO error = EMSGSIZE; 996f95d4633SHajimu UMEMOTO goto bad; 997f95d4633SHajimu UMEMOTO } 998f95d4633SHajimu UMEMOTO 999f95d4633SHajimu UMEMOTO /* 1000f95d4633SHajimu UMEMOTO * transmit packet without fragmentation 1001f95d4633SHajimu UMEMOTO */ 1002f95d4633SHajimu UMEMOTO if (dontfrag || (!alwaysfrag && tlen <= mtu)) { /* case 1-a and 2-a */ 1003f95d4633SHajimu UMEMOTO struct in6_ifaddr *ia6; 1004f95d4633SHajimu UMEMOTO 1005f95d4633SHajimu UMEMOTO ip6 = mtod(m, struct ip6_hdr *); 1006f95d4633SHajimu UMEMOTO ia6 = in6_ifawithifp(ifp, &ip6->ip6_src); 1007f95d4633SHajimu UMEMOTO if (ia6) { 10085da9f8faSJosef Karthauser /* Record statistics for this interface address. */ 1009f95d4633SHajimu UMEMOTO ia6->ia_ifa.if_opackets++; 1010f95d4633SHajimu UMEMOTO ia6->ia_ifa.if_obytes += m->m_pkthdr.len; 10115da9f8faSJosef Karthauser } 101233841545SHajimu UMEMOTO #ifdef IPSEC 101333841545SHajimu UMEMOTO /* clean ipsec history once it goes out of the node */ 101433841545SHajimu UMEMOTO ipsec_delaux(m); 101533841545SHajimu UMEMOTO #endif 1016686cdd19SJun-ichiro itojun Hagino error = nd6_output(ifp, origifp, m, dst, ro->ro_rt); 101782cd038dSYoshinobu Inoue goto done; 1018f95d4633SHajimu UMEMOTO } 1019f95d4633SHajimu UMEMOTO 102082cd038dSYoshinobu Inoue /* 1021f95d4633SHajimu UMEMOTO * try to fragment the packet. case 1-b and 3 102282cd038dSYoshinobu Inoue */ 1023f95d4633SHajimu UMEMOTO if (mtu < IPV6_MMTU) { 1024f95d4633SHajimu UMEMOTO /* path MTU cannot be less than IPV6_MMTU */ 102582cd038dSYoshinobu Inoue error = EMSGSIZE; 102682cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_fragfail); 102782cd038dSYoshinobu Inoue goto bad; 10287efe5d92SHajimu UMEMOTO } else if (ip6->ip6_plen == 0) { 10297efe5d92SHajimu UMEMOTO /* jumbo payload cannot be fragmented */ 103082cd038dSYoshinobu Inoue error = EMSGSIZE; 103182cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_fragfail); 103282cd038dSYoshinobu Inoue goto bad; 103382cd038dSYoshinobu Inoue } else { 103482cd038dSYoshinobu Inoue struct mbuf **mnext, *m_frgpart; 103582cd038dSYoshinobu Inoue struct ip6_frag *ip6f; 10368373d51dSHajimu UMEMOTO u_int32_t id = htonl(ip6_randomid()); 103782cd038dSYoshinobu Inoue u_char nextproto; 1038763f534eSDoug White #if 0 10398b00e59dSHajimu UMEMOTO struct ip6ctlparam ip6cp; 10408b00e59dSHajimu UMEMOTO u_int32_t mtu32; 1041763f534eSDoug White #endif 10426f8aee22SBill Paul int qslots = ifp->if_snd.ifq_maxlen - ifp->if_snd.ifq_len; 104382cd038dSYoshinobu Inoue 104482cd038dSYoshinobu Inoue /* 104582cd038dSYoshinobu Inoue * Too large for the destination or interface; 104682cd038dSYoshinobu Inoue * fragment if possible. 104782cd038dSYoshinobu Inoue * Must be able to put at least 8 bytes per fragment. 104882cd038dSYoshinobu Inoue */ 104982cd038dSYoshinobu Inoue hlen = unfragpartlen; 105082cd038dSYoshinobu Inoue if (mtu > IPV6_MAXPACKET) 105182cd038dSYoshinobu Inoue mtu = IPV6_MAXPACKET; 105233841545SHajimu UMEMOTO 1053763f534eSDoug White #if 0 1054763f534eSDoug White /* 1055763f534eSDoug White * It is believed this code is a leftover from the 1056763f534eSDoug White * development of the IPV6_RECVPATHMTU sockopt and 1057763f534eSDoug White * associated work to implement RFC3542. 1058763f534eSDoug White * It's not entirely clear what the intent of the API 1059763f534eSDoug White * is at this point, so disable this code for now. 1060763f534eSDoug White * The IPV6_RECVPATHMTU sockopt and/or IPV6_DONTFRAG 1061763f534eSDoug White * will send notifications if the application requests. 1062763f534eSDoug White */ 1063763f534eSDoug White 10648b00e59dSHajimu UMEMOTO /* Notify a proper path MTU to applications. */ 10658b00e59dSHajimu UMEMOTO mtu32 = (u_int32_t)mtu; 10668b00e59dSHajimu UMEMOTO bzero(&ip6cp, sizeof(ip6cp)); 10678b00e59dSHajimu UMEMOTO ip6cp.ip6c_cmdarg = (void *)&mtu32; 10688b00e59dSHajimu UMEMOTO pfctlinput2(PRC_MSGSIZE, (struct sockaddr *)&ro_pmtu->ro_dst, 10698b00e59dSHajimu UMEMOTO (void *)&ip6cp); 1070763f534eSDoug White #endif 10718b00e59dSHajimu UMEMOTO 107282cd038dSYoshinobu Inoue len = (mtu - hlen - sizeof(struct ip6_frag)) & ~7; 107382cd038dSYoshinobu Inoue if (len < 8) { 107482cd038dSYoshinobu Inoue error = EMSGSIZE; 107582cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_fragfail); 107682cd038dSYoshinobu Inoue goto bad; 107782cd038dSYoshinobu Inoue } 107882cd038dSYoshinobu Inoue 10796f8aee22SBill Paul /* 10806f8aee22SBill Paul * Verify that we have any chance at all of being able to queue 10816f8aee22SBill Paul * the packet or packet fragments 10826f8aee22SBill Paul */ 10836f8aee22SBill Paul if (qslots <= 0 || ((u_int)qslots * (mtu - hlen) 10846f8aee22SBill Paul < tlen /* - hlen */)) { 10856f8aee22SBill Paul error = ENOBUFS; 10866f8aee22SBill Paul ip6stat.ip6s_odropped++; 10876f8aee22SBill Paul goto bad; 10886f8aee22SBill Paul } 10896f8aee22SBill Paul 109082cd038dSYoshinobu Inoue mnext = &m->m_nextpkt; 109182cd038dSYoshinobu Inoue 109282cd038dSYoshinobu Inoue /* 109382cd038dSYoshinobu Inoue * Change the next header field of the last header in the 109482cd038dSYoshinobu Inoue * unfragmentable part. 109582cd038dSYoshinobu Inoue */ 109682cd038dSYoshinobu Inoue if (exthdrs.ip6e_rthdr) { 109782cd038dSYoshinobu Inoue nextproto = *mtod(exthdrs.ip6e_rthdr, u_char *); 109882cd038dSYoshinobu Inoue *mtod(exthdrs.ip6e_rthdr, u_char *) = IPPROTO_FRAGMENT; 109982cd038dSYoshinobu Inoue } else if (exthdrs.ip6e_dest1) { 110082cd038dSYoshinobu Inoue nextproto = *mtod(exthdrs.ip6e_dest1, u_char *); 110182cd038dSYoshinobu Inoue *mtod(exthdrs.ip6e_dest1, u_char *) = IPPROTO_FRAGMENT; 110282cd038dSYoshinobu Inoue } else if (exthdrs.ip6e_hbh) { 110382cd038dSYoshinobu Inoue nextproto = *mtod(exthdrs.ip6e_hbh, u_char *); 110482cd038dSYoshinobu Inoue *mtod(exthdrs.ip6e_hbh, u_char *) = IPPROTO_FRAGMENT; 110582cd038dSYoshinobu Inoue } else { 110682cd038dSYoshinobu Inoue nextproto = ip6->ip6_nxt; 110782cd038dSYoshinobu Inoue ip6->ip6_nxt = IPPROTO_FRAGMENT; 110882cd038dSYoshinobu Inoue } 110982cd038dSYoshinobu Inoue 111082cd038dSYoshinobu Inoue /* 111182cd038dSYoshinobu Inoue * Loop through length of segment after first fragment, 111288ff5695SSUZUKI Shinsuke * make new header and copy data of each part and link onto 111388ff5695SSUZUKI Shinsuke * chain. 111482cd038dSYoshinobu Inoue */ 111582cd038dSYoshinobu Inoue m0 = m; 111682cd038dSYoshinobu Inoue for (off = hlen; off < tlen; off += len) { 1117a163d034SWarner Losh MGETHDR(m, M_DONTWAIT, MT_HEADER); 111882cd038dSYoshinobu Inoue if (!m) { 111982cd038dSYoshinobu Inoue error = ENOBUFS; 112082cd038dSYoshinobu Inoue ip6stat.ip6s_odropped++; 112182cd038dSYoshinobu Inoue goto sendorfree; 112282cd038dSYoshinobu Inoue } 112333841545SHajimu UMEMOTO m->m_pkthdr.rcvif = NULL; 112482cd038dSYoshinobu Inoue m->m_flags = m0->m_flags & M_COPYFLAGS; 112582cd038dSYoshinobu Inoue *mnext = m; 112682cd038dSYoshinobu Inoue mnext = &m->m_nextpkt; 112782cd038dSYoshinobu Inoue m->m_data += max_linkhdr; 112882cd038dSYoshinobu Inoue mhip6 = mtod(m, struct ip6_hdr *); 112982cd038dSYoshinobu Inoue *mhip6 = *ip6; 113082cd038dSYoshinobu Inoue m->m_len = sizeof(*mhip6); 113182cd038dSYoshinobu Inoue error = ip6_insertfraghdr(m0, m, hlen, &ip6f); 113282cd038dSYoshinobu Inoue if (error) { 113382cd038dSYoshinobu Inoue ip6stat.ip6s_odropped++; 113482cd038dSYoshinobu Inoue goto sendorfree; 113582cd038dSYoshinobu Inoue } 113682cd038dSYoshinobu Inoue ip6f->ip6f_offlg = htons((u_short)((off - hlen) & ~7)); 113782cd038dSYoshinobu Inoue if (off + len >= tlen) 113882cd038dSYoshinobu Inoue len = tlen - off; 113982cd038dSYoshinobu Inoue else 114082cd038dSYoshinobu Inoue ip6f->ip6f_offlg |= IP6F_MORE_FRAG; 114182cd038dSYoshinobu Inoue mhip6->ip6_plen = htons((u_short)(len + hlen + 11427efe5d92SHajimu UMEMOTO sizeof(*ip6f) - sizeof(struct ip6_hdr))); 114382cd038dSYoshinobu Inoue if ((m_frgpart = m_copy(m0, off, len)) == 0) { 114482cd038dSYoshinobu Inoue error = ENOBUFS; 114582cd038dSYoshinobu Inoue ip6stat.ip6s_odropped++; 114682cd038dSYoshinobu Inoue goto sendorfree; 114782cd038dSYoshinobu Inoue } 114882cd038dSYoshinobu Inoue m_cat(m, m_frgpart); 114982cd038dSYoshinobu Inoue m->m_pkthdr.len = len + hlen + sizeof(*ip6f); 115082cd038dSYoshinobu Inoue m->m_pkthdr.rcvif = (struct ifnet *)0; 115182cd038dSYoshinobu Inoue ip6f->ip6f_reserved = 0; 115282cd038dSYoshinobu Inoue ip6f->ip6f_ident = id; 115382cd038dSYoshinobu Inoue ip6f->ip6f_nxt = nextproto; 115482cd038dSYoshinobu Inoue ip6stat.ip6s_ofragments++; 115582cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_fragcreat); 115682cd038dSYoshinobu Inoue } 115782cd038dSYoshinobu Inoue 115882cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_fragok); 115982cd038dSYoshinobu Inoue } 116082cd038dSYoshinobu Inoue 116182cd038dSYoshinobu Inoue /* 116282cd038dSYoshinobu Inoue * Remove leading garbages. 116382cd038dSYoshinobu Inoue */ 116482cd038dSYoshinobu Inoue sendorfree: 116582cd038dSYoshinobu Inoue m = m0->m_nextpkt; 116682cd038dSYoshinobu Inoue m0->m_nextpkt = 0; 116782cd038dSYoshinobu Inoue m_freem(m0); 116882cd038dSYoshinobu Inoue for (m0 = m; m; m = m0) { 116982cd038dSYoshinobu Inoue m0 = m->m_nextpkt; 117082cd038dSYoshinobu Inoue m->m_nextpkt = 0; 117182cd038dSYoshinobu Inoue if (error == 0) { 1172fe937674SJosef Karthauser /* Record statistics for this interface address. */ 1173fe937674SJosef Karthauser if (ia) { 1174fe937674SJosef Karthauser ia->ia_ifa.if_opackets++; 1175fe937674SJosef Karthauser ia->ia_ifa.if_obytes += m->m_pkthdr.len; 1176fe937674SJosef Karthauser } 117733841545SHajimu UMEMOTO #ifdef IPSEC 117833841545SHajimu UMEMOTO /* clean ipsec history once it goes out of the node */ 117933841545SHajimu UMEMOTO ipsec_delaux(m); 118033841545SHajimu UMEMOTO #endif 1181686cdd19SJun-ichiro itojun Hagino error = nd6_output(ifp, origifp, m, dst, ro->ro_rt); 118282cd038dSYoshinobu Inoue } else 118382cd038dSYoshinobu Inoue m_freem(m); 118482cd038dSYoshinobu Inoue } 118582cd038dSYoshinobu Inoue 118682cd038dSYoshinobu Inoue if (error == 0) 118782cd038dSYoshinobu Inoue ip6stat.ip6s_fragmented++; 118882cd038dSYoshinobu Inoue 118982cd038dSYoshinobu Inoue done: 119082cd038dSYoshinobu Inoue if (ro == &ip6route && ro->ro_rt) { /* brace necessary for RTFREE */ 119182cd038dSYoshinobu Inoue RTFREE(ro->ro_rt); 119282cd038dSYoshinobu Inoue } else if (ro_pmtu == &ip6route && ro_pmtu->ro_rt) { 119382cd038dSYoshinobu Inoue RTFREE(ro_pmtu->ro_rt); 119482cd038dSYoshinobu Inoue } 119582cd038dSYoshinobu Inoue 119682cd038dSYoshinobu Inoue #ifdef IPSEC 119782cd038dSYoshinobu Inoue if (sp != NULL) 119882cd038dSYoshinobu Inoue key_freesp(sp); 119982cd038dSYoshinobu Inoue #endif /* IPSEC */ 1200b9234fafSSam Leffler #ifdef FAST_IPSEC 1201b9234fafSSam Leffler if (sp != NULL) 1202b9234fafSSam Leffler KEY_FREESP(&sp); 1203b9234fafSSam Leffler #endif /* FAST_IPSEC */ 120482cd038dSYoshinobu Inoue 120582cd038dSYoshinobu Inoue return (error); 120682cd038dSYoshinobu Inoue 120782cd038dSYoshinobu Inoue freehdrs: 120882cd038dSYoshinobu Inoue m_freem(exthdrs.ip6e_hbh); /* m_freem will check if mbuf is 0 */ 120982cd038dSYoshinobu Inoue m_freem(exthdrs.ip6e_dest1); 121082cd038dSYoshinobu Inoue m_freem(exthdrs.ip6e_rthdr); 121182cd038dSYoshinobu Inoue m_freem(exthdrs.ip6e_dest2); 12127efe5d92SHajimu UMEMOTO /* FALLTHROUGH */ 121382cd038dSYoshinobu Inoue bad: 121482cd038dSYoshinobu Inoue m_freem(m); 121582cd038dSYoshinobu Inoue goto done; 121682cd038dSYoshinobu Inoue } 121782cd038dSYoshinobu Inoue 121882cd038dSYoshinobu Inoue static int 121982cd038dSYoshinobu Inoue ip6_copyexthdr(mp, hdr, hlen) 122082cd038dSYoshinobu Inoue struct mbuf **mp; 122182cd038dSYoshinobu Inoue caddr_t hdr; 122282cd038dSYoshinobu Inoue int hlen; 122382cd038dSYoshinobu Inoue { 122482cd038dSYoshinobu Inoue struct mbuf *m; 122582cd038dSYoshinobu Inoue 122682cd038dSYoshinobu Inoue if (hlen > MCLBYTES) 122782cd038dSYoshinobu Inoue return (ENOBUFS); /* XXX */ 122882cd038dSYoshinobu Inoue 1229a163d034SWarner Losh MGET(m, M_DONTWAIT, MT_DATA); 123082cd038dSYoshinobu Inoue if (!m) 123182cd038dSYoshinobu Inoue return (ENOBUFS); 123282cd038dSYoshinobu Inoue 123382cd038dSYoshinobu Inoue if (hlen > MLEN) { 1234a163d034SWarner Losh MCLGET(m, M_DONTWAIT); 123582cd038dSYoshinobu Inoue if ((m->m_flags & M_EXT) == 0) { 123682cd038dSYoshinobu Inoue m_free(m); 123782cd038dSYoshinobu Inoue return (ENOBUFS); 123882cd038dSYoshinobu Inoue } 123982cd038dSYoshinobu Inoue } 124082cd038dSYoshinobu Inoue m->m_len = hlen; 124182cd038dSYoshinobu Inoue if (hdr) 124282cd038dSYoshinobu Inoue bcopy(hdr, mtod(m, caddr_t), hlen); 124382cd038dSYoshinobu Inoue 124482cd038dSYoshinobu Inoue *mp = m; 124582cd038dSYoshinobu Inoue return (0); 124682cd038dSYoshinobu Inoue } 124782cd038dSYoshinobu Inoue 124882cd038dSYoshinobu Inoue /* 124982cd038dSYoshinobu Inoue * Insert jumbo payload option. 125082cd038dSYoshinobu Inoue */ 125182cd038dSYoshinobu Inoue static int 125282cd038dSYoshinobu Inoue ip6_insert_jumboopt(exthdrs, plen) 125382cd038dSYoshinobu Inoue struct ip6_exthdrs *exthdrs; 125482cd038dSYoshinobu Inoue u_int32_t plen; 125582cd038dSYoshinobu Inoue { 125682cd038dSYoshinobu Inoue struct mbuf *mopt; 125782cd038dSYoshinobu Inoue u_char *optbuf; 125833841545SHajimu UMEMOTO u_int32_t v; 125982cd038dSYoshinobu Inoue 126082cd038dSYoshinobu Inoue #define JUMBOOPTLEN 8 /* length of jumbo payload option and padding */ 126182cd038dSYoshinobu Inoue 126282cd038dSYoshinobu Inoue /* 126382cd038dSYoshinobu Inoue * If there is no hop-by-hop options header, allocate new one. 126482cd038dSYoshinobu Inoue * If there is one but it doesn't have enough space to store the 126582cd038dSYoshinobu Inoue * jumbo payload option, allocate a cluster to store the whole options. 126682cd038dSYoshinobu Inoue * Otherwise, use it to store the options. 126782cd038dSYoshinobu Inoue */ 126882cd038dSYoshinobu Inoue if (exthdrs->ip6e_hbh == 0) { 1269a163d034SWarner Losh MGET(mopt, M_DONTWAIT, MT_DATA); 127082cd038dSYoshinobu Inoue if (mopt == 0) 127182cd038dSYoshinobu Inoue return (ENOBUFS); 127282cd038dSYoshinobu Inoue mopt->m_len = JUMBOOPTLEN; 127382cd038dSYoshinobu Inoue optbuf = mtod(mopt, u_char *); 127482cd038dSYoshinobu Inoue optbuf[1] = 0; /* = ((JUMBOOPTLEN) >> 3) - 1 */ 127582cd038dSYoshinobu Inoue exthdrs->ip6e_hbh = mopt; 127682cd038dSYoshinobu Inoue } else { 127782cd038dSYoshinobu Inoue struct ip6_hbh *hbh; 127882cd038dSYoshinobu Inoue 127982cd038dSYoshinobu Inoue mopt = exthdrs->ip6e_hbh; 128082cd038dSYoshinobu Inoue if (M_TRAILINGSPACE(mopt) < JUMBOOPTLEN) { 128133841545SHajimu UMEMOTO /* 128233841545SHajimu UMEMOTO * XXX assumption: 128333841545SHajimu UMEMOTO * - exthdrs->ip6e_hbh is not referenced from places 128433841545SHajimu UMEMOTO * other than exthdrs. 128533841545SHajimu UMEMOTO * - exthdrs->ip6e_hbh is not an mbuf chain. 128633841545SHajimu UMEMOTO */ 128782cd038dSYoshinobu Inoue int oldoptlen = mopt->m_len; 128833841545SHajimu UMEMOTO struct mbuf *n; 128982cd038dSYoshinobu Inoue 129033841545SHajimu UMEMOTO /* 129133841545SHajimu UMEMOTO * XXX: give up if the whole (new) hbh header does 129233841545SHajimu UMEMOTO * not fit even in an mbuf cluster. 129333841545SHajimu UMEMOTO */ 129433841545SHajimu UMEMOTO if (oldoptlen + JUMBOOPTLEN > MCLBYTES) 129582cd038dSYoshinobu Inoue return (ENOBUFS); 129682cd038dSYoshinobu Inoue 129733841545SHajimu UMEMOTO /* 129833841545SHajimu UMEMOTO * As a consequence, we must always prepare a cluster 129933841545SHajimu UMEMOTO * at this point. 130033841545SHajimu UMEMOTO */ 1301a163d034SWarner Losh MGET(n, M_DONTWAIT, MT_DATA); 130233841545SHajimu UMEMOTO if (n) { 1303a163d034SWarner Losh MCLGET(n, M_DONTWAIT); 130433841545SHajimu UMEMOTO if ((n->m_flags & M_EXT) == 0) { 130533841545SHajimu UMEMOTO m_freem(n); 130633841545SHajimu UMEMOTO n = NULL; 130733841545SHajimu UMEMOTO } 130833841545SHajimu UMEMOTO } 130933841545SHajimu UMEMOTO if (!n) 131033841545SHajimu UMEMOTO return (ENOBUFS); 131133841545SHajimu UMEMOTO n->m_len = oldoptlen + JUMBOOPTLEN; 131233841545SHajimu UMEMOTO bcopy(mtod(mopt, caddr_t), mtod(n, caddr_t), 131333841545SHajimu UMEMOTO oldoptlen); 131433841545SHajimu UMEMOTO optbuf = mtod(n, caddr_t) + oldoptlen; 131533841545SHajimu UMEMOTO m_freem(mopt); 131633841545SHajimu UMEMOTO mopt = exthdrs->ip6e_hbh = n; 131782cd038dSYoshinobu Inoue } else { 131882cd038dSYoshinobu Inoue optbuf = mtod(mopt, u_char *) + mopt->m_len; 131982cd038dSYoshinobu Inoue mopt->m_len += JUMBOOPTLEN; 132082cd038dSYoshinobu Inoue } 132182cd038dSYoshinobu Inoue optbuf[0] = IP6OPT_PADN; 132282cd038dSYoshinobu Inoue optbuf[1] = 1; 132382cd038dSYoshinobu Inoue 132482cd038dSYoshinobu Inoue /* 132582cd038dSYoshinobu Inoue * Adjust the header length according to the pad and 132682cd038dSYoshinobu Inoue * the jumbo payload option. 132782cd038dSYoshinobu Inoue */ 132882cd038dSYoshinobu Inoue hbh = mtod(mopt, struct ip6_hbh *); 132982cd038dSYoshinobu Inoue hbh->ip6h_len += (JUMBOOPTLEN >> 3); 133082cd038dSYoshinobu Inoue } 133182cd038dSYoshinobu Inoue 133282cd038dSYoshinobu Inoue /* fill in the option. */ 133382cd038dSYoshinobu Inoue optbuf[2] = IP6OPT_JUMBO; 133482cd038dSYoshinobu Inoue optbuf[3] = 4; 133533841545SHajimu UMEMOTO v = (u_int32_t)htonl(plen + JUMBOOPTLEN); 133633841545SHajimu UMEMOTO bcopy(&v, &optbuf[4], sizeof(u_int32_t)); 133782cd038dSYoshinobu Inoue 133882cd038dSYoshinobu Inoue /* finally, adjust the packet header length */ 133982cd038dSYoshinobu Inoue exthdrs->ip6e_ip6->m_pkthdr.len += JUMBOOPTLEN; 134082cd038dSYoshinobu Inoue 134182cd038dSYoshinobu Inoue return (0); 134282cd038dSYoshinobu Inoue #undef JUMBOOPTLEN 134382cd038dSYoshinobu Inoue } 134482cd038dSYoshinobu Inoue 134582cd038dSYoshinobu Inoue /* 134682cd038dSYoshinobu Inoue * Insert fragment header and copy unfragmentable header portions. 134782cd038dSYoshinobu Inoue */ 134882cd038dSYoshinobu Inoue static int 134982cd038dSYoshinobu Inoue ip6_insertfraghdr(m0, m, hlen, frghdrp) 135082cd038dSYoshinobu Inoue struct mbuf *m0, *m; 135182cd038dSYoshinobu Inoue int hlen; 135282cd038dSYoshinobu Inoue struct ip6_frag **frghdrp; 135382cd038dSYoshinobu Inoue { 135482cd038dSYoshinobu Inoue struct mbuf *n, *mlast; 135582cd038dSYoshinobu Inoue 135682cd038dSYoshinobu Inoue if (hlen > sizeof(struct ip6_hdr)) { 135782cd038dSYoshinobu Inoue n = m_copym(m0, sizeof(struct ip6_hdr), 1358a163d034SWarner Losh hlen - sizeof(struct ip6_hdr), M_DONTWAIT); 135982cd038dSYoshinobu Inoue if (n == 0) 136082cd038dSYoshinobu Inoue return (ENOBUFS); 136182cd038dSYoshinobu Inoue m->m_next = n; 136282cd038dSYoshinobu Inoue } else 136382cd038dSYoshinobu Inoue n = m; 136482cd038dSYoshinobu Inoue 136582cd038dSYoshinobu Inoue /* Search for the last mbuf of unfragmentable part. */ 136682cd038dSYoshinobu Inoue for (mlast = n; mlast->m_next; mlast = mlast->m_next) 136782cd038dSYoshinobu Inoue ; 136882cd038dSYoshinobu Inoue 136982cd038dSYoshinobu Inoue if ((mlast->m_flags & M_EXT) == 0 && 1370686cdd19SJun-ichiro itojun Hagino M_TRAILINGSPACE(mlast) >= sizeof(struct ip6_frag)) { 137182cd038dSYoshinobu Inoue /* use the trailing space of the last mbuf for the fragment hdr */ 13727efe5d92SHajimu UMEMOTO *frghdrp = (struct ip6_frag *)(mtod(mlast, caddr_t) + 13737efe5d92SHajimu UMEMOTO mlast->m_len); 137482cd038dSYoshinobu Inoue mlast->m_len += sizeof(struct ip6_frag); 137582cd038dSYoshinobu Inoue m->m_pkthdr.len += sizeof(struct ip6_frag); 137682cd038dSYoshinobu Inoue } else { 137782cd038dSYoshinobu Inoue /* allocate a new mbuf for the fragment header */ 137882cd038dSYoshinobu Inoue struct mbuf *mfrg; 137982cd038dSYoshinobu Inoue 1380a163d034SWarner Losh MGET(mfrg, M_DONTWAIT, MT_DATA); 138182cd038dSYoshinobu Inoue if (mfrg == 0) 138282cd038dSYoshinobu Inoue return (ENOBUFS); 138382cd038dSYoshinobu Inoue mfrg->m_len = sizeof(struct ip6_frag); 138482cd038dSYoshinobu Inoue *frghdrp = mtod(mfrg, struct ip6_frag *); 138582cd038dSYoshinobu Inoue mlast->m_next = mfrg; 138682cd038dSYoshinobu Inoue } 138782cd038dSYoshinobu Inoue 138882cd038dSYoshinobu Inoue return (0); 138982cd038dSYoshinobu Inoue } 139082cd038dSYoshinobu Inoue 139131b3783cSHajimu UMEMOTO static int 1392f95d4633SHajimu UMEMOTO ip6_getpmtu(ro_pmtu, ro, ifp, dst, mtup, alwaysfragp) 139331b3783cSHajimu UMEMOTO struct route_in6 *ro_pmtu, *ro; 139431b3783cSHajimu UMEMOTO struct ifnet *ifp; 139531b3783cSHajimu UMEMOTO struct in6_addr *dst; 139631b3783cSHajimu UMEMOTO u_long *mtup; 1397f95d4633SHajimu UMEMOTO int *alwaysfragp; 139831b3783cSHajimu UMEMOTO { 139931b3783cSHajimu UMEMOTO u_int32_t mtu = 0; 1400f95d4633SHajimu UMEMOTO int alwaysfrag = 0; 140131b3783cSHajimu UMEMOTO int error = 0; 140231b3783cSHajimu UMEMOTO 140331b3783cSHajimu UMEMOTO if (ro_pmtu != ro) { 140431b3783cSHajimu UMEMOTO /* The first hop and the final destination may differ. */ 140531b3783cSHajimu UMEMOTO struct sockaddr_in6 *sa6_dst = 140631b3783cSHajimu UMEMOTO (struct sockaddr_in6 *)&ro_pmtu->ro_dst; 140731b3783cSHajimu UMEMOTO if (ro_pmtu->ro_rt && 1408e5f467a2SHajimu UMEMOTO ((ro_pmtu->ro_rt->rt_flags & RTF_UP) == 0 || 140931b3783cSHajimu UMEMOTO !IN6_ARE_ADDR_EQUAL(&sa6_dst->sin6_addr, dst))) { 141031b3783cSHajimu UMEMOTO RTFREE(ro_pmtu->ro_rt); 141131b3783cSHajimu UMEMOTO ro_pmtu->ro_rt = (struct rtentry *)NULL; 141231b3783cSHajimu UMEMOTO } 141331b3783cSHajimu UMEMOTO if (ro_pmtu->ro_rt == NULL) { 141431b3783cSHajimu UMEMOTO bzero(sa6_dst, sizeof(*sa6_dst)); 141531b3783cSHajimu UMEMOTO sa6_dst->sin6_family = AF_INET6; 141631b3783cSHajimu UMEMOTO sa6_dst->sin6_len = sizeof(struct sockaddr_in6); 141731b3783cSHajimu UMEMOTO sa6_dst->sin6_addr = *dst; 141831b3783cSHajimu UMEMOTO 141931b3783cSHajimu UMEMOTO rtalloc((struct route *)ro_pmtu); 142031b3783cSHajimu UMEMOTO } 142131b3783cSHajimu UMEMOTO } 142231b3783cSHajimu UMEMOTO if (ro_pmtu->ro_rt) { 142331b3783cSHajimu UMEMOTO u_int32_t ifmtu; 142497d8d152SAndre Oppermann struct in_conninfo inc; 142597d8d152SAndre Oppermann 142697d8d152SAndre Oppermann bzero(&inc, sizeof(inc)); 142797d8d152SAndre Oppermann inc.inc_flags = 1; /* IPv6 */ 142897d8d152SAndre Oppermann inc.inc6_faddr = *dst; 142931b3783cSHajimu UMEMOTO 143031b3783cSHajimu UMEMOTO if (ifp == NULL) 143131b3783cSHajimu UMEMOTO ifp = ro_pmtu->ro_rt->rt_ifp; 143231b3783cSHajimu UMEMOTO ifmtu = IN6_LINKMTU(ifp); 143397d8d152SAndre Oppermann mtu = tcp_hc_getmtu(&inc); 143497d8d152SAndre Oppermann if (mtu) 143597d8d152SAndre Oppermann mtu = min(mtu, ro_pmtu->ro_rt->rt_rmx.rmx_mtu); 143697d8d152SAndre Oppermann else 143731b3783cSHajimu UMEMOTO mtu = ro_pmtu->ro_rt->rt_rmx.rmx_mtu; 143831b3783cSHajimu UMEMOTO if (mtu == 0) 143931b3783cSHajimu UMEMOTO mtu = ifmtu; 1440f95d4633SHajimu UMEMOTO else if (mtu < IPV6_MMTU) { 1441f95d4633SHajimu UMEMOTO /* 1442f95d4633SHajimu UMEMOTO * RFC2460 section 5, last paragraph: 1443f95d4633SHajimu UMEMOTO * if we record ICMPv6 too big message with 1444f95d4633SHajimu UMEMOTO * mtu < IPV6_MMTU, transmit packets sized IPV6_MMTU 1445f95d4633SHajimu UMEMOTO * or smaller, with framgent header attached. 1446f95d4633SHajimu UMEMOTO * (fragment header is needed regardless from the 1447f95d4633SHajimu UMEMOTO * packet size, for translators to identify packets) 1448f95d4633SHajimu UMEMOTO */ 1449f95d4633SHajimu UMEMOTO alwaysfrag = 1; 1450f95d4633SHajimu UMEMOTO mtu = IPV6_MMTU; 1451f95d4633SHajimu UMEMOTO } else if (mtu > ifmtu) { 145231b3783cSHajimu UMEMOTO /* 145331b3783cSHajimu UMEMOTO * The MTU on the route is larger than the MTU on 145431b3783cSHajimu UMEMOTO * the interface! This shouldn't happen, unless the 145531b3783cSHajimu UMEMOTO * MTU of the interface has been changed after the 145631b3783cSHajimu UMEMOTO * interface was brought up. Change the MTU in the 145731b3783cSHajimu UMEMOTO * route to match the interface MTU (as long as the 145831b3783cSHajimu UMEMOTO * field isn't locked). 145931b3783cSHajimu UMEMOTO */ 146031b3783cSHajimu UMEMOTO mtu = ifmtu; 146131b3783cSHajimu UMEMOTO ro_pmtu->ro_rt->rt_rmx.rmx_mtu = mtu; 146231b3783cSHajimu UMEMOTO } 146331b3783cSHajimu UMEMOTO } else if (ifp) { 146431b3783cSHajimu UMEMOTO mtu = IN6_LINKMTU(ifp); 146531b3783cSHajimu UMEMOTO } else 146631b3783cSHajimu UMEMOTO error = EHOSTUNREACH; /* XXX */ 146731b3783cSHajimu UMEMOTO 146831b3783cSHajimu UMEMOTO *mtup = mtu; 1469f95d4633SHajimu UMEMOTO if (alwaysfragp) 1470f95d4633SHajimu UMEMOTO *alwaysfragp = alwaysfrag; 147131b3783cSHajimu UMEMOTO return (error); 147231b3783cSHajimu UMEMOTO } 147331b3783cSHajimu UMEMOTO 147482cd038dSYoshinobu Inoue /* 147582cd038dSYoshinobu Inoue * IP6 socket option processing. 147682cd038dSYoshinobu Inoue */ 147782cd038dSYoshinobu Inoue int 147882cd038dSYoshinobu Inoue ip6_ctloutput(so, sopt) 147982cd038dSYoshinobu Inoue struct socket *so; 148082cd038dSYoshinobu Inoue struct sockopt *sopt; 148182cd038dSYoshinobu Inoue { 1482f95d4633SHajimu UMEMOTO int privileged, optdatalen, uproto; 1483f95d4633SHajimu UMEMOTO void *optdata; 148433841545SHajimu UMEMOTO struct inpcb *in6p = sotoinpcb(so); 148582cd038dSYoshinobu Inoue int error, optval; 148682cd038dSYoshinobu Inoue int level, op, optname; 148782cd038dSYoshinobu Inoue int optlen; 1488b40ce416SJulian Elischer struct thread *td; 148982cd038dSYoshinobu Inoue 149082cd038dSYoshinobu Inoue if (sopt) { 149182cd038dSYoshinobu Inoue level = sopt->sopt_level; 149282cd038dSYoshinobu Inoue op = sopt->sopt_dir; 149382cd038dSYoshinobu Inoue optname = sopt->sopt_name; 149482cd038dSYoshinobu Inoue optlen = sopt->sopt_valsize; 1495b40ce416SJulian Elischer td = sopt->sopt_td; 149682cd038dSYoshinobu Inoue } else { 149782cd038dSYoshinobu Inoue panic("ip6_ctloutput: arg soopt is NULL"); 149882cd038dSYoshinobu Inoue } 149982cd038dSYoshinobu Inoue error = optval = 0; 150082cd038dSYoshinobu Inoue 150144731cabSJohn Baldwin privileged = (td == 0 || suser(td)) ? 0 : 1; 1502f95d4633SHajimu UMEMOTO uproto = (int)so->so_proto->pr_protocol; 150382cd038dSYoshinobu Inoue 150482cd038dSYoshinobu Inoue if (level == IPPROTO_IPV6) { 150582cd038dSYoshinobu Inoue switch (op) { 150633841545SHajimu UMEMOTO 150782cd038dSYoshinobu Inoue case SOPT_SET: 150882cd038dSYoshinobu Inoue switch (optname) { 1509f95d4633SHajimu UMEMOTO case IPV6_2292PKTOPTIONS: 1510f95d4633SHajimu UMEMOTO #ifdef IPV6_PKTOPTIONS 151182cd038dSYoshinobu Inoue case IPV6_PKTOPTIONS: 1512f95d4633SHajimu UMEMOTO #endif 151382cd038dSYoshinobu Inoue { 151482cd038dSYoshinobu Inoue struct mbuf *m; 151582cd038dSYoshinobu Inoue 151682cd038dSYoshinobu Inoue error = soopt_getm(sopt, &m); /* XXX */ 1517a89ec05eSPeter Wemm if (error != 0) 151882cd038dSYoshinobu Inoue break; 151982cd038dSYoshinobu Inoue error = soopt_mcopyin(sopt, m); /* XXX */ 1520a89ec05eSPeter Wemm if (error != 0) 152182cd038dSYoshinobu Inoue break; 152233841545SHajimu UMEMOTO error = ip6_pcbopts(&in6p->in6p_outputopts, 152333841545SHajimu UMEMOTO m, so, sopt); 152433841545SHajimu UMEMOTO m_freem(m); /* XXX */ 152582cd038dSYoshinobu Inoue break; 152682cd038dSYoshinobu Inoue } 152733841545SHajimu UMEMOTO 152833841545SHajimu UMEMOTO /* 152933841545SHajimu UMEMOTO * Use of some Hop-by-Hop options or some 153033841545SHajimu UMEMOTO * Destination options, might require special 153133841545SHajimu UMEMOTO * privilege. That is, normal applications 153233841545SHajimu UMEMOTO * (without special privilege) might be forbidden 153333841545SHajimu UMEMOTO * from setting certain options in outgoing packets, 153433841545SHajimu UMEMOTO * and might never see certain options in received 153533841545SHajimu UMEMOTO * packets. [RFC 2292 Section 6] 153633841545SHajimu UMEMOTO * KAME specific note: 153733841545SHajimu UMEMOTO * KAME prevents non-privileged users from sending or 153833841545SHajimu UMEMOTO * receiving ANY hbh/dst options in order to avoid 153933841545SHajimu UMEMOTO * overhead of parsing options in the kernel. 154033841545SHajimu UMEMOTO */ 1541f95d4633SHajimu UMEMOTO case IPV6_RECVHOPOPTS: 1542f95d4633SHajimu UMEMOTO case IPV6_RECVDSTOPTS: 1543f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDRDSTOPTS: 1544f95d4633SHajimu UMEMOTO if (!privileged) { 1545f95d4633SHajimu UMEMOTO error = EPERM; 1546f95d4633SHajimu UMEMOTO break; 1547f95d4633SHajimu UMEMOTO } 1548f95d4633SHajimu UMEMOTO /* FALLTHROUGH */ 154982cd038dSYoshinobu Inoue case IPV6_UNICAST_HOPS: 1550f95d4633SHajimu UMEMOTO case IPV6_HOPLIMIT: 155182cd038dSYoshinobu Inoue case IPV6_FAITH: 155233841545SHajimu UMEMOTO 1553f95d4633SHajimu UMEMOTO case IPV6_RECVPKTINFO: 1554f95d4633SHajimu UMEMOTO case IPV6_RECVHOPLIMIT: 1555f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDR: 1556f95d4633SHajimu UMEMOTO case IPV6_RECVPATHMTU: 1557f95d4633SHajimu UMEMOTO case IPV6_RECVTCLASS: 155833841545SHajimu UMEMOTO case IPV6_V6ONLY: 1559f95d4633SHajimu UMEMOTO case IPV6_AUTOFLOWLABEL: 156033841545SHajimu UMEMOTO if (optlen != sizeof(int)) { 156182cd038dSYoshinobu Inoue error = EINVAL; 156233841545SHajimu UMEMOTO break; 156333841545SHajimu UMEMOTO } 156482cd038dSYoshinobu Inoue error = sooptcopyin(sopt, &optval, 156582cd038dSYoshinobu Inoue sizeof optval, sizeof optval); 156682cd038dSYoshinobu Inoue if (error) 156782cd038dSYoshinobu Inoue break; 156882cd038dSYoshinobu Inoue switch (optname) { 156982cd038dSYoshinobu Inoue 157082cd038dSYoshinobu Inoue case IPV6_UNICAST_HOPS: 157182cd038dSYoshinobu Inoue if (optval < -1 || optval >= 256) 157282cd038dSYoshinobu Inoue error = EINVAL; 157382cd038dSYoshinobu Inoue else { 157482cd038dSYoshinobu Inoue /* -1 = kernel default */ 157582cd038dSYoshinobu Inoue in6p->in6p_hops = optval; 157682cd038dSYoshinobu Inoue if ((in6p->in6p_vflag & 157782cd038dSYoshinobu Inoue INP_IPV4) != 0) 157882cd038dSYoshinobu Inoue in6p->inp_ip_ttl = optval; 157982cd038dSYoshinobu Inoue } 158082cd038dSYoshinobu Inoue break; 158182cd038dSYoshinobu Inoue #define OPTSET(bit) \ 158233841545SHajimu UMEMOTO do { \ 158382cd038dSYoshinobu Inoue if (optval) \ 158433841545SHajimu UMEMOTO in6p->in6p_flags |= (bit); \ 158582cd038dSYoshinobu Inoue else \ 158633841545SHajimu UMEMOTO in6p->in6p_flags &= ~(bit); \ 15877efe5d92SHajimu UMEMOTO } while (/*CONSTCOND*/ 0) 1588f95d4633SHajimu UMEMOTO #define OPTSET2292(bit) \ 1589f95d4633SHajimu UMEMOTO do { \ 1590f95d4633SHajimu UMEMOTO in6p->in6p_flags |= IN6P_RFC2292; \ 1591f95d4633SHajimu UMEMOTO if (optval) \ 1592f95d4633SHajimu UMEMOTO in6p->in6p_flags |= (bit); \ 1593f95d4633SHajimu UMEMOTO else \ 1594f95d4633SHajimu UMEMOTO in6p->in6p_flags &= ~(bit); \ 1595f95d4633SHajimu UMEMOTO } while (/*CONSTCOND*/ 0) 159633841545SHajimu UMEMOTO #define OPTBIT(bit) (in6p->in6p_flags & (bit) ? 1 : 0) 159782cd038dSYoshinobu Inoue 1598f95d4633SHajimu UMEMOTO case IPV6_RECVPKTINFO: 1599f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1600f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1601f95d4633SHajimu UMEMOTO error = EINVAL; 1602f95d4633SHajimu UMEMOTO break; 1603f95d4633SHajimu UMEMOTO } 1604f95d4633SHajimu UMEMOTO OPTSET(IN6P_PKTINFO); 1605f95d4633SHajimu UMEMOTO break; 1606f95d4633SHajimu UMEMOTO 1607f95d4633SHajimu UMEMOTO case IPV6_HOPLIMIT: 1608f95d4633SHajimu UMEMOTO { 1609f95d4633SHajimu UMEMOTO struct ip6_pktopts **optp; 1610f95d4633SHajimu UMEMOTO 1611f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1612f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1613f95d4633SHajimu UMEMOTO error = EINVAL; 1614f95d4633SHajimu UMEMOTO break; 1615f95d4633SHajimu UMEMOTO } 1616f95d4633SHajimu UMEMOTO optp = &in6p->in6p_outputopts; 1617f95d4633SHajimu UMEMOTO error = ip6_pcbopt(IPV6_HOPLIMIT, 1618f95d4633SHajimu UMEMOTO (u_char *)&optval, 1619f95d4633SHajimu UMEMOTO sizeof(optval), 1620f95d4633SHajimu UMEMOTO optp, 1621f95d4633SHajimu UMEMOTO privileged, uproto); 1622f95d4633SHajimu UMEMOTO break; 1623f95d4633SHajimu UMEMOTO } 1624f95d4633SHajimu UMEMOTO 1625f95d4633SHajimu UMEMOTO case IPV6_RECVHOPLIMIT: 1626f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1627f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1628f95d4633SHajimu UMEMOTO error = EINVAL; 1629f95d4633SHajimu UMEMOTO break; 1630f95d4633SHajimu UMEMOTO } 1631f95d4633SHajimu UMEMOTO OPTSET(IN6P_HOPLIMIT); 1632f95d4633SHajimu UMEMOTO break; 1633f95d4633SHajimu UMEMOTO 1634f95d4633SHajimu UMEMOTO case IPV6_RECVHOPOPTS: 1635f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1636f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1637f95d4633SHajimu UMEMOTO error = EINVAL; 1638f95d4633SHajimu UMEMOTO break; 1639f95d4633SHajimu UMEMOTO } 1640f95d4633SHajimu UMEMOTO OPTSET(IN6P_HOPOPTS); 1641f95d4633SHajimu UMEMOTO break; 1642f95d4633SHajimu UMEMOTO 1643f95d4633SHajimu UMEMOTO case IPV6_RECVDSTOPTS: 1644f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1645f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1646f95d4633SHajimu UMEMOTO error = EINVAL; 1647f95d4633SHajimu UMEMOTO break; 1648f95d4633SHajimu UMEMOTO } 1649f95d4633SHajimu UMEMOTO OPTSET(IN6P_DSTOPTS); 1650f95d4633SHajimu UMEMOTO break; 1651f95d4633SHajimu UMEMOTO 1652f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDRDSTOPTS: 1653f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1654f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1655f95d4633SHajimu UMEMOTO error = EINVAL; 1656f95d4633SHajimu UMEMOTO break; 1657f95d4633SHajimu UMEMOTO } 1658f95d4633SHajimu UMEMOTO OPTSET(IN6P_RTHDRDSTOPTS); 1659f95d4633SHajimu UMEMOTO break; 1660f95d4633SHajimu UMEMOTO 1661f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDR: 1662f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1663f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1664f95d4633SHajimu UMEMOTO error = EINVAL; 1665f95d4633SHajimu UMEMOTO break; 1666f95d4633SHajimu UMEMOTO } 1667f95d4633SHajimu UMEMOTO OPTSET(IN6P_RTHDR); 166882cd038dSYoshinobu Inoue break; 166982cd038dSYoshinobu Inoue 167082cd038dSYoshinobu Inoue case IPV6_FAITH: 167182cd038dSYoshinobu Inoue OPTSET(IN6P_FAITH); 167282cd038dSYoshinobu Inoue break; 167382cd038dSYoshinobu Inoue 1674f95d4633SHajimu UMEMOTO case IPV6_RECVPATHMTU: 1675f95d4633SHajimu UMEMOTO /* 1676f95d4633SHajimu UMEMOTO * We ignore this option for TCP 1677f95d4633SHajimu UMEMOTO * sockets. 1678f95d4633SHajimu UMEMOTO * (rfc2292bis leaves this case 1679f95d4633SHajimu UMEMOTO * unspecified.) 1680f95d4633SHajimu UMEMOTO */ 1681f95d4633SHajimu UMEMOTO if (uproto != IPPROTO_TCP) 1682f95d4633SHajimu UMEMOTO OPTSET(IN6P_MTU); 1683f95d4633SHajimu UMEMOTO break; 1684f95d4633SHajimu UMEMOTO 168533841545SHajimu UMEMOTO case IPV6_V6ONLY: 168633841545SHajimu UMEMOTO /* 16870554093bSHajimu UMEMOTO * make setsockopt(IPV6_V6ONLY) 16880554093bSHajimu UMEMOTO * available only prior to bind(2). 16890554093bSHajimu UMEMOTO * see ipng mailing list, Jun 22 2001. 16900554093bSHajimu UMEMOTO */ 16910554093bSHajimu UMEMOTO if (in6p->in6p_lport || 16927efe5d92SHajimu UMEMOTO !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) { 16930554093bSHajimu UMEMOTO error = EINVAL; 16940554093bSHajimu UMEMOTO break; 16950554093bSHajimu UMEMOTO } 169633841545SHajimu UMEMOTO OPTSET(IN6P_IPV6_V6ONLY); 169712253795SHajimu UMEMOTO if (optval) 169812253795SHajimu UMEMOTO in6p->in6p_vflag &= ~INP_IPV4; 169912253795SHajimu UMEMOTO else 170012253795SHajimu UMEMOTO in6p->in6p_vflag |= INP_IPV4; 170182cd038dSYoshinobu Inoue break; 1702f95d4633SHajimu UMEMOTO case IPV6_RECVTCLASS: 1703f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 XXX */ 1704f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1705f95d4633SHajimu UMEMOTO error = EINVAL; 1706f95d4633SHajimu UMEMOTO break; 1707f95d4633SHajimu UMEMOTO } 1708f95d4633SHajimu UMEMOTO OPTSET(IN6P_TCLASS); 1709f95d4633SHajimu UMEMOTO break; 1710f95d4633SHajimu UMEMOTO case IPV6_AUTOFLOWLABEL: 1711f95d4633SHajimu UMEMOTO OPTSET(IN6P_AUTOFLOWLABEL); 1712f95d4633SHajimu UMEMOTO break; 1713f95d4633SHajimu UMEMOTO 171482cd038dSYoshinobu Inoue } 171533841545SHajimu UMEMOTO break; 171633841545SHajimu UMEMOTO 1717f95d4633SHajimu UMEMOTO case IPV6_TCLASS: 1718f95d4633SHajimu UMEMOTO case IPV6_DONTFRAG: 1719f95d4633SHajimu UMEMOTO case IPV6_USE_MIN_MTU: 1720f95d4633SHajimu UMEMOTO case IPV6_PREFER_TEMPADDR: 1721f95d4633SHajimu UMEMOTO if (optlen != sizeof(optval)) { 1722f95d4633SHajimu UMEMOTO error = EINVAL; 1723f95d4633SHajimu UMEMOTO break; 1724f95d4633SHajimu UMEMOTO } 1725f95d4633SHajimu UMEMOTO error = sooptcopyin(sopt, &optval, 1726f95d4633SHajimu UMEMOTO sizeof optval, sizeof optval); 1727f95d4633SHajimu UMEMOTO if (error) 1728f95d4633SHajimu UMEMOTO break; 1729f95d4633SHajimu UMEMOTO { 1730f95d4633SHajimu UMEMOTO struct ip6_pktopts **optp; 1731f95d4633SHajimu UMEMOTO optp = &in6p->in6p_outputopts; 1732f95d4633SHajimu UMEMOTO error = ip6_pcbopt(optname, 1733f95d4633SHajimu UMEMOTO (u_char *)&optval, 1734f95d4633SHajimu UMEMOTO sizeof(optval), 1735f95d4633SHajimu UMEMOTO optp, 1736f95d4633SHajimu UMEMOTO privileged, uproto); 1737f95d4633SHajimu UMEMOTO break; 1738f95d4633SHajimu UMEMOTO } 1739f95d4633SHajimu UMEMOTO 1740f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 1741f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 1742f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 1743f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 1744f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 174533841545SHajimu UMEMOTO /* RFC 2292 */ 174633841545SHajimu UMEMOTO if (optlen != sizeof(int)) { 174733841545SHajimu UMEMOTO error = EINVAL; 174833841545SHajimu UMEMOTO break; 174933841545SHajimu UMEMOTO } 175033841545SHajimu UMEMOTO error = sooptcopyin(sopt, &optval, 175133841545SHajimu UMEMOTO sizeof optval, sizeof optval); 175233841545SHajimu UMEMOTO if (error) 175333841545SHajimu UMEMOTO break; 175433841545SHajimu UMEMOTO switch (optname) { 1755f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 1756f95d4633SHajimu UMEMOTO OPTSET2292(IN6P_PKTINFO); 175733841545SHajimu UMEMOTO break; 1758f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 1759f95d4633SHajimu UMEMOTO OPTSET2292(IN6P_HOPLIMIT); 176033841545SHajimu UMEMOTO break; 1761f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 176233841545SHajimu UMEMOTO /* 176333841545SHajimu UMEMOTO * Check super-user privilege. 176433841545SHajimu UMEMOTO * See comments for IPV6_RECVHOPOPTS. 176533841545SHajimu UMEMOTO */ 176633841545SHajimu UMEMOTO if (!privileged) 176733841545SHajimu UMEMOTO return (EPERM); 1768f95d4633SHajimu UMEMOTO OPTSET2292(IN6P_HOPOPTS); 176933841545SHajimu UMEMOTO break; 1770f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 177133841545SHajimu UMEMOTO if (!privileged) 177233841545SHajimu UMEMOTO return (EPERM); 1773f95d4633SHajimu UMEMOTO OPTSET2292(IN6P_DSTOPTS|IN6P_RTHDRDSTOPTS); /* XXX */ 177433841545SHajimu UMEMOTO break; 1775f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 1776f95d4633SHajimu UMEMOTO OPTSET2292(IN6P_RTHDR); 177733841545SHajimu UMEMOTO break; 177882cd038dSYoshinobu Inoue } 177982cd038dSYoshinobu Inoue break; 1780f95d4633SHajimu UMEMOTO case IPV6_PKTINFO: 1781f95d4633SHajimu UMEMOTO case IPV6_HOPOPTS: 1782f95d4633SHajimu UMEMOTO case IPV6_RTHDR: 1783f95d4633SHajimu UMEMOTO case IPV6_DSTOPTS: 1784f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 1785f95d4633SHajimu UMEMOTO case IPV6_NEXTHOP: 1786f95d4633SHajimu UMEMOTO { 1787f95d4633SHajimu UMEMOTO /* new advanced API (2292bis) */ 1788f95d4633SHajimu UMEMOTO u_char *optbuf; 1789f95d4633SHajimu UMEMOTO int optlen; 1790f95d4633SHajimu UMEMOTO struct ip6_pktopts **optp; 1791f95d4633SHajimu UMEMOTO 1792f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1793f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1794f95d4633SHajimu UMEMOTO error = EINVAL; 1795f95d4633SHajimu UMEMOTO break; 1796f95d4633SHajimu UMEMOTO } 1797f95d4633SHajimu UMEMOTO 1798a5d1aae3SHajimu UMEMOTO switch (optname) { 1799a5d1aae3SHajimu UMEMOTO case IPV6_HOPOPTS: 1800a5d1aae3SHajimu UMEMOTO case IPV6_DSTOPTS: 1801a5d1aae3SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 1802a5d1aae3SHajimu UMEMOTO case IPV6_NEXTHOP: 1803a5d1aae3SHajimu UMEMOTO if (!privileged) 1804a5d1aae3SHajimu UMEMOTO error = EPERM; 1805a5d1aae3SHajimu UMEMOTO break; 1806a5d1aae3SHajimu UMEMOTO } 1807a5d1aae3SHajimu UMEMOTO if (error) 1808a5d1aae3SHajimu UMEMOTO break; 1809a5d1aae3SHajimu UMEMOTO 1810a5d1aae3SHajimu UMEMOTO switch (optname) { 1811a5d1aae3SHajimu UMEMOTO case IPV6_PKTINFO: 1812a5d1aae3SHajimu UMEMOTO optlen = sizeof(struct in6_pktinfo); 1813a5d1aae3SHajimu UMEMOTO break; 1814a5d1aae3SHajimu UMEMOTO case IPV6_NEXTHOP: 1815a5d1aae3SHajimu UMEMOTO optlen = SOCK_MAXADDRLEN; 1816a5d1aae3SHajimu UMEMOTO break; 1817a5d1aae3SHajimu UMEMOTO default: 1818a5d1aae3SHajimu UMEMOTO optlen = IPV6_MAXOPTHDR; 1819a5d1aae3SHajimu UMEMOTO break; 1820a5d1aae3SHajimu UMEMOTO } 1821a5d1aae3SHajimu UMEMOTO if (sopt->sopt_valsize > optlen) { 1822a5d1aae3SHajimu UMEMOTO error = EINVAL; 1823a5d1aae3SHajimu UMEMOTO break; 1824a5d1aae3SHajimu UMEMOTO } 1825a5d1aae3SHajimu UMEMOTO 1826f95d4633SHajimu UMEMOTO optlen = sopt->sopt_valsize; 1827a5d1aae3SHajimu UMEMOTO optbuf = malloc(optlen, M_TEMP, M_WAITOK); 1828a5d1aae3SHajimu UMEMOTO error = sooptcopyin(sopt, optbuf, optlen, 1829a5d1aae3SHajimu UMEMOTO optlen); 1830a5d1aae3SHajimu UMEMOTO if (error) { 1831a5d1aae3SHajimu UMEMOTO free(optbuf, M_TEMP); 1832a5d1aae3SHajimu UMEMOTO break; 1833a5d1aae3SHajimu UMEMOTO } 1834a5d1aae3SHajimu UMEMOTO 1835f95d4633SHajimu UMEMOTO optp = &in6p->in6p_outputopts; 1836f95d4633SHajimu UMEMOTO error = ip6_pcbopt(optname, 1837f95d4633SHajimu UMEMOTO optbuf, optlen, 1838f95d4633SHajimu UMEMOTO optp, privileged, uproto); 1839a5d1aae3SHajimu UMEMOTO free(optbuf, M_TEMP); 1840f95d4633SHajimu UMEMOTO break; 1841f95d4633SHajimu UMEMOTO } 184282cd038dSYoshinobu Inoue #undef OPTSET 184382cd038dSYoshinobu Inoue 184482cd038dSYoshinobu Inoue case IPV6_MULTICAST_IF: 184582cd038dSYoshinobu Inoue case IPV6_MULTICAST_HOPS: 184682cd038dSYoshinobu Inoue case IPV6_MULTICAST_LOOP: 184782cd038dSYoshinobu Inoue case IPV6_JOIN_GROUP: 184882cd038dSYoshinobu Inoue case IPV6_LEAVE_GROUP: 184982cd038dSYoshinobu Inoue { 185082cd038dSYoshinobu Inoue if (sopt->sopt_valsize > MLEN) { 185182cd038dSYoshinobu Inoue error = EMSGSIZE; 185282cd038dSYoshinobu Inoue break; 185382cd038dSYoshinobu Inoue } 185482cd038dSYoshinobu Inoue /* XXX */ 1855f95d4633SHajimu UMEMOTO } 1856f95d4633SHajimu UMEMOTO /* FALLTHROUGH */ 1857f95d4633SHajimu UMEMOTO { 1858f95d4633SHajimu UMEMOTO struct mbuf *m; 1859f95d4633SHajimu UMEMOTO 1860f95d4633SHajimu UMEMOTO if (sopt->sopt_valsize > MCLBYTES) { 1861f95d4633SHajimu UMEMOTO error = EMSGSIZE; 1862f95d4633SHajimu UMEMOTO break; 1863f95d4633SHajimu UMEMOTO } 1864f95d4633SHajimu UMEMOTO /* XXX */ 1865f95d4633SHajimu UMEMOTO MGET(m, sopt->sopt_td ? M_WAIT : M_DONTWAIT, MT_HEADER); 186682cd038dSYoshinobu Inoue if (m == 0) { 186782cd038dSYoshinobu Inoue error = ENOBUFS; 186882cd038dSYoshinobu Inoue break; 186982cd038dSYoshinobu Inoue } 1870f95d4633SHajimu UMEMOTO if (sopt->sopt_valsize > MLEN) { 1871f95d4633SHajimu UMEMOTO MCLGET(m, sopt->sopt_td ? M_WAIT : M_DONTWAIT); 1872f95d4633SHajimu UMEMOTO if ((m->m_flags & M_EXT) == 0) { 1873f95d4633SHajimu UMEMOTO m_free(m); 1874f95d4633SHajimu UMEMOTO error = ENOBUFS; 1875f95d4633SHajimu UMEMOTO break; 1876f95d4633SHajimu UMEMOTO } 1877f95d4633SHajimu UMEMOTO } 187882cd038dSYoshinobu Inoue m->m_len = sopt->sopt_valsize; 187982cd038dSYoshinobu Inoue error = sooptcopyin(sopt, mtod(m, char *), 188082cd038dSYoshinobu Inoue m->m_len, m->m_len); 1881f95d4633SHajimu UMEMOTO if (error) { 1882f95d4633SHajimu UMEMOTO (void)m_free(m); 1883f95d4633SHajimu UMEMOTO break; 1884f95d4633SHajimu UMEMOTO } 188582cd038dSYoshinobu Inoue error = ip6_setmoptions(sopt->sopt_name, 188682cd038dSYoshinobu Inoue &in6p->in6p_moptions, 188782cd038dSYoshinobu Inoue m); 188882cd038dSYoshinobu Inoue (void)m_free(m); 188982cd038dSYoshinobu Inoue } 189082cd038dSYoshinobu Inoue break; 189182cd038dSYoshinobu Inoue 189282cd038dSYoshinobu Inoue case IPV6_PORTRANGE: 1893686cdd19SJun-ichiro itojun Hagino error = sooptcopyin(sopt, &optval, 1894686cdd19SJun-ichiro itojun Hagino sizeof optval, sizeof optval); 189582cd038dSYoshinobu Inoue if (error) 189682cd038dSYoshinobu Inoue break; 189782cd038dSYoshinobu Inoue 189882cd038dSYoshinobu Inoue switch (optval) { 189982cd038dSYoshinobu Inoue case IPV6_PORTRANGE_DEFAULT: 190082cd038dSYoshinobu Inoue in6p->in6p_flags &= ~(IN6P_LOWPORT); 190182cd038dSYoshinobu Inoue in6p->in6p_flags &= ~(IN6P_HIGHPORT); 190282cd038dSYoshinobu Inoue break; 190382cd038dSYoshinobu Inoue 190482cd038dSYoshinobu Inoue case IPV6_PORTRANGE_HIGH: 190582cd038dSYoshinobu Inoue in6p->in6p_flags &= ~(IN6P_LOWPORT); 190682cd038dSYoshinobu Inoue in6p->in6p_flags |= IN6P_HIGHPORT; 190782cd038dSYoshinobu Inoue break; 190882cd038dSYoshinobu Inoue 190982cd038dSYoshinobu Inoue case IPV6_PORTRANGE_LOW: 191082cd038dSYoshinobu Inoue in6p->in6p_flags &= ~(IN6P_HIGHPORT); 191182cd038dSYoshinobu Inoue in6p->in6p_flags |= IN6P_LOWPORT; 191282cd038dSYoshinobu Inoue break; 191382cd038dSYoshinobu Inoue 191482cd038dSYoshinobu Inoue default: 191582cd038dSYoshinobu Inoue error = EINVAL; 191682cd038dSYoshinobu Inoue break; 191782cd038dSYoshinobu Inoue } 191882cd038dSYoshinobu Inoue break; 191982cd038dSYoshinobu Inoue 1920b9234fafSSam Leffler #if defined(IPSEC) || defined(FAST_IPSEC) 192182cd038dSYoshinobu Inoue case IPV6_IPSEC_POLICY: 192282cd038dSYoshinobu Inoue { 192382cd038dSYoshinobu Inoue caddr_t req = NULL; 1924686cdd19SJun-ichiro itojun Hagino size_t len = 0; 192582cd038dSYoshinobu Inoue struct mbuf *m; 192682cd038dSYoshinobu Inoue 1927686cdd19SJun-ichiro itojun Hagino if ((error = soopt_getm(sopt, &m)) != 0) /* XXX */ 192882cd038dSYoshinobu Inoue break; 1929686cdd19SJun-ichiro itojun Hagino if ((error = soopt_mcopyin(sopt, m)) != 0) /* XXX */ 193082cd038dSYoshinobu Inoue break; 1931686cdd19SJun-ichiro itojun Hagino if (m) { 193282cd038dSYoshinobu Inoue req = mtod(m, caddr_t); 1933686cdd19SJun-ichiro itojun Hagino len = m->m_len; 1934686cdd19SJun-ichiro itojun Hagino } 193582cd038dSYoshinobu Inoue error = ipsec6_set_policy(in6p, optname, req, 1936686cdd19SJun-ichiro itojun Hagino len, privileged); 193782cd038dSYoshinobu Inoue m_freem(m); 193882cd038dSYoshinobu Inoue } 193982cd038dSYoshinobu Inoue break; 194033841545SHajimu UMEMOTO #endif /* KAME IPSEC */ 194182cd038dSYoshinobu Inoue 194282cd038dSYoshinobu Inoue case IPV6_FW_ADD: 194382cd038dSYoshinobu Inoue case IPV6_FW_DEL: 194482cd038dSYoshinobu Inoue case IPV6_FW_FLUSH: 194582cd038dSYoshinobu Inoue case IPV6_FW_ZERO: 194682cd038dSYoshinobu Inoue { 194782cd038dSYoshinobu Inoue struct mbuf *m; 194882cd038dSYoshinobu Inoue struct mbuf **mp = &m; 194982cd038dSYoshinobu Inoue 195082cd038dSYoshinobu Inoue if (ip6_fw_ctl_ptr == NULL) 195182cd038dSYoshinobu Inoue return EINVAL; 19523e617560SHajimu UMEMOTO /* XXX */ 19533e617560SHajimu UMEMOTO if ((error = soopt_getm(sopt, &m)) != 0) 195482cd038dSYoshinobu Inoue break; 19553e617560SHajimu UMEMOTO /* XXX */ 19563e617560SHajimu UMEMOTO if ((error = soopt_mcopyin(sopt, m)) != 0) 195782cd038dSYoshinobu Inoue break; 195882cd038dSYoshinobu Inoue error = (*ip6_fw_ctl_ptr)(optname, mp); 195982cd038dSYoshinobu Inoue m = *mp; 196082cd038dSYoshinobu Inoue } 196182cd038dSYoshinobu Inoue break; 196282cd038dSYoshinobu Inoue 196382cd038dSYoshinobu Inoue default: 196482cd038dSYoshinobu Inoue error = ENOPROTOOPT; 196582cd038dSYoshinobu Inoue break; 196682cd038dSYoshinobu Inoue } 196782cd038dSYoshinobu Inoue break; 196882cd038dSYoshinobu Inoue 196982cd038dSYoshinobu Inoue case SOPT_GET: 197082cd038dSYoshinobu Inoue switch (optname) { 197182cd038dSYoshinobu Inoue 1972f95d4633SHajimu UMEMOTO case IPV6_2292PKTOPTIONS: 1973f95d4633SHajimu UMEMOTO #ifdef IPV6_PKTOPTIONS 197482cd038dSYoshinobu Inoue case IPV6_PKTOPTIONS: 1975f95d4633SHajimu UMEMOTO #endif 1976f95d4633SHajimu UMEMOTO /* 1977f95d4633SHajimu UMEMOTO * RFC3542 (effectively) deprecated the 1978f95d4633SHajimu UMEMOTO * semantics of the 2292-style pktoptions. 1979f95d4633SHajimu UMEMOTO * Since it was not reliable in nature (i.e., 1980f95d4633SHajimu UMEMOTO * applications had to expect the lack of some 1981f95d4633SHajimu UMEMOTO * information after all), it would make sense 1982f95d4633SHajimu UMEMOTO * to simplify this part by always returning 1983f95d4633SHajimu UMEMOTO * empty data. 1984f95d4633SHajimu UMEMOTO */ 198582cd038dSYoshinobu Inoue sopt->sopt_valsize = 0; 198682cd038dSYoshinobu Inoue break; 198782cd038dSYoshinobu Inoue 1988f95d4633SHajimu UMEMOTO case IPV6_RECVHOPOPTS: 1989f95d4633SHajimu UMEMOTO case IPV6_RECVDSTOPTS: 1990f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDRDSTOPTS: 199182cd038dSYoshinobu Inoue case IPV6_UNICAST_HOPS: 1992f95d4633SHajimu UMEMOTO case IPV6_RECVPKTINFO: 1993f95d4633SHajimu UMEMOTO case IPV6_RECVHOPLIMIT: 1994f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDR: 1995f95d4633SHajimu UMEMOTO case IPV6_RECVPATHMTU: 199633841545SHajimu UMEMOTO 199782cd038dSYoshinobu Inoue case IPV6_FAITH: 199833841545SHajimu UMEMOTO case IPV6_V6ONLY: 1999fa310a7eSYoshinobu Inoue case IPV6_PORTRANGE: 2000f95d4633SHajimu UMEMOTO case IPV6_RECVTCLASS: 2001f95d4633SHajimu UMEMOTO case IPV6_AUTOFLOWLABEL: 200282cd038dSYoshinobu Inoue switch (optname) { 200382cd038dSYoshinobu Inoue 2004f95d4633SHajimu UMEMOTO case IPV6_RECVHOPOPTS: 2005f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_HOPOPTS); 2006f95d4633SHajimu UMEMOTO break; 2007f95d4633SHajimu UMEMOTO 2008f95d4633SHajimu UMEMOTO case IPV6_RECVDSTOPTS: 2009f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_DSTOPTS); 2010f95d4633SHajimu UMEMOTO break; 2011f95d4633SHajimu UMEMOTO 2012f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDRDSTOPTS: 2013f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_RTHDRDSTOPTS); 2014f95d4633SHajimu UMEMOTO break; 2015f95d4633SHajimu UMEMOTO 201682cd038dSYoshinobu Inoue case IPV6_UNICAST_HOPS: 201782cd038dSYoshinobu Inoue optval = in6p->in6p_hops; 201882cd038dSYoshinobu Inoue break; 201982cd038dSYoshinobu Inoue 2020f95d4633SHajimu UMEMOTO case IPV6_RECVPKTINFO: 2021f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_PKTINFO); 2022f95d4633SHajimu UMEMOTO break; 2023f95d4633SHajimu UMEMOTO 2024f95d4633SHajimu UMEMOTO case IPV6_RECVHOPLIMIT: 2025f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_HOPLIMIT); 2026f95d4633SHajimu UMEMOTO break; 2027f95d4633SHajimu UMEMOTO 2028f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDR: 2029f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_RTHDR); 2030f95d4633SHajimu UMEMOTO break; 2031f95d4633SHajimu UMEMOTO 2032f95d4633SHajimu UMEMOTO case IPV6_RECVPATHMTU: 2033f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_MTU); 203482cd038dSYoshinobu Inoue break; 203582cd038dSYoshinobu Inoue 203682cd038dSYoshinobu Inoue case IPV6_FAITH: 203782cd038dSYoshinobu Inoue optval = OPTBIT(IN6P_FAITH); 203882cd038dSYoshinobu Inoue break; 203982cd038dSYoshinobu Inoue 204033841545SHajimu UMEMOTO case IPV6_V6ONLY: 2041854d3b19SHajimu UMEMOTO optval = OPTBIT(IN6P_IPV6_V6ONLY); 204282cd038dSYoshinobu Inoue break; 204382cd038dSYoshinobu Inoue 204482cd038dSYoshinobu Inoue case IPV6_PORTRANGE: 204582cd038dSYoshinobu Inoue { 204682cd038dSYoshinobu Inoue int flags; 204782cd038dSYoshinobu Inoue flags = in6p->in6p_flags; 204882cd038dSYoshinobu Inoue if (flags & IN6P_HIGHPORT) 204982cd038dSYoshinobu Inoue optval = IPV6_PORTRANGE_HIGH; 205082cd038dSYoshinobu Inoue else if (flags & IN6P_LOWPORT) 205182cd038dSYoshinobu Inoue optval = IPV6_PORTRANGE_LOW; 205282cd038dSYoshinobu Inoue else 205382cd038dSYoshinobu Inoue optval = 0; 205482cd038dSYoshinobu Inoue break; 205582cd038dSYoshinobu Inoue } 2056f95d4633SHajimu UMEMOTO case IPV6_RECVTCLASS: 2057f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_TCLASS); 2058f95d4633SHajimu UMEMOTO break; 2059f95d4633SHajimu UMEMOTO 2060f95d4633SHajimu UMEMOTO case IPV6_AUTOFLOWLABEL: 2061f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_AUTOFLOWLABEL); 2062f95d4633SHajimu UMEMOTO break; 206382cd038dSYoshinobu Inoue } 2064f95d4633SHajimu UMEMOTO if (error) 2065f95d4633SHajimu UMEMOTO break; 206682cd038dSYoshinobu Inoue error = sooptcopyout(sopt, &optval, 206782cd038dSYoshinobu Inoue sizeof optval); 206882cd038dSYoshinobu Inoue break; 206982cd038dSYoshinobu Inoue 2070f95d4633SHajimu UMEMOTO case IPV6_PATHMTU: 2071f95d4633SHajimu UMEMOTO { 2072f95d4633SHajimu UMEMOTO u_long pmtu = 0; 2073f95d4633SHajimu UMEMOTO struct ip6_mtuinfo mtuinfo; 207497d8d152SAndre Oppermann struct route_in6 sro; 207597d8d152SAndre Oppermann 207697d8d152SAndre Oppermann bzero(&sro, sizeof(sro)); 2077f95d4633SHajimu UMEMOTO 2078f95d4633SHajimu UMEMOTO if (!(so->so_state & SS_ISCONNECTED)) 2079f95d4633SHajimu UMEMOTO return (ENOTCONN); 2080f95d4633SHajimu UMEMOTO /* 2081f95d4633SHajimu UMEMOTO * XXX: we dot not consider the case of source 2082f95d4633SHajimu UMEMOTO * routing, or optional information to specify 2083f95d4633SHajimu UMEMOTO * the outgoing interface. 2084f95d4633SHajimu UMEMOTO */ 208597d8d152SAndre Oppermann error = ip6_getpmtu(&sro, NULL, NULL, 2086f95d4633SHajimu UMEMOTO &in6p->in6p_faddr, &pmtu, NULL); 208797d8d152SAndre Oppermann if (sro.ro_rt) 208897d8d152SAndre Oppermann RTFREE(sro.ro_rt); 2089f95d4633SHajimu UMEMOTO if (error) 2090f95d4633SHajimu UMEMOTO break; 2091f95d4633SHajimu UMEMOTO if (pmtu > IPV6_MAXPACKET) 2092f95d4633SHajimu UMEMOTO pmtu = IPV6_MAXPACKET; 2093f95d4633SHajimu UMEMOTO 2094f95d4633SHajimu UMEMOTO bzero(&mtuinfo, sizeof(mtuinfo)); 2095f95d4633SHajimu UMEMOTO mtuinfo.ip6m_mtu = (u_int32_t)pmtu; 2096f95d4633SHajimu UMEMOTO optdata = (void *)&mtuinfo; 2097f95d4633SHajimu UMEMOTO optdatalen = sizeof(mtuinfo); 2098f95d4633SHajimu UMEMOTO error = sooptcopyout(sopt, optdata, 2099f95d4633SHajimu UMEMOTO optdatalen); 2100f95d4633SHajimu UMEMOTO break; 2101f95d4633SHajimu UMEMOTO } 2102f95d4633SHajimu UMEMOTO 2103f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 2104f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 2105f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 2106f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 2107f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 210833841545SHajimu UMEMOTO switch (optname) { 2109f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 211033841545SHajimu UMEMOTO optval = OPTBIT(IN6P_PKTINFO); 211133841545SHajimu UMEMOTO break; 2112f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 211333841545SHajimu UMEMOTO optval = OPTBIT(IN6P_HOPLIMIT); 211433841545SHajimu UMEMOTO break; 2115f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 211633841545SHajimu UMEMOTO optval = OPTBIT(IN6P_HOPOPTS); 211733841545SHajimu UMEMOTO break; 2118f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 211933841545SHajimu UMEMOTO optval = OPTBIT(IN6P_RTHDR); 212033841545SHajimu UMEMOTO break; 2121f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 212233841545SHajimu UMEMOTO optval = OPTBIT(IN6P_DSTOPTS|IN6P_RTHDRDSTOPTS); 212333841545SHajimu UMEMOTO break; 212433841545SHajimu UMEMOTO } 212533841545SHajimu UMEMOTO error = sooptcopyout(sopt, &optval, 212633841545SHajimu UMEMOTO sizeof optval); 212733841545SHajimu UMEMOTO break; 2128f95d4633SHajimu UMEMOTO case IPV6_PKTINFO: 2129f95d4633SHajimu UMEMOTO case IPV6_HOPOPTS: 2130f95d4633SHajimu UMEMOTO case IPV6_RTHDR: 2131f95d4633SHajimu UMEMOTO case IPV6_DSTOPTS: 2132f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 2133f95d4633SHajimu UMEMOTO case IPV6_NEXTHOP: 2134f95d4633SHajimu UMEMOTO case IPV6_TCLASS: 2135f95d4633SHajimu UMEMOTO case IPV6_DONTFRAG: 2136f95d4633SHajimu UMEMOTO case IPV6_USE_MIN_MTU: 2137f95d4633SHajimu UMEMOTO case IPV6_PREFER_TEMPADDR: 2138f95d4633SHajimu UMEMOTO error = ip6_getpcbopt(in6p->in6p_outputopts, 2139f95d4633SHajimu UMEMOTO optname, sopt); 2140f95d4633SHajimu UMEMOTO break; 214133841545SHajimu UMEMOTO 214282cd038dSYoshinobu Inoue case IPV6_MULTICAST_IF: 214382cd038dSYoshinobu Inoue case IPV6_MULTICAST_HOPS: 214482cd038dSYoshinobu Inoue case IPV6_MULTICAST_LOOP: 214582cd038dSYoshinobu Inoue case IPV6_JOIN_GROUP: 214682cd038dSYoshinobu Inoue case IPV6_LEAVE_GROUP: 214782cd038dSYoshinobu Inoue { 214882cd038dSYoshinobu Inoue struct mbuf *m; 214982cd038dSYoshinobu Inoue error = ip6_getmoptions(sopt->sopt_name, 215082cd038dSYoshinobu Inoue in6p->in6p_moptions, &m); 215182cd038dSYoshinobu Inoue if (error == 0) 215282cd038dSYoshinobu Inoue error = sooptcopyout(sopt, 215382cd038dSYoshinobu Inoue mtod(m, char *), m->m_len); 215482cd038dSYoshinobu Inoue m_freem(m); 215582cd038dSYoshinobu Inoue } 215682cd038dSYoshinobu Inoue break; 215782cd038dSYoshinobu Inoue 2158b9234fafSSam Leffler #if defined(IPSEC) || defined(FAST_IPSEC) 215982cd038dSYoshinobu Inoue case IPV6_IPSEC_POLICY: 216082cd038dSYoshinobu Inoue { 2161f63e7634SYoshinobu Inoue caddr_t req = NULL; 2162686cdd19SJun-ichiro itojun Hagino size_t len = 0; 2163686cdd19SJun-ichiro itojun Hagino struct mbuf *m = NULL; 2164686cdd19SJun-ichiro itojun Hagino struct mbuf **mp = &m; 2165f95d4633SHajimu UMEMOTO size_t ovalsize = sopt->sopt_valsize; 2166f95d4633SHajimu UMEMOTO caddr_t oval = (caddr_t)sopt->sopt_val; 2167f63e7634SYoshinobu Inoue 2168686cdd19SJun-ichiro itojun Hagino error = soopt_getm(sopt, &m); /* XXX */ 2169a46f7e7cSHajimu UMEMOTO if (error != 0) 2170686cdd19SJun-ichiro itojun Hagino break; 2171686cdd19SJun-ichiro itojun Hagino error = soopt_mcopyin(sopt, m); /* XXX */ 2172a46f7e7cSHajimu UMEMOTO if (error != 0) 2173686cdd19SJun-ichiro itojun Hagino break; 2174f95d4633SHajimu UMEMOTO sopt->sopt_valsize = ovalsize; 2175f95d4633SHajimu UMEMOTO sopt->sopt_val = oval; 2176686cdd19SJun-ichiro itojun Hagino if (m) { 217782cd038dSYoshinobu Inoue req = mtod(m, caddr_t); 2178686cdd19SJun-ichiro itojun Hagino len = m->m_len; 2179686cdd19SJun-ichiro itojun Hagino } 2180686cdd19SJun-ichiro itojun Hagino error = ipsec6_get_policy(in6p, req, len, mp); 218182cd038dSYoshinobu Inoue if (error == 0) 218282cd038dSYoshinobu Inoue error = soopt_mcopyout(sopt, m); /* XXX */ 218333841545SHajimu UMEMOTO if (error == 0 && m) 218482cd038dSYoshinobu Inoue m_freem(m); 218582cd038dSYoshinobu Inoue break; 218682cd038dSYoshinobu Inoue } 218733841545SHajimu UMEMOTO #endif /* KAME IPSEC */ 218882cd038dSYoshinobu Inoue 218982cd038dSYoshinobu Inoue case IPV6_FW_GET: 219082cd038dSYoshinobu Inoue { 219182cd038dSYoshinobu Inoue struct mbuf *m; 219282cd038dSYoshinobu Inoue struct mbuf **mp = &m; 219382cd038dSYoshinobu Inoue 219482cd038dSYoshinobu Inoue if (ip6_fw_ctl_ptr == NULL) 219582cd038dSYoshinobu Inoue { 219682cd038dSYoshinobu Inoue return EINVAL; 219782cd038dSYoshinobu Inoue } 219882cd038dSYoshinobu Inoue error = (*ip6_fw_ctl_ptr)(optname, mp); 219982cd038dSYoshinobu Inoue if (error == 0) 220082cd038dSYoshinobu Inoue error = soopt_mcopyout(sopt, m); /* XXX */ 22016c0bea35SHajimu UMEMOTO if (error == 0 && m) 220282cd038dSYoshinobu Inoue m_freem(m); 220382cd038dSYoshinobu Inoue } 220482cd038dSYoshinobu Inoue break; 220582cd038dSYoshinobu Inoue 220682cd038dSYoshinobu Inoue default: 220782cd038dSYoshinobu Inoue error = ENOPROTOOPT; 220882cd038dSYoshinobu Inoue break; 220982cd038dSYoshinobu Inoue } 221082cd038dSYoshinobu Inoue break; 221182cd038dSYoshinobu Inoue } 2212f95d4633SHajimu UMEMOTO } else { /* level != IPPROTO_IPV6 */ 221382cd038dSYoshinobu Inoue error = EINVAL; 221482cd038dSYoshinobu Inoue } 221582cd038dSYoshinobu Inoue return (error); 221682cd038dSYoshinobu Inoue } 221782cd038dSYoshinobu Inoue 221802b9a206SHajimu UMEMOTO int 221902b9a206SHajimu UMEMOTO ip6_raw_ctloutput(so, sopt) 222002b9a206SHajimu UMEMOTO struct socket *so; 222102b9a206SHajimu UMEMOTO struct sockopt *sopt; 222202b9a206SHajimu UMEMOTO { 222302b9a206SHajimu UMEMOTO int error = 0, optval, optlen; 222402b9a206SHajimu UMEMOTO const int icmp6off = offsetof(struct icmp6_hdr, icmp6_cksum); 222502b9a206SHajimu UMEMOTO struct in6pcb *in6p = sotoin6pcb(so); 222602b9a206SHajimu UMEMOTO int level, op, optname; 222702b9a206SHajimu UMEMOTO 222802b9a206SHajimu UMEMOTO if (sopt) { 222902b9a206SHajimu UMEMOTO level = sopt->sopt_level; 223002b9a206SHajimu UMEMOTO op = sopt->sopt_dir; 223102b9a206SHajimu UMEMOTO optname = sopt->sopt_name; 223202b9a206SHajimu UMEMOTO optlen = sopt->sopt_valsize; 223302b9a206SHajimu UMEMOTO } else 223402b9a206SHajimu UMEMOTO panic("ip6_raw_ctloutput: arg soopt is NULL"); 223502b9a206SHajimu UMEMOTO 223602b9a206SHajimu UMEMOTO if (level != IPPROTO_IPV6) { 223702b9a206SHajimu UMEMOTO return (EINVAL); 223802b9a206SHajimu UMEMOTO } 223902b9a206SHajimu UMEMOTO 224002b9a206SHajimu UMEMOTO switch (optname) { 224102b9a206SHajimu UMEMOTO case IPV6_CHECKSUM: 224202b9a206SHajimu UMEMOTO /* 224302b9a206SHajimu UMEMOTO * For ICMPv6 sockets, no modification allowed for checksum 224402b9a206SHajimu UMEMOTO * offset, permit "no change" values to help existing apps. 224502b9a206SHajimu UMEMOTO * 224602b9a206SHajimu UMEMOTO * XXX 2292bis says: "An attempt to set IPV6_CHECKSUM 224702b9a206SHajimu UMEMOTO * for an ICMPv6 socket will fail." 224802b9a206SHajimu UMEMOTO * The current behavior does not meet 2292bis. 224902b9a206SHajimu UMEMOTO */ 225002b9a206SHajimu UMEMOTO switch (op) { 225102b9a206SHajimu UMEMOTO case SOPT_SET: 225202b9a206SHajimu UMEMOTO if (optlen != sizeof(int)) { 225302b9a206SHajimu UMEMOTO error = EINVAL; 225402b9a206SHajimu UMEMOTO break; 225502b9a206SHajimu UMEMOTO } 225602b9a206SHajimu UMEMOTO error = sooptcopyin(sopt, &optval, sizeof(optval), 225702b9a206SHajimu UMEMOTO sizeof(optval)); 225802b9a206SHajimu UMEMOTO if (error) 225902b9a206SHajimu UMEMOTO break; 226002b9a206SHajimu UMEMOTO if ((optval % 2) != 0) { 226102b9a206SHajimu UMEMOTO /* the API assumes even offset values */ 226202b9a206SHajimu UMEMOTO error = EINVAL; 226302b9a206SHajimu UMEMOTO } else if (so->so_proto->pr_protocol == 226402b9a206SHajimu UMEMOTO IPPROTO_ICMPV6) { 226502b9a206SHajimu UMEMOTO if (optval != icmp6off) 226602b9a206SHajimu UMEMOTO error = EINVAL; 226702b9a206SHajimu UMEMOTO } else 226802b9a206SHajimu UMEMOTO in6p->in6p_cksum = optval; 226902b9a206SHajimu UMEMOTO break; 227002b9a206SHajimu UMEMOTO 227102b9a206SHajimu UMEMOTO case SOPT_GET: 227202b9a206SHajimu UMEMOTO if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) 227302b9a206SHajimu UMEMOTO optval = icmp6off; 227402b9a206SHajimu UMEMOTO else 227502b9a206SHajimu UMEMOTO optval = in6p->in6p_cksum; 227602b9a206SHajimu UMEMOTO 227702b9a206SHajimu UMEMOTO error = sooptcopyout(sopt, &optval, sizeof(optval)); 227802b9a206SHajimu UMEMOTO break; 227902b9a206SHajimu UMEMOTO 228002b9a206SHajimu UMEMOTO default: 228102b9a206SHajimu UMEMOTO error = EINVAL; 228202b9a206SHajimu UMEMOTO break; 228302b9a206SHajimu UMEMOTO } 228402b9a206SHajimu UMEMOTO break; 228502b9a206SHajimu UMEMOTO 228602b9a206SHajimu UMEMOTO default: 228702b9a206SHajimu UMEMOTO error = ENOPROTOOPT; 228802b9a206SHajimu UMEMOTO break; 228902b9a206SHajimu UMEMOTO } 229002b9a206SHajimu UMEMOTO 229102b9a206SHajimu UMEMOTO return (error); 229202b9a206SHajimu UMEMOTO } 229302b9a206SHajimu UMEMOTO 229482cd038dSYoshinobu Inoue /* 229533841545SHajimu UMEMOTO * Set up IP6 options in pcb for insertion in output packets or 229633841545SHajimu UMEMOTO * specifying behavior of outgoing packets. 229782cd038dSYoshinobu Inoue */ 229882cd038dSYoshinobu Inoue static int 229982cd038dSYoshinobu Inoue ip6_pcbopts(pktopt, m, so, sopt) 230082cd038dSYoshinobu Inoue struct ip6_pktopts **pktopt; 230133841545SHajimu UMEMOTO struct mbuf *m; 230282cd038dSYoshinobu Inoue struct socket *so; 230382cd038dSYoshinobu Inoue struct sockopt *sopt; 230482cd038dSYoshinobu Inoue { 230533841545SHajimu UMEMOTO struct ip6_pktopts *opt = *pktopt; 230682cd038dSYoshinobu Inoue int error = 0; 2307b40ce416SJulian Elischer struct thread *td = sopt->sopt_td; 230882cd038dSYoshinobu Inoue int priv = 0; 230982cd038dSYoshinobu Inoue 231082cd038dSYoshinobu Inoue /* turn off any old options. */ 231182cd038dSYoshinobu Inoue if (opt) { 231233841545SHajimu UMEMOTO #ifdef DIAGNOSTIC 231333841545SHajimu UMEMOTO if (opt->ip6po_pktinfo || opt->ip6po_nexthop || 231433841545SHajimu UMEMOTO opt->ip6po_hbh || opt->ip6po_dest1 || opt->ip6po_dest2 || 231533841545SHajimu UMEMOTO opt->ip6po_rhinfo.ip6po_rhi_rthdr) 231633841545SHajimu UMEMOTO printf("ip6_pcbopts: all specified options are cleared.\n"); 231733841545SHajimu UMEMOTO #endif 2318f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, -1); 231982cd038dSYoshinobu Inoue } else 2320a163d034SWarner Losh opt = malloc(sizeof(*opt), M_IP6OPT, M_WAITOK); 232133841545SHajimu UMEMOTO *pktopt = NULL; 232282cd038dSYoshinobu Inoue 232382cd038dSYoshinobu Inoue if (!m || m->m_len == 0) { 232482cd038dSYoshinobu Inoue /* 232535f6695bSHajimu UMEMOTO * Only turning off any previous options, regardless of 232635f6695bSHajimu UMEMOTO * whether the opt is just created or given. 232782cd038dSYoshinobu Inoue */ 232882cd038dSYoshinobu Inoue free(opt, M_IP6OPT); 232982cd038dSYoshinobu Inoue return (0); 233082cd038dSYoshinobu Inoue } 233182cd038dSYoshinobu Inoue 233282cd038dSYoshinobu Inoue /* set options specified by user. */ 233344731cabSJohn Baldwin if (td && !suser(td)) 233482cd038dSYoshinobu Inoue priv = 1; 2335f95d4633SHajimu UMEMOTO if ((error = ip6_setpktoptions(m, opt, NULL, priv, 1, 2336f95d4633SHajimu UMEMOTO so->so_proto->pr_protocol)) != 0) { 2337f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, -1); /* XXX: discard all options */ 233835f6695bSHajimu UMEMOTO free(opt, M_IP6OPT); 233982cd038dSYoshinobu Inoue return (error); 234082cd038dSYoshinobu Inoue } 234182cd038dSYoshinobu Inoue *pktopt = opt; 234282cd038dSYoshinobu Inoue return (0); 234382cd038dSYoshinobu Inoue } 234482cd038dSYoshinobu Inoue 234582cd038dSYoshinobu Inoue /* 234633841545SHajimu UMEMOTO * initialize ip6_pktopts. beware that there are non-zero default values in 234733841545SHajimu UMEMOTO * the struct. 234833841545SHajimu UMEMOTO */ 234933841545SHajimu UMEMOTO void 235033841545SHajimu UMEMOTO init_ip6pktopts(opt) 235133841545SHajimu UMEMOTO struct ip6_pktopts *opt; 235233841545SHajimu UMEMOTO { 235333841545SHajimu UMEMOTO 235433841545SHajimu UMEMOTO bzero(opt, sizeof(*opt)); 235533841545SHajimu UMEMOTO opt->ip6po_hlim = -1; /* -1 means default hop limit */ 2356f95d4633SHajimu UMEMOTO opt->ip6po_tclass = -1; /* -1 means default traffic class */ 2357f95d4633SHajimu UMEMOTO opt->ip6po_minmtu = IP6PO_MINMTU_MCASTONLY; 2358f95d4633SHajimu UMEMOTO opt->ip6po_prefer_tempaddr = IP6PO_TEMPADDR_SYSTEM; 2359f95d4633SHajimu UMEMOTO } 2360f95d4633SHajimu UMEMOTO 2361f95d4633SHajimu UMEMOTO static int 2362f95d4633SHajimu UMEMOTO ip6_pcbopt(optname, buf, len, pktopt, priv, uproto) 2363f95d4633SHajimu UMEMOTO int optname, len, priv; 2364f95d4633SHajimu UMEMOTO u_char *buf; 2365f95d4633SHajimu UMEMOTO struct ip6_pktopts **pktopt; 2366f95d4633SHajimu UMEMOTO int uproto; 2367f95d4633SHajimu UMEMOTO { 2368f95d4633SHajimu UMEMOTO struct ip6_pktopts *opt; 2369f95d4633SHajimu UMEMOTO 2370f95d4633SHajimu UMEMOTO if (*pktopt == NULL) { 2371f95d4633SHajimu UMEMOTO *pktopt = malloc(sizeof(struct ip6_pktopts), M_IP6OPT, 2372f95d4633SHajimu UMEMOTO M_WAITOK); 2373f95d4633SHajimu UMEMOTO init_ip6pktopts(*pktopt); 2374f95d4633SHajimu UMEMOTO (*pktopt)->needfree = 1; 2375f95d4633SHajimu UMEMOTO } 2376f95d4633SHajimu UMEMOTO opt = *pktopt; 2377f95d4633SHajimu UMEMOTO 2378f95d4633SHajimu UMEMOTO return (ip6_setpktoption(optname, buf, len, opt, priv, 1, 0, uproto)); 2379f95d4633SHajimu UMEMOTO } 2380f95d4633SHajimu UMEMOTO 2381f95d4633SHajimu UMEMOTO static int 2382f95d4633SHajimu UMEMOTO ip6_getpcbopt(pktopt, optname, sopt) 2383f95d4633SHajimu UMEMOTO struct ip6_pktopts *pktopt; 2384f95d4633SHajimu UMEMOTO struct sockopt *sopt; 2385f95d4633SHajimu UMEMOTO int optname; 2386f95d4633SHajimu UMEMOTO { 2387f95d4633SHajimu UMEMOTO void *optdata = NULL; 2388f95d4633SHajimu UMEMOTO int optdatalen = 0; 2389f95d4633SHajimu UMEMOTO struct ip6_ext *ip6e; 2390f95d4633SHajimu UMEMOTO int error = 0; 2391f95d4633SHajimu UMEMOTO struct in6_pktinfo null_pktinfo; 2392f95d4633SHajimu UMEMOTO int deftclass = 0, on; 2393f95d4633SHajimu UMEMOTO int defminmtu = IP6PO_MINMTU_MCASTONLY; 2394f95d4633SHajimu UMEMOTO int defpreftemp = IP6PO_TEMPADDR_SYSTEM; 2395f95d4633SHajimu UMEMOTO 2396f95d4633SHajimu UMEMOTO switch (optname) { 2397f95d4633SHajimu UMEMOTO case IPV6_PKTINFO: 2398f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_pktinfo) 2399f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_pktinfo; 2400f95d4633SHajimu UMEMOTO else { 2401f95d4633SHajimu UMEMOTO /* XXX: we don't have to do this every time... */ 2402f95d4633SHajimu UMEMOTO bzero(&null_pktinfo, sizeof(null_pktinfo)); 2403f95d4633SHajimu UMEMOTO optdata = (void *)&null_pktinfo; 2404f95d4633SHajimu UMEMOTO } 2405f95d4633SHajimu UMEMOTO optdatalen = sizeof(struct in6_pktinfo); 2406f95d4633SHajimu UMEMOTO break; 2407f95d4633SHajimu UMEMOTO case IPV6_TCLASS: 2408f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_tclass >= 0) 2409f95d4633SHajimu UMEMOTO optdata = (void *)&pktopt->ip6po_tclass; 2410f95d4633SHajimu UMEMOTO else 2411f95d4633SHajimu UMEMOTO optdata = (void *)&deftclass; 2412f95d4633SHajimu UMEMOTO optdatalen = sizeof(int); 2413f95d4633SHajimu UMEMOTO break; 2414f95d4633SHajimu UMEMOTO case IPV6_HOPOPTS: 2415f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_hbh) { 2416f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_hbh; 2417f95d4633SHajimu UMEMOTO ip6e = (struct ip6_ext *)pktopt->ip6po_hbh; 2418f95d4633SHajimu UMEMOTO optdatalen = (ip6e->ip6e_len + 1) << 3; 2419f95d4633SHajimu UMEMOTO } 2420f95d4633SHajimu UMEMOTO break; 2421f95d4633SHajimu UMEMOTO case IPV6_RTHDR: 2422f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_rthdr) { 2423f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_rthdr; 2424f95d4633SHajimu UMEMOTO ip6e = (struct ip6_ext *)pktopt->ip6po_rthdr; 2425f95d4633SHajimu UMEMOTO optdatalen = (ip6e->ip6e_len + 1) << 3; 2426f95d4633SHajimu UMEMOTO } 2427f95d4633SHajimu UMEMOTO break; 2428f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 2429f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_dest1) { 2430f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_dest1; 2431f95d4633SHajimu UMEMOTO ip6e = (struct ip6_ext *)pktopt->ip6po_dest1; 2432f95d4633SHajimu UMEMOTO optdatalen = (ip6e->ip6e_len + 1) << 3; 2433f95d4633SHajimu UMEMOTO } 2434f95d4633SHajimu UMEMOTO break; 2435f95d4633SHajimu UMEMOTO case IPV6_DSTOPTS: 2436f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_dest2) { 2437f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_dest2; 2438f95d4633SHajimu UMEMOTO ip6e = (struct ip6_ext *)pktopt->ip6po_dest2; 2439f95d4633SHajimu UMEMOTO optdatalen = (ip6e->ip6e_len + 1) << 3; 2440f95d4633SHajimu UMEMOTO } 2441f95d4633SHajimu UMEMOTO break; 2442f95d4633SHajimu UMEMOTO case IPV6_NEXTHOP: 2443f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_nexthop) { 2444f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_nexthop; 2445f95d4633SHajimu UMEMOTO optdatalen = pktopt->ip6po_nexthop->sa_len; 2446f95d4633SHajimu UMEMOTO } 2447f95d4633SHajimu UMEMOTO break; 2448f95d4633SHajimu UMEMOTO case IPV6_USE_MIN_MTU: 2449f95d4633SHajimu UMEMOTO if (pktopt) 2450f95d4633SHajimu UMEMOTO optdata = (void *)&pktopt->ip6po_minmtu; 2451f95d4633SHajimu UMEMOTO else 2452f95d4633SHajimu UMEMOTO optdata = (void *)&defminmtu; 2453f95d4633SHajimu UMEMOTO optdatalen = sizeof(int); 2454f95d4633SHajimu UMEMOTO break; 2455f95d4633SHajimu UMEMOTO case IPV6_DONTFRAG: 2456f95d4633SHajimu UMEMOTO if (pktopt && ((pktopt->ip6po_flags) & IP6PO_DONTFRAG)) 2457f95d4633SHajimu UMEMOTO on = 1; 2458f95d4633SHajimu UMEMOTO else 2459f95d4633SHajimu UMEMOTO on = 0; 2460f95d4633SHajimu UMEMOTO optdata = (void *)&on; 2461f95d4633SHajimu UMEMOTO optdatalen = sizeof(on); 2462f95d4633SHajimu UMEMOTO break; 2463f95d4633SHajimu UMEMOTO case IPV6_PREFER_TEMPADDR: 2464f95d4633SHajimu UMEMOTO if (pktopt) 2465f95d4633SHajimu UMEMOTO optdata = (void *)&pktopt->ip6po_prefer_tempaddr; 2466f95d4633SHajimu UMEMOTO else 2467f95d4633SHajimu UMEMOTO optdata = (void *)&defpreftemp; 2468f95d4633SHajimu UMEMOTO optdatalen = sizeof(int); 2469f95d4633SHajimu UMEMOTO break; 2470f95d4633SHajimu UMEMOTO default: /* should not happen */ 2471f95d4633SHajimu UMEMOTO #ifdef DIAGNOSTIC 2472f95d4633SHajimu UMEMOTO panic("ip6_getpcbopt: unexpected option\n"); 2473f95d4633SHajimu UMEMOTO #endif 2474f95d4633SHajimu UMEMOTO return (ENOPROTOOPT); 2475f95d4633SHajimu UMEMOTO } 2476f95d4633SHajimu UMEMOTO 2477f95d4633SHajimu UMEMOTO error = sooptcopyout(sopt, optdata, optdatalen); 2478f95d4633SHajimu UMEMOTO 2479f95d4633SHajimu UMEMOTO return (error); 248033841545SHajimu UMEMOTO } 248133841545SHajimu UMEMOTO 248233841545SHajimu UMEMOTO void 2483f95d4633SHajimu UMEMOTO ip6_clearpktopts(pktopt, optname) 248433841545SHajimu UMEMOTO struct ip6_pktopts *pktopt; 2485f95d4633SHajimu UMEMOTO int optname; 248633841545SHajimu UMEMOTO { 2487f95d4633SHajimu UMEMOTO int needfree; 248833841545SHajimu UMEMOTO 2489289b28bdSHajimu UMEMOTO if (pktopt == NULL) 2490289b28bdSHajimu UMEMOTO return; 2491289b28bdSHajimu UMEMOTO 2492f95d4633SHajimu UMEMOTO needfree = pktopt->needfree; 2493f95d4633SHajimu UMEMOTO 2494f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_PKTINFO) { 249533841545SHajimu UMEMOTO if (needfree && pktopt->ip6po_pktinfo) 249633841545SHajimu UMEMOTO free(pktopt->ip6po_pktinfo, M_IP6OPT); 249733841545SHajimu UMEMOTO pktopt->ip6po_pktinfo = NULL; 249833841545SHajimu UMEMOTO } 2499f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_HOPLIMIT) 250033841545SHajimu UMEMOTO pktopt->ip6po_hlim = -1; 2501f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_TCLASS) 2502f95d4633SHajimu UMEMOTO pktopt->ip6po_tclass = -1; 2503f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_NEXTHOP) { 2504f95d4633SHajimu UMEMOTO if (pktopt->ip6po_nextroute.ro_rt) { 2505f95d4633SHajimu UMEMOTO RTFREE(pktopt->ip6po_nextroute.ro_rt); 2506f95d4633SHajimu UMEMOTO pktopt->ip6po_nextroute.ro_rt = NULL; 2507f95d4633SHajimu UMEMOTO } 250833841545SHajimu UMEMOTO if (needfree && pktopt->ip6po_nexthop) 250933841545SHajimu UMEMOTO free(pktopt->ip6po_nexthop, M_IP6OPT); 251033841545SHajimu UMEMOTO pktopt->ip6po_nexthop = NULL; 251133841545SHajimu UMEMOTO } 2512f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_HOPOPTS) { 251333841545SHajimu UMEMOTO if (needfree && pktopt->ip6po_hbh) 251433841545SHajimu UMEMOTO free(pktopt->ip6po_hbh, M_IP6OPT); 251533841545SHajimu UMEMOTO pktopt->ip6po_hbh = NULL; 251633841545SHajimu UMEMOTO } 2517f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_RTHDRDSTOPTS) { 251833841545SHajimu UMEMOTO if (needfree && pktopt->ip6po_dest1) 251933841545SHajimu UMEMOTO free(pktopt->ip6po_dest1, M_IP6OPT); 252033841545SHajimu UMEMOTO pktopt->ip6po_dest1 = NULL; 252133841545SHajimu UMEMOTO } 2522f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_RTHDR) { 252333841545SHajimu UMEMOTO if (needfree && pktopt->ip6po_rhinfo.ip6po_rhi_rthdr) 252433841545SHajimu UMEMOTO free(pktopt->ip6po_rhinfo.ip6po_rhi_rthdr, M_IP6OPT); 252533841545SHajimu UMEMOTO pktopt->ip6po_rhinfo.ip6po_rhi_rthdr = NULL; 252633841545SHajimu UMEMOTO if (pktopt->ip6po_route.ro_rt) { 252733841545SHajimu UMEMOTO RTFREE(pktopt->ip6po_route.ro_rt); 252833841545SHajimu UMEMOTO pktopt->ip6po_route.ro_rt = NULL; 252933841545SHajimu UMEMOTO } 253033841545SHajimu UMEMOTO } 2531f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_DSTOPTS) { 253233841545SHajimu UMEMOTO if (needfree && pktopt->ip6po_dest2) 253333841545SHajimu UMEMOTO free(pktopt->ip6po_dest2, M_IP6OPT); 253433841545SHajimu UMEMOTO pktopt->ip6po_dest2 = NULL; 253533841545SHajimu UMEMOTO } 253633841545SHajimu UMEMOTO } 253733841545SHajimu UMEMOTO 253833841545SHajimu UMEMOTO #define PKTOPT_EXTHDRCPY(type) \ 253933841545SHajimu UMEMOTO do {\ 254033841545SHajimu UMEMOTO if (src->type) {\ 25417efe5d92SHajimu UMEMOTO int hlen = (((struct ip6_ext *)src->type)->ip6e_len + 1) << 3;\ 254233841545SHajimu UMEMOTO dst->type = malloc(hlen, M_IP6OPT, canwait);\ 254333841545SHajimu UMEMOTO if (dst->type == NULL && canwait == M_NOWAIT)\ 254433841545SHajimu UMEMOTO goto bad;\ 254533841545SHajimu UMEMOTO bcopy(src->type, dst->type, hlen);\ 254633841545SHajimu UMEMOTO }\ 25477efe5d92SHajimu UMEMOTO } while (/*CONSTCOND*/ 0) 254833841545SHajimu UMEMOTO 254933841545SHajimu UMEMOTO struct ip6_pktopts * 255033841545SHajimu UMEMOTO ip6_copypktopts(src, canwait) 255133841545SHajimu UMEMOTO struct ip6_pktopts *src; 255233841545SHajimu UMEMOTO int canwait; 255333841545SHajimu UMEMOTO { 255433841545SHajimu UMEMOTO struct ip6_pktopts *dst; 255533841545SHajimu UMEMOTO 255633841545SHajimu UMEMOTO if (src == NULL) { 255733841545SHajimu UMEMOTO printf("ip6_clearpktopts: invalid argument\n"); 255833841545SHajimu UMEMOTO return (NULL); 255933841545SHajimu UMEMOTO } 256033841545SHajimu UMEMOTO 256133841545SHajimu UMEMOTO dst = malloc(sizeof(*dst), M_IP6OPT, canwait); 256233841545SHajimu UMEMOTO if (dst == NULL && canwait == M_NOWAIT) 256335f6695bSHajimu UMEMOTO return (NULL); 256433841545SHajimu UMEMOTO bzero(dst, sizeof(*dst)); 2565f95d4633SHajimu UMEMOTO dst->needfree = 1; 256633841545SHajimu UMEMOTO 256733841545SHajimu UMEMOTO dst->ip6po_hlim = src->ip6po_hlim; 2568f95d4633SHajimu UMEMOTO dst->ip6po_tclass = src->ip6po_tclass; 2569f95d4633SHajimu UMEMOTO dst->ip6po_flags = src->ip6po_flags; 257033841545SHajimu UMEMOTO if (src->ip6po_pktinfo) { 257133841545SHajimu UMEMOTO dst->ip6po_pktinfo = malloc(sizeof(*dst->ip6po_pktinfo), 257233841545SHajimu UMEMOTO M_IP6OPT, canwait); 257333841545SHajimu UMEMOTO if (dst->ip6po_pktinfo == NULL && canwait == M_NOWAIT) 257433841545SHajimu UMEMOTO goto bad; 257533841545SHajimu UMEMOTO *dst->ip6po_pktinfo = *src->ip6po_pktinfo; 257633841545SHajimu UMEMOTO } 257733841545SHajimu UMEMOTO if (src->ip6po_nexthop) { 257833841545SHajimu UMEMOTO dst->ip6po_nexthop = malloc(src->ip6po_nexthop->sa_len, 257933841545SHajimu UMEMOTO M_IP6OPT, canwait); 258033841545SHajimu UMEMOTO if (dst->ip6po_nexthop == NULL && canwait == M_NOWAIT) 258133841545SHajimu UMEMOTO goto bad; 258233841545SHajimu UMEMOTO bcopy(src->ip6po_nexthop, dst->ip6po_nexthop, 258333841545SHajimu UMEMOTO src->ip6po_nexthop->sa_len); 258433841545SHajimu UMEMOTO } 258533841545SHajimu UMEMOTO PKTOPT_EXTHDRCPY(ip6po_hbh); 258633841545SHajimu UMEMOTO PKTOPT_EXTHDRCPY(ip6po_dest1); 258733841545SHajimu UMEMOTO PKTOPT_EXTHDRCPY(ip6po_dest2); 258833841545SHajimu UMEMOTO PKTOPT_EXTHDRCPY(ip6po_rthdr); /* not copy the cached route */ 258933841545SHajimu UMEMOTO return (dst); 259033841545SHajimu UMEMOTO 259133841545SHajimu UMEMOTO bad: 259233841545SHajimu UMEMOTO if (dst->ip6po_pktinfo) free(dst->ip6po_pktinfo, M_IP6OPT); 259333841545SHajimu UMEMOTO if (dst->ip6po_nexthop) free(dst->ip6po_nexthop, M_IP6OPT); 259433841545SHajimu UMEMOTO if (dst->ip6po_hbh) free(dst->ip6po_hbh, M_IP6OPT); 259533841545SHajimu UMEMOTO if (dst->ip6po_dest1) free(dst->ip6po_dest1, M_IP6OPT); 259633841545SHajimu UMEMOTO if (dst->ip6po_dest2) free(dst->ip6po_dest2, M_IP6OPT); 259733841545SHajimu UMEMOTO if (dst->ip6po_rthdr) free(dst->ip6po_rthdr, M_IP6OPT); 259835f6695bSHajimu UMEMOTO free(dst, M_IP6OPT); 259933841545SHajimu UMEMOTO return (NULL); 260033841545SHajimu UMEMOTO } 260133841545SHajimu UMEMOTO #undef PKTOPT_EXTHDRCPY 260233841545SHajimu UMEMOTO 260333841545SHajimu UMEMOTO void 260433841545SHajimu UMEMOTO ip6_freepcbopts(pktopt) 260533841545SHajimu UMEMOTO struct ip6_pktopts *pktopt; 260633841545SHajimu UMEMOTO { 260733841545SHajimu UMEMOTO if (pktopt == NULL) 260833841545SHajimu UMEMOTO return; 260933841545SHajimu UMEMOTO 2610f95d4633SHajimu UMEMOTO ip6_clearpktopts(pktopt, -1); 261133841545SHajimu UMEMOTO 261233841545SHajimu UMEMOTO free(pktopt, M_IP6OPT); 261333841545SHajimu UMEMOTO } 261433841545SHajimu UMEMOTO 261533841545SHajimu UMEMOTO /* 261682cd038dSYoshinobu Inoue * Set the IP6 multicast options in response to user setsockopt(). 261782cd038dSYoshinobu Inoue */ 261882cd038dSYoshinobu Inoue static int 261982cd038dSYoshinobu Inoue ip6_setmoptions(optname, im6op, m) 262082cd038dSYoshinobu Inoue int optname; 262182cd038dSYoshinobu Inoue struct ip6_moptions **im6op; 262282cd038dSYoshinobu Inoue struct mbuf *m; 262382cd038dSYoshinobu Inoue { 262482cd038dSYoshinobu Inoue int error = 0; 262582cd038dSYoshinobu Inoue u_int loop, ifindex; 262682cd038dSYoshinobu Inoue struct ipv6_mreq *mreq; 262782cd038dSYoshinobu Inoue struct ifnet *ifp; 262882cd038dSYoshinobu Inoue struct ip6_moptions *im6o = *im6op; 262982cd038dSYoshinobu Inoue struct route_in6 ro; 263082cd038dSYoshinobu Inoue struct sockaddr_in6 *dst; 263182cd038dSYoshinobu Inoue struct in6_multi_mship *imm; 26327efe5d92SHajimu UMEMOTO struct thread *td = curthread; 263382cd038dSYoshinobu Inoue 263482cd038dSYoshinobu Inoue if (im6o == NULL) { 263582cd038dSYoshinobu Inoue /* 263682cd038dSYoshinobu Inoue * No multicast option buffer attached to the pcb; 263782cd038dSYoshinobu Inoue * allocate one and initialize to default values. 263882cd038dSYoshinobu Inoue */ 263982cd038dSYoshinobu Inoue im6o = (struct ip6_moptions *) 2640a163d034SWarner Losh malloc(sizeof(*im6o), M_IPMOPTS, M_WAITOK); 264182cd038dSYoshinobu Inoue 264282cd038dSYoshinobu Inoue if (im6o == NULL) 264382cd038dSYoshinobu Inoue return (ENOBUFS); 264482cd038dSYoshinobu Inoue *im6op = im6o; 264582cd038dSYoshinobu Inoue im6o->im6o_multicast_ifp = NULL; 264682cd038dSYoshinobu Inoue im6o->im6o_multicast_hlim = ip6_defmcasthlim; 264782cd038dSYoshinobu Inoue im6o->im6o_multicast_loop = IPV6_DEFAULT_MULTICAST_LOOP; 264882cd038dSYoshinobu Inoue LIST_INIT(&im6o->im6o_memberships); 264982cd038dSYoshinobu Inoue } 265082cd038dSYoshinobu Inoue 265182cd038dSYoshinobu Inoue switch (optname) { 265282cd038dSYoshinobu Inoue 265382cd038dSYoshinobu Inoue case IPV6_MULTICAST_IF: 265482cd038dSYoshinobu Inoue /* 265582cd038dSYoshinobu Inoue * Select the interface for outgoing multicast packets. 265682cd038dSYoshinobu Inoue */ 265782cd038dSYoshinobu Inoue if (m == NULL || m->m_len != sizeof(u_int)) { 265882cd038dSYoshinobu Inoue error = EINVAL; 265982cd038dSYoshinobu Inoue break; 266082cd038dSYoshinobu Inoue } 266133841545SHajimu UMEMOTO bcopy(mtod(m, u_int *), &ifindex, sizeof(ifindex)); 266282cd038dSYoshinobu Inoue if (ifindex < 0 || if_index < ifindex) { 266382cd038dSYoshinobu Inoue error = ENXIO; /* XXX EINVAL? */ 266482cd038dSYoshinobu Inoue break; 266582cd038dSYoshinobu Inoue } 2666f9132cebSJonathan Lemon ifp = ifnet_byindex(ifindex); 266782cd038dSYoshinobu Inoue if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) { 266882cd038dSYoshinobu Inoue error = EADDRNOTAVAIL; 266982cd038dSYoshinobu Inoue break; 267082cd038dSYoshinobu Inoue } 267182cd038dSYoshinobu Inoue im6o->im6o_multicast_ifp = ifp; 267282cd038dSYoshinobu Inoue break; 267382cd038dSYoshinobu Inoue 267482cd038dSYoshinobu Inoue case IPV6_MULTICAST_HOPS: 267582cd038dSYoshinobu Inoue { 267682cd038dSYoshinobu Inoue /* 267782cd038dSYoshinobu Inoue * Set the IP6 hoplimit for outgoing multicast packets. 267882cd038dSYoshinobu Inoue */ 267982cd038dSYoshinobu Inoue int optval; 268082cd038dSYoshinobu Inoue if (m == NULL || m->m_len != sizeof(int)) { 268182cd038dSYoshinobu Inoue error = EINVAL; 268282cd038dSYoshinobu Inoue break; 268382cd038dSYoshinobu Inoue } 268433841545SHajimu UMEMOTO bcopy(mtod(m, u_int *), &optval, sizeof(optval)); 268582cd038dSYoshinobu Inoue if (optval < -1 || optval >= 256) 268682cd038dSYoshinobu Inoue error = EINVAL; 268782cd038dSYoshinobu Inoue else if (optval == -1) 268882cd038dSYoshinobu Inoue im6o->im6o_multicast_hlim = ip6_defmcasthlim; 268982cd038dSYoshinobu Inoue else 269082cd038dSYoshinobu Inoue im6o->im6o_multicast_hlim = optval; 269182cd038dSYoshinobu Inoue break; 269282cd038dSYoshinobu Inoue } 269382cd038dSYoshinobu Inoue 269482cd038dSYoshinobu Inoue case IPV6_MULTICAST_LOOP: 269582cd038dSYoshinobu Inoue /* 269682cd038dSYoshinobu Inoue * Set the loopback flag for outgoing multicast packets. 269782cd038dSYoshinobu Inoue * Must be zero or one. 269882cd038dSYoshinobu Inoue */ 269933841545SHajimu UMEMOTO if (m == NULL || m->m_len != sizeof(u_int)) { 270033841545SHajimu UMEMOTO error = EINVAL; 270133841545SHajimu UMEMOTO break; 270233841545SHajimu UMEMOTO } 270333841545SHajimu UMEMOTO bcopy(mtod(m, u_int *), &loop, sizeof(loop)); 270433841545SHajimu UMEMOTO if (loop > 1) { 270582cd038dSYoshinobu Inoue error = EINVAL; 270682cd038dSYoshinobu Inoue break; 270782cd038dSYoshinobu Inoue } 270882cd038dSYoshinobu Inoue im6o->im6o_multicast_loop = loop; 270982cd038dSYoshinobu Inoue break; 271082cd038dSYoshinobu Inoue 271182cd038dSYoshinobu Inoue case IPV6_JOIN_GROUP: 271282cd038dSYoshinobu Inoue /* 271382cd038dSYoshinobu Inoue * Add a multicast group membership. 271482cd038dSYoshinobu Inoue * Group must be a valid IP6 multicast address. 271582cd038dSYoshinobu Inoue */ 271682cd038dSYoshinobu Inoue if (m == NULL || m->m_len != sizeof(struct ipv6_mreq)) { 271782cd038dSYoshinobu Inoue error = EINVAL; 271882cd038dSYoshinobu Inoue break; 271982cd038dSYoshinobu Inoue } 272082cd038dSYoshinobu Inoue mreq = mtod(m, struct ipv6_mreq *); 272182cd038dSYoshinobu Inoue if (IN6_IS_ADDR_UNSPECIFIED(&mreq->ipv6mr_multiaddr)) { 272282cd038dSYoshinobu Inoue /* 272382cd038dSYoshinobu Inoue * We use the unspecified address to specify to accept 272482cd038dSYoshinobu Inoue * all multicast addresses. Only super user is allowed 272582cd038dSYoshinobu Inoue * to do this. 272682cd038dSYoshinobu Inoue */ 27277efe5d92SHajimu UMEMOTO if (suser(td)) { 272882cd038dSYoshinobu Inoue error = EACCES; 272982cd038dSYoshinobu Inoue break; 273082cd038dSYoshinobu Inoue } 273182cd038dSYoshinobu Inoue } else if (!IN6_IS_ADDR_MULTICAST(&mreq->ipv6mr_multiaddr)) { 273282cd038dSYoshinobu Inoue error = EINVAL; 273382cd038dSYoshinobu Inoue break; 273482cd038dSYoshinobu Inoue } 273582cd038dSYoshinobu Inoue 273682cd038dSYoshinobu Inoue /* 273782cd038dSYoshinobu Inoue * If the interface is specified, validate it. 273882cd038dSYoshinobu Inoue */ 273907027f9dSHajimu UMEMOTO if (mreq->ipv6mr_interface < 0 || 274007027f9dSHajimu UMEMOTO if_index < mreq->ipv6mr_interface) { 274182cd038dSYoshinobu Inoue error = ENXIO; /* XXX EINVAL? */ 274282cd038dSYoshinobu Inoue break; 274382cd038dSYoshinobu Inoue } 274482cd038dSYoshinobu Inoue /* 274582cd038dSYoshinobu Inoue * If no interface was explicitly specified, choose an 274682cd038dSYoshinobu Inoue * appropriate one according to the given multicast address. 274782cd038dSYoshinobu Inoue */ 274882cd038dSYoshinobu Inoue if (mreq->ipv6mr_interface == 0) { 274982cd038dSYoshinobu Inoue /* 275082cd038dSYoshinobu Inoue * If the multicast address is in node-local scope, 275182cd038dSYoshinobu Inoue * the interface should be a loopback interface. 275282cd038dSYoshinobu Inoue * Otherwise, look up the routing table for the 275382cd038dSYoshinobu Inoue * address, and choose the outgoing interface. 275482cd038dSYoshinobu Inoue * XXX: is it a good approach? 275582cd038dSYoshinobu Inoue */ 27569a4f9608SHajimu UMEMOTO if (IN6_IS_ADDR_MC_INTFACELOCAL(&mreq->ipv6mr_multiaddr)) { 275782cd038dSYoshinobu Inoue ifp = &loif[0]; 275882cd038dSYoshinobu Inoue } else { 275982cd038dSYoshinobu Inoue ro.ro_rt = NULL; 276082cd038dSYoshinobu Inoue dst = (struct sockaddr_in6 *)&ro.ro_dst; 276182cd038dSYoshinobu Inoue bzero(dst, sizeof(*dst)); 276282cd038dSYoshinobu Inoue dst->sin6_len = sizeof(struct sockaddr_in6); 276382cd038dSYoshinobu Inoue dst->sin6_family = AF_INET6; 276482cd038dSYoshinobu Inoue dst->sin6_addr = mreq->ipv6mr_multiaddr; 276582cd038dSYoshinobu Inoue rtalloc((struct route *)&ro); 276682cd038dSYoshinobu Inoue if (ro.ro_rt == NULL) { 276782cd038dSYoshinobu Inoue error = EADDRNOTAVAIL; 276882cd038dSYoshinobu Inoue break; 276982cd038dSYoshinobu Inoue } 277082cd038dSYoshinobu Inoue ifp = ro.ro_rt->rt_ifp; 2771d1dd20beSSam Leffler RTFREE(ro.ro_rt); 277282cd038dSYoshinobu Inoue } 277382cd038dSYoshinobu Inoue } else 2774f9132cebSJonathan Lemon ifp = ifnet_byindex(mreq->ipv6mr_interface); 277582cd038dSYoshinobu Inoue 277682cd038dSYoshinobu Inoue /* 277782cd038dSYoshinobu Inoue * See if we found an interface, and confirm that it 277882cd038dSYoshinobu Inoue * supports multicast 277982cd038dSYoshinobu Inoue */ 278082cd038dSYoshinobu Inoue if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) { 278182cd038dSYoshinobu Inoue error = EADDRNOTAVAIL; 278282cd038dSYoshinobu Inoue break; 278382cd038dSYoshinobu Inoue } 278482cd038dSYoshinobu Inoue /* 278582cd038dSYoshinobu Inoue * Put interface index into the multicast address, 278682cd038dSYoshinobu Inoue * if the address has link-local scope. 278782cd038dSYoshinobu Inoue */ 278882cd038dSYoshinobu Inoue if (IN6_IS_ADDR_MC_LINKLOCAL(&mreq->ipv6mr_multiaddr)) { 278907027f9dSHajimu UMEMOTO mreq->ipv6mr_multiaddr.s6_addr16[1] = 279007027f9dSHajimu UMEMOTO htons(ifp->if_index); 279182cd038dSYoshinobu Inoue } 279282cd038dSYoshinobu Inoue /* 279382cd038dSYoshinobu Inoue * See if the membership already exists. 279482cd038dSYoshinobu Inoue */ 2795686cdd19SJun-ichiro itojun Hagino for (imm = im6o->im6o_memberships.lh_first; 2796686cdd19SJun-ichiro itojun Hagino imm != NULL; imm = imm->i6mm_chain.le_next) 279782cd038dSYoshinobu Inoue if (imm->i6mm_maddr->in6m_ifp == ifp && 279882cd038dSYoshinobu Inoue IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr, 279982cd038dSYoshinobu Inoue &mreq->ipv6mr_multiaddr)) 280082cd038dSYoshinobu Inoue break; 280182cd038dSYoshinobu Inoue if (imm != NULL) { 280282cd038dSYoshinobu Inoue error = EADDRINUSE; 280382cd038dSYoshinobu Inoue break; 280482cd038dSYoshinobu Inoue } 280582cd038dSYoshinobu Inoue /* 280682cd038dSYoshinobu Inoue * Everything looks good; add a new record to the multicast 280782cd038dSYoshinobu Inoue * address list for the given interface. 280882cd038dSYoshinobu Inoue */ 2809a163d034SWarner Losh imm = malloc(sizeof(*imm), M_IPMADDR, M_WAITOK); 281082cd038dSYoshinobu Inoue if (imm == NULL) { 281182cd038dSYoshinobu Inoue error = ENOBUFS; 281282cd038dSYoshinobu Inoue break; 281382cd038dSYoshinobu Inoue } 281482cd038dSYoshinobu Inoue if ((imm->i6mm_maddr = 281582cd038dSYoshinobu Inoue in6_addmulti(&mreq->ipv6mr_multiaddr, ifp, &error)) == NULL) { 281682cd038dSYoshinobu Inoue free(imm, M_IPMADDR); 281782cd038dSYoshinobu Inoue break; 281882cd038dSYoshinobu Inoue } 281982cd038dSYoshinobu Inoue LIST_INSERT_HEAD(&im6o->im6o_memberships, imm, i6mm_chain); 282082cd038dSYoshinobu Inoue break; 282182cd038dSYoshinobu Inoue 282282cd038dSYoshinobu Inoue case IPV6_LEAVE_GROUP: 282382cd038dSYoshinobu Inoue /* 282482cd038dSYoshinobu Inoue * Drop a multicast group membership. 282582cd038dSYoshinobu Inoue * Group must be a valid IP6 multicast address. 282682cd038dSYoshinobu Inoue */ 282782cd038dSYoshinobu Inoue if (m == NULL || m->m_len != sizeof(struct ipv6_mreq)) { 282882cd038dSYoshinobu Inoue error = EINVAL; 282982cd038dSYoshinobu Inoue break; 283082cd038dSYoshinobu Inoue } 283182cd038dSYoshinobu Inoue mreq = mtod(m, struct ipv6_mreq *); 283282cd038dSYoshinobu Inoue if (IN6_IS_ADDR_UNSPECIFIED(&mreq->ipv6mr_multiaddr)) { 283344731cabSJohn Baldwin if (suser(td)) { 283482cd038dSYoshinobu Inoue error = EACCES; 283582cd038dSYoshinobu Inoue break; 283682cd038dSYoshinobu Inoue } 283782cd038dSYoshinobu Inoue } else if (!IN6_IS_ADDR_MULTICAST(&mreq->ipv6mr_multiaddr)) { 283882cd038dSYoshinobu Inoue error = EINVAL; 283982cd038dSYoshinobu Inoue break; 284082cd038dSYoshinobu Inoue } 284182cd038dSYoshinobu Inoue /* 284282cd038dSYoshinobu Inoue * If an interface address was specified, get a pointer 284382cd038dSYoshinobu Inoue * to its ifnet structure. 284482cd038dSYoshinobu Inoue */ 284582cd038dSYoshinobu Inoue if (mreq->ipv6mr_interface < 0 284682cd038dSYoshinobu Inoue || if_index < mreq->ipv6mr_interface) { 284782cd038dSYoshinobu Inoue error = ENXIO; /* XXX EINVAL? */ 284882cd038dSYoshinobu Inoue break; 284982cd038dSYoshinobu Inoue } 2850f9132cebSJonathan Lemon ifp = ifnet_byindex(mreq->ipv6mr_interface); 285182cd038dSYoshinobu Inoue /* 285282cd038dSYoshinobu Inoue * Put interface index into the multicast address, 285382cd038dSYoshinobu Inoue * if the address has link-local scope. 285482cd038dSYoshinobu Inoue */ 285582cd038dSYoshinobu Inoue if (IN6_IS_ADDR_MC_LINKLOCAL(&mreq->ipv6mr_multiaddr)) { 285682cd038dSYoshinobu Inoue mreq->ipv6mr_multiaddr.s6_addr16[1] 285782cd038dSYoshinobu Inoue = htons(mreq->ipv6mr_interface); 285882cd038dSYoshinobu Inoue } 28597efe5d92SHajimu UMEMOTO 286082cd038dSYoshinobu Inoue /* 286182cd038dSYoshinobu Inoue * Find the membership in the membership list. 286282cd038dSYoshinobu Inoue */ 2863686cdd19SJun-ichiro itojun Hagino for (imm = im6o->im6o_memberships.lh_first; 2864686cdd19SJun-ichiro itojun Hagino imm != NULL; imm = imm->i6mm_chain.le_next) { 28657efe5d92SHajimu UMEMOTO if ((ifp == NULL || imm->i6mm_maddr->in6m_ifp == ifp) && 286682cd038dSYoshinobu Inoue IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr, 286782cd038dSYoshinobu Inoue &mreq->ipv6mr_multiaddr)) 286882cd038dSYoshinobu Inoue break; 286982cd038dSYoshinobu Inoue } 287082cd038dSYoshinobu Inoue if (imm == NULL) { 287182cd038dSYoshinobu Inoue /* Unable to resolve interface */ 287282cd038dSYoshinobu Inoue error = EADDRNOTAVAIL; 287382cd038dSYoshinobu Inoue break; 287482cd038dSYoshinobu Inoue } 287582cd038dSYoshinobu Inoue /* 287682cd038dSYoshinobu Inoue * Give up the multicast address record to which the 287782cd038dSYoshinobu Inoue * membership points. 287882cd038dSYoshinobu Inoue */ 287982cd038dSYoshinobu Inoue LIST_REMOVE(imm, i6mm_chain); 288082cd038dSYoshinobu Inoue in6_delmulti(imm->i6mm_maddr); 288182cd038dSYoshinobu Inoue free(imm, M_IPMADDR); 288282cd038dSYoshinobu Inoue break; 288382cd038dSYoshinobu Inoue 288482cd038dSYoshinobu Inoue default: 288582cd038dSYoshinobu Inoue error = EOPNOTSUPP; 288682cd038dSYoshinobu Inoue break; 288782cd038dSYoshinobu Inoue } 288882cd038dSYoshinobu Inoue 288982cd038dSYoshinobu Inoue /* 289082cd038dSYoshinobu Inoue * If all options have default values, no need to keep the mbuf. 289182cd038dSYoshinobu Inoue */ 289282cd038dSYoshinobu Inoue if (im6o->im6o_multicast_ifp == NULL && 289382cd038dSYoshinobu Inoue im6o->im6o_multicast_hlim == ip6_defmcasthlim && 289482cd038dSYoshinobu Inoue im6o->im6o_multicast_loop == IPV6_DEFAULT_MULTICAST_LOOP && 2895686cdd19SJun-ichiro itojun Hagino im6o->im6o_memberships.lh_first == NULL) { 289682cd038dSYoshinobu Inoue free(*im6op, M_IPMOPTS); 289782cd038dSYoshinobu Inoue *im6op = NULL; 289882cd038dSYoshinobu Inoue } 289982cd038dSYoshinobu Inoue 290082cd038dSYoshinobu Inoue return (error); 290182cd038dSYoshinobu Inoue } 290282cd038dSYoshinobu Inoue 290382cd038dSYoshinobu Inoue /* 290482cd038dSYoshinobu Inoue * Return the IP6 multicast options in response to user getsockopt(). 290582cd038dSYoshinobu Inoue */ 290682cd038dSYoshinobu Inoue static int 290782cd038dSYoshinobu Inoue ip6_getmoptions(optname, im6o, mp) 290882cd038dSYoshinobu Inoue int optname; 290933841545SHajimu UMEMOTO struct ip6_moptions *im6o; 291033841545SHajimu UMEMOTO struct mbuf **mp; 291182cd038dSYoshinobu Inoue { 291282cd038dSYoshinobu Inoue u_int *hlim, *loop, *ifindex; 291382cd038dSYoshinobu Inoue 2914a163d034SWarner Losh *mp = m_get(M_TRYWAIT, MT_HEADER); /* XXX */ 291582cd038dSYoshinobu Inoue 291682cd038dSYoshinobu Inoue switch (optname) { 291782cd038dSYoshinobu Inoue 291882cd038dSYoshinobu Inoue case IPV6_MULTICAST_IF: 291982cd038dSYoshinobu Inoue ifindex = mtod(*mp, u_int *); 292082cd038dSYoshinobu Inoue (*mp)->m_len = sizeof(u_int); 292182cd038dSYoshinobu Inoue if (im6o == NULL || im6o->im6o_multicast_ifp == NULL) 292282cd038dSYoshinobu Inoue *ifindex = 0; 292382cd038dSYoshinobu Inoue else 292482cd038dSYoshinobu Inoue *ifindex = im6o->im6o_multicast_ifp->if_index; 292582cd038dSYoshinobu Inoue return (0); 292682cd038dSYoshinobu Inoue 292782cd038dSYoshinobu Inoue case IPV6_MULTICAST_HOPS: 292882cd038dSYoshinobu Inoue hlim = mtod(*mp, u_int *); 292982cd038dSYoshinobu Inoue (*mp)->m_len = sizeof(u_int); 293082cd038dSYoshinobu Inoue if (im6o == NULL) 293182cd038dSYoshinobu Inoue *hlim = ip6_defmcasthlim; 293282cd038dSYoshinobu Inoue else 293382cd038dSYoshinobu Inoue *hlim = im6o->im6o_multicast_hlim; 293482cd038dSYoshinobu Inoue return (0); 293582cd038dSYoshinobu Inoue 293682cd038dSYoshinobu Inoue case IPV6_MULTICAST_LOOP: 293782cd038dSYoshinobu Inoue loop = mtod(*mp, u_int *); 293882cd038dSYoshinobu Inoue (*mp)->m_len = sizeof(u_int); 293982cd038dSYoshinobu Inoue if (im6o == NULL) 294082cd038dSYoshinobu Inoue *loop = ip6_defmcasthlim; 294182cd038dSYoshinobu Inoue else 294282cd038dSYoshinobu Inoue *loop = im6o->im6o_multicast_loop; 294382cd038dSYoshinobu Inoue return (0); 294482cd038dSYoshinobu Inoue 294582cd038dSYoshinobu Inoue default: 294682cd038dSYoshinobu Inoue return (EOPNOTSUPP); 294782cd038dSYoshinobu Inoue } 294882cd038dSYoshinobu Inoue } 294982cd038dSYoshinobu Inoue 295082cd038dSYoshinobu Inoue /* 295182cd038dSYoshinobu Inoue * Discard the IP6 multicast options. 295282cd038dSYoshinobu Inoue */ 295382cd038dSYoshinobu Inoue void 295482cd038dSYoshinobu Inoue ip6_freemoptions(im6o) 295533841545SHajimu UMEMOTO struct ip6_moptions *im6o; 295682cd038dSYoshinobu Inoue { 295782cd038dSYoshinobu Inoue struct in6_multi_mship *imm; 295882cd038dSYoshinobu Inoue 295982cd038dSYoshinobu Inoue if (im6o == NULL) 296082cd038dSYoshinobu Inoue return; 296182cd038dSYoshinobu Inoue 2962686cdd19SJun-ichiro itojun Hagino while ((imm = im6o->im6o_memberships.lh_first) != NULL) { 296382cd038dSYoshinobu Inoue LIST_REMOVE(imm, i6mm_chain); 296482cd038dSYoshinobu Inoue if (imm->i6mm_maddr) 296582cd038dSYoshinobu Inoue in6_delmulti(imm->i6mm_maddr); 296682cd038dSYoshinobu Inoue free(imm, M_IPMADDR); 296782cd038dSYoshinobu Inoue } 296882cd038dSYoshinobu Inoue free(im6o, M_IPMOPTS); 296982cd038dSYoshinobu Inoue } 297082cd038dSYoshinobu Inoue 297182cd038dSYoshinobu Inoue /* 297282cd038dSYoshinobu Inoue * Set IPv6 outgoing packet options based on advanced API. 297382cd038dSYoshinobu Inoue */ 297482cd038dSYoshinobu Inoue int 2975f95d4633SHajimu UMEMOTO ip6_setpktoptions(control, opt, stickyopt, priv, needcopy, uproto) 297682cd038dSYoshinobu Inoue struct mbuf *control; 2977f95d4633SHajimu UMEMOTO struct ip6_pktopts *opt, *stickyopt; 2978f95d4633SHajimu UMEMOTO int priv, needcopy, uproto; 297982cd038dSYoshinobu Inoue { 298033841545SHajimu UMEMOTO struct cmsghdr *cm = 0; 298182cd038dSYoshinobu Inoue 298282cd038dSYoshinobu Inoue if (control == 0 || opt == 0) 298382cd038dSYoshinobu Inoue return (EINVAL); 298482cd038dSYoshinobu Inoue 2985f95d4633SHajimu UMEMOTO if (stickyopt) { 2986f95d4633SHajimu UMEMOTO /* 2987f95d4633SHajimu UMEMOTO * If stickyopt is provided, make a local copy of the options 2988f95d4633SHajimu UMEMOTO * for this particular packet, then override them by ancillary 2989f95d4633SHajimu UMEMOTO * objects. 2990f95d4633SHajimu UMEMOTO * XXX: need to gain a reference for the cached route of the 2991f95d4633SHajimu UMEMOTO * next hop in case of the overriding. 2992f95d4633SHajimu UMEMOTO */ 2993f95d4633SHajimu UMEMOTO *opt = *stickyopt; 2994f95d4633SHajimu UMEMOTO if (opt->ip6po_nextroute.ro_rt) { 2995f95d4633SHajimu UMEMOTO RT_LOCK(opt->ip6po_nextroute.ro_rt); 29967138d65cSSam Leffler RT_ADDREF(opt->ip6po_nextroute.ro_rt); 2997f95d4633SHajimu UMEMOTO RT_UNLOCK(opt->ip6po_nextroute.ro_rt); 2998f95d4633SHajimu UMEMOTO } 2999f95d4633SHajimu UMEMOTO } else 300033841545SHajimu UMEMOTO init_ip6pktopts(opt); 3001f95d4633SHajimu UMEMOTO opt->needfree = needcopy; 300282cd038dSYoshinobu Inoue 300382cd038dSYoshinobu Inoue /* 300482cd038dSYoshinobu Inoue * XXX: Currently, we assume all the optional information is stored 300582cd038dSYoshinobu Inoue * in a single mbuf. 300682cd038dSYoshinobu Inoue */ 300782cd038dSYoshinobu Inoue if (control->m_next) 300882cd038dSYoshinobu Inoue return (EINVAL); 300982cd038dSYoshinobu Inoue 301033841545SHajimu UMEMOTO for (; control->m_len; control->m_data += CMSG_ALIGN(cm->cmsg_len), 301133841545SHajimu UMEMOTO control->m_len -= CMSG_ALIGN(cm->cmsg_len)) { 3012f95d4633SHajimu UMEMOTO int error; 3013f95d4633SHajimu UMEMOTO 3014f95d4633SHajimu UMEMOTO if (control->m_len < CMSG_LEN(0)) 3015f95d4633SHajimu UMEMOTO return (EINVAL); 3016f95d4633SHajimu UMEMOTO 301782cd038dSYoshinobu Inoue cm = mtod(control, struct cmsghdr *); 301882cd038dSYoshinobu Inoue if (cm->cmsg_len == 0 || cm->cmsg_len > control->m_len) 301982cd038dSYoshinobu Inoue return (EINVAL); 302082cd038dSYoshinobu Inoue if (cm->cmsg_level != IPPROTO_IPV6) 302182cd038dSYoshinobu Inoue continue; 302282cd038dSYoshinobu Inoue 3023f95d4633SHajimu UMEMOTO error = ip6_setpktoption(cm->cmsg_type, CMSG_DATA(cm), 3024f95d4633SHajimu UMEMOTO cm->cmsg_len - CMSG_LEN(0), opt, priv, needcopy, 1, uproto); 3025f95d4633SHajimu UMEMOTO if (error) 3026f95d4633SHajimu UMEMOTO return (error); 3027f95d4633SHajimu UMEMOTO } 302882cd038dSYoshinobu Inoue 3029f95d4633SHajimu UMEMOTO return (0); 3030f95d4633SHajimu UMEMOTO } 3031f95d4633SHajimu UMEMOTO 3032f95d4633SHajimu UMEMOTO /* 3033f95d4633SHajimu UMEMOTO * Set a particular packet option, as a sticky option or an ancillary data 3034f95d4633SHajimu UMEMOTO * item. "len" can be 0 only when it's a sticky option. 3035f95d4633SHajimu UMEMOTO * We have 4 cases of combination of "sticky" and "cmsg": 3036f95d4633SHajimu UMEMOTO * "sticky=0, cmsg=0": impossible 3037f95d4633SHajimu UMEMOTO * "sticky=0, cmsg=1": RFC2292 or rfc2292bis ancillary data 3038f95d4633SHajimu UMEMOTO * "sticky=1, cmsg=0": rfc2292bis socket option 3039f95d4633SHajimu UMEMOTO * "sticky=1, cmsg=1": RFC2292 socket option 3040f95d4633SHajimu UMEMOTO */ 3041f95d4633SHajimu UMEMOTO static int 3042f95d4633SHajimu UMEMOTO ip6_setpktoption(optname, buf, len, opt, priv, sticky, cmsg, uproto) 3043f95d4633SHajimu UMEMOTO int optname, len, priv, sticky, cmsg, uproto; 3044f95d4633SHajimu UMEMOTO u_char *buf; 3045f95d4633SHajimu UMEMOTO struct ip6_pktopts *opt; 3046f95d4633SHajimu UMEMOTO { 3047f95d4633SHajimu UMEMOTO int minmtupolicy, preftemp; 3048f95d4633SHajimu UMEMOTO 3049f95d4633SHajimu UMEMOTO if (!sticky && !cmsg) { 3050f95d4633SHajimu UMEMOTO #ifdef DIAGNOSTIC 3051f95d4633SHajimu UMEMOTO printf("ip6_setpktoption: impossible case\n"); 3052f95d4633SHajimu UMEMOTO #endif 3053f95d4633SHajimu UMEMOTO return (EINVAL); 3054f95d4633SHajimu UMEMOTO } 3055f95d4633SHajimu UMEMOTO 3056f95d4633SHajimu UMEMOTO /* 3057f95d4633SHajimu UMEMOTO * IPV6_2292xxx is for backward compatibility to RFC2292, and should 3058f95d4633SHajimu UMEMOTO * not be specified in the context of rfc2292bis. Conversely, 3059f95d4633SHajimu UMEMOTO * rfc2292bis types should not be specified in the context of RFC2292. 3060f95d4633SHajimu UMEMOTO */ 3061f95d4633SHajimu UMEMOTO if (!cmsg) { 3062f95d4633SHajimu UMEMOTO switch (optname) { 3063f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 3064f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 3065f95d4633SHajimu UMEMOTO case IPV6_2292NEXTHOP: 3066f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 3067f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 3068f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 3069f95d4633SHajimu UMEMOTO case IPV6_2292PKTOPTIONS: 3070f95d4633SHajimu UMEMOTO return (ENOPROTOOPT); 3071f95d4633SHajimu UMEMOTO } 3072f95d4633SHajimu UMEMOTO } 3073f95d4633SHajimu UMEMOTO if (sticky && cmsg) { 3074f95d4633SHajimu UMEMOTO switch (optname) { 3075f95d4633SHajimu UMEMOTO case IPV6_PKTINFO: 3076f95d4633SHajimu UMEMOTO case IPV6_HOPLIMIT: 3077f95d4633SHajimu UMEMOTO case IPV6_NEXTHOP: 3078f95d4633SHajimu UMEMOTO case IPV6_HOPOPTS: 3079f95d4633SHajimu UMEMOTO case IPV6_DSTOPTS: 3080f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 3081f95d4633SHajimu UMEMOTO case IPV6_RTHDR: 3082f95d4633SHajimu UMEMOTO case IPV6_USE_MIN_MTU: 3083f95d4633SHajimu UMEMOTO case IPV6_DONTFRAG: 3084f95d4633SHajimu UMEMOTO case IPV6_TCLASS: 3085f95d4633SHajimu UMEMOTO case IPV6_PREFER_TEMPADDR: /* XXX: not an rfc2292bis option */ 3086f95d4633SHajimu UMEMOTO return (ENOPROTOOPT); 3087f95d4633SHajimu UMEMOTO } 3088f95d4633SHajimu UMEMOTO } 3089f95d4633SHajimu UMEMOTO 3090f95d4633SHajimu UMEMOTO switch (optname) { 3091f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 3092f95d4633SHajimu UMEMOTO case IPV6_PKTINFO: 3093f95d4633SHajimu UMEMOTO { 3094f95d4633SHajimu UMEMOTO struct ifnet *ifp = NULL; 3095f95d4633SHajimu UMEMOTO struct in6_pktinfo *pktinfo; 3096f95d4633SHajimu UMEMOTO 3097f95d4633SHajimu UMEMOTO if (len != sizeof(struct in6_pktinfo)) 3098f95d4633SHajimu UMEMOTO return (EINVAL); 3099f95d4633SHajimu UMEMOTO 3100f95d4633SHajimu UMEMOTO pktinfo = (struct in6_pktinfo *)buf; 3101f95d4633SHajimu UMEMOTO 3102f95d4633SHajimu UMEMOTO /* 3103f95d4633SHajimu UMEMOTO * An application can clear any sticky IPV6_PKTINFO option by 3104f95d4633SHajimu UMEMOTO * doing a "regular" setsockopt with ipi6_addr being 3105f95d4633SHajimu UMEMOTO * in6addr_any and ipi6_ifindex being zero. 3106f95d4633SHajimu UMEMOTO * [RFC 3542, Section 6] 3107f95d4633SHajimu UMEMOTO */ 3108f95d4633SHajimu UMEMOTO if (optname == IPV6_PKTINFO && opt->ip6po_pktinfo && 3109f95d4633SHajimu UMEMOTO pktinfo->ipi6_ifindex == 0 && 3110f95d4633SHajimu UMEMOTO IN6_IS_ADDR_UNSPECIFIED(&pktinfo->ipi6_addr)) { 3111f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, optname); 3112f95d4633SHajimu UMEMOTO break; 3113f95d4633SHajimu UMEMOTO } 3114f95d4633SHajimu UMEMOTO 3115f95d4633SHajimu UMEMOTO if (uproto == IPPROTO_TCP && optname == IPV6_PKTINFO && 3116f95d4633SHajimu UMEMOTO sticky && !IN6_IS_ADDR_UNSPECIFIED(&pktinfo->ipi6_addr)) { 3117f95d4633SHajimu UMEMOTO return (EINVAL); 3118f95d4633SHajimu UMEMOTO } 3119f95d4633SHajimu UMEMOTO 3120f95d4633SHajimu UMEMOTO /* validate the interface index if specified. */ 3121f95d4633SHajimu UMEMOTO if (pktinfo->ipi6_ifindex > if_index || 3122f95d4633SHajimu UMEMOTO pktinfo->ipi6_ifindex < 0) { 3123f95d4633SHajimu UMEMOTO return (ENXIO); 3124f95d4633SHajimu UMEMOTO } 3125f95d4633SHajimu UMEMOTO if (pktinfo->ipi6_ifindex) { 3126f95d4633SHajimu UMEMOTO ifp = ifnet_byindex(pktinfo->ipi6_ifindex); 3127f95d4633SHajimu UMEMOTO if (ifp == NULL) 312882cd038dSYoshinobu Inoue return (ENXIO); 312982cd038dSYoshinobu Inoue } 313082cd038dSYoshinobu Inoue 313133841545SHajimu UMEMOTO /* 3132f95d4633SHajimu UMEMOTO * We store the address anyway, and let in6_selectsrc() 3133f95d4633SHajimu UMEMOTO * validate the specified address. This is because ipi6_addr 3134f95d4633SHajimu UMEMOTO * may not have enough information about its scope zone, and 3135f95d4633SHajimu UMEMOTO * we may need additional information (such as outgoing 3136f95d4633SHajimu UMEMOTO * interface or the scope zone of a destination address) to 3137f95d4633SHajimu UMEMOTO * disambiguate the scope. 3138f95d4633SHajimu UMEMOTO * XXX: the delay of the validation may confuse the 3139f95d4633SHajimu UMEMOTO * application when it is used as a sticky option. 314033841545SHajimu UMEMOTO */ 3141f95d4633SHajimu UMEMOTO if (sticky) { 3142f95d4633SHajimu UMEMOTO if (opt->ip6po_pktinfo == NULL) { 3143f95d4633SHajimu UMEMOTO opt->ip6po_pktinfo = malloc(sizeof(*pktinfo), 3144f95d4633SHajimu UMEMOTO M_IP6OPT, M_WAITOK); 314582cd038dSYoshinobu Inoue } 3146f95d4633SHajimu UMEMOTO bcopy(pktinfo, opt->ip6po_pktinfo, sizeof(*pktinfo)); 3147f95d4633SHajimu UMEMOTO } else 3148f95d4633SHajimu UMEMOTO opt->ip6po_pktinfo = pktinfo; 314982cd038dSYoshinobu Inoue break; 3150f95d4633SHajimu UMEMOTO } 315182cd038dSYoshinobu Inoue 3152f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 315382cd038dSYoshinobu Inoue case IPV6_HOPLIMIT: 3154f95d4633SHajimu UMEMOTO { 3155f95d4633SHajimu UMEMOTO int *hlimp; 3156f95d4633SHajimu UMEMOTO 3157f95d4633SHajimu UMEMOTO /* 3158f95d4633SHajimu UMEMOTO * RFC 3542 deprecated the usage of sticky IPV6_HOPLIMIT 3159f95d4633SHajimu UMEMOTO * to simplify the ordering among hoplimit options. 3160f95d4633SHajimu UMEMOTO */ 3161f95d4633SHajimu UMEMOTO if (optname == IPV6_HOPLIMIT && sticky) 3162f95d4633SHajimu UMEMOTO return (ENOPROTOOPT); 3163f95d4633SHajimu UMEMOTO 3164f95d4633SHajimu UMEMOTO if (len != sizeof(int)) 3165f95d4633SHajimu UMEMOTO return (EINVAL); 3166f95d4633SHajimu UMEMOTO hlimp = (int *)buf; 3167f95d4633SHajimu UMEMOTO if (*hlimp < -1 || *hlimp > 255) 316882cd038dSYoshinobu Inoue return (EINVAL); 316982cd038dSYoshinobu Inoue 3170f95d4633SHajimu UMEMOTO opt->ip6po_hlim = *hlimp; 317182cd038dSYoshinobu Inoue break; 3172f95d4633SHajimu UMEMOTO } 317382cd038dSYoshinobu Inoue 3174f95d4633SHajimu UMEMOTO case IPV6_TCLASS: 3175f95d4633SHajimu UMEMOTO { 3176f95d4633SHajimu UMEMOTO int tclass; 3177f95d4633SHajimu UMEMOTO 3178f95d4633SHajimu UMEMOTO if (len != sizeof(int)) 3179f95d4633SHajimu UMEMOTO return (EINVAL); 3180f95d4633SHajimu UMEMOTO tclass = *(int *)buf; 3181f95d4633SHajimu UMEMOTO if (tclass < -1 || tclass > 255) 3182f95d4633SHajimu UMEMOTO return (EINVAL); 3183f95d4633SHajimu UMEMOTO 3184f95d4633SHajimu UMEMOTO opt->ip6po_tclass = tclass; 3185f95d4633SHajimu UMEMOTO break; 3186f95d4633SHajimu UMEMOTO } 3187f95d4633SHajimu UMEMOTO 3188f95d4633SHajimu UMEMOTO case IPV6_2292NEXTHOP: 318982cd038dSYoshinobu Inoue case IPV6_NEXTHOP: 319082cd038dSYoshinobu Inoue if (!priv) 319182cd038dSYoshinobu Inoue return (EPERM); 319233841545SHajimu UMEMOTO 3193f95d4633SHajimu UMEMOTO if (len == 0) { /* just remove the option */ 3194f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_NEXTHOP); 3195f95d4633SHajimu UMEMOTO break; 3196f95d4633SHajimu UMEMOTO } 3197f95d4633SHajimu UMEMOTO 319833841545SHajimu UMEMOTO /* check if cmsg_len is large enough for sa_len */ 3199f95d4633SHajimu UMEMOTO if (len < sizeof(struct sockaddr) || len < *buf) 320082cd038dSYoshinobu Inoue return (EINVAL); 320182cd038dSYoshinobu Inoue 3202f95d4633SHajimu UMEMOTO switch (((struct sockaddr *)buf)->sa_family) { 3203f95d4633SHajimu UMEMOTO case AF_INET6: 3204f95d4633SHajimu UMEMOTO { 3205f95d4633SHajimu UMEMOTO struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *)buf; 3206f95d4633SHajimu UMEMOTO #if 0 3207f95d4633SHajimu UMEMOTO int error; 3208f95d4633SHajimu UMEMOTO #endif 3209f95d4633SHajimu UMEMOTO 3210f95d4633SHajimu UMEMOTO if (sa6->sin6_len != sizeof(struct sockaddr_in6)) 3211f95d4633SHajimu UMEMOTO return (EINVAL); 3212f95d4633SHajimu UMEMOTO 3213f95d4633SHajimu UMEMOTO if (IN6_IS_ADDR_UNSPECIFIED(&sa6->sin6_addr) || 3214f95d4633SHajimu UMEMOTO IN6_IS_ADDR_MULTICAST(&sa6->sin6_addr)) { 3215f95d4633SHajimu UMEMOTO return (EINVAL); 3216f95d4633SHajimu UMEMOTO } 3217f95d4633SHajimu UMEMOTO #if 0 3218f95d4633SHajimu UMEMOTO if ((error = scope6_check_id(sa6, ip6_use_defzone)) 3219f95d4633SHajimu UMEMOTO != 0) { 3220f95d4633SHajimu UMEMOTO return (error); 3221f95d4633SHajimu UMEMOTO } 3222f95d4633SHajimu UMEMOTO #endif 3223f95d4633SHajimu UMEMOTO sa6->sin6_scope_id = 0; /* XXX */ 3224f95d4633SHajimu UMEMOTO break; 3225f95d4633SHajimu UMEMOTO } 3226f95d4633SHajimu UMEMOTO case AF_LINK: /* should eventually be supported */ 3227f95d4633SHajimu UMEMOTO default: 3228f95d4633SHajimu UMEMOTO return (EAFNOSUPPORT); 3229f95d4633SHajimu UMEMOTO } 3230f95d4633SHajimu UMEMOTO 3231f95d4633SHajimu UMEMOTO /* turn off the previous option, then set the new option. */ 3232f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_NEXTHOP); 3233f95d4633SHajimu UMEMOTO if (sticky) { 3234f95d4633SHajimu UMEMOTO opt->ip6po_nexthop = malloc(*buf, M_IP6OPT, M_WAITOK); 3235f95d4633SHajimu UMEMOTO bcopy(buf, opt->ip6po_nexthop, *buf); 323633841545SHajimu UMEMOTO } else 3237f95d4633SHajimu UMEMOTO opt->ip6po_nexthop = (struct sockaddr *)buf; 323882cd038dSYoshinobu Inoue break; 323982cd038dSYoshinobu Inoue 3240f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 324182cd038dSYoshinobu Inoue case IPV6_HOPOPTS: 324233841545SHajimu UMEMOTO { 324333841545SHajimu UMEMOTO struct ip6_hbh *hbh; 324433841545SHajimu UMEMOTO int hbhlen; 324533841545SHajimu UMEMOTO 3246f95d4633SHajimu UMEMOTO /* 3247f95d4633SHajimu UMEMOTO * XXX: We don't allow a non-privileged user to set ANY HbH 3248f95d4633SHajimu UMEMOTO * options, since per-option restriction has too much 3249f95d4633SHajimu UMEMOTO * overhead. 3250f95d4633SHajimu UMEMOTO */ 3251f95d4633SHajimu UMEMOTO if (!priv) 3252f95d4633SHajimu UMEMOTO return (EPERM); 3253f95d4633SHajimu UMEMOTO 3254f95d4633SHajimu UMEMOTO if (len == 0) { 3255f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_HOPOPTS); 3256f95d4633SHajimu UMEMOTO break; /* just remove the option */ 3257f95d4633SHajimu UMEMOTO } 3258f95d4633SHajimu UMEMOTO 3259f95d4633SHajimu UMEMOTO /* message length validation */ 3260f95d4633SHajimu UMEMOTO if (len < sizeof(struct ip6_hbh)) 326182cd038dSYoshinobu Inoue return (EINVAL); 3262f95d4633SHajimu UMEMOTO hbh = (struct ip6_hbh *)buf; 326333841545SHajimu UMEMOTO hbhlen = (hbh->ip6h_len + 1) << 3; 3264f95d4633SHajimu UMEMOTO if (len != hbhlen) 326582cd038dSYoshinobu Inoue return (EINVAL); 326633841545SHajimu UMEMOTO 3267f95d4633SHajimu UMEMOTO /* turn off the previous option, then set the new option. */ 3268f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_HOPOPTS); 3269f95d4633SHajimu UMEMOTO if (sticky) { 3270f95d4633SHajimu UMEMOTO opt->ip6po_hbh = malloc(hbhlen, M_IP6OPT, M_WAITOK); 327133841545SHajimu UMEMOTO bcopy(hbh, opt->ip6po_hbh, hbhlen); 327233841545SHajimu UMEMOTO } else 327333841545SHajimu UMEMOTO opt->ip6po_hbh = hbh; 3274f95d4633SHajimu UMEMOTO 327582cd038dSYoshinobu Inoue break; 327633841545SHajimu UMEMOTO } 327782cd038dSYoshinobu Inoue 3278f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 327982cd038dSYoshinobu Inoue case IPV6_DSTOPTS: 3280f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 328133841545SHajimu UMEMOTO { 3282f95d4633SHajimu UMEMOTO struct ip6_dest *dest, **newdest = NULL; 328333841545SHajimu UMEMOTO int destlen; 328433841545SHajimu UMEMOTO 3285f95d4633SHajimu UMEMOTO if (!priv) /* XXX: see the comment for IPV6_HOPOPTS */ 3286f95d4633SHajimu UMEMOTO return (EPERM); 3287f95d4633SHajimu UMEMOTO 3288f95d4633SHajimu UMEMOTO if (len == 0) { 3289f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, optname); 3290f95d4633SHajimu UMEMOTO break; /* just remove the option */ 3291f95d4633SHajimu UMEMOTO } 3292f95d4633SHajimu UMEMOTO 3293f95d4633SHajimu UMEMOTO /* message length validation */ 3294f95d4633SHajimu UMEMOTO if (len < sizeof(struct ip6_dest)) 329582cd038dSYoshinobu Inoue return (EINVAL); 3296f95d4633SHajimu UMEMOTO dest = (struct ip6_dest *)buf; 329733841545SHajimu UMEMOTO destlen = (dest->ip6d_len + 1) << 3; 3298f95d4633SHajimu UMEMOTO if (len != destlen) 329933841545SHajimu UMEMOTO return (EINVAL); 330082cd038dSYoshinobu Inoue 330182cd038dSYoshinobu Inoue /* 3302f95d4633SHajimu UMEMOTO * Determine the position that the destination options header 3303f95d4633SHajimu UMEMOTO * should be inserted; before or after the routing header. 3304f95d4633SHajimu UMEMOTO */ 3305f95d4633SHajimu UMEMOTO switch (optname) { 3306f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 3307f95d4633SHajimu UMEMOTO /* 3308f95d4633SHajimu UMEMOTO * The old advacned API is ambiguous on this point. 3309f95d4633SHajimu UMEMOTO * Our approach is to determine the position based 3310f95d4633SHajimu UMEMOTO * according to the existence of a routing header. 3311f95d4633SHajimu UMEMOTO * Note, however, that this depends on the order of the 3312f95d4633SHajimu UMEMOTO * extension headers in the ancillary data; the 1st 3313f95d4633SHajimu UMEMOTO * part of the destination options header must appear 3314f95d4633SHajimu UMEMOTO * before the routing header in the ancillary data, 3315f95d4633SHajimu UMEMOTO * too. 3316f95d4633SHajimu UMEMOTO * RFC2292bis solved the ambiguity by introducing 3317f95d4633SHajimu UMEMOTO * separate ancillary data or option types. 331882cd038dSYoshinobu Inoue */ 331933841545SHajimu UMEMOTO if (opt->ip6po_rthdr == NULL) 332033841545SHajimu UMEMOTO newdest = &opt->ip6po_dest1; 332133841545SHajimu UMEMOTO else 332233841545SHajimu UMEMOTO newdest = &opt->ip6po_dest2; 3323f95d4633SHajimu UMEMOTO break; 3324f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 3325f95d4633SHajimu UMEMOTO newdest = &opt->ip6po_dest1; 3326f95d4633SHajimu UMEMOTO break; 3327f95d4633SHajimu UMEMOTO case IPV6_DSTOPTS: 3328f95d4633SHajimu UMEMOTO newdest = &opt->ip6po_dest2; 3329f95d4633SHajimu UMEMOTO break; 3330f95d4633SHajimu UMEMOTO } 333133841545SHajimu UMEMOTO 3332f95d4633SHajimu UMEMOTO /* turn off the previous option, then set the new option. */ 3333f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, optname); 3334f95d4633SHajimu UMEMOTO if (sticky) { 3335a163d034SWarner Losh *newdest = malloc(destlen, M_IP6OPT, M_WAITOK); 333633841545SHajimu UMEMOTO bcopy(dest, *newdest, destlen); 333733841545SHajimu UMEMOTO } else 333833841545SHajimu UMEMOTO *newdest = dest; 333933841545SHajimu UMEMOTO 334082cd038dSYoshinobu Inoue break; 334133841545SHajimu UMEMOTO } 334282cd038dSYoshinobu Inoue 3343f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 334482cd038dSYoshinobu Inoue case IPV6_RTHDR: 334533841545SHajimu UMEMOTO { 334633841545SHajimu UMEMOTO struct ip6_rthdr *rth; 334733841545SHajimu UMEMOTO int rthlen; 334833841545SHajimu UMEMOTO 3349f95d4633SHajimu UMEMOTO if (len == 0) { 3350f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_RTHDR); 3351f95d4633SHajimu UMEMOTO break; /* just remove the option */ 3352f95d4633SHajimu UMEMOTO } 3353f95d4633SHajimu UMEMOTO 3354f95d4633SHajimu UMEMOTO /* message length validation */ 3355f95d4633SHajimu UMEMOTO if (len < sizeof(struct ip6_rthdr)) 335682cd038dSYoshinobu Inoue return (EINVAL); 3357f95d4633SHajimu UMEMOTO rth = (struct ip6_rthdr *)buf; 335833841545SHajimu UMEMOTO rthlen = (rth->ip6r_len + 1) << 3; 3359f95d4633SHajimu UMEMOTO if (len != rthlen) 336082cd038dSYoshinobu Inoue return (EINVAL); 336133841545SHajimu UMEMOTO 336233841545SHajimu UMEMOTO switch (rth->ip6r_type) { 336382cd038dSYoshinobu Inoue case IPV6_RTHDR_TYPE_0: 3364f95d4633SHajimu UMEMOTO if (rth->ip6r_len == 0) /* must contain one addr */ 336533841545SHajimu UMEMOTO return (EINVAL); 3366f95d4633SHajimu UMEMOTO if (rth->ip6r_len % 2) /* length must be even */ 336733841545SHajimu UMEMOTO return (EINVAL); 336833841545SHajimu UMEMOTO if (rth->ip6r_len / 2 != rth->ip6r_segleft) 336982cd038dSYoshinobu Inoue return (EINVAL); 337082cd038dSYoshinobu Inoue break; 337182cd038dSYoshinobu Inoue default: 337233841545SHajimu UMEMOTO return (EINVAL); /* not supported */ 337382cd038dSYoshinobu Inoue } 337433841545SHajimu UMEMOTO 3375f95d4633SHajimu UMEMOTO /* turn off the previous option */ 3376f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_RTHDR); 3377f95d4633SHajimu UMEMOTO if (sticky) { 3378f95d4633SHajimu UMEMOTO opt->ip6po_rthdr = malloc(rthlen, M_IP6OPT, M_WAITOK); 337933841545SHajimu UMEMOTO bcopy(rth, opt->ip6po_rthdr, rthlen); 338033841545SHajimu UMEMOTO } else 338133841545SHajimu UMEMOTO opt->ip6po_rthdr = rth; 338233841545SHajimu UMEMOTO 338382cd038dSYoshinobu Inoue break; 338433841545SHajimu UMEMOTO } 338582cd038dSYoshinobu Inoue 3386f95d4633SHajimu UMEMOTO case IPV6_USE_MIN_MTU: 3387f95d4633SHajimu UMEMOTO if (len != sizeof(int)) 3388f95d4633SHajimu UMEMOTO return (EINVAL); 3389f95d4633SHajimu UMEMOTO minmtupolicy = *(int *)buf; 3390f95d4633SHajimu UMEMOTO if (minmtupolicy != IP6PO_MINMTU_MCASTONLY && 3391f95d4633SHajimu UMEMOTO minmtupolicy != IP6PO_MINMTU_DISABLE && 3392f95d4633SHajimu UMEMOTO minmtupolicy != IP6PO_MINMTU_ALL) { 3393f95d4633SHajimu UMEMOTO return (EINVAL); 3394f95d4633SHajimu UMEMOTO } 3395f95d4633SHajimu UMEMOTO opt->ip6po_minmtu = minmtupolicy; 3396f95d4633SHajimu UMEMOTO break; 3397f95d4633SHajimu UMEMOTO 3398f95d4633SHajimu UMEMOTO case IPV6_DONTFRAG: 3399f95d4633SHajimu UMEMOTO if (len != sizeof(int)) 3400f95d4633SHajimu UMEMOTO return (EINVAL); 3401f95d4633SHajimu UMEMOTO 3402f95d4633SHajimu UMEMOTO if (uproto == IPPROTO_TCP || *(int *)buf == 0) { 3403f95d4633SHajimu UMEMOTO /* 3404f95d4633SHajimu UMEMOTO * we ignore this option for TCP sockets. 3405f95d4633SHajimu UMEMOTO * (rfc2292bis leaves this case unspecified.) 3406f95d4633SHajimu UMEMOTO */ 3407f95d4633SHajimu UMEMOTO opt->ip6po_flags &= ~IP6PO_DONTFRAG; 3408f95d4633SHajimu UMEMOTO } else 3409f95d4633SHajimu UMEMOTO opt->ip6po_flags |= IP6PO_DONTFRAG; 3410f95d4633SHajimu UMEMOTO break; 3411f95d4633SHajimu UMEMOTO 3412f95d4633SHajimu UMEMOTO case IPV6_PREFER_TEMPADDR: 3413f95d4633SHajimu UMEMOTO if (len != sizeof(int)) 3414f95d4633SHajimu UMEMOTO return (EINVAL); 3415f95d4633SHajimu UMEMOTO preftemp = *(int *)buf; 3416f95d4633SHajimu UMEMOTO if (preftemp != IP6PO_TEMPADDR_SYSTEM && 3417f95d4633SHajimu UMEMOTO preftemp != IP6PO_TEMPADDR_NOTPREFER && 3418f95d4633SHajimu UMEMOTO preftemp != IP6PO_TEMPADDR_PREFER) { 3419f95d4633SHajimu UMEMOTO return (EINVAL); 3420f95d4633SHajimu UMEMOTO } 3421f95d4633SHajimu UMEMOTO opt->ip6po_prefer_tempaddr = preftemp; 3422f95d4633SHajimu UMEMOTO break; 3423f95d4633SHajimu UMEMOTO 342482cd038dSYoshinobu Inoue default: 342582cd038dSYoshinobu Inoue return (ENOPROTOOPT); 3426f95d4633SHajimu UMEMOTO } /* end of switch */ 342782cd038dSYoshinobu Inoue 342882cd038dSYoshinobu Inoue return (0); 342982cd038dSYoshinobu Inoue } 343082cd038dSYoshinobu Inoue 343182cd038dSYoshinobu Inoue /* 343282cd038dSYoshinobu Inoue * Routine called from ip6_output() to loop back a copy of an IP6 multicast 343382cd038dSYoshinobu Inoue * packet to the input queue of a specified interface. Note that this 343482cd038dSYoshinobu Inoue * calls the output routine of the loopback "driver", but with an interface 343582cd038dSYoshinobu Inoue * pointer that might NOT be &loif -- easier than replicating that code here. 343682cd038dSYoshinobu Inoue */ 343782cd038dSYoshinobu Inoue void 343882cd038dSYoshinobu Inoue ip6_mloopback(ifp, m, dst) 343982cd038dSYoshinobu Inoue struct ifnet *ifp; 344033841545SHajimu UMEMOTO struct mbuf *m; 344133841545SHajimu UMEMOTO struct sockaddr_in6 *dst; 344282cd038dSYoshinobu Inoue { 344382cd038dSYoshinobu Inoue struct mbuf *copym; 3444686cdd19SJun-ichiro itojun Hagino struct ip6_hdr *ip6; 344582cd038dSYoshinobu Inoue 344682cd038dSYoshinobu Inoue copym = m_copy(m, 0, M_COPYALL); 3447686cdd19SJun-ichiro itojun Hagino if (copym == NULL) 3448686cdd19SJun-ichiro itojun Hagino return; 3449686cdd19SJun-ichiro itojun Hagino 3450686cdd19SJun-ichiro itojun Hagino /* 3451686cdd19SJun-ichiro itojun Hagino * Make sure to deep-copy IPv6 header portion in case the data 3452686cdd19SJun-ichiro itojun Hagino * is in an mbuf cluster, so that we can safely override the IPv6 3453686cdd19SJun-ichiro itojun Hagino * header portion later. 3454686cdd19SJun-ichiro itojun Hagino */ 3455686cdd19SJun-ichiro itojun Hagino if ((copym->m_flags & M_EXT) != 0 || 3456686cdd19SJun-ichiro itojun Hagino copym->m_len < sizeof(struct ip6_hdr)) { 3457686cdd19SJun-ichiro itojun Hagino copym = m_pullup(copym, sizeof(struct ip6_hdr)); 3458686cdd19SJun-ichiro itojun Hagino if (copym == NULL) 3459686cdd19SJun-ichiro itojun Hagino return; 346082cd038dSYoshinobu Inoue } 3461686cdd19SJun-ichiro itojun Hagino 3462686cdd19SJun-ichiro itojun Hagino #ifdef DIAGNOSTIC 3463686cdd19SJun-ichiro itojun Hagino if (copym->m_len < sizeof(*ip6)) { 3464686cdd19SJun-ichiro itojun Hagino m_freem(copym); 3465686cdd19SJun-ichiro itojun Hagino return; 3466686cdd19SJun-ichiro itojun Hagino } 3467686cdd19SJun-ichiro itojun Hagino #endif 3468686cdd19SJun-ichiro itojun Hagino 3469686cdd19SJun-ichiro itojun Hagino ip6 = mtod(copym, struct ip6_hdr *); 347033841545SHajimu UMEMOTO /* 347133841545SHajimu UMEMOTO * clear embedded scope identifiers if necessary. 347233841545SHajimu UMEMOTO * in6_clearscope will touch the addresses only when necessary. 347333841545SHajimu UMEMOTO */ 347433841545SHajimu UMEMOTO in6_clearscope(&ip6->ip6_src); 347533841545SHajimu UMEMOTO in6_clearscope(&ip6->ip6_dst); 3476686cdd19SJun-ichiro itojun Hagino 3477a89ec05eSPeter Wemm (void)if_simloop(ifp, copym, dst->sin6_family, 0); 347882cd038dSYoshinobu Inoue } 347982cd038dSYoshinobu Inoue 348082cd038dSYoshinobu Inoue /* 348182cd038dSYoshinobu Inoue * Chop IPv6 header off from the payload. 348282cd038dSYoshinobu Inoue */ 348382cd038dSYoshinobu Inoue static int 348482cd038dSYoshinobu Inoue ip6_splithdr(m, exthdrs) 348582cd038dSYoshinobu Inoue struct mbuf *m; 348682cd038dSYoshinobu Inoue struct ip6_exthdrs *exthdrs; 348782cd038dSYoshinobu Inoue { 348882cd038dSYoshinobu Inoue struct mbuf *mh; 348982cd038dSYoshinobu Inoue struct ip6_hdr *ip6; 349082cd038dSYoshinobu Inoue 349182cd038dSYoshinobu Inoue ip6 = mtod(m, struct ip6_hdr *); 349282cd038dSYoshinobu Inoue if (m->m_len > sizeof(*ip6)) { 3493a163d034SWarner Losh MGETHDR(mh, M_DONTWAIT, MT_HEADER); 349482cd038dSYoshinobu Inoue if (mh == 0) { 349582cd038dSYoshinobu Inoue m_freem(m); 349682cd038dSYoshinobu Inoue return ENOBUFS; 349782cd038dSYoshinobu Inoue } 34989967cafcSSam Leffler M_MOVE_PKTHDR(mh, m); 349982cd038dSYoshinobu Inoue MH_ALIGN(mh, sizeof(*ip6)); 350082cd038dSYoshinobu Inoue m->m_len -= sizeof(*ip6); 350182cd038dSYoshinobu Inoue m->m_data += sizeof(*ip6); 350282cd038dSYoshinobu Inoue mh->m_next = m; 350382cd038dSYoshinobu Inoue m = mh; 350482cd038dSYoshinobu Inoue m->m_len = sizeof(*ip6); 350582cd038dSYoshinobu Inoue bcopy((caddr_t)ip6, mtod(m, caddr_t), sizeof(*ip6)); 350682cd038dSYoshinobu Inoue } 350782cd038dSYoshinobu Inoue exthdrs->ip6e_ip6 = m; 350882cd038dSYoshinobu Inoue return 0; 350982cd038dSYoshinobu Inoue } 351082cd038dSYoshinobu Inoue 351182cd038dSYoshinobu Inoue /* 351282cd038dSYoshinobu Inoue * Compute IPv6 extension header length. 351382cd038dSYoshinobu Inoue */ 351482cd038dSYoshinobu Inoue int 351582cd038dSYoshinobu Inoue ip6_optlen(in6p) 351682cd038dSYoshinobu Inoue struct in6pcb *in6p; 351782cd038dSYoshinobu Inoue { 351882cd038dSYoshinobu Inoue int len; 351982cd038dSYoshinobu Inoue 352082cd038dSYoshinobu Inoue if (!in6p->in6p_outputopts) 352182cd038dSYoshinobu Inoue return 0; 352282cd038dSYoshinobu Inoue 352382cd038dSYoshinobu Inoue len = 0; 352482cd038dSYoshinobu Inoue #define elen(x) \ 352582cd038dSYoshinobu Inoue (((struct ip6_ext *)(x)) ? (((struct ip6_ext *)(x))->ip6e_len + 1) << 3 : 0) 352682cd038dSYoshinobu Inoue 352782cd038dSYoshinobu Inoue len += elen(in6p->in6p_outputopts->ip6po_hbh); 352833841545SHajimu UMEMOTO if (in6p->in6p_outputopts->ip6po_rthdr) 352933841545SHajimu UMEMOTO /* dest1 is valid with rthdr only */ 353082cd038dSYoshinobu Inoue len += elen(in6p->in6p_outputopts->ip6po_dest1); 353182cd038dSYoshinobu Inoue len += elen(in6p->in6p_outputopts->ip6po_rthdr); 353282cd038dSYoshinobu Inoue len += elen(in6p->in6p_outputopts->ip6po_dest2); 353382cd038dSYoshinobu Inoue return len; 353482cd038dSYoshinobu Inoue #undef elen 353582cd038dSYoshinobu Inoue } 3536