xref: /freebsd/sys/netinet6/ip6_output.c (revision 283f9f8a3c1f45ceff183c022b908e3d77ffc532)
1686cdd19SJun-ichiro itojun Hagino /*	$FreeBSD$	*/
288ff5695SSUZUKI Shinsuke /*	$KAME: ip6_output.c,v 1.279 2002/01/26 06:12:30 jinmei Exp $	*/
3686cdd19SJun-ichiro itojun Hagino 
4caf43b02SWarner Losh /*-
582cd038dSYoshinobu Inoue  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
682cd038dSYoshinobu Inoue  * All rights reserved.
782cd038dSYoshinobu Inoue  *
882cd038dSYoshinobu Inoue  * Redistribution and use in source and binary forms, with or without
982cd038dSYoshinobu Inoue  * modification, are permitted provided that the following conditions
1082cd038dSYoshinobu Inoue  * are met:
1182cd038dSYoshinobu Inoue  * 1. Redistributions of source code must retain the above copyright
1282cd038dSYoshinobu Inoue  *    notice, this list of conditions and the following disclaimer.
1382cd038dSYoshinobu Inoue  * 2. Redistributions in binary form must reproduce the above copyright
1482cd038dSYoshinobu Inoue  *    notice, this list of conditions and the following disclaimer in the
1582cd038dSYoshinobu Inoue  *    documentation and/or other materials provided with the distribution.
1682cd038dSYoshinobu Inoue  * 3. Neither the name of the project nor the names of its contributors
1782cd038dSYoshinobu Inoue  *    may be used to endorse or promote products derived from this software
1882cd038dSYoshinobu Inoue  *    without specific prior written permission.
1982cd038dSYoshinobu Inoue  *
2082cd038dSYoshinobu Inoue  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
2182cd038dSYoshinobu Inoue  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
2282cd038dSYoshinobu Inoue  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
2382cd038dSYoshinobu Inoue  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
2482cd038dSYoshinobu Inoue  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
2582cd038dSYoshinobu Inoue  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
2682cd038dSYoshinobu Inoue  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
2782cd038dSYoshinobu Inoue  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
2882cd038dSYoshinobu Inoue  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
2982cd038dSYoshinobu Inoue  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
3082cd038dSYoshinobu Inoue  * SUCH DAMAGE.
3182cd038dSYoshinobu Inoue  */
3282cd038dSYoshinobu Inoue 
33caf43b02SWarner Losh /*-
3482cd038dSYoshinobu Inoue  * Copyright (c) 1982, 1986, 1988, 1990, 1993
3582cd038dSYoshinobu Inoue  *	The Regents of the University of California.  All rights reserved.
3682cd038dSYoshinobu Inoue  *
3782cd038dSYoshinobu Inoue  * Redistribution and use in source and binary forms, with or without
3882cd038dSYoshinobu Inoue  * modification, are permitted provided that the following conditions
3982cd038dSYoshinobu Inoue  * are met:
4082cd038dSYoshinobu Inoue  * 1. Redistributions of source code must retain the above copyright
4182cd038dSYoshinobu Inoue  *    notice, this list of conditions and the following disclaimer.
4282cd038dSYoshinobu Inoue  * 2. Redistributions in binary form must reproduce the above copyright
4382cd038dSYoshinobu Inoue  *    notice, this list of conditions and the following disclaimer in the
4482cd038dSYoshinobu Inoue  *    documentation and/or other materials provided with the distribution.
4582cd038dSYoshinobu Inoue  * 4. Neither the name of the University nor the names of its contributors
4682cd038dSYoshinobu Inoue  *    may be used to endorse or promote products derived from this software
4782cd038dSYoshinobu Inoue  *    without specific prior written permission.
4882cd038dSYoshinobu Inoue  *
4982cd038dSYoshinobu Inoue  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
5082cd038dSYoshinobu Inoue  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
5182cd038dSYoshinobu Inoue  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
5282cd038dSYoshinobu Inoue  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
5382cd038dSYoshinobu Inoue  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
5482cd038dSYoshinobu Inoue  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
5582cd038dSYoshinobu Inoue  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
5682cd038dSYoshinobu Inoue  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
5782cd038dSYoshinobu Inoue  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
5882cd038dSYoshinobu Inoue  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
5982cd038dSYoshinobu Inoue  * SUCH DAMAGE.
6082cd038dSYoshinobu Inoue  *
6182cd038dSYoshinobu Inoue  *	@(#)ip_output.c	8.3 (Berkeley) 1/21/94
6282cd038dSYoshinobu Inoue  */
6382cd038dSYoshinobu Inoue 
64210d0432SYoshinobu Inoue #include "opt_ip6fw.h"
65686cdd19SJun-ichiro itojun Hagino #include "opt_inet.h"
66686cdd19SJun-ichiro itojun Hagino #include "opt_inet6.h"
67686cdd19SJun-ichiro itojun Hagino #include "opt_ipsec.h"
6882cd038dSYoshinobu Inoue 
6982cd038dSYoshinobu Inoue #include <sys/param.h>
7082cd038dSYoshinobu Inoue #include <sys/malloc.h>
7182cd038dSYoshinobu Inoue #include <sys/mbuf.h>
72b40ce416SJulian Elischer #include <sys/proc.h>
7382cd038dSYoshinobu Inoue #include <sys/errno.h>
7482cd038dSYoshinobu Inoue #include <sys/protosw.h>
7582cd038dSYoshinobu Inoue #include <sys/socket.h>
7682cd038dSYoshinobu Inoue #include <sys/socketvar.h>
7782cd038dSYoshinobu Inoue #include <sys/systm.h>
7882cd038dSYoshinobu Inoue #include <sys/kernel.h>
7982cd038dSYoshinobu Inoue 
8082cd038dSYoshinobu Inoue #include <net/if.h>
8182cd038dSYoshinobu Inoue #include <net/route.h>
82c4ac87eaSDarren Reed #include <net/pfil.h>
8382cd038dSYoshinobu Inoue 
8482cd038dSYoshinobu Inoue #include <netinet/in.h>
8582cd038dSYoshinobu Inoue #include <netinet/in_var.h>
8633841545SHajimu UMEMOTO #include <netinet6/in6_var.h>
87686cdd19SJun-ichiro itojun Hagino #include <netinet/ip6.h>
88686cdd19SJun-ichiro itojun Hagino #include <netinet/icmp6.h>
8982cd038dSYoshinobu Inoue #include <netinet6/ip6_var.h>
90686cdd19SJun-ichiro itojun Hagino #include <netinet/in_pcb.h>
9197d8d152SAndre Oppermann #include <netinet/tcp_var.h>
9282cd038dSYoshinobu Inoue #include <netinet6/nd6.h>
9382cd038dSYoshinobu Inoue 
9482cd038dSYoshinobu Inoue #ifdef IPSEC
9582cd038dSYoshinobu Inoue #include <netinet6/ipsec.h>
96686cdd19SJun-ichiro itojun Hagino #ifdef INET6
9782cd038dSYoshinobu Inoue #include <netinet6/ipsec6.h>
986a800098SYoshinobu Inoue #endif
99686cdd19SJun-ichiro itojun Hagino #include <netkey/key.h>
10082cd038dSYoshinobu Inoue #endif /* IPSEC */
10182cd038dSYoshinobu Inoue 
102b9234fafSSam Leffler #ifdef FAST_IPSEC
103b9234fafSSam Leffler #include <netipsec/ipsec.h>
104b9234fafSSam Leffler #include <netipsec/ipsec6.h>
105b9234fafSSam Leffler #include <netipsec/key.h>
106b9234fafSSam Leffler #endif /* FAST_IPSEC */
107b9234fafSSam Leffler 
10882cd038dSYoshinobu Inoue #include <netinet6/ip6_fw.h>
10982cd038dSYoshinobu Inoue 
11033841545SHajimu UMEMOTO #include <net/net_osdep.h>
11133841545SHajimu UMEMOTO 
1121469c434SHajimu UMEMOTO #include <netinet6/ip6protosw.h>
1131469c434SHajimu UMEMOTO 
11482cd038dSYoshinobu Inoue static MALLOC_DEFINE(M_IPMOPTS, "ip6_moptions", "internet multicast options");
11582cd038dSYoshinobu Inoue 
11682cd038dSYoshinobu Inoue struct ip6_exthdrs {
11782cd038dSYoshinobu Inoue 	struct mbuf *ip6e_ip6;
11882cd038dSYoshinobu Inoue 	struct mbuf *ip6e_hbh;
11982cd038dSYoshinobu Inoue 	struct mbuf *ip6e_dest1;
12082cd038dSYoshinobu Inoue 	struct mbuf *ip6e_rthdr;
12182cd038dSYoshinobu Inoue 	struct mbuf *ip6e_dest2;
12282cd038dSYoshinobu Inoue };
12382cd038dSYoshinobu Inoue 
124f95d4633SHajimu UMEMOTO static int ip6_pcbopt __P((int, u_char *, int, struct ip6_pktopts **,
125f95d4633SHajimu UMEMOTO 			   int, int));
12682cd038dSYoshinobu Inoue static int ip6_pcbopts __P((struct ip6_pktopts **, struct mbuf *,
1277efe5d92SHajimu UMEMOTO 	struct socket *, struct sockopt *));
128f95d4633SHajimu UMEMOTO static int ip6_getpcbopt __P((struct ip6_pktopts *, int, struct sockopt *));
129f95d4633SHajimu UMEMOTO static int ip6_setpktoption __P((int, u_char *, int, struct ip6_pktopts *, int,
130f95d4633SHajimu UMEMOTO 	int, int, int));
131f95d4633SHajimu UMEMOTO 
13282cd038dSYoshinobu Inoue static int ip6_setmoptions __P((int, struct ip6_moptions **, struct mbuf *));
13382cd038dSYoshinobu Inoue static int ip6_getmoptions __P((int, struct ip6_moptions *, struct mbuf **));
13482cd038dSYoshinobu Inoue static int ip6_copyexthdr __P((struct mbuf **, caddr_t, int));
13582cd038dSYoshinobu Inoue static int ip6_insertfraghdr __P((struct mbuf *, struct mbuf *, int,
13682cd038dSYoshinobu Inoue 	struct ip6_frag **));
13782cd038dSYoshinobu Inoue static int ip6_insert_jumboopt __P((struct ip6_exthdrs *, u_int32_t));
13882cd038dSYoshinobu Inoue static int ip6_splithdr __P((struct mbuf *, struct ip6_exthdrs *));
13931b3783cSHajimu UMEMOTO static int ip6_getpmtu __P((struct route_in6 *, struct route_in6 *,
140f95d4633SHajimu UMEMOTO 	struct ifnet *, struct in6_addr *, u_long *, int *));
14182cd038dSYoshinobu Inoue 
1427efe5d92SHajimu UMEMOTO 
14382cd038dSYoshinobu Inoue /*
14482cd038dSYoshinobu Inoue  * IP6 output. The packet in mbuf chain m contains a skeletal IP6
14582cd038dSYoshinobu Inoue  * header (with pri, len, nxt, hlim, src, dst).
14682cd038dSYoshinobu Inoue  * This function may modify ver and hlim only.
14782cd038dSYoshinobu Inoue  * The mbuf chain containing the packet will be freed.
14882cd038dSYoshinobu Inoue  * The mbuf opt, if present, will not be freed.
14933841545SHajimu UMEMOTO  *
15033841545SHajimu UMEMOTO  * type of "mtu": rt_rmx.rmx_mtu is u_long, ifnet.ifr_mtu is int, and
15133841545SHajimu UMEMOTO  * nd_ifinfo.linkmtu is u_int32_t.  so we use u_long to hold largest one,
15233841545SHajimu UMEMOTO  * which is rt_rmx.rmx_mtu.
15382cd038dSYoshinobu Inoue  */
15482cd038dSYoshinobu Inoue int
1555d846453SSam Leffler ip6_output(m0, opt, ro, flags, im6o, ifpp, inp)
15682cd038dSYoshinobu Inoue 	struct mbuf *m0;
15782cd038dSYoshinobu Inoue 	struct ip6_pktopts *opt;
15882cd038dSYoshinobu Inoue 	struct route_in6 *ro;
15982cd038dSYoshinobu Inoue 	int flags;
16082cd038dSYoshinobu Inoue 	struct ip6_moptions *im6o;
16182cd038dSYoshinobu Inoue 	struct ifnet **ifpp;		/* XXX: just for statistics */
1625d846453SSam Leffler 	struct inpcb *inp;
16382cd038dSYoshinobu Inoue {
16482cd038dSYoshinobu Inoue 	struct ip6_hdr *ip6, *mhip6;
165686cdd19SJun-ichiro itojun Hagino 	struct ifnet *ifp, *origifp;
16682cd038dSYoshinobu Inoue 	struct mbuf *m = m0;
16782cd038dSYoshinobu Inoue 	int hlen, tlen, len, off;
16882cd038dSYoshinobu Inoue 	struct route_in6 ip6route;
16982cd038dSYoshinobu Inoue 	struct sockaddr_in6 *dst;
17082cd038dSYoshinobu Inoue 	int error = 0;
1715da9f8faSJosef Karthauser 	struct in6_ifaddr *ia = NULL;
17282cd038dSYoshinobu Inoue 	u_long mtu;
173f95d4633SHajimu UMEMOTO 	int alwaysfrag, dontfrag;
17482cd038dSYoshinobu Inoue 	u_int32_t optlen = 0, plen = 0, unfragpartlen = 0;
17582cd038dSYoshinobu Inoue 	struct ip6_exthdrs exthdrs;
17682cd038dSYoshinobu Inoue 	struct in6_addr finaldst;
17782cd038dSYoshinobu Inoue 	struct route_in6 *ro_pmtu = NULL;
17882cd038dSYoshinobu Inoue 	int hdrsplit = 0;
17982cd038dSYoshinobu Inoue 	int needipsec = 0;
180da0f4099SHajimu UMEMOTO #if defined(IPSEC) || defined(FAST_IPSEC)
181b9234fafSSam Leffler 	int needipsectun = 0;
182b9234fafSSam Leffler 	struct secpolicy *sp = NULL;
183da0f4099SHajimu UMEMOTO #endif /*IPSEC || FAST_IPSEC*/
184b9234fafSSam Leffler 
185b9234fafSSam Leffler 	ip6 = mtod(m, struct ip6_hdr *);
18603a1bc3eSSUZUKI Shinsuke 	finaldst = ip6->ip6_dst;
18782cd038dSYoshinobu Inoue 
18882cd038dSYoshinobu Inoue #define MAKE_EXTHDR(hp, mp)						\
189686cdd19SJun-ichiro itojun Hagino     do {								\
19082cd038dSYoshinobu Inoue 	if (hp) {							\
19182cd038dSYoshinobu Inoue 		struct ip6_ext *eh = (struct ip6_ext *)(hp);		\
19282cd038dSYoshinobu Inoue 		error = ip6_copyexthdr((mp), (caddr_t)(hp),		\
19382cd038dSYoshinobu Inoue 		    ((eh)->ip6e_len + 1) << 3);				\
19482cd038dSYoshinobu Inoue 		if (error)						\
19582cd038dSYoshinobu Inoue 			goto freehdrs;					\
19682cd038dSYoshinobu Inoue 	}								\
1977efe5d92SHajimu UMEMOTO     } while (/*CONSTCOND*/ 0)
19882cd038dSYoshinobu Inoue 
19982cd038dSYoshinobu Inoue 	bzero(&exthdrs, sizeof(exthdrs));
200686cdd19SJun-ichiro itojun Hagino 
20182cd038dSYoshinobu Inoue 	if (opt) {
20282cd038dSYoshinobu Inoue 		/* Hop-by-Hop options header */
20382cd038dSYoshinobu Inoue 		MAKE_EXTHDR(opt->ip6po_hbh, &exthdrs.ip6e_hbh);
20482cd038dSYoshinobu Inoue 		/* Destination options header(1st part) */
20529bc2c48SHajimu UMEMOTO 		if (opt->ip6po_rthdr) {
20629bc2c48SHajimu UMEMOTO 			/*
20729bc2c48SHajimu UMEMOTO 			 * Destination options header(1st part)
20829bc2c48SHajimu UMEMOTO 			 * This only makes sence with a routing header.
20929bc2c48SHajimu UMEMOTO 			 * See Section 9.2 of RFC 3542.
21029bc2c48SHajimu UMEMOTO 			 * Disabling this part just for MIP6 convenience is
21129bc2c48SHajimu UMEMOTO 			 * a bad idea.  We need to think carefully about a
21229bc2c48SHajimu UMEMOTO 			 * way to make the advanced API coexist with MIP6
21329bc2c48SHajimu UMEMOTO 			 * options, which might automatically be inserted in
21429bc2c48SHajimu UMEMOTO 			 * the kernel.
21529bc2c48SHajimu UMEMOTO 			 */
21682cd038dSYoshinobu Inoue 			MAKE_EXTHDR(opt->ip6po_dest1, &exthdrs.ip6e_dest1);
21729bc2c48SHajimu UMEMOTO 		}
21882cd038dSYoshinobu Inoue 		/* Routing header */
21982cd038dSYoshinobu Inoue 		MAKE_EXTHDR(opt->ip6po_rthdr, &exthdrs.ip6e_rthdr);
22082cd038dSYoshinobu Inoue 		/* Destination options header(2nd part) */
22182cd038dSYoshinobu Inoue 		MAKE_EXTHDR(opt->ip6po_dest2, &exthdrs.ip6e_dest2);
22282cd038dSYoshinobu Inoue 	}
22382cd038dSYoshinobu Inoue 
22482cd038dSYoshinobu Inoue #ifdef IPSEC
22582cd038dSYoshinobu Inoue 	/* get a security policy for this packet */
226f073c60fSHajimu UMEMOTO 	if (inp == NULL)
22782cd038dSYoshinobu Inoue 		sp = ipsec6_getpolicybyaddr(m, IPSEC_DIR_OUTBOUND, 0, &error);
22882cd038dSYoshinobu Inoue 	else
229f073c60fSHajimu UMEMOTO 		sp = ipsec6_getpolicybypcb(m, IPSEC_DIR_OUTBOUND, inp, &error);
23082cd038dSYoshinobu Inoue 
23182cd038dSYoshinobu Inoue 	if (sp == NULL) {
23282cd038dSYoshinobu Inoue 		ipsec6stat.out_inval++;
233686cdd19SJun-ichiro itojun Hagino 		goto freehdrs;
23482cd038dSYoshinobu Inoue 	}
23582cd038dSYoshinobu Inoue 
23682cd038dSYoshinobu Inoue 	error = 0;
23782cd038dSYoshinobu Inoue 
23882cd038dSYoshinobu Inoue 	/* check policy */
23982cd038dSYoshinobu Inoue 	switch (sp->policy) {
24082cd038dSYoshinobu Inoue 	case IPSEC_POLICY_DISCARD:
24182cd038dSYoshinobu Inoue 		/*
24282cd038dSYoshinobu Inoue 		 * This packet is just discarded.
24382cd038dSYoshinobu Inoue 		 */
24482cd038dSYoshinobu Inoue 		ipsec6stat.out_polvio++;
245686cdd19SJun-ichiro itojun Hagino 		goto freehdrs;
24682cd038dSYoshinobu Inoue 
24782cd038dSYoshinobu Inoue 	case IPSEC_POLICY_BYPASS:
24882cd038dSYoshinobu Inoue 	case IPSEC_POLICY_NONE:
24982cd038dSYoshinobu Inoue 		/* no need to do IPsec. */
25082cd038dSYoshinobu Inoue 		needipsec = 0;
25182cd038dSYoshinobu Inoue 		break;
25282cd038dSYoshinobu Inoue 
25382cd038dSYoshinobu Inoue 	case IPSEC_POLICY_IPSEC:
25482cd038dSYoshinobu Inoue 		if (sp->req == NULL) {
255686cdd19SJun-ichiro itojun Hagino 			/* acquire a policy */
256686cdd19SJun-ichiro itojun Hagino 			error = key_spdacquire(sp);
257686cdd19SJun-ichiro itojun Hagino 			goto freehdrs;
25882cd038dSYoshinobu Inoue 		}
25982cd038dSYoshinobu Inoue 		needipsec = 1;
26082cd038dSYoshinobu Inoue 		break;
26182cd038dSYoshinobu Inoue 
26282cd038dSYoshinobu Inoue 	case IPSEC_POLICY_ENTRUST:
26382cd038dSYoshinobu Inoue 	default:
26482cd038dSYoshinobu Inoue 		printf("ip6_output: Invalid policy found. %d\n", sp->policy);
26582cd038dSYoshinobu Inoue 	}
26682cd038dSYoshinobu Inoue #endif /* IPSEC */
267b9234fafSSam Leffler #ifdef FAST_IPSEC
268b9234fafSSam Leffler 	/* get a security policy for this packet */
269b9234fafSSam Leffler 	if (inp == NULL)
270b9234fafSSam Leffler 		sp = ipsec_getpolicybyaddr(m, IPSEC_DIR_OUTBOUND, 0, &error);
271b9234fafSSam Leffler 	else
272b9234fafSSam Leffler 		sp = ipsec_getpolicybysock(m, IPSEC_DIR_OUTBOUND, inp, &error);
273b9234fafSSam Leffler 
274b9234fafSSam Leffler 	if (sp == NULL) {
275b9234fafSSam Leffler 		newipsecstat.ips_out_inval++;
276b9234fafSSam Leffler 		goto freehdrs;
277b9234fafSSam Leffler 	}
278b9234fafSSam Leffler 
279b9234fafSSam Leffler 	error = 0;
280b9234fafSSam Leffler 
281b9234fafSSam Leffler 	/* check policy */
282b9234fafSSam Leffler 	switch (sp->policy) {
283b9234fafSSam Leffler 	case IPSEC_POLICY_DISCARD:
284b9234fafSSam Leffler 		/*
285b9234fafSSam Leffler 		 * This packet is just discarded.
286b9234fafSSam Leffler 		 */
287b9234fafSSam Leffler 		newipsecstat.ips_out_polvio++;
288b9234fafSSam Leffler 		goto freehdrs;
289b9234fafSSam Leffler 
290b9234fafSSam Leffler 	case IPSEC_POLICY_BYPASS:
291b9234fafSSam Leffler 	case IPSEC_POLICY_NONE:
292b9234fafSSam Leffler 		/* no need to do IPsec. */
293b9234fafSSam Leffler 		needipsec = 0;
294b9234fafSSam Leffler 		break;
295b9234fafSSam Leffler 
296b9234fafSSam Leffler 	case IPSEC_POLICY_IPSEC:
297b9234fafSSam Leffler 		if (sp->req == NULL) {
298b9234fafSSam Leffler 			/* acquire a policy */
299b9234fafSSam Leffler 			error = key_spdacquire(sp);
300b9234fafSSam Leffler 			goto freehdrs;
301b9234fafSSam Leffler 		}
302b9234fafSSam Leffler 		needipsec = 1;
303b9234fafSSam Leffler 		break;
304b9234fafSSam Leffler 
305b9234fafSSam Leffler 	case IPSEC_POLICY_ENTRUST:
306b9234fafSSam Leffler 	default:
307b9234fafSSam Leffler 		printf("ip6_output: Invalid policy found. %d\n", sp->policy);
308b9234fafSSam Leffler 	}
309b9234fafSSam Leffler #endif /* FAST_IPSEC */
31082cd038dSYoshinobu Inoue 
31182cd038dSYoshinobu Inoue 	/*
31282cd038dSYoshinobu Inoue 	 * Calculate the total length of the extension header chain.
31382cd038dSYoshinobu Inoue 	 * Keep the length of the unfragmentable part for fragmentation.
31482cd038dSYoshinobu Inoue 	 */
31582cd038dSYoshinobu Inoue 	optlen = 0;
31682cd038dSYoshinobu Inoue 	if (exthdrs.ip6e_hbh) optlen += exthdrs.ip6e_hbh->m_len;
31782cd038dSYoshinobu Inoue 	if (exthdrs.ip6e_dest1) optlen += exthdrs.ip6e_dest1->m_len;
31882cd038dSYoshinobu Inoue 	if (exthdrs.ip6e_rthdr) optlen += exthdrs.ip6e_rthdr->m_len;
31982cd038dSYoshinobu Inoue 	unfragpartlen = optlen + sizeof(struct ip6_hdr);
32082cd038dSYoshinobu Inoue 	/* NOTE: we don't add AH/ESP length here. do that later. */
32182cd038dSYoshinobu Inoue 	if (exthdrs.ip6e_dest2) optlen += exthdrs.ip6e_dest2->m_len;
32282cd038dSYoshinobu Inoue 
32382cd038dSYoshinobu Inoue 	/*
32482cd038dSYoshinobu Inoue 	 * If we need IPsec, or there is at least one extension header,
32582cd038dSYoshinobu Inoue 	 * separate IP6 header from the payload.
32682cd038dSYoshinobu Inoue 	 */
32782cd038dSYoshinobu Inoue 	if ((needipsec || optlen) && !hdrsplit) {
32882cd038dSYoshinobu Inoue 		if ((error = ip6_splithdr(m, &exthdrs)) != 0) {
32982cd038dSYoshinobu Inoue 			m = NULL;
33082cd038dSYoshinobu Inoue 			goto freehdrs;
33182cd038dSYoshinobu Inoue 		}
33282cd038dSYoshinobu Inoue 		m = exthdrs.ip6e_ip6;
33382cd038dSYoshinobu Inoue 		hdrsplit++;
33482cd038dSYoshinobu Inoue 	}
33582cd038dSYoshinobu Inoue 
33682cd038dSYoshinobu Inoue 	/* adjust pointer */
33782cd038dSYoshinobu Inoue 	ip6 = mtod(m, struct ip6_hdr *);
33882cd038dSYoshinobu Inoue 
33982cd038dSYoshinobu Inoue 	/* adjust mbuf packet header length */
34082cd038dSYoshinobu Inoue 	m->m_pkthdr.len += optlen;
34182cd038dSYoshinobu Inoue 	plen = m->m_pkthdr.len - sizeof(*ip6);
34282cd038dSYoshinobu Inoue 
34382cd038dSYoshinobu Inoue 	/* If this is a jumbo payload, insert a jumbo payload option. */
34482cd038dSYoshinobu Inoue 	if (plen > IPV6_MAXPACKET) {
34582cd038dSYoshinobu Inoue 		if (!hdrsplit) {
34682cd038dSYoshinobu Inoue 			if ((error = ip6_splithdr(m, &exthdrs)) != 0) {
34782cd038dSYoshinobu Inoue 				m = NULL;
34882cd038dSYoshinobu Inoue 				goto freehdrs;
34982cd038dSYoshinobu Inoue 			}
35082cd038dSYoshinobu Inoue 			m = exthdrs.ip6e_ip6;
35182cd038dSYoshinobu Inoue 			hdrsplit++;
35282cd038dSYoshinobu Inoue 		}
35382cd038dSYoshinobu Inoue 		/* adjust pointer */
35482cd038dSYoshinobu Inoue 		ip6 = mtod(m, struct ip6_hdr *);
35582cd038dSYoshinobu Inoue 		if ((error = ip6_insert_jumboopt(&exthdrs, plen)) != 0)
35682cd038dSYoshinobu Inoue 			goto freehdrs;
35782cd038dSYoshinobu Inoue 		ip6->ip6_plen = 0;
35882cd038dSYoshinobu Inoue 	} else
35982cd038dSYoshinobu Inoue 		ip6->ip6_plen = htons(plen);
36082cd038dSYoshinobu Inoue 
36182cd038dSYoshinobu Inoue 	/*
36282cd038dSYoshinobu Inoue 	 * Concatenate headers and fill in next header fields.
36382cd038dSYoshinobu Inoue 	 * Here we have, on "m"
36482cd038dSYoshinobu Inoue 	 *	IPv6 payload
36582cd038dSYoshinobu Inoue 	 * and we insert headers accordingly.  Finally, we should be getting:
36682cd038dSYoshinobu Inoue 	 *	IPv6 hbh dest1 rthdr ah* [esp* dest2 payload]
36782cd038dSYoshinobu Inoue 	 *
36882cd038dSYoshinobu Inoue 	 * during the header composing process, "m" points to IPv6 header.
36982cd038dSYoshinobu Inoue 	 * "mprev" points to an extension header prior to esp.
37082cd038dSYoshinobu Inoue 	 */
37182cd038dSYoshinobu Inoue 	{
37282cd038dSYoshinobu Inoue 		u_char *nexthdrp = &ip6->ip6_nxt;
37382cd038dSYoshinobu Inoue 		struct mbuf *mprev = m;
37482cd038dSYoshinobu Inoue 
37582cd038dSYoshinobu Inoue 		/*
37682cd038dSYoshinobu Inoue 		 * we treat dest2 specially.  this makes IPsec processing
37788ff5695SSUZUKI Shinsuke 		 * much easier.  the goal here is to make mprev point the
37888ff5695SSUZUKI Shinsuke 		 * mbuf prior to dest2.
37982cd038dSYoshinobu Inoue 		 *
38082cd038dSYoshinobu Inoue 		 * result: IPv6 dest2 payload
38182cd038dSYoshinobu Inoue 		 * m and mprev will point to IPv6 header.
38282cd038dSYoshinobu Inoue 		 */
38382cd038dSYoshinobu Inoue 		if (exthdrs.ip6e_dest2) {
38482cd038dSYoshinobu Inoue 			if (!hdrsplit)
38582cd038dSYoshinobu Inoue 				panic("assumption failed: hdr not split");
38682cd038dSYoshinobu Inoue 			exthdrs.ip6e_dest2->m_next = m->m_next;
38782cd038dSYoshinobu Inoue 			m->m_next = exthdrs.ip6e_dest2;
38882cd038dSYoshinobu Inoue 			*mtod(exthdrs.ip6e_dest2, u_char *) = ip6->ip6_nxt;
38982cd038dSYoshinobu Inoue 			ip6->ip6_nxt = IPPROTO_DSTOPTS;
39082cd038dSYoshinobu Inoue 		}
39182cd038dSYoshinobu Inoue 
39282cd038dSYoshinobu Inoue #define MAKE_CHAIN(m, mp, p, i)\
393686cdd19SJun-ichiro itojun Hagino     do {\
39482cd038dSYoshinobu Inoue 	if (m) {\
39582cd038dSYoshinobu Inoue 		if (!hdrsplit) \
39682cd038dSYoshinobu Inoue 			panic("assumption failed: hdr not split"); \
39782cd038dSYoshinobu Inoue 		*mtod((m), u_char *) = *(p);\
39882cd038dSYoshinobu Inoue 		*(p) = (i);\
39982cd038dSYoshinobu Inoue 		p = mtod((m), u_char *);\
40082cd038dSYoshinobu Inoue 		(m)->m_next = (mp)->m_next;\
40182cd038dSYoshinobu Inoue 		(mp)->m_next = (m);\
40282cd038dSYoshinobu Inoue 		(mp) = (m);\
40382cd038dSYoshinobu Inoue 	}\
4047efe5d92SHajimu UMEMOTO     } while (/*CONSTCOND*/ 0)
40582cd038dSYoshinobu Inoue 		/*
40682cd038dSYoshinobu Inoue 		 * result: IPv6 hbh dest1 rthdr dest2 payload
40782cd038dSYoshinobu Inoue 		 * m will point to IPv6 header.  mprev will point to the
40882cd038dSYoshinobu Inoue 		 * extension header prior to dest2 (rthdr in the above case).
40982cd038dSYoshinobu Inoue 		 */
4107efe5d92SHajimu UMEMOTO 		MAKE_CHAIN(exthdrs.ip6e_hbh, mprev, nexthdrp, IPPROTO_HOPOPTS);
4117efe5d92SHajimu UMEMOTO 		MAKE_CHAIN(exthdrs.ip6e_dest1, mprev, nexthdrp,
4127efe5d92SHajimu UMEMOTO 		    IPPROTO_DSTOPTS);
4137efe5d92SHajimu UMEMOTO 		MAKE_CHAIN(exthdrs.ip6e_rthdr, mprev, nexthdrp,
4147efe5d92SHajimu UMEMOTO 		    IPPROTO_ROUTING);
41582cd038dSYoshinobu Inoue 
416b9234fafSSam Leffler #if defined(IPSEC) || defined(FAST_IPSEC)
41782cd038dSYoshinobu Inoue 		if (!needipsec)
41882cd038dSYoshinobu Inoue 			goto skip_ipsec2;
41982cd038dSYoshinobu Inoue 
42082cd038dSYoshinobu Inoue 		/*
42182cd038dSYoshinobu Inoue 		 * pointers after IPsec headers are not valid any more.
42282cd038dSYoshinobu Inoue 		 * other pointers need a great care too.
42382cd038dSYoshinobu Inoue 		 * (IPsec routines should not mangle mbufs prior to AH/ESP)
42482cd038dSYoshinobu Inoue 		 */
42582cd038dSYoshinobu Inoue 		exthdrs.ip6e_dest2 = NULL;
42682cd038dSYoshinobu Inoue 
42782cd038dSYoshinobu Inoue 	    {
42882cd038dSYoshinobu Inoue 		struct ip6_rthdr *rh = NULL;
42982cd038dSYoshinobu Inoue 		int segleft_org = 0;
43082cd038dSYoshinobu Inoue 		struct ipsec_output_state state;
43182cd038dSYoshinobu Inoue 
43282cd038dSYoshinobu Inoue 		if (exthdrs.ip6e_rthdr) {
43382cd038dSYoshinobu Inoue 			rh = mtod(exthdrs.ip6e_rthdr, struct ip6_rthdr *);
43482cd038dSYoshinobu Inoue 			segleft_org = rh->ip6r_segleft;
43582cd038dSYoshinobu Inoue 			rh->ip6r_segleft = 0;
43682cd038dSYoshinobu Inoue 		}
43782cd038dSYoshinobu Inoue 
43882cd038dSYoshinobu Inoue 		bzero(&state, sizeof(state));
43982cd038dSYoshinobu Inoue 		state.m = m;
44082cd038dSYoshinobu Inoue 		error = ipsec6_output_trans(&state, nexthdrp, mprev, sp, flags,
44182cd038dSYoshinobu Inoue 		    &needipsectun);
44282cd038dSYoshinobu Inoue 		m = state.m;
44382cd038dSYoshinobu Inoue 		if (error) {
44482cd038dSYoshinobu Inoue 			/* mbuf is already reclaimed in ipsec6_output_trans. */
44582cd038dSYoshinobu Inoue 			m = NULL;
44682cd038dSYoshinobu Inoue 			switch (error) {
44782cd038dSYoshinobu Inoue 			case EHOSTUNREACH:
44882cd038dSYoshinobu Inoue 			case ENETUNREACH:
44982cd038dSYoshinobu Inoue 			case EMSGSIZE:
45082cd038dSYoshinobu Inoue 			case ENOBUFS:
45182cd038dSYoshinobu Inoue 			case ENOMEM:
45282cd038dSYoshinobu Inoue 				break;
45382cd038dSYoshinobu Inoue 			default:
45482cd038dSYoshinobu Inoue 				printf("ip6_output (ipsec): error code %d\n", error);
4557efe5d92SHajimu UMEMOTO 				/* FALLTHROUGH */
45682cd038dSYoshinobu Inoue 			case ENOENT:
45782cd038dSYoshinobu Inoue 				/* don't show these error codes to the user */
45882cd038dSYoshinobu Inoue 				error = 0;
45982cd038dSYoshinobu Inoue 				break;
46082cd038dSYoshinobu Inoue 			}
46182cd038dSYoshinobu Inoue 			goto bad;
46282cd038dSYoshinobu Inoue 		}
46382cd038dSYoshinobu Inoue 		if (exthdrs.ip6e_rthdr) {
46482cd038dSYoshinobu Inoue 			/* ah6_output doesn't modify mbuf chain */
46582cd038dSYoshinobu Inoue 			rh->ip6r_segleft = segleft_org;
46682cd038dSYoshinobu Inoue 		}
46782cd038dSYoshinobu Inoue 	    }
46882cd038dSYoshinobu Inoue skip_ipsec2:;
46982cd038dSYoshinobu Inoue #endif
47082cd038dSYoshinobu Inoue 	}
47182cd038dSYoshinobu Inoue 
47282cd038dSYoshinobu Inoue 	/*
4737efe5d92SHajimu UMEMOTO 	 * If there is a routing header, replace the destination address field
47482cd038dSYoshinobu Inoue 	 * with the first hop of the routing header.
47582cd038dSYoshinobu Inoue 	 */
47682cd038dSYoshinobu Inoue 	if (exthdrs.ip6e_rthdr) {
47782cd038dSYoshinobu Inoue 		struct ip6_rthdr *rh =
47882cd038dSYoshinobu Inoue 			(struct ip6_rthdr *)(mtod(exthdrs.ip6e_rthdr,
47982cd038dSYoshinobu Inoue 						  struct ip6_rthdr *));
48082cd038dSYoshinobu Inoue 		struct ip6_rthdr0 *rh0;
481c302f5bcSHajimu UMEMOTO 		struct in6_addr *addrs;
48282cd038dSYoshinobu Inoue 
48382cd038dSYoshinobu Inoue 		switch (rh->ip6r_type) {
48482cd038dSYoshinobu Inoue 		case IPV6_RTHDR_TYPE_0:
48582cd038dSYoshinobu Inoue 			 rh0 = (struct ip6_rthdr0 *)rh;
486aef03e95SSUZUKI Shinsuke 			 addrs = (struct in6_addr *)(rh0 + 1);
487c302f5bcSHajimu UMEMOTO 
488c302f5bcSHajimu UMEMOTO 			 ip6->ip6_dst = *addrs;
489c302f5bcSHajimu UMEMOTO 			 bcopy((caddr_t)(addrs + 1), (caddr_t)addrs,
49082cd038dSYoshinobu Inoue 			       sizeof(struct in6_addr)*(rh0->ip6r0_segleft - 1)
49182cd038dSYoshinobu Inoue 				 );
492c302f5bcSHajimu UMEMOTO 			 *(addrs + rh0->ip6r0_segleft - 1) = finaldst;
49382cd038dSYoshinobu Inoue 			 break;
49482cd038dSYoshinobu Inoue 		default:	/* is it possible? */
49582cd038dSYoshinobu Inoue 			 error = EINVAL;
49682cd038dSYoshinobu Inoue 			 goto bad;
49782cd038dSYoshinobu Inoue 		}
49882cd038dSYoshinobu Inoue 	}
49982cd038dSYoshinobu Inoue 
50082cd038dSYoshinobu Inoue 	/* Source address validation */
50182cd038dSYoshinobu Inoue 	if (IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_src) &&
50282cd038dSYoshinobu Inoue 	    (flags & IPV6_DADOUTPUT) == 0) {
50382cd038dSYoshinobu Inoue 		error = EOPNOTSUPP;
50482cd038dSYoshinobu Inoue 		ip6stat.ip6s_badscope++;
50582cd038dSYoshinobu Inoue 		goto bad;
50682cd038dSYoshinobu Inoue 	}
50782cd038dSYoshinobu Inoue 	if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_src)) {
50882cd038dSYoshinobu Inoue 		error = EOPNOTSUPP;
50982cd038dSYoshinobu Inoue 		ip6stat.ip6s_badscope++;
51082cd038dSYoshinobu Inoue 		goto bad;
51182cd038dSYoshinobu Inoue 	}
51282cd038dSYoshinobu Inoue 
51382cd038dSYoshinobu Inoue 	ip6stat.ip6s_localout++;
51482cd038dSYoshinobu Inoue 
51582cd038dSYoshinobu Inoue 	/*
51682cd038dSYoshinobu Inoue 	 * Route packet.
51782cd038dSYoshinobu Inoue 	 */
51882cd038dSYoshinobu Inoue 	if (ro == 0) {
51982cd038dSYoshinobu Inoue 		ro = &ip6route;
52082cd038dSYoshinobu Inoue 		bzero((caddr_t)ro, sizeof(*ro));
52182cd038dSYoshinobu Inoue 	}
52282cd038dSYoshinobu Inoue 	ro_pmtu = ro;
52382cd038dSYoshinobu Inoue 	if (opt && opt->ip6po_rthdr)
52482cd038dSYoshinobu Inoue 		ro = &opt->ip6po_route;
52582cd038dSYoshinobu Inoue 	dst = (struct sockaddr_in6 *)&ro->ro_dst;
5267efe5d92SHajimu UMEMOTO 
52782cd038dSYoshinobu Inoue 	/*
52882cd038dSYoshinobu Inoue 	 * If there is a cached route,
52982cd038dSYoshinobu Inoue 	 * check that it is to the same destination
53082cd038dSYoshinobu Inoue 	 * and is still up. If not, free it and try again.
53182cd038dSYoshinobu Inoue 	 */
53282cd038dSYoshinobu Inoue 	if (ro->ro_rt && ((ro->ro_rt->rt_flags & RTF_UP) == 0 ||
5331183d014SHajimu UMEMOTO 			 dst->sin6_family != AF_INET6 ||
53482cd038dSYoshinobu Inoue 			 !IN6_ARE_ADDR_EQUAL(&dst->sin6_addr, &ip6->ip6_dst))) {
53582cd038dSYoshinobu Inoue 		RTFREE(ro->ro_rt);
53682cd038dSYoshinobu Inoue 		ro->ro_rt = (struct rtentry *)0;
53782cd038dSYoshinobu Inoue 	}
53882cd038dSYoshinobu Inoue 	if (ro->ro_rt == 0) {
53982cd038dSYoshinobu Inoue 		bzero(dst, sizeof(*dst));
54082cd038dSYoshinobu Inoue 		dst->sin6_family = AF_INET6;
54182cd038dSYoshinobu Inoue 		dst->sin6_len = sizeof(struct sockaddr_in6);
54282cd038dSYoshinobu Inoue 		dst->sin6_addr = ip6->ip6_dst;
54382cd038dSYoshinobu Inoue 	}
544f95d4633SHajimu UMEMOTO 
545f95d4633SHajimu UMEMOTO  	/*
546f95d4633SHajimu UMEMOTO 	 * if specified, try to fill in the traffic class field.
547f95d4633SHajimu UMEMOTO 	 * do not override if a non-zero value is already set.
548f95d4633SHajimu UMEMOTO 	 * we check the diffserv field and the ecn field separately.
549f95d4633SHajimu UMEMOTO 	 */
550f95d4633SHajimu UMEMOTO 	if (opt && opt->ip6po_tclass >= 0) {
551f95d4633SHajimu UMEMOTO 		int mask = 0;
552f95d4633SHajimu UMEMOTO 
553f95d4633SHajimu UMEMOTO 		if ((ip6->ip6_flow & htonl(0xfc << 20)) == 0)
554f95d4633SHajimu UMEMOTO 			mask |= 0xfc;
555f95d4633SHajimu UMEMOTO 		if ((ip6->ip6_flow & htonl(0x03 << 20)) == 0)
556f95d4633SHajimu UMEMOTO 			mask |= 0x03;
557f95d4633SHajimu UMEMOTO 		if (mask != 0)
558f95d4633SHajimu UMEMOTO 			ip6->ip6_flow |= htonl((opt->ip6po_tclass & mask) << 20);
559f95d4633SHajimu UMEMOTO 	}
560f95d4633SHajimu UMEMOTO 
561f95d4633SHajimu UMEMOTO 	/* fill in or override the hop limit field, if necessary. */
562f95d4633SHajimu UMEMOTO 	if (opt && opt->ip6po_hlim != -1)
563f95d4633SHajimu UMEMOTO 		ip6->ip6_hlim = opt->ip6po_hlim & 0xff;
564f95d4633SHajimu UMEMOTO 	else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
565f95d4633SHajimu UMEMOTO 		if (im6o != NULL)
566f95d4633SHajimu UMEMOTO 			ip6->ip6_hlim = im6o->im6o_multicast_hlim;
567f95d4633SHajimu UMEMOTO 		else
568f95d4633SHajimu UMEMOTO 			ip6->ip6_hlim = ip6_defmcasthlim;
569f95d4633SHajimu UMEMOTO 	}
570f95d4633SHajimu UMEMOTO 
571b9234fafSSam Leffler #if defined(IPSEC) || defined(FAST_IPSEC)
57282cd038dSYoshinobu Inoue 	if (needipsec && needipsectun) {
57382cd038dSYoshinobu Inoue 		struct ipsec_output_state state;
57482cd038dSYoshinobu Inoue 
57582cd038dSYoshinobu Inoue 		/*
57682cd038dSYoshinobu Inoue 		 * All the extension headers will become inaccessible
57782cd038dSYoshinobu Inoue 		 * (since they can be encrypted).
57882cd038dSYoshinobu Inoue 		 * Don't panic, we need no more updates to extension headers
57982cd038dSYoshinobu Inoue 		 * on inner IPv6 packet (since they are now encapsulated).
58082cd038dSYoshinobu Inoue 		 *
58182cd038dSYoshinobu Inoue 		 * IPv6 [ESP|AH] IPv6 [extension headers] payload
58282cd038dSYoshinobu Inoue 		 */
58382cd038dSYoshinobu Inoue 		bzero(&exthdrs, sizeof(exthdrs));
58482cd038dSYoshinobu Inoue 		exthdrs.ip6e_ip6 = m;
58582cd038dSYoshinobu Inoue 
58682cd038dSYoshinobu Inoue 		bzero(&state, sizeof(state));
58782cd038dSYoshinobu Inoue 		state.m = m;
58882cd038dSYoshinobu Inoue 		state.ro = (struct route *)ro;
58982cd038dSYoshinobu Inoue 		state.dst = (struct sockaddr *)dst;
59082cd038dSYoshinobu Inoue 
59182cd038dSYoshinobu Inoue 		error = ipsec6_output_tunnel(&state, sp, flags);
59282cd038dSYoshinobu Inoue 
59382cd038dSYoshinobu Inoue 		m = state.m;
59482cd038dSYoshinobu Inoue 		ro = (struct route_in6 *)state.ro;
59582cd038dSYoshinobu Inoue 		dst = (struct sockaddr_in6 *)state.dst;
59682cd038dSYoshinobu Inoue 		if (error) {
59782cd038dSYoshinobu Inoue 			/* mbuf is already reclaimed in ipsec6_output_tunnel. */
59882cd038dSYoshinobu Inoue 			m0 = m = NULL;
59982cd038dSYoshinobu Inoue 			m = NULL;
60082cd038dSYoshinobu Inoue 			switch (error) {
60182cd038dSYoshinobu Inoue 			case EHOSTUNREACH:
60282cd038dSYoshinobu Inoue 			case ENETUNREACH:
60382cd038dSYoshinobu Inoue 			case EMSGSIZE:
60482cd038dSYoshinobu Inoue 			case ENOBUFS:
60582cd038dSYoshinobu Inoue 			case ENOMEM:
60682cd038dSYoshinobu Inoue 				break;
60782cd038dSYoshinobu Inoue 			default:
60882cd038dSYoshinobu Inoue 				printf("ip6_output (ipsec): error code %d\n", error);
6097efe5d92SHajimu UMEMOTO 				/* FALLTHROUGH */
61082cd038dSYoshinobu Inoue 			case ENOENT:
61182cd038dSYoshinobu Inoue 				/* don't show these error codes to the user */
61282cd038dSYoshinobu Inoue 				error = 0;
61382cd038dSYoshinobu Inoue 				break;
61482cd038dSYoshinobu Inoue 			}
61582cd038dSYoshinobu Inoue 			goto bad;
61682cd038dSYoshinobu Inoue 		}
61782cd038dSYoshinobu Inoue 
61882cd038dSYoshinobu Inoue 		exthdrs.ip6e_ip6 = m;
61982cd038dSYoshinobu Inoue 	}
620686cdd19SJun-ichiro itojun Hagino #endif /* IPSEC */
62182cd038dSYoshinobu Inoue 
62282cd038dSYoshinobu Inoue 	if (!IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
62382cd038dSYoshinobu Inoue 		/* Unicast */
62482cd038dSYoshinobu Inoue 
62582cd038dSYoshinobu Inoue #define ifatoia6(ifa)	((struct in6_ifaddr *)(ifa))
62682cd038dSYoshinobu Inoue #define sin6tosa(sin6)	((struct sockaddr *)(sin6))
62782cd038dSYoshinobu Inoue 		/* xxx
62882cd038dSYoshinobu Inoue 		 * interface selection comes here
62982cd038dSYoshinobu Inoue 		 * if an interface is specified from an upper layer,
63082cd038dSYoshinobu Inoue 		 * ifp must point it.
63182cd038dSYoshinobu Inoue 		 */
632686cdd19SJun-ichiro itojun Hagino 		if (ro->ro_rt == 0) {
633686cdd19SJun-ichiro itojun Hagino 			/*
634686cdd19SJun-ichiro itojun Hagino 			 * non-bsdi always clone routes, if parent is
635686cdd19SJun-ichiro itojun Hagino 			 * PRF_CLONING.
636686cdd19SJun-ichiro itojun Hagino 			 */
63782cd038dSYoshinobu Inoue 			rtalloc((struct route *)ro);
638686cdd19SJun-ichiro itojun Hagino 		}
63982cd038dSYoshinobu Inoue 		if (ro->ro_rt == 0) {
64082cd038dSYoshinobu Inoue 			ip6stat.ip6s_noroute++;
64182cd038dSYoshinobu Inoue 			error = EHOSTUNREACH;
64282cd038dSYoshinobu Inoue 			/* XXX in6_ifstat_inc(ifp, ifs6_out_discard); */
64382cd038dSYoshinobu Inoue 			goto bad;
64482cd038dSYoshinobu Inoue 		}
64568974f29SSam Leffler 		/* XXX rt not locked */
64682cd038dSYoshinobu Inoue 		ia = ifatoia6(ro->ro_rt->rt_ifa);
64782cd038dSYoshinobu Inoue 		ifp = ro->ro_rt->rt_ifp;
64897d8d152SAndre Oppermann 		ro->ro_rt->rt_rmx.rmx_pksent++;
64982cd038dSYoshinobu Inoue 		if (ro->ro_rt->rt_flags & RTF_GATEWAY)
65082cd038dSYoshinobu Inoue 			dst = (struct sockaddr_in6 *)ro->ro_rt->rt_gateway;
65182cd038dSYoshinobu Inoue 		m->m_flags &= ~(M_BCAST | M_MCAST);	/* just in case */
65282cd038dSYoshinobu Inoue 
65382cd038dSYoshinobu Inoue 		in6_ifstat_inc(ifp, ifs6_out_request);
65482cd038dSYoshinobu Inoue 
65582cd038dSYoshinobu Inoue 		/*
656686cdd19SJun-ichiro itojun Hagino 		 * Check if the outgoing interface conflicts with
65782cd038dSYoshinobu Inoue 		 * the interface specified by ifi6_ifindex (if specified).
65882cd038dSYoshinobu Inoue 		 * Note that loopback interface is always okay.
659686cdd19SJun-ichiro itojun Hagino 		 * (this may happen when we are sending a packet to one of
660686cdd19SJun-ichiro itojun Hagino 		 *  our own addresses.)
66182cd038dSYoshinobu Inoue 		 */
66282cd038dSYoshinobu Inoue 		if (opt && opt->ip6po_pktinfo
66382cd038dSYoshinobu Inoue 		 && opt->ip6po_pktinfo->ipi6_ifindex) {
66482cd038dSYoshinobu Inoue 			if (!(ifp->if_flags & IFF_LOOPBACK)
66582cd038dSYoshinobu Inoue 			 && ifp->if_index != opt->ip6po_pktinfo->ipi6_ifindex) {
66682cd038dSYoshinobu Inoue 				ip6stat.ip6s_noroute++;
66782cd038dSYoshinobu Inoue 				in6_ifstat_inc(ifp, ifs6_out_discard);
66882cd038dSYoshinobu Inoue 				error = EHOSTUNREACH;
66982cd038dSYoshinobu Inoue 				goto bad;
67082cd038dSYoshinobu Inoue 			}
67182cd038dSYoshinobu Inoue 		}
67282cd038dSYoshinobu Inoue 
67382cd038dSYoshinobu Inoue 		if (opt && opt->ip6po_hlim != -1)
67482cd038dSYoshinobu Inoue 			ip6->ip6_hlim = opt->ip6po_hlim & 0xff;
67582cd038dSYoshinobu Inoue 	} else {
67682cd038dSYoshinobu Inoue 		/* Multicast */
67782cd038dSYoshinobu Inoue 		struct	in6_multi *in6m;
67882cd038dSYoshinobu Inoue 
67982cd038dSYoshinobu Inoue 		m->m_flags = (m->m_flags & ~M_BCAST) | M_MCAST;
68082cd038dSYoshinobu Inoue 
68182cd038dSYoshinobu Inoue 		/*
68282cd038dSYoshinobu Inoue 		 * See if the caller provided any multicast options
68382cd038dSYoshinobu Inoue 		 */
68482cd038dSYoshinobu Inoue 		ifp = NULL;
68582cd038dSYoshinobu Inoue 		if (im6o != NULL) {
68682cd038dSYoshinobu Inoue 			ip6->ip6_hlim = im6o->im6o_multicast_hlim;
68782cd038dSYoshinobu Inoue 			if (im6o->im6o_multicast_ifp != NULL)
68882cd038dSYoshinobu Inoue 				ifp = im6o->im6o_multicast_ifp;
68982cd038dSYoshinobu Inoue 		} else
69082cd038dSYoshinobu Inoue 			ip6->ip6_hlim = ip6_defmcasthlim;
69182cd038dSYoshinobu Inoue 
69282cd038dSYoshinobu Inoue 		/*
69382cd038dSYoshinobu Inoue 		 * See if the caller provided the outgoing interface
69482cd038dSYoshinobu Inoue 		 * as an ancillary data.
69582cd038dSYoshinobu Inoue 		 * Boundary check for ifindex is assumed to be already done.
69682cd038dSYoshinobu Inoue 		 */
69782cd038dSYoshinobu Inoue 		if (opt && opt->ip6po_pktinfo && opt->ip6po_pktinfo->ipi6_ifindex)
698f9132cebSJonathan Lemon 			ifp = ifnet_byindex(opt->ip6po_pktinfo->ipi6_ifindex);
69982cd038dSYoshinobu Inoue 
70082cd038dSYoshinobu Inoue 		/*
70182cd038dSYoshinobu Inoue 		 * If the destination is a node-local scope multicast,
70282cd038dSYoshinobu Inoue 		 * the packet should be loop-backed only.
70382cd038dSYoshinobu Inoue 		 */
7049a4f9608SHajimu UMEMOTO 		if (IN6_IS_ADDR_MC_INTFACELOCAL(&ip6->ip6_dst)) {
70582cd038dSYoshinobu Inoue 			/*
70682cd038dSYoshinobu Inoue 			 * If the outgoing interface is already specified,
70782cd038dSYoshinobu Inoue 			 * it should be a loopback interface.
70882cd038dSYoshinobu Inoue 			 */
70982cd038dSYoshinobu Inoue 			if (ifp && (ifp->if_flags & IFF_LOOPBACK) == 0) {
71082cd038dSYoshinobu Inoue 				ip6stat.ip6s_badscope++;
71182cd038dSYoshinobu Inoue 				error = ENETUNREACH; /* XXX: better error? */
71282cd038dSYoshinobu Inoue 				/* XXX correct ifp? */
71382cd038dSYoshinobu Inoue 				in6_ifstat_inc(ifp, ifs6_out_discard);
71482cd038dSYoshinobu Inoue 				goto bad;
71582cd038dSYoshinobu Inoue 			} else {
71682cd038dSYoshinobu Inoue 				ifp = &loif[0];
71782cd038dSYoshinobu Inoue 			}
71882cd038dSYoshinobu Inoue 		}
71982cd038dSYoshinobu Inoue 
72082cd038dSYoshinobu Inoue 		if (opt && opt->ip6po_hlim != -1)
72182cd038dSYoshinobu Inoue 			ip6->ip6_hlim = opt->ip6po_hlim & 0xff;
72282cd038dSYoshinobu Inoue 
72382cd038dSYoshinobu Inoue 		/*
72482cd038dSYoshinobu Inoue 		 * If caller did not provide an interface lookup a
72582cd038dSYoshinobu Inoue 		 * default in the routing table.  This is either a
72682cd038dSYoshinobu Inoue 		 * default for the speicfied group (i.e. a host
72782cd038dSYoshinobu Inoue 		 * route), or a multicast default (a route for the
72882cd038dSYoshinobu Inoue 		 * ``net'' ff00::/8).
72982cd038dSYoshinobu Inoue 		 */
73082cd038dSYoshinobu Inoue 		if (ifp == NULL) {
73168974f29SSam Leffler 			if (ro->ro_rt == 0)
73282cd038dSYoshinobu Inoue 				ro->ro_rt = rtalloc1((struct sockaddr *)
73382cd038dSYoshinobu Inoue 						&ro->ro_dst, 0, 0UL);
73468974f29SSam Leffler 			else
73568974f29SSam Leffler 				RT_LOCK(ro->ro_rt);
73682cd038dSYoshinobu Inoue 			if (ro->ro_rt == 0) {
73782cd038dSYoshinobu Inoue 				ip6stat.ip6s_noroute++;
73882cd038dSYoshinobu Inoue 				error = EHOSTUNREACH;
73982cd038dSYoshinobu Inoue 				/* XXX in6_ifstat_inc(ifp, ifs6_out_discard) */
74082cd038dSYoshinobu Inoue 				goto bad;
74182cd038dSYoshinobu Inoue 			}
74282cd038dSYoshinobu Inoue 			ia = ifatoia6(ro->ro_rt->rt_ifa);
74382cd038dSYoshinobu Inoue 			ifp = ro->ro_rt->rt_ifp;
74497d8d152SAndre Oppermann 			ro->ro_rt->rt_rmx.rmx_pksent++;
745d1dd20beSSam Leffler 			RT_UNLOCK(ro->ro_rt);
74682cd038dSYoshinobu Inoue 		}
74782cd038dSYoshinobu Inoue 
74882cd038dSYoshinobu Inoue 		if ((flags & IPV6_FORWARDING) == 0)
74982cd038dSYoshinobu Inoue 			in6_ifstat_inc(ifp, ifs6_out_request);
75082cd038dSYoshinobu Inoue 		in6_ifstat_inc(ifp, ifs6_out_mcast);
75182cd038dSYoshinobu Inoue 
75282cd038dSYoshinobu Inoue 		/*
75382cd038dSYoshinobu Inoue 		 * Confirm that the outgoing interface supports multicast.
75482cd038dSYoshinobu Inoue 		 */
75582cd038dSYoshinobu Inoue 		if ((ifp->if_flags & IFF_MULTICAST) == 0) {
75682cd038dSYoshinobu Inoue 			ip6stat.ip6s_noroute++;
75782cd038dSYoshinobu Inoue 			in6_ifstat_inc(ifp, ifs6_out_discard);
75882cd038dSYoshinobu Inoue 			error = ENETUNREACH;
75982cd038dSYoshinobu Inoue 			goto bad;
76082cd038dSYoshinobu Inoue 		}
76182cd038dSYoshinobu Inoue 		IN6_LOOKUP_MULTI(ip6->ip6_dst, ifp, in6m);
76282cd038dSYoshinobu Inoue 		if (in6m != NULL &&
76382cd038dSYoshinobu Inoue 		   (im6o == NULL || im6o->im6o_multicast_loop)) {
76482cd038dSYoshinobu Inoue 			/*
76582cd038dSYoshinobu Inoue 			 * If we belong to the destination multicast group
76682cd038dSYoshinobu Inoue 			 * on the outgoing interface, and the caller did not
76782cd038dSYoshinobu Inoue 			 * forbid loopback, loop back a copy.
76882cd038dSYoshinobu Inoue 			 */
76982cd038dSYoshinobu Inoue 			ip6_mloopback(ifp, m, dst);
77091ec0a1eSYoshinobu Inoue 		} else {
77191ec0a1eSYoshinobu Inoue 			/*
77291ec0a1eSYoshinobu Inoue 			 * If we are acting as a multicast router, perform
77391ec0a1eSYoshinobu Inoue 			 * multicast forwarding as if the packet had just
77491ec0a1eSYoshinobu Inoue 			 * arrived on the interface to which we are about
77591ec0a1eSYoshinobu Inoue 			 * to send.  The multicast forwarding function
77691ec0a1eSYoshinobu Inoue 			 * recursively calls this function, using the
77791ec0a1eSYoshinobu Inoue 			 * IPV6_FORWARDING flag to prevent infinite recursion.
77891ec0a1eSYoshinobu Inoue 			 *
77991ec0a1eSYoshinobu Inoue 			 * Multicasts that are looped back by ip6_mloopback(),
78091ec0a1eSYoshinobu Inoue 			 * above, will be forwarded by the ip6_input() routine,
78191ec0a1eSYoshinobu Inoue 			 * if necessary.
78291ec0a1eSYoshinobu Inoue 			 */
78391ec0a1eSYoshinobu Inoue 			if (ip6_mrouter && (flags & IPV6_FORWARDING) == 0) {
784686cdd19SJun-ichiro itojun Hagino 				if (ip6_mforward(ip6, ifp, m) != 0) {
78591ec0a1eSYoshinobu Inoue 					m_freem(m);
78691ec0a1eSYoshinobu Inoue 					goto done;
78791ec0a1eSYoshinobu Inoue 				}
78891ec0a1eSYoshinobu Inoue 			}
78982cd038dSYoshinobu Inoue 		}
79082cd038dSYoshinobu Inoue 		/*
79182cd038dSYoshinobu Inoue 		 * Multicasts with a hoplimit of zero may be looped back,
79282cd038dSYoshinobu Inoue 		 * above, but must not be transmitted on a network.
79382cd038dSYoshinobu Inoue 		 * Also, multicasts addressed to the loopback interface
79482cd038dSYoshinobu Inoue 		 * are not sent -- the above call to ip6_mloopback() will
79582cd038dSYoshinobu Inoue 		 * loop back a copy if this host actually belongs to the
79682cd038dSYoshinobu Inoue 		 * destination group on the loopback interface.
79782cd038dSYoshinobu Inoue 		 */
798f95d4633SHajimu UMEMOTO 		if (ip6->ip6_hlim == 0 || (ifp->if_flags & IFF_LOOPBACK) ||
799f95d4633SHajimu UMEMOTO 		    IN6_IS_ADDR_MC_INTFACELOCAL(&ip6->ip6_dst)) {
80082cd038dSYoshinobu Inoue 			m_freem(m);
80182cd038dSYoshinobu Inoue 			goto done;
80282cd038dSYoshinobu Inoue 		}
80382cd038dSYoshinobu Inoue 	}
80482cd038dSYoshinobu Inoue 
80582cd038dSYoshinobu Inoue 	/*
80682cd038dSYoshinobu Inoue 	 * Fill the outgoing inteface to tell the upper layer
80782cd038dSYoshinobu Inoue 	 * to increment per-interface statistics.
80882cd038dSYoshinobu Inoue 	 */
80982cd038dSYoshinobu Inoue 	if (ifpp)
81082cd038dSYoshinobu Inoue 		*ifpp = ifp;
81182cd038dSYoshinobu Inoue 
81231b3783cSHajimu UMEMOTO 	/* Determine path MTU. */
813f95d4633SHajimu UMEMOTO 	if ((error = ip6_getpmtu(ro_pmtu, ro, ifp, &finaldst, &mtu,
814f95d4633SHajimu UMEMOTO 	    &alwaysfrag)) != 0)
81531b3783cSHajimu UMEMOTO 		goto bad;
81682cd038dSYoshinobu Inoue 
81733841545SHajimu UMEMOTO 	/*
8188b00e59dSHajimu UMEMOTO 	 * The caller of this function may specify to use the minimum MTU
8198b00e59dSHajimu UMEMOTO 	 * in some cases.
8208b00e59dSHajimu UMEMOTO 	 * An advanced API option (IPV6_USE_MIN_MTU) can also override MTU
8218b00e59dSHajimu UMEMOTO 	 * setting.  The logic is a bit complicated; by default, unicast
8228b00e59dSHajimu UMEMOTO 	 * packets will follow path MTU while multicast packets will be sent at
8238b00e59dSHajimu UMEMOTO 	 * the minimum MTU.  If IP6PO_MINMTU_ALL is specified, all packets
8248b00e59dSHajimu UMEMOTO 	 * including unicast ones will be sent at the minimum MTU.  Multicast
8258b00e59dSHajimu UMEMOTO 	 * packets will always be sent at the minimum MTU unless
8268b00e59dSHajimu UMEMOTO 	 * IP6PO_MINMTU_DISABLE is explicitly specified.
8278b00e59dSHajimu UMEMOTO 	 * See RFC 3542 for more details.
82833841545SHajimu UMEMOTO 	 */
8298b00e59dSHajimu UMEMOTO 	if (mtu > IPV6_MMTU) {
8308b00e59dSHajimu UMEMOTO 		if ((flags & IPV6_MINMTU))
83133841545SHajimu UMEMOTO 			mtu = IPV6_MMTU;
8328b00e59dSHajimu UMEMOTO 		else if (opt && opt->ip6po_minmtu == IP6PO_MINMTU_ALL)
8338b00e59dSHajimu UMEMOTO 			mtu = IPV6_MMTU;
8348b00e59dSHajimu UMEMOTO 		else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) &&
8358b00e59dSHajimu UMEMOTO 			 (opt == NULL ||
8368b00e59dSHajimu UMEMOTO 			  opt->ip6po_minmtu != IP6PO_MINMTU_DISABLE)) {
8378b00e59dSHajimu UMEMOTO 			mtu = IPV6_MMTU;
8388b00e59dSHajimu UMEMOTO 		}
8398b00e59dSHajimu UMEMOTO 	}
84033841545SHajimu UMEMOTO 
841686cdd19SJun-ichiro itojun Hagino 	/* Fake scoped addresses */
842686cdd19SJun-ichiro itojun Hagino 	if ((ifp->if_flags & IFF_LOOPBACK) != 0) {
84382cd038dSYoshinobu Inoue 		/*
844686cdd19SJun-ichiro itojun Hagino 		 * If source or destination address is a scoped address, and
845686cdd19SJun-ichiro itojun Hagino 		 * the packet is going to be sent to a loopback interface,
846686cdd19SJun-ichiro itojun Hagino 		 * we should keep the original interface.
84782cd038dSYoshinobu Inoue 		 */
848686cdd19SJun-ichiro itojun Hagino 
849686cdd19SJun-ichiro itojun Hagino 		/*
850686cdd19SJun-ichiro itojun Hagino 		 * XXX: this is a very experimental and temporary solution.
851686cdd19SJun-ichiro itojun Hagino 		 * We eventually have sockaddr_in6 and use the sin6_scope_id
852686cdd19SJun-ichiro itojun Hagino 		 * field of the structure here.
853686cdd19SJun-ichiro itojun Hagino 		 * We rely on the consistency between two scope zone ids
85488ff5695SSUZUKI Shinsuke 		 * of source and destination, which should already be assured.
85588ff5695SSUZUKI Shinsuke 		 * Larger scopes than link will be supported in the future.
856686cdd19SJun-ichiro itojun Hagino 		 */
85733841545SHajimu UMEMOTO 		origifp = NULL;
858686cdd19SJun-ichiro itojun Hagino 		if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_src))
859f9132cebSJonathan Lemon 			origifp = ifnet_byindex(ntohs(ip6->ip6_src.s6_addr16[1]));
860686cdd19SJun-ichiro itojun Hagino 		else if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_dst))
861f9132cebSJonathan Lemon 			origifp = ifnet_byindex(ntohs(ip6->ip6_dst.s6_addr16[1]));
86233841545SHajimu UMEMOTO 		/*
86333841545SHajimu UMEMOTO 		 * XXX: origifp can be NULL even in those two cases above.
86433841545SHajimu UMEMOTO 		 * For example, if we remove the (only) link-local address
86533841545SHajimu UMEMOTO 		 * from the loopback interface, and try to send a link-local
86633841545SHajimu UMEMOTO 		 * address without link-id information.  Then the source
86733841545SHajimu UMEMOTO 		 * address is ::1, and the destination address is the
86833841545SHajimu UMEMOTO 		 * link-local address with its s6_addr16[1] being zero.
86933841545SHajimu UMEMOTO 		 * What is worse, if the packet goes to the loopback interface
87033841545SHajimu UMEMOTO 		 * by a default rejected route, the null pointer would be
87133841545SHajimu UMEMOTO 		 * passed to looutput, and the kernel would hang.
87233841545SHajimu UMEMOTO 		 * The following last resort would prevent such disaster.
87333841545SHajimu UMEMOTO 		 */
87433841545SHajimu UMEMOTO 		if (origifp == NULL)
875686cdd19SJun-ichiro itojun Hagino 			origifp = ifp;
876686cdd19SJun-ichiro itojun Hagino 	}
877686cdd19SJun-ichiro itojun Hagino 	else
878686cdd19SJun-ichiro itojun Hagino 		origifp = ifp;
87933841545SHajimu UMEMOTO 	/*
88033841545SHajimu UMEMOTO 	 * clear embedded scope identifiers if necessary.
88133841545SHajimu UMEMOTO 	 * in6_clearscope will touch the addresses only when necessary.
88233841545SHajimu UMEMOTO 	 */
88333841545SHajimu UMEMOTO 	in6_clearscope(&ip6->ip6_src);
88433841545SHajimu UMEMOTO 	in6_clearscope(&ip6->ip6_dst);
88582cd038dSYoshinobu Inoue 
88682cd038dSYoshinobu Inoue 	/*
88782cd038dSYoshinobu Inoue 	 * Check with the firewall...
88882cd038dSYoshinobu Inoue 	 */
88920cb9f9eSHajimu UMEMOTO 	if (ip6_fw_enable && ip6_fw_chk_ptr) {
89082cd038dSYoshinobu Inoue 		u_short port = 0;
891686cdd19SJun-ichiro itojun Hagino 		m->m_pkthdr.rcvif = NULL;	/* XXX */
89282cd038dSYoshinobu Inoue 		/* If ipfw says divert, we have to just drop packet */
89382cd038dSYoshinobu Inoue 		if ((*ip6_fw_chk_ptr)(&ip6, ifp, &port, &m)) {
89482cd038dSYoshinobu Inoue 			m_freem(m);
89582cd038dSYoshinobu Inoue 			goto done;
89682cd038dSYoshinobu Inoue 		}
89782cd038dSYoshinobu Inoue 		if (!m) {
89882cd038dSYoshinobu Inoue 			error = EACCES;
89982cd038dSYoshinobu Inoue 			goto done;
90082cd038dSYoshinobu Inoue 		}
90182cd038dSYoshinobu Inoue 	}
90282cd038dSYoshinobu Inoue 
90382cd038dSYoshinobu Inoue 	/*
90482cd038dSYoshinobu Inoue 	 * If the outgoing packet contains a hop-by-hop options header,
90582cd038dSYoshinobu Inoue 	 * it must be examined and processed even by the source node.
90682cd038dSYoshinobu Inoue 	 * (RFC 2460, section 4.)
90782cd038dSYoshinobu Inoue 	 */
90882cd038dSYoshinobu Inoue 	if (exthdrs.ip6e_hbh) {
90933841545SHajimu UMEMOTO 		struct ip6_hbh *hbh = mtod(exthdrs.ip6e_hbh, struct ip6_hbh *);
910283f9f8aSHajimu UMEMOTO 		u_int32_t dummy; /* XXX unused */
911283f9f8aSHajimu UMEMOTO 		u_int32_t plen = 0; /* XXX: ip6_process will check the value */
91282cd038dSYoshinobu Inoue 
91333841545SHajimu UMEMOTO #ifdef DIAGNOSTIC
91433841545SHajimu UMEMOTO 		if ((hbh->ip6h_len + 1) << 3 > exthdrs.ip6e_hbh->m_len)
91533841545SHajimu UMEMOTO 			panic("ip6e_hbh is not continuous");
91633841545SHajimu UMEMOTO #endif
91782cd038dSYoshinobu Inoue 		/*
91882cd038dSYoshinobu Inoue 		 *  XXX: if we have to send an ICMPv6 error to the sender,
91982cd038dSYoshinobu Inoue 		 *       we need the M_LOOP flag since icmp6_error() expects
92082cd038dSYoshinobu Inoue 		 *       the IPv6 and the hop-by-hop options header are
92182cd038dSYoshinobu Inoue 		 *       continuous unless the flag is set.
92282cd038dSYoshinobu Inoue 		 */
92382cd038dSYoshinobu Inoue 		m->m_flags |= M_LOOP;
92482cd038dSYoshinobu Inoue 		m->m_pkthdr.rcvif = ifp;
9257efe5d92SHajimu UMEMOTO 		if (ip6_process_hopopts(m, (u_int8_t *)(hbh + 1),
9267efe5d92SHajimu UMEMOTO 		    ((hbh->ip6h_len + 1) << 3) - sizeof(struct ip6_hbh),
927283f9f8aSHajimu UMEMOTO 		    &dummy, &plen) < 0) {
92882cd038dSYoshinobu Inoue 			/* m was already freed at this point */
92982cd038dSYoshinobu Inoue 			error = EINVAL;/* better error? */
93082cd038dSYoshinobu Inoue 			goto done;
93182cd038dSYoshinobu Inoue 		}
93282cd038dSYoshinobu Inoue 		m->m_flags &= ~M_LOOP; /* XXX */
93382cd038dSYoshinobu Inoue 		m->m_pkthdr.rcvif = NULL;
93482cd038dSYoshinobu Inoue 	}
93582cd038dSYoshinobu Inoue 
936c21fd232SAndre Oppermann 	/* Jump over all PFIL processing if hooks are not active. */
937c21fd232SAndre Oppermann 	if (inet6_pfil_hook.ph_busy_count == -1)
938c21fd232SAndre Oppermann 		goto passout;
939c21fd232SAndre Oppermann 
940c21fd232SAndre Oppermann 	/* Run through list of hooks for output packets. */
941d6a8d588SMax Laier 	error = pfil_run_hooks(&inet6_pfil_hook, &m, ifp, PFIL_OUT, inp);
942b140bc1fSSam Leffler 	if (error != 0 || m == NULL)
943c4ac87eaSDarren Reed 		goto done;
944c4ac87eaSDarren Reed 	ip6 = mtod(m, struct ip6_hdr *);
9457efe5d92SHajimu UMEMOTO 
946c21fd232SAndre Oppermann passout:
94782cd038dSYoshinobu Inoue 	/*
94882cd038dSYoshinobu Inoue 	 * Send the packet to the outgoing interface.
94982cd038dSYoshinobu Inoue 	 * If necessary, do IPv6 fragmentation before sending.
950f95d4633SHajimu UMEMOTO 	 *
951f95d4633SHajimu UMEMOTO 	 * the logic here is rather complex:
952f95d4633SHajimu UMEMOTO 	 * 1: normal case (dontfrag == 0, alwaysfrag == 0)
953f95d4633SHajimu UMEMOTO 	 * 1-a:	send as is if tlen <= path mtu
954f95d4633SHajimu UMEMOTO 	 * 1-b:	fragment if tlen > path mtu
955f95d4633SHajimu UMEMOTO 	 *
956f95d4633SHajimu UMEMOTO 	 * 2: if user asks us not to fragment (dontfrag == 1)
957f95d4633SHajimu UMEMOTO 	 * 2-a:	send as is if tlen <= interface mtu
958f95d4633SHajimu UMEMOTO 	 * 2-b:	error if tlen > interface mtu
959f95d4633SHajimu UMEMOTO 	 *
960f95d4633SHajimu UMEMOTO 	 * 3: if we always need to attach fragment header (alwaysfrag == 1)
961f95d4633SHajimu UMEMOTO 	 *	always fragment
962f95d4633SHajimu UMEMOTO 	 *
963f95d4633SHajimu UMEMOTO 	 * 4: if dontfrag == 1 && alwaysfrag == 1
964f95d4633SHajimu UMEMOTO 	 *	error, as we cannot handle this conflicting request
96582cd038dSYoshinobu Inoue 	 */
96682cd038dSYoshinobu Inoue 	tlen = m->m_pkthdr.len;
96782cd038dSYoshinobu Inoue 
968f95d4633SHajimu UMEMOTO 	if (opt && (opt->ip6po_flags & IP6PO_DONTFRAG))
969f95d4633SHajimu UMEMOTO 		dontfrag = 1;
970f95d4633SHajimu UMEMOTO 	else
971f95d4633SHajimu UMEMOTO 		dontfrag = 0;
972f95d4633SHajimu UMEMOTO 	if (dontfrag && alwaysfrag) {	/* case 4 */
973f95d4633SHajimu UMEMOTO 		/* conflicting request - can't transmit */
974f95d4633SHajimu UMEMOTO 		error = EMSGSIZE;
975f95d4633SHajimu UMEMOTO 		goto bad;
976f95d4633SHajimu UMEMOTO 	}
977f95d4633SHajimu UMEMOTO 	if (dontfrag && tlen > IN6_LINKMTU(ifp)) {	/* case 2-b */
978f95d4633SHajimu UMEMOTO 		/*
979f95d4633SHajimu UMEMOTO 		 * Even if the DONTFRAG option is specified, we cannot send the
980f95d4633SHajimu UMEMOTO 		 * packet when the data length is larger than the MTU of the
981f95d4633SHajimu UMEMOTO 		 * outgoing interface.
982f95d4633SHajimu UMEMOTO 		 * Notify the error by sending IPV6_PATHMTU ancillary data as
983f95d4633SHajimu UMEMOTO 		 * well as returning an error code (the latter is not described
984f95d4633SHajimu UMEMOTO 		 * in the API spec.)
985f95d4633SHajimu UMEMOTO 		 */
986f95d4633SHajimu UMEMOTO 		u_int32_t mtu32;
987f95d4633SHajimu UMEMOTO 		struct ip6ctlparam ip6cp;
988f95d4633SHajimu UMEMOTO 
989f95d4633SHajimu UMEMOTO 		mtu32 = (u_int32_t)mtu;
990f95d4633SHajimu UMEMOTO 		bzero(&ip6cp, sizeof(ip6cp));
991f95d4633SHajimu UMEMOTO 		ip6cp.ip6c_cmdarg = (void *)&mtu32;
992f95d4633SHajimu UMEMOTO 		pfctlinput2(PRC_MSGSIZE, (struct sockaddr *)&ro_pmtu->ro_dst,
993f95d4633SHajimu UMEMOTO 		    (void *)&ip6cp);
994f95d4633SHajimu UMEMOTO 
995f95d4633SHajimu UMEMOTO 		error = EMSGSIZE;
996f95d4633SHajimu UMEMOTO 		goto bad;
997f95d4633SHajimu UMEMOTO 	}
998f95d4633SHajimu UMEMOTO 
999f95d4633SHajimu UMEMOTO 	/*
1000f95d4633SHajimu UMEMOTO 	 * transmit packet without fragmentation
1001f95d4633SHajimu UMEMOTO 	 */
1002f95d4633SHajimu UMEMOTO 	if (dontfrag || (!alwaysfrag && tlen <= mtu)) {	/* case 1-a and 2-a */
1003f95d4633SHajimu UMEMOTO 		struct in6_ifaddr *ia6;
1004f95d4633SHajimu UMEMOTO 
1005f95d4633SHajimu UMEMOTO 		ip6 = mtod(m, struct ip6_hdr *);
1006f95d4633SHajimu UMEMOTO 		ia6 = in6_ifawithifp(ifp, &ip6->ip6_src);
1007f95d4633SHajimu UMEMOTO 		if (ia6) {
10085da9f8faSJosef Karthauser 			/* Record statistics for this interface address. */
1009f95d4633SHajimu UMEMOTO 			ia6->ia_ifa.if_opackets++;
1010f95d4633SHajimu UMEMOTO 			ia6->ia_ifa.if_obytes += m->m_pkthdr.len;
10115da9f8faSJosef Karthauser 		}
101233841545SHajimu UMEMOTO #ifdef IPSEC
101333841545SHajimu UMEMOTO 		/* clean ipsec history once it goes out of the node */
101433841545SHajimu UMEMOTO 		ipsec_delaux(m);
101533841545SHajimu UMEMOTO #endif
1016686cdd19SJun-ichiro itojun Hagino 		error = nd6_output(ifp, origifp, m, dst, ro->ro_rt);
101782cd038dSYoshinobu Inoue 		goto done;
1018f95d4633SHajimu UMEMOTO 	}
1019f95d4633SHajimu UMEMOTO 
102082cd038dSYoshinobu Inoue 	/*
1021f95d4633SHajimu UMEMOTO 	 * try to fragment the packet.  case 1-b and 3
102282cd038dSYoshinobu Inoue 	 */
1023f95d4633SHajimu UMEMOTO 	if (mtu < IPV6_MMTU) {
1024f95d4633SHajimu UMEMOTO 		/* path MTU cannot be less than IPV6_MMTU */
102582cd038dSYoshinobu Inoue 		error = EMSGSIZE;
102682cd038dSYoshinobu Inoue 		in6_ifstat_inc(ifp, ifs6_out_fragfail);
102782cd038dSYoshinobu Inoue 		goto bad;
10287efe5d92SHajimu UMEMOTO 	} else if (ip6->ip6_plen == 0) {
10297efe5d92SHajimu UMEMOTO 		/* jumbo payload cannot be fragmented */
103082cd038dSYoshinobu Inoue 		error = EMSGSIZE;
103182cd038dSYoshinobu Inoue 		in6_ifstat_inc(ifp, ifs6_out_fragfail);
103282cd038dSYoshinobu Inoue 		goto bad;
103382cd038dSYoshinobu Inoue 	} else {
103482cd038dSYoshinobu Inoue 		struct mbuf **mnext, *m_frgpart;
103582cd038dSYoshinobu Inoue 		struct ip6_frag *ip6f;
10368373d51dSHajimu UMEMOTO 		u_int32_t id = htonl(ip6_randomid());
103782cd038dSYoshinobu Inoue 		u_char nextproto;
1038763f534eSDoug White #if 0
10398b00e59dSHajimu UMEMOTO 		struct ip6ctlparam ip6cp;
10408b00e59dSHajimu UMEMOTO 		u_int32_t mtu32;
1041763f534eSDoug White #endif
10426f8aee22SBill Paul 		int qslots = ifp->if_snd.ifq_maxlen - ifp->if_snd.ifq_len;
104382cd038dSYoshinobu Inoue 
104482cd038dSYoshinobu Inoue 		/*
104582cd038dSYoshinobu Inoue 		 * Too large for the destination or interface;
104682cd038dSYoshinobu Inoue 		 * fragment if possible.
104782cd038dSYoshinobu Inoue 		 * Must be able to put at least 8 bytes per fragment.
104882cd038dSYoshinobu Inoue 		 */
104982cd038dSYoshinobu Inoue 		hlen = unfragpartlen;
105082cd038dSYoshinobu Inoue 		if (mtu > IPV6_MAXPACKET)
105182cd038dSYoshinobu Inoue 			mtu = IPV6_MAXPACKET;
105233841545SHajimu UMEMOTO 
1053763f534eSDoug White #if 0
1054763f534eSDoug White 		/*
1055763f534eSDoug White 		 * It is believed this code is a leftover from the
1056763f534eSDoug White 		 * development of the IPV6_RECVPATHMTU sockopt and
1057763f534eSDoug White 		 * associated work to implement RFC3542.
1058763f534eSDoug White 		 * It's not entirely clear what the intent of the API
1059763f534eSDoug White 		 * is at this point, so disable this code for now.
1060763f534eSDoug White 		 * The IPV6_RECVPATHMTU sockopt and/or IPV6_DONTFRAG
1061763f534eSDoug White 		 * will send notifications if the application requests.
1062763f534eSDoug White 		 */
1063763f534eSDoug White 
10648b00e59dSHajimu UMEMOTO 		/* Notify a proper path MTU to applications. */
10658b00e59dSHajimu UMEMOTO 		mtu32 = (u_int32_t)mtu;
10668b00e59dSHajimu UMEMOTO 		bzero(&ip6cp, sizeof(ip6cp));
10678b00e59dSHajimu UMEMOTO 		ip6cp.ip6c_cmdarg = (void *)&mtu32;
10688b00e59dSHajimu UMEMOTO 		pfctlinput2(PRC_MSGSIZE, (struct sockaddr *)&ro_pmtu->ro_dst,
10698b00e59dSHajimu UMEMOTO 		    (void *)&ip6cp);
1070763f534eSDoug White #endif
10718b00e59dSHajimu UMEMOTO 
107282cd038dSYoshinobu Inoue 		len = (mtu - hlen - sizeof(struct ip6_frag)) & ~7;
107382cd038dSYoshinobu Inoue 		if (len < 8) {
107482cd038dSYoshinobu Inoue 			error = EMSGSIZE;
107582cd038dSYoshinobu Inoue 			in6_ifstat_inc(ifp, ifs6_out_fragfail);
107682cd038dSYoshinobu Inoue 			goto bad;
107782cd038dSYoshinobu Inoue 		}
107882cd038dSYoshinobu Inoue 
10796f8aee22SBill Paul 		/*
10806f8aee22SBill Paul 		 * Verify that we have any chance at all of being able to queue
10816f8aee22SBill Paul 		 *      the packet or packet fragments
10826f8aee22SBill Paul 		 */
10836f8aee22SBill Paul 		if (qslots <= 0 || ((u_int)qslots * (mtu - hlen)
10846f8aee22SBill Paul 		    < tlen  /* - hlen */)) {
10856f8aee22SBill Paul 			error = ENOBUFS;
10866f8aee22SBill Paul 			ip6stat.ip6s_odropped++;
10876f8aee22SBill Paul 			goto bad;
10886f8aee22SBill Paul 		}
10896f8aee22SBill Paul 
109082cd038dSYoshinobu Inoue 		mnext = &m->m_nextpkt;
109182cd038dSYoshinobu Inoue 
109282cd038dSYoshinobu Inoue 		/*
109382cd038dSYoshinobu Inoue 		 * Change the next header field of the last header in the
109482cd038dSYoshinobu Inoue 		 * unfragmentable part.
109582cd038dSYoshinobu Inoue 		 */
109682cd038dSYoshinobu Inoue 		if (exthdrs.ip6e_rthdr) {
109782cd038dSYoshinobu Inoue 			nextproto = *mtod(exthdrs.ip6e_rthdr, u_char *);
109882cd038dSYoshinobu Inoue 			*mtod(exthdrs.ip6e_rthdr, u_char *) = IPPROTO_FRAGMENT;
109982cd038dSYoshinobu Inoue 		} else if (exthdrs.ip6e_dest1) {
110082cd038dSYoshinobu Inoue 			nextproto = *mtod(exthdrs.ip6e_dest1, u_char *);
110182cd038dSYoshinobu Inoue 			*mtod(exthdrs.ip6e_dest1, u_char *) = IPPROTO_FRAGMENT;
110282cd038dSYoshinobu Inoue 		} else if (exthdrs.ip6e_hbh) {
110382cd038dSYoshinobu Inoue 			nextproto = *mtod(exthdrs.ip6e_hbh, u_char *);
110482cd038dSYoshinobu Inoue 			*mtod(exthdrs.ip6e_hbh, u_char *) = IPPROTO_FRAGMENT;
110582cd038dSYoshinobu Inoue 		} else {
110682cd038dSYoshinobu Inoue 			nextproto = ip6->ip6_nxt;
110782cd038dSYoshinobu Inoue 			ip6->ip6_nxt = IPPROTO_FRAGMENT;
110882cd038dSYoshinobu Inoue 		}
110982cd038dSYoshinobu Inoue 
111082cd038dSYoshinobu Inoue 		/*
111182cd038dSYoshinobu Inoue 		 * Loop through length of segment after first fragment,
111288ff5695SSUZUKI Shinsuke 		 * make new header and copy data of each part and link onto
111388ff5695SSUZUKI Shinsuke 		 * chain.
111482cd038dSYoshinobu Inoue 		 */
111582cd038dSYoshinobu Inoue 		m0 = m;
111682cd038dSYoshinobu Inoue 		for (off = hlen; off < tlen; off += len) {
1117a163d034SWarner Losh 			MGETHDR(m, M_DONTWAIT, MT_HEADER);
111882cd038dSYoshinobu Inoue 			if (!m) {
111982cd038dSYoshinobu Inoue 				error = ENOBUFS;
112082cd038dSYoshinobu Inoue 				ip6stat.ip6s_odropped++;
112182cd038dSYoshinobu Inoue 				goto sendorfree;
112282cd038dSYoshinobu Inoue 			}
112333841545SHajimu UMEMOTO 			m->m_pkthdr.rcvif = NULL;
112482cd038dSYoshinobu Inoue 			m->m_flags = m0->m_flags & M_COPYFLAGS;
112582cd038dSYoshinobu Inoue 			*mnext = m;
112682cd038dSYoshinobu Inoue 			mnext = &m->m_nextpkt;
112782cd038dSYoshinobu Inoue 			m->m_data += max_linkhdr;
112882cd038dSYoshinobu Inoue 			mhip6 = mtod(m, struct ip6_hdr *);
112982cd038dSYoshinobu Inoue 			*mhip6 = *ip6;
113082cd038dSYoshinobu Inoue 			m->m_len = sizeof(*mhip6);
113182cd038dSYoshinobu Inoue 			error = ip6_insertfraghdr(m0, m, hlen, &ip6f);
113282cd038dSYoshinobu Inoue 			if (error) {
113382cd038dSYoshinobu Inoue 				ip6stat.ip6s_odropped++;
113482cd038dSYoshinobu Inoue 				goto sendorfree;
113582cd038dSYoshinobu Inoue 			}
113682cd038dSYoshinobu Inoue 			ip6f->ip6f_offlg = htons((u_short)((off - hlen) & ~7));
113782cd038dSYoshinobu Inoue 			if (off + len >= tlen)
113882cd038dSYoshinobu Inoue 				len = tlen - off;
113982cd038dSYoshinobu Inoue 			else
114082cd038dSYoshinobu Inoue 				ip6f->ip6f_offlg |= IP6F_MORE_FRAG;
114182cd038dSYoshinobu Inoue 			mhip6->ip6_plen = htons((u_short)(len + hlen +
11427efe5d92SHajimu UMEMOTO 			    sizeof(*ip6f) - sizeof(struct ip6_hdr)));
114382cd038dSYoshinobu Inoue 			if ((m_frgpart = m_copy(m0, off, len)) == 0) {
114482cd038dSYoshinobu Inoue 				error = ENOBUFS;
114582cd038dSYoshinobu Inoue 				ip6stat.ip6s_odropped++;
114682cd038dSYoshinobu Inoue 				goto sendorfree;
114782cd038dSYoshinobu Inoue 			}
114882cd038dSYoshinobu Inoue 			m_cat(m, m_frgpart);
114982cd038dSYoshinobu Inoue 			m->m_pkthdr.len = len + hlen + sizeof(*ip6f);
115082cd038dSYoshinobu Inoue 			m->m_pkthdr.rcvif = (struct ifnet *)0;
115182cd038dSYoshinobu Inoue 			ip6f->ip6f_reserved = 0;
115282cd038dSYoshinobu Inoue 			ip6f->ip6f_ident = id;
115382cd038dSYoshinobu Inoue 			ip6f->ip6f_nxt = nextproto;
115482cd038dSYoshinobu Inoue 			ip6stat.ip6s_ofragments++;
115582cd038dSYoshinobu Inoue 			in6_ifstat_inc(ifp, ifs6_out_fragcreat);
115682cd038dSYoshinobu Inoue 		}
115782cd038dSYoshinobu Inoue 
115882cd038dSYoshinobu Inoue 		in6_ifstat_inc(ifp, ifs6_out_fragok);
115982cd038dSYoshinobu Inoue 	}
116082cd038dSYoshinobu Inoue 
116182cd038dSYoshinobu Inoue 	/*
116282cd038dSYoshinobu Inoue 	 * Remove leading garbages.
116382cd038dSYoshinobu Inoue 	 */
116482cd038dSYoshinobu Inoue sendorfree:
116582cd038dSYoshinobu Inoue 	m = m0->m_nextpkt;
116682cd038dSYoshinobu Inoue 	m0->m_nextpkt = 0;
116782cd038dSYoshinobu Inoue 	m_freem(m0);
116882cd038dSYoshinobu Inoue 	for (m0 = m; m; m = m0) {
116982cd038dSYoshinobu Inoue 		m0 = m->m_nextpkt;
117082cd038dSYoshinobu Inoue 		m->m_nextpkt = 0;
117182cd038dSYoshinobu Inoue 		if (error == 0) {
1172fe937674SJosef Karthauser  			/* Record statistics for this interface address. */
1173fe937674SJosef Karthauser  			if (ia) {
1174fe937674SJosef Karthauser  				ia->ia_ifa.if_opackets++;
1175fe937674SJosef Karthauser  				ia->ia_ifa.if_obytes += m->m_pkthdr.len;
1176fe937674SJosef Karthauser  			}
117733841545SHajimu UMEMOTO #ifdef IPSEC
117833841545SHajimu UMEMOTO 			/* clean ipsec history once it goes out of the node */
117933841545SHajimu UMEMOTO 			ipsec_delaux(m);
118033841545SHajimu UMEMOTO #endif
1181686cdd19SJun-ichiro itojun Hagino 			error = nd6_output(ifp, origifp, m, dst, ro->ro_rt);
118282cd038dSYoshinobu Inoue 		} else
118382cd038dSYoshinobu Inoue 			m_freem(m);
118482cd038dSYoshinobu Inoue 	}
118582cd038dSYoshinobu Inoue 
118682cd038dSYoshinobu Inoue 	if (error == 0)
118782cd038dSYoshinobu Inoue 		ip6stat.ip6s_fragmented++;
118882cd038dSYoshinobu Inoue 
118982cd038dSYoshinobu Inoue done:
119082cd038dSYoshinobu Inoue 	if (ro == &ip6route && ro->ro_rt) { /* brace necessary for RTFREE */
119182cd038dSYoshinobu Inoue 		RTFREE(ro->ro_rt);
119282cd038dSYoshinobu Inoue 	} else if (ro_pmtu == &ip6route && ro_pmtu->ro_rt) {
119382cd038dSYoshinobu Inoue 		RTFREE(ro_pmtu->ro_rt);
119482cd038dSYoshinobu Inoue 	}
119582cd038dSYoshinobu Inoue 
119682cd038dSYoshinobu Inoue #ifdef IPSEC
119782cd038dSYoshinobu Inoue 	if (sp != NULL)
119882cd038dSYoshinobu Inoue 		key_freesp(sp);
119982cd038dSYoshinobu Inoue #endif /* IPSEC */
1200b9234fafSSam Leffler #ifdef FAST_IPSEC
1201b9234fafSSam Leffler 	if (sp != NULL)
1202b9234fafSSam Leffler 		KEY_FREESP(&sp);
1203b9234fafSSam Leffler #endif /* FAST_IPSEC */
120482cd038dSYoshinobu Inoue 
120582cd038dSYoshinobu Inoue 	return (error);
120682cd038dSYoshinobu Inoue 
120782cd038dSYoshinobu Inoue freehdrs:
120882cd038dSYoshinobu Inoue 	m_freem(exthdrs.ip6e_hbh);	/* m_freem will check if mbuf is 0 */
120982cd038dSYoshinobu Inoue 	m_freem(exthdrs.ip6e_dest1);
121082cd038dSYoshinobu Inoue 	m_freem(exthdrs.ip6e_rthdr);
121182cd038dSYoshinobu Inoue 	m_freem(exthdrs.ip6e_dest2);
12127efe5d92SHajimu UMEMOTO 	/* FALLTHROUGH */
121382cd038dSYoshinobu Inoue bad:
121482cd038dSYoshinobu Inoue 	m_freem(m);
121582cd038dSYoshinobu Inoue 	goto done;
121682cd038dSYoshinobu Inoue }
121782cd038dSYoshinobu Inoue 
121882cd038dSYoshinobu Inoue static int
121982cd038dSYoshinobu Inoue ip6_copyexthdr(mp, hdr, hlen)
122082cd038dSYoshinobu Inoue 	struct mbuf **mp;
122182cd038dSYoshinobu Inoue 	caddr_t hdr;
122282cd038dSYoshinobu Inoue 	int hlen;
122382cd038dSYoshinobu Inoue {
122482cd038dSYoshinobu Inoue 	struct mbuf *m;
122582cd038dSYoshinobu Inoue 
122682cd038dSYoshinobu Inoue 	if (hlen > MCLBYTES)
122782cd038dSYoshinobu Inoue 		return (ENOBUFS); /* XXX */
122882cd038dSYoshinobu Inoue 
1229a163d034SWarner Losh 	MGET(m, M_DONTWAIT, MT_DATA);
123082cd038dSYoshinobu Inoue 	if (!m)
123182cd038dSYoshinobu Inoue 		return (ENOBUFS);
123282cd038dSYoshinobu Inoue 
123382cd038dSYoshinobu Inoue 	if (hlen > MLEN) {
1234a163d034SWarner Losh 		MCLGET(m, M_DONTWAIT);
123582cd038dSYoshinobu Inoue 		if ((m->m_flags & M_EXT) == 0) {
123682cd038dSYoshinobu Inoue 			m_free(m);
123782cd038dSYoshinobu Inoue 			return (ENOBUFS);
123882cd038dSYoshinobu Inoue 		}
123982cd038dSYoshinobu Inoue 	}
124082cd038dSYoshinobu Inoue 	m->m_len = hlen;
124182cd038dSYoshinobu Inoue 	if (hdr)
124282cd038dSYoshinobu Inoue 		bcopy(hdr, mtod(m, caddr_t), hlen);
124382cd038dSYoshinobu Inoue 
124482cd038dSYoshinobu Inoue 	*mp = m;
124582cd038dSYoshinobu Inoue 	return (0);
124682cd038dSYoshinobu Inoue }
124782cd038dSYoshinobu Inoue 
124882cd038dSYoshinobu Inoue /*
124982cd038dSYoshinobu Inoue  * Insert jumbo payload option.
125082cd038dSYoshinobu Inoue  */
125182cd038dSYoshinobu Inoue static int
125282cd038dSYoshinobu Inoue ip6_insert_jumboopt(exthdrs, plen)
125382cd038dSYoshinobu Inoue 	struct ip6_exthdrs *exthdrs;
125482cd038dSYoshinobu Inoue 	u_int32_t plen;
125582cd038dSYoshinobu Inoue {
125682cd038dSYoshinobu Inoue 	struct mbuf *mopt;
125782cd038dSYoshinobu Inoue 	u_char *optbuf;
125833841545SHajimu UMEMOTO 	u_int32_t v;
125982cd038dSYoshinobu Inoue 
126082cd038dSYoshinobu Inoue #define JUMBOOPTLEN	8	/* length of jumbo payload option and padding */
126182cd038dSYoshinobu Inoue 
126282cd038dSYoshinobu Inoue 	/*
126382cd038dSYoshinobu Inoue 	 * If there is no hop-by-hop options header, allocate new one.
126482cd038dSYoshinobu Inoue 	 * If there is one but it doesn't have enough space to store the
126582cd038dSYoshinobu Inoue 	 * jumbo payload option, allocate a cluster to store the whole options.
126682cd038dSYoshinobu Inoue 	 * Otherwise, use it to store the options.
126782cd038dSYoshinobu Inoue 	 */
126882cd038dSYoshinobu Inoue 	if (exthdrs->ip6e_hbh == 0) {
1269a163d034SWarner Losh 		MGET(mopt, M_DONTWAIT, MT_DATA);
127082cd038dSYoshinobu Inoue 		if (mopt == 0)
127182cd038dSYoshinobu Inoue 			return (ENOBUFS);
127282cd038dSYoshinobu Inoue 		mopt->m_len = JUMBOOPTLEN;
127382cd038dSYoshinobu Inoue 		optbuf = mtod(mopt, u_char *);
127482cd038dSYoshinobu Inoue 		optbuf[1] = 0;	/* = ((JUMBOOPTLEN) >> 3) - 1 */
127582cd038dSYoshinobu Inoue 		exthdrs->ip6e_hbh = mopt;
127682cd038dSYoshinobu Inoue 	} else {
127782cd038dSYoshinobu Inoue 		struct ip6_hbh *hbh;
127882cd038dSYoshinobu Inoue 
127982cd038dSYoshinobu Inoue 		mopt = exthdrs->ip6e_hbh;
128082cd038dSYoshinobu Inoue 		if (M_TRAILINGSPACE(mopt) < JUMBOOPTLEN) {
128133841545SHajimu UMEMOTO 			/*
128233841545SHajimu UMEMOTO 			 * XXX assumption:
128333841545SHajimu UMEMOTO 			 * - exthdrs->ip6e_hbh is not referenced from places
128433841545SHajimu UMEMOTO 			 *   other than exthdrs.
128533841545SHajimu UMEMOTO 			 * - exthdrs->ip6e_hbh is not an mbuf chain.
128633841545SHajimu UMEMOTO 			 */
128782cd038dSYoshinobu Inoue 			int oldoptlen = mopt->m_len;
128833841545SHajimu UMEMOTO 			struct mbuf *n;
128982cd038dSYoshinobu Inoue 
129033841545SHajimu UMEMOTO 			/*
129133841545SHajimu UMEMOTO 			 * XXX: give up if the whole (new) hbh header does
129233841545SHajimu UMEMOTO 			 * not fit even in an mbuf cluster.
129333841545SHajimu UMEMOTO 			 */
129433841545SHajimu UMEMOTO 			if (oldoptlen + JUMBOOPTLEN > MCLBYTES)
129582cd038dSYoshinobu Inoue 				return (ENOBUFS);
129682cd038dSYoshinobu Inoue 
129733841545SHajimu UMEMOTO 			/*
129833841545SHajimu UMEMOTO 			 * As a consequence, we must always prepare a cluster
129933841545SHajimu UMEMOTO 			 * at this point.
130033841545SHajimu UMEMOTO 			 */
1301a163d034SWarner Losh 			MGET(n, M_DONTWAIT, MT_DATA);
130233841545SHajimu UMEMOTO 			if (n) {
1303a163d034SWarner Losh 				MCLGET(n, M_DONTWAIT);
130433841545SHajimu UMEMOTO 				if ((n->m_flags & M_EXT) == 0) {
130533841545SHajimu UMEMOTO 					m_freem(n);
130633841545SHajimu UMEMOTO 					n = NULL;
130733841545SHajimu UMEMOTO 				}
130833841545SHajimu UMEMOTO 			}
130933841545SHajimu UMEMOTO 			if (!n)
131033841545SHajimu UMEMOTO 				return (ENOBUFS);
131133841545SHajimu UMEMOTO 			n->m_len = oldoptlen + JUMBOOPTLEN;
131233841545SHajimu UMEMOTO 			bcopy(mtod(mopt, caddr_t), mtod(n, caddr_t),
131333841545SHajimu UMEMOTO 			    oldoptlen);
131433841545SHajimu UMEMOTO 			optbuf = mtod(n, caddr_t) + oldoptlen;
131533841545SHajimu UMEMOTO 			m_freem(mopt);
131633841545SHajimu UMEMOTO 			mopt = exthdrs->ip6e_hbh = n;
131782cd038dSYoshinobu Inoue 		} else {
131882cd038dSYoshinobu Inoue 			optbuf = mtod(mopt, u_char *) + mopt->m_len;
131982cd038dSYoshinobu Inoue 			mopt->m_len += JUMBOOPTLEN;
132082cd038dSYoshinobu Inoue 		}
132182cd038dSYoshinobu Inoue 		optbuf[0] = IP6OPT_PADN;
132282cd038dSYoshinobu Inoue 		optbuf[1] = 1;
132382cd038dSYoshinobu Inoue 
132482cd038dSYoshinobu Inoue 		/*
132582cd038dSYoshinobu Inoue 		 * Adjust the header length according to the pad and
132682cd038dSYoshinobu Inoue 		 * the jumbo payload option.
132782cd038dSYoshinobu Inoue 		 */
132882cd038dSYoshinobu Inoue 		hbh = mtod(mopt, struct ip6_hbh *);
132982cd038dSYoshinobu Inoue 		hbh->ip6h_len += (JUMBOOPTLEN >> 3);
133082cd038dSYoshinobu Inoue 	}
133182cd038dSYoshinobu Inoue 
133282cd038dSYoshinobu Inoue 	/* fill in the option. */
133382cd038dSYoshinobu Inoue 	optbuf[2] = IP6OPT_JUMBO;
133482cd038dSYoshinobu Inoue 	optbuf[3] = 4;
133533841545SHajimu UMEMOTO 	v = (u_int32_t)htonl(plen + JUMBOOPTLEN);
133633841545SHajimu UMEMOTO 	bcopy(&v, &optbuf[4], sizeof(u_int32_t));
133782cd038dSYoshinobu Inoue 
133882cd038dSYoshinobu Inoue 	/* finally, adjust the packet header length */
133982cd038dSYoshinobu Inoue 	exthdrs->ip6e_ip6->m_pkthdr.len += JUMBOOPTLEN;
134082cd038dSYoshinobu Inoue 
134182cd038dSYoshinobu Inoue 	return (0);
134282cd038dSYoshinobu Inoue #undef JUMBOOPTLEN
134382cd038dSYoshinobu Inoue }
134482cd038dSYoshinobu Inoue 
134582cd038dSYoshinobu Inoue /*
134682cd038dSYoshinobu Inoue  * Insert fragment header and copy unfragmentable header portions.
134782cd038dSYoshinobu Inoue  */
134882cd038dSYoshinobu Inoue static int
134982cd038dSYoshinobu Inoue ip6_insertfraghdr(m0, m, hlen, frghdrp)
135082cd038dSYoshinobu Inoue 	struct mbuf *m0, *m;
135182cd038dSYoshinobu Inoue 	int hlen;
135282cd038dSYoshinobu Inoue 	struct ip6_frag **frghdrp;
135382cd038dSYoshinobu Inoue {
135482cd038dSYoshinobu Inoue 	struct mbuf *n, *mlast;
135582cd038dSYoshinobu Inoue 
135682cd038dSYoshinobu Inoue 	if (hlen > sizeof(struct ip6_hdr)) {
135782cd038dSYoshinobu Inoue 		n = m_copym(m0, sizeof(struct ip6_hdr),
1358a163d034SWarner Losh 		    hlen - sizeof(struct ip6_hdr), M_DONTWAIT);
135982cd038dSYoshinobu Inoue 		if (n == 0)
136082cd038dSYoshinobu Inoue 			return (ENOBUFS);
136182cd038dSYoshinobu Inoue 		m->m_next = n;
136282cd038dSYoshinobu Inoue 	} else
136382cd038dSYoshinobu Inoue 		n = m;
136482cd038dSYoshinobu Inoue 
136582cd038dSYoshinobu Inoue 	/* Search for the last mbuf of unfragmentable part. */
136682cd038dSYoshinobu Inoue 	for (mlast = n; mlast->m_next; mlast = mlast->m_next)
136782cd038dSYoshinobu Inoue 		;
136882cd038dSYoshinobu Inoue 
136982cd038dSYoshinobu Inoue 	if ((mlast->m_flags & M_EXT) == 0 &&
1370686cdd19SJun-ichiro itojun Hagino 	    M_TRAILINGSPACE(mlast) >= sizeof(struct ip6_frag)) {
137182cd038dSYoshinobu Inoue 		/* use the trailing space of the last mbuf for the fragment hdr */
13727efe5d92SHajimu UMEMOTO 		*frghdrp = (struct ip6_frag *)(mtod(mlast, caddr_t) +
13737efe5d92SHajimu UMEMOTO 		    mlast->m_len);
137482cd038dSYoshinobu Inoue 		mlast->m_len += sizeof(struct ip6_frag);
137582cd038dSYoshinobu Inoue 		m->m_pkthdr.len += sizeof(struct ip6_frag);
137682cd038dSYoshinobu Inoue 	} else {
137782cd038dSYoshinobu Inoue 		/* allocate a new mbuf for the fragment header */
137882cd038dSYoshinobu Inoue 		struct mbuf *mfrg;
137982cd038dSYoshinobu Inoue 
1380a163d034SWarner Losh 		MGET(mfrg, M_DONTWAIT, MT_DATA);
138182cd038dSYoshinobu Inoue 		if (mfrg == 0)
138282cd038dSYoshinobu Inoue 			return (ENOBUFS);
138382cd038dSYoshinobu Inoue 		mfrg->m_len = sizeof(struct ip6_frag);
138482cd038dSYoshinobu Inoue 		*frghdrp = mtod(mfrg, struct ip6_frag *);
138582cd038dSYoshinobu Inoue 		mlast->m_next = mfrg;
138682cd038dSYoshinobu Inoue 	}
138782cd038dSYoshinobu Inoue 
138882cd038dSYoshinobu Inoue 	return (0);
138982cd038dSYoshinobu Inoue }
139082cd038dSYoshinobu Inoue 
139131b3783cSHajimu UMEMOTO static int
1392f95d4633SHajimu UMEMOTO ip6_getpmtu(ro_pmtu, ro, ifp, dst, mtup, alwaysfragp)
139331b3783cSHajimu UMEMOTO 	struct route_in6 *ro_pmtu, *ro;
139431b3783cSHajimu UMEMOTO 	struct ifnet *ifp;
139531b3783cSHajimu UMEMOTO 	struct in6_addr *dst;
139631b3783cSHajimu UMEMOTO 	u_long *mtup;
1397f95d4633SHajimu UMEMOTO 	int *alwaysfragp;
139831b3783cSHajimu UMEMOTO {
139931b3783cSHajimu UMEMOTO 	u_int32_t mtu = 0;
1400f95d4633SHajimu UMEMOTO 	int alwaysfrag = 0;
140131b3783cSHajimu UMEMOTO 	int error = 0;
140231b3783cSHajimu UMEMOTO 
140331b3783cSHajimu UMEMOTO 	if (ro_pmtu != ro) {
140431b3783cSHajimu UMEMOTO 		/* The first hop and the final destination may differ. */
140531b3783cSHajimu UMEMOTO 		struct sockaddr_in6 *sa6_dst =
140631b3783cSHajimu UMEMOTO 		    (struct sockaddr_in6 *)&ro_pmtu->ro_dst;
140731b3783cSHajimu UMEMOTO 		if (ro_pmtu->ro_rt &&
1408e5f467a2SHajimu UMEMOTO 		    ((ro_pmtu->ro_rt->rt_flags & RTF_UP) == 0 ||
140931b3783cSHajimu UMEMOTO 		     !IN6_ARE_ADDR_EQUAL(&sa6_dst->sin6_addr, dst))) {
141031b3783cSHajimu UMEMOTO 			RTFREE(ro_pmtu->ro_rt);
141131b3783cSHajimu UMEMOTO 			ro_pmtu->ro_rt = (struct rtentry *)NULL;
141231b3783cSHajimu UMEMOTO 		}
141331b3783cSHajimu UMEMOTO 		if (ro_pmtu->ro_rt == NULL) {
141431b3783cSHajimu UMEMOTO 			bzero(sa6_dst, sizeof(*sa6_dst));
141531b3783cSHajimu UMEMOTO 			sa6_dst->sin6_family = AF_INET6;
141631b3783cSHajimu UMEMOTO 			sa6_dst->sin6_len = sizeof(struct sockaddr_in6);
141731b3783cSHajimu UMEMOTO 			sa6_dst->sin6_addr = *dst;
141831b3783cSHajimu UMEMOTO 
141931b3783cSHajimu UMEMOTO 			rtalloc((struct route *)ro_pmtu);
142031b3783cSHajimu UMEMOTO 		}
142131b3783cSHajimu UMEMOTO 	}
142231b3783cSHajimu UMEMOTO 	if (ro_pmtu->ro_rt) {
142331b3783cSHajimu UMEMOTO 		u_int32_t ifmtu;
142497d8d152SAndre Oppermann 		struct in_conninfo inc;
142597d8d152SAndre Oppermann 
142697d8d152SAndre Oppermann 		bzero(&inc, sizeof(inc));
142797d8d152SAndre Oppermann 		inc.inc_flags = 1; /* IPv6 */
142897d8d152SAndre Oppermann 		inc.inc6_faddr = *dst;
142931b3783cSHajimu UMEMOTO 
143031b3783cSHajimu UMEMOTO 		if (ifp == NULL)
143131b3783cSHajimu UMEMOTO 			ifp = ro_pmtu->ro_rt->rt_ifp;
143231b3783cSHajimu UMEMOTO 		ifmtu = IN6_LINKMTU(ifp);
143397d8d152SAndre Oppermann 		mtu = tcp_hc_getmtu(&inc);
143497d8d152SAndre Oppermann 		if (mtu)
143597d8d152SAndre Oppermann 			mtu = min(mtu, ro_pmtu->ro_rt->rt_rmx.rmx_mtu);
143697d8d152SAndre Oppermann 		else
143731b3783cSHajimu UMEMOTO 			mtu = ro_pmtu->ro_rt->rt_rmx.rmx_mtu;
143831b3783cSHajimu UMEMOTO 		if (mtu == 0)
143931b3783cSHajimu UMEMOTO 			mtu = ifmtu;
1440f95d4633SHajimu UMEMOTO 		else if (mtu < IPV6_MMTU) {
1441f95d4633SHajimu UMEMOTO 			/*
1442f95d4633SHajimu UMEMOTO 			 * RFC2460 section 5, last paragraph:
1443f95d4633SHajimu UMEMOTO 			 * if we record ICMPv6 too big message with
1444f95d4633SHajimu UMEMOTO 			 * mtu < IPV6_MMTU, transmit packets sized IPV6_MMTU
1445f95d4633SHajimu UMEMOTO 			 * or smaller, with framgent header attached.
1446f95d4633SHajimu UMEMOTO 			 * (fragment header is needed regardless from the
1447f95d4633SHajimu UMEMOTO 			 * packet size, for translators to identify packets)
1448f95d4633SHajimu UMEMOTO 			 */
1449f95d4633SHajimu UMEMOTO 			alwaysfrag = 1;
1450f95d4633SHajimu UMEMOTO 			mtu = IPV6_MMTU;
1451f95d4633SHajimu UMEMOTO 		} else if (mtu > ifmtu) {
145231b3783cSHajimu UMEMOTO 			/*
145331b3783cSHajimu UMEMOTO 			 * The MTU on the route is larger than the MTU on
145431b3783cSHajimu UMEMOTO 			 * the interface!  This shouldn't happen, unless the
145531b3783cSHajimu UMEMOTO 			 * MTU of the interface has been changed after the
145631b3783cSHajimu UMEMOTO 			 * interface was brought up.  Change the MTU in the
145731b3783cSHajimu UMEMOTO 			 * route to match the interface MTU (as long as the
145831b3783cSHajimu UMEMOTO 			 * field isn't locked).
145931b3783cSHajimu UMEMOTO 			 */
146031b3783cSHajimu UMEMOTO 			mtu = ifmtu;
146131b3783cSHajimu UMEMOTO 			ro_pmtu->ro_rt->rt_rmx.rmx_mtu = mtu;
146231b3783cSHajimu UMEMOTO 		}
146331b3783cSHajimu UMEMOTO 	} else if (ifp) {
146431b3783cSHajimu UMEMOTO 		mtu = IN6_LINKMTU(ifp);
146531b3783cSHajimu UMEMOTO 	} else
146631b3783cSHajimu UMEMOTO 		error = EHOSTUNREACH; /* XXX */
146731b3783cSHajimu UMEMOTO 
146831b3783cSHajimu UMEMOTO 	*mtup = mtu;
1469f95d4633SHajimu UMEMOTO 	if (alwaysfragp)
1470f95d4633SHajimu UMEMOTO 		*alwaysfragp = alwaysfrag;
147131b3783cSHajimu UMEMOTO 	return (error);
147231b3783cSHajimu UMEMOTO }
147331b3783cSHajimu UMEMOTO 
147482cd038dSYoshinobu Inoue /*
147582cd038dSYoshinobu Inoue  * IP6 socket option processing.
147682cd038dSYoshinobu Inoue  */
147782cd038dSYoshinobu Inoue int
147882cd038dSYoshinobu Inoue ip6_ctloutput(so, sopt)
147982cd038dSYoshinobu Inoue 	struct socket *so;
148082cd038dSYoshinobu Inoue 	struct sockopt *sopt;
148182cd038dSYoshinobu Inoue {
1482f95d4633SHajimu UMEMOTO 	int privileged, optdatalen, uproto;
1483f95d4633SHajimu UMEMOTO 	void *optdata;
148433841545SHajimu UMEMOTO 	struct inpcb *in6p = sotoinpcb(so);
148582cd038dSYoshinobu Inoue 	int error, optval;
148682cd038dSYoshinobu Inoue 	int level, op, optname;
148782cd038dSYoshinobu Inoue 	int optlen;
1488b40ce416SJulian Elischer 	struct thread *td;
148982cd038dSYoshinobu Inoue 
149082cd038dSYoshinobu Inoue 	if (sopt) {
149182cd038dSYoshinobu Inoue 		level = sopt->sopt_level;
149282cd038dSYoshinobu Inoue 		op = sopt->sopt_dir;
149382cd038dSYoshinobu Inoue 		optname = sopt->sopt_name;
149482cd038dSYoshinobu Inoue 		optlen = sopt->sopt_valsize;
1495b40ce416SJulian Elischer 		td = sopt->sopt_td;
149682cd038dSYoshinobu Inoue 	} else {
149782cd038dSYoshinobu Inoue 		panic("ip6_ctloutput: arg soopt is NULL");
149882cd038dSYoshinobu Inoue 	}
149982cd038dSYoshinobu Inoue 	error = optval = 0;
150082cd038dSYoshinobu Inoue 
150144731cabSJohn Baldwin 	privileged = (td == 0 || suser(td)) ? 0 : 1;
1502f95d4633SHajimu UMEMOTO 	uproto = (int)so->so_proto->pr_protocol;
150382cd038dSYoshinobu Inoue 
150482cd038dSYoshinobu Inoue 	if (level == IPPROTO_IPV6) {
150582cd038dSYoshinobu Inoue 		switch (op) {
150633841545SHajimu UMEMOTO 
150782cd038dSYoshinobu Inoue 		case SOPT_SET:
150882cd038dSYoshinobu Inoue 			switch (optname) {
1509f95d4633SHajimu UMEMOTO 			case IPV6_2292PKTOPTIONS:
1510f95d4633SHajimu UMEMOTO #ifdef IPV6_PKTOPTIONS
151182cd038dSYoshinobu Inoue 			case IPV6_PKTOPTIONS:
1512f95d4633SHajimu UMEMOTO #endif
151382cd038dSYoshinobu Inoue 			{
151482cd038dSYoshinobu Inoue 				struct mbuf *m;
151582cd038dSYoshinobu Inoue 
151682cd038dSYoshinobu Inoue 				error = soopt_getm(sopt, &m); /* XXX */
1517a89ec05eSPeter Wemm 				if (error != 0)
151882cd038dSYoshinobu Inoue 					break;
151982cd038dSYoshinobu Inoue 				error = soopt_mcopyin(sopt, m); /* XXX */
1520a89ec05eSPeter Wemm 				if (error != 0)
152182cd038dSYoshinobu Inoue 					break;
152233841545SHajimu UMEMOTO 				error = ip6_pcbopts(&in6p->in6p_outputopts,
152333841545SHajimu UMEMOTO 						    m, so, sopt);
152433841545SHajimu UMEMOTO 				m_freem(m); /* XXX */
152582cd038dSYoshinobu Inoue 				break;
152682cd038dSYoshinobu Inoue 			}
152733841545SHajimu UMEMOTO 
152833841545SHajimu UMEMOTO 			/*
152933841545SHajimu UMEMOTO 			 * Use of some Hop-by-Hop options or some
153033841545SHajimu UMEMOTO 			 * Destination options, might require special
153133841545SHajimu UMEMOTO 			 * privilege.  That is, normal applications
153233841545SHajimu UMEMOTO 			 * (without special privilege) might be forbidden
153333841545SHajimu UMEMOTO 			 * from setting certain options in outgoing packets,
153433841545SHajimu UMEMOTO 			 * and might never see certain options in received
153533841545SHajimu UMEMOTO 			 * packets. [RFC 2292 Section 6]
153633841545SHajimu UMEMOTO 			 * KAME specific note:
153733841545SHajimu UMEMOTO 			 *  KAME prevents non-privileged users from sending or
153833841545SHajimu UMEMOTO 			 *  receiving ANY hbh/dst options in order to avoid
153933841545SHajimu UMEMOTO 			 *  overhead of parsing options in the kernel.
154033841545SHajimu UMEMOTO 			 */
1541f95d4633SHajimu UMEMOTO 			case IPV6_RECVHOPOPTS:
1542f95d4633SHajimu UMEMOTO 			case IPV6_RECVDSTOPTS:
1543f95d4633SHajimu UMEMOTO 			case IPV6_RECVRTHDRDSTOPTS:
1544f95d4633SHajimu UMEMOTO 				if (!privileged) {
1545f95d4633SHajimu UMEMOTO 					error = EPERM;
1546f95d4633SHajimu UMEMOTO 					break;
1547f95d4633SHajimu UMEMOTO 				}
1548f95d4633SHajimu UMEMOTO 				/* FALLTHROUGH */
154982cd038dSYoshinobu Inoue 			case IPV6_UNICAST_HOPS:
1550f95d4633SHajimu UMEMOTO 			case IPV6_HOPLIMIT:
155182cd038dSYoshinobu Inoue 			case IPV6_FAITH:
155233841545SHajimu UMEMOTO 
1553f95d4633SHajimu UMEMOTO 			case IPV6_RECVPKTINFO:
1554f95d4633SHajimu UMEMOTO 			case IPV6_RECVHOPLIMIT:
1555f95d4633SHajimu UMEMOTO 			case IPV6_RECVRTHDR:
1556f95d4633SHajimu UMEMOTO 			case IPV6_RECVPATHMTU:
1557f95d4633SHajimu UMEMOTO 			case IPV6_RECVTCLASS:
155833841545SHajimu UMEMOTO 			case IPV6_V6ONLY:
1559f95d4633SHajimu UMEMOTO 			case IPV6_AUTOFLOWLABEL:
156033841545SHajimu UMEMOTO 				if (optlen != sizeof(int)) {
156182cd038dSYoshinobu Inoue 					error = EINVAL;
156233841545SHajimu UMEMOTO 					break;
156333841545SHajimu UMEMOTO 				}
156482cd038dSYoshinobu Inoue 				error = sooptcopyin(sopt, &optval,
156582cd038dSYoshinobu Inoue 					sizeof optval, sizeof optval);
156682cd038dSYoshinobu Inoue 				if (error)
156782cd038dSYoshinobu Inoue 					break;
156882cd038dSYoshinobu Inoue 				switch (optname) {
156982cd038dSYoshinobu Inoue 
157082cd038dSYoshinobu Inoue 				case IPV6_UNICAST_HOPS:
157182cd038dSYoshinobu Inoue 					if (optval < -1 || optval >= 256)
157282cd038dSYoshinobu Inoue 						error = EINVAL;
157382cd038dSYoshinobu Inoue 					else {
157482cd038dSYoshinobu Inoue 						/* -1 = kernel default */
157582cd038dSYoshinobu Inoue 						in6p->in6p_hops = optval;
157682cd038dSYoshinobu Inoue 						if ((in6p->in6p_vflag &
157782cd038dSYoshinobu Inoue 						     INP_IPV4) != 0)
157882cd038dSYoshinobu Inoue 							in6p->inp_ip_ttl = optval;
157982cd038dSYoshinobu Inoue 					}
158082cd038dSYoshinobu Inoue 					break;
158182cd038dSYoshinobu Inoue #define OPTSET(bit) \
158233841545SHajimu UMEMOTO do { \
158382cd038dSYoshinobu Inoue 	if (optval) \
158433841545SHajimu UMEMOTO 		in6p->in6p_flags |= (bit); \
158582cd038dSYoshinobu Inoue 	else \
158633841545SHajimu UMEMOTO 		in6p->in6p_flags &= ~(bit); \
15877efe5d92SHajimu UMEMOTO } while (/*CONSTCOND*/ 0)
1588f95d4633SHajimu UMEMOTO #define OPTSET2292(bit) \
1589f95d4633SHajimu UMEMOTO do { \
1590f95d4633SHajimu UMEMOTO 	in6p->in6p_flags |= IN6P_RFC2292; \
1591f95d4633SHajimu UMEMOTO 	if (optval) \
1592f95d4633SHajimu UMEMOTO 		in6p->in6p_flags |= (bit); \
1593f95d4633SHajimu UMEMOTO 	else \
1594f95d4633SHajimu UMEMOTO 		in6p->in6p_flags &= ~(bit); \
1595f95d4633SHajimu UMEMOTO } while (/*CONSTCOND*/ 0)
159633841545SHajimu UMEMOTO #define OPTBIT(bit) (in6p->in6p_flags & (bit) ? 1 : 0)
159782cd038dSYoshinobu Inoue 
1598f95d4633SHajimu UMEMOTO 				case IPV6_RECVPKTINFO:
1599f95d4633SHajimu UMEMOTO 					/* cannot mix with RFC2292 */
1600f95d4633SHajimu UMEMOTO 					if (OPTBIT(IN6P_RFC2292)) {
1601f95d4633SHajimu UMEMOTO 						error = EINVAL;
1602f95d4633SHajimu UMEMOTO 						break;
1603f95d4633SHajimu UMEMOTO 					}
1604f95d4633SHajimu UMEMOTO 					OPTSET(IN6P_PKTINFO);
1605f95d4633SHajimu UMEMOTO 					break;
1606f95d4633SHajimu UMEMOTO 
1607f95d4633SHajimu UMEMOTO 				case IPV6_HOPLIMIT:
1608f95d4633SHajimu UMEMOTO 				{
1609f95d4633SHajimu UMEMOTO 					struct ip6_pktopts **optp;
1610f95d4633SHajimu UMEMOTO 
1611f95d4633SHajimu UMEMOTO 					/* cannot mix with RFC2292 */
1612f95d4633SHajimu UMEMOTO 					if (OPTBIT(IN6P_RFC2292)) {
1613f95d4633SHajimu UMEMOTO 						error = EINVAL;
1614f95d4633SHajimu UMEMOTO 						break;
1615f95d4633SHajimu UMEMOTO 					}
1616f95d4633SHajimu UMEMOTO 					optp = &in6p->in6p_outputopts;
1617f95d4633SHajimu UMEMOTO 					error = ip6_pcbopt(IPV6_HOPLIMIT,
1618f95d4633SHajimu UMEMOTO 							   (u_char *)&optval,
1619f95d4633SHajimu UMEMOTO 							   sizeof(optval),
1620f95d4633SHajimu UMEMOTO 							   optp,
1621f95d4633SHajimu UMEMOTO 							   privileged, uproto);
1622f95d4633SHajimu UMEMOTO 					break;
1623f95d4633SHajimu UMEMOTO 				}
1624f95d4633SHajimu UMEMOTO 
1625f95d4633SHajimu UMEMOTO 				case IPV6_RECVHOPLIMIT:
1626f95d4633SHajimu UMEMOTO 					/* cannot mix with RFC2292 */
1627f95d4633SHajimu UMEMOTO 					if (OPTBIT(IN6P_RFC2292)) {
1628f95d4633SHajimu UMEMOTO 						error = EINVAL;
1629f95d4633SHajimu UMEMOTO 						break;
1630f95d4633SHajimu UMEMOTO 					}
1631f95d4633SHajimu UMEMOTO 					OPTSET(IN6P_HOPLIMIT);
1632f95d4633SHajimu UMEMOTO 					break;
1633f95d4633SHajimu UMEMOTO 
1634f95d4633SHajimu UMEMOTO 				case IPV6_RECVHOPOPTS:
1635f95d4633SHajimu UMEMOTO 					/* cannot mix with RFC2292 */
1636f95d4633SHajimu UMEMOTO 					if (OPTBIT(IN6P_RFC2292)) {
1637f95d4633SHajimu UMEMOTO 						error = EINVAL;
1638f95d4633SHajimu UMEMOTO 						break;
1639f95d4633SHajimu UMEMOTO 					}
1640f95d4633SHajimu UMEMOTO 					OPTSET(IN6P_HOPOPTS);
1641f95d4633SHajimu UMEMOTO 					break;
1642f95d4633SHajimu UMEMOTO 
1643f95d4633SHajimu UMEMOTO 				case IPV6_RECVDSTOPTS:
1644f95d4633SHajimu UMEMOTO 					/* cannot mix with RFC2292 */
1645f95d4633SHajimu UMEMOTO 					if (OPTBIT(IN6P_RFC2292)) {
1646f95d4633SHajimu UMEMOTO 						error = EINVAL;
1647f95d4633SHajimu UMEMOTO 						break;
1648f95d4633SHajimu UMEMOTO 					}
1649f95d4633SHajimu UMEMOTO 					OPTSET(IN6P_DSTOPTS);
1650f95d4633SHajimu UMEMOTO 					break;
1651f95d4633SHajimu UMEMOTO 
1652f95d4633SHajimu UMEMOTO 				case IPV6_RECVRTHDRDSTOPTS:
1653f95d4633SHajimu UMEMOTO 					/* cannot mix with RFC2292 */
1654f95d4633SHajimu UMEMOTO 					if (OPTBIT(IN6P_RFC2292)) {
1655f95d4633SHajimu UMEMOTO 						error = EINVAL;
1656f95d4633SHajimu UMEMOTO 						break;
1657f95d4633SHajimu UMEMOTO 					}
1658f95d4633SHajimu UMEMOTO 					OPTSET(IN6P_RTHDRDSTOPTS);
1659f95d4633SHajimu UMEMOTO 					break;
1660f95d4633SHajimu UMEMOTO 
1661f95d4633SHajimu UMEMOTO 				case IPV6_RECVRTHDR:
1662f95d4633SHajimu UMEMOTO 					/* cannot mix with RFC2292 */
1663f95d4633SHajimu UMEMOTO 					if (OPTBIT(IN6P_RFC2292)) {
1664f95d4633SHajimu UMEMOTO 						error = EINVAL;
1665f95d4633SHajimu UMEMOTO 						break;
1666f95d4633SHajimu UMEMOTO 					}
1667f95d4633SHajimu UMEMOTO 					OPTSET(IN6P_RTHDR);
166882cd038dSYoshinobu Inoue 					break;
166982cd038dSYoshinobu Inoue 
167082cd038dSYoshinobu Inoue 				case IPV6_FAITH:
167182cd038dSYoshinobu Inoue 					OPTSET(IN6P_FAITH);
167282cd038dSYoshinobu Inoue 					break;
167382cd038dSYoshinobu Inoue 
1674f95d4633SHajimu UMEMOTO 				case IPV6_RECVPATHMTU:
1675f95d4633SHajimu UMEMOTO 					/*
1676f95d4633SHajimu UMEMOTO 					 * We ignore this option for TCP
1677f95d4633SHajimu UMEMOTO 					 * sockets.
1678f95d4633SHajimu UMEMOTO 					 * (rfc2292bis leaves this case
1679f95d4633SHajimu UMEMOTO 					 * unspecified.)
1680f95d4633SHajimu UMEMOTO 					 */
1681f95d4633SHajimu UMEMOTO 					if (uproto != IPPROTO_TCP)
1682f95d4633SHajimu UMEMOTO 						OPTSET(IN6P_MTU);
1683f95d4633SHajimu UMEMOTO 					break;
1684f95d4633SHajimu UMEMOTO 
168533841545SHajimu UMEMOTO 				case IPV6_V6ONLY:
168633841545SHajimu UMEMOTO 					/*
16870554093bSHajimu UMEMOTO 					 * make setsockopt(IPV6_V6ONLY)
16880554093bSHajimu UMEMOTO 					 * available only prior to bind(2).
16890554093bSHajimu UMEMOTO 					 * see ipng mailing list, Jun 22 2001.
16900554093bSHajimu UMEMOTO 					 */
16910554093bSHajimu UMEMOTO 					if (in6p->in6p_lport ||
16927efe5d92SHajimu UMEMOTO 					    !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) {
16930554093bSHajimu UMEMOTO 						error = EINVAL;
16940554093bSHajimu UMEMOTO 						break;
16950554093bSHajimu UMEMOTO 					}
169633841545SHajimu UMEMOTO 					OPTSET(IN6P_IPV6_V6ONLY);
169712253795SHajimu UMEMOTO 					if (optval)
169812253795SHajimu UMEMOTO 						in6p->in6p_vflag &= ~INP_IPV4;
169912253795SHajimu UMEMOTO 					else
170012253795SHajimu UMEMOTO 						in6p->in6p_vflag |= INP_IPV4;
170182cd038dSYoshinobu Inoue 					break;
1702f95d4633SHajimu UMEMOTO 				case IPV6_RECVTCLASS:
1703f95d4633SHajimu UMEMOTO 					/* cannot mix with RFC2292 XXX */
1704f95d4633SHajimu UMEMOTO 					if (OPTBIT(IN6P_RFC2292)) {
1705f95d4633SHajimu UMEMOTO 						error = EINVAL;
1706f95d4633SHajimu UMEMOTO 						break;
1707f95d4633SHajimu UMEMOTO 					}
1708f95d4633SHajimu UMEMOTO 					OPTSET(IN6P_TCLASS);
1709f95d4633SHajimu UMEMOTO 					break;
1710f95d4633SHajimu UMEMOTO 				case IPV6_AUTOFLOWLABEL:
1711f95d4633SHajimu UMEMOTO 					OPTSET(IN6P_AUTOFLOWLABEL);
1712f95d4633SHajimu UMEMOTO 					break;
1713f95d4633SHajimu UMEMOTO 
171482cd038dSYoshinobu Inoue 				}
171533841545SHajimu UMEMOTO 				break;
171633841545SHajimu UMEMOTO 
1717f95d4633SHajimu UMEMOTO 			case IPV6_TCLASS:
1718f95d4633SHajimu UMEMOTO 			case IPV6_DONTFRAG:
1719f95d4633SHajimu UMEMOTO 			case IPV6_USE_MIN_MTU:
1720f95d4633SHajimu UMEMOTO 			case IPV6_PREFER_TEMPADDR:
1721f95d4633SHajimu UMEMOTO 				if (optlen != sizeof(optval)) {
1722f95d4633SHajimu UMEMOTO 					error = EINVAL;
1723f95d4633SHajimu UMEMOTO 					break;
1724f95d4633SHajimu UMEMOTO 				}
1725f95d4633SHajimu UMEMOTO 				error = sooptcopyin(sopt, &optval,
1726f95d4633SHajimu UMEMOTO 					sizeof optval, sizeof optval);
1727f95d4633SHajimu UMEMOTO 				if (error)
1728f95d4633SHajimu UMEMOTO 					break;
1729f95d4633SHajimu UMEMOTO 				{
1730f95d4633SHajimu UMEMOTO 					struct ip6_pktopts **optp;
1731f95d4633SHajimu UMEMOTO 					optp = &in6p->in6p_outputopts;
1732f95d4633SHajimu UMEMOTO 					error = ip6_pcbopt(optname,
1733f95d4633SHajimu UMEMOTO 							   (u_char *)&optval,
1734f95d4633SHajimu UMEMOTO 							   sizeof(optval),
1735f95d4633SHajimu UMEMOTO 							   optp,
1736f95d4633SHajimu UMEMOTO 							   privileged, uproto);
1737f95d4633SHajimu UMEMOTO 					break;
1738f95d4633SHajimu UMEMOTO 				}
1739f95d4633SHajimu UMEMOTO 
1740f95d4633SHajimu UMEMOTO 			case IPV6_2292PKTINFO:
1741f95d4633SHajimu UMEMOTO 			case IPV6_2292HOPLIMIT:
1742f95d4633SHajimu UMEMOTO 			case IPV6_2292HOPOPTS:
1743f95d4633SHajimu UMEMOTO 			case IPV6_2292DSTOPTS:
1744f95d4633SHajimu UMEMOTO 			case IPV6_2292RTHDR:
174533841545SHajimu UMEMOTO 				/* RFC 2292 */
174633841545SHajimu UMEMOTO 				if (optlen != sizeof(int)) {
174733841545SHajimu UMEMOTO 					error = EINVAL;
174833841545SHajimu UMEMOTO 					break;
174933841545SHajimu UMEMOTO 				}
175033841545SHajimu UMEMOTO 				error = sooptcopyin(sopt, &optval,
175133841545SHajimu UMEMOTO 					sizeof optval, sizeof optval);
175233841545SHajimu UMEMOTO 				if (error)
175333841545SHajimu UMEMOTO 					break;
175433841545SHajimu UMEMOTO 				switch (optname) {
1755f95d4633SHajimu UMEMOTO 				case IPV6_2292PKTINFO:
1756f95d4633SHajimu UMEMOTO 					OPTSET2292(IN6P_PKTINFO);
175733841545SHajimu UMEMOTO 					break;
1758f95d4633SHajimu UMEMOTO 				case IPV6_2292HOPLIMIT:
1759f95d4633SHajimu UMEMOTO 					OPTSET2292(IN6P_HOPLIMIT);
176033841545SHajimu UMEMOTO 					break;
1761f95d4633SHajimu UMEMOTO 				case IPV6_2292HOPOPTS:
176233841545SHajimu UMEMOTO 					/*
176333841545SHajimu UMEMOTO 					 * Check super-user privilege.
176433841545SHajimu UMEMOTO 					 * See comments for IPV6_RECVHOPOPTS.
176533841545SHajimu UMEMOTO 					 */
176633841545SHajimu UMEMOTO 					if (!privileged)
176733841545SHajimu UMEMOTO 						return (EPERM);
1768f95d4633SHajimu UMEMOTO 					OPTSET2292(IN6P_HOPOPTS);
176933841545SHajimu UMEMOTO 					break;
1770f95d4633SHajimu UMEMOTO 				case IPV6_2292DSTOPTS:
177133841545SHajimu UMEMOTO 					if (!privileged)
177233841545SHajimu UMEMOTO 						return (EPERM);
1773f95d4633SHajimu UMEMOTO 					OPTSET2292(IN6P_DSTOPTS|IN6P_RTHDRDSTOPTS); /* XXX */
177433841545SHajimu UMEMOTO 					break;
1775f95d4633SHajimu UMEMOTO 				case IPV6_2292RTHDR:
1776f95d4633SHajimu UMEMOTO 					OPTSET2292(IN6P_RTHDR);
177733841545SHajimu UMEMOTO 					break;
177882cd038dSYoshinobu Inoue 				}
177982cd038dSYoshinobu Inoue 				break;
1780f95d4633SHajimu UMEMOTO 			case IPV6_PKTINFO:
1781f95d4633SHajimu UMEMOTO 			case IPV6_HOPOPTS:
1782f95d4633SHajimu UMEMOTO 			case IPV6_RTHDR:
1783f95d4633SHajimu UMEMOTO 			case IPV6_DSTOPTS:
1784f95d4633SHajimu UMEMOTO 			case IPV6_RTHDRDSTOPTS:
1785f95d4633SHajimu UMEMOTO 			case IPV6_NEXTHOP:
1786f95d4633SHajimu UMEMOTO 			{
1787f95d4633SHajimu UMEMOTO 				/* new advanced API (2292bis) */
1788f95d4633SHajimu UMEMOTO 				u_char *optbuf;
1789f95d4633SHajimu UMEMOTO 				int optlen;
1790f95d4633SHajimu UMEMOTO 				struct ip6_pktopts **optp;
1791f95d4633SHajimu UMEMOTO 
1792f95d4633SHajimu UMEMOTO 				/* cannot mix with RFC2292 */
1793f95d4633SHajimu UMEMOTO 				if (OPTBIT(IN6P_RFC2292)) {
1794f95d4633SHajimu UMEMOTO 					error = EINVAL;
1795f95d4633SHajimu UMEMOTO 					break;
1796f95d4633SHajimu UMEMOTO 				}
1797f95d4633SHajimu UMEMOTO 
1798a5d1aae3SHajimu UMEMOTO 				switch (optname) {
1799a5d1aae3SHajimu UMEMOTO 				case IPV6_HOPOPTS:
1800a5d1aae3SHajimu UMEMOTO 				case IPV6_DSTOPTS:
1801a5d1aae3SHajimu UMEMOTO 				case IPV6_RTHDRDSTOPTS:
1802a5d1aae3SHajimu UMEMOTO 				case IPV6_NEXTHOP:
1803a5d1aae3SHajimu UMEMOTO 					if (!privileged)
1804a5d1aae3SHajimu UMEMOTO 						error = EPERM;
1805a5d1aae3SHajimu UMEMOTO 					break;
1806a5d1aae3SHajimu UMEMOTO 				}
1807a5d1aae3SHajimu UMEMOTO 				if (error)
1808a5d1aae3SHajimu UMEMOTO 					break;
1809a5d1aae3SHajimu UMEMOTO 
1810a5d1aae3SHajimu UMEMOTO 				switch (optname) {
1811a5d1aae3SHajimu UMEMOTO 				case IPV6_PKTINFO:
1812a5d1aae3SHajimu UMEMOTO 					optlen = sizeof(struct in6_pktinfo);
1813a5d1aae3SHajimu UMEMOTO 					break;
1814a5d1aae3SHajimu UMEMOTO 				case IPV6_NEXTHOP:
1815a5d1aae3SHajimu UMEMOTO 					optlen = SOCK_MAXADDRLEN;
1816a5d1aae3SHajimu UMEMOTO 					break;
1817a5d1aae3SHajimu UMEMOTO 				default:
1818a5d1aae3SHajimu UMEMOTO 					optlen = IPV6_MAXOPTHDR;
1819a5d1aae3SHajimu UMEMOTO 					break;
1820a5d1aae3SHajimu UMEMOTO 				}
1821a5d1aae3SHajimu UMEMOTO 				if (sopt->sopt_valsize > optlen) {
1822a5d1aae3SHajimu UMEMOTO 					error = EINVAL;
1823a5d1aae3SHajimu UMEMOTO 					break;
1824a5d1aae3SHajimu UMEMOTO 				}
1825a5d1aae3SHajimu UMEMOTO 
1826f95d4633SHajimu UMEMOTO 				optlen = sopt->sopt_valsize;
1827a5d1aae3SHajimu UMEMOTO 				optbuf = malloc(optlen, M_TEMP, M_WAITOK);
1828a5d1aae3SHajimu UMEMOTO 				error = sooptcopyin(sopt, optbuf, optlen,
1829a5d1aae3SHajimu UMEMOTO 				    optlen);
1830a5d1aae3SHajimu UMEMOTO 				if (error) {
1831a5d1aae3SHajimu UMEMOTO 					free(optbuf, M_TEMP);
1832a5d1aae3SHajimu UMEMOTO 					break;
1833a5d1aae3SHajimu UMEMOTO 				}
1834a5d1aae3SHajimu UMEMOTO 
1835f95d4633SHajimu UMEMOTO 				optp = &in6p->in6p_outputopts;
1836f95d4633SHajimu UMEMOTO 				error = ip6_pcbopt(optname,
1837f95d4633SHajimu UMEMOTO 						   optbuf, optlen,
1838f95d4633SHajimu UMEMOTO 						   optp, privileged, uproto);
1839a5d1aae3SHajimu UMEMOTO 				free(optbuf, M_TEMP);
1840f95d4633SHajimu UMEMOTO 				break;
1841f95d4633SHajimu UMEMOTO 			}
184282cd038dSYoshinobu Inoue #undef OPTSET
184382cd038dSYoshinobu Inoue 
184482cd038dSYoshinobu Inoue 			case IPV6_MULTICAST_IF:
184582cd038dSYoshinobu Inoue 			case IPV6_MULTICAST_HOPS:
184682cd038dSYoshinobu Inoue 			case IPV6_MULTICAST_LOOP:
184782cd038dSYoshinobu Inoue 			case IPV6_JOIN_GROUP:
184882cd038dSYoshinobu Inoue 			case IPV6_LEAVE_GROUP:
184982cd038dSYoshinobu Inoue 			    {
185082cd038dSYoshinobu Inoue 				if (sopt->sopt_valsize > MLEN) {
185182cd038dSYoshinobu Inoue 					error = EMSGSIZE;
185282cd038dSYoshinobu Inoue 					break;
185382cd038dSYoshinobu Inoue 				}
185482cd038dSYoshinobu Inoue 				/* XXX */
1855f95d4633SHajimu UMEMOTO 			    }
1856f95d4633SHajimu UMEMOTO 			    /* FALLTHROUGH */
1857f95d4633SHajimu UMEMOTO 			    {
1858f95d4633SHajimu UMEMOTO 				struct mbuf *m;
1859f95d4633SHajimu UMEMOTO 
1860f95d4633SHajimu UMEMOTO 				if (sopt->sopt_valsize > MCLBYTES) {
1861f95d4633SHajimu UMEMOTO 					error = EMSGSIZE;
1862f95d4633SHajimu UMEMOTO 					break;
1863f95d4633SHajimu UMEMOTO 				}
1864f95d4633SHajimu UMEMOTO 				/* XXX */
1865f95d4633SHajimu UMEMOTO 				MGET(m, sopt->sopt_td ? M_WAIT : M_DONTWAIT, MT_HEADER);
186682cd038dSYoshinobu Inoue 				if (m == 0) {
186782cd038dSYoshinobu Inoue 					error = ENOBUFS;
186882cd038dSYoshinobu Inoue 					break;
186982cd038dSYoshinobu Inoue 				}
1870f95d4633SHajimu UMEMOTO 				if (sopt->sopt_valsize > MLEN) {
1871f95d4633SHajimu UMEMOTO 					MCLGET(m, sopt->sopt_td ? M_WAIT : M_DONTWAIT);
1872f95d4633SHajimu UMEMOTO 					if ((m->m_flags & M_EXT) == 0) {
1873f95d4633SHajimu UMEMOTO 						m_free(m);
1874f95d4633SHajimu UMEMOTO 						error = ENOBUFS;
1875f95d4633SHajimu UMEMOTO 						break;
1876f95d4633SHajimu UMEMOTO 					}
1877f95d4633SHajimu UMEMOTO 				}
187882cd038dSYoshinobu Inoue 				m->m_len = sopt->sopt_valsize;
187982cd038dSYoshinobu Inoue 				error = sooptcopyin(sopt, mtod(m, char *),
188082cd038dSYoshinobu Inoue 						    m->m_len, m->m_len);
1881f95d4633SHajimu UMEMOTO 				if (error) {
1882f95d4633SHajimu UMEMOTO 					(void)m_free(m);
1883f95d4633SHajimu UMEMOTO 					break;
1884f95d4633SHajimu UMEMOTO 				}
188582cd038dSYoshinobu Inoue 				error =	ip6_setmoptions(sopt->sopt_name,
188682cd038dSYoshinobu Inoue 							&in6p->in6p_moptions,
188782cd038dSYoshinobu Inoue 							m);
188882cd038dSYoshinobu Inoue 				(void)m_free(m);
188982cd038dSYoshinobu Inoue 			    }
189082cd038dSYoshinobu Inoue 				break;
189182cd038dSYoshinobu Inoue 
189282cd038dSYoshinobu Inoue 			case IPV6_PORTRANGE:
1893686cdd19SJun-ichiro itojun Hagino 				error = sooptcopyin(sopt, &optval,
1894686cdd19SJun-ichiro itojun Hagino 				    sizeof optval, sizeof optval);
189582cd038dSYoshinobu Inoue 				if (error)
189682cd038dSYoshinobu Inoue 					break;
189782cd038dSYoshinobu Inoue 
189882cd038dSYoshinobu Inoue 				switch (optval) {
189982cd038dSYoshinobu Inoue 				case IPV6_PORTRANGE_DEFAULT:
190082cd038dSYoshinobu Inoue 					in6p->in6p_flags &= ~(IN6P_LOWPORT);
190182cd038dSYoshinobu Inoue 					in6p->in6p_flags &= ~(IN6P_HIGHPORT);
190282cd038dSYoshinobu Inoue 					break;
190382cd038dSYoshinobu Inoue 
190482cd038dSYoshinobu Inoue 				case IPV6_PORTRANGE_HIGH:
190582cd038dSYoshinobu Inoue 					in6p->in6p_flags &= ~(IN6P_LOWPORT);
190682cd038dSYoshinobu Inoue 					in6p->in6p_flags |= IN6P_HIGHPORT;
190782cd038dSYoshinobu Inoue 					break;
190882cd038dSYoshinobu Inoue 
190982cd038dSYoshinobu Inoue 				case IPV6_PORTRANGE_LOW:
191082cd038dSYoshinobu Inoue 					in6p->in6p_flags &= ~(IN6P_HIGHPORT);
191182cd038dSYoshinobu Inoue 					in6p->in6p_flags |= IN6P_LOWPORT;
191282cd038dSYoshinobu Inoue 					break;
191382cd038dSYoshinobu Inoue 
191482cd038dSYoshinobu Inoue 				default:
191582cd038dSYoshinobu Inoue 					error = EINVAL;
191682cd038dSYoshinobu Inoue 					break;
191782cd038dSYoshinobu Inoue 				}
191882cd038dSYoshinobu Inoue 				break;
191982cd038dSYoshinobu Inoue 
1920b9234fafSSam Leffler #if defined(IPSEC) || defined(FAST_IPSEC)
192182cd038dSYoshinobu Inoue 			case IPV6_IPSEC_POLICY:
192282cd038dSYoshinobu Inoue 			    {
192382cd038dSYoshinobu Inoue 				caddr_t req = NULL;
1924686cdd19SJun-ichiro itojun Hagino 				size_t len = 0;
192582cd038dSYoshinobu Inoue 				struct mbuf *m;
192682cd038dSYoshinobu Inoue 
1927686cdd19SJun-ichiro itojun Hagino 				if ((error = soopt_getm(sopt, &m)) != 0) /* XXX */
192882cd038dSYoshinobu Inoue 					break;
1929686cdd19SJun-ichiro itojun Hagino 				if ((error = soopt_mcopyin(sopt, m)) != 0) /* XXX */
193082cd038dSYoshinobu Inoue 					break;
1931686cdd19SJun-ichiro itojun Hagino 				if (m) {
193282cd038dSYoshinobu Inoue 					req = mtod(m, caddr_t);
1933686cdd19SJun-ichiro itojun Hagino 					len = m->m_len;
1934686cdd19SJun-ichiro itojun Hagino 				}
193582cd038dSYoshinobu Inoue 				error = ipsec6_set_policy(in6p, optname, req,
1936686cdd19SJun-ichiro itojun Hagino 							  len, privileged);
193782cd038dSYoshinobu Inoue 				m_freem(m);
193882cd038dSYoshinobu Inoue 			    }
193982cd038dSYoshinobu Inoue 				break;
194033841545SHajimu UMEMOTO #endif /* KAME IPSEC */
194182cd038dSYoshinobu Inoue 
194282cd038dSYoshinobu Inoue 			case IPV6_FW_ADD:
194382cd038dSYoshinobu Inoue 			case IPV6_FW_DEL:
194482cd038dSYoshinobu Inoue 			case IPV6_FW_FLUSH:
194582cd038dSYoshinobu Inoue 			case IPV6_FW_ZERO:
194682cd038dSYoshinobu Inoue 			    {
194782cd038dSYoshinobu Inoue 				struct mbuf *m;
194882cd038dSYoshinobu Inoue 				struct mbuf **mp = &m;
194982cd038dSYoshinobu Inoue 
195082cd038dSYoshinobu Inoue 				if (ip6_fw_ctl_ptr == NULL)
195182cd038dSYoshinobu Inoue 					return EINVAL;
19523e617560SHajimu UMEMOTO 				/* XXX */
19533e617560SHajimu UMEMOTO 				if ((error = soopt_getm(sopt, &m)) != 0)
195482cd038dSYoshinobu Inoue 					break;
19553e617560SHajimu UMEMOTO 				/* XXX */
19563e617560SHajimu UMEMOTO 				if ((error = soopt_mcopyin(sopt, m)) != 0)
195782cd038dSYoshinobu Inoue 					break;
195882cd038dSYoshinobu Inoue 				error = (*ip6_fw_ctl_ptr)(optname, mp);
195982cd038dSYoshinobu Inoue 				m = *mp;
196082cd038dSYoshinobu Inoue 			    }
196182cd038dSYoshinobu Inoue 				break;
196282cd038dSYoshinobu Inoue 
196382cd038dSYoshinobu Inoue 			default:
196482cd038dSYoshinobu Inoue 				error = ENOPROTOOPT;
196582cd038dSYoshinobu Inoue 				break;
196682cd038dSYoshinobu Inoue 			}
196782cd038dSYoshinobu Inoue 			break;
196882cd038dSYoshinobu Inoue 
196982cd038dSYoshinobu Inoue 		case SOPT_GET:
197082cd038dSYoshinobu Inoue 			switch (optname) {
197182cd038dSYoshinobu Inoue 
1972f95d4633SHajimu UMEMOTO 			case IPV6_2292PKTOPTIONS:
1973f95d4633SHajimu UMEMOTO #ifdef IPV6_PKTOPTIONS
197482cd038dSYoshinobu Inoue 			case IPV6_PKTOPTIONS:
1975f95d4633SHajimu UMEMOTO #endif
1976f95d4633SHajimu UMEMOTO 				/*
1977f95d4633SHajimu UMEMOTO 				 * RFC3542 (effectively) deprecated the
1978f95d4633SHajimu UMEMOTO 				 * semantics of the 2292-style pktoptions.
1979f95d4633SHajimu UMEMOTO 				 * Since it was not reliable in nature (i.e.,
1980f95d4633SHajimu UMEMOTO 				 * applications had to expect the lack of some
1981f95d4633SHajimu UMEMOTO 				 * information after all), it would make sense
1982f95d4633SHajimu UMEMOTO 				 * to simplify this part by always returning
1983f95d4633SHajimu UMEMOTO 				 * empty data.
1984f95d4633SHajimu UMEMOTO 				 */
198582cd038dSYoshinobu Inoue 				sopt->sopt_valsize = 0;
198682cd038dSYoshinobu Inoue 				break;
198782cd038dSYoshinobu Inoue 
1988f95d4633SHajimu UMEMOTO 			case IPV6_RECVHOPOPTS:
1989f95d4633SHajimu UMEMOTO 			case IPV6_RECVDSTOPTS:
1990f95d4633SHajimu UMEMOTO 			case IPV6_RECVRTHDRDSTOPTS:
199182cd038dSYoshinobu Inoue 			case IPV6_UNICAST_HOPS:
1992f95d4633SHajimu UMEMOTO 			case IPV6_RECVPKTINFO:
1993f95d4633SHajimu UMEMOTO 			case IPV6_RECVHOPLIMIT:
1994f95d4633SHajimu UMEMOTO 			case IPV6_RECVRTHDR:
1995f95d4633SHajimu UMEMOTO 			case IPV6_RECVPATHMTU:
199633841545SHajimu UMEMOTO 
199782cd038dSYoshinobu Inoue 			case IPV6_FAITH:
199833841545SHajimu UMEMOTO 			case IPV6_V6ONLY:
1999fa310a7eSYoshinobu Inoue 			case IPV6_PORTRANGE:
2000f95d4633SHajimu UMEMOTO 			case IPV6_RECVTCLASS:
2001f95d4633SHajimu UMEMOTO 			case IPV6_AUTOFLOWLABEL:
200282cd038dSYoshinobu Inoue 				switch (optname) {
200382cd038dSYoshinobu Inoue 
2004f95d4633SHajimu UMEMOTO 				case IPV6_RECVHOPOPTS:
2005f95d4633SHajimu UMEMOTO 					optval = OPTBIT(IN6P_HOPOPTS);
2006f95d4633SHajimu UMEMOTO 					break;
2007f95d4633SHajimu UMEMOTO 
2008f95d4633SHajimu UMEMOTO 				case IPV6_RECVDSTOPTS:
2009f95d4633SHajimu UMEMOTO 					optval = OPTBIT(IN6P_DSTOPTS);
2010f95d4633SHajimu UMEMOTO 					break;
2011f95d4633SHajimu UMEMOTO 
2012f95d4633SHajimu UMEMOTO 				case IPV6_RECVRTHDRDSTOPTS:
2013f95d4633SHajimu UMEMOTO 					optval = OPTBIT(IN6P_RTHDRDSTOPTS);
2014f95d4633SHajimu UMEMOTO 					break;
2015f95d4633SHajimu UMEMOTO 
201682cd038dSYoshinobu Inoue 				case IPV6_UNICAST_HOPS:
201782cd038dSYoshinobu Inoue 					optval = in6p->in6p_hops;
201882cd038dSYoshinobu Inoue 					break;
201982cd038dSYoshinobu Inoue 
2020f95d4633SHajimu UMEMOTO 				case IPV6_RECVPKTINFO:
2021f95d4633SHajimu UMEMOTO 					optval = OPTBIT(IN6P_PKTINFO);
2022f95d4633SHajimu UMEMOTO 					break;
2023f95d4633SHajimu UMEMOTO 
2024f95d4633SHajimu UMEMOTO 				case IPV6_RECVHOPLIMIT:
2025f95d4633SHajimu UMEMOTO 					optval = OPTBIT(IN6P_HOPLIMIT);
2026f95d4633SHajimu UMEMOTO 					break;
2027f95d4633SHajimu UMEMOTO 
2028f95d4633SHajimu UMEMOTO 				case IPV6_RECVRTHDR:
2029f95d4633SHajimu UMEMOTO 					optval = OPTBIT(IN6P_RTHDR);
2030f95d4633SHajimu UMEMOTO 					break;
2031f95d4633SHajimu UMEMOTO 
2032f95d4633SHajimu UMEMOTO 				case IPV6_RECVPATHMTU:
2033f95d4633SHajimu UMEMOTO 					optval = OPTBIT(IN6P_MTU);
203482cd038dSYoshinobu Inoue 					break;
203582cd038dSYoshinobu Inoue 
203682cd038dSYoshinobu Inoue 				case IPV6_FAITH:
203782cd038dSYoshinobu Inoue 					optval = OPTBIT(IN6P_FAITH);
203882cd038dSYoshinobu Inoue 					break;
203982cd038dSYoshinobu Inoue 
204033841545SHajimu UMEMOTO 				case IPV6_V6ONLY:
2041854d3b19SHajimu UMEMOTO 					optval = OPTBIT(IN6P_IPV6_V6ONLY);
204282cd038dSYoshinobu Inoue 					break;
204382cd038dSYoshinobu Inoue 
204482cd038dSYoshinobu Inoue 				case IPV6_PORTRANGE:
204582cd038dSYoshinobu Inoue 				    {
204682cd038dSYoshinobu Inoue 					int flags;
204782cd038dSYoshinobu Inoue 					flags = in6p->in6p_flags;
204882cd038dSYoshinobu Inoue 					if (flags & IN6P_HIGHPORT)
204982cd038dSYoshinobu Inoue 						optval = IPV6_PORTRANGE_HIGH;
205082cd038dSYoshinobu Inoue 					else if (flags & IN6P_LOWPORT)
205182cd038dSYoshinobu Inoue 						optval = IPV6_PORTRANGE_LOW;
205282cd038dSYoshinobu Inoue 					else
205382cd038dSYoshinobu Inoue 						optval = 0;
205482cd038dSYoshinobu Inoue 					break;
205582cd038dSYoshinobu Inoue 				    }
2056f95d4633SHajimu UMEMOTO 				case IPV6_RECVTCLASS:
2057f95d4633SHajimu UMEMOTO 					optval = OPTBIT(IN6P_TCLASS);
2058f95d4633SHajimu UMEMOTO 					break;
2059f95d4633SHajimu UMEMOTO 
2060f95d4633SHajimu UMEMOTO 				case IPV6_AUTOFLOWLABEL:
2061f95d4633SHajimu UMEMOTO 					optval = OPTBIT(IN6P_AUTOFLOWLABEL);
2062f95d4633SHajimu UMEMOTO 					break;
206382cd038dSYoshinobu Inoue 				}
2064f95d4633SHajimu UMEMOTO 				if (error)
2065f95d4633SHajimu UMEMOTO 					break;
206682cd038dSYoshinobu Inoue 				error = sooptcopyout(sopt, &optval,
206782cd038dSYoshinobu Inoue 					sizeof optval);
206882cd038dSYoshinobu Inoue 				break;
206982cd038dSYoshinobu Inoue 
2070f95d4633SHajimu UMEMOTO 			case IPV6_PATHMTU:
2071f95d4633SHajimu UMEMOTO 			{
2072f95d4633SHajimu UMEMOTO 				u_long pmtu = 0;
2073f95d4633SHajimu UMEMOTO 				struct ip6_mtuinfo mtuinfo;
207497d8d152SAndre Oppermann 				struct route_in6 sro;
207597d8d152SAndre Oppermann 
207697d8d152SAndre Oppermann 				bzero(&sro, sizeof(sro));
2077f95d4633SHajimu UMEMOTO 
2078f95d4633SHajimu UMEMOTO 				if (!(so->so_state & SS_ISCONNECTED))
2079f95d4633SHajimu UMEMOTO 					return (ENOTCONN);
2080f95d4633SHajimu UMEMOTO 				/*
2081f95d4633SHajimu UMEMOTO 				 * XXX: we dot not consider the case of source
2082f95d4633SHajimu UMEMOTO 				 * routing, or optional information to specify
2083f95d4633SHajimu UMEMOTO 				 * the outgoing interface.
2084f95d4633SHajimu UMEMOTO 				 */
208597d8d152SAndre Oppermann 				error = ip6_getpmtu(&sro, NULL, NULL,
2086f95d4633SHajimu UMEMOTO 				    &in6p->in6p_faddr, &pmtu, NULL);
208797d8d152SAndre Oppermann 				if (sro.ro_rt)
208897d8d152SAndre Oppermann 					RTFREE(sro.ro_rt);
2089f95d4633SHajimu UMEMOTO 				if (error)
2090f95d4633SHajimu UMEMOTO 					break;
2091f95d4633SHajimu UMEMOTO 				if (pmtu > IPV6_MAXPACKET)
2092f95d4633SHajimu UMEMOTO 					pmtu = IPV6_MAXPACKET;
2093f95d4633SHajimu UMEMOTO 
2094f95d4633SHajimu UMEMOTO 				bzero(&mtuinfo, sizeof(mtuinfo));
2095f95d4633SHajimu UMEMOTO 				mtuinfo.ip6m_mtu = (u_int32_t)pmtu;
2096f95d4633SHajimu UMEMOTO 				optdata = (void *)&mtuinfo;
2097f95d4633SHajimu UMEMOTO 				optdatalen = sizeof(mtuinfo);
2098f95d4633SHajimu UMEMOTO 				error = sooptcopyout(sopt, optdata,
2099f95d4633SHajimu UMEMOTO 				    optdatalen);
2100f95d4633SHajimu UMEMOTO 				break;
2101f95d4633SHajimu UMEMOTO 			}
2102f95d4633SHajimu UMEMOTO 
2103f95d4633SHajimu UMEMOTO 			case IPV6_2292PKTINFO:
2104f95d4633SHajimu UMEMOTO 			case IPV6_2292HOPLIMIT:
2105f95d4633SHajimu UMEMOTO 			case IPV6_2292HOPOPTS:
2106f95d4633SHajimu UMEMOTO 			case IPV6_2292RTHDR:
2107f95d4633SHajimu UMEMOTO 			case IPV6_2292DSTOPTS:
210833841545SHajimu UMEMOTO 				switch (optname) {
2109f95d4633SHajimu UMEMOTO 				case IPV6_2292PKTINFO:
211033841545SHajimu UMEMOTO 					optval = OPTBIT(IN6P_PKTINFO);
211133841545SHajimu UMEMOTO 					break;
2112f95d4633SHajimu UMEMOTO 				case IPV6_2292HOPLIMIT:
211333841545SHajimu UMEMOTO 					optval = OPTBIT(IN6P_HOPLIMIT);
211433841545SHajimu UMEMOTO 					break;
2115f95d4633SHajimu UMEMOTO 				case IPV6_2292HOPOPTS:
211633841545SHajimu UMEMOTO 					optval = OPTBIT(IN6P_HOPOPTS);
211733841545SHajimu UMEMOTO 					break;
2118f95d4633SHajimu UMEMOTO 				case IPV6_2292RTHDR:
211933841545SHajimu UMEMOTO 					optval = OPTBIT(IN6P_RTHDR);
212033841545SHajimu UMEMOTO 					break;
2121f95d4633SHajimu UMEMOTO 				case IPV6_2292DSTOPTS:
212233841545SHajimu UMEMOTO 					optval = OPTBIT(IN6P_DSTOPTS|IN6P_RTHDRDSTOPTS);
212333841545SHajimu UMEMOTO 					break;
212433841545SHajimu UMEMOTO 				}
212533841545SHajimu UMEMOTO 				error = sooptcopyout(sopt, &optval,
212633841545SHajimu UMEMOTO 				    sizeof optval);
212733841545SHajimu UMEMOTO 				break;
2128f95d4633SHajimu UMEMOTO 			case IPV6_PKTINFO:
2129f95d4633SHajimu UMEMOTO 			case IPV6_HOPOPTS:
2130f95d4633SHajimu UMEMOTO 			case IPV6_RTHDR:
2131f95d4633SHajimu UMEMOTO 			case IPV6_DSTOPTS:
2132f95d4633SHajimu UMEMOTO 			case IPV6_RTHDRDSTOPTS:
2133f95d4633SHajimu UMEMOTO 			case IPV6_NEXTHOP:
2134f95d4633SHajimu UMEMOTO 			case IPV6_TCLASS:
2135f95d4633SHajimu UMEMOTO 			case IPV6_DONTFRAG:
2136f95d4633SHajimu UMEMOTO 			case IPV6_USE_MIN_MTU:
2137f95d4633SHajimu UMEMOTO 			case IPV6_PREFER_TEMPADDR:
2138f95d4633SHajimu UMEMOTO 				error = ip6_getpcbopt(in6p->in6p_outputopts,
2139f95d4633SHajimu UMEMOTO 				    optname, sopt);
2140f95d4633SHajimu UMEMOTO 				break;
214133841545SHajimu UMEMOTO 
214282cd038dSYoshinobu Inoue 			case IPV6_MULTICAST_IF:
214382cd038dSYoshinobu Inoue 			case IPV6_MULTICAST_HOPS:
214482cd038dSYoshinobu Inoue 			case IPV6_MULTICAST_LOOP:
214582cd038dSYoshinobu Inoue 			case IPV6_JOIN_GROUP:
214682cd038dSYoshinobu Inoue 			case IPV6_LEAVE_GROUP:
214782cd038dSYoshinobu Inoue 			    {
214882cd038dSYoshinobu Inoue 				struct mbuf *m;
214982cd038dSYoshinobu Inoue 				error = ip6_getmoptions(sopt->sopt_name,
215082cd038dSYoshinobu Inoue 				    in6p->in6p_moptions, &m);
215182cd038dSYoshinobu Inoue 				if (error == 0)
215282cd038dSYoshinobu Inoue 					error = sooptcopyout(sopt,
215382cd038dSYoshinobu Inoue 					    mtod(m, char *), m->m_len);
215482cd038dSYoshinobu Inoue 				m_freem(m);
215582cd038dSYoshinobu Inoue 			    }
215682cd038dSYoshinobu Inoue 				break;
215782cd038dSYoshinobu Inoue 
2158b9234fafSSam Leffler #if defined(IPSEC) || defined(FAST_IPSEC)
215982cd038dSYoshinobu Inoue 			case IPV6_IPSEC_POLICY:
216082cd038dSYoshinobu Inoue 			  {
2161f63e7634SYoshinobu Inoue 				caddr_t req = NULL;
2162686cdd19SJun-ichiro itojun Hagino 				size_t len = 0;
2163686cdd19SJun-ichiro itojun Hagino 				struct mbuf *m = NULL;
2164686cdd19SJun-ichiro itojun Hagino 				struct mbuf **mp = &m;
2165f95d4633SHajimu UMEMOTO 				size_t ovalsize = sopt->sopt_valsize;
2166f95d4633SHajimu UMEMOTO 				caddr_t oval = (caddr_t)sopt->sopt_val;
2167f63e7634SYoshinobu Inoue 
2168686cdd19SJun-ichiro itojun Hagino 				error = soopt_getm(sopt, &m); /* XXX */
2169a46f7e7cSHajimu UMEMOTO 				if (error != 0)
2170686cdd19SJun-ichiro itojun Hagino 					break;
2171686cdd19SJun-ichiro itojun Hagino 				error = soopt_mcopyin(sopt, m); /* XXX */
2172a46f7e7cSHajimu UMEMOTO 				if (error != 0)
2173686cdd19SJun-ichiro itojun Hagino 					break;
2174f95d4633SHajimu UMEMOTO 				sopt->sopt_valsize = ovalsize;
2175f95d4633SHajimu UMEMOTO 				sopt->sopt_val = oval;
2176686cdd19SJun-ichiro itojun Hagino 				if (m) {
217782cd038dSYoshinobu Inoue 					req = mtod(m, caddr_t);
2178686cdd19SJun-ichiro itojun Hagino 					len = m->m_len;
2179686cdd19SJun-ichiro itojun Hagino 				}
2180686cdd19SJun-ichiro itojun Hagino 				error = ipsec6_get_policy(in6p, req, len, mp);
218182cd038dSYoshinobu Inoue 				if (error == 0)
218282cd038dSYoshinobu Inoue 					error = soopt_mcopyout(sopt, m); /* XXX */
218333841545SHajimu UMEMOTO 				if (error == 0 && m)
218482cd038dSYoshinobu Inoue 					m_freem(m);
218582cd038dSYoshinobu Inoue 				break;
218682cd038dSYoshinobu Inoue 			  }
218733841545SHajimu UMEMOTO #endif /* KAME IPSEC */
218882cd038dSYoshinobu Inoue 
218982cd038dSYoshinobu Inoue 			case IPV6_FW_GET:
219082cd038dSYoshinobu Inoue 			  {
219182cd038dSYoshinobu Inoue 				struct mbuf *m;
219282cd038dSYoshinobu Inoue 				struct mbuf **mp = &m;
219382cd038dSYoshinobu Inoue 
219482cd038dSYoshinobu Inoue 				if (ip6_fw_ctl_ptr == NULL)
219582cd038dSYoshinobu Inoue 			        {
219682cd038dSYoshinobu Inoue 					return EINVAL;
219782cd038dSYoshinobu Inoue 				}
219882cd038dSYoshinobu Inoue 				error = (*ip6_fw_ctl_ptr)(optname, mp);
219982cd038dSYoshinobu Inoue 				if (error == 0)
220082cd038dSYoshinobu Inoue 					error = soopt_mcopyout(sopt, m); /* XXX */
22016c0bea35SHajimu UMEMOTO 				if (error == 0 && m)
220282cd038dSYoshinobu Inoue 					m_freem(m);
220382cd038dSYoshinobu Inoue 			  }
220482cd038dSYoshinobu Inoue 				break;
220582cd038dSYoshinobu Inoue 
220682cd038dSYoshinobu Inoue 			default:
220782cd038dSYoshinobu Inoue 				error = ENOPROTOOPT;
220882cd038dSYoshinobu Inoue 				break;
220982cd038dSYoshinobu Inoue 			}
221082cd038dSYoshinobu Inoue 			break;
221182cd038dSYoshinobu Inoue 		}
2212f95d4633SHajimu UMEMOTO 	} else {		/* level != IPPROTO_IPV6 */
221382cd038dSYoshinobu Inoue 		error = EINVAL;
221482cd038dSYoshinobu Inoue 	}
221582cd038dSYoshinobu Inoue 	return (error);
221682cd038dSYoshinobu Inoue }
221782cd038dSYoshinobu Inoue 
221802b9a206SHajimu UMEMOTO int
221902b9a206SHajimu UMEMOTO ip6_raw_ctloutput(so, sopt)
222002b9a206SHajimu UMEMOTO 	struct socket *so;
222102b9a206SHajimu UMEMOTO 	struct sockopt *sopt;
222202b9a206SHajimu UMEMOTO {
222302b9a206SHajimu UMEMOTO 	int error = 0, optval, optlen;
222402b9a206SHajimu UMEMOTO 	const int icmp6off = offsetof(struct icmp6_hdr, icmp6_cksum);
222502b9a206SHajimu UMEMOTO 	struct in6pcb *in6p = sotoin6pcb(so);
222602b9a206SHajimu UMEMOTO 	int level, op, optname;
222702b9a206SHajimu UMEMOTO 
222802b9a206SHajimu UMEMOTO 	if (sopt) {
222902b9a206SHajimu UMEMOTO 		level = sopt->sopt_level;
223002b9a206SHajimu UMEMOTO 		op = sopt->sopt_dir;
223102b9a206SHajimu UMEMOTO 		optname = sopt->sopt_name;
223202b9a206SHajimu UMEMOTO 		optlen = sopt->sopt_valsize;
223302b9a206SHajimu UMEMOTO 	} else
223402b9a206SHajimu UMEMOTO 		panic("ip6_raw_ctloutput: arg soopt is NULL");
223502b9a206SHajimu UMEMOTO 
223602b9a206SHajimu UMEMOTO 	if (level != IPPROTO_IPV6) {
223702b9a206SHajimu UMEMOTO 		return (EINVAL);
223802b9a206SHajimu UMEMOTO 	}
223902b9a206SHajimu UMEMOTO 
224002b9a206SHajimu UMEMOTO 	switch (optname) {
224102b9a206SHajimu UMEMOTO 	case IPV6_CHECKSUM:
224202b9a206SHajimu UMEMOTO 		/*
224302b9a206SHajimu UMEMOTO 		 * For ICMPv6 sockets, no modification allowed for checksum
224402b9a206SHajimu UMEMOTO 		 * offset, permit "no change" values to help existing apps.
224502b9a206SHajimu UMEMOTO 		 *
224602b9a206SHajimu UMEMOTO 		 * XXX 2292bis says: "An attempt to set IPV6_CHECKSUM
224702b9a206SHajimu UMEMOTO 		 * for an ICMPv6 socket will fail."
224802b9a206SHajimu UMEMOTO 		 * The current behavior does not meet 2292bis.
224902b9a206SHajimu UMEMOTO 		 */
225002b9a206SHajimu UMEMOTO 		switch (op) {
225102b9a206SHajimu UMEMOTO 		case SOPT_SET:
225202b9a206SHajimu UMEMOTO 			if (optlen != sizeof(int)) {
225302b9a206SHajimu UMEMOTO 				error = EINVAL;
225402b9a206SHajimu UMEMOTO 				break;
225502b9a206SHajimu UMEMOTO 			}
225602b9a206SHajimu UMEMOTO 			error = sooptcopyin(sopt, &optval, sizeof(optval),
225702b9a206SHajimu UMEMOTO 					    sizeof(optval));
225802b9a206SHajimu UMEMOTO 			if (error)
225902b9a206SHajimu UMEMOTO 				break;
226002b9a206SHajimu UMEMOTO 			if ((optval % 2) != 0) {
226102b9a206SHajimu UMEMOTO 				/* the API assumes even offset values */
226202b9a206SHajimu UMEMOTO 				error = EINVAL;
226302b9a206SHajimu UMEMOTO 			} else if (so->so_proto->pr_protocol ==
226402b9a206SHajimu UMEMOTO 			    IPPROTO_ICMPV6) {
226502b9a206SHajimu UMEMOTO 				if (optval != icmp6off)
226602b9a206SHajimu UMEMOTO 					error = EINVAL;
226702b9a206SHajimu UMEMOTO 			} else
226802b9a206SHajimu UMEMOTO 				in6p->in6p_cksum = optval;
226902b9a206SHajimu UMEMOTO 			break;
227002b9a206SHajimu UMEMOTO 
227102b9a206SHajimu UMEMOTO 		case SOPT_GET:
227202b9a206SHajimu UMEMOTO 			if (so->so_proto->pr_protocol == IPPROTO_ICMPV6)
227302b9a206SHajimu UMEMOTO 				optval = icmp6off;
227402b9a206SHajimu UMEMOTO 			else
227502b9a206SHajimu UMEMOTO 				optval = in6p->in6p_cksum;
227602b9a206SHajimu UMEMOTO 
227702b9a206SHajimu UMEMOTO 			error = sooptcopyout(sopt, &optval, sizeof(optval));
227802b9a206SHajimu UMEMOTO 			break;
227902b9a206SHajimu UMEMOTO 
228002b9a206SHajimu UMEMOTO 		default:
228102b9a206SHajimu UMEMOTO 			error = EINVAL;
228202b9a206SHajimu UMEMOTO 			break;
228302b9a206SHajimu UMEMOTO 		}
228402b9a206SHajimu UMEMOTO 		break;
228502b9a206SHajimu UMEMOTO 
228602b9a206SHajimu UMEMOTO 	default:
228702b9a206SHajimu UMEMOTO 		error = ENOPROTOOPT;
228802b9a206SHajimu UMEMOTO 		break;
228902b9a206SHajimu UMEMOTO 	}
229002b9a206SHajimu UMEMOTO 
229102b9a206SHajimu UMEMOTO 	return (error);
229202b9a206SHajimu UMEMOTO }
229302b9a206SHajimu UMEMOTO 
229482cd038dSYoshinobu Inoue /*
229533841545SHajimu UMEMOTO  * Set up IP6 options in pcb for insertion in output packets or
229633841545SHajimu UMEMOTO  * specifying behavior of outgoing packets.
229782cd038dSYoshinobu Inoue  */
229882cd038dSYoshinobu Inoue static int
229982cd038dSYoshinobu Inoue ip6_pcbopts(pktopt, m, so, sopt)
230082cd038dSYoshinobu Inoue 	struct ip6_pktopts **pktopt;
230133841545SHajimu UMEMOTO 	struct mbuf *m;
230282cd038dSYoshinobu Inoue 	struct socket *so;
230382cd038dSYoshinobu Inoue 	struct sockopt *sopt;
230482cd038dSYoshinobu Inoue {
230533841545SHajimu UMEMOTO 	struct ip6_pktopts *opt = *pktopt;
230682cd038dSYoshinobu Inoue 	int error = 0;
2307b40ce416SJulian Elischer 	struct thread *td = sopt->sopt_td;
230882cd038dSYoshinobu Inoue 	int priv = 0;
230982cd038dSYoshinobu Inoue 
231082cd038dSYoshinobu Inoue 	/* turn off any old options. */
231182cd038dSYoshinobu Inoue 	if (opt) {
231233841545SHajimu UMEMOTO #ifdef DIAGNOSTIC
231333841545SHajimu UMEMOTO 		if (opt->ip6po_pktinfo || opt->ip6po_nexthop ||
231433841545SHajimu UMEMOTO 		    opt->ip6po_hbh || opt->ip6po_dest1 || opt->ip6po_dest2 ||
231533841545SHajimu UMEMOTO 		    opt->ip6po_rhinfo.ip6po_rhi_rthdr)
231633841545SHajimu UMEMOTO 			printf("ip6_pcbopts: all specified options are cleared.\n");
231733841545SHajimu UMEMOTO #endif
2318f95d4633SHajimu UMEMOTO 		ip6_clearpktopts(opt, -1);
231982cd038dSYoshinobu Inoue 	} else
2320a163d034SWarner Losh 		opt = malloc(sizeof(*opt), M_IP6OPT, M_WAITOK);
232133841545SHajimu UMEMOTO 	*pktopt = NULL;
232282cd038dSYoshinobu Inoue 
232382cd038dSYoshinobu Inoue 	if (!m || m->m_len == 0) {
232482cd038dSYoshinobu Inoue 		/*
232535f6695bSHajimu UMEMOTO 		 * Only turning off any previous options, regardless of
232635f6695bSHajimu UMEMOTO 		 * whether the opt is just created or given.
232782cd038dSYoshinobu Inoue 		 */
232882cd038dSYoshinobu Inoue 		free(opt, M_IP6OPT);
232982cd038dSYoshinobu Inoue 		return (0);
233082cd038dSYoshinobu Inoue 	}
233182cd038dSYoshinobu Inoue 
233282cd038dSYoshinobu Inoue 	/*  set options specified by user. */
233344731cabSJohn Baldwin 	if (td && !suser(td))
233482cd038dSYoshinobu Inoue 		priv = 1;
2335f95d4633SHajimu UMEMOTO 	if ((error = ip6_setpktoptions(m, opt, NULL, priv, 1,
2336f95d4633SHajimu UMEMOTO 	    so->so_proto->pr_protocol)) != 0) {
2337f95d4633SHajimu UMEMOTO 		ip6_clearpktopts(opt, -1); /* XXX: discard all options */
233835f6695bSHajimu UMEMOTO 		free(opt, M_IP6OPT);
233982cd038dSYoshinobu Inoue 		return (error);
234082cd038dSYoshinobu Inoue 	}
234182cd038dSYoshinobu Inoue 	*pktopt = opt;
234282cd038dSYoshinobu Inoue 	return (0);
234382cd038dSYoshinobu Inoue }
234482cd038dSYoshinobu Inoue 
234582cd038dSYoshinobu Inoue /*
234633841545SHajimu UMEMOTO  * initialize ip6_pktopts.  beware that there are non-zero default values in
234733841545SHajimu UMEMOTO  * the struct.
234833841545SHajimu UMEMOTO  */
234933841545SHajimu UMEMOTO void
235033841545SHajimu UMEMOTO init_ip6pktopts(opt)
235133841545SHajimu UMEMOTO 	struct ip6_pktopts *opt;
235233841545SHajimu UMEMOTO {
235333841545SHajimu UMEMOTO 
235433841545SHajimu UMEMOTO 	bzero(opt, sizeof(*opt));
235533841545SHajimu UMEMOTO 	opt->ip6po_hlim = -1;	/* -1 means default hop limit */
2356f95d4633SHajimu UMEMOTO 	opt->ip6po_tclass = -1;	/* -1 means default traffic class */
2357f95d4633SHajimu UMEMOTO 	opt->ip6po_minmtu = IP6PO_MINMTU_MCASTONLY;
2358f95d4633SHajimu UMEMOTO 	opt->ip6po_prefer_tempaddr = IP6PO_TEMPADDR_SYSTEM;
2359f95d4633SHajimu UMEMOTO }
2360f95d4633SHajimu UMEMOTO 
2361f95d4633SHajimu UMEMOTO static int
2362f95d4633SHajimu UMEMOTO ip6_pcbopt(optname, buf, len, pktopt, priv, uproto)
2363f95d4633SHajimu UMEMOTO 	int optname, len, priv;
2364f95d4633SHajimu UMEMOTO 	u_char *buf;
2365f95d4633SHajimu UMEMOTO 	struct ip6_pktopts **pktopt;
2366f95d4633SHajimu UMEMOTO 	int uproto;
2367f95d4633SHajimu UMEMOTO {
2368f95d4633SHajimu UMEMOTO 	struct ip6_pktopts *opt;
2369f95d4633SHajimu UMEMOTO 
2370f95d4633SHajimu UMEMOTO 	if (*pktopt == NULL) {
2371f95d4633SHajimu UMEMOTO 		*pktopt = malloc(sizeof(struct ip6_pktopts), M_IP6OPT,
2372f95d4633SHajimu UMEMOTO 		    M_WAITOK);
2373f95d4633SHajimu UMEMOTO 		init_ip6pktopts(*pktopt);
2374f95d4633SHajimu UMEMOTO 		(*pktopt)->needfree = 1;
2375f95d4633SHajimu UMEMOTO 	}
2376f95d4633SHajimu UMEMOTO 	opt = *pktopt;
2377f95d4633SHajimu UMEMOTO 
2378f95d4633SHajimu UMEMOTO 	return (ip6_setpktoption(optname, buf, len, opt, priv, 1, 0, uproto));
2379f95d4633SHajimu UMEMOTO }
2380f95d4633SHajimu UMEMOTO 
2381f95d4633SHajimu UMEMOTO static int
2382f95d4633SHajimu UMEMOTO ip6_getpcbopt(pktopt, optname, sopt)
2383f95d4633SHajimu UMEMOTO 	struct ip6_pktopts *pktopt;
2384f95d4633SHajimu UMEMOTO 	struct sockopt *sopt;
2385f95d4633SHajimu UMEMOTO 	int optname;
2386f95d4633SHajimu UMEMOTO {
2387f95d4633SHajimu UMEMOTO 	void *optdata = NULL;
2388f95d4633SHajimu UMEMOTO 	int optdatalen = 0;
2389f95d4633SHajimu UMEMOTO 	struct ip6_ext *ip6e;
2390f95d4633SHajimu UMEMOTO 	int error = 0;
2391f95d4633SHajimu UMEMOTO 	struct in6_pktinfo null_pktinfo;
2392f95d4633SHajimu UMEMOTO 	int deftclass = 0, on;
2393f95d4633SHajimu UMEMOTO 	int defminmtu = IP6PO_MINMTU_MCASTONLY;
2394f95d4633SHajimu UMEMOTO 	int defpreftemp = IP6PO_TEMPADDR_SYSTEM;
2395f95d4633SHajimu UMEMOTO 
2396f95d4633SHajimu UMEMOTO 	switch (optname) {
2397f95d4633SHajimu UMEMOTO 	case IPV6_PKTINFO:
2398f95d4633SHajimu UMEMOTO 		if (pktopt && pktopt->ip6po_pktinfo)
2399f95d4633SHajimu UMEMOTO 			optdata = (void *)pktopt->ip6po_pktinfo;
2400f95d4633SHajimu UMEMOTO 		else {
2401f95d4633SHajimu UMEMOTO 			/* XXX: we don't have to do this every time... */
2402f95d4633SHajimu UMEMOTO 			bzero(&null_pktinfo, sizeof(null_pktinfo));
2403f95d4633SHajimu UMEMOTO 			optdata = (void *)&null_pktinfo;
2404f95d4633SHajimu UMEMOTO 		}
2405f95d4633SHajimu UMEMOTO 		optdatalen = sizeof(struct in6_pktinfo);
2406f95d4633SHajimu UMEMOTO 		break;
2407f95d4633SHajimu UMEMOTO 	case IPV6_TCLASS:
2408f95d4633SHajimu UMEMOTO 		if (pktopt && pktopt->ip6po_tclass >= 0)
2409f95d4633SHajimu UMEMOTO 			optdata = (void *)&pktopt->ip6po_tclass;
2410f95d4633SHajimu UMEMOTO 		else
2411f95d4633SHajimu UMEMOTO 			optdata = (void *)&deftclass;
2412f95d4633SHajimu UMEMOTO 		optdatalen = sizeof(int);
2413f95d4633SHajimu UMEMOTO 		break;
2414f95d4633SHajimu UMEMOTO 	case IPV6_HOPOPTS:
2415f95d4633SHajimu UMEMOTO 		if (pktopt && pktopt->ip6po_hbh) {
2416f95d4633SHajimu UMEMOTO 			optdata = (void *)pktopt->ip6po_hbh;
2417f95d4633SHajimu UMEMOTO 			ip6e = (struct ip6_ext *)pktopt->ip6po_hbh;
2418f95d4633SHajimu UMEMOTO 			optdatalen = (ip6e->ip6e_len + 1) << 3;
2419f95d4633SHajimu UMEMOTO 		}
2420f95d4633SHajimu UMEMOTO 		break;
2421f95d4633SHajimu UMEMOTO 	case IPV6_RTHDR:
2422f95d4633SHajimu UMEMOTO 		if (pktopt && pktopt->ip6po_rthdr) {
2423f95d4633SHajimu UMEMOTO 			optdata = (void *)pktopt->ip6po_rthdr;
2424f95d4633SHajimu UMEMOTO 			ip6e = (struct ip6_ext *)pktopt->ip6po_rthdr;
2425f95d4633SHajimu UMEMOTO 			optdatalen = (ip6e->ip6e_len + 1) << 3;
2426f95d4633SHajimu UMEMOTO 		}
2427f95d4633SHajimu UMEMOTO 		break;
2428f95d4633SHajimu UMEMOTO 	case IPV6_RTHDRDSTOPTS:
2429f95d4633SHajimu UMEMOTO 		if (pktopt && pktopt->ip6po_dest1) {
2430f95d4633SHajimu UMEMOTO 			optdata = (void *)pktopt->ip6po_dest1;
2431f95d4633SHajimu UMEMOTO 			ip6e = (struct ip6_ext *)pktopt->ip6po_dest1;
2432f95d4633SHajimu UMEMOTO 			optdatalen = (ip6e->ip6e_len + 1) << 3;
2433f95d4633SHajimu UMEMOTO 		}
2434f95d4633SHajimu UMEMOTO 		break;
2435f95d4633SHajimu UMEMOTO 	case IPV6_DSTOPTS:
2436f95d4633SHajimu UMEMOTO 		if (pktopt && pktopt->ip6po_dest2) {
2437f95d4633SHajimu UMEMOTO 			optdata = (void *)pktopt->ip6po_dest2;
2438f95d4633SHajimu UMEMOTO 			ip6e = (struct ip6_ext *)pktopt->ip6po_dest2;
2439f95d4633SHajimu UMEMOTO 			optdatalen = (ip6e->ip6e_len + 1) << 3;
2440f95d4633SHajimu UMEMOTO 		}
2441f95d4633SHajimu UMEMOTO 		break;
2442f95d4633SHajimu UMEMOTO 	case IPV6_NEXTHOP:
2443f95d4633SHajimu UMEMOTO 		if (pktopt && pktopt->ip6po_nexthop) {
2444f95d4633SHajimu UMEMOTO 			optdata = (void *)pktopt->ip6po_nexthop;
2445f95d4633SHajimu UMEMOTO 			optdatalen = pktopt->ip6po_nexthop->sa_len;
2446f95d4633SHajimu UMEMOTO 		}
2447f95d4633SHajimu UMEMOTO 		break;
2448f95d4633SHajimu UMEMOTO 	case IPV6_USE_MIN_MTU:
2449f95d4633SHajimu UMEMOTO 		if (pktopt)
2450f95d4633SHajimu UMEMOTO 			optdata = (void *)&pktopt->ip6po_minmtu;
2451f95d4633SHajimu UMEMOTO 		else
2452f95d4633SHajimu UMEMOTO 			optdata = (void *)&defminmtu;
2453f95d4633SHajimu UMEMOTO 		optdatalen = sizeof(int);
2454f95d4633SHajimu UMEMOTO 		break;
2455f95d4633SHajimu UMEMOTO 	case IPV6_DONTFRAG:
2456f95d4633SHajimu UMEMOTO 		if (pktopt && ((pktopt->ip6po_flags) & IP6PO_DONTFRAG))
2457f95d4633SHajimu UMEMOTO 			on = 1;
2458f95d4633SHajimu UMEMOTO 		else
2459f95d4633SHajimu UMEMOTO 			on = 0;
2460f95d4633SHajimu UMEMOTO 		optdata = (void *)&on;
2461f95d4633SHajimu UMEMOTO 		optdatalen = sizeof(on);
2462f95d4633SHajimu UMEMOTO 		break;
2463f95d4633SHajimu UMEMOTO 	case IPV6_PREFER_TEMPADDR:
2464f95d4633SHajimu UMEMOTO 		if (pktopt)
2465f95d4633SHajimu UMEMOTO 			optdata = (void *)&pktopt->ip6po_prefer_tempaddr;
2466f95d4633SHajimu UMEMOTO 		else
2467f95d4633SHajimu UMEMOTO 			optdata = (void *)&defpreftemp;
2468f95d4633SHajimu UMEMOTO 		optdatalen = sizeof(int);
2469f95d4633SHajimu UMEMOTO 		break;
2470f95d4633SHajimu UMEMOTO 	default:		/* should not happen */
2471f95d4633SHajimu UMEMOTO #ifdef DIAGNOSTIC
2472f95d4633SHajimu UMEMOTO 		panic("ip6_getpcbopt: unexpected option\n");
2473f95d4633SHajimu UMEMOTO #endif
2474f95d4633SHajimu UMEMOTO 		return (ENOPROTOOPT);
2475f95d4633SHajimu UMEMOTO 	}
2476f95d4633SHajimu UMEMOTO 
2477f95d4633SHajimu UMEMOTO 	error = sooptcopyout(sopt, optdata, optdatalen);
2478f95d4633SHajimu UMEMOTO 
2479f95d4633SHajimu UMEMOTO 	return (error);
248033841545SHajimu UMEMOTO }
248133841545SHajimu UMEMOTO 
248233841545SHajimu UMEMOTO void
2483f95d4633SHajimu UMEMOTO ip6_clearpktopts(pktopt, optname)
248433841545SHajimu UMEMOTO 	struct ip6_pktopts *pktopt;
2485f95d4633SHajimu UMEMOTO 	int optname;
248633841545SHajimu UMEMOTO {
2487f95d4633SHajimu UMEMOTO 	int needfree;
248833841545SHajimu UMEMOTO 
2489289b28bdSHajimu UMEMOTO 	if (pktopt == NULL)
2490289b28bdSHajimu UMEMOTO 		return;
2491289b28bdSHajimu UMEMOTO 
2492f95d4633SHajimu UMEMOTO 	needfree = pktopt->needfree;
2493f95d4633SHajimu UMEMOTO 
2494f95d4633SHajimu UMEMOTO 	if (optname == -1 || optname == IPV6_PKTINFO) {
249533841545SHajimu UMEMOTO 		if (needfree && pktopt->ip6po_pktinfo)
249633841545SHajimu UMEMOTO 			free(pktopt->ip6po_pktinfo, M_IP6OPT);
249733841545SHajimu UMEMOTO 		pktopt->ip6po_pktinfo = NULL;
249833841545SHajimu UMEMOTO 	}
2499f95d4633SHajimu UMEMOTO 	if (optname == -1 || optname == IPV6_HOPLIMIT)
250033841545SHajimu UMEMOTO 		pktopt->ip6po_hlim = -1;
2501f95d4633SHajimu UMEMOTO 	if (optname == -1 || optname == IPV6_TCLASS)
2502f95d4633SHajimu UMEMOTO 		pktopt->ip6po_tclass = -1;
2503f95d4633SHajimu UMEMOTO 	if (optname == -1 || optname == IPV6_NEXTHOP) {
2504f95d4633SHajimu UMEMOTO 		if (pktopt->ip6po_nextroute.ro_rt) {
2505f95d4633SHajimu UMEMOTO 			RTFREE(pktopt->ip6po_nextroute.ro_rt);
2506f95d4633SHajimu UMEMOTO 			pktopt->ip6po_nextroute.ro_rt = NULL;
2507f95d4633SHajimu UMEMOTO 		}
250833841545SHajimu UMEMOTO 		if (needfree && pktopt->ip6po_nexthop)
250933841545SHajimu UMEMOTO 			free(pktopt->ip6po_nexthop, M_IP6OPT);
251033841545SHajimu UMEMOTO 		pktopt->ip6po_nexthop = NULL;
251133841545SHajimu UMEMOTO 	}
2512f95d4633SHajimu UMEMOTO 	if (optname == -1 || optname == IPV6_HOPOPTS) {
251333841545SHajimu UMEMOTO 		if (needfree && pktopt->ip6po_hbh)
251433841545SHajimu UMEMOTO 			free(pktopt->ip6po_hbh, M_IP6OPT);
251533841545SHajimu UMEMOTO 		pktopt->ip6po_hbh = NULL;
251633841545SHajimu UMEMOTO 	}
2517f95d4633SHajimu UMEMOTO 	if (optname == -1 || optname == IPV6_RTHDRDSTOPTS) {
251833841545SHajimu UMEMOTO 		if (needfree && pktopt->ip6po_dest1)
251933841545SHajimu UMEMOTO 			free(pktopt->ip6po_dest1, M_IP6OPT);
252033841545SHajimu UMEMOTO 		pktopt->ip6po_dest1 = NULL;
252133841545SHajimu UMEMOTO 	}
2522f95d4633SHajimu UMEMOTO 	if (optname == -1 || optname == IPV6_RTHDR) {
252333841545SHajimu UMEMOTO 		if (needfree && pktopt->ip6po_rhinfo.ip6po_rhi_rthdr)
252433841545SHajimu UMEMOTO 			free(pktopt->ip6po_rhinfo.ip6po_rhi_rthdr, M_IP6OPT);
252533841545SHajimu UMEMOTO 		pktopt->ip6po_rhinfo.ip6po_rhi_rthdr = NULL;
252633841545SHajimu UMEMOTO 		if (pktopt->ip6po_route.ro_rt) {
252733841545SHajimu UMEMOTO 			RTFREE(pktopt->ip6po_route.ro_rt);
252833841545SHajimu UMEMOTO 			pktopt->ip6po_route.ro_rt = NULL;
252933841545SHajimu UMEMOTO 		}
253033841545SHajimu UMEMOTO 	}
2531f95d4633SHajimu UMEMOTO 	if (optname == -1 || optname == IPV6_DSTOPTS) {
253233841545SHajimu UMEMOTO 		if (needfree && pktopt->ip6po_dest2)
253333841545SHajimu UMEMOTO 			free(pktopt->ip6po_dest2, M_IP6OPT);
253433841545SHajimu UMEMOTO 		pktopt->ip6po_dest2 = NULL;
253533841545SHajimu UMEMOTO 	}
253633841545SHajimu UMEMOTO }
253733841545SHajimu UMEMOTO 
253833841545SHajimu UMEMOTO #define PKTOPT_EXTHDRCPY(type) \
253933841545SHajimu UMEMOTO do {\
254033841545SHajimu UMEMOTO 	if (src->type) {\
25417efe5d92SHajimu UMEMOTO 		int hlen = (((struct ip6_ext *)src->type)->ip6e_len + 1) << 3;\
254233841545SHajimu UMEMOTO 		dst->type = malloc(hlen, M_IP6OPT, canwait);\
254333841545SHajimu UMEMOTO 		if (dst->type == NULL && canwait == M_NOWAIT)\
254433841545SHajimu UMEMOTO 			goto bad;\
254533841545SHajimu UMEMOTO 		bcopy(src->type, dst->type, hlen);\
254633841545SHajimu UMEMOTO 	}\
25477efe5d92SHajimu UMEMOTO } while (/*CONSTCOND*/ 0)
254833841545SHajimu UMEMOTO 
254933841545SHajimu UMEMOTO struct ip6_pktopts *
255033841545SHajimu UMEMOTO ip6_copypktopts(src, canwait)
255133841545SHajimu UMEMOTO 	struct ip6_pktopts *src;
255233841545SHajimu UMEMOTO 	int canwait;
255333841545SHajimu UMEMOTO {
255433841545SHajimu UMEMOTO 	struct ip6_pktopts *dst;
255533841545SHajimu UMEMOTO 
255633841545SHajimu UMEMOTO 	if (src == NULL) {
255733841545SHajimu UMEMOTO 		printf("ip6_clearpktopts: invalid argument\n");
255833841545SHajimu UMEMOTO 		return (NULL);
255933841545SHajimu UMEMOTO 	}
256033841545SHajimu UMEMOTO 
256133841545SHajimu UMEMOTO 	dst = malloc(sizeof(*dst), M_IP6OPT, canwait);
256233841545SHajimu UMEMOTO 	if (dst == NULL && canwait == M_NOWAIT)
256335f6695bSHajimu UMEMOTO 		return (NULL);
256433841545SHajimu UMEMOTO 	bzero(dst, sizeof(*dst));
2565f95d4633SHajimu UMEMOTO 	dst->needfree = 1;
256633841545SHajimu UMEMOTO 
256733841545SHajimu UMEMOTO 	dst->ip6po_hlim = src->ip6po_hlim;
2568f95d4633SHajimu UMEMOTO 	dst->ip6po_tclass = src->ip6po_tclass;
2569f95d4633SHajimu UMEMOTO 	dst->ip6po_flags = src->ip6po_flags;
257033841545SHajimu UMEMOTO 	if (src->ip6po_pktinfo) {
257133841545SHajimu UMEMOTO 		dst->ip6po_pktinfo = malloc(sizeof(*dst->ip6po_pktinfo),
257233841545SHajimu UMEMOTO 		    M_IP6OPT, canwait);
257333841545SHajimu UMEMOTO 		if (dst->ip6po_pktinfo == NULL && canwait == M_NOWAIT)
257433841545SHajimu UMEMOTO 			goto bad;
257533841545SHajimu UMEMOTO 		*dst->ip6po_pktinfo = *src->ip6po_pktinfo;
257633841545SHajimu UMEMOTO 	}
257733841545SHajimu UMEMOTO 	if (src->ip6po_nexthop) {
257833841545SHajimu UMEMOTO 		dst->ip6po_nexthop = malloc(src->ip6po_nexthop->sa_len,
257933841545SHajimu UMEMOTO 		    M_IP6OPT, canwait);
258033841545SHajimu UMEMOTO 		if (dst->ip6po_nexthop == NULL && canwait == M_NOWAIT)
258133841545SHajimu UMEMOTO 			goto bad;
258233841545SHajimu UMEMOTO 		bcopy(src->ip6po_nexthop, dst->ip6po_nexthop,
258333841545SHajimu UMEMOTO 		    src->ip6po_nexthop->sa_len);
258433841545SHajimu UMEMOTO 	}
258533841545SHajimu UMEMOTO 	PKTOPT_EXTHDRCPY(ip6po_hbh);
258633841545SHajimu UMEMOTO 	PKTOPT_EXTHDRCPY(ip6po_dest1);
258733841545SHajimu UMEMOTO 	PKTOPT_EXTHDRCPY(ip6po_dest2);
258833841545SHajimu UMEMOTO 	PKTOPT_EXTHDRCPY(ip6po_rthdr); /* not copy the cached route */
258933841545SHajimu UMEMOTO 	return (dst);
259033841545SHajimu UMEMOTO 
259133841545SHajimu UMEMOTO   bad:
259233841545SHajimu UMEMOTO 	if (dst->ip6po_pktinfo) free(dst->ip6po_pktinfo, M_IP6OPT);
259333841545SHajimu UMEMOTO 	if (dst->ip6po_nexthop) free(dst->ip6po_nexthop, M_IP6OPT);
259433841545SHajimu UMEMOTO 	if (dst->ip6po_hbh) free(dst->ip6po_hbh, M_IP6OPT);
259533841545SHajimu UMEMOTO 	if (dst->ip6po_dest1) free(dst->ip6po_dest1, M_IP6OPT);
259633841545SHajimu UMEMOTO 	if (dst->ip6po_dest2) free(dst->ip6po_dest2, M_IP6OPT);
259733841545SHajimu UMEMOTO 	if (dst->ip6po_rthdr) free(dst->ip6po_rthdr, M_IP6OPT);
259835f6695bSHajimu UMEMOTO 	free(dst, M_IP6OPT);
259933841545SHajimu UMEMOTO 	return (NULL);
260033841545SHajimu UMEMOTO }
260133841545SHajimu UMEMOTO #undef PKTOPT_EXTHDRCPY
260233841545SHajimu UMEMOTO 
260333841545SHajimu UMEMOTO void
260433841545SHajimu UMEMOTO ip6_freepcbopts(pktopt)
260533841545SHajimu UMEMOTO 	struct ip6_pktopts *pktopt;
260633841545SHajimu UMEMOTO {
260733841545SHajimu UMEMOTO 	if (pktopt == NULL)
260833841545SHajimu UMEMOTO 		return;
260933841545SHajimu UMEMOTO 
2610f95d4633SHajimu UMEMOTO 	ip6_clearpktopts(pktopt, -1);
261133841545SHajimu UMEMOTO 
261233841545SHajimu UMEMOTO 	free(pktopt, M_IP6OPT);
261333841545SHajimu UMEMOTO }
261433841545SHajimu UMEMOTO 
261533841545SHajimu UMEMOTO /*
261682cd038dSYoshinobu Inoue  * Set the IP6 multicast options in response to user setsockopt().
261782cd038dSYoshinobu Inoue  */
261882cd038dSYoshinobu Inoue static int
261982cd038dSYoshinobu Inoue ip6_setmoptions(optname, im6op, m)
262082cd038dSYoshinobu Inoue 	int optname;
262182cd038dSYoshinobu Inoue 	struct ip6_moptions **im6op;
262282cd038dSYoshinobu Inoue 	struct mbuf *m;
262382cd038dSYoshinobu Inoue {
262482cd038dSYoshinobu Inoue 	int error = 0;
262582cd038dSYoshinobu Inoue 	u_int loop, ifindex;
262682cd038dSYoshinobu Inoue 	struct ipv6_mreq *mreq;
262782cd038dSYoshinobu Inoue 	struct ifnet *ifp;
262882cd038dSYoshinobu Inoue 	struct ip6_moptions *im6o = *im6op;
262982cd038dSYoshinobu Inoue 	struct route_in6 ro;
263082cd038dSYoshinobu Inoue 	struct sockaddr_in6 *dst;
263182cd038dSYoshinobu Inoue 	struct in6_multi_mship *imm;
26327efe5d92SHajimu UMEMOTO 	struct thread *td = curthread;
263382cd038dSYoshinobu Inoue 
263482cd038dSYoshinobu Inoue 	if (im6o == NULL) {
263582cd038dSYoshinobu Inoue 		/*
263682cd038dSYoshinobu Inoue 		 * No multicast option buffer attached to the pcb;
263782cd038dSYoshinobu Inoue 		 * allocate one and initialize to default values.
263882cd038dSYoshinobu Inoue 		 */
263982cd038dSYoshinobu Inoue 		im6o = (struct ip6_moptions *)
2640a163d034SWarner Losh 			malloc(sizeof(*im6o), M_IPMOPTS, M_WAITOK);
264182cd038dSYoshinobu Inoue 
264282cd038dSYoshinobu Inoue 		if (im6o == NULL)
264382cd038dSYoshinobu Inoue 			return (ENOBUFS);
264482cd038dSYoshinobu Inoue 		*im6op = im6o;
264582cd038dSYoshinobu Inoue 		im6o->im6o_multicast_ifp = NULL;
264682cd038dSYoshinobu Inoue 		im6o->im6o_multicast_hlim = ip6_defmcasthlim;
264782cd038dSYoshinobu Inoue 		im6o->im6o_multicast_loop = IPV6_DEFAULT_MULTICAST_LOOP;
264882cd038dSYoshinobu Inoue 		LIST_INIT(&im6o->im6o_memberships);
264982cd038dSYoshinobu Inoue 	}
265082cd038dSYoshinobu Inoue 
265182cd038dSYoshinobu Inoue 	switch (optname) {
265282cd038dSYoshinobu Inoue 
265382cd038dSYoshinobu Inoue 	case IPV6_MULTICAST_IF:
265482cd038dSYoshinobu Inoue 		/*
265582cd038dSYoshinobu Inoue 		 * Select the interface for outgoing multicast packets.
265682cd038dSYoshinobu Inoue 		 */
265782cd038dSYoshinobu Inoue 		if (m == NULL || m->m_len != sizeof(u_int)) {
265882cd038dSYoshinobu Inoue 			error = EINVAL;
265982cd038dSYoshinobu Inoue 			break;
266082cd038dSYoshinobu Inoue 		}
266133841545SHajimu UMEMOTO 		bcopy(mtod(m, u_int *), &ifindex, sizeof(ifindex));
266282cd038dSYoshinobu Inoue 		if (ifindex < 0 || if_index < ifindex) {
266382cd038dSYoshinobu Inoue 			error = ENXIO;	/* XXX EINVAL? */
266482cd038dSYoshinobu Inoue 			break;
266582cd038dSYoshinobu Inoue 		}
2666f9132cebSJonathan Lemon 		ifp = ifnet_byindex(ifindex);
266782cd038dSYoshinobu Inoue 		if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) {
266882cd038dSYoshinobu Inoue 			error = EADDRNOTAVAIL;
266982cd038dSYoshinobu Inoue 			break;
267082cd038dSYoshinobu Inoue 		}
267182cd038dSYoshinobu Inoue 		im6o->im6o_multicast_ifp = ifp;
267282cd038dSYoshinobu Inoue 		break;
267382cd038dSYoshinobu Inoue 
267482cd038dSYoshinobu Inoue 	case IPV6_MULTICAST_HOPS:
267582cd038dSYoshinobu Inoue 	    {
267682cd038dSYoshinobu Inoue 		/*
267782cd038dSYoshinobu Inoue 		 * Set the IP6 hoplimit for outgoing multicast packets.
267882cd038dSYoshinobu Inoue 		 */
267982cd038dSYoshinobu Inoue 		int optval;
268082cd038dSYoshinobu Inoue 		if (m == NULL || m->m_len != sizeof(int)) {
268182cd038dSYoshinobu Inoue 			error = EINVAL;
268282cd038dSYoshinobu Inoue 			break;
268382cd038dSYoshinobu Inoue 		}
268433841545SHajimu UMEMOTO 		bcopy(mtod(m, u_int *), &optval, sizeof(optval));
268582cd038dSYoshinobu Inoue 		if (optval < -1 || optval >= 256)
268682cd038dSYoshinobu Inoue 			error = EINVAL;
268782cd038dSYoshinobu Inoue 		else if (optval == -1)
268882cd038dSYoshinobu Inoue 			im6o->im6o_multicast_hlim = ip6_defmcasthlim;
268982cd038dSYoshinobu Inoue 		else
269082cd038dSYoshinobu Inoue 			im6o->im6o_multicast_hlim = optval;
269182cd038dSYoshinobu Inoue 		break;
269282cd038dSYoshinobu Inoue 	    }
269382cd038dSYoshinobu Inoue 
269482cd038dSYoshinobu Inoue 	case IPV6_MULTICAST_LOOP:
269582cd038dSYoshinobu Inoue 		/*
269682cd038dSYoshinobu Inoue 		 * Set the loopback flag for outgoing multicast packets.
269782cd038dSYoshinobu Inoue 		 * Must be zero or one.
269882cd038dSYoshinobu Inoue 		 */
269933841545SHajimu UMEMOTO 		if (m == NULL || m->m_len != sizeof(u_int)) {
270033841545SHajimu UMEMOTO 			error = EINVAL;
270133841545SHajimu UMEMOTO 			break;
270233841545SHajimu UMEMOTO 		}
270333841545SHajimu UMEMOTO 		bcopy(mtod(m, u_int *), &loop, sizeof(loop));
270433841545SHajimu UMEMOTO 		if (loop > 1) {
270582cd038dSYoshinobu Inoue 			error = EINVAL;
270682cd038dSYoshinobu Inoue 			break;
270782cd038dSYoshinobu Inoue 		}
270882cd038dSYoshinobu Inoue 		im6o->im6o_multicast_loop = loop;
270982cd038dSYoshinobu Inoue 		break;
271082cd038dSYoshinobu Inoue 
271182cd038dSYoshinobu Inoue 	case IPV6_JOIN_GROUP:
271282cd038dSYoshinobu Inoue 		/*
271382cd038dSYoshinobu Inoue 		 * Add a multicast group membership.
271482cd038dSYoshinobu Inoue 		 * Group must be a valid IP6 multicast address.
271582cd038dSYoshinobu Inoue 		 */
271682cd038dSYoshinobu Inoue 		if (m == NULL || m->m_len != sizeof(struct ipv6_mreq)) {
271782cd038dSYoshinobu Inoue 			error = EINVAL;
271882cd038dSYoshinobu Inoue 			break;
271982cd038dSYoshinobu Inoue 		}
272082cd038dSYoshinobu Inoue 		mreq = mtod(m, struct ipv6_mreq *);
272182cd038dSYoshinobu Inoue 		if (IN6_IS_ADDR_UNSPECIFIED(&mreq->ipv6mr_multiaddr)) {
272282cd038dSYoshinobu Inoue 			/*
272382cd038dSYoshinobu Inoue 			 * We use the unspecified address to specify to accept
272482cd038dSYoshinobu Inoue 			 * all multicast addresses. Only super user is allowed
272582cd038dSYoshinobu Inoue 			 * to do this.
272682cd038dSYoshinobu Inoue 			 */
27277efe5d92SHajimu UMEMOTO 			if (suser(td)) {
272882cd038dSYoshinobu Inoue 				error = EACCES;
272982cd038dSYoshinobu Inoue 				break;
273082cd038dSYoshinobu Inoue 			}
273182cd038dSYoshinobu Inoue 		} else if (!IN6_IS_ADDR_MULTICAST(&mreq->ipv6mr_multiaddr)) {
273282cd038dSYoshinobu Inoue 			error = EINVAL;
273382cd038dSYoshinobu Inoue 			break;
273482cd038dSYoshinobu Inoue 		}
273582cd038dSYoshinobu Inoue 
273682cd038dSYoshinobu Inoue 		/*
273782cd038dSYoshinobu Inoue 		 * If the interface is specified, validate it.
273882cd038dSYoshinobu Inoue 		 */
273907027f9dSHajimu UMEMOTO 		if (mreq->ipv6mr_interface < 0 ||
274007027f9dSHajimu UMEMOTO 		    if_index < mreq->ipv6mr_interface) {
274182cd038dSYoshinobu Inoue 			error = ENXIO;	/* XXX EINVAL? */
274282cd038dSYoshinobu Inoue 			break;
274382cd038dSYoshinobu Inoue 		}
274482cd038dSYoshinobu Inoue 		/*
274582cd038dSYoshinobu Inoue 		 * If no interface was explicitly specified, choose an
274682cd038dSYoshinobu Inoue 		 * appropriate one according to the given multicast address.
274782cd038dSYoshinobu Inoue 		 */
274882cd038dSYoshinobu Inoue 		if (mreq->ipv6mr_interface == 0) {
274982cd038dSYoshinobu Inoue 			/*
275082cd038dSYoshinobu Inoue 			 * If the multicast address is in node-local scope,
275182cd038dSYoshinobu Inoue 			 * the interface should be a loopback interface.
275282cd038dSYoshinobu Inoue 			 * Otherwise, look up the routing table for the
275382cd038dSYoshinobu Inoue 			 * address, and choose the outgoing interface.
275482cd038dSYoshinobu Inoue 			 *   XXX: is it a good approach?
275582cd038dSYoshinobu Inoue 			 */
27569a4f9608SHajimu UMEMOTO 			if (IN6_IS_ADDR_MC_INTFACELOCAL(&mreq->ipv6mr_multiaddr)) {
275782cd038dSYoshinobu Inoue 				ifp = &loif[0];
275882cd038dSYoshinobu Inoue 			} else {
275982cd038dSYoshinobu Inoue 				ro.ro_rt = NULL;
276082cd038dSYoshinobu Inoue 				dst = (struct sockaddr_in6 *)&ro.ro_dst;
276182cd038dSYoshinobu Inoue 				bzero(dst, sizeof(*dst));
276282cd038dSYoshinobu Inoue 				dst->sin6_len = sizeof(struct sockaddr_in6);
276382cd038dSYoshinobu Inoue 				dst->sin6_family = AF_INET6;
276482cd038dSYoshinobu Inoue 				dst->sin6_addr = mreq->ipv6mr_multiaddr;
276582cd038dSYoshinobu Inoue 				rtalloc((struct route *)&ro);
276682cd038dSYoshinobu Inoue 				if (ro.ro_rt == NULL) {
276782cd038dSYoshinobu Inoue 					error = EADDRNOTAVAIL;
276882cd038dSYoshinobu Inoue 					break;
276982cd038dSYoshinobu Inoue 				}
277082cd038dSYoshinobu Inoue 				ifp = ro.ro_rt->rt_ifp;
2771d1dd20beSSam Leffler 				RTFREE(ro.ro_rt);
277282cd038dSYoshinobu Inoue 			}
277382cd038dSYoshinobu Inoue 		} else
2774f9132cebSJonathan Lemon 			ifp = ifnet_byindex(mreq->ipv6mr_interface);
277582cd038dSYoshinobu Inoue 
277682cd038dSYoshinobu Inoue 		/*
277782cd038dSYoshinobu Inoue 		 * See if we found an interface, and confirm that it
277882cd038dSYoshinobu Inoue 		 * supports multicast
277982cd038dSYoshinobu Inoue 		 */
278082cd038dSYoshinobu Inoue 		if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) {
278182cd038dSYoshinobu Inoue 			error = EADDRNOTAVAIL;
278282cd038dSYoshinobu Inoue 			break;
278382cd038dSYoshinobu Inoue 		}
278482cd038dSYoshinobu Inoue 		/*
278582cd038dSYoshinobu Inoue 		 * Put interface index into the multicast address,
278682cd038dSYoshinobu Inoue 		 * if the address has link-local scope.
278782cd038dSYoshinobu Inoue 		 */
278882cd038dSYoshinobu Inoue 		if (IN6_IS_ADDR_MC_LINKLOCAL(&mreq->ipv6mr_multiaddr)) {
278907027f9dSHajimu UMEMOTO 			mreq->ipv6mr_multiaddr.s6_addr16[1] =
279007027f9dSHajimu UMEMOTO 			    htons(ifp->if_index);
279182cd038dSYoshinobu Inoue 		}
279282cd038dSYoshinobu Inoue 		/*
279382cd038dSYoshinobu Inoue 		 * See if the membership already exists.
279482cd038dSYoshinobu Inoue 		 */
2795686cdd19SJun-ichiro itojun Hagino 		for (imm = im6o->im6o_memberships.lh_first;
2796686cdd19SJun-ichiro itojun Hagino 		     imm != NULL; imm = imm->i6mm_chain.le_next)
279782cd038dSYoshinobu Inoue 			if (imm->i6mm_maddr->in6m_ifp == ifp &&
279882cd038dSYoshinobu Inoue 			    IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr,
279982cd038dSYoshinobu Inoue 					       &mreq->ipv6mr_multiaddr))
280082cd038dSYoshinobu Inoue 				break;
280182cd038dSYoshinobu Inoue 		if (imm != NULL) {
280282cd038dSYoshinobu Inoue 			error = EADDRINUSE;
280382cd038dSYoshinobu Inoue 			break;
280482cd038dSYoshinobu Inoue 		}
280582cd038dSYoshinobu Inoue 		/*
280682cd038dSYoshinobu Inoue 		 * Everything looks good; add a new record to the multicast
280782cd038dSYoshinobu Inoue 		 * address list for the given interface.
280882cd038dSYoshinobu Inoue 		 */
2809a163d034SWarner Losh 		imm = malloc(sizeof(*imm), M_IPMADDR, M_WAITOK);
281082cd038dSYoshinobu Inoue 		if (imm == NULL) {
281182cd038dSYoshinobu Inoue 			error = ENOBUFS;
281282cd038dSYoshinobu Inoue 			break;
281382cd038dSYoshinobu Inoue 		}
281482cd038dSYoshinobu Inoue 		if ((imm->i6mm_maddr =
281582cd038dSYoshinobu Inoue 		     in6_addmulti(&mreq->ipv6mr_multiaddr, ifp, &error)) == NULL) {
281682cd038dSYoshinobu Inoue 			free(imm, M_IPMADDR);
281782cd038dSYoshinobu Inoue 			break;
281882cd038dSYoshinobu Inoue 		}
281982cd038dSYoshinobu Inoue 		LIST_INSERT_HEAD(&im6o->im6o_memberships, imm, i6mm_chain);
282082cd038dSYoshinobu Inoue 		break;
282182cd038dSYoshinobu Inoue 
282282cd038dSYoshinobu Inoue 	case IPV6_LEAVE_GROUP:
282382cd038dSYoshinobu Inoue 		/*
282482cd038dSYoshinobu Inoue 		 * Drop a multicast group membership.
282582cd038dSYoshinobu Inoue 		 * Group must be a valid IP6 multicast address.
282682cd038dSYoshinobu Inoue 		 */
282782cd038dSYoshinobu Inoue 		if (m == NULL || m->m_len != sizeof(struct ipv6_mreq)) {
282882cd038dSYoshinobu Inoue 			error = EINVAL;
282982cd038dSYoshinobu Inoue 			break;
283082cd038dSYoshinobu Inoue 		}
283182cd038dSYoshinobu Inoue 		mreq = mtod(m, struct ipv6_mreq *);
283282cd038dSYoshinobu Inoue 		if (IN6_IS_ADDR_UNSPECIFIED(&mreq->ipv6mr_multiaddr)) {
283344731cabSJohn Baldwin 			if (suser(td)) {
283482cd038dSYoshinobu Inoue 				error = EACCES;
283582cd038dSYoshinobu Inoue 				break;
283682cd038dSYoshinobu Inoue 			}
283782cd038dSYoshinobu Inoue 		} else if (!IN6_IS_ADDR_MULTICAST(&mreq->ipv6mr_multiaddr)) {
283882cd038dSYoshinobu Inoue 			error = EINVAL;
283982cd038dSYoshinobu Inoue 			break;
284082cd038dSYoshinobu Inoue 		}
284182cd038dSYoshinobu Inoue 		/*
284282cd038dSYoshinobu Inoue 		 * If an interface address was specified, get a pointer
284382cd038dSYoshinobu Inoue 		 * to its ifnet structure.
284482cd038dSYoshinobu Inoue 		 */
284582cd038dSYoshinobu Inoue 		if (mreq->ipv6mr_interface < 0
284682cd038dSYoshinobu Inoue 		 || if_index < mreq->ipv6mr_interface) {
284782cd038dSYoshinobu Inoue 			error = ENXIO;	/* XXX EINVAL? */
284882cd038dSYoshinobu Inoue 			break;
284982cd038dSYoshinobu Inoue 		}
2850f9132cebSJonathan Lemon 		ifp = ifnet_byindex(mreq->ipv6mr_interface);
285182cd038dSYoshinobu Inoue 		/*
285282cd038dSYoshinobu Inoue 		 * Put interface index into the multicast address,
285382cd038dSYoshinobu Inoue 		 * if the address has link-local scope.
285482cd038dSYoshinobu Inoue 		 */
285582cd038dSYoshinobu Inoue 		if (IN6_IS_ADDR_MC_LINKLOCAL(&mreq->ipv6mr_multiaddr)) {
285682cd038dSYoshinobu Inoue 			mreq->ipv6mr_multiaddr.s6_addr16[1]
285782cd038dSYoshinobu Inoue 				= htons(mreq->ipv6mr_interface);
285882cd038dSYoshinobu Inoue 		}
28597efe5d92SHajimu UMEMOTO 
286082cd038dSYoshinobu Inoue 		/*
286182cd038dSYoshinobu Inoue 		 * Find the membership in the membership list.
286282cd038dSYoshinobu Inoue 		 */
2863686cdd19SJun-ichiro itojun Hagino 		for (imm = im6o->im6o_memberships.lh_first;
2864686cdd19SJun-ichiro itojun Hagino 		     imm != NULL; imm = imm->i6mm_chain.le_next) {
28657efe5d92SHajimu UMEMOTO 			if ((ifp == NULL || imm->i6mm_maddr->in6m_ifp == ifp) &&
286682cd038dSYoshinobu Inoue 			    IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr,
286782cd038dSYoshinobu Inoue 			    &mreq->ipv6mr_multiaddr))
286882cd038dSYoshinobu Inoue 				break;
286982cd038dSYoshinobu Inoue 		}
287082cd038dSYoshinobu Inoue 		if (imm == NULL) {
287182cd038dSYoshinobu Inoue 			/* Unable to resolve interface */
287282cd038dSYoshinobu Inoue 			error = EADDRNOTAVAIL;
287382cd038dSYoshinobu Inoue 			break;
287482cd038dSYoshinobu Inoue 		}
287582cd038dSYoshinobu Inoue 		/*
287682cd038dSYoshinobu Inoue 		 * Give up the multicast address record to which the
287782cd038dSYoshinobu Inoue 		 * membership points.
287882cd038dSYoshinobu Inoue 		 */
287982cd038dSYoshinobu Inoue 		LIST_REMOVE(imm, i6mm_chain);
288082cd038dSYoshinobu Inoue 		in6_delmulti(imm->i6mm_maddr);
288182cd038dSYoshinobu Inoue 		free(imm, M_IPMADDR);
288282cd038dSYoshinobu Inoue 		break;
288382cd038dSYoshinobu Inoue 
288482cd038dSYoshinobu Inoue 	default:
288582cd038dSYoshinobu Inoue 		error = EOPNOTSUPP;
288682cd038dSYoshinobu Inoue 		break;
288782cd038dSYoshinobu Inoue 	}
288882cd038dSYoshinobu Inoue 
288982cd038dSYoshinobu Inoue 	/*
289082cd038dSYoshinobu Inoue 	 * If all options have default values, no need to keep the mbuf.
289182cd038dSYoshinobu Inoue 	 */
289282cd038dSYoshinobu Inoue 	if (im6o->im6o_multicast_ifp == NULL &&
289382cd038dSYoshinobu Inoue 	    im6o->im6o_multicast_hlim == ip6_defmcasthlim &&
289482cd038dSYoshinobu Inoue 	    im6o->im6o_multicast_loop == IPV6_DEFAULT_MULTICAST_LOOP &&
2895686cdd19SJun-ichiro itojun Hagino 	    im6o->im6o_memberships.lh_first == NULL) {
289682cd038dSYoshinobu Inoue 		free(*im6op, M_IPMOPTS);
289782cd038dSYoshinobu Inoue 		*im6op = NULL;
289882cd038dSYoshinobu Inoue 	}
289982cd038dSYoshinobu Inoue 
290082cd038dSYoshinobu Inoue 	return (error);
290182cd038dSYoshinobu Inoue }
290282cd038dSYoshinobu Inoue 
290382cd038dSYoshinobu Inoue /*
290482cd038dSYoshinobu Inoue  * Return the IP6 multicast options in response to user getsockopt().
290582cd038dSYoshinobu Inoue  */
290682cd038dSYoshinobu Inoue static int
290782cd038dSYoshinobu Inoue ip6_getmoptions(optname, im6o, mp)
290882cd038dSYoshinobu Inoue 	int optname;
290933841545SHajimu UMEMOTO 	struct ip6_moptions *im6o;
291033841545SHajimu UMEMOTO 	struct mbuf **mp;
291182cd038dSYoshinobu Inoue {
291282cd038dSYoshinobu Inoue 	u_int *hlim, *loop, *ifindex;
291382cd038dSYoshinobu Inoue 
2914a163d034SWarner Losh 	*mp = m_get(M_TRYWAIT, MT_HEADER);		/* XXX */
291582cd038dSYoshinobu Inoue 
291682cd038dSYoshinobu Inoue 	switch (optname) {
291782cd038dSYoshinobu Inoue 
291882cd038dSYoshinobu Inoue 	case IPV6_MULTICAST_IF:
291982cd038dSYoshinobu Inoue 		ifindex = mtod(*mp, u_int *);
292082cd038dSYoshinobu Inoue 		(*mp)->m_len = sizeof(u_int);
292182cd038dSYoshinobu Inoue 		if (im6o == NULL || im6o->im6o_multicast_ifp == NULL)
292282cd038dSYoshinobu Inoue 			*ifindex = 0;
292382cd038dSYoshinobu Inoue 		else
292482cd038dSYoshinobu Inoue 			*ifindex = im6o->im6o_multicast_ifp->if_index;
292582cd038dSYoshinobu Inoue 		return (0);
292682cd038dSYoshinobu Inoue 
292782cd038dSYoshinobu Inoue 	case IPV6_MULTICAST_HOPS:
292882cd038dSYoshinobu Inoue 		hlim = mtod(*mp, u_int *);
292982cd038dSYoshinobu Inoue 		(*mp)->m_len = sizeof(u_int);
293082cd038dSYoshinobu Inoue 		if (im6o == NULL)
293182cd038dSYoshinobu Inoue 			*hlim = ip6_defmcasthlim;
293282cd038dSYoshinobu Inoue 		else
293382cd038dSYoshinobu Inoue 			*hlim = im6o->im6o_multicast_hlim;
293482cd038dSYoshinobu Inoue 		return (0);
293582cd038dSYoshinobu Inoue 
293682cd038dSYoshinobu Inoue 	case IPV6_MULTICAST_LOOP:
293782cd038dSYoshinobu Inoue 		loop = mtod(*mp, u_int *);
293882cd038dSYoshinobu Inoue 		(*mp)->m_len = sizeof(u_int);
293982cd038dSYoshinobu Inoue 		if (im6o == NULL)
294082cd038dSYoshinobu Inoue 			*loop = ip6_defmcasthlim;
294182cd038dSYoshinobu Inoue 		else
294282cd038dSYoshinobu Inoue 			*loop = im6o->im6o_multicast_loop;
294382cd038dSYoshinobu Inoue 		return (0);
294482cd038dSYoshinobu Inoue 
294582cd038dSYoshinobu Inoue 	default:
294682cd038dSYoshinobu Inoue 		return (EOPNOTSUPP);
294782cd038dSYoshinobu Inoue 	}
294882cd038dSYoshinobu Inoue }
294982cd038dSYoshinobu Inoue 
295082cd038dSYoshinobu Inoue /*
295182cd038dSYoshinobu Inoue  * Discard the IP6 multicast options.
295282cd038dSYoshinobu Inoue  */
295382cd038dSYoshinobu Inoue void
295482cd038dSYoshinobu Inoue ip6_freemoptions(im6o)
295533841545SHajimu UMEMOTO 	struct ip6_moptions *im6o;
295682cd038dSYoshinobu Inoue {
295782cd038dSYoshinobu Inoue 	struct in6_multi_mship *imm;
295882cd038dSYoshinobu Inoue 
295982cd038dSYoshinobu Inoue 	if (im6o == NULL)
296082cd038dSYoshinobu Inoue 		return;
296182cd038dSYoshinobu Inoue 
2962686cdd19SJun-ichiro itojun Hagino 	while ((imm = im6o->im6o_memberships.lh_first) != NULL) {
296382cd038dSYoshinobu Inoue 		LIST_REMOVE(imm, i6mm_chain);
296482cd038dSYoshinobu Inoue 		if (imm->i6mm_maddr)
296582cd038dSYoshinobu Inoue 			in6_delmulti(imm->i6mm_maddr);
296682cd038dSYoshinobu Inoue 		free(imm, M_IPMADDR);
296782cd038dSYoshinobu Inoue 	}
296882cd038dSYoshinobu Inoue 	free(im6o, M_IPMOPTS);
296982cd038dSYoshinobu Inoue }
297082cd038dSYoshinobu Inoue 
297182cd038dSYoshinobu Inoue /*
297282cd038dSYoshinobu Inoue  * Set IPv6 outgoing packet options based on advanced API.
297382cd038dSYoshinobu Inoue  */
297482cd038dSYoshinobu Inoue int
2975f95d4633SHajimu UMEMOTO ip6_setpktoptions(control, opt, stickyopt, priv, needcopy, uproto)
297682cd038dSYoshinobu Inoue 	struct mbuf *control;
2977f95d4633SHajimu UMEMOTO 	struct ip6_pktopts *opt, *stickyopt;
2978f95d4633SHajimu UMEMOTO 	int priv, needcopy, uproto;
297982cd038dSYoshinobu Inoue {
298033841545SHajimu UMEMOTO 	struct cmsghdr *cm = 0;
298182cd038dSYoshinobu Inoue 
298282cd038dSYoshinobu Inoue 	if (control == 0 || opt == 0)
298382cd038dSYoshinobu Inoue 		return (EINVAL);
298482cd038dSYoshinobu Inoue 
2985f95d4633SHajimu UMEMOTO 	if (stickyopt) {
2986f95d4633SHajimu UMEMOTO 		/*
2987f95d4633SHajimu UMEMOTO 		 * If stickyopt is provided, make a local copy of the options
2988f95d4633SHajimu UMEMOTO 		 * for this particular packet, then override them by ancillary
2989f95d4633SHajimu UMEMOTO 		 * objects.
2990f95d4633SHajimu UMEMOTO 		 * XXX: need to gain a reference for the cached route of the
2991f95d4633SHajimu UMEMOTO 		 * next hop in case of the overriding.
2992f95d4633SHajimu UMEMOTO 		 */
2993f95d4633SHajimu UMEMOTO 		*opt = *stickyopt;
2994f95d4633SHajimu UMEMOTO 		if (opt->ip6po_nextroute.ro_rt) {
2995f95d4633SHajimu UMEMOTO 			RT_LOCK(opt->ip6po_nextroute.ro_rt);
29967138d65cSSam Leffler 			RT_ADDREF(opt->ip6po_nextroute.ro_rt);
2997f95d4633SHajimu UMEMOTO 			RT_UNLOCK(opt->ip6po_nextroute.ro_rt);
2998f95d4633SHajimu UMEMOTO 		}
2999f95d4633SHajimu UMEMOTO 	} else
300033841545SHajimu UMEMOTO 		init_ip6pktopts(opt);
3001f95d4633SHajimu UMEMOTO 	opt->needfree = needcopy;
300282cd038dSYoshinobu Inoue 
300382cd038dSYoshinobu Inoue 	/*
300482cd038dSYoshinobu Inoue 	 * XXX: Currently, we assume all the optional information is stored
300582cd038dSYoshinobu Inoue 	 * in a single mbuf.
300682cd038dSYoshinobu Inoue 	 */
300782cd038dSYoshinobu Inoue 	if (control->m_next)
300882cd038dSYoshinobu Inoue 		return (EINVAL);
300982cd038dSYoshinobu Inoue 
301033841545SHajimu UMEMOTO 	for (; control->m_len; control->m_data += CMSG_ALIGN(cm->cmsg_len),
301133841545SHajimu UMEMOTO 	    control->m_len -= CMSG_ALIGN(cm->cmsg_len)) {
3012f95d4633SHajimu UMEMOTO 		int error;
3013f95d4633SHajimu UMEMOTO 
3014f95d4633SHajimu UMEMOTO 		if (control->m_len < CMSG_LEN(0))
3015f95d4633SHajimu UMEMOTO 			return (EINVAL);
3016f95d4633SHajimu UMEMOTO 
301782cd038dSYoshinobu Inoue 		cm = mtod(control, struct cmsghdr *);
301882cd038dSYoshinobu Inoue 		if (cm->cmsg_len == 0 || cm->cmsg_len > control->m_len)
301982cd038dSYoshinobu Inoue 			return (EINVAL);
302082cd038dSYoshinobu Inoue 		if (cm->cmsg_level != IPPROTO_IPV6)
302182cd038dSYoshinobu Inoue 			continue;
302282cd038dSYoshinobu Inoue 
3023f95d4633SHajimu UMEMOTO 		error = ip6_setpktoption(cm->cmsg_type, CMSG_DATA(cm),
3024f95d4633SHajimu UMEMOTO 		    cm->cmsg_len - CMSG_LEN(0), opt, priv, needcopy, 1, uproto);
3025f95d4633SHajimu UMEMOTO 		if (error)
3026f95d4633SHajimu UMEMOTO 			return (error);
3027f95d4633SHajimu UMEMOTO 	}
302882cd038dSYoshinobu Inoue 
3029f95d4633SHajimu UMEMOTO 	return (0);
3030f95d4633SHajimu UMEMOTO }
3031f95d4633SHajimu UMEMOTO 
3032f95d4633SHajimu UMEMOTO /*
3033f95d4633SHajimu UMEMOTO  * Set a particular packet option, as a sticky option or an ancillary data
3034f95d4633SHajimu UMEMOTO  * item.  "len" can be 0 only when it's a sticky option.
3035f95d4633SHajimu UMEMOTO  * We have 4 cases of combination of "sticky" and "cmsg":
3036f95d4633SHajimu UMEMOTO  * "sticky=0, cmsg=0": impossible
3037f95d4633SHajimu UMEMOTO  * "sticky=0, cmsg=1": RFC2292 or rfc2292bis ancillary data
3038f95d4633SHajimu UMEMOTO  * "sticky=1, cmsg=0": rfc2292bis socket option
3039f95d4633SHajimu UMEMOTO  * "sticky=1, cmsg=1": RFC2292 socket option
3040f95d4633SHajimu UMEMOTO  */
3041f95d4633SHajimu UMEMOTO static int
3042f95d4633SHajimu UMEMOTO ip6_setpktoption(optname, buf, len, opt, priv, sticky, cmsg, uproto)
3043f95d4633SHajimu UMEMOTO 	int optname, len, priv, sticky, cmsg, uproto;
3044f95d4633SHajimu UMEMOTO 	u_char *buf;
3045f95d4633SHajimu UMEMOTO 	struct ip6_pktopts *opt;
3046f95d4633SHajimu UMEMOTO {
3047f95d4633SHajimu UMEMOTO 	int minmtupolicy, preftemp;
3048f95d4633SHajimu UMEMOTO 
3049f95d4633SHajimu UMEMOTO 	if (!sticky && !cmsg) {
3050f95d4633SHajimu UMEMOTO #ifdef DIAGNOSTIC
3051f95d4633SHajimu UMEMOTO 		printf("ip6_setpktoption: impossible case\n");
3052f95d4633SHajimu UMEMOTO #endif
3053f95d4633SHajimu UMEMOTO 		return (EINVAL);
3054f95d4633SHajimu UMEMOTO 	}
3055f95d4633SHajimu UMEMOTO 
3056f95d4633SHajimu UMEMOTO 	/*
3057f95d4633SHajimu UMEMOTO 	 * IPV6_2292xxx is for backward compatibility to RFC2292, and should
3058f95d4633SHajimu UMEMOTO 	 * not be specified in the context of rfc2292bis.  Conversely,
3059f95d4633SHajimu UMEMOTO 	 * rfc2292bis types should not be specified in the context of RFC2292.
3060f95d4633SHajimu UMEMOTO 	 */
3061f95d4633SHajimu UMEMOTO 	if (!cmsg) {
3062f95d4633SHajimu UMEMOTO 		switch (optname) {
3063f95d4633SHajimu UMEMOTO 		case IPV6_2292PKTINFO:
3064f95d4633SHajimu UMEMOTO 		case IPV6_2292HOPLIMIT:
3065f95d4633SHajimu UMEMOTO 		case IPV6_2292NEXTHOP:
3066f95d4633SHajimu UMEMOTO 		case IPV6_2292HOPOPTS:
3067f95d4633SHajimu UMEMOTO 		case IPV6_2292DSTOPTS:
3068f95d4633SHajimu UMEMOTO 		case IPV6_2292RTHDR:
3069f95d4633SHajimu UMEMOTO 		case IPV6_2292PKTOPTIONS:
3070f95d4633SHajimu UMEMOTO 			return (ENOPROTOOPT);
3071f95d4633SHajimu UMEMOTO 		}
3072f95d4633SHajimu UMEMOTO 	}
3073f95d4633SHajimu UMEMOTO 	if (sticky && cmsg) {
3074f95d4633SHajimu UMEMOTO 		switch (optname) {
3075f95d4633SHajimu UMEMOTO 		case IPV6_PKTINFO:
3076f95d4633SHajimu UMEMOTO 		case IPV6_HOPLIMIT:
3077f95d4633SHajimu UMEMOTO 		case IPV6_NEXTHOP:
3078f95d4633SHajimu UMEMOTO 		case IPV6_HOPOPTS:
3079f95d4633SHajimu UMEMOTO 		case IPV6_DSTOPTS:
3080f95d4633SHajimu UMEMOTO 		case IPV6_RTHDRDSTOPTS:
3081f95d4633SHajimu UMEMOTO 		case IPV6_RTHDR:
3082f95d4633SHajimu UMEMOTO 		case IPV6_USE_MIN_MTU:
3083f95d4633SHajimu UMEMOTO 		case IPV6_DONTFRAG:
3084f95d4633SHajimu UMEMOTO 		case IPV6_TCLASS:
3085f95d4633SHajimu UMEMOTO 		case IPV6_PREFER_TEMPADDR: /* XXX: not an rfc2292bis option */
3086f95d4633SHajimu UMEMOTO 			return (ENOPROTOOPT);
3087f95d4633SHajimu UMEMOTO 		}
3088f95d4633SHajimu UMEMOTO 	}
3089f95d4633SHajimu UMEMOTO 
3090f95d4633SHajimu UMEMOTO 	switch (optname) {
3091f95d4633SHajimu UMEMOTO 	case IPV6_2292PKTINFO:
3092f95d4633SHajimu UMEMOTO 	case IPV6_PKTINFO:
3093f95d4633SHajimu UMEMOTO 	{
3094f95d4633SHajimu UMEMOTO 		struct ifnet *ifp = NULL;
3095f95d4633SHajimu UMEMOTO 		struct in6_pktinfo *pktinfo;
3096f95d4633SHajimu UMEMOTO 
3097f95d4633SHajimu UMEMOTO 		if (len != sizeof(struct in6_pktinfo))
3098f95d4633SHajimu UMEMOTO 			return (EINVAL);
3099f95d4633SHajimu UMEMOTO 
3100f95d4633SHajimu UMEMOTO 		pktinfo = (struct in6_pktinfo *)buf;
3101f95d4633SHajimu UMEMOTO 
3102f95d4633SHajimu UMEMOTO 		/*
3103f95d4633SHajimu UMEMOTO 		 * An application can clear any sticky IPV6_PKTINFO option by
3104f95d4633SHajimu UMEMOTO 		 * doing a "regular" setsockopt with ipi6_addr being
3105f95d4633SHajimu UMEMOTO 		 * in6addr_any and ipi6_ifindex being zero.
3106f95d4633SHajimu UMEMOTO 		 * [RFC 3542, Section 6]
3107f95d4633SHajimu UMEMOTO 		 */
3108f95d4633SHajimu UMEMOTO 		if (optname == IPV6_PKTINFO && opt->ip6po_pktinfo &&
3109f95d4633SHajimu UMEMOTO 		    pktinfo->ipi6_ifindex == 0 &&
3110f95d4633SHajimu UMEMOTO 		    IN6_IS_ADDR_UNSPECIFIED(&pktinfo->ipi6_addr)) {
3111f95d4633SHajimu UMEMOTO 			ip6_clearpktopts(opt, optname);
3112f95d4633SHajimu UMEMOTO 			break;
3113f95d4633SHajimu UMEMOTO 		}
3114f95d4633SHajimu UMEMOTO 
3115f95d4633SHajimu UMEMOTO 		if (uproto == IPPROTO_TCP && optname == IPV6_PKTINFO &&
3116f95d4633SHajimu UMEMOTO 		    sticky && !IN6_IS_ADDR_UNSPECIFIED(&pktinfo->ipi6_addr)) {
3117f95d4633SHajimu UMEMOTO 			return (EINVAL);
3118f95d4633SHajimu UMEMOTO 		}
3119f95d4633SHajimu UMEMOTO 
3120f95d4633SHajimu UMEMOTO 		/* validate the interface index if specified. */
3121f95d4633SHajimu UMEMOTO 		if (pktinfo->ipi6_ifindex > if_index ||
3122f95d4633SHajimu UMEMOTO 		    pktinfo->ipi6_ifindex < 0) {
3123f95d4633SHajimu UMEMOTO 			 return (ENXIO);
3124f95d4633SHajimu UMEMOTO 		}
3125f95d4633SHajimu UMEMOTO 		if (pktinfo->ipi6_ifindex) {
3126f95d4633SHajimu UMEMOTO 			ifp = ifnet_byindex(pktinfo->ipi6_ifindex);
3127f95d4633SHajimu UMEMOTO 			if (ifp == NULL)
312882cd038dSYoshinobu Inoue 				return (ENXIO);
312982cd038dSYoshinobu Inoue 		}
313082cd038dSYoshinobu Inoue 
313133841545SHajimu UMEMOTO 		/*
3132f95d4633SHajimu UMEMOTO 		 * We store the address anyway, and let in6_selectsrc()
3133f95d4633SHajimu UMEMOTO 		 * validate the specified address.  This is because ipi6_addr
3134f95d4633SHajimu UMEMOTO 		 * may not have enough information about its scope zone, and
3135f95d4633SHajimu UMEMOTO 		 * we may need additional information (such as outgoing
3136f95d4633SHajimu UMEMOTO 		 * interface or the scope zone of a destination address) to
3137f95d4633SHajimu UMEMOTO 		 * disambiguate the scope.
3138f95d4633SHajimu UMEMOTO 		 * XXX: the delay of the validation may confuse the
3139f95d4633SHajimu UMEMOTO 		 * application when it is used as a sticky option.
314033841545SHajimu UMEMOTO 		 */
3141f95d4633SHajimu UMEMOTO 		if (sticky) {
3142f95d4633SHajimu UMEMOTO 			if (opt->ip6po_pktinfo == NULL) {
3143f95d4633SHajimu UMEMOTO 				opt->ip6po_pktinfo = malloc(sizeof(*pktinfo),
3144f95d4633SHajimu UMEMOTO 				    M_IP6OPT, M_WAITOK);
314582cd038dSYoshinobu Inoue 			}
3146f95d4633SHajimu UMEMOTO 			bcopy(pktinfo, opt->ip6po_pktinfo, sizeof(*pktinfo));
3147f95d4633SHajimu UMEMOTO 		} else
3148f95d4633SHajimu UMEMOTO 			opt->ip6po_pktinfo = pktinfo;
314982cd038dSYoshinobu Inoue 		break;
3150f95d4633SHajimu UMEMOTO 	}
315182cd038dSYoshinobu Inoue 
3152f95d4633SHajimu UMEMOTO 	case IPV6_2292HOPLIMIT:
315382cd038dSYoshinobu Inoue 	case IPV6_HOPLIMIT:
3154f95d4633SHajimu UMEMOTO 	{
3155f95d4633SHajimu UMEMOTO 		int *hlimp;
3156f95d4633SHajimu UMEMOTO 
3157f95d4633SHajimu UMEMOTO 		/*
3158f95d4633SHajimu UMEMOTO 		 * RFC 3542 deprecated the usage of sticky IPV6_HOPLIMIT
3159f95d4633SHajimu UMEMOTO 		 * to simplify the ordering among hoplimit options.
3160f95d4633SHajimu UMEMOTO 		 */
3161f95d4633SHajimu UMEMOTO 		if (optname == IPV6_HOPLIMIT && sticky)
3162f95d4633SHajimu UMEMOTO 			return (ENOPROTOOPT);
3163f95d4633SHajimu UMEMOTO 
3164f95d4633SHajimu UMEMOTO 		if (len != sizeof(int))
3165f95d4633SHajimu UMEMOTO 			return (EINVAL);
3166f95d4633SHajimu UMEMOTO 		hlimp = (int *)buf;
3167f95d4633SHajimu UMEMOTO 		if (*hlimp < -1 || *hlimp > 255)
316882cd038dSYoshinobu Inoue 			return (EINVAL);
316982cd038dSYoshinobu Inoue 
3170f95d4633SHajimu UMEMOTO 		opt->ip6po_hlim = *hlimp;
317182cd038dSYoshinobu Inoue 		break;
3172f95d4633SHajimu UMEMOTO 	}
317382cd038dSYoshinobu Inoue 
3174f95d4633SHajimu UMEMOTO 	case IPV6_TCLASS:
3175f95d4633SHajimu UMEMOTO 	{
3176f95d4633SHajimu UMEMOTO 		int tclass;
3177f95d4633SHajimu UMEMOTO 
3178f95d4633SHajimu UMEMOTO 		if (len != sizeof(int))
3179f95d4633SHajimu UMEMOTO 			return (EINVAL);
3180f95d4633SHajimu UMEMOTO 		tclass = *(int *)buf;
3181f95d4633SHajimu UMEMOTO 		if (tclass < -1 || tclass > 255)
3182f95d4633SHajimu UMEMOTO 			return (EINVAL);
3183f95d4633SHajimu UMEMOTO 
3184f95d4633SHajimu UMEMOTO 		opt->ip6po_tclass = tclass;
3185f95d4633SHajimu UMEMOTO 		break;
3186f95d4633SHajimu UMEMOTO 	}
3187f95d4633SHajimu UMEMOTO 
3188f95d4633SHajimu UMEMOTO 	case IPV6_2292NEXTHOP:
318982cd038dSYoshinobu Inoue 	case IPV6_NEXTHOP:
319082cd038dSYoshinobu Inoue 		if (!priv)
319182cd038dSYoshinobu Inoue 			return (EPERM);
319233841545SHajimu UMEMOTO 
3193f95d4633SHajimu UMEMOTO 		if (len == 0) {	/* just remove the option */
3194f95d4633SHajimu UMEMOTO 			ip6_clearpktopts(opt, IPV6_NEXTHOP);
3195f95d4633SHajimu UMEMOTO 			break;
3196f95d4633SHajimu UMEMOTO 		}
3197f95d4633SHajimu UMEMOTO 
319833841545SHajimu UMEMOTO 		/* check if cmsg_len is large enough for sa_len */
3199f95d4633SHajimu UMEMOTO 		if (len < sizeof(struct sockaddr) || len < *buf)
320082cd038dSYoshinobu Inoue 			return (EINVAL);
320182cd038dSYoshinobu Inoue 
3202f95d4633SHajimu UMEMOTO 		switch (((struct sockaddr *)buf)->sa_family) {
3203f95d4633SHajimu UMEMOTO 		case AF_INET6:
3204f95d4633SHajimu UMEMOTO 		{
3205f95d4633SHajimu UMEMOTO 			struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *)buf;
3206f95d4633SHajimu UMEMOTO #if 0
3207f95d4633SHajimu UMEMOTO 			int error;
3208f95d4633SHajimu UMEMOTO #endif
3209f95d4633SHajimu UMEMOTO 
3210f95d4633SHajimu UMEMOTO 			if (sa6->sin6_len != sizeof(struct sockaddr_in6))
3211f95d4633SHajimu UMEMOTO 				return (EINVAL);
3212f95d4633SHajimu UMEMOTO 
3213f95d4633SHajimu UMEMOTO 			if (IN6_IS_ADDR_UNSPECIFIED(&sa6->sin6_addr) ||
3214f95d4633SHajimu UMEMOTO 			    IN6_IS_ADDR_MULTICAST(&sa6->sin6_addr)) {
3215f95d4633SHajimu UMEMOTO 				return (EINVAL);
3216f95d4633SHajimu UMEMOTO 			}
3217f95d4633SHajimu UMEMOTO #if 0
3218f95d4633SHajimu UMEMOTO 			if ((error = scope6_check_id(sa6, ip6_use_defzone))
3219f95d4633SHajimu UMEMOTO 			    != 0) {
3220f95d4633SHajimu UMEMOTO 				return (error);
3221f95d4633SHajimu UMEMOTO 			}
3222f95d4633SHajimu UMEMOTO #endif
3223f95d4633SHajimu UMEMOTO 			sa6->sin6_scope_id = 0; /* XXX */
3224f95d4633SHajimu UMEMOTO 			break;
3225f95d4633SHajimu UMEMOTO 		}
3226f95d4633SHajimu UMEMOTO 		case AF_LINK:	/* should eventually be supported */
3227f95d4633SHajimu UMEMOTO 		default:
3228f95d4633SHajimu UMEMOTO 			return (EAFNOSUPPORT);
3229f95d4633SHajimu UMEMOTO 		}
3230f95d4633SHajimu UMEMOTO 
3231f95d4633SHajimu UMEMOTO 		/* turn off the previous option, then set the new option. */
3232f95d4633SHajimu UMEMOTO 		ip6_clearpktopts(opt, IPV6_NEXTHOP);
3233f95d4633SHajimu UMEMOTO 		if (sticky) {
3234f95d4633SHajimu UMEMOTO 			opt->ip6po_nexthop = malloc(*buf, M_IP6OPT, M_WAITOK);
3235f95d4633SHajimu UMEMOTO 			bcopy(buf, opt->ip6po_nexthop, *buf);
323633841545SHajimu UMEMOTO 		} else
3237f95d4633SHajimu UMEMOTO 			opt->ip6po_nexthop = (struct sockaddr *)buf;
323882cd038dSYoshinobu Inoue 		break;
323982cd038dSYoshinobu Inoue 
3240f95d4633SHajimu UMEMOTO 	case IPV6_2292HOPOPTS:
324182cd038dSYoshinobu Inoue 	case IPV6_HOPOPTS:
324233841545SHajimu UMEMOTO 	{
324333841545SHajimu UMEMOTO 		struct ip6_hbh *hbh;
324433841545SHajimu UMEMOTO 		int hbhlen;
324533841545SHajimu UMEMOTO 
3246f95d4633SHajimu UMEMOTO 		/*
3247f95d4633SHajimu UMEMOTO 		 * XXX: We don't allow a non-privileged user to set ANY HbH
3248f95d4633SHajimu UMEMOTO 		 * options, since per-option restriction has too much
3249f95d4633SHajimu UMEMOTO 		 * overhead.
3250f95d4633SHajimu UMEMOTO 		 */
3251f95d4633SHajimu UMEMOTO 		if (!priv)
3252f95d4633SHajimu UMEMOTO 			return (EPERM);
3253f95d4633SHajimu UMEMOTO 
3254f95d4633SHajimu UMEMOTO 		if (len == 0) {
3255f95d4633SHajimu UMEMOTO 			ip6_clearpktopts(opt, IPV6_HOPOPTS);
3256f95d4633SHajimu UMEMOTO 			break;	/* just remove the option */
3257f95d4633SHajimu UMEMOTO 		}
3258f95d4633SHajimu UMEMOTO 
3259f95d4633SHajimu UMEMOTO 		/* message length validation */
3260f95d4633SHajimu UMEMOTO 		if (len < sizeof(struct ip6_hbh))
326182cd038dSYoshinobu Inoue 			return (EINVAL);
3262f95d4633SHajimu UMEMOTO 		hbh = (struct ip6_hbh *)buf;
326333841545SHajimu UMEMOTO 		hbhlen = (hbh->ip6h_len + 1) << 3;
3264f95d4633SHajimu UMEMOTO 		if (len != hbhlen)
326582cd038dSYoshinobu Inoue 			return (EINVAL);
326633841545SHajimu UMEMOTO 
3267f95d4633SHajimu UMEMOTO 		/* turn off the previous option, then set the new option. */
3268f95d4633SHajimu UMEMOTO 		ip6_clearpktopts(opt, IPV6_HOPOPTS);
3269f95d4633SHajimu UMEMOTO 		if (sticky) {
3270f95d4633SHajimu UMEMOTO 			opt->ip6po_hbh = malloc(hbhlen, M_IP6OPT, M_WAITOK);
327133841545SHajimu UMEMOTO 			bcopy(hbh, opt->ip6po_hbh, hbhlen);
327233841545SHajimu UMEMOTO 		} else
327333841545SHajimu UMEMOTO 			opt->ip6po_hbh = hbh;
3274f95d4633SHajimu UMEMOTO 
327582cd038dSYoshinobu Inoue 		break;
327633841545SHajimu UMEMOTO 	}
327782cd038dSYoshinobu Inoue 
3278f95d4633SHajimu UMEMOTO 	case IPV6_2292DSTOPTS:
327982cd038dSYoshinobu Inoue 	case IPV6_DSTOPTS:
3280f95d4633SHajimu UMEMOTO 	case IPV6_RTHDRDSTOPTS:
328133841545SHajimu UMEMOTO 	{
3282f95d4633SHajimu UMEMOTO 		struct ip6_dest *dest, **newdest = NULL;
328333841545SHajimu UMEMOTO 		int destlen;
328433841545SHajimu UMEMOTO 
3285f95d4633SHajimu UMEMOTO 		if (!priv)	/* XXX: see the comment for IPV6_HOPOPTS */
3286f95d4633SHajimu UMEMOTO 			return (EPERM);
3287f95d4633SHajimu UMEMOTO 
3288f95d4633SHajimu UMEMOTO 		if (len == 0) {
3289f95d4633SHajimu UMEMOTO 			ip6_clearpktopts(opt, optname);
3290f95d4633SHajimu UMEMOTO 			break;	/* just remove the option */
3291f95d4633SHajimu UMEMOTO 		}
3292f95d4633SHajimu UMEMOTO 
3293f95d4633SHajimu UMEMOTO 		/* message length validation */
3294f95d4633SHajimu UMEMOTO 		if (len < sizeof(struct ip6_dest))
329582cd038dSYoshinobu Inoue 			return (EINVAL);
3296f95d4633SHajimu UMEMOTO 		dest = (struct ip6_dest *)buf;
329733841545SHajimu UMEMOTO 		destlen = (dest->ip6d_len + 1) << 3;
3298f95d4633SHajimu UMEMOTO 		if (len != destlen)
329933841545SHajimu UMEMOTO 			return (EINVAL);
330082cd038dSYoshinobu Inoue 
330182cd038dSYoshinobu Inoue 		/*
3302f95d4633SHajimu UMEMOTO 		 * Determine the position that the destination options header
3303f95d4633SHajimu UMEMOTO 		 * should be inserted; before or after the routing header.
3304f95d4633SHajimu UMEMOTO 		 */
3305f95d4633SHajimu UMEMOTO 		switch (optname) {
3306f95d4633SHajimu UMEMOTO 		case IPV6_2292DSTOPTS:
3307f95d4633SHajimu UMEMOTO 			/*
3308f95d4633SHajimu UMEMOTO 			 * The old advacned API is ambiguous on this point.
3309f95d4633SHajimu UMEMOTO 			 * Our approach is to determine the position based
3310f95d4633SHajimu UMEMOTO 			 * according to the existence of a routing header.
3311f95d4633SHajimu UMEMOTO 			 * Note, however, that this depends on the order of the
3312f95d4633SHajimu UMEMOTO 			 * extension headers in the ancillary data; the 1st
3313f95d4633SHajimu UMEMOTO 			 * part of the destination options header must appear
3314f95d4633SHajimu UMEMOTO 			 * before the routing header in the ancillary data,
3315f95d4633SHajimu UMEMOTO 			 * too.
3316f95d4633SHajimu UMEMOTO 			 * RFC2292bis solved the ambiguity by introducing
3317f95d4633SHajimu UMEMOTO 			 * separate ancillary data or option types.
331882cd038dSYoshinobu Inoue 			 */
331933841545SHajimu UMEMOTO 			if (opt->ip6po_rthdr == NULL)
332033841545SHajimu UMEMOTO 				newdest = &opt->ip6po_dest1;
332133841545SHajimu UMEMOTO 			else
332233841545SHajimu UMEMOTO 				newdest = &opt->ip6po_dest2;
3323f95d4633SHajimu UMEMOTO 			break;
3324f95d4633SHajimu UMEMOTO 		case IPV6_RTHDRDSTOPTS:
3325f95d4633SHajimu UMEMOTO 			newdest = &opt->ip6po_dest1;
3326f95d4633SHajimu UMEMOTO 			break;
3327f95d4633SHajimu UMEMOTO 		case IPV6_DSTOPTS:
3328f95d4633SHajimu UMEMOTO 			newdest = &opt->ip6po_dest2;
3329f95d4633SHajimu UMEMOTO 			break;
3330f95d4633SHajimu UMEMOTO 		}
333133841545SHajimu UMEMOTO 
3332f95d4633SHajimu UMEMOTO 		/* turn off the previous option, then set the new option. */
3333f95d4633SHajimu UMEMOTO 		ip6_clearpktopts(opt, optname);
3334f95d4633SHajimu UMEMOTO 		if (sticky) {
3335a163d034SWarner Losh 			*newdest = malloc(destlen, M_IP6OPT, M_WAITOK);
333633841545SHajimu UMEMOTO 			bcopy(dest, *newdest, destlen);
333733841545SHajimu UMEMOTO 		} else
333833841545SHajimu UMEMOTO 			*newdest = dest;
333933841545SHajimu UMEMOTO 
334082cd038dSYoshinobu Inoue 		break;
334133841545SHajimu UMEMOTO 	}
334282cd038dSYoshinobu Inoue 
3343f95d4633SHajimu UMEMOTO 	case IPV6_2292RTHDR:
334482cd038dSYoshinobu Inoue 	case IPV6_RTHDR:
334533841545SHajimu UMEMOTO 	{
334633841545SHajimu UMEMOTO 		struct ip6_rthdr *rth;
334733841545SHajimu UMEMOTO 		int rthlen;
334833841545SHajimu UMEMOTO 
3349f95d4633SHajimu UMEMOTO 		if (len == 0) {
3350f95d4633SHajimu UMEMOTO 			ip6_clearpktopts(opt, IPV6_RTHDR);
3351f95d4633SHajimu UMEMOTO 			break;	/* just remove the option */
3352f95d4633SHajimu UMEMOTO 		}
3353f95d4633SHajimu UMEMOTO 
3354f95d4633SHajimu UMEMOTO 		/* message length validation */
3355f95d4633SHajimu UMEMOTO 		if (len < sizeof(struct ip6_rthdr))
335682cd038dSYoshinobu Inoue 			return (EINVAL);
3357f95d4633SHajimu UMEMOTO 		rth = (struct ip6_rthdr *)buf;
335833841545SHajimu UMEMOTO 		rthlen = (rth->ip6r_len + 1) << 3;
3359f95d4633SHajimu UMEMOTO 		if (len != rthlen)
336082cd038dSYoshinobu Inoue 			return (EINVAL);
336133841545SHajimu UMEMOTO 
336233841545SHajimu UMEMOTO 		switch (rth->ip6r_type) {
336382cd038dSYoshinobu Inoue 		case IPV6_RTHDR_TYPE_0:
3364f95d4633SHajimu UMEMOTO 			if (rth->ip6r_len == 0)	/* must contain one addr */
336533841545SHajimu UMEMOTO 				return (EINVAL);
3366f95d4633SHajimu UMEMOTO 			if (rth->ip6r_len % 2) /* length must be even */
336733841545SHajimu UMEMOTO 				return (EINVAL);
336833841545SHajimu UMEMOTO 			if (rth->ip6r_len / 2 != rth->ip6r_segleft)
336982cd038dSYoshinobu Inoue 				return (EINVAL);
337082cd038dSYoshinobu Inoue 			break;
337182cd038dSYoshinobu Inoue 		default:
337233841545SHajimu UMEMOTO 			return (EINVAL);	/* not supported */
337382cd038dSYoshinobu Inoue 		}
337433841545SHajimu UMEMOTO 
3375f95d4633SHajimu UMEMOTO 		/* turn off the previous option */
3376f95d4633SHajimu UMEMOTO 		ip6_clearpktopts(opt, IPV6_RTHDR);
3377f95d4633SHajimu UMEMOTO 		if (sticky) {
3378f95d4633SHajimu UMEMOTO 			opt->ip6po_rthdr = malloc(rthlen, M_IP6OPT, M_WAITOK);
337933841545SHajimu UMEMOTO 			bcopy(rth, opt->ip6po_rthdr, rthlen);
338033841545SHajimu UMEMOTO 		} else
338133841545SHajimu UMEMOTO 			opt->ip6po_rthdr = rth;
338233841545SHajimu UMEMOTO 
338382cd038dSYoshinobu Inoue 		break;
338433841545SHajimu UMEMOTO 	}
338582cd038dSYoshinobu Inoue 
3386f95d4633SHajimu UMEMOTO 	case IPV6_USE_MIN_MTU:
3387f95d4633SHajimu UMEMOTO 		if (len != sizeof(int))
3388f95d4633SHajimu UMEMOTO 			return (EINVAL);
3389f95d4633SHajimu UMEMOTO 		minmtupolicy = *(int *)buf;
3390f95d4633SHajimu UMEMOTO 		if (minmtupolicy != IP6PO_MINMTU_MCASTONLY &&
3391f95d4633SHajimu UMEMOTO 		    minmtupolicy != IP6PO_MINMTU_DISABLE &&
3392f95d4633SHajimu UMEMOTO 		    minmtupolicy != IP6PO_MINMTU_ALL) {
3393f95d4633SHajimu UMEMOTO 			return (EINVAL);
3394f95d4633SHajimu UMEMOTO 		}
3395f95d4633SHajimu UMEMOTO 		opt->ip6po_minmtu = minmtupolicy;
3396f95d4633SHajimu UMEMOTO 		break;
3397f95d4633SHajimu UMEMOTO 
3398f95d4633SHajimu UMEMOTO 	case IPV6_DONTFRAG:
3399f95d4633SHajimu UMEMOTO 		if (len != sizeof(int))
3400f95d4633SHajimu UMEMOTO 			return (EINVAL);
3401f95d4633SHajimu UMEMOTO 
3402f95d4633SHajimu UMEMOTO 		if (uproto == IPPROTO_TCP || *(int *)buf == 0) {
3403f95d4633SHajimu UMEMOTO 			/*
3404f95d4633SHajimu UMEMOTO 			 * we ignore this option for TCP sockets.
3405f95d4633SHajimu UMEMOTO 			 * (rfc2292bis leaves this case unspecified.)
3406f95d4633SHajimu UMEMOTO 			 */
3407f95d4633SHajimu UMEMOTO 			opt->ip6po_flags &= ~IP6PO_DONTFRAG;
3408f95d4633SHajimu UMEMOTO 		} else
3409f95d4633SHajimu UMEMOTO 			opt->ip6po_flags |= IP6PO_DONTFRAG;
3410f95d4633SHajimu UMEMOTO 		break;
3411f95d4633SHajimu UMEMOTO 
3412f95d4633SHajimu UMEMOTO 	case IPV6_PREFER_TEMPADDR:
3413f95d4633SHajimu UMEMOTO 		if (len != sizeof(int))
3414f95d4633SHajimu UMEMOTO 			return (EINVAL);
3415f95d4633SHajimu UMEMOTO 		preftemp = *(int *)buf;
3416f95d4633SHajimu UMEMOTO 		if (preftemp != IP6PO_TEMPADDR_SYSTEM &&
3417f95d4633SHajimu UMEMOTO 		    preftemp != IP6PO_TEMPADDR_NOTPREFER &&
3418f95d4633SHajimu UMEMOTO 		    preftemp != IP6PO_TEMPADDR_PREFER) {
3419f95d4633SHajimu UMEMOTO 			return (EINVAL);
3420f95d4633SHajimu UMEMOTO 		}
3421f95d4633SHajimu UMEMOTO 		opt->ip6po_prefer_tempaddr = preftemp;
3422f95d4633SHajimu UMEMOTO 		break;
3423f95d4633SHajimu UMEMOTO 
342482cd038dSYoshinobu Inoue 	default:
342582cd038dSYoshinobu Inoue 		return (ENOPROTOOPT);
3426f95d4633SHajimu UMEMOTO 	} /* end of switch */
342782cd038dSYoshinobu Inoue 
342882cd038dSYoshinobu Inoue 	return (0);
342982cd038dSYoshinobu Inoue }
343082cd038dSYoshinobu Inoue 
343182cd038dSYoshinobu Inoue /*
343282cd038dSYoshinobu Inoue  * Routine called from ip6_output() to loop back a copy of an IP6 multicast
343382cd038dSYoshinobu Inoue  * packet to the input queue of a specified interface.  Note that this
343482cd038dSYoshinobu Inoue  * calls the output routine of the loopback "driver", but with an interface
343582cd038dSYoshinobu Inoue  * pointer that might NOT be &loif -- easier than replicating that code here.
343682cd038dSYoshinobu Inoue  */
343782cd038dSYoshinobu Inoue void
343882cd038dSYoshinobu Inoue ip6_mloopback(ifp, m, dst)
343982cd038dSYoshinobu Inoue 	struct ifnet *ifp;
344033841545SHajimu UMEMOTO 	struct mbuf *m;
344133841545SHajimu UMEMOTO 	struct sockaddr_in6 *dst;
344282cd038dSYoshinobu Inoue {
344382cd038dSYoshinobu Inoue 	struct mbuf *copym;
3444686cdd19SJun-ichiro itojun Hagino 	struct ip6_hdr *ip6;
344582cd038dSYoshinobu Inoue 
344682cd038dSYoshinobu Inoue 	copym = m_copy(m, 0, M_COPYALL);
3447686cdd19SJun-ichiro itojun Hagino 	if (copym == NULL)
3448686cdd19SJun-ichiro itojun Hagino 		return;
3449686cdd19SJun-ichiro itojun Hagino 
3450686cdd19SJun-ichiro itojun Hagino 	/*
3451686cdd19SJun-ichiro itojun Hagino 	 * Make sure to deep-copy IPv6 header portion in case the data
3452686cdd19SJun-ichiro itojun Hagino 	 * is in an mbuf cluster, so that we can safely override the IPv6
3453686cdd19SJun-ichiro itojun Hagino 	 * header portion later.
3454686cdd19SJun-ichiro itojun Hagino 	 */
3455686cdd19SJun-ichiro itojun Hagino 	if ((copym->m_flags & M_EXT) != 0 ||
3456686cdd19SJun-ichiro itojun Hagino 	    copym->m_len < sizeof(struct ip6_hdr)) {
3457686cdd19SJun-ichiro itojun Hagino 		copym = m_pullup(copym, sizeof(struct ip6_hdr));
3458686cdd19SJun-ichiro itojun Hagino 		if (copym == NULL)
3459686cdd19SJun-ichiro itojun Hagino 			return;
346082cd038dSYoshinobu Inoue 	}
3461686cdd19SJun-ichiro itojun Hagino 
3462686cdd19SJun-ichiro itojun Hagino #ifdef DIAGNOSTIC
3463686cdd19SJun-ichiro itojun Hagino 	if (copym->m_len < sizeof(*ip6)) {
3464686cdd19SJun-ichiro itojun Hagino 		m_freem(copym);
3465686cdd19SJun-ichiro itojun Hagino 		return;
3466686cdd19SJun-ichiro itojun Hagino 	}
3467686cdd19SJun-ichiro itojun Hagino #endif
3468686cdd19SJun-ichiro itojun Hagino 
3469686cdd19SJun-ichiro itojun Hagino 	ip6 = mtod(copym, struct ip6_hdr *);
347033841545SHajimu UMEMOTO 	/*
347133841545SHajimu UMEMOTO 	 * clear embedded scope identifiers if necessary.
347233841545SHajimu UMEMOTO 	 * in6_clearscope will touch the addresses only when necessary.
347333841545SHajimu UMEMOTO 	 */
347433841545SHajimu UMEMOTO 	in6_clearscope(&ip6->ip6_src);
347533841545SHajimu UMEMOTO 	in6_clearscope(&ip6->ip6_dst);
3476686cdd19SJun-ichiro itojun Hagino 
3477a89ec05eSPeter Wemm 	(void)if_simloop(ifp, copym, dst->sin6_family, 0);
347882cd038dSYoshinobu Inoue }
347982cd038dSYoshinobu Inoue 
348082cd038dSYoshinobu Inoue /*
348182cd038dSYoshinobu Inoue  * Chop IPv6 header off from the payload.
348282cd038dSYoshinobu Inoue  */
348382cd038dSYoshinobu Inoue static int
348482cd038dSYoshinobu Inoue ip6_splithdr(m, exthdrs)
348582cd038dSYoshinobu Inoue 	struct mbuf *m;
348682cd038dSYoshinobu Inoue 	struct ip6_exthdrs *exthdrs;
348782cd038dSYoshinobu Inoue {
348882cd038dSYoshinobu Inoue 	struct mbuf *mh;
348982cd038dSYoshinobu Inoue 	struct ip6_hdr *ip6;
349082cd038dSYoshinobu Inoue 
349182cd038dSYoshinobu Inoue 	ip6 = mtod(m, struct ip6_hdr *);
349282cd038dSYoshinobu Inoue 	if (m->m_len > sizeof(*ip6)) {
3493a163d034SWarner Losh 		MGETHDR(mh, M_DONTWAIT, MT_HEADER);
349482cd038dSYoshinobu Inoue 		if (mh == 0) {
349582cd038dSYoshinobu Inoue 			m_freem(m);
349682cd038dSYoshinobu Inoue 			return ENOBUFS;
349782cd038dSYoshinobu Inoue 		}
34989967cafcSSam Leffler 		M_MOVE_PKTHDR(mh, m);
349982cd038dSYoshinobu Inoue 		MH_ALIGN(mh, sizeof(*ip6));
350082cd038dSYoshinobu Inoue 		m->m_len -= sizeof(*ip6);
350182cd038dSYoshinobu Inoue 		m->m_data += sizeof(*ip6);
350282cd038dSYoshinobu Inoue 		mh->m_next = m;
350382cd038dSYoshinobu Inoue 		m = mh;
350482cd038dSYoshinobu Inoue 		m->m_len = sizeof(*ip6);
350582cd038dSYoshinobu Inoue 		bcopy((caddr_t)ip6, mtod(m, caddr_t), sizeof(*ip6));
350682cd038dSYoshinobu Inoue 	}
350782cd038dSYoshinobu Inoue 	exthdrs->ip6e_ip6 = m;
350882cd038dSYoshinobu Inoue 	return 0;
350982cd038dSYoshinobu Inoue }
351082cd038dSYoshinobu Inoue 
351182cd038dSYoshinobu Inoue /*
351282cd038dSYoshinobu Inoue  * Compute IPv6 extension header length.
351382cd038dSYoshinobu Inoue  */
351482cd038dSYoshinobu Inoue int
351582cd038dSYoshinobu Inoue ip6_optlen(in6p)
351682cd038dSYoshinobu Inoue 	struct in6pcb *in6p;
351782cd038dSYoshinobu Inoue {
351882cd038dSYoshinobu Inoue 	int len;
351982cd038dSYoshinobu Inoue 
352082cd038dSYoshinobu Inoue 	if (!in6p->in6p_outputopts)
352182cd038dSYoshinobu Inoue 		return 0;
352282cd038dSYoshinobu Inoue 
352382cd038dSYoshinobu Inoue 	len = 0;
352482cd038dSYoshinobu Inoue #define elen(x) \
352582cd038dSYoshinobu Inoue     (((struct ip6_ext *)(x)) ? (((struct ip6_ext *)(x))->ip6e_len + 1) << 3 : 0)
352682cd038dSYoshinobu Inoue 
352782cd038dSYoshinobu Inoue 	len += elen(in6p->in6p_outputopts->ip6po_hbh);
352833841545SHajimu UMEMOTO 	if (in6p->in6p_outputopts->ip6po_rthdr)
352933841545SHajimu UMEMOTO 		/* dest1 is valid with rthdr only */
353082cd038dSYoshinobu Inoue 		len += elen(in6p->in6p_outputopts->ip6po_dest1);
353182cd038dSYoshinobu Inoue 	len += elen(in6p->in6p_outputopts->ip6po_rthdr);
353282cd038dSYoshinobu Inoue 	len += elen(in6p->in6p_outputopts->ip6po_dest2);
353382cd038dSYoshinobu Inoue 	return len;
353482cd038dSYoshinobu Inoue #undef elen
353582cd038dSYoshinobu Inoue }
3536