1caf43b02SWarner Losh /*- 282cd038dSYoshinobu Inoue * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 382cd038dSYoshinobu Inoue * All rights reserved. 482cd038dSYoshinobu Inoue * 582cd038dSYoshinobu Inoue * Redistribution and use in source and binary forms, with or without 682cd038dSYoshinobu Inoue * modification, are permitted provided that the following conditions 782cd038dSYoshinobu Inoue * are met: 882cd038dSYoshinobu Inoue * 1. Redistributions of source code must retain the above copyright 982cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer. 1082cd038dSYoshinobu Inoue * 2. Redistributions in binary form must reproduce the above copyright 1182cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer in the 1282cd038dSYoshinobu Inoue * documentation and/or other materials provided with the distribution. 1382cd038dSYoshinobu Inoue * 3. Neither the name of the project nor the names of its contributors 1482cd038dSYoshinobu Inoue * may be used to endorse or promote products derived from this software 1582cd038dSYoshinobu Inoue * without specific prior written permission. 1682cd038dSYoshinobu Inoue * 1782cd038dSYoshinobu Inoue * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 1882cd038dSYoshinobu Inoue * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 1982cd038dSYoshinobu Inoue * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 2082cd038dSYoshinobu Inoue * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 2182cd038dSYoshinobu Inoue * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 2282cd038dSYoshinobu Inoue * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 2382cd038dSYoshinobu Inoue * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 2482cd038dSYoshinobu Inoue * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 2582cd038dSYoshinobu Inoue * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 2682cd038dSYoshinobu Inoue * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 2782cd038dSYoshinobu Inoue * SUCH DAMAGE. 28b48287a3SDavid E. O'Brien * 29b48287a3SDavid E. O'Brien * $KAME: ip6_output.c,v 1.279 2002/01/26 06:12:30 jinmei Exp $ 3082cd038dSYoshinobu Inoue */ 3182cd038dSYoshinobu Inoue 32caf43b02SWarner Losh /*- 3382cd038dSYoshinobu Inoue * Copyright (c) 1982, 1986, 1988, 1990, 1993 3482cd038dSYoshinobu Inoue * The Regents of the University of California. All rights reserved. 3582cd038dSYoshinobu Inoue * 3682cd038dSYoshinobu Inoue * Redistribution and use in source and binary forms, with or without 3782cd038dSYoshinobu Inoue * modification, are permitted provided that the following conditions 3882cd038dSYoshinobu Inoue * are met: 3982cd038dSYoshinobu Inoue * 1. Redistributions of source code must retain the above copyright 4082cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer. 4182cd038dSYoshinobu Inoue * 2. Redistributions in binary form must reproduce the above copyright 4282cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer in the 4382cd038dSYoshinobu Inoue * documentation and/or other materials provided with the distribution. 4482cd038dSYoshinobu Inoue * 4. Neither the name of the University nor the names of its contributors 4582cd038dSYoshinobu Inoue * may be used to endorse or promote products derived from this software 4682cd038dSYoshinobu Inoue * without specific prior written permission. 4782cd038dSYoshinobu Inoue * 4882cd038dSYoshinobu Inoue * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 4982cd038dSYoshinobu Inoue * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 5082cd038dSYoshinobu Inoue * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 5182cd038dSYoshinobu Inoue * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 5282cd038dSYoshinobu Inoue * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 5382cd038dSYoshinobu Inoue * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 5482cd038dSYoshinobu Inoue * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 5582cd038dSYoshinobu Inoue * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 5682cd038dSYoshinobu Inoue * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 5782cd038dSYoshinobu Inoue * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 5882cd038dSYoshinobu Inoue * SUCH DAMAGE. 5982cd038dSYoshinobu Inoue * 6082cd038dSYoshinobu Inoue * @(#)ip_output.c 8.3 (Berkeley) 1/21/94 6182cd038dSYoshinobu Inoue */ 6282cd038dSYoshinobu Inoue 63b48287a3SDavid E. O'Brien #include <sys/cdefs.h> 64b48287a3SDavid E. O'Brien __FBSDID("$FreeBSD$"); 65b48287a3SDavid E. O'Brien 66686cdd19SJun-ichiro itojun Hagino #include "opt_inet.h" 67686cdd19SJun-ichiro itojun Hagino #include "opt_inet6.h" 68686cdd19SJun-ichiro itojun Hagino #include "opt_ipsec.h" 699b03990aSRandall Stewart #include "opt_sctp.h" 70*77931dd5SKip Macy #include "opt_route.h" 7182cd038dSYoshinobu Inoue 7282cd038dSYoshinobu Inoue #include <sys/param.h> 73c26fe973SBjoern A. Zeeb #include <sys/kernel.h> 7482cd038dSYoshinobu Inoue #include <sys/malloc.h> 7582cd038dSYoshinobu Inoue #include <sys/mbuf.h> 7682cd038dSYoshinobu Inoue #include <sys/errno.h> 77c2259ba4SRobert Watson #include <sys/priv.h> 78c26fe973SBjoern A. Zeeb #include <sys/proc.h> 7982cd038dSYoshinobu Inoue #include <sys/protosw.h> 8082cd038dSYoshinobu Inoue #include <sys/socket.h> 8182cd038dSYoshinobu Inoue #include <sys/socketvar.h> 821263305fSBjoern A. Zeeb #include <sys/syslog.h> 83c26fe973SBjoern A. Zeeb #include <sys/ucred.h> 8482cd038dSYoshinobu Inoue 8582cd038dSYoshinobu Inoue #include <net/if.h> 868195404bSBrooks Davis #include <net/netisr.h> 8782cd038dSYoshinobu Inoue #include <net/route.h> 88c4ac87eaSDarren Reed #include <net/pfil.h> 894b79449eSBjoern A. Zeeb #include <net/vnet.h> 9082cd038dSYoshinobu Inoue 9182cd038dSYoshinobu Inoue #include <netinet/in.h> 9282cd038dSYoshinobu Inoue #include <netinet/in_var.h> 9333841545SHajimu UMEMOTO #include <netinet6/in6_var.h> 94686cdd19SJun-ichiro itojun Hagino #include <netinet/ip6.h> 95686cdd19SJun-ichiro itojun Hagino #include <netinet/icmp6.h> 9682cd038dSYoshinobu Inoue #include <netinet6/ip6_var.h> 97686cdd19SJun-ichiro itojun Hagino #include <netinet/in_pcb.h> 9897d8d152SAndre Oppermann #include <netinet/tcp_var.h> 9982cd038dSYoshinobu Inoue #include <netinet6/nd6.h> 10082cd038dSYoshinobu Inoue 101b2630c29SGeorge V. Neville-Neil #ifdef IPSEC 102b9234fafSSam Leffler #include <netipsec/ipsec.h> 103b9234fafSSam Leffler #include <netipsec/ipsec6.h> 104b9234fafSSam Leffler #include <netipsec/key.h> 1052cb64cb2SGeorge V. Neville-Neil #include <netinet6/ip6_ipsec.h> 106b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */ 1079b03990aSRandall Stewart #ifdef SCTP 1089b03990aSRandall Stewart #include <netinet/sctp.h> 1099b03990aSRandall Stewart #include <netinet/sctp_crc32.h> 1109b03990aSRandall Stewart #endif 111b9234fafSSam Leffler 1121469c434SHajimu UMEMOTO #include <netinet6/ip6protosw.h> 113a1f7e5f8SHajimu UMEMOTO #include <netinet6/scope6_var.h> 1141469c434SHajimu UMEMOTO 115*77931dd5SKip Macy #ifdef FLOWTABLE 116*77931dd5SKip Macy #include <net/flowtable.h> 117*77931dd5SKip Macy #endif 118*77931dd5SKip Macy 11933cde130SBruce M Simpson extern int in6_mcast_loop; 12082cd038dSYoshinobu Inoue 12182cd038dSYoshinobu Inoue struct ip6_exthdrs { 12282cd038dSYoshinobu Inoue struct mbuf *ip6e_ip6; 12382cd038dSYoshinobu Inoue struct mbuf *ip6e_hbh; 12482cd038dSYoshinobu Inoue struct mbuf *ip6e_dest1; 12582cd038dSYoshinobu Inoue struct mbuf *ip6e_rthdr; 12682cd038dSYoshinobu Inoue struct mbuf *ip6e_dest2; 12782cd038dSYoshinobu Inoue }; 12882cd038dSYoshinobu Inoue 129f95d4633SHajimu UMEMOTO static int ip6_pcbopt __P((int, u_char *, int, struct ip6_pktopts **, 13079ba3952SBjoern A. Zeeb struct ucred *, int)); 13182cd038dSYoshinobu Inoue static int ip6_pcbopts __P((struct ip6_pktopts **, struct mbuf *, 1327efe5d92SHajimu UMEMOTO struct socket *, struct sockopt *)); 1339233d8f3SDavid E. O'Brien static int ip6_getpcbopt(struct ip6_pktopts *, int, struct sockopt *); 13479ba3952SBjoern A. Zeeb static int ip6_setpktopt __P((int, u_char *, int, struct ip6_pktopts *, 13579ba3952SBjoern A. Zeeb struct ucred *, int, int, int)); 136f95d4633SHajimu UMEMOTO 1379233d8f3SDavid E. O'Brien static int ip6_copyexthdr(struct mbuf **, caddr_t, int); 13882cd038dSYoshinobu Inoue static int ip6_insertfraghdr __P((struct mbuf *, struct mbuf *, int, 13982cd038dSYoshinobu Inoue struct ip6_frag **)); 1409233d8f3SDavid E. O'Brien static int ip6_insert_jumboopt(struct ip6_exthdrs *, u_int32_t); 1419233d8f3SDavid E. O'Brien static int ip6_splithdr(struct mbuf *, struct ip6_exthdrs *); 14231b3783cSHajimu UMEMOTO static int ip6_getpmtu __P((struct route_in6 *, struct route_in6 *, 143f95d4633SHajimu UMEMOTO struct ifnet *, struct in6_addr *, u_long *, int *)); 1449233d8f3SDavid E. O'Brien static int copypktopts(struct ip6_pktopts *, struct ip6_pktopts *, int); 14582cd038dSYoshinobu Inoue 1467efe5d92SHajimu UMEMOTO 14782cd038dSYoshinobu Inoue /* 1482cb64cb2SGeorge V. Neville-Neil * Make an extension header from option data. hp is the source, and 1492cb64cb2SGeorge V. Neville-Neil * mp is the destination. 1502cb64cb2SGeorge V. Neville-Neil */ 1512cb64cb2SGeorge V. Neville-Neil #define MAKE_EXTHDR(hp, mp) \ 1522cb64cb2SGeorge V. Neville-Neil do { \ 1532cb64cb2SGeorge V. Neville-Neil if (hp) { \ 1542cb64cb2SGeorge V. Neville-Neil struct ip6_ext *eh = (struct ip6_ext *)(hp); \ 1552cb64cb2SGeorge V. Neville-Neil error = ip6_copyexthdr((mp), (caddr_t)(hp), \ 1562cb64cb2SGeorge V. Neville-Neil ((eh)->ip6e_len + 1) << 3); \ 1572cb64cb2SGeorge V. Neville-Neil if (error) \ 1582cb64cb2SGeorge V. Neville-Neil goto freehdrs; \ 1592cb64cb2SGeorge V. Neville-Neil } \ 1602cb64cb2SGeorge V. Neville-Neil } while (/*CONSTCOND*/ 0) 1612cb64cb2SGeorge V. Neville-Neil 1622cb64cb2SGeorge V. Neville-Neil /* 1632cb64cb2SGeorge V. Neville-Neil * Form a chain of extension headers. 1642cb64cb2SGeorge V. Neville-Neil * m is the extension header mbuf 1652cb64cb2SGeorge V. Neville-Neil * mp is the previous mbuf in the chain 1662cb64cb2SGeorge V. Neville-Neil * p is the next header 1672cb64cb2SGeorge V. Neville-Neil * i is the type of option. 1682cb64cb2SGeorge V. Neville-Neil */ 1692cb64cb2SGeorge V. Neville-Neil #define MAKE_CHAIN(m, mp, p, i)\ 1702cb64cb2SGeorge V. Neville-Neil do {\ 1712cb64cb2SGeorge V. Neville-Neil if (m) {\ 1722cb64cb2SGeorge V. Neville-Neil if (!hdrsplit) \ 1732cb64cb2SGeorge V. Neville-Neil panic("assumption failed: hdr not split"); \ 1742cb64cb2SGeorge V. Neville-Neil *mtod((m), u_char *) = *(p);\ 1752cb64cb2SGeorge V. Neville-Neil *(p) = (i);\ 1762cb64cb2SGeorge V. Neville-Neil p = mtod((m), u_char *);\ 1772cb64cb2SGeorge V. Neville-Neil (m)->m_next = (mp)->m_next;\ 1782cb64cb2SGeorge V. Neville-Neil (mp)->m_next = (m);\ 1792cb64cb2SGeorge V. Neville-Neil (mp) = (m);\ 1802cb64cb2SGeorge V. Neville-Neil }\ 1812cb64cb2SGeorge V. Neville-Neil } while (/*CONSTCOND*/ 0) 1822cb64cb2SGeorge V. Neville-Neil 1832cb64cb2SGeorge V. Neville-Neil /* 18482cd038dSYoshinobu Inoue * IP6 output. The packet in mbuf chain m contains a skeletal IP6 18582cd038dSYoshinobu Inoue * header (with pri, len, nxt, hlim, src, dst). 18682cd038dSYoshinobu Inoue * This function may modify ver and hlim only. 18782cd038dSYoshinobu Inoue * The mbuf chain containing the packet will be freed. 18882cd038dSYoshinobu Inoue * The mbuf opt, if present, will not be freed. 18933841545SHajimu UMEMOTO * 19033841545SHajimu UMEMOTO * type of "mtu": rt_rmx.rmx_mtu is u_long, ifnet.ifr_mtu is int, and 19133841545SHajimu UMEMOTO * nd_ifinfo.linkmtu is u_int32_t. so we use u_long to hold largest one, 19233841545SHajimu UMEMOTO * which is rt_rmx.rmx_mtu. 1931272577eSXin LI * 1941272577eSXin LI * ifpp - XXX: just for statistics 19582cd038dSYoshinobu Inoue */ 19682cd038dSYoshinobu Inoue int 1971272577eSXin LI ip6_output(struct mbuf *m0, struct ip6_pktopts *opt, 1981272577eSXin LI struct route_in6 *ro, int flags, struct ip6_moptions *im6o, 1991272577eSXin LI struct ifnet **ifpp, struct inpcb *inp) 20082cd038dSYoshinobu Inoue { 20182cd038dSYoshinobu Inoue struct ip6_hdr *ip6, *mhip6; 202686cdd19SJun-ichiro itojun Hagino struct ifnet *ifp, *origifp; 20382cd038dSYoshinobu Inoue struct mbuf *m = m0; 2042cb64cb2SGeorge V. Neville-Neil struct mbuf *mprev = NULL; 20582cd038dSYoshinobu Inoue int hlen, tlen, len, off; 20682cd038dSYoshinobu Inoue struct route_in6 ip6route; 207a1f7e5f8SHajimu UMEMOTO struct rtentry *rt = NULL; 208a1f7e5f8SHajimu UMEMOTO struct sockaddr_in6 *dst, src_sa, dst_sa; 2098195404bSBrooks Davis struct in6_addr odst; 21082cd038dSYoshinobu Inoue int error = 0; 2115da9f8faSJosef Karthauser struct in6_ifaddr *ia = NULL; 21282cd038dSYoshinobu Inoue u_long mtu; 213f95d4633SHajimu UMEMOTO int alwaysfrag, dontfrag; 21482cd038dSYoshinobu Inoue u_int32_t optlen = 0, plen = 0, unfragpartlen = 0; 21582cd038dSYoshinobu Inoue struct ip6_exthdrs exthdrs; 216a1f7e5f8SHajimu UMEMOTO struct in6_addr finaldst, src0, dst0; 217a1f7e5f8SHajimu UMEMOTO u_int32_t zone; 21882cd038dSYoshinobu Inoue struct route_in6 *ro_pmtu = NULL; 219*77931dd5SKip Macy int flevalid = 0; 22082cd038dSYoshinobu Inoue int hdrsplit = 0; 22182cd038dSYoshinobu Inoue int needipsec = 0; 2229b03990aSRandall Stewart #ifdef SCTP 2239b03990aSRandall Stewart int sw_csum; 2249b03990aSRandall Stewart #endif 225b2630c29SGeorge V. Neville-Neil #ifdef IPSEC 2262cb64cb2SGeorge V. Neville-Neil struct ipsec_output_state state; 2272cb64cb2SGeorge V. Neville-Neil struct ip6_rthdr *rh = NULL; 228b9234fafSSam Leffler int needipsectun = 0; 2292cb64cb2SGeorge V. Neville-Neil int segleft_org = 0; 230b9234fafSSam Leffler struct secpolicy *sp = NULL; 231b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */ 232b9234fafSSam Leffler 233b9234fafSSam Leffler ip6 = mtod(m, struct ip6_hdr *); 2342cb64cb2SGeorge V. Neville-Neil if (ip6 == NULL) { 2352cb64cb2SGeorge V. Neville-Neil printf ("ip6 is NULL"); 2362cb64cb2SGeorge V. Neville-Neil goto bad; 2372cb64cb2SGeorge V. Neville-Neil } 23882cd038dSYoshinobu Inoue 2392cb64cb2SGeorge V. Neville-Neil finaldst = ip6->ip6_dst; 24082cd038dSYoshinobu Inoue bzero(&exthdrs, sizeof(exthdrs)); 24182cd038dSYoshinobu Inoue if (opt) { 24282cd038dSYoshinobu Inoue /* Hop-by-Hop options header */ 24382cd038dSYoshinobu Inoue MAKE_EXTHDR(opt->ip6po_hbh, &exthdrs.ip6e_hbh); 24482cd038dSYoshinobu Inoue /* Destination options header(1st part) */ 24529bc2c48SHajimu UMEMOTO if (opt->ip6po_rthdr) { 24629bc2c48SHajimu UMEMOTO /* 24729bc2c48SHajimu UMEMOTO * Destination options header(1st part) 2482cb64cb2SGeorge V. Neville-Neil * This only makes sense with a routing header. 24929bc2c48SHajimu UMEMOTO * See Section 9.2 of RFC 3542. 25029bc2c48SHajimu UMEMOTO * Disabling this part just for MIP6 convenience is 25129bc2c48SHajimu UMEMOTO * a bad idea. We need to think carefully about a 25229bc2c48SHajimu UMEMOTO * way to make the advanced API coexist with MIP6 25329bc2c48SHajimu UMEMOTO * options, which might automatically be inserted in 25429bc2c48SHajimu UMEMOTO * the kernel. 25529bc2c48SHajimu UMEMOTO */ 25682cd038dSYoshinobu Inoue MAKE_EXTHDR(opt->ip6po_dest1, &exthdrs.ip6e_dest1); 25729bc2c48SHajimu UMEMOTO } 25882cd038dSYoshinobu Inoue /* Routing header */ 25982cd038dSYoshinobu Inoue MAKE_EXTHDR(opt->ip6po_rthdr, &exthdrs.ip6e_rthdr); 26082cd038dSYoshinobu Inoue /* Destination options header(2nd part) */ 26182cd038dSYoshinobu Inoue MAKE_EXTHDR(opt->ip6po_dest2, &exthdrs.ip6e_dest2); 26282cd038dSYoshinobu Inoue } 26382cd038dSYoshinobu Inoue 26482cd038dSYoshinobu Inoue /* 2652cb64cb2SGeorge V. Neville-Neil * IPSec checking which handles several cases. 2662cb64cb2SGeorge V. Neville-Neil * FAST IPSEC: We re-injected the packet. 26782cd038dSYoshinobu Inoue */ 268b2630c29SGeorge V. Neville-Neil #ifdef IPSEC 2692cb64cb2SGeorge V. Neville-Neil switch(ip6_ipsec_output(&m, inp, &flags, &error, &ifp, &sp)) 2702cb64cb2SGeorge V. Neville-Neil { 2712cb64cb2SGeorge V. Neville-Neil case 1: /* Bad packet */ 272b9234fafSSam Leffler goto freehdrs; 2732cb64cb2SGeorge V. Neville-Neil case -1: /* Do IPSec */ 274b9234fafSSam Leffler needipsec = 1; 2752cb64cb2SGeorge V. Neville-Neil case 0: /* No IPSec */ 276b9234fafSSam Leffler default: 2772cb64cb2SGeorge V. Neville-Neil break; 278b9234fafSSam Leffler } 279b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */ 28082cd038dSYoshinobu Inoue 28182cd038dSYoshinobu Inoue /* 28282cd038dSYoshinobu Inoue * Calculate the total length of the extension header chain. 28382cd038dSYoshinobu Inoue * Keep the length of the unfragmentable part for fragmentation. 28482cd038dSYoshinobu Inoue */ 28582cd038dSYoshinobu Inoue optlen = 0; 2862cb64cb2SGeorge V. Neville-Neil if (exthdrs.ip6e_hbh) 2872cb64cb2SGeorge V. Neville-Neil optlen += exthdrs.ip6e_hbh->m_len; 2882cb64cb2SGeorge V. Neville-Neil if (exthdrs.ip6e_dest1) 2892cb64cb2SGeorge V. Neville-Neil optlen += exthdrs.ip6e_dest1->m_len; 2902cb64cb2SGeorge V. Neville-Neil if (exthdrs.ip6e_rthdr) 2912cb64cb2SGeorge V. Neville-Neil optlen += exthdrs.ip6e_rthdr->m_len; 29282cd038dSYoshinobu Inoue unfragpartlen = optlen + sizeof(struct ip6_hdr); 2932cb64cb2SGeorge V. Neville-Neil 29482cd038dSYoshinobu Inoue /* NOTE: we don't add AH/ESP length here. do that later. */ 2952cb64cb2SGeorge V. Neville-Neil if (exthdrs.ip6e_dest2) 2962cb64cb2SGeorge V. Neville-Neil optlen += exthdrs.ip6e_dest2->m_len; 29782cd038dSYoshinobu Inoue 29882cd038dSYoshinobu Inoue /* 29982cd038dSYoshinobu Inoue * If we need IPsec, or there is at least one extension header, 30082cd038dSYoshinobu Inoue * separate IP6 header from the payload. 30182cd038dSYoshinobu Inoue */ 30282cd038dSYoshinobu Inoue if ((needipsec || optlen) && !hdrsplit) { 30382cd038dSYoshinobu Inoue if ((error = ip6_splithdr(m, &exthdrs)) != 0) { 30482cd038dSYoshinobu Inoue m = NULL; 30582cd038dSYoshinobu Inoue goto freehdrs; 30682cd038dSYoshinobu Inoue } 30782cd038dSYoshinobu Inoue m = exthdrs.ip6e_ip6; 30882cd038dSYoshinobu Inoue hdrsplit++; 30982cd038dSYoshinobu Inoue } 31082cd038dSYoshinobu Inoue 31182cd038dSYoshinobu Inoue /* adjust pointer */ 31282cd038dSYoshinobu Inoue ip6 = mtod(m, struct ip6_hdr *); 31382cd038dSYoshinobu Inoue 31482cd038dSYoshinobu Inoue /* adjust mbuf packet header length */ 31582cd038dSYoshinobu Inoue m->m_pkthdr.len += optlen; 31682cd038dSYoshinobu Inoue plen = m->m_pkthdr.len - sizeof(*ip6); 31782cd038dSYoshinobu Inoue 31882cd038dSYoshinobu Inoue /* If this is a jumbo payload, insert a jumbo payload option. */ 31982cd038dSYoshinobu Inoue if (plen > IPV6_MAXPACKET) { 32082cd038dSYoshinobu Inoue if (!hdrsplit) { 32182cd038dSYoshinobu Inoue if ((error = ip6_splithdr(m, &exthdrs)) != 0) { 32282cd038dSYoshinobu Inoue m = NULL; 32382cd038dSYoshinobu Inoue goto freehdrs; 32482cd038dSYoshinobu Inoue } 32582cd038dSYoshinobu Inoue m = exthdrs.ip6e_ip6; 32682cd038dSYoshinobu Inoue hdrsplit++; 32782cd038dSYoshinobu Inoue } 32882cd038dSYoshinobu Inoue /* adjust pointer */ 32982cd038dSYoshinobu Inoue ip6 = mtod(m, struct ip6_hdr *); 33082cd038dSYoshinobu Inoue if ((error = ip6_insert_jumboopt(&exthdrs, plen)) != 0) 33182cd038dSYoshinobu Inoue goto freehdrs; 33282cd038dSYoshinobu Inoue ip6->ip6_plen = 0; 33382cd038dSYoshinobu Inoue } else 33482cd038dSYoshinobu Inoue ip6->ip6_plen = htons(plen); 33582cd038dSYoshinobu Inoue 33682cd038dSYoshinobu Inoue /* 33782cd038dSYoshinobu Inoue * Concatenate headers and fill in next header fields. 33882cd038dSYoshinobu Inoue * Here we have, on "m" 33982cd038dSYoshinobu Inoue * IPv6 payload 34082cd038dSYoshinobu Inoue * and we insert headers accordingly. Finally, we should be getting: 34182cd038dSYoshinobu Inoue * IPv6 hbh dest1 rthdr ah* [esp* dest2 payload] 34282cd038dSYoshinobu Inoue * 34382cd038dSYoshinobu Inoue * during the header composing process, "m" points to IPv6 header. 34482cd038dSYoshinobu Inoue * "mprev" points to an extension header prior to esp. 34582cd038dSYoshinobu Inoue */ 34682cd038dSYoshinobu Inoue u_char *nexthdrp = &ip6->ip6_nxt; 3472cb64cb2SGeorge V. Neville-Neil mprev = m; 34882cd038dSYoshinobu Inoue 34982cd038dSYoshinobu Inoue /* 35082cd038dSYoshinobu Inoue * we treat dest2 specially. this makes IPsec processing 35188ff5695SSUZUKI Shinsuke * much easier. the goal here is to make mprev point the 35288ff5695SSUZUKI Shinsuke * mbuf prior to dest2. 35382cd038dSYoshinobu Inoue * 35482cd038dSYoshinobu Inoue * result: IPv6 dest2 payload 35582cd038dSYoshinobu Inoue * m and mprev will point to IPv6 header. 35682cd038dSYoshinobu Inoue */ 35782cd038dSYoshinobu Inoue if (exthdrs.ip6e_dest2) { 35882cd038dSYoshinobu Inoue if (!hdrsplit) 35982cd038dSYoshinobu Inoue panic("assumption failed: hdr not split"); 36082cd038dSYoshinobu Inoue exthdrs.ip6e_dest2->m_next = m->m_next; 36182cd038dSYoshinobu Inoue m->m_next = exthdrs.ip6e_dest2; 36282cd038dSYoshinobu Inoue *mtod(exthdrs.ip6e_dest2, u_char *) = ip6->ip6_nxt; 36382cd038dSYoshinobu Inoue ip6->ip6_nxt = IPPROTO_DSTOPTS; 36482cd038dSYoshinobu Inoue } 36582cd038dSYoshinobu Inoue 36682cd038dSYoshinobu Inoue /* 36782cd038dSYoshinobu Inoue * result: IPv6 hbh dest1 rthdr dest2 payload 36882cd038dSYoshinobu Inoue * m will point to IPv6 header. mprev will point to the 36982cd038dSYoshinobu Inoue * extension header prior to dest2 (rthdr in the above case). 37082cd038dSYoshinobu Inoue */ 3717efe5d92SHajimu UMEMOTO MAKE_CHAIN(exthdrs.ip6e_hbh, mprev, nexthdrp, IPPROTO_HOPOPTS); 3727efe5d92SHajimu UMEMOTO MAKE_CHAIN(exthdrs.ip6e_dest1, mprev, nexthdrp, 3737efe5d92SHajimu UMEMOTO IPPROTO_DSTOPTS); 3747efe5d92SHajimu UMEMOTO MAKE_CHAIN(exthdrs.ip6e_rthdr, mprev, nexthdrp, 3757efe5d92SHajimu UMEMOTO IPPROTO_ROUTING); 37682cd038dSYoshinobu Inoue 377b2630c29SGeorge V. Neville-Neil #ifdef IPSEC 37882cd038dSYoshinobu Inoue if (!needipsec) 37982cd038dSYoshinobu Inoue goto skip_ipsec2; 38082cd038dSYoshinobu Inoue 38182cd038dSYoshinobu Inoue /* 38282cd038dSYoshinobu Inoue * pointers after IPsec headers are not valid any more. 38382cd038dSYoshinobu Inoue * other pointers need a great care too. 38482cd038dSYoshinobu Inoue * (IPsec routines should not mangle mbufs prior to AH/ESP) 38582cd038dSYoshinobu Inoue */ 38682cd038dSYoshinobu Inoue exthdrs.ip6e_dest2 = NULL; 38782cd038dSYoshinobu Inoue 38882cd038dSYoshinobu Inoue if (exthdrs.ip6e_rthdr) { 38982cd038dSYoshinobu Inoue rh = mtod(exthdrs.ip6e_rthdr, struct ip6_rthdr *); 39082cd038dSYoshinobu Inoue segleft_org = rh->ip6r_segleft; 39182cd038dSYoshinobu Inoue rh->ip6r_segleft = 0; 39282cd038dSYoshinobu Inoue } 39382cd038dSYoshinobu Inoue 39482cd038dSYoshinobu Inoue bzero(&state, sizeof(state)); 39582cd038dSYoshinobu Inoue state.m = m; 39682cd038dSYoshinobu Inoue error = ipsec6_output_trans(&state, nexthdrp, mprev, sp, flags, 39782cd038dSYoshinobu Inoue &needipsectun); 39882cd038dSYoshinobu Inoue m = state.m; 3999e3bdedeSBjoern A. Zeeb if (error == EJUSTRETURN) { 4009e3bdedeSBjoern A. Zeeb /* 4019e3bdedeSBjoern A. Zeeb * We had a SP with a level of 'use' and no SA. We 4029e3bdedeSBjoern A. Zeeb * will just continue to process the packet without 4039e3bdedeSBjoern A. Zeeb * IPsec processing. 4049e3bdedeSBjoern A. Zeeb */ 4059e3bdedeSBjoern A. Zeeb ; 4069e3bdedeSBjoern A. Zeeb } else if (error) { 40782cd038dSYoshinobu Inoue /* mbuf is already reclaimed in ipsec6_output_trans. */ 40882cd038dSYoshinobu Inoue m = NULL; 40982cd038dSYoshinobu Inoue switch (error) { 41082cd038dSYoshinobu Inoue case EHOSTUNREACH: 41182cd038dSYoshinobu Inoue case ENETUNREACH: 41282cd038dSYoshinobu Inoue case EMSGSIZE: 41382cd038dSYoshinobu Inoue case ENOBUFS: 41482cd038dSYoshinobu Inoue case ENOMEM: 41582cd038dSYoshinobu Inoue break; 41682cd038dSYoshinobu Inoue default: 41741aa71ddSBjoern A. Zeeb printf("[%s:%d] (ipsec): error code %d\n", 41841aa71ddSBjoern A. Zeeb __func__, __LINE__, error); 4197efe5d92SHajimu UMEMOTO /* FALLTHROUGH */ 42082cd038dSYoshinobu Inoue case ENOENT: 42182cd038dSYoshinobu Inoue /* don't show these error codes to the user */ 42282cd038dSYoshinobu Inoue error = 0; 42382cd038dSYoshinobu Inoue break; 42482cd038dSYoshinobu Inoue } 42582cd038dSYoshinobu Inoue goto bad; 4262cb64cb2SGeorge V. Neville-Neil } else if (!needipsectun) { 4272cb64cb2SGeorge V. Neville-Neil /* 4282cb64cb2SGeorge V. Neville-Neil * In the FAST IPSec case we have already 4292cb64cb2SGeorge V. Neville-Neil * re-injected the packet and it has been freed 4302cb64cb2SGeorge V. Neville-Neil * by the ipsec_done() function. So, just clean 4312cb64cb2SGeorge V. Neville-Neil * up after ourselves. 4322cb64cb2SGeorge V. Neville-Neil */ 4332cb64cb2SGeorge V. Neville-Neil m = NULL; 4342cb64cb2SGeorge V. Neville-Neil goto done; 43582cd038dSYoshinobu Inoue } 43682cd038dSYoshinobu Inoue if (exthdrs.ip6e_rthdr) { 43782cd038dSYoshinobu Inoue /* ah6_output doesn't modify mbuf chain */ 43882cd038dSYoshinobu Inoue rh->ip6r_segleft = segleft_org; 43982cd038dSYoshinobu Inoue } 44082cd038dSYoshinobu Inoue skip_ipsec2:; 441b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */ 44282cd038dSYoshinobu Inoue 44382cd038dSYoshinobu Inoue /* 44471ce264cSWarner Losh * If there is a routing header, discard the packet. 44582cd038dSYoshinobu Inoue */ 44682cd038dSYoshinobu Inoue if (exthdrs.ip6e_rthdr) { 44782cd038dSYoshinobu Inoue error = EINVAL; 44882cd038dSYoshinobu Inoue goto bad; 44982cd038dSYoshinobu Inoue } 45082cd038dSYoshinobu Inoue 45182cd038dSYoshinobu Inoue /* Source address validation */ 45282cd038dSYoshinobu Inoue if (IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_src) && 4534ecbe331SSUZUKI Shinsuke (flags & IPV6_UNSPECSRC) == 0) { 45482cd038dSYoshinobu Inoue error = EOPNOTSUPP; 455603724d3SBjoern A. Zeeb V_ip6stat.ip6s_badscope++; 45682cd038dSYoshinobu Inoue goto bad; 45782cd038dSYoshinobu Inoue } 45882cd038dSYoshinobu Inoue if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_src)) { 45982cd038dSYoshinobu Inoue error = EOPNOTSUPP; 460603724d3SBjoern A. Zeeb V_ip6stat.ip6s_badscope++; 46182cd038dSYoshinobu Inoue goto bad; 46282cd038dSYoshinobu Inoue } 46382cd038dSYoshinobu Inoue 464603724d3SBjoern A. Zeeb V_ip6stat.ip6s_localout++; 46582cd038dSYoshinobu Inoue 46682cd038dSYoshinobu Inoue /* 46782cd038dSYoshinobu Inoue * Route packet. 46882cd038dSYoshinobu Inoue */ 46982cd038dSYoshinobu Inoue if (ro == 0) { 47082cd038dSYoshinobu Inoue ro = &ip6route; 47182cd038dSYoshinobu Inoue bzero((caddr_t)ro, sizeof(*ro)); 47282cd038dSYoshinobu Inoue } 47382cd038dSYoshinobu Inoue ro_pmtu = ro; 47482cd038dSYoshinobu Inoue if (opt && opt->ip6po_rthdr) 47582cd038dSYoshinobu Inoue ro = &opt->ip6po_route; 47682cd038dSYoshinobu Inoue dst = (struct sockaddr_in6 *)&ro->ro_dst; 477*77931dd5SKip Macy #ifdef FLOWTABLE 478*77931dd5SKip Macy if (ro == &ip6route) { 479*77931dd5SKip Macy struct flentry *fle; 4807efe5d92SHajimu UMEMOTO 481*77931dd5SKip Macy /* 482*77931dd5SKip Macy * The flow table returns route entries valid for up to 30 483*77931dd5SKip Macy * seconds; we rely on the remainder of ip_output() taking no 484*77931dd5SKip Macy * longer than that long for the stability of ro_rt. The 485*77931dd5SKip Macy * flow ID assignment must have happened before this point. 486*77931dd5SKip Macy */ 487*77931dd5SKip Macy if ((fle = flowtable_lookup_mbuf(V_ip6_ft, m, AF_INET6)) != NULL) { 488*77931dd5SKip Macy flow_to_route_in6(fle, ro); 489*77931dd5SKip Macy flevalid = 1; 490*77931dd5SKip Macy } 491*77931dd5SKip Macy } 492*77931dd5SKip Macy #endif 4938195404bSBrooks Davis again: 49482cd038dSYoshinobu Inoue /* 495f95d4633SHajimu UMEMOTO * if specified, try to fill in the traffic class field. 496f95d4633SHajimu UMEMOTO * do not override if a non-zero value is already set. 497f95d4633SHajimu UMEMOTO * we check the diffserv field and the ecn field separately. 498f95d4633SHajimu UMEMOTO */ 499f95d4633SHajimu UMEMOTO if (opt && opt->ip6po_tclass >= 0) { 500f95d4633SHajimu UMEMOTO int mask = 0; 501f95d4633SHajimu UMEMOTO 502f95d4633SHajimu UMEMOTO if ((ip6->ip6_flow & htonl(0xfc << 20)) == 0) 503f95d4633SHajimu UMEMOTO mask |= 0xfc; 504f95d4633SHajimu UMEMOTO if ((ip6->ip6_flow & htonl(0x03 << 20)) == 0) 505f95d4633SHajimu UMEMOTO mask |= 0x03; 506f95d4633SHajimu UMEMOTO if (mask != 0) 507f95d4633SHajimu UMEMOTO ip6->ip6_flow |= htonl((opt->ip6po_tclass & mask) << 20); 508f95d4633SHajimu UMEMOTO } 509f95d4633SHajimu UMEMOTO 510f95d4633SHajimu UMEMOTO /* fill in or override the hop limit field, if necessary. */ 511f95d4633SHajimu UMEMOTO if (opt && opt->ip6po_hlim != -1) 512f95d4633SHajimu UMEMOTO ip6->ip6_hlim = opt->ip6po_hlim & 0xff; 513f95d4633SHajimu UMEMOTO else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) { 514f95d4633SHajimu UMEMOTO if (im6o != NULL) 515f95d4633SHajimu UMEMOTO ip6->ip6_hlim = im6o->im6o_multicast_hlim; 516f95d4633SHajimu UMEMOTO else 517603724d3SBjoern A. Zeeb ip6->ip6_hlim = V_ip6_defmcasthlim; 518f95d4633SHajimu UMEMOTO } 519f95d4633SHajimu UMEMOTO 520b2630c29SGeorge V. Neville-Neil #ifdef IPSEC 5212cb64cb2SGeorge V. Neville-Neil /* 522b2630c29SGeorge V. Neville-Neil * We may re-inject packets into the stack here. 5232cb64cb2SGeorge V. Neville-Neil */ 52482cd038dSYoshinobu Inoue if (needipsec && needipsectun) { 52582cd038dSYoshinobu Inoue struct ipsec_output_state state; 52682cd038dSYoshinobu Inoue 52782cd038dSYoshinobu Inoue /* 52882cd038dSYoshinobu Inoue * All the extension headers will become inaccessible 52982cd038dSYoshinobu Inoue * (since they can be encrypted). 53082cd038dSYoshinobu Inoue * Don't panic, we need no more updates to extension headers 53182cd038dSYoshinobu Inoue * on inner IPv6 packet (since they are now encapsulated). 53282cd038dSYoshinobu Inoue * 53382cd038dSYoshinobu Inoue * IPv6 [ESP|AH] IPv6 [extension headers] payload 53482cd038dSYoshinobu Inoue */ 53582cd038dSYoshinobu Inoue bzero(&exthdrs, sizeof(exthdrs)); 53682cd038dSYoshinobu Inoue exthdrs.ip6e_ip6 = m; 53782cd038dSYoshinobu Inoue 53882cd038dSYoshinobu Inoue bzero(&state, sizeof(state)); 53982cd038dSYoshinobu Inoue state.m = m; 54082cd038dSYoshinobu Inoue state.ro = (struct route *)ro; 54182cd038dSYoshinobu Inoue state.dst = (struct sockaddr *)dst; 54282cd038dSYoshinobu Inoue 54382cd038dSYoshinobu Inoue error = ipsec6_output_tunnel(&state, sp, flags); 54482cd038dSYoshinobu Inoue 54582cd038dSYoshinobu Inoue m = state.m; 54682cd038dSYoshinobu Inoue ro = (struct route_in6 *)state.ro; 54782cd038dSYoshinobu Inoue dst = (struct sockaddr_in6 *)state.dst; 5489e3bdedeSBjoern A. Zeeb if (error == EJUSTRETURN) { 5499e3bdedeSBjoern A. Zeeb /* 5509e3bdedeSBjoern A. Zeeb * We had a SP with a level of 'use' and no SA. We 5519e3bdedeSBjoern A. Zeeb * will just continue to process the packet without 5529e3bdedeSBjoern A. Zeeb * IPsec processing. 5539e3bdedeSBjoern A. Zeeb */ 5549e3bdedeSBjoern A. Zeeb ; 5559e3bdedeSBjoern A. Zeeb } else if (error) { 55682cd038dSYoshinobu Inoue /* mbuf is already reclaimed in ipsec6_output_tunnel. */ 55782cd038dSYoshinobu Inoue m0 = m = NULL; 55882cd038dSYoshinobu Inoue m = NULL; 55982cd038dSYoshinobu Inoue switch (error) { 56082cd038dSYoshinobu Inoue case EHOSTUNREACH: 56182cd038dSYoshinobu Inoue case ENETUNREACH: 56282cd038dSYoshinobu Inoue case EMSGSIZE: 56382cd038dSYoshinobu Inoue case ENOBUFS: 56482cd038dSYoshinobu Inoue case ENOMEM: 56582cd038dSYoshinobu Inoue break; 56682cd038dSYoshinobu Inoue default: 56741aa71ddSBjoern A. Zeeb printf("[%s:%d] (ipsec): error code %d\n", 56841aa71ddSBjoern A. Zeeb __func__, __LINE__, error); 5697efe5d92SHajimu UMEMOTO /* FALLTHROUGH */ 57082cd038dSYoshinobu Inoue case ENOENT: 57182cd038dSYoshinobu Inoue /* don't show these error codes to the user */ 57282cd038dSYoshinobu Inoue error = 0; 57382cd038dSYoshinobu Inoue break; 57482cd038dSYoshinobu Inoue } 57582cd038dSYoshinobu Inoue goto bad; 5762cb64cb2SGeorge V. Neville-Neil } else { 5772cb64cb2SGeorge V. Neville-Neil /* 5782cb64cb2SGeorge V. Neville-Neil * In the FAST IPSec case we have already 5792cb64cb2SGeorge V. Neville-Neil * re-injected the packet and it has been freed 5802cb64cb2SGeorge V. Neville-Neil * by the ipsec_done() function. So, just clean 5812cb64cb2SGeorge V. Neville-Neil * up after ourselves. 5822cb64cb2SGeorge V. Neville-Neil */ 5832cb64cb2SGeorge V. Neville-Neil m = NULL; 5842cb64cb2SGeorge V. Neville-Neil goto done; 58582cd038dSYoshinobu Inoue } 58682cd038dSYoshinobu Inoue 58782cd038dSYoshinobu Inoue exthdrs.ip6e_ip6 = m; 58882cd038dSYoshinobu Inoue } 589b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */ 59082cd038dSYoshinobu Inoue 591a1f7e5f8SHajimu UMEMOTO /* adjust pointer */ 592a1f7e5f8SHajimu UMEMOTO ip6 = mtod(m, struct ip6_hdr *); 59382cd038dSYoshinobu Inoue 594a1f7e5f8SHajimu UMEMOTO bzero(&dst_sa, sizeof(dst_sa)); 595a1f7e5f8SHajimu UMEMOTO dst_sa.sin6_family = AF_INET6; 596a1f7e5f8SHajimu UMEMOTO dst_sa.sin6_len = sizeof(dst_sa); 597a1f7e5f8SHajimu UMEMOTO dst_sa.sin6_addr = ip6->ip6_dst; 598*77931dd5SKip Macy if (flevalid) { 599*77931dd5SKip Macy rt = ro->ro_rt; 600*77931dd5SKip Macy ifp = ro->ro_rt->rt_ifp; 601*77931dd5SKip Macy } else if ((error = in6_selectroute(&dst_sa, opt, im6o, ro, 6026e6b3f7cSQing Li &ifp, &rt)) != 0) { 603a1f7e5f8SHajimu UMEMOTO switch (error) { 604a1f7e5f8SHajimu UMEMOTO case EHOSTUNREACH: 605603724d3SBjoern A. Zeeb V_ip6stat.ip6s_noroute++; 606a1f7e5f8SHajimu UMEMOTO break; 607a1f7e5f8SHajimu UMEMOTO case EADDRNOTAVAIL: 608a1f7e5f8SHajimu UMEMOTO default: 609a1f7e5f8SHajimu UMEMOTO break; /* XXX statistics? */ 61082cd038dSYoshinobu Inoue } 611a1f7e5f8SHajimu UMEMOTO if (ifp != NULL) 61282cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_discard); 61382cd038dSYoshinobu Inoue goto bad; 61482cd038dSYoshinobu Inoue } 615a1f7e5f8SHajimu UMEMOTO if (rt == NULL) { 616a1f7e5f8SHajimu UMEMOTO /* 617a1f7e5f8SHajimu UMEMOTO * If in6_selectroute() does not return a route entry, 618a1f7e5f8SHajimu UMEMOTO * dst may not have been updated. 619a1f7e5f8SHajimu UMEMOTO */ 620a1f7e5f8SHajimu UMEMOTO *dst = dst_sa; /* XXX */ 62182cd038dSYoshinobu Inoue } 62282cd038dSYoshinobu Inoue 623a1f7e5f8SHajimu UMEMOTO /* 624a1f7e5f8SHajimu UMEMOTO * then rt (for unicast) and ifp must be non-NULL valid values. 625a1f7e5f8SHajimu UMEMOTO */ 626a1f7e5f8SHajimu UMEMOTO if ((flags & IPV6_FORWARDING) == 0) { 627a1f7e5f8SHajimu UMEMOTO /* XXX: the FORWARDING flag can be set for mrouting. */ 628a1f7e5f8SHajimu UMEMOTO in6_ifstat_inc(ifp, ifs6_out_request); 629a1f7e5f8SHajimu UMEMOTO } 630a1f7e5f8SHajimu UMEMOTO if (rt != NULL) { 631a1f7e5f8SHajimu UMEMOTO ia = (struct in6_ifaddr *)(rt->rt_ifa); 632a1f7e5f8SHajimu UMEMOTO rt->rt_use++; 633a1f7e5f8SHajimu UMEMOTO } 634a1f7e5f8SHajimu UMEMOTO 6359452b0d2SQing Li 636a1f7e5f8SHajimu UMEMOTO /* 637a1f7e5f8SHajimu UMEMOTO * The outgoing interface must be in the zone of source and 6389452b0d2SQing Li * destination addresses. 639a1f7e5f8SHajimu UMEMOTO */ 640a1f7e5f8SHajimu UMEMOTO origifp = ifp; 641a1f7e5f8SHajimu UMEMOTO 642a1f7e5f8SHajimu UMEMOTO src0 = ip6->ip6_src; 643a1f7e5f8SHajimu UMEMOTO if (in6_setscope(&src0, origifp, &zone)) 644a1f7e5f8SHajimu UMEMOTO goto badscope; 645a1f7e5f8SHajimu UMEMOTO bzero(&src_sa, sizeof(src_sa)); 646a1f7e5f8SHajimu UMEMOTO src_sa.sin6_family = AF_INET6; 647a1f7e5f8SHajimu UMEMOTO src_sa.sin6_len = sizeof(src_sa); 648a1f7e5f8SHajimu UMEMOTO src_sa.sin6_addr = ip6->ip6_src; 649a1f7e5f8SHajimu UMEMOTO if (sa6_recoverscope(&src_sa) || zone != src_sa.sin6_scope_id) 650a1f7e5f8SHajimu UMEMOTO goto badscope; 651a1f7e5f8SHajimu UMEMOTO 652a1f7e5f8SHajimu UMEMOTO dst0 = ip6->ip6_dst; 653a1f7e5f8SHajimu UMEMOTO if (in6_setscope(&dst0, origifp, &zone)) 654a1f7e5f8SHajimu UMEMOTO goto badscope; 655a1f7e5f8SHajimu UMEMOTO /* re-initialize to be sure */ 656a1f7e5f8SHajimu UMEMOTO bzero(&dst_sa, sizeof(dst_sa)); 657a1f7e5f8SHajimu UMEMOTO dst_sa.sin6_family = AF_INET6; 658a1f7e5f8SHajimu UMEMOTO dst_sa.sin6_len = sizeof(dst_sa); 659a1f7e5f8SHajimu UMEMOTO dst_sa.sin6_addr = ip6->ip6_dst; 660a1f7e5f8SHajimu UMEMOTO if (sa6_recoverscope(&dst_sa) || zone != dst_sa.sin6_scope_id) { 661a1f7e5f8SHajimu UMEMOTO goto badscope; 662a1f7e5f8SHajimu UMEMOTO } 663a1f7e5f8SHajimu UMEMOTO 6649452b0d2SQing Li /* We should use ia_ifp to support the case of 6659452b0d2SQing Li * sending packets to an address of our own. 6669452b0d2SQing Li */ 6679452b0d2SQing Li if (ia != NULL && ia->ia_ifp) 6689452b0d2SQing Li ifp = ia->ia_ifp; 6699452b0d2SQing Li 670a1f7e5f8SHajimu UMEMOTO /* scope check is done. */ 671a1f7e5f8SHajimu UMEMOTO goto routefound; 672a1f7e5f8SHajimu UMEMOTO 673a1f7e5f8SHajimu UMEMOTO badscope: 674603724d3SBjoern A. Zeeb V_ip6stat.ip6s_badscope++; 675a1f7e5f8SHajimu UMEMOTO in6_ifstat_inc(origifp, ifs6_out_discard); 676a1f7e5f8SHajimu UMEMOTO if (error == 0) 677a1f7e5f8SHajimu UMEMOTO error = EHOSTUNREACH; /* XXX */ 678a1f7e5f8SHajimu UMEMOTO goto bad; 679a1f7e5f8SHajimu UMEMOTO 680a1f7e5f8SHajimu UMEMOTO routefound: 681a1f7e5f8SHajimu UMEMOTO if (rt && !IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) { 682a1f7e5f8SHajimu UMEMOTO if (opt && opt->ip6po_nextroute.ro_rt) { 683a1f7e5f8SHajimu UMEMOTO /* 684a1f7e5f8SHajimu UMEMOTO * The nexthop is explicitly specified by the 685a1f7e5f8SHajimu UMEMOTO * application. We assume the next hop is an IPv6 686a1f7e5f8SHajimu UMEMOTO * address. 687a1f7e5f8SHajimu UMEMOTO */ 688a1f7e5f8SHajimu UMEMOTO dst = (struct sockaddr_in6 *)opt->ip6po_nexthop; 689a1f7e5f8SHajimu UMEMOTO } 690a1f7e5f8SHajimu UMEMOTO else if ((rt->rt_flags & RTF_GATEWAY)) 691a1f7e5f8SHajimu UMEMOTO dst = (struct sockaddr_in6 *)rt->rt_gateway; 692a1f7e5f8SHajimu UMEMOTO } 693a1f7e5f8SHajimu UMEMOTO 694a1f7e5f8SHajimu UMEMOTO if (!IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) { 695a1f7e5f8SHajimu UMEMOTO m->m_flags &= ~(M_BCAST | M_MCAST); /* just in case */ 69682cd038dSYoshinobu Inoue } else { 69782cd038dSYoshinobu Inoue m->m_flags = (m->m_flags & ~M_BCAST) | M_MCAST; 69882cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_mcast); 69982cd038dSYoshinobu Inoue /* 70082cd038dSYoshinobu Inoue * Confirm that the outgoing interface supports multicast. 70182cd038dSYoshinobu Inoue */ 702a1f7e5f8SHajimu UMEMOTO if (!(ifp->if_flags & IFF_MULTICAST)) { 703603724d3SBjoern A. Zeeb V_ip6stat.ip6s_noroute++; 70482cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_discard); 70582cd038dSYoshinobu Inoue error = ENETUNREACH; 70682cd038dSYoshinobu Inoue goto bad; 70782cd038dSYoshinobu Inoue } 70833cde130SBruce M Simpson if ((im6o == NULL && in6_mcast_loop) || 70933cde130SBruce M Simpson (im6o && im6o->im6o_multicast_loop)) { 71082cd038dSYoshinobu Inoue /* 71133cde130SBruce M Simpson * Loop back multicast datagram if not expressly 71233cde130SBruce M Simpson * forbidden to do so, even if we have not joined 71333cde130SBruce M Simpson * the address; protocols will filter it later, 71433cde130SBruce M Simpson * thus deferring a hash lookup and lock acquisition 71533cde130SBruce M Simpson * at the expense of an m_copym(). 71682cd038dSYoshinobu Inoue */ 71782cd038dSYoshinobu Inoue ip6_mloopback(ifp, m, dst); 71891ec0a1eSYoshinobu Inoue } else { 71991ec0a1eSYoshinobu Inoue /* 72091ec0a1eSYoshinobu Inoue * If we are acting as a multicast router, perform 72191ec0a1eSYoshinobu Inoue * multicast forwarding as if the packet had just 72291ec0a1eSYoshinobu Inoue * arrived on the interface to which we are about 72391ec0a1eSYoshinobu Inoue * to send. The multicast forwarding function 72491ec0a1eSYoshinobu Inoue * recursively calls this function, using the 72591ec0a1eSYoshinobu Inoue * IPV6_FORWARDING flag to prevent infinite recursion. 72691ec0a1eSYoshinobu Inoue * 72791ec0a1eSYoshinobu Inoue * Multicasts that are looped back by ip6_mloopback(), 72891ec0a1eSYoshinobu Inoue * above, will be forwarded by the ip6_input() routine, 72991ec0a1eSYoshinobu Inoue * if necessary. 73091ec0a1eSYoshinobu Inoue */ 73133cde130SBruce M Simpson if (V_ip6_mrouter && (flags & IPV6_FORWARDING) == 0) { 732a1f7e5f8SHajimu UMEMOTO /* 733a1f7e5f8SHajimu UMEMOTO * XXX: ip6_mforward expects that rcvif is NULL 734a1f7e5f8SHajimu UMEMOTO * when it is called from the originating path. 735a1f7e5f8SHajimu UMEMOTO * However, it is not always the case, since 736a1f7e5f8SHajimu UMEMOTO * some versions of MGETHDR() does not 737a1f7e5f8SHajimu UMEMOTO * initialize the field. 738a1f7e5f8SHajimu UMEMOTO */ 739a1f7e5f8SHajimu UMEMOTO m->m_pkthdr.rcvif = NULL; 740686cdd19SJun-ichiro itojun Hagino if (ip6_mforward(ip6, ifp, m) != 0) { 74191ec0a1eSYoshinobu Inoue m_freem(m); 74291ec0a1eSYoshinobu Inoue goto done; 74391ec0a1eSYoshinobu Inoue } 74491ec0a1eSYoshinobu Inoue } 74582cd038dSYoshinobu Inoue } 74682cd038dSYoshinobu Inoue /* 74782cd038dSYoshinobu Inoue * Multicasts with a hoplimit of zero may be looped back, 74882cd038dSYoshinobu Inoue * above, but must not be transmitted on a network. 74982cd038dSYoshinobu Inoue * Also, multicasts addressed to the loopback interface 75082cd038dSYoshinobu Inoue * are not sent -- the above call to ip6_mloopback() will 75182cd038dSYoshinobu Inoue * loop back a copy if this host actually belongs to the 75282cd038dSYoshinobu Inoue * destination group on the loopback interface. 75382cd038dSYoshinobu Inoue */ 754f95d4633SHajimu UMEMOTO if (ip6->ip6_hlim == 0 || (ifp->if_flags & IFF_LOOPBACK) || 755f95d4633SHajimu UMEMOTO IN6_IS_ADDR_MC_INTFACELOCAL(&ip6->ip6_dst)) { 75682cd038dSYoshinobu Inoue m_freem(m); 75782cd038dSYoshinobu Inoue goto done; 75882cd038dSYoshinobu Inoue } 75982cd038dSYoshinobu Inoue } 76082cd038dSYoshinobu Inoue 76182cd038dSYoshinobu Inoue /* 76282cd038dSYoshinobu Inoue * Fill the outgoing inteface to tell the upper layer 76382cd038dSYoshinobu Inoue * to increment per-interface statistics. 76482cd038dSYoshinobu Inoue */ 76582cd038dSYoshinobu Inoue if (ifpp) 76682cd038dSYoshinobu Inoue *ifpp = ifp; 76782cd038dSYoshinobu Inoue 76831b3783cSHajimu UMEMOTO /* Determine path MTU. */ 769f95d4633SHajimu UMEMOTO if ((error = ip6_getpmtu(ro_pmtu, ro, ifp, &finaldst, &mtu, 770f95d4633SHajimu UMEMOTO &alwaysfrag)) != 0) 77131b3783cSHajimu UMEMOTO goto bad; 77282cd038dSYoshinobu Inoue 77333841545SHajimu UMEMOTO /* 7748b00e59dSHajimu UMEMOTO * The caller of this function may specify to use the minimum MTU 7758b00e59dSHajimu UMEMOTO * in some cases. 7768b00e59dSHajimu UMEMOTO * An advanced API option (IPV6_USE_MIN_MTU) can also override MTU 7778b00e59dSHajimu UMEMOTO * setting. The logic is a bit complicated; by default, unicast 7788b00e59dSHajimu UMEMOTO * packets will follow path MTU while multicast packets will be sent at 7798b00e59dSHajimu UMEMOTO * the minimum MTU. If IP6PO_MINMTU_ALL is specified, all packets 7808b00e59dSHajimu UMEMOTO * including unicast ones will be sent at the minimum MTU. Multicast 7818b00e59dSHajimu UMEMOTO * packets will always be sent at the minimum MTU unless 7828b00e59dSHajimu UMEMOTO * IP6PO_MINMTU_DISABLE is explicitly specified. 7838b00e59dSHajimu UMEMOTO * See RFC 3542 for more details. 78433841545SHajimu UMEMOTO */ 7858b00e59dSHajimu UMEMOTO if (mtu > IPV6_MMTU) { 7868b00e59dSHajimu UMEMOTO if ((flags & IPV6_MINMTU)) 78733841545SHajimu UMEMOTO mtu = IPV6_MMTU; 7888b00e59dSHajimu UMEMOTO else if (opt && opt->ip6po_minmtu == IP6PO_MINMTU_ALL) 7898b00e59dSHajimu UMEMOTO mtu = IPV6_MMTU; 7908b00e59dSHajimu UMEMOTO else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) && 7918b00e59dSHajimu UMEMOTO (opt == NULL || 7928b00e59dSHajimu UMEMOTO opt->ip6po_minmtu != IP6PO_MINMTU_DISABLE)) { 7938b00e59dSHajimu UMEMOTO mtu = IPV6_MMTU; 7948b00e59dSHajimu UMEMOTO } 7958b00e59dSHajimu UMEMOTO } 79633841545SHajimu UMEMOTO 79733841545SHajimu UMEMOTO /* 79833841545SHajimu UMEMOTO * clear embedded scope identifiers if necessary. 79933841545SHajimu UMEMOTO * in6_clearscope will touch the addresses only when necessary. 80033841545SHajimu UMEMOTO */ 80133841545SHajimu UMEMOTO in6_clearscope(&ip6->ip6_src); 80233841545SHajimu UMEMOTO in6_clearscope(&ip6->ip6_dst); 80382cd038dSYoshinobu Inoue 80482cd038dSYoshinobu Inoue /* 80582cd038dSYoshinobu Inoue * If the outgoing packet contains a hop-by-hop options header, 80682cd038dSYoshinobu Inoue * it must be examined and processed even by the source node. 80782cd038dSYoshinobu Inoue * (RFC 2460, section 4.) 80882cd038dSYoshinobu Inoue */ 80982cd038dSYoshinobu Inoue if (exthdrs.ip6e_hbh) { 81033841545SHajimu UMEMOTO struct ip6_hbh *hbh = mtod(exthdrs.ip6e_hbh, struct ip6_hbh *); 811283f9f8aSHajimu UMEMOTO u_int32_t dummy; /* XXX unused */ 812283f9f8aSHajimu UMEMOTO u_int32_t plen = 0; /* XXX: ip6_process will check the value */ 81382cd038dSYoshinobu Inoue 81433841545SHajimu UMEMOTO #ifdef DIAGNOSTIC 81533841545SHajimu UMEMOTO if ((hbh->ip6h_len + 1) << 3 > exthdrs.ip6e_hbh->m_len) 81633841545SHajimu UMEMOTO panic("ip6e_hbh is not continuous"); 81733841545SHajimu UMEMOTO #endif 81882cd038dSYoshinobu Inoue /* 81982cd038dSYoshinobu Inoue * XXX: if we have to send an ICMPv6 error to the sender, 82082cd038dSYoshinobu Inoue * we need the M_LOOP flag since icmp6_error() expects 82182cd038dSYoshinobu Inoue * the IPv6 and the hop-by-hop options header are 82282cd038dSYoshinobu Inoue * continuous unless the flag is set. 82382cd038dSYoshinobu Inoue */ 82482cd038dSYoshinobu Inoue m->m_flags |= M_LOOP; 82582cd038dSYoshinobu Inoue m->m_pkthdr.rcvif = ifp; 8267efe5d92SHajimu UMEMOTO if (ip6_process_hopopts(m, (u_int8_t *)(hbh + 1), 8277efe5d92SHajimu UMEMOTO ((hbh->ip6h_len + 1) << 3) - sizeof(struct ip6_hbh), 828283f9f8aSHajimu UMEMOTO &dummy, &plen) < 0) { 82982cd038dSYoshinobu Inoue /* m was already freed at this point */ 83082cd038dSYoshinobu Inoue error = EINVAL;/* better error? */ 83182cd038dSYoshinobu Inoue goto done; 83282cd038dSYoshinobu Inoue } 83382cd038dSYoshinobu Inoue m->m_flags &= ~M_LOOP; /* XXX */ 83482cd038dSYoshinobu Inoue m->m_pkthdr.rcvif = NULL; 83582cd038dSYoshinobu Inoue } 83682cd038dSYoshinobu Inoue 837c21fd232SAndre Oppermann /* Jump over all PFIL processing if hooks are not active. */ 8380b4b0b0fSJulian Elischer if (!PFIL_HOOKED(&V_inet6_pfil_hook)) 839c21fd232SAndre Oppermann goto passout; 840c21fd232SAndre Oppermann 8418195404bSBrooks Davis odst = ip6->ip6_dst; 842c21fd232SAndre Oppermann /* Run through list of hooks for output packets. */ 8430b4b0b0fSJulian Elischer error = pfil_run_hooks(&V_inet6_pfil_hook, &m, ifp, PFIL_OUT, inp); 844b140bc1fSSam Leffler if (error != 0 || m == NULL) 845c4ac87eaSDarren Reed goto done; 846c4ac87eaSDarren Reed ip6 = mtod(m, struct ip6_hdr *); 8477efe5d92SHajimu UMEMOTO 8488195404bSBrooks Davis /* See if destination IP address was changed by packet filter. */ 8498195404bSBrooks Davis if (!IN6_ARE_ADDR_EQUAL(&odst, &ip6->ip6_dst)) { 8508195404bSBrooks Davis m->m_flags |= M_SKIP_FIREWALL; 8518195404bSBrooks Davis /* If destination is now ourself drop to ip6_input(). */ 8528195404bSBrooks Davis if (in6_localaddr(&ip6->ip6_dst)) { 8538195404bSBrooks Davis if (m->m_pkthdr.rcvif == NULL) 854603724d3SBjoern A. Zeeb m->m_pkthdr.rcvif = V_loif; 8558195404bSBrooks Davis if (m->m_pkthdr.csum_flags & CSUM_DELAY_DATA) { 8568195404bSBrooks Davis m->m_pkthdr.csum_flags |= 8578195404bSBrooks Davis CSUM_DATA_VALID | CSUM_PSEUDO_HDR; 8588195404bSBrooks Davis m->m_pkthdr.csum_data = 0xffff; 8598195404bSBrooks Davis } 8608195404bSBrooks Davis m->m_pkthdr.csum_flags |= 8618195404bSBrooks Davis CSUM_IP_CHECKED | CSUM_IP_VALID; 8629b03990aSRandall Stewart #ifdef SCTP 8639b03990aSRandall Stewart if (m->m_pkthdr.csum_flags & CSUM_SCTP) 8649b03990aSRandall Stewart m->m_pkthdr.csum_flags |= CSUM_SCTP_VALID; 8659b03990aSRandall Stewart #endif 8668195404bSBrooks Davis error = netisr_queue(NETISR_IPV6, m); 8678195404bSBrooks Davis goto done; 8688195404bSBrooks Davis } else 8698195404bSBrooks Davis goto again; /* Redo the routing table lookup. */ 8708195404bSBrooks Davis } 8718195404bSBrooks Davis 8728195404bSBrooks Davis /* XXX: IPFIREWALL_FORWARD */ 8738195404bSBrooks Davis 874c21fd232SAndre Oppermann passout: 87582cd038dSYoshinobu Inoue /* 87682cd038dSYoshinobu Inoue * Send the packet to the outgoing interface. 87782cd038dSYoshinobu Inoue * If necessary, do IPv6 fragmentation before sending. 878f95d4633SHajimu UMEMOTO * 879f95d4633SHajimu UMEMOTO * the logic here is rather complex: 880f95d4633SHajimu UMEMOTO * 1: normal case (dontfrag == 0, alwaysfrag == 0) 881f95d4633SHajimu UMEMOTO * 1-a: send as is if tlen <= path mtu 882f95d4633SHajimu UMEMOTO * 1-b: fragment if tlen > path mtu 883f95d4633SHajimu UMEMOTO * 884f95d4633SHajimu UMEMOTO * 2: if user asks us not to fragment (dontfrag == 1) 885f95d4633SHajimu UMEMOTO * 2-a: send as is if tlen <= interface mtu 886f95d4633SHajimu UMEMOTO * 2-b: error if tlen > interface mtu 887f95d4633SHajimu UMEMOTO * 888f95d4633SHajimu UMEMOTO * 3: if we always need to attach fragment header (alwaysfrag == 1) 889f95d4633SHajimu UMEMOTO * always fragment 890f95d4633SHajimu UMEMOTO * 891f95d4633SHajimu UMEMOTO * 4: if dontfrag == 1 && alwaysfrag == 1 892f95d4633SHajimu UMEMOTO * error, as we cannot handle this conflicting request 89382cd038dSYoshinobu Inoue */ 8949b03990aSRandall Stewart #ifdef SCTP 8959b03990aSRandall Stewart sw_csum = m->m_pkthdr.csum_flags & ~ifp->if_hwassist; 8969b03990aSRandall Stewart if (sw_csum & CSUM_SCTP) { 8971966e5b5SRandall Stewart sctp_delayed_cksum(m, sizeof(struct ip6_hdr)); 8989b03990aSRandall Stewart sw_csum &= ~CSUM_SCTP; 8999b03990aSRandall Stewart } 9009b03990aSRandall Stewart #endif 90182cd038dSYoshinobu Inoue tlen = m->m_pkthdr.len; 90282cd038dSYoshinobu Inoue 903f95d4633SHajimu UMEMOTO if (opt && (opt->ip6po_flags & IP6PO_DONTFRAG)) 904f95d4633SHajimu UMEMOTO dontfrag = 1; 905f95d4633SHajimu UMEMOTO else 906f95d4633SHajimu UMEMOTO dontfrag = 0; 907f95d4633SHajimu UMEMOTO if (dontfrag && alwaysfrag) { /* case 4 */ 908f95d4633SHajimu UMEMOTO /* conflicting request - can't transmit */ 909f95d4633SHajimu UMEMOTO error = EMSGSIZE; 910f95d4633SHajimu UMEMOTO goto bad; 911f95d4633SHajimu UMEMOTO } 912f95d4633SHajimu UMEMOTO if (dontfrag && tlen > IN6_LINKMTU(ifp)) { /* case 2-b */ 913f95d4633SHajimu UMEMOTO /* 914f95d4633SHajimu UMEMOTO * Even if the DONTFRAG option is specified, we cannot send the 915f95d4633SHajimu UMEMOTO * packet when the data length is larger than the MTU of the 916f95d4633SHajimu UMEMOTO * outgoing interface. 917f95d4633SHajimu UMEMOTO * Notify the error by sending IPV6_PATHMTU ancillary data as 918f95d4633SHajimu UMEMOTO * well as returning an error code (the latter is not described 919f95d4633SHajimu UMEMOTO * in the API spec.) 920f95d4633SHajimu UMEMOTO */ 921f95d4633SHajimu UMEMOTO u_int32_t mtu32; 922f95d4633SHajimu UMEMOTO struct ip6ctlparam ip6cp; 923f95d4633SHajimu UMEMOTO 924f95d4633SHajimu UMEMOTO mtu32 = (u_int32_t)mtu; 925f95d4633SHajimu UMEMOTO bzero(&ip6cp, sizeof(ip6cp)); 926f95d4633SHajimu UMEMOTO ip6cp.ip6c_cmdarg = (void *)&mtu32; 927f95d4633SHajimu UMEMOTO pfctlinput2(PRC_MSGSIZE, (struct sockaddr *)&ro_pmtu->ro_dst, 928f95d4633SHajimu UMEMOTO (void *)&ip6cp); 929f95d4633SHajimu UMEMOTO 930f95d4633SHajimu UMEMOTO error = EMSGSIZE; 931f95d4633SHajimu UMEMOTO goto bad; 932f95d4633SHajimu UMEMOTO } 933f95d4633SHajimu UMEMOTO 934f95d4633SHajimu UMEMOTO /* 935f95d4633SHajimu UMEMOTO * transmit packet without fragmentation 936f95d4633SHajimu UMEMOTO */ 937f95d4633SHajimu UMEMOTO if (dontfrag || (!alwaysfrag && tlen <= mtu)) { /* case 1-a and 2-a */ 938f95d4633SHajimu UMEMOTO struct in6_ifaddr *ia6; 939f95d4633SHajimu UMEMOTO 940f95d4633SHajimu UMEMOTO ip6 = mtod(m, struct ip6_hdr *); 941f95d4633SHajimu UMEMOTO ia6 = in6_ifawithifp(ifp, &ip6->ip6_src); 942f95d4633SHajimu UMEMOTO if (ia6) { 9435da9f8faSJosef Karthauser /* Record statistics for this interface address. */ 944f95d4633SHajimu UMEMOTO ia6->ia_ifa.if_opackets++; 945f95d4633SHajimu UMEMOTO ia6->ia_ifa.if_obytes += m->m_pkthdr.len; 9468c0fec80SRobert Watson ifa_free(&ia6->ia_ifa); 9475da9f8faSJosef Karthauser } 948686cdd19SJun-ichiro itojun Hagino error = nd6_output(ifp, origifp, m, dst, ro->ro_rt); 94982cd038dSYoshinobu Inoue goto done; 950f95d4633SHajimu UMEMOTO } 951f95d4633SHajimu UMEMOTO 95282cd038dSYoshinobu Inoue /* 953f95d4633SHajimu UMEMOTO * try to fragment the packet. case 1-b and 3 95482cd038dSYoshinobu Inoue */ 955f95d4633SHajimu UMEMOTO if (mtu < IPV6_MMTU) { 956f95d4633SHajimu UMEMOTO /* path MTU cannot be less than IPV6_MMTU */ 95782cd038dSYoshinobu Inoue error = EMSGSIZE; 95882cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_fragfail); 95982cd038dSYoshinobu Inoue goto bad; 9607efe5d92SHajimu UMEMOTO } else if (ip6->ip6_plen == 0) { 9617efe5d92SHajimu UMEMOTO /* jumbo payload cannot be fragmented */ 96282cd038dSYoshinobu Inoue error = EMSGSIZE; 96382cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_fragfail); 96482cd038dSYoshinobu Inoue goto bad; 96582cd038dSYoshinobu Inoue } else { 96682cd038dSYoshinobu Inoue struct mbuf **mnext, *m_frgpart; 96782cd038dSYoshinobu Inoue struct ip6_frag *ip6f; 9688373d51dSHajimu UMEMOTO u_int32_t id = htonl(ip6_randomid()); 96982cd038dSYoshinobu Inoue u_char nextproto; 9702cb64cb2SGeorge V. Neville-Neil 9716f8aee22SBill Paul int qslots = ifp->if_snd.ifq_maxlen - ifp->if_snd.ifq_len; 97282cd038dSYoshinobu Inoue 97382cd038dSYoshinobu Inoue /* 97482cd038dSYoshinobu Inoue * Too large for the destination or interface; 97582cd038dSYoshinobu Inoue * fragment if possible. 97682cd038dSYoshinobu Inoue * Must be able to put at least 8 bytes per fragment. 97782cd038dSYoshinobu Inoue */ 97882cd038dSYoshinobu Inoue hlen = unfragpartlen; 97982cd038dSYoshinobu Inoue if (mtu > IPV6_MAXPACKET) 98082cd038dSYoshinobu Inoue mtu = IPV6_MAXPACKET; 98133841545SHajimu UMEMOTO 98282cd038dSYoshinobu Inoue len = (mtu - hlen - sizeof(struct ip6_frag)) & ~7; 98382cd038dSYoshinobu Inoue if (len < 8) { 98482cd038dSYoshinobu Inoue error = EMSGSIZE; 98582cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_fragfail); 98682cd038dSYoshinobu Inoue goto bad; 98782cd038dSYoshinobu Inoue } 98882cd038dSYoshinobu Inoue 9896f8aee22SBill Paul /* 9906f8aee22SBill Paul * Verify that we have any chance at all of being able to queue 9916f8aee22SBill Paul * the packet or packet fragments 9926f8aee22SBill Paul */ 9936f8aee22SBill Paul if (qslots <= 0 || ((u_int)qslots * (mtu - hlen) 9946f8aee22SBill Paul < tlen /* - hlen */)) { 9956f8aee22SBill Paul error = ENOBUFS; 996603724d3SBjoern A. Zeeb V_ip6stat.ip6s_odropped++; 9976f8aee22SBill Paul goto bad; 9986f8aee22SBill Paul } 9996f8aee22SBill Paul 100082cd038dSYoshinobu Inoue mnext = &m->m_nextpkt; 100182cd038dSYoshinobu Inoue 100282cd038dSYoshinobu Inoue /* 100382cd038dSYoshinobu Inoue * Change the next header field of the last header in the 100482cd038dSYoshinobu Inoue * unfragmentable part. 100582cd038dSYoshinobu Inoue */ 100682cd038dSYoshinobu Inoue if (exthdrs.ip6e_rthdr) { 100782cd038dSYoshinobu Inoue nextproto = *mtod(exthdrs.ip6e_rthdr, u_char *); 100882cd038dSYoshinobu Inoue *mtod(exthdrs.ip6e_rthdr, u_char *) = IPPROTO_FRAGMENT; 100982cd038dSYoshinobu Inoue } else if (exthdrs.ip6e_dest1) { 101082cd038dSYoshinobu Inoue nextproto = *mtod(exthdrs.ip6e_dest1, u_char *); 101182cd038dSYoshinobu Inoue *mtod(exthdrs.ip6e_dest1, u_char *) = IPPROTO_FRAGMENT; 101282cd038dSYoshinobu Inoue } else if (exthdrs.ip6e_hbh) { 101382cd038dSYoshinobu Inoue nextproto = *mtod(exthdrs.ip6e_hbh, u_char *); 101482cd038dSYoshinobu Inoue *mtod(exthdrs.ip6e_hbh, u_char *) = IPPROTO_FRAGMENT; 101582cd038dSYoshinobu Inoue } else { 101682cd038dSYoshinobu Inoue nextproto = ip6->ip6_nxt; 101782cd038dSYoshinobu Inoue ip6->ip6_nxt = IPPROTO_FRAGMENT; 101882cd038dSYoshinobu Inoue } 101982cd038dSYoshinobu Inoue 102082cd038dSYoshinobu Inoue /* 102182cd038dSYoshinobu Inoue * Loop through length of segment after first fragment, 102288ff5695SSUZUKI Shinsuke * make new header and copy data of each part and link onto 102388ff5695SSUZUKI Shinsuke * chain. 102482cd038dSYoshinobu Inoue */ 102582cd038dSYoshinobu Inoue m0 = m; 102682cd038dSYoshinobu Inoue for (off = hlen; off < tlen; off += len) { 1027a163d034SWarner Losh MGETHDR(m, M_DONTWAIT, MT_HEADER); 102882cd038dSYoshinobu Inoue if (!m) { 102982cd038dSYoshinobu Inoue error = ENOBUFS; 1030603724d3SBjoern A. Zeeb V_ip6stat.ip6s_odropped++; 103182cd038dSYoshinobu Inoue goto sendorfree; 103282cd038dSYoshinobu Inoue } 103333841545SHajimu UMEMOTO m->m_pkthdr.rcvif = NULL; 103482cd038dSYoshinobu Inoue m->m_flags = m0->m_flags & M_COPYFLAGS; 103582cd038dSYoshinobu Inoue *mnext = m; 103682cd038dSYoshinobu Inoue mnext = &m->m_nextpkt; 103782cd038dSYoshinobu Inoue m->m_data += max_linkhdr; 103882cd038dSYoshinobu Inoue mhip6 = mtod(m, struct ip6_hdr *); 103982cd038dSYoshinobu Inoue *mhip6 = *ip6; 104082cd038dSYoshinobu Inoue m->m_len = sizeof(*mhip6); 104182cd038dSYoshinobu Inoue error = ip6_insertfraghdr(m0, m, hlen, &ip6f); 104282cd038dSYoshinobu Inoue if (error) { 1043603724d3SBjoern A. Zeeb V_ip6stat.ip6s_odropped++; 104482cd038dSYoshinobu Inoue goto sendorfree; 104582cd038dSYoshinobu Inoue } 104682cd038dSYoshinobu Inoue ip6f->ip6f_offlg = htons((u_short)((off - hlen) & ~7)); 104782cd038dSYoshinobu Inoue if (off + len >= tlen) 104882cd038dSYoshinobu Inoue len = tlen - off; 104982cd038dSYoshinobu Inoue else 105082cd038dSYoshinobu Inoue ip6f->ip6f_offlg |= IP6F_MORE_FRAG; 105182cd038dSYoshinobu Inoue mhip6->ip6_plen = htons((u_short)(len + hlen + 10527efe5d92SHajimu UMEMOTO sizeof(*ip6f) - sizeof(struct ip6_hdr))); 105382cd038dSYoshinobu Inoue if ((m_frgpart = m_copy(m0, off, len)) == 0) { 105482cd038dSYoshinobu Inoue error = ENOBUFS; 1055603724d3SBjoern A. Zeeb V_ip6stat.ip6s_odropped++; 105682cd038dSYoshinobu Inoue goto sendorfree; 105782cd038dSYoshinobu Inoue } 105882cd038dSYoshinobu Inoue m_cat(m, m_frgpart); 105982cd038dSYoshinobu Inoue m->m_pkthdr.len = len + hlen + sizeof(*ip6f); 1060fc74a9f9SBrooks Davis m->m_pkthdr.rcvif = NULL; 106182cd038dSYoshinobu Inoue ip6f->ip6f_reserved = 0; 106282cd038dSYoshinobu Inoue ip6f->ip6f_ident = id; 106382cd038dSYoshinobu Inoue ip6f->ip6f_nxt = nextproto; 1064603724d3SBjoern A. Zeeb V_ip6stat.ip6s_ofragments++; 106582cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_fragcreat); 106682cd038dSYoshinobu Inoue } 106782cd038dSYoshinobu Inoue 106882cd038dSYoshinobu Inoue in6_ifstat_inc(ifp, ifs6_out_fragok); 106982cd038dSYoshinobu Inoue } 107082cd038dSYoshinobu Inoue 107182cd038dSYoshinobu Inoue /* 107282cd038dSYoshinobu Inoue * Remove leading garbages. 107382cd038dSYoshinobu Inoue */ 107482cd038dSYoshinobu Inoue sendorfree: 107582cd038dSYoshinobu Inoue m = m0->m_nextpkt; 107682cd038dSYoshinobu Inoue m0->m_nextpkt = 0; 107782cd038dSYoshinobu Inoue m_freem(m0); 107882cd038dSYoshinobu Inoue for (m0 = m; m; m = m0) { 107982cd038dSYoshinobu Inoue m0 = m->m_nextpkt; 108082cd038dSYoshinobu Inoue m->m_nextpkt = 0; 108182cd038dSYoshinobu Inoue if (error == 0) { 1082fe937674SJosef Karthauser /* Record statistics for this interface address. */ 1083fe937674SJosef Karthauser if (ia) { 1084fe937674SJosef Karthauser ia->ia_ifa.if_opackets++; 1085fe937674SJosef Karthauser ia->ia_ifa.if_obytes += m->m_pkthdr.len; 1086fe937674SJosef Karthauser } 1087686cdd19SJun-ichiro itojun Hagino error = nd6_output(ifp, origifp, m, dst, ro->ro_rt); 108882cd038dSYoshinobu Inoue } else 108982cd038dSYoshinobu Inoue m_freem(m); 109082cd038dSYoshinobu Inoue } 109182cd038dSYoshinobu Inoue 109282cd038dSYoshinobu Inoue if (error == 0) 1093603724d3SBjoern A. Zeeb V_ip6stat.ip6s_fragmented++; 109482cd038dSYoshinobu Inoue 109582cd038dSYoshinobu Inoue done: 1096*77931dd5SKip Macy if (ro == &ip6route && ro->ro_rt && flevalid == 0) { 1097*77931dd5SKip Macy /* brace necessary for RTFREE */ 109882cd038dSYoshinobu Inoue RTFREE(ro->ro_rt); 1099*77931dd5SKip Macy } else if (ro_pmtu == &ip6route && ro_pmtu->ro_rt && 1100*77931dd5SKip Macy ((flevalid == 0) || (ro_pmtu != ro))) { 110182cd038dSYoshinobu Inoue RTFREE(ro_pmtu->ro_rt); 110282cd038dSYoshinobu Inoue } 11038cfbd299SBjoern A. Zeeb #ifdef IPSEC 11048cfbd299SBjoern A. Zeeb if (sp != NULL) 11058cfbd299SBjoern A. Zeeb KEY_FREESP(&sp); 11068cfbd299SBjoern A. Zeeb #endif 110782cd038dSYoshinobu Inoue 110882cd038dSYoshinobu Inoue return (error); 110982cd038dSYoshinobu Inoue 111082cd038dSYoshinobu Inoue freehdrs: 111182cd038dSYoshinobu Inoue m_freem(exthdrs.ip6e_hbh); /* m_freem will check if mbuf is 0 */ 111282cd038dSYoshinobu Inoue m_freem(exthdrs.ip6e_dest1); 111382cd038dSYoshinobu Inoue m_freem(exthdrs.ip6e_rthdr); 111482cd038dSYoshinobu Inoue m_freem(exthdrs.ip6e_dest2); 11157efe5d92SHajimu UMEMOTO /* FALLTHROUGH */ 111682cd038dSYoshinobu Inoue bad: 11172cb64cb2SGeorge V. Neville-Neil if (m) 111882cd038dSYoshinobu Inoue m_freem(m); 111982cd038dSYoshinobu Inoue goto done; 112082cd038dSYoshinobu Inoue } 112182cd038dSYoshinobu Inoue 112282cd038dSYoshinobu Inoue static int 11231272577eSXin LI ip6_copyexthdr(struct mbuf **mp, caddr_t hdr, int hlen) 112482cd038dSYoshinobu Inoue { 112582cd038dSYoshinobu Inoue struct mbuf *m; 112682cd038dSYoshinobu Inoue 112782cd038dSYoshinobu Inoue if (hlen > MCLBYTES) 112882cd038dSYoshinobu Inoue return (ENOBUFS); /* XXX */ 112982cd038dSYoshinobu Inoue 1130a163d034SWarner Losh MGET(m, M_DONTWAIT, MT_DATA); 113182cd038dSYoshinobu Inoue if (!m) 113282cd038dSYoshinobu Inoue return (ENOBUFS); 113382cd038dSYoshinobu Inoue 113482cd038dSYoshinobu Inoue if (hlen > MLEN) { 1135a163d034SWarner Losh MCLGET(m, M_DONTWAIT); 113682cd038dSYoshinobu Inoue if ((m->m_flags & M_EXT) == 0) { 113782cd038dSYoshinobu Inoue m_free(m); 113882cd038dSYoshinobu Inoue return (ENOBUFS); 113982cd038dSYoshinobu Inoue } 114082cd038dSYoshinobu Inoue } 114182cd038dSYoshinobu Inoue m->m_len = hlen; 114282cd038dSYoshinobu Inoue if (hdr) 114382cd038dSYoshinobu Inoue bcopy(hdr, mtod(m, caddr_t), hlen); 114482cd038dSYoshinobu Inoue 114582cd038dSYoshinobu Inoue *mp = m; 114682cd038dSYoshinobu Inoue return (0); 114782cd038dSYoshinobu Inoue } 114882cd038dSYoshinobu Inoue 114982cd038dSYoshinobu Inoue /* 115082cd038dSYoshinobu Inoue * Insert jumbo payload option. 115182cd038dSYoshinobu Inoue */ 115282cd038dSYoshinobu Inoue static int 11531272577eSXin LI ip6_insert_jumboopt(struct ip6_exthdrs *exthdrs, u_int32_t plen) 115482cd038dSYoshinobu Inoue { 115582cd038dSYoshinobu Inoue struct mbuf *mopt; 115682cd038dSYoshinobu Inoue u_char *optbuf; 115733841545SHajimu UMEMOTO u_int32_t v; 115882cd038dSYoshinobu Inoue 115982cd038dSYoshinobu Inoue #define JUMBOOPTLEN 8 /* length of jumbo payload option and padding */ 116082cd038dSYoshinobu Inoue 116182cd038dSYoshinobu Inoue /* 116282cd038dSYoshinobu Inoue * If there is no hop-by-hop options header, allocate new one. 116382cd038dSYoshinobu Inoue * If there is one but it doesn't have enough space to store the 116482cd038dSYoshinobu Inoue * jumbo payload option, allocate a cluster to store the whole options. 116582cd038dSYoshinobu Inoue * Otherwise, use it to store the options. 116682cd038dSYoshinobu Inoue */ 116782cd038dSYoshinobu Inoue if (exthdrs->ip6e_hbh == 0) { 1168a163d034SWarner Losh MGET(mopt, M_DONTWAIT, MT_DATA); 116982cd038dSYoshinobu Inoue if (mopt == 0) 117082cd038dSYoshinobu Inoue return (ENOBUFS); 117182cd038dSYoshinobu Inoue mopt->m_len = JUMBOOPTLEN; 117282cd038dSYoshinobu Inoue optbuf = mtod(mopt, u_char *); 117382cd038dSYoshinobu Inoue optbuf[1] = 0; /* = ((JUMBOOPTLEN) >> 3) - 1 */ 117482cd038dSYoshinobu Inoue exthdrs->ip6e_hbh = mopt; 117582cd038dSYoshinobu Inoue } else { 117682cd038dSYoshinobu Inoue struct ip6_hbh *hbh; 117782cd038dSYoshinobu Inoue 117882cd038dSYoshinobu Inoue mopt = exthdrs->ip6e_hbh; 117982cd038dSYoshinobu Inoue if (M_TRAILINGSPACE(mopt) < JUMBOOPTLEN) { 118033841545SHajimu UMEMOTO /* 118133841545SHajimu UMEMOTO * XXX assumption: 118233841545SHajimu UMEMOTO * - exthdrs->ip6e_hbh is not referenced from places 118333841545SHajimu UMEMOTO * other than exthdrs. 118433841545SHajimu UMEMOTO * - exthdrs->ip6e_hbh is not an mbuf chain. 118533841545SHajimu UMEMOTO */ 118682cd038dSYoshinobu Inoue int oldoptlen = mopt->m_len; 118733841545SHajimu UMEMOTO struct mbuf *n; 118882cd038dSYoshinobu Inoue 118933841545SHajimu UMEMOTO /* 119033841545SHajimu UMEMOTO * XXX: give up if the whole (new) hbh header does 119133841545SHajimu UMEMOTO * not fit even in an mbuf cluster. 119233841545SHajimu UMEMOTO */ 119333841545SHajimu UMEMOTO if (oldoptlen + JUMBOOPTLEN > MCLBYTES) 119482cd038dSYoshinobu Inoue return (ENOBUFS); 119582cd038dSYoshinobu Inoue 119633841545SHajimu UMEMOTO /* 119733841545SHajimu UMEMOTO * As a consequence, we must always prepare a cluster 119833841545SHajimu UMEMOTO * at this point. 119933841545SHajimu UMEMOTO */ 1200a163d034SWarner Losh MGET(n, M_DONTWAIT, MT_DATA); 120133841545SHajimu UMEMOTO if (n) { 1202a163d034SWarner Losh MCLGET(n, M_DONTWAIT); 120333841545SHajimu UMEMOTO if ((n->m_flags & M_EXT) == 0) { 120433841545SHajimu UMEMOTO m_freem(n); 120533841545SHajimu UMEMOTO n = NULL; 120633841545SHajimu UMEMOTO } 120733841545SHajimu UMEMOTO } 120833841545SHajimu UMEMOTO if (!n) 120933841545SHajimu UMEMOTO return (ENOBUFS); 121033841545SHajimu UMEMOTO n->m_len = oldoptlen + JUMBOOPTLEN; 121133841545SHajimu UMEMOTO bcopy(mtod(mopt, caddr_t), mtod(n, caddr_t), 121233841545SHajimu UMEMOTO oldoptlen); 121333841545SHajimu UMEMOTO optbuf = mtod(n, caddr_t) + oldoptlen; 121433841545SHajimu UMEMOTO m_freem(mopt); 121533841545SHajimu UMEMOTO mopt = exthdrs->ip6e_hbh = n; 121682cd038dSYoshinobu Inoue } else { 121782cd038dSYoshinobu Inoue optbuf = mtod(mopt, u_char *) + mopt->m_len; 121882cd038dSYoshinobu Inoue mopt->m_len += JUMBOOPTLEN; 121982cd038dSYoshinobu Inoue } 122082cd038dSYoshinobu Inoue optbuf[0] = IP6OPT_PADN; 122182cd038dSYoshinobu Inoue optbuf[1] = 1; 122282cd038dSYoshinobu Inoue 122382cd038dSYoshinobu Inoue /* 122482cd038dSYoshinobu Inoue * Adjust the header length according to the pad and 122582cd038dSYoshinobu Inoue * the jumbo payload option. 122682cd038dSYoshinobu Inoue */ 122782cd038dSYoshinobu Inoue hbh = mtod(mopt, struct ip6_hbh *); 122882cd038dSYoshinobu Inoue hbh->ip6h_len += (JUMBOOPTLEN >> 3); 122982cd038dSYoshinobu Inoue } 123082cd038dSYoshinobu Inoue 123182cd038dSYoshinobu Inoue /* fill in the option. */ 123282cd038dSYoshinobu Inoue optbuf[2] = IP6OPT_JUMBO; 123382cd038dSYoshinobu Inoue optbuf[3] = 4; 123433841545SHajimu UMEMOTO v = (u_int32_t)htonl(plen + JUMBOOPTLEN); 123533841545SHajimu UMEMOTO bcopy(&v, &optbuf[4], sizeof(u_int32_t)); 123682cd038dSYoshinobu Inoue 123782cd038dSYoshinobu Inoue /* finally, adjust the packet header length */ 123882cd038dSYoshinobu Inoue exthdrs->ip6e_ip6->m_pkthdr.len += JUMBOOPTLEN; 123982cd038dSYoshinobu Inoue 124082cd038dSYoshinobu Inoue return (0); 124182cd038dSYoshinobu Inoue #undef JUMBOOPTLEN 124282cd038dSYoshinobu Inoue } 124382cd038dSYoshinobu Inoue 124482cd038dSYoshinobu Inoue /* 124582cd038dSYoshinobu Inoue * Insert fragment header and copy unfragmentable header portions. 124682cd038dSYoshinobu Inoue */ 124782cd038dSYoshinobu Inoue static int 12481272577eSXin LI ip6_insertfraghdr(struct mbuf *m0, struct mbuf *m, int hlen, 12491272577eSXin LI struct ip6_frag **frghdrp) 125082cd038dSYoshinobu Inoue { 125182cd038dSYoshinobu Inoue struct mbuf *n, *mlast; 125282cd038dSYoshinobu Inoue 125382cd038dSYoshinobu Inoue if (hlen > sizeof(struct ip6_hdr)) { 125482cd038dSYoshinobu Inoue n = m_copym(m0, sizeof(struct ip6_hdr), 1255a163d034SWarner Losh hlen - sizeof(struct ip6_hdr), M_DONTWAIT); 125682cd038dSYoshinobu Inoue if (n == 0) 125782cd038dSYoshinobu Inoue return (ENOBUFS); 125882cd038dSYoshinobu Inoue m->m_next = n; 125982cd038dSYoshinobu Inoue } else 126082cd038dSYoshinobu Inoue n = m; 126182cd038dSYoshinobu Inoue 126282cd038dSYoshinobu Inoue /* Search for the last mbuf of unfragmentable part. */ 126382cd038dSYoshinobu Inoue for (mlast = n; mlast->m_next; mlast = mlast->m_next) 126482cd038dSYoshinobu Inoue ; 126582cd038dSYoshinobu Inoue 126682cd038dSYoshinobu Inoue if ((mlast->m_flags & M_EXT) == 0 && 1267686cdd19SJun-ichiro itojun Hagino M_TRAILINGSPACE(mlast) >= sizeof(struct ip6_frag)) { 126882cd038dSYoshinobu Inoue /* use the trailing space of the last mbuf for the fragment hdr */ 12697efe5d92SHajimu UMEMOTO *frghdrp = (struct ip6_frag *)(mtod(mlast, caddr_t) + 12707efe5d92SHajimu UMEMOTO mlast->m_len); 127182cd038dSYoshinobu Inoue mlast->m_len += sizeof(struct ip6_frag); 127282cd038dSYoshinobu Inoue m->m_pkthdr.len += sizeof(struct ip6_frag); 127382cd038dSYoshinobu Inoue } else { 127482cd038dSYoshinobu Inoue /* allocate a new mbuf for the fragment header */ 127582cd038dSYoshinobu Inoue struct mbuf *mfrg; 127682cd038dSYoshinobu Inoue 1277a163d034SWarner Losh MGET(mfrg, M_DONTWAIT, MT_DATA); 127882cd038dSYoshinobu Inoue if (mfrg == 0) 127982cd038dSYoshinobu Inoue return (ENOBUFS); 128082cd038dSYoshinobu Inoue mfrg->m_len = sizeof(struct ip6_frag); 128182cd038dSYoshinobu Inoue *frghdrp = mtod(mfrg, struct ip6_frag *); 128282cd038dSYoshinobu Inoue mlast->m_next = mfrg; 128382cd038dSYoshinobu Inoue } 128482cd038dSYoshinobu Inoue 128582cd038dSYoshinobu Inoue return (0); 128682cd038dSYoshinobu Inoue } 128782cd038dSYoshinobu Inoue 128831b3783cSHajimu UMEMOTO static int 12891272577eSXin LI ip6_getpmtu(struct route_in6 *ro_pmtu, struct route_in6 *ro, 12901272577eSXin LI struct ifnet *ifp, struct in6_addr *dst, u_long *mtup, 12911272577eSXin LI int *alwaysfragp) 129231b3783cSHajimu UMEMOTO { 129331b3783cSHajimu UMEMOTO u_int32_t mtu = 0; 1294f95d4633SHajimu UMEMOTO int alwaysfrag = 0; 129531b3783cSHajimu UMEMOTO int error = 0; 129631b3783cSHajimu UMEMOTO 129731b3783cSHajimu UMEMOTO if (ro_pmtu != ro) { 129831b3783cSHajimu UMEMOTO /* The first hop and the final destination may differ. */ 129931b3783cSHajimu UMEMOTO struct sockaddr_in6 *sa6_dst = 130031b3783cSHajimu UMEMOTO (struct sockaddr_in6 *)&ro_pmtu->ro_dst; 130131b3783cSHajimu UMEMOTO if (ro_pmtu->ro_rt && 1302e5f467a2SHajimu UMEMOTO ((ro_pmtu->ro_rt->rt_flags & RTF_UP) == 0 || 130331b3783cSHajimu UMEMOTO !IN6_ARE_ADDR_EQUAL(&sa6_dst->sin6_addr, dst))) { 130431b3783cSHajimu UMEMOTO RTFREE(ro_pmtu->ro_rt); 130531b3783cSHajimu UMEMOTO ro_pmtu->ro_rt = (struct rtentry *)NULL; 130631b3783cSHajimu UMEMOTO } 130731b3783cSHajimu UMEMOTO if (ro_pmtu->ro_rt == NULL) { 130831b3783cSHajimu UMEMOTO bzero(sa6_dst, sizeof(*sa6_dst)); 130931b3783cSHajimu UMEMOTO sa6_dst->sin6_family = AF_INET6; 131031b3783cSHajimu UMEMOTO sa6_dst->sin6_len = sizeof(struct sockaddr_in6); 131131b3783cSHajimu UMEMOTO sa6_dst->sin6_addr = *dst; 131231b3783cSHajimu UMEMOTO 131331b3783cSHajimu UMEMOTO rtalloc((struct route *)ro_pmtu); 131431b3783cSHajimu UMEMOTO } 131531b3783cSHajimu UMEMOTO } 131631b3783cSHajimu UMEMOTO if (ro_pmtu->ro_rt) { 131731b3783cSHajimu UMEMOTO u_int32_t ifmtu; 131897d8d152SAndre Oppermann struct in_conninfo inc; 131997d8d152SAndre Oppermann 132097d8d152SAndre Oppermann bzero(&inc, sizeof(inc)); 1321dcdb4371SBjoern A. Zeeb inc.inc_flags |= INC_ISIPV6; 132297d8d152SAndre Oppermann inc.inc6_faddr = *dst; 132331b3783cSHajimu UMEMOTO 132431b3783cSHajimu UMEMOTO if (ifp == NULL) 132531b3783cSHajimu UMEMOTO ifp = ro_pmtu->ro_rt->rt_ifp; 132631b3783cSHajimu UMEMOTO ifmtu = IN6_LINKMTU(ifp); 132797d8d152SAndre Oppermann mtu = tcp_hc_getmtu(&inc); 132897d8d152SAndre Oppermann if (mtu) 132997d8d152SAndre Oppermann mtu = min(mtu, ro_pmtu->ro_rt->rt_rmx.rmx_mtu); 133097d8d152SAndre Oppermann else 133131b3783cSHajimu UMEMOTO mtu = ro_pmtu->ro_rt->rt_rmx.rmx_mtu; 133231b3783cSHajimu UMEMOTO if (mtu == 0) 133331b3783cSHajimu UMEMOTO mtu = ifmtu; 1334f95d4633SHajimu UMEMOTO else if (mtu < IPV6_MMTU) { 1335f95d4633SHajimu UMEMOTO /* 1336f95d4633SHajimu UMEMOTO * RFC2460 section 5, last paragraph: 1337f95d4633SHajimu UMEMOTO * if we record ICMPv6 too big message with 1338f95d4633SHajimu UMEMOTO * mtu < IPV6_MMTU, transmit packets sized IPV6_MMTU 1339f95d4633SHajimu UMEMOTO * or smaller, with framgent header attached. 1340f95d4633SHajimu UMEMOTO * (fragment header is needed regardless from the 1341f95d4633SHajimu UMEMOTO * packet size, for translators to identify packets) 1342f95d4633SHajimu UMEMOTO */ 1343f95d4633SHajimu UMEMOTO alwaysfrag = 1; 1344f95d4633SHajimu UMEMOTO mtu = IPV6_MMTU; 1345f95d4633SHajimu UMEMOTO } else if (mtu > ifmtu) { 134631b3783cSHajimu UMEMOTO /* 134731b3783cSHajimu UMEMOTO * The MTU on the route is larger than the MTU on 134831b3783cSHajimu UMEMOTO * the interface! This shouldn't happen, unless the 134931b3783cSHajimu UMEMOTO * MTU of the interface has been changed after the 135031b3783cSHajimu UMEMOTO * interface was brought up. Change the MTU in the 135131b3783cSHajimu UMEMOTO * route to match the interface MTU (as long as the 135231b3783cSHajimu UMEMOTO * field isn't locked). 135331b3783cSHajimu UMEMOTO */ 135431b3783cSHajimu UMEMOTO mtu = ifmtu; 135531b3783cSHajimu UMEMOTO ro_pmtu->ro_rt->rt_rmx.rmx_mtu = mtu; 135631b3783cSHajimu UMEMOTO } 135731b3783cSHajimu UMEMOTO } else if (ifp) { 135831b3783cSHajimu UMEMOTO mtu = IN6_LINKMTU(ifp); 135931b3783cSHajimu UMEMOTO } else 136031b3783cSHajimu UMEMOTO error = EHOSTUNREACH; /* XXX */ 136131b3783cSHajimu UMEMOTO 136231b3783cSHajimu UMEMOTO *mtup = mtu; 1363f95d4633SHajimu UMEMOTO if (alwaysfragp) 1364f95d4633SHajimu UMEMOTO *alwaysfragp = alwaysfrag; 136531b3783cSHajimu UMEMOTO return (error); 136631b3783cSHajimu UMEMOTO } 136731b3783cSHajimu UMEMOTO 136882cd038dSYoshinobu Inoue /* 136982cd038dSYoshinobu Inoue * IP6 socket option processing. 137082cd038dSYoshinobu Inoue */ 137182cd038dSYoshinobu Inoue int 13721272577eSXin LI ip6_ctloutput(struct socket *so, struct sockopt *sopt) 137382cd038dSYoshinobu Inoue { 137479ba3952SBjoern A. Zeeb int optdatalen, uproto; 1375f95d4633SHajimu UMEMOTO void *optdata; 137633841545SHajimu UMEMOTO struct inpcb *in6p = sotoinpcb(so); 137782cd038dSYoshinobu Inoue int error, optval; 137882cd038dSYoshinobu Inoue int level, op, optname; 137982cd038dSYoshinobu Inoue int optlen; 1380b40ce416SJulian Elischer struct thread *td; 138182cd038dSYoshinobu Inoue 138282cd038dSYoshinobu Inoue level = sopt->sopt_level; 138382cd038dSYoshinobu Inoue op = sopt->sopt_dir; 138482cd038dSYoshinobu Inoue optname = sopt->sopt_name; 138582cd038dSYoshinobu Inoue optlen = sopt->sopt_valsize; 1386b40ce416SJulian Elischer td = sopt->sopt_td; 1387cc29ac7dSRobert Watson error = 0; 1388cc29ac7dSRobert Watson optval = 0; 1389f95d4633SHajimu UMEMOTO uproto = (int)so->so_proto->pr_protocol; 139082cd038dSYoshinobu Inoue 139182cd038dSYoshinobu Inoue if (level == IPPROTO_IPV6) { 139282cd038dSYoshinobu Inoue switch (op) { 139333841545SHajimu UMEMOTO 139482cd038dSYoshinobu Inoue case SOPT_SET: 139582cd038dSYoshinobu Inoue switch (optname) { 1396f95d4633SHajimu UMEMOTO case IPV6_2292PKTOPTIONS: 1397f95d4633SHajimu UMEMOTO #ifdef IPV6_PKTOPTIONS 139882cd038dSYoshinobu Inoue case IPV6_PKTOPTIONS: 1399f95d4633SHajimu UMEMOTO #endif 140082cd038dSYoshinobu Inoue { 140182cd038dSYoshinobu Inoue struct mbuf *m; 140282cd038dSYoshinobu Inoue 140382cd038dSYoshinobu Inoue error = soopt_getm(sopt, &m); /* XXX */ 1404a89ec05eSPeter Wemm if (error != 0) 140582cd038dSYoshinobu Inoue break; 140682cd038dSYoshinobu Inoue error = soopt_mcopyin(sopt, m); /* XXX */ 1407a89ec05eSPeter Wemm if (error != 0) 140882cd038dSYoshinobu Inoue break; 140933841545SHajimu UMEMOTO error = ip6_pcbopts(&in6p->in6p_outputopts, 141033841545SHajimu UMEMOTO m, so, sopt); 141133841545SHajimu UMEMOTO m_freem(m); /* XXX */ 141282cd038dSYoshinobu Inoue break; 141382cd038dSYoshinobu Inoue } 141433841545SHajimu UMEMOTO 141533841545SHajimu UMEMOTO /* 141633841545SHajimu UMEMOTO * Use of some Hop-by-Hop options or some 141733841545SHajimu UMEMOTO * Destination options, might require special 141833841545SHajimu UMEMOTO * privilege. That is, normal applications 141933841545SHajimu UMEMOTO * (without special privilege) might be forbidden 142033841545SHajimu UMEMOTO * from setting certain options in outgoing packets, 142133841545SHajimu UMEMOTO * and might never see certain options in received 142233841545SHajimu UMEMOTO * packets. [RFC 2292 Section 6] 142333841545SHajimu UMEMOTO * KAME specific note: 142433841545SHajimu UMEMOTO * KAME prevents non-privileged users from sending or 142533841545SHajimu UMEMOTO * receiving ANY hbh/dst options in order to avoid 142633841545SHajimu UMEMOTO * overhead of parsing options in the kernel. 142733841545SHajimu UMEMOTO */ 1428f95d4633SHajimu UMEMOTO case IPV6_RECVHOPOPTS: 1429f95d4633SHajimu UMEMOTO case IPV6_RECVDSTOPTS: 1430f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDRDSTOPTS: 143179ba3952SBjoern A. Zeeb if (td != NULL) { 143279ba3952SBjoern A. Zeeb error = priv_check(td, 143379ba3952SBjoern A. Zeeb PRIV_NETINET_SETHDROPTS); 143479ba3952SBjoern A. Zeeb if (error) 1435f95d4633SHajimu UMEMOTO break; 1436f95d4633SHajimu UMEMOTO } 1437f95d4633SHajimu UMEMOTO /* FALLTHROUGH */ 143882cd038dSYoshinobu Inoue case IPV6_UNICAST_HOPS: 1439f95d4633SHajimu UMEMOTO case IPV6_HOPLIMIT: 144082cd038dSYoshinobu Inoue case IPV6_FAITH: 144133841545SHajimu UMEMOTO 1442f95d4633SHajimu UMEMOTO case IPV6_RECVPKTINFO: 1443f95d4633SHajimu UMEMOTO case IPV6_RECVHOPLIMIT: 1444f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDR: 1445f95d4633SHajimu UMEMOTO case IPV6_RECVPATHMTU: 1446f95d4633SHajimu UMEMOTO case IPV6_RECVTCLASS: 144733841545SHajimu UMEMOTO case IPV6_V6ONLY: 1448f95d4633SHajimu UMEMOTO case IPV6_AUTOFLOWLABEL: 1449f44270e7SPawel Jakub Dawidek case IPV6_BINDANY: 1450f44270e7SPawel Jakub Dawidek if (optname == IPV6_BINDANY && td != NULL) { 1451f44270e7SPawel Jakub Dawidek error = priv_check(td, 1452f44270e7SPawel Jakub Dawidek PRIV_NETINET_BINDANY); 1453f44270e7SPawel Jakub Dawidek if (error) 1454f44270e7SPawel Jakub Dawidek break; 1455f44270e7SPawel Jakub Dawidek } 1456f44270e7SPawel Jakub Dawidek 145733841545SHajimu UMEMOTO if (optlen != sizeof(int)) { 145882cd038dSYoshinobu Inoue error = EINVAL; 145933841545SHajimu UMEMOTO break; 146033841545SHajimu UMEMOTO } 146182cd038dSYoshinobu Inoue error = sooptcopyin(sopt, &optval, 146282cd038dSYoshinobu Inoue sizeof optval, sizeof optval); 146382cd038dSYoshinobu Inoue if (error) 146482cd038dSYoshinobu Inoue break; 146582cd038dSYoshinobu Inoue switch (optname) { 146682cd038dSYoshinobu Inoue 146782cd038dSYoshinobu Inoue case IPV6_UNICAST_HOPS: 146882cd038dSYoshinobu Inoue if (optval < -1 || optval >= 256) 146982cd038dSYoshinobu Inoue error = EINVAL; 147082cd038dSYoshinobu Inoue else { 147182cd038dSYoshinobu Inoue /* -1 = kernel default */ 147282cd038dSYoshinobu Inoue in6p->in6p_hops = optval; 1473fc384fa5SBjoern A. Zeeb if ((in6p->inp_vflag & 147482cd038dSYoshinobu Inoue INP_IPV4) != 0) 147582cd038dSYoshinobu Inoue in6p->inp_ip_ttl = optval; 147682cd038dSYoshinobu Inoue } 147782cd038dSYoshinobu Inoue break; 147882cd038dSYoshinobu Inoue #define OPTSET(bit) \ 147933841545SHajimu UMEMOTO do { \ 148082cd038dSYoshinobu Inoue if (optval) \ 1481fc384fa5SBjoern A. Zeeb in6p->inp_flags |= (bit); \ 148282cd038dSYoshinobu Inoue else \ 1483fc384fa5SBjoern A. Zeeb in6p->inp_flags &= ~(bit); \ 14847efe5d92SHajimu UMEMOTO } while (/*CONSTCOND*/ 0) 1485f95d4633SHajimu UMEMOTO #define OPTSET2292(bit) \ 1486f95d4633SHajimu UMEMOTO do { \ 1487fc384fa5SBjoern A. Zeeb in6p->inp_flags |= IN6P_RFC2292; \ 1488f95d4633SHajimu UMEMOTO if (optval) \ 1489fc384fa5SBjoern A. Zeeb in6p->inp_flags |= (bit); \ 1490f95d4633SHajimu UMEMOTO else \ 1491fc384fa5SBjoern A. Zeeb in6p->inp_flags &= ~(bit); \ 1492f95d4633SHajimu UMEMOTO } while (/*CONSTCOND*/ 0) 1493fc384fa5SBjoern A. Zeeb #define OPTBIT(bit) (in6p->inp_flags & (bit) ? 1 : 0) 149482cd038dSYoshinobu Inoue 1495f95d4633SHajimu UMEMOTO case IPV6_RECVPKTINFO: 1496f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1497f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1498f95d4633SHajimu UMEMOTO error = EINVAL; 1499f95d4633SHajimu UMEMOTO break; 1500f95d4633SHajimu UMEMOTO } 1501f95d4633SHajimu UMEMOTO OPTSET(IN6P_PKTINFO); 1502f95d4633SHajimu UMEMOTO break; 1503f95d4633SHajimu UMEMOTO 1504f95d4633SHajimu UMEMOTO case IPV6_HOPLIMIT: 1505f95d4633SHajimu UMEMOTO { 1506f95d4633SHajimu UMEMOTO struct ip6_pktopts **optp; 1507f95d4633SHajimu UMEMOTO 1508f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1509f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1510f95d4633SHajimu UMEMOTO error = EINVAL; 1511f95d4633SHajimu UMEMOTO break; 1512f95d4633SHajimu UMEMOTO } 1513f95d4633SHajimu UMEMOTO optp = &in6p->in6p_outputopts; 1514f95d4633SHajimu UMEMOTO error = ip6_pcbopt(IPV6_HOPLIMIT, 151579ba3952SBjoern A. Zeeb (u_char *)&optval, sizeof(optval), 151679ba3952SBjoern A. Zeeb optp, (td != NULL) ? td->td_ucred : 151779ba3952SBjoern A. Zeeb NULL, uproto); 1518f95d4633SHajimu UMEMOTO break; 1519f95d4633SHajimu UMEMOTO } 1520f95d4633SHajimu UMEMOTO 1521f95d4633SHajimu UMEMOTO case IPV6_RECVHOPLIMIT: 1522f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1523f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1524f95d4633SHajimu UMEMOTO error = EINVAL; 1525f95d4633SHajimu UMEMOTO break; 1526f95d4633SHajimu UMEMOTO } 1527f95d4633SHajimu UMEMOTO OPTSET(IN6P_HOPLIMIT); 1528f95d4633SHajimu UMEMOTO break; 1529f95d4633SHajimu UMEMOTO 1530f95d4633SHajimu UMEMOTO case IPV6_RECVHOPOPTS: 1531f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1532f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1533f95d4633SHajimu UMEMOTO error = EINVAL; 1534f95d4633SHajimu UMEMOTO break; 1535f95d4633SHajimu UMEMOTO } 1536f95d4633SHajimu UMEMOTO OPTSET(IN6P_HOPOPTS); 1537f95d4633SHajimu UMEMOTO break; 1538f95d4633SHajimu UMEMOTO 1539f95d4633SHajimu UMEMOTO case IPV6_RECVDSTOPTS: 1540f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1541f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1542f95d4633SHajimu UMEMOTO error = EINVAL; 1543f95d4633SHajimu UMEMOTO break; 1544f95d4633SHajimu UMEMOTO } 1545f95d4633SHajimu UMEMOTO OPTSET(IN6P_DSTOPTS); 1546f95d4633SHajimu UMEMOTO break; 1547f95d4633SHajimu UMEMOTO 1548f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDRDSTOPTS: 1549f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1550f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1551f95d4633SHajimu UMEMOTO error = EINVAL; 1552f95d4633SHajimu UMEMOTO break; 1553f95d4633SHajimu UMEMOTO } 1554f95d4633SHajimu UMEMOTO OPTSET(IN6P_RTHDRDSTOPTS); 1555f95d4633SHajimu UMEMOTO break; 1556f95d4633SHajimu UMEMOTO 1557f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDR: 1558f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1559f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1560f95d4633SHajimu UMEMOTO error = EINVAL; 1561f95d4633SHajimu UMEMOTO break; 1562f95d4633SHajimu UMEMOTO } 1563f95d4633SHajimu UMEMOTO OPTSET(IN6P_RTHDR); 156482cd038dSYoshinobu Inoue break; 156582cd038dSYoshinobu Inoue 156682cd038dSYoshinobu Inoue case IPV6_FAITH: 156797590249SBjoern A. Zeeb OPTSET(INP_FAITH); 156882cd038dSYoshinobu Inoue break; 156982cd038dSYoshinobu Inoue 1570f95d4633SHajimu UMEMOTO case IPV6_RECVPATHMTU: 1571f95d4633SHajimu UMEMOTO /* 1572f95d4633SHajimu UMEMOTO * We ignore this option for TCP 1573f95d4633SHajimu UMEMOTO * sockets. 157418b35df8SHajimu UMEMOTO * (RFC3542 leaves this case 1575f95d4633SHajimu UMEMOTO * unspecified.) 1576f95d4633SHajimu UMEMOTO */ 1577f95d4633SHajimu UMEMOTO if (uproto != IPPROTO_TCP) 1578f95d4633SHajimu UMEMOTO OPTSET(IN6P_MTU); 1579f95d4633SHajimu UMEMOTO break; 1580f95d4633SHajimu UMEMOTO 158133841545SHajimu UMEMOTO case IPV6_V6ONLY: 158233841545SHajimu UMEMOTO /* 15830554093bSHajimu UMEMOTO * make setsockopt(IPV6_V6ONLY) 15840554093bSHajimu UMEMOTO * available only prior to bind(2). 15850554093bSHajimu UMEMOTO * see ipng mailing list, Jun 22 2001. 15860554093bSHajimu UMEMOTO */ 1587fc384fa5SBjoern A. Zeeb if (in6p->inp_lport || 15887efe5d92SHajimu UMEMOTO !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) { 15890554093bSHajimu UMEMOTO error = EINVAL; 15900554093bSHajimu UMEMOTO break; 15910554093bSHajimu UMEMOTO } 159233841545SHajimu UMEMOTO OPTSET(IN6P_IPV6_V6ONLY); 159312253795SHajimu UMEMOTO if (optval) 1594fc384fa5SBjoern A. Zeeb in6p->inp_vflag &= ~INP_IPV4; 159512253795SHajimu UMEMOTO else 1596fc384fa5SBjoern A. Zeeb in6p->inp_vflag |= INP_IPV4; 159782cd038dSYoshinobu Inoue break; 1598f95d4633SHajimu UMEMOTO case IPV6_RECVTCLASS: 1599f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 XXX */ 1600f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1601f95d4633SHajimu UMEMOTO error = EINVAL; 1602f95d4633SHajimu UMEMOTO break; 1603f95d4633SHajimu UMEMOTO } 1604f95d4633SHajimu UMEMOTO OPTSET(IN6P_TCLASS); 1605f95d4633SHajimu UMEMOTO break; 1606f95d4633SHajimu UMEMOTO case IPV6_AUTOFLOWLABEL: 1607f95d4633SHajimu UMEMOTO OPTSET(IN6P_AUTOFLOWLABEL); 1608f95d4633SHajimu UMEMOTO break; 1609f95d4633SHajimu UMEMOTO 1610f44270e7SPawel Jakub Dawidek case IPV6_BINDANY: 1611f44270e7SPawel Jakub Dawidek OPTSET(INP_BINDANY); 1612f44270e7SPawel Jakub Dawidek break; 161382cd038dSYoshinobu Inoue } 161433841545SHajimu UMEMOTO break; 161533841545SHajimu UMEMOTO 1616f95d4633SHajimu UMEMOTO case IPV6_TCLASS: 1617f95d4633SHajimu UMEMOTO case IPV6_DONTFRAG: 1618f95d4633SHajimu UMEMOTO case IPV6_USE_MIN_MTU: 1619f95d4633SHajimu UMEMOTO case IPV6_PREFER_TEMPADDR: 1620f95d4633SHajimu UMEMOTO if (optlen != sizeof(optval)) { 1621f95d4633SHajimu UMEMOTO error = EINVAL; 1622f95d4633SHajimu UMEMOTO break; 1623f95d4633SHajimu UMEMOTO } 1624f95d4633SHajimu UMEMOTO error = sooptcopyin(sopt, &optval, 1625f95d4633SHajimu UMEMOTO sizeof optval, sizeof optval); 1626f95d4633SHajimu UMEMOTO if (error) 1627f95d4633SHajimu UMEMOTO break; 1628f95d4633SHajimu UMEMOTO { 1629f95d4633SHajimu UMEMOTO struct ip6_pktopts **optp; 1630f95d4633SHajimu UMEMOTO optp = &in6p->in6p_outputopts; 1631f95d4633SHajimu UMEMOTO error = ip6_pcbopt(optname, 163279ba3952SBjoern A. Zeeb (u_char *)&optval, sizeof(optval), 163379ba3952SBjoern A. Zeeb optp, (td != NULL) ? td->td_ucred : 163479ba3952SBjoern A. Zeeb NULL, uproto); 1635f95d4633SHajimu UMEMOTO break; 1636f95d4633SHajimu UMEMOTO } 1637f95d4633SHajimu UMEMOTO 1638f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 1639f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 1640f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 1641f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 1642f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 164333841545SHajimu UMEMOTO /* RFC 2292 */ 164433841545SHajimu UMEMOTO if (optlen != sizeof(int)) { 164533841545SHajimu UMEMOTO error = EINVAL; 164633841545SHajimu UMEMOTO break; 164733841545SHajimu UMEMOTO } 164833841545SHajimu UMEMOTO error = sooptcopyin(sopt, &optval, 164933841545SHajimu UMEMOTO sizeof optval, sizeof optval); 165033841545SHajimu UMEMOTO if (error) 165133841545SHajimu UMEMOTO break; 165233841545SHajimu UMEMOTO switch (optname) { 1653f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 1654f95d4633SHajimu UMEMOTO OPTSET2292(IN6P_PKTINFO); 165533841545SHajimu UMEMOTO break; 1656f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 1657f95d4633SHajimu UMEMOTO OPTSET2292(IN6P_HOPLIMIT); 165833841545SHajimu UMEMOTO break; 1659f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 166033841545SHajimu UMEMOTO /* 166133841545SHajimu UMEMOTO * Check super-user privilege. 166233841545SHajimu UMEMOTO * See comments for IPV6_RECVHOPOPTS. 166333841545SHajimu UMEMOTO */ 166479ba3952SBjoern A. Zeeb if (td != NULL) { 166579ba3952SBjoern A. Zeeb error = priv_check(td, 166679ba3952SBjoern A. Zeeb PRIV_NETINET_SETHDROPTS); 166779ba3952SBjoern A. Zeeb if (error) 166879ba3952SBjoern A. Zeeb return (error); 166979ba3952SBjoern A. Zeeb } 1670f95d4633SHajimu UMEMOTO OPTSET2292(IN6P_HOPOPTS); 167133841545SHajimu UMEMOTO break; 1672f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 167379ba3952SBjoern A. Zeeb if (td != NULL) { 167479ba3952SBjoern A. Zeeb error = priv_check(td, 167579ba3952SBjoern A. Zeeb PRIV_NETINET_SETHDROPTS); 167679ba3952SBjoern A. Zeeb if (error) 167779ba3952SBjoern A. Zeeb return (error); 167879ba3952SBjoern A. Zeeb } 1679f95d4633SHajimu UMEMOTO OPTSET2292(IN6P_DSTOPTS|IN6P_RTHDRDSTOPTS); /* XXX */ 168033841545SHajimu UMEMOTO break; 1681f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 1682f95d4633SHajimu UMEMOTO OPTSET2292(IN6P_RTHDR); 168333841545SHajimu UMEMOTO break; 168482cd038dSYoshinobu Inoue } 168582cd038dSYoshinobu Inoue break; 1686f95d4633SHajimu UMEMOTO case IPV6_PKTINFO: 1687f95d4633SHajimu UMEMOTO case IPV6_HOPOPTS: 1688f95d4633SHajimu UMEMOTO case IPV6_RTHDR: 1689f95d4633SHajimu UMEMOTO case IPV6_DSTOPTS: 1690f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 1691f95d4633SHajimu UMEMOTO case IPV6_NEXTHOP: 1692f95d4633SHajimu UMEMOTO { 169318b35df8SHajimu UMEMOTO /* new advanced API (RFC3542) */ 1694f95d4633SHajimu UMEMOTO u_char *optbuf; 1695e770771aSHajimu UMEMOTO u_char optbuf_storage[MCLBYTES]; 1696f95d4633SHajimu UMEMOTO int optlen; 1697f95d4633SHajimu UMEMOTO struct ip6_pktopts **optp; 1698f95d4633SHajimu UMEMOTO 1699f95d4633SHajimu UMEMOTO /* cannot mix with RFC2292 */ 1700f95d4633SHajimu UMEMOTO if (OPTBIT(IN6P_RFC2292)) { 1701f95d4633SHajimu UMEMOTO error = EINVAL; 1702f95d4633SHajimu UMEMOTO break; 1703f95d4633SHajimu UMEMOTO } 1704f95d4633SHajimu UMEMOTO 1705e770771aSHajimu UMEMOTO /* 1706e770771aSHajimu UMEMOTO * We only ensure valsize is not too large 1707e770771aSHajimu UMEMOTO * here. Further validation will be done 1708e770771aSHajimu UMEMOTO * later. 1709e770771aSHajimu UMEMOTO */ 1710e770771aSHajimu UMEMOTO error = sooptcopyin(sopt, optbuf_storage, 1711e770771aSHajimu UMEMOTO sizeof(optbuf_storage), 0); 1712a5d1aae3SHajimu UMEMOTO if (error) 1713a5d1aae3SHajimu UMEMOTO break; 1714f95d4633SHajimu UMEMOTO optlen = sopt->sopt_valsize; 1715e770771aSHajimu UMEMOTO optbuf = optbuf_storage; 1716f95d4633SHajimu UMEMOTO optp = &in6p->in6p_outputopts; 171779ba3952SBjoern A. Zeeb error = ip6_pcbopt(optname, optbuf, optlen, 171879ba3952SBjoern A. Zeeb optp, (td != NULL) ? td->td_ucred : NULL, 171979ba3952SBjoern A. Zeeb uproto); 1720f95d4633SHajimu UMEMOTO break; 1721f95d4633SHajimu UMEMOTO } 172282cd038dSYoshinobu Inoue #undef OPTSET 172382cd038dSYoshinobu Inoue 172482cd038dSYoshinobu Inoue case IPV6_MULTICAST_IF: 172582cd038dSYoshinobu Inoue case IPV6_MULTICAST_HOPS: 172682cd038dSYoshinobu Inoue case IPV6_MULTICAST_LOOP: 172782cd038dSYoshinobu Inoue case IPV6_JOIN_GROUP: 172882cd038dSYoshinobu Inoue case IPV6_LEAVE_GROUP: 172933cde130SBruce M Simpson case IPV6_MSFILTER: 173033cde130SBruce M Simpson case MCAST_BLOCK_SOURCE: 173133cde130SBruce M Simpson case MCAST_UNBLOCK_SOURCE: 173233cde130SBruce M Simpson case MCAST_JOIN_GROUP: 173333cde130SBruce M Simpson case MCAST_LEAVE_GROUP: 173433cde130SBruce M Simpson case MCAST_JOIN_SOURCE_GROUP: 173533cde130SBruce M Simpson case MCAST_LEAVE_SOURCE_GROUP: 173633cde130SBruce M Simpson error = ip6_setmoptions(in6p, sopt); 173782cd038dSYoshinobu Inoue break; 173882cd038dSYoshinobu Inoue 173982cd038dSYoshinobu Inoue case IPV6_PORTRANGE: 1740686cdd19SJun-ichiro itojun Hagino error = sooptcopyin(sopt, &optval, 1741686cdd19SJun-ichiro itojun Hagino sizeof optval, sizeof optval); 174282cd038dSYoshinobu Inoue if (error) 174382cd038dSYoshinobu Inoue break; 174482cd038dSYoshinobu Inoue 174582cd038dSYoshinobu Inoue switch (optval) { 174682cd038dSYoshinobu Inoue case IPV6_PORTRANGE_DEFAULT: 174797590249SBjoern A. Zeeb in6p->inp_flags &= ~(INP_LOWPORT); 174897590249SBjoern A. Zeeb in6p->inp_flags &= ~(INP_HIGHPORT); 174982cd038dSYoshinobu Inoue break; 175082cd038dSYoshinobu Inoue 175182cd038dSYoshinobu Inoue case IPV6_PORTRANGE_HIGH: 175297590249SBjoern A. Zeeb in6p->inp_flags &= ~(INP_LOWPORT); 175397590249SBjoern A. Zeeb in6p->inp_flags |= INP_HIGHPORT; 175482cd038dSYoshinobu Inoue break; 175582cd038dSYoshinobu Inoue 175682cd038dSYoshinobu Inoue case IPV6_PORTRANGE_LOW: 175797590249SBjoern A. Zeeb in6p->inp_flags &= ~(INP_HIGHPORT); 175897590249SBjoern A. Zeeb in6p->inp_flags |= INP_LOWPORT; 175982cd038dSYoshinobu Inoue break; 176082cd038dSYoshinobu Inoue 176182cd038dSYoshinobu Inoue default: 176282cd038dSYoshinobu Inoue error = EINVAL; 176382cd038dSYoshinobu Inoue break; 176482cd038dSYoshinobu Inoue } 176582cd038dSYoshinobu Inoue break; 176682cd038dSYoshinobu Inoue 1767b2630c29SGeorge V. Neville-Neil #ifdef IPSEC 176882cd038dSYoshinobu Inoue case IPV6_IPSEC_POLICY: 176982cd038dSYoshinobu Inoue { 1770c26fe973SBjoern A. Zeeb caddr_t req; 177182cd038dSYoshinobu Inoue struct mbuf *m; 177282cd038dSYoshinobu Inoue 1773686cdd19SJun-ichiro itojun Hagino if ((error = soopt_getm(sopt, &m)) != 0) /* XXX */ 177482cd038dSYoshinobu Inoue break; 1775686cdd19SJun-ichiro itojun Hagino if ((error = soopt_mcopyin(sopt, m)) != 0) /* XXX */ 177682cd038dSYoshinobu Inoue break; 177782cd038dSYoshinobu Inoue req = mtod(m, caddr_t); 177897aa4a51SBjoern A. Zeeb error = ipsec_set_policy(in6p, optname, req, 1779c26fe973SBjoern A. Zeeb m->m_len, (sopt->sopt_td != NULL) ? 1780c26fe973SBjoern A. Zeeb sopt->sopt_td->td_ucred : NULL); 178182cd038dSYoshinobu Inoue m_freem(m); 178282cd038dSYoshinobu Inoue break; 1783c26fe973SBjoern A. Zeeb } 1784b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */ 178582cd038dSYoshinobu Inoue 178682cd038dSYoshinobu Inoue default: 178782cd038dSYoshinobu Inoue error = ENOPROTOOPT; 178882cd038dSYoshinobu Inoue break; 178982cd038dSYoshinobu Inoue } 179082cd038dSYoshinobu Inoue break; 179182cd038dSYoshinobu Inoue 179282cd038dSYoshinobu Inoue case SOPT_GET: 179382cd038dSYoshinobu Inoue switch (optname) { 179482cd038dSYoshinobu Inoue 1795f95d4633SHajimu UMEMOTO case IPV6_2292PKTOPTIONS: 1796f95d4633SHajimu UMEMOTO #ifdef IPV6_PKTOPTIONS 179782cd038dSYoshinobu Inoue case IPV6_PKTOPTIONS: 1798f95d4633SHajimu UMEMOTO #endif 1799f95d4633SHajimu UMEMOTO /* 1800f95d4633SHajimu UMEMOTO * RFC3542 (effectively) deprecated the 1801f95d4633SHajimu UMEMOTO * semantics of the 2292-style pktoptions. 1802f95d4633SHajimu UMEMOTO * Since it was not reliable in nature (i.e., 1803f95d4633SHajimu UMEMOTO * applications had to expect the lack of some 1804f95d4633SHajimu UMEMOTO * information after all), it would make sense 1805f95d4633SHajimu UMEMOTO * to simplify this part by always returning 1806f95d4633SHajimu UMEMOTO * empty data. 1807f95d4633SHajimu UMEMOTO */ 180882cd038dSYoshinobu Inoue sopt->sopt_valsize = 0; 180982cd038dSYoshinobu Inoue break; 181082cd038dSYoshinobu Inoue 1811f95d4633SHajimu UMEMOTO case IPV6_RECVHOPOPTS: 1812f95d4633SHajimu UMEMOTO case IPV6_RECVDSTOPTS: 1813f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDRDSTOPTS: 181482cd038dSYoshinobu Inoue case IPV6_UNICAST_HOPS: 1815f95d4633SHajimu UMEMOTO case IPV6_RECVPKTINFO: 1816f95d4633SHajimu UMEMOTO case IPV6_RECVHOPLIMIT: 1817f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDR: 1818f95d4633SHajimu UMEMOTO case IPV6_RECVPATHMTU: 181933841545SHajimu UMEMOTO 182082cd038dSYoshinobu Inoue case IPV6_FAITH: 182133841545SHajimu UMEMOTO case IPV6_V6ONLY: 1822fa310a7eSYoshinobu Inoue case IPV6_PORTRANGE: 1823f95d4633SHajimu UMEMOTO case IPV6_RECVTCLASS: 1824f95d4633SHajimu UMEMOTO case IPV6_AUTOFLOWLABEL: 182582cd038dSYoshinobu Inoue switch (optname) { 182682cd038dSYoshinobu Inoue 1827f95d4633SHajimu UMEMOTO case IPV6_RECVHOPOPTS: 1828f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_HOPOPTS); 1829f95d4633SHajimu UMEMOTO break; 1830f95d4633SHajimu UMEMOTO 1831f95d4633SHajimu UMEMOTO case IPV6_RECVDSTOPTS: 1832f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_DSTOPTS); 1833f95d4633SHajimu UMEMOTO break; 1834f95d4633SHajimu UMEMOTO 1835f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDRDSTOPTS: 1836f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_RTHDRDSTOPTS); 1837f95d4633SHajimu UMEMOTO break; 1838f95d4633SHajimu UMEMOTO 183982cd038dSYoshinobu Inoue case IPV6_UNICAST_HOPS: 184082cd038dSYoshinobu Inoue optval = in6p->in6p_hops; 184182cd038dSYoshinobu Inoue break; 184282cd038dSYoshinobu Inoue 1843f95d4633SHajimu UMEMOTO case IPV6_RECVPKTINFO: 1844f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_PKTINFO); 1845f95d4633SHajimu UMEMOTO break; 1846f95d4633SHajimu UMEMOTO 1847f95d4633SHajimu UMEMOTO case IPV6_RECVHOPLIMIT: 1848f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_HOPLIMIT); 1849f95d4633SHajimu UMEMOTO break; 1850f95d4633SHajimu UMEMOTO 1851f95d4633SHajimu UMEMOTO case IPV6_RECVRTHDR: 1852f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_RTHDR); 1853f95d4633SHajimu UMEMOTO break; 1854f95d4633SHajimu UMEMOTO 1855f95d4633SHajimu UMEMOTO case IPV6_RECVPATHMTU: 1856f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_MTU); 185782cd038dSYoshinobu Inoue break; 185882cd038dSYoshinobu Inoue 185982cd038dSYoshinobu Inoue case IPV6_FAITH: 186097590249SBjoern A. Zeeb optval = OPTBIT(INP_FAITH); 186182cd038dSYoshinobu Inoue break; 186282cd038dSYoshinobu Inoue 186333841545SHajimu UMEMOTO case IPV6_V6ONLY: 1864854d3b19SHajimu UMEMOTO optval = OPTBIT(IN6P_IPV6_V6ONLY); 186582cd038dSYoshinobu Inoue break; 186682cd038dSYoshinobu Inoue 186782cd038dSYoshinobu Inoue case IPV6_PORTRANGE: 186882cd038dSYoshinobu Inoue { 186982cd038dSYoshinobu Inoue int flags; 1870fc384fa5SBjoern A. Zeeb flags = in6p->inp_flags; 187197590249SBjoern A. Zeeb if (flags & INP_HIGHPORT) 187282cd038dSYoshinobu Inoue optval = IPV6_PORTRANGE_HIGH; 187397590249SBjoern A. Zeeb else if (flags & INP_LOWPORT) 187482cd038dSYoshinobu Inoue optval = IPV6_PORTRANGE_LOW; 187582cd038dSYoshinobu Inoue else 187682cd038dSYoshinobu Inoue optval = 0; 187782cd038dSYoshinobu Inoue break; 187882cd038dSYoshinobu Inoue } 1879f95d4633SHajimu UMEMOTO case IPV6_RECVTCLASS: 1880f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_TCLASS); 1881f95d4633SHajimu UMEMOTO break; 1882f95d4633SHajimu UMEMOTO 1883f95d4633SHajimu UMEMOTO case IPV6_AUTOFLOWLABEL: 1884f95d4633SHajimu UMEMOTO optval = OPTBIT(IN6P_AUTOFLOWLABEL); 1885f95d4633SHajimu UMEMOTO break; 1886f44270e7SPawel Jakub Dawidek 1887f44270e7SPawel Jakub Dawidek case IPV6_BINDANY: 1888f44270e7SPawel Jakub Dawidek optval = OPTBIT(INP_BINDANY); 1889f44270e7SPawel Jakub Dawidek break; 189082cd038dSYoshinobu Inoue } 1891f95d4633SHajimu UMEMOTO if (error) 1892f95d4633SHajimu UMEMOTO break; 189382cd038dSYoshinobu Inoue error = sooptcopyout(sopt, &optval, 189482cd038dSYoshinobu Inoue sizeof optval); 189582cd038dSYoshinobu Inoue break; 189682cd038dSYoshinobu Inoue 1897f95d4633SHajimu UMEMOTO case IPV6_PATHMTU: 1898f95d4633SHajimu UMEMOTO { 1899f95d4633SHajimu UMEMOTO u_long pmtu = 0; 1900f95d4633SHajimu UMEMOTO struct ip6_mtuinfo mtuinfo; 190197d8d152SAndre Oppermann struct route_in6 sro; 190297d8d152SAndre Oppermann 190397d8d152SAndre Oppermann bzero(&sro, sizeof(sro)); 1904f95d4633SHajimu UMEMOTO 1905f95d4633SHajimu UMEMOTO if (!(so->so_state & SS_ISCONNECTED)) 1906f95d4633SHajimu UMEMOTO return (ENOTCONN); 1907f95d4633SHajimu UMEMOTO /* 1908f95d4633SHajimu UMEMOTO * XXX: we dot not consider the case of source 1909f95d4633SHajimu UMEMOTO * routing, or optional information to specify 1910f95d4633SHajimu UMEMOTO * the outgoing interface. 1911f95d4633SHajimu UMEMOTO */ 191297d8d152SAndre Oppermann error = ip6_getpmtu(&sro, NULL, NULL, 1913f95d4633SHajimu UMEMOTO &in6p->in6p_faddr, &pmtu, NULL); 191497d8d152SAndre Oppermann if (sro.ro_rt) 191597d8d152SAndre Oppermann RTFREE(sro.ro_rt); 1916f95d4633SHajimu UMEMOTO if (error) 1917f95d4633SHajimu UMEMOTO break; 1918f95d4633SHajimu UMEMOTO if (pmtu > IPV6_MAXPACKET) 1919f95d4633SHajimu UMEMOTO pmtu = IPV6_MAXPACKET; 1920f95d4633SHajimu UMEMOTO 1921f95d4633SHajimu UMEMOTO bzero(&mtuinfo, sizeof(mtuinfo)); 1922f95d4633SHajimu UMEMOTO mtuinfo.ip6m_mtu = (u_int32_t)pmtu; 1923f95d4633SHajimu UMEMOTO optdata = (void *)&mtuinfo; 1924f95d4633SHajimu UMEMOTO optdatalen = sizeof(mtuinfo); 1925f95d4633SHajimu UMEMOTO error = sooptcopyout(sopt, optdata, 1926f95d4633SHajimu UMEMOTO optdatalen); 1927f95d4633SHajimu UMEMOTO break; 1928f95d4633SHajimu UMEMOTO } 1929f95d4633SHajimu UMEMOTO 1930f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 1931f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 1932f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 1933f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 1934f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 193533841545SHajimu UMEMOTO switch (optname) { 1936f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 193733841545SHajimu UMEMOTO optval = OPTBIT(IN6P_PKTINFO); 193833841545SHajimu UMEMOTO break; 1939f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 194033841545SHajimu UMEMOTO optval = OPTBIT(IN6P_HOPLIMIT); 194133841545SHajimu UMEMOTO break; 1942f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 194333841545SHajimu UMEMOTO optval = OPTBIT(IN6P_HOPOPTS); 194433841545SHajimu UMEMOTO break; 1945f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 194633841545SHajimu UMEMOTO optval = OPTBIT(IN6P_RTHDR); 194733841545SHajimu UMEMOTO break; 1948f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 194933841545SHajimu UMEMOTO optval = OPTBIT(IN6P_DSTOPTS|IN6P_RTHDRDSTOPTS); 195033841545SHajimu UMEMOTO break; 195133841545SHajimu UMEMOTO } 195233841545SHajimu UMEMOTO error = sooptcopyout(sopt, &optval, 195333841545SHajimu UMEMOTO sizeof optval); 195433841545SHajimu UMEMOTO break; 1955f95d4633SHajimu UMEMOTO case IPV6_PKTINFO: 1956f95d4633SHajimu UMEMOTO case IPV6_HOPOPTS: 1957f95d4633SHajimu UMEMOTO case IPV6_RTHDR: 1958f95d4633SHajimu UMEMOTO case IPV6_DSTOPTS: 1959f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 1960f95d4633SHajimu UMEMOTO case IPV6_NEXTHOP: 1961f95d4633SHajimu UMEMOTO case IPV6_TCLASS: 1962f95d4633SHajimu UMEMOTO case IPV6_DONTFRAG: 1963f95d4633SHajimu UMEMOTO case IPV6_USE_MIN_MTU: 1964f95d4633SHajimu UMEMOTO case IPV6_PREFER_TEMPADDR: 1965f95d4633SHajimu UMEMOTO error = ip6_getpcbopt(in6p->in6p_outputopts, 1966f95d4633SHajimu UMEMOTO optname, sopt); 1967f95d4633SHajimu UMEMOTO break; 196833841545SHajimu UMEMOTO 196982cd038dSYoshinobu Inoue case IPV6_MULTICAST_IF: 197082cd038dSYoshinobu Inoue case IPV6_MULTICAST_HOPS: 197182cd038dSYoshinobu Inoue case IPV6_MULTICAST_LOOP: 197233cde130SBruce M Simpson case IPV6_MSFILTER: 197333cde130SBruce M Simpson error = ip6_getmoptions(in6p, sopt); 197482cd038dSYoshinobu Inoue break; 197582cd038dSYoshinobu Inoue 1976b2630c29SGeorge V. Neville-Neil #ifdef IPSEC 197782cd038dSYoshinobu Inoue case IPV6_IPSEC_POLICY: 197882cd038dSYoshinobu Inoue { 1979f63e7634SYoshinobu Inoue caddr_t req = NULL; 1980686cdd19SJun-ichiro itojun Hagino size_t len = 0; 1981686cdd19SJun-ichiro itojun Hagino struct mbuf *m = NULL; 1982686cdd19SJun-ichiro itojun Hagino struct mbuf **mp = &m; 1983f95d4633SHajimu UMEMOTO size_t ovalsize = sopt->sopt_valsize; 1984f95d4633SHajimu UMEMOTO caddr_t oval = (caddr_t)sopt->sopt_val; 1985f63e7634SYoshinobu Inoue 1986686cdd19SJun-ichiro itojun Hagino error = soopt_getm(sopt, &m); /* XXX */ 1987a46f7e7cSHajimu UMEMOTO if (error != 0) 1988686cdd19SJun-ichiro itojun Hagino break; 1989686cdd19SJun-ichiro itojun Hagino error = soopt_mcopyin(sopt, m); /* XXX */ 1990a46f7e7cSHajimu UMEMOTO if (error != 0) 1991686cdd19SJun-ichiro itojun Hagino break; 1992f95d4633SHajimu UMEMOTO sopt->sopt_valsize = ovalsize; 1993f95d4633SHajimu UMEMOTO sopt->sopt_val = oval; 1994686cdd19SJun-ichiro itojun Hagino if (m) { 199582cd038dSYoshinobu Inoue req = mtod(m, caddr_t); 1996686cdd19SJun-ichiro itojun Hagino len = m->m_len; 1997686cdd19SJun-ichiro itojun Hagino } 199897aa4a51SBjoern A. Zeeb error = ipsec_get_policy(in6p, req, len, mp); 199982cd038dSYoshinobu Inoue if (error == 0) 200082cd038dSYoshinobu Inoue error = soopt_mcopyout(sopt, m); /* XXX */ 200133841545SHajimu UMEMOTO if (error == 0 && m) 200282cd038dSYoshinobu Inoue m_freem(m); 200382cd038dSYoshinobu Inoue break; 200482cd038dSYoshinobu Inoue } 2005b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */ 200682cd038dSYoshinobu Inoue 200782cd038dSYoshinobu Inoue default: 200882cd038dSYoshinobu Inoue error = ENOPROTOOPT; 200982cd038dSYoshinobu Inoue break; 201082cd038dSYoshinobu Inoue } 201182cd038dSYoshinobu Inoue break; 201282cd038dSYoshinobu Inoue } 2013f95d4633SHajimu UMEMOTO } else { /* level != IPPROTO_IPV6 */ 201482cd038dSYoshinobu Inoue error = EINVAL; 201582cd038dSYoshinobu Inoue } 201682cd038dSYoshinobu Inoue return (error); 201782cd038dSYoshinobu Inoue } 201882cd038dSYoshinobu Inoue 201902b9a206SHajimu UMEMOTO int 20201272577eSXin LI ip6_raw_ctloutput(struct socket *so, struct sockopt *sopt) 202102b9a206SHajimu UMEMOTO { 202202b9a206SHajimu UMEMOTO int error = 0, optval, optlen; 202302b9a206SHajimu UMEMOTO const int icmp6off = offsetof(struct icmp6_hdr, icmp6_cksum); 2024fc384fa5SBjoern A. Zeeb struct inpcb *in6p = sotoinpcb(so); 202502b9a206SHajimu UMEMOTO int level, op, optname; 202602b9a206SHajimu UMEMOTO 202702b9a206SHajimu UMEMOTO level = sopt->sopt_level; 202802b9a206SHajimu UMEMOTO op = sopt->sopt_dir; 202902b9a206SHajimu UMEMOTO optname = sopt->sopt_name; 203002b9a206SHajimu UMEMOTO optlen = sopt->sopt_valsize; 203102b9a206SHajimu UMEMOTO 203202b9a206SHajimu UMEMOTO if (level != IPPROTO_IPV6) { 203302b9a206SHajimu UMEMOTO return (EINVAL); 203402b9a206SHajimu UMEMOTO } 203502b9a206SHajimu UMEMOTO 203602b9a206SHajimu UMEMOTO switch (optname) { 203702b9a206SHajimu UMEMOTO case IPV6_CHECKSUM: 203802b9a206SHajimu UMEMOTO /* 203902b9a206SHajimu UMEMOTO * For ICMPv6 sockets, no modification allowed for checksum 204002b9a206SHajimu UMEMOTO * offset, permit "no change" values to help existing apps. 204102b9a206SHajimu UMEMOTO * 204218b35df8SHajimu UMEMOTO * RFC3542 says: "An attempt to set IPV6_CHECKSUM 204302b9a206SHajimu UMEMOTO * for an ICMPv6 socket will fail." 204418b35df8SHajimu UMEMOTO * The current behavior does not meet RFC3542. 204502b9a206SHajimu UMEMOTO */ 204602b9a206SHajimu UMEMOTO switch (op) { 204702b9a206SHajimu UMEMOTO case SOPT_SET: 204802b9a206SHajimu UMEMOTO if (optlen != sizeof(int)) { 204902b9a206SHajimu UMEMOTO error = EINVAL; 205002b9a206SHajimu UMEMOTO break; 205102b9a206SHajimu UMEMOTO } 205202b9a206SHajimu UMEMOTO error = sooptcopyin(sopt, &optval, sizeof(optval), 205302b9a206SHajimu UMEMOTO sizeof(optval)); 205402b9a206SHajimu UMEMOTO if (error) 205502b9a206SHajimu UMEMOTO break; 205602b9a206SHajimu UMEMOTO if ((optval % 2) != 0) { 205702b9a206SHajimu UMEMOTO /* the API assumes even offset values */ 205802b9a206SHajimu UMEMOTO error = EINVAL; 205902b9a206SHajimu UMEMOTO } else if (so->so_proto->pr_protocol == 206002b9a206SHajimu UMEMOTO IPPROTO_ICMPV6) { 206102b9a206SHajimu UMEMOTO if (optval != icmp6off) 206202b9a206SHajimu UMEMOTO error = EINVAL; 206302b9a206SHajimu UMEMOTO } else 206402b9a206SHajimu UMEMOTO in6p->in6p_cksum = optval; 206502b9a206SHajimu UMEMOTO break; 206602b9a206SHajimu UMEMOTO 206702b9a206SHajimu UMEMOTO case SOPT_GET: 206802b9a206SHajimu UMEMOTO if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) 206902b9a206SHajimu UMEMOTO optval = icmp6off; 207002b9a206SHajimu UMEMOTO else 207102b9a206SHajimu UMEMOTO optval = in6p->in6p_cksum; 207202b9a206SHajimu UMEMOTO 207302b9a206SHajimu UMEMOTO error = sooptcopyout(sopt, &optval, sizeof(optval)); 207402b9a206SHajimu UMEMOTO break; 207502b9a206SHajimu UMEMOTO 207602b9a206SHajimu UMEMOTO default: 207702b9a206SHajimu UMEMOTO error = EINVAL; 207802b9a206SHajimu UMEMOTO break; 207902b9a206SHajimu UMEMOTO } 208002b9a206SHajimu UMEMOTO break; 208102b9a206SHajimu UMEMOTO 208202b9a206SHajimu UMEMOTO default: 208302b9a206SHajimu UMEMOTO error = ENOPROTOOPT; 208402b9a206SHajimu UMEMOTO break; 208502b9a206SHajimu UMEMOTO } 208602b9a206SHajimu UMEMOTO 208702b9a206SHajimu UMEMOTO return (error); 208802b9a206SHajimu UMEMOTO } 208902b9a206SHajimu UMEMOTO 209082cd038dSYoshinobu Inoue /* 209133841545SHajimu UMEMOTO * Set up IP6 options in pcb for insertion in output packets or 209233841545SHajimu UMEMOTO * specifying behavior of outgoing packets. 209382cd038dSYoshinobu Inoue */ 209482cd038dSYoshinobu Inoue static int 20951272577eSXin LI ip6_pcbopts(struct ip6_pktopts **pktopt, struct mbuf *m, 20961272577eSXin LI struct socket *so, struct sockopt *sopt) 209782cd038dSYoshinobu Inoue { 209833841545SHajimu UMEMOTO struct ip6_pktopts *opt = *pktopt; 209982cd038dSYoshinobu Inoue int error = 0; 2100b40ce416SJulian Elischer struct thread *td = sopt->sopt_td; 210182cd038dSYoshinobu Inoue 210282cd038dSYoshinobu Inoue /* turn off any old options. */ 210382cd038dSYoshinobu Inoue if (opt) { 210433841545SHajimu UMEMOTO #ifdef DIAGNOSTIC 210533841545SHajimu UMEMOTO if (opt->ip6po_pktinfo || opt->ip6po_nexthop || 210633841545SHajimu UMEMOTO opt->ip6po_hbh || opt->ip6po_dest1 || opt->ip6po_dest2 || 210733841545SHajimu UMEMOTO opt->ip6po_rhinfo.ip6po_rhi_rthdr) 210833841545SHajimu UMEMOTO printf("ip6_pcbopts: all specified options are cleared.\n"); 210933841545SHajimu UMEMOTO #endif 2110f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, -1); 211182cd038dSYoshinobu Inoue } else 2112a163d034SWarner Losh opt = malloc(sizeof(*opt), M_IP6OPT, M_WAITOK); 211333841545SHajimu UMEMOTO *pktopt = NULL; 211482cd038dSYoshinobu Inoue 211582cd038dSYoshinobu Inoue if (!m || m->m_len == 0) { 211682cd038dSYoshinobu Inoue /* 211735f6695bSHajimu UMEMOTO * Only turning off any previous options, regardless of 211835f6695bSHajimu UMEMOTO * whether the opt is just created or given. 211982cd038dSYoshinobu Inoue */ 212082cd038dSYoshinobu Inoue free(opt, M_IP6OPT); 212182cd038dSYoshinobu Inoue return (0); 212282cd038dSYoshinobu Inoue } 212382cd038dSYoshinobu Inoue 212482cd038dSYoshinobu Inoue /* set options specified by user. */ 212579ba3952SBjoern A. Zeeb if ((error = ip6_setpktopts(m, opt, NULL, (td != NULL) ? 212679ba3952SBjoern A. Zeeb td->td_ucred : NULL, so->so_proto->pr_protocol)) != 0) { 2127f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, -1); /* XXX: discard all options */ 212835f6695bSHajimu UMEMOTO free(opt, M_IP6OPT); 212982cd038dSYoshinobu Inoue return (error); 213082cd038dSYoshinobu Inoue } 213182cd038dSYoshinobu Inoue *pktopt = opt; 213282cd038dSYoshinobu Inoue return (0); 213382cd038dSYoshinobu Inoue } 213482cd038dSYoshinobu Inoue 213582cd038dSYoshinobu Inoue /* 213633841545SHajimu UMEMOTO * initialize ip6_pktopts. beware that there are non-zero default values in 213733841545SHajimu UMEMOTO * the struct. 213833841545SHajimu UMEMOTO */ 213933841545SHajimu UMEMOTO void 21401272577eSXin LI ip6_initpktopts(struct ip6_pktopts *opt) 214133841545SHajimu UMEMOTO { 214233841545SHajimu UMEMOTO 214333841545SHajimu UMEMOTO bzero(opt, sizeof(*opt)); 214433841545SHajimu UMEMOTO opt->ip6po_hlim = -1; /* -1 means default hop limit */ 2145f95d4633SHajimu UMEMOTO opt->ip6po_tclass = -1; /* -1 means default traffic class */ 2146f95d4633SHajimu UMEMOTO opt->ip6po_minmtu = IP6PO_MINMTU_MCASTONLY; 2147f95d4633SHajimu UMEMOTO opt->ip6po_prefer_tempaddr = IP6PO_TEMPADDR_SYSTEM; 2148f95d4633SHajimu UMEMOTO } 2149f95d4633SHajimu UMEMOTO 2150f95d4633SHajimu UMEMOTO static int 21511272577eSXin LI ip6_pcbopt(int optname, u_char *buf, int len, struct ip6_pktopts **pktopt, 215279ba3952SBjoern A. Zeeb struct ucred *cred, int uproto) 2153f95d4633SHajimu UMEMOTO { 2154f95d4633SHajimu UMEMOTO struct ip6_pktopts *opt; 2155f95d4633SHajimu UMEMOTO 2156f95d4633SHajimu UMEMOTO if (*pktopt == NULL) { 2157f95d4633SHajimu UMEMOTO *pktopt = malloc(sizeof(struct ip6_pktopts), M_IP6OPT, 2158f95d4633SHajimu UMEMOTO M_WAITOK); 2159d5e3406dSHajimu UMEMOTO ip6_initpktopts(*pktopt); 2160f95d4633SHajimu UMEMOTO } 2161f95d4633SHajimu UMEMOTO opt = *pktopt; 2162f95d4633SHajimu UMEMOTO 216379ba3952SBjoern A. Zeeb return (ip6_setpktopt(optname, buf, len, opt, cred, 1, 0, uproto)); 2164f95d4633SHajimu UMEMOTO } 2165f95d4633SHajimu UMEMOTO 2166f95d4633SHajimu UMEMOTO static int 21671272577eSXin LI ip6_getpcbopt(struct ip6_pktopts *pktopt, int optname, struct sockopt *sopt) 2168f95d4633SHajimu UMEMOTO { 2169f95d4633SHajimu UMEMOTO void *optdata = NULL; 2170f95d4633SHajimu UMEMOTO int optdatalen = 0; 2171f95d4633SHajimu UMEMOTO struct ip6_ext *ip6e; 2172f95d4633SHajimu UMEMOTO int error = 0; 2173f95d4633SHajimu UMEMOTO struct in6_pktinfo null_pktinfo; 2174f95d4633SHajimu UMEMOTO int deftclass = 0, on; 2175f95d4633SHajimu UMEMOTO int defminmtu = IP6PO_MINMTU_MCASTONLY; 2176f95d4633SHajimu UMEMOTO int defpreftemp = IP6PO_TEMPADDR_SYSTEM; 2177f95d4633SHajimu UMEMOTO 2178f95d4633SHajimu UMEMOTO switch (optname) { 2179f95d4633SHajimu UMEMOTO case IPV6_PKTINFO: 2180f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_pktinfo) 2181f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_pktinfo; 2182f95d4633SHajimu UMEMOTO else { 2183f95d4633SHajimu UMEMOTO /* XXX: we don't have to do this every time... */ 2184f95d4633SHajimu UMEMOTO bzero(&null_pktinfo, sizeof(null_pktinfo)); 2185f95d4633SHajimu UMEMOTO optdata = (void *)&null_pktinfo; 2186f95d4633SHajimu UMEMOTO } 2187f95d4633SHajimu UMEMOTO optdatalen = sizeof(struct in6_pktinfo); 2188f95d4633SHajimu UMEMOTO break; 2189f95d4633SHajimu UMEMOTO case IPV6_TCLASS: 2190f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_tclass >= 0) 2191f95d4633SHajimu UMEMOTO optdata = (void *)&pktopt->ip6po_tclass; 2192f95d4633SHajimu UMEMOTO else 2193f95d4633SHajimu UMEMOTO optdata = (void *)&deftclass; 2194f95d4633SHajimu UMEMOTO optdatalen = sizeof(int); 2195f95d4633SHajimu UMEMOTO break; 2196f95d4633SHajimu UMEMOTO case IPV6_HOPOPTS: 2197f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_hbh) { 2198f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_hbh; 2199f95d4633SHajimu UMEMOTO ip6e = (struct ip6_ext *)pktopt->ip6po_hbh; 2200f95d4633SHajimu UMEMOTO optdatalen = (ip6e->ip6e_len + 1) << 3; 2201f95d4633SHajimu UMEMOTO } 2202f95d4633SHajimu UMEMOTO break; 2203f95d4633SHajimu UMEMOTO case IPV6_RTHDR: 2204f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_rthdr) { 2205f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_rthdr; 2206f95d4633SHajimu UMEMOTO ip6e = (struct ip6_ext *)pktopt->ip6po_rthdr; 2207f95d4633SHajimu UMEMOTO optdatalen = (ip6e->ip6e_len + 1) << 3; 2208f95d4633SHajimu UMEMOTO } 2209f95d4633SHajimu UMEMOTO break; 2210f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 2211f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_dest1) { 2212f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_dest1; 2213f95d4633SHajimu UMEMOTO ip6e = (struct ip6_ext *)pktopt->ip6po_dest1; 2214f95d4633SHajimu UMEMOTO optdatalen = (ip6e->ip6e_len + 1) << 3; 2215f95d4633SHajimu UMEMOTO } 2216f95d4633SHajimu UMEMOTO break; 2217f95d4633SHajimu UMEMOTO case IPV6_DSTOPTS: 2218f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_dest2) { 2219f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_dest2; 2220f95d4633SHajimu UMEMOTO ip6e = (struct ip6_ext *)pktopt->ip6po_dest2; 2221f95d4633SHajimu UMEMOTO optdatalen = (ip6e->ip6e_len + 1) << 3; 2222f95d4633SHajimu UMEMOTO } 2223f95d4633SHajimu UMEMOTO break; 2224f95d4633SHajimu UMEMOTO case IPV6_NEXTHOP: 2225f95d4633SHajimu UMEMOTO if (pktopt && pktopt->ip6po_nexthop) { 2226f95d4633SHajimu UMEMOTO optdata = (void *)pktopt->ip6po_nexthop; 2227f95d4633SHajimu UMEMOTO optdatalen = pktopt->ip6po_nexthop->sa_len; 2228f95d4633SHajimu UMEMOTO } 2229f95d4633SHajimu UMEMOTO break; 2230f95d4633SHajimu UMEMOTO case IPV6_USE_MIN_MTU: 2231f95d4633SHajimu UMEMOTO if (pktopt) 2232f95d4633SHajimu UMEMOTO optdata = (void *)&pktopt->ip6po_minmtu; 2233f95d4633SHajimu UMEMOTO else 2234f95d4633SHajimu UMEMOTO optdata = (void *)&defminmtu; 2235f95d4633SHajimu UMEMOTO optdatalen = sizeof(int); 2236f95d4633SHajimu UMEMOTO break; 2237f95d4633SHajimu UMEMOTO case IPV6_DONTFRAG: 2238f95d4633SHajimu UMEMOTO if (pktopt && ((pktopt->ip6po_flags) & IP6PO_DONTFRAG)) 2239f95d4633SHajimu UMEMOTO on = 1; 2240f95d4633SHajimu UMEMOTO else 2241f95d4633SHajimu UMEMOTO on = 0; 2242f95d4633SHajimu UMEMOTO optdata = (void *)&on; 2243f95d4633SHajimu UMEMOTO optdatalen = sizeof(on); 2244f95d4633SHajimu UMEMOTO break; 2245f95d4633SHajimu UMEMOTO case IPV6_PREFER_TEMPADDR: 2246f95d4633SHajimu UMEMOTO if (pktopt) 2247f95d4633SHajimu UMEMOTO optdata = (void *)&pktopt->ip6po_prefer_tempaddr; 2248f95d4633SHajimu UMEMOTO else 2249f95d4633SHajimu UMEMOTO optdata = (void *)&defpreftemp; 2250f95d4633SHajimu UMEMOTO optdatalen = sizeof(int); 2251f95d4633SHajimu UMEMOTO break; 2252f95d4633SHajimu UMEMOTO default: /* should not happen */ 2253f95d4633SHajimu UMEMOTO #ifdef DIAGNOSTIC 2254f95d4633SHajimu UMEMOTO panic("ip6_getpcbopt: unexpected option\n"); 2255f95d4633SHajimu UMEMOTO #endif 2256f95d4633SHajimu UMEMOTO return (ENOPROTOOPT); 2257f95d4633SHajimu UMEMOTO } 2258f95d4633SHajimu UMEMOTO 2259f95d4633SHajimu UMEMOTO error = sooptcopyout(sopt, optdata, optdatalen); 2260f95d4633SHajimu UMEMOTO 2261f95d4633SHajimu UMEMOTO return (error); 226233841545SHajimu UMEMOTO } 226333841545SHajimu UMEMOTO 226433841545SHajimu UMEMOTO void 22651272577eSXin LI ip6_clearpktopts(struct ip6_pktopts *pktopt, int optname) 226633841545SHajimu UMEMOTO { 2267289b28bdSHajimu UMEMOTO if (pktopt == NULL) 2268289b28bdSHajimu UMEMOTO return; 2269289b28bdSHajimu UMEMOTO 2270f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_PKTINFO) { 2271885adbfaSHajimu UMEMOTO if (pktopt->ip6po_pktinfo) 227233841545SHajimu UMEMOTO free(pktopt->ip6po_pktinfo, M_IP6OPT); 227333841545SHajimu UMEMOTO pktopt->ip6po_pktinfo = NULL; 227433841545SHajimu UMEMOTO } 2275f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_HOPLIMIT) 227633841545SHajimu UMEMOTO pktopt->ip6po_hlim = -1; 2277f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_TCLASS) 2278f95d4633SHajimu UMEMOTO pktopt->ip6po_tclass = -1; 2279f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_NEXTHOP) { 2280f95d4633SHajimu UMEMOTO if (pktopt->ip6po_nextroute.ro_rt) { 2281f95d4633SHajimu UMEMOTO RTFREE(pktopt->ip6po_nextroute.ro_rt); 2282f95d4633SHajimu UMEMOTO pktopt->ip6po_nextroute.ro_rt = NULL; 2283f95d4633SHajimu UMEMOTO } 2284885adbfaSHajimu UMEMOTO if (pktopt->ip6po_nexthop) 228533841545SHajimu UMEMOTO free(pktopt->ip6po_nexthop, M_IP6OPT); 228633841545SHajimu UMEMOTO pktopt->ip6po_nexthop = NULL; 228733841545SHajimu UMEMOTO } 2288f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_HOPOPTS) { 2289885adbfaSHajimu UMEMOTO if (pktopt->ip6po_hbh) 229033841545SHajimu UMEMOTO free(pktopt->ip6po_hbh, M_IP6OPT); 229133841545SHajimu UMEMOTO pktopt->ip6po_hbh = NULL; 229233841545SHajimu UMEMOTO } 2293f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_RTHDRDSTOPTS) { 2294885adbfaSHajimu UMEMOTO if (pktopt->ip6po_dest1) 229533841545SHajimu UMEMOTO free(pktopt->ip6po_dest1, M_IP6OPT); 229633841545SHajimu UMEMOTO pktopt->ip6po_dest1 = NULL; 229733841545SHajimu UMEMOTO } 2298f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_RTHDR) { 2299885adbfaSHajimu UMEMOTO if (pktopt->ip6po_rhinfo.ip6po_rhi_rthdr) 230033841545SHajimu UMEMOTO free(pktopt->ip6po_rhinfo.ip6po_rhi_rthdr, M_IP6OPT); 230133841545SHajimu UMEMOTO pktopt->ip6po_rhinfo.ip6po_rhi_rthdr = NULL; 230233841545SHajimu UMEMOTO if (pktopt->ip6po_route.ro_rt) { 230333841545SHajimu UMEMOTO RTFREE(pktopt->ip6po_route.ro_rt); 230433841545SHajimu UMEMOTO pktopt->ip6po_route.ro_rt = NULL; 230533841545SHajimu UMEMOTO } 230633841545SHajimu UMEMOTO } 2307f95d4633SHajimu UMEMOTO if (optname == -1 || optname == IPV6_DSTOPTS) { 2308885adbfaSHajimu UMEMOTO if (pktopt->ip6po_dest2) 230933841545SHajimu UMEMOTO free(pktopt->ip6po_dest2, M_IP6OPT); 231033841545SHajimu UMEMOTO pktopt->ip6po_dest2 = NULL; 231133841545SHajimu UMEMOTO } 231233841545SHajimu UMEMOTO } 231333841545SHajimu UMEMOTO 231433841545SHajimu UMEMOTO #define PKTOPT_EXTHDRCPY(type) \ 231533841545SHajimu UMEMOTO do {\ 231633841545SHajimu UMEMOTO if (src->type) {\ 23177efe5d92SHajimu UMEMOTO int hlen = (((struct ip6_ext *)src->type)->ip6e_len + 1) << 3;\ 231833841545SHajimu UMEMOTO dst->type = malloc(hlen, M_IP6OPT, canwait);\ 231933841545SHajimu UMEMOTO if (dst->type == NULL && canwait == M_NOWAIT)\ 232033841545SHajimu UMEMOTO goto bad;\ 232133841545SHajimu UMEMOTO bcopy(src->type, dst->type, hlen);\ 232233841545SHajimu UMEMOTO }\ 23237efe5d92SHajimu UMEMOTO } while (/*CONSTCOND*/ 0) 232433841545SHajimu UMEMOTO 2325885adbfaSHajimu UMEMOTO static int 23261272577eSXin LI copypktopts(struct ip6_pktopts *dst, struct ip6_pktopts *src, int canwait) 232733841545SHajimu UMEMOTO { 2328885adbfaSHajimu UMEMOTO if (dst == NULL || src == NULL) { 232933841545SHajimu UMEMOTO printf("ip6_clearpktopts: invalid argument\n"); 2330885adbfaSHajimu UMEMOTO return (EINVAL); 233133841545SHajimu UMEMOTO } 233233841545SHajimu UMEMOTO 233333841545SHajimu UMEMOTO dst->ip6po_hlim = src->ip6po_hlim; 2334f95d4633SHajimu UMEMOTO dst->ip6po_tclass = src->ip6po_tclass; 2335f95d4633SHajimu UMEMOTO dst->ip6po_flags = src->ip6po_flags; 233633841545SHajimu UMEMOTO if (src->ip6po_pktinfo) { 233733841545SHajimu UMEMOTO dst->ip6po_pktinfo = malloc(sizeof(*dst->ip6po_pktinfo), 233833841545SHajimu UMEMOTO M_IP6OPT, canwait); 23392cb64cb2SGeorge V. Neville-Neil if (dst->ip6po_pktinfo == NULL) 234033841545SHajimu UMEMOTO goto bad; 234133841545SHajimu UMEMOTO *dst->ip6po_pktinfo = *src->ip6po_pktinfo; 234233841545SHajimu UMEMOTO } 234333841545SHajimu UMEMOTO if (src->ip6po_nexthop) { 234433841545SHajimu UMEMOTO dst->ip6po_nexthop = malloc(src->ip6po_nexthop->sa_len, 234533841545SHajimu UMEMOTO M_IP6OPT, canwait); 2346403cbcf5SGeorge V. Neville-Neil if (dst->ip6po_nexthop == NULL) 234733841545SHajimu UMEMOTO goto bad; 234833841545SHajimu UMEMOTO bcopy(src->ip6po_nexthop, dst->ip6po_nexthop, 234933841545SHajimu UMEMOTO src->ip6po_nexthop->sa_len); 235033841545SHajimu UMEMOTO } 235133841545SHajimu UMEMOTO PKTOPT_EXTHDRCPY(ip6po_hbh); 235233841545SHajimu UMEMOTO PKTOPT_EXTHDRCPY(ip6po_dest1); 235333841545SHajimu UMEMOTO PKTOPT_EXTHDRCPY(ip6po_dest2); 235433841545SHajimu UMEMOTO PKTOPT_EXTHDRCPY(ip6po_rthdr); /* not copy the cached route */ 2355885adbfaSHajimu UMEMOTO return (0); 235633841545SHajimu UMEMOTO 235733841545SHajimu UMEMOTO bad: 2358016fb9d9SMike Makonnen ip6_clearpktopts(dst, -1); 2359885adbfaSHajimu UMEMOTO return (ENOBUFS); 2360885adbfaSHajimu UMEMOTO } 2361885adbfaSHajimu UMEMOTO #undef PKTOPT_EXTHDRCPY 2362885adbfaSHajimu UMEMOTO 2363885adbfaSHajimu UMEMOTO struct ip6_pktopts * 23641272577eSXin LI ip6_copypktopts(struct ip6_pktopts *src, int canwait) 2365885adbfaSHajimu UMEMOTO { 2366885adbfaSHajimu UMEMOTO int error; 2367885adbfaSHajimu UMEMOTO struct ip6_pktopts *dst; 2368885adbfaSHajimu UMEMOTO 2369885adbfaSHajimu UMEMOTO dst = malloc(sizeof(*dst), M_IP6OPT, canwait); 23702cb64cb2SGeorge V. Neville-Neil if (dst == NULL) 2371885adbfaSHajimu UMEMOTO return (NULL); 2372885adbfaSHajimu UMEMOTO ip6_initpktopts(dst); 2373885adbfaSHajimu UMEMOTO 2374885adbfaSHajimu UMEMOTO if ((error = copypktopts(dst, src, canwait)) != 0) { 237535f6695bSHajimu UMEMOTO free(dst, M_IP6OPT); 237633841545SHajimu UMEMOTO return (NULL); 237733841545SHajimu UMEMOTO } 2378885adbfaSHajimu UMEMOTO 2379885adbfaSHajimu UMEMOTO return (dst); 2380885adbfaSHajimu UMEMOTO } 238133841545SHajimu UMEMOTO 238233841545SHajimu UMEMOTO void 23831272577eSXin LI ip6_freepcbopts(struct ip6_pktopts *pktopt) 238433841545SHajimu UMEMOTO { 238533841545SHajimu UMEMOTO if (pktopt == NULL) 238633841545SHajimu UMEMOTO return; 238733841545SHajimu UMEMOTO 2388f95d4633SHajimu UMEMOTO ip6_clearpktopts(pktopt, -1); 238933841545SHajimu UMEMOTO 239033841545SHajimu UMEMOTO free(pktopt, M_IP6OPT); 239133841545SHajimu UMEMOTO } 239233841545SHajimu UMEMOTO 239333841545SHajimu UMEMOTO /* 239482cd038dSYoshinobu Inoue * Set IPv6 outgoing packet options based on advanced API. 239582cd038dSYoshinobu Inoue */ 239682cd038dSYoshinobu Inoue int 23971272577eSXin LI ip6_setpktopts(struct mbuf *control, struct ip6_pktopts *opt, 239879ba3952SBjoern A. Zeeb struct ip6_pktopts *stickyopt, struct ucred *cred, int uproto) 239982cd038dSYoshinobu Inoue { 240033841545SHajimu UMEMOTO struct cmsghdr *cm = 0; 240182cd038dSYoshinobu Inoue 24028507acb1SHajimu UMEMOTO if (control == NULL || opt == NULL) 240382cd038dSYoshinobu Inoue return (EINVAL); 240482cd038dSYoshinobu Inoue 2405885adbfaSHajimu UMEMOTO ip6_initpktopts(opt); 2406f95d4633SHajimu UMEMOTO if (stickyopt) { 2407885adbfaSHajimu UMEMOTO int error; 2408885adbfaSHajimu UMEMOTO 2409f95d4633SHajimu UMEMOTO /* 2410f95d4633SHajimu UMEMOTO * If stickyopt is provided, make a local copy of the options 2411f95d4633SHajimu UMEMOTO * for this particular packet, then override them by ancillary 2412f95d4633SHajimu UMEMOTO * objects. 2413885adbfaSHajimu UMEMOTO * XXX: copypktopts() does not copy the cached route to a next 2414885adbfaSHajimu UMEMOTO * hop (if any). This is not very good in terms of efficiency, 2415885adbfaSHajimu UMEMOTO * but we can allow this since this option should be rarely 2416885adbfaSHajimu UMEMOTO * used. 2417f95d4633SHajimu UMEMOTO */ 2418885adbfaSHajimu UMEMOTO if ((error = copypktopts(opt, stickyopt, M_NOWAIT)) != 0) 2419885adbfaSHajimu UMEMOTO return (error); 2420f95d4633SHajimu UMEMOTO } 242182cd038dSYoshinobu Inoue 242282cd038dSYoshinobu Inoue /* 242382cd038dSYoshinobu Inoue * XXX: Currently, we assume all the optional information is stored 242482cd038dSYoshinobu Inoue * in a single mbuf. 242582cd038dSYoshinobu Inoue */ 242682cd038dSYoshinobu Inoue if (control->m_next) 242782cd038dSYoshinobu Inoue return (EINVAL); 242882cd038dSYoshinobu Inoue 24296f4da201SBjoern A. Zeeb for (; control->m_len > 0; control->m_data += CMSG_ALIGN(cm->cmsg_len), 243033841545SHajimu UMEMOTO control->m_len -= CMSG_ALIGN(cm->cmsg_len)) { 2431f95d4633SHajimu UMEMOTO int error; 2432f95d4633SHajimu UMEMOTO 2433f95d4633SHajimu UMEMOTO if (control->m_len < CMSG_LEN(0)) 2434f95d4633SHajimu UMEMOTO return (EINVAL); 2435f95d4633SHajimu UMEMOTO 243682cd038dSYoshinobu Inoue cm = mtod(control, struct cmsghdr *); 243782cd038dSYoshinobu Inoue if (cm->cmsg_len == 0 || cm->cmsg_len > control->m_len) 243882cd038dSYoshinobu Inoue return (EINVAL); 243982cd038dSYoshinobu Inoue if (cm->cmsg_level != IPPROTO_IPV6) 244082cd038dSYoshinobu Inoue continue; 244182cd038dSYoshinobu Inoue 2442d5e3406dSHajimu UMEMOTO error = ip6_setpktopt(cm->cmsg_type, CMSG_DATA(cm), 244379ba3952SBjoern A. Zeeb cm->cmsg_len - CMSG_LEN(0), opt, cred, 0, 1, uproto); 2444f95d4633SHajimu UMEMOTO if (error) 2445f95d4633SHajimu UMEMOTO return (error); 2446f95d4633SHajimu UMEMOTO } 244782cd038dSYoshinobu Inoue 2448f95d4633SHajimu UMEMOTO return (0); 2449f95d4633SHajimu UMEMOTO } 2450f95d4633SHajimu UMEMOTO 2451f95d4633SHajimu UMEMOTO /* 2452f95d4633SHajimu UMEMOTO * Set a particular packet option, as a sticky option or an ancillary data 2453f95d4633SHajimu UMEMOTO * item. "len" can be 0 only when it's a sticky option. 2454f95d4633SHajimu UMEMOTO * We have 4 cases of combination of "sticky" and "cmsg": 2455f95d4633SHajimu UMEMOTO * "sticky=0, cmsg=0": impossible 245618b35df8SHajimu UMEMOTO * "sticky=0, cmsg=1": RFC2292 or RFC3542 ancillary data 245718b35df8SHajimu UMEMOTO * "sticky=1, cmsg=0": RFC3542 socket option 2458f95d4633SHajimu UMEMOTO * "sticky=1, cmsg=1": RFC2292 socket option 2459f95d4633SHajimu UMEMOTO */ 2460f95d4633SHajimu UMEMOTO static int 24611272577eSXin LI ip6_setpktopt(int optname, u_char *buf, int len, struct ip6_pktopts *opt, 246279ba3952SBjoern A. Zeeb struct ucred *cred, int sticky, int cmsg, int uproto) 2463f95d4633SHajimu UMEMOTO { 2464f95d4633SHajimu UMEMOTO int minmtupolicy, preftemp; 246579ba3952SBjoern A. Zeeb int error; 2466f95d4633SHajimu UMEMOTO 2467f95d4633SHajimu UMEMOTO if (!sticky && !cmsg) { 2468f95d4633SHajimu UMEMOTO #ifdef DIAGNOSTIC 2469d5e3406dSHajimu UMEMOTO printf("ip6_setpktopt: impossible case\n"); 2470f95d4633SHajimu UMEMOTO #endif 2471f95d4633SHajimu UMEMOTO return (EINVAL); 2472f95d4633SHajimu UMEMOTO } 2473f95d4633SHajimu UMEMOTO 2474f95d4633SHajimu UMEMOTO /* 2475f95d4633SHajimu UMEMOTO * IPV6_2292xxx is for backward compatibility to RFC2292, and should 247618b35df8SHajimu UMEMOTO * not be specified in the context of RFC3542. Conversely, 247718b35df8SHajimu UMEMOTO * RFC3542 types should not be specified in the context of RFC2292. 2478f95d4633SHajimu UMEMOTO */ 2479f95d4633SHajimu UMEMOTO if (!cmsg) { 2480f95d4633SHajimu UMEMOTO switch (optname) { 2481f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 2482f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 2483f95d4633SHajimu UMEMOTO case IPV6_2292NEXTHOP: 2484f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 2485f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 2486f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 2487f95d4633SHajimu UMEMOTO case IPV6_2292PKTOPTIONS: 2488f95d4633SHajimu UMEMOTO return (ENOPROTOOPT); 2489f95d4633SHajimu UMEMOTO } 2490f95d4633SHajimu UMEMOTO } 2491f95d4633SHajimu UMEMOTO if (sticky && cmsg) { 2492f95d4633SHajimu UMEMOTO switch (optname) { 2493f95d4633SHajimu UMEMOTO case IPV6_PKTINFO: 2494f95d4633SHajimu UMEMOTO case IPV6_HOPLIMIT: 2495f95d4633SHajimu UMEMOTO case IPV6_NEXTHOP: 2496f95d4633SHajimu UMEMOTO case IPV6_HOPOPTS: 2497f95d4633SHajimu UMEMOTO case IPV6_DSTOPTS: 2498f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 2499f95d4633SHajimu UMEMOTO case IPV6_RTHDR: 2500f95d4633SHajimu UMEMOTO case IPV6_USE_MIN_MTU: 2501f95d4633SHajimu UMEMOTO case IPV6_DONTFRAG: 2502f95d4633SHajimu UMEMOTO case IPV6_TCLASS: 250318b35df8SHajimu UMEMOTO case IPV6_PREFER_TEMPADDR: /* XXX: not an RFC3542 option */ 2504f95d4633SHajimu UMEMOTO return (ENOPROTOOPT); 2505f95d4633SHajimu UMEMOTO } 2506f95d4633SHajimu UMEMOTO } 2507f95d4633SHajimu UMEMOTO 2508f95d4633SHajimu UMEMOTO switch (optname) { 2509f95d4633SHajimu UMEMOTO case IPV6_2292PKTINFO: 2510f95d4633SHajimu UMEMOTO case IPV6_PKTINFO: 2511f95d4633SHajimu UMEMOTO { 2512f95d4633SHajimu UMEMOTO struct ifnet *ifp = NULL; 2513f95d4633SHajimu UMEMOTO struct in6_pktinfo *pktinfo; 2514f95d4633SHajimu UMEMOTO 2515f95d4633SHajimu UMEMOTO if (len != sizeof(struct in6_pktinfo)) 2516f95d4633SHajimu UMEMOTO return (EINVAL); 2517f95d4633SHajimu UMEMOTO 2518f95d4633SHajimu UMEMOTO pktinfo = (struct in6_pktinfo *)buf; 2519f95d4633SHajimu UMEMOTO 2520f95d4633SHajimu UMEMOTO /* 2521f95d4633SHajimu UMEMOTO * An application can clear any sticky IPV6_PKTINFO option by 2522f95d4633SHajimu UMEMOTO * doing a "regular" setsockopt with ipi6_addr being 2523f95d4633SHajimu UMEMOTO * in6addr_any and ipi6_ifindex being zero. 2524f95d4633SHajimu UMEMOTO * [RFC 3542, Section 6] 2525f95d4633SHajimu UMEMOTO */ 2526f95d4633SHajimu UMEMOTO if (optname == IPV6_PKTINFO && opt->ip6po_pktinfo && 2527f95d4633SHajimu UMEMOTO pktinfo->ipi6_ifindex == 0 && 2528f95d4633SHajimu UMEMOTO IN6_IS_ADDR_UNSPECIFIED(&pktinfo->ipi6_addr)) { 2529f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, optname); 2530f95d4633SHajimu UMEMOTO break; 2531f95d4633SHajimu UMEMOTO } 2532f95d4633SHajimu UMEMOTO 2533f95d4633SHajimu UMEMOTO if (uproto == IPPROTO_TCP && optname == IPV6_PKTINFO && 2534f95d4633SHajimu UMEMOTO sticky && !IN6_IS_ADDR_UNSPECIFIED(&pktinfo->ipi6_addr)) { 2535f95d4633SHajimu UMEMOTO return (EINVAL); 2536f95d4633SHajimu UMEMOTO } 2537f95d4633SHajimu UMEMOTO 2538f95d4633SHajimu UMEMOTO /* validate the interface index if specified. */ 2539603724d3SBjoern A. Zeeb if (pktinfo->ipi6_ifindex > V_if_index || 2540f95d4633SHajimu UMEMOTO pktinfo->ipi6_ifindex < 0) { 2541f95d4633SHajimu UMEMOTO return (ENXIO); 2542f95d4633SHajimu UMEMOTO } 2543f95d4633SHajimu UMEMOTO if (pktinfo->ipi6_ifindex) { 2544f95d4633SHajimu UMEMOTO ifp = ifnet_byindex(pktinfo->ipi6_ifindex); 2545f95d4633SHajimu UMEMOTO if (ifp == NULL) 254682cd038dSYoshinobu Inoue return (ENXIO); 254782cd038dSYoshinobu Inoue } 254882cd038dSYoshinobu Inoue 254933841545SHajimu UMEMOTO /* 2550f95d4633SHajimu UMEMOTO * We store the address anyway, and let in6_selectsrc() 2551f95d4633SHajimu UMEMOTO * validate the specified address. This is because ipi6_addr 2552f95d4633SHajimu UMEMOTO * may not have enough information about its scope zone, and 2553f95d4633SHajimu UMEMOTO * we may need additional information (such as outgoing 2554f95d4633SHajimu UMEMOTO * interface or the scope zone of a destination address) to 2555f95d4633SHajimu UMEMOTO * disambiguate the scope. 2556f95d4633SHajimu UMEMOTO * XXX: the delay of the validation may confuse the 2557f95d4633SHajimu UMEMOTO * application when it is used as a sticky option. 255833841545SHajimu UMEMOTO */ 2559f95d4633SHajimu UMEMOTO if (opt->ip6po_pktinfo == NULL) { 2560f95d4633SHajimu UMEMOTO opt->ip6po_pktinfo = malloc(sizeof(*pktinfo), 2561885adbfaSHajimu UMEMOTO M_IP6OPT, M_NOWAIT); 2562885adbfaSHajimu UMEMOTO if (opt->ip6po_pktinfo == NULL) 2563885adbfaSHajimu UMEMOTO return (ENOBUFS); 256482cd038dSYoshinobu Inoue } 2565f95d4633SHajimu UMEMOTO bcopy(pktinfo, opt->ip6po_pktinfo, sizeof(*pktinfo)); 256682cd038dSYoshinobu Inoue break; 2567f95d4633SHajimu UMEMOTO } 256882cd038dSYoshinobu Inoue 2569f95d4633SHajimu UMEMOTO case IPV6_2292HOPLIMIT: 257082cd038dSYoshinobu Inoue case IPV6_HOPLIMIT: 2571f95d4633SHajimu UMEMOTO { 2572f95d4633SHajimu UMEMOTO int *hlimp; 2573f95d4633SHajimu UMEMOTO 2574f95d4633SHajimu UMEMOTO /* 2575f95d4633SHajimu UMEMOTO * RFC 3542 deprecated the usage of sticky IPV6_HOPLIMIT 2576f95d4633SHajimu UMEMOTO * to simplify the ordering among hoplimit options. 2577f95d4633SHajimu UMEMOTO */ 2578f95d4633SHajimu UMEMOTO if (optname == IPV6_HOPLIMIT && sticky) 2579f95d4633SHajimu UMEMOTO return (ENOPROTOOPT); 2580f95d4633SHajimu UMEMOTO 2581f95d4633SHajimu UMEMOTO if (len != sizeof(int)) 2582f95d4633SHajimu UMEMOTO return (EINVAL); 2583f95d4633SHajimu UMEMOTO hlimp = (int *)buf; 2584f95d4633SHajimu UMEMOTO if (*hlimp < -1 || *hlimp > 255) 258582cd038dSYoshinobu Inoue return (EINVAL); 258682cd038dSYoshinobu Inoue 2587f95d4633SHajimu UMEMOTO opt->ip6po_hlim = *hlimp; 258882cd038dSYoshinobu Inoue break; 2589f95d4633SHajimu UMEMOTO } 259082cd038dSYoshinobu Inoue 2591f95d4633SHajimu UMEMOTO case IPV6_TCLASS: 2592f95d4633SHajimu UMEMOTO { 2593f95d4633SHajimu UMEMOTO int tclass; 2594f95d4633SHajimu UMEMOTO 2595f95d4633SHajimu UMEMOTO if (len != sizeof(int)) 2596f95d4633SHajimu UMEMOTO return (EINVAL); 2597f95d4633SHajimu UMEMOTO tclass = *(int *)buf; 2598f95d4633SHajimu UMEMOTO if (tclass < -1 || tclass > 255) 2599f95d4633SHajimu UMEMOTO return (EINVAL); 2600f95d4633SHajimu UMEMOTO 2601f95d4633SHajimu UMEMOTO opt->ip6po_tclass = tclass; 2602f95d4633SHajimu UMEMOTO break; 2603f95d4633SHajimu UMEMOTO } 2604f95d4633SHajimu UMEMOTO 2605f95d4633SHajimu UMEMOTO case IPV6_2292NEXTHOP: 260682cd038dSYoshinobu Inoue case IPV6_NEXTHOP: 260779ba3952SBjoern A. Zeeb if (cred != NULL) { 260879ba3952SBjoern A. Zeeb error = priv_check_cred(cred, 260979ba3952SBjoern A. Zeeb PRIV_NETINET_SETHDROPTS, 0); 261079ba3952SBjoern A. Zeeb if (error) 261179ba3952SBjoern A. Zeeb return (error); 261279ba3952SBjoern A. Zeeb } 261333841545SHajimu UMEMOTO 2614f95d4633SHajimu UMEMOTO if (len == 0) { /* just remove the option */ 2615f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_NEXTHOP); 2616f95d4633SHajimu UMEMOTO break; 2617f95d4633SHajimu UMEMOTO } 2618f95d4633SHajimu UMEMOTO 261933841545SHajimu UMEMOTO /* check if cmsg_len is large enough for sa_len */ 2620f95d4633SHajimu UMEMOTO if (len < sizeof(struct sockaddr) || len < *buf) 262182cd038dSYoshinobu Inoue return (EINVAL); 262282cd038dSYoshinobu Inoue 2623f95d4633SHajimu UMEMOTO switch (((struct sockaddr *)buf)->sa_family) { 2624f95d4633SHajimu UMEMOTO case AF_INET6: 2625f95d4633SHajimu UMEMOTO { 2626f95d4633SHajimu UMEMOTO struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *)buf; 2627f95d4633SHajimu UMEMOTO int error; 2628f95d4633SHajimu UMEMOTO 2629f95d4633SHajimu UMEMOTO if (sa6->sin6_len != sizeof(struct sockaddr_in6)) 2630f95d4633SHajimu UMEMOTO return (EINVAL); 2631f95d4633SHajimu UMEMOTO 2632f95d4633SHajimu UMEMOTO if (IN6_IS_ADDR_UNSPECIFIED(&sa6->sin6_addr) || 2633f95d4633SHajimu UMEMOTO IN6_IS_ADDR_MULTICAST(&sa6->sin6_addr)) { 2634f95d4633SHajimu UMEMOTO return (EINVAL); 2635f95d4633SHajimu UMEMOTO } 2636603724d3SBjoern A. Zeeb if ((error = sa6_embedscope(sa6, V_ip6_use_defzone)) 2637f95d4633SHajimu UMEMOTO != 0) { 2638f95d4633SHajimu UMEMOTO return (error); 2639f95d4633SHajimu UMEMOTO } 2640f95d4633SHajimu UMEMOTO break; 2641f95d4633SHajimu UMEMOTO } 2642f95d4633SHajimu UMEMOTO case AF_LINK: /* should eventually be supported */ 2643f95d4633SHajimu UMEMOTO default: 2644f95d4633SHajimu UMEMOTO return (EAFNOSUPPORT); 2645f95d4633SHajimu UMEMOTO } 2646f95d4633SHajimu UMEMOTO 2647f95d4633SHajimu UMEMOTO /* turn off the previous option, then set the new option. */ 2648f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_NEXTHOP); 2649743eee66SSUZUKI Shinsuke opt->ip6po_nexthop = malloc(*buf, M_IP6OPT, M_NOWAIT); 2650743eee66SSUZUKI Shinsuke if (opt->ip6po_nexthop == NULL) 2651743eee66SSUZUKI Shinsuke return (ENOBUFS); 2652f95d4633SHajimu UMEMOTO bcopy(buf, opt->ip6po_nexthop, *buf); 265382cd038dSYoshinobu Inoue break; 265482cd038dSYoshinobu Inoue 2655f95d4633SHajimu UMEMOTO case IPV6_2292HOPOPTS: 265682cd038dSYoshinobu Inoue case IPV6_HOPOPTS: 265733841545SHajimu UMEMOTO { 265833841545SHajimu UMEMOTO struct ip6_hbh *hbh; 265933841545SHajimu UMEMOTO int hbhlen; 266033841545SHajimu UMEMOTO 2661f95d4633SHajimu UMEMOTO /* 2662f95d4633SHajimu UMEMOTO * XXX: We don't allow a non-privileged user to set ANY HbH 2663f95d4633SHajimu UMEMOTO * options, since per-option restriction has too much 2664f95d4633SHajimu UMEMOTO * overhead. 2665f95d4633SHajimu UMEMOTO */ 266679ba3952SBjoern A. Zeeb if (cred != NULL) { 266779ba3952SBjoern A. Zeeb error = priv_check_cred(cred, 266879ba3952SBjoern A. Zeeb PRIV_NETINET_SETHDROPTS, 0); 266979ba3952SBjoern A. Zeeb if (error) 267079ba3952SBjoern A. Zeeb return (error); 267179ba3952SBjoern A. Zeeb } 2672f95d4633SHajimu UMEMOTO 2673f95d4633SHajimu UMEMOTO if (len == 0) { 2674f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_HOPOPTS); 2675f95d4633SHajimu UMEMOTO break; /* just remove the option */ 2676f95d4633SHajimu UMEMOTO } 2677f95d4633SHajimu UMEMOTO 2678f95d4633SHajimu UMEMOTO /* message length validation */ 2679f95d4633SHajimu UMEMOTO if (len < sizeof(struct ip6_hbh)) 268082cd038dSYoshinobu Inoue return (EINVAL); 2681f95d4633SHajimu UMEMOTO hbh = (struct ip6_hbh *)buf; 268233841545SHajimu UMEMOTO hbhlen = (hbh->ip6h_len + 1) << 3; 2683f95d4633SHajimu UMEMOTO if (len != hbhlen) 268482cd038dSYoshinobu Inoue return (EINVAL); 268533841545SHajimu UMEMOTO 2686f95d4633SHajimu UMEMOTO /* turn off the previous option, then set the new option. */ 2687f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_HOPOPTS); 2688743eee66SSUZUKI Shinsuke opt->ip6po_hbh = malloc(hbhlen, M_IP6OPT, M_NOWAIT); 2689743eee66SSUZUKI Shinsuke if (opt->ip6po_hbh == NULL) 2690743eee66SSUZUKI Shinsuke return (ENOBUFS); 269133841545SHajimu UMEMOTO bcopy(hbh, opt->ip6po_hbh, hbhlen); 2692f95d4633SHajimu UMEMOTO 269382cd038dSYoshinobu Inoue break; 269433841545SHajimu UMEMOTO } 269582cd038dSYoshinobu Inoue 2696f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 269782cd038dSYoshinobu Inoue case IPV6_DSTOPTS: 2698f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 269933841545SHajimu UMEMOTO { 2700f95d4633SHajimu UMEMOTO struct ip6_dest *dest, **newdest = NULL; 270133841545SHajimu UMEMOTO int destlen; 270233841545SHajimu UMEMOTO 270379ba3952SBjoern A. Zeeb if (cred != NULL) { /* XXX: see the comment for IPV6_HOPOPTS */ 270479ba3952SBjoern A. Zeeb error = priv_check_cred(cred, 270579ba3952SBjoern A. Zeeb PRIV_NETINET_SETHDROPTS, 0); 270679ba3952SBjoern A. Zeeb if (error) 270779ba3952SBjoern A. Zeeb return (error); 270879ba3952SBjoern A. Zeeb } 2709f95d4633SHajimu UMEMOTO 2710f95d4633SHajimu UMEMOTO if (len == 0) { 2711f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, optname); 2712f95d4633SHajimu UMEMOTO break; /* just remove the option */ 2713f95d4633SHajimu UMEMOTO } 2714f95d4633SHajimu UMEMOTO 2715f95d4633SHajimu UMEMOTO /* message length validation */ 2716f95d4633SHajimu UMEMOTO if (len < sizeof(struct ip6_dest)) 271782cd038dSYoshinobu Inoue return (EINVAL); 2718f95d4633SHajimu UMEMOTO dest = (struct ip6_dest *)buf; 271933841545SHajimu UMEMOTO destlen = (dest->ip6d_len + 1) << 3; 2720f95d4633SHajimu UMEMOTO if (len != destlen) 272133841545SHajimu UMEMOTO return (EINVAL); 272282cd038dSYoshinobu Inoue 272382cd038dSYoshinobu Inoue /* 2724f95d4633SHajimu UMEMOTO * Determine the position that the destination options header 2725f95d4633SHajimu UMEMOTO * should be inserted; before or after the routing header. 2726f95d4633SHajimu UMEMOTO */ 2727f95d4633SHajimu UMEMOTO switch (optname) { 2728f95d4633SHajimu UMEMOTO case IPV6_2292DSTOPTS: 2729f95d4633SHajimu UMEMOTO /* 2730f95d4633SHajimu UMEMOTO * The old advacned API is ambiguous on this point. 2731f95d4633SHajimu UMEMOTO * Our approach is to determine the position based 2732f95d4633SHajimu UMEMOTO * according to the existence of a routing header. 2733f95d4633SHajimu UMEMOTO * Note, however, that this depends on the order of the 2734f95d4633SHajimu UMEMOTO * extension headers in the ancillary data; the 1st 2735f95d4633SHajimu UMEMOTO * part of the destination options header must appear 2736f95d4633SHajimu UMEMOTO * before the routing header in the ancillary data, 2737f95d4633SHajimu UMEMOTO * too. 273818b35df8SHajimu UMEMOTO * RFC3542 solved the ambiguity by introducing 2739f95d4633SHajimu UMEMOTO * separate ancillary data or option types. 274082cd038dSYoshinobu Inoue */ 274133841545SHajimu UMEMOTO if (opt->ip6po_rthdr == NULL) 274233841545SHajimu UMEMOTO newdest = &opt->ip6po_dest1; 274333841545SHajimu UMEMOTO else 274433841545SHajimu UMEMOTO newdest = &opt->ip6po_dest2; 2745f95d4633SHajimu UMEMOTO break; 2746f95d4633SHajimu UMEMOTO case IPV6_RTHDRDSTOPTS: 2747f95d4633SHajimu UMEMOTO newdest = &opt->ip6po_dest1; 2748f95d4633SHajimu UMEMOTO break; 2749f95d4633SHajimu UMEMOTO case IPV6_DSTOPTS: 2750f95d4633SHajimu UMEMOTO newdest = &opt->ip6po_dest2; 2751f95d4633SHajimu UMEMOTO break; 2752f95d4633SHajimu UMEMOTO } 275333841545SHajimu UMEMOTO 2754f95d4633SHajimu UMEMOTO /* turn off the previous option, then set the new option. */ 2755f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, optname); 2756743eee66SSUZUKI Shinsuke *newdest = malloc(destlen, M_IP6OPT, M_NOWAIT); 2757fc4c8258SRobert Watson if (*newdest == NULL) 2758743eee66SSUZUKI Shinsuke return (ENOBUFS); 275933841545SHajimu UMEMOTO bcopy(dest, *newdest, destlen); 276033841545SHajimu UMEMOTO 276182cd038dSYoshinobu Inoue break; 276233841545SHajimu UMEMOTO } 276382cd038dSYoshinobu Inoue 2764f95d4633SHajimu UMEMOTO case IPV6_2292RTHDR: 276582cd038dSYoshinobu Inoue case IPV6_RTHDR: 276633841545SHajimu UMEMOTO { 276733841545SHajimu UMEMOTO struct ip6_rthdr *rth; 276833841545SHajimu UMEMOTO int rthlen; 276933841545SHajimu UMEMOTO 2770f95d4633SHajimu UMEMOTO if (len == 0) { 2771f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_RTHDR); 2772f95d4633SHajimu UMEMOTO break; /* just remove the option */ 2773f95d4633SHajimu UMEMOTO } 2774f95d4633SHajimu UMEMOTO 2775f95d4633SHajimu UMEMOTO /* message length validation */ 2776f95d4633SHajimu UMEMOTO if (len < sizeof(struct ip6_rthdr)) 277782cd038dSYoshinobu Inoue return (EINVAL); 2778f95d4633SHajimu UMEMOTO rth = (struct ip6_rthdr *)buf; 277933841545SHajimu UMEMOTO rthlen = (rth->ip6r_len + 1) << 3; 2780f95d4633SHajimu UMEMOTO if (len != rthlen) 278182cd038dSYoshinobu Inoue return (EINVAL); 278233841545SHajimu UMEMOTO 278333841545SHajimu UMEMOTO switch (rth->ip6r_type) { 278482cd038dSYoshinobu Inoue case IPV6_RTHDR_TYPE_0: 2785f95d4633SHajimu UMEMOTO if (rth->ip6r_len == 0) /* must contain one addr */ 278633841545SHajimu UMEMOTO return (EINVAL); 2787f95d4633SHajimu UMEMOTO if (rth->ip6r_len % 2) /* length must be even */ 278833841545SHajimu UMEMOTO return (EINVAL); 278933841545SHajimu UMEMOTO if (rth->ip6r_len / 2 != rth->ip6r_segleft) 279082cd038dSYoshinobu Inoue return (EINVAL); 279182cd038dSYoshinobu Inoue break; 279282cd038dSYoshinobu Inoue default: 279333841545SHajimu UMEMOTO return (EINVAL); /* not supported */ 279482cd038dSYoshinobu Inoue } 279533841545SHajimu UMEMOTO 2796f95d4633SHajimu UMEMOTO /* turn off the previous option */ 2797f95d4633SHajimu UMEMOTO ip6_clearpktopts(opt, IPV6_RTHDR); 2798743eee66SSUZUKI Shinsuke opt->ip6po_rthdr = malloc(rthlen, M_IP6OPT, M_NOWAIT); 2799743eee66SSUZUKI Shinsuke if (opt->ip6po_rthdr == NULL) 2800743eee66SSUZUKI Shinsuke return (ENOBUFS); 280133841545SHajimu UMEMOTO bcopy(rth, opt->ip6po_rthdr, rthlen); 280233841545SHajimu UMEMOTO 280382cd038dSYoshinobu Inoue break; 280433841545SHajimu UMEMOTO } 280582cd038dSYoshinobu Inoue 2806f95d4633SHajimu UMEMOTO case IPV6_USE_MIN_MTU: 2807f95d4633SHajimu UMEMOTO if (len != sizeof(int)) 2808f95d4633SHajimu UMEMOTO return (EINVAL); 2809f95d4633SHajimu UMEMOTO minmtupolicy = *(int *)buf; 2810f95d4633SHajimu UMEMOTO if (minmtupolicy != IP6PO_MINMTU_MCASTONLY && 2811f95d4633SHajimu UMEMOTO minmtupolicy != IP6PO_MINMTU_DISABLE && 2812f95d4633SHajimu UMEMOTO minmtupolicy != IP6PO_MINMTU_ALL) { 2813f95d4633SHajimu UMEMOTO return (EINVAL); 2814f95d4633SHajimu UMEMOTO } 2815f95d4633SHajimu UMEMOTO opt->ip6po_minmtu = minmtupolicy; 2816f95d4633SHajimu UMEMOTO break; 2817f95d4633SHajimu UMEMOTO 2818f95d4633SHajimu UMEMOTO case IPV6_DONTFRAG: 2819f95d4633SHajimu UMEMOTO if (len != sizeof(int)) 2820f95d4633SHajimu UMEMOTO return (EINVAL); 2821f95d4633SHajimu UMEMOTO 2822f95d4633SHajimu UMEMOTO if (uproto == IPPROTO_TCP || *(int *)buf == 0) { 2823f95d4633SHajimu UMEMOTO /* 2824f95d4633SHajimu UMEMOTO * we ignore this option for TCP sockets. 282518b35df8SHajimu UMEMOTO * (RFC3542 leaves this case unspecified.) 2826f95d4633SHajimu UMEMOTO */ 2827f95d4633SHajimu UMEMOTO opt->ip6po_flags &= ~IP6PO_DONTFRAG; 2828f95d4633SHajimu UMEMOTO } else 2829f95d4633SHajimu UMEMOTO opt->ip6po_flags |= IP6PO_DONTFRAG; 2830f95d4633SHajimu UMEMOTO break; 2831f95d4633SHajimu UMEMOTO 2832f95d4633SHajimu UMEMOTO case IPV6_PREFER_TEMPADDR: 2833f95d4633SHajimu UMEMOTO if (len != sizeof(int)) 2834f95d4633SHajimu UMEMOTO return (EINVAL); 2835f95d4633SHajimu UMEMOTO preftemp = *(int *)buf; 2836f95d4633SHajimu UMEMOTO if (preftemp != IP6PO_TEMPADDR_SYSTEM && 2837f95d4633SHajimu UMEMOTO preftemp != IP6PO_TEMPADDR_NOTPREFER && 2838f95d4633SHajimu UMEMOTO preftemp != IP6PO_TEMPADDR_PREFER) { 2839f95d4633SHajimu UMEMOTO return (EINVAL); 2840f95d4633SHajimu UMEMOTO } 2841f95d4633SHajimu UMEMOTO opt->ip6po_prefer_tempaddr = preftemp; 2842f95d4633SHajimu UMEMOTO break; 2843f95d4633SHajimu UMEMOTO 284482cd038dSYoshinobu Inoue default: 284582cd038dSYoshinobu Inoue return (ENOPROTOOPT); 2846f95d4633SHajimu UMEMOTO } /* end of switch */ 284782cd038dSYoshinobu Inoue 284882cd038dSYoshinobu Inoue return (0); 284982cd038dSYoshinobu Inoue } 285082cd038dSYoshinobu Inoue 285182cd038dSYoshinobu Inoue /* 285282cd038dSYoshinobu Inoue * Routine called from ip6_output() to loop back a copy of an IP6 multicast 285382cd038dSYoshinobu Inoue * packet to the input queue of a specified interface. Note that this 285482cd038dSYoshinobu Inoue * calls the output routine of the loopback "driver", but with an interface 285582cd038dSYoshinobu Inoue * pointer that might NOT be &loif -- easier than replicating that code here. 285682cd038dSYoshinobu Inoue */ 285782cd038dSYoshinobu Inoue void 28581272577eSXin LI ip6_mloopback(struct ifnet *ifp, struct mbuf *m, struct sockaddr_in6 *dst) 285982cd038dSYoshinobu Inoue { 286082cd038dSYoshinobu Inoue struct mbuf *copym; 2861686cdd19SJun-ichiro itojun Hagino struct ip6_hdr *ip6; 286282cd038dSYoshinobu Inoue 286382cd038dSYoshinobu Inoue copym = m_copy(m, 0, M_COPYALL); 2864686cdd19SJun-ichiro itojun Hagino if (copym == NULL) 2865686cdd19SJun-ichiro itojun Hagino return; 2866686cdd19SJun-ichiro itojun Hagino 2867686cdd19SJun-ichiro itojun Hagino /* 2868686cdd19SJun-ichiro itojun Hagino * Make sure to deep-copy IPv6 header portion in case the data 2869686cdd19SJun-ichiro itojun Hagino * is in an mbuf cluster, so that we can safely override the IPv6 2870686cdd19SJun-ichiro itojun Hagino * header portion later. 2871686cdd19SJun-ichiro itojun Hagino */ 2872686cdd19SJun-ichiro itojun Hagino if ((copym->m_flags & M_EXT) != 0 || 2873686cdd19SJun-ichiro itojun Hagino copym->m_len < sizeof(struct ip6_hdr)) { 2874686cdd19SJun-ichiro itojun Hagino copym = m_pullup(copym, sizeof(struct ip6_hdr)); 2875686cdd19SJun-ichiro itojun Hagino if (copym == NULL) 2876686cdd19SJun-ichiro itojun Hagino return; 287782cd038dSYoshinobu Inoue } 2878686cdd19SJun-ichiro itojun Hagino 2879686cdd19SJun-ichiro itojun Hagino #ifdef DIAGNOSTIC 2880686cdd19SJun-ichiro itojun Hagino if (copym->m_len < sizeof(*ip6)) { 2881686cdd19SJun-ichiro itojun Hagino m_freem(copym); 2882686cdd19SJun-ichiro itojun Hagino return; 2883686cdd19SJun-ichiro itojun Hagino } 2884686cdd19SJun-ichiro itojun Hagino #endif 2885686cdd19SJun-ichiro itojun Hagino 2886686cdd19SJun-ichiro itojun Hagino ip6 = mtod(copym, struct ip6_hdr *); 288733841545SHajimu UMEMOTO /* 288833841545SHajimu UMEMOTO * clear embedded scope identifiers if necessary. 288933841545SHajimu UMEMOTO * in6_clearscope will touch the addresses only when necessary. 289033841545SHajimu UMEMOTO */ 289133841545SHajimu UMEMOTO in6_clearscope(&ip6->ip6_src); 289233841545SHajimu UMEMOTO in6_clearscope(&ip6->ip6_dst); 2893686cdd19SJun-ichiro itojun Hagino 2894a89ec05eSPeter Wemm (void)if_simloop(ifp, copym, dst->sin6_family, 0); 289582cd038dSYoshinobu Inoue } 289682cd038dSYoshinobu Inoue 289782cd038dSYoshinobu Inoue /* 289882cd038dSYoshinobu Inoue * Chop IPv6 header off from the payload. 289982cd038dSYoshinobu Inoue */ 290082cd038dSYoshinobu Inoue static int 29011272577eSXin LI ip6_splithdr(struct mbuf *m, struct ip6_exthdrs *exthdrs) 290282cd038dSYoshinobu Inoue { 290382cd038dSYoshinobu Inoue struct mbuf *mh; 290482cd038dSYoshinobu Inoue struct ip6_hdr *ip6; 290582cd038dSYoshinobu Inoue 290682cd038dSYoshinobu Inoue ip6 = mtod(m, struct ip6_hdr *); 290782cd038dSYoshinobu Inoue if (m->m_len > sizeof(*ip6)) { 2908a163d034SWarner Losh MGETHDR(mh, M_DONTWAIT, MT_HEADER); 290982cd038dSYoshinobu Inoue if (mh == 0) { 291082cd038dSYoshinobu Inoue m_freem(m); 291182cd038dSYoshinobu Inoue return ENOBUFS; 291282cd038dSYoshinobu Inoue } 29139967cafcSSam Leffler M_MOVE_PKTHDR(mh, m); 291482cd038dSYoshinobu Inoue MH_ALIGN(mh, sizeof(*ip6)); 291582cd038dSYoshinobu Inoue m->m_len -= sizeof(*ip6); 291682cd038dSYoshinobu Inoue m->m_data += sizeof(*ip6); 291782cd038dSYoshinobu Inoue mh->m_next = m; 291882cd038dSYoshinobu Inoue m = mh; 291982cd038dSYoshinobu Inoue m->m_len = sizeof(*ip6); 292082cd038dSYoshinobu Inoue bcopy((caddr_t)ip6, mtod(m, caddr_t), sizeof(*ip6)); 292182cd038dSYoshinobu Inoue } 292282cd038dSYoshinobu Inoue exthdrs->ip6e_ip6 = m; 292382cd038dSYoshinobu Inoue return 0; 292482cd038dSYoshinobu Inoue } 292582cd038dSYoshinobu Inoue 292682cd038dSYoshinobu Inoue /* 292782cd038dSYoshinobu Inoue * Compute IPv6 extension header length. 292882cd038dSYoshinobu Inoue */ 292982cd038dSYoshinobu Inoue int 2930fc384fa5SBjoern A. Zeeb ip6_optlen(struct inpcb *in6p) 293182cd038dSYoshinobu Inoue { 293282cd038dSYoshinobu Inoue int len; 293382cd038dSYoshinobu Inoue 293482cd038dSYoshinobu Inoue if (!in6p->in6p_outputopts) 293582cd038dSYoshinobu Inoue return 0; 293682cd038dSYoshinobu Inoue 293782cd038dSYoshinobu Inoue len = 0; 293882cd038dSYoshinobu Inoue #define elen(x) \ 293982cd038dSYoshinobu Inoue (((struct ip6_ext *)(x)) ? (((struct ip6_ext *)(x))->ip6e_len + 1) << 3 : 0) 294082cd038dSYoshinobu Inoue 294182cd038dSYoshinobu Inoue len += elen(in6p->in6p_outputopts->ip6po_hbh); 294233841545SHajimu UMEMOTO if (in6p->in6p_outputopts->ip6po_rthdr) 294333841545SHajimu UMEMOTO /* dest1 is valid with rthdr only */ 294482cd038dSYoshinobu Inoue len += elen(in6p->in6p_outputopts->ip6po_dest1); 294582cd038dSYoshinobu Inoue len += elen(in6p->in6p_outputopts->ip6po_rthdr); 294682cd038dSYoshinobu Inoue len += elen(in6p->in6p_outputopts->ip6po_dest2); 294782cd038dSYoshinobu Inoue return len; 294882cd038dSYoshinobu Inoue #undef elen 294982cd038dSYoshinobu Inoue } 2950