1caf43b02SWarner Losh /*- 282cd038dSYoshinobu Inoue * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 382cd038dSYoshinobu Inoue * All rights reserved. 482cd038dSYoshinobu Inoue * 582cd038dSYoshinobu Inoue * Redistribution and use in source and binary forms, with or without 682cd038dSYoshinobu Inoue * modification, are permitted provided that the following conditions 782cd038dSYoshinobu Inoue * are met: 882cd038dSYoshinobu Inoue * 1. Redistributions of source code must retain the above copyright 982cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer. 1082cd038dSYoshinobu Inoue * 2. Redistributions in binary form must reproduce the above copyright 1182cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer in the 1282cd038dSYoshinobu Inoue * documentation and/or other materials provided with the distribution. 1382cd038dSYoshinobu Inoue * 3. Neither the name of the project nor the names of its contributors 1482cd038dSYoshinobu Inoue * may be used to endorse or promote products derived from this software 1582cd038dSYoshinobu Inoue * without specific prior written permission. 1682cd038dSYoshinobu Inoue * 1782cd038dSYoshinobu Inoue * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 1882cd038dSYoshinobu Inoue * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 1982cd038dSYoshinobu Inoue * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 2082cd038dSYoshinobu Inoue * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 2182cd038dSYoshinobu Inoue * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 2282cd038dSYoshinobu Inoue * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 2382cd038dSYoshinobu Inoue * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 2482cd038dSYoshinobu Inoue * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 2582cd038dSYoshinobu Inoue * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 2682cd038dSYoshinobu Inoue * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 2782cd038dSYoshinobu Inoue * SUCH DAMAGE. 2882cd038dSYoshinobu Inoue */ 2982cd038dSYoshinobu Inoue 30caf43b02SWarner Losh /*- 3182cd038dSYoshinobu Inoue * Copyright (c) 1982, 1986, 1988, 1993 320ae76120SRobert Watson * The Regents of the University of California. 330ae76120SRobert Watson * All rights reserved. 3482cd038dSYoshinobu Inoue * 3582cd038dSYoshinobu Inoue * Redistribution and use in source and binary forms, with or without 3682cd038dSYoshinobu Inoue * modification, are permitted provided that the following conditions 3782cd038dSYoshinobu Inoue * are met: 3882cd038dSYoshinobu Inoue * 1. Redistributions of source code must retain the above copyright 3982cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer. 4082cd038dSYoshinobu Inoue * 2. Redistributions in binary form must reproduce the above copyright 4182cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer in the 4282cd038dSYoshinobu Inoue * documentation and/or other materials provided with the distribution. 43*fbbd9655SWarner Losh * 3. Neither the name of the University nor the names of its contributors 4482cd038dSYoshinobu Inoue * may be used to endorse or promote products derived from this software 4582cd038dSYoshinobu Inoue * without specific prior written permission. 4682cd038dSYoshinobu Inoue * 4782cd038dSYoshinobu Inoue * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 4882cd038dSYoshinobu Inoue * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 4982cd038dSYoshinobu Inoue * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 5082cd038dSYoshinobu Inoue * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 5182cd038dSYoshinobu Inoue * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 5282cd038dSYoshinobu Inoue * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 5382cd038dSYoshinobu Inoue * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 5482cd038dSYoshinobu Inoue * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 5582cd038dSYoshinobu Inoue * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 5682cd038dSYoshinobu Inoue * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 5782cd038dSYoshinobu Inoue * SUCH DAMAGE. 5882cd038dSYoshinobu Inoue * 5982cd038dSYoshinobu Inoue * @(#)raw_ip.c 8.2 (Berkeley) 1/4/94 6082cd038dSYoshinobu Inoue */ 6182cd038dSYoshinobu Inoue 62b48287a3SDavid E. O'Brien #include <sys/cdefs.h> 63b48287a3SDavid E. O'Brien __FBSDID("$FreeBSD$"); 64b48287a3SDavid E. O'Brien 656a800098SYoshinobu Inoue #include "opt_ipsec.h" 6633841545SHajimu UMEMOTO #include "opt_inet6.h" 676a800098SYoshinobu Inoue 6882cd038dSYoshinobu Inoue #include <sys/param.h> 6982cd038dSYoshinobu Inoue #include <sys/errno.h> 70413628a7SBjoern A. Zeeb #include <sys/jail.h> 71a786f679SAndrey V. Elsukov #include <sys/kernel.h> 72960ed29cSSeigo Tanimura #include <sys/lock.h> 73960ed29cSSeigo Tanimura #include <sys/malloc.h> 74960ed29cSSeigo Tanimura #include <sys/mbuf.h> 75c2259ba4SRobert Watson #include <sys/priv.h> 76960ed29cSSeigo Tanimura #include <sys/proc.h> 77960ed29cSSeigo Tanimura #include <sys/protosw.h> 78960ed29cSSeigo Tanimura #include <sys/signalvar.h> 79960ed29cSSeigo Tanimura #include <sys/socket.h> 80960ed29cSSeigo Tanimura #include <sys/socketvar.h> 81960ed29cSSeigo Tanimura #include <sys/sx.h> 82a1f7e5f8SHajimu UMEMOTO #include <sys/syslog.h> 8382cd038dSYoshinobu Inoue 8482cd038dSYoshinobu Inoue #include <net/if.h> 8576039bc8SGleb Smirnoff #include <net/if_var.h> 8682cd038dSYoshinobu Inoue #include <net/if_types.h> 87960ed29cSSeigo Tanimura #include <net/route.h> 884b79449eSBjoern A. Zeeb #include <net/vnet.h> 8982cd038dSYoshinobu Inoue 9082cd038dSYoshinobu Inoue #include <netinet/in.h> 9182cd038dSYoshinobu Inoue #include <netinet/in_var.h> 9282cd038dSYoshinobu Inoue #include <netinet/in_systm.h> 9382cd038dSYoshinobu Inoue #include <netinet/in_pcb.h> 944b79449eSBjoern A. Zeeb 954b79449eSBjoern A. Zeeb #include <netinet/icmp6.h> 96960ed29cSSeigo Tanimura #include <netinet/ip6.h> 971db8d1f8SAna Kukec #include <netinet/ip_var.h> 98686cdd19SJun-ichiro itojun Hagino #include <netinet6/ip6protosw.h> 99960ed29cSSeigo Tanimura #include <netinet6/ip6_mroute.h> 100960ed29cSSeigo Tanimura #include <netinet6/in6_pcb.h> 101960ed29cSSeigo Tanimura #include <netinet6/ip6_var.h> 102960ed29cSSeigo Tanimura #include <netinet6/nd6.h> 103960ed29cSSeigo Tanimura #include <netinet6/raw_ip6.h> 104686cdd19SJun-ichiro itojun Hagino #include <netinet6/scope6_var.h> 1051db8d1f8SAna Kukec #include <netinet6/send.h> 10682cd038dSYoshinobu Inoue 107fcf59617SAndrey V. Elsukov #include <netipsec/ipsec_support.h> 108b9234fafSSam Leffler 10982cd038dSYoshinobu Inoue #include <machine/stdarg.h> 11082cd038dSYoshinobu Inoue 11182cd038dSYoshinobu Inoue #define satosin6(sa) ((struct sockaddr_in6 *)(sa)) 11282cd038dSYoshinobu Inoue #define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa)) 11382cd038dSYoshinobu Inoue 11482cd038dSYoshinobu Inoue /* 11582cd038dSYoshinobu Inoue * Raw interface to IP6 protocol. 11682cd038dSYoshinobu Inoue */ 11782cd038dSYoshinobu Inoue 118eddfbb76SRobert Watson VNET_DECLARE(struct inpcbhead, ripcb); 119eddfbb76SRobert Watson VNET_DECLARE(struct inpcbinfo, ripcbinfo); 1201e77c105SRobert Watson #define V_ripcb VNET(ripcb) 1211e77c105SRobert Watson #define V_ripcbinfo VNET(ripcbinfo) 122eddfbb76SRobert Watson 12397021c24SMarko Zec extern u_long rip_sendspace; 12497021c24SMarko Zec extern u_long rip_recvspace; 12597021c24SMarko Zec 126a786f679SAndrey V. Elsukov VNET_PCPUSTAT_DEFINE(struct rip6stat, rip6stat); 127a786f679SAndrey V. Elsukov VNET_PCPUSTAT_SYSINIT(rip6stat); 128a786f679SAndrey V. Elsukov 129a786f679SAndrey V. Elsukov #ifdef VIMAGE 130a786f679SAndrey V. Elsukov VNET_PCPUSTAT_SYSUNINIT(rip6stat); 131a786f679SAndrey V. Elsukov #endif /* VIMAGE */ 13282cea7e6SBjoern A. Zeeb 13382cd038dSYoshinobu Inoue /* 13433cde130SBruce M Simpson * Hooks for multicast routing. They all default to NULL, so leave them not 13533cde130SBruce M Simpson * initialized and rely on BSS being set to 0. 1366be2e366SBruce M Simpson */ 13733cde130SBruce M Simpson 13833cde130SBruce M Simpson /* 13933cde130SBruce M Simpson * The socket used to communicate with the multicast routing daemon. 14033cde130SBruce M Simpson */ 141eddfbb76SRobert Watson VNET_DEFINE(struct socket *, ip6_mrouter); 14233cde130SBruce M Simpson 14333cde130SBruce M Simpson /* 14433cde130SBruce M Simpson * The various mrouter functions. 14533cde130SBruce M Simpson */ 1466be2e366SBruce M Simpson int (*ip6_mrouter_set)(struct socket *, struct sockopt *); 1476be2e366SBruce M Simpson int (*ip6_mrouter_get)(struct socket *, struct sockopt *); 1486be2e366SBruce M Simpson int (*ip6_mrouter_done)(void); 1496be2e366SBruce M Simpson int (*ip6_mforward)(struct ip6_hdr *, struct ifnet *, struct mbuf *); 150e40bae9aSRoman Divacky int (*mrt6_ioctl)(u_long, caddr_t); 1516be2e366SBruce M Simpson 1526be2e366SBruce M Simpson /* 1530ae76120SRobert Watson * Setup generic address and protocol structures for raw_input routine, then 1540ae76120SRobert Watson * pass them along with mbuf chain. 15582cd038dSYoshinobu Inoue */ 15682cd038dSYoshinobu Inoue int 1571272577eSXin LI rip6_input(struct mbuf **mp, int *offp, int proto) 15882cd038dSYoshinobu Inoue { 15933cde130SBruce M Simpson struct ifnet *ifp; 16082cd038dSYoshinobu Inoue struct mbuf *m = *mp; 16182cd038dSYoshinobu Inoue register struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *); 16282cd038dSYoshinobu Inoue register struct inpcb *in6p; 163155d72c4SPedro F. Giffuni struct inpcb *last = NULL; 16433841545SHajimu UMEMOTO struct mbuf *opts = NULL; 165af12e09eSHajimu UMEMOTO struct sockaddr_in6 fromsa; 16682cd038dSYoshinobu Inoue 167f1d7ebfeSAndrey V. Elsukov RIP6STAT_INC(rip6s_ipackets); 16833841545SHajimu UMEMOTO 169c10c5b1eSErmal Luçi init_sin6(&fromsa, m); /* general init */ 17082cd038dSYoshinobu Inoue 17133cde130SBruce M Simpson ifp = m->m_pkthdr.rcvif; 17233cde130SBruce M Simpson 173603724d3SBjoern A. Zeeb INP_INFO_RLOCK(&V_ripcbinfo); 174603724d3SBjoern A. Zeeb LIST_FOREACH(in6p, &V_ripcb, inp_list) { 175413628a7SBjoern A. Zeeb /* XXX inp locking */ 176fc384fa5SBjoern A. Zeeb if ((in6p->inp_vflag & INP_IPV6) == 0) 17782cd038dSYoshinobu Inoue continue; 178fc384fa5SBjoern A. Zeeb if (in6p->inp_ip_p && 179fc384fa5SBjoern A. Zeeb in6p->inp_ip_p != proto) 180b11e21aeSAlexander Motin continue; 18182cd038dSYoshinobu Inoue if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) && 18282cd038dSYoshinobu Inoue !IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &ip6->ip6_dst)) 183b11e21aeSAlexander Motin continue; 18482cd038dSYoshinobu Inoue if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr) && 18582cd038dSYoshinobu Inoue !IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, &ip6->ip6_src)) 186b11e21aeSAlexander Motin continue; 187de0bd6f7SBjoern A. Zeeb if (jailed_without_vnet(in6p->inp_cred)) { 18833cde130SBruce M Simpson /* 18933cde130SBruce M Simpson * Allow raw socket in jail to receive multicast; 19033cde130SBruce M Simpson * assume process had PRIV_NETINET_RAW at attach, 19133cde130SBruce M Simpson * and fall through into normal filter path if so. 19233cde130SBruce M Simpson */ 19333cde130SBruce M Simpson if (!IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) && 19433cde130SBruce M Simpson prison_check_ip6(in6p->inp_cred, 19533cde130SBruce M Simpson &ip6->ip6_dst) != 0) 196413628a7SBjoern A. Zeeb continue; 19733cde130SBruce M Simpson } 198b7c896c9SAndrey V. Elsukov INP_RLOCK(in6p); 19933841545SHajimu UMEMOTO if (in6p->in6p_cksum != -1) { 200f1d7ebfeSAndrey V. Elsukov RIP6STAT_INC(rip6s_isum); 2014350fcabSSUZUKI Shinsuke if (in6_cksum(m, proto, *offp, 20282cd038dSYoshinobu Inoue m->m_pkthdr.len - *offp)) { 2036c5bbf5cSAlexander Motin INP_RUNLOCK(in6p); 204f1d7ebfeSAndrey V. Elsukov RIP6STAT_INC(rip6s_badsum); 205b11e21aeSAlexander Motin continue; 20682cd038dSYoshinobu Inoue } 20733841545SHajimu UMEMOTO } 20833cde130SBruce M Simpson /* 20933cde130SBruce M Simpson * If this raw socket has multicast state, and we 21033cde130SBruce M Simpson * have received a multicast, check if this socket 21133cde130SBruce M Simpson * should receive it, as multicast filtering is now 21233cde130SBruce M Simpson * the responsibility of the transport layer. 21333cde130SBruce M Simpson */ 21433cde130SBruce M Simpson if (in6p->in6p_moptions && 21533cde130SBruce M Simpson IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) { 2167ab5a5cdSBruce M Simpson /* 2177ab5a5cdSBruce M Simpson * If the incoming datagram is for MLD, allow it 2187ab5a5cdSBruce M Simpson * through unconditionally to the raw socket. 2197ab5a5cdSBruce M Simpson * 2207ab5a5cdSBruce M Simpson * Use the M_RTALERT_MLD flag to check for MLD 2217ab5a5cdSBruce M Simpson * traffic without having to inspect the mbuf chain 2227ab5a5cdSBruce M Simpson * more deeply, as all MLDv1/v2 host messages MUST 2237ab5a5cdSBruce M Simpson * contain the Router Alert option. 2247ab5a5cdSBruce M Simpson * 2257ab5a5cdSBruce M Simpson * In the case of MLDv1, we may not have explicitly 2267ab5a5cdSBruce M Simpson * joined the group, and may have set IFF_ALLMULTI 2277ab5a5cdSBruce M Simpson * on the interface. im6o_mc_filter() may discard 2287ab5a5cdSBruce M Simpson * control traffic we actually need to see. 2297ab5a5cdSBruce M Simpson * 2307ab5a5cdSBruce M Simpson * Userland multicast routing daemons should continue 2317ab5a5cdSBruce M Simpson * filter the control traffic appropriately. 2327ab5a5cdSBruce M Simpson */ 23333cde130SBruce M Simpson int blocked; 23433cde130SBruce M Simpson 2357ab5a5cdSBruce M Simpson blocked = MCAST_PASS; 2367ab5a5cdSBruce M Simpson if ((m->m_flags & M_RTALERT_MLD) == 0) { 2377ab5a5cdSBruce M Simpson struct sockaddr_in6 mcaddr; 2387ab5a5cdSBruce M Simpson 23933cde130SBruce M Simpson bzero(&mcaddr, sizeof(struct sockaddr_in6)); 24033cde130SBruce M Simpson mcaddr.sin6_len = sizeof(struct sockaddr_in6); 24133cde130SBruce M Simpson mcaddr.sin6_family = AF_INET6; 24233cde130SBruce M Simpson mcaddr.sin6_addr = ip6->ip6_dst; 24333cde130SBruce M Simpson 2447ab5a5cdSBruce M Simpson blocked = im6o_mc_filter(in6p->in6p_moptions, 2457ab5a5cdSBruce M Simpson ifp, 24633cde130SBruce M Simpson (struct sockaddr *)&mcaddr, 24733cde130SBruce M Simpson (struct sockaddr *)&fromsa); 2487ab5a5cdSBruce M Simpson } 24933cde130SBruce M Simpson if (blocked != MCAST_PASS) { 25033cde130SBruce M Simpson IP6STAT_INC(ip6s_notmember); 2518c09aa57SBjoern A. Zeeb INP_RUNLOCK(in6p); 25233cde130SBruce M Simpson continue; 25333cde130SBruce M Simpson } 25433cde130SBruce M Simpson } 255aba53ef0SKip Macy if (last != NULL) { 256c3bef61eSKevin Lo struct mbuf *n = m_copym(m, 0, M_COPYALL, M_NOWAIT); 25733841545SHajimu UMEMOTO 258fcf59617SAndrey V. Elsukov #if defined(IPSEC) || defined(IPSEC_SUPPORT) 259da0f4099SHajimu UMEMOTO /* 260da0f4099SHajimu UMEMOTO * Check AH/ESP integrity. 261da0f4099SHajimu UMEMOTO */ 262fcf59617SAndrey V. Elsukov if (IPSEC_ENABLED(ipv6)) { 263fcf59617SAndrey V. Elsukov if (n != NULL && 264fcf59617SAndrey V. Elsukov IPSEC_CHECK_POLICY(ipv6, n, last) != 0) { 265da0f4099SHajimu UMEMOTO m_freem(n); 2660ae76120SRobert Watson /* Do not inject data into pcb. */ 267fcf59617SAndrey V. Elsukov n = NULL; 268fcf59617SAndrey V. Elsukov } 269fcf59617SAndrey V. Elsukov } 270b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */ 27182cd038dSYoshinobu Inoue if (n) { 27297590249SBjoern A. Zeeb if (last->inp_flags & INP_CONTROLOPTS || 273fc384fa5SBjoern A. Zeeb last->inp_socket->so_options & SO_TIMESTAMP) 27411de19f4SHajimu UMEMOTO ip6_savecontrol(last, n, &opts); 27582cd038dSYoshinobu Inoue /* strip intermediate headers */ 27682cd038dSYoshinobu Inoue m_adj(n, *offp); 277fc384fa5SBjoern A. Zeeb if (sbappendaddr(&last->inp_socket->so_rcv, 278af12e09eSHajimu UMEMOTO (struct sockaddr *)&fromsa, 27982cd038dSYoshinobu Inoue n, opts) == 0) { 28082cd038dSYoshinobu Inoue m_freem(n); 28182cd038dSYoshinobu Inoue if (opts) 28282cd038dSYoshinobu Inoue m_freem(opts); 283f1d7ebfeSAndrey V. Elsukov RIP6STAT_INC(rip6s_fullsock); 2844cc20ab1SSeigo Tanimura } else 285fc384fa5SBjoern A. Zeeb sorwakeup(last->inp_socket); 28682cd038dSYoshinobu Inoue opts = NULL; 28782cd038dSYoshinobu Inoue } 2889ad11dd8SRobert Watson INP_RUNLOCK(last); 28982cd038dSYoshinobu Inoue } 29082cd038dSYoshinobu Inoue last = in6p; 29182cd038dSYoshinobu Inoue } 292603724d3SBjoern A. Zeeb INP_INFO_RUNLOCK(&V_ripcbinfo); 293fcf59617SAndrey V. Elsukov #if defined(IPSEC) || defined(IPSEC_SUPPORT) 294da0f4099SHajimu UMEMOTO /* 295da0f4099SHajimu UMEMOTO * Check AH/ESP integrity. 296da0f4099SHajimu UMEMOTO */ 297fcf59617SAndrey V. Elsukov if (IPSEC_ENABLED(ipv6) && last != NULL && 298fcf59617SAndrey V. Elsukov IPSEC_CHECK_POLICY(ipv6, m, last) != 0) { 299da0f4099SHajimu UMEMOTO m_freem(m); 3009cb8d207SAndrey V. Elsukov IP6STAT_DEC(ip6s_delivered); 3010ae76120SRobert Watson /* Do not inject data into pcb. */ 3029ad11dd8SRobert Watson INP_RUNLOCK(last); 303b9234fafSSam Leffler } else 304b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */ 305aba53ef0SKip Macy if (last != NULL) { 30697590249SBjoern A. Zeeb if (last->inp_flags & INP_CONTROLOPTS || 307fc384fa5SBjoern A. Zeeb last->inp_socket->so_options & SO_TIMESTAMP) 30811de19f4SHajimu UMEMOTO ip6_savecontrol(last, m, &opts); 3090ae76120SRobert Watson /* Strip intermediate headers. */ 31082cd038dSYoshinobu Inoue m_adj(m, *offp); 311fc384fa5SBjoern A. Zeeb if (sbappendaddr(&last->inp_socket->so_rcv, 312af12e09eSHajimu UMEMOTO (struct sockaddr *)&fromsa, m, opts) == 0) { 31382cd038dSYoshinobu Inoue m_freem(m); 31482cd038dSYoshinobu Inoue if (opts) 31582cd038dSYoshinobu Inoue m_freem(opts); 316f1d7ebfeSAndrey V. Elsukov RIP6STAT_INC(rip6s_fullsock); 3174cc20ab1SSeigo Tanimura } else 318fc384fa5SBjoern A. Zeeb sorwakeup(last->inp_socket); 3199ad11dd8SRobert Watson INP_RUNLOCK(last); 32082cd038dSYoshinobu Inoue } else { 321f1d7ebfeSAndrey V. Elsukov RIP6STAT_INC(rip6s_nosock); 32233841545SHajimu UMEMOTO if (m->m_flags & M_MCAST) 323f1d7ebfeSAndrey V. Elsukov RIP6STAT_INC(rip6s_nosockmcast); 32482cd038dSYoshinobu Inoue if (proto == IPPROTO_NONE) 32582cd038dSYoshinobu Inoue m_freem(m); 32682cd038dSYoshinobu Inoue else { 32782cd038dSYoshinobu Inoue char *prvnxtp = ip6_get_prevhdr(m, *offp); /* XXX */ 32882cd038dSYoshinobu Inoue icmp6_error(m, ICMP6_PARAM_PROB, 32982cd038dSYoshinobu Inoue ICMP6_PARAMPROB_NEXTHEADER, 33082cd038dSYoshinobu Inoue prvnxtp - mtod(m, char *)); 33182cd038dSYoshinobu Inoue } 3329cb8d207SAndrey V. Elsukov IP6STAT_DEC(ip6s_delivered); 33382cd038dSYoshinobu Inoue } 3340ae76120SRobert Watson return (IPPROTO_DONE); 33582cd038dSYoshinobu Inoue } 33682cd038dSYoshinobu Inoue 337686cdd19SJun-ichiro itojun Hagino void 3381272577eSXin LI rip6_ctlinput(int cmd, struct sockaddr *sa, void *d) 339686cdd19SJun-ichiro itojun Hagino { 340686cdd19SJun-ichiro itojun Hagino struct ip6_hdr *ip6; 341686cdd19SJun-ichiro itojun Hagino struct mbuf *m; 342686cdd19SJun-ichiro itojun Hagino int off = 0; 34333841545SHajimu UMEMOTO struct ip6ctlparam *ip6cp = NULL; 34433841545SHajimu UMEMOTO const struct sockaddr_in6 *sa6_src = NULL; 345efddf5c6SHajimu UMEMOTO void *cmdarg; 3469233d8f3SDavid E. O'Brien struct inpcb *(*notify)(struct inpcb *, int) = in6_rtchange; 347686cdd19SJun-ichiro itojun Hagino 348686cdd19SJun-ichiro itojun Hagino if (sa->sa_family != AF_INET6 || 349686cdd19SJun-ichiro itojun Hagino sa->sa_len != sizeof(struct sockaddr_in6)) 350686cdd19SJun-ichiro itojun Hagino return; 351686cdd19SJun-ichiro itojun Hagino 352686cdd19SJun-ichiro itojun Hagino if ((unsigned)cmd >= PRC_NCMDS) 353686cdd19SJun-ichiro itojun Hagino return; 354686cdd19SJun-ichiro itojun Hagino if (PRC_IS_REDIRECT(cmd)) 355686cdd19SJun-ichiro itojun Hagino notify = in6_rtchange, d = NULL; 356686cdd19SJun-ichiro itojun Hagino else if (cmd == PRC_HOSTDEAD) 357686cdd19SJun-ichiro itojun Hagino d = NULL; 358686cdd19SJun-ichiro itojun Hagino else if (inet6ctlerrmap[cmd] == 0) 359686cdd19SJun-ichiro itojun Hagino return; 360686cdd19SJun-ichiro itojun Hagino 3610ae76120SRobert Watson /* 3620ae76120SRobert Watson * If the parameter is from icmp6, decode it. 3630ae76120SRobert Watson */ 364686cdd19SJun-ichiro itojun Hagino if (d != NULL) { 36533841545SHajimu UMEMOTO ip6cp = (struct ip6ctlparam *)d; 366686cdd19SJun-ichiro itojun Hagino m = ip6cp->ip6c_m; 367686cdd19SJun-ichiro itojun Hagino ip6 = ip6cp->ip6c_ip6; 368686cdd19SJun-ichiro itojun Hagino off = ip6cp->ip6c_off; 369efddf5c6SHajimu UMEMOTO cmdarg = ip6cp->ip6c_cmdarg; 37033841545SHajimu UMEMOTO sa6_src = ip6cp->ip6c_src; 371686cdd19SJun-ichiro itojun Hagino } else { 372686cdd19SJun-ichiro itojun Hagino m = NULL; 373686cdd19SJun-ichiro itojun Hagino ip6 = NULL; 374efddf5c6SHajimu UMEMOTO cmdarg = NULL; 37533841545SHajimu UMEMOTO sa6_src = &sa6_any; 376686cdd19SJun-ichiro itojun Hagino } 377686cdd19SJun-ichiro itojun Hagino 378603724d3SBjoern A. Zeeb (void) in6_pcbnotify(&V_ripcbinfo, sa, 0, 3790ae76120SRobert Watson (const struct sockaddr *)sa6_src, 0, cmd, cmdarg, notify); 380686cdd19SJun-ichiro itojun Hagino } 381686cdd19SJun-ichiro itojun Hagino 38282cd038dSYoshinobu Inoue /* 3830ae76120SRobert Watson * Generate IPv6 header and pass packet to ip6_output. Tack on options user 3840ae76120SRobert Watson * may have setup with control call. 38582cd038dSYoshinobu Inoue */ 38682cd038dSYoshinobu Inoue int 3878f5a8818SKevin Lo rip6_output(struct mbuf *m, struct socket *so, ...) 38882cd038dSYoshinobu Inoue { 38907eb2995SHajimu UMEMOTO struct mbuf *control; 3901db8d1f8SAna Kukec struct m_tag *mtag; 39182cd038dSYoshinobu Inoue struct sockaddr_in6 *dstsock; 39282cd038dSYoshinobu Inoue struct in6_addr *dst; 39382cd038dSYoshinobu Inoue struct ip6_hdr *ip6; 39482cd038dSYoshinobu Inoue struct inpcb *in6p; 39582cd038dSYoshinobu Inoue u_int plen = m->m_pkthdr.len; 39682cd038dSYoshinobu Inoue int error = 0; 397e07db7aaSHajimu UMEMOTO struct ip6_pktopts opt, *optp; 39882cd038dSYoshinobu Inoue struct ifnet *oifp = NULL; 39982cd038dSYoshinobu Inoue int type = 0, code = 0; /* for ICMPv6 output statistics only */ 400a1f7e5f8SHajimu UMEMOTO int scope_ambiguous = 0; 401388288b2SHajimu UMEMOTO int use_defzone = 0; 402601c0b8bSAlexander V. Chernikov int hlim = 0; 40388d166bfSBjoern A. Zeeb struct in6_addr in6a; 40482cd038dSYoshinobu Inoue va_list ap; 40582cd038dSYoshinobu Inoue 4068f5a8818SKevin Lo va_start(ap, so); 40782cd038dSYoshinobu Inoue dstsock = va_arg(ap, struct sockaddr_in6 *); 40882cd038dSYoshinobu Inoue control = va_arg(ap, struct mbuf *); 40982cd038dSYoshinobu Inoue va_end(ap); 41082cd038dSYoshinobu Inoue 411fc384fa5SBjoern A. Zeeb in6p = sotoinpcb(so); 4128501a69cSRobert Watson INP_WLOCK(in6p); 41382cd038dSYoshinobu Inoue 41482cd038dSYoshinobu Inoue dst = &dstsock->sin6_addr; 41575bab8b8SKip Macy if (control != NULL) { 416d5e3406dSHajimu UMEMOTO if ((error = ip6_setpktopts(control, &opt, 41779ba3952SBjoern A. Zeeb in6p->in6p_outputopts, so->so_cred, 41879ba3952SBjoern A. Zeeb so->so_proto->pr_protocol)) != 0) { 41982cd038dSYoshinobu Inoue goto bad; 420f95d4633SHajimu UMEMOTO } 421e07db7aaSHajimu UMEMOTO optp = &opt; 422e07db7aaSHajimu UMEMOTO } else 423e07db7aaSHajimu UMEMOTO optp = in6p->in6p_outputopts; 42482cd038dSYoshinobu Inoue 42582cd038dSYoshinobu Inoue /* 426a1f7e5f8SHajimu UMEMOTO * Check and convert scope zone ID into internal form. 4270ae76120SRobert Watson * 428a1f7e5f8SHajimu UMEMOTO * XXX: we may still need to determine the zone later. 429a1f7e5f8SHajimu UMEMOTO */ 430a1f7e5f8SHajimu UMEMOTO if (!(so->so_state & SS_ISCONNECTED)) { 431365ccde0SHajimu UMEMOTO if (!optp || !optp->ip6po_pktinfo || 432365ccde0SHajimu UMEMOTO !optp->ip6po_pktinfo->ipi6_ifindex) 433388288b2SHajimu UMEMOTO use_defzone = V_ip6_use_defzone; 434388288b2SHajimu UMEMOTO if (dstsock->sin6_scope_id == 0 && !use_defzone) 435a1f7e5f8SHajimu UMEMOTO scope_ambiguous = 1; 436388288b2SHajimu UMEMOTO if ((error = sa6_embedscope(dstsock, use_defzone)) != 0) 437a1f7e5f8SHajimu UMEMOTO goto bad; 438a1f7e5f8SHajimu UMEMOTO } 439a1f7e5f8SHajimu UMEMOTO 440a1f7e5f8SHajimu UMEMOTO /* 4410ae76120SRobert Watson * For an ICMPv6 packet, we should know its type and code to update 4420ae76120SRobert Watson * statistics. 44382cd038dSYoshinobu Inoue */ 44482cd038dSYoshinobu Inoue if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) { 44582cd038dSYoshinobu Inoue struct icmp6_hdr *icmp6; 44682cd038dSYoshinobu Inoue if (m->m_len < sizeof(struct icmp6_hdr) && 44782cd038dSYoshinobu Inoue (m = m_pullup(m, sizeof(struct icmp6_hdr))) == NULL) { 44882cd038dSYoshinobu Inoue error = ENOBUFS; 44982cd038dSYoshinobu Inoue goto bad; 45082cd038dSYoshinobu Inoue } 45182cd038dSYoshinobu Inoue icmp6 = mtod(m, struct icmp6_hdr *); 45282cd038dSYoshinobu Inoue type = icmp6->icmp6_type; 45382cd038dSYoshinobu Inoue code = icmp6->icmp6_code; 45482cd038dSYoshinobu Inoue } 45582cd038dSYoshinobu Inoue 456eb1b1807SGleb Smirnoff M_PREPEND(m, sizeof(*ip6), M_NOWAIT); 4578a0c4da8SRobert Watson if (m == NULL) { 4588a0c4da8SRobert Watson error = ENOBUFS; 4598a0c4da8SRobert Watson goto bad; 4608a0c4da8SRobert Watson } 46182cd038dSYoshinobu Inoue ip6 = mtod(m, struct ip6_hdr *); 46282cd038dSYoshinobu Inoue 46382cd038dSYoshinobu Inoue /* 46482cd038dSYoshinobu Inoue * Source address selection. 46582cd038dSYoshinobu Inoue */ 466601c0b8bSAlexander V. Chernikov error = in6_selectsrc_socket(dstsock, optp, in6p, so->so_cred, 467601c0b8bSAlexander V. Chernikov scope_ambiguous, &in6a, &hlim); 468601c0b8bSAlexander V. Chernikov 46988d166bfSBjoern A. Zeeb if (error) 47082cd038dSYoshinobu Inoue goto bad; 4717a657e63SBjoern A. Zeeb error = prison_check_ip6(in6p->inp_cred, &in6a); 472b89e82ddSJamie Gritton if (error != 0) 473413628a7SBjoern A. Zeeb goto bad; 47488d166bfSBjoern A. Zeeb ip6->ip6_src = in6a; 475a1f7e5f8SHajimu UMEMOTO 476a1f7e5f8SHajimu UMEMOTO ip6->ip6_dst = dstsock->sin6_addr; 477a1f7e5f8SHajimu UMEMOTO 4780ae76120SRobert Watson /* 4790ae76120SRobert Watson * Fill in the rest of the IPv6 header fields. 4800ae76120SRobert Watson */ 4816a800098SYoshinobu Inoue ip6->ip6_flow = (ip6->ip6_flow & ~IPV6_FLOWINFO_MASK) | 482fc384fa5SBjoern A. Zeeb (in6p->inp_flow & IPV6_FLOWINFO_MASK); 4836a800098SYoshinobu Inoue ip6->ip6_vfc = (ip6->ip6_vfc & ~IPV6_VERSION_MASK) | 4846a800098SYoshinobu Inoue (IPV6_VERSION & IPV6_VERSION_MASK); 4850ae76120SRobert Watson 4860ae76120SRobert Watson /* 4870ae76120SRobert Watson * ip6_plen will be filled in ip6_output, so not fill it here. 4880ae76120SRobert Watson */ 489fc384fa5SBjoern A. Zeeb ip6->ip6_nxt = in6p->inp_ip_p; 490601c0b8bSAlexander V. Chernikov ip6->ip6_hlim = hlim; 49182cd038dSYoshinobu Inoue 49282cd038dSYoshinobu Inoue if (so->so_proto->pr_protocol == IPPROTO_ICMPV6 || 49382cd038dSYoshinobu Inoue in6p->in6p_cksum != -1) { 49482cd038dSYoshinobu Inoue struct mbuf *n; 49582cd038dSYoshinobu Inoue int off; 49682cd038dSYoshinobu Inoue u_int16_t *p; 49782cd038dSYoshinobu Inoue 4980ae76120SRobert Watson /* Compute checksum. */ 49982cd038dSYoshinobu Inoue if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) 50082cd038dSYoshinobu Inoue off = offsetof(struct icmp6_hdr, icmp6_cksum); 50182cd038dSYoshinobu Inoue else 50282cd038dSYoshinobu Inoue off = in6p->in6p_cksum; 50382cd038dSYoshinobu Inoue if (plen < off + 1) { 50482cd038dSYoshinobu Inoue error = EINVAL; 50582cd038dSYoshinobu Inoue goto bad; 50682cd038dSYoshinobu Inoue } 50782cd038dSYoshinobu Inoue off += sizeof(struct ip6_hdr); 50882cd038dSYoshinobu Inoue 50982cd038dSYoshinobu Inoue n = m; 51082cd038dSYoshinobu Inoue while (n && n->m_len <= off) { 51182cd038dSYoshinobu Inoue off -= n->m_len; 51282cd038dSYoshinobu Inoue n = n->m_next; 51382cd038dSYoshinobu Inoue } 51482cd038dSYoshinobu Inoue if (!n) 51582cd038dSYoshinobu Inoue goto bad; 51682cd038dSYoshinobu Inoue p = (u_int16_t *)(mtod(n, caddr_t) + off); 51782cd038dSYoshinobu Inoue *p = 0; 51882cd038dSYoshinobu Inoue *p = in6_cksum(m, ip6->ip6_nxt, sizeof(*ip6), plen); 51982cd038dSYoshinobu Inoue } 52082cd038dSYoshinobu Inoue 5211db8d1f8SAna Kukec /* 5221db8d1f8SAna Kukec * Send RA/RS messages to user land for protection, before sending 5231db8d1f8SAna Kukec * them to rtadvd/rtsol. 5241db8d1f8SAna Kukec */ 5251db8d1f8SAna Kukec if ((send_sendso_input_hook != NULL) && 5261db8d1f8SAna Kukec so->so_proto->pr_protocol == IPPROTO_ICMPV6) { 5271db8d1f8SAna Kukec switch (type) { 5281db8d1f8SAna Kukec case ND_ROUTER_ADVERT: 5291db8d1f8SAna Kukec case ND_ROUTER_SOLICIT: 5301db8d1f8SAna Kukec mtag = m_tag_get(PACKET_TAG_ND_OUTGOING, 5311db8d1f8SAna Kukec sizeof(unsigned short), M_NOWAIT); 5321db8d1f8SAna Kukec if (mtag == NULL) 5331db8d1f8SAna Kukec goto bad; 5341db8d1f8SAna Kukec m_tag_prepend(m, mtag); 5351db8d1f8SAna Kukec } 5361db8d1f8SAna Kukec } 5371db8d1f8SAna Kukec 538e07db7aaSHajimu UMEMOTO error = ip6_output(m, optp, NULL, 0, in6p->in6p_moptions, &oifp, in6p); 53982cd038dSYoshinobu Inoue if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) { 54082cd038dSYoshinobu Inoue if (oifp) 54182cd038dSYoshinobu Inoue icmp6_ifoutstat_inc(oifp, type, code); 542e27b0c87SRobert Watson ICMP6STAT_INC(icp6s_outhist[type]); 54333841545SHajimu UMEMOTO } else 544f1d7ebfeSAndrey V. Elsukov RIP6STAT_INC(rip6s_opackets); 54582cd038dSYoshinobu Inoue 54682cd038dSYoshinobu Inoue goto freectl; 54782cd038dSYoshinobu Inoue 54882cd038dSYoshinobu Inoue bad: 54982cd038dSYoshinobu Inoue if (m) 55082cd038dSYoshinobu Inoue m_freem(m); 55182cd038dSYoshinobu Inoue 55282cd038dSYoshinobu Inoue freectl: 55375bab8b8SKip Macy if (control != NULL) { 554e07db7aaSHajimu UMEMOTO ip6_clearpktopts(&opt, -1); 55582cd038dSYoshinobu Inoue m_freem(control); 55633841545SHajimu UMEMOTO } 5578501a69cSRobert Watson INP_WUNLOCK(in6p); 55882cd038dSYoshinobu Inoue return (error); 55982cd038dSYoshinobu Inoue } 56082cd038dSYoshinobu Inoue 56182cd038dSYoshinobu Inoue /* 56282cd038dSYoshinobu Inoue * Raw IPv6 socket option processing. 56382cd038dSYoshinobu Inoue */ 56482cd038dSYoshinobu Inoue int 5651272577eSXin LI rip6_ctloutput(struct socket *so, struct sockopt *sopt) 56682cd038dSYoshinobu Inoue { 567ee799639SBjoern A. Zeeb struct inpcb *inp; 56882cd038dSYoshinobu Inoue int error; 56982cd038dSYoshinobu Inoue 57082cd038dSYoshinobu Inoue if (sopt->sopt_level == IPPROTO_ICMPV6) 57182cd038dSYoshinobu Inoue /* 57282cd038dSYoshinobu Inoue * XXX: is it better to call icmp6_ctloutput() directly 57382cd038dSYoshinobu Inoue * from protosw? 57482cd038dSYoshinobu Inoue */ 57582cd038dSYoshinobu Inoue return (icmp6_ctloutput(so, sopt)); 576ee799639SBjoern A. Zeeb else if (sopt->sopt_level != IPPROTO_IPV6) { 577ee799639SBjoern A. Zeeb if (sopt->sopt_level == SOL_SOCKET && 578ee799639SBjoern A. Zeeb sopt->sopt_name == SO_SETFIB) { 579ee799639SBjoern A. Zeeb inp = sotoinpcb(so); 580ee799639SBjoern A. Zeeb INP_WLOCK(inp); 581ee799639SBjoern A. Zeeb inp->inp_inc.inc_fibnum = so->so_fibnum; 582ee799639SBjoern A. Zeeb INP_WUNLOCK(inp); 583ee799639SBjoern A. Zeeb return (0); 584ee799639SBjoern A. Zeeb } 58582cd038dSYoshinobu Inoue return (EINVAL); 586ee799639SBjoern A. Zeeb } 58782cd038dSYoshinobu Inoue 58882cd038dSYoshinobu Inoue error = 0; 58982cd038dSYoshinobu Inoue 59082cd038dSYoshinobu Inoue switch (sopt->sopt_dir) { 59182cd038dSYoshinobu Inoue case SOPT_GET: 59282cd038dSYoshinobu Inoue switch (sopt->sopt_name) { 59391ec0a1eSYoshinobu Inoue case MRT6_INIT: 59491ec0a1eSYoshinobu Inoue case MRT6_DONE: 59591ec0a1eSYoshinobu Inoue case MRT6_ADD_MIF: 59691ec0a1eSYoshinobu Inoue case MRT6_DEL_MIF: 59791ec0a1eSYoshinobu Inoue case MRT6_ADD_MFC: 59891ec0a1eSYoshinobu Inoue case MRT6_DEL_MFC: 59991ec0a1eSYoshinobu Inoue case MRT6_PIM: 6006be2e366SBruce M Simpson error = ip6_mrouter_get ? ip6_mrouter_get(so, sopt) : 6016be2e366SBruce M Simpson EOPNOTSUPP; 60291ec0a1eSYoshinobu Inoue break; 60302b9a206SHajimu UMEMOTO case IPV6_CHECKSUM: 60402b9a206SHajimu UMEMOTO error = ip6_raw_ctloutput(so, sopt); 60502b9a206SHajimu UMEMOTO break; 60682cd038dSYoshinobu Inoue default: 60782cd038dSYoshinobu Inoue error = ip6_ctloutput(so, sopt); 60882cd038dSYoshinobu Inoue break; 60982cd038dSYoshinobu Inoue } 61082cd038dSYoshinobu Inoue break; 61182cd038dSYoshinobu Inoue 61282cd038dSYoshinobu Inoue case SOPT_SET: 61382cd038dSYoshinobu Inoue switch (sopt->sopt_name) { 61491ec0a1eSYoshinobu Inoue case MRT6_INIT: 61591ec0a1eSYoshinobu Inoue case MRT6_DONE: 61691ec0a1eSYoshinobu Inoue case MRT6_ADD_MIF: 61791ec0a1eSYoshinobu Inoue case MRT6_DEL_MIF: 61891ec0a1eSYoshinobu Inoue case MRT6_ADD_MFC: 61991ec0a1eSYoshinobu Inoue case MRT6_DEL_MFC: 62091ec0a1eSYoshinobu Inoue case MRT6_PIM: 6216be2e366SBruce M Simpson error = ip6_mrouter_set ? ip6_mrouter_set(so, sopt) : 6226be2e366SBruce M Simpson EOPNOTSUPP; 62391ec0a1eSYoshinobu Inoue break; 62402b9a206SHajimu UMEMOTO case IPV6_CHECKSUM: 62502b9a206SHajimu UMEMOTO error = ip6_raw_ctloutput(so, sopt); 62602b9a206SHajimu UMEMOTO break; 62782cd038dSYoshinobu Inoue default: 62882cd038dSYoshinobu Inoue error = ip6_ctloutput(so, sopt); 62982cd038dSYoshinobu Inoue break; 63082cd038dSYoshinobu Inoue } 63182cd038dSYoshinobu Inoue break; 63282cd038dSYoshinobu Inoue } 63382cd038dSYoshinobu Inoue 63482cd038dSYoshinobu Inoue return (error); 63582cd038dSYoshinobu Inoue } 63682cd038dSYoshinobu Inoue 63782cd038dSYoshinobu Inoue static int 638b40ce416SJulian Elischer rip6_attach(struct socket *so, int proto, struct thread *td) 63982cd038dSYoshinobu Inoue { 64082cd038dSYoshinobu Inoue struct inpcb *inp; 6418a9d54dfSSam Leffler struct icmp6_filter *filter; 642ff7425ceSRobert Watson int error; 64382cd038dSYoshinobu Inoue 64482cd038dSYoshinobu Inoue inp = sotoinpcb(so); 64514ba8addSRobert Watson KASSERT(inp == NULL, ("rip6_attach: inp != NULL")); 6460ae76120SRobert Watson 64779ba3952SBjoern A. Zeeb error = priv_check(td, PRIV_NETINET_RAW); 64879ba3952SBjoern A. Zeeb if (error) 6490ae76120SRobert Watson return (error); 65082cd038dSYoshinobu Inoue error = soreserve(so, rip_sendspace, rip_recvspace); 65114ba8addSRobert Watson if (error) 6520ae76120SRobert Watson return (error); 6531ede983cSDag-Erling Smørgrav filter = malloc(sizeof(struct icmp6_filter), M_PCB, M_NOWAIT); 65414ba8addSRobert Watson if (filter == NULL) 6550ae76120SRobert Watson return (ENOMEM); 656603724d3SBjoern A. Zeeb INP_INFO_WLOCK(&V_ripcbinfo); 657603724d3SBjoern A. Zeeb error = in_pcballoc(so, &V_ripcbinfo); 65807385abdSRobert Watson if (error) { 659603724d3SBjoern A. Zeeb INP_INFO_WUNLOCK(&V_ripcbinfo); 6601ede983cSDag-Erling Smørgrav free(filter, M_PCB); 6610ae76120SRobert Watson return (error); 66207385abdSRobert Watson } 66382cd038dSYoshinobu Inoue inp = (struct inpcb *)so->so_pcb; 664603724d3SBjoern A. Zeeb INP_INFO_WUNLOCK(&V_ripcbinfo); 66582cd038dSYoshinobu Inoue inp->inp_vflag |= INP_IPV6; 666fc384fa5SBjoern A. Zeeb inp->inp_ip_p = (long)proto; 66782cd038dSYoshinobu Inoue inp->in6p_hops = -1; /* use kernel default */ 66882cd038dSYoshinobu Inoue inp->in6p_cksum = -1; 6698a9d54dfSSam Leffler inp->in6p_icmp6filt = filter; 67082cd038dSYoshinobu Inoue ICMP6_FILTER_SETPASSALL(inp->in6p_icmp6filt); 6718501a69cSRobert Watson INP_WUNLOCK(inp); 6720ae76120SRobert Watson return (0); 67382cd038dSYoshinobu Inoue } 67482cd038dSYoshinobu Inoue 675bc725eafSRobert Watson static void 67682cd038dSYoshinobu Inoue rip6_detach(struct socket *so) 67782cd038dSYoshinobu Inoue { 67882cd038dSYoshinobu Inoue struct inpcb *inp; 67982cd038dSYoshinobu Inoue 68082cd038dSYoshinobu Inoue inp = sotoinpcb(so); 68114ba8addSRobert Watson KASSERT(inp != NULL, ("rip6_detach: inp == NULL")); 682a152f8a3SRobert Watson 68333cde130SBruce M Simpson if (so == V_ip6_mrouter && ip6_mrouter_done) 684e7e3ecb6SYoshinobu Inoue ip6_mrouter_done(); 6856be2e366SBruce M Simpson /* xxx: RSVP */ 686603724d3SBjoern A. Zeeb INP_INFO_WLOCK(&V_ripcbinfo); 6878501a69cSRobert Watson INP_WLOCK(inp); 6881ede983cSDag-Erling Smørgrav free(inp->in6p_icmp6filt, M_PCB); 6890206cdb8SBjoern A. Zeeb in_pcbdetach(inp); 6906aee2fc5SBjoern A. Zeeb in_pcbfree(inp); 691603724d3SBjoern A. Zeeb INP_INFO_WUNLOCK(&V_ripcbinfo); 69282cd038dSYoshinobu Inoue } 69382cd038dSYoshinobu Inoue 694a152f8a3SRobert Watson /* XXXRW: This can't ever be called. */ 695ac45e92fSRobert Watson static void 69682cd038dSYoshinobu Inoue rip6_abort(struct socket *so) 69782cd038dSYoshinobu Inoue { 698a152f8a3SRobert Watson struct inpcb *inp; 699a152f8a3SRobert Watson 700a152f8a3SRobert Watson inp = sotoinpcb(so); 701a152f8a3SRobert Watson KASSERT(inp != NULL, ("rip6_abort: inp == NULL")); 702a152f8a3SRobert Watson 70382cd038dSYoshinobu Inoue soisdisconnected(so); 704a152f8a3SRobert Watson } 705a152f8a3SRobert Watson 706a152f8a3SRobert Watson static void 707a152f8a3SRobert Watson rip6_close(struct socket *so) 708a152f8a3SRobert Watson { 709a152f8a3SRobert Watson struct inpcb *inp; 710a152f8a3SRobert Watson 711a152f8a3SRobert Watson inp = sotoinpcb(so); 712a152f8a3SRobert Watson KASSERT(inp != NULL, ("rip6_close: inp == NULL")); 713a152f8a3SRobert Watson 714a152f8a3SRobert Watson soisdisconnected(so); 71582cd038dSYoshinobu Inoue } 71682cd038dSYoshinobu Inoue 71782cd038dSYoshinobu Inoue static int 71882cd038dSYoshinobu Inoue rip6_disconnect(struct socket *so) 71982cd038dSYoshinobu Inoue { 7200ae76120SRobert Watson struct inpcb *inp; 7210ae76120SRobert Watson 7220ae76120SRobert Watson inp = sotoinpcb(so); 7230ae76120SRobert Watson KASSERT(inp != NULL, ("rip6_disconnect: inp == NULL")); 72482cd038dSYoshinobu Inoue 7254cc20ab1SSeigo Tanimura if ((so->so_state & SS_ISCONNECTED) == 0) 7260ae76120SRobert Watson return (ENOTCONN); 72782cd038dSYoshinobu Inoue inp->in6p_faddr = in6addr_any; 728ac45e92fSRobert Watson rip6_abort(so); 72914ba8addSRobert Watson return (0); 73082cd038dSYoshinobu Inoue } 73182cd038dSYoshinobu Inoue 73282cd038dSYoshinobu Inoue static int 733b40ce416SJulian Elischer rip6_bind(struct socket *so, struct sockaddr *nam, struct thread *td) 73482cd038dSYoshinobu Inoue { 7350ae76120SRobert Watson struct inpcb *inp; 73682cd038dSYoshinobu Inoue struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam; 7378c0fec80SRobert Watson struct ifaddr *ifa = NULL; 738a1f7e5f8SHajimu UMEMOTO int error = 0; 73982cd038dSYoshinobu Inoue 7400ae76120SRobert Watson inp = sotoinpcb(so); 74114ba8addSRobert Watson KASSERT(inp != NULL, ("rip6_bind: inp == NULL")); 7420ae76120SRobert Watson 74382cd038dSYoshinobu Inoue if (nam->sa_len != sizeof(*addr)) 7440ae76120SRobert Watson return (EINVAL); 745b89e82ddSJamie Gritton if ((error = prison_check_ip6(td->td_ucred, &addr->sin6_addr)) != 0) 746b89e82ddSJamie Gritton return (error); 747603724d3SBjoern A. Zeeb if (TAILQ_EMPTY(&V_ifnet) || addr->sin6_family != AF_INET6) 7480ae76120SRobert Watson return (EADDRNOTAVAIL); 749603724d3SBjoern A. Zeeb if ((error = sa6_embedscope(addr, V_ip6_use_defzone)) != 0) 750a1f7e5f8SHajimu UMEMOTO return (error); 751a1f7e5f8SHajimu UMEMOTO 75282cd038dSYoshinobu Inoue if (!IN6_IS_ADDR_UNSPECIFIED(&addr->sin6_addr) && 7538c0fec80SRobert Watson (ifa = ifa_ifwithaddr((struct sockaddr *)addr)) == NULL) 7540ae76120SRobert Watson return (EADDRNOTAVAIL); 7558c0fec80SRobert Watson if (ifa != NULL && 7568c0fec80SRobert Watson ((struct in6_ifaddr *)ifa)->ia6_flags & 75782cd038dSYoshinobu Inoue (IN6_IFF_ANYCAST|IN6_IFF_NOTREADY| 75882cd038dSYoshinobu Inoue IN6_IFF_DETACHED|IN6_IFF_DEPRECATED)) { 7598c0fec80SRobert Watson ifa_free(ifa); 76082cd038dSYoshinobu Inoue return (EADDRNOTAVAIL); 76182cd038dSYoshinobu Inoue } 7628c0fec80SRobert Watson if (ifa != NULL) 7638c0fec80SRobert Watson ifa_free(ifa); 764603724d3SBjoern A. Zeeb INP_INFO_WLOCK(&V_ripcbinfo); 7658501a69cSRobert Watson INP_WLOCK(inp); 76682cd038dSYoshinobu Inoue inp->in6p_laddr = addr->sin6_addr; 7678501a69cSRobert Watson INP_WUNLOCK(inp); 768603724d3SBjoern A. Zeeb INP_INFO_WUNLOCK(&V_ripcbinfo); 7690ae76120SRobert Watson return (0); 77082cd038dSYoshinobu Inoue } 77182cd038dSYoshinobu Inoue 77282cd038dSYoshinobu Inoue static int 773b40ce416SJulian Elischer rip6_connect(struct socket *so, struct sockaddr *nam, struct thread *td) 77482cd038dSYoshinobu Inoue { 7750ae76120SRobert Watson struct inpcb *inp; 77682cd038dSYoshinobu Inoue struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam; 77788d166bfSBjoern A. Zeeb struct in6_addr in6a; 778a1f7e5f8SHajimu UMEMOTO int error = 0, scope_ambiguous = 0; 77982cd038dSYoshinobu Inoue 7800ae76120SRobert Watson inp = sotoinpcb(so); 78114ba8addSRobert Watson KASSERT(inp != NULL, ("rip6_connect: inp == NULL")); 7820ae76120SRobert Watson 78382cd038dSYoshinobu Inoue if (nam->sa_len != sizeof(*addr)) 7840ae76120SRobert Watson return (EINVAL); 785603724d3SBjoern A. Zeeb if (TAILQ_EMPTY(&V_ifnet)) 7860ae76120SRobert Watson return (EADDRNOTAVAIL); 78782cd038dSYoshinobu Inoue if (addr->sin6_family != AF_INET6) 7880ae76120SRobert Watson return (EAFNOSUPPORT); 789a1f7e5f8SHajimu UMEMOTO 790a1f7e5f8SHajimu UMEMOTO /* 7910ae76120SRobert Watson * Application should provide a proper zone ID or the use of default 7920ae76120SRobert Watson * zone IDs should be enabled. Unfortunately, some applications do 7930ae76120SRobert Watson * not behave as it should, so we need a workaround. Even if an 7940ae76120SRobert Watson * appropriate ID is not determined, we'll see if we can determine 7950ae76120SRobert Watson * the outgoing interface. If we can, determine the zone ID based on 7960ae76120SRobert Watson * the interface below. 797a1f7e5f8SHajimu UMEMOTO */ 798603724d3SBjoern A. Zeeb if (addr->sin6_scope_id == 0 && !V_ip6_use_defzone) 799a1f7e5f8SHajimu UMEMOTO scope_ambiguous = 1; 800603724d3SBjoern A. Zeeb if ((error = sa6_embedscope(addr, V_ip6_use_defzone)) != 0) 801a1f7e5f8SHajimu UMEMOTO return (error); 802a1f7e5f8SHajimu UMEMOTO 803603724d3SBjoern A. Zeeb INP_INFO_WLOCK(&V_ripcbinfo); 8048501a69cSRobert Watson INP_WLOCK(inp); 80582cd038dSYoshinobu Inoue /* Source address selection. XXX: need pcblookup? */ 806601c0b8bSAlexander V. Chernikov error = in6_selectsrc_socket(addr, inp->in6p_outputopts, 807601c0b8bSAlexander V. Chernikov inp, so->so_cred, scope_ambiguous, &in6a, NULL); 80888d166bfSBjoern A. Zeeb if (error) { 8098501a69cSRobert Watson INP_WUNLOCK(inp); 810603724d3SBjoern A. Zeeb INP_INFO_WUNLOCK(&V_ripcbinfo); 81188d166bfSBjoern A. Zeeb return (error); 81207385abdSRobert Watson } 813a1f7e5f8SHajimu UMEMOTO 81482cd038dSYoshinobu Inoue inp->in6p_faddr = addr->sin6_addr; 81588d166bfSBjoern A. Zeeb inp->in6p_laddr = in6a; 81682cd038dSYoshinobu Inoue soisconnected(so); 8178501a69cSRobert Watson INP_WUNLOCK(inp); 818603724d3SBjoern A. Zeeb INP_INFO_WUNLOCK(&V_ripcbinfo); 8190ae76120SRobert Watson return (0); 82082cd038dSYoshinobu Inoue } 82182cd038dSYoshinobu Inoue 82282cd038dSYoshinobu Inoue static int 82382cd038dSYoshinobu Inoue rip6_shutdown(struct socket *so) 82482cd038dSYoshinobu Inoue { 82507385abdSRobert Watson struct inpcb *inp; 82607385abdSRobert Watson 82707385abdSRobert Watson inp = sotoinpcb(so); 82814ba8addSRobert Watson KASSERT(inp != NULL, ("rip6_shutdown: inp == NULL")); 8290ae76120SRobert Watson 8308501a69cSRobert Watson INP_WLOCK(inp); 83182cd038dSYoshinobu Inoue socantsendmore(so); 8328501a69cSRobert Watson INP_WUNLOCK(inp); 8330ae76120SRobert Watson return (0); 83482cd038dSYoshinobu Inoue } 83582cd038dSYoshinobu Inoue 83682cd038dSYoshinobu Inoue static int 83782cd038dSYoshinobu Inoue rip6_send(struct socket *so, int flags, struct mbuf *m, struct sockaddr *nam, 838b40ce416SJulian Elischer struct mbuf *control, struct thread *td) 83982cd038dSYoshinobu Inoue { 8400ae76120SRobert Watson struct inpcb *inp; 84182cd038dSYoshinobu Inoue struct sockaddr_in6 tmp; 84282cd038dSYoshinobu Inoue struct sockaddr_in6 *dst; 84307385abdSRobert Watson int ret; 84482cd038dSYoshinobu Inoue 8450ae76120SRobert Watson inp = sotoinpcb(so); 84614ba8addSRobert Watson KASSERT(inp != NULL, ("rip6_send: inp == NULL")); 8470ae76120SRobert Watson 8480ae76120SRobert Watson /* Always copy sockaddr to avoid overwrites. */ 84907385abdSRobert Watson /* Unlocked read. */ 85082cd038dSYoshinobu Inoue if (so->so_state & SS_ISCONNECTED) { 85182cd038dSYoshinobu Inoue if (nam) { 85282cd038dSYoshinobu Inoue m_freem(m); 8530ae76120SRobert Watson return (EISCONN); 85482cd038dSYoshinobu Inoue } 85582cd038dSYoshinobu Inoue /* XXX */ 85682cd038dSYoshinobu Inoue bzero(&tmp, sizeof(tmp)); 85782cd038dSYoshinobu Inoue tmp.sin6_family = AF_INET6; 85882cd038dSYoshinobu Inoue tmp.sin6_len = sizeof(struct sockaddr_in6); 8592209e8f1SRobert Watson INP_RLOCK(inp); 86082cd038dSYoshinobu Inoue bcopy(&inp->in6p_faddr, &tmp.sin6_addr, 86182cd038dSYoshinobu Inoue sizeof(struct in6_addr)); 8622209e8f1SRobert Watson INP_RUNLOCK(inp); 86382cd038dSYoshinobu Inoue dst = &tmp; 86482cd038dSYoshinobu Inoue } else { 86582cd038dSYoshinobu Inoue if (nam == NULL) { 86682cd038dSYoshinobu Inoue m_freem(m); 8670ae76120SRobert Watson return (ENOTCONN); 86882cd038dSYoshinobu Inoue } 869a1f7e5f8SHajimu UMEMOTO if (nam->sa_len != sizeof(struct sockaddr_in6)) { 870a1f7e5f8SHajimu UMEMOTO m_freem(m); 871a1f7e5f8SHajimu UMEMOTO return (EINVAL); 872a1f7e5f8SHajimu UMEMOTO } 873686cdd19SJun-ichiro itojun Hagino tmp = *(struct sockaddr_in6 *)nam; 874686cdd19SJun-ichiro itojun Hagino dst = &tmp; 875a1f7e5f8SHajimu UMEMOTO 876a1f7e5f8SHajimu UMEMOTO if (dst->sin6_family == AF_UNSPEC) { 877a1f7e5f8SHajimu UMEMOTO /* 878a1f7e5f8SHajimu UMEMOTO * XXX: we allow this case for backward 879a1f7e5f8SHajimu UMEMOTO * compatibility to buggy applications that 880a1f7e5f8SHajimu UMEMOTO * rely on old (and wrong) kernel behavior. 881a1f7e5f8SHajimu UMEMOTO */ 882a1f7e5f8SHajimu UMEMOTO log(LOG_INFO, "rip6 SEND: address family is " 883a1f7e5f8SHajimu UMEMOTO "unspec. Assume AF_INET6\n"); 884a1f7e5f8SHajimu UMEMOTO dst->sin6_family = AF_INET6; 885a1f7e5f8SHajimu UMEMOTO } else if (dst->sin6_family != AF_INET6) { 886a1f7e5f8SHajimu UMEMOTO m_freem(m); 887a1f7e5f8SHajimu UMEMOTO return(EAFNOSUPPORT); 88882cd038dSYoshinobu Inoue } 889686cdd19SJun-ichiro itojun Hagino } 89007385abdSRobert Watson ret = rip6_output(m, so, dst, control); 89107385abdSRobert Watson return (ret); 89282cd038dSYoshinobu Inoue } 89382cd038dSYoshinobu Inoue 89482cd038dSYoshinobu Inoue struct pr_usrreqs rip6_usrreqs = { 895756d52a1SPoul-Henning Kamp .pru_abort = rip6_abort, 896756d52a1SPoul-Henning Kamp .pru_attach = rip6_attach, 897756d52a1SPoul-Henning Kamp .pru_bind = rip6_bind, 898756d52a1SPoul-Henning Kamp .pru_connect = rip6_connect, 899756d52a1SPoul-Henning Kamp .pru_control = in6_control, 900756d52a1SPoul-Henning Kamp .pru_detach = rip6_detach, 901756d52a1SPoul-Henning Kamp .pru_disconnect = rip6_disconnect, 90254d642bbSRobert Watson .pru_peeraddr = in6_getpeeraddr, 903756d52a1SPoul-Henning Kamp .pru_send = rip6_send, 904756d52a1SPoul-Henning Kamp .pru_shutdown = rip6_shutdown, 90554d642bbSRobert Watson .pru_sockaddr = in6_getsockaddr, 906a152f8a3SRobert Watson .pru_close = rip6_close, 90782cd038dSYoshinobu Inoue }; 908