xref: /freebsd/sys/netinet6/raw_ip6.c (revision fbbd9655e5107c68e4e0146ff22b73d7350475bc)
1caf43b02SWarner Losh /*-
282cd038dSYoshinobu Inoue  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
382cd038dSYoshinobu Inoue  * All rights reserved.
482cd038dSYoshinobu Inoue  *
582cd038dSYoshinobu Inoue  * Redistribution and use in source and binary forms, with or without
682cd038dSYoshinobu Inoue  * modification, are permitted provided that the following conditions
782cd038dSYoshinobu Inoue  * are met:
882cd038dSYoshinobu Inoue  * 1. Redistributions of source code must retain the above copyright
982cd038dSYoshinobu Inoue  *    notice, this list of conditions and the following disclaimer.
1082cd038dSYoshinobu Inoue  * 2. Redistributions in binary form must reproduce the above copyright
1182cd038dSYoshinobu Inoue  *    notice, this list of conditions and the following disclaimer in the
1282cd038dSYoshinobu Inoue  *    documentation and/or other materials provided with the distribution.
1382cd038dSYoshinobu Inoue  * 3. Neither the name of the project nor the names of its contributors
1482cd038dSYoshinobu Inoue  *    may be used to endorse or promote products derived from this software
1582cd038dSYoshinobu Inoue  *    without specific prior written permission.
1682cd038dSYoshinobu Inoue  *
1782cd038dSYoshinobu Inoue  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
1882cd038dSYoshinobu Inoue  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
1982cd038dSYoshinobu Inoue  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
2082cd038dSYoshinobu Inoue  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
2182cd038dSYoshinobu Inoue  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
2282cd038dSYoshinobu Inoue  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
2382cd038dSYoshinobu Inoue  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
2482cd038dSYoshinobu Inoue  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
2582cd038dSYoshinobu Inoue  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
2682cd038dSYoshinobu Inoue  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
2782cd038dSYoshinobu Inoue  * SUCH DAMAGE.
2882cd038dSYoshinobu Inoue  */
2982cd038dSYoshinobu Inoue 
30caf43b02SWarner Losh /*-
3182cd038dSYoshinobu Inoue  * Copyright (c) 1982, 1986, 1988, 1993
320ae76120SRobert Watson  *	The Regents of the University of California.
330ae76120SRobert Watson  * All rights reserved.
3482cd038dSYoshinobu Inoue  *
3582cd038dSYoshinobu Inoue  * Redistribution and use in source and binary forms, with or without
3682cd038dSYoshinobu Inoue  * modification, are permitted provided that the following conditions
3782cd038dSYoshinobu Inoue  * are met:
3882cd038dSYoshinobu Inoue  * 1. Redistributions of source code must retain the above copyright
3982cd038dSYoshinobu Inoue  *    notice, this list of conditions and the following disclaimer.
4082cd038dSYoshinobu Inoue  * 2. Redistributions in binary form must reproduce the above copyright
4182cd038dSYoshinobu Inoue  *    notice, this list of conditions and the following disclaimer in the
4282cd038dSYoshinobu Inoue  *    documentation and/or other materials provided with the distribution.
43*fbbd9655SWarner Losh  * 3. Neither the name of the University nor the names of its contributors
4482cd038dSYoshinobu Inoue  *    may be used to endorse or promote products derived from this software
4582cd038dSYoshinobu Inoue  *    without specific prior written permission.
4682cd038dSYoshinobu Inoue  *
4782cd038dSYoshinobu Inoue  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
4882cd038dSYoshinobu Inoue  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
4982cd038dSYoshinobu Inoue  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
5082cd038dSYoshinobu Inoue  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
5182cd038dSYoshinobu Inoue  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
5282cd038dSYoshinobu Inoue  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
5382cd038dSYoshinobu Inoue  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
5482cd038dSYoshinobu Inoue  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
5582cd038dSYoshinobu Inoue  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
5682cd038dSYoshinobu Inoue  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
5782cd038dSYoshinobu Inoue  * SUCH DAMAGE.
5882cd038dSYoshinobu Inoue  *
5982cd038dSYoshinobu Inoue  *	@(#)raw_ip.c	8.2 (Berkeley) 1/4/94
6082cd038dSYoshinobu Inoue  */
6182cd038dSYoshinobu Inoue 
62b48287a3SDavid E. O'Brien #include <sys/cdefs.h>
63b48287a3SDavid E. O'Brien __FBSDID("$FreeBSD$");
64b48287a3SDavid E. O'Brien 
656a800098SYoshinobu Inoue #include "opt_ipsec.h"
6633841545SHajimu UMEMOTO #include "opt_inet6.h"
676a800098SYoshinobu Inoue 
6882cd038dSYoshinobu Inoue #include <sys/param.h>
6982cd038dSYoshinobu Inoue #include <sys/errno.h>
70413628a7SBjoern A. Zeeb #include <sys/jail.h>
71a786f679SAndrey V. Elsukov #include <sys/kernel.h>
72960ed29cSSeigo Tanimura #include <sys/lock.h>
73960ed29cSSeigo Tanimura #include <sys/malloc.h>
74960ed29cSSeigo Tanimura #include <sys/mbuf.h>
75c2259ba4SRobert Watson #include <sys/priv.h>
76960ed29cSSeigo Tanimura #include <sys/proc.h>
77960ed29cSSeigo Tanimura #include <sys/protosw.h>
78960ed29cSSeigo Tanimura #include <sys/signalvar.h>
79960ed29cSSeigo Tanimura #include <sys/socket.h>
80960ed29cSSeigo Tanimura #include <sys/socketvar.h>
81960ed29cSSeigo Tanimura #include <sys/sx.h>
82a1f7e5f8SHajimu UMEMOTO #include <sys/syslog.h>
8382cd038dSYoshinobu Inoue 
8482cd038dSYoshinobu Inoue #include <net/if.h>
8576039bc8SGleb Smirnoff #include <net/if_var.h>
8682cd038dSYoshinobu Inoue #include <net/if_types.h>
87960ed29cSSeigo Tanimura #include <net/route.h>
884b79449eSBjoern A. Zeeb #include <net/vnet.h>
8982cd038dSYoshinobu Inoue 
9082cd038dSYoshinobu Inoue #include <netinet/in.h>
9182cd038dSYoshinobu Inoue #include <netinet/in_var.h>
9282cd038dSYoshinobu Inoue #include <netinet/in_systm.h>
9382cd038dSYoshinobu Inoue #include <netinet/in_pcb.h>
944b79449eSBjoern A. Zeeb 
954b79449eSBjoern A. Zeeb #include <netinet/icmp6.h>
96960ed29cSSeigo Tanimura #include <netinet/ip6.h>
971db8d1f8SAna Kukec #include <netinet/ip_var.h>
98686cdd19SJun-ichiro itojun Hagino #include <netinet6/ip6protosw.h>
99960ed29cSSeigo Tanimura #include <netinet6/ip6_mroute.h>
100960ed29cSSeigo Tanimura #include <netinet6/in6_pcb.h>
101960ed29cSSeigo Tanimura #include <netinet6/ip6_var.h>
102960ed29cSSeigo Tanimura #include <netinet6/nd6.h>
103960ed29cSSeigo Tanimura #include <netinet6/raw_ip6.h>
104686cdd19SJun-ichiro itojun Hagino #include <netinet6/scope6_var.h>
1051db8d1f8SAna Kukec #include <netinet6/send.h>
10682cd038dSYoshinobu Inoue 
107fcf59617SAndrey V. Elsukov #include <netipsec/ipsec_support.h>
108b9234fafSSam Leffler 
10982cd038dSYoshinobu Inoue #include <machine/stdarg.h>
11082cd038dSYoshinobu Inoue 
11182cd038dSYoshinobu Inoue #define	satosin6(sa)	((struct sockaddr_in6 *)(sa))
11282cd038dSYoshinobu Inoue #define	ifatoia6(ifa)	((struct in6_ifaddr *)(ifa))
11382cd038dSYoshinobu Inoue 
11482cd038dSYoshinobu Inoue /*
11582cd038dSYoshinobu Inoue  * Raw interface to IP6 protocol.
11682cd038dSYoshinobu Inoue  */
11782cd038dSYoshinobu Inoue 
118eddfbb76SRobert Watson VNET_DECLARE(struct inpcbhead, ripcb);
119eddfbb76SRobert Watson VNET_DECLARE(struct inpcbinfo, ripcbinfo);
1201e77c105SRobert Watson #define	V_ripcb				VNET(ripcb)
1211e77c105SRobert Watson #define	V_ripcbinfo			VNET(ripcbinfo)
122eddfbb76SRobert Watson 
12397021c24SMarko Zec extern u_long	rip_sendspace;
12497021c24SMarko Zec extern u_long	rip_recvspace;
12597021c24SMarko Zec 
126a786f679SAndrey V. Elsukov VNET_PCPUSTAT_DEFINE(struct rip6stat, rip6stat);
127a786f679SAndrey V. Elsukov VNET_PCPUSTAT_SYSINIT(rip6stat);
128a786f679SAndrey V. Elsukov 
129a786f679SAndrey V. Elsukov #ifdef VIMAGE
130a786f679SAndrey V. Elsukov VNET_PCPUSTAT_SYSUNINIT(rip6stat);
131a786f679SAndrey V. Elsukov #endif /* VIMAGE */
13282cea7e6SBjoern A. Zeeb 
13382cd038dSYoshinobu Inoue /*
13433cde130SBruce M Simpson  * Hooks for multicast routing. They all default to NULL, so leave them not
13533cde130SBruce M Simpson  * initialized and rely on BSS being set to 0.
1366be2e366SBruce M Simpson  */
13733cde130SBruce M Simpson 
13833cde130SBruce M Simpson /*
13933cde130SBruce M Simpson  * The socket used to communicate with the multicast routing daemon.
14033cde130SBruce M Simpson  */
141eddfbb76SRobert Watson VNET_DEFINE(struct socket *, ip6_mrouter);
14233cde130SBruce M Simpson 
14333cde130SBruce M Simpson /*
14433cde130SBruce M Simpson  * The various mrouter functions.
14533cde130SBruce M Simpson  */
1466be2e366SBruce M Simpson int (*ip6_mrouter_set)(struct socket *, struct sockopt *);
1476be2e366SBruce M Simpson int (*ip6_mrouter_get)(struct socket *, struct sockopt *);
1486be2e366SBruce M Simpson int (*ip6_mrouter_done)(void);
1496be2e366SBruce M Simpson int (*ip6_mforward)(struct ip6_hdr *, struct ifnet *, struct mbuf *);
150e40bae9aSRoman Divacky int (*mrt6_ioctl)(u_long, caddr_t);
1516be2e366SBruce M Simpson 
1526be2e366SBruce M Simpson /*
1530ae76120SRobert Watson  * Setup generic address and protocol structures for raw_input routine, then
1540ae76120SRobert Watson  * pass them along with mbuf chain.
15582cd038dSYoshinobu Inoue  */
15682cd038dSYoshinobu Inoue int
1571272577eSXin LI rip6_input(struct mbuf **mp, int *offp, int proto)
15882cd038dSYoshinobu Inoue {
15933cde130SBruce M Simpson 	struct ifnet *ifp;
16082cd038dSYoshinobu Inoue 	struct mbuf *m = *mp;
16182cd038dSYoshinobu Inoue 	register struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
16282cd038dSYoshinobu Inoue 	register struct inpcb *in6p;
163155d72c4SPedro F. Giffuni 	struct inpcb *last = NULL;
16433841545SHajimu UMEMOTO 	struct mbuf *opts = NULL;
165af12e09eSHajimu UMEMOTO 	struct sockaddr_in6 fromsa;
16682cd038dSYoshinobu Inoue 
167f1d7ebfeSAndrey V. Elsukov 	RIP6STAT_INC(rip6s_ipackets);
16833841545SHajimu UMEMOTO 
169c10c5b1eSErmal Luçi 	init_sin6(&fromsa, m); /* general init */
17082cd038dSYoshinobu Inoue 
17133cde130SBruce M Simpson 	ifp = m->m_pkthdr.rcvif;
17233cde130SBruce M Simpson 
173603724d3SBjoern A. Zeeb 	INP_INFO_RLOCK(&V_ripcbinfo);
174603724d3SBjoern A. Zeeb 	LIST_FOREACH(in6p, &V_ripcb, inp_list) {
175413628a7SBjoern A. Zeeb 		/* XXX inp locking */
176fc384fa5SBjoern A. Zeeb 		if ((in6p->inp_vflag & INP_IPV6) == 0)
17782cd038dSYoshinobu Inoue 			continue;
178fc384fa5SBjoern A. Zeeb 		if (in6p->inp_ip_p &&
179fc384fa5SBjoern A. Zeeb 		    in6p->inp_ip_p != proto)
180b11e21aeSAlexander Motin 			continue;
18182cd038dSYoshinobu Inoue 		if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) &&
18282cd038dSYoshinobu Inoue 		    !IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &ip6->ip6_dst))
183b11e21aeSAlexander Motin 			continue;
18482cd038dSYoshinobu Inoue 		if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr) &&
18582cd038dSYoshinobu Inoue 		    !IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, &ip6->ip6_src))
186b11e21aeSAlexander Motin 			continue;
187de0bd6f7SBjoern A. Zeeb 		if (jailed_without_vnet(in6p->inp_cred)) {
18833cde130SBruce M Simpson 			/*
18933cde130SBruce M Simpson 			 * Allow raw socket in jail to receive multicast;
19033cde130SBruce M Simpson 			 * assume process had PRIV_NETINET_RAW at attach,
19133cde130SBruce M Simpson 			 * and fall through into normal filter path if so.
19233cde130SBruce M Simpson 			 */
19333cde130SBruce M Simpson 			if (!IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) &&
19433cde130SBruce M Simpson 			    prison_check_ip6(in6p->inp_cred,
19533cde130SBruce M Simpson 			    &ip6->ip6_dst) != 0)
196413628a7SBjoern A. Zeeb 				continue;
19733cde130SBruce M Simpson 		}
198b7c896c9SAndrey V. Elsukov 		INP_RLOCK(in6p);
19933841545SHajimu UMEMOTO 		if (in6p->in6p_cksum != -1) {
200f1d7ebfeSAndrey V. Elsukov 			RIP6STAT_INC(rip6s_isum);
2014350fcabSSUZUKI Shinsuke 			if (in6_cksum(m, proto, *offp,
20282cd038dSYoshinobu Inoue 			    m->m_pkthdr.len - *offp)) {
2036c5bbf5cSAlexander Motin 				INP_RUNLOCK(in6p);
204f1d7ebfeSAndrey V. Elsukov 				RIP6STAT_INC(rip6s_badsum);
205b11e21aeSAlexander Motin 				continue;
20682cd038dSYoshinobu Inoue 			}
20733841545SHajimu UMEMOTO 		}
20833cde130SBruce M Simpson 		/*
20933cde130SBruce M Simpson 		 * If this raw socket has multicast state, and we
21033cde130SBruce M Simpson 		 * have received a multicast, check if this socket
21133cde130SBruce M Simpson 		 * should receive it, as multicast filtering is now
21233cde130SBruce M Simpson 		 * the responsibility of the transport layer.
21333cde130SBruce M Simpson 		 */
21433cde130SBruce M Simpson 		if (in6p->in6p_moptions &&
21533cde130SBruce M Simpson 		    IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
2167ab5a5cdSBruce M Simpson 			/*
2177ab5a5cdSBruce M Simpson 			 * If the incoming datagram is for MLD, allow it
2187ab5a5cdSBruce M Simpson 			 * through unconditionally to the raw socket.
2197ab5a5cdSBruce M Simpson 			 *
2207ab5a5cdSBruce M Simpson 			 * Use the M_RTALERT_MLD flag to check for MLD
2217ab5a5cdSBruce M Simpson 			 * traffic without having to inspect the mbuf chain
2227ab5a5cdSBruce M Simpson 			 * more deeply, as all MLDv1/v2 host messages MUST
2237ab5a5cdSBruce M Simpson 			 * contain the Router Alert option.
2247ab5a5cdSBruce M Simpson 			 *
2257ab5a5cdSBruce M Simpson 			 * In the case of MLDv1, we may not have explicitly
2267ab5a5cdSBruce M Simpson 			 * joined the group, and may have set IFF_ALLMULTI
2277ab5a5cdSBruce M Simpson 			 * on the interface. im6o_mc_filter() may discard
2287ab5a5cdSBruce M Simpson 			 * control traffic we actually need to see.
2297ab5a5cdSBruce M Simpson 			 *
2307ab5a5cdSBruce M Simpson 			 * Userland multicast routing daemons should continue
2317ab5a5cdSBruce M Simpson 			 * filter the control traffic appropriately.
2327ab5a5cdSBruce M Simpson 			 */
23333cde130SBruce M Simpson 			int blocked;
23433cde130SBruce M Simpson 
2357ab5a5cdSBruce M Simpson 			blocked = MCAST_PASS;
2367ab5a5cdSBruce M Simpson 			if ((m->m_flags & M_RTALERT_MLD) == 0) {
2377ab5a5cdSBruce M Simpson 				struct sockaddr_in6 mcaddr;
2387ab5a5cdSBruce M Simpson 
23933cde130SBruce M Simpson 				bzero(&mcaddr, sizeof(struct sockaddr_in6));
24033cde130SBruce M Simpson 				mcaddr.sin6_len = sizeof(struct sockaddr_in6);
24133cde130SBruce M Simpson 				mcaddr.sin6_family = AF_INET6;
24233cde130SBruce M Simpson 				mcaddr.sin6_addr = ip6->ip6_dst;
24333cde130SBruce M Simpson 
2447ab5a5cdSBruce M Simpson 				blocked = im6o_mc_filter(in6p->in6p_moptions,
2457ab5a5cdSBruce M Simpson 				    ifp,
24633cde130SBruce M Simpson 				    (struct sockaddr *)&mcaddr,
24733cde130SBruce M Simpson 				    (struct sockaddr *)&fromsa);
2487ab5a5cdSBruce M Simpson 			}
24933cde130SBruce M Simpson 			if (blocked != MCAST_PASS) {
25033cde130SBruce M Simpson 				IP6STAT_INC(ip6s_notmember);
2518c09aa57SBjoern A. Zeeb 				INP_RUNLOCK(in6p);
25233cde130SBruce M Simpson 				continue;
25333cde130SBruce M Simpson 			}
25433cde130SBruce M Simpson 		}
255aba53ef0SKip Macy 		if (last != NULL) {
256c3bef61eSKevin Lo 			struct mbuf *n = m_copym(m, 0, M_COPYALL, M_NOWAIT);
25733841545SHajimu UMEMOTO 
258fcf59617SAndrey V. Elsukov #if defined(IPSEC) || defined(IPSEC_SUPPORT)
259da0f4099SHajimu UMEMOTO 			/*
260da0f4099SHajimu UMEMOTO 			 * Check AH/ESP integrity.
261da0f4099SHajimu UMEMOTO 			 */
262fcf59617SAndrey V. Elsukov 			if (IPSEC_ENABLED(ipv6)) {
263fcf59617SAndrey V. Elsukov 				if (n != NULL &&
264fcf59617SAndrey V. Elsukov 				    IPSEC_CHECK_POLICY(ipv6, n, last) != 0) {
265da0f4099SHajimu UMEMOTO 					m_freem(n);
2660ae76120SRobert Watson 					/* Do not inject data into pcb. */
267fcf59617SAndrey V. Elsukov 					n = NULL;
268fcf59617SAndrey V. Elsukov 				}
269fcf59617SAndrey V. Elsukov 			}
270b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */
27182cd038dSYoshinobu Inoue 			if (n) {
27297590249SBjoern A. Zeeb 				if (last->inp_flags & INP_CONTROLOPTS ||
273fc384fa5SBjoern A. Zeeb 				    last->inp_socket->so_options & SO_TIMESTAMP)
27411de19f4SHajimu UMEMOTO 					ip6_savecontrol(last, n, &opts);
27582cd038dSYoshinobu Inoue 				/* strip intermediate headers */
27682cd038dSYoshinobu Inoue 				m_adj(n, *offp);
277fc384fa5SBjoern A. Zeeb 				if (sbappendaddr(&last->inp_socket->so_rcv,
278af12e09eSHajimu UMEMOTO 						(struct sockaddr *)&fromsa,
27982cd038dSYoshinobu Inoue 						 n, opts) == 0) {
28082cd038dSYoshinobu Inoue 					m_freem(n);
28182cd038dSYoshinobu Inoue 					if (opts)
28282cd038dSYoshinobu Inoue 						m_freem(opts);
283f1d7ebfeSAndrey V. Elsukov 					RIP6STAT_INC(rip6s_fullsock);
2844cc20ab1SSeigo Tanimura 				} else
285fc384fa5SBjoern A. Zeeb 					sorwakeup(last->inp_socket);
28682cd038dSYoshinobu Inoue 				opts = NULL;
28782cd038dSYoshinobu Inoue 			}
2889ad11dd8SRobert Watson 			INP_RUNLOCK(last);
28982cd038dSYoshinobu Inoue 		}
29082cd038dSYoshinobu Inoue 		last = in6p;
29182cd038dSYoshinobu Inoue 	}
292603724d3SBjoern A. Zeeb 	INP_INFO_RUNLOCK(&V_ripcbinfo);
293fcf59617SAndrey V. Elsukov #if defined(IPSEC) || defined(IPSEC_SUPPORT)
294da0f4099SHajimu UMEMOTO 	/*
295da0f4099SHajimu UMEMOTO 	 * Check AH/ESP integrity.
296da0f4099SHajimu UMEMOTO 	 */
297fcf59617SAndrey V. Elsukov 	if (IPSEC_ENABLED(ipv6) && last != NULL &&
298fcf59617SAndrey V. Elsukov 	    IPSEC_CHECK_POLICY(ipv6, m, last) != 0) {
299da0f4099SHajimu UMEMOTO 		m_freem(m);
3009cb8d207SAndrey V. Elsukov 		IP6STAT_DEC(ip6s_delivered);
3010ae76120SRobert Watson 		/* Do not inject data into pcb. */
3029ad11dd8SRobert Watson 		INP_RUNLOCK(last);
303b9234fafSSam Leffler 	} else
304b2630c29SGeorge V. Neville-Neil #endif /* IPSEC */
305aba53ef0SKip Macy 	if (last != NULL) {
30697590249SBjoern A. Zeeb 		if (last->inp_flags & INP_CONTROLOPTS ||
307fc384fa5SBjoern A. Zeeb 		    last->inp_socket->so_options & SO_TIMESTAMP)
30811de19f4SHajimu UMEMOTO 			ip6_savecontrol(last, m, &opts);
3090ae76120SRobert Watson 		/* Strip intermediate headers. */
31082cd038dSYoshinobu Inoue 		m_adj(m, *offp);
311fc384fa5SBjoern A. Zeeb 		if (sbappendaddr(&last->inp_socket->so_rcv,
312af12e09eSHajimu UMEMOTO 		    (struct sockaddr *)&fromsa, m, opts) == 0) {
31382cd038dSYoshinobu Inoue 			m_freem(m);
31482cd038dSYoshinobu Inoue 			if (opts)
31582cd038dSYoshinobu Inoue 				m_freem(opts);
316f1d7ebfeSAndrey V. Elsukov 			RIP6STAT_INC(rip6s_fullsock);
3174cc20ab1SSeigo Tanimura 		} else
318fc384fa5SBjoern A. Zeeb 			sorwakeup(last->inp_socket);
3199ad11dd8SRobert Watson 		INP_RUNLOCK(last);
32082cd038dSYoshinobu Inoue 	} else {
321f1d7ebfeSAndrey V. Elsukov 		RIP6STAT_INC(rip6s_nosock);
32233841545SHajimu UMEMOTO 		if (m->m_flags & M_MCAST)
323f1d7ebfeSAndrey V. Elsukov 			RIP6STAT_INC(rip6s_nosockmcast);
32482cd038dSYoshinobu Inoue 		if (proto == IPPROTO_NONE)
32582cd038dSYoshinobu Inoue 			m_freem(m);
32682cd038dSYoshinobu Inoue 		else {
32782cd038dSYoshinobu Inoue 			char *prvnxtp = ip6_get_prevhdr(m, *offp); /* XXX */
32882cd038dSYoshinobu Inoue 			icmp6_error(m, ICMP6_PARAM_PROB,
32982cd038dSYoshinobu Inoue 			    ICMP6_PARAMPROB_NEXTHEADER,
33082cd038dSYoshinobu Inoue 			    prvnxtp - mtod(m, char *));
33182cd038dSYoshinobu Inoue 		}
3329cb8d207SAndrey V. Elsukov 		IP6STAT_DEC(ip6s_delivered);
33382cd038dSYoshinobu Inoue 	}
3340ae76120SRobert Watson 	return (IPPROTO_DONE);
33582cd038dSYoshinobu Inoue }
33682cd038dSYoshinobu Inoue 
337686cdd19SJun-ichiro itojun Hagino void
3381272577eSXin LI rip6_ctlinput(int cmd, struct sockaddr *sa, void *d)
339686cdd19SJun-ichiro itojun Hagino {
340686cdd19SJun-ichiro itojun Hagino 	struct ip6_hdr *ip6;
341686cdd19SJun-ichiro itojun Hagino 	struct mbuf *m;
342686cdd19SJun-ichiro itojun Hagino 	int off = 0;
34333841545SHajimu UMEMOTO 	struct ip6ctlparam *ip6cp = NULL;
34433841545SHajimu UMEMOTO 	const struct sockaddr_in6 *sa6_src = NULL;
345efddf5c6SHajimu UMEMOTO 	void *cmdarg;
3469233d8f3SDavid E. O'Brien 	struct inpcb *(*notify)(struct inpcb *, int) = in6_rtchange;
347686cdd19SJun-ichiro itojun Hagino 
348686cdd19SJun-ichiro itojun Hagino 	if (sa->sa_family != AF_INET6 ||
349686cdd19SJun-ichiro itojun Hagino 	    sa->sa_len != sizeof(struct sockaddr_in6))
350686cdd19SJun-ichiro itojun Hagino 		return;
351686cdd19SJun-ichiro itojun Hagino 
352686cdd19SJun-ichiro itojun Hagino 	if ((unsigned)cmd >= PRC_NCMDS)
353686cdd19SJun-ichiro itojun Hagino 		return;
354686cdd19SJun-ichiro itojun Hagino 	if (PRC_IS_REDIRECT(cmd))
355686cdd19SJun-ichiro itojun Hagino 		notify = in6_rtchange, d = NULL;
356686cdd19SJun-ichiro itojun Hagino 	else if (cmd == PRC_HOSTDEAD)
357686cdd19SJun-ichiro itojun Hagino 		d = NULL;
358686cdd19SJun-ichiro itojun Hagino 	else if (inet6ctlerrmap[cmd] == 0)
359686cdd19SJun-ichiro itojun Hagino 		return;
360686cdd19SJun-ichiro itojun Hagino 
3610ae76120SRobert Watson 	/*
3620ae76120SRobert Watson 	 * If the parameter is from icmp6, decode it.
3630ae76120SRobert Watson 	 */
364686cdd19SJun-ichiro itojun Hagino 	if (d != NULL) {
36533841545SHajimu UMEMOTO 		ip6cp = (struct ip6ctlparam *)d;
366686cdd19SJun-ichiro itojun Hagino 		m = ip6cp->ip6c_m;
367686cdd19SJun-ichiro itojun Hagino 		ip6 = ip6cp->ip6c_ip6;
368686cdd19SJun-ichiro itojun Hagino 		off = ip6cp->ip6c_off;
369efddf5c6SHajimu UMEMOTO 		cmdarg = ip6cp->ip6c_cmdarg;
37033841545SHajimu UMEMOTO 		sa6_src = ip6cp->ip6c_src;
371686cdd19SJun-ichiro itojun Hagino 	} else {
372686cdd19SJun-ichiro itojun Hagino 		m = NULL;
373686cdd19SJun-ichiro itojun Hagino 		ip6 = NULL;
374efddf5c6SHajimu UMEMOTO 		cmdarg = NULL;
37533841545SHajimu UMEMOTO 		sa6_src = &sa6_any;
376686cdd19SJun-ichiro itojun Hagino 	}
377686cdd19SJun-ichiro itojun Hagino 
378603724d3SBjoern A. Zeeb 	(void) in6_pcbnotify(&V_ripcbinfo, sa, 0,
3790ae76120SRobert Watson 	    (const struct sockaddr *)sa6_src, 0, cmd, cmdarg, notify);
380686cdd19SJun-ichiro itojun Hagino }
381686cdd19SJun-ichiro itojun Hagino 
38282cd038dSYoshinobu Inoue /*
3830ae76120SRobert Watson  * Generate IPv6 header and pass packet to ip6_output.  Tack on options user
3840ae76120SRobert Watson  * may have setup with control call.
38582cd038dSYoshinobu Inoue  */
38682cd038dSYoshinobu Inoue int
3878f5a8818SKevin Lo rip6_output(struct mbuf *m, struct socket *so, ...)
38882cd038dSYoshinobu Inoue {
38907eb2995SHajimu UMEMOTO 	struct mbuf *control;
3901db8d1f8SAna Kukec 	struct m_tag *mtag;
39182cd038dSYoshinobu Inoue 	struct sockaddr_in6 *dstsock;
39282cd038dSYoshinobu Inoue 	struct in6_addr *dst;
39382cd038dSYoshinobu Inoue 	struct ip6_hdr *ip6;
39482cd038dSYoshinobu Inoue 	struct inpcb *in6p;
39582cd038dSYoshinobu Inoue 	u_int	plen = m->m_pkthdr.len;
39682cd038dSYoshinobu Inoue 	int error = 0;
397e07db7aaSHajimu UMEMOTO 	struct ip6_pktopts opt, *optp;
39882cd038dSYoshinobu Inoue 	struct ifnet *oifp = NULL;
39982cd038dSYoshinobu Inoue 	int type = 0, code = 0;		/* for ICMPv6 output statistics only */
400a1f7e5f8SHajimu UMEMOTO 	int scope_ambiguous = 0;
401388288b2SHajimu UMEMOTO 	int use_defzone = 0;
402601c0b8bSAlexander V. Chernikov 	int hlim = 0;
40388d166bfSBjoern A. Zeeb 	struct in6_addr in6a;
40482cd038dSYoshinobu Inoue 	va_list ap;
40582cd038dSYoshinobu Inoue 
4068f5a8818SKevin Lo 	va_start(ap, so);
40782cd038dSYoshinobu Inoue 	dstsock = va_arg(ap, struct sockaddr_in6 *);
40882cd038dSYoshinobu Inoue 	control = va_arg(ap, struct mbuf *);
40982cd038dSYoshinobu Inoue 	va_end(ap);
41082cd038dSYoshinobu Inoue 
411fc384fa5SBjoern A. Zeeb 	in6p = sotoinpcb(so);
4128501a69cSRobert Watson 	INP_WLOCK(in6p);
41382cd038dSYoshinobu Inoue 
41482cd038dSYoshinobu Inoue 	dst = &dstsock->sin6_addr;
41575bab8b8SKip Macy 	if (control != NULL) {
416d5e3406dSHajimu UMEMOTO 		if ((error = ip6_setpktopts(control, &opt,
41779ba3952SBjoern A. Zeeb 		    in6p->in6p_outputopts, so->so_cred,
41879ba3952SBjoern A. Zeeb 		    so->so_proto->pr_protocol)) != 0) {
41982cd038dSYoshinobu Inoue 			goto bad;
420f95d4633SHajimu UMEMOTO 		}
421e07db7aaSHajimu UMEMOTO 		optp = &opt;
422e07db7aaSHajimu UMEMOTO 	} else
423e07db7aaSHajimu UMEMOTO 		optp = in6p->in6p_outputopts;
42482cd038dSYoshinobu Inoue 
42582cd038dSYoshinobu Inoue 	/*
426a1f7e5f8SHajimu UMEMOTO 	 * Check and convert scope zone ID into internal form.
4270ae76120SRobert Watson 	 *
428a1f7e5f8SHajimu UMEMOTO 	 * XXX: we may still need to determine the zone later.
429a1f7e5f8SHajimu UMEMOTO 	 */
430a1f7e5f8SHajimu UMEMOTO 	if (!(so->so_state & SS_ISCONNECTED)) {
431365ccde0SHajimu UMEMOTO 		if (!optp || !optp->ip6po_pktinfo ||
432365ccde0SHajimu UMEMOTO 		    !optp->ip6po_pktinfo->ipi6_ifindex)
433388288b2SHajimu UMEMOTO 			use_defzone = V_ip6_use_defzone;
434388288b2SHajimu UMEMOTO 		if (dstsock->sin6_scope_id == 0 && !use_defzone)
435a1f7e5f8SHajimu UMEMOTO 			scope_ambiguous = 1;
436388288b2SHajimu UMEMOTO 		if ((error = sa6_embedscope(dstsock, use_defzone)) != 0)
437a1f7e5f8SHajimu UMEMOTO 			goto bad;
438a1f7e5f8SHajimu UMEMOTO 	}
439a1f7e5f8SHajimu UMEMOTO 
440a1f7e5f8SHajimu UMEMOTO 	/*
4410ae76120SRobert Watson 	 * For an ICMPv6 packet, we should know its type and code to update
4420ae76120SRobert Watson 	 * statistics.
44382cd038dSYoshinobu Inoue 	 */
44482cd038dSYoshinobu Inoue 	if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) {
44582cd038dSYoshinobu Inoue 		struct icmp6_hdr *icmp6;
44682cd038dSYoshinobu Inoue 		if (m->m_len < sizeof(struct icmp6_hdr) &&
44782cd038dSYoshinobu Inoue 		    (m = m_pullup(m, sizeof(struct icmp6_hdr))) == NULL) {
44882cd038dSYoshinobu Inoue 			error = ENOBUFS;
44982cd038dSYoshinobu Inoue 			goto bad;
45082cd038dSYoshinobu Inoue 		}
45182cd038dSYoshinobu Inoue 		icmp6 = mtod(m, struct icmp6_hdr *);
45282cd038dSYoshinobu Inoue 		type = icmp6->icmp6_type;
45382cd038dSYoshinobu Inoue 		code = icmp6->icmp6_code;
45482cd038dSYoshinobu Inoue 	}
45582cd038dSYoshinobu Inoue 
456eb1b1807SGleb Smirnoff 	M_PREPEND(m, sizeof(*ip6), M_NOWAIT);
4578a0c4da8SRobert Watson 	if (m == NULL) {
4588a0c4da8SRobert Watson 		error = ENOBUFS;
4598a0c4da8SRobert Watson 		goto bad;
4608a0c4da8SRobert Watson 	}
46182cd038dSYoshinobu Inoue 	ip6 = mtod(m, struct ip6_hdr *);
46282cd038dSYoshinobu Inoue 
46382cd038dSYoshinobu Inoue 	/*
46482cd038dSYoshinobu Inoue 	 * Source address selection.
46582cd038dSYoshinobu Inoue 	 */
466601c0b8bSAlexander V. Chernikov 	error = in6_selectsrc_socket(dstsock, optp, in6p, so->so_cred,
467601c0b8bSAlexander V. Chernikov 	    scope_ambiguous, &in6a, &hlim);
468601c0b8bSAlexander V. Chernikov 
46988d166bfSBjoern A. Zeeb 	if (error)
47082cd038dSYoshinobu Inoue 		goto bad;
4717a657e63SBjoern A. Zeeb 	error = prison_check_ip6(in6p->inp_cred, &in6a);
472b89e82ddSJamie Gritton 	if (error != 0)
473413628a7SBjoern A. Zeeb 		goto bad;
47488d166bfSBjoern A. Zeeb 	ip6->ip6_src = in6a;
475a1f7e5f8SHajimu UMEMOTO 
476a1f7e5f8SHajimu UMEMOTO 	ip6->ip6_dst = dstsock->sin6_addr;
477a1f7e5f8SHajimu UMEMOTO 
4780ae76120SRobert Watson 	/*
4790ae76120SRobert Watson 	 * Fill in the rest of the IPv6 header fields.
4800ae76120SRobert Watson 	 */
4816a800098SYoshinobu Inoue 	ip6->ip6_flow = (ip6->ip6_flow & ~IPV6_FLOWINFO_MASK) |
482fc384fa5SBjoern A. Zeeb 	    (in6p->inp_flow & IPV6_FLOWINFO_MASK);
4836a800098SYoshinobu Inoue 	ip6->ip6_vfc = (ip6->ip6_vfc & ~IPV6_VERSION_MASK) |
4846a800098SYoshinobu Inoue 	    (IPV6_VERSION & IPV6_VERSION_MASK);
4850ae76120SRobert Watson 
4860ae76120SRobert Watson 	/*
4870ae76120SRobert Watson 	 * ip6_plen will be filled in ip6_output, so not fill it here.
4880ae76120SRobert Watson 	 */
489fc384fa5SBjoern A. Zeeb 	ip6->ip6_nxt = in6p->inp_ip_p;
490601c0b8bSAlexander V. Chernikov 	ip6->ip6_hlim = hlim;
49182cd038dSYoshinobu Inoue 
49282cd038dSYoshinobu Inoue 	if (so->so_proto->pr_protocol == IPPROTO_ICMPV6 ||
49382cd038dSYoshinobu Inoue 	    in6p->in6p_cksum != -1) {
49482cd038dSYoshinobu Inoue 		struct mbuf *n;
49582cd038dSYoshinobu Inoue 		int off;
49682cd038dSYoshinobu Inoue 		u_int16_t *p;
49782cd038dSYoshinobu Inoue 
4980ae76120SRobert Watson 		/* Compute checksum. */
49982cd038dSYoshinobu Inoue 		if (so->so_proto->pr_protocol == IPPROTO_ICMPV6)
50082cd038dSYoshinobu Inoue 			off = offsetof(struct icmp6_hdr, icmp6_cksum);
50182cd038dSYoshinobu Inoue 		else
50282cd038dSYoshinobu Inoue 			off = in6p->in6p_cksum;
50382cd038dSYoshinobu Inoue 		if (plen < off + 1) {
50482cd038dSYoshinobu Inoue 			error = EINVAL;
50582cd038dSYoshinobu Inoue 			goto bad;
50682cd038dSYoshinobu Inoue 		}
50782cd038dSYoshinobu Inoue 		off += sizeof(struct ip6_hdr);
50882cd038dSYoshinobu Inoue 
50982cd038dSYoshinobu Inoue 		n = m;
51082cd038dSYoshinobu Inoue 		while (n && n->m_len <= off) {
51182cd038dSYoshinobu Inoue 			off -= n->m_len;
51282cd038dSYoshinobu Inoue 			n = n->m_next;
51382cd038dSYoshinobu Inoue 		}
51482cd038dSYoshinobu Inoue 		if (!n)
51582cd038dSYoshinobu Inoue 			goto bad;
51682cd038dSYoshinobu Inoue 		p = (u_int16_t *)(mtod(n, caddr_t) + off);
51782cd038dSYoshinobu Inoue 		*p = 0;
51882cd038dSYoshinobu Inoue 		*p = in6_cksum(m, ip6->ip6_nxt, sizeof(*ip6), plen);
51982cd038dSYoshinobu Inoue 	}
52082cd038dSYoshinobu Inoue 
5211db8d1f8SAna Kukec 	/*
5221db8d1f8SAna Kukec 	 * Send RA/RS messages to user land for protection, before sending
5231db8d1f8SAna Kukec 	 * them to rtadvd/rtsol.
5241db8d1f8SAna Kukec 	 */
5251db8d1f8SAna Kukec 	if ((send_sendso_input_hook != NULL) &&
5261db8d1f8SAna Kukec 	    so->so_proto->pr_protocol == IPPROTO_ICMPV6) {
5271db8d1f8SAna Kukec 		switch (type) {
5281db8d1f8SAna Kukec 		case ND_ROUTER_ADVERT:
5291db8d1f8SAna Kukec 		case ND_ROUTER_SOLICIT:
5301db8d1f8SAna Kukec 			mtag = m_tag_get(PACKET_TAG_ND_OUTGOING,
5311db8d1f8SAna Kukec 				sizeof(unsigned short), M_NOWAIT);
5321db8d1f8SAna Kukec 			if (mtag == NULL)
5331db8d1f8SAna Kukec 				goto bad;
5341db8d1f8SAna Kukec 			m_tag_prepend(m, mtag);
5351db8d1f8SAna Kukec 		}
5361db8d1f8SAna Kukec 	}
5371db8d1f8SAna Kukec 
538e07db7aaSHajimu UMEMOTO 	error = ip6_output(m, optp, NULL, 0, in6p->in6p_moptions, &oifp, in6p);
53982cd038dSYoshinobu Inoue 	if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) {
54082cd038dSYoshinobu Inoue 		if (oifp)
54182cd038dSYoshinobu Inoue 			icmp6_ifoutstat_inc(oifp, type, code);
542e27b0c87SRobert Watson 		ICMP6STAT_INC(icp6s_outhist[type]);
54333841545SHajimu UMEMOTO 	} else
544f1d7ebfeSAndrey V. Elsukov 		RIP6STAT_INC(rip6s_opackets);
54582cd038dSYoshinobu Inoue 
54682cd038dSYoshinobu Inoue 	goto freectl;
54782cd038dSYoshinobu Inoue 
54882cd038dSYoshinobu Inoue  bad:
54982cd038dSYoshinobu Inoue 	if (m)
55082cd038dSYoshinobu Inoue 		m_freem(m);
55182cd038dSYoshinobu Inoue 
55282cd038dSYoshinobu Inoue  freectl:
55375bab8b8SKip Macy 	if (control != NULL) {
554e07db7aaSHajimu UMEMOTO 		ip6_clearpktopts(&opt, -1);
55582cd038dSYoshinobu Inoue 		m_freem(control);
55633841545SHajimu UMEMOTO 	}
5578501a69cSRobert Watson 	INP_WUNLOCK(in6p);
55882cd038dSYoshinobu Inoue 	return (error);
55982cd038dSYoshinobu Inoue }
56082cd038dSYoshinobu Inoue 
56182cd038dSYoshinobu Inoue /*
56282cd038dSYoshinobu Inoue  * Raw IPv6 socket option processing.
56382cd038dSYoshinobu Inoue  */
56482cd038dSYoshinobu Inoue int
5651272577eSXin LI rip6_ctloutput(struct socket *so, struct sockopt *sopt)
56682cd038dSYoshinobu Inoue {
567ee799639SBjoern A. Zeeb 	struct inpcb *inp;
56882cd038dSYoshinobu Inoue 	int error;
56982cd038dSYoshinobu Inoue 
57082cd038dSYoshinobu Inoue 	if (sopt->sopt_level == IPPROTO_ICMPV6)
57182cd038dSYoshinobu Inoue 		/*
57282cd038dSYoshinobu Inoue 		 * XXX: is it better to call icmp6_ctloutput() directly
57382cd038dSYoshinobu Inoue 		 * from protosw?
57482cd038dSYoshinobu Inoue 		 */
57582cd038dSYoshinobu Inoue 		return (icmp6_ctloutput(so, sopt));
576ee799639SBjoern A. Zeeb 	else if (sopt->sopt_level != IPPROTO_IPV6) {
577ee799639SBjoern A. Zeeb 		if (sopt->sopt_level == SOL_SOCKET &&
578ee799639SBjoern A. Zeeb 		    sopt->sopt_name == SO_SETFIB) {
579ee799639SBjoern A. Zeeb 			inp = sotoinpcb(so);
580ee799639SBjoern A. Zeeb 			INP_WLOCK(inp);
581ee799639SBjoern A. Zeeb 			inp->inp_inc.inc_fibnum = so->so_fibnum;
582ee799639SBjoern A. Zeeb 			INP_WUNLOCK(inp);
583ee799639SBjoern A. Zeeb 			return (0);
584ee799639SBjoern A. Zeeb 		}
58582cd038dSYoshinobu Inoue 		return (EINVAL);
586ee799639SBjoern A. Zeeb 	}
58782cd038dSYoshinobu Inoue 
58882cd038dSYoshinobu Inoue 	error = 0;
58982cd038dSYoshinobu Inoue 
59082cd038dSYoshinobu Inoue 	switch (sopt->sopt_dir) {
59182cd038dSYoshinobu Inoue 	case SOPT_GET:
59282cd038dSYoshinobu Inoue 		switch (sopt->sopt_name) {
59391ec0a1eSYoshinobu Inoue 		case MRT6_INIT:
59491ec0a1eSYoshinobu Inoue 		case MRT6_DONE:
59591ec0a1eSYoshinobu Inoue 		case MRT6_ADD_MIF:
59691ec0a1eSYoshinobu Inoue 		case MRT6_DEL_MIF:
59791ec0a1eSYoshinobu Inoue 		case MRT6_ADD_MFC:
59891ec0a1eSYoshinobu Inoue 		case MRT6_DEL_MFC:
59991ec0a1eSYoshinobu Inoue 		case MRT6_PIM:
6006be2e366SBruce M Simpson 			error = ip6_mrouter_get ?  ip6_mrouter_get(so, sopt) :
6016be2e366SBruce M Simpson 			    EOPNOTSUPP;
60291ec0a1eSYoshinobu Inoue 			break;
60302b9a206SHajimu UMEMOTO 		case IPV6_CHECKSUM:
60402b9a206SHajimu UMEMOTO 			error = ip6_raw_ctloutput(so, sopt);
60502b9a206SHajimu UMEMOTO 			break;
60682cd038dSYoshinobu Inoue 		default:
60782cd038dSYoshinobu Inoue 			error = ip6_ctloutput(so, sopt);
60882cd038dSYoshinobu Inoue 			break;
60982cd038dSYoshinobu Inoue 		}
61082cd038dSYoshinobu Inoue 		break;
61182cd038dSYoshinobu Inoue 
61282cd038dSYoshinobu Inoue 	case SOPT_SET:
61382cd038dSYoshinobu Inoue 		switch (sopt->sopt_name) {
61491ec0a1eSYoshinobu Inoue 		case MRT6_INIT:
61591ec0a1eSYoshinobu Inoue 		case MRT6_DONE:
61691ec0a1eSYoshinobu Inoue 		case MRT6_ADD_MIF:
61791ec0a1eSYoshinobu Inoue 		case MRT6_DEL_MIF:
61891ec0a1eSYoshinobu Inoue 		case MRT6_ADD_MFC:
61991ec0a1eSYoshinobu Inoue 		case MRT6_DEL_MFC:
62091ec0a1eSYoshinobu Inoue 		case MRT6_PIM:
6216be2e366SBruce M Simpson 			error = ip6_mrouter_set ?  ip6_mrouter_set(so, sopt) :
6226be2e366SBruce M Simpson 			    EOPNOTSUPP;
62391ec0a1eSYoshinobu Inoue 			break;
62402b9a206SHajimu UMEMOTO 		case IPV6_CHECKSUM:
62502b9a206SHajimu UMEMOTO 			error = ip6_raw_ctloutput(so, sopt);
62602b9a206SHajimu UMEMOTO 			break;
62782cd038dSYoshinobu Inoue 		default:
62882cd038dSYoshinobu Inoue 			error = ip6_ctloutput(so, sopt);
62982cd038dSYoshinobu Inoue 			break;
63082cd038dSYoshinobu Inoue 		}
63182cd038dSYoshinobu Inoue 		break;
63282cd038dSYoshinobu Inoue 	}
63382cd038dSYoshinobu Inoue 
63482cd038dSYoshinobu Inoue 	return (error);
63582cd038dSYoshinobu Inoue }
63682cd038dSYoshinobu Inoue 
63782cd038dSYoshinobu Inoue static int
638b40ce416SJulian Elischer rip6_attach(struct socket *so, int proto, struct thread *td)
63982cd038dSYoshinobu Inoue {
64082cd038dSYoshinobu Inoue 	struct inpcb *inp;
6418a9d54dfSSam Leffler 	struct icmp6_filter *filter;
642ff7425ceSRobert Watson 	int error;
64382cd038dSYoshinobu Inoue 
64482cd038dSYoshinobu Inoue 	inp = sotoinpcb(so);
64514ba8addSRobert Watson 	KASSERT(inp == NULL, ("rip6_attach: inp != NULL"));
6460ae76120SRobert Watson 
64779ba3952SBjoern A. Zeeb 	error = priv_check(td, PRIV_NETINET_RAW);
64879ba3952SBjoern A. Zeeb 	if (error)
6490ae76120SRobert Watson 		return (error);
65082cd038dSYoshinobu Inoue 	error = soreserve(so, rip_sendspace, rip_recvspace);
65114ba8addSRobert Watson 	if (error)
6520ae76120SRobert Watson 		return (error);
6531ede983cSDag-Erling Smørgrav 	filter = malloc(sizeof(struct icmp6_filter), M_PCB, M_NOWAIT);
65414ba8addSRobert Watson 	if (filter == NULL)
6550ae76120SRobert Watson 		return (ENOMEM);
656603724d3SBjoern A. Zeeb 	INP_INFO_WLOCK(&V_ripcbinfo);
657603724d3SBjoern A. Zeeb 	error = in_pcballoc(so, &V_ripcbinfo);
65807385abdSRobert Watson 	if (error) {
659603724d3SBjoern A. Zeeb 		INP_INFO_WUNLOCK(&V_ripcbinfo);
6601ede983cSDag-Erling Smørgrav 		free(filter, M_PCB);
6610ae76120SRobert Watson 		return (error);
66207385abdSRobert Watson 	}
66382cd038dSYoshinobu Inoue 	inp = (struct inpcb *)so->so_pcb;
664603724d3SBjoern A. Zeeb 	INP_INFO_WUNLOCK(&V_ripcbinfo);
66582cd038dSYoshinobu Inoue 	inp->inp_vflag |= INP_IPV6;
666fc384fa5SBjoern A. Zeeb 	inp->inp_ip_p = (long)proto;
66782cd038dSYoshinobu Inoue 	inp->in6p_hops = -1;	/* use kernel default */
66882cd038dSYoshinobu Inoue 	inp->in6p_cksum = -1;
6698a9d54dfSSam Leffler 	inp->in6p_icmp6filt = filter;
67082cd038dSYoshinobu Inoue 	ICMP6_FILTER_SETPASSALL(inp->in6p_icmp6filt);
6718501a69cSRobert Watson 	INP_WUNLOCK(inp);
6720ae76120SRobert Watson 	return (0);
67382cd038dSYoshinobu Inoue }
67482cd038dSYoshinobu Inoue 
675bc725eafSRobert Watson static void
67682cd038dSYoshinobu Inoue rip6_detach(struct socket *so)
67782cd038dSYoshinobu Inoue {
67882cd038dSYoshinobu Inoue 	struct inpcb *inp;
67982cd038dSYoshinobu Inoue 
68082cd038dSYoshinobu Inoue 	inp = sotoinpcb(so);
68114ba8addSRobert Watson 	KASSERT(inp != NULL, ("rip6_detach: inp == NULL"));
682a152f8a3SRobert Watson 
68333cde130SBruce M Simpson 	if (so == V_ip6_mrouter && ip6_mrouter_done)
684e7e3ecb6SYoshinobu Inoue 		ip6_mrouter_done();
6856be2e366SBruce M Simpson 	/* xxx: RSVP */
686603724d3SBjoern A. Zeeb 	INP_INFO_WLOCK(&V_ripcbinfo);
6878501a69cSRobert Watson 	INP_WLOCK(inp);
6881ede983cSDag-Erling Smørgrav 	free(inp->in6p_icmp6filt, M_PCB);
6890206cdb8SBjoern A. Zeeb 	in_pcbdetach(inp);
6906aee2fc5SBjoern A. Zeeb 	in_pcbfree(inp);
691603724d3SBjoern A. Zeeb 	INP_INFO_WUNLOCK(&V_ripcbinfo);
69282cd038dSYoshinobu Inoue }
69382cd038dSYoshinobu Inoue 
694a152f8a3SRobert Watson /* XXXRW: This can't ever be called. */
695ac45e92fSRobert Watson static void
69682cd038dSYoshinobu Inoue rip6_abort(struct socket *so)
69782cd038dSYoshinobu Inoue {
698a152f8a3SRobert Watson 	struct inpcb *inp;
699a152f8a3SRobert Watson 
700a152f8a3SRobert Watson 	inp = sotoinpcb(so);
701a152f8a3SRobert Watson 	KASSERT(inp != NULL, ("rip6_abort: inp == NULL"));
702a152f8a3SRobert Watson 
70382cd038dSYoshinobu Inoue 	soisdisconnected(so);
704a152f8a3SRobert Watson }
705a152f8a3SRobert Watson 
706a152f8a3SRobert Watson static void
707a152f8a3SRobert Watson rip6_close(struct socket *so)
708a152f8a3SRobert Watson {
709a152f8a3SRobert Watson 	struct inpcb *inp;
710a152f8a3SRobert Watson 
711a152f8a3SRobert Watson 	inp = sotoinpcb(so);
712a152f8a3SRobert Watson 	KASSERT(inp != NULL, ("rip6_close: inp == NULL"));
713a152f8a3SRobert Watson 
714a152f8a3SRobert Watson 	soisdisconnected(so);
71582cd038dSYoshinobu Inoue }
71682cd038dSYoshinobu Inoue 
71782cd038dSYoshinobu Inoue static int
71882cd038dSYoshinobu Inoue rip6_disconnect(struct socket *so)
71982cd038dSYoshinobu Inoue {
7200ae76120SRobert Watson 	struct inpcb *inp;
7210ae76120SRobert Watson 
7220ae76120SRobert Watson 	inp = sotoinpcb(so);
7230ae76120SRobert Watson 	KASSERT(inp != NULL, ("rip6_disconnect: inp == NULL"));
72482cd038dSYoshinobu Inoue 
7254cc20ab1SSeigo Tanimura 	if ((so->so_state & SS_ISCONNECTED) == 0)
7260ae76120SRobert Watson 		return (ENOTCONN);
72782cd038dSYoshinobu Inoue 	inp->in6p_faddr = in6addr_any;
728ac45e92fSRobert Watson 	rip6_abort(so);
72914ba8addSRobert Watson 	return (0);
73082cd038dSYoshinobu Inoue }
73182cd038dSYoshinobu Inoue 
73282cd038dSYoshinobu Inoue static int
733b40ce416SJulian Elischer rip6_bind(struct socket *so, struct sockaddr *nam, struct thread *td)
73482cd038dSYoshinobu Inoue {
7350ae76120SRobert Watson 	struct inpcb *inp;
73682cd038dSYoshinobu Inoue 	struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam;
7378c0fec80SRobert Watson 	struct ifaddr *ifa = NULL;
738a1f7e5f8SHajimu UMEMOTO 	int error = 0;
73982cd038dSYoshinobu Inoue 
7400ae76120SRobert Watson 	inp = sotoinpcb(so);
74114ba8addSRobert Watson 	KASSERT(inp != NULL, ("rip6_bind: inp == NULL"));
7420ae76120SRobert Watson 
74382cd038dSYoshinobu Inoue 	if (nam->sa_len != sizeof(*addr))
7440ae76120SRobert Watson 		return (EINVAL);
745b89e82ddSJamie Gritton 	if ((error = prison_check_ip6(td->td_ucred, &addr->sin6_addr)) != 0)
746b89e82ddSJamie Gritton 		return (error);
747603724d3SBjoern A. Zeeb 	if (TAILQ_EMPTY(&V_ifnet) || addr->sin6_family != AF_INET6)
7480ae76120SRobert Watson 		return (EADDRNOTAVAIL);
749603724d3SBjoern A. Zeeb 	if ((error = sa6_embedscope(addr, V_ip6_use_defzone)) != 0)
750a1f7e5f8SHajimu UMEMOTO 		return (error);
751a1f7e5f8SHajimu UMEMOTO 
75282cd038dSYoshinobu Inoue 	if (!IN6_IS_ADDR_UNSPECIFIED(&addr->sin6_addr) &&
7538c0fec80SRobert Watson 	    (ifa = ifa_ifwithaddr((struct sockaddr *)addr)) == NULL)
7540ae76120SRobert Watson 		return (EADDRNOTAVAIL);
7558c0fec80SRobert Watson 	if (ifa != NULL &&
7568c0fec80SRobert Watson 	    ((struct in6_ifaddr *)ifa)->ia6_flags &
75782cd038dSYoshinobu Inoue 	    (IN6_IFF_ANYCAST|IN6_IFF_NOTREADY|
75882cd038dSYoshinobu Inoue 	     IN6_IFF_DETACHED|IN6_IFF_DEPRECATED)) {
7598c0fec80SRobert Watson 		ifa_free(ifa);
76082cd038dSYoshinobu Inoue 		return (EADDRNOTAVAIL);
76182cd038dSYoshinobu Inoue 	}
7628c0fec80SRobert Watson 	if (ifa != NULL)
7638c0fec80SRobert Watson 		ifa_free(ifa);
764603724d3SBjoern A. Zeeb 	INP_INFO_WLOCK(&V_ripcbinfo);
7658501a69cSRobert Watson 	INP_WLOCK(inp);
76682cd038dSYoshinobu Inoue 	inp->in6p_laddr = addr->sin6_addr;
7678501a69cSRobert Watson 	INP_WUNLOCK(inp);
768603724d3SBjoern A. Zeeb 	INP_INFO_WUNLOCK(&V_ripcbinfo);
7690ae76120SRobert Watson 	return (0);
77082cd038dSYoshinobu Inoue }
77182cd038dSYoshinobu Inoue 
77282cd038dSYoshinobu Inoue static int
773b40ce416SJulian Elischer rip6_connect(struct socket *so, struct sockaddr *nam, struct thread *td)
77482cd038dSYoshinobu Inoue {
7750ae76120SRobert Watson 	struct inpcb *inp;
77682cd038dSYoshinobu Inoue 	struct sockaddr_in6 *addr = (struct sockaddr_in6 *)nam;
77788d166bfSBjoern A. Zeeb 	struct in6_addr in6a;
778a1f7e5f8SHajimu UMEMOTO 	int error = 0, scope_ambiguous = 0;
77982cd038dSYoshinobu Inoue 
7800ae76120SRobert Watson 	inp = sotoinpcb(so);
78114ba8addSRobert Watson 	KASSERT(inp != NULL, ("rip6_connect: inp == NULL"));
7820ae76120SRobert Watson 
78382cd038dSYoshinobu Inoue 	if (nam->sa_len != sizeof(*addr))
7840ae76120SRobert Watson 		return (EINVAL);
785603724d3SBjoern A. Zeeb 	if (TAILQ_EMPTY(&V_ifnet))
7860ae76120SRobert Watson 		return (EADDRNOTAVAIL);
78782cd038dSYoshinobu Inoue 	if (addr->sin6_family != AF_INET6)
7880ae76120SRobert Watson 		return (EAFNOSUPPORT);
789a1f7e5f8SHajimu UMEMOTO 
790a1f7e5f8SHajimu UMEMOTO 	/*
7910ae76120SRobert Watson 	 * Application should provide a proper zone ID or the use of default
7920ae76120SRobert Watson 	 * zone IDs should be enabled.  Unfortunately, some applications do
7930ae76120SRobert Watson 	 * not behave as it should, so we need a workaround.  Even if an
7940ae76120SRobert Watson 	 * appropriate ID is not determined, we'll see if we can determine
7950ae76120SRobert Watson 	 * the outgoing interface.  If we can, determine the zone ID based on
7960ae76120SRobert Watson 	 * the interface below.
797a1f7e5f8SHajimu UMEMOTO 	 */
798603724d3SBjoern A. Zeeb 	if (addr->sin6_scope_id == 0 && !V_ip6_use_defzone)
799a1f7e5f8SHajimu UMEMOTO 		scope_ambiguous = 1;
800603724d3SBjoern A. Zeeb 	if ((error = sa6_embedscope(addr, V_ip6_use_defzone)) != 0)
801a1f7e5f8SHajimu UMEMOTO 		return (error);
802a1f7e5f8SHajimu UMEMOTO 
803603724d3SBjoern A. Zeeb 	INP_INFO_WLOCK(&V_ripcbinfo);
8048501a69cSRobert Watson 	INP_WLOCK(inp);
80582cd038dSYoshinobu Inoue 	/* Source address selection. XXX: need pcblookup? */
806601c0b8bSAlexander V. Chernikov 	error = in6_selectsrc_socket(addr, inp->in6p_outputopts,
807601c0b8bSAlexander V. Chernikov 	    inp, so->so_cred, scope_ambiguous, &in6a, NULL);
80888d166bfSBjoern A. Zeeb 	if (error) {
8098501a69cSRobert Watson 		INP_WUNLOCK(inp);
810603724d3SBjoern A. Zeeb 		INP_INFO_WUNLOCK(&V_ripcbinfo);
81188d166bfSBjoern A. Zeeb 		return (error);
81207385abdSRobert Watson 	}
813a1f7e5f8SHajimu UMEMOTO 
81482cd038dSYoshinobu Inoue 	inp->in6p_faddr = addr->sin6_addr;
81588d166bfSBjoern A. Zeeb 	inp->in6p_laddr = in6a;
81682cd038dSYoshinobu Inoue 	soisconnected(so);
8178501a69cSRobert Watson 	INP_WUNLOCK(inp);
818603724d3SBjoern A. Zeeb 	INP_INFO_WUNLOCK(&V_ripcbinfo);
8190ae76120SRobert Watson 	return (0);
82082cd038dSYoshinobu Inoue }
82182cd038dSYoshinobu Inoue 
82282cd038dSYoshinobu Inoue static int
82382cd038dSYoshinobu Inoue rip6_shutdown(struct socket *so)
82482cd038dSYoshinobu Inoue {
82507385abdSRobert Watson 	struct inpcb *inp;
82607385abdSRobert Watson 
82707385abdSRobert Watson 	inp = sotoinpcb(so);
82814ba8addSRobert Watson 	KASSERT(inp != NULL, ("rip6_shutdown: inp == NULL"));
8290ae76120SRobert Watson 
8308501a69cSRobert Watson 	INP_WLOCK(inp);
83182cd038dSYoshinobu Inoue 	socantsendmore(so);
8328501a69cSRobert Watson 	INP_WUNLOCK(inp);
8330ae76120SRobert Watson 	return (0);
83482cd038dSYoshinobu Inoue }
83582cd038dSYoshinobu Inoue 
83682cd038dSYoshinobu Inoue static int
83782cd038dSYoshinobu Inoue rip6_send(struct socket *so, int flags, struct mbuf *m, struct sockaddr *nam,
838b40ce416SJulian Elischer     struct mbuf *control, struct thread *td)
83982cd038dSYoshinobu Inoue {
8400ae76120SRobert Watson 	struct inpcb *inp;
84182cd038dSYoshinobu Inoue 	struct sockaddr_in6 tmp;
84282cd038dSYoshinobu Inoue 	struct sockaddr_in6 *dst;
84307385abdSRobert Watson 	int ret;
84482cd038dSYoshinobu Inoue 
8450ae76120SRobert Watson 	inp = sotoinpcb(so);
84614ba8addSRobert Watson 	KASSERT(inp != NULL, ("rip6_send: inp == NULL"));
8470ae76120SRobert Watson 
8480ae76120SRobert Watson 	/* Always copy sockaddr to avoid overwrites. */
84907385abdSRobert Watson 	/* Unlocked read. */
85082cd038dSYoshinobu Inoue 	if (so->so_state & SS_ISCONNECTED) {
85182cd038dSYoshinobu Inoue 		if (nam) {
85282cd038dSYoshinobu Inoue 			m_freem(m);
8530ae76120SRobert Watson 			return (EISCONN);
85482cd038dSYoshinobu Inoue 		}
85582cd038dSYoshinobu Inoue 		/* XXX */
85682cd038dSYoshinobu Inoue 		bzero(&tmp, sizeof(tmp));
85782cd038dSYoshinobu Inoue 		tmp.sin6_family = AF_INET6;
85882cd038dSYoshinobu Inoue 		tmp.sin6_len = sizeof(struct sockaddr_in6);
8592209e8f1SRobert Watson 		INP_RLOCK(inp);
86082cd038dSYoshinobu Inoue 		bcopy(&inp->in6p_faddr, &tmp.sin6_addr,
86182cd038dSYoshinobu Inoue 		    sizeof(struct in6_addr));
8622209e8f1SRobert Watson 		INP_RUNLOCK(inp);
86382cd038dSYoshinobu Inoue 		dst = &tmp;
86482cd038dSYoshinobu Inoue 	} else {
86582cd038dSYoshinobu Inoue 		if (nam == NULL) {
86682cd038dSYoshinobu Inoue 			m_freem(m);
8670ae76120SRobert Watson 			return (ENOTCONN);
86882cd038dSYoshinobu Inoue 		}
869a1f7e5f8SHajimu UMEMOTO 		if (nam->sa_len != sizeof(struct sockaddr_in6)) {
870a1f7e5f8SHajimu UMEMOTO 			m_freem(m);
871a1f7e5f8SHajimu UMEMOTO 			return (EINVAL);
872a1f7e5f8SHajimu UMEMOTO 		}
873686cdd19SJun-ichiro itojun Hagino 		tmp = *(struct sockaddr_in6 *)nam;
874686cdd19SJun-ichiro itojun Hagino 		dst = &tmp;
875a1f7e5f8SHajimu UMEMOTO 
876a1f7e5f8SHajimu UMEMOTO 		if (dst->sin6_family == AF_UNSPEC) {
877a1f7e5f8SHajimu UMEMOTO 			/*
878a1f7e5f8SHajimu UMEMOTO 			 * XXX: we allow this case for backward
879a1f7e5f8SHajimu UMEMOTO 			 * compatibility to buggy applications that
880a1f7e5f8SHajimu UMEMOTO 			 * rely on old (and wrong) kernel behavior.
881a1f7e5f8SHajimu UMEMOTO 			 */
882a1f7e5f8SHajimu UMEMOTO 			log(LOG_INFO, "rip6 SEND: address family is "
883a1f7e5f8SHajimu UMEMOTO 			    "unspec. Assume AF_INET6\n");
884a1f7e5f8SHajimu UMEMOTO 			dst->sin6_family = AF_INET6;
885a1f7e5f8SHajimu UMEMOTO 		} else if (dst->sin6_family != AF_INET6) {
886a1f7e5f8SHajimu UMEMOTO 			m_freem(m);
887a1f7e5f8SHajimu UMEMOTO 			return(EAFNOSUPPORT);
88882cd038dSYoshinobu Inoue 		}
889686cdd19SJun-ichiro itojun Hagino 	}
89007385abdSRobert Watson 	ret = rip6_output(m, so, dst, control);
89107385abdSRobert Watson 	return (ret);
89282cd038dSYoshinobu Inoue }
89382cd038dSYoshinobu Inoue 
89482cd038dSYoshinobu Inoue struct pr_usrreqs rip6_usrreqs = {
895756d52a1SPoul-Henning Kamp 	.pru_abort =		rip6_abort,
896756d52a1SPoul-Henning Kamp 	.pru_attach =		rip6_attach,
897756d52a1SPoul-Henning Kamp 	.pru_bind =		rip6_bind,
898756d52a1SPoul-Henning Kamp 	.pru_connect =		rip6_connect,
899756d52a1SPoul-Henning Kamp 	.pru_control =		in6_control,
900756d52a1SPoul-Henning Kamp 	.pru_detach =		rip6_detach,
901756d52a1SPoul-Henning Kamp 	.pru_disconnect =	rip6_disconnect,
90254d642bbSRobert Watson 	.pru_peeraddr =		in6_getpeeraddr,
903756d52a1SPoul-Henning Kamp 	.pru_send =		rip6_send,
904756d52a1SPoul-Henning Kamp 	.pru_shutdown =		rip6_shutdown,
90554d642bbSRobert Watson 	.pru_sockaddr =		in6_getsockaddr,
906a152f8a3SRobert Watson 	.pru_close =		rip6_close,
90782cd038dSYoshinobu Inoue };
908