xref: /linux/net/ipv6/addrconf.c (revision f24e9f586b377749dff37554696cf3a105540c94)
1 /*
2  *	IPv6 Address [auto]configuration
3  *	Linux INET6 implementation
4  *
5  *	Authors:
6  *	Pedro Roque		<roque@di.fc.ul.pt>
7  *	Alexey Kuznetsov	<kuznet@ms2.inr.ac.ru>
8  *
9  *	$Id: addrconf.c,v 1.69 2001/10/31 21:55:54 davem Exp $
10  *
11  *	This program is free software; you can redistribute it and/or
12  *      modify it under the terms of the GNU General Public License
13  *      as published by the Free Software Foundation; either version
14  *      2 of the License, or (at your option) any later version.
15  */
16 
17 /*
18  *	Changes:
19  *
20  *	Janos Farkas			:	delete timer on ifdown
21  *	<chexum@bankinf.banki.hu>
22  *	Andi Kleen			:	kill double kfree on module
23  *						unload.
24  *	Maciej W. Rozycki		:	FDDI support
25  *	sekiya@USAGI			:	Don't send too many RS
26  *						packets.
27  *	yoshfuji@USAGI			:       Fixed interval between DAD
28  *						packets.
29  *	YOSHIFUJI Hideaki @USAGI	:	improved accuracy of
30  *						address validation timer.
31  *	YOSHIFUJI Hideaki @USAGI	:	Privacy Extensions (RFC3041)
32  *						support.
33  *	Yuji SEKIYA @USAGI		:	Don't assign a same IPv6
34  *						address on a same interface.
35  *	YOSHIFUJI Hideaki @USAGI	:	ARCnet support
36  *	YOSHIFUJI Hideaki @USAGI	:	convert /proc/net/if_inet6 to
37  *						seq_file.
38  *	YOSHIFUJI Hideaki @USAGI	:	improved source address
39  *						selection; consider scope,
40  *						status etc.
41  */
42 
43 #include <linux/errno.h>
44 #include <linux/types.h>
45 #include <linux/socket.h>
46 #include <linux/sockios.h>
47 #include <linux/sched.h>
48 #include <linux/net.h>
49 #include <linux/in6.h>
50 #include <linux/netdevice.h>
51 #include <linux/if_arp.h>
52 #include <linux/if_arcnet.h>
53 #include <linux/if_infiniband.h>
54 #include <linux/route.h>
55 #include <linux/inetdevice.h>
56 #include <linux/init.h>
57 #ifdef CONFIG_SYSCTL
58 #include <linux/sysctl.h>
59 #endif
60 #include <linux/capability.h>
61 #include <linux/delay.h>
62 #include <linux/notifier.h>
63 #include <linux/string.h>
64 
65 #include <net/sock.h>
66 #include <net/snmp.h>
67 
68 #include <net/ipv6.h>
69 #include <net/protocol.h>
70 #include <net/ndisc.h>
71 #include <net/ip6_route.h>
72 #include <net/addrconf.h>
73 #include <net/tcp.h>
74 #include <net/ip.h>
75 #include <linux/if_tunnel.h>
76 #include <linux/rtnetlink.h>
77 
78 #ifdef CONFIG_IPV6_PRIVACY
79 #include <linux/random.h>
80 #endif
81 
82 #include <asm/uaccess.h>
83 
84 #include <linux/proc_fs.h>
85 #include <linux/seq_file.h>
86 
87 /* Set to 3 to get tracing... */
88 #define ACONF_DEBUG 2
89 
90 #if ACONF_DEBUG >= 3
91 #define ADBG(x) printk x
92 #else
93 #define ADBG(x)
94 #endif
95 
96 #define	INFINITY_LIFE_TIME	0xFFFFFFFF
97 #define TIME_DELTA(a,b) ((unsigned long)((long)(a) - (long)(b)))
98 
99 #ifdef CONFIG_SYSCTL
100 static void addrconf_sysctl_register(struct inet6_dev *idev, struct ipv6_devconf *p);
101 static void addrconf_sysctl_unregister(struct ipv6_devconf *p);
102 #endif
103 
104 #ifdef CONFIG_IPV6_PRIVACY
105 static int __ipv6_regen_rndid(struct inet6_dev *idev);
106 static int __ipv6_try_regen_rndid(struct inet6_dev *idev, struct in6_addr *tmpaddr);
107 static void ipv6_regen_rndid(unsigned long data);
108 
109 static int desync_factor = MAX_DESYNC_FACTOR * HZ;
110 #endif
111 
112 static int ipv6_count_addresses(struct inet6_dev *idev);
113 
114 /*
115  *	Configured unicast address hash table
116  */
117 static struct inet6_ifaddr		*inet6_addr_lst[IN6_ADDR_HSIZE];
118 static DEFINE_RWLOCK(addrconf_hash_lock);
119 
120 /* Protects inet6 devices */
121 DEFINE_RWLOCK(addrconf_lock);
122 
123 static void addrconf_verify(unsigned long);
124 
125 static DEFINE_TIMER(addr_chk_timer, addrconf_verify, 0, 0);
126 static DEFINE_SPINLOCK(addrconf_verify_lock);
127 
128 static void addrconf_join_anycast(struct inet6_ifaddr *ifp);
129 static void addrconf_leave_anycast(struct inet6_ifaddr *ifp);
130 
131 static int addrconf_ifdown(struct net_device *dev, int how);
132 
133 static void addrconf_dad_start(struct inet6_ifaddr *ifp, u32 flags);
134 static void addrconf_dad_timer(unsigned long data);
135 static void addrconf_dad_completed(struct inet6_ifaddr *ifp);
136 static void addrconf_dad_run(struct inet6_dev *idev);
137 static void addrconf_rs_timer(unsigned long data);
138 static void __ipv6_ifa_notify(int event, struct inet6_ifaddr *ifa);
139 static void ipv6_ifa_notify(int event, struct inet6_ifaddr *ifa);
140 
141 static void inet6_prefix_notify(int event, struct inet6_dev *idev,
142 				struct prefix_info *pinfo);
143 static int ipv6_chk_same_addr(const struct in6_addr *addr, struct net_device *dev);
144 
145 static ATOMIC_NOTIFIER_HEAD(inet6addr_chain);
146 
147 struct ipv6_devconf ipv6_devconf = {
148 	.forwarding		= 0,
149 	.hop_limit		= IPV6_DEFAULT_HOPLIMIT,
150 	.mtu6			= IPV6_MIN_MTU,
151 	.accept_ra		= 1,
152 	.accept_redirects	= 1,
153 	.autoconf		= 1,
154 	.force_mld_version	= 0,
155 	.dad_transmits		= 1,
156 	.rtr_solicits		= MAX_RTR_SOLICITATIONS,
157 	.rtr_solicit_interval	= RTR_SOLICITATION_INTERVAL,
158 	.rtr_solicit_delay	= MAX_RTR_SOLICITATION_DELAY,
159 #ifdef CONFIG_IPV6_PRIVACY
160 	.use_tempaddr 		= 0,
161 	.temp_valid_lft		= TEMP_VALID_LIFETIME,
162 	.temp_prefered_lft	= TEMP_PREFERRED_LIFETIME,
163 	.regen_max_retry	= REGEN_MAX_RETRY,
164 	.max_desync_factor	= MAX_DESYNC_FACTOR,
165 #endif
166 	.max_addresses		= IPV6_MAX_ADDRESSES,
167 	.accept_ra_defrtr	= 1,
168 	.accept_ra_pinfo	= 1,
169 #ifdef CONFIG_IPV6_ROUTER_PREF
170 	.accept_ra_rtr_pref	= 1,
171 	.rtr_probe_interval	= 60 * HZ,
172 #ifdef CONFIG_IPV6_ROUTE_INFO
173 	.accept_ra_rt_info_max_plen = 0,
174 #endif
175 #endif
176 };
177 
178 static struct ipv6_devconf ipv6_devconf_dflt = {
179 	.forwarding		= 0,
180 	.hop_limit		= IPV6_DEFAULT_HOPLIMIT,
181 	.mtu6			= IPV6_MIN_MTU,
182 	.accept_ra		= 1,
183 	.accept_redirects	= 1,
184 	.autoconf		= 1,
185 	.dad_transmits		= 1,
186 	.rtr_solicits		= MAX_RTR_SOLICITATIONS,
187 	.rtr_solicit_interval	= RTR_SOLICITATION_INTERVAL,
188 	.rtr_solicit_delay	= MAX_RTR_SOLICITATION_DELAY,
189 #ifdef CONFIG_IPV6_PRIVACY
190 	.use_tempaddr		= 0,
191 	.temp_valid_lft		= TEMP_VALID_LIFETIME,
192 	.temp_prefered_lft	= TEMP_PREFERRED_LIFETIME,
193 	.regen_max_retry	= REGEN_MAX_RETRY,
194 	.max_desync_factor	= MAX_DESYNC_FACTOR,
195 #endif
196 	.max_addresses		= IPV6_MAX_ADDRESSES,
197 	.accept_ra_defrtr	= 1,
198 	.accept_ra_pinfo	= 1,
199 #ifdef CONFIG_IPV6_ROUTER_PREF
200 	.accept_ra_rtr_pref	= 1,
201 	.rtr_probe_interval	= 60 * HZ,
202 #ifdef CONFIG_IPV6_ROUTE_INFO
203 	.accept_ra_rt_info_max_plen = 0,
204 #endif
205 #endif
206 };
207 
208 /* IPv6 Wildcard Address and Loopback Address defined by RFC2553 */
209 #if 0
210 const struct in6_addr in6addr_any = IN6ADDR_ANY_INIT;
211 #endif
212 const struct in6_addr in6addr_loopback = IN6ADDR_LOOPBACK_INIT;
213 
214 #define IPV6_ADDR_SCOPE_TYPE(scope)	((scope) << 16)
215 
216 static inline unsigned ipv6_addr_scope2type(unsigned scope)
217 {
218 	switch(scope) {
219 	case IPV6_ADDR_SCOPE_NODELOCAL:
220 		return (IPV6_ADDR_SCOPE_TYPE(IPV6_ADDR_SCOPE_NODELOCAL) |
221 			IPV6_ADDR_LOOPBACK);
222 	case IPV6_ADDR_SCOPE_LINKLOCAL:
223 		return (IPV6_ADDR_SCOPE_TYPE(IPV6_ADDR_SCOPE_LINKLOCAL) |
224 			IPV6_ADDR_LINKLOCAL);
225 	case IPV6_ADDR_SCOPE_SITELOCAL:
226 		return (IPV6_ADDR_SCOPE_TYPE(IPV6_ADDR_SCOPE_SITELOCAL) |
227 			IPV6_ADDR_SITELOCAL);
228 	}
229 	return IPV6_ADDR_SCOPE_TYPE(scope);
230 }
231 
232 int __ipv6_addr_type(const struct in6_addr *addr)
233 {
234 	u32 st;
235 
236 	st = addr->s6_addr32[0];
237 
238 	/* Consider all addresses with the first three bits different of
239 	   000 and 111 as unicasts.
240 	 */
241 	if ((st & htonl(0xE0000000)) != htonl(0x00000000) &&
242 	    (st & htonl(0xE0000000)) != htonl(0xE0000000))
243 		return (IPV6_ADDR_UNICAST |
244 			IPV6_ADDR_SCOPE_TYPE(IPV6_ADDR_SCOPE_GLOBAL));
245 
246 	if ((st & htonl(0xFF000000)) == htonl(0xFF000000)) {
247 		/* multicast */
248 		/* addr-select 3.1 */
249 		return (IPV6_ADDR_MULTICAST |
250 			ipv6_addr_scope2type(IPV6_ADDR_MC_SCOPE(addr)));
251 	}
252 
253 	if ((st & htonl(0xFFC00000)) == htonl(0xFE800000))
254 		return (IPV6_ADDR_LINKLOCAL | IPV6_ADDR_UNICAST |
255 			IPV6_ADDR_SCOPE_TYPE(IPV6_ADDR_SCOPE_LINKLOCAL));		/* addr-select 3.1 */
256 	if ((st & htonl(0xFFC00000)) == htonl(0xFEC00000))
257 		return (IPV6_ADDR_SITELOCAL | IPV6_ADDR_UNICAST |
258 			IPV6_ADDR_SCOPE_TYPE(IPV6_ADDR_SCOPE_SITELOCAL));		/* addr-select 3.1 */
259 
260 	if ((addr->s6_addr32[0] | addr->s6_addr32[1]) == 0) {
261 		if (addr->s6_addr32[2] == 0) {
262 			if (addr->s6_addr32[3] == 0)
263 				return IPV6_ADDR_ANY;
264 
265 			if (addr->s6_addr32[3] == htonl(0x00000001))
266 				return (IPV6_ADDR_LOOPBACK | IPV6_ADDR_UNICAST |
267 					IPV6_ADDR_SCOPE_TYPE(IPV6_ADDR_SCOPE_LINKLOCAL));	/* addr-select 3.4 */
268 
269 			return (IPV6_ADDR_COMPATv4 | IPV6_ADDR_UNICAST |
270 				IPV6_ADDR_SCOPE_TYPE(IPV6_ADDR_SCOPE_GLOBAL));	/* addr-select 3.3 */
271 		}
272 
273 		if (addr->s6_addr32[2] == htonl(0x0000ffff))
274 			return (IPV6_ADDR_MAPPED |
275 				IPV6_ADDR_SCOPE_TYPE(IPV6_ADDR_SCOPE_GLOBAL));	/* addr-select 3.3 */
276 	}
277 
278 	return (IPV6_ADDR_RESERVED |
279 		IPV6_ADDR_SCOPE_TYPE(IPV6_ADDR_SCOPE_GLOBAL));	/* addr-select 3.4 */
280 }
281 
282 static void addrconf_del_timer(struct inet6_ifaddr *ifp)
283 {
284 	if (del_timer(&ifp->timer))
285 		__in6_ifa_put(ifp);
286 }
287 
288 enum addrconf_timer_t
289 {
290 	AC_NONE,
291 	AC_DAD,
292 	AC_RS,
293 };
294 
295 static void addrconf_mod_timer(struct inet6_ifaddr *ifp,
296 			       enum addrconf_timer_t what,
297 			       unsigned long when)
298 {
299 	if (!del_timer(&ifp->timer))
300 		in6_ifa_hold(ifp);
301 
302 	switch (what) {
303 	case AC_DAD:
304 		ifp->timer.function = addrconf_dad_timer;
305 		break;
306 	case AC_RS:
307 		ifp->timer.function = addrconf_rs_timer;
308 		break;
309 	default:;
310 	}
311 	ifp->timer.expires = jiffies + when;
312 	add_timer(&ifp->timer);
313 }
314 
315 /* Nobody refers to this device, we may destroy it. */
316 
317 void in6_dev_finish_destroy(struct inet6_dev *idev)
318 {
319 	struct net_device *dev = idev->dev;
320 	BUG_TRAP(idev->addr_list==NULL);
321 	BUG_TRAP(idev->mc_list==NULL);
322 #ifdef NET_REFCNT_DEBUG
323 	printk(KERN_DEBUG "in6_dev_finish_destroy: %s\n", dev ? dev->name : "NIL");
324 #endif
325 	dev_put(dev);
326 	if (!idev->dead) {
327 		printk("Freeing alive inet6 device %p\n", idev);
328 		return;
329 	}
330 	snmp6_free_dev(idev);
331 	kfree(idev);
332 }
333 
334 static struct inet6_dev * ipv6_add_dev(struct net_device *dev)
335 {
336 	struct inet6_dev *ndev;
337 
338 	ASSERT_RTNL();
339 
340 	if (dev->mtu < IPV6_MIN_MTU)
341 		return NULL;
342 
343  	ndev = kzalloc(sizeof(struct inet6_dev), GFP_KERNEL);
344 
345  	if (ndev == NULL)
346  		return NULL;
347 
348 	rwlock_init(&ndev->lock);
349 	ndev->dev = dev;
350 	memcpy(&ndev->cnf, &ipv6_devconf_dflt, sizeof(ndev->cnf));
351 	ndev->cnf.mtu6 = dev->mtu;
352 	ndev->cnf.sysctl = NULL;
353 	ndev->nd_parms = neigh_parms_alloc(dev, &nd_tbl);
354 	if (ndev->nd_parms == NULL) {
355 		kfree(ndev);
356 		return NULL;
357 	}
358 	/* We refer to the device */
359 	dev_hold(dev);
360 
361 	if (snmp6_alloc_dev(ndev) < 0) {
362 		ADBG((KERN_WARNING
363 			"%s(): cannot allocate memory for statistics; dev=%s.\n",
364 			__FUNCTION__, dev->name));
365 		neigh_parms_release(&nd_tbl, ndev->nd_parms);
366 		ndev->dead = 1;
367 		in6_dev_finish_destroy(ndev);
368 		return NULL;
369 	}
370 
371 	if (snmp6_register_dev(ndev) < 0) {
372 		ADBG((KERN_WARNING
373 			"%s(): cannot create /proc/net/dev_snmp6/%s\n",
374 			__FUNCTION__, dev->name));
375 		neigh_parms_release(&nd_tbl, ndev->nd_parms);
376 		ndev->dead = 1;
377 		in6_dev_finish_destroy(ndev);
378 		return NULL;
379 	}
380 
381 	/* One reference from device.  We must do this before
382 	 * we invoke __ipv6_regen_rndid().
383 	 */
384 	in6_dev_hold(ndev);
385 
386 #ifdef CONFIG_IPV6_PRIVACY
387 	init_timer(&ndev->regen_timer);
388 	ndev->regen_timer.function = ipv6_regen_rndid;
389 	ndev->regen_timer.data = (unsigned long) ndev;
390 	if ((dev->flags&IFF_LOOPBACK) ||
391 	    dev->type == ARPHRD_TUNNEL ||
392 	    dev->type == ARPHRD_NONE ||
393 	    dev->type == ARPHRD_SIT) {
394 		printk(KERN_INFO
395 		       "%s: Disabled Privacy Extensions\n",
396 		       dev->name);
397 		ndev->cnf.use_tempaddr = -1;
398 	} else {
399 		in6_dev_hold(ndev);
400 		ipv6_regen_rndid((unsigned long) ndev);
401 	}
402 #endif
403 
404 	if (netif_carrier_ok(dev))
405 		ndev->if_flags |= IF_READY;
406 
407 	write_lock_bh(&addrconf_lock);
408 	dev->ip6_ptr = ndev;
409 	write_unlock_bh(&addrconf_lock);
410 
411 	ipv6_mc_init_dev(ndev);
412 	ndev->tstamp = jiffies;
413 #ifdef CONFIG_SYSCTL
414 	neigh_sysctl_register(dev, ndev->nd_parms, NET_IPV6,
415 			      NET_IPV6_NEIGH, "ipv6",
416 			      &ndisc_ifinfo_sysctl_change,
417 			      NULL);
418 	addrconf_sysctl_register(ndev, &ndev->cnf);
419 #endif
420 	return ndev;
421 }
422 
423 static struct inet6_dev * ipv6_find_idev(struct net_device *dev)
424 {
425 	struct inet6_dev *idev;
426 
427 	ASSERT_RTNL();
428 
429 	if ((idev = __in6_dev_get(dev)) == NULL) {
430 		if ((idev = ipv6_add_dev(dev)) == NULL)
431 			return NULL;
432 	}
433 
434 	if (dev->flags&IFF_UP)
435 		ipv6_mc_up(idev);
436 	return idev;
437 }
438 
439 #ifdef CONFIG_SYSCTL
440 static void dev_forward_change(struct inet6_dev *idev)
441 {
442 	struct net_device *dev;
443 	struct inet6_ifaddr *ifa;
444 	struct in6_addr addr;
445 
446 	if (!idev)
447 		return;
448 	dev = idev->dev;
449 	if (dev && (dev->flags & IFF_MULTICAST)) {
450 		ipv6_addr_all_routers(&addr);
451 
452 		if (idev->cnf.forwarding)
453 			ipv6_dev_mc_inc(dev, &addr);
454 		else
455 			ipv6_dev_mc_dec(dev, &addr);
456 	}
457 	for (ifa=idev->addr_list; ifa; ifa=ifa->if_next) {
458 		if (idev->cnf.forwarding)
459 			addrconf_join_anycast(ifa);
460 		else
461 			addrconf_leave_anycast(ifa);
462 	}
463 }
464 
465 
466 static void addrconf_forward_change(void)
467 {
468 	struct net_device *dev;
469 	struct inet6_dev *idev;
470 
471 	read_lock(&dev_base_lock);
472 	for (dev=dev_base; dev; dev=dev->next) {
473 		read_lock(&addrconf_lock);
474 		idev = __in6_dev_get(dev);
475 		if (idev) {
476 			int changed = (!idev->cnf.forwarding) ^ (!ipv6_devconf.forwarding);
477 			idev->cnf.forwarding = ipv6_devconf.forwarding;
478 			if (changed)
479 				dev_forward_change(idev);
480 		}
481 		read_unlock(&addrconf_lock);
482 	}
483 	read_unlock(&dev_base_lock);
484 }
485 #endif
486 
487 /* Nobody refers to this ifaddr, destroy it */
488 
489 void inet6_ifa_finish_destroy(struct inet6_ifaddr *ifp)
490 {
491 	BUG_TRAP(ifp->if_next==NULL);
492 	BUG_TRAP(ifp->lst_next==NULL);
493 #ifdef NET_REFCNT_DEBUG
494 	printk(KERN_DEBUG "inet6_ifa_finish_destroy\n");
495 #endif
496 
497 	in6_dev_put(ifp->idev);
498 
499 	if (del_timer(&ifp->timer))
500 		printk("Timer is still running, when freeing ifa=%p\n", ifp);
501 
502 	if (!ifp->dead) {
503 		printk("Freeing alive inet6 address %p\n", ifp);
504 		return;
505 	}
506 	dst_release(&ifp->rt->u.dst);
507 
508 	kfree(ifp);
509 }
510 
511 static void
512 ipv6_link_dev_addr(struct inet6_dev *idev, struct inet6_ifaddr *ifp)
513 {
514 	struct inet6_ifaddr *ifa, **ifap;
515 	int ifp_scope = ipv6_addr_src_scope(&ifp->addr);
516 
517 	/*
518 	 * Each device address list is sorted in order of scope -
519 	 * global before linklocal.
520 	 */
521 	for (ifap = &idev->addr_list; (ifa = *ifap) != NULL;
522 	     ifap = &ifa->if_next) {
523 		if (ifp_scope >= ipv6_addr_src_scope(&ifa->addr))
524 			break;
525 	}
526 
527 	ifp->if_next = *ifap;
528 	*ifap = ifp;
529 }
530 
531 /* On success it returns ifp with increased reference count */
532 
533 static struct inet6_ifaddr *
534 ipv6_add_addr(struct inet6_dev *idev, const struct in6_addr *addr, int pfxlen,
535 	      int scope, u32 flags)
536 {
537 	struct inet6_ifaddr *ifa = NULL;
538 	struct rt6_info *rt;
539 	int hash;
540 	int err = 0;
541 
542 	read_lock_bh(&addrconf_lock);
543 	if (idev->dead) {
544 		err = -ENODEV;			/*XXX*/
545 		goto out2;
546 	}
547 
548 	write_lock(&addrconf_hash_lock);
549 
550 	/* Ignore adding duplicate addresses on an interface */
551 	if (ipv6_chk_same_addr(addr, idev->dev)) {
552 		ADBG(("ipv6_add_addr: already assigned\n"));
553 		err = -EEXIST;
554 		goto out;
555 	}
556 
557 	ifa = kzalloc(sizeof(struct inet6_ifaddr), GFP_ATOMIC);
558 
559 	if (ifa == NULL) {
560 		ADBG(("ipv6_add_addr: malloc failed\n"));
561 		err = -ENOBUFS;
562 		goto out;
563 	}
564 
565 	rt = addrconf_dst_alloc(idev, addr, 0);
566 	if (IS_ERR(rt)) {
567 		err = PTR_ERR(rt);
568 		goto out;
569 	}
570 
571 	ipv6_addr_copy(&ifa->addr, addr);
572 
573 	spin_lock_init(&ifa->lock);
574 	init_timer(&ifa->timer);
575 	ifa->timer.data = (unsigned long) ifa;
576 	ifa->scope = scope;
577 	ifa->prefix_len = pfxlen;
578 	ifa->flags = flags | IFA_F_TENTATIVE;
579 	ifa->cstamp = ifa->tstamp = jiffies;
580 
581 	ifa->rt = rt;
582 
583 	ifa->idev = idev;
584 	in6_dev_hold(idev);
585 	/* For caller */
586 	in6_ifa_hold(ifa);
587 
588 	/* Add to big hash table */
589 	hash = ipv6_addr_hash(addr);
590 
591 	ifa->lst_next = inet6_addr_lst[hash];
592 	inet6_addr_lst[hash] = ifa;
593 	in6_ifa_hold(ifa);
594 	write_unlock(&addrconf_hash_lock);
595 
596 	write_lock(&idev->lock);
597 	/* Add to inet6_dev unicast addr list. */
598 	ipv6_link_dev_addr(idev, ifa);
599 
600 #ifdef CONFIG_IPV6_PRIVACY
601 	if (ifa->flags&IFA_F_TEMPORARY) {
602 		ifa->tmp_next = idev->tempaddr_list;
603 		idev->tempaddr_list = ifa;
604 		in6_ifa_hold(ifa);
605 	}
606 #endif
607 
608 	in6_ifa_hold(ifa);
609 	write_unlock(&idev->lock);
610 out2:
611 	read_unlock_bh(&addrconf_lock);
612 
613 	if (likely(err == 0))
614 		atomic_notifier_call_chain(&inet6addr_chain, NETDEV_UP, ifa);
615 	else {
616 		kfree(ifa);
617 		ifa = ERR_PTR(err);
618 	}
619 
620 	return ifa;
621 out:
622 	write_unlock(&addrconf_hash_lock);
623 	goto out2;
624 }
625 
626 /* This function wants to get referenced ifp and releases it before return */
627 
628 static void ipv6_del_addr(struct inet6_ifaddr *ifp)
629 {
630 	struct inet6_ifaddr *ifa, **ifap;
631 	struct inet6_dev *idev = ifp->idev;
632 	int hash;
633 	int deleted = 0, onlink = 0;
634 	unsigned long expires = jiffies;
635 
636 	hash = ipv6_addr_hash(&ifp->addr);
637 
638 	ifp->dead = 1;
639 
640 	write_lock_bh(&addrconf_hash_lock);
641 	for (ifap = &inet6_addr_lst[hash]; (ifa=*ifap) != NULL;
642 	     ifap = &ifa->lst_next) {
643 		if (ifa == ifp) {
644 			*ifap = ifa->lst_next;
645 			__in6_ifa_put(ifp);
646 			ifa->lst_next = NULL;
647 			break;
648 		}
649 	}
650 	write_unlock_bh(&addrconf_hash_lock);
651 
652 	write_lock_bh(&idev->lock);
653 #ifdef CONFIG_IPV6_PRIVACY
654 	if (ifp->flags&IFA_F_TEMPORARY) {
655 		for (ifap = &idev->tempaddr_list; (ifa=*ifap) != NULL;
656 		     ifap = &ifa->tmp_next) {
657 			if (ifa == ifp) {
658 				*ifap = ifa->tmp_next;
659 				if (ifp->ifpub) {
660 					in6_ifa_put(ifp->ifpub);
661 					ifp->ifpub = NULL;
662 				}
663 				__in6_ifa_put(ifp);
664 				ifa->tmp_next = NULL;
665 				break;
666 			}
667 		}
668 	}
669 #endif
670 
671 	for (ifap = &idev->addr_list; (ifa=*ifap) != NULL;) {
672 		if (ifa == ifp) {
673 			*ifap = ifa->if_next;
674 			__in6_ifa_put(ifp);
675 			ifa->if_next = NULL;
676 			if (!(ifp->flags & IFA_F_PERMANENT) || onlink > 0)
677 				break;
678 			deleted = 1;
679 			continue;
680 		} else if (ifp->flags & IFA_F_PERMANENT) {
681 			if (ipv6_prefix_equal(&ifa->addr, &ifp->addr,
682 					      ifp->prefix_len)) {
683 				if (ifa->flags & IFA_F_PERMANENT) {
684 					onlink = 1;
685 					if (deleted)
686 						break;
687 				} else {
688 					unsigned long lifetime;
689 
690 					if (!onlink)
691 						onlink = -1;
692 
693 					spin_lock(&ifa->lock);
694 					lifetime = min_t(unsigned long,
695 							 ifa->valid_lft, 0x7fffffffUL/HZ);
696 					if (time_before(expires,
697 							ifa->tstamp + lifetime * HZ))
698 						expires = ifa->tstamp + lifetime * HZ;
699 					spin_unlock(&ifa->lock);
700 				}
701 			}
702 		}
703 		ifap = &ifa->if_next;
704 	}
705 	write_unlock_bh(&idev->lock);
706 
707 	ipv6_ifa_notify(RTM_DELADDR, ifp);
708 
709 	atomic_notifier_call_chain(&inet6addr_chain, NETDEV_DOWN, ifp);
710 
711 	addrconf_del_timer(ifp);
712 
713 	/*
714 	 * Purge or update corresponding prefix
715 	 *
716 	 * 1) we don't purge prefix here if address was not permanent.
717 	 *    prefix is managed by its own lifetime.
718 	 * 2) if there're no addresses, delete prefix.
719 	 * 3) if there're still other permanent address(es),
720 	 *    corresponding prefix is still permanent.
721 	 * 4) otherwise, update prefix lifetime to the
722 	 *    longest valid lifetime among the corresponding
723 	 *    addresses on the device.
724 	 *    Note: subsequent RA will update lifetime.
725 	 *
726 	 * --yoshfuji
727 	 */
728 	if ((ifp->flags & IFA_F_PERMANENT) && onlink < 1) {
729 		struct in6_addr prefix;
730 		struct rt6_info *rt;
731 
732 		ipv6_addr_prefix(&prefix, &ifp->addr, ifp->prefix_len);
733 		rt = rt6_lookup(&prefix, NULL, ifp->idev->dev->ifindex, 1);
734 
735 		if (rt && ((rt->rt6i_flags & (RTF_GATEWAY | RTF_DEFAULT)) == 0)) {
736 			if (onlink == 0) {
737 				ip6_del_rt(rt, NULL, NULL, NULL);
738 				rt = NULL;
739 			} else if (!(rt->rt6i_flags & RTF_EXPIRES)) {
740 				rt->rt6i_expires = expires;
741 				rt->rt6i_flags |= RTF_EXPIRES;
742 			}
743 		}
744 		dst_release(&rt->u.dst);
745 	}
746 
747 	in6_ifa_put(ifp);
748 }
749 
750 #ifdef CONFIG_IPV6_PRIVACY
751 static int ipv6_create_tempaddr(struct inet6_ifaddr *ifp, struct inet6_ifaddr *ift)
752 {
753 	struct inet6_dev *idev = ifp->idev;
754 	struct in6_addr addr, *tmpaddr;
755 	unsigned long tmp_prefered_lft, tmp_valid_lft, tmp_cstamp, tmp_tstamp;
756 	int tmp_plen;
757 	int ret = 0;
758 	int max_addresses;
759 
760 	write_lock(&idev->lock);
761 	if (ift) {
762 		spin_lock_bh(&ift->lock);
763 		memcpy(&addr.s6_addr[8], &ift->addr.s6_addr[8], 8);
764 		spin_unlock_bh(&ift->lock);
765 		tmpaddr = &addr;
766 	} else {
767 		tmpaddr = NULL;
768 	}
769 retry:
770 	in6_dev_hold(idev);
771 	if (idev->cnf.use_tempaddr <= 0) {
772 		write_unlock(&idev->lock);
773 		printk(KERN_INFO
774 			"ipv6_create_tempaddr(): use_tempaddr is disabled.\n");
775 		in6_dev_put(idev);
776 		ret = -1;
777 		goto out;
778 	}
779 	spin_lock_bh(&ifp->lock);
780 	if (ifp->regen_count++ >= idev->cnf.regen_max_retry) {
781 		idev->cnf.use_tempaddr = -1;	/*XXX*/
782 		spin_unlock_bh(&ifp->lock);
783 		write_unlock(&idev->lock);
784 		printk(KERN_WARNING
785 			"ipv6_create_tempaddr(): regeneration time exceeded. disabled temporary address support.\n");
786 		in6_dev_put(idev);
787 		ret = -1;
788 		goto out;
789 	}
790 	in6_ifa_hold(ifp);
791 	memcpy(addr.s6_addr, ifp->addr.s6_addr, 8);
792 	if (__ipv6_try_regen_rndid(idev, tmpaddr) < 0) {
793 		spin_unlock_bh(&ifp->lock);
794 		write_unlock(&idev->lock);
795 		printk(KERN_WARNING
796 			"ipv6_create_tempaddr(): regeneration of randomized interface id failed.\n");
797 		in6_ifa_put(ifp);
798 		in6_dev_put(idev);
799 		ret = -1;
800 		goto out;
801 	}
802 	memcpy(&addr.s6_addr[8], idev->rndid, 8);
803 	tmp_valid_lft = min_t(__u32,
804 			      ifp->valid_lft,
805 			      idev->cnf.temp_valid_lft);
806 	tmp_prefered_lft = min_t(__u32,
807 				 ifp->prefered_lft,
808 				 idev->cnf.temp_prefered_lft - desync_factor / HZ);
809 	tmp_plen = ifp->prefix_len;
810 	max_addresses = idev->cnf.max_addresses;
811 	tmp_cstamp = ifp->cstamp;
812 	tmp_tstamp = ifp->tstamp;
813 	spin_unlock_bh(&ifp->lock);
814 
815 	write_unlock(&idev->lock);
816 	ift = !max_addresses ||
817 	      ipv6_count_addresses(idev) < max_addresses ?
818 		ipv6_add_addr(idev, &addr, tmp_plen,
819 			      ipv6_addr_type(&addr)&IPV6_ADDR_SCOPE_MASK, IFA_F_TEMPORARY) : NULL;
820 	if (!ift || IS_ERR(ift)) {
821 		in6_ifa_put(ifp);
822 		in6_dev_put(idev);
823 		printk(KERN_INFO
824 			"ipv6_create_tempaddr(): retry temporary address regeneration.\n");
825 		tmpaddr = &addr;
826 		write_lock(&idev->lock);
827 		goto retry;
828 	}
829 
830 	spin_lock_bh(&ift->lock);
831 	ift->ifpub = ifp;
832 	ift->valid_lft = tmp_valid_lft;
833 	ift->prefered_lft = tmp_prefered_lft;
834 	ift->cstamp = tmp_cstamp;
835 	ift->tstamp = tmp_tstamp;
836 	spin_unlock_bh(&ift->lock);
837 
838 	addrconf_dad_start(ift, 0);
839 	in6_ifa_put(ift);
840 	in6_dev_put(idev);
841 out:
842 	return ret;
843 }
844 #endif
845 
846 /*
847  *	Choose an appropriate source address (RFC3484)
848  */
849 struct ipv6_saddr_score {
850 	int		addr_type;
851 	unsigned int	attrs;
852 	int		matchlen;
853 	int		scope;
854 	unsigned int	rule;
855 };
856 
857 #define IPV6_SADDR_SCORE_LOCAL		0x0001
858 #define IPV6_SADDR_SCORE_PREFERRED	0x0004
859 #define IPV6_SADDR_SCORE_HOA		0x0008
860 #define IPV6_SADDR_SCORE_OIF		0x0010
861 #define IPV6_SADDR_SCORE_LABEL		0x0020
862 #define IPV6_SADDR_SCORE_PRIVACY	0x0040
863 
864 static int inline ipv6_saddr_preferred(int type)
865 {
866 	if (type & (IPV6_ADDR_MAPPED|IPV6_ADDR_COMPATv4|
867 		    IPV6_ADDR_LOOPBACK|IPV6_ADDR_RESERVED))
868 		return 1;
869 	return 0;
870 }
871 
872 /* static matching label */
873 static int inline ipv6_saddr_label(const struct in6_addr *addr, int type)
874 {
875  /*
876   * 	prefix (longest match)	label
877   * 	-----------------------------
878   * 	::1/128			0
879   * 	::/0			1
880   * 	2002::/16		2
881   * 	::/96			3
882   * 	::ffff:0:0/96		4
883   *	fc00::/7		5
884   * 	2001::/32		6
885   */
886 	if (type & IPV6_ADDR_LOOPBACK)
887 		return 0;
888 	else if (type & IPV6_ADDR_COMPATv4)
889 		return 3;
890 	else if (type & IPV6_ADDR_MAPPED)
891 		return 4;
892 	else if (addr->s6_addr32[0] == htonl(0x20010000))
893 		return 6;
894 	else if (addr->s6_addr16[0] == htons(0x2002))
895 		return 2;
896 	else if ((addr->s6_addr[0] & 0xfe) == 0xfc)
897 		return 5;
898 	return 1;
899 }
900 
901 int ipv6_dev_get_saddr(struct net_device *daddr_dev,
902 		       struct in6_addr *daddr, struct in6_addr *saddr)
903 {
904 	struct ipv6_saddr_score hiscore;
905 	struct inet6_ifaddr *ifa_result = NULL;
906 	int daddr_type = __ipv6_addr_type(daddr);
907 	int daddr_scope = __ipv6_addr_src_scope(daddr_type);
908 	u32 daddr_label = ipv6_saddr_label(daddr, daddr_type);
909 	struct net_device *dev;
910 
911 	memset(&hiscore, 0, sizeof(hiscore));
912 
913 	read_lock(&dev_base_lock);
914 	read_lock(&addrconf_lock);
915 
916 	for (dev = dev_base; dev; dev=dev->next) {
917 		struct inet6_dev *idev;
918 		struct inet6_ifaddr *ifa;
919 
920 		/* Rule 0: Candidate Source Address (section 4)
921 		 *  - multicast and link-local destination address,
922 		 *    the set of candidate source address MUST only
923 		 *    include addresses assigned to interfaces
924 		 *    belonging to the same link as the outgoing
925 		 *    interface.
926 		 * (- For site-local destination addresses, the
927 		 *    set of candidate source addresses MUST only
928 		 *    include addresses assigned to interfaces
929 		 *    belonging to the same site as the outgoing
930 		 *    interface.)
931 		 */
932 		if ((daddr_type & IPV6_ADDR_MULTICAST ||
933 		     daddr_scope <= IPV6_ADDR_SCOPE_LINKLOCAL) &&
934 		    daddr_dev && dev != daddr_dev)
935 			continue;
936 
937 		idev = __in6_dev_get(dev);
938 		if (!idev)
939 			continue;
940 
941 		read_lock_bh(&idev->lock);
942 		for (ifa = idev->addr_list; ifa; ifa = ifa->if_next) {
943 			struct ipv6_saddr_score score;
944 
945 			score.addr_type = __ipv6_addr_type(&ifa->addr);
946 
947 			/* Rule 0:
948 			 * - Tentative Address (RFC2462 section 5.4)
949 			 *  - A tentative address is not considered
950 			 *    "assigned to an interface" in the traditional
951 			 *    sense.
952 			 * - Candidate Source Address (section 4)
953 			 *  - In any case, anycast addresses, multicast
954 			 *    addresses, and the unspecified address MUST
955 			 *    NOT be included in a candidate set.
956 			 */
957 			if (ifa->flags & IFA_F_TENTATIVE)
958 				continue;
959 			if (unlikely(score.addr_type == IPV6_ADDR_ANY ||
960 				     score.addr_type & IPV6_ADDR_MULTICAST)) {
961 				LIMIT_NETDEBUG(KERN_DEBUG
962 					       "ADDRCONF: unspecified / multicast address"
963 					       "assigned as unicast address on %s",
964 					       dev->name);
965 				continue;
966 			}
967 
968 			score.attrs = 0;
969 			score.matchlen = 0;
970 			score.scope = 0;
971 			score.rule = 0;
972 
973 			if (ifa_result == NULL) {
974 				/* record it if the first available entry */
975 				goto record_it;
976 			}
977 
978 			/* Rule 1: Prefer same address */
979 			if (hiscore.rule < 1) {
980 				if (ipv6_addr_equal(&ifa_result->addr, daddr))
981 					hiscore.attrs |= IPV6_SADDR_SCORE_LOCAL;
982 				hiscore.rule++;
983 			}
984 			if (ipv6_addr_equal(&ifa->addr, daddr)) {
985 				score.attrs |= IPV6_SADDR_SCORE_LOCAL;
986 				if (!(hiscore.attrs & IPV6_SADDR_SCORE_LOCAL)) {
987 					score.rule = 1;
988 					goto record_it;
989 				}
990 			} else {
991 				if (hiscore.attrs & IPV6_SADDR_SCORE_LOCAL)
992 					continue;
993 			}
994 
995 			/* Rule 2: Prefer appropriate scope */
996 			if (hiscore.rule < 2) {
997 				hiscore.scope = __ipv6_addr_src_scope(hiscore.addr_type);
998 				hiscore.rule++;
999 			}
1000 			score.scope = __ipv6_addr_src_scope(score.addr_type);
1001 			if (hiscore.scope < score.scope) {
1002 				if (hiscore.scope < daddr_scope) {
1003 					score.rule = 2;
1004 					goto record_it;
1005 				} else
1006 					continue;
1007 			} else if (score.scope < hiscore.scope) {
1008 				if (score.scope < daddr_scope)
1009 					break; /* addresses sorted by scope */
1010 				else {
1011 					score.rule = 2;
1012 					goto record_it;
1013 				}
1014 			}
1015 
1016 			/* Rule 3: Avoid deprecated address */
1017 			if (hiscore.rule < 3) {
1018 				if (ipv6_saddr_preferred(hiscore.addr_type) ||
1019 				    !(ifa_result->flags & IFA_F_DEPRECATED))
1020 					hiscore.attrs |= IPV6_SADDR_SCORE_PREFERRED;
1021 				hiscore.rule++;
1022 			}
1023 			if (ipv6_saddr_preferred(score.addr_type) ||
1024 			    !(ifa->flags & IFA_F_DEPRECATED)) {
1025 				score.attrs |= IPV6_SADDR_SCORE_PREFERRED;
1026 				if (!(hiscore.attrs & IPV6_SADDR_SCORE_PREFERRED)) {
1027 					score.rule = 3;
1028 					goto record_it;
1029 				}
1030 			} else {
1031 				if (hiscore.attrs & IPV6_SADDR_SCORE_PREFERRED)
1032 					continue;
1033 			}
1034 
1035 			/* Rule 4: Prefer home address -- not implemented yet */
1036 			if (hiscore.rule < 4)
1037 				hiscore.rule++;
1038 
1039 			/* Rule 5: Prefer outgoing interface */
1040 			if (hiscore.rule < 5) {
1041 				if (daddr_dev == NULL ||
1042 				    daddr_dev == ifa_result->idev->dev)
1043 					hiscore.attrs |= IPV6_SADDR_SCORE_OIF;
1044 				hiscore.rule++;
1045 			}
1046 			if (daddr_dev == NULL ||
1047 			    daddr_dev == ifa->idev->dev) {
1048 				score.attrs |= IPV6_SADDR_SCORE_OIF;
1049 				if (!(hiscore.attrs & IPV6_SADDR_SCORE_OIF)) {
1050 					score.rule = 5;
1051 					goto record_it;
1052 				}
1053 			} else {
1054 				if (hiscore.attrs & IPV6_SADDR_SCORE_OIF)
1055 					continue;
1056 			}
1057 
1058 			/* Rule 6: Prefer matching label */
1059 			if (hiscore.rule < 6) {
1060 				if (ipv6_saddr_label(&ifa_result->addr, hiscore.addr_type) == daddr_label)
1061 					hiscore.attrs |= IPV6_SADDR_SCORE_LABEL;
1062 				hiscore.rule++;
1063 			}
1064 			if (ipv6_saddr_label(&ifa->addr, score.addr_type) == daddr_label) {
1065 				score.attrs |= IPV6_SADDR_SCORE_LABEL;
1066 				if (!(hiscore.attrs & IPV6_SADDR_SCORE_LABEL)) {
1067 					score.rule = 6;
1068 					goto record_it;
1069 				}
1070 			} else {
1071 				if (hiscore.attrs & IPV6_SADDR_SCORE_LABEL)
1072 					continue;
1073 			}
1074 
1075 #ifdef CONFIG_IPV6_PRIVACY
1076 			/* Rule 7: Prefer public address
1077 			 * Note: prefer temprary address if use_tempaddr >= 2
1078 			 */
1079 			if (hiscore.rule < 7) {
1080 				if ((!(ifa_result->flags & IFA_F_TEMPORARY)) ^
1081 				    (ifa_result->idev->cnf.use_tempaddr >= 2))
1082 					hiscore.attrs |= IPV6_SADDR_SCORE_PRIVACY;
1083 				hiscore.rule++;
1084 			}
1085 			if ((!(ifa->flags & IFA_F_TEMPORARY)) ^
1086 			    (ifa->idev->cnf.use_tempaddr >= 2)) {
1087 				score.attrs |= IPV6_SADDR_SCORE_PRIVACY;
1088 				if (!(hiscore.attrs & IPV6_SADDR_SCORE_PRIVACY)) {
1089 					score.rule = 7;
1090 					goto record_it;
1091 				}
1092 			} else {
1093 				if (hiscore.attrs & IPV6_SADDR_SCORE_PRIVACY)
1094 					continue;
1095 			}
1096 #else
1097 			if (hiscore.rule < 7)
1098 				hiscore.rule++;
1099 #endif
1100 			/* Rule 8: Use longest matching prefix */
1101 			if (hiscore.rule < 8) {
1102 				hiscore.matchlen = ipv6_addr_diff(&ifa_result->addr, daddr);
1103 				hiscore.rule++;
1104 			}
1105 			score.matchlen = ipv6_addr_diff(&ifa->addr, daddr);
1106 			if (score.matchlen > hiscore.matchlen) {
1107 				score.rule = 8;
1108 				goto record_it;
1109 			}
1110 #if 0
1111 			else if (score.matchlen < hiscore.matchlen)
1112 				continue;
1113 #endif
1114 
1115 			/* Final Rule: choose first available one */
1116 			continue;
1117 record_it:
1118 			if (ifa_result)
1119 				in6_ifa_put(ifa_result);
1120 			in6_ifa_hold(ifa);
1121 			ifa_result = ifa;
1122 			hiscore = score;
1123 		}
1124 		read_unlock_bh(&idev->lock);
1125 	}
1126 	read_unlock(&addrconf_lock);
1127 	read_unlock(&dev_base_lock);
1128 
1129 	if (!ifa_result)
1130 		return -EADDRNOTAVAIL;
1131 
1132 	ipv6_addr_copy(saddr, &ifa_result->addr);
1133 	in6_ifa_put(ifa_result);
1134 	return 0;
1135 }
1136 
1137 
1138 int ipv6_get_saddr(struct dst_entry *dst,
1139 		   struct in6_addr *daddr, struct in6_addr *saddr)
1140 {
1141 	return ipv6_dev_get_saddr(dst ? ((struct rt6_info *)dst)->rt6i_idev->dev : NULL, daddr, saddr);
1142 }
1143 
1144 
1145 int ipv6_get_lladdr(struct net_device *dev, struct in6_addr *addr)
1146 {
1147 	struct inet6_dev *idev;
1148 	int err = -EADDRNOTAVAIL;
1149 
1150 	read_lock(&addrconf_lock);
1151 	if ((idev = __in6_dev_get(dev)) != NULL) {
1152 		struct inet6_ifaddr *ifp;
1153 
1154 		read_lock_bh(&idev->lock);
1155 		for (ifp=idev->addr_list; ifp; ifp=ifp->if_next) {
1156 			if (ifp->scope == IFA_LINK && !(ifp->flags&IFA_F_TENTATIVE)) {
1157 				ipv6_addr_copy(addr, &ifp->addr);
1158 				err = 0;
1159 				break;
1160 			}
1161 		}
1162 		read_unlock_bh(&idev->lock);
1163 	}
1164 	read_unlock(&addrconf_lock);
1165 	return err;
1166 }
1167 
1168 static int ipv6_count_addresses(struct inet6_dev *idev)
1169 {
1170 	int cnt = 0;
1171 	struct inet6_ifaddr *ifp;
1172 
1173 	read_lock_bh(&idev->lock);
1174 	for (ifp=idev->addr_list; ifp; ifp=ifp->if_next)
1175 		cnt++;
1176 	read_unlock_bh(&idev->lock);
1177 	return cnt;
1178 }
1179 
1180 int ipv6_chk_addr(struct in6_addr *addr, struct net_device *dev, int strict)
1181 {
1182 	struct inet6_ifaddr * ifp;
1183 	u8 hash = ipv6_addr_hash(addr);
1184 
1185 	read_lock_bh(&addrconf_hash_lock);
1186 	for(ifp = inet6_addr_lst[hash]; ifp; ifp=ifp->lst_next) {
1187 		if (ipv6_addr_equal(&ifp->addr, addr) &&
1188 		    !(ifp->flags&IFA_F_TENTATIVE)) {
1189 			if (dev == NULL || ifp->idev->dev == dev ||
1190 			    !(ifp->scope&(IFA_LINK|IFA_HOST) || strict))
1191 				break;
1192 		}
1193 	}
1194 	read_unlock_bh(&addrconf_hash_lock);
1195 	return ifp != NULL;
1196 }
1197 
1198 static
1199 int ipv6_chk_same_addr(const struct in6_addr *addr, struct net_device *dev)
1200 {
1201 	struct inet6_ifaddr * ifp;
1202 	u8 hash = ipv6_addr_hash(addr);
1203 
1204 	for(ifp = inet6_addr_lst[hash]; ifp; ifp=ifp->lst_next) {
1205 		if (ipv6_addr_equal(&ifp->addr, addr)) {
1206 			if (dev == NULL || ifp->idev->dev == dev)
1207 				break;
1208 		}
1209 	}
1210 	return ifp != NULL;
1211 }
1212 
1213 struct inet6_ifaddr * ipv6_get_ifaddr(struct in6_addr *addr, struct net_device *dev, int strict)
1214 {
1215 	struct inet6_ifaddr * ifp;
1216 	u8 hash = ipv6_addr_hash(addr);
1217 
1218 	read_lock_bh(&addrconf_hash_lock);
1219 	for(ifp = inet6_addr_lst[hash]; ifp; ifp=ifp->lst_next) {
1220 		if (ipv6_addr_equal(&ifp->addr, addr)) {
1221 			if (dev == NULL || ifp->idev->dev == dev ||
1222 			    !(ifp->scope&(IFA_LINK|IFA_HOST) || strict)) {
1223 				in6_ifa_hold(ifp);
1224 				break;
1225 			}
1226 		}
1227 	}
1228 	read_unlock_bh(&addrconf_hash_lock);
1229 
1230 	return ifp;
1231 }
1232 
1233 int ipv6_rcv_saddr_equal(const struct sock *sk, const struct sock *sk2)
1234 {
1235 	const struct in6_addr *sk_rcv_saddr6 = &inet6_sk(sk)->rcv_saddr;
1236 	const struct in6_addr *sk2_rcv_saddr6 = inet6_rcv_saddr(sk2);
1237 	u32 sk_rcv_saddr = inet_sk(sk)->rcv_saddr;
1238 	u32 sk2_rcv_saddr = inet_rcv_saddr(sk2);
1239 	int sk_ipv6only = ipv6_only_sock(sk);
1240 	int sk2_ipv6only = inet_v6_ipv6only(sk2);
1241 	int addr_type = ipv6_addr_type(sk_rcv_saddr6);
1242 	int addr_type2 = sk2_rcv_saddr6 ? ipv6_addr_type(sk2_rcv_saddr6) : IPV6_ADDR_MAPPED;
1243 
1244 	if (!sk2_rcv_saddr && !sk_ipv6only)
1245 		return 1;
1246 
1247 	if (addr_type2 == IPV6_ADDR_ANY &&
1248 	    !(sk2_ipv6only && addr_type == IPV6_ADDR_MAPPED))
1249 		return 1;
1250 
1251 	if (addr_type == IPV6_ADDR_ANY &&
1252 	    !(sk_ipv6only && addr_type2 == IPV6_ADDR_MAPPED))
1253 		return 1;
1254 
1255 	if (sk2_rcv_saddr6 &&
1256 	    ipv6_addr_equal(sk_rcv_saddr6, sk2_rcv_saddr6))
1257 		return 1;
1258 
1259 	if (addr_type == IPV6_ADDR_MAPPED &&
1260 	    !sk2_ipv6only &&
1261 	    (!sk2_rcv_saddr || !sk_rcv_saddr || sk_rcv_saddr == sk2_rcv_saddr))
1262 		return 1;
1263 
1264 	return 0;
1265 }
1266 
1267 /* Gets referenced address, destroys ifaddr */
1268 
1269 static void addrconf_dad_stop(struct inet6_ifaddr *ifp)
1270 {
1271 	if (ifp->flags&IFA_F_PERMANENT) {
1272 		spin_lock_bh(&ifp->lock);
1273 		addrconf_del_timer(ifp);
1274 		ifp->flags |= IFA_F_TENTATIVE;
1275 		spin_unlock_bh(&ifp->lock);
1276 		in6_ifa_put(ifp);
1277 #ifdef CONFIG_IPV6_PRIVACY
1278 	} else if (ifp->flags&IFA_F_TEMPORARY) {
1279 		struct inet6_ifaddr *ifpub;
1280 		spin_lock_bh(&ifp->lock);
1281 		ifpub = ifp->ifpub;
1282 		if (ifpub) {
1283 			in6_ifa_hold(ifpub);
1284 			spin_unlock_bh(&ifp->lock);
1285 			ipv6_create_tempaddr(ifpub, ifp);
1286 			in6_ifa_put(ifpub);
1287 		} else {
1288 			spin_unlock_bh(&ifp->lock);
1289 		}
1290 		ipv6_del_addr(ifp);
1291 #endif
1292 	} else
1293 		ipv6_del_addr(ifp);
1294 }
1295 
1296 void addrconf_dad_failure(struct inet6_ifaddr *ifp)
1297 {
1298 	if (net_ratelimit())
1299 		printk(KERN_INFO "%s: duplicate address detected!\n", ifp->idev->dev->name);
1300 	addrconf_dad_stop(ifp);
1301 }
1302 
1303 /* Join to solicited addr multicast group. */
1304 
1305 void addrconf_join_solict(struct net_device *dev, struct in6_addr *addr)
1306 {
1307 	struct in6_addr maddr;
1308 
1309 	if (dev->flags&(IFF_LOOPBACK|IFF_NOARP))
1310 		return;
1311 
1312 	addrconf_addr_solict_mult(addr, &maddr);
1313 	ipv6_dev_mc_inc(dev, &maddr);
1314 }
1315 
1316 void addrconf_leave_solict(struct inet6_dev *idev, struct in6_addr *addr)
1317 {
1318 	struct in6_addr maddr;
1319 
1320 	if (idev->dev->flags&(IFF_LOOPBACK|IFF_NOARP))
1321 		return;
1322 
1323 	addrconf_addr_solict_mult(addr, &maddr);
1324 	__ipv6_dev_mc_dec(idev, &maddr);
1325 }
1326 
1327 static void addrconf_join_anycast(struct inet6_ifaddr *ifp)
1328 {
1329 	struct in6_addr addr;
1330 	ipv6_addr_prefix(&addr, &ifp->addr, ifp->prefix_len);
1331 	if (ipv6_addr_any(&addr))
1332 		return;
1333 	ipv6_dev_ac_inc(ifp->idev->dev, &addr);
1334 }
1335 
1336 static void addrconf_leave_anycast(struct inet6_ifaddr *ifp)
1337 {
1338 	struct in6_addr addr;
1339 	ipv6_addr_prefix(&addr, &ifp->addr, ifp->prefix_len);
1340 	if (ipv6_addr_any(&addr))
1341 		return;
1342 	__ipv6_dev_ac_dec(ifp->idev, &addr);
1343 }
1344 
1345 static int addrconf_ifid_eui48(u8 *eui, struct net_device *dev)
1346 {
1347 	if (dev->addr_len != ETH_ALEN)
1348 		return -1;
1349 	memcpy(eui, dev->dev_addr, 3);
1350 	memcpy(eui + 5, dev->dev_addr + 3, 3);
1351 
1352 	/*
1353 	 * The zSeries OSA network cards can be shared among various
1354 	 * OS instances, but the OSA cards have only one MAC address.
1355 	 * This leads to duplicate address conflicts in conjunction
1356 	 * with IPv6 if more than one instance uses the same card.
1357 	 *
1358 	 * The driver for these cards can deliver a unique 16-bit
1359 	 * identifier for each instance sharing the same card.  It is
1360 	 * placed instead of 0xFFFE in the interface identifier.  The
1361 	 * "u" bit of the interface identifier is not inverted in this
1362 	 * case.  Hence the resulting interface identifier has local
1363 	 * scope according to RFC2373.
1364 	 */
1365 	if (dev->dev_id) {
1366 		eui[3] = (dev->dev_id >> 8) & 0xFF;
1367 		eui[4] = dev->dev_id & 0xFF;
1368 	} else {
1369 		eui[3] = 0xFF;
1370 		eui[4] = 0xFE;
1371 		eui[0] ^= 2;
1372 	}
1373 	return 0;
1374 }
1375 
1376 static int addrconf_ifid_arcnet(u8 *eui, struct net_device *dev)
1377 {
1378 	/* XXX: inherit EUI-64 from other interface -- yoshfuji */
1379 	if (dev->addr_len != ARCNET_ALEN)
1380 		return -1;
1381 	memset(eui, 0, 7);
1382 	eui[7] = *(u8*)dev->dev_addr;
1383 	return 0;
1384 }
1385 
1386 static int addrconf_ifid_infiniband(u8 *eui, struct net_device *dev)
1387 {
1388 	if (dev->addr_len != INFINIBAND_ALEN)
1389 		return -1;
1390 	memcpy(eui, dev->dev_addr + 12, 8);
1391 	eui[0] |= 2;
1392 	return 0;
1393 }
1394 
1395 static int ipv6_generate_eui64(u8 *eui, struct net_device *dev)
1396 {
1397 	switch (dev->type) {
1398 	case ARPHRD_ETHER:
1399 	case ARPHRD_FDDI:
1400 	case ARPHRD_IEEE802_TR:
1401 		return addrconf_ifid_eui48(eui, dev);
1402 	case ARPHRD_ARCNET:
1403 		return addrconf_ifid_arcnet(eui, dev);
1404 	case ARPHRD_INFINIBAND:
1405 		return addrconf_ifid_infiniband(eui, dev);
1406 	}
1407 	return -1;
1408 }
1409 
1410 static int ipv6_inherit_eui64(u8 *eui, struct inet6_dev *idev)
1411 {
1412 	int err = -1;
1413 	struct inet6_ifaddr *ifp;
1414 
1415 	read_lock_bh(&idev->lock);
1416 	for (ifp=idev->addr_list; ifp; ifp=ifp->if_next) {
1417 		if (ifp->scope == IFA_LINK && !(ifp->flags&IFA_F_TENTATIVE)) {
1418 			memcpy(eui, ifp->addr.s6_addr+8, 8);
1419 			err = 0;
1420 			break;
1421 		}
1422 	}
1423 	read_unlock_bh(&idev->lock);
1424 	return err;
1425 }
1426 
1427 #ifdef CONFIG_IPV6_PRIVACY
1428 /* (re)generation of randomized interface identifier (RFC 3041 3.2, 3.5) */
1429 static int __ipv6_regen_rndid(struct inet6_dev *idev)
1430 {
1431 regen:
1432 	get_random_bytes(idev->rndid, sizeof(idev->rndid));
1433 	idev->rndid[0] &= ~0x02;
1434 
1435 	/*
1436 	 * <draft-ietf-ipngwg-temp-addresses-v2-00.txt>:
1437 	 * check if generated address is not inappropriate
1438 	 *
1439 	 *  - Reserved subnet anycast (RFC 2526)
1440 	 *	11111101 11....11 1xxxxxxx
1441 	 *  - ISATAP (draft-ietf-ngtrans-isatap-13.txt) 5.1
1442 	 *	00-00-5E-FE-xx-xx-xx-xx
1443 	 *  - value 0
1444 	 *  - XXX: already assigned to an address on the device
1445 	 */
1446 	if (idev->rndid[0] == 0xfd &&
1447 	    (idev->rndid[1]&idev->rndid[2]&idev->rndid[3]&idev->rndid[4]&idev->rndid[5]&idev->rndid[6]) == 0xff &&
1448 	    (idev->rndid[7]&0x80))
1449 		goto regen;
1450 	if ((idev->rndid[0]|idev->rndid[1]) == 0) {
1451 		if (idev->rndid[2] == 0x5e && idev->rndid[3] == 0xfe)
1452 			goto regen;
1453 		if ((idev->rndid[2]|idev->rndid[3]|idev->rndid[4]|idev->rndid[5]|idev->rndid[6]|idev->rndid[7]) == 0x00)
1454 			goto regen;
1455 	}
1456 
1457 	return 0;
1458 }
1459 
1460 static void ipv6_regen_rndid(unsigned long data)
1461 {
1462 	struct inet6_dev *idev = (struct inet6_dev *) data;
1463 	unsigned long expires;
1464 
1465 	read_lock_bh(&addrconf_lock);
1466 	write_lock_bh(&idev->lock);
1467 
1468 	if (idev->dead)
1469 		goto out;
1470 
1471 	if (__ipv6_regen_rndid(idev) < 0)
1472 		goto out;
1473 
1474 	expires = jiffies +
1475 		idev->cnf.temp_prefered_lft * HZ -
1476 		idev->cnf.regen_max_retry * idev->cnf.dad_transmits * idev->nd_parms->retrans_time - desync_factor;
1477 	if (time_before(expires, jiffies)) {
1478 		printk(KERN_WARNING
1479 			"ipv6_regen_rndid(): too short regeneration interval; timer disabled for %s.\n",
1480 			idev->dev->name);
1481 		goto out;
1482 	}
1483 
1484 	if (!mod_timer(&idev->regen_timer, expires))
1485 		in6_dev_hold(idev);
1486 
1487 out:
1488 	write_unlock_bh(&idev->lock);
1489 	read_unlock_bh(&addrconf_lock);
1490 	in6_dev_put(idev);
1491 }
1492 
1493 static int __ipv6_try_regen_rndid(struct inet6_dev *idev, struct in6_addr *tmpaddr) {
1494 	int ret = 0;
1495 
1496 	if (tmpaddr && memcmp(idev->rndid, &tmpaddr->s6_addr[8], 8) == 0)
1497 		ret = __ipv6_regen_rndid(idev);
1498 	return ret;
1499 }
1500 #endif
1501 
1502 /*
1503  *	Add prefix route.
1504  */
1505 
1506 static void
1507 addrconf_prefix_route(struct in6_addr *pfx, int plen, struct net_device *dev,
1508 		      unsigned long expires, u32 flags)
1509 {
1510 	struct in6_rtmsg rtmsg;
1511 
1512 	memset(&rtmsg, 0, sizeof(rtmsg));
1513 	ipv6_addr_copy(&rtmsg.rtmsg_dst, pfx);
1514 	rtmsg.rtmsg_dst_len = plen;
1515 	rtmsg.rtmsg_metric = IP6_RT_PRIO_ADDRCONF;
1516 	rtmsg.rtmsg_ifindex = dev->ifindex;
1517 	rtmsg.rtmsg_info = expires;
1518 	rtmsg.rtmsg_flags = RTF_UP|flags;
1519 	rtmsg.rtmsg_type = RTMSG_NEWROUTE;
1520 
1521 	/* Prevent useless cloning on PtP SIT.
1522 	   This thing is done here expecting that the whole
1523 	   class of non-broadcast devices need not cloning.
1524 	 */
1525 	if (dev->type == ARPHRD_SIT && (dev->flags&IFF_POINTOPOINT))
1526 		rtmsg.rtmsg_flags |= RTF_NONEXTHOP;
1527 
1528 	ip6_route_add(&rtmsg, NULL, NULL, NULL);
1529 }
1530 
1531 /* Create "default" multicast route to the interface */
1532 
1533 static void addrconf_add_mroute(struct net_device *dev)
1534 {
1535 	struct in6_rtmsg rtmsg;
1536 
1537 	memset(&rtmsg, 0, sizeof(rtmsg));
1538 	ipv6_addr_set(&rtmsg.rtmsg_dst,
1539 		      htonl(0xFF000000), 0, 0, 0);
1540 	rtmsg.rtmsg_dst_len = 8;
1541 	rtmsg.rtmsg_metric = IP6_RT_PRIO_ADDRCONF;
1542 	rtmsg.rtmsg_ifindex = dev->ifindex;
1543 	rtmsg.rtmsg_flags = RTF_UP;
1544 	rtmsg.rtmsg_type = RTMSG_NEWROUTE;
1545 	ip6_route_add(&rtmsg, NULL, NULL, NULL);
1546 }
1547 
1548 static void sit_route_add(struct net_device *dev)
1549 {
1550 	struct in6_rtmsg rtmsg;
1551 
1552 	memset(&rtmsg, 0, sizeof(rtmsg));
1553 
1554 	rtmsg.rtmsg_type	= RTMSG_NEWROUTE;
1555 	rtmsg.rtmsg_metric	= IP6_RT_PRIO_ADDRCONF;
1556 
1557 	/* prefix length - 96 bits "::d.d.d.d" */
1558 	rtmsg.rtmsg_dst_len	= 96;
1559 	rtmsg.rtmsg_flags	= RTF_UP|RTF_NONEXTHOP;
1560 	rtmsg.rtmsg_ifindex	= dev->ifindex;
1561 
1562 	ip6_route_add(&rtmsg, NULL, NULL, NULL);
1563 }
1564 
1565 static void addrconf_add_lroute(struct net_device *dev)
1566 {
1567 	struct in6_addr addr;
1568 
1569 	ipv6_addr_set(&addr,  htonl(0xFE800000), 0, 0, 0);
1570 	addrconf_prefix_route(&addr, 64, dev, 0, 0);
1571 }
1572 
1573 static struct inet6_dev *addrconf_add_dev(struct net_device *dev)
1574 {
1575 	struct inet6_dev *idev;
1576 
1577 	ASSERT_RTNL();
1578 
1579 	if ((idev = ipv6_find_idev(dev)) == NULL)
1580 		return NULL;
1581 
1582 	/* Add default multicast route */
1583 	addrconf_add_mroute(dev);
1584 
1585 	/* Add link local route */
1586 	addrconf_add_lroute(dev);
1587 	return idev;
1588 }
1589 
1590 void addrconf_prefix_rcv(struct net_device *dev, u8 *opt, int len)
1591 {
1592 	struct prefix_info *pinfo;
1593 	__u32 valid_lft;
1594 	__u32 prefered_lft;
1595 	int addr_type;
1596 	unsigned long rt_expires;
1597 	struct inet6_dev *in6_dev;
1598 
1599 	pinfo = (struct prefix_info *) opt;
1600 
1601 	if (len < sizeof(struct prefix_info)) {
1602 		ADBG(("addrconf: prefix option too short\n"));
1603 		return;
1604 	}
1605 
1606 	/*
1607 	 *	Validation checks ([ADDRCONF], page 19)
1608 	 */
1609 
1610 	addr_type = ipv6_addr_type(&pinfo->prefix);
1611 
1612 	if (addr_type & (IPV6_ADDR_MULTICAST|IPV6_ADDR_LINKLOCAL))
1613 		return;
1614 
1615 	valid_lft = ntohl(pinfo->valid);
1616 	prefered_lft = ntohl(pinfo->prefered);
1617 
1618 	if (prefered_lft > valid_lft) {
1619 		if (net_ratelimit())
1620 			printk(KERN_WARNING "addrconf: prefix option has invalid lifetime\n");
1621 		return;
1622 	}
1623 
1624 	in6_dev = in6_dev_get(dev);
1625 
1626 	if (in6_dev == NULL) {
1627 		if (net_ratelimit())
1628 			printk(KERN_DEBUG "addrconf: device %s not configured\n", dev->name);
1629 		return;
1630 	}
1631 
1632 	/*
1633 	 *	Two things going on here:
1634 	 *	1) Add routes for on-link prefixes
1635 	 *	2) Configure prefixes with the auto flag set
1636 	 */
1637 
1638 	/* Avoid arithmetic overflow. Really, we could
1639 	   save rt_expires in seconds, likely valid_lft,
1640 	   but it would require division in fib gc, that it
1641 	   not good.
1642 	 */
1643 	if (valid_lft >= 0x7FFFFFFF/HZ)
1644 		rt_expires = 0x7FFFFFFF - (0x7FFFFFFF % HZ);
1645 	else
1646 		rt_expires = valid_lft * HZ;
1647 
1648 	/*
1649 	 * We convert this (in jiffies) to clock_t later.
1650 	 * Avoid arithmetic overflow there as well.
1651 	 * Overflow can happen only if HZ < USER_HZ.
1652 	 */
1653 	if (HZ < USER_HZ && rt_expires > 0x7FFFFFFF / USER_HZ)
1654 		rt_expires = 0x7FFFFFFF / USER_HZ;
1655 
1656 	if (pinfo->onlink) {
1657 		struct rt6_info *rt;
1658 		rt = rt6_lookup(&pinfo->prefix, NULL, dev->ifindex, 1);
1659 
1660 		if (rt && ((rt->rt6i_flags & (RTF_GATEWAY | RTF_DEFAULT)) == 0)) {
1661 			if (rt->rt6i_flags&RTF_EXPIRES) {
1662 				if (valid_lft == 0) {
1663 					ip6_del_rt(rt, NULL, NULL, NULL);
1664 					rt = NULL;
1665 				} else {
1666 					rt->rt6i_expires = jiffies + rt_expires;
1667 				}
1668 			}
1669 		} else if (valid_lft) {
1670 			addrconf_prefix_route(&pinfo->prefix, pinfo->prefix_len,
1671 					      dev, jiffies_to_clock_t(rt_expires), RTF_ADDRCONF|RTF_EXPIRES|RTF_PREFIX_RT);
1672 		}
1673 		if (rt)
1674 			dst_release(&rt->u.dst);
1675 	}
1676 
1677 	/* Try to figure out our local address for this prefix */
1678 
1679 	if (pinfo->autoconf && in6_dev->cnf.autoconf) {
1680 		struct inet6_ifaddr * ifp;
1681 		struct in6_addr addr;
1682 		int create = 0, update_lft = 0;
1683 
1684 		if (pinfo->prefix_len == 64) {
1685 			memcpy(&addr, &pinfo->prefix, 8);
1686 			if (ipv6_generate_eui64(addr.s6_addr + 8, dev) &&
1687 			    ipv6_inherit_eui64(addr.s6_addr + 8, in6_dev)) {
1688 				in6_dev_put(in6_dev);
1689 				return;
1690 			}
1691 			goto ok;
1692 		}
1693 		if (net_ratelimit())
1694 			printk(KERN_DEBUG "IPv6 addrconf: prefix with wrong length %d\n",
1695 			       pinfo->prefix_len);
1696 		in6_dev_put(in6_dev);
1697 		return;
1698 
1699 ok:
1700 
1701 		ifp = ipv6_get_ifaddr(&addr, dev, 1);
1702 
1703 		if (ifp == NULL && valid_lft) {
1704 			int max_addresses = in6_dev->cnf.max_addresses;
1705 
1706 			/* Do not allow to create too much of autoconfigured
1707 			 * addresses; this would be too easy way to crash kernel.
1708 			 */
1709 			if (!max_addresses ||
1710 			    ipv6_count_addresses(in6_dev) < max_addresses)
1711 				ifp = ipv6_add_addr(in6_dev, &addr, pinfo->prefix_len,
1712 						    addr_type&IPV6_ADDR_SCOPE_MASK, 0);
1713 
1714 			if (!ifp || IS_ERR(ifp)) {
1715 				in6_dev_put(in6_dev);
1716 				return;
1717 			}
1718 
1719 			update_lft = create = 1;
1720 			ifp->cstamp = jiffies;
1721 			addrconf_dad_start(ifp, RTF_ADDRCONF|RTF_PREFIX_RT);
1722 		}
1723 
1724 		if (ifp) {
1725 			int flags;
1726 			unsigned long now;
1727 #ifdef CONFIG_IPV6_PRIVACY
1728 			struct inet6_ifaddr *ift;
1729 #endif
1730 			u32 stored_lft;
1731 
1732 			/* update lifetime (RFC2462 5.5.3 e) */
1733 			spin_lock(&ifp->lock);
1734 			now = jiffies;
1735 			if (ifp->valid_lft > (now - ifp->tstamp) / HZ)
1736 				stored_lft = ifp->valid_lft - (now - ifp->tstamp) / HZ;
1737 			else
1738 				stored_lft = 0;
1739 			if (!update_lft && stored_lft) {
1740 				if (valid_lft > MIN_VALID_LIFETIME ||
1741 				    valid_lft > stored_lft)
1742 					update_lft = 1;
1743 				else if (stored_lft <= MIN_VALID_LIFETIME) {
1744 					/* valid_lft <= stored_lft is always true */
1745 					/* XXX: IPsec */
1746 					update_lft = 0;
1747 				} else {
1748 					valid_lft = MIN_VALID_LIFETIME;
1749 					if (valid_lft < prefered_lft)
1750 						prefered_lft = valid_lft;
1751 					update_lft = 1;
1752 				}
1753 			}
1754 
1755 			if (update_lft) {
1756 				ifp->valid_lft = valid_lft;
1757 				ifp->prefered_lft = prefered_lft;
1758 				ifp->tstamp = now;
1759 				flags = ifp->flags;
1760 				ifp->flags &= ~IFA_F_DEPRECATED;
1761 				spin_unlock(&ifp->lock);
1762 
1763 				if (!(flags&IFA_F_TENTATIVE))
1764 					ipv6_ifa_notify(0, ifp);
1765 			} else
1766 				spin_unlock(&ifp->lock);
1767 
1768 #ifdef CONFIG_IPV6_PRIVACY
1769 			read_lock_bh(&in6_dev->lock);
1770 			/* update all temporary addresses in the list */
1771 			for (ift=in6_dev->tempaddr_list; ift; ift=ift->tmp_next) {
1772 				/*
1773 				 * When adjusting the lifetimes of an existing
1774 				 * temporary address, only lower the lifetimes.
1775 				 * Implementations must not increase the
1776 				 * lifetimes of an existing temporary address
1777 				 * when processing a Prefix Information Option.
1778 				 */
1779 				spin_lock(&ift->lock);
1780 				flags = ift->flags;
1781 				if (ift->valid_lft > valid_lft &&
1782 				    ift->valid_lft - valid_lft > (jiffies - ift->tstamp) / HZ)
1783 					ift->valid_lft = valid_lft + (jiffies - ift->tstamp) / HZ;
1784 				if (ift->prefered_lft > prefered_lft &&
1785 				    ift->prefered_lft - prefered_lft > (jiffies - ift->tstamp) / HZ)
1786 					ift->prefered_lft = prefered_lft + (jiffies - ift->tstamp) / HZ;
1787 				spin_unlock(&ift->lock);
1788 				if (!(flags&IFA_F_TENTATIVE))
1789 					ipv6_ifa_notify(0, ift);
1790 			}
1791 
1792 			if (create && in6_dev->cnf.use_tempaddr > 0) {
1793 				/*
1794 				 * When a new public address is created as described in [ADDRCONF],
1795 				 * also create a new temporary address.
1796 				 */
1797 				read_unlock_bh(&in6_dev->lock);
1798 				ipv6_create_tempaddr(ifp, NULL);
1799 			} else {
1800 				read_unlock_bh(&in6_dev->lock);
1801 			}
1802 #endif
1803 			in6_ifa_put(ifp);
1804 			addrconf_verify(0);
1805 		}
1806 	}
1807 	inet6_prefix_notify(RTM_NEWPREFIX, in6_dev, pinfo);
1808 	in6_dev_put(in6_dev);
1809 }
1810 
1811 /*
1812  *	Set destination address.
1813  *	Special case for SIT interfaces where we create a new "virtual"
1814  *	device.
1815  */
1816 int addrconf_set_dstaddr(void __user *arg)
1817 {
1818 	struct in6_ifreq ireq;
1819 	struct net_device *dev;
1820 	int err = -EINVAL;
1821 
1822 	rtnl_lock();
1823 
1824 	err = -EFAULT;
1825 	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
1826 		goto err_exit;
1827 
1828 	dev = __dev_get_by_index(ireq.ifr6_ifindex);
1829 
1830 	err = -ENODEV;
1831 	if (dev == NULL)
1832 		goto err_exit;
1833 
1834 	if (dev->type == ARPHRD_SIT) {
1835 		struct ifreq ifr;
1836 		mm_segment_t	oldfs;
1837 		struct ip_tunnel_parm p;
1838 
1839 		err = -EADDRNOTAVAIL;
1840 		if (!(ipv6_addr_type(&ireq.ifr6_addr) & IPV6_ADDR_COMPATv4))
1841 			goto err_exit;
1842 
1843 		memset(&p, 0, sizeof(p));
1844 		p.iph.daddr = ireq.ifr6_addr.s6_addr32[3];
1845 		p.iph.saddr = 0;
1846 		p.iph.version = 4;
1847 		p.iph.ihl = 5;
1848 		p.iph.protocol = IPPROTO_IPV6;
1849 		p.iph.ttl = 64;
1850 		ifr.ifr_ifru.ifru_data = (void __user *)&p;
1851 
1852 		oldfs = get_fs(); set_fs(KERNEL_DS);
1853 		err = dev->do_ioctl(dev, &ifr, SIOCADDTUNNEL);
1854 		set_fs(oldfs);
1855 
1856 		if (err == 0) {
1857 			err = -ENOBUFS;
1858 			if ((dev = __dev_get_by_name(p.name)) == NULL)
1859 				goto err_exit;
1860 			err = dev_open(dev);
1861 		}
1862 	}
1863 
1864 err_exit:
1865 	rtnl_unlock();
1866 	return err;
1867 }
1868 
1869 /*
1870  *	Manual configuration of address on an interface
1871  */
1872 static int inet6_addr_add(int ifindex, struct in6_addr *pfx, int plen,
1873 			  __u32 prefered_lft, __u32 valid_lft)
1874 {
1875 	struct inet6_ifaddr *ifp;
1876 	struct inet6_dev *idev;
1877 	struct net_device *dev;
1878 	__u8 ifa_flags = 0;
1879 	int scope;
1880 
1881 	ASSERT_RTNL();
1882 
1883 	/* check the lifetime */
1884 	if (!valid_lft || prefered_lft > valid_lft)
1885 		return -EINVAL;
1886 
1887 	if ((dev = __dev_get_by_index(ifindex)) == NULL)
1888 		return -ENODEV;
1889 
1890 	if (!(dev->flags&IFF_UP))
1891 		return -ENETDOWN;
1892 
1893 	if ((idev = addrconf_add_dev(dev)) == NULL)
1894 		return -ENOBUFS;
1895 
1896 	scope = ipv6_addr_scope(pfx);
1897 
1898 	if (valid_lft == INFINITY_LIFE_TIME)
1899 		ifa_flags |= IFA_F_PERMANENT;
1900 	else if (valid_lft >= 0x7FFFFFFF/HZ)
1901 		valid_lft = 0x7FFFFFFF/HZ;
1902 
1903 	if (prefered_lft == 0)
1904 		ifa_flags |= IFA_F_DEPRECATED;
1905 	else if ((prefered_lft >= 0x7FFFFFFF/HZ) &&
1906 		 (prefered_lft != INFINITY_LIFE_TIME))
1907 		prefered_lft = 0x7FFFFFFF/HZ;
1908 
1909 	ifp = ipv6_add_addr(idev, pfx, plen, scope, ifa_flags);
1910 
1911 	if (!IS_ERR(ifp)) {
1912 		spin_lock_bh(&ifp->lock);
1913 		ifp->valid_lft = valid_lft;
1914 		ifp->prefered_lft = prefered_lft;
1915 		ifp->tstamp = jiffies;
1916 		spin_unlock_bh(&ifp->lock);
1917 
1918 		addrconf_dad_start(ifp, 0);
1919 		in6_ifa_put(ifp);
1920 		addrconf_verify(0);
1921 		return 0;
1922 	}
1923 
1924 	return PTR_ERR(ifp);
1925 }
1926 
1927 static int inet6_addr_del(int ifindex, struct in6_addr *pfx, int plen)
1928 {
1929 	struct inet6_ifaddr *ifp;
1930 	struct inet6_dev *idev;
1931 	struct net_device *dev;
1932 
1933 	if ((dev = __dev_get_by_index(ifindex)) == NULL)
1934 		return -ENODEV;
1935 
1936 	if ((idev = __in6_dev_get(dev)) == NULL)
1937 		return -ENXIO;
1938 
1939 	read_lock_bh(&idev->lock);
1940 	for (ifp = idev->addr_list; ifp; ifp=ifp->if_next) {
1941 		if (ifp->prefix_len == plen &&
1942 		    ipv6_addr_equal(pfx, &ifp->addr)) {
1943 			in6_ifa_hold(ifp);
1944 			read_unlock_bh(&idev->lock);
1945 
1946 			ipv6_del_addr(ifp);
1947 
1948 			/* If the last address is deleted administratively,
1949 			   disable IPv6 on this interface.
1950 			 */
1951 			if (idev->addr_list == NULL)
1952 				addrconf_ifdown(idev->dev, 1);
1953 			return 0;
1954 		}
1955 	}
1956 	read_unlock_bh(&idev->lock);
1957 	return -EADDRNOTAVAIL;
1958 }
1959 
1960 
1961 int addrconf_add_ifaddr(void __user *arg)
1962 {
1963 	struct in6_ifreq ireq;
1964 	int err;
1965 
1966 	if (!capable(CAP_NET_ADMIN))
1967 		return -EPERM;
1968 
1969 	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
1970 		return -EFAULT;
1971 
1972 	rtnl_lock();
1973 	err = inet6_addr_add(ireq.ifr6_ifindex, &ireq.ifr6_addr, ireq.ifr6_prefixlen,
1974 			     INFINITY_LIFE_TIME, INFINITY_LIFE_TIME);
1975 	rtnl_unlock();
1976 	return err;
1977 }
1978 
1979 int addrconf_del_ifaddr(void __user *arg)
1980 {
1981 	struct in6_ifreq ireq;
1982 	int err;
1983 
1984 	if (!capable(CAP_NET_ADMIN))
1985 		return -EPERM;
1986 
1987 	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
1988 		return -EFAULT;
1989 
1990 	rtnl_lock();
1991 	err = inet6_addr_del(ireq.ifr6_ifindex, &ireq.ifr6_addr, ireq.ifr6_prefixlen);
1992 	rtnl_unlock();
1993 	return err;
1994 }
1995 
1996 static void sit_add_v4_addrs(struct inet6_dev *idev)
1997 {
1998 	struct inet6_ifaddr * ifp;
1999 	struct in6_addr addr;
2000 	struct net_device *dev;
2001 	int scope;
2002 
2003 	ASSERT_RTNL();
2004 
2005 	memset(&addr, 0, sizeof(struct in6_addr));
2006 	memcpy(&addr.s6_addr32[3], idev->dev->dev_addr, 4);
2007 
2008 	if (idev->dev->flags&IFF_POINTOPOINT) {
2009 		addr.s6_addr32[0] = htonl(0xfe800000);
2010 		scope = IFA_LINK;
2011 	} else {
2012 		scope = IPV6_ADDR_COMPATv4;
2013 	}
2014 
2015 	if (addr.s6_addr32[3]) {
2016 		ifp = ipv6_add_addr(idev, &addr, 128, scope, IFA_F_PERMANENT);
2017 		if (!IS_ERR(ifp)) {
2018 			spin_lock_bh(&ifp->lock);
2019 			ifp->flags &= ~IFA_F_TENTATIVE;
2020 			spin_unlock_bh(&ifp->lock);
2021 			ipv6_ifa_notify(RTM_NEWADDR, ifp);
2022 			in6_ifa_put(ifp);
2023 		}
2024 		return;
2025 	}
2026 
2027         for (dev = dev_base; dev != NULL; dev = dev->next) {
2028 		struct in_device * in_dev = __in_dev_get_rtnl(dev);
2029 		if (in_dev && (dev->flags & IFF_UP)) {
2030 			struct in_ifaddr * ifa;
2031 
2032 			int flag = scope;
2033 
2034 			for (ifa = in_dev->ifa_list; ifa; ifa = ifa->ifa_next) {
2035 				int plen;
2036 
2037 				addr.s6_addr32[3] = ifa->ifa_local;
2038 
2039 				if (ifa->ifa_scope == RT_SCOPE_LINK)
2040 					continue;
2041 				if (ifa->ifa_scope >= RT_SCOPE_HOST) {
2042 					if (idev->dev->flags&IFF_POINTOPOINT)
2043 						continue;
2044 					flag |= IFA_HOST;
2045 				}
2046 				if (idev->dev->flags&IFF_POINTOPOINT)
2047 					plen = 64;
2048 				else
2049 					plen = 96;
2050 
2051 				ifp = ipv6_add_addr(idev, &addr, plen, flag,
2052 						    IFA_F_PERMANENT);
2053 				if (!IS_ERR(ifp)) {
2054 					spin_lock_bh(&ifp->lock);
2055 					ifp->flags &= ~IFA_F_TENTATIVE;
2056 					spin_unlock_bh(&ifp->lock);
2057 					ipv6_ifa_notify(RTM_NEWADDR, ifp);
2058 					in6_ifa_put(ifp);
2059 				}
2060 			}
2061 		}
2062         }
2063 }
2064 
2065 static void init_loopback(struct net_device *dev)
2066 {
2067 	struct inet6_dev  *idev;
2068 	struct inet6_ifaddr * ifp;
2069 
2070 	/* ::1 */
2071 
2072 	ASSERT_RTNL();
2073 
2074 	if ((idev = ipv6_find_idev(dev)) == NULL) {
2075 		printk(KERN_DEBUG "init loopback: add_dev failed\n");
2076 		return;
2077 	}
2078 
2079 	ifp = ipv6_add_addr(idev, &in6addr_loopback, 128, IFA_HOST, IFA_F_PERMANENT);
2080 	if (!IS_ERR(ifp)) {
2081 		spin_lock_bh(&ifp->lock);
2082 		ifp->flags &= ~IFA_F_TENTATIVE;
2083 		spin_unlock_bh(&ifp->lock);
2084 		ipv6_ifa_notify(RTM_NEWADDR, ifp);
2085 		in6_ifa_put(ifp);
2086 	}
2087 }
2088 
2089 static void addrconf_add_linklocal(struct inet6_dev *idev, struct in6_addr *addr)
2090 {
2091 	struct inet6_ifaddr * ifp;
2092 
2093 	ifp = ipv6_add_addr(idev, addr, 64, IFA_LINK, IFA_F_PERMANENT);
2094 	if (!IS_ERR(ifp)) {
2095 		addrconf_dad_start(ifp, 0);
2096 		in6_ifa_put(ifp);
2097 	}
2098 }
2099 
2100 static void addrconf_dev_config(struct net_device *dev)
2101 {
2102 	struct in6_addr addr;
2103 	struct inet6_dev    * idev;
2104 
2105 	ASSERT_RTNL();
2106 
2107 	if ((dev->type != ARPHRD_ETHER) &&
2108 	    (dev->type != ARPHRD_FDDI) &&
2109 	    (dev->type != ARPHRD_IEEE802_TR) &&
2110 	    (dev->type != ARPHRD_ARCNET) &&
2111 	    (dev->type != ARPHRD_INFINIBAND)) {
2112 		/* Alas, we support only Ethernet autoconfiguration. */
2113 		return;
2114 	}
2115 
2116 	idev = addrconf_add_dev(dev);
2117 	if (idev == NULL)
2118 		return;
2119 
2120 	memset(&addr, 0, sizeof(struct in6_addr));
2121 	addr.s6_addr32[0] = htonl(0xFE800000);
2122 
2123 	if (ipv6_generate_eui64(addr.s6_addr + 8, dev) == 0)
2124 		addrconf_add_linklocal(idev, &addr);
2125 }
2126 
2127 static void addrconf_sit_config(struct net_device *dev)
2128 {
2129 	struct inet6_dev *idev;
2130 
2131 	ASSERT_RTNL();
2132 
2133 	/*
2134 	 * Configure the tunnel with one of our IPv4
2135 	 * addresses... we should configure all of
2136 	 * our v4 addrs in the tunnel
2137 	 */
2138 
2139 	if ((idev = ipv6_find_idev(dev)) == NULL) {
2140 		printk(KERN_DEBUG "init sit: add_dev failed\n");
2141 		return;
2142 	}
2143 
2144 	sit_add_v4_addrs(idev);
2145 
2146 	if (dev->flags&IFF_POINTOPOINT) {
2147 		addrconf_add_mroute(dev);
2148 		addrconf_add_lroute(dev);
2149 	} else
2150 		sit_route_add(dev);
2151 }
2152 
2153 static inline int
2154 ipv6_inherit_linklocal(struct inet6_dev *idev, struct net_device *link_dev)
2155 {
2156 	struct in6_addr lladdr;
2157 
2158 	if (!ipv6_get_lladdr(link_dev, &lladdr)) {
2159 		addrconf_add_linklocal(idev, &lladdr);
2160 		return 0;
2161 	}
2162 	return -1;
2163 }
2164 
2165 static void ip6_tnl_add_linklocal(struct inet6_dev *idev)
2166 {
2167 	struct net_device *link_dev;
2168 
2169 	/* first try to inherit the link-local address from the link device */
2170 	if (idev->dev->iflink &&
2171 	    (link_dev = __dev_get_by_index(idev->dev->iflink))) {
2172 		if (!ipv6_inherit_linklocal(idev, link_dev))
2173 			return;
2174 	}
2175 	/* then try to inherit it from any device */
2176 	for (link_dev = dev_base; link_dev; link_dev = link_dev->next) {
2177 		if (!ipv6_inherit_linklocal(idev, link_dev))
2178 			return;
2179 	}
2180 	printk(KERN_DEBUG "init ip6-ip6: add_linklocal failed\n");
2181 }
2182 
2183 /*
2184  * Autoconfigure tunnel with a link-local address so routing protocols,
2185  * DHCPv6, MLD etc. can be run over the virtual link
2186  */
2187 
2188 static void addrconf_ip6_tnl_config(struct net_device *dev)
2189 {
2190 	struct inet6_dev *idev;
2191 
2192 	ASSERT_RTNL();
2193 
2194 	if ((idev = addrconf_add_dev(dev)) == NULL) {
2195 		printk(KERN_DEBUG "init ip6-ip6: add_dev failed\n");
2196 		return;
2197 	}
2198 	ip6_tnl_add_linklocal(idev);
2199 }
2200 
2201 static int addrconf_notify(struct notifier_block *this, unsigned long event,
2202 			   void * data)
2203 {
2204 	struct net_device *dev = (struct net_device *) data;
2205 	struct inet6_dev *idev = __in6_dev_get(dev);
2206 	int run_pending = 0;
2207 
2208 	switch(event) {
2209 	case NETDEV_UP:
2210 	case NETDEV_CHANGE:
2211 		if (event == NETDEV_UP) {
2212 			if (!netif_carrier_ok(dev)) {
2213 				/* device is not ready yet. */
2214 				printk(KERN_INFO
2215 					"ADDRCONF(NETDEV_UP): %s: "
2216 					"link is not ready\n",
2217 					dev->name);
2218 				break;
2219 			}
2220 
2221 			if (idev)
2222 				idev->if_flags |= IF_READY;
2223 		} else {
2224 			if (!netif_carrier_ok(dev)) {
2225 				/* device is still not ready. */
2226 				break;
2227 			}
2228 
2229 			if (idev) {
2230 				if (idev->if_flags & IF_READY) {
2231 					/* device is already configured. */
2232 					break;
2233 				}
2234 				idev->if_flags |= IF_READY;
2235 			}
2236 
2237 			printk(KERN_INFO
2238 					"ADDRCONF(NETDEV_CHANGE): %s: "
2239 					"link becomes ready\n",
2240 					dev->name);
2241 
2242 			run_pending = 1;
2243 		}
2244 
2245 		switch(dev->type) {
2246 		case ARPHRD_SIT:
2247 			addrconf_sit_config(dev);
2248 			break;
2249 		case ARPHRD_TUNNEL6:
2250 			addrconf_ip6_tnl_config(dev);
2251 			break;
2252 		case ARPHRD_LOOPBACK:
2253 			init_loopback(dev);
2254 			break;
2255 
2256 		default:
2257 			addrconf_dev_config(dev);
2258 			break;
2259 		};
2260 		if (idev) {
2261 			if (run_pending)
2262 				addrconf_dad_run(idev);
2263 
2264 			/* If the MTU changed during the interface down, when the
2265 			   interface up, the changed MTU must be reflected in the
2266 			   idev as well as routers.
2267 			 */
2268 			if (idev->cnf.mtu6 != dev->mtu && dev->mtu >= IPV6_MIN_MTU) {
2269 				rt6_mtu_change(dev, dev->mtu);
2270 				idev->cnf.mtu6 = dev->mtu;
2271 			}
2272 			idev->tstamp = jiffies;
2273 			inet6_ifinfo_notify(RTM_NEWLINK, idev);
2274 			/* If the changed mtu during down is lower than IPV6_MIN_MTU
2275 			   stop IPv6 on this interface.
2276 			 */
2277 			if (dev->mtu < IPV6_MIN_MTU)
2278 				addrconf_ifdown(dev, event != NETDEV_DOWN);
2279 		}
2280 		break;
2281 
2282 	case NETDEV_CHANGEMTU:
2283 		if ( idev && dev->mtu >= IPV6_MIN_MTU) {
2284 			rt6_mtu_change(dev, dev->mtu);
2285 			idev->cnf.mtu6 = dev->mtu;
2286 			break;
2287 		}
2288 
2289 		/* MTU falled under IPV6_MIN_MTU. Stop IPv6 on this interface. */
2290 
2291 	case NETDEV_DOWN:
2292 	case NETDEV_UNREGISTER:
2293 		/*
2294 		 *	Remove all addresses from this interface.
2295 		 */
2296 		addrconf_ifdown(dev, event != NETDEV_DOWN);
2297 		break;
2298 
2299 	case NETDEV_CHANGENAME:
2300 #ifdef CONFIG_SYSCTL
2301 		if (idev) {
2302 			addrconf_sysctl_unregister(&idev->cnf);
2303 			neigh_sysctl_unregister(idev->nd_parms);
2304 			neigh_sysctl_register(dev, idev->nd_parms,
2305 					      NET_IPV6, NET_IPV6_NEIGH, "ipv6",
2306 					      &ndisc_ifinfo_sysctl_change,
2307 					      NULL);
2308 			addrconf_sysctl_register(idev, &idev->cnf);
2309 		}
2310 #endif
2311 		break;
2312 	};
2313 
2314 	return NOTIFY_OK;
2315 }
2316 
2317 /*
2318  *	addrconf module should be notified of a device going up
2319  */
2320 static struct notifier_block ipv6_dev_notf = {
2321 	.notifier_call = addrconf_notify,
2322 	.priority = 0
2323 };
2324 
2325 static int addrconf_ifdown(struct net_device *dev, int how)
2326 {
2327 	struct inet6_dev *idev;
2328 	struct inet6_ifaddr *ifa, **bifa;
2329 	int i;
2330 
2331 	ASSERT_RTNL();
2332 
2333 	if (dev == &loopback_dev && how == 1)
2334 		how = 0;
2335 
2336 	rt6_ifdown(dev);
2337 	neigh_ifdown(&nd_tbl, dev);
2338 
2339 	idev = __in6_dev_get(dev);
2340 	if (idev == NULL)
2341 		return -ENODEV;
2342 
2343 	/* Step 1: remove reference to ipv6 device from parent device.
2344 	           Do not dev_put!
2345 	 */
2346 	if (how == 1) {
2347 		write_lock_bh(&addrconf_lock);
2348 		dev->ip6_ptr = NULL;
2349 		idev->dead = 1;
2350 		write_unlock_bh(&addrconf_lock);
2351 
2352 		/* Step 1.5: remove snmp6 entry */
2353 		snmp6_unregister_dev(idev);
2354 
2355 	}
2356 
2357 	/* Step 2: clear hash table */
2358 	for (i=0; i<IN6_ADDR_HSIZE; i++) {
2359 		bifa = &inet6_addr_lst[i];
2360 
2361 		write_lock_bh(&addrconf_hash_lock);
2362 		while ((ifa = *bifa) != NULL) {
2363 			if (ifa->idev == idev) {
2364 				*bifa = ifa->lst_next;
2365 				ifa->lst_next = NULL;
2366 				addrconf_del_timer(ifa);
2367 				in6_ifa_put(ifa);
2368 				continue;
2369 			}
2370 			bifa = &ifa->lst_next;
2371 		}
2372 		write_unlock_bh(&addrconf_hash_lock);
2373 	}
2374 
2375 	write_lock_bh(&idev->lock);
2376 
2377 	/* Step 3: clear flags for stateless addrconf */
2378 	if (how != 1)
2379 		idev->if_flags &= ~(IF_RS_SENT|IF_RA_RCVD|IF_READY);
2380 
2381 	/* Step 4: clear address list */
2382 #ifdef CONFIG_IPV6_PRIVACY
2383 	if (how == 1 && del_timer(&idev->regen_timer))
2384 		in6_dev_put(idev);
2385 
2386 	/* clear tempaddr list */
2387 	while ((ifa = idev->tempaddr_list) != NULL) {
2388 		idev->tempaddr_list = ifa->tmp_next;
2389 		ifa->tmp_next = NULL;
2390 		ifa->dead = 1;
2391 		write_unlock_bh(&idev->lock);
2392 		spin_lock_bh(&ifa->lock);
2393 
2394 		if (ifa->ifpub) {
2395 			in6_ifa_put(ifa->ifpub);
2396 			ifa->ifpub = NULL;
2397 		}
2398 		spin_unlock_bh(&ifa->lock);
2399 		in6_ifa_put(ifa);
2400 		write_lock_bh(&idev->lock);
2401 	}
2402 #endif
2403 	while ((ifa = idev->addr_list) != NULL) {
2404 		idev->addr_list = ifa->if_next;
2405 		ifa->if_next = NULL;
2406 		ifa->dead = 1;
2407 		addrconf_del_timer(ifa);
2408 		write_unlock_bh(&idev->lock);
2409 
2410 		__ipv6_ifa_notify(RTM_DELADDR, ifa);
2411 		in6_ifa_put(ifa);
2412 
2413 		write_lock_bh(&idev->lock);
2414 	}
2415 	write_unlock_bh(&idev->lock);
2416 
2417 	/* Step 5: Discard multicast list */
2418 
2419 	if (how == 1)
2420 		ipv6_mc_destroy_dev(idev);
2421 	else
2422 		ipv6_mc_down(idev);
2423 
2424 	/* Step 5: netlink notification of this interface */
2425 	idev->tstamp = jiffies;
2426 	inet6_ifinfo_notify(RTM_DELLINK, idev);
2427 
2428 	/* Shot the device (if unregistered) */
2429 
2430 	if (how == 1) {
2431 #ifdef CONFIG_SYSCTL
2432 		addrconf_sysctl_unregister(&idev->cnf);
2433 		neigh_sysctl_unregister(idev->nd_parms);
2434 #endif
2435 		neigh_parms_release(&nd_tbl, idev->nd_parms);
2436 		neigh_ifdown(&nd_tbl, dev);
2437 		in6_dev_put(idev);
2438 	}
2439 	return 0;
2440 }
2441 
2442 static void addrconf_rs_timer(unsigned long data)
2443 {
2444 	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *) data;
2445 
2446 	if (ifp->idev->cnf.forwarding)
2447 		goto out;
2448 
2449 	if (ifp->idev->if_flags & IF_RA_RCVD) {
2450 		/*
2451 		 *	Announcement received after solicitation
2452 		 *	was sent
2453 		 */
2454 		goto out;
2455 	}
2456 
2457 	spin_lock(&ifp->lock);
2458 	if (ifp->probes++ < ifp->idev->cnf.rtr_solicits) {
2459 		struct in6_addr all_routers;
2460 
2461 		/* The wait after the last probe can be shorter */
2462 		addrconf_mod_timer(ifp, AC_RS,
2463 				   (ifp->probes == ifp->idev->cnf.rtr_solicits) ?
2464 				   ifp->idev->cnf.rtr_solicit_delay :
2465 				   ifp->idev->cnf.rtr_solicit_interval);
2466 		spin_unlock(&ifp->lock);
2467 
2468 		ipv6_addr_all_routers(&all_routers);
2469 
2470 		ndisc_send_rs(ifp->idev->dev, &ifp->addr, &all_routers);
2471 	} else {
2472 		spin_unlock(&ifp->lock);
2473 		/*
2474 		 * Note: we do not support deprecated "all on-link"
2475 		 * assumption any longer.
2476 		 */
2477 		printk(KERN_DEBUG "%s: no IPv6 routers present\n",
2478 		       ifp->idev->dev->name);
2479 	}
2480 
2481 out:
2482 	in6_ifa_put(ifp);
2483 }
2484 
2485 /*
2486  *	Duplicate Address Detection
2487  */
2488 static void addrconf_dad_kick(struct inet6_ifaddr *ifp)
2489 {
2490 	unsigned long rand_num;
2491 	struct inet6_dev *idev = ifp->idev;
2492 
2493 	rand_num = net_random() % (idev->cnf.rtr_solicit_delay ? : 1);
2494 	ifp->probes = idev->cnf.dad_transmits;
2495 	addrconf_mod_timer(ifp, AC_DAD, rand_num);
2496 }
2497 
2498 static void addrconf_dad_start(struct inet6_ifaddr *ifp, u32 flags)
2499 {
2500 	struct inet6_dev *idev = ifp->idev;
2501 	struct net_device *dev = idev->dev;
2502 
2503 	addrconf_join_solict(dev, &ifp->addr);
2504 
2505 	if (ifp->prefix_len != 128 && (ifp->flags&IFA_F_PERMANENT))
2506 		addrconf_prefix_route(&ifp->addr, ifp->prefix_len, dev, 0,
2507 					flags);
2508 
2509 	net_srandom(ifp->addr.s6_addr32[3]);
2510 
2511 	read_lock_bh(&idev->lock);
2512 	if (ifp->dead)
2513 		goto out;
2514 	spin_lock_bh(&ifp->lock);
2515 
2516 	if (dev->flags&(IFF_NOARP|IFF_LOOPBACK) ||
2517 	    !(ifp->flags&IFA_F_TENTATIVE)) {
2518 		ifp->flags &= ~IFA_F_TENTATIVE;
2519 		spin_unlock_bh(&ifp->lock);
2520 		read_unlock_bh(&idev->lock);
2521 
2522 		addrconf_dad_completed(ifp);
2523 		return;
2524 	}
2525 
2526 	if (!(idev->if_flags & IF_READY)) {
2527 		spin_unlock_bh(&ifp->lock);
2528 		read_unlock_bh(&idev->lock);
2529 		/*
2530 		 * If the defice is not ready:
2531 		 * - keep it tentative if it is a permanent address.
2532 		 * - otherwise, kill it.
2533 		 */
2534 		in6_ifa_hold(ifp);
2535 		addrconf_dad_stop(ifp);
2536 		return;
2537 	}
2538 	addrconf_dad_kick(ifp);
2539 	spin_unlock_bh(&ifp->lock);
2540 out:
2541 	read_unlock_bh(&idev->lock);
2542 }
2543 
2544 static void addrconf_dad_timer(unsigned long data)
2545 {
2546 	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *) data;
2547 	struct inet6_dev *idev = ifp->idev;
2548 	struct in6_addr unspec;
2549 	struct in6_addr mcaddr;
2550 
2551 	read_lock_bh(&idev->lock);
2552 	if (idev->dead) {
2553 		read_unlock_bh(&idev->lock);
2554 		goto out;
2555 	}
2556 	spin_lock_bh(&ifp->lock);
2557 	if (ifp->probes == 0) {
2558 		/*
2559 		 * DAD was successful
2560 		 */
2561 
2562 		ifp->flags &= ~IFA_F_TENTATIVE;
2563 		spin_unlock_bh(&ifp->lock);
2564 		read_unlock_bh(&idev->lock);
2565 
2566 		addrconf_dad_completed(ifp);
2567 
2568 		goto out;
2569 	}
2570 
2571 	ifp->probes--;
2572 	addrconf_mod_timer(ifp, AC_DAD, ifp->idev->nd_parms->retrans_time);
2573 	spin_unlock_bh(&ifp->lock);
2574 	read_unlock_bh(&idev->lock);
2575 
2576 	/* send a neighbour solicitation for our addr */
2577 	memset(&unspec, 0, sizeof(unspec));
2578 	addrconf_addr_solict_mult(&ifp->addr, &mcaddr);
2579 	ndisc_send_ns(ifp->idev->dev, NULL, &ifp->addr, &mcaddr, &unspec);
2580 out:
2581 	in6_ifa_put(ifp);
2582 }
2583 
2584 static void addrconf_dad_completed(struct inet6_ifaddr *ifp)
2585 {
2586 	struct net_device *	dev = ifp->idev->dev;
2587 
2588 	/*
2589 	 *	Configure the address for reception. Now it is valid.
2590 	 */
2591 
2592 	ipv6_ifa_notify(RTM_NEWADDR, ifp);
2593 
2594 	/* If added prefix is link local and forwarding is off,
2595 	   start sending router solicitations.
2596 	 */
2597 
2598 	if (ifp->idev->cnf.forwarding == 0 &&
2599 	    ifp->idev->cnf.rtr_solicits > 0 &&
2600 	    (dev->flags&IFF_LOOPBACK) == 0 &&
2601 	    (ipv6_addr_type(&ifp->addr) & IPV6_ADDR_LINKLOCAL)) {
2602 		struct in6_addr all_routers;
2603 
2604 		ipv6_addr_all_routers(&all_routers);
2605 
2606 		/*
2607 		 *	If a host as already performed a random delay
2608 		 *	[...] as part of DAD [...] there is no need
2609 		 *	to delay again before sending the first RS
2610 		 */
2611 		ndisc_send_rs(ifp->idev->dev, &ifp->addr, &all_routers);
2612 
2613 		spin_lock_bh(&ifp->lock);
2614 		ifp->probes = 1;
2615 		ifp->idev->if_flags |= IF_RS_SENT;
2616 		addrconf_mod_timer(ifp, AC_RS, ifp->idev->cnf.rtr_solicit_interval);
2617 		spin_unlock_bh(&ifp->lock);
2618 	}
2619 }
2620 
2621 static void addrconf_dad_run(struct inet6_dev *idev) {
2622 	struct inet6_ifaddr *ifp;
2623 
2624 	read_lock_bh(&idev->lock);
2625 	for (ifp = idev->addr_list; ifp; ifp = ifp->if_next) {
2626 		spin_lock_bh(&ifp->lock);
2627 		if (!(ifp->flags & IFA_F_TENTATIVE)) {
2628 			spin_unlock_bh(&ifp->lock);
2629 			continue;
2630 		}
2631 		spin_unlock_bh(&ifp->lock);
2632 		addrconf_dad_kick(ifp);
2633 	}
2634 	read_unlock_bh(&idev->lock);
2635 }
2636 
2637 #ifdef CONFIG_PROC_FS
2638 struct if6_iter_state {
2639 	int bucket;
2640 };
2641 
2642 static struct inet6_ifaddr *if6_get_first(struct seq_file *seq)
2643 {
2644 	struct inet6_ifaddr *ifa = NULL;
2645 	struct if6_iter_state *state = seq->private;
2646 
2647 	for (state->bucket = 0; state->bucket < IN6_ADDR_HSIZE; ++state->bucket) {
2648 		ifa = inet6_addr_lst[state->bucket];
2649 		if (ifa)
2650 			break;
2651 	}
2652 	return ifa;
2653 }
2654 
2655 static struct inet6_ifaddr *if6_get_next(struct seq_file *seq, struct inet6_ifaddr *ifa)
2656 {
2657 	struct if6_iter_state *state = seq->private;
2658 
2659 	ifa = ifa->lst_next;
2660 try_again:
2661 	if (!ifa && ++state->bucket < IN6_ADDR_HSIZE) {
2662 		ifa = inet6_addr_lst[state->bucket];
2663 		goto try_again;
2664 	}
2665 	return ifa;
2666 }
2667 
2668 static struct inet6_ifaddr *if6_get_idx(struct seq_file *seq, loff_t pos)
2669 {
2670 	struct inet6_ifaddr *ifa = if6_get_first(seq);
2671 
2672 	if (ifa)
2673 		while(pos && (ifa = if6_get_next(seq, ifa)) != NULL)
2674 			--pos;
2675 	return pos ? NULL : ifa;
2676 }
2677 
2678 static void *if6_seq_start(struct seq_file *seq, loff_t *pos)
2679 {
2680 	read_lock_bh(&addrconf_hash_lock);
2681 	return if6_get_idx(seq, *pos);
2682 }
2683 
2684 static void *if6_seq_next(struct seq_file *seq, void *v, loff_t *pos)
2685 {
2686 	struct inet6_ifaddr *ifa;
2687 
2688 	ifa = if6_get_next(seq, v);
2689 	++*pos;
2690 	return ifa;
2691 }
2692 
2693 static void if6_seq_stop(struct seq_file *seq, void *v)
2694 {
2695 	read_unlock_bh(&addrconf_hash_lock);
2696 }
2697 
2698 static int if6_seq_show(struct seq_file *seq, void *v)
2699 {
2700 	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *)v;
2701 	seq_printf(seq,
2702 		   NIP6_SEQFMT " %02x %02x %02x %02x %8s\n",
2703 		   NIP6(ifp->addr),
2704 		   ifp->idev->dev->ifindex,
2705 		   ifp->prefix_len,
2706 		   ifp->scope,
2707 		   ifp->flags,
2708 		   ifp->idev->dev->name);
2709 	return 0;
2710 }
2711 
2712 static struct seq_operations if6_seq_ops = {
2713 	.start	= if6_seq_start,
2714 	.next	= if6_seq_next,
2715 	.show	= if6_seq_show,
2716 	.stop	= if6_seq_stop,
2717 };
2718 
2719 static int if6_seq_open(struct inode *inode, struct file *file)
2720 {
2721 	struct seq_file *seq;
2722 	int rc = -ENOMEM;
2723 	struct if6_iter_state *s = kzalloc(sizeof(*s), GFP_KERNEL);
2724 
2725 	if (!s)
2726 		goto out;
2727 
2728 	rc = seq_open(file, &if6_seq_ops);
2729 	if (rc)
2730 		goto out_kfree;
2731 
2732 	seq = file->private_data;
2733 	seq->private = s;
2734 out:
2735 	return rc;
2736 out_kfree:
2737 	kfree(s);
2738 	goto out;
2739 }
2740 
2741 static struct file_operations if6_fops = {
2742 	.owner		= THIS_MODULE,
2743 	.open		= if6_seq_open,
2744 	.read		= seq_read,
2745 	.llseek		= seq_lseek,
2746 	.release	= seq_release_private,
2747 };
2748 
2749 int __init if6_proc_init(void)
2750 {
2751 	if (!proc_net_fops_create("if_inet6", S_IRUGO, &if6_fops))
2752 		return -ENOMEM;
2753 	return 0;
2754 }
2755 
2756 void if6_proc_exit(void)
2757 {
2758 	proc_net_remove("if_inet6");
2759 }
2760 #endif	/* CONFIG_PROC_FS */
2761 
2762 /*
2763  *	Periodic address status verification
2764  */
2765 
2766 static void addrconf_verify(unsigned long foo)
2767 {
2768 	struct inet6_ifaddr *ifp;
2769 	unsigned long now, next;
2770 	int i;
2771 
2772 	spin_lock_bh(&addrconf_verify_lock);
2773 	now = jiffies;
2774 	next = now + ADDR_CHECK_FREQUENCY;
2775 
2776 	del_timer(&addr_chk_timer);
2777 
2778 	for (i=0; i < IN6_ADDR_HSIZE; i++) {
2779 
2780 restart:
2781 		read_lock(&addrconf_hash_lock);
2782 		for (ifp=inet6_addr_lst[i]; ifp; ifp=ifp->lst_next) {
2783 			unsigned long age;
2784 #ifdef CONFIG_IPV6_PRIVACY
2785 			unsigned long regen_advance;
2786 #endif
2787 
2788 			if (ifp->flags & IFA_F_PERMANENT)
2789 				continue;
2790 
2791 			spin_lock(&ifp->lock);
2792 			age = (now - ifp->tstamp) / HZ;
2793 
2794 #ifdef CONFIG_IPV6_PRIVACY
2795 			regen_advance = ifp->idev->cnf.regen_max_retry *
2796 					ifp->idev->cnf.dad_transmits *
2797 					ifp->idev->nd_parms->retrans_time / HZ;
2798 #endif
2799 
2800 			if (ifp->valid_lft != INFINITY_LIFE_TIME &&
2801 			    age >= ifp->valid_lft) {
2802 				spin_unlock(&ifp->lock);
2803 				in6_ifa_hold(ifp);
2804 				read_unlock(&addrconf_hash_lock);
2805 				ipv6_del_addr(ifp);
2806 				goto restart;
2807 			} else if (ifp->prefered_lft == INFINITY_LIFE_TIME) {
2808 				spin_unlock(&ifp->lock);
2809 				continue;
2810 			} else if (age >= ifp->prefered_lft) {
2811 				/* jiffies - ifp->tsamp > age >= ifp->prefered_lft */
2812 				int deprecate = 0;
2813 
2814 				if (!(ifp->flags&IFA_F_DEPRECATED)) {
2815 					deprecate = 1;
2816 					ifp->flags |= IFA_F_DEPRECATED;
2817 				}
2818 
2819 				if (time_before(ifp->tstamp + ifp->valid_lft * HZ, next))
2820 					next = ifp->tstamp + ifp->valid_lft * HZ;
2821 
2822 				spin_unlock(&ifp->lock);
2823 
2824 				if (deprecate) {
2825 					in6_ifa_hold(ifp);
2826 					read_unlock(&addrconf_hash_lock);
2827 
2828 					ipv6_ifa_notify(0, ifp);
2829 					in6_ifa_put(ifp);
2830 					goto restart;
2831 				}
2832 #ifdef CONFIG_IPV6_PRIVACY
2833 			} else if ((ifp->flags&IFA_F_TEMPORARY) &&
2834 				   !(ifp->flags&IFA_F_TENTATIVE)) {
2835 				if (age >= ifp->prefered_lft - regen_advance) {
2836 					struct inet6_ifaddr *ifpub = ifp->ifpub;
2837 					if (time_before(ifp->tstamp + ifp->prefered_lft * HZ, next))
2838 						next = ifp->tstamp + ifp->prefered_lft * HZ;
2839 					if (!ifp->regen_count && ifpub) {
2840 						ifp->regen_count++;
2841 						in6_ifa_hold(ifp);
2842 						in6_ifa_hold(ifpub);
2843 						spin_unlock(&ifp->lock);
2844 						read_unlock(&addrconf_hash_lock);
2845 						spin_lock(&ifpub->lock);
2846 						ifpub->regen_count = 0;
2847 						spin_unlock(&ifpub->lock);
2848 						ipv6_create_tempaddr(ifpub, ifp);
2849 						in6_ifa_put(ifpub);
2850 						in6_ifa_put(ifp);
2851 						goto restart;
2852 					}
2853 				} else if (time_before(ifp->tstamp + ifp->prefered_lft * HZ - regen_advance * HZ, next))
2854 					next = ifp->tstamp + ifp->prefered_lft * HZ - regen_advance * HZ;
2855 				spin_unlock(&ifp->lock);
2856 #endif
2857 			} else {
2858 				/* ifp->prefered_lft <= ifp->valid_lft */
2859 				if (time_before(ifp->tstamp + ifp->prefered_lft * HZ, next))
2860 					next = ifp->tstamp + ifp->prefered_lft * HZ;
2861 				spin_unlock(&ifp->lock);
2862 			}
2863 		}
2864 		read_unlock(&addrconf_hash_lock);
2865 	}
2866 
2867 	addr_chk_timer.expires = time_before(next, jiffies + HZ) ? jiffies + HZ : next;
2868 	add_timer(&addr_chk_timer);
2869 	spin_unlock_bh(&addrconf_verify_lock);
2870 }
2871 
2872 static int
2873 inet6_rtm_deladdr(struct sk_buff *skb, struct nlmsghdr *nlh, void *arg)
2874 {
2875 	struct rtattr **rta = arg;
2876 	struct ifaddrmsg *ifm = NLMSG_DATA(nlh);
2877 	struct in6_addr *pfx;
2878 
2879 	pfx = NULL;
2880 	if (rta[IFA_ADDRESS-1]) {
2881 		if (RTA_PAYLOAD(rta[IFA_ADDRESS-1]) < sizeof(*pfx))
2882 			return -EINVAL;
2883 		pfx = RTA_DATA(rta[IFA_ADDRESS-1]);
2884 	}
2885 	if (rta[IFA_LOCAL-1]) {
2886 		if (RTA_PAYLOAD(rta[IFA_LOCAL-1]) < sizeof(*pfx) ||
2887 		    (pfx && memcmp(pfx, RTA_DATA(rta[IFA_LOCAL-1]), sizeof(*pfx))))
2888 			return -EINVAL;
2889 		pfx = RTA_DATA(rta[IFA_LOCAL-1]);
2890 	}
2891 	if (pfx == NULL)
2892 		return -EINVAL;
2893 
2894 	return inet6_addr_del(ifm->ifa_index, pfx, ifm->ifa_prefixlen);
2895 }
2896 
2897 static int
2898 inet6_addr_modify(int ifindex, struct in6_addr *pfx,
2899 		  __u32 prefered_lft, __u32 valid_lft)
2900 {
2901 	struct inet6_ifaddr *ifp = NULL;
2902 	struct net_device *dev;
2903 	int ifa_flags = 0;
2904 
2905 	if ((dev = __dev_get_by_index(ifindex)) == NULL)
2906 		return -ENODEV;
2907 
2908 	if (!(dev->flags&IFF_UP))
2909 		return -ENETDOWN;
2910 
2911 	if (!valid_lft || (prefered_lft > valid_lft))
2912 		return -EINVAL;
2913 
2914 	ifp = ipv6_get_ifaddr(pfx, dev, 1);
2915 	if (ifp == NULL)
2916 		return -ENOENT;
2917 
2918 	if (valid_lft == INFINITY_LIFE_TIME)
2919 		ifa_flags = IFA_F_PERMANENT;
2920 	else if (valid_lft >= 0x7FFFFFFF/HZ)
2921 		valid_lft = 0x7FFFFFFF/HZ;
2922 
2923 	if (prefered_lft == 0)
2924 		ifa_flags = IFA_F_DEPRECATED;
2925 	else if ((prefered_lft >= 0x7FFFFFFF/HZ) &&
2926 		 (prefered_lft != INFINITY_LIFE_TIME))
2927 		prefered_lft = 0x7FFFFFFF/HZ;
2928 
2929 	spin_lock_bh(&ifp->lock);
2930 	ifp->flags = (ifp->flags & ~(IFA_F_DEPRECATED|IFA_F_PERMANENT)) | ifa_flags;
2931 
2932 	ifp->tstamp = jiffies;
2933 	ifp->valid_lft = valid_lft;
2934 	ifp->prefered_lft = prefered_lft;
2935 
2936 	spin_unlock_bh(&ifp->lock);
2937 	if (!(ifp->flags&IFA_F_TENTATIVE))
2938 		ipv6_ifa_notify(0, ifp);
2939 	in6_ifa_put(ifp);
2940 
2941 	addrconf_verify(0);
2942 
2943 	return 0;
2944 }
2945 
2946 static int
2947 inet6_rtm_newaddr(struct sk_buff *skb, struct nlmsghdr *nlh, void *arg)
2948 {
2949 	struct rtattr  **rta = arg;
2950 	struct ifaddrmsg *ifm = NLMSG_DATA(nlh);
2951 	struct in6_addr *pfx;
2952 	__u32 valid_lft = INFINITY_LIFE_TIME, prefered_lft = INFINITY_LIFE_TIME;
2953 
2954 	pfx = NULL;
2955 	if (rta[IFA_ADDRESS-1]) {
2956 		if (RTA_PAYLOAD(rta[IFA_ADDRESS-1]) < sizeof(*pfx))
2957 			return -EINVAL;
2958 		pfx = RTA_DATA(rta[IFA_ADDRESS-1]);
2959 	}
2960 	if (rta[IFA_LOCAL-1]) {
2961 		if (RTA_PAYLOAD(rta[IFA_LOCAL-1]) < sizeof(*pfx) ||
2962 		    (pfx && memcmp(pfx, RTA_DATA(rta[IFA_LOCAL-1]), sizeof(*pfx))))
2963 			return -EINVAL;
2964 		pfx = RTA_DATA(rta[IFA_LOCAL-1]);
2965 	}
2966 	if (pfx == NULL)
2967 		return -EINVAL;
2968 
2969 	if (rta[IFA_CACHEINFO-1]) {
2970 		struct ifa_cacheinfo *ci;
2971 		if (RTA_PAYLOAD(rta[IFA_CACHEINFO-1]) < sizeof(*ci))
2972 			return -EINVAL;
2973 		ci = RTA_DATA(rta[IFA_CACHEINFO-1]);
2974 		valid_lft = ci->ifa_valid;
2975 		prefered_lft = ci->ifa_prefered;
2976 	}
2977 
2978 	if (nlh->nlmsg_flags & NLM_F_REPLACE) {
2979 		int ret;
2980 		ret = inet6_addr_modify(ifm->ifa_index, pfx,
2981 					prefered_lft, valid_lft);
2982 		if (ret == 0 || !(nlh->nlmsg_flags & NLM_F_CREATE))
2983 			return ret;
2984 	}
2985 
2986 	return inet6_addr_add(ifm->ifa_index, pfx, ifm->ifa_prefixlen,
2987 			      prefered_lft, valid_lft);
2988 
2989 }
2990 
2991 /* Maximum length of ifa_cacheinfo attributes */
2992 #define INET6_IFADDR_RTA_SPACE \
2993 		RTA_SPACE(16) /* IFA_ADDRESS */ + \
2994 		RTA_SPACE(sizeof(struct ifa_cacheinfo)) /* CACHEINFO */
2995 
2996 static int inet6_fill_ifaddr(struct sk_buff *skb, struct inet6_ifaddr *ifa,
2997 			     u32 pid, u32 seq, int event, unsigned int flags)
2998 {
2999 	struct ifaddrmsg *ifm;
3000 	struct nlmsghdr  *nlh;
3001 	struct ifa_cacheinfo ci;
3002 	unsigned char	 *b = skb->tail;
3003 
3004 	nlh = NLMSG_NEW(skb, pid, seq, event, sizeof(*ifm), flags);
3005 	ifm = NLMSG_DATA(nlh);
3006 	ifm->ifa_family = AF_INET6;
3007 	ifm->ifa_prefixlen = ifa->prefix_len;
3008 	ifm->ifa_flags = ifa->flags;
3009 	ifm->ifa_scope = RT_SCOPE_UNIVERSE;
3010 	if (ifa->scope&IFA_HOST)
3011 		ifm->ifa_scope = RT_SCOPE_HOST;
3012 	else if (ifa->scope&IFA_LINK)
3013 		ifm->ifa_scope = RT_SCOPE_LINK;
3014 	else if (ifa->scope&IFA_SITE)
3015 		ifm->ifa_scope = RT_SCOPE_SITE;
3016 	ifm->ifa_index = ifa->idev->dev->ifindex;
3017 	RTA_PUT(skb, IFA_ADDRESS, 16, &ifa->addr);
3018 	if (!(ifa->flags&IFA_F_PERMANENT)) {
3019 		ci.ifa_prefered = ifa->prefered_lft;
3020 		ci.ifa_valid = ifa->valid_lft;
3021 		if (ci.ifa_prefered != INFINITY_LIFE_TIME) {
3022 			long tval = (jiffies - ifa->tstamp)/HZ;
3023 			ci.ifa_prefered -= tval;
3024 			if (ci.ifa_valid != INFINITY_LIFE_TIME)
3025 				ci.ifa_valid -= tval;
3026 		}
3027 	} else {
3028 		ci.ifa_prefered = INFINITY_LIFE_TIME;
3029 		ci.ifa_valid = INFINITY_LIFE_TIME;
3030 	}
3031 	ci.cstamp = (__u32)(TIME_DELTA(ifa->cstamp, INITIAL_JIFFIES) / HZ * 100
3032 		    + TIME_DELTA(ifa->cstamp, INITIAL_JIFFIES) % HZ * 100 / HZ);
3033 	ci.tstamp = (__u32)(TIME_DELTA(ifa->tstamp, INITIAL_JIFFIES) / HZ * 100
3034 		    + TIME_DELTA(ifa->tstamp, INITIAL_JIFFIES) % HZ * 100 / HZ);
3035 	RTA_PUT(skb, IFA_CACHEINFO, sizeof(ci), &ci);
3036 	nlh->nlmsg_len = skb->tail - b;
3037 	return skb->len;
3038 
3039 nlmsg_failure:
3040 rtattr_failure:
3041 	skb_trim(skb, b - skb->data);
3042 	return -1;
3043 }
3044 
3045 static int inet6_fill_ifmcaddr(struct sk_buff *skb, struct ifmcaddr6 *ifmca,
3046 				u32 pid, u32 seq, int event, u16 flags)
3047 {
3048 	struct ifaddrmsg *ifm;
3049 	struct nlmsghdr  *nlh;
3050 	struct ifa_cacheinfo ci;
3051 	unsigned char	 *b = skb->tail;
3052 
3053 	nlh = NLMSG_NEW(skb, pid, seq, event, sizeof(*ifm), flags);
3054 	ifm = NLMSG_DATA(nlh);
3055 	ifm->ifa_family = AF_INET6;
3056 	ifm->ifa_prefixlen = 128;
3057 	ifm->ifa_flags = IFA_F_PERMANENT;
3058 	ifm->ifa_scope = RT_SCOPE_UNIVERSE;
3059 	if (ipv6_addr_scope(&ifmca->mca_addr)&IFA_SITE)
3060 		ifm->ifa_scope = RT_SCOPE_SITE;
3061 	ifm->ifa_index = ifmca->idev->dev->ifindex;
3062 	RTA_PUT(skb, IFA_MULTICAST, 16, &ifmca->mca_addr);
3063 	ci.cstamp = (__u32)(TIME_DELTA(ifmca->mca_cstamp, INITIAL_JIFFIES) / HZ
3064 		    * 100 + TIME_DELTA(ifmca->mca_cstamp, INITIAL_JIFFIES) % HZ
3065 		    * 100 / HZ);
3066 	ci.tstamp = (__u32)(TIME_DELTA(ifmca->mca_tstamp, INITIAL_JIFFIES) / HZ
3067 		    * 100 + TIME_DELTA(ifmca->mca_tstamp, INITIAL_JIFFIES) % HZ
3068 		    * 100 / HZ);
3069 	ci.ifa_prefered = INFINITY_LIFE_TIME;
3070 	ci.ifa_valid = INFINITY_LIFE_TIME;
3071 	RTA_PUT(skb, IFA_CACHEINFO, sizeof(ci), &ci);
3072 	nlh->nlmsg_len = skb->tail - b;
3073 	return skb->len;
3074 
3075 nlmsg_failure:
3076 rtattr_failure:
3077 	skb_trim(skb, b - skb->data);
3078 	return -1;
3079 }
3080 
3081 static int inet6_fill_ifacaddr(struct sk_buff *skb, struct ifacaddr6 *ifaca,
3082 				u32 pid, u32 seq, int event, unsigned int flags)
3083 {
3084 	struct ifaddrmsg *ifm;
3085 	struct nlmsghdr  *nlh;
3086 	struct ifa_cacheinfo ci;
3087 	unsigned char	 *b = skb->tail;
3088 
3089 	nlh = NLMSG_NEW(skb, pid, seq, event, sizeof(*ifm), flags);
3090 	ifm = NLMSG_DATA(nlh);
3091 	ifm->ifa_family = AF_INET6;
3092 	ifm->ifa_prefixlen = 128;
3093 	ifm->ifa_flags = IFA_F_PERMANENT;
3094 	ifm->ifa_scope = RT_SCOPE_UNIVERSE;
3095 	if (ipv6_addr_scope(&ifaca->aca_addr)&IFA_SITE)
3096 		ifm->ifa_scope = RT_SCOPE_SITE;
3097 	ifm->ifa_index = ifaca->aca_idev->dev->ifindex;
3098 	RTA_PUT(skb, IFA_ANYCAST, 16, &ifaca->aca_addr);
3099 	ci.cstamp = (__u32)(TIME_DELTA(ifaca->aca_cstamp, INITIAL_JIFFIES) / HZ
3100 		    * 100 + TIME_DELTA(ifaca->aca_cstamp, INITIAL_JIFFIES) % HZ
3101 		    * 100 / HZ);
3102 	ci.tstamp = (__u32)(TIME_DELTA(ifaca->aca_tstamp, INITIAL_JIFFIES) / HZ
3103 		    * 100 + TIME_DELTA(ifaca->aca_tstamp, INITIAL_JIFFIES) % HZ
3104 		    * 100 / HZ);
3105 	ci.ifa_prefered = INFINITY_LIFE_TIME;
3106 	ci.ifa_valid = INFINITY_LIFE_TIME;
3107 	RTA_PUT(skb, IFA_CACHEINFO, sizeof(ci), &ci);
3108 	nlh->nlmsg_len = skb->tail - b;
3109 	return skb->len;
3110 
3111 nlmsg_failure:
3112 rtattr_failure:
3113 	skb_trim(skb, b - skb->data);
3114 	return -1;
3115 }
3116 
3117 enum addr_type_t
3118 {
3119 	UNICAST_ADDR,
3120 	MULTICAST_ADDR,
3121 	ANYCAST_ADDR,
3122 };
3123 
3124 static int inet6_dump_addr(struct sk_buff *skb, struct netlink_callback *cb,
3125 			   enum addr_type_t type)
3126 {
3127 	int idx, ip_idx;
3128 	int s_idx, s_ip_idx;
3129 	int err = 1;
3130 	struct net_device *dev;
3131 	struct inet6_dev *idev = NULL;
3132 	struct inet6_ifaddr *ifa;
3133 	struct ifmcaddr6 *ifmca;
3134 	struct ifacaddr6 *ifaca;
3135 
3136 	s_idx = cb->args[0];
3137 	s_ip_idx = ip_idx = cb->args[1];
3138 	read_lock(&dev_base_lock);
3139 
3140 	for (dev = dev_base, idx = 0; dev; dev = dev->next, idx++) {
3141 		if (idx < s_idx)
3142 			continue;
3143 		if (idx > s_idx)
3144 			s_ip_idx = 0;
3145 		ip_idx = 0;
3146 		if ((idev = in6_dev_get(dev)) == NULL)
3147 			continue;
3148 		read_lock_bh(&idev->lock);
3149 		switch (type) {
3150 		case UNICAST_ADDR:
3151 			/* unicast address incl. temp addr */
3152 			for (ifa = idev->addr_list; ifa;
3153 			     ifa = ifa->if_next, ip_idx++) {
3154 				if (ip_idx < s_ip_idx)
3155 					continue;
3156 				if ((err = inet6_fill_ifaddr(skb, ifa,
3157 				    NETLINK_CB(cb->skb).pid,
3158 				    cb->nlh->nlmsg_seq, RTM_NEWADDR,
3159 				    NLM_F_MULTI)) <= 0)
3160 					goto done;
3161 			}
3162 			break;
3163 		case MULTICAST_ADDR:
3164 			/* multicast address */
3165 			for (ifmca = idev->mc_list; ifmca;
3166 			     ifmca = ifmca->next, ip_idx++) {
3167 				if (ip_idx < s_ip_idx)
3168 					continue;
3169 				if ((err = inet6_fill_ifmcaddr(skb, ifmca,
3170 				    NETLINK_CB(cb->skb).pid,
3171 				    cb->nlh->nlmsg_seq, RTM_GETMULTICAST,
3172 				    NLM_F_MULTI)) <= 0)
3173 					goto done;
3174 			}
3175 			break;
3176 		case ANYCAST_ADDR:
3177 			/* anycast address */
3178 			for (ifaca = idev->ac_list; ifaca;
3179 			     ifaca = ifaca->aca_next, ip_idx++) {
3180 				if (ip_idx < s_ip_idx)
3181 					continue;
3182 				if ((err = inet6_fill_ifacaddr(skb, ifaca,
3183 				    NETLINK_CB(cb->skb).pid,
3184 				    cb->nlh->nlmsg_seq, RTM_GETANYCAST,
3185 				    NLM_F_MULTI)) <= 0)
3186 					goto done;
3187 			}
3188 			break;
3189 		default:
3190 			break;
3191 		}
3192 		read_unlock_bh(&idev->lock);
3193 		in6_dev_put(idev);
3194 	}
3195 done:
3196 	if (err <= 0) {
3197 		read_unlock_bh(&idev->lock);
3198 		in6_dev_put(idev);
3199 	}
3200 	read_unlock(&dev_base_lock);
3201 	cb->args[0] = idx;
3202 	cb->args[1] = ip_idx;
3203 	return skb->len;
3204 }
3205 
3206 static int inet6_dump_ifaddr(struct sk_buff *skb, struct netlink_callback *cb)
3207 {
3208 	enum addr_type_t type = UNICAST_ADDR;
3209 	return inet6_dump_addr(skb, cb, type);
3210 }
3211 
3212 static int inet6_dump_ifmcaddr(struct sk_buff *skb, struct netlink_callback *cb)
3213 {
3214 	enum addr_type_t type = MULTICAST_ADDR;
3215 	return inet6_dump_addr(skb, cb, type);
3216 }
3217 
3218 
3219 static int inet6_dump_ifacaddr(struct sk_buff *skb, struct netlink_callback *cb)
3220 {
3221 	enum addr_type_t type = ANYCAST_ADDR;
3222 	return inet6_dump_addr(skb, cb, type);
3223 }
3224 
3225 static int inet6_rtm_getaddr(struct sk_buff *in_skb,
3226 		struct nlmsghdr* nlh, void *arg)
3227 {
3228 	struct rtattr **rta = arg;
3229 	struct ifaddrmsg *ifm = NLMSG_DATA(nlh);
3230 	struct in6_addr *addr = NULL;
3231 	struct net_device *dev = NULL;
3232 	struct inet6_ifaddr *ifa;
3233 	struct sk_buff *skb;
3234 	int size = NLMSG_SPACE(sizeof(struct ifaddrmsg) + INET6_IFADDR_RTA_SPACE);
3235 	int err;
3236 
3237 	if (rta[IFA_ADDRESS-1]) {
3238 		if (RTA_PAYLOAD(rta[IFA_ADDRESS-1]) < sizeof(*addr))
3239 			return -EINVAL;
3240 		addr = RTA_DATA(rta[IFA_ADDRESS-1]);
3241 	}
3242 	if (rta[IFA_LOCAL-1]) {
3243 		if (RTA_PAYLOAD(rta[IFA_LOCAL-1]) < sizeof(*addr) ||
3244 		    (addr && memcmp(addr, RTA_DATA(rta[IFA_LOCAL-1]), sizeof(*addr))))
3245 			return -EINVAL;
3246 		addr = RTA_DATA(rta[IFA_LOCAL-1]);
3247 	}
3248 	if (addr == NULL)
3249 		return -EINVAL;
3250 
3251 	if (ifm->ifa_index)
3252 		dev = __dev_get_by_index(ifm->ifa_index);
3253 
3254 	if ((ifa = ipv6_get_ifaddr(addr, dev, 1)) == NULL)
3255 		return -EADDRNOTAVAIL;
3256 
3257 	if ((skb = alloc_skb(size, GFP_KERNEL)) == NULL) {
3258 		err = -ENOBUFS;
3259 		goto out;
3260 	}
3261 
3262 	NETLINK_CB(skb).dst_pid = NETLINK_CB(in_skb).pid;
3263 	err = inet6_fill_ifaddr(skb, ifa, NETLINK_CB(in_skb).pid,
3264 				nlh->nlmsg_seq, RTM_NEWADDR, 0);
3265 	if (err < 0) {
3266 		err = -EMSGSIZE;
3267 		goto out_free;
3268 	}
3269 
3270 	err = netlink_unicast(rtnl, skb, NETLINK_CB(in_skb).pid, MSG_DONTWAIT);
3271 	if (err > 0)
3272 		err = 0;
3273 out:
3274 	in6_ifa_put(ifa);
3275 	return err;
3276 out_free:
3277 	kfree_skb(skb);
3278 	goto out;
3279 }
3280 
3281 static void inet6_ifa_notify(int event, struct inet6_ifaddr *ifa)
3282 {
3283 	struct sk_buff *skb;
3284 	int size = NLMSG_SPACE(sizeof(struct ifaddrmsg) + INET6_IFADDR_RTA_SPACE);
3285 
3286 	skb = alloc_skb(size, GFP_ATOMIC);
3287 	if (!skb) {
3288 		netlink_set_err(rtnl, 0, RTNLGRP_IPV6_IFADDR, ENOBUFS);
3289 		return;
3290 	}
3291 	if (inet6_fill_ifaddr(skb, ifa, current->pid, 0, event, 0) < 0) {
3292 		kfree_skb(skb);
3293 		netlink_set_err(rtnl, 0, RTNLGRP_IPV6_IFADDR, EINVAL);
3294 		return;
3295 	}
3296 	NETLINK_CB(skb).dst_group = RTNLGRP_IPV6_IFADDR;
3297 	netlink_broadcast(rtnl, skb, 0, RTNLGRP_IPV6_IFADDR, GFP_ATOMIC);
3298 }
3299 
3300 static void inline ipv6_store_devconf(struct ipv6_devconf *cnf,
3301 				__s32 *array, int bytes)
3302 {
3303 	memset(array, 0, bytes);
3304 	array[DEVCONF_FORWARDING] = cnf->forwarding;
3305 	array[DEVCONF_HOPLIMIT] = cnf->hop_limit;
3306 	array[DEVCONF_MTU6] = cnf->mtu6;
3307 	array[DEVCONF_ACCEPT_RA] = cnf->accept_ra;
3308 	array[DEVCONF_ACCEPT_REDIRECTS] = cnf->accept_redirects;
3309 	array[DEVCONF_AUTOCONF] = cnf->autoconf;
3310 	array[DEVCONF_DAD_TRANSMITS] = cnf->dad_transmits;
3311 	array[DEVCONF_RTR_SOLICITS] = cnf->rtr_solicits;
3312 	array[DEVCONF_RTR_SOLICIT_INTERVAL] = cnf->rtr_solicit_interval;
3313 	array[DEVCONF_RTR_SOLICIT_DELAY] = cnf->rtr_solicit_delay;
3314 	array[DEVCONF_FORCE_MLD_VERSION] = cnf->force_mld_version;
3315 #ifdef CONFIG_IPV6_PRIVACY
3316 	array[DEVCONF_USE_TEMPADDR] = cnf->use_tempaddr;
3317 	array[DEVCONF_TEMP_VALID_LFT] = cnf->temp_valid_lft;
3318 	array[DEVCONF_TEMP_PREFERED_LFT] = cnf->temp_prefered_lft;
3319 	array[DEVCONF_REGEN_MAX_RETRY] = cnf->regen_max_retry;
3320 	array[DEVCONF_MAX_DESYNC_FACTOR] = cnf->max_desync_factor;
3321 #endif
3322 	array[DEVCONF_MAX_ADDRESSES] = cnf->max_addresses;
3323 	array[DEVCONF_ACCEPT_RA_DEFRTR] = cnf->accept_ra_defrtr;
3324 	array[DEVCONF_ACCEPT_RA_PINFO] = cnf->accept_ra_pinfo;
3325 #ifdef CONFIG_IPV6_ROUTER_PREF
3326 	array[DEVCONF_ACCEPT_RA_RTR_PREF] = cnf->accept_ra_rtr_pref;
3327 	array[DEVCONF_RTR_PROBE_INTERVAL] = cnf->rtr_probe_interval;
3328 #ifdef CONFIV_IPV6_ROUTE_INFO
3329 	array[DEVCONF_ACCEPT_RA_RT_INFO_MAX_PLEN] = cnf->accept_ra_rt_info_max_plen;
3330 #endif
3331 #endif
3332 }
3333 
3334 /* Maximum length of ifinfomsg attributes */
3335 #define INET6_IFINFO_RTA_SPACE \
3336 		RTA_SPACE(IFNAMSIZ) /* IFNAME */ + \
3337 		RTA_SPACE(MAX_ADDR_LEN) /* ADDRESS */ +	\
3338 		RTA_SPACE(sizeof(u32)) /* MTU */ + \
3339 		RTA_SPACE(sizeof(int)) /* LINK */ + \
3340 		RTA_SPACE(0) /* PROTINFO */ + \
3341 		RTA_SPACE(sizeof(u32)) /* FLAGS */ + \
3342 		RTA_SPACE(sizeof(struct ifla_cacheinfo)) /* CACHEINFO */ + \
3343 		RTA_SPACE(sizeof(__s32[DEVCONF_MAX])) /* CONF */
3344 
3345 static int inet6_fill_ifinfo(struct sk_buff *skb, struct inet6_dev *idev,
3346 			     u32 pid, u32 seq, int event, unsigned int flags)
3347 {
3348 	struct net_device	*dev = idev->dev;
3349 	__s32			*array = NULL;
3350 	struct ifinfomsg	*r;
3351 	struct nlmsghdr 	*nlh;
3352 	unsigned char		*b = skb->tail;
3353 	struct rtattr		*subattr;
3354 	__u32			mtu = dev->mtu;
3355 	struct ifla_cacheinfo	ci;
3356 
3357 	nlh = NLMSG_NEW(skb, pid, seq, event, sizeof(*r), flags);
3358 	r = NLMSG_DATA(nlh);
3359 	r->ifi_family = AF_INET6;
3360 	r->__ifi_pad = 0;
3361 	r->ifi_type = dev->type;
3362 	r->ifi_index = dev->ifindex;
3363 	r->ifi_flags = dev_get_flags(dev);
3364 	r->ifi_change = 0;
3365 
3366 	RTA_PUT(skb, IFLA_IFNAME, strlen(dev->name)+1, dev->name);
3367 
3368 	if (dev->addr_len)
3369 		RTA_PUT(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr);
3370 
3371 	RTA_PUT(skb, IFLA_MTU, sizeof(mtu), &mtu);
3372 	if (dev->ifindex != dev->iflink)
3373 		RTA_PUT(skb, IFLA_LINK, sizeof(int), &dev->iflink);
3374 
3375 	subattr = (struct rtattr*)skb->tail;
3376 
3377 	RTA_PUT(skb, IFLA_PROTINFO, 0, NULL);
3378 
3379 	/* return the device flags */
3380 	RTA_PUT(skb, IFLA_INET6_FLAGS, sizeof(__u32), &idev->if_flags);
3381 
3382 	/* return interface cacheinfo */
3383 	ci.max_reasm_len = IPV6_MAXPLEN;
3384 	ci.tstamp = (__u32)(TIME_DELTA(idev->tstamp, INITIAL_JIFFIES) / HZ * 100
3385 		    + TIME_DELTA(idev->tstamp, INITIAL_JIFFIES) % HZ * 100 / HZ);
3386 	ci.reachable_time = idev->nd_parms->reachable_time;
3387 	ci.retrans_time = idev->nd_parms->retrans_time;
3388 	RTA_PUT(skb, IFLA_INET6_CACHEINFO, sizeof(ci), &ci);
3389 
3390 	/* return the device sysctl params */
3391 	if ((array = kmalloc(DEVCONF_MAX * sizeof(*array), GFP_ATOMIC)) == NULL)
3392 		goto rtattr_failure;
3393 	ipv6_store_devconf(&idev->cnf, array, DEVCONF_MAX * sizeof(*array));
3394 	RTA_PUT(skb, IFLA_INET6_CONF, DEVCONF_MAX * sizeof(*array), array);
3395 
3396 	/* XXX - Statistics/MC not implemented */
3397 	subattr->rta_len = skb->tail - (u8*)subattr;
3398 
3399 	nlh->nlmsg_len = skb->tail - b;
3400 	kfree(array);
3401 	return skb->len;
3402 
3403 nlmsg_failure:
3404 rtattr_failure:
3405 	kfree(array);
3406 	skb_trim(skb, b - skb->data);
3407 	return -1;
3408 }
3409 
3410 static int inet6_dump_ifinfo(struct sk_buff *skb, struct netlink_callback *cb)
3411 {
3412 	int idx, err;
3413 	int s_idx = cb->args[0];
3414 	struct net_device *dev;
3415 	struct inet6_dev *idev;
3416 
3417 	read_lock(&dev_base_lock);
3418 	for (dev=dev_base, idx=0; dev; dev = dev->next, idx++) {
3419 		if (idx < s_idx)
3420 			continue;
3421 		if ((idev = in6_dev_get(dev)) == NULL)
3422 			continue;
3423 		err = inet6_fill_ifinfo(skb, idev, NETLINK_CB(cb->skb).pid,
3424 				cb->nlh->nlmsg_seq, RTM_NEWLINK, NLM_F_MULTI);
3425 		in6_dev_put(idev);
3426 		if (err <= 0)
3427 			break;
3428 	}
3429 	read_unlock(&dev_base_lock);
3430 	cb->args[0] = idx;
3431 
3432 	return skb->len;
3433 }
3434 
3435 void inet6_ifinfo_notify(int event, struct inet6_dev *idev)
3436 {
3437 	struct sk_buff *skb;
3438 	int size = NLMSG_SPACE(sizeof(struct ifinfomsg) + INET6_IFINFO_RTA_SPACE);
3439 
3440 	skb = alloc_skb(size, GFP_ATOMIC);
3441 	if (!skb) {
3442 		netlink_set_err(rtnl, 0, RTNLGRP_IPV6_IFINFO, ENOBUFS);
3443 		return;
3444 	}
3445 	if (inet6_fill_ifinfo(skb, idev, current->pid, 0, event, 0) < 0) {
3446 		kfree_skb(skb);
3447 		netlink_set_err(rtnl, 0, RTNLGRP_IPV6_IFINFO, EINVAL);
3448 		return;
3449 	}
3450 	NETLINK_CB(skb).dst_group = RTNLGRP_IPV6_IFINFO;
3451 	netlink_broadcast(rtnl, skb, 0, RTNLGRP_IPV6_IFINFO, GFP_ATOMIC);
3452 }
3453 
3454 /* Maximum length of prefix_cacheinfo attributes */
3455 #define INET6_PREFIX_RTA_SPACE \
3456 		RTA_SPACE(sizeof(((struct prefix_info *)NULL)->prefix)) /* ADDRESS */ + \
3457 		RTA_SPACE(sizeof(struct prefix_cacheinfo)) /* CACHEINFO */
3458 
3459 static int inet6_fill_prefix(struct sk_buff *skb, struct inet6_dev *idev,
3460 			struct prefix_info *pinfo, u32 pid, u32 seq,
3461 			int event, unsigned int flags)
3462 {
3463 	struct prefixmsg	*pmsg;
3464 	struct nlmsghdr 	*nlh;
3465 	unsigned char		*b = skb->tail;
3466 	struct prefix_cacheinfo	ci;
3467 
3468 	nlh = NLMSG_NEW(skb, pid, seq, event, sizeof(*pmsg), flags);
3469 	pmsg = NLMSG_DATA(nlh);
3470 	pmsg->prefix_family = AF_INET6;
3471 	pmsg->prefix_pad1 = 0;
3472 	pmsg->prefix_pad2 = 0;
3473 	pmsg->prefix_ifindex = idev->dev->ifindex;
3474 	pmsg->prefix_len = pinfo->prefix_len;
3475 	pmsg->prefix_type = pinfo->type;
3476 	pmsg->prefix_pad3 = 0;
3477 
3478 	pmsg->prefix_flags = 0;
3479 	if (pinfo->onlink)
3480 		pmsg->prefix_flags |= IF_PREFIX_ONLINK;
3481 	if (pinfo->autoconf)
3482 		pmsg->prefix_flags |= IF_PREFIX_AUTOCONF;
3483 
3484 	RTA_PUT(skb, PREFIX_ADDRESS, sizeof(pinfo->prefix), &pinfo->prefix);
3485 
3486 	ci.preferred_time = ntohl(pinfo->prefered);
3487 	ci.valid_time = ntohl(pinfo->valid);
3488 	RTA_PUT(skb, PREFIX_CACHEINFO, sizeof(ci), &ci);
3489 
3490 	nlh->nlmsg_len = skb->tail - b;
3491 	return skb->len;
3492 
3493 nlmsg_failure:
3494 rtattr_failure:
3495 	skb_trim(skb, b - skb->data);
3496 	return -1;
3497 }
3498 
3499 static void inet6_prefix_notify(int event, struct inet6_dev *idev,
3500 			 struct prefix_info *pinfo)
3501 {
3502 	struct sk_buff *skb;
3503 	int size = NLMSG_SPACE(sizeof(struct prefixmsg) + INET6_PREFIX_RTA_SPACE);
3504 
3505 	skb = alloc_skb(size, GFP_ATOMIC);
3506 	if (!skb) {
3507 		netlink_set_err(rtnl, 0, RTNLGRP_IPV6_PREFIX, ENOBUFS);
3508 		return;
3509 	}
3510 	if (inet6_fill_prefix(skb, idev, pinfo, current->pid, 0, event, 0) < 0) {
3511 		kfree_skb(skb);
3512 		netlink_set_err(rtnl, 0, RTNLGRP_IPV6_PREFIX, EINVAL);
3513 		return;
3514 	}
3515 	NETLINK_CB(skb).dst_group = RTNLGRP_IPV6_PREFIX;
3516 	netlink_broadcast(rtnl, skb, 0, RTNLGRP_IPV6_PREFIX, GFP_ATOMIC);
3517 }
3518 
3519 static struct rtnetlink_link inet6_rtnetlink_table[RTM_NR_MSGTYPES] = {
3520 	[RTM_GETLINK - RTM_BASE] = { .dumpit	= inet6_dump_ifinfo, },
3521 	[RTM_NEWADDR - RTM_BASE] = { .doit	= inet6_rtm_newaddr, },
3522 	[RTM_DELADDR - RTM_BASE] = { .doit	= inet6_rtm_deladdr, },
3523 	[RTM_GETADDR - RTM_BASE] = { .doit	= inet6_rtm_getaddr,
3524 				     .dumpit	= inet6_dump_ifaddr, },
3525 	[RTM_GETMULTICAST - RTM_BASE] = { .dumpit = inet6_dump_ifmcaddr, },
3526 	[RTM_GETANYCAST - RTM_BASE] = { .dumpit	= inet6_dump_ifacaddr, },
3527 	[RTM_NEWROUTE - RTM_BASE] = { .doit	= inet6_rtm_newroute, },
3528 	[RTM_DELROUTE - RTM_BASE] = { .doit	= inet6_rtm_delroute, },
3529 	[RTM_GETROUTE - RTM_BASE] = { .doit	= inet6_rtm_getroute,
3530 				      .dumpit	= inet6_dump_fib, },
3531 };
3532 
3533 static void __ipv6_ifa_notify(int event, struct inet6_ifaddr *ifp)
3534 {
3535 	inet6_ifa_notify(event ? : RTM_NEWADDR, ifp);
3536 
3537 	switch (event) {
3538 	case RTM_NEWADDR:
3539 		ip6_ins_rt(ifp->rt, NULL, NULL, NULL);
3540 		if (ifp->idev->cnf.forwarding)
3541 			addrconf_join_anycast(ifp);
3542 		break;
3543 	case RTM_DELADDR:
3544 		if (ifp->idev->cnf.forwarding)
3545 			addrconf_leave_anycast(ifp);
3546 		addrconf_leave_solict(ifp->idev, &ifp->addr);
3547 		dst_hold(&ifp->rt->u.dst);
3548 		if (ip6_del_rt(ifp->rt, NULL, NULL, NULL))
3549 			dst_free(&ifp->rt->u.dst);
3550 		break;
3551 	}
3552 }
3553 
3554 static void ipv6_ifa_notify(int event, struct inet6_ifaddr *ifp)
3555 {
3556 	read_lock_bh(&addrconf_lock);
3557 	if (likely(ifp->idev->dead == 0))
3558 		__ipv6_ifa_notify(event, ifp);
3559 	read_unlock_bh(&addrconf_lock);
3560 }
3561 
3562 #ifdef CONFIG_SYSCTL
3563 
3564 static
3565 int addrconf_sysctl_forward(ctl_table *ctl, int write, struct file * filp,
3566 			   void __user *buffer, size_t *lenp, loff_t *ppos)
3567 {
3568 	int *valp = ctl->data;
3569 	int val = *valp;
3570 	int ret;
3571 
3572 	ret = proc_dointvec(ctl, write, filp, buffer, lenp, ppos);
3573 
3574 	if (write && valp != &ipv6_devconf_dflt.forwarding) {
3575 		if (valp != &ipv6_devconf.forwarding) {
3576 			if ((!*valp) ^ (!val)) {
3577 				struct inet6_dev *idev = (struct inet6_dev *)ctl->extra1;
3578 				if (idev == NULL)
3579 					return ret;
3580 				dev_forward_change(idev);
3581 			}
3582 		} else {
3583 			ipv6_devconf_dflt.forwarding = ipv6_devconf.forwarding;
3584 			addrconf_forward_change();
3585 		}
3586 		if (*valp)
3587 			rt6_purge_dflt_routers();
3588 	}
3589 
3590         return ret;
3591 }
3592 
3593 static int addrconf_sysctl_forward_strategy(ctl_table *table,
3594 					    int __user *name, int nlen,
3595 					    void __user *oldval,
3596 					    size_t __user *oldlenp,
3597 					    void __user *newval, size_t newlen,
3598 					    void **context)
3599 {
3600 	int *valp = table->data;
3601 	int new;
3602 
3603 	if (!newval || !newlen)
3604 		return 0;
3605 	if (newlen != sizeof(int))
3606 		return -EINVAL;
3607 	if (get_user(new, (int __user *)newval))
3608 		return -EFAULT;
3609 	if (new == *valp)
3610 		return 0;
3611 	if (oldval && oldlenp) {
3612 		size_t len;
3613 		if (get_user(len, oldlenp))
3614 			return -EFAULT;
3615 		if (len) {
3616 			if (len > table->maxlen)
3617 				len = table->maxlen;
3618 			if (copy_to_user(oldval, valp, len))
3619 				return -EFAULT;
3620 			if (put_user(len, oldlenp))
3621 				return -EFAULT;
3622 		}
3623 	}
3624 
3625 	if (valp != &ipv6_devconf_dflt.forwarding) {
3626 		if (valp != &ipv6_devconf.forwarding) {
3627 			struct inet6_dev *idev = (struct inet6_dev *)table->extra1;
3628 			int changed;
3629 			if (unlikely(idev == NULL))
3630 				return -ENODEV;
3631 			changed = (!*valp) ^ (!new);
3632 			*valp = new;
3633 			if (changed)
3634 				dev_forward_change(idev);
3635 		} else {
3636 			*valp = new;
3637 			addrconf_forward_change();
3638 		}
3639 
3640 		if (*valp)
3641 			rt6_purge_dflt_routers();
3642 	} else
3643 		*valp = new;
3644 
3645 	return 1;
3646 }
3647 
3648 static struct addrconf_sysctl_table
3649 {
3650 	struct ctl_table_header *sysctl_header;
3651 	ctl_table addrconf_vars[__NET_IPV6_MAX];
3652 	ctl_table addrconf_dev[2];
3653 	ctl_table addrconf_conf_dir[2];
3654 	ctl_table addrconf_proto_dir[2];
3655 	ctl_table addrconf_root_dir[2];
3656 } addrconf_sysctl = {
3657 	.sysctl_header = NULL,
3658 	.addrconf_vars = {
3659         	{
3660 			.ctl_name	=	NET_IPV6_FORWARDING,
3661 			.procname	=	"forwarding",
3662          		.data		=	&ipv6_devconf.forwarding,
3663 			.maxlen		=	sizeof(int),
3664 			.mode		=	0644,
3665          		.proc_handler	=	&addrconf_sysctl_forward,
3666 			.strategy	=	&addrconf_sysctl_forward_strategy,
3667 		},
3668 		{
3669 			.ctl_name	=	NET_IPV6_HOP_LIMIT,
3670 			.procname	=	"hop_limit",
3671          		.data		=	&ipv6_devconf.hop_limit,
3672 			.maxlen		=	sizeof(int),
3673 			.mode		=	0644,
3674 			.proc_handler	=	proc_dointvec,
3675 		},
3676 		{
3677 			.ctl_name	=	NET_IPV6_MTU,
3678 			.procname	=	"mtu",
3679 			.data		=	&ipv6_devconf.mtu6,
3680          		.maxlen		=	sizeof(int),
3681 			.mode		=	0644,
3682          		.proc_handler	=	&proc_dointvec,
3683 		},
3684 		{
3685 			.ctl_name	=	NET_IPV6_ACCEPT_RA,
3686 			.procname	=	"accept_ra",
3687          		.data		=	&ipv6_devconf.accept_ra,
3688 			.maxlen		=	sizeof(int),
3689 			.mode		=	0644,
3690          		.proc_handler	=	&proc_dointvec,
3691 		},
3692 		{
3693 			.ctl_name	=	NET_IPV6_ACCEPT_REDIRECTS,
3694 			.procname	=	"accept_redirects",
3695          		.data		=	&ipv6_devconf.accept_redirects,
3696 			.maxlen		=	sizeof(int),
3697 			.mode		=	0644,
3698          		.proc_handler	=	&proc_dointvec,
3699 		},
3700 		{
3701 			.ctl_name	=	NET_IPV6_AUTOCONF,
3702 			.procname	=	"autoconf",
3703          		.data		=	&ipv6_devconf.autoconf,
3704 			.maxlen		=	sizeof(int),
3705 			.mode		=	0644,
3706          		.proc_handler	=	&proc_dointvec,
3707 		},
3708 		{
3709 			.ctl_name	=	NET_IPV6_DAD_TRANSMITS,
3710 			.procname	=	"dad_transmits",
3711          		.data		=	&ipv6_devconf.dad_transmits,
3712 			.maxlen		=	sizeof(int),
3713 			.mode		=	0644,
3714          		.proc_handler	=	&proc_dointvec,
3715 		},
3716 		{
3717 			.ctl_name	=	NET_IPV6_RTR_SOLICITS,
3718 			.procname	=	"router_solicitations",
3719          		.data		=	&ipv6_devconf.rtr_solicits,
3720 			.maxlen		=	sizeof(int),
3721 			.mode		=	0644,
3722          		.proc_handler	=	&proc_dointvec,
3723 		},
3724 		{
3725 			.ctl_name	=	NET_IPV6_RTR_SOLICIT_INTERVAL,
3726 			.procname	=	"router_solicitation_interval",
3727          		.data		=	&ipv6_devconf.rtr_solicit_interval,
3728 			.maxlen		=	sizeof(int),
3729 			.mode		=	0644,
3730          		.proc_handler	=	&proc_dointvec_jiffies,
3731 			.strategy	=	&sysctl_jiffies,
3732 		},
3733 		{
3734 			.ctl_name	=	NET_IPV6_RTR_SOLICIT_DELAY,
3735 			.procname	=	"router_solicitation_delay",
3736          		.data		=	&ipv6_devconf.rtr_solicit_delay,
3737 			.maxlen		=	sizeof(int),
3738 			.mode		=	0644,
3739          		.proc_handler	=	&proc_dointvec_jiffies,
3740 			.strategy	=	&sysctl_jiffies,
3741 		},
3742 		{
3743 			.ctl_name	=	NET_IPV6_FORCE_MLD_VERSION,
3744 			.procname	=	"force_mld_version",
3745          		.data		=	&ipv6_devconf.force_mld_version,
3746 			.maxlen		=	sizeof(int),
3747 			.mode		=	0644,
3748          		.proc_handler	=	&proc_dointvec,
3749 		},
3750 #ifdef CONFIG_IPV6_PRIVACY
3751 		{
3752 			.ctl_name	=	NET_IPV6_USE_TEMPADDR,
3753 			.procname	=	"use_tempaddr",
3754 	 		.data		=	&ipv6_devconf.use_tempaddr,
3755 			.maxlen		=	sizeof(int),
3756 			.mode		=	0644,
3757 	 		.proc_handler	=	&proc_dointvec,
3758 		},
3759 		{
3760 			.ctl_name	=	NET_IPV6_TEMP_VALID_LFT,
3761 			.procname	=	"temp_valid_lft",
3762 	 		.data		=	&ipv6_devconf.temp_valid_lft,
3763 			.maxlen		=	sizeof(int),
3764 			.mode		=	0644,
3765 	 		.proc_handler	=	&proc_dointvec,
3766 		},
3767 		{
3768 			.ctl_name	=	NET_IPV6_TEMP_PREFERED_LFT,
3769 			.procname	=	"temp_prefered_lft",
3770 	 		.data		=	&ipv6_devconf.temp_prefered_lft,
3771 			.maxlen		=	sizeof(int),
3772 			.mode		=	0644,
3773 	 		.proc_handler	=	&proc_dointvec,
3774 		},
3775 		{
3776 			.ctl_name	=	NET_IPV6_REGEN_MAX_RETRY,
3777 			.procname	=	"regen_max_retry",
3778 	 		.data		=	&ipv6_devconf.regen_max_retry,
3779 			.maxlen		=	sizeof(int),
3780 			.mode		=	0644,
3781 	 		.proc_handler	=	&proc_dointvec,
3782 		},
3783 		{
3784 			.ctl_name	=	NET_IPV6_MAX_DESYNC_FACTOR,
3785 			.procname	=	"max_desync_factor",
3786 	 		.data		=	&ipv6_devconf.max_desync_factor,
3787 			.maxlen		=	sizeof(int),
3788 			.mode		=	0644,
3789 	 		.proc_handler	=	&proc_dointvec,
3790 		},
3791 #endif
3792 		{
3793 			.ctl_name	=	NET_IPV6_MAX_ADDRESSES,
3794 			.procname	=	"max_addresses",
3795 			.data		=	&ipv6_devconf.max_addresses,
3796 			.maxlen		=	sizeof(int),
3797 			.mode		=	0644,
3798 			.proc_handler	=	&proc_dointvec,
3799 		},
3800 		{
3801 			.ctl_name	=	NET_IPV6_ACCEPT_RA_DEFRTR,
3802 			.procname	=	"accept_ra_defrtr",
3803          		.data		=	&ipv6_devconf.accept_ra_defrtr,
3804 			.maxlen		=	sizeof(int),
3805 			.mode		=	0644,
3806          		.proc_handler	=	&proc_dointvec,
3807 		},
3808 		{
3809 			.ctl_name	=	NET_IPV6_ACCEPT_RA_PINFO,
3810 			.procname	=	"accept_ra_pinfo",
3811          		.data		=	&ipv6_devconf.accept_ra_pinfo,
3812 			.maxlen		=	sizeof(int),
3813 			.mode		=	0644,
3814          		.proc_handler	=	&proc_dointvec,
3815 		},
3816 #ifdef CONFIG_IPV6_ROUTER_PREF
3817 		{
3818 			.ctl_name	=	NET_IPV6_ACCEPT_RA_RTR_PREF,
3819 			.procname	=	"accept_ra_rtr_pref",
3820 			.data		=	&ipv6_devconf.accept_ra_rtr_pref,
3821 			.maxlen		=	sizeof(int),
3822 			.mode		=	0644,
3823 			.proc_handler	=	&proc_dointvec,
3824 		},
3825 		{
3826 			.ctl_name	=	NET_IPV6_RTR_PROBE_INTERVAL,
3827 			.procname	=	"router_probe_interval",
3828 			.data		=	&ipv6_devconf.rtr_probe_interval,
3829 			.maxlen		=	sizeof(int),
3830 			.mode		=	0644,
3831 			.proc_handler	=	&proc_dointvec_jiffies,
3832 			.strategy	=	&sysctl_jiffies,
3833 		},
3834 #ifdef CONFIV_IPV6_ROUTE_INFO
3835 		{
3836 			.ctl_name	=	NET_IPV6_ACCEPT_RA_RT_INFO_MAX_PLEN,
3837 			.procname	=	"accept_ra_rt_info_max_plen",
3838 			.data		=	&ipv6_devconf.accept_ra_rt_info_max_plen,
3839 			.maxlen		=	sizeof(int),
3840 			.mode		=	0644,
3841 			.proc_handler	=	&proc_dointvec,
3842 		},
3843 #endif
3844 #endif
3845 		{
3846 			.ctl_name	=	0,	/* sentinel */
3847 		}
3848 	},
3849 	.addrconf_dev = {
3850 		{
3851 			.ctl_name	=	NET_PROTO_CONF_ALL,
3852 			.procname	=	"all",
3853 			.mode		=	0555,
3854 			.child		=	addrconf_sysctl.addrconf_vars,
3855 		},
3856 		{
3857 			.ctl_name	=	0,	/* sentinel */
3858 		}
3859 	},
3860 	.addrconf_conf_dir = {
3861 		{
3862 			.ctl_name	=	NET_IPV6_CONF,
3863 			.procname	=	"conf",
3864 			.mode		=	0555,
3865 			.child		=	addrconf_sysctl.addrconf_dev,
3866 		},
3867 		{
3868 			.ctl_name	=	0,	/* sentinel */
3869 		}
3870 	},
3871 	.addrconf_proto_dir = {
3872 		{
3873 			.ctl_name	=	NET_IPV6,
3874 			.procname	=	"ipv6",
3875 			.mode		=	0555,
3876 			.child		=	addrconf_sysctl.addrconf_conf_dir,
3877 		},
3878 		{
3879 			.ctl_name	=	0,	/* sentinel */
3880 		}
3881 	},
3882 	.addrconf_root_dir = {
3883 		{
3884 			.ctl_name	=	CTL_NET,
3885 			.procname	=	"net",
3886 			.mode		=	0555,
3887 			.child		=	addrconf_sysctl.addrconf_proto_dir,
3888 		},
3889 		{
3890 			.ctl_name	=	0,	/* sentinel */
3891 		}
3892 	},
3893 };
3894 
3895 static void addrconf_sysctl_register(struct inet6_dev *idev, struct ipv6_devconf *p)
3896 {
3897 	int i;
3898 	struct net_device *dev = idev ? idev->dev : NULL;
3899 	struct addrconf_sysctl_table *t;
3900 	char *dev_name = NULL;
3901 
3902 	t = kmalloc(sizeof(*t), GFP_KERNEL);
3903 	if (t == NULL)
3904 		return;
3905 	memcpy(t, &addrconf_sysctl, sizeof(*t));
3906 	for (i=0; t->addrconf_vars[i].data; i++) {
3907 		t->addrconf_vars[i].data += (char*)p - (char*)&ipv6_devconf;
3908 		t->addrconf_vars[i].de = NULL;
3909 		t->addrconf_vars[i].extra1 = idev; /* embedded; no ref */
3910 	}
3911 	if (dev) {
3912 		dev_name = dev->name;
3913 		t->addrconf_dev[0].ctl_name = dev->ifindex;
3914 	} else {
3915 		dev_name = "default";
3916 		t->addrconf_dev[0].ctl_name = NET_PROTO_CONF_DEFAULT;
3917 	}
3918 
3919 	/*
3920 	 * Make a copy of dev_name, because '.procname' is regarded as const
3921 	 * by sysctl and we wouldn't want anyone to change it under our feet
3922 	 * (see SIOCSIFNAME).
3923 	 */
3924 	dev_name = kstrdup(dev_name, GFP_KERNEL);
3925 	if (!dev_name)
3926 	    goto free;
3927 
3928 	t->addrconf_dev[0].procname = dev_name;
3929 
3930 	t->addrconf_dev[0].child = t->addrconf_vars;
3931 	t->addrconf_dev[0].de = NULL;
3932 	t->addrconf_conf_dir[0].child = t->addrconf_dev;
3933 	t->addrconf_conf_dir[0].de = NULL;
3934 	t->addrconf_proto_dir[0].child = t->addrconf_conf_dir;
3935 	t->addrconf_proto_dir[0].de = NULL;
3936 	t->addrconf_root_dir[0].child = t->addrconf_proto_dir;
3937 	t->addrconf_root_dir[0].de = NULL;
3938 
3939 	t->sysctl_header = register_sysctl_table(t->addrconf_root_dir, 0);
3940 	if (t->sysctl_header == NULL)
3941 		goto free_procname;
3942 	else
3943 		p->sysctl = t;
3944 	return;
3945 
3946 	/* error path */
3947  free_procname:
3948 	kfree(dev_name);
3949  free:
3950 	kfree(t);
3951 
3952 	return;
3953 }
3954 
3955 static void addrconf_sysctl_unregister(struct ipv6_devconf *p)
3956 {
3957 	if (p->sysctl) {
3958 		struct addrconf_sysctl_table *t = p->sysctl;
3959 		p->sysctl = NULL;
3960 		unregister_sysctl_table(t->sysctl_header);
3961 		kfree(t->addrconf_dev[0].procname);
3962 		kfree(t);
3963 	}
3964 }
3965 
3966 
3967 #endif
3968 
3969 /*
3970  *      Device notifier
3971  */
3972 
3973 int register_inet6addr_notifier(struct notifier_block *nb)
3974 {
3975         return atomic_notifier_chain_register(&inet6addr_chain, nb);
3976 }
3977 
3978 int unregister_inet6addr_notifier(struct notifier_block *nb)
3979 {
3980         return atomic_notifier_chain_unregister(&inet6addr_chain,nb);
3981 }
3982 
3983 /*
3984  *	Init / cleanup code
3985  */
3986 
3987 int __init addrconf_init(void)
3988 {
3989 	int err = 0;
3990 
3991 	/* The addrconf netdev notifier requires that loopback_dev
3992 	 * has it's ipv6 private information allocated and setup
3993 	 * before it can bring up and give link-local addresses
3994 	 * to other devices which are up.
3995 	 *
3996 	 * Unfortunately, loopback_dev is not necessarily the first
3997 	 * entry in the global dev_base list of net devices.  In fact,
3998 	 * it is likely to be the very last entry on that list.
3999 	 * So this causes the notifier registry below to try and
4000 	 * give link-local addresses to all devices besides loopback_dev
4001 	 * first, then loopback_dev, which cases all the non-loopback_dev
4002 	 * devices to fail to get a link-local address.
4003 	 *
4004 	 * So, as a temporary fix, allocate the ipv6 structure for
4005 	 * loopback_dev first by hand.
4006 	 * Longer term, all of the dependencies ipv6 has upon the loopback
4007 	 * device and it being up should be removed.
4008 	 */
4009 	rtnl_lock();
4010 	if (!ipv6_add_dev(&loopback_dev))
4011 		err = -ENOMEM;
4012 	rtnl_unlock();
4013 	if (err)
4014 		return err;
4015 
4016 	ip6_null_entry.rt6i_idev = in6_dev_get(&loopback_dev);
4017 
4018 	register_netdevice_notifier(&ipv6_dev_notf);
4019 
4020 	addrconf_verify(0);
4021 	rtnetlink_links[PF_INET6] = inet6_rtnetlink_table;
4022 #ifdef CONFIG_SYSCTL
4023 	addrconf_sysctl.sysctl_header =
4024 		register_sysctl_table(addrconf_sysctl.addrconf_root_dir, 0);
4025 	addrconf_sysctl_register(NULL, &ipv6_devconf_dflt);
4026 #endif
4027 
4028 	return 0;
4029 }
4030 
4031 void __exit addrconf_cleanup(void)
4032 {
4033  	struct net_device *dev;
4034  	struct inet6_dev *idev;
4035  	struct inet6_ifaddr *ifa;
4036 	int i;
4037 
4038 	unregister_netdevice_notifier(&ipv6_dev_notf);
4039 
4040 	rtnetlink_links[PF_INET6] = NULL;
4041 #ifdef CONFIG_SYSCTL
4042 	addrconf_sysctl_unregister(&ipv6_devconf_dflt);
4043 	addrconf_sysctl_unregister(&ipv6_devconf);
4044 #endif
4045 
4046 	rtnl_lock();
4047 
4048 	/*
4049 	 *	clean dev list.
4050 	 */
4051 
4052 	for (dev=dev_base; dev; dev=dev->next) {
4053 		if ((idev = __in6_dev_get(dev)) == NULL)
4054 			continue;
4055 		addrconf_ifdown(dev, 1);
4056 	}
4057 	addrconf_ifdown(&loopback_dev, 2);
4058 
4059 	/*
4060 	 *	Check hash table.
4061 	 */
4062 
4063 	write_lock_bh(&addrconf_hash_lock);
4064 	for (i=0; i < IN6_ADDR_HSIZE; i++) {
4065 		for (ifa=inet6_addr_lst[i]; ifa; ) {
4066 			struct inet6_ifaddr *bifa;
4067 
4068 			bifa = ifa;
4069 			ifa = ifa->lst_next;
4070 			printk(KERN_DEBUG "bug: IPv6 address leakage detected: ifa=%p\n", bifa);
4071 			/* Do not free it; something is wrong.
4072 			   Now we can investigate it with debugger.
4073 			 */
4074 		}
4075 	}
4076 	write_unlock_bh(&addrconf_hash_lock);
4077 
4078 	del_timer(&addr_chk_timer);
4079 
4080 	rtnl_unlock();
4081 
4082 #ifdef CONFIG_PROC_FS
4083 	proc_net_remove("if_inet6");
4084 #endif
4085 }
4086