1 /* 2 * Copyright 2007 Sun Microsystems, Inc. All rights reserved. 3 * Use is subject to license terms. 4 */ 5 6 /* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T */ 7 /* All Rights Reserved */ 8 9 /* Copyright (c) 1990 Mentat Inc. */ 10 11 /* 12 * 13 * Copyright (c) 1983, 1989, 1991, 1993 14 * The Regents of the University of California. All rights reserved. 15 * 16 * Redistribution and use in source and binary forms, with or without 17 * modification, are permitted provided that the following conditions 18 * are met: 19 * 1. Redistributions of source code must retain the above copyright 20 * notice, this list of conditions and the following disclaimer. 21 * 2. Redistributions in binary form must reproduce the above copyright 22 * notice, this list of conditions and the following disclaimer in the 23 * documentation and/or other materials provided with the distribution. 24 * 3. All advertising materials mentioning features or use of this software 25 * must display the following acknowledgement: 26 * This product includes software developed by the University of 27 * California, Berkeley and its contributors. 28 * 4. Neither the name of the University nor the names of its contributors 29 * may be used to endorse or promote products derived from this software 30 * without specific prior written permission. 31 * 32 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 33 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 34 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 35 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 36 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 37 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 38 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 39 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 40 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 41 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 42 * SUCH DAMAGE. 43 * 44 * @(#)route.c 8.6 (Berkeley) 4/28/95 45 * @(#)linkaddr.c 8.1 (Berkeley) 6/4/93 46 */ 47 48 #pragma ident "%Z%%M% %I% %E% SMI" 49 50 #include <sys/param.h> 51 #include <sys/file.h> 52 #include <sys/socket.h> 53 #include <sys/ioctl.h> 54 #include <sys/stat.h> 55 #include <sys/stream.h> 56 #include <sys/sysmacros.h> 57 #include <sys/tihdr.h> 58 #include <sys/types.h> 59 #include <sys/ccompile.h> 60 61 #include <net/if.h> 62 #include <net/route.h> 63 #include <net/if_dl.h> 64 #include <netinet/in.h> 65 #include <arpa/inet.h> 66 #include <netdb.h> 67 #include <inet/mib2.h> 68 #include <inet/ip.h> 69 70 #include <limits.h> 71 #include <locale.h> 72 73 #include <errno.h> 74 #include <unistd.h> 75 #include <stdio.h> 76 #include <stdlib.h> 77 #include <stddef.h> 78 #include <string.h> 79 #include <stropts.h> 80 #include <fcntl.h> 81 #include <stdarg.h> 82 #include <assert.h> 83 #include <strings.h> 84 85 #include <libtsnet.h> 86 #include <tsol/label.h> 87 88 static struct keytab { 89 char *kt_cp; 90 int kt_i; 91 } keywords[] = { 92 #define K_ADD 1 93 {"add", K_ADD}, 94 #define K_BLACKHOLE 2 95 {"blackhole", K_BLACKHOLE}, 96 #define K_CHANGE 3 97 {"change", K_CHANGE}, 98 #define K_CLONING 4 99 {"cloning", K_CLONING}, 100 #define K_DELETE 5 101 {"delete", K_DELETE}, 102 #define K_DST 6 103 {"dst", K_DST}, 104 #define K_EXPIRE 7 105 {"expire", K_EXPIRE}, 106 #define K_FLUSH 8 107 {"flush", K_FLUSH}, 108 #define K_GATEWAY 9 109 {"gateway", K_GATEWAY}, 110 #define K_GET 11 111 {"get", K_GET}, 112 #define K_HOPCOUNT 12 113 {"hopcount", K_HOPCOUNT}, 114 #define K_HOST 13 115 {"host", K_HOST}, 116 #define K_IFA 14 117 {"ifa", K_IFA}, 118 #define K_IFACE 15 119 {"iface", K_IFACE}, 120 #define K_IFP 16 121 {"ifp", K_IFP}, 122 #define K_INET 17 123 {"inet", K_INET}, 124 #define K_INET6 18 125 {"inet6", K_INET6}, 126 #define K_INTERFACE 19 127 {"interface", K_INTERFACE}, 128 #define K_LINK 20 129 {"link", K_LINK}, 130 #define K_LOCK 21 131 {"lock", K_LOCK}, 132 #define K_LOCKREST 22 133 {"lockrest", K_LOCKREST}, 134 #define K_MASK 23 135 {"mask", K_MASK}, 136 #define K_MONITOR 24 137 {"monitor", K_MONITOR}, 138 #define K_MTU 25 139 {"mtu", K_MTU}, 140 #define K_NET 26 141 {"net", K_NET}, 142 #define K_NETMASK 27 143 {"netmask", K_NETMASK}, 144 #define K_NOSTATIC 28 145 {"nostatic", K_NOSTATIC}, 146 #define K_PRIVATE 29 147 {"private", K_PRIVATE}, 148 #define K_PROTO1 30 149 {"proto1", K_PROTO1}, 150 #define K_PROTO2 31 151 {"proto2", K_PROTO2}, 152 #define K_RECVPIPE 32 153 {"recvpipe", K_RECVPIPE}, 154 #define K_REJECT 33 155 {"reject", K_REJECT}, 156 #define K_RTT 34 157 {"rtt", K_RTT}, 158 #define K_RTTVAR 35 159 {"rttvar", K_RTTVAR}, 160 #define K_SA 36 161 {"sa", K_SA}, 162 #define K_SENDPIPE 37 163 {"sendpipe", K_SENDPIPE}, 164 #define K_SSTHRESH 38 165 {"ssthresh", K_SSTHRESH}, 166 #define K_STATIC 39 167 {"static", K_STATIC}, 168 #define K_XRESOLVE 40 169 {"xresolve", K_XRESOLVE}, 170 #define K_MULTIRT 41 171 {"multirt", K_MULTIRT}, 172 #define K_SETSRC 42 173 {"setsrc", K_SETSRC}, 174 #define K_SHOW 43 175 {"show", K_SHOW}, 176 #define K_SECATTR 43 177 {"secattr", K_SECATTR}, 178 {0, 0} 179 }; 180 181 /* 182 * Size of buffers used to hold command lines from the saved route file as 183 * well as error strings. 184 */ 185 #define BUF_SIZE 2048 186 187 typedef union sockunion { 188 struct sockaddr sa; 189 struct sockaddr_in sin; 190 struct sockaddr_dl sdl; 191 struct sockaddr_in6 sin6; 192 } su_t; 193 194 /* 195 * This structure represents the digested information from parsing arguments 196 * to route add, change, delete, and get. 197 * 198 */ 199 typedef struct rtcmd_irep { 200 int ri_cmd; 201 int ri_flags; 202 int ri_af; 203 ulong_t ri_inits; 204 struct rt_metrics ri_metrics; 205 int ri_addrs; 206 su_t ri_dst; 207 char *ri_dest_str; 208 su_t ri_src; 209 su_t ri_gate; 210 struct hostent *ri_gate_hp; 211 char *ri_gate_str; 212 su_t ri_mask; 213 su_t ri_ifa; 214 su_t ri_ifp; 215 char *ri_ifp_str; 216 int ri_rtsa_cnt; /* number of gateway security attributes */ 217 struct rtsa_s ri_rtsa; /* enough space for one attribute */ 218 } rtcmd_irep_t; 219 220 typedef struct mib_item_s { 221 struct mib_item_s *next_item; 222 long group; 223 long mib_id; 224 long length; 225 intmax_t *valp; 226 } mib_item_t; 227 228 typedef enum { 229 ADDR_TYPE_ANY, 230 ADDR_TYPE_HOST, 231 ADDR_TYPE_NET 232 } addr_type_t; 233 234 typedef enum { 235 SEARCH_MODE_NULL, 236 SEARCH_MODE_PRINT, 237 SEARCH_MODE_DEL 238 } search_mode_t; 239 240 static boolean_t args_to_rtcmd(rtcmd_irep_t *rcip, char **argv, 241 char *cmd_string); 242 static void bprintf(FILE *fp, int b, char *s); 243 static boolean_t compare_rtcmd(rtcmd_irep_t *srch_rt, 244 rtcmd_irep_t *file_rt); 245 static void delRouteEntry(mib2_ipRouteEntry_t *rp, 246 mib2_ipv6RouteEntry_t *rp6, int seqno); 247 static void del_rtcmd_irep(rtcmd_irep_t *rcip); 248 static void flushroutes(int argc, char *argv[]); 249 static boolean_t getaddr(rtcmd_irep_t *rcip, int which, char *s, 250 addr_type_t atype); 251 static boolean_t in6_getaddr(char *s, struct sockaddr_in6 *sin6, 252 int *plenp, struct hostent **hpp); 253 static boolean_t in_getaddr(char *s, struct sockaddr_in *sin, 254 int *plenp, int which, struct hostent **hpp, addr_type_t atype, 255 rtcmd_irep_t *rcip); 256 static int in_getprefixlen(char *addr, int max_plen); 257 static boolean_t in_prefixlentomask(int prefixlen, int maxlen, 258 uchar_t *mask); 259 static void inet_makenetandmask(rtcmd_irep_t *rcip, in_addr_t net, 260 struct sockaddr_in *sin); 261 static in_addr_t inet_makesubnetmask(in_addr_t addr, in_addr_t mask); 262 static int keyword(const char *cp); 263 static void link_addr(const char *addr, struct sockaddr_dl *sdl); 264 static char *link_ntoa(const struct sockaddr_dl *sdl); 265 static mib_item_t *mibget(int sd); 266 static char *netname(struct sockaddr *sa); 267 static int newroute(char **argv); 268 static rtcmd_irep_t *new_rtcmd_irep(void); 269 static void pmsg_addrs(const char *cp, size_t len, uint_t addrs); 270 static void pmsg_common(const struct rt_msghdr *rtm, size_t len); 271 static void print_getmsg(rtcmd_irep_t *req_rt, 272 struct rt_msghdr *rtm, int msglen); 273 static void print_rtcmd_short(FILE *to, rtcmd_irep_t *rcip, 274 boolean_t gw_good, boolean_t to_saved); 275 static void print_rtmsg(struct rt_msghdr *rtm, int msglen); 276 static void quit(char *s, int err) __NORETURN; 277 static char *routename(const struct sockaddr *sa); 278 static void rtmonitor(int argc, char *argv[]); 279 static int rtmsg(rtcmd_irep_t *rcip); 280 static int salen(const struct sockaddr *sa); 281 static void save_route(int argc, char **argv, int do_flush); 282 static void save_string(char **dst, char *src); 283 static int search_rtfile(FILE *fp, FILE *temp_fp, rtcmd_irep_t *rt, 284 search_mode_t mode); 285 static void set_metric(rtcmd_irep_t *rcip, char *value, int key, 286 boolean_t lock); 287 static int show_saved_routes(int argc); 288 static void sockaddr(char *addr, struct sockaddr *sa); 289 static void sodump(su_t *su, char *which); 290 static void syntax_arg_missing(char *keyword); 291 static void syntax_bad_keyword(char *keyword); 292 static void syntax_error(char *err, ...); 293 static void usage(char *cp); 294 static void write_to_rtfile(FILE *fp, int argc, char **argv); 295 static void pmsg_secattr(const char *, size_t, const char *); 296 297 static pid_t pid; 298 static int s; 299 static boolean_t nflag; 300 static int af = AF_INET; 301 static boolean_t qflag, tflag; 302 static boolean_t verbose; 303 static boolean_t debugonly; 304 static boolean_t fflag; 305 static boolean_t update_table; 306 static boolean_t perm_flag; 307 static boolean_t early_v6_keyword; 308 static char perm_file_sfx[] = "/etc/inet/static_routes"; 309 static char *perm_file; 310 static char temp_file_sfx[] = "/etc/inet/static_routes.tmp"; 311 static char *temp_file; 312 static struct in6_addr in6_host_mask = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 313 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff}; 314 /* 315 * WARNING: 316 * This next variable indicates whether certain functions exit when an error 317 * is detected in the user input. Currently, exit_on_error is only set false 318 * in search_rtfile(), when argument are being parsed. Only those functions 319 * used by search_rtfile() to parse its arguments are designed to work in 320 * both modes. Take particular care in setting this false to ensure that any 321 * functions you call that might act on this flag properly return errors when 322 * exit_on_error is false. 323 */ 324 static int exit_on_error = B_TRUE; 325 326 static struct { 327 struct rt_msghdr m_rtm; 328 char m_space[BUF_SIZE]; 329 } m_rtmsg; 330 331 /* 332 * Sizes of data structures extracted from the base mib. 333 * This allows the size of the tables entries to grow while preserving 334 * binary compatibility. 335 */ 336 static int ipRouteEntrySize; 337 static int ipv6RouteEntrySize; 338 339 #define ROUNDUP_LONG(a) \ 340 ((a) > 0 ? (1 + (((a) - 1) | (sizeof (long) - 1))) : sizeof (long)) 341 #define ADVANCE(x, n) ((x) += ROUNDUP_LONG(salen(n))) 342 #define C(x) ((x) & 0xff) 343 344 /* 345 * return values from in_getprefixlen() 346 */ 347 #define BAD_ADDR -1 /* prefix is invalid */ 348 #define NO_PREFIX -2 /* no prefix was found */ 349 350 void 351 usage(char *cp) 352 { 353 if (cp != NULL) { 354 (void) fprintf(stderr, gettext("route: botched keyword: %s\n"), 355 cp); 356 } 357 (void) fprintf(stderr, gettext("usage: route [ -fnpqv ] " 358 "[ -R <root-dir> ] cmd [[ -<qualifers> ] args ]\n")); 359 exit(1); 360 /* NOTREACHED */ 361 } 362 363 /*PRINTFLIKE1*/ 364 void 365 syntax_error(char *err, ...) 366 { 367 va_list args; 368 369 if (exit_on_error) { 370 va_start(args, err); 371 (void) vfprintf(stderr, err, args); 372 va_end(args); 373 exit(1); 374 } 375 /* NOTREACHED */ 376 } 377 378 void 379 syntax_bad_keyword(char *keyword) 380 { 381 syntax_error(gettext("route: botched keyword: %s\n"), keyword); 382 } 383 384 void 385 syntax_arg_missing(char *keyword) 386 { 387 syntax_error(gettext("route: argument required following keyword %s\n"), 388 keyword); 389 } 390 391 void 392 quit(char *s, int sverrno) 393 { 394 (void) fprintf(stderr, "route: "); 395 if (s != NULL) 396 (void) fprintf(stderr, "%s: ", s); 397 (void) fprintf(stderr, "%s\n", strerror(sverrno)); 398 exit(sverrno); 399 /* NOTREACHED */ 400 } 401 402 int 403 main(int argc, char **argv) 404 { 405 extern int optind; 406 extern char *optarg; 407 int ch; 408 int rval; 409 size_t size; 410 const char *root_dir = NULL; 411 412 (void) setlocale(LC_ALL, ""); 413 414 #if !defined(TEXT_DOMAIN) 415 #define TEXT_DOMAIN "SYS_TEST" 416 #endif 417 (void) textdomain(TEXT_DOMAIN); 418 419 if (argc < 2) 420 usage(NULL); 421 422 while ((ch = getopt(argc, argv, "R:nqdtvfp")) != EOF) { 423 switch (ch) { 424 case 'n': 425 nflag = B_TRUE; 426 break; 427 case 'q': 428 qflag = B_TRUE; 429 break; 430 case 'v': 431 verbose = B_TRUE; 432 break; 433 case 't': 434 tflag = B_TRUE; 435 break; 436 case 'd': 437 debugonly = B_TRUE; 438 break; 439 case 'f': 440 fflag = B_TRUE; 441 break; 442 case 'p': 443 perm_flag = B_TRUE; 444 break; 445 case 'R': 446 root_dir = optarg; 447 break; 448 case '?': 449 default: 450 usage(NULL); 451 /* NOTREACHED */ 452 } 453 } 454 argc -= optind; 455 argv += optind; 456 457 pid = getpid(); 458 if (tflag) 459 s = open("/dev/null", O_WRONLY); 460 else 461 s = socket(PF_ROUTE, SOCK_RAW, 0); 462 if (s < 0) 463 quit("socket", errno); 464 465 /* 466 * Handle the -p and -R flags. The -R flag only applies 467 * when the -p flag is set. 468 */ 469 if (root_dir == NULL) { 470 perm_file = perm_file_sfx; 471 temp_file = temp_file_sfx; 472 } else { 473 size = strlen(root_dir) + sizeof (perm_file_sfx); 474 perm_file = malloc(size); 475 if (perm_file == NULL) 476 quit("malloc", errno); 477 (void) snprintf(perm_file, size, "%s%s", root_dir, 478 perm_file_sfx); 479 size = strlen(root_dir) + sizeof (temp_file_sfx); 480 temp_file = malloc(size); 481 if (temp_file == NULL) 482 quit("malloc", errno); 483 (void) snprintf(temp_file, size, "%s%s", root_dir, 484 temp_file_sfx); 485 } 486 /* 487 * Whether or not to act on the routing table. The only time the 488 * routing table is not modified is when both -p and -R are present. 489 */ 490 update_table = (!perm_flag || root_dir == NULL); 491 if (tflag) 492 perm_flag = 0; 493 494 if (fflag) { 495 /* 496 * Accept an address family keyword after the -f. Since the 497 * default address family is AF_INET, reassign af only for the 498 * other valid address families. 499 */ 500 if (*argv != NULL) { 501 switch (keyword(*argv)) { 502 case K_INET6: 503 af = AF_INET6; 504 early_v6_keyword = B_TRUE; 505 /* fallthrough */ 506 case K_INET: 507 /* Skip over the address family parameter. */ 508 argc--; 509 argv++; 510 break; 511 } 512 } 513 flushroutes(0, NULL); 514 } 515 516 if (*argv != NULL) { 517 switch (keyword(*argv)) { 518 case K_GET: 519 case K_CHANGE: 520 case K_ADD: 521 case K_DELETE: 522 rval = 0; 523 if (update_table) { 524 rval = newroute(argv); 525 } 526 if (perm_flag && (rval == 0 || rval == EEXIST || 527 rval == ESRCH)) { 528 save_route(argc, argv, B_FALSE); 529 return (0); 530 } 531 return (rval); 532 case K_SHOW: 533 if (perm_flag) { 534 return (show_saved_routes(argc)); 535 } else { 536 syntax_error(gettext( 537 "route: show command requires -p\n")); 538 } 539 /* NOTREACHED */ 540 case K_MONITOR: 541 rtmonitor(argc, argv); 542 /* NOTREACHED */ 543 544 case K_FLUSH: 545 flushroutes(argc, argv); 546 return (0); 547 } 548 } 549 if (!fflag) 550 usage(*argv); 551 return (0); 552 } 553 554 /* 555 * Purge all entries in the routing tables not 556 * associated with network interfaces. 557 */ 558 void 559 flushroutes(int argc, char *argv[]) 560 { 561 int seqno; 562 int sd; /* mib stream */ 563 mib_item_t *item; 564 mib2_ipRouteEntry_t *rp; 565 mib2_ipv6RouteEntry_t *rp6; 566 int oerrno; 567 int off = 0; 568 int on = 1; 569 570 if (argc > 1) { 571 argv++; 572 if (argc == 2 && **argv == '-') { 573 /* 574 * The address family (preceded by a dash) may be used 575 * to flush the routes of that particular family. 576 */ 577 switch (keyword(*argv + 1)) { 578 case K_INET: 579 af = AF_INET; 580 break; 581 case K_LINK: 582 af = AF_LINK; 583 break; 584 case K_INET6: 585 af = AF_INET6; 586 break; 587 default: 588 usage(*argv); 589 /* NOTREACHED */ 590 } 591 } else { 592 usage(*argv); 593 } 594 } 595 if (perm_flag) { 596 /* This flushes the persistent route file */ 597 save_route(0, NULL, B_TRUE); 598 } 599 if (!update_table) { 600 return; 601 } 602 603 if (setsockopt(s, SOL_SOCKET, SO_USELOOPBACK, (char *)&off, 604 sizeof (off)) < 0) 605 quit("setsockopt", errno); 606 607 sd = open("/dev/ip", O_RDWR); 608 oerrno = errno; 609 if (sd < 0) { 610 switch (errno) { 611 case EACCES: 612 (void) fprintf(stderr, 613 gettext("route: flush: insufficient privileges\n")); 614 exit(oerrno); 615 /* NOTREACHED */ 616 default: 617 quit(gettext("can't open mib stream"), oerrno); 618 /* NOTREACHED */ 619 } 620 } 621 if ((item = mibget(sd)) == NULL) 622 quit("mibget", errno); 623 if (verbose) { 624 (void) printf("Examining routing table from " 625 "T_SVR4_OPTMGMT_REQ\n"); 626 } 627 seqno = 0; /* ??? */ 628 switch (af) { 629 case AF_INET: 630 /* Extract ipRouteEntrySize */ 631 for (; item != NULL; item = item->next_item) { 632 if (item->mib_id != 0) 633 continue; 634 if (item->group == MIB2_IP) { 635 ipRouteEntrySize = 636 ((mib2_ip_t *)item->valp)->ipRouteEntrySize; 637 assert(IS_P2ALIGNED(ipRouteEntrySize, 638 sizeof (mib2_ipRouteEntry_t *))); 639 break; 640 } 641 } 642 if (ipRouteEntrySize == 0) { 643 (void) fprintf(stderr, 644 gettext("ipRouteEntrySize can't be determined.\n")); 645 exit(1); 646 } 647 for (; item != NULL; item = item->next_item) { 648 /* 649 * skip all the other trash that comes up the mib stream 650 */ 651 if (item->group != MIB2_IP || 652 item->mib_id != MIB2_IP_ROUTE) 653 continue; 654 for (rp = (mib2_ipRouteEntry_t *)item->valp; 655 (char *)rp < (char *)item->valp + item->length; 656 /* LINTED */ 657 rp = (mib2_ipRouteEntry_t *) 658 ((char *)rp + ipRouteEntrySize)) { 659 delRouteEntry(rp, NULL, seqno); 660 seqno++; 661 } 662 break; 663 } 664 break; 665 case AF_INET6: 666 /* Extract ipv6RouteEntrySize */ 667 for (; item != NULL; item = item->next_item) { 668 if (item->mib_id != 0) 669 continue; 670 if (item->group == MIB2_IP6) { 671 ipv6RouteEntrySize = 672 ((mib2_ipv6IfStatsEntry_t *)item->valp)-> 673 ipv6RouteEntrySize; 674 assert(IS_P2ALIGNED(ipv6RouteEntrySize, 675 sizeof (mib2_ipv6RouteEntry_t *))); 676 break; 677 } 678 } 679 if (ipv6RouteEntrySize == 0) { 680 (void) fprintf(stderr, gettext( 681 "ipv6RouteEntrySize cannot be determined.\n")); 682 exit(1); 683 } 684 for (; item != NULL; item = item->next_item) { 685 /* 686 * skip all the other trash that comes up the mib stream 687 */ 688 if (item->group != MIB2_IP6 || 689 item->mib_id != MIB2_IP6_ROUTE) 690 continue; 691 for (rp6 = (mib2_ipv6RouteEntry_t *)item->valp; 692 (char *)rp6 < (char *)item->valp + item->length; 693 /* LINTED */ 694 rp6 = (mib2_ipv6RouteEntry_t *) 695 ((char *)rp6 + ipv6RouteEntrySize)) { 696 delRouteEntry(NULL, rp6, seqno); 697 seqno++; 698 } 699 break; 700 } 701 break; 702 } 703 704 if (setsockopt(s, SOL_SOCKET, SO_USELOOPBACK, (char *)&on, 705 sizeof (on)) < 0) 706 quit("setsockopt", errno); 707 } 708 709 /* 710 * Given the contents of a mib_item_t of id type MIB2_IP_ROUTE or 711 * MIB2_IP6_ROUTE, construct and send an RTM_DELETE routing socket message in 712 * order to facilitate the flushing of RTF_GATEWAY routes. 713 */ 714 static void 715 delRouteEntry(mib2_ipRouteEntry_t *rp, mib2_ipv6RouteEntry_t *rp6, int seqno) 716 { 717 char *cp; 718 int ire_type; 719 int rlen; 720 struct rt_msghdr *rtm; 721 struct sockaddr_in sin; 722 struct sockaddr_in6 sin6; 723 int slen; 724 725 if (rp != NULL) 726 ire_type = rp->ipRouteInfo.re_ire_type; 727 else 728 ire_type = rp6->ipv6RouteInfo.re_ire_type; 729 if (ire_type != IRE_DEFAULT && 730 ire_type != IRE_PREFIX && 731 ire_type != IRE_HOST && 732 ire_type != IRE_HOST_REDIRECT) 733 return; 734 735 rtm = &m_rtmsg.m_rtm; 736 (void) memset(rtm, 0, sizeof (m_rtmsg)); 737 rtm->rtm_type = RTM_DELETE; 738 rtm->rtm_seq = seqno; 739 rtm->rtm_flags |= RTF_GATEWAY; 740 rtm->rtm_version = RTM_VERSION; 741 rtm->rtm_addrs = RTA_DST | RTA_GATEWAY | RTA_NETMASK; 742 cp = m_rtmsg.m_space; 743 if (rp != NULL) { 744 slen = sizeof (struct sockaddr_in); 745 if (rp->ipRouteMask == IP_HOST_MASK) 746 rtm->rtm_flags |= RTF_HOST; 747 (void) memset(&sin, 0, slen); 748 sin.sin_family = AF_INET; 749 sin.sin_addr.s_addr = rp->ipRouteDest; 750 (void) memmove(cp, &sin, slen); 751 cp += slen; 752 sin.sin_addr.s_addr = rp->ipRouteNextHop; 753 (void) memmove(cp, &sin, slen); 754 cp += slen; 755 sin.sin_addr.s_addr = rp->ipRouteMask; 756 (void) memmove(cp, &sin, slen); 757 cp += slen; 758 } else { 759 slen = sizeof (struct sockaddr_in6); 760 if (rp6->ipv6RoutePfxLength == IPV6_ABITS) 761 rtm->rtm_flags |= RTF_HOST; 762 (void) memset(&sin6, 0, slen); 763 sin6.sin6_family = AF_INET6; 764 sin6.sin6_addr = rp6->ipv6RouteDest; 765 (void) memmove(cp, &sin6, slen); 766 cp += slen; 767 sin6.sin6_addr = rp6->ipv6RouteNextHop; 768 (void) memmove(cp, &sin6, slen); 769 cp += slen; 770 (void) memset(&sin6.sin6_addr, 0, sizeof (sin6.sin6_addr)); 771 (void) in_prefixlentomask(rp6->ipv6RoutePfxLength, IPV6_ABITS, 772 (uchar_t *)&sin6.sin6_addr.s6_addr); 773 (void) memmove(cp, &sin6, slen); 774 cp += slen; 775 } 776 rtm->rtm_msglen = cp - (char *)&m_rtmsg; 777 if (debugonly) { 778 /* 779 * In debugonly mode, the routing socket message to delete the 780 * current entry is not actually sent. However if verbose is 781 * also set, the routing socket message that would have been 782 * is printed. 783 */ 784 if (verbose) 785 print_rtmsg(rtm, rtm->rtm_msglen); 786 return; 787 } 788 789 rlen = write(s, (char *)&m_rtmsg, rtm->rtm_msglen); 790 if (rlen < (int)rtm->rtm_msglen) { 791 if (rlen < 0) { 792 (void) fprintf(stderr, 793 gettext("route: write to routing socket: %s\n"), 794 strerror(errno)); 795 } else { 796 (void) fprintf(stderr, gettext("route: write to " 797 "routing socket got only %d for rlen\n"), rlen); 798 } 799 return; 800 } 801 if (qflag) { 802 /* 803 * In quiet mode, nothing is printed at all (unless the write() 804 * itself failed. 805 */ 806 return; 807 } 808 if (verbose) { 809 print_rtmsg(rtm, rlen); 810 } else { 811 struct sockaddr *sa = (struct sockaddr *)(rtm + 1); 812 813 (void) printf("%-20.20s ", 814 rtm->rtm_flags & RTF_HOST ? routename(sa) : 815 netname(sa)); 816 /* LINTED */ 817 sa = (struct sockaddr *)(salen(sa) + (char *)sa); 818 (void) printf("%-20.20s ", routename(sa)); 819 (void) printf("done\n"); 820 } 821 } 822 823 /* 824 * Return the name of the host whose address is given. 825 */ 826 char * 827 routename(const struct sockaddr *sa) 828 { 829 char *cp; 830 static char line[MAXHOSTNAMELEN + 1]; 831 struct hostent *hp = NULL; 832 static char domain[MAXHOSTNAMELEN + 1]; 833 static boolean_t first = B_TRUE; 834 struct in_addr in; 835 struct in6_addr in6; 836 int error_num; 837 ushort_t *s; 838 ushort_t *slim; 839 840 if (first) { 841 first = B_FALSE; 842 if (gethostname(domain, MAXHOSTNAMELEN) == 0 && 843 (cp = strchr(domain, '.'))) 844 (void) strcpy(domain, cp + 1); 845 else 846 domain[0] = 0; 847 } 848 849 if (salen(sa) == 0) { 850 (void) strcpy(line, "default"); 851 return (line); 852 } 853 switch (sa->sa_family) { 854 855 case AF_INET: 856 /* LINTED */ 857 in = ((struct sockaddr_in *)sa)->sin_addr; 858 859 cp = NULL; 860 if (in.s_addr == INADDR_ANY) 861 cp = "default"; 862 if (cp == NULL && !nflag) { 863 hp = gethostbyaddr((char *)&in, sizeof (struct in_addr), 864 AF_INET); 865 if (hp != NULL) { 866 if (((cp = strchr(hp->h_name, '.')) != NULL) && 867 (strcmp(cp + 1, domain) == 0)) 868 *cp = 0; 869 cp = hp->h_name; 870 } 871 } 872 if (cp != NULL) { 873 (void) strncpy(line, cp, MAXHOSTNAMELEN); 874 line[MAXHOSTNAMELEN] = '\0'; 875 } else { 876 in.s_addr = ntohl(in.s_addr); 877 (void) sprintf(line, "%u.%u.%u.%u", C(in.s_addr >> 24), 878 C(in.s_addr >> 16), C(in.s_addr >> 8), 879 C(in.s_addr)); 880 } 881 break; 882 883 case AF_LINK: 884 return (link_ntoa((struct sockaddr_dl *)sa)); 885 886 case AF_INET6: 887 /* LINTED */ 888 in6 = ((struct sockaddr_in6 *)sa)->sin6_addr; 889 890 cp = NULL; 891 if (IN6_IS_ADDR_UNSPECIFIED(&in6)) 892 cp = "default"; 893 if (cp == NULL && !nflag) { 894 hp = getipnodebyaddr((char *)&in6, 895 sizeof (struct in6_addr), AF_INET6, &error_num); 896 if (hp != NULL) { 897 if (((cp = strchr(hp->h_name, '.')) != NULL) && 898 (strcmp(cp + 1, domain) == 0)) 899 *cp = 0; 900 cp = hp->h_name; 901 } 902 } 903 if (cp != NULL) { 904 (void) strncpy(line, cp, MAXHOSTNAMELEN); 905 line[MAXHOSTNAMELEN] = '\0'; 906 } else { 907 (void) inet_ntop(AF_INET6, (void *)&in6, line, 908 INET6_ADDRSTRLEN); 909 } 910 if (hp != NULL) 911 freehostent(hp); 912 913 break; 914 915 default: 916 s = (ushort_t *)sa; 917 918 slim = s + ((salen(sa) + 1) >> 1); 919 cp = line + sprintf(line, "(%d)", sa->sa_family); 920 921 while (++s < slim) /* start with sa->sa_data */ 922 cp += sprintf(cp, " %x", *s); 923 break; 924 } 925 return (line); 926 } 927 928 /* 929 * Return the name of the network whose address is given. 930 * The address is assumed to be that of a net or subnet, not a host. 931 */ 932 static char * 933 netname(struct sockaddr *sa) 934 { 935 char *cp = NULL; 936 static char line[MAXHOSTNAMELEN + 1]; 937 struct netent *np; 938 in_addr_t net, mask; 939 int subnetshift; 940 struct in_addr in; 941 ushort_t *s; 942 ushort_t *slim; 943 944 switch (sa->sa_family) { 945 946 case AF_INET: 947 /* LINTED */ 948 in = ((struct sockaddr_in *)sa)->sin_addr; 949 950 in.s_addr = ntohl(in.s_addr); 951 if (in.s_addr == INADDR_ANY) { 952 cp = "default"; 953 } else if (!nflag) { 954 if (IN_CLASSA(in.s_addr)) { 955 mask = IN_CLASSA_NET; 956 subnetshift = 8; 957 } else if (IN_CLASSB(in.s_addr)) { 958 mask = IN_CLASSB_NET; 959 subnetshift = 8; 960 } else { 961 mask = IN_CLASSC_NET; 962 subnetshift = 4; 963 } 964 /* 965 * If there are more bits than the standard mask 966 * would suggest, subnets must be in use. 967 * Guess at the subnet mask, assuming reasonable 968 * width subnet fields. 969 */ 970 while (in.s_addr &~ mask) 971 mask = (long)mask >> subnetshift; 972 net = in.s_addr & mask; 973 while ((mask & 1) == 0) 974 mask >>= 1, net >>= 1; 975 np = getnetbyaddr(net, AF_INET); 976 if (np != NULL) 977 cp = np->n_name; 978 } 979 if (cp != NULL) { 980 (void) strncpy(line, cp, MAXHOSTNAMELEN); 981 line[MAXHOSTNAMELEN] = '\0'; 982 } else if ((in.s_addr & 0xffffff) == 0) { 983 (void) sprintf(line, "%u", C(in.s_addr >> 24)); 984 } else if ((in.s_addr & 0xffff) == 0) { 985 (void) sprintf(line, "%u.%u", C(in.s_addr >> 24), 986 C(in.s_addr >> 16)); 987 } else if ((in.s_addr & 0xff) == 0) { 988 (void) sprintf(line, "%u.%u.%u", C(in.s_addr >> 24), 989 C(in.s_addr >> 16), C(in.s_addr >> 8)); 990 } else { 991 (void) sprintf(line, "%u.%u.%u.%u", C(in.s_addr >> 24), 992 C(in.s_addr >> 16), C(in.s_addr >> 8), 993 C(in.s_addr)); 994 } 995 break; 996 997 case AF_LINK: 998 return (link_ntoa((struct sockaddr_dl *)sa)); 999 1000 case AF_INET6: 1001 return (routename(sa)); 1002 1003 default: 1004 /* LINTED */ 1005 s = (ushort_t *)sa->sa_data; 1006 1007 slim = s + ((salen(sa) + 1) >> 1); 1008 cp = line + sprintf(line, "af %d:", sa->sa_family); 1009 1010 while (s < slim) 1011 cp += sprintf(cp, " %x", *s++); 1012 break; 1013 } 1014 return (line); 1015 } 1016 1017 /* 1018 * Initialize a new structure. Keep in mind that ri_dst_str, ri_gate_str and 1019 * ri_ifp_str will be freed by det_rtcmd_irep, so they should either be NULL 1020 * or point to dynamically allocated memory. 1021 */ 1022 rtcmd_irep_t * 1023 new_rtcmd_irep(void) 1024 { 1025 rtcmd_irep_t *rcip; 1026 1027 rcip = calloc(1, sizeof (rtcmd_irep_t)); 1028 if (rcip == NULL) { 1029 quit("calloc", errno); 1030 } 1031 rcip->ri_af = af; 1032 rcip->ri_flags = RTF_STATIC; 1033 return (rcip); 1034 } 1035 1036 void 1037 del_rtcmd_irep(rtcmd_irep_t *rcip) 1038 { 1039 free(rcip->ri_dest_str); 1040 free(rcip->ri_gate_str); 1041 free(rcip->ri_ifp_str); 1042 /* 1043 * IPv6 host entries come from getipnodebyname, which dynamically 1044 * allocates memory. IPv4 host entries come from gethostbyname, which 1045 * returns static memory and cannot be freed with freehostent. 1046 */ 1047 if (rcip->ri_gate_hp != NULL && 1048 rcip->ri_gate_hp->h_addrtype == AF_INET6) 1049 freehostent(rcip->ri_gate_hp); 1050 free(rcip); 1051 } 1052 1053 void 1054 save_string(char **dst, char *src) 1055 { 1056 free(*dst); 1057 *dst = strdup(src); 1058 if (*dst == NULL) { 1059 quit("malloc", errno); 1060 } 1061 } 1062 1063 /* 1064 * Print the short form summary of a route command. 1065 * Eg. "add net default: gateway 10.0.0.1" 1066 * The final newline is not added, allowing the caller to append additional 1067 * information. 1068 */ 1069 void 1070 print_rtcmd_short(FILE *to, rtcmd_irep_t *rcip, boolean_t gw_good, 1071 boolean_t to_saved) 1072 { 1073 char *cmd; 1074 char obuf[INET6_ADDRSTRLEN]; 1075 1076 switch (rcip->ri_cmd) { 1077 case RTM_ADD: 1078 cmd = "add"; 1079 break; 1080 case RTM_CHANGE: 1081 cmd = "change"; 1082 break; 1083 case RTM_DELETE: 1084 cmd = "delete"; 1085 break; 1086 case RTM_GET: 1087 cmd = "get"; 1088 break; 1089 default: 1090 assert(0); 1091 } 1092 1093 (void) fprintf(to, "%s%s %s %s", cmd, 1094 (to_saved) ? " persistent" : "", 1095 (rcip->ri_flags & RTF_HOST) ? "host" : "net", 1096 (rcip->ri_dest_str == NULL) ? "NULL" : rcip->ri_dest_str); 1097 1098 if (rcip->ri_gate_str != NULL) { 1099 switch (rcip->ri_af) { 1100 case AF_INET: 1101 if (nflag) { 1102 (void) fprintf(to, ": gateway %s", 1103 inet_ntoa(rcip->ri_gate.sin.sin_addr)); 1104 } else if (gw_good && 1105 rcip->ri_gate_hp != NULL && 1106 rcip->ri_gate_hp->h_addr_list[1] != NULL) { 1107 /* 1108 * Print the actual address used in the case 1109 * where there was more than one address 1110 * available for the name, and one was used 1111 * successfully. 1112 */ 1113 (void) fprintf(to, ": gateway %s (%s)", 1114 rcip->ri_gate_str, 1115 inet_ntoa(rcip->ri_gate.sin.sin_addr)); 1116 } else { 1117 (void) fprintf(to, ": gateway %s", 1118 rcip->ri_gate_str); 1119 } 1120 break; 1121 case AF_INET6: 1122 if (inet_ntop(AF_INET6, 1123 &rcip->ri_gate.sin6.sin6_addr, obuf, 1124 INET6_ADDRSTRLEN) != NULL) { 1125 if (nflag) { 1126 (void) fprintf(to, ": gateway %s", 1127 obuf); 1128 break; 1129 } 1130 if (gw_good && 1131 rcip->ri_gate_hp->h_addr_list[1] != NULL) { 1132 (void) fprintf(to, ": gateway %s (%s)", 1133 rcip->ri_gate_str, obuf); 1134 break; 1135 } 1136 } 1137 /* FALLTHROUGH */ 1138 default: 1139 (void) fprintf(to, ": gateway %s", 1140 rcip->ri_gate_str); 1141 break; 1142 } 1143 } 1144 } 1145 1146 void 1147 set_metric(rtcmd_irep_t *rcip, char *value, int key, boolean_t lock) 1148 { 1149 int flag = 0; 1150 uint_t noval, *valp = &noval; 1151 1152 switch (key) { 1153 #define caseof(x, y, z) \ 1154 case (x): valp = &(rcip->ri_metrics.z); flag = (y); break 1155 1156 caseof(K_MTU, RTV_MTU, rmx_mtu); 1157 caseof(K_HOPCOUNT, RTV_HOPCOUNT, rmx_hopcount); 1158 caseof(K_EXPIRE, RTV_EXPIRE, rmx_expire); 1159 caseof(K_RECVPIPE, RTV_RPIPE, rmx_recvpipe); 1160 caseof(K_SENDPIPE, RTV_SPIPE, rmx_sendpipe); 1161 caseof(K_SSTHRESH, RTV_SSTHRESH, rmx_ssthresh); 1162 caseof(K_RTT, RTV_RTT, rmx_rtt); 1163 caseof(K_RTTVAR, RTV_RTTVAR, rmx_rttvar); 1164 #undef caseof 1165 } 1166 rcip->ri_inits |= flag; 1167 if (lock) 1168 rcip->ri_metrics.rmx_locks |= flag; 1169 *valp = atoi(value); 1170 } 1171 1172 /* 1173 * Parse the options give in argv[], filling in rcip with the results. 1174 * If cmd_string is non-null, argc and argv are ignored, and cmd_string is 1175 * tokenized to produce the command line. Cmd_string is tokenized using 1176 * strtok, which will overwrite whitespace in the string with nulls. 1177 * 1178 * Returns B_TRUE on success and B_FALSE on failure. 1179 */ 1180 boolean_t 1181 args_to_rtcmd(rtcmd_irep_t *rcip, char **argv, char *cmd_string) 1182 { 1183 const char *ws = "\f\n\r\t\v "; 1184 char *tok = cmd_string; 1185 char *keyword_str; 1186 addr_type_t atype = ADDR_TYPE_ANY; 1187 boolean_t iflag = B_FALSE; 1188 boolean_t locknext = B_FALSE; 1189 boolean_t lockrest = B_FALSE; 1190 boolean_t dash_keyword; 1191 int key; 1192 char *err; 1193 1194 if (cmd_string == NULL) { 1195 tok = argv[0]; 1196 } else { 1197 tok = strtok(cmd_string, ws); 1198 } 1199 1200 /* 1201 * The command keywords are already fully checked by main() or 1202 * search_rtfile(). 1203 */ 1204 switch (*tok) { 1205 case 'a': 1206 rcip->ri_cmd = RTM_ADD; 1207 break; 1208 case 'c': 1209 rcip->ri_cmd = RTM_CHANGE; 1210 break; 1211 case 'd': 1212 rcip->ri_cmd = RTM_DELETE; 1213 break; 1214 case 'g': 1215 rcip->ri_cmd = RTM_GET; 1216 break; 1217 default: 1218 /* NOTREACHED */ 1219 quit(gettext("Internal Error"), EINVAL); 1220 /* NOTREACHED */ 1221 } 1222 1223 #define NEXTTOKEN \ 1224 ((tok = (cmd_string == NULL ? *++argv : strtok(NULL, ws))) != NULL) 1225 1226 while (NEXTTOKEN) { 1227 keyword_str = tok; 1228 if (*tok == '-') { 1229 dash_keyword = B_TRUE; 1230 key = keyword(tok + 1); 1231 } else { 1232 dash_keyword = B_FALSE; 1233 key = keyword(tok); 1234 if (key != K_HOST && key != K_NET) { 1235 /* All others must be preceded by '-' */ 1236 key = 0; 1237 } 1238 } 1239 switch (key) { 1240 case K_HOST: 1241 if (atype == ADDR_TYPE_NET) { 1242 syntax_error(gettext("route: -host and -net " 1243 "are mutually exclusive\n")); 1244 return (B_FALSE); 1245 } 1246 atype = ADDR_TYPE_HOST; 1247 break; 1248 case K_NET: 1249 if (atype == ADDR_TYPE_HOST) { 1250 syntax_error(gettext("route: -host and -net " 1251 "are mutually exclusive\n")); 1252 return (B_FALSE); 1253 } 1254 atype = ADDR_TYPE_NET; 1255 break; 1256 case K_LINK: 1257 rcip->ri_af = AF_LINK; 1258 break; 1259 case K_INET: 1260 rcip->ri_af = AF_INET; 1261 break; 1262 case K_SA: 1263 rcip->ri_af = PF_ROUTE; 1264 break; 1265 case K_INET6: 1266 rcip->ri_af = AF_INET6; 1267 break; 1268 case K_IFACE: 1269 case K_INTERFACE: 1270 iflag = B_TRUE; 1271 /* fallthrough */ 1272 case K_NOSTATIC: 1273 rcip->ri_flags &= ~RTF_STATIC; 1274 break; 1275 case K_LOCK: 1276 locknext = B_TRUE; 1277 break; 1278 case K_LOCKREST: 1279 lockrest = B_TRUE; 1280 break; 1281 case K_REJECT: 1282 rcip->ri_flags |= RTF_REJECT; 1283 break; 1284 case K_BLACKHOLE: 1285 rcip->ri_flags |= RTF_BLACKHOLE; 1286 break; 1287 case K_PROTO1: 1288 rcip->ri_flags |= RTF_PROTO1; 1289 break; 1290 case K_PROTO2: 1291 rcip->ri_flags |= RTF_PROTO2; 1292 break; 1293 case K_CLONING: 1294 rcip->ri_flags |= RTF_CLONING; 1295 break; 1296 case K_XRESOLVE: 1297 rcip->ri_flags |= RTF_XRESOLVE; 1298 break; 1299 case K_STATIC: 1300 rcip->ri_flags |= RTF_STATIC; 1301 break; 1302 case K_IFA: 1303 if (!NEXTTOKEN) { 1304 syntax_arg_missing(keyword_str); 1305 return (B_FALSE); 1306 } 1307 if (!getaddr(rcip, RTA_IFA, tok, atype)) { 1308 return (B_FALSE); 1309 } 1310 break; 1311 case K_IFP: 1312 if (!NEXTTOKEN) { 1313 syntax_arg_missing(keyword_str); 1314 return (B_FALSE); 1315 } 1316 if (!getaddr(rcip, RTA_IFP, tok, atype)) { 1317 return (B_FALSE); 1318 } 1319 break; 1320 case K_GATEWAY: 1321 if (!NEXTTOKEN) { 1322 syntax_arg_missing(keyword_str); 1323 return (B_FALSE); 1324 } 1325 if (!getaddr(rcip, RTA_GATEWAY, tok, atype)) { 1326 return (B_FALSE); 1327 } 1328 break; 1329 case K_DST: 1330 if (!NEXTTOKEN) { 1331 syntax_arg_missing(keyword_str); 1332 return (B_FALSE); 1333 } 1334 if (!getaddr(rcip, RTA_DST, tok, atype)) { 1335 return (B_FALSE); 1336 } 1337 break; 1338 case K_NETMASK: 1339 if (!NEXTTOKEN) { 1340 syntax_arg_missing(keyword_str); 1341 return (B_FALSE); 1342 } 1343 if (!getaddr(rcip, RTA_NETMASK, tok, atype)) { 1344 return (B_FALSE); 1345 } 1346 atype = ADDR_TYPE_NET; 1347 break; 1348 case K_MTU: 1349 case K_HOPCOUNT: 1350 case K_EXPIRE: 1351 case K_RECVPIPE: 1352 case K_SENDPIPE: 1353 case K_SSTHRESH: 1354 case K_RTT: 1355 case K_RTTVAR: 1356 if (!NEXTTOKEN) { 1357 syntax_arg_missing(keyword_str); 1358 return (B_FALSE); 1359 } 1360 set_metric(rcip, tok, key, locknext || lockrest); 1361 locknext = B_FALSE; 1362 break; 1363 case K_PRIVATE: 1364 rcip->ri_flags |= RTF_PRIVATE; 1365 break; 1366 case K_MULTIRT: 1367 rcip->ri_flags |= RTF_MULTIRT; 1368 break; 1369 case K_SETSRC: 1370 if (!NEXTTOKEN) { 1371 syntax_arg_missing(keyword_str); 1372 return (B_FALSE); 1373 } 1374 if (!getaddr(rcip, RTA_SRC, tok, atype)) { 1375 return (B_FALSE); 1376 } 1377 rcip->ri_flags |= RTF_SETSRC; 1378 break; 1379 case K_SECATTR: 1380 if (!NEXTTOKEN) { 1381 syntax_arg_missing(keyword_str); 1382 return (B_FALSE); 1383 } 1384 if (is_system_labeled()) { 1385 int err; 1386 1387 if (rcip->ri_rtsa_cnt >= 1) { 1388 syntax_error(gettext("route: can't " 1389 "specify more than one security " 1390 "attribute\n")); 1391 return (B_FALSE); 1392 } 1393 if (!rtsa_keyword(tok, &rcip->ri_rtsa, &err, 1394 NULL)) { 1395 syntax_error(gettext("route: " 1396 "bad security attribute: %s\n"), 1397 tsol_strerror(err, errno)); 1398 return (B_FALSE); 1399 } 1400 rcip->ri_rtsa_cnt++; 1401 } else { 1402 syntax_error(gettext("route: " 1403 "system is not labeled; cannot specify " 1404 "security attributes.\n")); 1405 return (B_FALSE); 1406 } 1407 break; 1408 default: 1409 if (dash_keyword) { 1410 syntax_bad_keyword(tok + 1); 1411 return (B_FALSE); 1412 } 1413 if ((rcip->ri_addrs & RTA_DST) == 0) { 1414 if (!getaddr(rcip, RTA_DST, tok, atype)) { 1415 return (B_FALSE); 1416 } 1417 } else if ((rcip->ri_addrs & RTA_GATEWAY) == 0) { 1418 /* 1419 * For the gateway parameter, retrieve the 1420 * pointer to the struct hostent so that all 1421 * possible addresses can be tried until one 1422 * is successful. 1423 */ 1424 if (!getaddr(rcip, RTA_GATEWAY, tok, atype)) { 1425 return (B_FALSE); 1426 } 1427 } else { 1428 ulong_t metric; 1429 /* 1430 * Assume that a regular number is a metric. 1431 * Needed for compatibility with old route 1432 * command syntax. 1433 */ 1434 errno = 0; 1435 metric = strtoul(tok, &err, 10); 1436 if (errno == 0 && *err == '\0' && 1437 metric < 0x80000000ul) { 1438 iflag = (metric == 0); 1439 if (verbose) { 1440 (void) printf("old usage of " 1441 "trailing number, assuming " 1442 "route %s\n", iflag ? 1443 "to if" : "via gateway"); 1444 } 1445 continue; 1446 } 1447 if (!getaddr(rcip, RTA_NETMASK, tok, atype)) { 1448 return (B_FALSE); 1449 } 1450 } 1451 } 1452 } 1453 #undef NEXTTOKEN 1454 1455 if ((rcip->ri_addrs & RTA_DST) == 0) { 1456 syntax_error(gettext("route: destination required\n")); 1457 return (B_FALSE); 1458 } else if ((rcip->ri_cmd == RTM_ADD || rcip->ri_cmd == RTM_DELETE) && 1459 (rcip->ri_addrs & RTA_GATEWAY) == 0) { 1460 syntax_error(gettext( 1461 "route: gateway required for add or delete command\n")); 1462 return (B_FALSE); 1463 } 1464 1465 if (!iflag) { 1466 rcip->ri_flags |= RTF_GATEWAY; 1467 } 1468 1469 if (atype != ADDR_TYPE_NET) { 1470 if (rcip->ri_addrs & RTA_NETMASK) { 1471 /* 1472 * We know the netmask, so we can set the host flag 1473 * based on whether the netmask is the host netmask. 1474 */ 1475 if (rcip->ri_af == AF_INET && 1476 rcip->ri_mask.sin.sin_addr.s_addr == 1477 IP_HOST_MASK) { 1478 rcip->ri_flags |= RTF_HOST; 1479 } 1480 if (rcip->ri_af == AF_INET6 && 1481 memcmp(&rcip->ri_mask.sin6.sin6_addr, 1482 &in6_host_mask, 1483 sizeof (struct in6_addr)) == 0) { 1484 rcip->ri_flags |= RTF_HOST; 1485 } 1486 } else { 1487 /* 1488 * If no prefix mask has been saved at this point, it 1489 * only makes sense to treat the destination address 1490 * as a host address. 1491 */ 1492 rcip->ri_flags |= RTF_HOST; 1493 } 1494 } 1495 return (B_TRUE); 1496 } 1497 1498 /* 1499 * This command always seeks to the end of the file prior to writing. 1500 */ 1501 void 1502 write_to_rtfile(FILE *fp, int argc, char **argv) 1503 { 1504 char file_line[BUF_SIZE]; 1505 int len; 1506 int i; 1507 1508 len = 0; 1509 if (early_v6_keyword) { 1510 /* 1511 * This flag is set when "inet6" was seen as an 1512 * argument to the -f flag. Normally, when writing 1513 * routes to the persistent route file, everything on 1514 * the command line after "add" is saved verbatim. 1515 * In this case, the arguments after "add" may not be 1516 * sufficient, as the ipv6 keyword came before "add", 1517 * yet must be present in the persistent route file. 1518 */ 1519 len += snprintf(file_line, BUF_SIZE, "-inet6 "); 1520 } 1521 for (i = 0; argc > 0 && len < BUF_SIZE; i++, argc--) { 1522 len += snprintf(&file_line[len], BUF_SIZE - len, "%s ", 1523 argv[i]); 1524 } 1525 if (len >= BUF_SIZE) 1526 quit(gettext("Internal Error"), EINVAL); 1527 file_line[len - 1] = '\n'; 1528 if (fseek(fp, 0, SEEK_END) != 0 || 1529 fputs(file_line, fp) == EOF) { 1530 quit(gettext("failed to write to route file"), 1531 errno); 1532 } 1533 } 1534 1535 boolean_t 1536 compare_rtcmd(rtcmd_irep_t *srch_rt, rtcmd_irep_t *file_rt) 1537 { 1538 if (strcmp(srch_rt->ri_dest_str, file_rt->ri_dest_str) != 0 || 1539 memcmp(&srch_rt->ri_mask, &file_rt->ri_mask, sizeof (su_t)) != 0) { 1540 return (B_FALSE); 1541 } 1542 return (srch_rt->ri_gate_str == NULL || 1543 strcmp(srch_rt->ri_gate_str, file_rt->ri_gate_str) == 0); 1544 } 1545 1546 /* 1547 * Search the route file for routes matching the supplied route. There are 3 1548 * modes of operation: 1549 * SEARCH_MODE_RET - no side effects. 1550 * SEARCH_MODE_PRINT - prints each matching line. 1551 * SEARCH_MODE_DEL - copies all valid, non-matching lines to tmp_fp. 1552 * 1553 * In all cases, the number of matches is returned. If rt is NULL, all routes 1554 * matching the global af value are considered matching. 1555 */ 1556 int 1557 search_rtfile(FILE *fp, FILE *temp_fp, rtcmd_irep_t *rt, search_mode_t mode) 1558 { 1559 char *tmp_buf; 1560 int match_cnt; 1561 boolean_t match; 1562 char file_line[BUF_SIZE + 4] = "add "; 1563 rtcmd_irep_t *thisrt; 1564 1565 match_cnt = 0; 1566 1567 /* 1568 * Leave space at the beginning of file_line for "add ". 1569 */ 1570 while (fgets(file_line + 4, BUF_SIZE, fp) != NULL) { 1571 1572 if (file_line[4] == '#' || file_line[4] == '\n') { 1573 /* Handle comments and blank lines */ 1574 if (mode == SEARCH_MODE_DEL && 1575 fputs(file_line + 4, temp_fp) == EOF) { 1576 quit(gettext( 1577 "route: failed to write to temp file"), 1578 errno); 1579 } 1580 continue; 1581 } 1582 thisrt = new_rtcmd_irep(); 1583 /* 1584 * thisrt->ri_af defaults to whatever address family happens 1585 * to be set in the global af, but routes in the persistent 1586 * route file must be treated as AF_INET by default. 1587 */ 1588 thisrt->ri_af = AF_INET; 1589 1590 exit_on_error = B_FALSE; 1591 tmp_buf = strdup(file_line); 1592 /* args_to_rtcmd() will mangle the string passed. */ 1593 if (!args_to_rtcmd(thisrt, NULL, tmp_buf)) { 1594 /* There was an error in args_to_rtcmd() or helpers */ 1595 del_rtcmd_irep(thisrt); 1596 free(tmp_buf); 1597 continue; 1598 } 1599 exit_on_error = B_TRUE; 1600 free(tmp_buf); 1601 1602 if (thisrt->ri_gate_str == NULL) { 1603 del_rtcmd_irep(thisrt); 1604 continue; 1605 } 1606 match = (rt == NULL) ? (thisrt->ri_af == af) : 1607 compare_rtcmd(rt, thisrt); 1608 1609 if (match) match_cnt++; 1610 if (match && mode == SEARCH_MODE_PRINT) { 1611 (void) printf("persistent: route %s", file_line); 1612 } 1613 if (match && mode == SEARCH_MODE_DEL) { 1614 thisrt->ri_cmd = RTM_DELETE; 1615 print_rtcmd_short(stdout, thisrt, B_FALSE, B_TRUE); 1616 (void) printf("\n"); 1617 } 1618 del_rtcmd_irep(thisrt); 1619 1620 if (!match && mode == SEARCH_MODE_DEL && 1621 fputs(file_line + 4, temp_fp) == EOF) { 1622 quit(gettext("failed to write to temp file"), 1623 errno); 1624 } 1625 } 1626 return (match_cnt); 1627 } 1628 1629 /* 1630 * Perform the route operation given in argv on the persistent route file. 1631 * If do_flush is set, the persistent route file is flushed of all routes 1632 * matching the global family, and the arguments are ignored. 1633 */ 1634 void 1635 save_route(int argc, char **argv, int do_flush) 1636 { 1637 rtcmd_irep_t *rt; 1638 int perm_fd; 1639 FILE *perm_fp; 1640 FILE *temp_fp; 1641 mode_t fmode = S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH; 1642 struct flock lock; 1643 struct stat st; 1644 const char commentstr[] = 1645 "# File generated by route(1M) - do not edit.\n"; 1646 1647 perm_fd = open(perm_file, O_RDWR | O_CREAT, fmode); 1648 if (perm_fd == -1 || fstat(perm_fd, &st) == -1) 1649 quit("failed to open route file", errno); 1650 1651 lock.l_type = F_WRLCK; 1652 lock.l_whence = SEEK_SET; 1653 lock.l_start = 0; 1654 lock.l_len = 0; 1655 if (fcntl(perm_fd, F_SETLK, &lock) != 0) { 1656 quit(gettext("failed to lock route file"), errno); 1657 /* NOTREACHED */ 1658 } 1659 if (st.st_size == 0 && 1660 write(perm_fd, commentstr, sizeof (commentstr) - 1) != 1661 sizeof (commentstr) - 1) 1662 quit(gettext("failed to open route file"), errno); 1663 1664 if ((perm_fp = fdopen(perm_fd, "r+")) == NULL) { 1665 quit(gettext("failed to open route file"), errno); 1666 /* NOTREACHED */ 1667 } 1668 1669 if (!do_flush) { 1670 rt = new_rtcmd_irep(); 1671 (void) args_to_rtcmd(rt, argv, NULL); 1672 } 1673 if (do_flush || rt->ri_cmd == RTM_DELETE) { 1674 if ((temp_fp = fopen(temp_file, "w")) == NULL) { 1675 quit(gettext("failed to open temp file"), errno); 1676 /* NOTREACHED */ 1677 } 1678 } 1679 if (do_flush) { 1680 (void) search_rtfile(perm_fp, temp_fp, NULL, SEARCH_MODE_DEL); 1681 if (fclose(temp_fp) != 0 || rename(temp_file, perm_file) != 0) { 1682 quit(gettext("failed to update route file"), errno); 1683 /* NOTREACHED */ 1684 } 1685 (void) fclose(perm_fp); 1686 return; 1687 } 1688 1689 switch (rt->ri_cmd) { 1690 case RTM_ADD: 1691 if (search_rtfile(perm_fp, NULL, rt, SEARCH_MODE_NULL) > 0) { 1692 /* Route is already in the file */ 1693 print_rtcmd_short(stderr, rt, B_FALSE, B_TRUE); 1694 (void) fprintf(stderr, ": entry exists\n"); 1695 exit(1); 1696 } 1697 write_to_rtfile(perm_fp, argc - 1, argv + 1); 1698 print_rtcmd_short(stdout, rt, B_FALSE, B_TRUE); 1699 (void) printf("\n"); 1700 break; 1701 1702 case RTM_CHANGE: 1703 syntax_error( 1704 gettext("route: change command not supported with -p\n")); 1705 /* NOTREACHED */ 1706 1707 case RTM_DELETE: 1708 if (search_rtfile(perm_fp, temp_fp, rt, SEARCH_MODE_DEL) <= 0) { 1709 /* Route not found */ 1710 print_rtcmd_short(stderr, rt, B_FALSE, B_TRUE); 1711 (void) fprintf(stderr, gettext(": not in file\n")); 1712 exit(1); 1713 } 1714 if (fclose(temp_fp) != 0 || rename(temp_file, perm_file) != 0) { 1715 quit(gettext("failed to update route file"), errno); 1716 /* NOTREACHED */ 1717 } 1718 break; 1719 1720 case RTM_GET: 1721 if (search_rtfile(perm_fp, temp_fp, rt, SEARCH_MODE_PRINT) <= 1722 0) { 1723 print_rtcmd_short(stdout, rt, B_FALSE, B_TRUE); 1724 (void) printf(gettext(": not in file\n")); 1725 } 1726 break; 1727 1728 default: 1729 quit(gettext("Internal Error"), EINVAL); 1730 /* NOTREACHED */ 1731 } 1732 1733 /* 1734 * Closing the file unlocks it. 1735 */ 1736 (void) fclose(perm_fp); 1737 } 1738 1739 int 1740 show_saved_routes(int argc) 1741 { 1742 int perm_fd; 1743 FILE *perm_fp; 1744 struct flock lock; 1745 int count = 0; 1746 1747 if (argc != 1) { 1748 syntax_error(gettext("route: invalid arguments for show\n")); 1749 } 1750 1751 perm_fd = open(perm_file, O_RDONLY, 0); 1752 1753 if (perm_fd == -1) { 1754 if (errno == ENOENT) { 1755 (void) printf("No persistent routes are defined\n"); 1756 return (0); 1757 } else { 1758 quit(gettext("failed to open route file"), errno); 1759 } 1760 } 1761 lock.l_type = F_RDLCK; 1762 lock.l_whence = SEEK_SET; 1763 lock.l_start = 0; 1764 lock.l_len = 0; 1765 if (fcntl(perm_fd, F_SETLK, &lock) != 0) { 1766 quit(gettext("failed to lock route file"), 1767 errno); 1768 /* NOTREACHED */ 1769 } 1770 if ((perm_fp = fdopen(perm_fd, "r")) == NULL) { 1771 quit(gettext("failed to open route file"), errno); 1772 /* NOTREACHED */ 1773 } 1774 count += search_rtfile(perm_fp, NULL, NULL, SEARCH_MODE_PRINT); 1775 (void) fseek(perm_fp, 0, SEEK_SET); 1776 af = AF_INET6; 1777 count += search_rtfile(perm_fp, NULL, NULL, SEARCH_MODE_PRINT); 1778 1779 if (count == 0) 1780 (void) printf("No persistent routes are defined\n"); 1781 1782 (void) fclose(perm_fp); 1783 return (0); 1784 } 1785 1786 int 1787 newroute(char **argv) 1788 { 1789 rtcmd_irep_t *newrt; 1790 int ret, attempts, oerrno; 1791 char *err; 1792 char obuf[INET6_ADDRSTRLEN]; 1793 #define hp (newrt->ri_gate_hp) 1794 1795 newrt = new_rtcmd_irep(); 1796 (void) args_to_rtcmd(newrt, argv, NULL); 1797 1798 if (newrt->ri_cmd != RTM_GET && !tflag) { 1799 /* Don't want to read back our messages */ 1800 (void) shutdown(s, 0); 1801 } 1802 if (newrt->ri_addrs & RTA_IFP) { 1803 newrt->ri_ifp.sdl.sdl_index = if_nametoindex(newrt->ri_ifp_str); 1804 if (newrt->ri_ifp.sdl.sdl_index == 0) { 1805 if (errno != ENXIO) { 1806 quit("if_nametoindex", errno); 1807 } else { 1808 (void) fprintf(stderr, 1809 gettext("route: %s: no such interface\n"), 1810 newrt->ri_ifp_str); 1811 exit(1); 1812 } 1813 } 1814 newrt->ri_ifp.sdl.sdl_family = AF_LINK; 1815 } 1816 for (attempts = 1; ; attempts++) { 1817 errno = 0; 1818 if ((ret = rtmsg(newrt)) == 0) 1819 break; 1820 if (errno != ENETUNREACH && errno != ESRCH) 1821 break; 1822 if ((newrt->ri_addrs & RTA_GATEWAY) && hp != NULL && 1823 hp->h_addr_list[attempts] != NULL) { 1824 switch (af) { 1825 case AF_INET: 1826 (void) memmove(&newrt->ri_gate.sin.sin_addr, 1827 hp->h_addr_list[attempts], hp->h_length); 1828 continue; 1829 case AF_INET6: 1830 (void) memmove(&newrt->ri_gate.sin6.sin6_addr, 1831 hp->h_addr_list[attempts], hp->h_length); 1832 continue; 1833 } 1834 } 1835 break; 1836 } 1837 oerrno = errno; 1838 1839 if (newrt->ri_cmd != RTM_GET) { 1840 print_rtcmd_short(stdout, newrt, (ret == 0), B_FALSE); 1841 if (ret == 0) 1842 (void) printf("\n"); 1843 } else if (ret != 0) { 1844 /* 1845 * Note: there is nothing additional to print for get 1846 * if ret == 0. 1847 */ 1848 if (nflag) { 1849 switch (newrt->ri_af) { 1850 case AF_INET: 1851 (void) printf(" %s", 1852 inet_ntoa(newrt->ri_dst.sin.sin_addr)); 1853 break; 1854 case AF_INET6: 1855 if (inet_ntop(AF_INET6, 1856 (void *)&newrt->ri_dst.sin6.sin6_addr, 1857 obuf, INET6_ADDRSTRLEN) != NULL) { 1858 (void) printf(" %s", obuf); 1859 break; 1860 } 1861 /* FALLTHROUGH */ 1862 default: 1863 (void) printf("%s", newrt->ri_dest_str); 1864 break; 1865 } 1866 } else { 1867 (void) printf("%s", newrt->ri_dest_str); 1868 } 1869 } 1870 1871 if (ret != 0) { 1872 switch (oerrno) { 1873 case ESRCH: 1874 err = "not in table"; 1875 break; 1876 case EBUSY: 1877 err = "entry in use"; 1878 break; 1879 case ENOBUFS: 1880 err = "routing table overflow"; 1881 break; 1882 case EEXIST: 1883 err = "entry exists"; 1884 break; 1885 case EPERM: 1886 err = "insufficient privileges"; 1887 break; 1888 default: 1889 err = strerror(oerrno); 1890 break; 1891 } 1892 (void) printf(": %s\n", err); 1893 } 1894 1895 del_rtcmd_irep(newrt); 1896 1897 return (oerrno); 1898 #undef hp 1899 } 1900 1901 1902 /* 1903 * Convert a network number to the corresponding IP address. 1904 * If the RTA_NETMASK hasn't been specified yet set it based 1905 * on the class of address. 1906 */ 1907 static void 1908 inet_makenetandmask(rtcmd_irep_t *rcip, in_addr_t net, struct sockaddr_in *sin) 1909 { 1910 in_addr_t addr, mask; 1911 1912 if (net == 0) { 1913 mask = addr = 0; 1914 } else if (net < 128) { 1915 addr = net << IN_CLASSA_NSHIFT; 1916 mask = IN_CLASSA_NET; 1917 } else if (net < 65536) { 1918 addr = net << IN_CLASSB_NSHIFT; 1919 mask = IN_CLASSB_NET; 1920 } else if (net < 16777216L) { 1921 addr = net << IN_CLASSC_NSHIFT; 1922 mask = IN_CLASSC_NET; 1923 } else { 1924 addr = net; 1925 if ((addr & IN_CLASSA_HOST) == 0) 1926 mask = IN_CLASSA_NET; 1927 else if ((addr & IN_CLASSB_HOST) == 0) 1928 mask = IN_CLASSB_NET; 1929 else if ((addr & IN_CLASSC_HOST) == 0) 1930 mask = IN_CLASSC_NET; 1931 else { 1932 if (IN_CLASSA(addr)) 1933 mask = IN_CLASSA_NET; 1934 else if (IN_CLASSB(addr)) 1935 mask = IN_CLASSB_NET; 1936 else if (IN_CLASSC(addr)) 1937 mask = IN_CLASSC_NET; 1938 else 1939 mask = IP_HOST_MASK; 1940 mask = inet_makesubnetmask(addr, mask); 1941 } 1942 } 1943 sin->sin_addr.s_addr = htonl(addr); 1944 1945 if (!(rcip->ri_addrs & RTA_NETMASK)) { 1946 rcip->ri_addrs |= RTA_NETMASK; 1947 sin = &rcip->ri_mask.sin; 1948 sin->sin_addr.s_addr = htonl(mask); 1949 sin->sin_family = AF_INET; 1950 } 1951 } 1952 1953 static in_addr_t 1954 inet_makesubnetmask(in_addr_t addr, in_addr_t mask) 1955 { 1956 int n; 1957 struct ifconf ifc; 1958 struct ifreq ifreq; 1959 struct ifreq *ifr; 1960 struct sockaddr_in *sin; 1961 char *buf; 1962 int numifs; 1963 size_t bufsize; 1964 int iosoc; 1965 in_addr_t if_addr, if_mask; 1966 in_addr_t if_subnetmask = 0; 1967 short if_flags; 1968 1969 if (mask == 0) 1970 return (0); 1971 if ((iosoc = socket(AF_INET, SOCK_DGRAM, 0)) < 0) 1972 quit("socket", errno); 1973 if (ioctl(iosoc, SIOCGIFNUM, (char *)&numifs) < 0) 1974 quit("ioctl", errno); 1975 bufsize = numifs * sizeof (struct ifreq); 1976 buf = malloc(bufsize); 1977 if (buf == NULL) 1978 quit("malloc", errno); 1979 (void) memset(&ifc, 0, sizeof (ifc)); 1980 ifc.ifc_len = bufsize; 1981 ifc.ifc_buf = buf; 1982 if (ioctl(iosoc, SIOCGIFCONF, (char *)&ifc) < 0) 1983 quit("ioctl (get interface configuration)", errno); 1984 /* Let's check to see if this is maybe a local subnet route. */ 1985 ifr = ifc.ifc_req; 1986 for (n = ifc.ifc_len / sizeof (struct ifreq); n > 0; n--, ifr++) { 1987 ifreq = *ifr; 1988 /* LINTED */ 1989 sin = (struct sockaddr_in *)&ifr->ifr_addr; 1990 if_addr = ntohl(sin->sin_addr.s_addr); 1991 1992 if (ioctl(iosoc, SIOCGIFFLAGS, (char *)&ifreq) < 0) 1993 quit("ioctl (get interface flags)", errno); 1994 if ((ifreq.ifr_flags & IFF_UP) == 0) 1995 continue; 1996 if_flags = ifreq.ifr_flags; 1997 1998 if (ioctl(iosoc, SIOCGIFNETMASK, (char *)&ifreq) < 0) 1999 quit("ioctl (get netmask)", errno); 2000 /* LINTED */ 2001 sin = (struct sockaddr_in *)&ifreq.ifr_addr; 2002 if_mask = ntohl(sin->sin_addr.s_addr); 2003 if ((if_addr & mask) == (addr & mask)) { 2004 /* 2005 * Don't trust pt-pt interfaces if there are 2006 * other interfaces. 2007 */ 2008 if (if_flags & IFF_POINTOPOINT) { 2009 if_subnetmask = if_mask; 2010 continue; 2011 } 2012 /* 2013 * Fine. Just assume the same net mask as the 2014 * directly attached subnet interface is using. 2015 */ 2016 return (if_mask); 2017 } 2018 } 2019 if (if_subnetmask != 0) 2020 return (if_subnetmask); 2021 return (mask); 2022 } 2023 2024 /* 2025 * Interpret an argument as a network address of some kind. 2026 * 2027 * If the address family is one looked up in getaddr() using one of the 2028 * getipnodebyX() functions (currently only AF_INET6), then callers should 2029 * freehostent() the returned "struct hostent" pointer if one was passed in. 2030 * 2031 * If exit_on_error is true, this function will cause route to exit on error by 2032 * calling syntax_error(). Otherwise, it returns B_TRUE on success or B_FALSE 2033 * on failure. 2034 */ 2035 static boolean_t 2036 getaddr(rtcmd_irep_t *rcip, int which, char *s, addr_type_t atype) 2037 { 2038 su_t *su; 2039 struct hostent **hpp; 2040 struct hostent *hp; 2041 int masklen; 2042 2043 if (which == RTA_GATEWAY) { 2044 hpp = &(rcip->ri_gate_hp); 2045 } else { 2046 hpp = &hp; 2047 } 2048 *hpp = NULL; 2049 2050 rcip->ri_addrs |= which; 2051 switch (which) { 2052 case RTA_DST: 2053 save_string(&rcip->ri_dest_str, s); 2054 su = &rcip->ri_dst; 2055 su->sa.sa_family = rcip->ri_af; 2056 break; 2057 case RTA_GATEWAY: 2058 save_string(&rcip->ri_gate_str, s); 2059 su = &rcip->ri_gate; 2060 su->sa.sa_family = rcip->ri_af; 2061 break; 2062 case RTA_NETMASK: 2063 su = &rcip->ri_mask; 2064 su->sa.sa_family = rcip->ri_af; 2065 break; 2066 case RTA_IFP: 2067 save_string(&rcip->ri_ifp_str, s); 2068 return (B_TRUE); 2069 /* 2070 * RTA_SRC has overloaded meaning. It can represent the 2071 * src address of incoming or outgoing packets. 2072 */ 2073 case RTA_IFA: 2074 su = &rcip->ri_ifa; 2075 su->sa.sa_family = rcip->ri_af; 2076 break; 2077 case RTA_SRC: 2078 su = &rcip->ri_src; 2079 su->sa.sa_family = rcip->ri_af; 2080 break; 2081 default: 2082 /* NOTREACHED */ 2083 quit(gettext("Internal Error"), EINVAL); 2084 /* NOTREACHED */ 2085 } 2086 if (strcmp(s, "default") == 0) { 2087 if (which == RTA_DST) { 2088 return (getaddr(rcip, RTA_NETMASK, s, ADDR_TYPE_NET)); 2089 } 2090 if (which == RTA_SRC) { 2091 return (B_TRUE); 2092 } 2093 return (B_TRUE); 2094 } 2095 switch (rcip->ri_af) { 2096 case AF_LINK: 2097 link_addr(s, &su->sdl); 2098 return (B_TRUE); 2099 case PF_ROUTE: 2100 sockaddr(s, &su->sa); 2101 return (B_TRUE); 2102 case AF_INET6: 2103 switch (which) { 2104 case RTA_DST: 2105 if (!in6_getaddr(s, &su->sin6, &masklen, hpp)) { 2106 return (B_FALSE); 2107 } 2108 if (masklen != NO_PREFIX) { 2109 (void) memset(&rcip->ri_mask.sin6.sin6_addr, 0, 2110 sizeof (rcip->ri_mask.sin6.sin6_addr)); 2111 if (!in_prefixlentomask(masklen, IPV6_ABITS, 2112 (uchar_t *)&rcip->ri_mask.sin6.sin6_addr)) { 2113 syntax_error(gettext( 2114 "route: bad prefix length: %d\n"), 2115 masklen); 2116 return (B_FALSE); 2117 } 2118 rcip->ri_mask.sin6.sin6_family = rcip->ri_af; 2119 rcip->ri_addrs |= RTA_NETMASK; 2120 } 2121 return (B_TRUE); 2122 case RTA_GATEWAY: 2123 case RTA_IFA: 2124 case RTA_SRC: 2125 return (in6_getaddr(s, &su->sin6, NULL, hpp)); 2126 case RTA_NETMASK: 2127 syntax_error( 2128 gettext("route: -netmask not supported for IPv6: " 2129 "use <prefix>/<prefix-length> instead\n")); 2130 return (B_FALSE); 2131 default: 2132 quit(gettext("Internal Error"), EINVAL); 2133 /* NOTREACHED */ 2134 } 2135 case AF_INET: 2136 switch (which) { 2137 case RTA_DST: 2138 if (!in_getaddr(s, &su->sin, &masklen, which, hpp, 2139 atype, rcip)) { 2140 return (B_FALSE); 2141 } 2142 if (masklen != NO_PREFIX) { 2143 (void) memset(&rcip->ri_mask.sin.sin_addr, 0, 2144 sizeof (rcip->ri_mask.sin.sin_addr)); 2145 if (!in_prefixlentomask(masklen, IP_ABITS, 2146 (uchar_t *)&rcip->ri_mask.sin.sin_addr)) { 2147 syntax_error(gettext( 2148 "route: bad prefix length: %d\n"), 2149 masklen); 2150 return (B_FALSE); 2151 } 2152 rcip->ri_mask.sin.sin_family = rcip->ri_af; 2153 rcip->ri_addrs |= RTA_NETMASK; 2154 } 2155 return (B_TRUE); 2156 case RTA_GATEWAY: 2157 case RTA_IFA: 2158 case RTA_NETMASK: 2159 case RTA_SRC: 2160 return (in_getaddr(s, &su->sin, NULL, which, hpp, atype, 2161 rcip)); 2162 default: 2163 quit(gettext("Internal Error"), EINVAL); 2164 /* NOTREACHED */ 2165 } 2166 default: 2167 quit(gettext("Internal Error"), EINVAL); 2168 /* NOTREACHED */ 2169 } 2170 return (B_TRUE); 2171 } 2172 2173 /* 2174 * Interpret an argument as an IPv4 network address of some kind, 2175 * returning B_TRUE on success or B_FALSE on failure. 2176 * This function will cause an exit() on failure if exit_on_failure is set. 2177 * 2178 * Note that this tries host interpretation before network interpretation, 2179 * except when -net has been given and the destination address is being parsed. 2180 * 2181 * If the plenp argument is non-NULL, allow <addr>/<n> syntax and 2182 * pass out <n> in *plenp. 2183 * If <n> doesn't parse return BAD_ADDR as *plenp. 2184 * If no /<n> is present return NO_PREFIX as *plenp. 2185 */ 2186 static boolean_t 2187 in_getaddr(char *s, struct sockaddr_in *sin, int *plenp, int which, 2188 struct hostent **hpp, addr_type_t atype, rtcmd_irep_t *rcip) 2189 { 2190 struct hostent *hp; 2191 struct netent *np; 2192 in_addr_t val; 2193 char str[BUFSIZ]; 2194 2195 (void) strlcpy(str, s, sizeof (str)); 2196 2197 /* 2198 * If plenp is non-NULL, /<n> syntax for netmask is allowed. 2199 */ 2200 if (plenp != NULL) { 2201 char *cp; 2202 2203 *plenp = in_getprefixlen(str, IP_ABITS); 2204 if (*plenp == BAD_ADDR) 2205 return (B_FALSE); 2206 cp = strchr(str, '/'); 2207 if (cp != NULL) 2208 *cp = '\0'; 2209 } else if (strchr(str, '/') != NULL) { 2210 syntax_error(gettext("route: %s: unexpected '/'\n"), str); 2211 return (B_FALSE); 2212 } 2213 2214 (void) memset(sin, 0, sizeof (*sin)); 2215 sin->sin_family = AF_INET; 2216 2217 /* 2218 * Handle 255.255.255.255 as a special case first. 2219 */ 2220 if (strcmp(str, "255.255.255.255") == 0) { 2221 sin->sin_addr.s_addr = INADDR_BROADCAST; 2222 return (B_TRUE); 2223 } 2224 2225 val = inet_addr(str); 2226 if (val != (in_addr_t)-1) { 2227 /* Numeric address */ 2228 sin->sin_addr.s_addr = val; 2229 if (which == RTA_DST) { 2230 if (atype == ADDR_TYPE_NET || 2231 (atype == ADDR_TYPE_ANY && 2232 inet_lnaof(sin->sin_addr) == INADDR_ANY)) { 2233 /* This looks like a network address. */ 2234 inet_makenetandmask(rcip, ntohl(val), 2235 sin); 2236 } 2237 } 2238 return (B_TRUE); 2239 } 2240 /* Host or net name */ 2241 if (which != RTA_DST || atype != ADDR_TYPE_NET) { 2242 /* A host name is allowed. */ 2243 if ((hp = gethostbyname(str)) != NULL) { 2244 *hpp = hp; 2245 (void) memmove(&sin->sin_addr, hp->h_addr, 2246 hp->h_length); 2247 return (B_TRUE); 2248 } 2249 } 2250 if (atype != ADDR_TYPE_HOST) { 2251 /* A network name is allowed */ 2252 if ((np = getnetbyname(str)) != NULL && 2253 (val = np->n_net) != 0) { 2254 if (which == RTA_DST) { 2255 inet_makenetandmask(rcip, val, sin); 2256 } 2257 return (B_TRUE); 2258 } 2259 } 2260 syntax_error(gettext("%s: bad value\n"), s); 2261 return (B_FALSE); 2262 } 2263 2264 /* 2265 * Interpret an argument as an IPv6 network address of some kind, 2266 * returning B_TRUE on success or B_FALSE on failure. 2267 * This function will cause an exit() on failure if exit_on_failure is set. 2268 * 2269 * If the last argument is non-NULL allow a <addr>/<n> syntax and 2270 * pass out <n> in *plenp. 2271 * If <n> doesn't parse return BAD_ADDR as *plenp. 2272 * If no /<n> is present return NO_PREFIX as *plenp. 2273 */ 2274 static boolean_t 2275 in6_getaddr(char *s, struct sockaddr_in6 *sin6, int *plenp, 2276 struct hostent **hpp) 2277 { 2278 struct hostent *hp; 2279 char str[BUFSIZ]; 2280 int error_num; 2281 2282 (void) strlcpy(str, s, sizeof (str)); 2283 2284 /* 2285 * If plenp is non-NULL, /<n> syntax for netmask is allowed. 2286 */ 2287 if (plenp != NULL) { 2288 char *cp; 2289 2290 *plenp = in_getprefixlen(str, IPV6_ABITS); 2291 if (*plenp == BAD_ADDR) 2292 return (B_FALSE); 2293 cp = strchr(str, '/'); 2294 if (cp != NULL) 2295 *cp = '\0'; 2296 } else if (strchr(str, '/') != NULL) { 2297 syntax_error(gettext("route: %s: unexpected '/'\n"), str); 2298 return (B_FALSE); 2299 } 2300 2301 (void) memset(sin6, 0, sizeof (struct sockaddr_in6)); 2302 sin6->sin6_family = AF_INET6; 2303 2304 hp = getipnodebyname(str, AF_INET6, 0, &error_num); 2305 if (hp != NULL) { 2306 *hpp = hp; 2307 (void) memmove(&sin6->sin6_addr, hp->h_addr, hp->h_length); 2308 return (B_TRUE); 2309 } 2310 if (error_num == TRY_AGAIN) { 2311 /* 2312 * This isn't a problem if we aren't going to use the address 2313 * right away. 2314 */ 2315 if (!exit_on_error) { 2316 return (B_TRUE); 2317 } 2318 syntax_error(gettext("route: %s: bad address (try " 2319 "again later)\n"), s); 2320 return (B_FALSE); 2321 } 2322 syntax_error(gettext("route: %s: bad address\n"), s); 2323 return (B_FALSE); 2324 } 2325 2326 /* 2327 * Parse <addr>/<n> syntax and return the integer n. 2328 * If <addr> is missing or <n> is not a valid integer, this function calls 2329 * syntax_error() and returns BAD_ADDR. 2330 * if n is not between 0 and max_plen inclusive, this functions calls 2331 * syntax_error() and returns BAD_ADDR. 2332 * If /<n> is not present, this function returns NO_PREFIX. 2333 * The string addr is not modified. 2334 */ 2335 int 2336 in_getprefixlen(char *addr, int max_plen) 2337 { 2338 int prefixlen; 2339 char *str, *end; 2340 2341 str = strchr(addr, '/'); 2342 if (str == addr) { 2343 syntax_error(gettext("route: %s: unexpected '/'\n"), addr); 2344 return (BAD_ADDR); 2345 } 2346 if (str == NULL) 2347 return (NO_PREFIX); 2348 str++; 2349 2350 errno = 0; 2351 prefixlen = strtoul(str, &end, 10); 2352 if (errno != 0 || str == end) { 2353 syntax_error(gettext("route: bad prefix length %s\n"), str); 2354 return (BAD_ADDR); 2355 } 2356 if (prefixlen > max_plen) { 2357 syntax_error(gettext("route: prefix length %s out of range\n"), 2358 str); 2359 return (BAD_ADDR); 2360 } 2361 return (prefixlen); 2362 } 2363 2364 /* 2365 * Convert a prefix length to a mask. 2366 * Returns B_TRUE if ok. B_FALSE otherwise. 2367 * Assumes the mask array is zeroed by the caller. 2368 */ 2369 boolean_t 2370 in_prefixlentomask(int prefixlen, int maxlen, uchar_t *mask) 2371 { 2372 if (prefixlen < 0 || prefixlen > maxlen) 2373 return (B_FALSE); 2374 2375 while (prefixlen > 0) { 2376 if (prefixlen >= 8) { 2377 *mask++ = 0xFF; 2378 prefixlen -= 8; 2379 continue; 2380 } 2381 *mask |= 1 << (8 - prefixlen); 2382 prefixlen--; 2383 } 2384 return (B_TRUE); 2385 } 2386 2387 void 2388 rtmonitor(int argc, char *argv[]) 2389 { 2390 int n; 2391 intmax_t msg[2048 / sizeof (intmax_t)]; 2392 2393 if (tflag) 2394 exit(0); 2395 verbose = B_TRUE; 2396 if (argc > 1) { 2397 argv++; 2398 if (argc == 2 && **argv == '-') { 2399 switch (keyword(*argv + 1)) { 2400 case K_INET: 2401 af = AF_INET; 2402 break; 2403 case K_LINK: 2404 af = AF_LINK; 2405 break; 2406 case K_INET6: 2407 af = AF_INET6; 2408 break; 2409 default: 2410 usage(*argv); 2411 /* NOTREACHED */ 2412 } 2413 } else { 2414 usage(*argv); 2415 } 2416 (void) close(s); 2417 s = socket(PF_ROUTE, SOCK_RAW, af); 2418 if (s < 0) 2419 quit("socket", errno); 2420 } 2421 for (;;) { 2422 n = read(s, msg, sizeof (msg)); 2423 if (n <= 0) 2424 quit("read", errno); 2425 (void) printf("got message of size %d\n", n); 2426 print_rtmsg((struct rt_msghdr *)msg, n); 2427 } 2428 } 2429 2430 int 2431 rtmsg(rtcmd_irep_t *newrt) 2432 { 2433 static int seq; 2434 int rlen; 2435 char *cp = m_rtmsg.m_space; 2436 int l; 2437 2438 errno = 0; 2439 (void) memset(&m_rtmsg, 0, sizeof (m_rtmsg)); 2440 2441 if (newrt->ri_cmd == RTM_GET) { 2442 newrt->ri_ifp.sa.sa_family = AF_LINK; 2443 newrt->ri_addrs |= RTA_IFP; 2444 } 2445 2446 #define rtm m_rtmsg.m_rtm 2447 rtm.rtm_type = newrt->ri_cmd; 2448 rtm.rtm_flags = newrt->ri_flags; 2449 rtm.rtm_version = RTM_VERSION; 2450 rtm.rtm_seq = ++seq; 2451 rtm.rtm_addrs = newrt->ri_addrs; 2452 rtm.rtm_rmx = newrt->ri_metrics; 2453 rtm.rtm_inits = newrt->ri_inits; 2454 2455 #define NEXTADDR(w, u) \ 2456 if (newrt->ri_addrs & (w)) { \ 2457 l = ROUNDUP_LONG(salen(&u.sa)); \ 2458 (void) memmove(cp, &(u), l); \ 2459 cp += l; \ 2460 if (verbose) \ 2461 sodump(&(u), #u); \ 2462 } 2463 NEXTADDR(RTA_DST, newrt->ri_dst); 2464 NEXTADDR(RTA_GATEWAY, newrt->ri_gate); 2465 NEXTADDR(RTA_NETMASK, newrt->ri_mask); 2466 NEXTADDR(RTA_IFP, newrt->ri_ifp); 2467 NEXTADDR(RTA_IFA, newrt->ri_ifa); 2468 /* 2469 * RTA_SRC has overloaded meaning. It can represent the 2470 * src address of incoming or outgoing packets. 2471 */ 2472 NEXTADDR(RTA_SRC, newrt->ri_src); 2473 #undef NEXTADDR 2474 2475 if (newrt->ri_rtsa_cnt > 0) { 2476 /* LINTED: aligned */ 2477 rtm_ext_t *rtm_ext = (rtm_ext_t *)cp; 2478 tsol_rtsecattr_t *rtsecattr; 2479 2480 rtm_ext->rtmex_type = RTMEX_GATEWAY_SECATTR; 2481 rtm_ext->rtmex_len = TSOL_RTSECATTR_SIZE(1); 2482 2483 rtsecattr = (tsol_rtsecattr_t *)(rtm_ext + 1); 2484 rtsecattr->rtsa_cnt = 1; 2485 2486 bcopy(&newrt->ri_rtsa, rtsecattr->rtsa_attr, 2487 sizeof (newrt->ri_rtsa)); 2488 cp = (char *)(rtsecattr->rtsa_attr + 1); 2489 } 2490 2491 rtm.rtm_msglen = l = cp - (char *)&m_rtmsg; 2492 2493 if (verbose) 2494 print_rtmsg(&rtm, l); 2495 if (debugonly) 2496 return (0); 2497 if ((rlen = write(s, (char *)&m_rtmsg, l)) < 0) { 2498 switch (errno) { 2499 case ESRCH: 2500 case EBUSY: 2501 case ENOBUFS: 2502 case EEXIST: 2503 case ENETUNREACH: 2504 case EHOSTUNREACH: 2505 case EPERM: 2506 break; 2507 default: 2508 perror(gettext("writing to routing socket")); 2509 break; 2510 } 2511 return (-1); 2512 } else if (rlen < (int)rtm.rtm_msglen) { 2513 (void) fprintf(stderr, 2514 gettext("route: write to routing socket got only %d for " 2515 "len\n"), rlen); 2516 return (-1); 2517 } 2518 if (newrt->ri_cmd == RTM_GET) { 2519 do { 2520 l = read(s, (char *)&m_rtmsg, sizeof (m_rtmsg)); 2521 } while (l > 0 && (rtm.rtm_seq != seq || rtm.rtm_pid != pid)); 2522 if (l < 0) { 2523 (void) fprintf(stderr, 2524 gettext("route: read from routing socket: %s\n"), 2525 strerror(errno)); 2526 } else { 2527 print_getmsg(newrt, &rtm, l); 2528 } 2529 } 2530 #undef rtm 2531 return (0); 2532 } 2533 2534 static char *msgtypes[] = { 2535 "", 2536 "RTM_ADD: Add Route", 2537 "RTM_DELETE: Delete Route", 2538 "RTM_CHANGE: Change Metrics or flags", 2539 "RTM_GET: Report Metrics", 2540 "RTM_LOSING: Kernel Suspects Partitioning", 2541 "RTM_REDIRECT: Told to use different route", 2542 "RTM_MISS: Lookup failed on this address", 2543 "RTM_LOCK: fix specified metrics", 2544 "RTM_OLDADD: caused by SIOCADDRT", 2545 "RTM_OLDDEL: caused by SIOCDELRT", 2546 "RTM_RESOLVE: Route created by cloning", 2547 "RTM_NEWADDR: address being added to iface", 2548 "RTM_DELADDR: address being removed from iface", 2549 "RTM_IFINFO: iface status change", 2550 0, 2551 }; 2552 2553 #define NMSGTYPES (sizeof (msgtypes) / sizeof (msgtypes[0])) 2554 2555 static char metricnames[] = 2556 "\011pksent\010rttvar\7rtt\6ssthresh\5sendpipe\4recvpipe\3expire\2hopcount" 2557 "\1mtu"; 2558 static char routeflags[] = 2559 "\1UP\2GATEWAY\3HOST\4REJECT\5DYNAMIC\6MODIFIED\7DONE\010MASK_PRESENT" 2560 "\011CLONING\012XRESOLVE\013LLINFO\014STATIC\015BLACKHOLE" 2561 "\016PRIVATE\017PROTO2\020PROTO1\021MULTIRT\022SETSRC"; 2562 static char ifnetflags[] = 2563 "\1UP\2BROADCAST\3DEBUG\4LOOPBACK\5PTP\6NOTRAILERS\7RUNNING\010NOARP" 2564 "\011PPROMISC\012ALLMULTI\013INTELLIGENT\014MULTICAST" 2565 "\015MULTI_BCAST\016UNNUMBERED\017DHCP\020PRIVATE" 2566 "\021NOXMIT\022NOLOCAL\023DEPRECATED\024ADDRCONF" 2567 "\025ROUTER\026NONUD\027ANYCAST\030NORTEXCH\031IPv4\032IPv6" 2568 "\034NOFAILOVER\035FAILED\036STANDBY\037INACTIVE\040OFFLINE" 2569 "\041XRESOLV\042COS\043PREFERRED\044TEMPORARY\045FIXEDMTU\046VIRTUAL" 2570 "\047DUPLICATE"; 2571 static char addrnames[] = 2572 "\1DST\2GATEWAY\3NETMASK\4GENMASK\5IFP\6IFA\7AUTHOR\010BRD\011SRC"; 2573 2574 void 2575 print_rtmsg(struct rt_msghdr *rtm, int msglen) 2576 { 2577 struct if_msghdr *ifm; 2578 struct ifa_msghdr *ifam; 2579 2580 if (!verbose) 2581 return; 2582 if (rtm->rtm_version != RTM_VERSION) { 2583 (void) printf("routing message version %d not understood\n", 2584 rtm->rtm_version); 2585 return; 2586 } 2587 if (rtm->rtm_msglen != msglen) { 2588 (void) printf("message length mismatch, in packet %d, " 2589 "returned %d\n", 2590 rtm->rtm_msglen, msglen); 2591 if (msglen > rtm->rtm_msglen) 2592 msglen = rtm->rtm_msglen; 2593 } 2594 /* 2595 * Since rtm->rtm_type is unsigned, we'll just check the case of zero 2596 * and the upper-bound of (NMSGTYPES - 1). 2597 */ 2598 if (rtm->rtm_type == 0 || rtm->rtm_type >= (NMSGTYPES - 1)) { 2599 (void) printf("routing message type %d not understood\n", 2600 rtm->rtm_type); 2601 return; 2602 } 2603 (void) printf("%s: len %d, ", msgtypes[rtm->rtm_type], msglen); 2604 switch (rtm->rtm_type) { 2605 case RTM_IFINFO: 2606 ifm = (struct if_msghdr *)rtm; 2607 (void) printf("if# %d, flags:", ifm->ifm_index); 2608 bprintf(stdout, ifm->ifm_flags, ifnetflags); 2609 pmsg_addrs((const char *)(ifm + 1), msglen - sizeof (*ifm), 2610 ifm->ifm_addrs); 2611 break; 2612 case RTM_NEWADDR: 2613 case RTM_DELADDR: 2614 ifam = (struct ifa_msghdr *)rtm; 2615 (void) printf("metric %d, flags:", ifam->ifam_metric); 2616 bprintf(stdout, ifam->ifam_flags, routeflags); 2617 pmsg_addrs((const char *)(ifam + 1), msglen - sizeof (*ifam), 2618 ifam->ifam_addrs); 2619 break; 2620 default: 2621 (void) printf("pid: %ld, seq %d, errno %d, flags:", 2622 rtm->rtm_pid, rtm->rtm_seq, rtm->rtm_errno); 2623 bprintf(stdout, rtm->rtm_flags, routeflags); 2624 pmsg_common(rtm, msglen); 2625 break; 2626 } 2627 } 2628 2629 void 2630 print_getmsg(rtcmd_irep_t *req_rt, struct rt_msghdr *rtm, int msglen) 2631 { 2632 struct sockaddr *dst = NULL, *gate = NULL, *mask = NULL, *src = NULL; 2633 struct sockaddr_dl *ifp = NULL; 2634 struct sockaddr *sa; 2635 char *cp; 2636 int i; 2637 2638 (void) printf(" route to: %s\n", routename(&req_rt->ri_dst.sa)); 2639 if (rtm->rtm_version != RTM_VERSION) { 2640 (void) fprintf(stderr, 2641 gettext("routing message version %d not understood\n"), 2642 rtm->rtm_version); 2643 return; 2644 } 2645 if (rtm->rtm_msglen > (ushort_t)msglen) { 2646 (void) fprintf(stderr, 2647 gettext("message length mismatch, in packet %d, " 2648 "returned %d\n"), rtm->rtm_msglen, msglen); 2649 } 2650 if (rtm->rtm_errno) { 2651 (void) fprintf(stderr, "RTM_GET: %s (errno %d)\n", 2652 strerror(rtm->rtm_errno), rtm->rtm_errno); 2653 return; 2654 } 2655 cp = ((char *)(rtm + 1)); 2656 if (rtm->rtm_addrs != 0) { 2657 for (i = 1; i != 0; i <<= 1) { 2658 if (i & rtm->rtm_addrs) { 2659 /* LINTED */ 2660 sa = (struct sockaddr *)cp; 2661 switch (i) { 2662 case RTA_DST: 2663 dst = sa; 2664 break; 2665 case RTA_GATEWAY: 2666 gate = sa; 2667 break; 2668 case RTA_NETMASK: 2669 mask = sa; 2670 break; 2671 case RTA_IFP: 2672 if (sa->sa_family == AF_LINK && 2673 ((struct sockaddr_dl *)sa)-> 2674 sdl_nlen != 0) 2675 ifp = (struct sockaddr_dl *)sa; 2676 break; 2677 case RTA_SRC: 2678 src = sa; 2679 break; 2680 } 2681 ADVANCE(cp, sa); 2682 } 2683 } 2684 } 2685 if (dst != NULL && mask != NULL) 2686 mask->sa_family = dst->sa_family; /* XXX */ 2687 if (dst != NULL) 2688 (void) printf("destination: %s\n", routename(dst)); 2689 if (mask != NULL) { 2690 boolean_t savenflag = nflag; 2691 2692 nflag = B_TRUE; 2693 (void) printf(" mask: %s\n", routename(mask)); 2694 nflag = savenflag; 2695 } 2696 if (gate != NULL && rtm->rtm_flags & RTF_GATEWAY) 2697 (void) printf(" gateway: %s\n", routename(gate)); 2698 if (src != NULL && rtm->rtm_flags & RTF_SETSRC) 2699 (void) printf(" setsrc: %s\n", routename(src)); 2700 if (ifp != NULL) { 2701 if (verbose) { 2702 int i; 2703 2704 (void) printf(" interface: %.*s index %d address ", 2705 ifp->sdl_nlen, ifp->sdl_data, ifp->sdl_index); 2706 for (i = ifp->sdl_nlen; 2707 i < ifp->sdl_nlen + ifp->sdl_alen; 2708 i++) { 2709 (void) printf("%02x ", 2710 ifp->sdl_data[i] & 0xFF); 2711 } 2712 (void) printf("\n"); 2713 } else { 2714 (void) printf(" interface: %.*s\n", 2715 ifp->sdl_nlen, ifp->sdl_data); 2716 } 2717 } 2718 (void) printf(" flags: "); 2719 bprintf(stdout, rtm->rtm_flags, routeflags); 2720 2721 #define lock(f) ((rtm->rtm_rmx.rmx_locks & RTV_ ## f) ? 'L' : ' ') 2722 #define msec(u) (((u) + 500) / 1000) /* usec to msec */ 2723 2724 (void) printf("\n%s\n", " recvpipe sendpipe ssthresh rtt,ms " 2725 "rttvar,ms hopcount mtu expire"); 2726 (void) printf("%8d%c ", rtm->rtm_rmx.rmx_recvpipe, lock(RPIPE)); 2727 (void) printf("%8d%c ", rtm->rtm_rmx.rmx_sendpipe, lock(SPIPE)); 2728 (void) printf("%8d%c ", rtm->rtm_rmx.rmx_ssthresh, lock(SSTHRESH)); 2729 (void) printf("%8d%c ", msec(rtm->rtm_rmx.rmx_rtt), lock(RTT)); 2730 (void) printf("%8d%c ", msec(rtm->rtm_rmx.rmx_rttvar), lock(RTTVAR)); 2731 (void) printf("%8d%c ", rtm->rtm_rmx.rmx_hopcount, lock(HOPCOUNT)); 2732 (void) printf("%8d%c ", rtm->rtm_rmx.rmx_mtu, lock(MTU)); 2733 if (rtm->rtm_rmx.rmx_expire) 2734 rtm->rtm_rmx.rmx_expire -= time(0); 2735 (void) printf("%8d%c", rtm->rtm_rmx.rmx_expire, lock(EXPIRE)); 2736 #undef lock 2737 #undef msec 2738 #define RTA_IGN \ 2739 (RTA_DST|RTA_GATEWAY|RTA_NETMASK|RTA_IFP|RTA_IFA|RTA_BRD|RTA_SRC) 2740 if (verbose) { 2741 pmsg_common(rtm, msglen); 2742 } else { 2743 const char *sptr, *endptr; 2744 const struct sockaddr *sa; 2745 uint_t addrs; 2746 2747 /* Not verbose; just print out the exceptional cases */ 2748 if (rtm->rtm_addrs &~ RTA_IGN) { 2749 (void) printf("\nsockaddrs: "); 2750 bprintf(stdout, rtm->rtm_addrs, addrnames); 2751 } 2752 sptr = (const char *)(rtm + 1); 2753 endptr = (const char *)rtm + msglen; 2754 addrs = rtm->rtm_addrs; 2755 while (addrs != 0 && sptr + sizeof (*sa) <= endptr) { 2756 addrs &= addrs - 1; 2757 /* LINTED */ 2758 sa = (const struct sockaddr *)sptr; 2759 ADVANCE(sptr, sa); 2760 } 2761 if (addrs == 0) 2762 pmsg_secattr(sptr, endptr - sptr, " secattr: "); 2763 (void) putchar('\n'); 2764 } 2765 #undef RTA_IGN 2766 } 2767 2768 static void 2769 pmsg_common(const struct rt_msghdr *rtm, size_t msglen) 2770 { 2771 (void) printf("\nlocks: "); 2772 bprintf(stdout, (int)rtm->rtm_rmx.rmx_locks, metricnames); 2773 (void) printf(" inits: "); 2774 bprintf(stdout, (int)rtm->rtm_inits, metricnames); 2775 pmsg_addrs((const char *)(rtm + 1), msglen - sizeof (*rtm), 2776 rtm->rtm_addrs); 2777 } 2778 2779 static void 2780 pmsg_addrs(const char *cp, size_t msglen, uint_t addrs) 2781 { 2782 const struct sockaddr *sa; 2783 const char *maxptr; 2784 int i; 2785 2786 if (addrs != 0) { 2787 (void) printf("\nsockaddrs: "); 2788 bprintf(stdout, addrs, addrnames); 2789 (void) putchar('\n'); 2790 maxptr = cp + msglen; 2791 for (i = 1; i != 0 && cp + sizeof (*sa) <= maxptr; i <<= 1) { 2792 if (i & addrs) { 2793 /* LINTED */ 2794 sa = (const struct sockaddr *)cp; 2795 (void) printf(" %s", routename(sa)); 2796 ADVANCE(cp, sa); 2797 } 2798 } 2799 if (i != 0) 2800 msglen = 0; 2801 else 2802 msglen = maxptr - cp; 2803 } 2804 pmsg_secattr(cp, msglen, "secattr: "); 2805 (void) putchar('\n'); 2806 (void) fflush(stdout); 2807 } 2808 2809 void 2810 bprintf(FILE *fp, int b, char *s) 2811 { 2812 int i; 2813 boolean_t gotsome = B_FALSE; 2814 2815 if (b == 0) 2816 return; 2817 while ((i = *s++) != 0) { 2818 if (b & (1 << (i - 1))) { 2819 if (!gotsome) 2820 i = '<'; 2821 else 2822 i = ','; 2823 (void) putc(i, fp); 2824 gotsome = B_TRUE; 2825 for (; (i = *s) > ' '; s++) 2826 (void) putc(i, fp); 2827 } else { 2828 while (*s > ' ') 2829 s++; 2830 } 2831 } 2832 if (gotsome) 2833 (void) putc('>', fp); 2834 } 2835 2836 int 2837 keyword(const char *cp) 2838 { 2839 struct keytab *kt = keywords; 2840 2841 while (kt->kt_cp && strcmp(kt->kt_cp, cp)) 2842 kt++; 2843 return (kt->kt_i); 2844 } 2845 2846 void 2847 sodump(su_t *su, char *which) 2848 { 2849 static char obuf[INET6_ADDRSTRLEN]; 2850 2851 switch (su->sa.sa_family) { 2852 case AF_LINK: 2853 (void) printf("%s: link %s; ", 2854 which, link_ntoa(&su->sdl)); 2855 break; 2856 case AF_INET: 2857 (void) printf("%s: inet %s; ", 2858 which, inet_ntoa(su->sin.sin_addr)); 2859 break; 2860 case AF_INET6: 2861 if (inet_ntop(AF_INET6, (void *)&su->sin6.sin6_addr, obuf, 2862 INET6_ADDRSTRLEN) != NULL) { 2863 (void) printf("%s: inet6 %s; ", which, obuf); 2864 break; 2865 } 2866 /* FALLTHROUGH */ 2867 default: 2868 quit(gettext("Internal Error"), EINVAL); 2869 /* NOTREACHED */ 2870 } 2871 (void) fflush(stdout); 2872 } 2873 2874 /* States */ 2875 #define VIRGIN 0 2876 #define GOTONE 1 2877 #define GOTTWO 2 2878 #define RESET 3 2879 /* Inputs */ 2880 #define DIGIT (4*0) 2881 #define END (4*1) 2882 #define DELIM (4*2) 2883 #define LETTER (4*3) 2884 2885 void 2886 sockaddr(char *addr, struct sockaddr *sa) 2887 { 2888 char *cp = (char *)sa; 2889 int size = salen(sa); 2890 char *cplim = cp + size; 2891 int byte = 0, state = VIRGIN, new; 2892 2893 (void) memset(cp, 0, size); 2894 cp++; 2895 do { 2896 if ((*addr >= '0') && (*addr <= '9')) { 2897 new = *addr - '0'; 2898 } else if ((*addr >= 'a') && (*addr <= 'f')) { 2899 new = *addr - 'a' + 10; 2900 } else if ((*addr >= 'A') && (*addr <= 'F')) { 2901 new = *addr - 'A' + 10; 2902 } else if (*addr == 0) { 2903 state |= END; 2904 } else { 2905 state |= DELIM; 2906 } 2907 addr++; 2908 switch (state /* | INPUT */) { 2909 case GOTTWO | DIGIT: 2910 *cp++ = byte; 2911 /* FALLTHROUGH */ 2912 case VIRGIN | DIGIT: 2913 state = GOTONE; byte = new; continue; 2914 case GOTONE | DIGIT: 2915 state = GOTTWO; byte = new + (byte << 4); continue; 2916 default: /* | DELIM */ 2917 state = VIRGIN; *cp++ = byte; byte = 0; continue; 2918 case GOTONE | END: 2919 case GOTTWO | END: 2920 *cp++ = byte; 2921 /* FALLTHROUGH */ 2922 case VIRGIN | END: 2923 break; 2924 } 2925 break; 2926 } while (cp < cplim); 2927 } 2928 2929 int 2930 salen(const struct sockaddr *sa) 2931 { 2932 switch (sa->sa_family) { 2933 case AF_INET: 2934 return (sizeof (struct sockaddr_in)); 2935 case AF_LINK: 2936 return (sizeof (struct sockaddr_dl)); 2937 case AF_INET6: 2938 return (sizeof (struct sockaddr_in6)); 2939 default: 2940 return (sizeof (struct sockaddr)); 2941 } 2942 } 2943 2944 void 2945 link_addr(const char *addr, struct sockaddr_dl *sdl) 2946 { 2947 char *cp = sdl->sdl_data; 2948 char *cplim = sizeof (struct sockaddr_dl) + (char *)sdl; 2949 int byte = 0, state = VIRGIN, new; 2950 2951 (void) memset(sdl, 0, sizeof (struct sockaddr_dl)); 2952 sdl->sdl_family = AF_LINK; 2953 do { 2954 state &= ~LETTER; 2955 if ((*addr >= '0') && (*addr <= '9')) { 2956 new = *addr - '0'; 2957 } else if ((*addr >= 'a') && (*addr <= 'f')) { 2958 new = *addr - 'a' + 10; 2959 } else if ((*addr >= 'A') && (*addr <= 'F')) { 2960 new = *addr - 'A' + 10; 2961 } else if (*addr == 0) { 2962 state |= END; 2963 } else if (state == VIRGIN && 2964 (((*addr >= 'A') && (*addr <= 'Z')) || 2965 ((*addr >= 'a') && (*addr <= 'z')))) { 2966 state |= LETTER; 2967 } else { 2968 state |= DELIM; 2969 } 2970 addr++; 2971 switch (state /* | INPUT */) { 2972 case VIRGIN | DIGIT: 2973 case VIRGIN | LETTER: 2974 *cp++ = addr[-1]; 2975 continue; 2976 case VIRGIN | DELIM: 2977 state = RESET; 2978 sdl->sdl_nlen = cp - sdl->sdl_data; 2979 continue; 2980 case GOTTWO | DIGIT: 2981 *cp++ = byte; 2982 /* FALLTHROUGH */ 2983 case RESET | DIGIT: 2984 state = GOTONE; 2985 byte = new; 2986 continue; 2987 case GOTONE | DIGIT: 2988 state = GOTTWO; 2989 byte = new + (byte << 4); 2990 continue; 2991 default: /* | DELIM */ 2992 state = RESET; 2993 *cp++ = byte; 2994 byte = 0; 2995 continue; 2996 case GOTONE | END: 2997 case GOTTWO | END: 2998 *cp++ = byte; 2999 /* FALLTHROUGH */ 3000 case RESET | END: 3001 break; 3002 } 3003 break; 3004 } while (cp < cplim); 3005 sdl->sdl_alen = cp - LLADDR(sdl); 3006 } 3007 3008 static char hexlist[] = "0123456789abcdef"; 3009 3010 char * 3011 link_ntoa(const struct sockaddr_dl *sdl) 3012 { 3013 static char obuf[64]; 3014 char *out = obuf; 3015 int i; 3016 uchar_t *in = (uchar_t *)LLADDR(sdl); 3017 uchar_t *inlim = in + sdl->sdl_alen; 3018 boolean_t firsttime = B_TRUE; 3019 3020 if (sdl->sdl_nlen) { 3021 (void) memcpy(obuf, sdl->sdl_data, sdl->sdl_nlen); 3022 out += sdl->sdl_nlen; 3023 if (sdl->sdl_alen) 3024 *out++ = ':'; 3025 } 3026 while (in < inlim) { 3027 if (firsttime) 3028 firsttime = B_FALSE; 3029 else 3030 *out++ = '.'; 3031 i = *in++; 3032 if (i > 0xf) { 3033 out[1] = hexlist[i & 0xf]; 3034 i >>= 4; 3035 out[0] = hexlist[i]; 3036 out += 2; 3037 } else { 3038 *out++ = hexlist[i]; 3039 } 3040 } 3041 *out = 0; 3042 return (obuf); 3043 } 3044 3045 static mib_item_t * 3046 mibget(int sd) 3047 { 3048 intmax_t buf[512 / sizeof (intmax_t)]; 3049 int flags; 3050 int i, j, getcode; 3051 struct strbuf ctlbuf, databuf; 3052 struct T_optmgmt_req *tor = (struct T_optmgmt_req *)buf; 3053 struct T_optmgmt_ack *toa = (struct T_optmgmt_ack *)buf; 3054 struct T_error_ack *tea = (struct T_error_ack *)buf; 3055 struct opthdr *req; 3056 mib_item_t *first_item = NULL; 3057 mib_item_t *last_item = NULL; 3058 mib_item_t *temp; 3059 3060 tor->PRIM_type = T_SVR4_OPTMGMT_REQ; 3061 tor->OPT_offset = sizeof (struct T_optmgmt_req); 3062 tor->OPT_length = sizeof (struct opthdr); 3063 tor->MGMT_flags = T_CURRENT; 3064 req = (struct opthdr *)&tor[1]; 3065 req->level = MIB2_IP; /* any MIB2_xxx value ok here */ 3066 req->name = 0; 3067 req->len = 0; 3068 3069 ctlbuf.buf = (char *)buf; 3070 ctlbuf.len = tor->OPT_length + tor->OPT_offset; 3071 flags = 0; 3072 if (putmsg(sd, &ctlbuf, NULL, flags) < 0) { 3073 perror("mibget: putmsg (ctl)"); 3074 return (NULL); 3075 } 3076 /* 3077 * each reply consists of a ctl part for one fixed structure 3078 * or table, as defined in mib2.h. The format is a T_OPTMGMT_ACK, 3079 * containing an opthdr structure. level/name identify the entry, 3080 * len is the size of the data part of the message. 3081 */ 3082 req = (struct opthdr *)&toa[1]; 3083 ctlbuf.maxlen = sizeof (buf); 3084 for (j = 1; ; j++) { 3085 flags = 0; 3086 getcode = getmsg(sd, &ctlbuf, NULL, &flags); 3087 if (getcode < 0) { 3088 perror("mibget: getmsg (ctl)"); 3089 if (verbose) { 3090 (void) fprintf(stderr, 3091 "# level name len\n"); 3092 i = 0; 3093 for (last_item = first_item; last_item != NULL; 3094 last_item = last_item->next_item) { 3095 (void) printf("%d %4ld %5ld %ld\n", 3096 ++i, last_item->group, 3097 last_item->mib_id, 3098 last_item->length); 3099 } 3100 } 3101 break; 3102 } 3103 if (getcode == 0 && 3104 ctlbuf.len >= sizeof (struct T_optmgmt_ack) && 3105 toa->PRIM_type == T_OPTMGMT_ACK && 3106 toa->MGMT_flags == T_SUCCESS && 3107 req->len == 0) { 3108 if (verbose) { 3109 (void) printf("mibget getmsg() %d returned EOD " 3110 "(level %lu, name %lu)\n", j, req->level, 3111 req->name); 3112 } 3113 return (first_item); /* this is EOD msg */ 3114 } 3115 3116 if (ctlbuf.len >= sizeof (struct T_error_ack) && 3117 tea->PRIM_type == T_ERROR_ACK) { 3118 (void) fprintf(stderr, gettext("mibget %d gives " 3119 "T_ERROR_ACK: TLI_error = 0x%lx, UNIX_error = " 3120 "0x%lx\n"), j, tea->TLI_error, tea->UNIX_error); 3121 errno = (tea->TLI_error == TSYSERR) 3122 ? tea->UNIX_error : EPROTO; 3123 break; 3124 } 3125 3126 if (getcode != MOREDATA || 3127 ctlbuf.len < sizeof (struct T_optmgmt_ack) || 3128 toa->PRIM_type != T_OPTMGMT_ACK || 3129 toa->MGMT_flags != T_SUCCESS) { 3130 (void) printf("mibget getmsg(ctl) %d returned %d, " 3131 "ctlbuf.len = %d, PRIM_type = %ld\n", 3132 j, getcode, ctlbuf.len, toa->PRIM_type); 3133 if (toa->PRIM_type == T_OPTMGMT_ACK) { 3134 (void) printf("T_OPTMGMT_ACK: " 3135 "MGMT_flags = 0x%lx, req->len = %ld\n", 3136 toa->MGMT_flags, req->len); 3137 } 3138 errno = ENOMSG; 3139 break; 3140 } 3141 3142 temp = malloc(sizeof (mib_item_t)); 3143 if (temp == NULL) { 3144 perror("mibget: malloc"); 3145 break; 3146 } 3147 if (last_item != NULL) 3148 last_item->next_item = temp; 3149 else 3150 first_item = temp; 3151 last_item = temp; 3152 last_item->next_item = NULL; 3153 last_item->group = req->level; 3154 last_item->mib_id = req->name; 3155 last_item->length = req->len; 3156 last_item->valp = malloc(req->len); 3157 if (verbose) { 3158 (void) printf("msg %d: group = %4ld mib_id = %5ld " 3159 "length = %ld\n", 3160 j, last_item->group, last_item->mib_id, 3161 last_item->length); 3162 } 3163 3164 databuf.maxlen = last_item->length; 3165 databuf.buf = (char *)last_item->valp; 3166 databuf.len = 0; 3167 flags = 0; 3168 getcode = getmsg(sd, NULL, &databuf, &flags); 3169 if (getcode < 0) { 3170 perror("mibget: getmsg (data)"); 3171 break; 3172 } else if (getcode != 0) { 3173 (void) printf("mibget getmsg(data) returned %d, " 3174 "databuf.maxlen = %d, databuf.len = %d\n", 3175 getcode, databuf.maxlen, databuf.len); 3176 break; 3177 } 3178 } 3179 3180 /* 3181 * On error, free all the allocated mib_item_t objects. 3182 */ 3183 while (first_item != NULL) { 3184 last_item = first_item; 3185 first_item = first_item->next_item; 3186 free(last_item); 3187 } 3188 return (NULL); 3189 } 3190 3191 /* 3192 * print label security attributes for gateways. 3193 */ 3194 static void 3195 pmsg_secattr(const char *sptr, size_t msglen, const char *labelstr) 3196 { 3197 rtm_ext_t rtm_ext; 3198 tsol_rtsecattr_t sp; 3199 struct rtsa_s *rtsa = &sp.rtsa_attr[0]; 3200 const char *endptr; 3201 char buf[256]; 3202 int i; 3203 3204 if (!is_system_labeled()) 3205 return; 3206 3207 endptr = sptr + msglen; 3208 3209 for (;;) { 3210 if (sptr + sizeof (rtm_ext_t) + sizeof (sp) > endptr) 3211 return; 3212 3213 bcopy(sptr, &rtm_ext, sizeof (rtm_ext)); 3214 sptr += sizeof (rtm_ext); 3215 if (rtm_ext.rtmex_type == RTMEX_GATEWAY_SECATTR) 3216 break; 3217 sptr += rtm_ext.rtmex_len; 3218 } 3219 3220 /* bail if this entry is corrupt or overruns buffer length */ 3221 if (rtm_ext.rtmex_len < sizeof (sp) || 3222 sptr + rtm_ext.rtmex_len > endptr) 3223 return; 3224 3225 /* run up just to the end of this extension */ 3226 endptr = sptr + rtm_ext.rtmex_len; 3227 3228 bcopy(sptr, &sp, sizeof (sp)); 3229 sptr += sizeof (sp); 3230 3231 if (sptr + (sp.rtsa_cnt - 1) * sizeof (*rtsa) != endptr) 3232 return; 3233 3234 for (i = 0; i < sp.rtsa_cnt; i++) { 3235 if (i > 0) { 3236 /* first element is part of sp initalized above */ 3237 bcopy(sptr, rtsa, sizeof (*rtsa)); 3238 sptr += sizeof (*rtsa); 3239 } 3240 (void) printf("\n%s%s", labelstr, rtsa_to_str(rtsa, buf, 3241 sizeof (buf))); 3242 } 3243 } 3244