xref: /titanic_44/usr/src/cmd/cmd-inet/usr.sbin/route.c (revision ad09f8b827db90c9a0093f0b6382803fa64a5fd1)
1 /*
2  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
3  * Use is subject to license terms.
4  */
5 
6 /* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T	*/
7 /* All Rights Reserved	*/
8 
9 /* Copyright (c) 1990  Mentat Inc. */
10 
11 /*
12  *
13  * Copyright (c) 1983, 1989, 1991, 1993
14  *	The Regents of the University of California.  All rights reserved.
15  *
16  * Redistribution and use in source and binary forms, with or without
17  * modification, are permitted provided that the following conditions
18  * are met:
19  * 1. Redistributions of source code must retain the above copyright
20  *    notice, this list of conditions and the following disclaimer.
21  * 2. Redistributions in binary form must reproduce the above copyright
22  *    notice, this list of conditions and the following disclaimer in the
23  *    documentation and/or other materials provided with the distribution.
24  * 3. All advertising materials mentioning features or use of this software
25  *    must display the following acknowledgement:
26  *	This product includes software developed by the University of
27  *	California, Berkeley and its contributors.
28  * 4. Neither the name of the University nor the names of its contributors
29  *    may be used to endorse or promote products derived from this software
30  *    without specific prior written permission.
31  *
32  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
33  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
34  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
35  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
36  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
37  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
38  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
39  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
40  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
41  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
42  * SUCH DAMAGE.
43  *
44  *	@(#)route.c	8.6 (Berkeley) 4/28/95
45  *	@(#)linkaddr.c	8.1 (Berkeley) 6/4/93
46  */
47 
48 #include <sys/param.h>
49 #include <sys/file.h>
50 #include <sys/socket.h>
51 #include <sys/ioctl.h>
52 #include <sys/stat.h>
53 #include <sys/stream.h>
54 #include <sys/sysmacros.h>
55 #include <sys/tihdr.h>
56 #include <sys/types.h>
57 #include <sys/ccompile.h>
58 
59 #include <net/if.h>
60 #include <net/route.h>
61 #include <net/if_dl.h>
62 #include <netinet/in.h>
63 #include <arpa/inet.h>
64 #include <netdb.h>
65 #include <inet/mib2.h>
66 #include <inet/ip.h>
67 
68 #include <limits.h>
69 #include <locale.h>
70 
71 #include <errno.h>
72 #include <unistd.h>
73 #include <stdio.h>
74 #include <stdlib.h>
75 #include <stddef.h>
76 #include <string.h>
77 #include <stropts.h>
78 #include <fcntl.h>
79 #include <stdarg.h>
80 #include <assert.h>
81 #include <strings.h>
82 
83 #include <libtsnet.h>
84 #include <tsol/label.h>
85 
86 static struct keytab {
87 	char	*kt_cp;
88 	int	kt_i;
89 } keywords[] = {
90 #define	K_ADD		1
91 	{"add",		K_ADD},
92 #define	K_BLACKHOLE	2
93 	{"blackhole",	K_BLACKHOLE},
94 #define	K_CHANGE	3
95 	{"change",	K_CHANGE},
96 #define	K_CLONING	4
97 	{"cloning",	K_CLONING},
98 #define	K_DELETE	5
99 	{"delete",	K_DELETE},
100 #define	K_DST		6
101 	{"dst",		K_DST},
102 #define	K_EXPIRE	7
103 	{"expire",	K_EXPIRE},
104 #define	K_FLUSH		8
105 	{"flush",	K_FLUSH},
106 #define	K_GATEWAY	9
107 	{"gateway",	K_GATEWAY},
108 #define	K_GET		11
109 	{"get",		K_GET},
110 #define	K_HOPCOUNT	12
111 	{"hopcount",	K_HOPCOUNT},
112 #define	K_HOST		13
113 	{"host",	K_HOST},
114 #define	K_IFA		14
115 	{"ifa",		K_IFA},
116 #define	K_IFACE		15
117 	{"iface",	K_IFACE},
118 #define	K_IFP		16
119 	{"ifp",		K_IFP},
120 #define	K_INET		17
121 	{"inet",	K_INET},
122 #define	K_INET6		18
123 	{"inet6",	K_INET6},
124 #define	K_INTERFACE	19
125 	{"interface",	K_INTERFACE},
126 #define	K_LINK		20
127 	{"link",	K_LINK},
128 #define	K_LOCK		21
129 	{"lock",	K_LOCK},
130 #define	K_LOCKREST	22
131 	{"lockrest",	K_LOCKREST},
132 #define	K_MASK		23
133 	{"mask",	K_MASK},
134 #define	K_MONITOR	24
135 	{"monitor",	K_MONITOR},
136 #define	K_MTU		25
137 	{"mtu",		K_MTU},
138 #define	K_NET		26
139 	{"net",		K_NET},
140 #define	K_NETMASK	27
141 	{"netmask",	K_NETMASK},
142 #define	K_NOSTATIC	28
143 	{"nostatic",	K_NOSTATIC},
144 #define	K_PRIVATE	29
145 	{"private",	K_PRIVATE},
146 #define	K_PROTO1	30
147 	{"proto1",	K_PROTO1},
148 #define	K_PROTO2	31
149 	{"proto2",	K_PROTO2},
150 #define	K_RECVPIPE	32
151 	{"recvpipe",	K_RECVPIPE},
152 #define	K_REJECT	33
153 	{"reject",	K_REJECT},
154 #define	K_RTT		34
155 	{"rtt",		K_RTT},
156 #define	K_RTTVAR	35
157 	{"rttvar",	K_RTTVAR},
158 #define	K_SA		36
159 	{"sa",		K_SA},
160 #define	K_SENDPIPE	37
161 	{"sendpipe",	K_SENDPIPE},
162 #define	K_SSTHRESH	38
163 	{"ssthresh",	K_SSTHRESH},
164 #define	K_STATIC	39
165 	{"static",	K_STATIC},
166 #define	K_XRESOLVE	40
167 	{"xresolve",	K_XRESOLVE},
168 #define	K_MULTIRT	41
169 	{"multirt",	K_MULTIRT},
170 #define	K_SETSRC	42
171 	{"setsrc",	K_SETSRC},
172 #define	K_SHOW		43
173 	{"show",	K_SHOW},
174 #define	K_SECATTR	43
175 	{"secattr",	K_SECATTR},
176 #define	K_INDIRECT	44
177 	{"indirect",	K_INDIRECT},
178 	{0, 0}
179 };
180 
181 /*
182  * Size of buffers used to hold command lines from the saved route file as
183  * well as error strings.
184  */
185 #define	BUF_SIZE 2048
186 
187 typedef union sockunion {
188 	struct	sockaddr sa;
189 	struct	sockaddr_in sin;
190 	struct	sockaddr_dl sdl;
191 	struct	sockaddr_in6 sin6;
192 } su_t;
193 
194 /*
195  * This structure represents the digested information from parsing arguments
196  * to route add, change, delete, and get.
197  *
198  */
199 typedef struct rtcmd_irep {
200 	int ri_cmd;
201 	int ri_flags;
202 	int ri_af;
203 	ulong_t	ri_inits;
204 	struct rt_metrics ri_metrics;
205 	int ri_addrs;
206 	su_t ri_dst;
207 	char *ri_dest_str;
208 	su_t ri_src;
209 	su_t ri_gate;
210 	struct hostent *ri_gate_hp;
211 	char *ri_gate_str;
212 	su_t ri_mask;
213 	su_t ri_ifa;
214 	su_t ri_ifp;
215 	char *ri_ifp_str;
216 	int ri_rtsa_cnt;	/* number of gateway security attributes */
217 	struct rtsa_s ri_rtsa;	/* enough space for one attribute */
218 } rtcmd_irep_t;
219 
220 typedef struct	mib_item_s {
221 	struct mib_item_s *next_item;
222 	long group;
223 	long mib_id;
224 	long length;
225 	intmax_t *valp;
226 } mib_item_t;
227 
228 typedef enum {
229 	ADDR_TYPE_ANY,
230 	ADDR_TYPE_HOST,
231 	ADDR_TYPE_NET
232 } addr_type_t;
233 
234 typedef enum {
235 	SEARCH_MODE_NULL,
236 	SEARCH_MODE_PRINT,
237 	SEARCH_MODE_DEL
238 } search_mode_t;
239 
240 static boolean_t	args_to_rtcmd(rtcmd_irep_t *rcip, char **argv,
241     char *cmd_string);
242 static void		bprintf(FILE *fp, int b, char *s);
243 static boolean_t	compare_rtcmd(rtcmd_irep_t *srch_rt,
244     rtcmd_irep_t *file_rt);
245 static void		delRouteEntry(mib2_ipRouteEntry_t *rp,
246     mib2_ipv6RouteEntry_t *rp6, int seqno);
247 static void		del_rtcmd_irep(rtcmd_irep_t *rcip);
248 static void		flushroutes(int argc, char *argv[]);
249 static boolean_t	getaddr(rtcmd_irep_t *rcip, int which, char *s,
250     addr_type_t atype);
251 static boolean_t	in6_getaddr(char *s, struct sockaddr_in6 *sin6,
252     int *plenp, struct hostent **hpp);
253 static boolean_t	in_getaddr(char *s, struct sockaddr_in *sin,
254     int *plenp, int which, struct hostent **hpp, addr_type_t atype,
255     rtcmd_irep_t *rcip);
256 static int		in_getprefixlen(char *addr, int max_plen);
257 static boolean_t	in_prefixlentomask(int prefixlen, int maxlen,
258     uchar_t *mask);
259 static void		inet_makenetandmask(rtcmd_irep_t *rcip, in_addr_t net,
260     struct sockaddr_in *sin);
261 static in_addr_t	inet_makesubnetmask(in_addr_t addr, in_addr_t mask);
262 static int		keyword(const char *cp);
263 static void		link_addr(const char *addr, struct sockaddr_dl *sdl);
264 static char		*link_ntoa(const struct sockaddr_dl *sdl);
265 static mib_item_t	*mibget(int sd);
266 static char		*netname(struct sockaddr *sa);
267 static int		newroute(char **argv);
268 static rtcmd_irep_t	*new_rtcmd_irep(void);
269 static void		pmsg_addrs(const char *cp, size_t len, uint_t addrs);
270 static void		pmsg_common(const struct rt_msghdr *rtm, size_t len);
271 static void		print_getmsg(rtcmd_irep_t *req_rt,
272     struct rt_msghdr *rtm, int msglen);
273 static void		print_rtcmd_short(FILE *to, rtcmd_irep_t *rcip,
274     boolean_t gw_good, boolean_t to_saved);
275 static void		print_rtmsg(struct rt_msghdr *rtm, int msglen);
276 static void		quit(char *s, int err) __NORETURN;
277 static char		*routename(const struct sockaddr *sa);
278 static void		rtmonitor(int argc, char *argv[]);
279 static int		rtmsg(rtcmd_irep_t *rcip);
280 static int		salen(const struct sockaddr *sa);
281 static void		save_route(int argc, char **argv, int do_flush);
282 static void		save_string(char **dst, char *src);
283 static int		search_rtfile(FILE *fp, FILE *temp_fp, rtcmd_irep_t *rt,
284     search_mode_t mode);
285 static void		set_metric(rtcmd_irep_t *rcip, char *value, int key,
286     boolean_t lock);
287 static int		show_saved_routes(int argc);
288 static void		sockaddr(char *addr, struct sockaddr *sa);
289 static void		sodump(su_t *su, char *which);
290 static void		syntax_arg_missing(char *keyword);
291 static void		syntax_bad_keyword(char *keyword);
292 static void		syntax_error(char *err, ...);
293 static void		usage(char *cp);
294 static void		write_to_rtfile(FILE *fp, int argc, char **argv);
295 static void		pmsg_secattr(const char *, size_t, const char *);
296 
297 static pid_t		pid;
298 static int		s;
299 static boolean_t	nflag;
300 static int		af = AF_INET;
301 static boolean_t	qflag, tflag;
302 static boolean_t	verbose;
303 static boolean_t	debugonly;
304 static boolean_t	fflag;
305 static boolean_t	update_table;
306 static boolean_t	perm_flag;
307 static boolean_t	early_v6_keyword;
308 static char		perm_file_sfx[] = "/etc/inet/static_routes";
309 static char		*perm_file;
310 static char		temp_file_sfx[] = "/etc/inet/static_routes.tmp";
311 static char		*temp_file;
312 static struct in6_addr	in6_host_mask = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
313     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
314 /*
315  * WARNING:
316  * This next variable indicates whether certain functions exit when an error
317  * is detected in the user input.  Currently, exit_on_error is only set false
318  * in search_rtfile(), when argument are being parsed.  Only those functions
319  * used by search_rtfile() to parse its arguments are designed to work in
320  * both modes.  Take particular care in setting this false to ensure that any
321  * functions you call that might act on this flag properly return errors when
322  * exit_on_error is false.
323  */
324 static int		exit_on_error = B_TRUE;
325 
326 static struct {
327 	struct	rt_msghdr m_rtm;
328 	char	m_space[BUF_SIZE];
329 } m_rtmsg;
330 
331 /*
332  * Sizes of data structures extracted from the base mib.
333  * This allows the size of the tables entries to grow while preserving
334  * binary compatibility.
335  */
336 static int ipRouteEntrySize;
337 static int ipv6RouteEntrySize;
338 
339 #define	ROUNDUP_LONG(a) \
340 	((a) > 0 ? (1 + (((a) - 1) | (sizeof (long) - 1))) : sizeof (long))
341 #define	ADVANCE(x, n) ((x) += ROUNDUP_LONG(salen(n)))
342 #define	C(x)	((x) & 0xff)
343 
344 /*
345  * return values from in_getprefixlen()
346  */
347 #define	BAD_ADDR	-1	/* prefix is invalid */
348 #define	NO_PREFIX	-2	/* no prefix was found */
349 
350 void
351 usage(char *cp)
352 {
353 	if (cp != NULL) {
354 		(void) fprintf(stderr, gettext("route: botched keyword: %s\n"),
355 		    cp);
356 	}
357 	(void) fprintf(stderr, gettext("usage: route [ -fnpqv ] "
358 	    "[ -R <root-dir> ] cmd [[ -<qualifers> ] args ]\n"));
359 	exit(1);
360 	/* NOTREACHED */
361 }
362 
363 /*PRINTFLIKE1*/
364 void
365 syntax_error(char *err, ...)
366 {
367 	va_list args;
368 
369 	if (exit_on_error) {
370 		va_start(args, err);
371 		(void) vfprintf(stderr, err, args);
372 		va_end(args);
373 		exit(1);
374 	}
375 	/* NOTREACHED */
376 }
377 
378 void
379 syntax_bad_keyword(char *keyword)
380 {
381 	syntax_error(gettext("route: botched keyword: %s\n"), keyword);
382 }
383 
384 void
385 syntax_arg_missing(char *keyword)
386 {
387 	syntax_error(gettext("route: argument required following keyword %s\n"),
388 	    keyword);
389 }
390 
391 void
392 quit(char *s, int sverrno)
393 {
394 	(void) fprintf(stderr, "route: ");
395 	if (s != NULL)
396 		(void) fprintf(stderr, "%s: ", s);
397 	(void) fprintf(stderr, "%s\n", strerror(sverrno));
398 	exit(sverrno);
399 	/* NOTREACHED */
400 }
401 
402 int
403 main(int argc, char **argv)
404 {
405 	extern int optind;
406 	extern char *optarg;
407 	int ch;
408 	int rval;
409 	size_t size;
410 	const char *root_dir = NULL;
411 
412 	(void) setlocale(LC_ALL, "");
413 
414 #if !defined(TEXT_DOMAIN)
415 #define	TEXT_DOMAIN "SYS_TEST"
416 #endif
417 	(void) textdomain(TEXT_DOMAIN);
418 
419 	if (argc < 2)
420 		usage(NULL);
421 
422 	while ((ch = getopt(argc, argv, "R:nqdtvfp")) != EOF) {
423 		switch (ch) {
424 		case 'n':
425 			nflag = B_TRUE;
426 			break;
427 		case 'q':
428 			qflag = B_TRUE;
429 			break;
430 		case 'v':
431 			verbose = B_TRUE;
432 			break;
433 		case 't':
434 			tflag = B_TRUE;
435 			break;
436 		case 'd':
437 			debugonly = B_TRUE;
438 			break;
439 		case 'f':
440 			fflag = B_TRUE;
441 			break;
442 		case 'p':
443 			perm_flag = B_TRUE;
444 			break;
445 		case 'R':
446 			root_dir = optarg;
447 			break;
448 		case '?':
449 		default:
450 			usage(NULL);
451 			/* NOTREACHED */
452 		}
453 	}
454 	argc -= optind;
455 	argv += optind;
456 
457 	pid = getpid();
458 	if (tflag)
459 		s = open("/dev/null", O_WRONLY);
460 	else
461 		s = socket(PF_ROUTE, SOCK_RAW, 0);
462 	if (s < 0)
463 		quit("socket", errno);
464 
465 	/*
466 	 * Handle the -p and -R flags.  The -R flag only applies
467 	 * when the -p flag is set.
468 	 */
469 	if (root_dir == NULL) {
470 		perm_file = perm_file_sfx;
471 		temp_file = temp_file_sfx;
472 	} else {
473 		size = strlen(root_dir) + sizeof (perm_file_sfx);
474 		perm_file = malloc(size);
475 		if (perm_file == NULL)
476 			quit("malloc", errno);
477 		(void) snprintf(perm_file, size, "%s%s", root_dir,
478 		    perm_file_sfx);
479 		size = strlen(root_dir) + sizeof (temp_file_sfx);
480 		temp_file = malloc(size);
481 		if (temp_file == NULL)
482 			quit("malloc", errno);
483 		(void) snprintf(temp_file, size, "%s%s", root_dir,
484 		    temp_file_sfx);
485 	}
486 	/*
487 	 * Whether or not to act on the routing table.  The only time the
488 	 * routing table is not modified is when both -p and -R are present.
489 	 */
490 	update_table = (!perm_flag || root_dir == NULL);
491 	if (tflag)
492 		perm_flag = 0;
493 
494 	if (fflag) {
495 		/*
496 		 * Accept an address family keyword after the -f.  Since the
497 		 * default address family is AF_INET, reassign af only for the
498 		 * other valid address families.
499 		 */
500 		if (*argv != NULL) {
501 			switch (keyword(*argv)) {
502 			case K_INET6:
503 				af = AF_INET6;
504 				early_v6_keyword = B_TRUE;
505 				/* fallthrough */
506 			case K_INET:
507 				/* Skip over the address family parameter. */
508 				argc--;
509 				argv++;
510 				break;
511 			}
512 		}
513 		flushroutes(0, NULL);
514 	}
515 
516 	if (*argv != NULL) {
517 		switch (keyword(*argv)) {
518 		case K_GET:
519 		case K_CHANGE:
520 		case K_ADD:
521 		case K_DELETE:
522 			rval = 0;
523 			if (update_table) {
524 				rval = newroute(argv);
525 			}
526 			if (perm_flag && (rval == 0 || rval == EEXIST ||
527 			    rval == ESRCH)) {
528 				save_route(argc, argv, B_FALSE);
529 				return (0);
530 			}
531 			return (rval);
532 		case K_SHOW:
533 			if (perm_flag) {
534 				return (show_saved_routes(argc));
535 			} else {
536 				syntax_error(gettext(
537 				    "route: show command requires -p\n"));
538 			}
539 			/* NOTREACHED */
540 		case K_MONITOR:
541 			rtmonitor(argc, argv);
542 			/* NOTREACHED */
543 
544 		case K_FLUSH:
545 			flushroutes(argc, argv);
546 			return (0);
547 		}
548 	}
549 	if (!fflag)
550 		usage(*argv);
551 	return (0);
552 }
553 
554 /*
555  * Purge all entries in the routing tables not
556  * associated with network interfaces.
557  */
558 void
559 flushroutes(int argc, char *argv[])
560 {
561 	int seqno;
562 	int sd;	/* mib stream */
563 	mib_item_t	*item;
564 	mib2_ipRouteEntry_t *rp;
565 	mib2_ipv6RouteEntry_t *rp6;
566 	int oerrno;
567 	int off = 0;
568 	int on = 1;
569 
570 	if (argc > 1) {
571 		argv++;
572 		if (argc == 2 && **argv == '-') {
573 			/*
574 			 * The address family (preceded by a dash) may be used
575 			 * to flush the routes of that particular family.
576 			 */
577 			switch (keyword(*argv + 1)) {
578 			case K_INET:
579 				af = AF_INET;
580 				break;
581 			case K_LINK:
582 				af = AF_LINK;
583 				break;
584 			case K_INET6:
585 				af = AF_INET6;
586 				break;
587 			default:
588 				usage(*argv);
589 				/* NOTREACHED */
590 			}
591 		} else {
592 			usage(*argv);
593 		}
594 	}
595 	if (perm_flag) {
596 		/* This flushes the persistent route file */
597 		save_route(0, NULL, B_TRUE);
598 	}
599 	if (!update_table) {
600 		return;
601 	}
602 
603 	if (setsockopt(s, SOL_SOCKET, SO_USELOOPBACK, (char *)&off,
604 	    sizeof (off)) < 0)
605 		quit("setsockopt", errno);
606 
607 	sd = open("/dev/ip", O_RDWR);
608 	oerrno = errno;
609 	if (sd < 0) {
610 		switch (errno) {
611 		case EACCES:
612 			(void) fprintf(stderr,
613 			    gettext("route: flush: insufficient privileges\n"));
614 			exit(oerrno);
615 			/* NOTREACHED */
616 		default:
617 			quit(gettext("can't open mib stream"), oerrno);
618 			/* NOTREACHED */
619 		}
620 	}
621 	if ((item = mibget(sd)) == NULL)
622 		quit("mibget", errno);
623 	if (verbose) {
624 		(void) printf("Examining routing table from "
625 		    "T_SVR4_OPTMGMT_REQ\n");
626 	}
627 	seqno = 0;		/* ??? */
628 	switch (af) {
629 	case AF_INET:
630 		/* Extract ipRouteEntrySize */
631 		for (; item != NULL; item = item->next_item) {
632 			if (item->mib_id != 0)
633 				continue;
634 			if (item->group == MIB2_IP) {
635 				ipRouteEntrySize =
636 				    ((mib2_ip_t *)item->valp)->ipRouteEntrySize;
637 				assert(IS_P2ALIGNED(ipRouteEntrySize,
638 				    sizeof (mib2_ipRouteEntry_t *)));
639 				break;
640 			}
641 		}
642 		if (ipRouteEntrySize == 0) {
643 			(void) fprintf(stderr,
644 			    gettext("ipRouteEntrySize can't be determined.\n"));
645 			exit(1);
646 		}
647 		for (; item != NULL; item = item->next_item) {
648 			/*
649 			 * skip all the other trash that comes up the mib stream
650 			 */
651 			if (item->group != MIB2_IP ||
652 			    item->mib_id != MIB2_IP_ROUTE)
653 				continue;
654 			for (rp = (mib2_ipRouteEntry_t *)item->valp;
655 			    (char *)rp < (char *)item->valp + item->length;
656 			    /* LINTED */
657 			    rp = (mib2_ipRouteEntry_t *)
658 			    ((char *)rp + ipRouteEntrySize)) {
659 				delRouteEntry(rp, NULL, seqno);
660 				seqno++;
661 			}
662 			break;
663 		}
664 		break;
665 	case AF_INET6:
666 		/* Extract ipv6RouteEntrySize */
667 		for (; item != NULL; item = item->next_item) {
668 			if (item->mib_id != 0)
669 				continue;
670 			if (item->group == MIB2_IP6) {
671 				ipv6RouteEntrySize =
672 				    ((mib2_ipv6IfStatsEntry_t *)item->valp)->
673 				    ipv6RouteEntrySize;
674 				assert(IS_P2ALIGNED(ipv6RouteEntrySize,
675 				    sizeof (mib2_ipv6RouteEntry_t *)));
676 				break;
677 			}
678 		}
679 		if (ipv6RouteEntrySize == 0) {
680 			(void) fprintf(stderr, gettext(
681 			    "ipv6RouteEntrySize cannot be determined.\n"));
682 			exit(1);
683 		}
684 		for (; item != NULL; item = item->next_item) {
685 			/*
686 			 * skip all the other trash that comes up the mib stream
687 			 */
688 			if (item->group != MIB2_IP6 ||
689 			    item->mib_id != MIB2_IP6_ROUTE)
690 				continue;
691 			for (rp6 = (mib2_ipv6RouteEntry_t *)item->valp;
692 			    (char *)rp6 < (char *)item->valp + item->length;
693 			    /* LINTED */
694 			    rp6 = (mib2_ipv6RouteEntry_t *)
695 			    ((char *)rp6 + ipv6RouteEntrySize)) {
696 				delRouteEntry(NULL, rp6, seqno);
697 				seqno++;
698 			}
699 			break;
700 		}
701 		break;
702 	}
703 
704 	if (setsockopt(s, SOL_SOCKET, SO_USELOOPBACK, (char *)&on,
705 	    sizeof (on)) < 0)
706 		quit("setsockopt", errno);
707 }
708 
709 /*
710  * Given the contents of a mib_item_t of id type MIB2_IP_ROUTE or
711  * MIB2_IP6_ROUTE, construct and send an RTM_DELETE routing socket message in
712  * order to facilitate the flushing of RTF_GATEWAY routes.
713  */
714 static void
715 delRouteEntry(mib2_ipRouteEntry_t *rp, mib2_ipv6RouteEntry_t *rp6, int seqno)
716 {
717 	char *cp;
718 	int ire_type;
719 	int rlen;
720 	struct rt_msghdr *rtm;
721 	struct sockaddr_in sin;
722 	struct sockaddr_in6 sin6;
723 	int slen;
724 
725 	if (rp != NULL)
726 		ire_type = rp->ipRouteInfo.re_ire_type;
727 	else
728 		ire_type = rp6->ipv6RouteInfo.re_ire_type;
729 	if (ire_type != IRE_DEFAULT &&
730 	    ire_type != IRE_PREFIX &&
731 	    ire_type != IRE_HOST &&
732 	    ire_type != IRE_HOST_REDIRECT)
733 		return;
734 
735 	rtm = &m_rtmsg.m_rtm;
736 	(void) memset(rtm, 0, sizeof (m_rtmsg));
737 	rtm->rtm_type = RTM_DELETE;
738 	rtm->rtm_seq = seqno;
739 	rtm->rtm_flags |= RTF_GATEWAY;
740 	rtm->rtm_version = RTM_VERSION;
741 	rtm->rtm_addrs = RTA_DST | RTA_GATEWAY | RTA_NETMASK;
742 	cp = m_rtmsg.m_space;
743 	if (rp != NULL) {
744 		slen = sizeof (struct sockaddr_in);
745 		if (rp->ipRouteMask == IP_HOST_MASK)
746 			rtm->rtm_flags |= RTF_HOST;
747 		(void) memset(&sin, 0, slen);
748 		sin.sin_family = AF_INET;
749 		sin.sin_addr.s_addr = rp->ipRouteDest;
750 		(void) memmove(cp, &sin, slen);
751 		cp += slen;
752 		sin.sin_addr.s_addr = rp->ipRouteNextHop;
753 		(void) memmove(cp, &sin, slen);
754 		cp += slen;
755 		sin.sin_addr.s_addr = rp->ipRouteMask;
756 		(void) memmove(cp, &sin, slen);
757 		cp += slen;
758 	} else {
759 		slen = sizeof (struct sockaddr_in6);
760 		if (rp6->ipv6RoutePfxLength == IPV6_ABITS)
761 			rtm->rtm_flags |= RTF_HOST;
762 		(void) memset(&sin6, 0, slen);
763 		sin6.sin6_family = AF_INET6;
764 		sin6.sin6_addr = rp6->ipv6RouteDest;
765 		(void) memmove(cp, &sin6, slen);
766 		cp += slen;
767 		sin6.sin6_addr = rp6->ipv6RouteNextHop;
768 		(void) memmove(cp, &sin6, slen);
769 		cp += slen;
770 		(void) memset(&sin6.sin6_addr, 0, sizeof (sin6.sin6_addr));
771 		(void) in_prefixlentomask(rp6->ipv6RoutePfxLength, IPV6_ABITS,
772 		    (uchar_t *)&sin6.sin6_addr.s6_addr);
773 		(void) memmove(cp, &sin6, slen);
774 		cp += slen;
775 	}
776 	rtm->rtm_msglen = cp - (char *)&m_rtmsg;
777 	if (debugonly) {
778 		/*
779 		 * In debugonly mode, the routing socket message to delete the
780 		 * current entry is not actually sent.  However if verbose is
781 		 * also set, the routing socket message that would have been
782 		 * is printed.
783 		 */
784 		if (verbose)
785 			print_rtmsg(rtm, rtm->rtm_msglen);
786 		return;
787 	}
788 
789 	rlen = write(s, (char *)&m_rtmsg, rtm->rtm_msglen);
790 	if (rlen < (int)rtm->rtm_msglen) {
791 		if (rlen < 0) {
792 			(void) fprintf(stderr,
793 			    gettext("route: write to routing socket: %s\n"),
794 			    strerror(errno));
795 		} else {
796 			(void) fprintf(stderr, gettext("route: write to "
797 			    "routing socket got only %d for rlen\n"), rlen);
798 		}
799 		return;
800 	}
801 	if (qflag) {
802 		/*
803 		 * In quiet mode, nothing is printed at all (unless the write()
804 		 * itself failed.
805 		 */
806 		return;
807 	}
808 	if (verbose) {
809 		print_rtmsg(rtm, rlen);
810 	} else {
811 		struct sockaddr *sa = (struct sockaddr *)(rtm + 1);
812 
813 		(void) printf("%-20.20s ",
814 		    rtm->rtm_flags & RTF_HOST ? routename(sa) :
815 		    netname(sa));
816 		/* LINTED */
817 		sa = (struct sockaddr *)(salen(sa) + (char *)sa);
818 		(void) printf("%-20.20s ", routename(sa));
819 		(void) printf("done\n");
820 	}
821 }
822 
823 /*
824  * Return the name of the host whose address is given.
825  */
826 char *
827 routename(const struct sockaddr *sa)
828 {
829 	char *cp;
830 	static char line[MAXHOSTNAMELEN + 1];
831 	struct hostent *hp = NULL;
832 	static char domain[MAXHOSTNAMELEN + 1];
833 	static boolean_t first = B_TRUE;
834 	struct in_addr in;
835 	struct in6_addr in6;
836 	int error_num;
837 	ushort_t *s;
838 	ushort_t *slim;
839 
840 	if (first) {
841 		first = B_FALSE;
842 		if (gethostname(domain, MAXHOSTNAMELEN) == 0 &&
843 		    (cp = strchr(domain, '.')))
844 			(void) strcpy(domain, cp + 1);
845 		else
846 			domain[0] = 0;
847 	}
848 
849 	if (salen(sa) == 0) {
850 		(void) strcpy(line, "default");
851 		return (line);
852 	}
853 	switch (sa->sa_family) {
854 
855 	case AF_INET:
856 		/* LINTED */
857 		in = ((struct sockaddr_in *)sa)->sin_addr;
858 
859 		cp = NULL;
860 		if (in.s_addr == INADDR_ANY)
861 			cp = "default";
862 		if (cp == NULL && !nflag) {
863 			hp = gethostbyaddr((char *)&in, sizeof (struct in_addr),
864 			    AF_INET);
865 			if (hp != NULL) {
866 				if (((cp = strchr(hp->h_name, '.')) != NULL) &&
867 				    (strcmp(cp + 1, domain) == 0))
868 					*cp = 0;
869 				cp = hp->h_name;
870 			}
871 		}
872 		if (cp != NULL) {
873 			(void) strncpy(line, cp, MAXHOSTNAMELEN);
874 			line[MAXHOSTNAMELEN] = '\0';
875 		} else {
876 			in.s_addr = ntohl(in.s_addr);
877 			(void) sprintf(line, "%u.%u.%u.%u", C(in.s_addr >> 24),
878 			    C(in.s_addr >> 16), C(in.s_addr >> 8),
879 			    C(in.s_addr));
880 		}
881 		break;
882 
883 	case AF_LINK:
884 		return (link_ntoa((struct sockaddr_dl *)sa));
885 
886 	case AF_INET6:
887 		/* LINTED */
888 		in6 = ((struct sockaddr_in6 *)sa)->sin6_addr;
889 
890 		cp = NULL;
891 		if (IN6_IS_ADDR_UNSPECIFIED(&in6))
892 			cp = "default";
893 		if (cp == NULL && !nflag) {
894 			hp = getipnodebyaddr((char *)&in6,
895 			    sizeof (struct in6_addr), AF_INET6, &error_num);
896 			if (hp != NULL) {
897 				if (((cp = strchr(hp->h_name, '.')) != NULL) &&
898 				    (strcmp(cp + 1, domain) == 0))
899 					*cp = 0;
900 				cp = hp->h_name;
901 			}
902 		}
903 		if (cp != NULL) {
904 			(void) strncpy(line, cp, MAXHOSTNAMELEN);
905 			line[MAXHOSTNAMELEN] = '\0';
906 		} else {
907 			(void) inet_ntop(AF_INET6, (void *)&in6, line,
908 			    INET6_ADDRSTRLEN);
909 		}
910 		if (hp != NULL)
911 			freehostent(hp);
912 
913 		break;
914 
915 	default:
916 		s = (ushort_t *)sa;
917 
918 		slim = s + ((salen(sa) + 1) >> 1);
919 		cp = line + sprintf(line, "(%d)", sa->sa_family);
920 
921 		while (++s < slim) /* start with sa->sa_data */
922 			cp += sprintf(cp, " %x", *s);
923 		break;
924 	}
925 	return (line);
926 }
927 
928 /*
929  * Return the name of the network whose address is given.
930  * The address is assumed to be that of a net or subnet, not a host.
931  */
932 static char *
933 netname(struct sockaddr *sa)
934 {
935 	char *cp = NULL;
936 	static char line[MAXHOSTNAMELEN + 1];
937 	struct netent *np;
938 	in_addr_t net, mask;
939 	int subnetshift;
940 	struct in_addr in;
941 	ushort_t *s;
942 	ushort_t *slim;
943 
944 	switch (sa->sa_family) {
945 
946 	case AF_INET:
947 		/* LINTED */
948 		in = ((struct sockaddr_in *)sa)->sin_addr;
949 
950 		in.s_addr = ntohl(in.s_addr);
951 		if (in.s_addr == INADDR_ANY) {
952 			cp = "default";
953 		} else if (!nflag) {
954 			if (IN_CLASSA(in.s_addr)) {
955 				mask = IN_CLASSA_NET;
956 				subnetshift = 8;
957 			} else if (IN_CLASSB(in.s_addr)) {
958 				mask = IN_CLASSB_NET;
959 				subnetshift = 8;
960 			} else {
961 				mask = IN_CLASSC_NET;
962 				subnetshift = 4;
963 			}
964 			/*
965 			 * If there are more bits than the standard mask
966 			 * would suggest, subnets must be in use.
967 			 * Guess at the subnet mask, assuming reasonable
968 			 * width subnet fields.
969 			 */
970 			while (in.s_addr &~ mask)
971 				mask = (long)mask >> subnetshift;
972 			net = in.s_addr & mask;
973 			while ((mask & 1) == 0)
974 				mask >>= 1, net >>= 1;
975 			np = getnetbyaddr(net, AF_INET);
976 			if (np != NULL)
977 				cp = np->n_name;
978 		}
979 		if (cp != NULL) {
980 			(void) strncpy(line, cp, MAXHOSTNAMELEN);
981 			line[MAXHOSTNAMELEN] = '\0';
982 		} else if ((in.s_addr & 0xffffff) == 0) {
983 			(void) sprintf(line, "%u", C(in.s_addr >> 24));
984 		} else if ((in.s_addr & 0xffff) == 0) {
985 			(void) sprintf(line, "%u.%u", C(in.s_addr >> 24),
986 			    C(in.s_addr >> 16));
987 		} else if ((in.s_addr & 0xff) == 0) {
988 			(void) sprintf(line, "%u.%u.%u", C(in.s_addr >> 24),
989 			    C(in.s_addr >> 16), C(in.s_addr >> 8));
990 		} else {
991 			(void) sprintf(line, "%u.%u.%u.%u", C(in.s_addr >> 24),
992 			    C(in.s_addr >> 16), C(in.s_addr >> 8),
993 			    C(in.s_addr));
994 		}
995 		break;
996 
997 	case AF_LINK:
998 		return (link_ntoa((struct sockaddr_dl *)sa));
999 
1000 	case AF_INET6:
1001 		return (routename(sa));
1002 
1003 	default:
1004 		/* LINTED */
1005 		s = (ushort_t *)sa->sa_data;
1006 
1007 		slim = s + ((salen(sa) + 1) >> 1);
1008 		cp = line + sprintf(line, "af %d:", sa->sa_family);
1009 
1010 		while (s < slim)
1011 			cp += sprintf(cp, " %x", *s++);
1012 		break;
1013 	}
1014 	return (line);
1015 }
1016 
1017 /*
1018  * Initialize a new structure.  Keep in mind that ri_dst_str, ri_gate_str and
1019  * ri_ifp_str will be freed by det_rtcmd_irep, so they should either be NULL
1020  * or point to dynamically allocated memory.
1021  */
1022 rtcmd_irep_t *
1023 new_rtcmd_irep(void)
1024 {
1025 	rtcmd_irep_t *rcip;
1026 
1027 	rcip = calloc(1, sizeof (rtcmd_irep_t));
1028 	if (rcip == NULL) {
1029 		quit("calloc", errno);
1030 	}
1031 	rcip->ri_af = af;
1032 	rcip->ri_flags = RTF_STATIC;
1033 	return (rcip);
1034 }
1035 
1036 void
1037 del_rtcmd_irep(rtcmd_irep_t *rcip)
1038 {
1039 	free(rcip->ri_dest_str);
1040 	free(rcip->ri_gate_str);
1041 	free(rcip->ri_ifp_str);
1042 	/*
1043 	 * IPv6 host entries come from getipnodebyname, which dynamically
1044 	 * allocates memory.  IPv4 host entries come from gethostbyname, which
1045 	 * returns static memory and cannot be freed with freehostent.
1046 	 */
1047 	if (rcip->ri_gate_hp != NULL &&
1048 	    rcip->ri_gate_hp->h_addrtype == AF_INET6)
1049 		freehostent(rcip->ri_gate_hp);
1050 	free(rcip);
1051 }
1052 
1053 void
1054 save_string(char **dst, char *src)
1055 {
1056 	free(*dst);
1057 	*dst = strdup(src);
1058 	if (*dst == NULL) {
1059 		quit("malloc", errno);
1060 	}
1061 }
1062 
1063 /*
1064  * Print the short form summary of a route command.
1065  * Eg. "add net default: gateway 10.0.0.1"
1066  * The final newline is not added, allowing the caller to append additional
1067  * information.
1068  */
1069 void
1070 print_rtcmd_short(FILE *to, rtcmd_irep_t *rcip, boolean_t gw_good,
1071     boolean_t to_saved)
1072 {
1073 	char *cmd;
1074 	char obuf[INET6_ADDRSTRLEN];
1075 
1076 	switch (rcip->ri_cmd) {
1077 	case RTM_ADD:
1078 		cmd = "add";
1079 		break;
1080 	case RTM_CHANGE:
1081 		cmd = "change";
1082 		break;
1083 	case RTM_DELETE:
1084 		cmd = "delete";
1085 		break;
1086 	case RTM_GET:
1087 		cmd = "get";
1088 		break;
1089 	default:
1090 		assert(0);
1091 	}
1092 
1093 	(void) fprintf(to, "%s%s %s %s", cmd,
1094 	    (to_saved) ? " persistent" : "",
1095 	    (rcip->ri_flags & RTF_HOST) ? "host" : "net",
1096 	    (rcip->ri_dest_str == NULL) ? "NULL" : rcip->ri_dest_str);
1097 
1098 	if (rcip->ri_gate_str != NULL) {
1099 		switch (rcip->ri_af) {
1100 		case AF_INET:
1101 			if (nflag) {
1102 				(void) fprintf(to, ": gateway %s",
1103 				    inet_ntoa(rcip->ri_gate.sin.sin_addr));
1104 			} else if (gw_good &&
1105 			    rcip->ri_gate_hp != NULL &&
1106 			    rcip->ri_gate_hp->h_addr_list[1] != NULL) {
1107 				/*
1108 				 * Print the actual address used in the case
1109 				 * where there was more than one address
1110 				 * available for the name, and one was used
1111 				 * successfully.
1112 				 */
1113 				(void) fprintf(to, ": gateway %s (%s)",
1114 				    rcip->ri_gate_str,
1115 				    inet_ntoa(rcip->ri_gate.sin.sin_addr));
1116 			} else {
1117 				(void) fprintf(to, ": gateway %s",
1118 				    rcip->ri_gate_str);
1119 			}
1120 			break;
1121 		case AF_INET6:
1122 			if (inet_ntop(AF_INET6,
1123 			    &rcip->ri_gate.sin6.sin6_addr, obuf,
1124 			    INET6_ADDRSTRLEN) != NULL) {
1125 				if (nflag) {
1126 					(void) fprintf(to, ": gateway %s",
1127 					    obuf);
1128 					break;
1129 				}
1130 				if (gw_good &&
1131 				    rcip->ri_gate_hp->h_addr_list[1] != NULL) {
1132 					(void) fprintf(to, ": gateway %s (%s)",
1133 					    rcip->ri_gate_str, obuf);
1134 					break;
1135 				}
1136 			}
1137 			/* FALLTHROUGH */
1138 		default:
1139 			(void) fprintf(to, ": gateway %s",
1140 			    rcip->ri_gate_str);
1141 			break;
1142 		}
1143 	}
1144 }
1145 
1146 void
1147 set_metric(rtcmd_irep_t *rcip, char *value, int key, boolean_t lock)
1148 {
1149 	int flag = 0;
1150 	uint_t noval, *valp = &noval;
1151 
1152 	switch (key) {
1153 #define	caseof(x, y, z)	\
1154 	case (x): valp = &(rcip->ri_metrics.z); flag = (y); break
1155 
1156 	caseof(K_MTU, RTV_MTU, rmx_mtu);
1157 	caseof(K_HOPCOUNT, RTV_HOPCOUNT, rmx_hopcount);
1158 	caseof(K_EXPIRE, RTV_EXPIRE, rmx_expire);
1159 	caseof(K_RECVPIPE, RTV_RPIPE, rmx_recvpipe);
1160 	caseof(K_SENDPIPE, RTV_SPIPE, rmx_sendpipe);
1161 	caseof(K_SSTHRESH, RTV_SSTHRESH, rmx_ssthresh);
1162 	caseof(K_RTT, RTV_RTT, rmx_rtt);
1163 	caseof(K_RTTVAR, RTV_RTTVAR, rmx_rttvar);
1164 #undef	caseof
1165 	}
1166 	rcip->ri_inits |= flag;
1167 	if (lock)
1168 		rcip->ri_metrics.rmx_locks |= flag;
1169 	*valp = atoi(value);
1170 }
1171 
1172 /*
1173  * Parse the options give in argv[], filling in rcip with the results.
1174  * If cmd_string is non-null, argc and argv are ignored, and cmd_string is
1175  * tokenized to produce the command line.  Cmd_string is tokenized using
1176  * strtok, which will overwrite whitespace in the string with nulls.
1177  *
1178  * Returns B_TRUE on success and B_FALSE on failure.
1179  */
1180 boolean_t
1181 args_to_rtcmd(rtcmd_irep_t *rcip, char **argv, char *cmd_string)
1182 {
1183 	const char *ws = "\f\n\r\t\v ";
1184 	char *tok = cmd_string;
1185 	char *keyword_str;
1186 	addr_type_t atype = ADDR_TYPE_ANY;
1187 	boolean_t iflag = B_FALSE;
1188 	boolean_t locknext = B_FALSE;
1189 	boolean_t lockrest = B_FALSE;
1190 	boolean_t dash_keyword;
1191 	int key;
1192 	char *err;
1193 
1194 	if (cmd_string == NULL) {
1195 		tok = argv[0];
1196 	} else {
1197 		tok = strtok(cmd_string, ws);
1198 	}
1199 
1200 	/*
1201 	 * The command keywords are already fully checked by main() or
1202 	 * search_rtfile().
1203 	 */
1204 	switch (*tok) {
1205 	case 'a':
1206 		rcip->ri_cmd = RTM_ADD;
1207 		break;
1208 	case 'c':
1209 		rcip->ri_cmd = RTM_CHANGE;
1210 		break;
1211 	case 'd':
1212 		rcip->ri_cmd = RTM_DELETE;
1213 		break;
1214 	case 'g':
1215 		rcip->ri_cmd = RTM_GET;
1216 		break;
1217 	default:
1218 		/* NOTREACHED */
1219 		quit(gettext("Internal Error"), EINVAL);
1220 		/* NOTREACHED */
1221 	}
1222 
1223 #define	NEXTTOKEN \
1224 	((tok = (cmd_string == NULL ? *++argv : strtok(NULL, ws))) != NULL)
1225 
1226 	while (NEXTTOKEN) {
1227 		keyword_str = tok;
1228 		if (*tok == '-') {
1229 			dash_keyword = B_TRUE;
1230 			key = keyword(tok + 1);
1231 		} else {
1232 			dash_keyword = B_FALSE;
1233 			key = keyword(tok);
1234 			if (key != K_HOST && key != K_NET) {
1235 				/* All others must be preceded by '-' */
1236 				key = 0;
1237 			}
1238 		}
1239 		switch (key) {
1240 		case K_HOST:
1241 			if (atype == ADDR_TYPE_NET) {
1242 				syntax_error(gettext("route: -host and -net "
1243 				    "are mutually exclusive\n"));
1244 				return (B_FALSE);
1245 			}
1246 			atype = ADDR_TYPE_HOST;
1247 			break;
1248 		case K_NET:
1249 			if (atype == ADDR_TYPE_HOST) {
1250 				syntax_error(gettext("route: -host and -net "
1251 				    "are mutually exclusive\n"));
1252 				return (B_FALSE);
1253 			}
1254 			atype = ADDR_TYPE_NET;
1255 			break;
1256 		case K_LINK:
1257 			rcip->ri_af = AF_LINK;
1258 			break;
1259 		case K_INET:
1260 			rcip->ri_af = AF_INET;
1261 			break;
1262 		case K_SA:
1263 			rcip->ri_af = PF_ROUTE;
1264 			break;
1265 		case K_INET6:
1266 			rcip->ri_af = AF_INET6;
1267 			break;
1268 		case K_IFACE:
1269 		case K_INTERFACE:
1270 			iflag = B_TRUE;
1271 			/* fallthrough */
1272 		case K_NOSTATIC:
1273 			rcip->ri_flags &= ~RTF_STATIC;
1274 			break;
1275 		case K_LOCK:
1276 			locknext = B_TRUE;
1277 			break;
1278 		case K_LOCKREST:
1279 			lockrest = B_TRUE;
1280 			break;
1281 		case K_REJECT:
1282 			rcip->ri_flags |= RTF_REJECT;
1283 			break;
1284 		case K_BLACKHOLE:
1285 			rcip->ri_flags |= RTF_BLACKHOLE;
1286 			break;
1287 		case K_PROTO1:
1288 			rcip->ri_flags |= RTF_PROTO1;
1289 			break;
1290 		case K_PROTO2:
1291 			rcip->ri_flags |= RTF_PROTO2;
1292 			break;
1293 		case K_CLONING:
1294 			rcip->ri_flags |= RTF_CLONING;
1295 			break;
1296 		case K_XRESOLVE:
1297 			rcip->ri_flags |= RTF_XRESOLVE;
1298 			break;
1299 		case K_STATIC:
1300 			rcip->ri_flags |= RTF_STATIC;
1301 			break;
1302 		case K_IFA:
1303 			if (!NEXTTOKEN) {
1304 				syntax_arg_missing(keyword_str);
1305 				return (B_FALSE);
1306 			}
1307 			if (!getaddr(rcip, RTA_IFA, tok, atype)) {
1308 				return (B_FALSE);
1309 			}
1310 			break;
1311 		case K_IFP:
1312 			if (!NEXTTOKEN) {
1313 				syntax_arg_missing(keyword_str);
1314 				return (B_FALSE);
1315 			}
1316 			if (!getaddr(rcip, RTA_IFP, tok, atype)) {
1317 				return (B_FALSE);
1318 			}
1319 			break;
1320 		case K_GATEWAY:
1321 			if (!NEXTTOKEN) {
1322 				syntax_arg_missing(keyword_str);
1323 				return (B_FALSE);
1324 			}
1325 			if (!getaddr(rcip, RTA_GATEWAY, tok, atype)) {
1326 				return (B_FALSE);
1327 			}
1328 			break;
1329 		case K_DST:
1330 			if (!NEXTTOKEN) {
1331 				syntax_arg_missing(keyword_str);
1332 				return (B_FALSE);
1333 			}
1334 			if (!getaddr(rcip, RTA_DST, tok, atype)) {
1335 				return (B_FALSE);
1336 			}
1337 			break;
1338 		case K_NETMASK:
1339 			if (!NEXTTOKEN) {
1340 				syntax_arg_missing(keyword_str);
1341 				return (B_FALSE);
1342 			}
1343 			if (!getaddr(rcip, RTA_NETMASK, tok, atype)) {
1344 				return (B_FALSE);
1345 			}
1346 			atype = ADDR_TYPE_NET;
1347 			break;
1348 		case K_MTU:
1349 		case K_HOPCOUNT:
1350 		case K_EXPIRE:
1351 		case K_RECVPIPE:
1352 		case K_SENDPIPE:
1353 		case K_SSTHRESH:
1354 		case K_RTT:
1355 		case K_RTTVAR:
1356 			if (!NEXTTOKEN) {
1357 				syntax_arg_missing(keyword_str);
1358 				return (B_FALSE);
1359 			}
1360 			set_metric(rcip, tok, key, locknext || lockrest);
1361 			locknext = B_FALSE;
1362 			break;
1363 		case K_PRIVATE:
1364 			rcip->ri_flags |= RTF_PRIVATE;
1365 			break;
1366 		case K_MULTIRT:
1367 			rcip->ri_flags |= RTF_MULTIRT;
1368 			break;
1369 		case K_SETSRC:
1370 			if (!NEXTTOKEN) {
1371 				syntax_arg_missing(keyword_str);
1372 				return (B_FALSE);
1373 			}
1374 			if (!getaddr(rcip, RTA_SRC, tok, atype)) {
1375 				return (B_FALSE);
1376 			}
1377 			rcip->ri_flags |= RTF_SETSRC;
1378 			break;
1379 		case K_SECATTR:
1380 			if (!NEXTTOKEN) {
1381 				syntax_arg_missing(keyword_str);
1382 				return (B_FALSE);
1383 			}
1384 			if (is_system_labeled()) {
1385 				int err;
1386 
1387 				if (rcip->ri_rtsa_cnt >= 1) {
1388 					syntax_error(gettext("route: can't "
1389 					    "specify more than one security "
1390 					    "attribute\n"));
1391 					return (B_FALSE);
1392 				}
1393 				if (!rtsa_keyword(tok, &rcip->ri_rtsa, &err,
1394 				    NULL)) {
1395 					syntax_error(gettext("route: "
1396 					    "bad security attribute: %s\n"),
1397 					    tsol_strerror(err, errno));
1398 					return (B_FALSE);
1399 				}
1400 				rcip->ri_rtsa_cnt++;
1401 			} else {
1402 				syntax_error(gettext("route: "
1403 				    "system is not labeled; cannot specify "
1404 				    "security attributes.\n"));
1405 				return (B_FALSE);
1406 			}
1407 			break;
1408 		case K_INDIRECT:
1409 			rcip->ri_flags |= RTF_INDIRECT;
1410 			break;
1411 		default:
1412 			if (dash_keyword) {
1413 				syntax_bad_keyword(tok + 1);
1414 				return (B_FALSE);
1415 			}
1416 			if ((rcip->ri_addrs & RTA_DST) == 0) {
1417 				if (!getaddr(rcip, RTA_DST, tok, atype)) {
1418 					return (B_FALSE);
1419 				}
1420 			} else if ((rcip->ri_addrs & RTA_GATEWAY) == 0) {
1421 				/*
1422 				 * For the gateway parameter, retrieve the
1423 				 * pointer to the struct hostent so that all
1424 				 * possible addresses can be tried until one
1425 				 * is successful.
1426 				 */
1427 				if (!getaddr(rcip, RTA_GATEWAY, tok, atype)) {
1428 					return (B_FALSE);
1429 				}
1430 			} else {
1431 				ulong_t metric;
1432 				/*
1433 				 * Assume that a regular number is a metric.
1434 				 * Needed for compatibility with old route
1435 				 * command syntax.
1436 				 */
1437 				errno = 0;
1438 				metric = strtoul(tok, &err, 10);
1439 				if (errno == 0 && *err == '\0' &&
1440 				    metric < 0x80000000ul) {
1441 					iflag = (metric == 0);
1442 					if (verbose) {
1443 						(void) printf("old usage of "
1444 						    "trailing number, assuming "
1445 						    "route %s\n", iflag ?
1446 						    "to if" : "via gateway");
1447 					}
1448 					continue;
1449 				}
1450 				if (!getaddr(rcip, RTA_NETMASK, tok, atype)) {
1451 					return (B_FALSE);
1452 				}
1453 			}
1454 		}
1455 	}
1456 #undef NEXTTOKEN
1457 
1458 	if ((rcip->ri_addrs & RTA_DST) == 0) {
1459 		syntax_error(gettext("route: destination required\n"));
1460 		return (B_FALSE);
1461 	} else if ((rcip->ri_cmd == RTM_ADD || rcip->ri_cmd == RTM_DELETE) &&
1462 	    (rcip->ri_addrs & RTA_GATEWAY) == 0) {
1463 		syntax_error(gettext(
1464 		    "route: gateway required for add or delete command\n"));
1465 		return (B_FALSE);
1466 	}
1467 
1468 	if (!iflag) {
1469 		rcip->ri_flags |= RTF_GATEWAY;
1470 	}
1471 
1472 	if (atype != ADDR_TYPE_NET) {
1473 		if (rcip->ri_addrs & RTA_NETMASK) {
1474 			/*
1475 			 * We know the netmask, so we can set the host flag
1476 			 * based on whether the netmask is the host netmask.
1477 			 */
1478 			if (rcip->ri_af == AF_INET &&
1479 			    rcip->ri_mask.sin.sin_addr.s_addr ==
1480 			    IP_HOST_MASK) {
1481 				rcip->ri_flags |= RTF_HOST;
1482 			}
1483 			if (rcip->ri_af == AF_INET6 &&
1484 			    memcmp(&rcip->ri_mask.sin6.sin6_addr,
1485 			    &in6_host_mask,
1486 			    sizeof (struct in6_addr)) == 0) {
1487 				rcip->ri_flags |= RTF_HOST;
1488 			}
1489 		} else {
1490 			/*
1491 			 * If no prefix mask has been saved at this point, it
1492 			 * only makes sense to treat the destination address
1493 			 * as a host address.
1494 			 */
1495 			rcip->ri_flags |= RTF_HOST;
1496 		}
1497 	}
1498 	return (B_TRUE);
1499 }
1500 
1501 /*
1502  * This command always seeks to the end of the file prior to writing.
1503  */
1504 void
1505 write_to_rtfile(FILE *fp, int argc, char **argv)
1506 {
1507 	char file_line[BUF_SIZE];
1508 	int len;
1509 	int i;
1510 
1511 	len = 0;
1512 	if (early_v6_keyword) {
1513 		/*
1514 		 * This flag is set when "inet6" was seen as an
1515 		 * argument to the -f flag.  Normally, when writing
1516 		 * routes to the persistent route file, everything on
1517 		 * the command line after "add" is saved verbatim.
1518 		 * In this case, the arguments after "add" may not be
1519 		 * sufficient, as the ipv6 keyword came before "add",
1520 		 * yet must be present in the persistent route file.
1521 		 */
1522 		len += snprintf(file_line, BUF_SIZE, "-inet6 ");
1523 	}
1524 	for (i = 0; argc > 0 && len < BUF_SIZE; i++, argc--) {
1525 		len += snprintf(&file_line[len], BUF_SIZE - len, "%s ",
1526 		    argv[i]);
1527 	}
1528 	if (len >= BUF_SIZE)
1529 		quit(gettext("Internal Error"), EINVAL);
1530 	file_line[len - 1] = '\n';
1531 	if (fseek(fp, 0, SEEK_END) != 0 ||
1532 	    fputs(file_line, fp) == EOF) {
1533 		quit(gettext("failed to write to route file"),
1534 		    errno);
1535 	}
1536 }
1537 
1538 boolean_t
1539 compare_rtcmd(rtcmd_irep_t *srch_rt, rtcmd_irep_t *file_rt)
1540 {
1541 	if (strcmp(srch_rt->ri_dest_str, file_rt->ri_dest_str) != 0 ||
1542 	    memcmp(&srch_rt->ri_mask, &file_rt->ri_mask, sizeof (su_t)) != 0) {
1543 		return (B_FALSE);
1544 	}
1545 	return (srch_rt->ri_gate_str == NULL ||
1546 	    strcmp(srch_rt->ri_gate_str, file_rt->ri_gate_str) == 0);
1547 }
1548 
1549 /*
1550  * Search the route file for routes matching the supplied route.  There are 3
1551  * modes of operation:
1552  *    SEARCH_MODE_RET - no side effects.
1553  *    SEARCH_MODE_PRINT - prints each matching line.
1554  *    SEARCH_MODE_DEL - copies all valid, non-matching lines to tmp_fp.
1555  *
1556  * In all cases, the number of matches is returned.  If rt is NULL, all routes
1557  * matching the global af value are considered matching.
1558  */
1559 int
1560 search_rtfile(FILE *fp, FILE *temp_fp, rtcmd_irep_t *rt, search_mode_t mode)
1561 {
1562 	char *tmp_buf;
1563 	int match_cnt;
1564 	boolean_t match;
1565 	char file_line[BUF_SIZE + 4] = "add ";
1566 	rtcmd_irep_t *thisrt;
1567 
1568 	match_cnt = 0;
1569 
1570 	/*
1571 	 * Leave space at the beginning of file_line for "add ".
1572 	 */
1573 	while (fgets(file_line + 4, BUF_SIZE, fp) != NULL) {
1574 
1575 		if (file_line[4] == '#' || file_line[4] == '\n') {
1576 			/* Handle comments and blank lines */
1577 			if (mode == SEARCH_MODE_DEL &&
1578 			    fputs(file_line + 4, temp_fp) == EOF) {
1579 				quit(gettext(
1580 				    "route: failed to write to temp file"),
1581 				    errno);
1582 			}
1583 			continue;
1584 		}
1585 		thisrt = new_rtcmd_irep();
1586 		/*
1587 		 * thisrt->ri_af defaults to whatever address family happens
1588 		 * to be set in the global af, but routes in the persistent
1589 		 * route file must be treated as AF_INET by default.
1590 		 */
1591 		thisrt->ri_af = AF_INET;
1592 
1593 		exit_on_error = B_FALSE;
1594 		tmp_buf = strdup(file_line);
1595 		/* args_to_rtcmd() will mangle the string passed. */
1596 		if (!args_to_rtcmd(thisrt, NULL, tmp_buf)) {
1597 			/* There was an error in args_to_rtcmd() or helpers */
1598 			del_rtcmd_irep(thisrt);
1599 			free(tmp_buf);
1600 			continue;
1601 		}
1602 		exit_on_error = B_TRUE;
1603 		free(tmp_buf);
1604 
1605 		if (thisrt->ri_gate_str == NULL) {
1606 			del_rtcmd_irep(thisrt);
1607 			continue;
1608 		}
1609 		match = (rt == NULL) ? (thisrt->ri_af == af) :
1610 		    compare_rtcmd(rt, thisrt);
1611 
1612 		if (match) match_cnt++;
1613 		if (match && mode == SEARCH_MODE_PRINT) {
1614 			(void) printf("persistent: route %s", file_line);
1615 		}
1616 		if (match && mode == SEARCH_MODE_DEL) {
1617 			thisrt->ri_cmd = RTM_DELETE;
1618 			print_rtcmd_short(stdout, thisrt, B_FALSE, B_TRUE);
1619 			(void) printf("\n");
1620 		}
1621 		del_rtcmd_irep(thisrt);
1622 
1623 		if (!match && mode == SEARCH_MODE_DEL &&
1624 		    fputs(file_line + 4, temp_fp) == EOF) {
1625 			quit(gettext("failed to write to temp file"),
1626 			    errno);
1627 		}
1628 	}
1629 	return (match_cnt);
1630 }
1631 
1632 /*
1633  * Perform the route operation given in argv on the persistent route file.
1634  * If do_flush is set, the persistent route file is flushed of all routes
1635  * matching the global family, and the arguments are ignored.
1636  */
1637 void
1638 save_route(int argc, char **argv, int do_flush)
1639 {
1640 	rtcmd_irep_t *rt;
1641 	int perm_fd;
1642 	FILE *perm_fp;
1643 	FILE *temp_fp;
1644 	mode_t fmode = S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH;
1645 	struct flock lock;
1646 	struct stat st;
1647 	const char commentstr[] =
1648 	    "# File generated by route(1M) - do not edit.\n";
1649 
1650 	perm_fd = open(perm_file, O_RDWR | O_CREAT, fmode);
1651 	if (perm_fd == -1 || fstat(perm_fd, &st) == -1)
1652 		quit("failed to open route file", errno);
1653 
1654 	lock.l_type = F_WRLCK;
1655 	lock.l_whence = SEEK_SET;
1656 	lock.l_start = 0;
1657 	lock.l_len = 0;
1658 	if (fcntl(perm_fd, F_SETLK, &lock) != 0) {
1659 		quit(gettext("failed to lock route file"), errno);
1660 		/* NOTREACHED */
1661 	}
1662 	if (st.st_size == 0 &&
1663 	    write(perm_fd, commentstr, sizeof (commentstr) - 1) !=
1664 	    sizeof (commentstr) - 1)
1665 		quit(gettext("failed to open route file"), errno);
1666 
1667 	if ((perm_fp = fdopen(perm_fd, "r+")) == NULL) {
1668 		quit(gettext("failed to open route file"), errno);
1669 		/* NOTREACHED */
1670 	}
1671 
1672 	if (!do_flush) {
1673 		rt = new_rtcmd_irep();
1674 		(void) args_to_rtcmd(rt, argv, NULL);
1675 	}
1676 	if (do_flush || rt->ri_cmd == RTM_DELETE) {
1677 		if ((temp_fp = fopen(temp_file, "w")) == NULL) {
1678 			quit(gettext("failed to open temp file"), errno);
1679 			/* NOTREACHED */
1680 		}
1681 	}
1682 	if (do_flush) {
1683 		(void) search_rtfile(perm_fp, temp_fp, NULL, SEARCH_MODE_DEL);
1684 		if (fclose(temp_fp) != 0 || rename(temp_file, perm_file) != 0) {
1685 			quit(gettext("failed to update route file"), errno);
1686 			/* NOTREACHED */
1687 		}
1688 		(void) fclose(perm_fp);
1689 		return;
1690 	}
1691 
1692 	switch (rt->ri_cmd) {
1693 	case RTM_ADD:
1694 		if (search_rtfile(perm_fp, NULL, rt, SEARCH_MODE_NULL) > 0) {
1695 			/* Route is already in the file */
1696 			print_rtcmd_short(stderr, rt, B_FALSE, B_TRUE);
1697 			(void) fprintf(stderr, ": entry exists\n");
1698 			exit(1);
1699 		}
1700 		write_to_rtfile(perm_fp, argc - 1, argv + 1);
1701 		print_rtcmd_short(stdout, rt, B_FALSE, B_TRUE);
1702 		(void) printf("\n");
1703 		break;
1704 
1705 	case RTM_CHANGE:
1706 		syntax_error(
1707 		    gettext("route: change command not supported with -p\n"));
1708 		/* NOTREACHED */
1709 
1710 	case RTM_DELETE:
1711 		if (search_rtfile(perm_fp, temp_fp, rt, SEARCH_MODE_DEL) <= 0) {
1712 			/* Route not found */
1713 			print_rtcmd_short(stderr, rt, B_FALSE, B_TRUE);
1714 			(void) fprintf(stderr, gettext(": not in file\n"));
1715 			exit(1);
1716 		}
1717 		if (fclose(temp_fp) != 0 || rename(temp_file, perm_file) != 0) {
1718 			quit(gettext("failed to update route file"), errno);
1719 			/* NOTREACHED */
1720 		}
1721 		break;
1722 
1723 	case RTM_GET:
1724 		if (search_rtfile(perm_fp, temp_fp, rt, SEARCH_MODE_PRINT) <=
1725 		    0) {
1726 			print_rtcmd_short(stdout, rt, B_FALSE, B_TRUE);
1727 			(void) printf(gettext(": not in file\n"));
1728 		}
1729 		break;
1730 
1731 	default:
1732 		quit(gettext("Internal Error"), EINVAL);
1733 		/* NOTREACHED */
1734 	}
1735 
1736 	/*
1737 	 * Closing the file unlocks it.
1738 	 */
1739 	(void) fclose(perm_fp);
1740 }
1741 
1742 int
1743 show_saved_routes(int argc)
1744 {
1745 	int perm_fd;
1746 	FILE *perm_fp;
1747 	struct flock lock;
1748 	int count = 0;
1749 
1750 	if (argc != 1) {
1751 		syntax_error(gettext("route: invalid arguments for show\n"));
1752 	}
1753 
1754 	perm_fd = open(perm_file, O_RDONLY, 0);
1755 
1756 	if (perm_fd == -1) {
1757 		if (errno == ENOENT) {
1758 			(void) printf("No persistent routes are defined\n");
1759 			return (0);
1760 		} else {
1761 			quit(gettext("failed to open route file"), errno);
1762 		}
1763 	}
1764 	lock.l_type = F_RDLCK;
1765 	lock.l_whence = SEEK_SET;
1766 	lock.l_start = 0;
1767 	lock.l_len = 0;
1768 	if (fcntl(perm_fd, F_SETLK, &lock) != 0) {
1769 		quit(gettext("failed to lock route file"),
1770 		    errno);
1771 		/* NOTREACHED */
1772 	}
1773 	if ((perm_fp = fdopen(perm_fd, "r")) == NULL) {
1774 		quit(gettext("failed to open route file"), errno);
1775 		/* NOTREACHED */
1776 	}
1777 	count += search_rtfile(perm_fp, NULL, NULL, SEARCH_MODE_PRINT);
1778 	(void) fseek(perm_fp, 0, SEEK_SET);
1779 	af = AF_INET6;
1780 	count += search_rtfile(perm_fp, NULL, NULL, SEARCH_MODE_PRINT);
1781 
1782 	if (count == 0)
1783 		(void) printf("No persistent routes are defined\n");
1784 
1785 	(void) fclose(perm_fp);
1786 	return (0);
1787 }
1788 
1789 int
1790 newroute(char **argv)
1791 {
1792 	rtcmd_irep_t *newrt;
1793 	int ret, attempts, oerrno;
1794 	char *err;
1795 	char obuf[INET6_ADDRSTRLEN];
1796 #define	hp (newrt->ri_gate_hp)
1797 
1798 	newrt = new_rtcmd_irep();
1799 	(void) args_to_rtcmd(newrt, argv, NULL);
1800 
1801 	if (newrt->ri_cmd != RTM_GET && !tflag) {
1802 		/* Don't want to read back our messages */
1803 		(void) shutdown(s, 0);
1804 	}
1805 	if (newrt->ri_addrs & RTA_IFP) {
1806 		newrt->ri_ifp.sdl.sdl_index = if_nametoindex(newrt->ri_ifp_str);
1807 		if (newrt->ri_ifp.sdl.sdl_index == 0) {
1808 			if (errno != ENXIO) {
1809 				quit("if_nametoindex", errno);
1810 			} else {
1811 				(void) fprintf(stderr,
1812 				    gettext("route: %s: no such interface\n"),
1813 				    newrt->ri_ifp_str);
1814 				exit(1);
1815 			}
1816 		}
1817 		newrt->ri_ifp.sdl.sdl_family = AF_LINK;
1818 	}
1819 	for (attempts = 1; ; attempts++) {
1820 		errno = 0;
1821 		if ((ret = rtmsg(newrt)) == 0)
1822 			break;
1823 		if (errno != ENETUNREACH && errno != ESRCH)
1824 			break;
1825 		if ((newrt->ri_addrs & RTA_GATEWAY) && hp != NULL &&
1826 		    hp->h_addr_list[attempts] != NULL) {
1827 			switch (af) {
1828 			case AF_INET:
1829 				(void) memmove(&newrt->ri_gate.sin.sin_addr,
1830 				    hp->h_addr_list[attempts], hp->h_length);
1831 				continue;
1832 			case AF_INET6:
1833 				(void) memmove(&newrt->ri_gate.sin6.sin6_addr,
1834 				    hp->h_addr_list[attempts], hp->h_length);
1835 				continue;
1836 			}
1837 		}
1838 		break;
1839 	}
1840 	oerrno = errno;
1841 
1842 	if (newrt->ri_cmd != RTM_GET) {
1843 		print_rtcmd_short(stdout, newrt, (ret == 0), B_FALSE);
1844 		if (ret == 0)
1845 			(void) printf("\n");
1846 	} else if (ret != 0) {
1847 		/*
1848 		 * Note: there is nothing additional to print for get
1849 		 * if ret == 0.
1850 		 */
1851 		if (nflag) {
1852 			switch (newrt->ri_af) {
1853 			case AF_INET:
1854 				(void) printf(" %s",
1855 				    inet_ntoa(newrt->ri_dst.sin.sin_addr));
1856 				break;
1857 			case AF_INET6:
1858 				if (inet_ntop(AF_INET6,
1859 				    (void *)&newrt->ri_dst.sin6.sin6_addr,
1860 				    obuf, INET6_ADDRSTRLEN) != NULL) {
1861 					(void) printf(" %s", obuf);
1862 					break;
1863 				}
1864 				/* FALLTHROUGH */
1865 			default:
1866 				(void) printf("%s", newrt->ri_dest_str);
1867 				break;
1868 			}
1869 		} else {
1870 			(void) printf("%s", newrt->ri_dest_str);
1871 		}
1872 	}
1873 
1874 	if (ret != 0) {
1875 		switch (oerrno) {
1876 		case ESRCH:
1877 			err = "not in table";
1878 			break;
1879 		case EBUSY:
1880 			err = "entry in use";
1881 			break;
1882 		case ENOBUFS:
1883 			err = "routing table overflow";
1884 			break;
1885 		case EEXIST:
1886 			err = "entry exists";
1887 			break;
1888 		case EPERM:
1889 			err = "insufficient privileges";
1890 			break;
1891 		default:
1892 			err = strerror(oerrno);
1893 			break;
1894 		}
1895 		(void) printf(": %s\n", err);
1896 	}
1897 
1898 	del_rtcmd_irep(newrt);
1899 
1900 	return (oerrno);
1901 #undef hp
1902 }
1903 
1904 
1905 /*
1906  * Convert a network number to the corresponding IP address.
1907  * If the RTA_NETMASK hasn't been specified yet set it based
1908  * on the class of address.
1909  */
1910 static void
1911 inet_makenetandmask(rtcmd_irep_t *rcip, in_addr_t net, struct sockaddr_in *sin)
1912 {
1913 	in_addr_t addr, mask;
1914 
1915 	if (net == 0) {
1916 		mask = addr = 0;
1917 	} else if (net < 128) {
1918 		addr = net << IN_CLASSA_NSHIFT;
1919 		mask = IN_CLASSA_NET;
1920 	} else if (net < 65536) {
1921 		addr = net << IN_CLASSB_NSHIFT;
1922 		mask = IN_CLASSB_NET;
1923 	} else if (net < 16777216L) {
1924 		addr = net << IN_CLASSC_NSHIFT;
1925 		mask = IN_CLASSC_NET;
1926 	} else {
1927 		addr = net;
1928 		if ((addr & IN_CLASSA_HOST) == 0)
1929 			mask =  IN_CLASSA_NET;
1930 		else if ((addr & IN_CLASSB_HOST) == 0)
1931 			mask =  IN_CLASSB_NET;
1932 		else if ((addr & IN_CLASSC_HOST) == 0)
1933 			mask =  IN_CLASSC_NET;
1934 		else {
1935 			if (IN_CLASSA(addr))
1936 				mask =  IN_CLASSA_NET;
1937 			else if (IN_CLASSB(addr))
1938 				mask =  IN_CLASSB_NET;
1939 			else if (IN_CLASSC(addr))
1940 				mask =  IN_CLASSC_NET;
1941 			else
1942 				mask = IP_HOST_MASK;
1943 			mask = inet_makesubnetmask(addr, mask);
1944 		}
1945 	}
1946 	sin->sin_addr.s_addr = htonl(addr);
1947 
1948 	/* Class E default mask is 32 */
1949 	if (IN_CLASSE(addr))
1950 		mask = IN_CLASSE_NET;
1951 
1952 	if (!(rcip->ri_addrs & RTA_NETMASK)) {
1953 		rcip->ri_addrs |= RTA_NETMASK;
1954 		sin = &rcip->ri_mask.sin;
1955 		sin->sin_addr.s_addr = htonl(mask);
1956 		sin->sin_family = AF_INET;
1957 	}
1958 }
1959 
1960 static in_addr_t
1961 inet_makesubnetmask(in_addr_t addr, in_addr_t mask)
1962 {
1963 	int n;
1964 	struct ifconf ifc;
1965 	struct ifreq ifreq;
1966 	struct ifreq *ifr;
1967 	struct sockaddr_in *sin;
1968 	char *buf;
1969 	int numifs;
1970 	size_t bufsize;
1971 	int iosoc;
1972 	in_addr_t if_addr, if_mask;
1973 	in_addr_t if_subnetmask = 0;
1974 	short if_flags;
1975 
1976 	if (mask == 0)
1977 		return (0);
1978 	if ((iosoc = socket(AF_INET, SOCK_DGRAM, 0)) < 0)
1979 		quit("socket", errno);
1980 	if (ioctl(iosoc, SIOCGIFNUM, (char *)&numifs) < 0)
1981 		quit("ioctl", errno);
1982 	bufsize = numifs * sizeof (struct ifreq);
1983 	buf = malloc(bufsize);
1984 	if (buf == NULL)
1985 		quit("malloc", errno);
1986 	(void) memset(&ifc, 0, sizeof (ifc));
1987 	ifc.ifc_len = bufsize;
1988 	ifc.ifc_buf = buf;
1989 	if (ioctl(iosoc, SIOCGIFCONF, (char *)&ifc) < 0)
1990 		quit("ioctl (get interface configuration)", errno);
1991 	/* Let's check to see if this is maybe a local subnet route. */
1992 	ifr = ifc.ifc_req;
1993 	for (n = ifc.ifc_len / sizeof (struct ifreq); n > 0; n--, ifr++) {
1994 		ifreq = *ifr;
1995 		/* LINTED */
1996 		sin = (struct sockaddr_in *)&ifr->ifr_addr;
1997 		if_addr = ntohl(sin->sin_addr.s_addr);
1998 
1999 		if (ioctl(iosoc, SIOCGIFFLAGS, (char *)&ifreq) < 0)
2000 			quit("ioctl (get interface flags)", errno);
2001 		if ((ifreq.ifr_flags & IFF_UP) == 0)
2002 			continue;
2003 		if_flags = ifreq.ifr_flags;
2004 
2005 		if (ioctl(iosoc, SIOCGIFNETMASK, (char *)&ifreq) < 0)
2006 			quit("ioctl (get netmask)", errno);
2007 		/* LINTED */
2008 		sin = (struct sockaddr_in *)&ifreq.ifr_addr;
2009 		if_mask = ntohl(sin->sin_addr.s_addr);
2010 		if ((if_addr & mask) == (addr & mask)) {
2011 			/*
2012 			 * Don't trust pt-pt interfaces if there are
2013 			 * other interfaces.
2014 			 */
2015 			if (if_flags & IFF_POINTOPOINT) {
2016 				if_subnetmask = if_mask;
2017 				continue;
2018 			}
2019 			/*
2020 			 * Fine.  Just assume the same net mask as the
2021 			 * directly attached subnet interface is using.
2022 			 */
2023 			return (if_mask);
2024 		}
2025 	}
2026 	if (if_subnetmask != 0)
2027 		return (if_subnetmask);
2028 	return (mask);
2029 }
2030 
2031 /*
2032  * Interpret an argument as a network address of some kind.
2033  *
2034  * If the address family is one looked up in getaddr() using one of the
2035  * getipnodebyX() functions (currently only AF_INET6), then callers should
2036  * freehostent() the returned "struct hostent" pointer if one was passed in.
2037  *
2038  * If exit_on_error is true, this function will cause route to exit on error by
2039  * calling syntax_error().  Otherwise, it returns B_TRUE on success or B_FALSE
2040  * on failure.
2041  */
2042 static boolean_t
2043 getaddr(rtcmd_irep_t *rcip, int which, char *s, addr_type_t atype)
2044 {
2045 	su_t *su;
2046 	struct hostent **hpp;
2047 	struct hostent *hp;
2048 	int masklen;
2049 
2050 	if (which == RTA_GATEWAY) {
2051 		hpp = &(rcip->ri_gate_hp);
2052 	} else {
2053 		hpp = &hp;
2054 	}
2055 	*hpp = NULL;
2056 
2057 	rcip->ri_addrs |= which;
2058 	switch (which) {
2059 	case RTA_DST:
2060 		save_string(&rcip->ri_dest_str, s);
2061 		su = &rcip->ri_dst;
2062 		su->sa.sa_family = rcip->ri_af;
2063 		break;
2064 	case RTA_GATEWAY:
2065 		save_string(&rcip->ri_gate_str, s);
2066 		su = &rcip->ri_gate;
2067 		su->sa.sa_family = rcip->ri_af;
2068 		break;
2069 	case RTA_NETMASK:
2070 		su = &rcip->ri_mask;
2071 		su->sa.sa_family = rcip->ri_af;
2072 		break;
2073 	case RTA_IFP:
2074 		save_string(&rcip->ri_ifp_str, s);
2075 		return (B_TRUE);
2076 		/*
2077 		 * RTA_SRC has overloaded meaning. It can represent the
2078 		 * src address of incoming or outgoing packets.
2079 		 */
2080 	case RTA_IFA:
2081 		su = &rcip->ri_ifa;
2082 		su->sa.sa_family = rcip->ri_af;
2083 		break;
2084 	case RTA_SRC:
2085 		su = &rcip->ri_src;
2086 		su->sa.sa_family = rcip->ri_af;
2087 		break;
2088 	default:
2089 		/* NOTREACHED */
2090 		quit(gettext("Internal Error"), EINVAL);
2091 		/* NOTREACHED */
2092 	}
2093 	if (strcmp(s, "default") == 0) {
2094 		if (which == RTA_DST) {
2095 			return (getaddr(rcip, RTA_NETMASK, s, ADDR_TYPE_NET));
2096 		}
2097 		if (which == RTA_SRC) {
2098 			return (B_TRUE);
2099 		}
2100 		return (B_TRUE);
2101 	}
2102 	switch (rcip->ri_af) {
2103 	case AF_LINK:
2104 		link_addr(s, &su->sdl);
2105 		return (B_TRUE);
2106 	case PF_ROUTE:
2107 		sockaddr(s, &su->sa);
2108 		return (B_TRUE);
2109 	case AF_INET6:
2110 		switch (which) {
2111 		case RTA_DST:
2112 			if (!in6_getaddr(s, &su->sin6, &masklen, hpp)) {
2113 				return (B_FALSE);
2114 			}
2115 			if (masklen != NO_PREFIX) {
2116 				(void) memset(&rcip->ri_mask.sin6.sin6_addr, 0,
2117 				    sizeof (rcip->ri_mask.sin6.sin6_addr));
2118 				if (!in_prefixlentomask(masklen, IPV6_ABITS,
2119 				    (uchar_t *)&rcip->ri_mask.sin6.sin6_addr)) {
2120 					syntax_error(gettext(
2121 					    "route: bad prefix length: %d\n"),
2122 					    masklen);
2123 					return (B_FALSE);
2124 				}
2125 				rcip->ri_mask.sin6.sin6_family = rcip->ri_af;
2126 				rcip->ri_addrs |= RTA_NETMASK;
2127 			}
2128 			return (B_TRUE);
2129 		case RTA_GATEWAY:
2130 		case RTA_IFA:
2131 		case RTA_SRC:
2132 			return (in6_getaddr(s, &su->sin6, NULL, hpp));
2133 		case RTA_NETMASK:
2134 			syntax_error(
2135 			    gettext("route: -netmask not supported for IPv6: "
2136 			    "use <prefix>/<prefix-length> instead\n"));
2137 			return (B_FALSE);
2138 		default:
2139 			quit(gettext("Internal Error"), EINVAL);
2140 			/* NOTREACHED */
2141 		}
2142 	case AF_INET:
2143 		switch (which) {
2144 		case RTA_DST:
2145 			if (!in_getaddr(s, &su->sin, &masklen, which, hpp,
2146 			    atype, rcip)) {
2147 				return (B_FALSE);
2148 			}
2149 			if (masklen != NO_PREFIX) {
2150 				(void) memset(&rcip->ri_mask.sin.sin_addr, 0,
2151 				    sizeof (rcip->ri_mask.sin.sin_addr));
2152 				if (!in_prefixlentomask(masklen, IP_ABITS,
2153 				    (uchar_t *)&rcip->ri_mask.sin.sin_addr)) {
2154 					syntax_error(gettext(
2155 					    "route: bad prefix length: %d\n"),
2156 					    masklen);
2157 					return (B_FALSE);
2158 				}
2159 				rcip->ri_mask.sin.sin_family = rcip->ri_af;
2160 				rcip->ri_addrs |= RTA_NETMASK;
2161 			}
2162 			return (B_TRUE);
2163 		case RTA_GATEWAY:
2164 		case RTA_IFA:
2165 		case RTA_NETMASK:
2166 		case RTA_SRC:
2167 			return (in_getaddr(s, &su->sin, NULL, which, hpp, atype,
2168 			    rcip));
2169 		default:
2170 			quit(gettext("Internal Error"), EINVAL);
2171 			/* NOTREACHED */
2172 		}
2173 	default:
2174 		quit(gettext("Internal Error"), EINVAL);
2175 		/* NOTREACHED */
2176 	}
2177 	return (B_TRUE);
2178 }
2179 
2180 /*
2181  * Interpret an argument as an IPv4 network address of some kind,
2182  * returning B_TRUE on success or B_FALSE on failure.
2183  * This function will cause an exit() on failure if exit_on_failure is set.
2184  *
2185  * Note that this tries host interpretation before network interpretation,
2186  * except when -net has been given and the destination address is being parsed.
2187  *
2188  * If the plenp argument is non-NULL, allow <addr>/<n> syntax and
2189  * pass out <n> in *plenp.
2190  * If <n> doesn't parse return BAD_ADDR as *plenp.
2191  * If no /<n> is present return NO_PREFIX as *plenp.
2192  */
2193 static boolean_t
2194 in_getaddr(char *s, struct sockaddr_in *sin, int *plenp, int which,
2195     struct hostent **hpp, addr_type_t atype, rtcmd_irep_t *rcip)
2196 {
2197 	struct hostent *hp;
2198 	struct netent *np;
2199 	in_addr_t val;
2200 	char str[BUFSIZ];
2201 
2202 	(void) strlcpy(str, s, sizeof (str));
2203 
2204 	/*
2205 	 * If plenp is non-NULL, /<n> syntax for netmask is allowed.
2206 	 */
2207 	if (plenp != NULL) {
2208 		char *cp;
2209 
2210 		*plenp = in_getprefixlen(str, IP_ABITS);
2211 		if (*plenp == BAD_ADDR)
2212 			return (B_FALSE);
2213 		cp = strchr(str, '/');
2214 		if (cp != NULL)
2215 			*cp = '\0';
2216 	} else if (strchr(str, '/') != NULL) {
2217 		syntax_error(gettext("route: %s: unexpected '/'\n"), str);
2218 		return (B_FALSE);
2219 	}
2220 
2221 	(void) memset(sin, 0, sizeof (*sin));
2222 	sin->sin_family = AF_INET;
2223 
2224 	/*
2225 	 * Handle 255.255.255.255 as a special case first.
2226 	 */
2227 	if (strcmp(str, "255.255.255.255") == 0) {
2228 		sin->sin_addr.s_addr = INADDR_BROADCAST;
2229 		return (B_TRUE);
2230 	}
2231 
2232 	val = inet_addr(str);
2233 	if (val != (in_addr_t)-1) {
2234 		/* Numeric address */
2235 		sin->sin_addr.s_addr = val;
2236 		if (which == RTA_DST) {
2237 			if (atype == ADDR_TYPE_NET ||
2238 			    (atype == ADDR_TYPE_ANY &&
2239 			    inet_lnaof(sin->sin_addr) == INADDR_ANY)) {
2240 				/* This looks like a network address. */
2241 				inet_makenetandmask(rcip, ntohl(val),
2242 				    sin);
2243 			}
2244 		}
2245 		return (B_TRUE);
2246 	}
2247 	/* Host or net name */
2248 	if (which != RTA_DST || atype != ADDR_TYPE_NET) {
2249 		/* A host name is allowed. */
2250 		if ((hp = gethostbyname(str)) != NULL) {
2251 			*hpp = hp;
2252 			(void) memmove(&sin->sin_addr, hp->h_addr,
2253 			    hp->h_length);
2254 			return (B_TRUE);
2255 		}
2256 	}
2257 	if (atype != ADDR_TYPE_HOST) {
2258 		/* A network name is allowed */
2259 		if ((np = getnetbyname(str)) != NULL &&
2260 		    (val = np->n_net) != 0) {
2261 			if (which == RTA_DST) {
2262 				inet_makenetandmask(rcip, val, sin);
2263 			}
2264 			return (B_TRUE);
2265 		}
2266 	}
2267 	syntax_error(gettext("%s: bad value\n"), s);
2268 	return (B_FALSE);
2269 }
2270 
2271 /*
2272  * Interpret an argument as an IPv6 network address of some kind,
2273  * returning B_TRUE on success or B_FALSE on failure.
2274  * This function will cause an exit() on failure if exit_on_failure is set.
2275  *
2276  * If the last argument is non-NULL allow a <addr>/<n> syntax and
2277  * pass out <n> in *plenp.
2278  * If <n> doesn't parse return BAD_ADDR as *plenp.
2279  * If no /<n> is present return NO_PREFIX as *plenp.
2280  */
2281 static boolean_t
2282 in6_getaddr(char *s, struct sockaddr_in6 *sin6, int *plenp,
2283     struct hostent **hpp)
2284 {
2285 	struct hostent *hp;
2286 	char str[BUFSIZ];
2287 	int error_num;
2288 
2289 	(void) strlcpy(str, s, sizeof (str));
2290 
2291 	/*
2292 	 * If plenp is non-NULL, /<n> syntax for netmask is allowed.
2293 	 */
2294 	if (plenp != NULL) {
2295 		char *cp;
2296 
2297 		*plenp = in_getprefixlen(str, IPV6_ABITS);
2298 		if (*plenp == BAD_ADDR)
2299 			return (B_FALSE);
2300 		cp = strchr(str, '/');
2301 		if (cp != NULL)
2302 			*cp = '\0';
2303 	} else if (strchr(str, '/') != NULL) {
2304 		syntax_error(gettext("route: %s: unexpected '/'\n"), str);
2305 		return (B_FALSE);
2306 	}
2307 
2308 	(void) memset(sin6, 0, sizeof (struct sockaddr_in6));
2309 	sin6->sin6_family = AF_INET6;
2310 
2311 	hp = getipnodebyname(str, AF_INET6, 0, &error_num);
2312 	if (hp != NULL) {
2313 		*hpp = hp;
2314 		(void) memmove(&sin6->sin6_addr, hp->h_addr, hp->h_length);
2315 		return (B_TRUE);
2316 	}
2317 	if (error_num == TRY_AGAIN) {
2318 		/*
2319 		 * This isn't a problem if we aren't going to use the address
2320 		 * right away.
2321 		 */
2322 		if (!exit_on_error) {
2323 			return (B_TRUE);
2324 		}
2325 		syntax_error(gettext("route: %s: bad address (try "
2326 		    "again later)\n"), s);
2327 		return (B_FALSE);
2328 	}
2329 	syntax_error(gettext("route: %s: bad address\n"), s);
2330 	return (B_FALSE);
2331 }
2332 
2333 /*
2334  * Parse <addr>/<n> syntax and return the integer n.
2335  * If <addr> is missing or <n> is not a valid integer, this function calls
2336  * syntax_error() and returns BAD_ADDR.
2337  * if n is not between 0 and max_plen inclusive, this functions calls
2338  * syntax_error() and returns BAD_ADDR.
2339  * If /<n> is not present, this function returns NO_PREFIX.
2340  * The string addr is not modified.
2341  */
2342 int
2343 in_getprefixlen(char *addr, int max_plen)
2344 {
2345 	int prefixlen;
2346 	char *str, *end;
2347 
2348 	str = strchr(addr, '/');
2349 	if (str == addr) {
2350 		syntax_error(gettext("route: %s: unexpected '/'\n"), addr);
2351 		return (BAD_ADDR);
2352 	}
2353 	if (str == NULL)
2354 		return (NO_PREFIX);
2355 	str++;
2356 
2357 	errno = 0;
2358 	prefixlen = strtoul(str, &end, 10);
2359 	if (errno != 0 || str == end) {
2360 		syntax_error(gettext("route: bad prefix length %s\n"), str);
2361 		return (BAD_ADDR);
2362 	}
2363 	if (prefixlen > max_plen) {
2364 		syntax_error(gettext("route: prefix length %s out of range\n"),
2365 		    str);
2366 		return (BAD_ADDR);
2367 	}
2368 	return (prefixlen);
2369 }
2370 
2371 /*
2372  * Convert a prefix length to a mask.
2373  * Returns B_TRUE if ok. B_FALSE otherwise.
2374  * Assumes the mask array is zeroed by the caller.
2375  */
2376 boolean_t
2377 in_prefixlentomask(int prefixlen, int maxlen, uchar_t *mask)
2378 {
2379 	if (prefixlen < 0 || prefixlen > maxlen)
2380 		return (B_FALSE);
2381 
2382 	while (prefixlen > 0) {
2383 		if (prefixlen >= 8) {
2384 			*mask++ = 0xFF;
2385 			prefixlen -= 8;
2386 			continue;
2387 		}
2388 		*mask |= 1 << (8 - prefixlen);
2389 		prefixlen--;
2390 	}
2391 	return (B_TRUE);
2392 }
2393 
2394 void
2395 rtmonitor(int argc, char *argv[])
2396 {
2397 	int n;
2398 	intmax_t msg[2048 / sizeof (intmax_t)];
2399 
2400 	if (tflag)
2401 		exit(0);
2402 	verbose = B_TRUE;
2403 	if (argc > 1) {
2404 		argv++;
2405 		if (argc == 2 && **argv == '-') {
2406 			switch (keyword(*argv + 1)) {
2407 			case K_INET:
2408 				af = AF_INET;
2409 				break;
2410 			case K_LINK:
2411 				af = AF_LINK;
2412 				break;
2413 			case K_INET6:
2414 				af = AF_INET6;
2415 				break;
2416 			default:
2417 				usage(*argv);
2418 				/* NOTREACHED */
2419 			}
2420 		} else {
2421 			usage(*argv);
2422 		}
2423 		(void) close(s);
2424 		s = socket(PF_ROUTE, SOCK_RAW, af);
2425 		if (s < 0)
2426 			quit("socket", errno);
2427 	}
2428 	for (;;) {
2429 		n = read(s, msg, sizeof (msg));
2430 		if (n <= 0)
2431 			quit("read", errno);
2432 		(void) printf("got message of size %d\n", n);
2433 		print_rtmsg((struct rt_msghdr *)msg, n);
2434 	}
2435 }
2436 
2437 int
2438 rtmsg(rtcmd_irep_t *newrt)
2439 {
2440 	static int seq;
2441 	int rlen;
2442 	char *cp = m_rtmsg.m_space;
2443 	int l;
2444 
2445 	errno = 0;
2446 	(void) memset(&m_rtmsg, 0, sizeof (m_rtmsg));
2447 
2448 	if (newrt->ri_cmd == RTM_GET) {
2449 		newrt->ri_ifp.sa.sa_family = AF_LINK;
2450 		newrt->ri_addrs |= RTA_IFP;
2451 	}
2452 
2453 #define	rtm m_rtmsg.m_rtm
2454 	rtm.rtm_type = newrt->ri_cmd;
2455 	rtm.rtm_flags = newrt->ri_flags;
2456 	rtm.rtm_version = RTM_VERSION;
2457 	rtm.rtm_seq = ++seq;
2458 	rtm.rtm_addrs = newrt->ri_addrs;
2459 	rtm.rtm_rmx = newrt->ri_metrics;
2460 	rtm.rtm_inits = newrt->ri_inits;
2461 
2462 #define	NEXTADDR(w, u) \
2463 	if (newrt->ri_addrs & (w)) { \
2464 		l = ROUNDUP_LONG(salen(&u.sa)); \
2465 		(void) memmove(cp, &(u), l); \
2466 		cp += l; \
2467 		if (verbose) \
2468 			sodump(&(u), #u); \
2469 	}
2470 	NEXTADDR(RTA_DST, newrt->ri_dst);
2471 	NEXTADDR(RTA_GATEWAY, newrt->ri_gate);
2472 	NEXTADDR(RTA_NETMASK, newrt->ri_mask);
2473 	NEXTADDR(RTA_IFP, newrt->ri_ifp);
2474 	NEXTADDR(RTA_IFA, newrt->ri_ifa);
2475 	/*
2476 	 * RTA_SRC has overloaded meaning. It can represent the
2477 	 * src address of incoming or outgoing packets.
2478 	 */
2479 	NEXTADDR(RTA_SRC, newrt->ri_src);
2480 #undef	NEXTADDR
2481 
2482 	if (newrt->ri_rtsa_cnt > 0) {
2483 		/* LINTED: aligned */
2484 		rtm_ext_t *rtm_ext = (rtm_ext_t *)cp;
2485 		tsol_rtsecattr_t *rtsecattr;
2486 
2487 		rtm_ext->rtmex_type = RTMEX_GATEWAY_SECATTR;
2488 		rtm_ext->rtmex_len = TSOL_RTSECATTR_SIZE(1);
2489 
2490 		rtsecattr = (tsol_rtsecattr_t *)(rtm_ext + 1);
2491 		rtsecattr->rtsa_cnt = 1;
2492 
2493 		bcopy(&newrt->ri_rtsa, rtsecattr->rtsa_attr,
2494 		    sizeof (newrt->ri_rtsa));
2495 		cp = (char *)(rtsecattr->rtsa_attr + 1);
2496 	}
2497 
2498 	rtm.rtm_msglen = l = cp - (char *)&m_rtmsg;
2499 
2500 	if (verbose)
2501 		print_rtmsg(&rtm, l);
2502 	if (debugonly)
2503 		return (0);
2504 	if ((rlen = write(s, (char *)&m_rtmsg, l)) < 0) {
2505 		switch (errno) {
2506 		case ESRCH:
2507 		case EBUSY:
2508 		case ENOBUFS:
2509 		case EEXIST:
2510 		case ENETUNREACH:
2511 		case EHOSTUNREACH:
2512 		case EPERM:
2513 			break;
2514 		default:
2515 			perror(gettext("writing to routing socket"));
2516 			break;
2517 		}
2518 		return (-1);
2519 	} else if (rlen < (int)rtm.rtm_msglen) {
2520 		(void) fprintf(stderr,
2521 		    gettext("route: write to routing socket got only %d for "
2522 		    "len\n"), rlen);
2523 		return (-1);
2524 	}
2525 	if (newrt->ri_cmd == RTM_GET) {
2526 		do {
2527 			l = read(s, (char *)&m_rtmsg, sizeof (m_rtmsg));
2528 		} while (l > 0 && (rtm.rtm_seq != seq || rtm.rtm_pid != pid));
2529 		if (l < 0) {
2530 			(void) fprintf(stderr,
2531 			    gettext("route: read from routing socket: %s\n"),
2532 			    strerror(errno));
2533 		} else {
2534 			print_getmsg(newrt, &rtm, l);
2535 		}
2536 	}
2537 #undef rtm
2538 	return (0);
2539 }
2540 
2541 static char *msgtypes[] = {
2542 	"",
2543 	"RTM_ADD: Add Route",
2544 	"RTM_DELETE: Delete Route",
2545 	"RTM_CHANGE: Change Metrics or flags",
2546 	"RTM_GET: Report Metrics",
2547 	"RTM_LOSING: Kernel Suspects Partitioning",
2548 	"RTM_REDIRECT: Told to use different route",
2549 	"RTM_MISS: Lookup failed on this address",
2550 	"RTM_LOCK: fix specified metrics",
2551 	"RTM_OLDADD: caused by SIOCADDRT",
2552 	"RTM_OLDDEL: caused by SIOCDELRT",
2553 	"RTM_RESOLVE: Route created by cloning",
2554 	"RTM_NEWADDR: address being brought up on iface",
2555 	"RTM_DELADDR: address being brought down on iface",
2556 	"RTM_IFINFO: iface status change",
2557 	"RTM_CHGADDR: address being changed on iface",
2558 	"RTM_FREEADDR: address being removed from iface",
2559 	0,
2560 };
2561 
2562 #define	NMSGTYPES (sizeof (msgtypes) / sizeof (msgtypes[0]))
2563 
2564 static char metricnames[] =
2565 "\011pksent\010rttvar\7rtt\6ssthresh\5sendpipe\4recvpipe\3expire\2hopcount"
2566 	"\1mtu";
2567 static char routeflags[] =
2568 "\1UP\2GATEWAY\3HOST\4REJECT\5DYNAMIC\6MODIFIED\7DONE\010MASK_PRESENT"
2569 	"\011CLONING\012XRESOLVE\013LLINFO\014STATIC\015BLACKHOLE"
2570 	"\016PRIVATE\017PROTO2\020PROTO1\021MULTIRT\022SETSRC\023INDIRECT";
2571 static char ifnetflags[] =
2572 "\1UP\2BROADCAST\3DEBUG\4LOOPBACK\5PTP\6NOTRAILERS\7RUNNING\010NOARP"
2573 	"\011PPROMISC\012ALLMULTI\013INTELLIGENT\014MULTICAST"
2574 	"\015MULTI_BCAST\016UNNUMBERED\017DHCP\020PRIVATE"
2575 	"\021NOXMIT\022NOLOCAL\023DEPRECATED\024ADDRCONF"
2576 	"\025ROUTER\026NONUD\027ANYCAST\030NORTEXCH\031IPv4\032IPv6"
2577 	"\034NOFAILOVER\035FAILED\036STANDBY\037INACTIVE\040OFFLINE"
2578 	"\041XRESOLV\042COS\043PREFERRED\044TEMPORARY\045FIXEDMTU\046VIRTUAL"
2579 	"\047DUPLICATE";
2580 static char addrnames[] =
2581 "\1DST\2GATEWAY\3NETMASK\4GENMASK\5IFP\6IFA\7AUTHOR\010BRD\011SRC";
2582 
2583 void
2584 print_rtmsg(struct rt_msghdr *rtm, int msglen)
2585 {
2586 	struct if_msghdr *ifm;
2587 	struct ifa_msghdr *ifam;
2588 
2589 	if (!verbose)
2590 		return;
2591 	if (rtm->rtm_version != RTM_VERSION) {
2592 		(void) printf("routing message version %d not understood\n",
2593 		    rtm->rtm_version);
2594 		return;
2595 	}
2596 	if (rtm->rtm_msglen != msglen) {
2597 		(void) printf("message length mismatch, in packet %d, "
2598 		    "returned %d\n",
2599 		    rtm->rtm_msglen, msglen);
2600 		if (msglen > rtm->rtm_msglen)
2601 			msglen = rtm->rtm_msglen;
2602 	}
2603 	/*
2604 	 * Since rtm->rtm_type is unsigned, we'll just check the case of zero
2605 	 * and the upper-bound of (NMSGTYPES - 1).
2606 	 */
2607 	if (rtm->rtm_type == 0 || rtm->rtm_type >= (NMSGTYPES - 1)) {
2608 		(void) printf("routing message type %d not understood\n",
2609 		    rtm->rtm_type);
2610 		return;
2611 	}
2612 	(void) printf("%s: len %d, ", msgtypes[rtm->rtm_type], msglen);
2613 	switch (rtm->rtm_type) {
2614 	case RTM_IFINFO:
2615 		ifm = (struct if_msghdr *)rtm;
2616 		(void) printf("if# %d, flags:", ifm->ifm_index);
2617 		bprintf(stdout, ifm->ifm_flags, ifnetflags);
2618 		pmsg_addrs((const char *)(ifm + 1), msglen - sizeof (*ifm),
2619 		    ifm->ifm_addrs);
2620 		break;
2621 	case RTM_NEWADDR:
2622 	case RTM_DELADDR:
2623 	case RTM_CHGADDR:
2624 	case RTM_FREEADDR:
2625 		ifam = (struct ifa_msghdr *)rtm;
2626 		(void) printf("metric %d, flags:", ifam->ifam_metric);
2627 		bprintf(stdout, ifam->ifam_flags, routeflags);
2628 		pmsg_addrs((const char *)(ifam + 1), msglen - sizeof (*ifam),
2629 		    ifam->ifam_addrs);
2630 		break;
2631 	default:
2632 		(void) printf("pid: %ld, seq %d, errno %d, flags:",
2633 		    rtm->rtm_pid, rtm->rtm_seq, rtm->rtm_errno);
2634 		bprintf(stdout, rtm->rtm_flags, routeflags);
2635 		pmsg_common(rtm, msglen);
2636 		break;
2637 	}
2638 }
2639 
2640 void
2641 print_getmsg(rtcmd_irep_t *req_rt, struct rt_msghdr *rtm, int msglen)
2642 {
2643 	struct sockaddr *dst = NULL, *gate = NULL, *mask = NULL, *src = NULL;
2644 	struct sockaddr_dl *ifp = NULL;
2645 	struct sockaddr *sa;
2646 	char *cp;
2647 	int i;
2648 
2649 	(void) printf("   route to: %s\n", routename(&req_rt->ri_dst.sa));
2650 	if (rtm->rtm_version != RTM_VERSION) {
2651 		(void) fprintf(stderr,
2652 		    gettext("routing message version %d not understood\n"),
2653 		    rtm->rtm_version);
2654 		return;
2655 	}
2656 	if (rtm->rtm_msglen > (ushort_t)msglen) {
2657 		(void) fprintf(stderr,
2658 		    gettext("message length mismatch, in packet %d, "
2659 		    "returned %d\n"), rtm->rtm_msglen, msglen);
2660 	}
2661 	if (rtm->rtm_errno)  {
2662 		(void) fprintf(stderr, "RTM_GET: %s (errno %d)\n",
2663 		    strerror(rtm->rtm_errno), rtm->rtm_errno);
2664 		return;
2665 	}
2666 	cp = ((char *)(rtm + 1));
2667 	if (rtm->rtm_addrs != 0) {
2668 		for (i = 1; i != 0; i <<= 1) {
2669 			if (i & rtm->rtm_addrs) {
2670 				/* LINTED */
2671 				sa = (struct sockaddr *)cp;
2672 				switch (i) {
2673 				case RTA_DST:
2674 					dst = sa;
2675 					break;
2676 				case RTA_GATEWAY:
2677 					gate = sa;
2678 					break;
2679 				case RTA_NETMASK:
2680 					mask = sa;
2681 					break;
2682 				case RTA_IFP:
2683 					if (sa->sa_family == AF_LINK &&
2684 					    ((struct sockaddr_dl *)sa)->
2685 					    sdl_nlen != 0)
2686 						ifp = (struct sockaddr_dl *)sa;
2687 					break;
2688 				case RTA_SRC:
2689 					src = sa;
2690 					break;
2691 				}
2692 				ADVANCE(cp, sa);
2693 			}
2694 		}
2695 	}
2696 	if (dst != NULL && mask != NULL)
2697 		mask->sa_family = dst->sa_family;	/* XXX */
2698 	if (dst != NULL)
2699 		(void) printf("destination: %s\n", routename(dst));
2700 	if (mask != NULL) {
2701 		boolean_t savenflag = nflag;
2702 
2703 		nflag = B_TRUE;
2704 		(void) printf("       mask: %s\n", routename(mask));
2705 		nflag = savenflag;
2706 	}
2707 	if (gate != NULL && rtm->rtm_flags & RTF_GATEWAY)
2708 		(void) printf("    gateway: %s\n", routename(gate));
2709 	if (src != NULL && rtm->rtm_flags & RTF_SETSRC)
2710 		(void) printf("     setsrc: %s\n", routename(src));
2711 	if (ifp != NULL) {
2712 		if (verbose) {
2713 			int i;
2714 
2715 			(void) printf("  interface: %.*s index %d address ",
2716 			    ifp->sdl_nlen, ifp->sdl_data, ifp->sdl_index);
2717 			for (i = ifp->sdl_nlen;
2718 			    i < ifp->sdl_nlen + ifp->sdl_alen;
2719 			    i++) {
2720 				(void) printf("%02x ",
2721 				    ifp->sdl_data[i] & 0xFF);
2722 			}
2723 			(void) printf("\n");
2724 		} else {
2725 			(void) printf("  interface: %.*s\n",
2726 			    ifp->sdl_nlen, ifp->sdl_data);
2727 		}
2728 	}
2729 	(void) printf("      flags: ");
2730 	bprintf(stdout, rtm->rtm_flags, routeflags);
2731 
2732 #define	lock(f)	((rtm->rtm_rmx.rmx_locks & RTV_ ## f) ? 'L' : ' ')
2733 #define	msec(u)	(((u) + 500) / 1000)		/* usec to msec */
2734 
2735 	(void) printf("\n%s\n", " recvpipe  sendpipe  ssthresh    rtt,ms "
2736 	    "rttvar,ms  hopcount      mtu     expire");
2737 	(void) printf("%8d%c ", rtm->rtm_rmx.rmx_recvpipe, lock(RPIPE));
2738 	(void) printf("%8d%c ", rtm->rtm_rmx.rmx_sendpipe, lock(SPIPE));
2739 	(void) printf("%8d%c ", rtm->rtm_rmx.rmx_ssthresh, lock(SSTHRESH));
2740 	(void) printf("%8d%c ", msec(rtm->rtm_rmx.rmx_rtt), lock(RTT));
2741 	(void) printf("%8d%c ", msec(rtm->rtm_rmx.rmx_rttvar), lock(RTTVAR));
2742 	(void) printf("%8d%c ", rtm->rtm_rmx.rmx_hopcount, lock(HOPCOUNT));
2743 	(void) printf("%8d%c ", rtm->rtm_rmx.rmx_mtu, lock(MTU));
2744 	if (rtm->rtm_rmx.rmx_expire)
2745 		rtm->rtm_rmx.rmx_expire -= time(0);
2746 	(void) printf("%8d%c", rtm->rtm_rmx.rmx_expire, lock(EXPIRE));
2747 #undef lock
2748 #undef msec
2749 #define	RTA_IGN	\
2750 	(RTA_DST|RTA_GATEWAY|RTA_NETMASK|RTA_IFP|RTA_IFA|RTA_BRD|RTA_SRC)
2751 	if (verbose) {
2752 		pmsg_common(rtm, msglen);
2753 	} else {
2754 		const char *sptr, *endptr;
2755 		const struct sockaddr *sa;
2756 		uint_t addrs;
2757 
2758 		/* Not verbose; just print out the exceptional cases */
2759 		if (rtm->rtm_addrs &~ RTA_IGN) {
2760 			(void) printf("\nsockaddrs: ");
2761 			bprintf(stdout, rtm->rtm_addrs, addrnames);
2762 		}
2763 		sptr = (const char *)(rtm + 1);
2764 		endptr = (const char *)rtm + msglen;
2765 		addrs = rtm->rtm_addrs;
2766 		while (addrs != 0 && sptr + sizeof (*sa) <= endptr) {
2767 			addrs &= addrs - 1;
2768 			/* LINTED */
2769 			sa = (const struct sockaddr *)sptr;
2770 			ADVANCE(sptr, sa);
2771 		}
2772 		if (addrs == 0)
2773 			pmsg_secattr(sptr, endptr - sptr, "    secattr: ");
2774 		(void) putchar('\n');
2775 	}
2776 #undef	RTA_IGN
2777 }
2778 
2779 static void
2780 pmsg_common(const struct rt_msghdr *rtm, size_t msglen)
2781 {
2782 	(void) printf("\nlocks: ");
2783 	bprintf(stdout, (int)rtm->rtm_rmx.rmx_locks, metricnames);
2784 	(void) printf(" inits: ");
2785 	bprintf(stdout, (int)rtm->rtm_inits, metricnames);
2786 	pmsg_addrs((const char *)(rtm + 1), msglen - sizeof (*rtm),
2787 	    rtm->rtm_addrs);
2788 }
2789 
2790 static void
2791 pmsg_addrs(const char *cp, size_t msglen, uint_t addrs)
2792 {
2793 	const struct sockaddr *sa;
2794 	const char *maxptr;
2795 	int i;
2796 
2797 	if (addrs != 0) {
2798 		(void) printf("\nsockaddrs: ");
2799 		bprintf(stdout, addrs, addrnames);
2800 		(void) putchar('\n');
2801 		maxptr = cp + msglen;
2802 		for (i = 1; i != 0 && cp + sizeof (*sa) <= maxptr; i <<= 1) {
2803 			if (i & addrs) {
2804 				/* LINTED */
2805 				sa = (const struct sockaddr *)cp;
2806 				(void) printf(" %s", routename(sa));
2807 				ADVANCE(cp, sa);
2808 			}
2809 		}
2810 		if (i != 0)
2811 			msglen = 0;
2812 		else
2813 			msglen = maxptr - cp;
2814 	}
2815 	pmsg_secattr(cp, msglen, "secattr: ");
2816 	(void) putchar('\n');
2817 	(void) fflush(stdout);
2818 }
2819 
2820 void
2821 bprintf(FILE *fp, int b, char *s)
2822 {
2823 	int i;
2824 	boolean_t gotsome = B_FALSE;
2825 
2826 	if (b == 0)
2827 		return;
2828 	while ((i = *s++) != 0) {
2829 		if (b & (1 << (i - 1))) {
2830 			if (!gotsome)
2831 				i = '<';
2832 			else
2833 				i = ',';
2834 			(void) putc(i, fp);
2835 			gotsome = B_TRUE;
2836 			for (; (i = *s) > ' '; s++)
2837 				(void) putc(i, fp);
2838 		} else {
2839 			while (*s > ' ')
2840 				s++;
2841 		}
2842 	}
2843 	if (gotsome)
2844 		(void) putc('>', fp);
2845 }
2846 
2847 int
2848 keyword(const char *cp)
2849 {
2850 	struct keytab *kt = keywords;
2851 
2852 	while (kt->kt_cp && strcmp(kt->kt_cp, cp))
2853 		kt++;
2854 	return (kt->kt_i);
2855 }
2856 
2857 void
2858 sodump(su_t *su, char *which)
2859 {
2860 	static char obuf[INET6_ADDRSTRLEN];
2861 
2862 	switch (su->sa.sa_family) {
2863 	case AF_LINK:
2864 		(void) printf("%s: link %s; ",
2865 		    which, link_ntoa(&su->sdl));
2866 		break;
2867 	case AF_INET:
2868 		(void) printf("%s: inet %s; ",
2869 		    which, inet_ntoa(su->sin.sin_addr));
2870 		break;
2871 	case AF_INET6:
2872 		if (inet_ntop(AF_INET6, (void *)&su->sin6.sin6_addr, obuf,
2873 		    INET6_ADDRSTRLEN) != NULL) {
2874 			(void) printf("%s: inet6 %s; ", which, obuf);
2875 			break;
2876 		}
2877 		/* FALLTHROUGH */
2878 	default:
2879 		quit(gettext("Internal Error"), EINVAL);
2880 		/* NOTREACHED */
2881 	}
2882 	(void) fflush(stdout);
2883 }
2884 
2885 /* States */
2886 #define	VIRGIN	0
2887 #define	GOTONE	1
2888 #define	GOTTWO	2
2889 #define	RESET	3
2890 /* Inputs */
2891 #define	DIGIT	(4*0)
2892 #define	END	(4*1)
2893 #define	DELIM	(4*2)
2894 #define	LETTER	(4*3)
2895 
2896 void
2897 sockaddr(char *addr, struct sockaddr *sa)
2898 {
2899 	char *cp = (char *)sa;
2900 	int size = salen(sa);
2901 	char *cplim = cp + size;
2902 	int byte = 0, state = VIRGIN, new;
2903 
2904 	(void) memset(cp, 0, size);
2905 	cp++;
2906 	do {
2907 		if ((*addr >= '0') && (*addr <= '9')) {
2908 			new = *addr - '0';
2909 		} else if ((*addr >= 'a') && (*addr <= 'f')) {
2910 			new = *addr - 'a' + 10;
2911 		} else if ((*addr >= 'A') && (*addr <= 'F')) {
2912 			new = *addr - 'A' + 10;
2913 		} else if (*addr == 0) {
2914 			state |= END;
2915 		} else {
2916 			state |= DELIM;
2917 		}
2918 		addr++;
2919 		switch (state /* | INPUT */) {
2920 		case GOTTWO | DIGIT:
2921 			*cp++ = byte;
2922 			/* FALLTHROUGH */
2923 		case VIRGIN | DIGIT:
2924 			state = GOTONE; byte = new; continue;
2925 		case GOTONE | DIGIT:
2926 			state = GOTTWO; byte = new + (byte << 4); continue;
2927 		default: /* | DELIM */
2928 			state = VIRGIN; *cp++ = byte; byte = 0; continue;
2929 		case GOTONE | END:
2930 		case GOTTWO | END:
2931 			*cp++ = byte;
2932 			/* FALLTHROUGH */
2933 		case VIRGIN | END:
2934 			break;
2935 		}
2936 		break;
2937 	} while (cp < cplim);
2938 }
2939 
2940 int
2941 salen(const struct sockaddr *sa)
2942 {
2943 	switch (sa->sa_family) {
2944 	case AF_INET:
2945 		return (sizeof (struct sockaddr_in));
2946 	case AF_LINK:
2947 		return (sizeof (struct sockaddr_dl));
2948 	case AF_INET6:
2949 		return (sizeof (struct sockaddr_in6));
2950 	default:
2951 		return (sizeof (struct sockaddr));
2952 	}
2953 }
2954 
2955 void
2956 link_addr(const char *addr, struct sockaddr_dl *sdl)
2957 {
2958 	char *cp = sdl->sdl_data;
2959 	char *cplim = sizeof (struct sockaddr_dl) + (char *)sdl;
2960 	int byte = 0, state = VIRGIN, new;
2961 
2962 	(void) memset(sdl, 0, sizeof (struct sockaddr_dl));
2963 	sdl->sdl_family = AF_LINK;
2964 	do {
2965 		state &= ~LETTER;
2966 		if ((*addr >= '0') && (*addr <= '9')) {
2967 			new = *addr - '0';
2968 		} else if ((*addr >= 'a') && (*addr <= 'f')) {
2969 			new = *addr - 'a' + 10;
2970 		} else if ((*addr >= 'A') && (*addr <= 'F')) {
2971 			new = *addr - 'A' + 10;
2972 		} else if (*addr == 0) {
2973 			state |= END;
2974 		} else if (state == VIRGIN &&
2975 		    (((*addr >= 'A') && (*addr <= 'Z')) ||
2976 		    ((*addr >= 'a') && (*addr <= 'z')))) {
2977 			state |= LETTER;
2978 		} else {
2979 			state |= DELIM;
2980 		}
2981 		addr++;
2982 		switch (state /* | INPUT */) {
2983 		case VIRGIN | DIGIT:
2984 		case VIRGIN | LETTER:
2985 			*cp++ = addr[-1];
2986 			continue;
2987 		case VIRGIN | DELIM:
2988 			state = RESET;
2989 			sdl->sdl_nlen = cp - sdl->sdl_data;
2990 			continue;
2991 		case GOTTWO | DIGIT:
2992 			*cp++ = byte;
2993 			/* FALLTHROUGH */
2994 		case RESET | DIGIT:
2995 			state = GOTONE;
2996 			byte = new;
2997 			continue;
2998 		case GOTONE | DIGIT:
2999 			state = GOTTWO;
3000 			byte = new + (byte << 4);
3001 			continue;
3002 		default: /* | DELIM */
3003 			state = RESET;
3004 			*cp++ = byte;
3005 			byte = 0;
3006 			continue;
3007 		case GOTONE | END:
3008 		case GOTTWO | END:
3009 			*cp++ = byte;
3010 			/* FALLTHROUGH */
3011 		case RESET | END:
3012 			break;
3013 		}
3014 		break;
3015 	} while (cp < cplim);
3016 	sdl->sdl_alen = cp - LLADDR(sdl);
3017 }
3018 
3019 static char hexlist[] = "0123456789abcdef";
3020 
3021 char *
3022 link_ntoa(const struct sockaddr_dl *sdl)
3023 {
3024 	static char obuf[64];
3025 	char *out = obuf;
3026 	int i;
3027 	uchar_t *in = (uchar_t *)LLADDR(sdl);
3028 	uchar_t *inlim = in + sdl->sdl_alen;
3029 	boolean_t firsttime = B_TRUE;
3030 
3031 	if (sdl->sdl_nlen) {
3032 		(void) memcpy(obuf, sdl->sdl_data, sdl->sdl_nlen);
3033 		out += sdl->sdl_nlen;
3034 		if (sdl->sdl_alen)
3035 			*out++ = ':';
3036 	}
3037 	while (in < inlim) {
3038 		if (firsttime)
3039 			firsttime = B_FALSE;
3040 		else
3041 			*out++ = '.';
3042 		i = *in++;
3043 		if (i > 0xf) {
3044 			out[1] = hexlist[i & 0xf];
3045 			i >>= 4;
3046 			out[0] = hexlist[i];
3047 			out += 2;
3048 		} else {
3049 			*out++ = hexlist[i];
3050 		}
3051 	}
3052 	*out = 0;
3053 	return (obuf);
3054 }
3055 
3056 static mib_item_t *
3057 mibget(int sd)
3058 {
3059 	intmax_t		buf[512 / sizeof (intmax_t)];
3060 	int			flags;
3061 	int			i, j, getcode;
3062 	struct strbuf		ctlbuf, databuf;
3063 	struct T_optmgmt_req	*tor = (struct T_optmgmt_req *)buf;
3064 	struct T_optmgmt_ack	*toa = (struct T_optmgmt_ack *)buf;
3065 	struct T_error_ack	*tea = (struct T_error_ack *)buf;
3066 	struct opthdr		*req;
3067 	mib_item_t		*first_item = NULL;
3068 	mib_item_t		*last_item  = NULL;
3069 	mib_item_t		*temp;
3070 
3071 	tor->PRIM_type = T_SVR4_OPTMGMT_REQ;
3072 	tor->OPT_offset = sizeof (struct T_optmgmt_req);
3073 	tor->OPT_length = sizeof (struct opthdr);
3074 	tor->MGMT_flags = T_CURRENT;
3075 	req = (struct opthdr *)&tor[1];
3076 	req->level = MIB2_IP;		/* any MIB2_xxx value ok here */
3077 	req->name  = 0;
3078 	req->len   = 0;
3079 
3080 	ctlbuf.buf = (char *)buf;
3081 	ctlbuf.len = tor->OPT_length + tor->OPT_offset;
3082 	flags = 0;
3083 	if (putmsg(sd, &ctlbuf, NULL, flags) < 0) {
3084 		perror("mibget: putmsg (ctl)");
3085 		return (NULL);
3086 	}
3087 	/*
3088 	 * each reply consists of a ctl part for one fixed structure
3089 	 * or table, as defined in mib2.h.  The format is a T_OPTMGMT_ACK,
3090 	 * containing an opthdr structure.  level/name identify the entry,
3091 	 * len is the size of the data part of the message.
3092 	 */
3093 	req = (struct opthdr *)&toa[1];
3094 	ctlbuf.maxlen = sizeof (buf);
3095 	for (j = 1; ; j++) {
3096 		flags = 0;
3097 		getcode = getmsg(sd, &ctlbuf, NULL, &flags);
3098 		if (getcode < 0) {
3099 			perror("mibget: getmsg (ctl)");
3100 			if (verbose) {
3101 				(void) fprintf(stderr,
3102 				    "#   level   name    len\n");
3103 				i = 0;
3104 				for (last_item = first_item; last_item != NULL;
3105 				    last_item = last_item->next_item) {
3106 					(void) printf("%d  %4ld   %5ld   %ld\n",
3107 					    ++i, last_item->group,
3108 					    last_item->mib_id,
3109 					    last_item->length);
3110 				}
3111 			}
3112 			break;
3113 		}
3114 		if (getcode == 0 &&
3115 		    ctlbuf.len >= sizeof (struct T_optmgmt_ack) &&
3116 		    toa->PRIM_type == T_OPTMGMT_ACK &&
3117 		    toa->MGMT_flags == T_SUCCESS &&
3118 		    req->len == 0) {
3119 			if (verbose) {
3120 				(void) printf("mibget getmsg() %d returned EOD "
3121 				    "(level %lu, name %lu)\n", j, req->level,
3122 				    req->name);
3123 			}
3124 			return (first_item);		/* this is EOD msg */
3125 		}
3126 
3127 		if (ctlbuf.len >= sizeof (struct T_error_ack) &&
3128 		    tea->PRIM_type == T_ERROR_ACK) {
3129 			(void) fprintf(stderr, gettext("mibget %d gives "
3130 			    "T_ERROR_ACK: TLI_error = 0x%lx, UNIX_error = "
3131 			    "0x%lx\n"), j, tea->TLI_error, tea->UNIX_error);
3132 			errno = (tea->TLI_error == TSYSERR) ?
3133 			    tea->UNIX_error : EPROTO;
3134 			break;
3135 		}
3136 
3137 		if (getcode != MOREDATA ||
3138 		    ctlbuf.len < sizeof (struct T_optmgmt_ack) ||
3139 		    toa->PRIM_type != T_OPTMGMT_ACK ||
3140 		    toa->MGMT_flags != T_SUCCESS) {
3141 			(void) printf("mibget getmsg(ctl) %d returned %d, "
3142 			    "ctlbuf.len = %d, PRIM_type = %ld\n",
3143 			    j, getcode, ctlbuf.len, toa->PRIM_type);
3144 			if (toa->PRIM_type == T_OPTMGMT_ACK) {
3145 				(void) printf("T_OPTMGMT_ACK: "
3146 				    "MGMT_flags = 0x%lx, req->len = %ld\n",
3147 				    toa->MGMT_flags, req->len);
3148 			}
3149 			errno = ENOMSG;
3150 			break;
3151 		}
3152 
3153 		temp = malloc(sizeof (mib_item_t));
3154 		if (temp == NULL) {
3155 			perror("mibget: malloc");
3156 			break;
3157 		}
3158 		if (last_item != NULL)
3159 			last_item->next_item = temp;
3160 		else
3161 			first_item = temp;
3162 		last_item = temp;
3163 		last_item->next_item = NULL;
3164 		last_item->group = req->level;
3165 		last_item->mib_id = req->name;
3166 		last_item->length = req->len;
3167 		last_item->valp = malloc(req->len);
3168 		if (verbose) {
3169 			(void) printf("msg %d:  group = %4ld   mib_id = %5ld   "
3170 			    "length = %ld\n",
3171 			    j, last_item->group, last_item->mib_id,
3172 			    last_item->length);
3173 		}
3174 
3175 		databuf.maxlen = last_item->length;
3176 		databuf.buf    = (char *)last_item->valp;
3177 		databuf.len    = 0;
3178 		flags = 0;
3179 		getcode = getmsg(sd, NULL, &databuf, &flags);
3180 		if (getcode < 0) {
3181 			perror("mibget: getmsg (data)");
3182 			break;
3183 		} else if (getcode != 0) {
3184 			(void) printf("mibget getmsg(data) returned %d, "
3185 			    "databuf.maxlen = %d, databuf.len = %d\n",
3186 			    getcode, databuf.maxlen, databuf.len);
3187 			break;
3188 		}
3189 	}
3190 
3191 	/*
3192 	 * On error, free all the allocated mib_item_t objects.
3193 	 */
3194 	while (first_item != NULL) {
3195 		last_item = first_item;
3196 		first_item = first_item->next_item;
3197 		free(last_item);
3198 	}
3199 	return (NULL);
3200 }
3201 
3202 /*
3203  * print label security attributes for gateways.
3204  */
3205 static void
3206 pmsg_secattr(const char *sptr, size_t msglen, const char *labelstr)
3207 {
3208 	rtm_ext_t rtm_ext;
3209 	tsol_rtsecattr_t sp;
3210 	struct rtsa_s *rtsa = &sp.rtsa_attr[0];
3211 	const char *endptr;
3212 	char buf[256];
3213 	int i;
3214 
3215 	if (!is_system_labeled())
3216 		return;
3217 
3218 	endptr = sptr + msglen;
3219 
3220 	for (;;) {
3221 		if (sptr + sizeof (rtm_ext_t) + sizeof (sp) > endptr)
3222 			return;
3223 
3224 		bcopy(sptr, &rtm_ext, sizeof (rtm_ext));
3225 		sptr += sizeof (rtm_ext);
3226 		if (rtm_ext.rtmex_type == RTMEX_GATEWAY_SECATTR)
3227 			break;
3228 		sptr += rtm_ext.rtmex_len;
3229 	}
3230 
3231 	/* bail if this entry is corrupt or overruns buffer length */
3232 	if (rtm_ext.rtmex_len < sizeof (sp) ||
3233 	    sptr + rtm_ext.rtmex_len > endptr)
3234 		return;
3235 
3236 	/* run up just to the end of this extension */
3237 	endptr = sptr + rtm_ext.rtmex_len;
3238 
3239 	bcopy(sptr, &sp, sizeof (sp));
3240 	sptr += sizeof (sp);
3241 
3242 	if (sptr + (sp.rtsa_cnt - 1) * sizeof (*rtsa) != endptr)
3243 		return;
3244 
3245 	for (i = 0; i < sp.rtsa_cnt; i++) {
3246 		if (i > 0) {
3247 			/* first element is part of sp initalized above */
3248 			bcopy(sptr, rtsa, sizeof (*rtsa));
3249 			sptr += sizeof (*rtsa);
3250 		}
3251 		(void) printf("\n%s%s", labelstr, rtsa_to_str(rtsa, buf,
3252 		    sizeof (buf)));
3253 	}
3254 }
3255