1 /* 2 * Copyright 2006 Sun Microsystems, Inc. All rights reserved. 3 * Use is subject to license terms. 4 */ 5 6 /* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T */ 7 /* All Rights Reserved */ 8 9 /* Copyright (c) 1990 Mentat Inc. */ 10 11 /* 12 * 13 * Copyright (c) 1983, 1989, 1991, 1993 14 * The Regents of the University of California. All rights reserved. 15 * 16 * Redistribution and use in source and binary forms, with or without 17 * modification, are permitted provided that the following conditions 18 * are met: 19 * 1. Redistributions of source code must retain the above copyright 20 * notice, this list of conditions and the following disclaimer. 21 * 2. Redistributions in binary form must reproduce the above copyright 22 * notice, this list of conditions and the following disclaimer in the 23 * documentation and/or other materials provided with the distribution. 24 * 3. All advertising materials mentioning features or use of this software 25 * must display the following acknowledgement: 26 * This product includes software developed by the University of 27 * California, Berkeley and its contributors. 28 * 4. Neither the name of the University nor the names of its contributors 29 * may be used to endorse or promote products derived from this software 30 * without specific prior written permission. 31 * 32 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 33 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 34 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 35 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 36 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 37 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 38 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 39 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 40 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 41 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 42 * SUCH DAMAGE. 43 * 44 * @(#)route.c 8.6 (Berkeley) 4/28/95 45 * @(#)linkaddr.c 8.1 (Berkeley) 6/4/93 46 */ 47 48 #pragma ident "%Z%%M% %I% %E% SMI" 49 50 #include <sys/param.h> 51 #include <sys/file.h> 52 #include <sys/socket.h> 53 #include <sys/ioctl.h> 54 #include <sys/stat.h> 55 #include <sys/stream.h> 56 #include <sys/sysmacros.h> 57 #include <sys/tihdr.h> 58 #include <sys/types.h> 59 #include <sys/ccompile.h> 60 61 #include <net/if.h> 62 #include <net/route.h> 63 #include <net/if_dl.h> 64 #include <netinet/in.h> 65 #include <arpa/inet.h> 66 #include <netdb.h> 67 #include <inet/mib2.h> 68 #include <inet/ip.h> 69 70 #include <limits.h> 71 #include <locale.h> 72 73 #include <errno.h> 74 #include <unistd.h> 75 #include <stdio.h> 76 #include <stdlib.h> 77 #include <stddef.h> 78 #include <string.h> 79 #include <stropts.h> 80 #include <fcntl.h> 81 #include <stdarg.h> 82 #include <assert.h> 83 #include <strings.h> 84 85 #include <libtsnet.h> 86 #include <tsol/label.h> 87 88 static struct keytab { 89 char *kt_cp; 90 int kt_i; 91 } keywords[] = { 92 #define K_ADD 1 93 {"add", K_ADD}, 94 #define K_BLACKHOLE 2 95 {"blackhole", K_BLACKHOLE}, 96 #define K_CHANGE 3 97 {"change", K_CHANGE}, 98 #define K_CLONING 4 99 {"cloning", K_CLONING}, 100 #define K_DELETE 5 101 {"delete", K_DELETE}, 102 #define K_DST 6 103 {"dst", K_DST}, 104 #define K_EXPIRE 7 105 {"expire", K_EXPIRE}, 106 #define K_FLUSH 8 107 {"flush", K_FLUSH}, 108 #define K_GATEWAY 9 109 {"gateway", K_GATEWAY}, 110 #define K_GET 11 111 {"get", K_GET}, 112 #define K_HOPCOUNT 12 113 {"hopcount", K_HOPCOUNT}, 114 #define K_HOST 13 115 {"host", K_HOST}, 116 #define K_IFA 14 117 {"ifa", K_IFA}, 118 #define K_IFACE 15 119 {"iface", K_IFACE}, 120 #define K_IFP 16 121 {"ifp", K_IFP}, 122 #define K_INET 17 123 {"inet", K_INET}, 124 #define K_INET6 18 125 {"inet6", K_INET6}, 126 #define K_INTERFACE 19 127 {"interface", K_INTERFACE}, 128 #define K_LINK 20 129 {"link", K_LINK}, 130 #define K_LOCK 21 131 {"lock", K_LOCK}, 132 #define K_LOCKREST 22 133 {"lockrest", K_LOCKREST}, 134 #define K_MASK 23 135 {"mask", K_MASK}, 136 #define K_MONITOR 24 137 {"monitor", K_MONITOR}, 138 #define K_MTU 25 139 {"mtu", K_MTU}, 140 #define K_NET 26 141 {"net", K_NET}, 142 #define K_NETMASK 27 143 {"netmask", K_NETMASK}, 144 #define K_NOSTATIC 28 145 {"nostatic", K_NOSTATIC}, 146 #define K_PRIVATE 29 147 {"private", K_PRIVATE}, 148 #define K_PROTO1 30 149 {"proto1", K_PROTO1}, 150 #define K_PROTO2 31 151 {"proto2", K_PROTO2}, 152 #define K_RECVPIPE 32 153 {"recvpipe", K_RECVPIPE}, 154 #define K_REJECT 33 155 {"reject", K_REJECT}, 156 #define K_RTT 34 157 {"rtt", K_RTT}, 158 #define K_RTTVAR 35 159 {"rttvar", K_RTTVAR}, 160 #define K_SA 36 161 {"sa", K_SA}, 162 #define K_SENDPIPE 37 163 {"sendpipe", K_SENDPIPE}, 164 #define K_SSTHRESH 38 165 {"ssthresh", K_SSTHRESH}, 166 #define K_STATIC 39 167 {"static", K_STATIC}, 168 #define K_XRESOLVE 40 169 {"xresolve", K_XRESOLVE}, 170 #define K_MULTIRT 41 171 {"multirt", K_MULTIRT}, 172 #define K_SETSRC 42 173 {"setsrc", K_SETSRC}, 174 #define K_SHOW 43 175 {"show", K_SHOW}, 176 #define K_SECATTR 43 177 {"secattr", K_SECATTR}, 178 {0, 0} 179 }; 180 181 /* 182 * Size of buffers used to hold command lines from the saved route file as 183 * well as error strings. 184 */ 185 #define BUF_SIZE 2048 186 187 typedef union sockunion { 188 struct sockaddr sa; 189 struct sockaddr_in sin; 190 struct sockaddr_dl sdl; 191 struct sockaddr_in6 sin6; 192 } su_t; 193 194 /* 195 * This structure represents the digested information from parsing arguments 196 * to route add, change, delete, and get. 197 * 198 */ 199 typedef struct rtcmd_irep { 200 int ri_cmd; 201 int ri_flags; 202 int ri_af; 203 ulong_t ri_inits; 204 struct rt_metrics ri_metrics; 205 int ri_addrs; 206 su_t ri_dst; 207 char *ri_dest_str; 208 su_t ri_src; 209 su_t ri_gate; 210 struct hostent *ri_gate_hp; 211 char *ri_gate_str; 212 su_t ri_mask; 213 su_t ri_ifa; 214 su_t ri_ifp; 215 char *ri_ifp_str; 216 int ri_rtsa_cnt; /* number of gateway security attributes */ 217 struct rtsa_s ri_rtsa; /* enough space for one attribute */ 218 } rtcmd_irep_t; 219 220 typedef struct mib_item_s { 221 struct mib_item_s *next_item; 222 long group; 223 long mib_id; 224 long length; 225 intmax_t *valp; 226 } mib_item_t; 227 228 typedef enum { 229 ADDR_TYPE_ANY, 230 ADDR_TYPE_HOST, 231 ADDR_TYPE_NET 232 } addr_type_t; 233 234 typedef enum { 235 SEARCH_MODE_NULL, 236 SEARCH_MODE_PRINT, 237 SEARCH_MODE_DEL 238 } search_mode_t; 239 240 static boolean_t args_to_rtcmd(rtcmd_irep_t *rcip, char **argv, 241 char *cmd_string); 242 static void bprintf(FILE *fp, int b, char *s); 243 static boolean_t compare_rtcmd(rtcmd_irep_t *srch_rt, 244 rtcmd_irep_t *file_rt); 245 static void delRouteEntry(mib2_ipRouteEntry_t *rp, 246 mib2_ipv6RouteEntry_t *rp6, int seqno); 247 static void del_rtcmd_irep(rtcmd_irep_t *rcip); 248 static void flushroutes(int argc, char *argv[]); 249 static boolean_t getaddr(rtcmd_irep_t *rcip, int which, char *s, 250 addr_type_t atype); 251 static boolean_t in6_getaddr(char *s, struct sockaddr_in6 *sin6, 252 int *plenp, struct hostent **hpp); 253 static boolean_t in_getaddr(char *s, struct sockaddr_in *sin, 254 int *plenp, int which, struct hostent **hpp, addr_type_t atype, 255 rtcmd_irep_t *rcip); 256 static int in_getprefixlen(char *addr, int max_plen); 257 static boolean_t in_prefixlentomask(int prefixlen, int maxlen, 258 uchar_t *mask); 259 static void inet_makenetandmask(rtcmd_irep_t *rcip, in_addr_t net, 260 struct sockaddr_in *sin); 261 static in_addr_t inet_makesubnetmask(in_addr_t addr, in_addr_t mask); 262 static int keyword(const char *cp); 263 static void link_addr(const char *addr, struct sockaddr_dl *sdl); 264 static char *link_ntoa(const struct sockaddr_dl *sdl); 265 static mib_item_t *mibget(int sd); 266 static char *netname(struct sockaddr *sa); 267 static int newroute(char **argv); 268 static rtcmd_irep_t *new_rtcmd_irep(void); 269 static void pmsg_addrs(const char *cp, size_t len, uint_t addrs); 270 static void pmsg_common(const struct rt_msghdr *rtm, size_t len); 271 static void print_getmsg(rtcmd_irep_t *req_rt, 272 struct rt_msghdr *rtm, int msglen); 273 static void print_rtcmd_short(FILE *to, rtcmd_irep_t *rcip, 274 boolean_t gw_good, boolean_t to_saved); 275 static void print_rtmsg(struct rt_msghdr *rtm, int msglen); 276 static void quit(char *s, int err) __NORETURN; 277 static char *routename(const struct sockaddr *sa); 278 static void rtmonitor(int argc, char *argv[]); 279 static int rtmsg(rtcmd_irep_t *rcip); 280 static int salen(const struct sockaddr *sa); 281 static void save_route(int argc, char **argv, int do_flush); 282 static void save_string(char **dst, char *src); 283 static int search_rtfile(FILE *fp, FILE *temp_fp, rtcmd_irep_t *rt, 284 search_mode_t mode); 285 static void set_metric(rtcmd_irep_t *rcip, char *value, int key, 286 boolean_t lock); 287 static int show_saved_routes(int argc); 288 static void sockaddr(char *addr, struct sockaddr *sa); 289 static void sodump(su_t *su, char *which); 290 static void syntax_arg_missing(char *keyword); 291 static void syntax_bad_keyword(char *keyword); 292 static void syntax_error(char *err, ...); 293 static void usage(char *cp); 294 static void write_to_rtfile(FILE *fp, int argc, char **argv); 295 static void pmsg_secattr(const char *, size_t, const char *); 296 297 static pid_t pid; 298 static int s; 299 static boolean_t nflag; 300 static int af = AF_INET; 301 static boolean_t qflag, tflag; 302 static boolean_t verbose; 303 static boolean_t debugonly; 304 static boolean_t fflag; 305 static boolean_t update_table; 306 static boolean_t perm_flag; 307 static boolean_t early_v6_keyword; 308 static char perm_file_sfx[] = "/etc/inet/static_routes"; 309 static char *perm_file; 310 static char temp_file_sfx[] = "/etc/inet/static_routes.tmp"; 311 static char *temp_file; 312 static struct in6_addr in6_host_mask = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 313 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff}; 314 /* 315 * WARNING: 316 * This next variable indicates whether certain functions exit when an error 317 * is detected in the user input. Currently, exit_on_error is only set false 318 * in search_rtfile(), when argument are being parsed. Only those functions 319 * used by search_rtfile() to parse its arguments are designed to work in 320 * both modes. Take particular care in setting this false to ensure that any 321 * functions you call that might act on this flag properly return errors when 322 * exit_on_error is false. 323 */ 324 static int exit_on_error = B_TRUE; 325 326 static struct { 327 struct rt_msghdr m_rtm; 328 char m_space[BUF_SIZE]; 329 } m_rtmsg; 330 331 /* 332 * Sizes of data structures extracted from the base mib. 333 * This allows the size of the tables entries to grow while preserving 334 * binary compatibility. 335 */ 336 static int ipRouteEntrySize; 337 static int ipv6RouteEntrySize; 338 339 #define ROUNDUP_LONG(a) \ 340 ((a) > 0 ? (1 + (((a) - 1) | (sizeof (long) - 1))) : sizeof (long)) 341 #define ADVANCE(x, n) ((x) += ROUNDUP_LONG(salen(n))) 342 #define C(x) ((x) & 0xff) 343 344 /* 345 * return values from in_getprefixlen() 346 */ 347 #define BAD_ADDR -1 /* prefix is invalid */ 348 #define NO_PREFIX -2 /* no prefix was found */ 349 350 void 351 usage(char *cp) 352 { 353 if (cp != NULL) { 354 (void) fprintf(stderr, gettext("route: botched keyword: %s\n"), 355 cp); 356 } 357 (void) fprintf(stderr, gettext("usage: route [ -fnpqv ] " 358 "[ -R <root-dir> ] cmd [[ -<qualifers> ] args ]\n")); 359 exit(1); 360 /* NOTREACHED */ 361 } 362 363 /*PRINTFLIKE1*/ 364 void 365 syntax_error(char *err, ...) 366 { 367 va_list args; 368 369 if (exit_on_error) { 370 va_start(args, err); 371 (void) vfprintf(stderr, err, args); 372 va_end(args); 373 exit(1); 374 } 375 /* NOTREACHED */ 376 } 377 378 void 379 syntax_bad_keyword(char *keyword) 380 { 381 syntax_error(gettext("route: botched keyword: %s\n"), keyword); 382 } 383 384 void 385 syntax_arg_missing(char *keyword) 386 { 387 syntax_error(gettext("route: argument required following keyword %s\n"), 388 keyword); 389 } 390 391 void 392 quit(char *s, int sverrno) 393 { 394 (void) fprintf(stderr, "route: "); 395 if (s != NULL) 396 (void) fprintf(stderr, "%s: ", s); 397 (void) fprintf(stderr, "%s\n", strerror(sverrno)); 398 exit(sverrno); 399 /* NOTREACHED */ 400 } 401 402 int 403 main(int argc, char **argv) 404 { 405 extern int optind; 406 extern char *optarg; 407 int ch; 408 int rval; 409 size_t size; 410 const char *root_dir = NULL; 411 412 (void) setlocale(LC_ALL, ""); 413 414 #if !defined(TEXT_DOMAIN) 415 #define TEXT_DOMAIN "SYS_TEST" 416 #endif 417 (void) textdomain(TEXT_DOMAIN); 418 419 if (argc < 2) 420 usage(NULL); 421 422 while ((ch = getopt(argc, argv, "R:nqdtvfp")) != EOF) { 423 switch (ch) { 424 case 'n': 425 nflag = B_TRUE; 426 break; 427 case 'q': 428 qflag = B_TRUE; 429 break; 430 case 'v': 431 verbose = B_TRUE; 432 break; 433 case 't': 434 tflag = B_TRUE; 435 break; 436 case 'd': 437 debugonly = B_TRUE; 438 break; 439 case 'f': 440 fflag = B_TRUE; 441 break; 442 case 'p': 443 perm_flag = B_TRUE; 444 break; 445 case 'R': 446 root_dir = optarg; 447 break; 448 case '?': 449 default: 450 usage(NULL); 451 /* NOTREACHED */ 452 } 453 } 454 argc -= optind; 455 argv += optind; 456 457 pid = getpid(); 458 if (tflag) 459 s = open("/dev/null", O_WRONLY); 460 else 461 s = socket(PF_ROUTE, SOCK_RAW, 0); 462 if (s < 0) 463 quit("socket", errno); 464 465 /* 466 * Handle the -p and -R flags. The -R flag only applies 467 * when the -p flag is set. 468 */ 469 if (root_dir == NULL) { 470 perm_file = perm_file_sfx; 471 temp_file = temp_file_sfx; 472 } else { 473 size = strlen(root_dir) + sizeof (perm_file_sfx); 474 perm_file = malloc(size); 475 if (perm_file == NULL) 476 quit("malloc", errno); 477 (void) snprintf(perm_file, size, "%s%s", root_dir, 478 perm_file_sfx); 479 size = strlen(root_dir) + sizeof (temp_file_sfx); 480 temp_file = malloc(size); 481 if (temp_file == NULL) 482 quit("malloc", errno); 483 (void) snprintf(temp_file, size, "%s%s", root_dir, 484 temp_file_sfx); 485 } 486 /* 487 * Whether or not to act on the routing table. The only time the 488 * routing table is not modified is when both -p and -R are present. 489 */ 490 update_table = (!perm_flag || root_dir == NULL); 491 if (tflag) 492 perm_flag = 0; 493 494 if (fflag) { 495 /* 496 * Accept an address family keyword after the -f. Since the 497 * default address family is AF_INET, reassign af only for the 498 * other valid address families. 499 */ 500 if (*argv != NULL) { 501 switch (keyword(*argv)) { 502 case K_INET6: 503 af = AF_INET6; 504 early_v6_keyword = B_TRUE; 505 /* fallthrough */ 506 case K_INET: 507 /* Skip over the address family parameter. */ 508 argc--; 509 argv++; 510 break; 511 } 512 } 513 flushroutes(0, NULL); 514 } 515 516 if (*argv != NULL) { 517 switch (keyword(*argv)) { 518 case K_GET: 519 case K_CHANGE: 520 case K_ADD: 521 case K_DELETE: 522 rval = 0; 523 if (update_table) { 524 rval = newroute(argv); 525 } 526 if (perm_flag && (rval == 0 || rval == EEXIST || 527 rval == ESRCH)) { 528 save_route(argc, argv, B_FALSE); 529 return (0); 530 } 531 return (rval); 532 case K_SHOW: 533 if (perm_flag) { 534 return (show_saved_routes(argc)); 535 } else { 536 syntax_error(gettext( 537 "route: show command requires -p\n")); 538 } 539 /* NOTREACHED */ 540 case K_MONITOR: 541 rtmonitor(argc, argv); 542 /* NOTREACHED */ 543 544 case K_FLUSH: 545 flushroutes(argc, argv); 546 return (0); 547 } 548 } 549 if (!fflag) 550 usage(*argv); 551 return (0); 552 } 553 554 /* 555 * Purge all entries in the routing tables not 556 * associated with network interfaces. 557 */ 558 void 559 flushroutes(int argc, char *argv[]) 560 { 561 int seqno; 562 int sd; /* mib stream */ 563 mib_item_t *item; 564 mib2_ipRouteEntry_t *rp; 565 mib2_ipv6RouteEntry_t *rp6; 566 int oerrno; 567 int off = 0; 568 int on = 1; 569 570 if (argc > 1) { 571 argv++; 572 if (argc == 2 && **argv == '-') { 573 /* 574 * The address family (preceded by a dash) may be used 575 * to flush the routes of that particular family. 576 */ 577 switch (keyword(*argv + 1)) { 578 case K_INET: 579 af = AF_INET; 580 break; 581 case K_LINK: 582 af = AF_LINK; 583 break; 584 case K_INET6: 585 af = AF_INET6; 586 break; 587 default: 588 usage(*argv); 589 /* NOTREACHED */ 590 } 591 } else { 592 usage(*argv); 593 } 594 } 595 if (perm_flag) { 596 /* This flushes the persistent route file */ 597 save_route(0, NULL, B_TRUE); 598 } 599 if (!update_table) { 600 return; 601 } 602 603 if (setsockopt(s, SOL_SOCKET, SO_USELOOPBACK, (char *)&off, 604 sizeof (off)) < 0) 605 quit("setsockopt", errno); 606 607 sd = open("/dev/ip", O_RDWR); 608 oerrno = errno; 609 if (sd < 0) { 610 switch (errno) { 611 case EACCES: 612 (void) fprintf(stderr, 613 gettext("route: flush: insufficient privileges\n")); 614 exit(oerrno); 615 /* NOTREACHED */ 616 default: 617 quit(gettext("can't open mib stream"), oerrno); 618 /* NOTREACHED */ 619 } 620 } 621 if ((item = mibget(sd)) == NULL) 622 quit("mibget", errno); 623 if (verbose) { 624 (void) printf("Examining routing table from " 625 "T_SVR4_OPTMGMT_REQ\n"); 626 } 627 seqno = 0; /* ??? */ 628 switch (af) { 629 case AF_INET: 630 /* Extract ipRouteEntrySize */ 631 for (; item != NULL; item = item->next_item) { 632 if (item->mib_id != 0) 633 continue; 634 if (item->group == MIB2_IP) { 635 ipRouteEntrySize = 636 ((mib2_ip_t *)item->valp)->ipRouteEntrySize; 637 assert(IS_P2ALIGNED(ipRouteEntrySize, 638 sizeof (mib2_ipRouteEntry_t *))); 639 break; 640 } 641 } 642 if (ipRouteEntrySize == 0) { 643 (void) fprintf(stderr, 644 gettext("ipRouteEntrySize can't be determined.\n")); 645 exit(1); 646 } 647 for (; item != NULL; item = item->next_item) { 648 /* 649 * skip all the other trash that comes up the mib stream 650 */ 651 if (item->group != MIB2_IP || 652 item->mib_id != MIB2_IP_ROUTE) 653 continue; 654 for (rp = (mib2_ipRouteEntry_t *)item->valp; 655 (char *)rp < (char *)item->valp + item->length; 656 /* LINTED */ 657 rp = (mib2_ipRouteEntry_t *) 658 ((char *)rp + ipRouteEntrySize)) { 659 delRouteEntry(rp, NULL, seqno); 660 seqno++; 661 } 662 break; 663 } 664 break; 665 case AF_INET6: 666 /* Extract ipv6RouteEntrySize */ 667 for (; item != NULL; item = item->next_item) { 668 if (item->mib_id != 0) 669 continue; 670 if (item->group == MIB2_IP6) { 671 ipv6RouteEntrySize = 672 ((mib2_ipv6IfStatsEntry_t *)item->valp)-> 673 ipv6RouteEntrySize; 674 assert(IS_P2ALIGNED(ipv6RouteEntrySize, 675 sizeof (mib2_ipv6RouteEntry_t *))); 676 break; 677 } 678 } 679 if (ipv6RouteEntrySize == 0) { 680 (void) fprintf(stderr, gettext( 681 "ipv6RouteEntrySize cannot be determined.\n")); 682 exit(1); 683 } 684 for (; item != NULL; item = item->next_item) { 685 /* 686 * skip all the other trash that comes up the mib stream 687 */ 688 if (item->group != MIB2_IP6 || 689 item->mib_id != MIB2_IP6_ROUTE) 690 continue; 691 for (rp6 = (mib2_ipv6RouteEntry_t *)item->valp; 692 (char *)rp6 < (char *)item->valp + item->length; 693 /* LINTED */ 694 rp6 = (mib2_ipv6RouteEntry_t *) 695 ((char *)rp6 + ipv6RouteEntrySize)) { 696 delRouteEntry(NULL, rp6, seqno); 697 seqno++; 698 } 699 break; 700 } 701 break; 702 } 703 704 if (setsockopt(s, SOL_SOCKET, SO_USELOOPBACK, (char *)&on, 705 sizeof (on)) < 0) 706 quit("setsockopt", errno); 707 } 708 709 /* 710 * Given the contents of a mib_item_t of id type MIB2_IP_ROUTE or 711 * MIB2_IP6_ROUTE, construct and send an RTM_DELETE routing socket message in 712 * order to facilitate the flushing of RTF_GATEWAY routes. 713 */ 714 static void 715 delRouteEntry(mib2_ipRouteEntry_t *rp, mib2_ipv6RouteEntry_t *rp6, int seqno) 716 { 717 char *cp; 718 int ire_type; 719 int rlen; 720 struct rt_msghdr *rtm; 721 struct sockaddr_in sin; 722 struct sockaddr_in6 sin6; 723 int slen; 724 725 if (rp != NULL) 726 ire_type = rp->ipRouteInfo.re_ire_type; 727 else 728 ire_type = rp6->ipv6RouteInfo.re_ire_type; 729 if (ire_type != IRE_DEFAULT && 730 ire_type != IRE_PREFIX && 731 ire_type != IRE_HOST && 732 ire_type != IRE_HOST_REDIRECT) 733 return; 734 735 rtm = &m_rtmsg.m_rtm; 736 (void) memset(rtm, 0, sizeof (m_rtmsg)); 737 rtm->rtm_type = RTM_DELETE; 738 rtm->rtm_seq = seqno; 739 rtm->rtm_flags |= RTF_GATEWAY; 740 rtm->rtm_version = RTM_VERSION; 741 rtm->rtm_addrs = RTA_DST | RTA_GATEWAY | RTA_NETMASK; 742 cp = m_rtmsg.m_space; 743 if (rp != NULL) { 744 slen = sizeof (struct sockaddr_in); 745 if (rp->ipRouteMask == IP_HOST_MASK) 746 rtm->rtm_flags |= RTF_HOST; 747 (void) memset(&sin, 0, slen); 748 sin.sin_family = AF_INET; 749 sin.sin_addr.s_addr = rp->ipRouteDest; 750 (void) memmove(cp, &sin, slen); 751 cp += slen; 752 sin.sin_addr.s_addr = rp->ipRouteNextHop; 753 (void) memmove(cp, &sin, slen); 754 cp += slen; 755 sin.sin_addr.s_addr = rp->ipRouteMask; 756 (void) memmove(cp, &sin, slen); 757 cp += slen; 758 } else { 759 slen = sizeof (struct sockaddr_in6); 760 if (rp6->ipv6RoutePfxLength == IPV6_ABITS) 761 rtm->rtm_flags |= RTF_HOST; 762 (void) memset(&sin6, 0, slen); 763 sin6.sin6_family = AF_INET6; 764 sin6.sin6_addr = rp6->ipv6RouteDest; 765 (void) memmove(cp, &sin6, slen); 766 cp += slen; 767 sin6.sin6_addr = rp6->ipv6RouteNextHop; 768 (void) memmove(cp, &sin6, slen); 769 cp += slen; 770 (void) memset(&sin6.sin6_addr, 0, sizeof (sin6.sin6_addr)); 771 (void) in_prefixlentomask(rp6->ipv6RoutePfxLength, IPV6_ABITS, 772 (uchar_t *)&sin6.sin6_addr.s6_addr); 773 (void) memmove(cp, &sin6, slen); 774 cp += slen; 775 } 776 rtm->rtm_msglen = cp - (char *)&m_rtmsg; 777 if (debugonly) { 778 /* 779 * In debugonly mode, the routing socket message to delete the 780 * current entry is not actually sent. However if verbose is 781 * also set, the routing socket message that would have been 782 * is printed. 783 */ 784 if (verbose) 785 print_rtmsg(rtm, rtm->rtm_msglen); 786 return; 787 } 788 789 rlen = write(s, (char *)&m_rtmsg, rtm->rtm_msglen); 790 if (rlen < (int)rtm->rtm_msglen) { 791 if (rlen < 0) { 792 (void) fprintf(stderr, 793 gettext("route: write to routing socket: %s\n"), 794 strerror(errno)); 795 } else { 796 (void) fprintf(stderr, gettext("route: write to " 797 "routing socket got only %d for rlen\n"), rlen); 798 } 799 return; 800 } 801 if (qflag) { 802 /* 803 * In quiet mode, nothing is printed at all (unless the write() 804 * itself failed. 805 */ 806 return; 807 } 808 if (verbose) { 809 print_rtmsg(rtm, rlen); 810 } else { 811 struct sockaddr *sa = (struct sockaddr *)(rtm + 1); 812 813 (void) printf("%-20.20s ", 814 rtm->rtm_flags & RTF_HOST ? routename(sa) : 815 netname(sa)); 816 /* LINTED */ 817 sa = (struct sockaddr *)(salen(sa) + (char *)sa); 818 (void) printf("%-20.20s ", routename(sa)); 819 (void) printf("done\n"); 820 } 821 } 822 823 /* 824 * Return the name of the host whose address is given. 825 */ 826 char * 827 routename(const struct sockaddr *sa) 828 { 829 char *cp; 830 static char line[MAXHOSTNAMELEN + 1]; 831 struct hostent *hp = NULL; 832 static char domain[MAXHOSTNAMELEN + 1]; 833 static boolean_t first = B_TRUE; 834 struct in_addr in; 835 struct in6_addr in6; 836 int error_num; 837 ushort_t *s; 838 ushort_t *slim; 839 840 if (first) { 841 first = B_FALSE; 842 if (gethostname(domain, MAXHOSTNAMELEN) == 0 && 843 (cp = strchr(domain, '.'))) 844 (void) strcpy(domain, cp + 1); 845 else 846 domain[0] = 0; 847 } 848 849 if (salen(sa) == 0) { 850 (void) strcpy(line, "default"); 851 return (line); 852 } 853 switch (sa->sa_family) { 854 855 case AF_INET: 856 /* LINTED */ 857 in = ((struct sockaddr_in *)sa)->sin_addr; 858 859 cp = NULL; 860 if (in.s_addr == INADDR_ANY) 861 cp = "default"; 862 if (cp == NULL && !nflag) { 863 hp = gethostbyaddr((char *)&in, sizeof (struct in_addr), 864 AF_INET); 865 if (hp != NULL) { 866 if (((cp = strchr(hp->h_name, '.')) != NULL) && 867 (strcmp(cp + 1, domain) == 0)) 868 *cp = 0; 869 cp = hp->h_name; 870 } 871 } 872 if (cp != NULL) { 873 (void) strncpy(line, cp, MAXHOSTNAMELEN); 874 line[MAXHOSTNAMELEN] = '\0'; 875 } else { 876 in.s_addr = ntohl(in.s_addr); 877 (void) sprintf(line, "%u.%u.%u.%u", C(in.s_addr >> 24), 878 C(in.s_addr >> 16), C(in.s_addr >> 8), 879 C(in.s_addr)); 880 } 881 break; 882 883 case AF_LINK: 884 return (link_ntoa((struct sockaddr_dl *)sa)); 885 886 case AF_INET6: 887 /* LINTED */ 888 in6 = ((struct sockaddr_in6 *)sa)->sin6_addr; 889 890 cp = NULL; 891 if (IN6_IS_ADDR_UNSPECIFIED(&in6)) 892 cp = "default"; 893 if (cp == NULL && !nflag) { 894 hp = getipnodebyaddr((char *)&in6, 895 sizeof (struct in6_addr), AF_INET6, &error_num); 896 if (hp != NULL) { 897 if (((cp = strchr(hp->h_name, '.')) != NULL) && 898 (strcmp(cp + 1, domain) == 0)) 899 *cp = 0; 900 cp = hp->h_name; 901 } 902 } 903 if (cp != NULL) { 904 (void) strncpy(line, cp, MAXHOSTNAMELEN); 905 line[MAXHOSTNAMELEN] = '\0'; 906 } else { 907 (void) inet_ntop(AF_INET6, (void *)&in6, line, 908 INET6_ADDRSTRLEN); 909 } 910 if (hp != NULL) 911 freehostent(hp); 912 913 break; 914 915 default: 916 s = (ushort_t *)sa; 917 918 slim = s + ((salen(sa) + 1) >> 1); 919 cp = line + sprintf(line, "(%d)", sa->sa_family); 920 921 while (++s < slim) /* start with sa->sa_data */ 922 cp += sprintf(cp, " %x", *s); 923 break; 924 } 925 return (line); 926 } 927 928 /* 929 * Return the name of the network whose address is given. 930 * The address is assumed to be that of a net or subnet, not a host. 931 */ 932 static char * 933 netname(struct sockaddr *sa) 934 { 935 char *cp = NULL; 936 static char line[MAXHOSTNAMELEN + 1]; 937 struct netent *np; 938 in_addr_t net, mask; 939 int subnetshift; 940 struct in_addr in; 941 ushort_t *s; 942 ushort_t *slim; 943 944 switch (sa->sa_family) { 945 946 case AF_INET: 947 /* LINTED */ 948 in = ((struct sockaddr_in *)sa)->sin_addr; 949 950 in.s_addr = ntohl(in.s_addr); 951 if (in.s_addr == INADDR_ANY) { 952 cp = "default"; 953 } else if (!nflag) { 954 if (IN_CLASSA(in.s_addr)) { 955 mask = IN_CLASSA_NET; 956 subnetshift = 8; 957 } else if (IN_CLASSB(in.s_addr)) { 958 mask = IN_CLASSB_NET; 959 subnetshift = 8; 960 } else { 961 mask = IN_CLASSC_NET; 962 subnetshift = 4; 963 } 964 /* 965 * If there are more bits than the standard mask 966 * would suggest, subnets must be in use. 967 * Guess at the subnet mask, assuming reasonable 968 * width subnet fields. 969 */ 970 while (in.s_addr &~ mask) 971 mask = (long)mask >> subnetshift; 972 net = in.s_addr & mask; 973 while ((mask & 1) == 0) 974 mask >>= 1, net >>= 1; 975 np = getnetbyaddr(net, AF_INET); 976 if (np != NULL) 977 cp = np->n_name; 978 } 979 if (cp != NULL) { 980 (void) strncpy(line, cp, MAXHOSTNAMELEN); 981 line[MAXHOSTNAMELEN] = '\0'; 982 } else if ((in.s_addr & 0xffffff) == 0) { 983 (void) sprintf(line, "%u", C(in.s_addr >> 24)); 984 } else if ((in.s_addr & 0xffff) == 0) { 985 (void) sprintf(line, "%u.%u", C(in.s_addr >> 24), 986 C(in.s_addr >> 16)); 987 } else if ((in.s_addr & 0xff) == 0) { 988 (void) sprintf(line, "%u.%u.%u", C(in.s_addr >> 24), 989 C(in.s_addr >> 16), C(in.s_addr >> 8)); 990 } else { 991 (void) sprintf(line, "%u.%u.%u.%u", C(in.s_addr >> 24), 992 C(in.s_addr >> 16), C(in.s_addr >> 8), 993 C(in.s_addr)); 994 } 995 break; 996 997 case AF_LINK: 998 return (link_ntoa((struct sockaddr_dl *)sa)); 999 1000 case AF_INET6: 1001 return (routename(sa)); 1002 1003 default: 1004 /* LINTED */ 1005 s = (ushort_t *)sa->sa_data; 1006 1007 slim = s + ((salen(sa) + 1) >> 1); 1008 cp = line + sprintf(line, "af %d:", sa->sa_family); 1009 1010 while (s < slim) 1011 cp += sprintf(cp, " %x", *s++); 1012 break; 1013 } 1014 return (line); 1015 } 1016 1017 /* 1018 * Initialize a new structure. Keep in mind that ri_dst_str, ri_gate_str and 1019 * ri_ifp_str will be freed by det_rtcmd_irep, so they should either be NULL 1020 * or point to dynamically allocated memory. 1021 */ 1022 rtcmd_irep_t * 1023 new_rtcmd_irep(void) 1024 { 1025 rtcmd_irep_t *rcip; 1026 1027 rcip = calloc(1, sizeof (rtcmd_irep_t)); 1028 if (rcip == NULL) { 1029 quit("calloc", errno); 1030 } 1031 rcip->ri_af = af; 1032 rcip->ri_flags = RTF_STATIC; 1033 return (rcip); 1034 } 1035 1036 void 1037 del_rtcmd_irep(rtcmd_irep_t *rcip) 1038 { 1039 free(rcip->ri_dest_str); 1040 free(rcip->ri_gate_str); 1041 free(rcip->ri_ifp_str); 1042 if (rcip->ri_gate_hp != NULL) { 1043 freehostent(rcip->ri_gate_hp); 1044 } 1045 free(rcip); 1046 } 1047 1048 void 1049 save_string(char **dst, char *src) 1050 { 1051 free(*dst); 1052 *dst = strdup(src); 1053 if (*dst == NULL) { 1054 quit("malloc", errno); 1055 } 1056 } 1057 1058 /* 1059 * Print the short form summary of a route command. 1060 * Eg. "add net default: gateway 10.0.0.1" 1061 * The final newline is not added, allowing the caller to append additional 1062 * information. 1063 */ 1064 void 1065 print_rtcmd_short(FILE *to, rtcmd_irep_t *rcip, boolean_t gw_good, 1066 boolean_t to_saved) 1067 { 1068 char *cmd; 1069 char obuf[INET6_ADDRSTRLEN]; 1070 1071 switch (rcip->ri_cmd) { 1072 case RTM_ADD: 1073 cmd = "add"; 1074 break; 1075 case RTM_CHANGE: 1076 cmd = "change"; 1077 break; 1078 case RTM_DELETE: 1079 cmd = "delete"; 1080 break; 1081 case RTM_GET: 1082 cmd = "get"; 1083 break; 1084 default: 1085 assert(0); 1086 } 1087 1088 (void) fprintf(to, "%s%s %s %s", cmd, 1089 (to_saved) ? " persistent" : "", 1090 (rcip->ri_flags & RTF_HOST) ? "host" : "net", 1091 (rcip->ri_dest_str == NULL) ? "NULL" : rcip->ri_dest_str); 1092 1093 if (rcip->ri_gate_str != NULL) { 1094 switch (rcip->ri_af) { 1095 case AF_INET: 1096 if (nflag) { 1097 (void) fprintf(to, ": gateway %s", 1098 inet_ntoa(rcip->ri_gate.sin.sin_addr)); 1099 } else if (gw_good && 1100 rcip->ri_gate_hp != NULL && 1101 rcip->ri_gate_hp->h_addr_list[1] != NULL) { 1102 /* 1103 * Print the actual address used in the case 1104 * where there was more than one address 1105 * available for the name, and one was used 1106 * successfully. 1107 */ 1108 (void) fprintf(to, ": gateway %s (%s)", 1109 rcip->ri_gate_str, 1110 inet_ntoa(rcip->ri_gate.sin.sin_addr)); 1111 } else { 1112 (void) fprintf(to, ": gateway %s", 1113 rcip->ri_gate_str); 1114 } 1115 break; 1116 case AF_INET6: 1117 if (inet_ntop(AF_INET6, 1118 &rcip->ri_gate.sin6.sin6_addr, obuf, 1119 INET6_ADDRSTRLEN) != NULL) { 1120 if (nflag) { 1121 (void) fprintf(to, ": gateway %s", 1122 obuf); 1123 break; 1124 } 1125 if (gw_good && 1126 rcip->ri_gate_hp->h_addr_list[1] != NULL) { 1127 (void) fprintf(to, ": gateway %s (%s)", 1128 rcip->ri_gate_str, obuf); 1129 break; 1130 } 1131 } 1132 /* FALLTHROUGH */ 1133 default: 1134 (void) fprintf(to, ": gateway %s", 1135 rcip->ri_gate_str); 1136 break; 1137 } 1138 } 1139 } 1140 1141 void 1142 set_metric(rtcmd_irep_t *rcip, char *value, int key, boolean_t lock) 1143 { 1144 int flag = 0; 1145 uint_t noval, *valp = &noval; 1146 1147 switch (key) { 1148 #define caseof(x, y, z) \ 1149 case (x): valp = &(rcip->ri_metrics.z); flag = (y); break 1150 1151 caseof(K_MTU, RTV_MTU, rmx_mtu); 1152 caseof(K_HOPCOUNT, RTV_HOPCOUNT, rmx_hopcount); 1153 caseof(K_EXPIRE, RTV_EXPIRE, rmx_expire); 1154 caseof(K_RECVPIPE, RTV_RPIPE, rmx_recvpipe); 1155 caseof(K_SENDPIPE, RTV_SPIPE, rmx_sendpipe); 1156 caseof(K_SSTHRESH, RTV_SSTHRESH, rmx_ssthresh); 1157 caseof(K_RTT, RTV_RTT, rmx_rtt); 1158 caseof(K_RTTVAR, RTV_RTTVAR, rmx_rttvar); 1159 #undef caseof 1160 } 1161 rcip->ri_inits |= flag; 1162 if (lock) 1163 rcip->ri_metrics.rmx_locks |= flag; 1164 *valp = atoi(value); 1165 } 1166 1167 /* 1168 * Parse the options give in argv[], filling in rcip with the results. 1169 * If cmd_string is non-null, argc and argv are ignored, and cmd_string is 1170 * tokenized to produce the command line. Cmd_string is tokenized using 1171 * strtok, which will overwrite whitespace in the string with nulls. 1172 * 1173 * Returns B_TRUE on success and B_FALSE on failure. 1174 */ 1175 boolean_t 1176 args_to_rtcmd(rtcmd_irep_t *rcip, char **argv, char *cmd_string) 1177 { 1178 const char *ws = "\f\n\r\t\v "; 1179 char *tok = cmd_string; 1180 char *keyword_str; 1181 addr_type_t atype = ADDR_TYPE_ANY; 1182 boolean_t iflag = B_FALSE; 1183 boolean_t locknext = B_FALSE; 1184 boolean_t lockrest = B_FALSE; 1185 boolean_t dash_keyword; 1186 int key; 1187 char *err; 1188 1189 if (cmd_string == NULL) { 1190 tok = argv[0]; 1191 } else { 1192 tok = strtok(cmd_string, ws); 1193 } 1194 1195 /* 1196 * The command keywords are already fully checked by main() or 1197 * search_rtfile(). 1198 */ 1199 switch (*tok) { 1200 case 'a': 1201 rcip->ri_cmd = RTM_ADD; 1202 break; 1203 case 'c': 1204 rcip->ri_cmd = RTM_CHANGE; 1205 break; 1206 case 'd': 1207 rcip->ri_cmd = RTM_DELETE; 1208 break; 1209 case 'g': 1210 rcip->ri_cmd = RTM_GET; 1211 break; 1212 default: 1213 /* NOTREACHED */ 1214 quit(gettext("Internal Error"), EINVAL); 1215 /* NOTREACHED */ 1216 } 1217 1218 #define NEXTTOKEN \ 1219 ((tok = (cmd_string == NULL ? *++argv : strtok(NULL, ws))) != NULL) 1220 1221 while (NEXTTOKEN) { 1222 keyword_str = tok; 1223 if (*tok == '-') { 1224 dash_keyword = B_TRUE; 1225 key = keyword(tok + 1); 1226 } else { 1227 dash_keyword = B_FALSE; 1228 key = keyword(tok); 1229 if (key != K_HOST && key != K_NET) { 1230 /* All others must be preceded by '-' */ 1231 key = 0; 1232 } 1233 } 1234 switch (key) { 1235 case K_HOST: 1236 if (atype == ADDR_TYPE_NET) { 1237 syntax_error(gettext("route: -host and -net " 1238 "are mutually exclusive\n")); 1239 return (B_FALSE); 1240 } 1241 atype = ADDR_TYPE_HOST; 1242 break; 1243 case K_NET: 1244 if (atype == ADDR_TYPE_HOST) { 1245 syntax_error(gettext("route: -host and -net " 1246 "are mutually exclusive\n")); 1247 return (B_FALSE); 1248 } 1249 atype = ADDR_TYPE_NET; 1250 break; 1251 case K_LINK: 1252 rcip->ri_af = AF_LINK; 1253 break; 1254 case K_INET: 1255 rcip->ri_af = AF_INET; 1256 break; 1257 case K_SA: 1258 rcip->ri_af = PF_ROUTE; 1259 break; 1260 case K_INET6: 1261 rcip->ri_af = AF_INET6; 1262 break; 1263 case K_IFACE: 1264 case K_INTERFACE: 1265 iflag = B_TRUE; 1266 /* fallthrough */ 1267 case K_NOSTATIC: 1268 rcip->ri_flags &= ~RTF_STATIC; 1269 break; 1270 case K_LOCK: 1271 locknext = B_TRUE; 1272 break; 1273 case K_LOCKREST: 1274 lockrest = B_TRUE; 1275 break; 1276 case K_REJECT: 1277 rcip->ri_flags |= RTF_REJECT; 1278 break; 1279 case K_BLACKHOLE: 1280 rcip->ri_flags |= RTF_BLACKHOLE; 1281 break; 1282 case K_PROTO1: 1283 rcip->ri_flags |= RTF_PROTO1; 1284 break; 1285 case K_PROTO2: 1286 rcip->ri_flags |= RTF_PROTO2; 1287 break; 1288 case K_CLONING: 1289 rcip->ri_flags |= RTF_CLONING; 1290 break; 1291 case K_XRESOLVE: 1292 rcip->ri_flags |= RTF_XRESOLVE; 1293 break; 1294 case K_STATIC: 1295 rcip->ri_flags |= RTF_STATIC; 1296 break; 1297 case K_IFA: 1298 if (!NEXTTOKEN) { 1299 syntax_arg_missing(keyword_str); 1300 return (B_FALSE); 1301 } 1302 if (!getaddr(rcip, RTA_IFA, tok, atype)) { 1303 return (B_FALSE); 1304 } 1305 break; 1306 case K_IFP: 1307 if (!NEXTTOKEN) { 1308 syntax_arg_missing(keyword_str); 1309 return (B_FALSE); 1310 } 1311 if (!getaddr(rcip, RTA_IFP, tok, atype)) { 1312 return (B_FALSE); 1313 } 1314 break; 1315 case K_GATEWAY: 1316 if (!NEXTTOKEN) { 1317 syntax_arg_missing(keyword_str); 1318 return (B_FALSE); 1319 } 1320 if (!getaddr(rcip, RTA_GATEWAY, tok, atype)) { 1321 return (B_FALSE); 1322 } 1323 break; 1324 case K_DST: 1325 if (!NEXTTOKEN) { 1326 syntax_arg_missing(keyword_str); 1327 return (B_FALSE); 1328 } 1329 if (!getaddr(rcip, RTA_DST, tok, atype)) { 1330 return (B_FALSE); 1331 } 1332 break; 1333 case K_NETMASK: 1334 if (!NEXTTOKEN) { 1335 syntax_arg_missing(keyword_str); 1336 return (B_FALSE); 1337 } 1338 if (!getaddr(rcip, RTA_NETMASK, tok, atype)) { 1339 return (B_FALSE); 1340 } 1341 atype = ADDR_TYPE_NET; 1342 break; 1343 case K_MTU: 1344 case K_HOPCOUNT: 1345 case K_EXPIRE: 1346 case K_RECVPIPE: 1347 case K_SENDPIPE: 1348 case K_SSTHRESH: 1349 case K_RTT: 1350 case K_RTTVAR: 1351 if (!NEXTTOKEN) { 1352 syntax_arg_missing(keyword_str); 1353 return (B_FALSE); 1354 } 1355 set_metric(rcip, tok, key, locknext || lockrest); 1356 locknext = B_FALSE; 1357 break; 1358 case K_PRIVATE: 1359 rcip->ri_flags |= RTF_PRIVATE; 1360 break; 1361 case K_MULTIRT: 1362 rcip->ri_flags |= RTF_MULTIRT; 1363 break; 1364 case K_SETSRC: 1365 if (!NEXTTOKEN) { 1366 syntax_arg_missing(keyword_str); 1367 return (B_FALSE); 1368 } 1369 if (!getaddr(rcip, RTA_SRC, tok, atype)) { 1370 return (B_FALSE); 1371 } 1372 rcip->ri_flags |= RTF_SETSRC; 1373 break; 1374 case K_SECATTR: 1375 if (!NEXTTOKEN) { 1376 syntax_arg_missing(keyword_str); 1377 return (B_FALSE); 1378 } 1379 if (is_system_labeled()) { 1380 int err; 1381 1382 if (rcip->ri_rtsa_cnt >= 1) { 1383 syntax_error(gettext("route: can't " 1384 "specify more than one security " 1385 "attribute\n")); 1386 return (B_FALSE); 1387 } 1388 if (!rtsa_keyword(tok, &rcip->ri_rtsa, &err, 1389 NULL)) { 1390 syntax_error(gettext("route: " 1391 "bad security attribute: %s\n"), 1392 tsol_strerror(err, errno)); 1393 return (B_FALSE); 1394 } 1395 rcip->ri_rtsa_cnt++; 1396 } else { 1397 syntax_error(gettext("route: " 1398 "system is not labeled; cannot specify" 1399 "security attributes.\n")); 1400 return (B_FALSE); 1401 } 1402 break; 1403 default: 1404 if (dash_keyword) { 1405 syntax_bad_keyword(tok + 1); 1406 return (B_FALSE); 1407 } 1408 if ((rcip->ri_addrs & RTA_DST) == 0) { 1409 if (!getaddr(rcip, RTA_DST, tok, atype)) { 1410 return (B_FALSE); 1411 } 1412 } else if ((rcip->ri_addrs & RTA_GATEWAY) == 0) { 1413 /* 1414 * For the gateway parameter, retrieve the 1415 * pointer to the struct hostent so that all 1416 * possible addresses can be tried until one 1417 * is successful. 1418 */ 1419 if (!getaddr(rcip, RTA_GATEWAY, tok, atype)) { 1420 return (B_FALSE); 1421 } 1422 } else { 1423 ulong_t metric; 1424 /* 1425 * Assume that a regular number is a metric. 1426 * Needed for compatibility with old route 1427 * command syntax. 1428 */ 1429 errno = 0; 1430 metric = strtoul(tok, &err, 10); 1431 if (errno == 0 && *err == '\0' && 1432 metric < 0x80000000ul) { 1433 iflag = (metric == 0); 1434 if (verbose) { 1435 (void) printf("old usage of " 1436 "trailing number, assuming " 1437 "route %s\n", iflag ? 1438 "to if" : "via gateway"); 1439 } 1440 continue; 1441 } 1442 if (!getaddr(rcip, RTA_NETMASK, tok, atype)) { 1443 return (B_FALSE); 1444 } 1445 } 1446 } 1447 } 1448 #undef NEXTTOKEN 1449 1450 if ((rcip->ri_addrs & RTA_DST) == 0) { 1451 syntax_error(gettext("route: destination required\n")); 1452 return (B_FALSE); 1453 } else if ((rcip->ri_cmd == RTM_ADD || rcip->ri_cmd == RTM_DELETE) && 1454 (rcip->ri_addrs & RTA_GATEWAY) == 0) { 1455 syntax_error(gettext( 1456 "route: gateway required for add or delete command\n")); 1457 return (B_FALSE); 1458 } 1459 1460 if (!iflag) { 1461 rcip->ri_flags |= RTF_GATEWAY; 1462 } 1463 1464 if (atype != ADDR_TYPE_NET) { 1465 if (rcip->ri_addrs & RTA_NETMASK) { 1466 /* 1467 * We know the netmask, so we can set the host flag 1468 * based on whether the netmask is the host netmask. 1469 */ 1470 if (rcip->ri_af == AF_INET && 1471 rcip->ri_mask.sin.sin_addr.s_addr == 1472 IP_HOST_MASK) { 1473 rcip->ri_flags |= RTF_HOST; 1474 } 1475 if (rcip->ri_af == AF_INET6 && 1476 memcmp(&rcip->ri_mask.sin6.sin6_addr, 1477 &in6_host_mask, 1478 sizeof (struct in6_addr)) == 0) { 1479 rcip->ri_flags |= RTF_HOST; 1480 } 1481 } else { 1482 /* 1483 * If no prefix mask has been saved at this point, it 1484 * only makes sense to treat the destination address 1485 * as a host address. 1486 */ 1487 rcip->ri_flags |= RTF_HOST; 1488 } 1489 } 1490 return (B_TRUE); 1491 } 1492 1493 /* 1494 * This command always seeks to the end of the file prior to writing. 1495 */ 1496 void 1497 write_to_rtfile(FILE *fp, int argc, char **argv) 1498 { 1499 char file_line[BUF_SIZE]; 1500 int len; 1501 int i; 1502 1503 len = 0; 1504 if (early_v6_keyword) { 1505 /* 1506 * This flag is set when "inet6" was seen as an 1507 * argument to the -f flag. Normally, when writing 1508 * routes to the persistent route file, everything on 1509 * the command line after "add" is saved verbatim. 1510 * In this case, the arguments after "add" may not be 1511 * sufficient, as the ipv6 keyword came before "add", 1512 * yet must be present in the persistent route file. 1513 */ 1514 len += snprintf(file_line, BUF_SIZE, "-inet6 "); 1515 } 1516 for (i = 0; argc > 0 && len < BUF_SIZE; i++, argc--) { 1517 len += snprintf(&file_line[len], BUF_SIZE - len, "%s ", 1518 argv[i]); 1519 } 1520 if (len >= BUF_SIZE) 1521 quit(gettext("Internal Error"), EINVAL); 1522 file_line[len - 1] = '\n'; 1523 if (fseek(fp, 0, SEEK_END) != 0 || 1524 fputs(file_line, fp) == EOF) { 1525 quit(gettext("failed to write to route file"), 1526 errno); 1527 } 1528 } 1529 1530 boolean_t 1531 compare_rtcmd(rtcmd_irep_t *srch_rt, rtcmd_irep_t *file_rt) 1532 { 1533 if (strcmp(srch_rt->ri_dest_str, file_rt->ri_dest_str) != 0 || 1534 memcmp(&srch_rt->ri_mask, &file_rt->ri_mask, sizeof (su_t)) != 0) { 1535 return (B_FALSE); 1536 } 1537 return (srch_rt->ri_gate_str == NULL || 1538 strcmp(srch_rt->ri_gate_str, file_rt->ri_gate_str) == 0); 1539 } 1540 1541 /* 1542 * Search the route file for routes matching the supplied route. There are 3 1543 * modes of operation: 1544 * SEARCH_MODE_RET - no side effects. 1545 * SEARCH_MODE_PRINT - prints each matching line. 1546 * SEARCH_MODE_DEL - copies all valid, non-matching lines to tmp_fp. 1547 * 1548 * In all cases, the number of matches is returned. If rt is NULL, all routes 1549 * matching the global af value are considered matching. 1550 */ 1551 int 1552 search_rtfile(FILE *fp, FILE *temp_fp, rtcmd_irep_t *rt, search_mode_t mode) 1553 { 1554 char *tmp_buf; 1555 int match_cnt; 1556 boolean_t match; 1557 char file_line[BUF_SIZE + 4] = "add "; 1558 rtcmd_irep_t *thisrt; 1559 1560 match_cnt = 0; 1561 1562 /* 1563 * Leave space at the beginning of file_line for "add ". 1564 */ 1565 while (fgets(file_line + 4, BUF_SIZE, fp) != NULL) { 1566 1567 if (file_line[4] == '#' || file_line[4] == '\n') { 1568 /* Handle comments and blank lines */ 1569 if (mode == SEARCH_MODE_DEL && 1570 fputs(file_line + 4, temp_fp) == EOF) { 1571 quit(gettext( 1572 "route: failed to write to temp file"), 1573 errno); 1574 } 1575 continue; 1576 } 1577 thisrt = new_rtcmd_irep(); 1578 /* 1579 * thisrt->ri_af defaults to whatever address family happens 1580 * to be set in the global af, but routes in the persistent 1581 * route file must be treated as AF_INET by default. 1582 */ 1583 thisrt->ri_af = AF_INET; 1584 1585 exit_on_error = B_FALSE; 1586 tmp_buf = strdup(file_line); 1587 /* args_to_rtcmd() will mangle the string passed. */ 1588 if (!args_to_rtcmd(thisrt, NULL, tmp_buf)) { 1589 /* There was an error in args_to_rtcmd() or helpers */ 1590 del_rtcmd_irep(thisrt); 1591 free(tmp_buf); 1592 continue; 1593 } 1594 exit_on_error = B_TRUE; 1595 free(tmp_buf); 1596 1597 if (thisrt->ri_gate_str == NULL) { 1598 del_rtcmd_irep(thisrt); 1599 continue; 1600 } 1601 match = (rt == NULL) ? (thisrt->ri_af == af) : 1602 compare_rtcmd(rt, thisrt); 1603 1604 if (match) match_cnt++; 1605 if (match && mode == SEARCH_MODE_PRINT) { 1606 (void) printf("persistent: route %s", file_line); 1607 } 1608 if (match && mode == SEARCH_MODE_DEL) { 1609 thisrt->ri_cmd = RTM_DELETE; 1610 print_rtcmd_short(stdout, thisrt, B_FALSE, B_TRUE); 1611 (void) printf("\n"); 1612 } 1613 del_rtcmd_irep(thisrt); 1614 1615 if (!match && mode == SEARCH_MODE_DEL && 1616 fputs(file_line + 4, temp_fp) == EOF) { 1617 quit(gettext("failed to write to temp file"), 1618 errno); 1619 } 1620 } 1621 return (match_cnt); 1622 } 1623 1624 /* 1625 * Perform the route operation given in argv on the persistent route file. 1626 * If do_flush is set, the persistent route file is flushed of all routes 1627 * matching the global family, and the arguments are ignored. 1628 */ 1629 void 1630 save_route(int argc, char **argv, int do_flush) 1631 { 1632 rtcmd_irep_t *rt; 1633 int perm_fd; 1634 FILE *perm_fp; 1635 FILE *temp_fp; 1636 mode_t fmode = S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH; 1637 struct flock lock; 1638 struct stat st; 1639 const char commentstr[] = 1640 "# File generated by route(1M) - do not edit.\n"; 1641 1642 perm_fd = open(perm_file, O_RDWR | O_CREAT, fmode); 1643 if (perm_fd == -1 || fstat(perm_fd, &st) == -1) 1644 quit("failed to open route file", errno); 1645 1646 lock.l_type = F_WRLCK; 1647 lock.l_whence = SEEK_SET; 1648 lock.l_start = 0; 1649 lock.l_len = 0; 1650 if (fcntl(perm_fd, F_SETLK, &lock) != 0) { 1651 quit(gettext("failed to lock route file"), errno); 1652 /* NOTREACHED */ 1653 } 1654 if (st.st_size == 0 && 1655 write(perm_fd, commentstr, sizeof (commentstr) - 1) != 1656 sizeof (commentstr) - 1) 1657 quit(gettext("failed to open route file"), errno); 1658 1659 if ((perm_fp = fdopen(perm_fd, "r+")) == NULL) { 1660 quit(gettext("failed to open route file"), errno); 1661 /* NOTREACHED */ 1662 } 1663 1664 if (!do_flush) { 1665 rt = new_rtcmd_irep(); 1666 (void) args_to_rtcmd(rt, argv, NULL); 1667 } 1668 if (do_flush || rt->ri_cmd == RTM_DELETE) { 1669 if ((temp_fp = fopen(temp_file, "w")) == NULL) { 1670 quit(gettext("failed to open temp file"), errno); 1671 /* NOTREACHED */ 1672 } 1673 } 1674 if (do_flush) { 1675 (void) search_rtfile(perm_fp, temp_fp, NULL, SEARCH_MODE_DEL); 1676 if (fclose(temp_fp) != 0 || rename(temp_file, perm_file) != 0) { 1677 quit(gettext("failed to update route file"), errno); 1678 /* NOTREACHED */ 1679 } 1680 (void) fclose(perm_fp); 1681 return; 1682 } 1683 1684 switch (rt->ri_cmd) { 1685 case RTM_ADD: 1686 if (search_rtfile(perm_fp, NULL, rt, SEARCH_MODE_NULL) > 0) { 1687 /* Route is already in the file */ 1688 print_rtcmd_short(stderr, rt, B_FALSE, B_TRUE); 1689 (void) fprintf(stderr, ": entry exists\n"); 1690 exit(1); 1691 } 1692 write_to_rtfile(perm_fp, argc - 1, argv + 1); 1693 print_rtcmd_short(stdout, rt, B_FALSE, B_TRUE); 1694 (void) printf("\n"); 1695 break; 1696 1697 case RTM_CHANGE: 1698 syntax_error( 1699 gettext("route: change command not supported with -p\n")); 1700 /* NOTREACHED */ 1701 1702 case RTM_DELETE: 1703 if (search_rtfile(perm_fp, temp_fp, rt, SEARCH_MODE_DEL) <= 0) { 1704 /* Route not found */ 1705 print_rtcmd_short(stderr, rt, B_FALSE, B_TRUE); 1706 (void) fprintf(stderr, gettext(": not in file\n")); 1707 exit(1); 1708 } 1709 if (fclose(temp_fp) != 0 || rename(temp_file, perm_file) != 0) { 1710 quit(gettext("failed to update route file"), errno); 1711 /* NOTREACHED */ 1712 } 1713 break; 1714 1715 case RTM_GET: 1716 if (search_rtfile(perm_fp, temp_fp, rt, SEARCH_MODE_PRINT) <= 1717 0) { 1718 print_rtcmd_short(stdout, rt, B_FALSE, B_TRUE); 1719 (void) printf(gettext(": not in file\n")); 1720 } 1721 break; 1722 1723 default: 1724 quit(gettext("Internal Error"), EINVAL); 1725 /* NOTREACHED */ 1726 } 1727 1728 /* 1729 * Closing the file unlocks it. 1730 */ 1731 (void) fclose(perm_fp); 1732 } 1733 1734 int 1735 show_saved_routes(int argc) 1736 { 1737 int perm_fd; 1738 FILE *perm_fp; 1739 struct flock lock; 1740 int count = 0; 1741 1742 if (argc != 1) { 1743 syntax_error(gettext("route: invalid arguments for show\n")); 1744 } 1745 1746 perm_fd = open(perm_file, O_RDONLY, 0); 1747 1748 if (perm_fd == -1) { 1749 if (errno == ENOENT) { 1750 (void) printf("No persistent routes are defined\n"); 1751 return (0); 1752 } else { 1753 quit(gettext("failed to open route file"), errno); 1754 } 1755 } 1756 lock.l_type = F_RDLCK; 1757 lock.l_whence = SEEK_SET; 1758 lock.l_start = 0; 1759 lock.l_len = 0; 1760 if (fcntl(perm_fd, F_SETLK, &lock) != 0) { 1761 quit(gettext("failed to lock route file"), 1762 errno); 1763 /* NOTREACHED */ 1764 } 1765 if ((perm_fp = fdopen(perm_fd, "r")) == NULL) { 1766 quit(gettext("failed to open route file"), errno); 1767 /* NOTREACHED */ 1768 } 1769 count += search_rtfile(perm_fp, NULL, NULL, SEARCH_MODE_PRINT); 1770 (void) fseek(perm_fp, 0, SEEK_SET); 1771 af = AF_INET6; 1772 count += search_rtfile(perm_fp, NULL, NULL, SEARCH_MODE_PRINT); 1773 1774 if (count == 0) 1775 (void) printf("No persistent routes are defined\n"); 1776 1777 (void) fclose(perm_fp); 1778 return (0); 1779 } 1780 1781 int 1782 newroute(char **argv) 1783 { 1784 rtcmd_irep_t *newrt; 1785 int ret, attempts, oerrno; 1786 char *err; 1787 char obuf[INET6_ADDRSTRLEN]; 1788 #define hp (newrt->ri_gate_hp) 1789 1790 newrt = new_rtcmd_irep(); 1791 (void) args_to_rtcmd(newrt, argv, NULL); 1792 1793 if (newrt->ri_cmd != RTM_GET && !tflag) { 1794 /* Don't want to read back our messages */ 1795 (void) shutdown(s, 0); 1796 } 1797 if (newrt->ri_addrs & RTA_IFP) { 1798 newrt->ri_ifp.sdl.sdl_index = if_nametoindex(newrt->ri_ifp_str); 1799 if (newrt->ri_ifp.sdl.sdl_index == 0) { 1800 if (errno != ENXIO) { 1801 quit("if_nametoindex", errno); 1802 } else { 1803 (void) fprintf(stderr, 1804 gettext("route: %s: no such interface\n"), 1805 newrt->ri_ifp_str); 1806 exit(1); 1807 } 1808 } 1809 newrt->ri_ifp.sdl.sdl_family = AF_LINK; 1810 } 1811 for (attempts = 1; ; attempts++) { 1812 errno = 0; 1813 if ((ret = rtmsg(newrt)) == 0) 1814 break; 1815 if (errno != ENETUNREACH && errno != ESRCH) 1816 break; 1817 if ((newrt->ri_addrs & RTA_GATEWAY) && hp != NULL && 1818 hp->h_addr_list[attempts] != NULL) { 1819 switch (af) { 1820 case AF_INET: 1821 (void) memmove(&newrt->ri_gate.sin.sin_addr, 1822 hp->h_addr_list[attempts], hp->h_length); 1823 continue; 1824 case AF_INET6: 1825 (void) memmove(&newrt->ri_gate.sin6.sin6_addr, 1826 hp->h_addr_list[attempts], hp->h_length); 1827 continue; 1828 } 1829 } 1830 break; 1831 } 1832 oerrno = errno; 1833 1834 if (newrt->ri_cmd != RTM_GET) { 1835 print_rtcmd_short(stdout, newrt, (ret == 0), B_FALSE); 1836 if (ret == 0) 1837 (void) printf("\n"); 1838 } else if (ret != 0) { 1839 /* 1840 * Note: there is nothing additional to print for get 1841 * if ret == 0. 1842 */ 1843 if (nflag) { 1844 switch (newrt->ri_af) { 1845 case AF_INET: 1846 (void) printf(" %s", 1847 inet_ntoa(newrt->ri_dst.sin.sin_addr)); 1848 break; 1849 case AF_INET6: 1850 if (inet_ntop(AF_INET6, 1851 (void *)&newrt->ri_dst.sin6.sin6_addr, 1852 obuf, INET6_ADDRSTRLEN) != NULL) { 1853 (void) printf(" %s", obuf); 1854 break; 1855 } 1856 /* FALLTHROUGH */ 1857 default: 1858 (void) printf("%s", newrt->ri_dest_str); 1859 break; 1860 } 1861 } else { 1862 (void) printf("%s", newrt->ri_dest_str); 1863 } 1864 } 1865 1866 if (ret != 0) { 1867 switch (oerrno) { 1868 case ESRCH: 1869 err = "not in table"; 1870 break; 1871 case EBUSY: 1872 err = "entry in use"; 1873 break; 1874 case ENOBUFS: 1875 err = "routing table overflow"; 1876 break; 1877 case EEXIST: 1878 err = "entry exists"; 1879 break; 1880 case EPERM: 1881 err = "insufficient privileges"; 1882 break; 1883 default: 1884 err = strerror(oerrno); 1885 break; 1886 } 1887 (void) printf(": %s\n", err); 1888 } 1889 1890 del_rtcmd_irep(newrt); 1891 1892 return (oerrno); 1893 #undef hp 1894 } 1895 1896 1897 /* 1898 * Convert a network number to the corresponding IP address. 1899 * If the RTA_NETMASK hasn't been specified yet set it based 1900 * on the class of address. 1901 */ 1902 static void 1903 inet_makenetandmask(rtcmd_irep_t *rcip, in_addr_t net, struct sockaddr_in *sin) 1904 { 1905 in_addr_t addr, mask; 1906 1907 if (net == 0) { 1908 mask = addr = 0; 1909 } else if (net < 128) { 1910 addr = net << IN_CLASSA_NSHIFT; 1911 mask = IN_CLASSA_NET; 1912 } else if (net < 65536) { 1913 addr = net << IN_CLASSB_NSHIFT; 1914 mask = IN_CLASSB_NET; 1915 } else if (net < 16777216L) { 1916 addr = net << IN_CLASSC_NSHIFT; 1917 mask = IN_CLASSC_NET; 1918 } else { 1919 addr = net; 1920 if ((addr & IN_CLASSA_HOST) == 0) 1921 mask = IN_CLASSA_NET; 1922 else if ((addr & IN_CLASSB_HOST) == 0) 1923 mask = IN_CLASSB_NET; 1924 else if ((addr & IN_CLASSC_HOST) == 0) 1925 mask = IN_CLASSC_NET; 1926 else { 1927 if (IN_CLASSA(addr)) 1928 mask = IN_CLASSA_NET; 1929 else if (IN_CLASSB(addr)) 1930 mask = IN_CLASSB_NET; 1931 else if (IN_CLASSC(addr)) 1932 mask = IN_CLASSC_NET; 1933 else 1934 mask = IP_HOST_MASK; 1935 mask = inet_makesubnetmask(addr, mask); 1936 } 1937 } 1938 sin->sin_addr.s_addr = htonl(addr); 1939 1940 if (!(rcip->ri_addrs & RTA_NETMASK)) { 1941 rcip->ri_addrs |= RTA_NETMASK; 1942 sin = &rcip->ri_mask.sin; 1943 sin->sin_addr.s_addr = htonl(mask); 1944 sin->sin_family = AF_INET; 1945 } 1946 } 1947 1948 static in_addr_t 1949 inet_makesubnetmask(in_addr_t addr, in_addr_t mask) 1950 { 1951 int n; 1952 struct ifconf ifc; 1953 struct ifreq ifreq; 1954 struct ifreq *ifr; 1955 struct sockaddr_in *sin; 1956 char *buf; 1957 int numifs; 1958 size_t bufsize; 1959 int iosoc; 1960 in_addr_t if_addr, if_mask; 1961 in_addr_t if_subnetmask = 0; 1962 short if_flags; 1963 1964 if (mask == 0) 1965 return (0); 1966 if ((iosoc = socket(AF_INET, SOCK_DGRAM, 0)) < 0) 1967 quit("socket", errno); 1968 if (ioctl(iosoc, SIOCGIFNUM, (char *)&numifs) < 0) 1969 quit("ioctl", errno); 1970 bufsize = numifs * sizeof (struct ifreq); 1971 buf = malloc(bufsize); 1972 if (buf == NULL) 1973 quit("malloc", errno); 1974 (void) memset(&ifc, 0, sizeof (ifc)); 1975 ifc.ifc_len = bufsize; 1976 ifc.ifc_buf = buf; 1977 if (ioctl(iosoc, SIOCGIFCONF, (char *)&ifc) < 0) 1978 quit("ioctl (get interface configuration)", errno); 1979 /* Let's check to see if this is maybe a local subnet route. */ 1980 ifr = ifc.ifc_req; 1981 for (n = ifc.ifc_len / sizeof (struct ifreq); n > 0; n--, ifr++) { 1982 ifreq = *ifr; 1983 /* LINTED */ 1984 sin = (struct sockaddr_in *)&ifr->ifr_addr; 1985 if_addr = ntohl(sin->sin_addr.s_addr); 1986 1987 if (ioctl(iosoc, SIOCGIFFLAGS, (char *)&ifreq) < 0) 1988 quit("ioctl (get interface flags)", errno); 1989 if ((ifreq.ifr_flags & IFF_UP) == 0) 1990 continue; 1991 if_flags = ifreq.ifr_flags; 1992 1993 if (ioctl(iosoc, SIOCGIFNETMASK, (char *)&ifreq) < 0) 1994 quit("ioctl (get netmask)", errno); 1995 /* LINTED */ 1996 sin = (struct sockaddr_in *)&ifreq.ifr_addr; 1997 if_mask = ntohl(sin->sin_addr.s_addr); 1998 if ((if_addr & mask) == (addr & mask)) { 1999 /* 2000 * Don't trust pt-pt interfaces if there are 2001 * other interfaces. 2002 */ 2003 if (if_flags & IFF_POINTOPOINT) { 2004 if_subnetmask = if_mask; 2005 continue; 2006 } 2007 /* 2008 * Fine. Just assume the same net mask as the 2009 * directly attached subnet interface is using. 2010 */ 2011 return (if_mask); 2012 } 2013 } 2014 if (if_subnetmask != 0) 2015 return (if_subnetmask); 2016 return (mask); 2017 } 2018 2019 /* 2020 * Interpret an argument as a network address of some kind. 2021 * 2022 * If the address family is one looked up in getaddr() using one of the 2023 * getipnodebyX() functions (currently only AF_INET6), then callers should 2024 * freehostent() the returned "struct hostent" pointer if one was passed in. 2025 * 2026 * If exit_on_error is true, this function will cause route to exit on error by 2027 * calling syntax_error(). Otherwise, it returns B_TRUE on success or B_FALSE 2028 * on failure. 2029 */ 2030 static boolean_t 2031 getaddr(rtcmd_irep_t *rcip, int which, char *s, addr_type_t atype) 2032 { 2033 su_t *su; 2034 struct hostent **hpp; 2035 struct hostent *hp; 2036 int masklen; 2037 2038 if (which == RTA_GATEWAY) { 2039 hpp = &(rcip->ri_gate_hp); 2040 } else { 2041 hpp = &hp; 2042 } 2043 *hpp = NULL; 2044 2045 rcip->ri_addrs |= which; 2046 switch (which) { 2047 case RTA_DST: 2048 save_string(&rcip->ri_dest_str, s); 2049 su = &rcip->ri_dst; 2050 su->sa.sa_family = rcip->ri_af; 2051 break; 2052 case RTA_GATEWAY: 2053 save_string(&rcip->ri_gate_str, s); 2054 su = &rcip->ri_gate; 2055 su->sa.sa_family = rcip->ri_af; 2056 break; 2057 case RTA_NETMASK: 2058 su = &rcip->ri_mask; 2059 su->sa.sa_family = rcip->ri_af; 2060 break; 2061 case RTA_IFP: 2062 save_string(&rcip->ri_ifp_str, s); 2063 return (B_TRUE); 2064 /* 2065 * RTA_SRC has overloaded meaning. It can represent the 2066 * src address of incoming or outgoing packets. 2067 */ 2068 case RTA_IFA: 2069 su = &rcip->ri_ifa; 2070 su->sa.sa_family = rcip->ri_af; 2071 break; 2072 case RTA_SRC: 2073 su = &rcip->ri_src; 2074 su->sa.sa_family = rcip->ri_af; 2075 break; 2076 default: 2077 /* NOTREACHED */ 2078 quit(gettext("Internal Error"), EINVAL); 2079 /* NOTREACHED */ 2080 } 2081 if (strcmp(s, "default") == 0) { 2082 if (which == RTA_DST) { 2083 return (getaddr(rcip, RTA_NETMASK, s, ADDR_TYPE_NET)); 2084 } 2085 if (which == RTA_SRC) { 2086 return (B_TRUE); 2087 } 2088 return (B_TRUE); 2089 } 2090 switch (rcip->ri_af) { 2091 case AF_LINK: 2092 link_addr(s, &su->sdl); 2093 return (B_TRUE); 2094 case PF_ROUTE: 2095 sockaddr(s, &su->sa); 2096 return (B_TRUE); 2097 case AF_INET6: 2098 switch (which) { 2099 case RTA_DST: 2100 if (!in6_getaddr(s, &su->sin6, &masklen, hpp)) { 2101 return (B_FALSE); 2102 } 2103 if (masklen != NO_PREFIX) { 2104 (void) memset(&rcip->ri_mask.sin6.sin6_addr, 0, 2105 sizeof (rcip->ri_mask.sin6.sin6_addr)); 2106 if (!in_prefixlentomask(masklen, IPV6_ABITS, 2107 (uchar_t *)&rcip->ri_mask.sin6.sin6_addr)) { 2108 syntax_error(gettext( 2109 "route: bad prefix length: %d\n"), 2110 masklen); 2111 return (B_FALSE); 2112 } 2113 rcip->ri_mask.sin6.sin6_family = rcip->ri_af; 2114 rcip->ri_addrs |= RTA_NETMASK; 2115 } 2116 return (B_TRUE); 2117 case RTA_GATEWAY: 2118 case RTA_IFA: 2119 case RTA_SRC: 2120 return (in6_getaddr(s, &su->sin6, NULL, hpp)); 2121 case RTA_NETMASK: 2122 syntax_error( 2123 gettext("route: -netmask not supported for IPv6: " 2124 "use <prefix>/<prefix-length> instead\n")); 2125 return (B_FALSE); 2126 default: 2127 quit(gettext("Internal Error"), EINVAL); 2128 /* NOTREACHED */ 2129 } 2130 case AF_INET: 2131 switch (which) { 2132 case RTA_DST: 2133 if (!in_getaddr(s, &su->sin, &masklen, which, hpp, 2134 atype, rcip)) { 2135 return (B_FALSE); 2136 } 2137 if (masklen != NO_PREFIX) { 2138 (void) memset(&rcip->ri_mask.sin.sin_addr, 0, 2139 sizeof (rcip->ri_mask.sin.sin_addr)); 2140 if (!in_prefixlentomask(masklen, IP_ABITS, 2141 (uchar_t *)&rcip->ri_mask.sin.sin_addr)) { 2142 syntax_error(gettext( 2143 "route: bad prefix length: %d\n"), 2144 masklen); 2145 return (B_FALSE); 2146 } 2147 rcip->ri_mask.sin.sin_family = rcip->ri_af; 2148 rcip->ri_addrs |= RTA_NETMASK; 2149 } 2150 return (B_TRUE); 2151 case RTA_GATEWAY: 2152 case RTA_IFA: 2153 case RTA_NETMASK: 2154 case RTA_SRC: 2155 return (in_getaddr(s, &su->sin, NULL, which, hpp, atype, 2156 rcip)); 2157 default: 2158 quit(gettext("Internal Error"), EINVAL); 2159 /* NOTREACHED */ 2160 } 2161 default: 2162 quit(gettext("Internal Error"), EINVAL); 2163 /* NOTREACHED */ 2164 } 2165 return (B_TRUE); 2166 } 2167 2168 /* 2169 * Interpret an argument as an IPv4 network address of some kind, 2170 * returning B_TRUE on success or B_FALSE on failure. 2171 * This function will cause an exit() on failure if exit_on_failure is set. 2172 * 2173 * Note that this tries host interpretation before network interpretation, 2174 * except when -net has been given and the destination address is being parsed. 2175 * 2176 * If the plenp argument is non-NULL, allow <addr>/<n> syntax and 2177 * pass out <n> in *plenp. 2178 * If <n> doesn't parse return BAD_ADDR as *plenp. 2179 * If no /<n> is present return NO_PREFIX as *plenp. 2180 */ 2181 static boolean_t 2182 in_getaddr(char *s, struct sockaddr_in *sin, int *plenp, int which, 2183 struct hostent **hpp, addr_type_t atype, rtcmd_irep_t *rcip) 2184 { 2185 struct hostent *hp; 2186 struct netent *np; 2187 in_addr_t val; 2188 char str[BUFSIZ]; 2189 2190 (void) strlcpy(str, s, sizeof (str)); 2191 2192 /* 2193 * If plenp is non-NULL, /<n> syntax for netmask is allowed. 2194 */ 2195 if (plenp != NULL) { 2196 char *cp; 2197 2198 *plenp = in_getprefixlen(str, IP_ABITS); 2199 if (*plenp == BAD_ADDR) 2200 return (B_FALSE); 2201 cp = strchr(str, '/'); 2202 if (cp != NULL) 2203 *cp = '\0'; 2204 } else if (strchr(str, '/') != NULL) { 2205 syntax_error(gettext("route: %s: unexpected '/'\n"), str); 2206 return (B_FALSE); 2207 } 2208 2209 (void) memset(sin, 0, sizeof (*sin)); 2210 sin->sin_family = AF_INET; 2211 2212 /* 2213 * Handle 255.255.255.255 as a special case first. 2214 */ 2215 if (strcmp(str, "255.255.255.255") == 0) { 2216 sin->sin_addr.s_addr = INADDR_BROADCAST; 2217 return (B_TRUE); 2218 } 2219 2220 val = inet_addr(str); 2221 if (val != (in_addr_t)-1) { 2222 /* Numeric address */ 2223 sin->sin_addr.s_addr = val; 2224 if (which == RTA_DST) { 2225 if (atype == ADDR_TYPE_NET || 2226 (atype == ADDR_TYPE_ANY && 2227 inet_lnaof(sin->sin_addr) == INADDR_ANY)) { 2228 /* This looks like a network address. */ 2229 inet_makenetandmask(rcip, ntohl(val), 2230 sin); 2231 } 2232 } 2233 return (B_TRUE); 2234 } 2235 /* Host or net name */ 2236 if (which != RTA_DST || atype != ADDR_TYPE_NET) { 2237 /* A host name is allowed. */ 2238 if ((hp = gethostbyname(str)) != NULL) { 2239 *hpp = hp; 2240 (void) memmove(&sin->sin_addr, hp->h_addr, 2241 hp->h_length); 2242 return (B_TRUE); 2243 } 2244 } 2245 if (atype != ADDR_TYPE_HOST) { 2246 /* A network name is allowed */ 2247 if ((np = getnetbyname(str)) != NULL && 2248 (val = np->n_net) != 0) { 2249 if (which == RTA_DST) { 2250 inet_makenetandmask(rcip, val, sin); 2251 } 2252 return (B_TRUE); 2253 } 2254 } 2255 syntax_error(gettext("%s: bad value\n"), s); 2256 return (B_FALSE); 2257 } 2258 2259 /* 2260 * Interpret an argument as an IPv6 network address of some kind, 2261 * returning B_TRUE on success or B_FALSE on failure. 2262 * This function will cause an exit() on failure if exit_on_failure is set. 2263 * 2264 * If the last argument is non-NULL allow a <addr>/<n> syntax and 2265 * pass out <n> in *plenp. 2266 * If <n> doesn't parse return BAD_ADDR as *plenp. 2267 * If no /<n> is present return NO_PREFIX as *plenp. 2268 */ 2269 static boolean_t 2270 in6_getaddr(char *s, struct sockaddr_in6 *sin6, int *plenp, 2271 struct hostent **hpp) 2272 { 2273 struct hostent *hp; 2274 char str[BUFSIZ]; 2275 int error_num; 2276 2277 (void) strlcpy(str, s, sizeof (str)); 2278 2279 /* 2280 * If plenp is non-NULL, /<n> syntax for netmask is allowed. 2281 */ 2282 if (plenp != NULL) { 2283 char *cp; 2284 2285 *plenp = in_getprefixlen(str, IPV6_ABITS); 2286 if (*plenp == BAD_ADDR) 2287 return (B_FALSE); 2288 cp = strchr(str, '/'); 2289 if (cp != NULL) 2290 *cp = '\0'; 2291 } else if (strchr(str, '/') != NULL) { 2292 syntax_error(gettext("route: %s: unexpected '/'\n"), str); 2293 return (B_FALSE); 2294 } 2295 2296 (void) memset(sin6, 0, sizeof (struct sockaddr_in6)); 2297 sin6->sin6_family = AF_INET6; 2298 2299 hp = getipnodebyname(str, AF_INET6, 0, &error_num); 2300 if (hp != NULL) { 2301 *hpp = hp; 2302 (void) memmove(&sin6->sin6_addr, hp->h_addr, hp->h_length); 2303 return (B_TRUE); 2304 } 2305 if (error_num == TRY_AGAIN) { 2306 /* 2307 * This isn't a problem if we aren't going to use the address 2308 * right away. 2309 */ 2310 if (!exit_on_error) { 2311 return (B_TRUE); 2312 } 2313 syntax_error(gettext("route: %s: bad address (try " 2314 "again later)\n"), s); 2315 return (B_FALSE); 2316 } 2317 syntax_error(gettext("route: %s: bad address\n"), s); 2318 return (B_FALSE); 2319 } 2320 2321 /* 2322 * Parse <addr>/<n> syntax and return the integer n. 2323 * If <addr> is missing or <n> is not a valid integer, this function calls 2324 * syntax_error() and returns BAD_ADDR. 2325 * if n is not between 0 and max_plen inclusive, this functions calls 2326 * syntax_error() and returns BAD_ADDR. 2327 * If /<n> is not present, this function returns NO_PREFIX. 2328 * The string addr is not modified. 2329 */ 2330 int 2331 in_getprefixlen(char *addr, int max_plen) 2332 { 2333 int prefixlen; 2334 char *str, *end; 2335 2336 str = strchr(addr, '/'); 2337 if (str == addr) { 2338 syntax_error(gettext("route: %s: unexpected '/'\n"), addr); 2339 return (BAD_ADDR); 2340 } 2341 if (str == NULL) 2342 return (NO_PREFIX); 2343 str++; 2344 2345 errno = 0; 2346 prefixlen = strtoul(str, &end, 10); 2347 if (errno != 0 || str == end) { 2348 syntax_error(gettext("route: bad prefix length %s\n"), str); 2349 return (BAD_ADDR); 2350 } 2351 if (prefixlen > max_plen) { 2352 syntax_error(gettext("route: prefix length %s out of range\n"), 2353 str); 2354 return (BAD_ADDR); 2355 } 2356 return (prefixlen); 2357 } 2358 2359 /* 2360 * Convert a prefix length to a mask. 2361 * Returns B_TRUE if ok. B_FALSE otherwise. 2362 * Assumes the mask array is zeroed by the caller. 2363 */ 2364 boolean_t 2365 in_prefixlentomask(int prefixlen, int maxlen, uchar_t *mask) 2366 { 2367 if (prefixlen < 0 || prefixlen > maxlen) 2368 return (B_FALSE); 2369 2370 while (prefixlen > 0) { 2371 if (prefixlen >= 8) { 2372 *mask++ = 0xFF; 2373 prefixlen -= 8; 2374 continue; 2375 } 2376 *mask |= 1 << (8 - prefixlen); 2377 prefixlen--; 2378 } 2379 return (B_TRUE); 2380 } 2381 2382 void 2383 rtmonitor(int argc, char *argv[]) 2384 { 2385 int n; 2386 intmax_t msg[2048 / sizeof (intmax_t)]; 2387 2388 if (tflag) 2389 exit(0); 2390 verbose = B_TRUE; 2391 if (argc > 1) { 2392 argv++; 2393 if (argc == 2 && **argv == '-') { 2394 switch (keyword(*argv + 1)) { 2395 case K_INET: 2396 af = AF_INET; 2397 break; 2398 case K_LINK: 2399 af = AF_LINK; 2400 break; 2401 case K_INET6: 2402 af = AF_INET6; 2403 break; 2404 default: 2405 usage(*argv); 2406 /* NOTREACHED */ 2407 } 2408 } else { 2409 usage(*argv); 2410 } 2411 (void) close(s); 2412 s = socket(PF_ROUTE, SOCK_RAW, af); 2413 if (s < 0) 2414 quit("socket", errno); 2415 } 2416 for (;;) { 2417 n = read(s, msg, sizeof (msg)); 2418 if (n <= 0) 2419 quit("read", errno); 2420 (void) printf("got message of size %d\n", n); 2421 print_rtmsg((struct rt_msghdr *)msg, n); 2422 } 2423 } 2424 2425 int 2426 rtmsg(rtcmd_irep_t *newrt) 2427 { 2428 static int seq; 2429 int rlen; 2430 char *cp = m_rtmsg.m_space; 2431 int l; 2432 2433 errno = 0; 2434 (void) memset(&m_rtmsg, 0, sizeof (m_rtmsg)); 2435 2436 if (newrt->ri_cmd == RTM_GET) { 2437 newrt->ri_ifp.sa.sa_family = AF_LINK; 2438 newrt->ri_addrs |= RTA_IFP; 2439 } 2440 2441 #define rtm m_rtmsg.m_rtm 2442 rtm.rtm_type = newrt->ri_cmd; 2443 rtm.rtm_flags = newrt->ri_flags; 2444 rtm.rtm_version = RTM_VERSION; 2445 rtm.rtm_seq = ++seq; 2446 rtm.rtm_addrs = newrt->ri_addrs; 2447 rtm.rtm_rmx = newrt->ri_metrics; 2448 rtm.rtm_inits = newrt->ri_inits; 2449 2450 #define NEXTADDR(w, u) \ 2451 if (newrt->ri_addrs & (w)) { \ 2452 l = ROUNDUP_LONG(salen(&u.sa)); \ 2453 (void) memmove(cp, &(u), l); \ 2454 cp += l; \ 2455 if (verbose) \ 2456 sodump(&(u), #u); \ 2457 } 2458 NEXTADDR(RTA_DST, newrt->ri_dst); 2459 NEXTADDR(RTA_GATEWAY, newrt->ri_gate); 2460 NEXTADDR(RTA_NETMASK, newrt->ri_mask); 2461 NEXTADDR(RTA_IFP, newrt->ri_ifp); 2462 NEXTADDR(RTA_IFA, newrt->ri_ifa); 2463 /* 2464 * RTA_SRC has overloaded meaning. It can represent the 2465 * src address of incoming or outgoing packets. 2466 */ 2467 NEXTADDR(RTA_SRC, newrt->ri_src); 2468 #undef NEXTADDR 2469 2470 if (newrt->ri_rtsa_cnt > 0) { 2471 /* LINTED: aligned */ 2472 rtm_ext_t *rtm_ext = (rtm_ext_t *)cp; 2473 tsol_rtsecattr_t *rtsecattr; 2474 2475 rtm_ext->rtmex_type = RTMEX_GATEWAY_SECATTR; 2476 rtm_ext->rtmex_len = TSOL_RTSECATTR_SIZE(1); 2477 2478 rtsecattr = (tsol_rtsecattr_t *)(rtm_ext + 1); 2479 rtsecattr->rtsa_cnt = 1; 2480 2481 bcopy(&newrt->ri_rtsa, rtsecattr->rtsa_attr, 2482 sizeof (newrt->ri_rtsa)); 2483 cp = (char *)(rtsecattr->rtsa_attr + 1); 2484 } 2485 2486 rtm.rtm_msglen = l = cp - (char *)&m_rtmsg; 2487 2488 if (verbose) 2489 print_rtmsg(&rtm, l); 2490 if (debugonly) 2491 return (0); 2492 if ((rlen = write(s, (char *)&m_rtmsg, l)) < 0) { 2493 switch (errno) { 2494 case ESRCH: 2495 case EBUSY: 2496 case ENOBUFS: 2497 case EEXIST: 2498 case ENETUNREACH: 2499 case EHOSTUNREACH: 2500 case EPERM: 2501 break; 2502 default: 2503 perror(gettext("writing to routing socket")); 2504 break; 2505 } 2506 return (-1); 2507 } else if (rlen < (int)rtm.rtm_msglen) { 2508 (void) fprintf(stderr, 2509 gettext("route: write to routing socket got only %d for " 2510 "len\n"), rlen); 2511 return (-1); 2512 } 2513 if (newrt->ri_cmd == RTM_GET) { 2514 do { 2515 l = read(s, (char *)&m_rtmsg, sizeof (m_rtmsg)); 2516 } while (l > 0 && (rtm.rtm_seq != seq || rtm.rtm_pid != pid)); 2517 if (l < 0) { 2518 (void) fprintf(stderr, 2519 gettext("route: read from routing socket: %s\n"), 2520 strerror(errno)); 2521 } else { 2522 print_getmsg(newrt, &rtm, l); 2523 } 2524 } 2525 #undef rtm 2526 return (0); 2527 } 2528 2529 static char *msgtypes[] = { 2530 "", 2531 "RTM_ADD: Add Route", 2532 "RTM_DELETE: Delete Route", 2533 "RTM_CHANGE: Change Metrics or flags", 2534 "RTM_GET: Report Metrics", 2535 "RTM_LOSING: Kernel Suspects Partitioning", 2536 "RTM_REDIRECT: Told to use different route", 2537 "RTM_MISS: Lookup failed on this address", 2538 "RTM_LOCK: fix specified metrics", 2539 "RTM_OLDADD: caused by SIOCADDRT", 2540 "RTM_OLDDEL: caused by SIOCDELRT", 2541 "RTM_RESOLVE: Route created by cloning", 2542 "RTM_NEWADDR: address being added to iface", 2543 "RTM_DELADDR: address being removed from iface", 2544 "RTM_IFINFO: iface status change", 2545 0, 2546 }; 2547 2548 #define NMSGTYPES (sizeof (msgtypes) / sizeof (msgtypes[0])) 2549 2550 static char metricnames[] = 2551 "\011pksent\010rttvar\7rtt\6ssthresh\5sendpipe\4recvpipe\3expire\2hopcount" 2552 "\1mtu"; 2553 static char routeflags[] = 2554 "\1UP\2GATEWAY\3HOST\4REJECT\5DYNAMIC\6MODIFIED\7DONE\010MASK_PRESENT" 2555 "\011CLONING\012XRESOLVE\013LLINFO\014STATIC\015BLACKHOLE" 2556 "\016PRIVATE\017PROTO2\020PROTO1\021MULTIRT\022SETSRC"; 2557 static char ifnetflags[] = 2558 "\1UP\2BROADCAST\3DEBUG\4LOOPBACK\5PTP\6NOTRAILERS\7RUNNING\010NOARP" 2559 "\011PPROMISC\012ALLMULTI\013INTELLIGENT\014MULTICAST" 2560 "\015MULTI_BCAST\016UNNUMBERED\017DHCP\020PRIVATE" 2561 "\021NOXMIT\022NOLOCAL\023DEPRECATED\024ADDRCONF" 2562 "\025ROUTER\026NONUD\027ANYCAST\030NORTEXCH\031IPv4\032IPv6" 2563 "\033MIP\034NOFAILOVER\035FAILED\036STANDBY\037INACTIVE\040OFFLINE" 2564 "\041XRESOLV\042COS\043PREFERRED\044TEMPORARY"; 2565 static char addrnames[] = 2566 "\1DST\2GATEWAY\3NETMASK\4GENMASK\5IFP\6IFA\7AUTHOR\010BRD\011SRC"; 2567 2568 void 2569 print_rtmsg(struct rt_msghdr *rtm, int msglen) 2570 { 2571 struct if_msghdr *ifm; 2572 struct ifa_msghdr *ifam; 2573 2574 if (!verbose) 2575 return; 2576 if (rtm->rtm_version != RTM_VERSION) { 2577 (void) printf("routing message version %d not understood\n", 2578 rtm->rtm_version); 2579 return; 2580 } 2581 if (rtm->rtm_msglen != msglen) { 2582 (void) printf("message length mismatch, in packet %d, " 2583 "returned %d\n", 2584 rtm->rtm_msglen, msglen); 2585 if (msglen > rtm->rtm_msglen) 2586 msglen = rtm->rtm_msglen; 2587 } 2588 /* 2589 * Since rtm->rtm_type is unsigned, we'll just check the case of zero 2590 * and the upper-bound of (NMSGTYPES - 1). 2591 */ 2592 if (rtm->rtm_type == 0 || rtm->rtm_type >= (NMSGTYPES - 1)) { 2593 (void) printf("routing message type %d not understood\n", 2594 rtm->rtm_type); 2595 return; 2596 } 2597 (void) printf("%s: len %d, ", msgtypes[rtm->rtm_type], msglen); 2598 switch (rtm->rtm_type) { 2599 case RTM_IFINFO: 2600 ifm = (struct if_msghdr *)rtm; 2601 (void) printf("if# %d, flags:", ifm->ifm_index); 2602 bprintf(stdout, ifm->ifm_flags, ifnetflags); 2603 pmsg_addrs((const char *)(ifm + 1), msglen - sizeof (*ifm), 2604 ifm->ifm_addrs); 2605 break; 2606 case RTM_NEWADDR: 2607 case RTM_DELADDR: 2608 ifam = (struct ifa_msghdr *)rtm; 2609 (void) printf("metric %d, flags:", ifam->ifam_metric); 2610 bprintf(stdout, ifam->ifam_flags, routeflags); 2611 pmsg_addrs((const char *)(ifam + 1), msglen - sizeof (*ifam), 2612 ifam->ifam_addrs); 2613 break; 2614 default: 2615 (void) printf("pid: %ld, seq %d, errno %d, flags:", 2616 rtm->rtm_pid, rtm->rtm_seq, rtm->rtm_errno); 2617 bprintf(stdout, rtm->rtm_flags, routeflags); 2618 pmsg_common(rtm, msglen); 2619 break; 2620 } 2621 } 2622 2623 void 2624 print_getmsg(rtcmd_irep_t *req_rt, struct rt_msghdr *rtm, int msglen) 2625 { 2626 struct sockaddr *dst = NULL, *gate = NULL, *mask = NULL, *src = NULL; 2627 struct sockaddr_dl *ifp = NULL; 2628 struct sockaddr *sa; 2629 char *cp; 2630 int i; 2631 2632 (void) printf(" route to: %s\n", routename(&req_rt->ri_dst.sa)); 2633 if (rtm->rtm_version != RTM_VERSION) { 2634 (void) fprintf(stderr, 2635 gettext("routing message version %d not understood\n"), 2636 rtm->rtm_version); 2637 return; 2638 } 2639 if (rtm->rtm_msglen > (ushort_t)msglen) { 2640 (void) fprintf(stderr, 2641 gettext("message length mismatch, in packet %d, " 2642 "returned %d\n"), rtm->rtm_msglen, msglen); 2643 } 2644 if (rtm->rtm_errno) { 2645 (void) fprintf(stderr, "RTM_GET: %s (errno %d)\n", 2646 strerror(rtm->rtm_errno), rtm->rtm_errno); 2647 return; 2648 } 2649 cp = ((char *)(rtm + 1)); 2650 if (rtm->rtm_addrs != 0) { 2651 for (i = 1; i != 0; i <<= 1) { 2652 if (i & rtm->rtm_addrs) { 2653 /* LINTED */ 2654 sa = (struct sockaddr *)cp; 2655 switch (i) { 2656 case RTA_DST: 2657 dst = sa; 2658 break; 2659 case RTA_GATEWAY: 2660 gate = sa; 2661 break; 2662 case RTA_NETMASK: 2663 mask = sa; 2664 break; 2665 case RTA_IFP: 2666 if (sa->sa_family == AF_LINK && 2667 ((struct sockaddr_dl *)sa)-> 2668 sdl_nlen != 0) 2669 ifp = (struct sockaddr_dl *)sa; 2670 break; 2671 case RTA_SRC: 2672 src = sa; 2673 break; 2674 } 2675 ADVANCE(cp, sa); 2676 } 2677 } 2678 } 2679 if (dst != NULL && mask != NULL) 2680 mask->sa_family = dst->sa_family; /* XXX */ 2681 if (dst != NULL) 2682 (void) printf("destination: %s\n", routename(dst)); 2683 if (mask != NULL) { 2684 boolean_t savenflag = nflag; 2685 2686 nflag = B_TRUE; 2687 (void) printf(" mask: %s\n", routename(mask)); 2688 nflag = savenflag; 2689 } 2690 if (gate != NULL && rtm->rtm_flags & RTF_GATEWAY) 2691 (void) printf(" gateway: %s\n", routename(gate)); 2692 if (src != NULL && rtm->rtm_flags & RTF_SETSRC) 2693 (void) printf(" setsrc: %s\n", routename(src)); 2694 if (ifp != NULL) { 2695 if (verbose) { 2696 int i; 2697 2698 (void) printf(" interface: %.*s index %d address ", 2699 ifp->sdl_nlen, ifp->sdl_data, ifp->sdl_index); 2700 for (i = ifp->sdl_nlen; 2701 i < ifp->sdl_nlen + ifp->sdl_alen; 2702 i++) { 2703 (void) printf("%02x ", 2704 ifp->sdl_data[i] & 0xFF); 2705 } 2706 (void) printf("\n"); 2707 } else { 2708 (void) printf(" interface: %.*s\n", 2709 ifp->sdl_nlen, ifp->sdl_data); 2710 } 2711 } 2712 (void) printf(" flags: "); 2713 bprintf(stdout, rtm->rtm_flags, routeflags); 2714 2715 #define lock(f) ((rtm->rtm_rmx.rmx_locks & RTV_ ## f) ? 'L' : ' ') 2716 #define msec(u) (((u) + 500) / 1000) /* usec to msec */ 2717 2718 (void) printf("\n%s\n", " recvpipe sendpipe ssthresh rtt,ms " 2719 "rttvar,ms hopcount mtu expire"); 2720 (void) printf("%8d%c ", rtm->rtm_rmx.rmx_recvpipe, lock(RPIPE)); 2721 (void) printf("%8d%c ", rtm->rtm_rmx.rmx_sendpipe, lock(SPIPE)); 2722 (void) printf("%8d%c ", rtm->rtm_rmx.rmx_ssthresh, lock(SSTHRESH)); 2723 (void) printf("%8d%c ", msec(rtm->rtm_rmx.rmx_rtt), lock(RTT)); 2724 (void) printf("%8d%c ", msec(rtm->rtm_rmx.rmx_rttvar), lock(RTTVAR)); 2725 (void) printf("%8d%c ", rtm->rtm_rmx.rmx_hopcount, lock(HOPCOUNT)); 2726 (void) printf("%8d%c ", rtm->rtm_rmx.rmx_mtu, lock(MTU)); 2727 if (rtm->rtm_rmx.rmx_expire) 2728 rtm->rtm_rmx.rmx_expire -= time(0); 2729 (void) printf("%8d%c", rtm->rtm_rmx.rmx_expire, lock(EXPIRE)); 2730 #undef lock 2731 #undef msec 2732 #define RTA_IGN \ 2733 (RTA_DST|RTA_GATEWAY|RTA_NETMASK|RTA_IFP|RTA_IFA|RTA_BRD|RTA_SRC) 2734 if (verbose) { 2735 pmsg_common(rtm, msglen); 2736 } else { 2737 const char *sptr, *endptr; 2738 const struct sockaddr *sa; 2739 uint_t addrs; 2740 2741 /* Not verbose; just print out the exceptional cases */ 2742 if (rtm->rtm_addrs &~ RTA_IGN) { 2743 (void) printf("\nsockaddrs: "); 2744 bprintf(stdout, rtm->rtm_addrs, addrnames); 2745 } 2746 sptr = (const char *)(rtm + 1); 2747 endptr = (const char *)rtm + msglen; 2748 addrs = rtm->rtm_addrs; 2749 while (addrs != 0 && sptr + sizeof (*sa) <= endptr) { 2750 addrs &= addrs - 1; 2751 /* LINTED */ 2752 sa = (const struct sockaddr *)sptr; 2753 ADVANCE(sptr, sa); 2754 } 2755 if (addrs == 0) 2756 pmsg_secattr(sptr, endptr - sptr, " secattr: "); 2757 (void) putchar('\n'); 2758 } 2759 #undef RTA_IGN 2760 } 2761 2762 static void 2763 pmsg_common(const struct rt_msghdr *rtm, size_t msglen) 2764 { 2765 (void) printf("\nlocks: "); 2766 bprintf(stdout, (int)rtm->rtm_rmx.rmx_locks, metricnames); 2767 (void) printf(" inits: "); 2768 bprintf(stdout, (int)rtm->rtm_inits, metricnames); 2769 pmsg_addrs((const char *)(rtm + 1), msglen - sizeof (*rtm), 2770 rtm->rtm_addrs); 2771 } 2772 2773 static void 2774 pmsg_addrs(const char *cp, size_t msglen, uint_t addrs) 2775 { 2776 const struct sockaddr *sa; 2777 const char *maxptr; 2778 int i; 2779 2780 if (addrs != 0) { 2781 (void) printf("\nsockaddrs: "); 2782 bprintf(stdout, addrs, addrnames); 2783 (void) putchar('\n'); 2784 maxptr = cp + msglen; 2785 for (i = 1; i != 0 && cp + sizeof (*sa) <= maxptr; i <<= 1) { 2786 if (i & addrs) { 2787 /* LINTED */ 2788 sa = (const struct sockaddr *)cp; 2789 (void) printf(" %s", routename(sa)); 2790 ADVANCE(cp, sa); 2791 } 2792 } 2793 if (i != 0) 2794 msglen = 0; 2795 else 2796 msglen = maxptr - cp; 2797 } 2798 pmsg_secattr(cp, msglen, "secattr: "); 2799 (void) putchar('\n'); 2800 (void) fflush(stdout); 2801 } 2802 2803 void 2804 bprintf(FILE *fp, int b, char *s) 2805 { 2806 int i; 2807 boolean_t gotsome = B_FALSE; 2808 2809 if (b == 0) 2810 return; 2811 while ((i = *s++) != 0) { 2812 if (b & (1 << (i - 1))) { 2813 if (!gotsome) 2814 i = '<'; 2815 else 2816 i = ','; 2817 (void) putc(i, fp); 2818 gotsome = B_TRUE; 2819 for (; (i = *s) > ' '; s++) 2820 (void) putc(i, fp); 2821 } else { 2822 while (*s > ' ') 2823 s++; 2824 } 2825 } 2826 if (gotsome) 2827 (void) putc('>', fp); 2828 } 2829 2830 int 2831 keyword(const char *cp) 2832 { 2833 struct keytab *kt = keywords; 2834 2835 while (kt->kt_cp && strcmp(kt->kt_cp, cp)) 2836 kt++; 2837 return (kt->kt_i); 2838 } 2839 2840 void 2841 sodump(su_t *su, char *which) 2842 { 2843 static char obuf[INET6_ADDRSTRLEN]; 2844 2845 switch (su->sa.sa_family) { 2846 case AF_LINK: 2847 (void) printf("%s: link %s; ", 2848 which, link_ntoa(&su->sdl)); 2849 break; 2850 case AF_INET: 2851 (void) printf("%s: inet %s; ", 2852 which, inet_ntoa(su->sin.sin_addr)); 2853 break; 2854 case AF_INET6: 2855 if (inet_ntop(AF_INET6, (void *)&su->sin6.sin6_addr, obuf, 2856 INET6_ADDRSTRLEN) != NULL) { 2857 (void) printf("%s: inet6 %s; ", which, obuf); 2858 break; 2859 } 2860 /* FALLTHROUGH */ 2861 default: 2862 quit(gettext("Internal Error"), EINVAL); 2863 /* NOTREACHED */ 2864 } 2865 (void) fflush(stdout); 2866 } 2867 2868 /* States */ 2869 #define VIRGIN 0 2870 #define GOTONE 1 2871 #define GOTTWO 2 2872 #define RESET 3 2873 /* Inputs */ 2874 #define DIGIT (4*0) 2875 #define END (4*1) 2876 #define DELIM (4*2) 2877 #define LETTER (4*3) 2878 2879 void 2880 sockaddr(char *addr, struct sockaddr *sa) 2881 { 2882 char *cp = (char *)sa; 2883 int size = salen(sa); 2884 char *cplim = cp + size; 2885 int byte = 0, state = VIRGIN, new; 2886 2887 (void) memset(cp, 0, size); 2888 cp++; 2889 do { 2890 if ((*addr >= '0') && (*addr <= '9')) { 2891 new = *addr - '0'; 2892 } else if ((*addr >= 'a') && (*addr <= 'f')) { 2893 new = *addr - 'a' + 10; 2894 } else if ((*addr >= 'A') && (*addr <= 'F')) { 2895 new = *addr - 'A' + 10; 2896 } else if (*addr == 0) { 2897 state |= END; 2898 } else { 2899 state |= DELIM; 2900 } 2901 addr++; 2902 switch (state /* | INPUT */) { 2903 case GOTTWO | DIGIT: 2904 *cp++ = byte; 2905 /* FALLTHROUGH */ 2906 case VIRGIN | DIGIT: 2907 state = GOTONE; byte = new; continue; 2908 case GOTONE | DIGIT: 2909 state = GOTTWO; byte = new + (byte << 4); continue; 2910 default: /* | DELIM */ 2911 state = VIRGIN; *cp++ = byte; byte = 0; continue; 2912 case GOTONE | END: 2913 case GOTTWO | END: 2914 *cp++ = byte; 2915 /* FALLTHROUGH */ 2916 case VIRGIN | END: 2917 break; 2918 } 2919 break; 2920 } while (cp < cplim); 2921 } 2922 2923 int 2924 salen(const struct sockaddr *sa) 2925 { 2926 switch (sa->sa_family) { 2927 case AF_INET: 2928 return (sizeof (struct sockaddr_in)); 2929 case AF_LINK: 2930 return (sizeof (struct sockaddr_dl)); 2931 case AF_INET6: 2932 return (sizeof (struct sockaddr_in6)); 2933 default: 2934 return (sizeof (struct sockaddr)); 2935 } 2936 } 2937 2938 void 2939 link_addr(const char *addr, struct sockaddr_dl *sdl) 2940 { 2941 char *cp = sdl->sdl_data; 2942 char *cplim = sizeof (struct sockaddr_dl) + (char *)sdl; 2943 int byte = 0, state = VIRGIN, new; 2944 2945 (void) memset(sdl, 0, sizeof (struct sockaddr_dl)); 2946 sdl->sdl_family = AF_LINK; 2947 do { 2948 state &= ~LETTER; 2949 if ((*addr >= '0') && (*addr <= '9')) { 2950 new = *addr - '0'; 2951 } else if ((*addr >= 'a') && (*addr <= 'f')) { 2952 new = *addr - 'a' + 10; 2953 } else if ((*addr >= 'A') && (*addr <= 'F')) { 2954 new = *addr - 'A' + 10; 2955 } else if (*addr == 0) { 2956 state |= END; 2957 } else if (state == VIRGIN && 2958 (((*addr >= 'A') && (*addr <= 'Z')) || 2959 ((*addr >= 'a') && (*addr <= 'z')))) { 2960 state |= LETTER; 2961 } else { 2962 state |= DELIM; 2963 } 2964 addr++; 2965 switch (state /* | INPUT */) { 2966 case VIRGIN | DIGIT: 2967 case VIRGIN | LETTER: 2968 *cp++ = addr[-1]; 2969 continue; 2970 case VIRGIN | DELIM: 2971 state = RESET; 2972 sdl->sdl_nlen = cp - sdl->sdl_data; 2973 continue; 2974 case GOTTWO | DIGIT: 2975 *cp++ = byte; 2976 /* FALLTHROUGH */ 2977 case RESET | DIGIT: 2978 state = GOTONE; 2979 byte = new; 2980 continue; 2981 case GOTONE | DIGIT: 2982 state = GOTTWO; 2983 byte = new + (byte << 4); 2984 continue; 2985 default: /* | DELIM */ 2986 state = RESET; 2987 *cp++ = byte; 2988 byte = 0; 2989 continue; 2990 case GOTONE | END: 2991 case GOTTWO | END: 2992 *cp++ = byte; 2993 /* FALLTHROUGH */ 2994 case RESET | END: 2995 break; 2996 } 2997 break; 2998 } while (cp < cplim); 2999 sdl->sdl_alen = cp - LLADDR(sdl); 3000 } 3001 3002 static char hexlist[] = "0123456789abcdef"; 3003 3004 char * 3005 link_ntoa(const struct sockaddr_dl *sdl) 3006 { 3007 static char obuf[64]; 3008 char *out = obuf; 3009 int i; 3010 uchar_t *in = (uchar_t *)LLADDR(sdl); 3011 uchar_t *inlim = in + sdl->sdl_alen; 3012 boolean_t firsttime = B_TRUE; 3013 3014 if (sdl->sdl_nlen) { 3015 (void) memcpy(obuf, sdl->sdl_data, sdl->sdl_nlen); 3016 out += sdl->sdl_nlen; 3017 if (sdl->sdl_alen) 3018 *out++ = ':'; 3019 } 3020 while (in < inlim) { 3021 if (firsttime) 3022 firsttime = B_FALSE; 3023 else 3024 *out++ = '.'; 3025 i = *in++; 3026 if (i > 0xf) { 3027 out[1] = hexlist[i & 0xf]; 3028 i >>= 4; 3029 out[0] = hexlist[i]; 3030 out += 2; 3031 } else { 3032 *out++ = hexlist[i]; 3033 } 3034 } 3035 *out = 0; 3036 return (obuf); 3037 } 3038 3039 static mib_item_t * 3040 mibget(int sd) 3041 { 3042 intmax_t buf[512 / sizeof (intmax_t)]; 3043 int flags; 3044 int i, j, getcode; 3045 struct strbuf ctlbuf, databuf; 3046 struct T_optmgmt_req *tor = (struct T_optmgmt_req *)buf; 3047 struct T_optmgmt_ack *toa = (struct T_optmgmt_ack *)buf; 3048 struct T_error_ack *tea = (struct T_error_ack *)buf; 3049 struct opthdr *req; 3050 mib_item_t *first_item = NULL; 3051 mib_item_t *last_item = NULL; 3052 mib_item_t *temp; 3053 3054 tor->PRIM_type = T_SVR4_OPTMGMT_REQ; 3055 tor->OPT_offset = sizeof (struct T_optmgmt_req); 3056 tor->OPT_length = sizeof (struct opthdr); 3057 tor->MGMT_flags = T_CURRENT; 3058 req = (struct opthdr *)&tor[1]; 3059 req->level = MIB2_IP; /* any MIB2_xxx value ok here */ 3060 req->name = 0; 3061 req->len = 0; 3062 3063 ctlbuf.buf = (char *)buf; 3064 ctlbuf.len = tor->OPT_length + tor->OPT_offset; 3065 flags = 0; 3066 if (putmsg(sd, &ctlbuf, NULL, flags) < 0) { 3067 perror("mibget: putmsg (ctl)"); 3068 return (NULL); 3069 } 3070 /* 3071 * each reply consists of a ctl part for one fixed structure 3072 * or table, as defined in mib2.h. The format is a T_OPTMGMT_ACK, 3073 * containing an opthdr structure. level/name identify the entry, 3074 * len is the size of the data part of the message. 3075 */ 3076 req = (struct opthdr *)&toa[1]; 3077 ctlbuf.maxlen = sizeof (buf); 3078 for (j = 1; ; j++) { 3079 flags = 0; 3080 getcode = getmsg(sd, &ctlbuf, NULL, &flags); 3081 if (getcode < 0) { 3082 perror("mibget: getmsg (ctl)"); 3083 if (verbose) { 3084 (void) fprintf(stderr, 3085 "# level name len\n"); 3086 i = 0; 3087 for (last_item = first_item; last_item != NULL; 3088 last_item = last_item->next_item) { 3089 (void) printf("%d %4ld %5ld %ld\n", 3090 ++i, last_item->group, 3091 last_item->mib_id, 3092 last_item->length); 3093 } 3094 } 3095 break; 3096 } 3097 if (getcode == 0 && 3098 ctlbuf.len >= sizeof (struct T_optmgmt_ack) && 3099 toa->PRIM_type == T_OPTMGMT_ACK && 3100 toa->MGMT_flags == T_SUCCESS && 3101 req->len == 0) { 3102 if (verbose) { 3103 (void) printf("mibget getmsg() %d returned EOD " 3104 "(level %lu, name %lu)\n", j, req->level, 3105 req->name); 3106 } 3107 return (first_item); /* this is EOD msg */ 3108 } 3109 3110 if (ctlbuf.len >= sizeof (struct T_error_ack) && 3111 tea->PRIM_type == T_ERROR_ACK) { 3112 (void) fprintf(stderr, gettext("mibget %d gives " 3113 "T_ERROR_ACK: TLI_error = 0x%lx, UNIX_error = " 3114 "0x%lx\n"), j, tea->TLI_error, tea->UNIX_error); 3115 errno = (tea->TLI_error == TSYSERR) 3116 ? tea->UNIX_error : EPROTO; 3117 break; 3118 } 3119 3120 if (getcode != MOREDATA || 3121 ctlbuf.len < sizeof (struct T_optmgmt_ack) || 3122 toa->PRIM_type != T_OPTMGMT_ACK || 3123 toa->MGMT_flags != T_SUCCESS) { 3124 (void) printf("mibget getmsg(ctl) %d returned %d, " 3125 "ctlbuf.len = %d, PRIM_type = %ld\n", 3126 j, getcode, ctlbuf.len, toa->PRIM_type); 3127 if (toa->PRIM_type == T_OPTMGMT_ACK) { 3128 (void) printf("T_OPTMGMT_ACK: " 3129 "MGMT_flags = 0x%lx, req->len = %ld\n", 3130 toa->MGMT_flags, req->len); 3131 } 3132 errno = ENOMSG; 3133 break; 3134 } 3135 3136 temp = malloc(sizeof (mib_item_t)); 3137 if (temp == NULL) { 3138 perror("mibget: malloc"); 3139 break; 3140 } 3141 if (last_item != NULL) 3142 last_item->next_item = temp; 3143 else 3144 first_item = temp; 3145 last_item = temp; 3146 last_item->next_item = NULL; 3147 last_item->group = req->level; 3148 last_item->mib_id = req->name; 3149 last_item->length = req->len; 3150 last_item->valp = malloc(req->len); 3151 if (verbose) { 3152 (void) printf("msg %d: group = %4ld mib_id = %5ld " 3153 "length = %ld\n", 3154 j, last_item->group, last_item->mib_id, 3155 last_item->length); 3156 } 3157 3158 databuf.maxlen = last_item->length; 3159 databuf.buf = (char *)last_item->valp; 3160 databuf.len = 0; 3161 flags = 0; 3162 getcode = getmsg(sd, NULL, &databuf, &flags); 3163 if (getcode < 0) { 3164 perror("mibget: getmsg (data)"); 3165 break; 3166 } else if (getcode != 0) { 3167 (void) printf("mibget getmsg(data) returned %d, " 3168 "databuf.maxlen = %d, databuf.len = %d\n", 3169 getcode, databuf.maxlen, databuf.len); 3170 break; 3171 } 3172 } 3173 3174 /* 3175 * On error, free all the allocated mib_item_t objects. 3176 */ 3177 while (first_item != NULL) { 3178 last_item = first_item; 3179 first_item = first_item->next_item; 3180 free(last_item); 3181 } 3182 return (NULL); 3183 } 3184 3185 /* 3186 * print label security attributes for gateways. 3187 */ 3188 static void 3189 pmsg_secattr(const char *sptr, size_t msglen, const char *labelstr) 3190 { 3191 rtm_ext_t rtm_ext; 3192 tsol_rtsecattr_t sp; 3193 struct rtsa_s *rtsa = &sp.rtsa_attr[0]; 3194 const char *endptr; 3195 char buf[256]; 3196 int i; 3197 3198 if (!is_system_labeled()) 3199 return; 3200 3201 endptr = sptr + msglen; 3202 3203 for (;;) { 3204 if (sptr + sizeof (rtm_ext_t) + sizeof (sp) > endptr) 3205 return; 3206 3207 bcopy(sptr, &rtm_ext, sizeof (rtm_ext)); 3208 sptr += sizeof (rtm_ext); 3209 if (rtm_ext.rtmex_type == RTMEX_GATEWAY_SECATTR) 3210 break; 3211 sptr += rtm_ext.rtmex_len; 3212 } 3213 3214 /* bail if this entry is corrupt or overruns buffer length */ 3215 if (rtm_ext.rtmex_len < sizeof (sp) || 3216 sptr + rtm_ext.rtmex_len > endptr) 3217 return; 3218 3219 /* run up just to the end of this extension */ 3220 endptr = sptr + rtm_ext.rtmex_len; 3221 3222 bcopy(sptr, &sp, sizeof (sp)); 3223 sptr += sizeof (sp); 3224 3225 if (sptr + (sp.rtsa_cnt - 1) * sizeof (*rtsa) != endptr) 3226 return; 3227 3228 for (i = 0; i < sp.rtsa_cnt; i++) { 3229 if (i > 0) { 3230 /* first element is part of sp initalized above */ 3231 bcopy(sptr, rtsa, sizeof (*rtsa)); 3232 sptr += sizeof (*rtsa); 3233 } 3234 (void) printf("\n%s%s", labelstr, rtsa_to_str(rtsa, buf, 3235 sizeof (buf))); 3236 } 3237 } 3238