Home | History | Annotate | Line # | Download | only in net
bpf.c revision 1.8
      1  1.1      cgd /*-
      2  1.2      cgd  * Copyright (c) 1990-1991 The Regents of the University of California.
      3  1.1      cgd  * All rights reserved.
      4  1.1      cgd  *
      5  1.1      cgd  * This code is derived from the Stanford/CMU enet packet filter,
      6  1.1      cgd  * (net/enet.c) distributed as part of 4.3BSD, and code contributed
      7  1.2      cgd  * to Berkeley by Steven McCanne and Van Jacobson both of Lawrence
      8  1.2      cgd  * Berkeley Laboratory.
      9  1.1      cgd  *
     10  1.1      cgd  * Redistribution and use in source and binary forms, with or without
     11  1.1      cgd  * modification, are permitted provided that the following conditions
     12  1.1      cgd  * are met:
     13  1.1      cgd  * 1. Redistributions of source code must retain the above copyright
     14  1.1      cgd  *    notice, this list of conditions and the following disclaimer.
     15  1.1      cgd  * 2. Redistributions in binary form must reproduce the above copyright
     16  1.1      cgd  *    notice, this list of conditions and the following disclaimer in the
     17  1.1      cgd  *    documentation and/or other materials provided with the distribution.
     18  1.1      cgd  * 3. All advertising materials mentioning features or use of this software
     19  1.1      cgd  *    must display the following acknowledgement:
     20  1.1      cgd  *	This product includes software developed by the University of
     21  1.1      cgd  *	California, Berkeley and its contributors.
     22  1.1      cgd  * 4. Neither the name of the University nor the names of its contributors
     23  1.1      cgd  *    may be used to endorse or promote products derived from this software
     24  1.1      cgd  *    without specific prior written permission.
     25  1.1      cgd  *
     26  1.1      cgd  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     27  1.1      cgd  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     28  1.1      cgd  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     29  1.1      cgd  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     30  1.1      cgd  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     31  1.1      cgd  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     32  1.1      cgd  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     33  1.1      cgd  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     34  1.1      cgd  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     35  1.1      cgd  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     36  1.1      cgd  * SUCH DAMAGE.
     37  1.1      cgd  *
     38  1.5      cgd  *	from: @(#)bpf.c	7.5 (Berkeley) 7/15/91
     39  1.8  mycroft  *	$Id: bpf.c,v 1.8 1993/12/18 00:40:49 mycroft Exp $
     40  1.1      cgd  */
     41  1.1      cgd 
     42  1.1      cgd #include "bpfilter.h"
     43  1.1      cgd 
     44  1.2      cgd #if NBPFILTER > 0
     45  1.1      cgd 
     46  1.1      cgd #include <sys/param.h>
     47  1.1      cgd #include <sys/systm.h>
     48  1.1      cgd #include <sys/mbuf.h>
     49  1.1      cgd #include <sys/buf.h>
     50  1.1      cgd #include <sys/dir.h>
     51  1.2      cgd #include <sys/time.h>
     52  1.1      cgd #include <sys/proc.h>
     53  1.1      cgd #include <sys/user.h>
     54  1.1      cgd #include <sys/ioctl.h>
     55  1.5      cgd #include <sys/select.h>
     56  1.1      cgd #include <sys/file.h>
     57  1.2      cgd #if defined(sparc) && BSD < 199103
     58  1.1      cgd #include <sys/stream.h>
     59  1.1      cgd #endif
     60  1.1      cgd #include <sys/tty.h>
     61  1.1      cgd #include <sys/uio.h>
     62  1.1      cgd #include <sys/protosw.h>
     63  1.1      cgd #include <sys/socket.h>
     64  1.8  mycroft #include <sys/errno.h>
     65  1.8  mycroft #include <sys/kernel.h>
     66  1.8  mycroft 
     67  1.1      cgd #include <net/if.h>
     68  1.1      cgd #include <net/bpf.h>
     69  1.1      cgd #include <net/bpfdesc.h>
     70  1.1      cgd 
     71  1.1      cgd #include <netinet/in.h>
     72  1.1      cgd #include <netinet/if_ether.h>
     73  1.1      cgd 
     74  1.2      cgd /*
     75  1.2      cgd  * Older BSDs don't have kernel malloc.
     76  1.2      cgd  */
     77  1.2      cgd #if BSD < 199103
     78  1.2      cgd extern bcopy();
     79  1.2      cgd static caddr_t bpf_alloc();
     80  1.2      cgd #include <net/bpf_compat.h>
     81  1.2      cgd #define BPF_BUFSIZE (MCLBYTES-8)
     82  1.2      cgd #define UIOMOVE(cp, len, code, uio) uiomove(cp, len, code, uio)
     83  1.2      cgd #else
     84  1.2      cgd #define BPF_BUFSIZE 4096
     85  1.2      cgd #define UIOMOVE(cp, len, code, uio) uiomove(cp, len, uio)
     86  1.2      cgd #endif
     87  1.2      cgd 
     88  1.1      cgd #define PRINET  26			/* interruptible */
     89  1.1      cgd 
     90  1.1      cgd /*
     91  1.1      cgd  * The default read buffer size is patchable.
     92  1.1      cgd  */
     93  1.2      cgd int bpf_bufsize = BPF_BUFSIZE;
     94  1.1      cgd 
     95  1.1      cgd /*
     96  1.1      cgd  *  bpf_iflist is the list of interfaces; each corresponds to an ifnet
     97  1.1      cgd  *  bpf_dtab holds the descriptors, indexed by minor device #
     98  1.1      cgd  */
     99  1.2      cgd struct bpf_if	*bpf_iflist;
    100  1.2      cgd struct bpf_d	bpf_dtab[NBPFILTER];
    101  1.1      cgd 
    102  1.1      cgd static void	bpf_ifname();
    103  1.1      cgd static void	catchpacket();
    104  1.2      cgd static void	bpf_freed();
    105  1.1      cgd static int	bpf_setif();
    106  1.1      cgd static int	bpf_initd();
    107  1.2      cgd static int	bpf_allocbufs();
    108  1.6  deraadt 
    109  1.6  deraadt void
    110  1.6  deraadt bpfilterattach(n)
    111  1.6  deraadt 	int n;
    112  1.6  deraadt {
    113  1.6  deraadt }
    114  1.1      cgd 
    115  1.1      cgd static int
    116  1.1      cgd bpf_movein(uio, linktype, mp, sockp)
    117  1.1      cgd 	register struct uio *uio;
    118  1.1      cgd 	int linktype;
    119  1.1      cgd 	register struct mbuf **mp;
    120  1.1      cgd 	register struct sockaddr *sockp;
    121  1.1      cgd {
    122  1.1      cgd 	struct mbuf *m;
    123  1.1      cgd 	int error;
    124  1.1      cgd 	int len;
    125  1.1      cgd 	int hlen;
    126  1.1      cgd 
    127  1.1      cgd 	/*
    128  1.1      cgd 	 * Build a sockaddr based on the data link layer type.
    129  1.1      cgd 	 * We do this at this level because the ethernet header
    130  1.1      cgd 	 * is copied directly into the data field of the sockaddr.
    131  1.1      cgd 	 * In the case of SLIP, there is no header and the packet
    132  1.1      cgd 	 * is forwarded as is.
    133  1.1      cgd 	 * Also, we are careful to leave room at the front of the mbuf
    134  1.1      cgd 	 * for the link level header.
    135  1.1      cgd 	 */
    136  1.1      cgd 	switch (linktype) {
    137  1.2      cgd 
    138  1.1      cgd 	case DLT_SLIP:
    139  1.1      cgd 		sockp->sa_family = AF_INET;
    140  1.1      cgd 		hlen = 0;
    141  1.1      cgd 		break;
    142  1.1      cgd 
    143  1.1      cgd 	case DLT_EN10MB:
    144  1.1      cgd 		sockp->sa_family = AF_UNSPEC;
    145  1.1      cgd 		/* XXX Would MAXLINKHDR be better? */
    146  1.1      cgd 		hlen = sizeof(struct ether_header);
    147  1.1      cgd 		break;
    148  1.1      cgd 
    149  1.2      cgd 	case DLT_FDDI:
    150  1.1      cgd 		sockp->sa_family = AF_UNSPEC;
    151  1.1      cgd 		/* XXX 4(FORMAC)+6(dst)+6(src)+3(LLC)+5(SNAP) */
    152  1.1      cgd 		hlen = 24;
    153  1.1      cgd 		break;
    154  1.1      cgd 
    155  1.2      cgd 	case DLT_NULL:
    156  1.2      cgd 		sockp->sa_family = AF_UNSPEC;
    157  1.2      cgd 		hlen = 0;
    158  1.2      cgd 		break;
    159  1.2      cgd 
    160  1.1      cgd 	default:
    161  1.1      cgd 		return (EIO);
    162  1.1      cgd 	}
    163  1.1      cgd 
    164  1.1      cgd 	len = uio->uio_resid;
    165  1.1      cgd 	if ((unsigned)len > MCLBYTES)
    166  1.1      cgd 		return (EIO);
    167  1.1      cgd 
    168  1.1      cgd 	MGET(m, M_WAIT, MT_DATA);
    169  1.1      cgd 	if (m == 0)
    170  1.1      cgd 		return (ENOBUFS);
    171  1.1      cgd 	if (len > MLEN) {
    172  1.2      cgd #if BSD >= 199103
    173  1.1      cgd 		MCLGET(m, M_WAIT);
    174  1.1      cgd 		if ((m->m_flags & M_EXT) == 0) {
    175  1.2      cgd #else
    176  1.2      cgd 		MCLGET(m);
    177  1.2      cgd 		if (m->m_len != MCLBYTES) {
    178  1.2      cgd #endif
    179  1.1      cgd 			error = ENOBUFS;
    180  1.1      cgd 			goto bad;
    181  1.1      cgd 		}
    182  1.1      cgd 	}
    183  1.1      cgd 	m->m_len = len;
    184  1.1      cgd 	*mp = m;
    185  1.1      cgd 	/*
    186  1.1      cgd 	 * Make room for link header.
    187  1.1      cgd 	 */
    188  1.2      cgd 	if (hlen != 0) {
    189  1.1      cgd 		m->m_len -= hlen;
    190  1.2      cgd #if BSD >= 199103
    191  1.1      cgd 		m->m_data += hlen; /* XXX */
    192  1.2      cgd #else
    193  1.2      cgd 		m->m_off += hlen;
    194  1.2      cgd #endif
    195  1.2      cgd 		error = UIOMOVE((caddr_t)sockp->sa_data, hlen, UIO_WRITE, uio);
    196  1.1      cgd 		if (error)
    197  1.1      cgd 			goto bad;
    198  1.1      cgd 	}
    199  1.2      cgd 	error = UIOMOVE(mtod(m, caddr_t), len - hlen, UIO_WRITE, uio);
    200  1.2      cgd 	if (!error)
    201  1.1      cgd 		return (0);
    202  1.1      cgd  bad:
    203  1.1      cgd 	m_freem(m);
    204  1.1      cgd 	return (error);
    205  1.1      cgd }
    206  1.1      cgd 
    207  1.1      cgd /*
    208  1.2      cgd  * Attach file to the bpf interface, i.e. make d listen on bp.
    209  1.1      cgd  * Must be called at splimp.
    210  1.1      cgd  */
    211  1.1      cgd static void
    212  1.1      cgd bpf_attachd(d, bp)
    213  1.1      cgd 	struct bpf_d *d;
    214  1.1      cgd 	struct bpf_if *bp;
    215  1.1      cgd {
    216  1.2      cgd 	/*
    217  1.2      cgd 	 * Point d at bp, and add d to the interface's list of listeners.
    218  1.2      cgd 	 * Finally, point the driver's bpf cookie at the interface so
    219  1.2      cgd 	 * it will divert packets to bpf.
    220  1.2      cgd 	 */
    221  1.1      cgd 	d->bd_bif = bp;
    222  1.1      cgd 	d->bd_next = bp->bif_dlist;
    223  1.1      cgd 	bp->bif_dlist = d;
    224  1.1      cgd 
    225  1.1      cgd 	*bp->bif_driverp = bp;
    226  1.1      cgd }
    227  1.1      cgd 
    228  1.2      cgd /*
    229  1.2      cgd  * Detach a file from its interface.
    230  1.2      cgd  */
    231  1.1      cgd static void
    232  1.1      cgd bpf_detachd(d)
    233  1.1      cgd 	struct bpf_d *d;
    234  1.1      cgd {
    235  1.1      cgd 	struct bpf_d **p;
    236  1.1      cgd 	struct bpf_if *bp;
    237  1.1      cgd 
    238  1.1      cgd 	bp = d->bd_bif;
    239  1.1      cgd 	/*
    240  1.1      cgd 	 * Check if this descriptor had requested promiscuous mode.
    241  1.1      cgd 	 * If so, turn it off.
    242  1.1      cgd 	 */
    243  1.1      cgd 	if (d->bd_promisc) {
    244  1.1      cgd 		d->bd_promisc = 0;
    245  1.1      cgd 		if (ifpromisc(bp->bif_ifp, 0))
    246  1.1      cgd 			/*
    247  1.1      cgd 			 * Something is really wrong if we were able to put
    248  1.1      cgd 			 * the driver into promiscuous mode, but can't
    249  1.1      cgd 			 * take it out.
    250  1.1      cgd 			 */
    251  1.2      cgd 			panic("bpf: ifpromisc failed");
    252  1.1      cgd 	}
    253  1.2      cgd 	/* Remove d from the interface's descriptor list. */
    254  1.1      cgd 	p = &bp->bif_dlist;
    255  1.1      cgd 	while (*p != d) {
    256  1.1      cgd 		p = &(*p)->bd_next;
    257  1.1      cgd 		if (*p == 0)
    258  1.1      cgd 			panic("bpf_detachd: descriptor not in list");
    259  1.1      cgd 	}
    260  1.1      cgd 	*p = (*p)->bd_next;
    261  1.1      cgd 	if (bp->bif_dlist == 0)
    262  1.1      cgd 		/*
    263  1.1      cgd 		 * Let the driver know that there are no more listeners.
    264  1.1      cgd 		 */
    265  1.1      cgd 		*d->bd_bif->bif_driverp = 0;
    266  1.1      cgd 	d->bd_bif = 0;
    267  1.1      cgd }
    268  1.1      cgd 
    269  1.1      cgd 
    270  1.1      cgd /*
    271  1.2      cgd  * Mark a descriptor free by making it point to itself.
    272  1.1      cgd  * This is probably cheaper than marking with a constant since
    273  1.1      cgd  * the address should be in a register anyway.
    274  1.1      cgd  */
    275  1.1      cgd #define D_ISFREE(d) ((d) == (d)->bd_next)
    276  1.1      cgd #define D_MARKFREE(d) ((d)->bd_next = (d))
    277  1.1      cgd #define D_MARKUSED(d) ((d)->bd_next = 0)
    278  1.1      cgd 
    279  1.1      cgd /*
    280  1.2      cgd  * Open ethernet device.  Returns ENXIO for illegal minor device number,
    281  1.2      cgd  * EBUSY if file is open by another process.
    282  1.1      cgd  */
    283  1.1      cgd /* ARGSUSED */
    284  1.1      cgd int
    285  1.1      cgd bpfopen(dev, flag)
    286  1.1      cgd 	dev_t dev;
    287  1.1      cgd 	int flag;
    288  1.1      cgd {
    289  1.1      cgd 	register struct bpf_d *d;
    290  1.2      cgd 
    291  1.1      cgd 	if (minor(dev) >= NBPFILTER)
    292  1.1      cgd 		return (ENXIO);
    293  1.1      cgd 	/*
    294  1.1      cgd 	 * Each minor can be opened by only one process.  If the requested
    295  1.1      cgd 	 * minor is in use, return EBUSY.
    296  1.1      cgd 	 */
    297  1.1      cgd 	d = &bpf_dtab[minor(dev)];
    298  1.2      cgd 	if (!D_ISFREE(d))
    299  1.1      cgd 		return (EBUSY);
    300  1.2      cgd 
    301  1.2      cgd 	/* Mark "free" and do most initialization. */
    302  1.2      cgd 	bzero((char *)d, sizeof(*d));
    303  1.2      cgd 	d->bd_bufsize = bpf_bufsize;
    304  1.1      cgd 
    305  1.1      cgd 	return (0);
    306  1.1      cgd }
    307  1.1      cgd 
    308  1.1      cgd /*
    309  1.1      cgd  * Close the descriptor by detaching it from its interface,
    310  1.1      cgd  * deallocating its buffers, and marking it free.
    311  1.1      cgd  */
    312  1.1      cgd /* ARGSUSED */
    313  1.2      cgd int
    314  1.1      cgd bpfclose(dev, flag)
    315  1.1      cgd 	dev_t dev;
    316  1.1      cgd 	int flag;
    317  1.1      cgd {
    318  1.1      cgd 	register struct bpf_d *d = &bpf_dtab[minor(dev)];
    319  1.2      cgd 	register int s;
    320  1.1      cgd 
    321  1.1      cgd 	s = splimp();
    322  1.1      cgd 	if (d->bd_bif)
    323  1.1      cgd 		bpf_detachd(d);
    324  1.1      cgd 	splx(s);
    325  1.2      cgd 	bpf_freed(d);
    326  1.2      cgd 
    327  1.2      cgd 	return (0);
    328  1.2      cgd }
    329  1.2      cgd 
    330  1.2      cgd /*
    331  1.2      cgd  * Support for SunOS, which does not have tsleep.
    332  1.2      cgd  */
    333  1.2      cgd #if BSD < 199103
    334  1.2      cgd static
    335  1.2      cgd bpf_timeout(arg)
    336  1.2      cgd 	caddr_t arg;
    337  1.2      cgd {
    338  1.2      cgd 	struct bpf_d *d = (struct bpf_d *)arg;
    339  1.2      cgd 	d->bd_timedout = 1;
    340  1.2      cgd 	wakeup(arg);
    341  1.2      cgd }
    342  1.2      cgd 
    343  1.2      cgd #define BPF_SLEEP(chan, pri, s, t) bpf_sleep((struct bpf_d *)chan)
    344  1.2      cgd 
    345  1.2      cgd int
    346  1.2      cgd bpf_sleep(d)
    347  1.2      cgd 	register struct bpf_d *d;
    348  1.2      cgd {
    349  1.2      cgd 	register int rto = d->bd_rtout;
    350  1.2      cgd 	register int st;
    351  1.1      cgd 
    352  1.2      cgd 	if (rto != 0) {
    353  1.2      cgd 		d->bd_timedout = 0;
    354  1.2      cgd 		timeout(bpf_timeout, (caddr_t)d, rto);
    355  1.2      cgd 	}
    356  1.2      cgd 	st = sleep((caddr_t)d, PRINET|PCATCH);
    357  1.2      cgd 	if (rto != 0) {
    358  1.2      cgd 		if (d->bd_timedout == 0)
    359  1.2      cgd 			untimeout(bpf_timeout, (caddr_t)d);
    360  1.2      cgd 		else if (st == 0)
    361  1.2      cgd 			return EWOULDBLOCK;
    362  1.2      cgd 	}
    363  1.2      cgd 	return (st != 0) ? EINTR : 0;
    364  1.1      cgd }
    365  1.2      cgd #else
    366  1.2      cgd #define BPF_SLEEP tsleep
    367  1.2      cgd #endif
    368  1.1      cgd 
    369  1.1      cgd /*
    370  1.1      cgd  * Rotate the packet buffers in descriptor d.  Move the store buffer
    371  1.2      cgd  * into the hold slot, and the free buffer into the store slot.
    372  1.1      cgd  * Zero the length of the new store buffer.
    373  1.1      cgd  */
    374  1.1      cgd #define ROTATE_BUFFERS(d) \
    375  1.1      cgd 	(d)->bd_hbuf = (d)->bd_sbuf; \
    376  1.1      cgd 	(d)->bd_hlen = (d)->bd_slen; \
    377  1.1      cgd 	(d)->bd_sbuf = (d)->bd_fbuf; \
    378  1.1      cgd 	(d)->bd_slen = 0; \
    379  1.2      cgd 	(d)->bd_fbuf = 0;
    380  1.1      cgd /*
    381  1.1      cgd  *  bpfread - read next chunk of packets from buffers
    382  1.1      cgd  */
    383  1.1      cgd int
    384  1.1      cgd bpfread(dev, uio)
    385  1.1      cgd 	dev_t dev;
    386  1.1      cgd 	register struct uio *uio;
    387  1.1      cgd {
    388  1.1      cgd 	register struct bpf_d *d = &bpf_dtab[minor(dev)];
    389  1.1      cgd 	int error;
    390  1.1      cgd 	int s;
    391  1.1      cgd 
    392  1.1      cgd 	/*
    393  1.2      cgd 	 * Restrict application to use a buffer the same size as
    394  1.1      cgd 	 * as kernel buffers.
    395  1.1      cgd 	 */
    396  1.1      cgd 	if (uio->uio_resid != d->bd_bufsize)
    397  1.1      cgd 		return (EINVAL);
    398  1.1      cgd 
    399  1.1      cgd 	s = splimp();
    400  1.1      cgd 	/*
    401  1.2      cgd 	 * If the hold buffer is empty, then do a timed sleep, which
    402  1.2      cgd 	 * ends when the timeout expires or when enough packets
    403  1.2      cgd 	 * have arrived to fill the store buffer.
    404  1.1      cgd 	 */
    405  1.1      cgd 	while (d->bd_hbuf == 0) {
    406  1.1      cgd 		if (d->bd_immediate && d->bd_slen != 0) {
    407  1.1      cgd 			/*
    408  1.1      cgd 			 * A packet(s) either arrived since the previous
    409  1.1      cgd 			 * read or arrived while we were asleep.
    410  1.1      cgd 			 * Rotate the buffers and return what's here.
    411  1.1      cgd 			 */
    412  1.1      cgd 			ROTATE_BUFFERS(d);
    413  1.1      cgd 			break;
    414  1.1      cgd 		}
    415  1.2      cgd 		error = BPF_SLEEP((caddr_t)d, PRINET|PCATCH, "bpf",
    416  1.2      cgd 				  d->bd_rtout);
    417  1.1      cgd 		if (error == EINTR || error == ERESTART) {
    418  1.1      cgd 			splx(s);
    419  1.1      cgd 			return (error);
    420  1.1      cgd 		}
    421  1.1      cgd 		if (error == EWOULDBLOCK) {
    422  1.1      cgd 			/*
    423  1.1      cgd 			 * On a timeout, return what's in the buffer,
    424  1.1      cgd 			 * which may be nothing.  If there is something
    425  1.1      cgd 			 * in the store buffer, we can rotate the buffers.
    426  1.1      cgd 			 */
    427  1.1      cgd 			if (d->bd_hbuf)
    428  1.1      cgd 				/*
    429  1.2      cgd 				 * We filled up the buffer in between
    430  1.1      cgd 				 * getting the timeout and arriving
    431  1.1      cgd 				 * here, so we don't need to rotate.
    432  1.1      cgd 				 */
    433  1.1      cgd 				break;
    434  1.1      cgd 
    435  1.1      cgd 			if (d->bd_slen == 0) {
    436  1.1      cgd 				splx(s);
    437  1.1      cgd 				return (0);
    438  1.1      cgd 			}
    439  1.1      cgd 			ROTATE_BUFFERS(d);
    440  1.1      cgd 			break;
    441  1.1      cgd 		}
    442  1.1      cgd 	}
    443  1.1      cgd 	/*
    444  1.1      cgd 	 * At this point, we know we have something in the hold slot.
    445  1.1      cgd 	 */
    446  1.1      cgd 	splx(s);
    447  1.2      cgd 
    448  1.2      cgd 	/*
    449  1.1      cgd 	 * Move data from hold buffer into user space.
    450  1.1      cgd 	 * We know the entire buffer is transferred since
    451  1.1      cgd 	 * we checked above that the read buffer is bpf_bufsize bytes.
    452  1.1      cgd 	 */
    453  1.2      cgd 	error = UIOMOVE(d->bd_hbuf, d->bd_hlen, UIO_READ, uio);
    454  1.1      cgd 
    455  1.1      cgd 	s = splimp();
    456  1.1      cgd 	d->bd_fbuf = d->bd_hbuf;
    457  1.1      cgd 	d->bd_hbuf = 0;
    458  1.2      cgd 	d->bd_hlen = 0;
    459  1.1      cgd 	splx(s);
    460  1.2      cgd 
    461  1.1      cgd 	return (error);
    462  1.1      cgd }
    463  1.1      cgd 
    464  1.1      cgd 
    465  1.1      cgd /*
    466  1.2      cgd  * If there are processes sleeping on this descriptor, wake them up.
    467  1.1      cgd  */
    468  1.1      cgd static inline void
    469  1.1      cgd bpf_wakeup(d)
    470  1.1      cgd 	register struct bpf_d *d;
    471  1.1      cgd {
    472  1.1      cgd 	wakeup((caddr_t)d);
    473  1.7      cgd #if (BSD > 199103) || defined(__NetBSD__)
    474  1.2      cgd 	selwakeup(&d->bd_sel);
    475  1.2      cgd 	/* XXX */
    476  1.2      cgd 	d->bd_sel.si_pid = 0;
    477  1.2      cgd #else
    478  1.1      cgd 	if (d->bd_selproc) {
    479  1.1      cgd 		selwakeup(d->bd_selproc, (int)d->bd_selcoll);
    480  1.1      cgd 		d->bd_selcoll = 0;
    481  1.1      cgd 		d->bd_selproc = 0;
    482  1.1      cgd 	}
    483  1.2      cgd #endif
    484  1.1      cgd }
    485  1.1      cgd 
    486  1.1      cgd int
    487  1.1      cgd bpfwrite(dev, uio)
    488  1.1      cgd 	dev_t dev;
    489  1.1      cgd 	struct uio *uio;
    490  1.1      cgd {
    491  1.1      cgd 	register struct bpf_d *d = &bpf_dtab[minor(dev)];
    492  1.1      cgd 	struct ifnet *ifp;
    493  1.1      cgd 	struct mbuf *m;
    494  1.1      cgd 	int error, s;
    495  1.1      cgd 	static struct sockaddr dst;
    496  1.1      cgd 
    497  1.1      cgd 	if (d->bd_bif == 0)
    498  1.1      cgd 		return (ENXIO);
    499  1.1      cgd 
    500  1.1      cgd 	ifp = d->bd_bif->bif_ifp;
    501  1.1      cgd 
    502  1.1      cgd 	if (uio->uio_resid == 0)
    503  1.1      cgd 		return (0);
    504  1.1      cgd 	if (uio->uio_resid > ifp->if_mtu)
    505  1.1      cgd 		return (EMSGSIZE);
    506  1.1      cgd 
    507  1.1      cgd 	error = bpf_movein(uio, (int)d->bd_bif->bif_dlt, &m, &dst);
    508  1.1      cgd 	if (error)
    509  1.1      cgd 		return (error);
    510  1.1      cgd 
    511  1.1      cgd 	s = splnet();
    512  1.2      cgd #if BSD >= 199103
    513  1.2      cgd 	error = (*ifp->if_output)(ifp, m, &dst, (struct rtentry *)0);
    514  1.2      cgd #else
    515  1.1      cgd 	error = (*ifp->if_output)(ifp, m, &dst);
    516  1.2      cgd #endif
    517  1.1      cgd 	splx(s);
    518  1.1      cgd 	/*
    519  1.2      cgd 	 * The driver frees the mbuf.
    520  1.1      cgd 	 */
    521  1.1      cgd 	return (error);
    522  1.1      cgd }
    523  1.1      cgd 
    524  1.1      cgd /*
    525  1.2      cgd  * Reset a descriptor by flushing its packet buffer and clearing the
    526  1.2      cgd  * receive and drop counts.  Should be called at splimp.
    527  1.1      cgd  */
    528  1.1      cgd static void
    529  1.1      cgd reset_d(d)
    530  1.1      cgd 	struct bpf_d *d;
    531  1.1      cgd {
    532  1.1      cgd 	if (d->bd_hbuf) {
    533  1.1      cgd 		/* Free the hold buffer. */
    534  1.1      cgd 		d->bd_fbuf = d->bd_hbuf;
    535  1.1      cgd 		d->bd_hbuf = 0;
    536  1.1      cgd 	}
    537  1.1      cgd 	d->bd_slen = 0;
    538  1.2      cgd 	d->bd_hlen = 0;
    539  1.1      cgd 	d->bd_rcount = 0;
    540  1.1      cgd 	d->bd_dcount = 0;
    541  1.1      cgd }
    542  1.1      cgd 
    543  1.1      cgd /*
    544  1.1      cgd  *  FIONREAD		Check for read packet available.
    545  1.1      cgd  *  SIOCGIFADDR		Get interface address - convenient hook to driver.
    546  1.1      cgd  *  BIOCGBLEN		Get buffer len [for read()].
    547  1.1      cgd  *  BIOCSETF		Set ethernet read filter.
    548  1.1      cgd  *  BIOCFLUSH		Flush read packet buffer.
    549  1.1      cgd  *  BIOCPROMISC		Put interface into promiscuous mode.
    550  1.1      cgd  *  BIOCGDLT		Get link layer type.
    551  1.1      cgd  *  BIOCGETIF		Get interface name.
    552  1.1      cgd  *  BIOCSETIF		Set interface.
    553  1.1      cgd  *  BIOCSRTIMEOUT	Set read timeout.
    554  1.1      cgd  *  BIOCGRTIMEOUT	Get read timeout.
    555  1.1      cgd  *  BIOCGSTATS		Get packet stats.
    556  1.1      cgd  *  BIOCIMMEDIATE	Set immediate mode.
    557  1.2      cgd  *  BIOCVERSION		Get filter language version.
    558  1.1      cgd  */
    559  1.1      cgd /* ARGSUSED */
    560  1.1      cgd int
    561  1.1      cgd bpfioctl(dev, cmd, addr, flag)
    562  1.1      cgd 	dev_t dev;
    563  1.1      cgd 	int cmd;
    564  1.1      cgd 	caddr_t addr;
    565  1.1      cgd 	int flag;
    566  1.1      cgd {
    567  1.1      cgd 	register struct bpf_d *d = &bpf_dtab[minor(dev)];
    568  1.1      cgd 	int s, error = 0;
    569  1.1      cgd 
    570  1.1      cgd 	switch (cmd) {
    571  1.1      cgd 
    572  1.1      cgd 	default:
    573  1.1      cgd 		error = EINVAL;
    574  1.1      cgd 		break;
    575  1.1      cgd 
    576  1.1      cgd 	/*
    577  1.1      cgd 	 * Check for read packet available.
    578  1.1      cgd 	 */
    579  1.1      cgd 	case FIONREAD:
    580  1.1      cgd 		{
    581  1.1      cgd 			int n;
    582  1.2      cgd 
    583  1.1      cgd 			s = splimp();
    584  1.1      cgd 			n = d->bd_slen;
    585  1.2      cgd 			if (d->bd_hbuf)
    586  1.1      cgd 				n += d->bd_hlen;
    587  1.1      cgd 			splx(s);
    588  1.1      cgd 
    589  1.1      cgd 			*(int *)addr = n;
    590  1.1      cgd 			break;
    591  1.1      cgd 		}
    592  1.1      cgd 
    593  1.1      cgd 	case SIOCGIFADDR:
    594  1.1      cgd 		{
    595  1.1      cgd 			struct ifnet *ifp;
    596  1.1      cgd 
    597  1.1      cgd 			if (d->bd_bif == 0)
    598  1.1      cgd 				error = EINVAL;
    599  1.1      cgd 			else {
    600  1.1      cgd 				ifp = d->bd_bif->bif_ifp;
    601  1.2      cgd 				error = (*ifp->if_ioctl)(ifp, cmd, addr);
    602  1.1      cgd 			}
    603  1.1      cgd 			break;
    604  1.1      cgd 		}
    605  1.1      cgd 
    606  1.1      cgd 	/*
    607  1.2      cgd 	 * Get buffer len [for read()].
    608  1.1      cgd 	 */
    609  1.2      cgd 	case BIOCGBLEN:
    610  1.2      cgd 		*(u_int *)addr = d->bd_bufsize;
    611  1.1      cgd 		break;
    612  1.2      cgd 
    613  1.1      cgd 	/*
    614  1.2      cgd 	 * Set buffer length.
    615  1.1      cgd 	 */
    616  1.2      cgd 	case BIOCSBLEN:
    617  1.2      cgd #if BSD < 199103
    618  1.2      cgd 		error = EINVAL;
    619  1.2      cgd #else
    620  1.2      cgd 		if (d->bd_bif != 0)
    621  1.2      cgd 			error = EINVAL;
    622  1.2      cgd 		else {
    623  1.2      cgd 			register u_int size = *(u_int *)addr;
    624  1.2      cgd 
    625  1.2      cgd 			if (size > BPF_MAXBUFSIZE)
    626  1.2      cgd 				*(u_int *)addr = size = BPF_MAXBUFSIZE;
    627  1.2      cgd 			else if (size < BPF_MINBUFSIZE)
    628  1.2      cgd 				*(u_int *)addr = size = BPF_MINBUFSIZE;
    629  1.2      cgd 			d->bd_bufsize = size;
    630  1.2      cgd 		}
    631  1.2      cgd #endif
    632  1.1      cgd 		break;
    633  1.1      cgd 
    634  1.1      cgd 	/*
    635  1.2      cgd 	 * Set link layer read filter.
    636  1.1      cgd 	 */
    637  1.2      cgd 	case BIOCSETF:
    638  1.1      cgd 		error = bpf_setf(d, (struct bpf_program *)addr);
    639  1.1      cgd 		break;
    640  1.1      cgd 
    641  1.1      cgd 	/*
    642  1.1      cgd 	 * Flush read packet buffer.
    643  1.1      cgd 	 */
    644  1.1      cgd 	case BIOCFLUSH:
    645  1.1      cgd 		s = splimp();
    646  1.1      cgd 		reset_d(d);
    647  1.1      cgd 		splx(s);
    648  1.1      cgd 		break;
    649  1.1      cgd 
    650  1.1      cgd 	/*
    651  1.1      cgd 	 * Put interface into promiscuous mode.
    652  1.1      cgd 	 */
    653  1.1      cgd 	case BIOCPROMISC:
    654  1.1      cgd 		if (d->bd_bif == 0) {
    655  1.1      cgd 			/*
    656  1.1      cgd 			 * No interface attached yet.
    657  1.1      cgd 			 */
    658  1.1      cgd 			error = EINVAL;
    659  1.1      cgd 			break;
    660  1.1      cgd 		}
    661  1.1      cgd 		s = splimp();
    662  1.1      cgd 		if (d->bd_promisc == 0) {
    663  1.1      cgd 			error = ifpromisc(d->bd_bif->bif_ifp, 1);
    664  1.2      cgd 			if (error == 0)
    665  1.2      cgd 				d->bd_promisc = 1;
    666  1.1      cgd 		}
    667  1.1      cgd 		splx(s);
    668  1.1      cgd 		break;
    669  1.1      cgd 
    670  1.1      cgd 	/*
    671  1.1      cgd 	 * Get device parameters.
    672  1.1      cgd 	 */
    673  1.1      cgd 	case BIOCGDLT:
    674  1.1      cgd 		if (d->bd_bif == 0)
    675  1.1      cgd 			error = EINVAL;
    676  1.1      cgd 		else
    677  1.1      cgd 			*(u_int *)addr = d->bd_bif->bif_dlt;
    678  1.1      cgd 		break;
    679  1.1      cgd 
    680  1.1      cgd 	/*
    681  1.1      cgd 	 * Set interface name.
    682  1.1      cgd 	 */
    683  1.1      cgd 	case BIOCGETIF:
    684  1.1      cgd 		if (d->bd_bif == 0)
    685  1.1      cgd 			error = EINVAL;
    686  1.1      cgd 		else
    687  1.1      cgd 			bpf_ifname(d->bd_bif->bif_ifp, (struct ifreq *)addr);
    688  1.1      cgd 		break;
    689  1.1      cgd 
    690  1.1      cgd 	/*
    691  1.1      cgd 	 * Set interface.
    692  1.1      cgd 	 */
    693  1.1      cgd 	case BIOCSETIF:
    694  1.1      cgd 		error = bpf_setif(d, (struct ifreq *)addr);
    695  1.1      cgd 		break;
    696  1.1      cgd 
    697  1.1      cgd 	/*
    698  1.1      cgd 	 * Set read timeout.
    699  1.1      cgd 	 */
    700  1.2      cgd 	case BIOCSRTIMEOUT:
    701  1.1      cgd 		{
    702  1.1      cgd 			struct timeval *tv = (struct timeval *)addr;
    703  1.1      cgd 			u_long msec;
    704  1.1      cgd 
    705  1.1      cgd 			/* Compute number of milliseconds. */
    706  1.1      cgd 			msec = tv->tv_sec * 1000 + tv->tv_usec / 1000;
    707  1.1      cgd 			/* Scale milliseconds to ticks.  Assume hard
    708  1.1      cgd 			   clock has millisecond or greater resolution
    709  1.1      cgd 			   (i.e. tick >= 1000).  For 10ms hardclock,
    710  1.1      cgd 			   tick/1000 = 10, so rtout<-msec/10. */
    711  1.1      cgd 			d->bd_rtout = msec / (tick / 1000);
    712  1.1      cgd 			break;
    713  1.1      cgd 		}
    714  1.1      cgd 
    715  1.1      cgd 	/*
    716  1.1      cgd 	 * Get read timeout.
    717  1.1      cgd 	 */
    718  1.2      cgd 	case BIOCGRTIMEOUT:
    719  1.1      cgd 		{
    720  1.1      cgd 			struct timeval *tv = (struct timeval *)addr;
    721  1.1      cgd 			u_long msec = d->bd_rtout;
    722  1.1      cgd 
    723  1.1      cgd 			msec *= tick / 1000;
    724  1.1      cgd 			tv->tv_sec = msec / 1000;
    725  1.1      cgd 			tv->tv_usec = msec % 1000;
    726  1.1      cgd 			break;
    727  1.1      cgd 		}
    728  1.1      cgd 
    729  1.1      cgd 	/*
    730  1.1      cgd 	 * Get packet stats.
    731  1.1      cgd 	 */
    732  1.1      cgd 	case BIOCGSTATS:
    733  1.1      cgd 		{
    734  1.1      cgd 			struct bpf_stat *bs = (struct bpf_stat *)addr;
    735  1.1      cgd 
    736  1.1      cgd 			bs->bs_recv = d->bd_rcount;
    737  1.1      cgd 			bs->bs_drop = d->bd_dcount;
    738  1.1      cgd 			break;
    739  1.1      cgd 		}
    740  1.1      cgd 
    741  1.1      cgd 	/*
    742  1.1      cgd 	 * Set immediate mode.
    743  1.1      cgd 	 */
    744  1.1      cgd 	case BIOCIMMEDIATE:
    745  1.1      cgd 		d->bd_immediate = *(u_int *)addr;
    746  1.1      cgd 		break;
    747  1.2      cgd 
    748  1.2      cgd 	case BIOCVERSION:
    749  1.2      cgd 		{
    750  1.2      cgd 			struct bpf_version *bv = (struct bpf_version *)addr;
    751  1.2      cgd 
    752  1.2      cgd 			bv->bv_major = BPF_MAJOR_VERSION;
    753  1.2      cgd 			bv->bv_minor = BPF_MINOR_VERSION;
    754  1.2      cgd 			break;
    755  1.2      cgd 		}
    756  1.1      cgd 	}
    757  1.1      cgd 	return (error);
    758  1.1      cgd }
    759  1.1      cgd 
    760  1.2      cgd /*
    761  1.2      cgd  * Set d's packet filter program to fp.  If this file already has a filter,
    762  1.1      cgd  * free it and replace it.  Returns EINVAL for bogus requests.
    763  1.1      cgd  */
    764  1.1      cgd int
    765  1.1      cgd bpf_setf(d, fp)
    766  1.1      cgd 	struct bpf_d *d;
    767  1.1      cgd 	struct bpf_program *fp;
    768  1.1      cgd {
    769  1.1      cgd 	struct bpf_insn *fcode, *old;
    770  1.1      cgd 	u_int flen, size;
    771  1.1      cgd 	int s;
    772  1.1      cgd 
    773  1.1      cgd 	old = d->bd_filter;
    774  1.1      cgd 	if (fp->bf_insns == 0) {
    775  1.1      cgd 		if (fp->bf_len != 0)
    776  1.1      cgd 			return (EINVAL);
    777  1.1      cgd 		s = splimp();
    778  1.1      cgd 		d->bd_filter = 0;
    779  1.1      cgd 		reset_d(d);
    780  1.1      cgd 		splx(s);
    781  1.1      cgd 		if (old != 0)
    782  1.1      cgd 			free((caddr_t)old, M_DEVBUF);
    783  1.1      cgd 		return (0);
    784  1.1      cgd 	}
    785  1.1      cgd 	flen = fp->bf_len;
    786  1.1      cgd 	if (flen > BPF_MAXINSNS)
    787  1.1      cgd 		return (EINVAL);
    788  1.1      cgd 
    789  1.1      cgd 	size = flen * sizeof(*fp->bf_insns);
    790  1.1      cgd 	fcode = (struct bpf_insn *)malloc(size, M_DEVBUF, M_WAITOK);
    791  1.2      cgd 	if (copyin((caddr_t)fp->bf_insns, (caddr_t)fcode, size) == 0 &&
    792  1.2      cgd 	    bpf_validate(fcode, (int)flen)) {
    793  1.1      cgd 		s = splimp();
    794  1.1      cgd 		d->bd_filter = fcode;
    795  1.1      cgd 		reset_d(d);
    796  1.1      cgd 		splx(s);
    797  1.1      cgd 		if (old != 0)
    798  1.1      cgd 			free((caddr_t)old, M_DEVBUF);
    799  1.1      cgd 
    800  1.1      cgd 		return (0);
    801  1.1      cgd 	}
    802  1.1      cgd 	free((caddr_t)fcode, M_DEVBUF);
    803  1.1      cgd 	return (EINVAL);
    804  1.1      cgd }
    805  1.1      cgd 
    806  1.1      cgd /*
    807  1.2      cgd  * Detach a file from its current interface (if attached at all) and attach
    808  1.2      cgd  * to the interface indicated by the name stored in ifr.
    809  1.2      cgd  * Return an errno or 0.
    810  1.1      cgd  */
    811  1.1      cgd static int
    812  1.1      cgd bpf_setif(d, ifr)
    813  1.1      cgd 	struct bpf_d *d;
    814  1.1      cgd 	struct ifreq *ifr;
    815  1.1      cgd {
    816  1.1      cgd 	struct bpf_if *bp;
    817  1.1      cgd 	char *cp;
    818  1.2      cgd 	int unit, s, error;
    819  1.1      cgd 
    820  1.1      cgd 	/*
    821  1.1      cgd 	 * Separate string into name part and unit number.  Put a null
    822  1.2      cgd 	 * byte at the end of the name part, and compute the number.
    823  1.1      cgd 	 * If the a unit number is unspecified, the default is 0,
    824  1.1      cgd 	 * as initialized above.  XXX This should be common code.
    825  1.1      cgd 	 */
    826  1.1      cgd 	unit = 0;
    827  1.1      cgd 	cp = ifr->ifr_name;
    828  1.1      cgd 	cp[sizeof(ifr->ifr_name) - 1] = '\0';
    829  1.1      cgd 	while (*cp++) {
    830  1.1      cgd 		if (*cp >= '0' && *cp <= '9') {
    831  1.1      cgd 			unit = *cp - '0';
    832  1.1      cgd 			*cp++ = '\0';
    833  1.1      cgd 			while (*cp)
    834  1.1      cgd 				unit = 10 * unit + *cp++ - '0';
    835  1.1      cgd 			break;
    836  1.1      cgd 		}
    837  1.1      cgd 	}
    838  1.1      cgd 	/*
    839  1.1      cgd 	 * Look through attached interfaces for the named one.
    840  1.1      cgd 	 */
    841  1.1      cgd 	for (bp = bpf_iflist; bp != 0; bp = bp->bif_next) {
    842  1.1      cgd 		struct ifnet *ifp = bp->bif_ifp;
    843  1.1      cgd 
    844  1.2      cgd 		if (ifp == 0 || unit != ifp->if_unit
    845  1.1      cgd 		    || strcmp(ifp->if_name, ifr->ifr_name) != 0)
    846  1.1      cgd 			continue;
    847  1.1      cgd 		/*
    848  1.2      cgd 		 * We found the requested interface.
    849  1.1      cgd 		 * If it's not up, return an error.
    850  1.2      cgd 		 * Allocate the packet buffers if we need to.
    851  1.2      cgd 		 * If we're already attached to requested interface,
    852  1.2      cgd 		 * just flush the buffer.
    853  1.1      cgd 		 */
    854  1.1      cgd 		if ((ifp->if_flags & IFF_UP) == 0)
    855  1.1      cgd 			return (ENETDOWN);
    856  1.2      cgd 
    857  1.2      cgd 		if (d->bd_sbuf == 0) {
    858  1.2      cgd 			error = bpf_allocbufs(d);
    859  1.2      cgd 			if (error != 0)
    860  1.2      cgd 				return (error);
    861  1.2      cgd 		}
    862  1.1      cgd 		s = splimp();
    863  1.1      cgd 		if (bp != d->bd_bif) {
    864  1.1      cgd 			if (d->bd_bif)
    865  1.2      cgd 				/*
    866  1.1      cgd 				 * Detach if attached to something else.
    867  1.1      cgd 				 */
    868  1.1      cgd 				bpf_detachd(d);
    869  1.1      cgd 
    870  1.1      cgd 			bpf_attachd(d, bp);
    871  1.1      cgd 		}
    872  1.1      cgd 		reset_d(d);
    873  1.1      cgd 		splx(s);
    874  1.1      cgd 		return (0);
    875  1.1      cgd 	}
    876  1.1      cgd 	/* Not found. */
    877  1.1      cgd 	return (ENXIO);
    878  1.1      cgd }
    879  1.1      cgd 
    880  1.1      cgd /*
    881  1.2      cgd  * Convert an interface name plus unit number of an ifp to a single
    882  1.2      cgd  * name which is returned in the ifr.
    883  1.1      cgd  */
    884  1.1      cgd static void
    885  1.1      cgd bpf_ifname(ifp, ifr)
    886  1.1      cgd 	struct ifnet *ifp;
    887  1.1      cgd 	struct ifreq *ifr;
    888  1.1      cgd {
    889  1.1      cgd 	char *s = ifp->if_name;
    890  1.1      cgd 	char *d = ifr->ifr_name;
    891  1.1      cgd 
    892  1.1      cgd 	while (*d++ = *s++)
    893  1.2      cgd 		continue;
    894  1.1      cgd 	/* XXX Assume that unit number is less than 10. */
    895  1.1      cgd 	*d++ = ifp->if_unit + '0';
    896  1.1      cgd 	*d = '\0';
    897  1.1      cgd }
    898  1.1      cgd 
    899  1.1      cgd /*
    900  1.2      cgd  * The new select interface passes down the proc pointer; the old select
    901  1.2      cgd  * stubs had to grab it out of the user struct.  This glue allows either case.
    902  1.2      cgd  */
    903  1.2      cgd #if BSD >= 199103
    904  1.2      cgd #define bpf_select bpfselect
    905  1.2      cgd #else
    906  1.2      cgd int
    907  1.2      cgd bpfselect(dev, rw)
    908  1.2      cgd 	register dev_t dev;
    909  1.2      cgd 	int rw;
    910  1.2      cgd {
    911  1.2      cgd 	return (bpf_select(dev, rw, u.u_procp));
    912  1.2      cgd }
    913  1.2      cgd #endif
    914  1.2      cgd 
    915  1.2      cgd /*
    916  1.1      cgd  * Support for select() system call
    917  1.1      cgd  * Inspired by the code in tty.c for the same purpose.
    918  1.1      cgd  *
    919  1.2      cgd  * Return true iff the specific operation will not block indefinitely.
    920  1.2      cgd  * Otherwise, return false but make a note that a selwakeup() must be done.
    921  1.1      cgd  */
    922  1.1      cgd int
    923  1.2      cgd bpf_select(dev, rw, p)
    924  1.1      cgd 	register dev_t dev;
    925  1.1      cgd 	int rw;
    926  1.1      cgd 	struct proc *p;
    927  1.1      cgd {
    928  1.1      cgd 	register struct bpf_d *d;
    929  1.1      cgd 	register int s;
    930  1.2      cgd 
    931  1.1      cgd 	if (rw != FREAD)
    932  1.1      cgd 		return (0);
    933  1.1      cgd 	/*
    934  1.1      cgd 	 * An imitation of the FIONREAD ioctl code.
    935  1.1      cgd 	 */
    936  1.1      cgd 	d = &bpf_dtab[minor(dev)];
    937  1.2      cgd 
    938  1.1      cgd 	s = splimp();
    939  1.1      cgd 	if (d->bd_hlen != 0 || (d->bd_immediate && d->bd_slen != 0)) {
    940  1.1      cgd 		/*
    941  1.1      cgd 		 * There is data waiting.
    942  1.1      cgd 		 */
    943  1.1      cgd 		splx(s);
    944  1.1      cgd 		return (1);
    945  1.1      cgd 	}
    946  1.7      cgd #if defined(__NetBSD__)
    947  1.2      cgd 	selrecord(p, &d->bd_sel);
    948  1.2      cgd #else
    949  1.1      cgd 	/*
    950  1.1      cgd 	 * No data ready.  If there's already a select() waiting on this
    951  1.2      cgd 	 * minor device then this is a collision.  This shouldn't happen
    952  1.1      cgd 	 * because minors really should not be shared, but if a process
    953  1.1      cgd 	 * forks while one of these is open, it is possible that both
    954  1.1      cgd 	 * processes could select on the same descriptor.
    955  1.1      cgd 	 */
    956  1.1      cgd 	if (d->bd_selproc && d->bd_selproc->p_wchan == (caddr_t)&selwait)
    957  1.1      cgd 		d->bd_selcoll = 1;
    958  1.1      cgd 	else
    959  1.1      cgd 		d->bd_selproc = p;
    960  1.3  deraadt #endif
    961  1.2      cgd 	splx(s);
    962  1.1      cgd 	return (0);
    963  1.1      cgd }
    964  1.1      cgd 
    965  1.1      cgd /*
    966  1.2      cgd  * Incoming linkage from device drivers.  Process the packet pkt, of length
    967  1.2      cgd  * pktlen, which is stored in a contiguous buffer.  The packet is parsed
    968  1.2      cgd  * by each process' filter, and if accepted, stashed into the corresponding
    969  1.2      cgd  * buffer.
    970  1.1      cgd  */
    971  1.1      cgd void
    972  1.1      cgd bpf_tap(arg, pkt, pktlen)
    973  1.1      cgd 	caddr_t arg;
    974  1.1      cgd 	register u_char *pkt;
    975  1.1      cgd 	register u_int pktlen;
    976  1.1      cgd {
    977  1.1      cgd 	struct bpf_if *bp;
    978  1.1      cgd 	register struct bpf_d *d;
    979  1.1      cgd 	register u_int slen;
    980  1.1      cgd 	/*
    981  1.1      cgd 	 * Note that the ipl does not have to be raised at this point.
    982  1.1      cgd 	 * The only problem that could arise here is that if two different
    983  1.1      cgd 	 * interfaces shared any data.  This is not the case.
    984  1.1      cgd 	 */
    985  1.1      cgd 	bp = (struct bpf_if *)arg;
    986  1.1      cgd 	for (d = bp->bif_dlist; d != 0; d = d->bd_next) {
    987  1.1      cgd 		++d->bd_rcount;
    988  1.1      cgd 		slen = bpf_filter(d->bd_filter, pkt, pktlen, pktlen);
    989  1.1      cgd 		if (slen != 0)
    990  1.1      cgd 			catchpacket(d, pkt, pktlen, slen, bcopy);
    991  1.1      cgd 	}
    992  1.1      cgd }
    993  1.1      cgd 
    994  1.1      cgd /*
    995  1.1      cgd  * Copy data from an mbuf chain into a buffer.  This code is derived
    996  1.1      cgd  * from m_copydata in sys/uipc_mbuf.c.
    997  1.1      cgd  */
    998  1.1      cgd static void
    999  1.1      cgd bpf_mcopy(src, dst, len)
   1000  1.1      cgd 	u_char *src;
   1001  1.1      cgd 	u_char *dst;
   1002  1.1      cgd 	register int len;
   1003  1.1      cgd {
   1004  1.1      cgd 	register struct mbuf *m = (struct mbuf *)src;
   1005  1.1      cgd 	register unsigned count;
   1006  1.1      cgd 
   1007  1.1      cgd 	while (len > 0) {
   1008  1.1      cgd 		if (m == 0)
   1009  1.1      cgd 			panic("bpf_mcopy");
   1010  1.1      cgd 		count = MIN(m->m_len, len);
   1011  1.1      cgd 		bcopy(mtod(m, caddr_t), (caddr_t)dst, count);
   1012  1.1      cgd 		m = m->m_next;
   1013  1.1      cgd 		dst += count;
   1014  1.1      cgd 		len -= count;
   1015  1.1      cgd 	}
   1016  1.1      cgd }
   1017  1.1      cgd 
   1018  1.1      cgd /*
   1019  1.2      cgd  * Incoming linkage from device drivers, when packet is in an mbuf chain.
   1020  1.1      cgd  */
   1021  1.1      cgd void
   1022  1.1      cgd bpf_mtap(arg, m)
   1023  1.1      cgd 	caddr_t arg;
   1024  1.1      cgd 	struct mbuf *m;
   1025  1.1      cgd {
   1026  1.1      cgd 	struct bpf_if *bp = (struct bpf_if *)arg;
   1027  1.1      cgd 	struct bpf_d *d;
   1028  1.1      cgd 	u_int pktlen, slen;
   1029  1.1      cgd 	struct mbuf *m0;
   1030  1.1      cgd 
   1031  1.1      cgd 	pktlen = 0;
   1032  1.2      cgd 	for (m0 = m; m0 != 0; m0 = m0->m_next)
   1033  1.1      cgd 		pktlen += m0->m_len;
   1034  1.1      cgd 
   1035  1.1      cgd 	for (d = bp->bif_dlist; d != 0; d = d->bd_next) {
   1036  1.1      cgd 		++d->bd_rcount;
   1037  1.1      cgd 		slen = bpf_filter(d->bd_filter, (u_char *)m, pktlen, 0);
   1038  1.1      cgd 		if (slen != 0)
   1039  1.1      cgd 			catchpacket(d, (u_char *)m, pktlen, slen, bpf_mcopy);
   1040  1.1      cgd 	}
   1041  1.1      cgd }
   1042  1.1      cgd 
   1043  1.1      cgd /*
   1044  1.1      cgd  * Move the packet data from interface memory (pkt) into the
   1045  1.1      cgd  * store buffer.  Return 1 if it's time to wakeup a listener (buffer full),
   1046  1.2      cgd  * otherwise 0.  "copy" is the routine called to do the actual data
   1047  1.2      cgd  * transfer.  bcopy is passed in to copy contiguous chunks, while
   1048  1.2      cgd  * bpf_mcopy is passed in to copy mbuf chains.  In the latter case,
   1049  1.2      cgd  * pkt is really an mbuf.
   1050  1.1      cgd  */
   1051  1.1      cgd static void
   1052  1.1      cgd catchpacket(d, pkt, pktlen, snaplen, cpfn)
   1053  1.1      cgd 	register struct bpf_d *d;
   1054  1.1      cgd 	register u_char *pkt;
   1055  1.1      cgd 	register u_int pktlen, snaplen;
   1056  1.1      cgd 	register void (*cpfn)();
   1057  1.1      cgd {
   1058  1.1      cgd 	register struct bpf_hdr *hp;
   1059  1.1      cgd 	register int totlen, curlen;
   1060  1.1      cgd 	register int hdrlen = d->bd_bif->bif_hdrlen;
   1061  1.1      cgd 	/*
   1062  1.1      cgd 	 * Figure out how many bytes to move.  If the packet is
   1063  1.1      cgd 	 * greater or equal to the snapshot length, transfer that
   1064  1.1      cgd 	 * much.  Otherwise, transfer the whole packet (unless
   1065  1.1      cgd 	 * we hit the buffer size limit).
   1066  1.1      cgd 	 */
   1067  1.1      cgd 	totlen = hdrlen + MIN(snaplen, pktlen);
   1068  1.1      cgd 	if (totlen > d->bd_bufsize)
   1069  1.1      cgd 		totlen = d->bd_bufsize;
   1070  1.1      cgd 
   1071  1.1      cgd 	/*
   1072  1.1      cgd 	 * Round up the end of the previous packet to the next longword.
   1073  1.1      cgd 	 */
   1074  1.1      cgd 	curlen = BPF_WORDALIGN(d->bd_slen);
   1075  1.1      cgd 	if (curlen + totlen > d->bd_bufsize) {
   1076  1.1      cgd 		/*
   1077  1.1      cgd 		 * This packet will overflow the storage buffer.
   1078  1.1      cgd 		 * Rotate the buffers if we can, then wakeup any
   1079  1.1      cgd 		 * pending reads.
   1080  1.1      cgd 		 */
   1081  1.1      cgd 		if (d->bd_fbuf == 0) {
   1082  1.2      cgd 			/*
   1083  1.2      cgd 			 * We haven't completed the previous read yet,
   1084  1.1      cgd 			 * so drop the packet.
   1085  1.1      cgd 			 */
   1086  1.1      cgd 			++d->bd_dcount;
   1087  1.1      cgd 			return;
   1088  1.1      cgd 		}
   1089  1.1      cgd 		ROTATE_BUFFERS(d);
   1090  1.1      cgd 		bpf_wakeup(d);
   1091  1.1      cgd 		curlen = 0;
   1092  1.1      cgd 	}
   1093  1.2      cgd 	else if (d->bd_immediate)
   1094  1.1      cgd 		/*
   1095  1.1      cgd 		 * Immediate mode is set.  A packet arrived so any
   1096  1.1      cgd 		 * reads should be woken up.
   1097  1.1      cgd 		 */
   1098  1.1      cgd 		bpf_wakeup(d);
   1099  1.1      cgd 
   1100  1.1      cgd 	/*
   1101  1.1      cgd 	 * Append the bpf header.
   1102  1.1      cgd 	 */
   1103  1.1      cgd 	hp = (struct bpf_hdr *)(d->bd_sbuf + curlen);
   1104  1.2      cgd #if BSD >= 199103
   1105  1.2      cgd 	microtime(&hp->bh_tstamp);
   1106  1.2      cgd #elif defined(sun)
   1107  1.1      cgd 	uniqtime(&hp->bh_tstamp);
   1108  1.1      cgd #else
   1109  1.1      cgd 	hp->bh_tstamp = time;
   1110  1.1      cgd #endif
   1111  1.1      cgd 	hp->bh_datalen = pktlen;
   1112  1.1      cgd 	hp->bh_hdrlen = hdrlen;
   1113  1.1      cgd 	/*
   1114  1.1      cgd 	 * Copy the packet data into the store buffer and update its length.
   1115  1.1      cgd 	 */
   1116  1.1      cgd 	(*cpfn)(pkt, (u_char *)hp + hdrlen, (hp->bh_caplen = totlen - hdrlen));
   1117  1.1      cgd 	d->bd_slen = curlen + totlen;
   1118  1.1      cgd }
   1119  1.1      cgd 
   1120  1.2      cgd /*
   1121  1.1      cgd  * Initialize all nonzero fields of a descriptor.
   1122  1.1      cgd  */
   1123  1.1      cgd static int
   1124  1.2      cgd bpf_allocbufs(d)
   1125  1.1      cgd 	register struct bpf_d *d;
   1126  1.1      cgd {
   1127  1.1      cgd 	d->bd_fbuf = (caddr_t)malloc(d->bd_bufsize, M_DEVBUF, M_WAITOK);
   1128  1.1      cgd 	if (d->bd_fbuf == 0)
   1129  1.1      cgd 		return (ENOBUFS);
   1130  1.1      cgd 
   1131  1.1      cgd 	d->bd_sbuf = (caddr_t)malloc(d->bd_bufsize, M_DEVBUF, M_WAITOK);
   1132  1.1      cgd 	if (d->bd_sbuf == 0) {
   1133  1.1      cgd 		free(d->bd_fbuf, M_DEVBUF);
   1134  1.1      cgd 		return (ENOBUFS);
   1135  1.1      cgd 	}
   1136  1.1      cgd 	d->bd_slen = 0;
   1137  1.1      cgd 	d->bd_hlen = 0;
   1138  1.1      cgd 	return (0);
   1139  1.1      cgd }
   1140  1.1      cgd 
   1141  1.1      cgd /*
   1142  1.2      cgd  * Free buffers currently in use by a descriptor.
   1143  1.2      cgd  * Called on close.
   1144  1.2      cgd  */
   1145  1.2      cgd static void
   1146  1.2      cgd bpf_freed(d)
   1147  1.2      cgd 	register struct bpf_d *d;
   1148  1.2      cgd {
   1149  1.2      cgd 	/*
   1150  1.2      cgd 	 * We don't need to lock out interrupts since this descriptor has
   1151  1.2      cgd 	 * been detached from its interface and it yet hasn't been marked
   1152  1.2      cgd 	 * free.
   1153  1.2      cgd 	 */
   1154  1.2      cgd 	if (d->bd_sbuf != 0) {
   1155  1.2      cgd 		free(d->bd_sbuf, M_DEVBUF);
   1156  1.2      cgd 		if (d->bd_hbuf != 0)
   1157  1.2      cgd 			free(d->bd_hbuf, M_DEVBUF);
   1158  1.2      cgd 		if (d->bd_fbuf != 0)
   1159  1.2      cgd 			free(d->bd_fbuf, M_DEVBUF);
   1160  1.2      cgd 	}
   1161  1.2      cgd 	if (d->bd_filter)
   1162  1.2      cgd 		free((caddr_t)d->bd_filter, M_DEVBUF);
   1163  1.2      cgd 
   1164  1.2      cgd 	D_MARKFREE(d);
   1165  1.2      cgd }
   1166  1.2      cgd 
   1167  1.2      cgd /*
   1168  1.2      cgd  * Attach an interface to bpf.  driverp is a pointer to a (struct bpf_if *)
   1169  1.2      cgd  * in the driver's softc; dlt is the link layer type; hdrlen is the fixed
   1170  1.2      cgd  * size of the link header (variable length headers not yet supported).
   1171  1.1      cgd  */
   1172  1.1      cgd void
   1173  1.1      cgd bpfattach(driverp, ifp, dlt, hdrlen)
   1174  1.1      cgd 	caddr_t *driverp;
   1175  1.1      cgd 	struct ifnet *ifp;
   1176  1.1      cgd 	u_int dlt, hdrlen;
   1177  1.1      cgd {
   1178  1.1      cgd 	struct bpf_if *bp;
   1179  1.1      cgd 	int i;
   1180  1.2      cgd #if BSD < 199103
   1181  1.2      cgd 	static struct bpf_if bpf_ifs[NBPFILTER];
   1182  1.2      cgd 	static int bpfifno;
   1183  1.1      cgd 
   1184  1.2      cgd 	bp = (bpfifno < NBPFILTER) ? &bpf_ifs[bpfifno++] : 0;
   1185  1.2      cgd #else
   1186  1.1      cgd 	bp = (struct bpf_if *)malloc(sizeof(*bp), M_DEVBUF, M_DONTWAIT);
   1187  1.2      cgd #endif
   1188  1.1      cgd 	if (bp == 0)
   1189  1.1      cgd 		panic("bpfattach");
   1190  1.1      cgd 
   1191  1.1      cgd 	bp->bif_dlist = 0;
   1192  1.1      cgd 	bp->bif_driverp = (struct bpf_if **)driverp;
   1193  1.1      cgd 	bp->bif_ifp = ifp;
   1194  1.1      cgd 	bp->bif_dlt = dlt;
   1195  1.1      cgd 
   1196  1.1      cgd 	bp->bif_next = bpf_iflist;
   1197  1.1      cgd 	bpf_iflist = bp;
   1198  1.1      cgd 
   1199  1.1      cgd 	*bp->bif_driverp = 0;
   1200  1.1      cgd 
   1201  1.1      cgd 	/*
   1202  1.1      cgd 	 * Compute the length of the bpf header.  This is not necessarily
   1203  1.2      cgd 	 * equal to SIZEOF_BPF_HDR because we want to insert spacing such
   1204  1.2      cgd 	 * that the network layer header begins on a longword boundary (for
   1205  1.1      cgd 	 * performance reasons and to alleviate alignment restrictions).
   1206  1.1      cgd 	 */
   1207  1.1      cgd 	bp->bif_hdrlen = BPF_WORDALIGN(hdrlen + SIZEOF_BPF_HDR) - hdrlen;
   1208  1.1      cgd 
   1209  1.1      cgd 	/*
   1210  1.1      cgd 	 * Mark all the descriptors free if this hasn't been done.
   1211  1.1      cgd 	 */
   1212  1.1      cgd 	if (!D_ISFREE(&bpf_dtab[0]))
   1213  1.1      cgd 		for (i = 0; i < NBPFILTER; ++i)
   1214  1.1      cgd 			D_MARKFREE(&bpf_dtab[i]);
   1215  1.1      cgd 
   1216  1.1      cgd 	printf("bpf: %s%d attached\n", ifp->if_name, ifp->if_unit);
   1217  1.1      cgd }
   1218  1.1      cgd 
   1219  1.2      cgd #if BSD >= 199103
   1220  1.1      cgd /* XXX This routine belongs in net/if.c. */
   1221  1.1      cgd /*
   1222  1.2      cgd  * Set/clear promiscuous mode on interface ifp based on the truth value
   1223  1.1      cgd  * of pswitch.  The calls are reference counted so that only the first
   1224  1.2      cgd  * "on" request actually has an effect, as does the final "off" request.
   1225  1.2      cgd  * Results are undefined if the "off" and "on" requests are not matched.
   1226  1.1      cgd  */
   1227  1.1      cgd int
   1228  1.1      cgd ifpromisc(ifp, pswitch)
   1229  1.1      cgd 	struct ifnet *ifp;
   1230  1.1      cgd 	int pswitch;
   1231  1.1      cgd {
   1232  1.1      cgd 	struct ifreq ifr;
   1233  1.2      cgd 	/*
   1234  1.1      cgd 	 * If the device is not configured up, we cannot put it in
   1235  1.1      cgd 	 * promiscuous mode.
   1236  1.1      cgd 	 */
   1237  1.1      cgd 	if ((ifp->if_flags & IFF_UP) == 0)
   1238  1.1      cgd 		return (ENETDOWN);
   1239  1.1      cgd 
   1240  1.1      cgd 	if (pswitch) {
   1241  1.1      cgd 		if (ifp->if_pcount++ != 0)
   1242  1.1      cgd 			return (0);
   1243  1.1      cgd 		ifp->if_flags |= IFF_PROMISC;
   1244  1.1      cgd 	} else {
   1245  1.1      cgd 		if (--ifp->if_pcount > 0)
   1246  1.1      cgd 			return (0);
   1247  1.1      cgd 		ifp->if_flags &= ~IFF_PROMISC;
   1248  1.1      cgd 	}
   1249  1.1      cgd 	ifr.ifr_flags = ifp->if_flags;
   1250  1.1      cgd 	return ((*ifp->if_ioctl)(ifp, SIOCSIFFLAGS, (caddr_t)&ifr));
   1251  1.1      cgd }
   1252  1.2      cgd #endif
   1253  1.2      cgd 
   1254  1.2      cgd #if BSD < 199103
   1255  1.2      cgd /*
   1256  1.2      cgd  * Allocate some memory for bpf.  This is temporary SunOS support, and
   1257  1.2      cgd  * is admittedly a hack.
   1258  1.2      cgd  * If resources unavaiable, return 0.
   1259  1.2      cgd  */
   1260  1.2      cgd static caddr_t
   1261  1.2      cgd bpf_alloc(size, canwait)
   1262  1.2      cgd 	register int size;
   1263  1.2      cgd 	register int canwait;
   1264  1.2      cgd {
   1265  1.2      cgd 	register struct mbuf *m;
   1266  1.2      cgd 
   1267  1.2      cgd 	if ((unsigned)size > (MCLBYTES-8))
   1268  1.2      cgd 		return 0;
   1269  1.1      cgd 
   1270  1.2      cgd 	MGET(m, canwait, MT_DATA);
   1271  1.2      cgd 	if (m == 0)
   1272  1.2      cgd 		return 0;
   1273  1.2      cgd 	if ((unsigned)size > (MLEN-8)) {
   1274  1.2      cgd 		MCLGET(m);
   1275  1.2      cgd 		if (m->m_len != MCLBYTES) {
   1276  1.2      cgd 			m_freem(m);
   1277  1.2      cgd 			return 0;
   1278  1.2      cgd 		}
   1279  1.2      cgd 	}
   1280  1.2      cgd 	*mtod(m, struct mbuf **) = m;
   1281  1.2      cgd 	return mtod(m, caddr_t) + 8;
   1282  1.2      cgd }
   1283  1.2      cgd #endif
   1284  1.2      cgd #endif
   1285