Home | History | Annotate | Line # | Download | only in net
if_bridge.c revision 1.72
      1  1.72     pooka /*	$NetBSD: if_bridge.c,v 1.72 2010/12/07 20:38:26 pooka Exp $	*/
      2   1.1   thorpej 
      3   1.1   thorpej /*
      4   1.1   thorpej  * Copyright 2001 Wasabi Systems, Inc.
      5   1.1   thorpej  * All rights reserved.
      6   1.1   thorpej  *
      7   1.1   thorpej  * Written by Jason R. Thorpe for Wasabi Systems, Inc.
      8   1.1   thorpej  *
      9   1.1   thorpej  * Redistribution and use in source and binary forms, with or without
     10   1.1   thorpej  * modification, are permitted provided that the following conditions
     11   1.1   thorpej  * are met:
     12   1.1   thorpej  * 1. Redistributions of source code must retain the above copyright
     13   1.1   thorpej  *    notice, this list of conditions and the following disclaimer.
     14   1.1   thorpej  * 2. Redistributions in binary form must reproduce the above copyright
     15   1.1   thorpej  *    notice, this list of conditions and the following disclaimer in the
     16   1.1   thorpej  *    documentation and/or other materials provided with the distribution.
     17   1.1   thorpej  * 3. All advertising materials mentioning features or use of this software
     18   1.1   thorpej  *    must display the following acknowledgement:
     19   1.1   thorpej  *	This product includes software developed for the NetBSD Project by
     20   1.1   thorpej  *	Wasabi Systems, Inc.
     21   1.1   thorpej  * 4. The name of Wasabi Systems, Inc. may not be used to endorse
     22   1.1   thorpej  *    or promote products derived from this software without specific prior
     23   1.1   thorpej  *    written permission.
     24   1.1   thorpej  *
     25   1.1   thorpej  * THIS SOFTWARE IS PROVIDED BY WASABI SYSTEMS, INC. ``AS IS'' AND
     26   1.1   thorpej  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     27   1.1   thorpej  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     28   1.1   thorpej  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL WASABI SYSTEMS, INC
     29   1.1   thorpej  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     30   1.1   thorpej  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     31   1.1   thorpej  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     32   1.1   thorpej  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     33   1.1   thorpej  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     34   1.1   thorpej  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     35   1.1   thorpej  * POSSIBILITY OF SUCH DAMAGE.
     36   1.1   thorpej  */
     37   1.1   thorpej 
     38  1.29     perry /*
     39   1.1   thorpej  * Copyright (c) 1999, 2000 Jason L. Wright (jason (at) thought.net)
     40  1.29     perry  * All rights reserved.
     41   1.1   thorpej  *
     42  1.29     perry  * Redistribution and use in source and binary forms, with or without
     43  1.29     perry  * modification, are permitted provided that the following conditions
     44   1.1   thorpej  * are met:
     45   1.1   thorpej  * 1. Redistributions of source code must retain the above copyright
     46   1.1   thorpej  *    notice, this list of conditions and the following disclaimer.
     47   1.1   thorpej  * 2. Redistributions in binary form must reproduce the above copyright
     48   1.1   thorpej  *    notice, this list of conditions and the following disclaimer in the
     49   1.1   thorpej  *    documentation and/or other materials provided with the distribution.
     50   1.1   thorpej  * 3. All advertising materials mentioning features or use of this software
     51   1.1   thorpej  *    must display the following acknowledgement:
     52   1.1   thorpej  *	This product includes software developed by Jason L. Wright
     53   1.1   thorpej  * 4. The name of the author may not be used to endorse or promote products
     54   1.1   thorpej  *    derived from this software without specific prior written permission.
     55   1.1   thorpej  *
     56   1.1   thorpej  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
     57   1.1   thorpej  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
     58   1.1   thorpej  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
     59   1.1   thorpej  * DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
     60   1.1   thorpej  * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
     61   1.1   thorpej  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
     62   1.1   thorpej  * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     63   1.1   thorpej  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
     64   1.1   thorpej  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
     65   1.1   thorpej  * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     66   1.1   thorpej  * POSSIBILITY OF SUCH DAMAGE.
     67   1.1   thorpej  *
     68   1.1   thorpej  * OpenBSD: if_bridge.c,v 1.60 2001/06/15 03:38:33 itojun Exp
     69   1.1   thorpej  */
     70   1.1   thorpej 
     71   1.1   thorpej /*
     72   1.1   thorpej  * Network interface bridge support.
     73   1.1   thorpej  *
     74   1.1   thorpej  * TODO:
     75   1.1   thorpej  *
     76   1.1   thorpej  *	- Currently only supports Ethernet-like interfaces (Ethernet,
     77   1.1   thorpej  *	  802.11, VLANs on Ethernet, etc.)  Figure out a nice way
     78   1.1   thorpej  *	  to bridge other types of interfaces (FDDI-FDDI, and maybe
     79   1.1   thorpej  *	  consider heterogenous bridges).
     80   1.1   thorpej  */
     81   1.3     lukem 
     82   1.3     lukem #include <sys/cdefs.h>
     83  1.72     pooka __KERNEL_RCSID(0, "$NetBSD: if_bridge.c,v 1.72 2010/12/07 20:38:26 pooka Exp $");
     84   1.1   thorpej 
     85  1.72     pooka #ifdef _KERNEL_OPT
     86  1.10  perseant #include "opt_bridge_ipf.h"
     87  1.16       jdc #include "opt_inet.h"
     88  1.15    martin #include "opt_pfil_hooks.h"
     89  1.72     pooka #endif /* _KERNEL_OPT */
     90   1.1   thorpej 
     91  1.29     perry #include <sys/param.h>
     92   1.1   thorpej #include <sys/kernel.h>
     93   1.1   thorpej #include <sys/mbuf.h>
     94   1.1   thorpej #include <sys/queue.h>
     95   1.1   thorpej #include <sys/socket.h>
     96  1.68    bouyer #include <sys/socketvar.h> /* for softnet_lock */
     97   1.1   thorpej #include <sys/sockio.h>
     98   1.1   thorpej #include <sys/systm.h>
     99  1.29     perry #include <sys/proc.h>
    100   1.1   thorpej #include <sys/pool.h>
    101  1.37      elad #include <sys/kauth.h>
    102  1.65    bouyer #include <sys/cpu.h>
    103   1.1   thorpej 
    104   1.1   thorpej #include <net/bpf.h>
    105   1.1   thorpej #include <net/if.h>
    106   1.1   thorpej #include <net/if_dl.h>
    107   1.1   thorpej #include <net/if_types.h>
    108   1.1   thorpej #include <net/if_llc.h>
    109   1.1   thorpej 
    110   1.1   thorpej #include <net/if_ether.h>
    111   1.1   thorpej #include <net/if_bridgevar.h>
    112   1.1   thorpej 
    113  1.25  christos #if defined(BRIDGE_IPF) && defined(PFIL_HOOKS)
    114  1.25  christos /* Used for bridge_ip[6]_checkbasic */
    115   1.9  perseant #include <netinet/in.h>
    116   1.9  perseant #include <netinet/in_systm.h>
    117   1.9  perseant #include <netinet/ip.h>
    118   1.9  perseant #include <netinet/ip_var.h>
    119  1.61   thorpej #include <netinet/ip_private.h>		/* XXX */
    120   1.9  perseant 
    121   1.9  perseant #include <netinet/ip6.h>
    122   1.9  perseant #include <netinet6/in6_var.h>
    123   1.9  perseant #include <netinet6/ip6_var.h>
    124  1.61   thorpej #include <netinet6/ip6_private.h>	/* XXX */
    125  1.25  christos #endif /* BRIDGE_IPF && PFIL_HOOKS */
    126   1.9  perseant 
    127   1.1   thorpej /*
    128   1.1   thorpej  * Size of the route hash table.  Must be a power of two.
    129   1.1   thorpej  */
    130   1.1   thorpej #ifndef BRIDGE_RTHASH_SIZE
    131   1.1   thorpej #define	BRIDGE_RTHASH_SIZE		1024
    132   1.1   thorpej #endif
    133   1.1   thorpej 
    134   1.1   thorpej #define	BRIDGE_RTHASH_MASK		(BRIDGE_RTHASH_SIZE - 1)
    135   1.1   thorpej 
    136  1.38  liamjfoy #include "carp.h"
    137  1.38  liamjfoy #if NCARP > 0
    138  1.38  liamjfoy #include <netinet/in.h>
    139  1.38  liamjfoy #include <netinet/in_var.h>
    140  1.38  liamjfoy #include <netinet/ip_carp.h>
    141  1.38  liamjfoy #endif
    142  1.38  liamjfoy 
    143   1.1   thorpej /*
    144   1.1   thorpej  * Maximum number of addresses to cache.
    145   1.1   thorpej  */
    146   1.1   thorpej #ifndef BRIDGE_RTABLE_MAX
    147   1.1   thorpej #define	BRIDGE_RTABLE_MAX		100
    148   1.1   thorpej #endif
    149   1.1   thorpej 
    150   1.1   thorpej /*
    151   1.1   thorpej  * Spanning tree defaults.
    152   1.1   thorpej  */
    153   1.1   thorpej #define	BSTP_DEFAULT_MAX_AGE		(20 * 256)
    154   1.1   thorpej #define	BSTP_DEFAULT_HELLO_TIME		(2 * 256)
    155   1.1   thorpej #define	BSTP_DEFAULT_FORWARD_DELAY	(15 * 256)
    156   1.1   thorpej #define	BSTP_DEFAULT_HOLD_TIME		(1 * 256)
    157   1.1   thorpej #define	BSTP_DEFAULT_BRIDGE_PRIORITY	0x8000
    158   1.1   thorpej #define	BSTP_DEFAULT_PORT_PRIORITY	0x80
    159   1.1   thorpej #define	BSTP_DEFAULT_PATH_COST		55
    160   1.1   thorpej 
    161   1.1   thorpej /*
    162   1.1   thorpej  * Timeout (in seconds) for entries learned dynamically.
    163   1.1   thorpej  */
    164   1.1   thorpej #ifndef BRIDGE_RTABLE_TIMEOUT
    165   1.1   thorpej #define	BRIDGE_RTABLE_TIMEOUT		(20 * 60)	/* same as ARP */
    166   1.1   thorpej #endif
    167   1.1   thorpej 
    168   1.1   thorpej /*
    169   1.1   thorpej  * Number of seconds between walks of the route list.
    170   1.1   thorpej  */
    171   1.1   thorpej #ifndef BRIDGE_RTABLE_PRUNE_PERIOD
    172   1.1   thorpej #define	BRIDGE_RTABLE_PRUNE_PERIOD	(5 * 60)
    173   1.1   thorpej #endif
    174   1.1   thorpej 
    175   1.1   thorpej int	bridge_rtable_prune_period = BRIDGE_RTABLE_PRUNE_PERIOD;
    176   1.1   thorpej 
    177  1.33   thorpej static struct pool bridge_rtnode_pool;
    178   1.1   thorpej 
    179   1.1   thorpej void	bridgeattach(int);
    180   1.1   thorpej 
    181  1.33   thorpej static int	bridge_clone_create(struct if_clone *, int);
    182  1.33   thorpej static int	bridge_clone_destroy(struct ifnet *);
    183   1.1   thorpej 
    184  1.50  christos static int	bridge_ioctl(struct ifnet *, u_long, void *);
    185  1.33   thorpej static int	bridge_init(struct ifnet *);
    186  1.33   thorpej static void	bridge_stop(struct ifnet *, int);
    187  1.33   thorpej static void	bridge_start(struct ifnet *);
    188  1.33   thorpej 
    189  1.65    bouyer static void	bridge_forward(void *);
    190  1.33   thorpej 
    191  1.33   thorpej static void	bridge_timer(void *);
    192  1.33   thorpej 
    193  1.33   thorpej static void	bridge_broadcast(struct bridge_softc *, struct ifnet *,
    194  1.33   thorpej 				 struct mbuf *);
    195  1.33   thorpej 
    196  1.33   thorpej static int	bridge_rtupdate(struct bridge_softc *, const uint8_t *,
    197  1.33   thorpej 				struct ifnet *, int, uint8_t);
    198  1.33   thorpej static struct ifnet *bridge_rtlookup(struct bridge_softc *, const uint8_t *);
    199  1.33   thorpej static void	bridge_rttrim(struct bridge_softc *);
    200  1.33   thorpej static void	bridge_rtage(struct bridge_softc *);
    201  1.33   thorpej static void	bridge_rtflush(struct bridge_softc *, int);
    202  1.33   thorpej static int	bridge_rtdaddr(struct bridge_softc *, const uint8_t *);
    203  1.33   thorpej static void	bridge_rtdelete(struct bridge_softc *, struct ifnet *ifp);
    204  1.33   thorpej 
    205  1.33   thorpej static int	bridge_rtable_init(struct bridge_softc *);
    206  1.33   thorpej static void	bridge_rtable_fini(struct bridge_softc *);
    207  1.33   thorpej 
    208  1.33   thorpej static struct bridge_rtnode *bridge_rtnode_lookup(struct bridge_softc *,
    209  1.33   thorpej 						  const uint8_t *);
    210  1.33   thorpej static int	bridge_rtnode_insert(struct bridge_softc *,
    211  1.33   thorpej 				     struct bridge_rtnode *);
    212  1.33   thorpej static void	bridge_rtnode_destroy(struct bridge_softc *,
    213  1.33   thorpej 				      struct bridge_rtnode *);
    214  1.33   thorpej 
    215  1.33   thorpej static struct bridge_iflist *bridge_lookup_member(struct bridge_softc *,
    216  1.33   thorpej 						  const char *name);
    217  1.33   thorpej static struct bridge_iflist *bridge_lookup_member_if(struct bridge_softc *,
    218  1.33   thorpej 						     struct ifnet *ifp);
    219  1.33   thorpej static void	bridge_delete_member(struct bridge_softc *,
    220  1.33   thorpej 				     struct bridge_iflist *);
    221  1.33   thorpej 
    222  1.33   thorpej static int	bridge_ioctl_add(struct bridge_softc *, void *);
    223  1.33   thorpej static int	bridge_ioctl_del(struct bridge_softc *, void *);
    224  1.33   thorpej static int	bridge_ioctl_gifflags(struct bridge_softc *, void *);
    225  1.33   thorpej static int	bridge_ioctl_sifflags(struct bridge_softc *, void *);
    226  1.33   thorpej static int	bridge_ioctl_scache(struct bridge_softc *, void *);
    227  1.33   thorpej static int	bridge_ioctl_gcache(struct bridge_softc *, void *);
    228  1.33   thorpej static int	bridge_ioctl_gifs(struct bridge_softc *, void *);
    229  1.33   thorpej static int	bridge_ioctl_rts(struct bridge_softc *, void *);
    230  1.33   thorpej static int	bridge_ioctl_saddr(struct bridge_softc *, void *);
    231  1.33   thorpej static int	bridge_ioctl_sto(struct bridge_softc *, void *);
    232  1.33   thorpej static int	bridge_ioctl_gto(struct bridge_softc *, void *);
    233  1.33   thorpej static int	bridge_ioctl_daddr(struct bridge_softc *, void *);
    234  1.33   thorpej static int	bridge_ioctl_flush(struct bridge_softc *, void *);
    235  1.33   thorpej static int	bridge_ioctl_gpri(struct bridge_softc *, void *);
    236  1.33   thorpej static int	bridge_ioctl_spri(struct bridge_softc *, void *);
    237  1.33   thorpej static int	bridge_ioctl_ght(struct bridge_softc *, void *);
    238  1.33   thorpej static int	bridge_ioctl_sht(struct bridge_softc *, void *);
    239  1.33   thorpej static int	bridge_ioctl_gfd(struct bridge_softc *, void *);
    240  1.33   thorpej static int	bridge_ioctl_sfd(struct bridge_softc *, void *);
    241  1.33   thorpej static int	bridge_ioctl_gma(struct bridge_softc *, void *);
    242  1.33   thorpej static int	bridge_ioctl_sma(struct bridge_softc *, void *);
    243  1.33   thorpej static int	bridge_ioctl_sifprio(struct bridge_softc *, void *);
    244  1.33   thorpej static int	bridge_ioctl_sifcost(struct bridge_softc *, void *);
    245  1.25  christos #if defined(BRIDGE_IPF) && defined(PFIL_HOOKS)
    246  1.33   thorpej static int	bridge_ioctl_gfilt(struct bridge_softc *, void *);
    247  1.33   thorpej static int	bridge_ioctl_sfilt(struct bridge_softc *, void *);
    248  1.33   thorpej static int	bridge_ipf(void *, struct mbuf **, struct ifnet *, int);
    249  1.33   thorpej static int	bridge_ip_checkbasic(struct mbuf **mp);
    250   1.9  perseant # ifdef INET6
    251  1.33   thorpej static int	bridge_ip6_checkbasic(struct mbuf **mp);
    252   1.9  perseant # endif /* INET6 */
    253  1.25  christos #endif /* BRIDGE_IPF && PFIL_HOOKS */
    254   1.1   thorpej 
    255   1.1   thorpej struct bridge_control {
    256   1.1   thorpej 	int	(*bc_func)(struct bridge_softc *, void *);
    257   1.1   thorpej 	int	bc_argsize;
    258   1.1   thorpej 	int	bc_flags;
    259   1.1   thorpej };
    260   1.1   thorpej 
    261   1.1   thorpej #define	BC_F_COPYIN		0x01	/* copy arguments in */
    262   1.1   thorpej #define	BC_F_COPYOUT		0x02	/* copy arguments out */
    263   1.1   thorpej #define	BC_F_SUSER		0x04	/* do super-user check */
    264   1.1   thorpej 
    265  1.33   thorpej static const struct bridge_control bridge_control_table[] = {
    266  1.55    dyoung [BRDGADD] = {bridge_ioctl_add, sizeof(struct ifbreq), BC_F_COPYIN|BC_F_SUSER},
    267  1.55    dyoung [BRDGDEL] = {bridge_ioctl_del, sizeof(struct ifbreq), BC_F_COPYIN|BC_F_SUSER},
    268   1.1   thorpej 
    269  1.55    dyoung [BRDGGIFFLGS] = {bridge_ioctl_gifflags, sizeof(struct ifbreq), BC_F_COPYIN|BC_F_COPYOUT},
    270  1.55    dyoung [BRDGSIFFLGS] = {bridge_ioctl_sifflags, sizeof(struct ifbreq), BC_F_COPYIN|BC_F_SUSER},
    271  1.11    bouyer 
    272  1.55    dyoung [BRDGSCACHE] = {bridge_ioctl_scache, sizeof(struct ifbrparam), BC_F_COPYIN|BC_F_SUSER},
    273  1.55    dyoung [BRDGGCACHE] = {bridge_ioctl_gcache, sizeof(struct ifbrparam), BC_F_COPYOUT},
    274  1.55    dyoung 
    275  1.55    dyoung [BRDGGIFS] = {bridge_ioctl_gifs, sizeof(struct ifbifconf), BC_F_COPYIN|BC_F_COPYOUT},
    276  1.55    dyoung [BRDGRTS] = {bridge_ioctl_rts, sizeof(struct ifbaconf), BC_F_COPYIN|BC_F_COPYOUT},
    277  1.55    dyoung 
    278  1.55    dyoung [BRDGSADDR] = {bridge_ioctl_saddr, sizeof(struct ifbareq), BC_F_COPYIN|BC_F_SUSER},
    279  1.55    dyoung 
    280  1.55    dyoung [BRDGSTO] = {bridge_ioctl_sto, sizeof(struct ifbrparam), BC_F_COPYIN|BC_F_SUSER},
    281  1.55    dyoung [BRDGGTO] = {bridge_ioctl_gto, sizeof(struct ifbrparam), BC_F_COPYOUT},
    282  1.55    dyoung 
    283  1.55    dyoung [BRDGDADDR] = {bridge_ioctl_daddr, sizeof(struct ifbareq), BC_F_COPYIN|BC_F_SUSER},
    284  1.55    dyoung 
    285  1.55    dyoung [BRDGFLUSH] = {bridge_ioctl_flush, sizeof(struct ifbreq), BC_F_COPYIN|BC_F_SUSER},
    286  1.55    dyoung 
    287  1.55    dyoung [BRDGGPRI] = {bridge_ioctl_gpri, sizeof(struct ifbrparam), BC_F_COPYOUT},
    288  1.55    dyoung [BRDGSPRI] = {bridge_ioctl_spri, sizeof(struct ifbrparam), BC_F_COPYIN|BC_F_SUSER},
    289  1.55    dyoung 
    290  1.55    dyoung [BRDGGHT] = {bridge_ioctl_ght, sizeof(struct ifbrparam), BC_F_COPYOUT},
    291  1.55    dyoung [BRDGSHT] = {bridge_ioctl_sht, sizeof(struct ifbrparam), BC_F_COPYIN|BC_F_SUSER},
    292  1.55    dyoung 
    293  1.55    dyoung [BRDGGFD] = {bridge_ioctl_gfd, sizeof(struct ifbrparam), BC_F_COPYOUT},
    294  1.55    dyoung [BRDGSFD] = {bridge_ioctl_sfd, sizeof(struct ifbrparam), BC_F_COPYIN|BC_F_SUSER},
    295  1.55    dyoung 
    296  1.55    dyoung [BRDGGMA] = {bridge_ioctl_gma, sizeof(struct ifbrparam), BC_F_COPYOUT},
    297  1.55    dyoung [BRDGSMA] = {bridge_ioctl_sma, sizeof(struct ifbrparam), BC_F_COPYIN|BC_F_SUSER},
    298  1.55    dyoung 
    299  1.55    dyoung [BRDGSIFPRIO] = {bridge_ioctl_sifprio, sizeof(struct ifbreq), BC_F_COPYIN|BC_F_SUSER},
    300  1.55    dyoung 
    301  1.55    dyoung [BRDGSIFCOST] = {bridge_ioctl_sifcost, sizeof(struct ifbreq), BC_F_COPYIN|BC_F_SUSER},
    302  1.25  christos #if defined(BRIDGE_IPF) && defined(PFIL_HOOKS)
    303  1.55    dyoung [BRDGGFILT] = {bridge_ioctl_gfilt, sizeof(struct ifbrparam), BC_F_COPYOUT},
    304  1.55    dyoung [BRDGSFILT] = {bridge_ioctl_sfilt, sizeof(struct ifbrparam), BC_F_COPYIN|BC_F_SUSER},
    305  1.25  christos #endif /* BRIDGE_IPF && PFIL_HOOKS */
    306   1.1   thorpej };
    307  1.49    dyoung static const int bridge_control_table_size = __arraycount(bridge_control_table);
    308   1.1   thorpej 
    309  1.33   thorpej static LIST_HEAD(, bridge_softc) bridge_list;
    310   1.1   thorpej 
    311  1.33   thorpej static struct if_clone bridge_cloner =
    312   1.1   thorpej     IF_CLONE_INITIALIZER("bridge", bridge_clone_create, bridge_clone_destroy);
    313   1.1   thorpej 
    314   1.1   thorpej /*
    315   1.1   thorpej  * bridgeattach:
    316   1.1   thorpej  *
    317   1.1   thorpej  *	Pseudo-device attach routine.
    318   1.1   thorpej  */
    319   1.1   thorpej void
    320  1.45  christos bridgeattach(int n)
    321   1.1   thorpej {
    322   1.1   thorpej 
    323   1.1   thorpej 	pool_init(&bridge_rtnode_pool, sizeof(struct bridge_rtnode),
    324  1.51        ad 	    0, 0, 0, "brtpl", NULL, IPL_NET);
    325   1.1   thorpej 
    326   1.1   thorpej 	LIST_INIT(&bridge_list);
    327   1.1   thorpej 	if_clone_attach(&bridge_cloner);
    328   1.1   thorpej }
    329   1.1   thorpej 
    330   1.1   thorpej /*
    331   1.1   thorpej  * bridge_clone_create:
    332   1.1   thorpej  *
    333   1.1   thorpej  *	Create a new bridge instance.
    334   1.1   thorpej  */
    335  1.33   thorpej static int
    336   1.1   thorpej bridge_clone_create(struct if_clone *ifc, int unit)
    337   1.1   thorpej {
    338   1.1   thorpej 	struct bridge_softc *sc;
    339   1.1   thorpej 	struct ifnet *ifp;
    340   1.1   thorpej 	int s;
    341   1.1   thorpej 
    342  1.62  christos 	sc = malloc(sizeof(*sc), M_DEVBUF, M_WAITOK|M_ZERO);
    343   1.1   thorpej 	ifp = &sc->sc_if;
    344   1.1   thorpej 
    345   1.1   thorpej 	sc->sc_brtmax = BRIDGE_RTABLE_MAX;
    346   1.1   thorpej 	sc->sc_brttimeout = BRIDGE_RTABLE_TIMEOUT;
    347  1.29     perry 	sc->sc_bridge_max_age = BSTP_DEFAULT_MAX_AGE;
    348   1.1   thorpej 	sc->sc_bridge_hello_time = BSTP_DEFAULT_HELLO_TIME;
    349   1.1   thorpej 	sc->sc_bridge_forward_delay = BSTP_DEFAULT_FORWARD_DELAY;
    350   1.1   thorpej 	sc->sc_bridge_priority = BSTP_DEFAULT_BRIDGE_PRIORITY;
    351   1.1   thorpej 	sc->sc_hold_time = BSTP_DEFAULT_HOLD_TIME;
    352   1.9  perseant 	sc->sc_filter_flags = 0;
    353   1.1   thorpej 
    354  1.65    bouyer 	/* software interrupt to do the work */
    355  1.65    bouyer 	sc->sc_softintr = softint_establish(SOFTINT_NET, bridge_forward, sc);
    356  1.65    bouyer 	if (sc->sc_softintr == NULL) {
    357  1.65    bouyer 		free(sc, M_DEVBUF);
    358  1.65    bouyer 		return ENOMEM;
    359  1.65    bouyer 	}
    360  1.65    bouyer 
    361   1.1   thorpej 	/* Initialize our routing table. */
    362   1.1   thorpej 	bridge_rtable_init(sc);
    363   1.1   thorpej 
    364  1.52        ad 	callout_init(&sc->sc_brcallout, 0);
    365  1.52        ad 	callout_init(&sc->sc_bstpcallout, 0);
    366   1.1   thorpej 
    367   1.1   thorpej 	LIST_INIT(&sc->sc_iflist);
    368   1.1   thorpej 
    369  1.62  christos 	if_initname(ifp, ifc->ifc_name, unit);
    370   1.1   thorpej 	ifp->if_softc = sc;
    371   1.1   thorpej 	ifp->if_mtu = ETHERMTU;
    372   1.1   thorpej 	ifp->if_ioctl = bridge_ioctl;
    373   1.1   thorpej 	ifp->if_output = bridge_output;
    374   1.1   thorpej 	ifp->if_start = bridge_start;
    375   1.1   thorpej 	ifp->if_stop = bridge_stop;
    376   1.1   thorpej 	ifp->if_init = bridge_init;
    377   1.6    itojun 	ifp->if_type = IFT_BRIDGE;
    378   1.1   thorpej 	ifp->if_addrlen = 0;
    379   1.1   thorpej 	ifp->if_dlt = DLT_EN10MB;
    380   1.1   thorpej 	ifp->if_hdrlen = ETHER_HDR_LEN;
    381  1.65    bouyer 	IFQ_SET_READY(&ifp->if_snd);
    382   1.1   thorpej 
    383   1.1   thorpej 	if_attach(ifp);
    384   1.1   thorpej 
    385   1.1   thorpej 	if_alloc_sadl(ifp);
    386   1.1   thorpej 
    387   1.1   thorpej 	s = splnet();
    388   1.1   thorpej 	LIST_INSERT_HEAD(&bridge_list, sc, sc_list);
    389   1.1   thorpej 	splx(s);
    390   1.1   thorpej 
    391   1.1   thorpej 	return (0);
    392   1.1   thorpej }
    393   1.1   thorpej 
    394   1.1   thorpej /*
    395   1.1   thorpej  * bridge_clone_destroy:
    396   1.1   thorpej  *
    397   1.1   thorpej  *	Destroy a bridge instance.
    398   1.1   thorpej  */
    399  1.33   thorpej static int
    400   1.1   thorpej bridge_clone_destroy(struct ifnet *ifp)
    401   1.1   thorpej {
    402   1.1   thorpej 	struct bridge_softc *sc = ifp->if_softc;
    403   1.1   thorpej 	struct bridge_iflist *bif;
    404   1.1   thorpej 	int s;
    405   1.1   thorpej 
    406   1.1   thorpej 	s = splnet();
    407   1.1   thorpej 
    408   1.1   thorpej 	bridge_stop(ifp, 1);
    409   1.1   thorpej 
    410   1.1   thorpej 	while ((bif = LIST_FIRST(&sc->sc_iflist)) != NULL)
    411   1.1   thorpej 		bridge_delete_member(sc, bif);
    412   1.1   thorpej 
    413   1.1   thorpej 	LIST_REMOVE(sc, sc_list);
    414   1.1   thorpej 
    415   1.1   thorpej 	splx(s);
    416   1.1   thorpej 
    417   1.1   thorpej 	if_detach(ifp);
    418   1.1   thorpej 
    419   1.1   thorpej 	/* Tear down the routing table. */
    420   1.1   thorpej 	bridge_rtable_fini(sc);
    421   1.1   thorpej 
    422  1.65    bouyer 	softint_disestablish(sc->sc_softintr);
    423  1.65    bouyer 
    424   1.1   thorpej 	free(sc, M_DEVBUF);
    425  1.27     peter 
    426  1.27     peter 	return (0);
    427   1.1   thorpej }
    428   1.1   thorpej 
    429   1.1   thorpej /*
    430   1.1   thorpej  * bridge_ioctl:
    431   1.1   thorpej  *
    432   1.1   thorpej  *	Handle a control request from the operator.
    433   1.1   thorpej  */
    434  1.33   thorpej static int
    435  1.50  christos bridge_ioctl(struct ifnet *ifp, u_long cmd, void *data)
    436   1.1   thorpej {
    437   1.1   thorpej 	struct bridge_softc *sc = ifp->if_softc;
    438  1.40        ad 	struct lwp *l = curlwp;	/* XXX */
    439   1.1   thorpej 	union {
    440   1.1   thorpej 		struct ifbreq ifbreq;
    441   1.1   thorpej 		struct ifbifconf ifbifconf;
    442   1.1   thorpej 		struct ifbareq ifbareq;
    443   1.1   thorpej 		struct ifbaconf ifbaconf;
    444   1.1   thorpej 		struct ifbrparam ifbrparam;
    445   1.1   thorpej 	} args;
    446   1.1   thorpej 	struct ifdrv *ifd = (struct ifdrv *) data;
    447  1.69      elad 	const struct bridge_control *bc = NULL; /* XXXGCC */
    448   1.1   thorpej 	int s, error = 0;
    449   1.1   thorpej 
    450  1.69      elad 	/* Authorize command before calling splnet(). */
    451   1.1   thorpej 	switch (cmd) {
    452   1.1   thorpej 	case SIOCGDRVSPEC:
    453   1.1   thorpej 	case SIOCSDRVSPEC:
    454   1.1   thorpej 		if (ifd->ifd_cmd >= bridge_control_table_size) {
    455   1.1   thorpej 			error = EINVAL;
    456  1.70    cegger 			return error;
    457   1.1   thorpej 		}
    458  1.69      elad 
    459   1.1   thorpej 		bc = &bridge_control_table[ifd->ifd_cmd];
    460   1.1   thorpej 
    461  1.69      elad 		/* We only care about BC_F_SUSER at this point. */
    462  1.69      elad 		if ((bc->bc_flags & BC_F_SUSER) == 0)
    463  1.69      elad 			break;
    464  1.69      elad 
    465  1.69      elad 		error = kauth_authorize_generic(l->l_cred,
    466  1.69      elad 		    KAUTH_GENERIC_ISSUSER, NULL);
    467  1.69      elad 		if (error)
    468  1.69      elad 			return (error);
    469  1.69      elad 
    470  1.69      elad 		break;
    471  1.69      elad 	}
    472  1.69      elad 
    473  1.69      elad 	s = splnet();
    474  1.69      elad 
    475  1.69      elad 	switch (cmd) {
    476  1.69      elad 	case SIOCGDRVSPEC:
    477  1.69      elad 	case SIOCSDRVSPEC:
    478  1.70    cegger 		KASSERT(bc != NULL);
    479   1.1   thorpej 		if (cmd == SIOCGDRVSPEC &&
    480  1.14  kristerw 		    (bc->bc_flags & BC_F_COPYOUT) == 0) {
    481  1.14  kristerw 			error = EINVAL;
    482  1.14  kristerw 			break;
    483  1.14  kristerw 		}
    484   1.1   thorpej 		else if (cmd == SIOCSDRVSPEC &&
    485  1.14  kristerw 		    (bc->bc_flags & BC_F_COPYOUT) != 0) {
    486  1.14  kristerw 			error = EINVAL;
    487  1.14  kristerw 			break;
    488  1.14  kristerw 		}
    489   1.1   thorpej 
    490  1.69      elad 		/* BC_F_SUSER is checked above, before splnet(). */
    491   1.1   thorpej 
    492   1.1   thorpej 		if (ifd->ifd_len != bc->bc_argsize ||
    493   1.1   thorpej 		    ifd->ifd_len > sizeof(args)) {
    494   1.1   thorpej 			error = EINVAL;
    495   1.1   thorpej 			break;
    496   1.1   thorpej 		}
    497   1.1   thorpej 
    498  1.35  christos 		memset(&args, 0, sizeof(args));
    499   1.1   thorpej 		if (bc->bc_flags & BC_F_COPYIN) {
    500   1.1   thorpej 			error = copyin(ifd->ifd_data, &args, ifd->ifd_len);
    501   1.1   thorpej 			if (error)
    502   1.1   thorpej 				break;
    503   1.1   thorpej 		}
    504   1.1   thorpej 
    505   1.1   thorpej 		error = (*bc->bc_func)(sc, &args);
    506   1.1   thorpej 		if (error)
    507   1.1   thorpej 			break;
    508   1.1   thorpej 
    509   1.1   thorpej 		if (bc->bc_flags & BC_F_COPYOUT)
    510   1.1   thorpej 			error = copyout(&args, ifd->ifd_data, ifd->ifd_len);
    511   1.1   thorpej 
    512   1.1   thorpej 		break;
    513   1.1   thorpej 
    514   1.1   thorpej 	case SIOCSIFFLAGS:
    515  1.63    dyoung 		if ((error = ifioctl_common(ifp, cmd, data)) != 0)
    516  1.63    dyoung 			break;
    517  1.63    dyoung 		switch (ifp->if_flags & (IFF_UP|IFF_RUNNING)) {
    518  1.63    dyoung 		case IFF_RUNNING:
    519   1.1   thorpej 			/*
    520   1.1   thorpej 			 * If interface is marked down and it is running,
    521   1.1   thorpej 			 * then stop and disable it.
    522   1.1   thorpej 			 */
    523   1.1   thorpej 			(*ifp->if_stop)(ifp, 1);
    524  1.63    dyoung 			break;
    525  1.63    dyoung 		case IFF_UP:
    526   1.1   thorpej 			/*
    527   1.1   thorpej 			 * If interface is marked up and it is stopped, then
    528   1.1   thorpej 			 * start it.
    529   1.1   thorpej 			 */
    530   1.1   thorpej 			error = (*ifp->if_init)(ifp);
    531  1.63    dyoung 			break;
    532  1.63    dyoung 		default:
    533  1.63    dyoung 			break;
    534   1.1   thorpej 		}
    535   1.1   thorpej 		break;
    536   1.1   thorpej 
    537   1.1   thorpej 	default:
    538  1.63    dyoung 		error = ifioctl_common(ifp, cmd, data);
    539   1.1   thorpej 		break;
    540   1.1   thorpej 	}
    541   1.1   thorpej 
    542   1.1   thorpej 	splx(s);
    543   1.1   thorpej 
    544   1.1   thorpej 	return (error);
    545   1.1   thorpej }
    546   1.1   thorpej 
    547   1.1   thorpej /*
    548   1.1   thorpej  * bridge_lookup_member:
    549   1.1   thorpej  *
    550   1.1   thorpej  *	Lookup a bridge member interface.  Must be called at splnet().
    551   1.1   thorpej  */
    552  1.33   thorpej static struct bridge_iflist *
    553   1.1   thorpej bridge_lookup_member(struct bridge_softc *sc, const char *name)
    554   1.1   thorpej {
    555   1.1   thorpej 	struct bridge_iflist *bif;
    556   1.1   thorpej 	struct ifnet *ifp;
    557   1.1   thorpej 
    558   1.1   thorpej 	LIST_FOREACH(bif, &sc->sc_iflist, bif_next) {
    559   1.1   thorpej 		ifp = bif->bif_ifp;
    560   1.1   thorpej 		if (strcmp(ifp->if_xname, name) == 0)
    561   1.1   thorpej 			return (bif);
    562   1.1   thorpej 	}
    563   1.1   thorpej 
    564   1.1   thorpej 	return (NULL);
    565   1.1   thorpej }
    566   1.1   thorpej 
    567   1.1   thorpej /*
    568   1.8    martin  * bridge_lookup_member_if:
    569   1.8    martin  *
    570   1.8    martin  *	Lookup a bridge member interface by ifnet*.  Must be called at splnet().
    571   1.8    martin  */
    572  1.33   thorpej static struct bridge_iflist *
    573   1.8    martin bridge_lookup_member_if(struct bridge_softc *sc, struct ifnet *member_ifp)
    574   1.8    martin {
    575   1.8    martin 	struct bridge_iflist *bif;
    576   1.8    martin 
    577   1.8    martin 	LIST_FOREACH(bif, &sc->sc_iflist, bif_next) {
    578   1.8    martin 		if (bif->bif_ifp == member_ifp)
    579   1.8    martin 			return (bif);
    580   1.8    martin 	}
    581   1.8    martin 
    582   1.8    martin 	return (NULL);
    583   1.8    martin }
    584   1.8    martin 
    585   1.8    martin /*
    586   1.1   thorpej  * bridge_delete_member:
    587   1.1   thorpej  *
    588   1.1   thorpej  *	Delete the specified member interface.
    589   1.1   thorpej  */
    590  1.33   thorpej static void
    591   1.1   thorpej bridge_delete_member(struct bridge_softc *sc, struct bridge_iflist *bif)
    592   1.1   thorpej {
    593   1.1   thorpej 	struct ifnet *ifs = bif->bif_ifp;
    594   1.1   thorpej 
    595   1.1   thorpej 	switch (ifs->if_type) {
    596   1.1   thorpej 	case IFT_ETHER:
    597   1.1   thorpej 		/*
    598   1.1   thorpej 		 * Take the interface out of promiscuous mode.
    599   1.1   thorpej 		 */
    600   1.1   thorpej 		(void) ifpromisc(ifs, 0);
    601   1.1   thorpej 		break;
    602   1.1   thorpej 	default:
    603   1.1   thorpej #ifdef DIAGNOSTIC
    604   1.1   thorpej 		panic("bridge_delete_member: impossible");
    605   1.1   thorpej #endif
    606   1.1   thorpej 		break;
    607   1.1   thorpej 	}
    608   1.1   thorpej 
    609   1.1   thorpej 	ifs->if_bridge = NULL;
    610   1.1   thorpej 	LIST_REMOVE(bif, bif_next);
    611   1.1   thorpej 
    612   1.1   thorpej 	bridge_rtdelete(sc, ifs);
    613   1.1   thorpej 
    614   1.1   thorpej 	free(bif, M_DEVBUF);
    615   1.1   thorpej 
    616   1.1   thorpej 	if (sc->sc_if.if_flags & IFF_RUNNING)
    617   1.1   thorpej 		bstp_initialization(sc);
    618   1.1   thorpej }
    619   1.1   thorpej 
    620  1.33   thorpej static int
    621   1.1   thorpej bridge_ioctl_add(struct bridge_softc *sc, void *arg)
    622   1.1   thorpej {
    623   1.1   thorpej 	struct ifbreq *req = arg;
    624   1.1   thorpej 	struct bridge_iflist *bif = NULL;
    625   1.1   thorpej 	struct ifnet *ifs;
    626   1.1   thorpej 	int error = 0;
    627   1.1   thorpej 
    628   1.1   thorpej 	ifs = ifunit(req->ifbr_ifsname);
    629   1.1   thorpej 	if (ifs == NULL)
    630   1.1   thorpej 		return (ENOENT);
    631   1.7    itojun 
    632   1.7    itojun 	if (sc->sc_if.if_mtu != ifs->if_mtu)
    633   1.7    itojun 		return (EINVAL);
    634   1.1   thorpej 
    635   1.1   thorpej 	if (ifs->if_bridge == sc)
    636   1.1   thorpej 		return (EEXIST);
    637   1.1   thorpej 
    638   1.1   thorpej 	if (ifs->if_bridge != NULL)
    639   1.1   thorpej 		return (EBUSY);
    640   1.1   thorpej 
    641   1.1   thorpej 	bif = malloc(sizeof(*bif), M_DEVBUF, M_NOWAIT);
    642   1.1   thorpej 	if (bif == NULL)
    643   1.1   thorpej 		return (ENOMEM);
    644   1.1   thorpej 
    645   1.1   thorpej 	switch (ifs->if_type) {
    646   1.1   thorpej 	case IFT_ETHER:
    647   1.1   thorpej 		/*
    648   1.1   thorpej 		 * Place the interface into promiscuous mode.
    649   1.1   thorpej 		 */
    650   1.1   thorpej 		error = ifpromisc(ifs, 1);
    651   1.1   thorpej 		if (error)
    652   1.1   thorpej 			goto out;
    653   1.1   thorpej 		break;
    654   1.1   thorpej 	default:
    655   1.5  jdolecek 		error = EINVAL;
    656   1.5  jdolecek 		goto out;
    657   1.1   thorpej 	}
    658   1.1   thorpej 
    659   1.1   thorpej 	bif->bif_ifp = ifs;
    660   1.1   thorpej 	bif->bif_flags = IFBIF_LEARNING | IFBIF_DISCOVER;
    661   1.1   thorpej 	bif->bif_priority = BSTP_DEFAULT_PORT_PRIORITY;
    662   1.1   thorpej 	bif->bif_path_cost = BSTP_DEFAULT_PATH_COST;
    663   1.1   thorpej 
    664   1.1   thorpej 	ifs->if_bridge = sc;
    665   1.1   thorpej 	LIST_INSERT_HEAD(&sc->sc_iflist, bif, bif_next);
    666   1.1   thorpej 
    667   1.1   thorpej 	if (sc->sc_if.if_flags & IFF_RUNNING)
    668   1.1   thorpej 		bstp_initialization(sc);
    669   1.1   thorpej 	else
    670   1.1   thorpej 		bstp_stop(sc);
    671   1.1   thorpej 
    672   1.1   thorpej  out:
    673   1.1   thorpej 	if (error) {
    674   1.1   thorpej 		if (bif != NULL)
    675   1.1   thorpej 			free(bif, M_DEVBUF);
    676   1.1   thorpej 	}
    677   1.1   thorpej 	return (error);
    678   1.1   thorpej }
    679   1.1   thorpej 
    680  1.33   thorpej static int
    681   1.1   thorpej bridge_ioctl_del(struct bridge_softc *sc, void *arg)
    682   1.1   thorpej {
    683   1.1   thorpej 	struct ifbreq *req = arg;
    684   1.1   thorpej 	struct bridge_iflist *bif;
    685   1.1   thorpej 
    686   1.1   thorpej 	bif = bridge_lookup_member(sc, req->ifbr_ifsname);
    687   1.1   thorpej 	if (bif == NULL)
    688   1.1   thorpej 		return (ENOENT);
    689   1.1   thorpej 
    690   1.1   thorpej 	bridge_delete_member(sc, bif);
    691   1.1   thorpej 
    692   1.1   thorpej 	return (0);
    693   1.1   thorpej }
    694   1.1   thorpej 
    695  1.33   thorpej static int
    696   1.1   thorpej bridge_ioctl_gifflags(struct bridge_softc *sc, void *arg)
    697   1.1   thorpej {
    698   1.1   thorpej 	struct ifbreq *req = arg;
    699   1.1   thorpej 	struct bridge_iflist *bif;
    700   1.1   thorpej 
    701   1.1   thorpej 	bif = bridge_lookup_member(sc, req->ifbr_ifsname);
    702   1.1   thorpej 	if (bif == NULL)
    703   1.1   thorpej 		return (ENOENT);
    704   1.1   thorpej 
    705   1.1   thorpej 	req->ifbr_ifsflags = bif->bif_flags;
    706   1.1   thorpej 	req->ifbr_state = bif->bif_state;
    707   1.1   thorpej 	req->ifbr_priority = bif->bif_priority;
    708  1.11    bouyer 	req->ifbr_path_cost = bif->bif_path_cost;
    709   1.1   thorpej 	req->ifbr_portno = bif->bif_ifp->if_index & 0xff;
    710   1.1   thorpej 
    711   1.1   thorpej 	return (0);
    712   1.1   thorpej }
    713   1.1   thorpej 
    714  1.33   thorpej static int
    715   1.1   thorpej bridge_ioctl_sifflags(struct bridge_softc *sc, void *arg)
    716   1.1   thorpej {
    717   1.1   thorpej 	struct ifbreq *req = arg;
    718   1.1   thorpej 	struct bridge_iflist *bif;
    719   1.1   thorpej 
    720   1.1   thorpej 	bif = bridge_lookup_member(sc, req->ifbr_ifsname);
    721   1.1   thorpej 	if (bif == NULL)
    722   1.1   thorpej 		return (ENOENT);
    723   1.1   thorpej 
    724   1.1   thorpej 	if (req->ifbr_ifsflags & IFBIF_STP) {
    725   1.1   thorpej 		switch (bif->bif_ifp->if_type) {
    726   1.1   thorpej 		case IFT_ETHER:
    727   1.1   thorpej 			/* These can do spanning tree. */
    728   1.1   thorpej 			break;
    729   1.1   thorpej 
    730   1.1   thorpej 		default:
    731   1.1   thorpej 			/* Nothing else can. */
    732   1.1   thorpej 			return (EINVAL);
    733   1.1   thorpej 		}
    734   1.1   thorpej 	}
    735   1.1   thorpej 
    736   1.1   thorpej 	bif->bif_flags = req->ifbr_ifsflags;
    737   1.1   thorpej 
    738   1.1   thorpej 	if (sc->sc_if.if_flags & IFF_RUNNING)
    739   1.1   thorpej 		bstp_initialization(sc);
    740   1.1   thorpej 
    741   1.1   thorpej 	return (0);
    742   1.1   thorpej }
    743   1.1   thorpej 
    744  1.33   thorpej static int
    745   1.1   thorpej bridge_ioctl_scache(struct bridge_softc *sc, void *arg)
    746   1.1   thorpej {
    747   1.1   thorpej 	struct ifbrparam *param = arg;
    748   1.1   thorpej 
    749   1.1   thorpej 	sc->sc_brtmax = param->ifbrp_csize;
    750   1.1   thorpej 	bridge_rttrim(sc);
    751   1.1   thorpej 
    752   1.1   thorpej 	return (0);
    753   1.1   thorpej }
    754   1.1   thorpej 
    755  1.33   thorpej static int
    756   1.1   thorpej bridge_ioctl_gcache(struct bridge_softc *sc, void *arg)
    757   1.1   thorpej {
    758   1.1   thorpej 	struct ifbrparam *param = arg;
    759   1.1   thorpej 
    760   1.1   thorpej 	param->ifbrp_csize = sc->sc_brtmax;
    761   1.1   thorpej 
    762   1.1   thorpej 	return (0);
    763   1.1   thorpej }
    764   1.1   thorpej 
    765  1.33   thorpej static int
    766   1.1   thorpej bridge_ioctl_gifs(struct bridge_softc *sc, void *arg)
    767   1.1   thorpej {
    768   1.1   thorpej 	struct ifbifconf *bifc = arg;
    769   1.1   thorpej 	struct bridge_iflist *bif;
    770   1.1   thorpej 	struct ifbreq breq;
    771   1.1   thorpej 	int count, len, error = 0;
    772   1.1   thorpej 
    773   1.1   thorpej 	count = 0;
    774   1.1   thorpej 	LIST_FOREACH(bif, &sc->sc_iflist, bif_next)
    775   1.1   thorpej 		count++;
    776   1.1   thorpej 
    777   1.1   thorpej 	if (bifc->ifbic_len == 0) {
    778   1.1   thorpej 		bifc->ifbic_len = sizeof(breq) * count;
    779   1.1   thorpej 		return (0);
    780   1.1   thorpej 	}
    781   1.1   thorpej 
    782   1.1   thorpej 	count = 0;
    783   1.1   thorpej 	len = bifc->ifbic_len;
    784  1.36  christos 	memset(&breq, 0, sizeof breq);
    785   1.1   thorpej 	LIST_FOREACH(bif, &sc->sc_iflist, bif_next) {
    786   1.1   thorpej 		if (len < sizeof(breq))
    787   1.1   thorpej 			break;
    788   1.1   thorpej 
    789  1.13    itojun 		strlcpy(breq.ifbr_ifsname, bif->bif_ifp->if_xname,
    790  1.13    itojun 		    sizeof(breq.ifbr_ifsname));
    791   1.1   thorpej 		breq.ifbr_ifsflags = bif->bif_flags;
    792   1.1   thorpej 		breq.ifbr_state = bif->bif_state;
    793   1.1   thorpej 		breq.ifbr_priority = bif->bif_priority;
    794  1.11    bouyer 		breq.ifbr_path_cost = bif->bif_path_cost;
    795   1.1   thorpej 		breq.ifbr_portno = bif->bif_ifp->if_index & 0xff;
    796   1.1   thorpej 		error = copyout(&breq, bifc->ifbic_req + count, sizeof(breq));
    797   1.1   thorpej 		if (error)
    798   1.1   thorpej 			break;
    799   1.1   thorpej 		count++;
    800   1.1   thorpej 		len -= sizeof(breq);
    801   1.1   thorpej 	}
    802   1.1   thorpej 
    803   1.1   thorpej 	bifc->ifbic_len = sizeof(breq) * count;
    804   1.1   thorpej 	return (error);
    805   1.1   thorpej }
    806   1.1   thorpej 
    807  1.33   thorpej static int
    808   1.1   thorpej bridge_ioctl_rts(struct bridge_softc *sc, void *arg)
    809   1.1   thorpej {
    810   1.1   thorpej 	struct ifbaconf *bac = arg;
    811   1.1   thorpej 	struct bridge_rtnode *brt;
    812   1.1   thorpej 	struct ifbareq bareq;
    813   1.1   thorpej 	int count = 0, error = 0, len;
    814   1.1   thorpej 
    815   1.1   thorpej 	if (bac->ifbac_len == 0)
    816   1.1   thorpej 		return (0);
    817   1.1   thorpej 
    818   1.1   thorpej 	len = bac->ifbac_len;
    819   1.1   thorpej 	LIST_FOREACH(brt, &sc->sc_rtlist, brt_list) {
    820   1.1   thorpej 		if (len < sizeof(bareq))
    821   1.1   thorpej 			goto out;
    822  1.35  christos 		memset(&bareq, 0, sizeof(bareq));
    823  1.13    itojun 		strlcpy(bareq.ifba_ifsname, brt->brt_ifp->if_xname,
    824  1.13    itojun 		    sizeof(bareq.ifba_ifsname));
    825   1.1   thorpej 		memcpy(bareq.ifba_dst, brt->brt_addr, sizeof(brt->brt_addr));
    826  1.39    kardel 		if ((brt->brt_flags & IFBAF_TYPEMASK) == IFBAF_DYNAMIC) {
    827  1.39    kardel 			bareq.ifba_expire = brt->brt_expire - time_uptime;
    828  1.39    kardel 		} else
    829   1.2   thorpej 			bareq.ifba_expire = 0;
    830   1.1   thorpej 		bareq.ifba_flags = brt->brt_flags;
    831   1.1   thorpej 
    832   1.1   thorpej 		error = copyout(&bareq, bac->ifbac_req + count, sizeof(bareq));
    833   1.1   thorpej 		if (error)
    834   1.1   thorpej 			goto out;
    835   1.1   thorpej 		count++;
    836   1.1   thorpej 		len -= sizeof(bareq);
    837   1.1   thorpej 	}
    838   1.1   thorpej  out:
    839   1.1   thorpej 	bac->ifbac_len = sizeof(bareq) * count;
    840   1.1   thorpej 	return (error);
    841   1.1   thorpej }
    842   1.1   thorpej 
    843  1.33   thorpej static int
    844   1.1   thorpej bridge_ioctl_saddr(struct bridge_softc *sc, void *arg)
    845   1.1   thorpej {
    846   1.1   thorpej 	struct ifbareq *req = arg;
    847   1.1   thorpej 	struct bridge_iflist *bif;
    848   1.1   thorpej 	int error;
    849   1.1   thorpej 
    850   1.1   thorpej 	bif = bridge_lookup_member(sc, req->ifba_ifsname);
    851   1.1   thorpej 	if (bif == NULL)
    852   1.1   thorpej 		return (ENOENT);
    853   1.1   thorpej 
    854   1.1   thorpej 	error = bridge_rtupdate(sc, req->ifba_dst, bif->bif_ifp, 1,
    855   1.1   thorpej 	    req->ifba_flags);
    856   1.1   thorpej 
    857   1.1   thorpej 	return (error);
    858   1.1   thorpej }
    859   1.1   thorpej 
    860  1.33   thorpej static int
    861   1.1   thorpej bridge_ioctl_sto(struct bridge_softc *sc, void *arg)
    862   1.1   thorpej {
    863   1.1   thorpej 	struct ifbrparam *param = arg;
    864   1.1   thorpej 
    865   1.1   thorpej 	sc->sc_brttimeout = param->ifbrp_ctime;
    866   1.1   thorpej 
    867   1.1   thorpej 	return (0);
    868   1.1   thorpej }
    869   1.1   thorpej 
    870  1.33   thorpej static int
    871   1.1   thorpej bridge_ioctl_gto(struct bridge_softc *sc, void *arg)
    872   1.1   thorpej {
    873   1.1   thorpej 	struct ifbrparam *param = arg;
    874   1.1   thorpej 
    875   1.1   thorpej 	param->ifbrp_ctime = sc->sc_brttimeout;
    876   1.1   thorpej 
    877   1.1   thorpej 	return (0);
    878   1.1   thorpej }
    879   1.1   thorpej 
    880  1.33   thorpej static int
    881   1.1   thorpej bridge_ioctl_daddr(struct bridge_softc *sc, void *arg)
    882   1.1   thorpej {
    883   1.1   thorpej 	struct ifbareq *req = arg;
    884   1.1   thorpej 
    885   1.1   thorpej 	return (bridge_rtdaddr(sc, req->ifba_dst));
    886   1.1   thorpej }
    887   1.1   thorpej 
    888  1.33   thorpej static int
    889   1.1   thorpej bridge_ioctl_flush(struct bridge_softc *sc, void *arg)
    890   1.1   thorpej {
    891   1.1   thorpej 	struct ifbreq *req = arg;
    892   1.1   thorpej 
    893   1.1   thorpej 	bridge_rtflush(sc, req->ifbr_ifsflags);
    894   1.1   thorpej 
    895   1.1   thorpej 	return (0);
    896   1.1   thorpej }
    897   1.1   thorpej 
    898  1.33   thorpej static int
    899   1.1   thorpej bridge_ioctl_gpri(struct bridge_softc *sc, void *arg)
    900   1.1   thorpej {
    901   1.1   thorpej 	struct ifbrparam *param = arg;
    902   1.1   thorpej 
    903   1.1   thorpej 	param->ifbrp_prio = sc->sc_bridge_priority;
    904   1.1   thorpej 
    905   1.1   thorpej 	return (0);
    906   1.1   thorpej }
    907   1.1   thorpej 
    908  1.33   thorpej static int
    909   1.1   thorpej bridge_ioctl_spri(struct bridge_softc *sc, void *arg)
    910   1.1   thorpej {
    911   1.1   thorpej 	struct ifbrparam *param = arg;
    912   1.1   thorpej 
    913   1.1   thorpej 	sc->sc_bridge_priority = param->ifbrp_prio;
    914   1.1   thorpej 
    915   1.1   thorpej 	if (sc->sc_if.if_flags & IFF_RUNNING)
    916   1.1   thorpej 		bstp_initialization(sc);
    917   1.1   thorpej 
    918   1.1   thorpej 	return (0);
    919   1.1   thorpej }
    920   1.1   thorpej 
    921  1.33   thorpej static int
    922   1.1   thorpej bridge_ioctl_ght(struct bridge_softc *sc, void *arg)
    923   1.1   thorpej {
    924   1.1   thorpej 	struct ifbrparam *param = arg;
    925   1.1   thorpej 
    926   1.1   thorpej 	param->ifbrp_hellotime = sc->sc_bridge_hello_time >> 8;
    927   1.1   thorpej 
    928   1.1   thorpej 	return (0);
    929   1.1   thorpej }
    930   1.1   thorpej 
    931  1.33   thorpej static int
    932   1.1   thorpej bridge_ioctl_sht(struct bridge_softc *sc, void *arg)
    933   1.1   thorpej {
    934   1.1   thorpej 	struct ifbrparam *param = arg;
    935   1.1   thorpej 
    936   1.1   thorpej 	if (param->ifbrp_hellotime == 0)
    937   1.1   thorpej 		return (EINVAL);
    938   1.1   thorpej 	sc->sc_bridge_hello_time = param->ifbrp_hellotime << 8;
    939   1.1   thorpej 
    940   1.1   thorpej 	if (sc->sc_if.if_flags & IFF_RUNNING)
    941   1.1   thorpej 		bstp_initialization(sc);
    942   1.1   thorpej 
    943   1.1   thorpej 	return (0);
    944   1.1   thorpej }
    945   1.1   thorpej 
    946  1.33   thorpej static int
    947   1.1   thorpej bridge_ioctl_gfd(struct bridge_softc *sc, void *arg)
    948   1.1   thorpej {
    949   1.1   thorpej 	struct ifbrparam *param = arg;
    950   1.1   thorpej 
    951   1.1   thorpej 	param->ifbrp_fwddelay = sc->sc_bridge_forward_delay >> 8;
    952   1.1   thorpej 
    953   1.1   thorpej 	return (0);
    954   1.1   thorpej }
    955   1.1   thorpej 
    956  1.33   thorpej static int
    957   1.1   thorpej bridge_ioctl_sfd(struct bridge_softc *sc, void *arg)
    958   1.1   thorpej {
    959  1.29     perry 	struct ifbrparam *param = arg;
    960   1.1   thorpej 
    961   1.1   thorpej 	if (param->ifbrp_fwddelay == 0)
    962   1.1   thorpej 		return (EINVAL);
    963   1.1   thorpej 	sc->sc_bridge_forward_delay = param->ifbrp_fwddelay << 8;
    964   1.1   thorpej 
    965   1.1   thorpej 	if (sc->sc_if.if_flags & IFF_RUNNING)
    966   1.1   thorpej 		bstp_initialization(sc);
    967   1.1   thorpej 
    968   1.1   thorpej 	return (0);
    969   1.1   thorpej }
    970   1.1   thorpej 
    971  1.33   thorpej static int
    972   1.1   thorpej bridge_ioctl_gma(struct bridge_softc *sc, void *arg)
    973   1.1   thorpej {
    974   1.1   thorpej 	struct ifbrparam *param = arg;
    975   1.1   thorpej 
    976   1.1   thorpej 	param->ifbrp_maxage = sc->sc_bridge_max_age >> 8;
    977   1.1   thorpej 
    978   1.1   thorpej 	return (0);
    979   1.1   thorpej }
    980   1.1   thorpej 
    981  1.33   thorpej static int
    982   1.1   thorpej bridge_ioctl_sma(struct bridge_softc *sc, void *arg)
    983   1.1   thorpej {
    984   1.1   thorpej 	struct ifbrparam *param = arg;
    985   1.1   thorpej 
    986   1.1   thorpej 	if (param->ifbrp_maxage == 0)
    987   1.1   thorpej 		return (EINVAL);
    988   1.1   thorpej 	sc->sc_bridge_max_age = param->ifbrp_maxage << 8;
    989   1.1   thorpej 
    990   1.1   thorpej 	if (sc->sc_if.if_flags & IFF_RUNNING)
    991   1.1   thorpej 		bstp_initialization(sc);
    992   1.1   thorpej 
    993   1.1   thorpej 	return (0);
    994   1.1   thorpej }
    995   1.1   thorpej 
    996  1.33   thorpej static int
    997   1.1   thorpej bridge_ioctl_sifprio(struct bridge_softc *sc, void *arg)
    998   1.1   thorpej {
    999   1.1   thorpej 	struct ifbreq *req = arg;
   1000   1.1   thorpej 	struct bridge_iflist *bif;
   1001   1.1   thorpej 
   1002   1.1   thorpej 	bif = bridge_lookup_member(sc, req->ifbr_ifsname);
   1003   1.1   thorpej 	if (bif == NULL)
   1004   1.1   thorpej 		return (ENOENT);
   1005   1.1   thorpej 
   1006   1.1   thorpej 	bif->bif_priority = req->ifbr_priority;
   1007   1.1   thorpej 
   1008   1.1   thorpej 	if (sc->sc_if.if_flags & IFF_RUNNING)
   1009   1.1   thorpej 		bstp_initialization(sc);
   1010   1.1   thorpej 
   1011   1.1   thorpej 	return (0);
   1012   1.1   thorpej }
   1013   1.1   thorpej 
   1014  1.25  christos #if defined(BRIDGE_IPF) && defined(PFIL_HOOKS)
   1015  1.33   thorpej static int
   1016   1.9  perseant bridge_ioctl_gfilt(struct bridge_softc *sc, void *arg)
   1017   1.9  perseant {
   1018   1.9  perseant 	struct ifbrparam *param = arg;
   1019   1.9  perseant 
   1020   1.9  perseant 	param->ifbrp_filter = sc->sc_filter_flags;
   1021   1.9  perseant 
   1022   1.9  perseant 	return (0);
   1023   1.9  perseant }
   1024   1.9  perseant 
   1025  1.33   thorpej static int
   1026   1.9  perseant bridge_ioctl_sfilt(struct bridge_softc *sc, void *arg)
   1027   1.9  perseant {
   1028  1.29     perry 	struct ifbrparam *param = arg;
   1029   1.9  perseant 	uint32_t nflags, oflags;
   1030   1.9  perseant 
   1031   1.9  perseant 	if (param->ifbrp_filter & ~IFBF_FILT_MASK)
   1032   1.9  perseant 		return (EINVAL);
   1033   1.9  perseant 
   1034   1.9  perseant 	nflags = param->ifbrp_filter;
   1035   1.9  perseant 	oflags = sc->sc_filter_flags;
   1036   1.9  perseant 
   1037   1.9  perseant 	if ((nflags & IFBF_FILT_USEIPF) && !(oflags & IFBF_FILT_USEIPF)) {
   1038   1.9  perseant 		pfil_add_hook((void *)bridge_ipf, NULL, PFIL_IN|PFIL_OUT,
   1039   1.9  perseant 			&sc->sc_if.if_pfil);
   1040   1.9  perseant 	}
   1041   1.9  perseant 	if (!(nflags & IFBF_FILT_USEIPF) && (oflags & IFBF_FILT_USEIPF)) {
   1042   1.9  perseant 		pfil_remove_hook((void *)bridge_ipf, NULL, PFIL_IN|PFIL_OUT,
   1043   1.9  perseant 			&sc->sc_if.if_pfil);
   1044   1.9  perseant 	}
   1045   1.9  perseant 
   1046   1.9  perseant 	sc->sc_filter_flags = nflags;
   1047   1.9  perseant 
   1048   1.9  perseant 	return (0);
   1049   1.9  perseant }
   1050  1.25  christos #endif /* BRIDGE_IPF && PFIL_HOOKS */
   1051   1.9  perseant 
   1052  1.33   thorpej static int
   1053  1.11    bouyer bridge_ioctl_sifcost(struct bridge_softc *sc, void *arg)
   1054  1.11    bouyer {
   1055  1.11    bouyer 	struct ifbreq *req = arg;
   1056  1.11    bouyer 	struct bridge_iflist *bif;
   1057  1.11    bouyer 
   1058  1.11    bouyer 	bif = bridge_lookup_member(sc, req->ifbr_ifsname);
   1059  1.11    bouyer 	if (bif == NULL)
   1060  1.11    bouyer 		return (ENOENT);
   1061  1.11    bouyer 
   1062  1.11    bouyer 	bif->bif_path_cost = req->ifbr_path_cost;
   1063  1.11    bouyer 
   1064  1.11    bouyer 	if (sc->sc_if.if_flags & IFF_RUNNING)
   1065  1.11    bouyer 		bstp_initialization(sc);
   1066  1.11    bouyer 
   1067  1.11    bouyer 	return (0);
   1068  1.11    bouyer }
   1069  1.11    bouyer 
   1070   1.1   thorpej /*
   1071   1.1   thorpej  * bridge_ifdetach:
   1072   1.1   thorpej  *
   1073   1.1   thorpej  *	Detach an interface from a bridge.  Called when a member
   1074   1.1   thorpej  *	interface is detaching.
   1075   1.1   thorpej  */
   1076   1.1   thorpej void
   1077   1.1   thorpej bridge_ifdetach(struct ifnet *ifp)
   1078   1.1   thorpej {
   1079   1.1   thorpej 	struct bridge_softc *sc = ifp->if_bridge;
   1080   1.1   thorpej 	struct ifbreq breq;
   1081   1.1   thorpej 
   1082   1.1   thorpej 	memset(&breq, 0, sizeof(breq));
   1083  1.24    itojun 	snprintf(breq.ifbr_ifsname, sizeof(breq.ifbr_ifsname), ifp->if_xname);
   1084   1.1   thorpej 
   1085   1.1   thorpej 	(void) bridge_ioctl_del(sc, &breq);
   1086   1.1   thorpej }
   1087   1.1   thorpej 
   1088   1.1   thorpej /*
   1089   1.1   thorpej  * bridge_init:
   1090   1.1   thorpej  *
   1091   1.1   thorpej  *	Initialize a bridge interface.
   1092   1.1   thorpej  */
   1093  1.33   thorpej static int
   1094   1.1   thorpej bridge_init(struct ifnet *ifp)
   1095   1.1   thorpej {
   1096   1.1   thorpej 	struct bridge_softc *sc = ifp->if_softc;
   1097   1.1   thorpej 
   1098   1.1   thorpej 	if (ifp->if_flags & IFF_RUNNING)
   1099   1.1   thorpej 		return (0);
   1100   1.1   thorpej 
   1101   1.1   thorpej 	callout_reset(&sc->sc_brcallout, bridge_rtable_prune_period * hz,
   1102   1.1   thorpej 	    bridge_timer, sc);
   1103   1.1   thorpej 
   1104   1.1   thorpej 	ifp->if_flags |= IFF_RUNNING;
   1105  1.11    bouyer 	bstp_initialization(sc);
   1106   1.1   thorpej 	return (0);
   1107   1.1   thorpej }
   1108   1.1   thorpej 
   1109   1.1   thorpej /*
   1110   1.1   thorpej  * bridge_stop:
   1111   1.1   thorpej  *
   1112   1.1   thorpej  *	Stop the bridge interface.
   1113   1.1   thorpej  */
   1114  1.33   thorpej static void
   1115  1.45  christos bridge_stop(struct ifnet *ifp, int disable)
   1116   1.1   thorpej {
   1117   1.1   thorpej 	struct bridge_softc *sc = ifp->if_softc;
   1118   1.1   thorpej 
   1119   1.1   thorpej 	if ((ifp->if_flags & IFF_RUNNING) == 0)
   1120   1.1   thorpej 		return;
   1121   1.1   thorpej 
   1122   1.1   thorpej 	callout_stop(&sc->sc_brcallout);
   1123   1.1   thorpej 	bstp_stop(sc);
   1124   1.1   thorpej 
   1125   1.1   thorpej 	IF_PURGE(&ifp->if_snd);
   1126   1.1   thorpej 
   1127   1.1   thorpej 	bridge_rtflush(sc, IFBF_FLUSHDYN);
   1128   1.1   thorpej 
   1129   1.1   thorpej 	ifp->if_flags &= ~IFF_RUNNING;
   1130   1.1   thorpej }
   1131   1.1   thorpej 
   1132   1.1   thorpej /*
   1133   1.1   thorpej  * bridge_enqueue:
   1134   1.1   thorpej  *
   1135   1.1   thorpej  *	Enqueue a packet on a bridge member interface.
   1136   1.1   thorpej  *
   1137   1.1   thorpej  *	NOTE: must be called at splnet().
   1138   1.1   thorpej  */
   1139  1.33   thorpej void
   1140  1.18       jdc bridge_enqueue(struct bridge_softc *sc, struct ifnet *dst_ifp, struct mbuf *m,
   1141  1.18       jdc     int runfilt)
   1142   1.1   thorpej {
   1143   1.1   thorpej 	ALTQ_DECL(struct altq_pktattr pktattr;)
   1144   1.1   thorpej 	int len, error;
   1145   1.1   thorpej 	short mflags;
   1146   1.1   thorpej 
   1147  1.26       bad 	/*
   1148  1.26       bad 	 * Clear any in-bound checksum flags for this packet.
   1149  1.26       bad 	 */
   1150  1.26       bad 	m->m_pkthdr.csum_flags = 0;
   1151  1.26       bad 
   1152   1.9  perseant #ifdef PFIL_HOOKS
   1153  1.18       jdc 	if (runfilt) {
   1154  1.22       jdc 		if (pfil_run_hooks(&sc->sc_if.if_pfil, &m,
   1155  1.22       jdc 		    dst_ifp, PFIL_OUT) != 0) {
   1156  1.22       jdc 			if (m != NULL)
   1157  1.22       jdc 				m_freem(m);
   1158  1.18       jdc 			return;
   1159  1.18       jdc 		}
   1160  1.22       jdc 		if (m == NULL)
   1161  1.22       jdc 			return;
   1162   1.9  perseant 	}
   1163   1.9  perseant #endif /* PFIL_HOOKS */
   1164   1.9  perseant 
   1165   1.1   thorpej #ifdef ALTQ
   1166   1.1   thorpej 	/*
   1167   1.1   thorpej 	 * If ALTQ is enabled on the member interface, do
   1168   1.1   thorpej 	 * classification; the queueing discipline might
   1169   1.1   thorpej 	 * not require classification, but might require
   1170   1.1   thorpej 	 * the address family/header pointer in the pktattr.
   1171   1.1   thorpej 	 */
   1172   1.1   thorpej 	if (ALTQ_IS_ENABLED(&dst_ifp->if_snd)) {
   1173   1.1   thorpej 		/* XXX IFT_ETHER */
   1174   1.1   thorpej 		altq_etherclassify(&dst_ifp->if_snd, m, &pktattr);
   1175   1.1   thorpej 	}
   1176   1.1   thorpej #endif /* ALTQ */
   1177   1.1   thorpej 
   1178   1.1   thorpej 	len = m->m_pkthdr.len;
   1179  1.28       kim 	m->m_flags |= M_PROTO1;
   1180   1.1   thorpej 	mflags = m->m_flags;
   1181   1.1   thorpej 	IFQ_ENQUEUE(&dst_ifp->if_snd, m, &pktattr, error);
   1182   1.1   thorpej 	if (error) {
   1183   1.1   thorpej 		/* mbuf is already freed */
   1184   1.1   thorpej 		sc->sc_if.if_oerrors++;
   1185   1.1   thorpej 		return;
   1186   1.1   thorpej 	}
   1187   1.1   thorpej 
   1188   1.1   thorpej 	sc->sc_if.if_opackets++;
   1189   1.1   thorpej 	sc->sc_if.if_obytes += len;
   1190   1.1   thorpej 
   1191   1.1   thorpej 	dst_ifp->if_obytes += len;
   1192   1.1   thorpej 
   1193   1.1   thorpej 	if (mflags & M_MCAST) {
   1194   1.1   thorpej 		sc->sc_if.if_omcasts++;
   1195   1.1   thorpej 		dst_ifp->if_omcasts++;
   1196   1.1   thorpej 	}
   1197   1.1   thorpej 
   1198   1.1   thorpej 	if ((dst_ifp->if_flags & IFF_OACTIVE) == 0)
   1199   1.1   thorpej 		(*dst_ifp->if_start)(dst_ifp);
   1200   1.1   thorpej }
   1201   1.1   thorpej 
   1202   1.1   thorpej /*
   1203   1.1   thorpej  * bridge_output:
   1204   1.1   thorpej  *
   1205   1.1   thorpej  *	Send output from a bridge member interface.  This
   1206   1.1   thorpej  *	performs the bridging function for locally originated
   1207   1.1   thorpej  *	packets.
   1208   1.1   thorpej  *
   1209   1.1   thorpej  *	The mbuf has the Ethernet header already attached.  We must
   1210   1.1   thorpej  *	enqueue or free the mbuf before returning.
   1211   1.1   thorpej  */
   1212   1.1   thorpej int
   1213  1.48    dyoung bridge_output(struct ifnet *ifp, struct mbuf *m, const struct sockaddr *sa,
   1214  1.45  christos     struct rtentry *rt)
   1215   1.1   thorpej {
   1216   1.1   thorpej 	struct ether_header *eh;
   1217   1.1   thorpej 	struct ifnet *dst_if;
   1218   1.1   thorpej 	struct bridge_softc *sc;
   1219   1.1   thorpej 	int s;
   1220   1.1   thorpej 
   1221   1.1   thorpej 	if (m->m_len < ETHER_HDR_LEN) {
   1222   1.1   thorpej 		m = m_pullup(m, ETHER_HDR_LEN);
   1223   1.1   thorpej 		if (m == NULL)
   1224   1.1   thorpej 			return (0);
   1225   1.1   thorpej 	}
   1226   1.1   thorpej 
   1227   1.1   thorpej 	eh = mtod(m, struct ether_header *);
   1228   1.1   thorpej 	sc = ifp->if_bridge;
   1229   1.1   thorpej 
   1230   1.1   thorpej 	s = splnet();
   1231   1.1   thorpej 
   1232   1.1   thorpej 	/*
   1233   1.1   thorpej 	 * If bridge is down, but the original output interface is up,
   1234   1.1   thorpej 	 * go ahead and send out that interface.  Otherwise, the packet
   1235   1.1   thorpej 	 * is dropped below.
   1236   1.1   thorpej 	 */
   1237   1.1   thorpej 	if ((sc->sc_if.if_flags & IFF_RUNNING) == 0) {
   1238   1.1   thorpej 		dst_if = ifp;
   1239   1.1   thorpej 		goto sendunicast;
   1240   1.1   thorpej 	}
   1241   1.1   thorpej 
   1242   1.1   thorpej 	/*
   1243   1.1   thorpej 	 * If the packet is a multicast, or we don't know a better way to
   1244   1.1   thorpej 	 * get there, send to all interfaces.
   1245   1.1   thorpej 	 */
   1246   1.1   thorpej 	if (ETHER_IS_MULTICAST(eh->ether_dhost))
   1247   1.1   thorpej 		dst_if = NULL;
   1248   1.1   thorpej 	else
   1249   1.1   thorpej 		dst_if = bridge_rtlookup(sc, eh->ether_dhost);
   1250   1.1   thorpej 	if (dst_if == NULL) {
   1251   1.1   thorpej 		struct bridge_iflist *bif;
   1252   1.1   thorpej 		struct mbuf *mc;
   1253   1.1   thorpej 		int used = 0;
   1254   1.1   thorpej 
   1255   1.1   thorpej 		LIST_FOREACH(bif, &sc->sc_iflist, bif_next) {
   1256   1.1   thorpej 			dst_if = bif->bif_ifp;
   1257   1.1   thorpej 			if ((dst_if->if_flags & IFF_RUNNING) == 0)
   1258   1.1   thorpej 				continue;
   1259   1.1   thorpej 
   1260   1.1   thorpej 			/*
   1261   1.1   thorpej 			 * If this is not the original output interface,
   1262   1.1   thorpej 			 * and the interface is participating in spanning
   1263   1.1   thorpej 			 * tree, make sure the port is in a state that
   1264   1.1   thorpej 			 * allows forwarding.
   1265   1.1   thorpej 			 */
   1266   1.1   thorpej 			if (dst_if != ifp &&
   1267   1.1   thorpej 			    (bif->bif_flags & IFBIF_STP) != 0) {
   1268   1.1   thorpej 				switch (bif->bif_state) {
   1269   1.1   thorpej 				case BSTP_IFSTATE_BLOCKING:
   1270   1.1   thorpej 				case BSTP_IFSTATE_LISTENING:
   1271   1.1   thorpej 				case BSTP_IFSTATE_DISABLED:
   1272   1.1   thorpej 					continue;
   1273   1.1   thorpej 				}
   1274   1.1   thorpej 			}
   1275   1.1   thorpej 
   1276   1.1   thorpej 			if (LIST_NEXT(bif, bif_next) == NULL) {
   1277   1.1   thorpej 				used = 1;
   1278   1.1   thorpej 				mc = m;
   1279   1.1   thorpej 			} else {
   1280   1.1   thorpej 				mc = m_copym(m, 0, M_COPYALL, M_NOWAIT);
   1281   1.1   thorpej 				if (mc == NULL) {
   1282   1.1   thorpej 					sc->sc_if.if_oerrors++;
   1283   1.1   thorpej 					continue;
   1284   1.1   thorpej 				}
   1285   1.1   thorpej 			}
   1286   1.1   thorpej 
   1287  1.18       jdc 			bridge_enqueue(sc, dst_if, mc, 0);
   1288   1.1   thorpej 		}
   1289   1.1   thorpej 		if (used == 0)
   1290   1.1   thorpej 			m_freem(m);
   1291   1.1   thorpej 		splx(s);
   1292   1.1   thorpej 		return (0);
   1293   1.1   thorpej 	}
   1294   1.1   thorpej 
   1295   1.1   thorpej  sendunicast:
   1296   1.1   thorpej 	/*
   1297   1.1   thorpej 	 * XXX Spanning tree consideration here?
   1298   1.1   thorpej 	 */
   1299   1.1   thorpej 
   1300   1.1   thorpej 	if ((dst_if->if_flags & IFF_RUNNING) == 0) {
   1301   1.1   thorpej 		m_freem(m);
   1302   1.1   thorpej 		splx(s);
   1303   1.1   thorpej 		return (0);
   1304   1.1   thorpej 	}
   1305   1.1   thorpej 
   1306  1.18       jdc 	bridge_enqueue(sc, dst_if, m, 0);
   1307   1.1   thorpej 
   1308   1.1   thorpej 	splx(s);
   1309   1.1   thorpej 	return (0);
   1310   1.1   thorpej }
   1311   1.1   thorpej 
   1312   1.1   thorpej /*
   1313   1.1   thorpej  * bridge_start:
   1314   1.1   thorpej  *
   1315   1.1   thorpej  *	Start output on a bridge.
   1316   1.1   thorpej  *
   1317   1.1   thorpej  *	NOTE: This routine should never be called in this implementation.
   1318   1.1   thorpej  */
   1319  1.33   thorpej static void
   1320   1.1   thorpej bridge_start(struct ifnet *ifp)
   1321   1.1   thorpej {
   1322   1.1   thorpej 
   1323   1.1   thorpej 	printf("%s: bridge_start() called\n", ifp->if_xname);
   1324   1.1   thorpej }
   1325   1.1   thorpej 
   1326   1.1   thorpej /*
   1327   1.1   thorpej  * bridge_forward:
   1328   1.1   thorpej  *
   1329  1.21  augustss  *	The forwarding function of the bridge.
   1330   1.1   thorpej  */
   1331  1.33   thorpej static void
   1332  1.65    bouyer bridge_forward(void *v)
   1333   1.1   thorpej {
   1334  1.65    bouyer 	struct bridge_softc *sc = v;
   1335  1.65    bouyer 	struct mbuf *m;
   1336   1.1   thorpej 	struct bridge_iflist *bif;
   1337   1.1   thorpej 	struct ifnet *src_if, *dst_if;
   1338   1.1   thorpej 	struct ether_header *eh;
   1339  1.65    bouyer 	int s;
   1340   1.1   thorpej 
   1341  1.66    bouyer 	mutex_enter(softnet_lock);
   1342  1.66    bouyer 	if ((sc->sc_if.if_flags & IFF_RUNNING) == 0) {
   1343  1.66    bouyer 		mutex_exit(softnet_lock);
   1344  1.65    bouyer 		return;
   1345  1.66    bouyer 	}
   1346   1.1   thorpej 
   1347  1.66    bouyer 	s = splnet();
   1348  1.65    bouyer 	while (1) {
   1349  1.65    bouyer 		IFQ_POLL(&sc->sc_if.if_snd, m);
   1350  1.65    bouyer 		if (m == NULL)
   1351  1.65    bouyer 			break;
   1352  1.65    bouyer 		IFQ_DEQUEUE(&sc->sc_if.if_snd, m);
   1353   1.1   thorpej 
   1354  1.65    bouyer 		src_if = m->m_pkthdr.rcvif;
   1355  1.65    bouyer 
   1356  1.65    bouyer 		sc->sc_if.if_ipackets++;
   1357  1.65    bouyer 		sc->sc_if.if_ibytes += m->m_pkthdr.len;
   1358   1.1   thorpej 
   1359  1.65    bouyer 		/*
   1360  1.65    bouyer 		 * Look up the bridge_iflist.
   1361  1.65    bouyer 		 */
   1362  1.65    bouyer 		bif = bridge_lookup_member_if(sc, src_if);
   1363  1.65    bouyer 		if (bif == NULL) {
   1364  1.65    bouyer 			/* Interface is not a bridge member (anymore?) */
   1365   1.1   thorpej 			m_freem(m);
   1366  1.65    bouyer 			continue;
   1367  1.65    bouyer 		}
   1368  1.65    bouyer 
   1369  1.65    bouyer 		if (bif->bif_flags & IFBIF_STP) {
   1370  1.65    bouyer 			switch (bif->bif_state) {
   1371  1.65    bouyer 			case BSTP_IFSTATE_BLOCKING:
   1372  1.65    bouyer 			case BSTP_IFSTATE_LISTENING:
   1373  1.65    bouyer 			case BSTP_IFSTATE_DISABLED:
   1374  1.65    bouyer 				m_freem(m);
   1375  1.65    bouyer 				continue;
   1376  1.65    bouyer 			}
   1377   1.1   thorpej 		}
   1378   1.1   thorpej 
   1379  1.65    bouyer 		eh = mtod(m, struct ether_header *);
   1380   1.1   thorpej 
   1381  1.65    bouyer 		/*
   1382  1.65    bouyer 		 * If the interface is learning, and the source
   1383  1.65    bouyer 		 * address is valid and not multicast, record
   1384  1.65    bouyer 		 * the address.
   1385  1.65    bouyer 		 */
   1386  1.65    bouyer 		if ((bif->bif_flags & IFBIF_LEARNING) != 0 &&
   1387  1.65    bouyer 		    ETHER_IS_MULTICAST(eh->ether_shost) == 0 &&
   1388  1.65    bouyer 		    (eh->ether_shost[0] == 0 &&
   1389  1.65    bouyer 		     eh->ether_shost[1] == 0 &&
   1390  1.65    bouyer 		     eh->ether_shost[2] == 0 &&
   1391  1.65    bouyer 		     eh->ether_shost[3] == 0 &&
   1392  1.65    bouyer 		     eh->ether_shost[4] == 0 &&
   1393  1.65    bouyer 		     eh->ether_shost[5] == 0) == 0) {
   1394  1.65    bouyer 			(void) bridge_rtupdate(sc, eh->ether_shost,
   1395  1.65    bouyer 			    src_if, 0, IFBAF_DYNAMIC);
   1396  1.65    bouyer 		}
   1397   1.1   thorpej 
   1398  1.65    bouyer 		if ((bif->bif_flags & IFBIF_STP) != 0 &&
   1399  1.65    bouyer 		    bif->bif_state == BSTP_IFSTATE_LEARNING) {
   1400  1.65    bouyer 			m_freem(m);
   1401  1.65    bouyer 			continue;
   1402  1.65    bouyer 		}
   1403   1.1   thorpej 
   1404  1.65    bouyer 		/*
   1405  1.65    bouyer 		 * At this point, the port either doesn't participate
   1406  1.65    bouyer 		 * in spanning tree or it is in the forwarding state.
   1407  1.65    bouyer 		 */
   1408   1.1   thorpej 
   1409  1.65    bouyer 		/*
   1410  1.65    bouyer 		 * If the packet is unicast, destined for someone on
   1411  1.65    bouyer 		 * "this" side of the bridge, drop it.
   1412  1.65    bouyer 		 */
   1413  1.65    bouyer 		if ((m->m_flags & (M_BCAST|M_MCAST)) == 0) {
   1414  1.65    bouyer 			dst_if = bridge_rtlookup(sc, eh->ether_dhost);
   1415  1.65    bouyer 			if (src_if == dst_if) {
   1416  1.65    bouyer 				m_freem(m);
   1417  1.65    bouyer 				continue;
   1418  1.65    bouyer 			}
   1419  1.65    bouyer 		} else {
   1420  1.65    bouyer 			/* ...forward it to all interfaces. */
   1421  1.65    bouyer 			sc->sc_if.if_imcasts++;
   1422  1.65    bouyer 			dst_if = NULL;
   1423   1.1   thorpej 		}
   1424   1.1   thorpej 
   1425   1.9  perseant #ifdef PFIL_HOOKS
   1426  1.65    bouyer 		if (pfil_run_hooks(&sc->sc_if.if_pfil, &m,
   1427  1.65    bouyer 		    m->m_pkthdr.rcvif, PFIL_IN) != 0) {
   1428  1.65    bouyer 			if (m != NULL)
   1429  1.65    bouyer 				m_freem(m);
   1430  1.65    bouyer 			continue;
   1431  1.65    bouyer 		}
   1432  1.65    bouyer 		if (m == NULL)
   1433  1.65    bouyer 			continue;
   1434   1.9  perseant #endif /* PFIL_HOOKS */
   1435   1.9  perseant 
   1436  1.65    bouyer 		if (dst_if == NULL) {
   1437  1.65    bouyer 			bridge_broadcast(sc, src_if, m);
   1438  1.65    bouyer 			continue;
   1439  1.65    bouyer 		}
   1440   1.1   thorpej 
   1441  1.65    bouyer 		/*
   1442  1.65    bouyer 		 * At this point, we're dealing with a unicast frame
   1443  1.65    bouyer 		 * going to a different interface.
   1444  1.65    bouyer 		 */
   1445  1.65    bouyer 		if ((dst_if->if_flags & IFF_RUNNING) == 0) {
   1446  1.65    bouyer 			m_freem(m);
   1447  1.65    bouyer 			continue;
   1448  1.65    bouyer 		}
   1449  1.65    bouyer 		bif = bridge_lookup_member_if(sc, dst_if);
   1450  1.65    bouyer 		if (bif == NULL) {
   1451  1.65    bouyer 			/* Not a member of the bridge (anymore?) */
   1452  1.65    bouyer 			m_freem(m);
   1453  1.65    bouyer 			continue;
   1454  1.65    bouyer 		}
   1455   1.1   thorpej 
   1456  1.65    bouyer 		if (bif->bif_flags & IFBIF_STP) {
   1457  1.65    bouyer 			switch (bif->bif_state) {
   1458  1.65    bouyer 			case BSTP_IFSTATE_DISABLED:
   1459  1.65    bouyer 			case BSTP_IFSTATE_BLOCKING:
   1460  1.65    bouyer 				m_freem(m);
   1461  1.65    bouyer 				continue;
   1462  1.65    bouyer 			}
   1463   1.1   thorpej 		}
   1464  1.65    bouyer 
   1465  1.65    bouyer 		bridge_enqueue(sc, dst_if, m, 1);
   1466   1.1   thorpej 	}
   1467  1.65    bouyer 	splx(s);
   1468  1.66    bouyer 	mutex_exit(softnet_lock);
   1469   1.1   thorpej }
   1470   1.1   thorpej 
   1471   1.1   thorpej /*
   1472   1.1   thorpej  * bridge_input:
   1473   1.1   thorpej  *
   1474   1.1   thorpej  *	Receive input from a member interface.  Queue the packet for
   1475   1.1   thorpej  *	bridging if it is not for us.
   1476  1.67    bouyer  *	should be called at splnet()
   1477   1.1   thorpej  */
   1478   1.1   thorpej struct mbuf *
   1479   1.1   thorpej bridge_input(struct ifnet *ifp, struct mbuf *m)
   1480   1.1   thorpej {
   1481   1.1   thorpej 	struct bridge_softc *sc = ifp->if_bridge;
   1482   1.1   thorpej 	struct bridge_iflist *bif;
   1483   1.1   thorpej 	struct ether_header *eh;
   1484   1.1   thorpej 	struct mbuf *mc;
   1485   1.1   thorpej 
   1486   1.1   thorpej 	if ((sc->sc_if.if_flags & IFF_RUNNING) == 0)
   1487   1.1   thorpej 		return (m);
   1488   1.1   thorpej 
   1489   1.8    martin 	bif = bridge_lookup_member_if(sc, ifp);
   1490   1.1   thorpej 	if (bif == NULL)
   1491   1.1   thorpej 		return (m);
   1492   1.1   thorpej 
   1493   1.1   thorpej 	eh = mtod(m, struct ether_header *);
   1494   1.1   thorpej 
   1495   1.1   thorpej 	if (m->m_flags & (M_BCAST|M_MCAST)) {
   1496  1.64       mrg 		if (bif->bif_flags & IFBIF_STP) {
   1497  1.64       mrg 			/* Tap off 802.1D packets; they do not get forwarded. */
   1498  1.64       mrg 			if (memcmp(eh->ether_dhost, bstp_etheraddr,
   1499  1.64       mrg 			    ETHER_ADDR_LEN) == 0) {
   1500  1.64       mrg 				m = bstp_input(sc, bif, m);
   1501  1.64       mrg 				if (m == NULL)
   1502  1.64       mrg 					return (NULL);
   1503  1.64       mrg 			}
   1504   1.1   thorpej 
   1505   1.1   thorpej 			switch (bif->bif_state) {
   1506   1.1   thorpej 			case BSTP_IFSTATE_BLOCKING:
   1507   1.1   thorpej 			case BSTP_IFSTATE_LISTENING:
   1508   1.1   thorpej 			case BSTP_IFSTATE_DISABLED:
   1509   1.1   thorpej 				return (m);
   1510   1.1   thorpej 			}
   1511   1.1   thorpej 		}
   1512   1.1   thorpej 
   1513   1.1   thorpej 		/*
   1514   1.1   thorpej 		 * Make a deep copy of the packet and enqueue the copy
   1515   1.1   thorpej 		 * for bridge processing; return the original packet for
   1516   1.1   thorpej 		 * local processing.
   1517   1.1   thorpej 		 */
   1518  1.65    bouyer 		if (IF_QFULL(&sc->sc_if.if_snd)) {
   1519  1.65    bouyer 			IF_DROP(&sc->sc_if.if_snd);
   1520  1.65    bouyer 			return (m);
   1521  1.65    bouyer 		}
   1522   1.1   thorpej 		mc = m_dup(m, 0, M_COPYALL, M_NOWAIT);
   1523   1.1   thorpej 		if (mc == NULL)
   1524   1.1   thorpej 			return (m);
   1525   1.1   thorpej 
   1526   1.1   thorpej 		/* Perform the bridge forwarding function with the copy. */
   1527  1.65    bouyer 		IF_ENQUEUE(&sc->sc_if.if_snd, mc);
   1528  1.65    bouyer 		softint_schedule(sc->sc_softintr);
   1529   1.1   thorpej 
   1530   1.1   thorpej 		/* Return the original packet for local processing. */
   1531   1.1   thorpej 		return (m);
   1532   1.1   thorpej 	}
   1533   1.1   thorpej 
   1534   1.1   thorpej 	if (bif->bif_flags & IFBIF_STP) {
   1535   1.1   thorpej 		switch (bif->bif_state) {
   1536   1.1   thorpej 		case BSTP_IFSTATE_BLOCKING:
   1537   1.1   thorpej 		case BSTP_IFSTATE_LISTENING:
   1538   1.1   thorpej 		case BSTP_IFSTATE_DISABLED:
   1539   1.1   thorpej 			return (m);
   1540   1.1   thorpej 		}
   1541   1.1   thorpej 	}
   1542   1.1   thorpej 
   1543   1.1   thorpej 	/*
   1544   1.1   thorpej 	 * Unicast.  Make sure it's not for us.
   1545   1.1   thorpej 	 */
   1546   1.1   thorpej 	LIST_FOREACH(bif, &sc->sc_iflist, bif_next) {
   1547   1.1   thorpej 		/* It is destined for us. */
   1548  1.54    dyoung 		if (memcmp(CLLADDR(bif->bif_ifp->if_sadl), eh->ether_dhost,
   1549  1.38  liamjfoy 		    ETHER_ADDR_LEN) == 0
   1550  1.38  liamjfoy #if NCARP > 0
   1551  1.38  liamjfoy 		    || (bif->bif_ifp->if_carp && carp_ourether(bif->bif_ifp->if_carp,
   1552  1.38  liamjfoy 			eh, IFT_ETHER, 0) != NULL)
   1553  1.38  liamjfoy #endif /* NCARP > 0 */
   1554  1.38  liamjfoy 		    ) {
   1555   1.1   thorpej 			if (bif->bif_flags & IFBIF_LEARNING)
   1556   1.1   thorpej 				(void) bridge_rtupdate(sc,
   1557   1.1   thorpej 				    eh->ether_shost, ifp, 0, IFBAF_DYNAMIC);
   1558   1.1   thorpej 			m->m_pkthdr.rcvif = bif->bif_ifp;
   1559   1.1   thorpej 			return (m);
   1560   1.1   thorpej 		}
   1561   1.1   thorpej 
   1562   1.1   thorpej 		/* We just received a packet that we sent out. */
   1563  1.53    dyoung 		if (memcmp(CLLADDR(bif->bif_ifp->if_sadl), eh->ether_shost,
   1564  1.38  liamjfoy 		    ETHER_ADDR_LEN) == 0
   1565  1.38  liamjfoy #if NCARP > 0
   1566  1.38  liamjfoy 		    || (bif->bif_ifp->if_carp && carp_ourether(bif->bif_ifp->if_carp,
   1567  1.38  liamjfoy 			eh, IFT_ETHER, 1) != NULL)
   1568  1.38  liamjfoy #endif /* NCARP > 0 */
   1569  1.38  liamjfoy 		    ) {
   1570   1.1   thorpej 			m_freem(m);
   1571   1.1   thorpej 			return (NULL);
   1572   1.1   thorpej 		}
   1573   1.1   thorpej 	}
   1574   1.1   thorpej 
   1575   1.1   thorpej 	/* Perform the bridge forwarding function. */
   1576  1.65    bouyer 	if (IF_QFULL(&sc->sc_if.if_snd)) {
   1577  1.65    bouyer 		IF_DROP(&sc->sc_if.if_snd);
   1578  1.65    bouyer 		m_freem(m);
   1579  1.65    bouyer 		return (NULL);
   1580  1.65    bouyer 	}
   1581  1.65    bouyer 	IF_ENQUEUE(&sc->sc_if.if_snd, m);
   1582  1.65    bouyer 	softint_schedule(sc->sc_softintr);
   1583   1.1   thorpej 
   1584   1.1   thorpej 	return (NULL);
   1585   1.1   thorpej }
   1586   1.1   thorpej 
   1587   1.1   thorpej /*
   1588   1.1   thorpej  * bridge_broadcast:
   1589   1.1   thorpej  *
   1590   1.1   thorpej  *	Send a frame to all interfaces that are members of
   1591   1.1   thorpej  *	the bridge, except for the one on which the packet
   1592   1.1   thorpej  *	arrived.
   1593   1.1   thorpej  */
   1594  1.33   thorpej static void
   1595   1.1   thorpej bridge_broadcast(struct bridge_softc *sc, struct ifnet *src_if,
   1596   1.1   thorpej     struct mbuf *m)
   1597   1.1   thorpej {
   1598   1.1   thorpej 	struct bridge_iflist *bif;
   1599   1.1   thorpej 	struct mbuf *mc;
   1600   1.1   thorpej 	struct ifnet *dst_if;
   1601   1.1   thorpej 	int used = 0;
   1602   1.1   thorpej 
   1603   1.1   thorpej 	LIST_FOREACH(bif, &sc->sc_iflist, bif_next) {
   1604   1.1   thorpej 		dst_if = bif->bif_ifp;
   1605   1.1   thorpej 		if (dst_if == src_if)
   1606   1.1   thorpej 			continue;
   1607   1.1   thorpej 
   1608   1.1   thorpej 		if (bif->bif_flags & IFBIF_STP) {
   1609   1.1   thorpej 			switch (bif->bif_state) {
   1610   1.1   thorpej 			case BSTP_IFSTATE_BLOCKING:
   1611   1.1   thorpej 			case BSTP_IFSTATE_DISABLED:
   1612   1.1   thorpej 				continue;
   1613   1.1   thorpej 			}
   1614   1.1   thorpej 		}
   1615   1.1   thorpej 
   1616   1.1   thorpej 		if ((bif->bif_flags & IFBIF_DISCOVER) == 0 &&
   1617   1.1   thorpej 		    (m->m_flags & (M_BCAST|M_MCAST)) == 0)
   1618   1.1   thorpej 			continue;
   1619   1.1   thorpej 
   1620   1.1   thorpej 		if ((dst_if->if_flags & IFF_RUNNING) == 0)
   1621   1.1   thorpej 			continue;
   1622   1.1   thorpej 
   1623   1.1   thorpej 		if (LIST_NEXT(bif, bif_next) == NULL) {
   1624   1.1   thorpej 			mc = m;
   1625   1.1   thorpej 			used = 1;
   1626   1.1   thorpej 		} else {
   1627   1.1   thorpej 			mc = m_copym(m, 0, M_COPYALL, M_DONTWAIT);
   1628   1.1   thorpej 			if (mc == NULL) {
   1629   1.1   thorpej 				sc->sc_if.if_oerrors++;
   1630   1.1   thorpej 				continue;
   1631   1.1   thorpej 			}
   1632   1.1   thorpej 		}
   1633   1.1   thorpej 
   1634  1.18       jdc 		bridge_enqueue(sc, dst_if, mc, 1);
   1635   1.1   thorpej 	}
   1636   1.1   thorpej 	if (used == 0)
   1637   1.1   thorpej 		m_freem(m);
   1638   1.1   thorpej }
   1639   1.1   thorpej 
   1640   1.1   thorpej /*
   1641   1.1   thorpej  * bridge_rtupdate:
   1642   1.1   thorpej  *
   1643   1.1   thorpej  *	Add a bridge routing entry.
   1644   1.1   thorpej  */
   1645  1.33   thorpej static int
   1646   1.1   thorpej bridge_rtupdate(struct bridge_softc *sc, const uint8_t *dst,
   1647   1.1   thorpej     struct ifnet *dst_if, int setflags, uint8_t flags)
   1648   1.1   thorpej {
   1649   1.1   thorpej 	struct bridge_rtnode *brt;
   1650  1.41       tls 	int error, s;
   1651   1.1   thorpej 
   1652   1.1   thorpej 	/*
   1653   1.1   thorpej 	 * A route for this destination might already exist.  If so,
   1654   1.1   thorpej 	 * update it, otherwise create a new one.
   1655   1.1   thorpej 	 */
   1656   1.1   thorpej 	if ((brt = bridge_rtnode_lookup(sc, dst)) == NULL) {
   1657   1.1   thorpej 		if (sc->sc_brtcnt >= sc->sc_brtmax)
   1658   1.1   thorpej 			return (ENOSPC);
   1659   1.1   thorpej 
   1660   1.1   thorpej 		/*
   1661   1.1   thorpej 		 * Allocate a new bridge forwarding node, and
   1662   1.1   thorpej 		 * initialize the expiration time and Ethernet
   1663   1.1   thorpej 		 * address.
   1664   1.1   thorpej 		 */
   1665  1.41       tls 		s = splnet();
   1666   1.1   thorpej 		brt = pool_get(&bridge_rtnode_pool, PR_NOWAIT);
   1667  1.41       tls 		splx(s);
   1668   1.1   thorpej 		if (brt == NULL)
   1669   1.1   thorpej 			return (ENOMEM);
   1670   1.1   thorpej 
   1671   1.1   thorpej 		memset(brt, 0, sizeof(*brt));
   1672  1.39    kardel 		brt->brt_expire = time_uptime + sc->sc_brttimeout;
   1673   1.1   thorpej 		brt->brt_flags = IFBAF_DYNAMIC;
   1674   1.1   thorpej 		memcpy(brt->brt_addr, dst, ETHER_ADDR_LEN);
   1675   1.1   thorpej 
   1676   1.1   thorpej 		if ((error = bridge_rtnode_insert(sc, brt)) != 0) {
   1677  1.41       tls 			s = splnet();
   1678   1.1   thorpej 			pool_put(&bridge_rtnode_pool, brt);
   1679  1.41       tls 			splx(s);
   1680   1.1   thorpej 			return (error);
   1681   1.1   thorpej 		}
   1682   1.1   thorpej 	}
   1683   1.1   thorpej 
   1684   1.1   thorpej 	brt->brt_ifp = dst_if;
   1685   1.1   thorpej 	if (setflags) {
   1686   1.1   thorpej 		brt->brt_flags = flags;
   1687  1.39    kardel 		if (flags & IFBAF_STATIC)
   1688  1.39    kardel 			brt->brt_expire = 0;
   1689  1.39    kardel 		else
   1690  1.39    kardel 			brt->brt_expire = time_uptime + sc->sc_brttimeout;
   1691   1.1   thorpej 	}
   1692   1.1   thorpej 
   1693   1.1   thorpej 	return (0);
   1694   1.1   thorpej }
   1695   1.1   thorpej 
   1696   1.1   thorpej /*
   1697   1.1   thorpej  * bridge_rtlookup:
   1698   1.1   thorpej  *
   1699   1.1   thorpej  *	Lookup the destination interface for an address.
   1700   1.1   thorpej  */
   1701  1.33   thorpej static struct ifnet *
   1702   1.1   thorpej bridge_rtlookup(struct bridge_softc *sc, const uint8_t *addr)
   1703   1.1   thorpej {
   1704   1.1   thorpej 	struct bridge_rtnode *brt;
   1705   1.1   thorpej 
   1706   1.1   thorpej 	if ((brt = bridge_rtnode_lookup(sc, addr)) == NULL)
   1707   1.1   thorpej 		return (NULL);
   1708   1.1   thorpej 
   1709   1.1   thorpej 	return (brt->brt_ifp);
   1710   1.1   thorpej }
   1711   1.1   thorpej 
   1712   1.1   thorpej /*
   1713   1.1   thorpej  * bridge_rttrim:
   1714   1.1   thorpej  *
   1715   1.1   thorpej  *	Trim the routine table so that we have a number
   1716   1.1   thorpej  *	of routing entries less than or equal to the
   1717   1.1   thorpej  *	maximum number.
   1718   1.1   thorpej  */
   1719  1.33   thorpej static void
   1720   1.1   thorpej bridge_rttrim(struct bridge_softc *sc)
   1721   1.1   thorpej {
   1722   1.1   thorpej 	struct bridge_rtnode *brt, *nbrt;
   1723   1.1   thorpej 
   1724   1.1   thorpej 	/* Make sure we actually need to do this. */
   1725   1.1   thorpej 	if (sc->sc_brtcnt <= sc->sc_brtmax)
   1726   1.1   thorpej 		return;
   1727   1.1   thorpej 
   1728   1.1   thorpej 	/* Force an aging cycle; this might trim enough addresses. */
   1729   1.1   thorpej 	bridge_rtage(sc);
   1730   1.1   thorpej 	if (sc->sc_brtcnt <= sc->sc_brtmax)
   1731   1.1   thorpej 		return;
   1732   1.1   thorpej 
   1733   1.1   thorpej 	for (brt = LIST_FIRST(&sc->sc_rtlist); brt != NULL; brt = nbrt) {
   1734   1.1   thorpej 		nbrt = LIST_NEXT(brt, brt_list);
   1735   1.1   thorpej 		if ((brt->brt_flags & IFBAF_TYPEMASK) == IFBAF_DYNAMIC) {
   1736   1.1   thorpej 			bridge_rtnode_destroy(sc, brt);
   1737   1.1   thorpej 			if (sc->sc_brtcnt <= sc->sc_brtmax)
   1738   1.1   thorpej 				return;
   1739   1.1   thorpej 		}
   1740   1.1   thorpej 	}
   1741   1.1   thorpej }
   1742   1.1   thorpej 
   1743   1.1   thorpej /*
   1744   1.1   thorpej  * bridge_timer:
   1745   1.1   thorpej  *
   1746   1.1   thorpej  *	Aging timer for the bridge.
   1747   1.1   thorpej  */
   1748  1.33   thorpej static void
   1749   1.1   thorpej bridge_timer(void *arg)
   1750   1.1   thorpej {
   1751   1.1   thorpej 	struct bridge_softc *sc = arg;
   1752   1.1   thorpej 	int s;
   1753   1.1   thorpej 
   1754   1.1   thorpej 	s = splnet();
   1755   1.1   thorpej 	bridge_rtage(sc);
   1756   1.1   thorpej 	splx(s);
   1757   1.1   thorpej 
   1758   1.1   thorpej 	if (sc->sc_if.if_flags & IFF_RUNNING)
   1759   1.1   thorpej 		callout_reset(&sc->sc_brcallout,
   1760   1.1   thorpej 		    bridge_rtable_prune_period * hz, bridge_timer, sc);
   1761   1.1   thorpej }
   1762   1.1   thorpej 
   1763   1.1   thorpej /*
   1764   1.1   thorpej  * bridge_rtage:
   1765   1.1   thorpej  *
   1766   1.1   thorpej  *	Perform an aging cycle.
   1767   1.1   thorpej  */
   1768  1.33   thorpej static void
   1769   1.1   thorpej bridge_rtage(struct bridge_softc *sc)
   1770   1.1   thorpej {
   1771   1.1   thorpej 	struct bridge_rtnode *brt, *nbrt;
   1772   1.1   thorpej 
   1773   1.1   thorpej 	for (brt = LIST_FIRST(&sc->sc_rtlist); brt != NULL; brt = nbrt) {
   1774   1.1   thorpej 		nbrt = LIST_NEXT(brt, brt_list);
   1775   1.1   thorpej 		if ((brt->brt_flags & IFBAF_TYPEMASK) == IFBAF_DYNAMIC) {
   1776  1.39    kardel 			if (time_uptime >= brt->brt_expire)
   1777   1.1   thorpej 				bridge_rtnode_destroy(sc, brt);
   1778   1.1   thorpej 		}
   1779   1.1   thorpej 	}
   1780   1.1   thorpej }
   1781   1.1   thorpej 
   1782   1.1   thorpej /*
   1783   1.1   thorpej  * bridge_rtflush:
   1784   1.1   thorpej  *
   1785   1.1   thorpej  *	Remove all dynamic addresses from the bridge.
   1786   1.1   thorpej  */
   1787  1.33   thorpej static void
   1788   1.1   thorpej bridge_rtflush(struct bridge_softc *sc, int full)
   1789   1.1   thorpej {
   1790   1.1   thorpej 	struct bridge_rtnode *brt, *nbrt;
   1791   1.1   thorpej 
   1792   1.1   thorpej 	for (brt = LIST_FIRST(&sc->sc_rtlist); brt != NULL; brt = nbrt) {
   1793   1.1   thorpej 		nbrt = LIST_NEXT(brt, brt_list);
   1794   1.1   thorpej 		if (full || (brt->brt_flags & IFBAF_TYPEMASK) == IFBAF_DYNAMIC)
   1795   1.1   thorpej 			bridge_rtnode_destroy(sc, brt);
   1796   1.1   thorpej 	}
   1797   1.1   thorpej }
   1798   1.1   thorpej 
   1799   1.1   thorpej /*
   1800   1.1   thorpej  * bridge_rtdaddr:
   1801   1.1   thorpej  *
   1802   1.1   thorpej  *	Remove an address from the table.
   1803   1.1   thorpej  */
   1804  1.33   thorpej static int
   1805   1.1   thorpej bridge_rtdaddr(struct bridge_softc *sc, const uint8_t *addr)
   1806   1.1   thorpej {
   1807   1.1   thorpej 	struct bridge_rtnode *brt;
   1808   1.1   thorpej 
   1809   1.1   thorpej 	if ((brt = bridge_rtnode_lookup(sc, addr)) == NULL)
   1810   1.1   thorpej 		return (ENOENT);
   1811   1.1   thorpej 
   1812   1.1   thorpej 	bridge_rtnode_destroy(sc, brt);
   1813   1.1   thorpej 	return (0);
   1814   1.1   thorpej }
   1815   1.1   thorpej 
   1816   1.1   thorpej /*
   1817   1.1   thorpej  * bridge_rtdelete:
   1818   1.1   thorpej  *
   1819   1.1   thorpej  *	Delete routes to a speicifc member interface.
   1820   1.1   thorpej  */
   1821  1.33   thorpej static void
   1822   1.1   thorpej bridge_rtdelete(struct bridge_softc *sc, struct ifnet *ifp)
   1823   1.1   thorpej {
   1824   1.1   thorpej 	struct bridge_rtnode *brt, *nbrt;
   1825   1.1   thorpej 
   1826   1.1   thorpej 	for (brt = LIST_FIRST(&sc->sc_rtlist); brt != NULL; brt = nbrt) {
   1827   1.1   thorpej 		nbrt = LIST_NEXT(brt, brt_list);
   1828   1.1   thorpej 		if (brt->brt_ifp == ifp)
   1829   1.1   thorpej 			bridge_rtnode_destroy(sc, brt);
   1830   1.1   thorpej 	}
   1831   1.1   thorpej }
   1832   1.1   thorpej 
   1833   1.1   thorpej /*
   1834   1.1   thorpej  * bridge_rtable_init:
   1835   1.1   thorpej  *
   1836   1.1   thorpej  *	Initialize the route table for this bridge.
   1837   1.1   thorpej  */
   1838  1.33   thorpej static int
   1839   1.1   thorpej bridge_rtable_init(struct bridge_softc *sc)
   1840   1.1   thorpej {
   1841   1.1   thorpej 	int i;
   1842   1.1   thorpej 
   1843   1.1   thorpej 	sc->sc_rthash = malloc(sizeof(*sc->sc_rthash) * BRIDGE_RTHASH_SIZE,
   1844   1.1   thorpej 	    M_DEVBUF, M_NOWAIT);
   1845   1.1   thorpej 	if (sc->sc_rthash == NULL)
   1846   1.1   thorpej 		return (ENOMEM);
   1847   1.1   thorpej 
   1848   1.1   thorpej 	for (i = 0; i < BRIDGE_RTHASH_SIZE; i++)
   1849   1.1   thorpej 		LIST_INIT(&sc->sc_rthash[i]);
   1850   1.1   thorpej 
   1851  1.12    itojun 	sc->sc_rthash_key = arc4random();
   1852   1.1   thorpej 
   1853   1.1   thorpej 	LIST_INIT(&sc->sc_rtlist);
   1854   1.1   thorpej 
   1855   1.1   thorpej 	return (0);
   1856   1.1   thorpej }
   1857   1.1   thorpej 
   1858   1.1   thorpej /*
   1859   1.1   thorpej  * bridge_rtable_fini:
   1860   1.1   thorpej  *
   1861   1.1   thorpej  *	Deconstruct the route table for this bridge.
   1862   1.1   thorpej  */
   1863  1.33   thorpej static void
   1864   1.1   thorpej bridge_rtable_fini(struct bridge_softc *sc)
   1865   1.1   thorpej {
   1866   1.1   thorpej 
   1867   1.1   thorpej 	free(sc->sc_rthash, M_DEVBUF);
   1868   1.1   thorpej }
   1869   1.1   thorpej 
   1870   1.1   thorpej /*
   1871   1.1   thorpej  * The following hash function is adapted from "Hash Functions" by Bob Jenkins
   1872   1.1   thorpej  * ("Algorithm Alley", Dr. Dobbs Journal, September 1997).
   1873   1.1   thorpej  */
   1874   1.1   thorpej #define	mix(a, b, c)							\
   1875   1.1   thorpej do {									\
   1876   1.1   thorpej 	a -= b; a -= c; a ^= (c >> 13);					\
   1877   1.1   thorpej 	b -= c; b -= a; b ^= (a << 8);					\
   1878   1.1   thorpej 	c -= a; c -= b; c ^= (b >> 13);					\
   1879   1.1   thorpej 	a -= b; a -= c; a ^= (c >> 12);					\
   1880   1.1   thorpej 	b -= c; b -= a; b ^= (a << 16);					\
   1881   1.1   thorpej 	c -= a; c -= b; c ^= (b >> 5);					\
   1882   1.1   thorpej 	a -= b; a -= c; a ^= (c >> 3);					\
   1883   1.1   thorpej 	b -= c; b -= a; b ^= (a << 10);					\
   1884   1.1   thorpej 	c -= a; c -= b; c ^= (b >> 15);					\
   1885   1.1   thorpej } while (/*CONSTCOND*/0)
   1886   1.1   thorpej 
   1887  1.34     perry static inline uint32_t
   1888   1.1   thorpej bridge_rthash(struct bridge_softc *sc, const uint8_t *addr)
   1889   1.1   thorpej {
   1890   1.1   thorpej 	uint32_t a = 0x9e3779b9, b = 0x9e3779b9, c = sc->sc_rthash_key;
   1891   1.1   thorpej 
   1892   1.1   thorpej 	b += addr[5] << 8;
   1893   1.1   thorpej 	b += addr[4];
   1894   1.1   thorpej 	a += addr[3] << 24;
   1895   1.1   thorpej 	a += addr[2] << 16;
   1896   1.1   thorpej 	a += addr[1] << 8;
   1897   1.1   thorpej 	a += addr[0];
   1898   1.1   thorpej 
   1899   1.1   thorpej 	mix(a, b, c);
   1900   1.1   thorpej 
   1901   1.1   thorpej 	return (c & BRIDGE_RTHASH_MASK);
   1902   1.1   thorpej }
   1903   1.1   thorpej 
   1904   1.1   thorpej #undef mix
   1905   1.1   thorpej 
   1906   1.1   thorpej /*
   1907   1.1   thorpej  * bridge_rtnode_lookup:
   1908   1.1   thorpej  *
   1909   1.1   thorpej  *	Look up a bridge route node for the specified destination.
   1910   1.1   thorpej  */
   1911  1.33   thorpej static struct bridge_rtnode *
   1912   1.1   thorpej bridge_rtnode_lookup(struct bridge_softc *sc, const uint8_t *addr)
   1913   1.1   thorpej {
   1914   1.1   thorpej 	struct bridge_rtnode *brt;
   1915   1.1   thorpej 	uint32_t hash;
   1916   1.1   thorpej 	int dir;
   1917   1.1   thorpej 
   1918   1.1   thorpej 	hash = bridge_rthash(sc, addr);
   1919   1.1   thorpej 	LIST_FOREACH(brt, &sc->sc_rthash[hash], brt_hash) {
   1920   1.1   thorpej 		dir = memcmp(addr, brt->brt_addr, ETHER_ADDR_LEN);
   1921   1.1   thorpej 		if (dir == 0)
   1922   1.1   thorpej 			return (brt);
   1923   1.1   thorpej 		if (dir > 0)
   1924   1.1   thorpej 			return (NULL);
   1925   1.1   thorpej 	}
   1926   1.1   thorpej 
   1927   1.1   thorpej 	return (NULL);
   1928   1.1   thorpej }
   1929   1.1   thorpej 
   1930   1.1   thorpej /*
   1931   1.1   thorpej  * bridge_rtnode_insert:
   1932   1.1   thorpej  *
   1933   1.1   thorpej  *	Insert the specified bridge node into the route table.  We
   1934   1.1   thorpej  *	assume the entry is not already in the table.
   1935   1.1   thorpej  */
   1936  1.33   thorpej static int
   1937   1.1   thorpej bridge_rtnode_insert(struct bridge_softc *sc, struct bridge_rtnode *brt)
   1938   1.1   thorpej {
   1939   1.1   thorpej 	struct bridge_rtnode *lbrt;
   1940   1.1   thorpej 	uint32_t hash;
   1941   1.1   thorpej 	int dir;
   1942   1.1   thorpej 
   1943   1.1   thorpej 	hash = bridge_rthash(sc, brt->brt_addr);
   1944   1.1   thorpej 
   1945   1.1   thorpej 	lbrt = LIST_FIRST(&sc->sc_rthash[hash]);
   1946   1.1   thorpej 	if (lbrt == NULL) {
   1947   1.1   thorpej 		LIST_INSERT_HEAD(&sc->sc_rthash[hash], brt, brt_hash);
   1948   1.1   thorpej 		goto out;
   1949   1.1   thorpej 	}
   1950   1.1   thorpej 
   1951   1.1   thorpej 	do {
   1952   1.1   thorpej 		dir = memcmp(brt->brt_addr, lbrt->brt_addr, ETHER_ADDR_LEN);
   1953   1.1   thorpej 		if (dir == 0)
   1954   1.1   thorpej 			return (EEXIST);
   1955   1.1   thorpej 		if (dir > 0) {
   1956   1.1   thorpej 			LIST_INSERT_BEFORE(lbrt, brt, brt_hash);
   1957   1.1   thorpej 			goto out;
   1958   1.1   thorpej 		}
   1959   1.1   thorpej 		if (LIST_NEXT(lbrt, brt_hash) == NULL) {
   1960   1.1   thorpej 			LIST_INSERT_AFTER(lbrt, brt, brt_hash);
   1961   1.1   thorpej 			goto out;
   1962   1.1   thorpej 		}
   1963   1.1   thorpej 		lbrt = LIST_NEXT(lbrt, brt_hash);
   1964   1.1   thorpej 	} while (lbrt != NULL);
   1965   1.1   thorpej 
   1966   1.1   thorpej #ifdef DIAGNOSTIC
   1967   1.1   thorpej 	panic("bridge_rtnode_insert: impossible");
   1968   1.1   thorpej #endif
   1969   1.1   thorpej 
   1970   1.1   thorpej  out:
   1971   1.1   thorpej 	LIST_INSERT_HEAD(&sc->sc_rtlist, brt, brt_list);
   1972   1.1   thorpej 	sc->sc_brtcnt++;
   1973   1.1   thorpej 
   1974   1.1   thorpej 	return (0);
   1975   1.1   thorpej }
   1976   1.1   thorpej 
   1977   1.1   thorpej /*
   1978   1.1   thorpej  * bridge_rtnode_destroy:
   1979   1.1   thorpej  *
   1980   1.1   thorpej  *	Destroy a bridge rtnode.
   1981   1.1   thorpej  */
   1982  1.33   thorpej static void
   1983   1.1   thorpej bridge_rtnode_destroy(struct bridge_softc *sc, struct bridge_rtnode *brt)
   1984   1.1   thorpej {
   1985  1.41       tls 	int s = splnet();
   1986   1.1   thorpej 
   1987   1.1   thorpej 	LIST_REMOVE(brt, brt_hash);
   1988   1.1   thorpej 
   1989   1.1   thorpej 	LIST_REMOVE(brt, brt_list);
   1990   1.1   thorpej 	sc->sc_brtcnt--;
   1991   1.1   thorpej 	pool_put(&bridge_rtnode_pool, brt);
   1992  1.41       tls 
   1993  1.41       tls 	splx(s);
   1994   1.1   thorpej }
   1995   1.9  perseant 
   1996  1.25  christos #if defined(BRIDGE_IPF) && defined(PFIL_HOOKS)
   1997   1.9  perseant extern struct pfil_head inet_pfil_hook;                 /* XXX */
   1998   1.9  perseant extern struct pfil_head inet6_pfil_hook;                /* XXX */
   1999   1.9  perseant 
   2000   1.9  perseant /*
   2001   1.9  perseant  * Send bridge packets through IPF if they are one of the types IPF can deal
   2002   1.9  perseant  * with, or if they are ARP or REVARP.  (IPF will pass ARP and REVARP without
   2003   1.9  perseant  * question.)
   2004   1.9  perseant  */
   2005  1.33   thorpej static int
   2006  1.45  christos bridge_ipf(void *arg, struct mbuf **mp, struct ifnet *ifp, int dir)
   2007   1.9  perseant {
   2008  1.22       jdc 	int snap, error;
   2009  1.22       jdc 	struct ether_header *eh1, eh2;
   2010  1.31       jdc 	struct llc llc1;
   2011  1.56      matt 	uint16_t ether_type;
   2012   1.9  perseant 
   2013   1.9  perseant 	snap = 0;
   2014  1.22       jdc 	error = -1;	/* Default error if not error == 0 */
   2015  1.22       jdc 	eh1 = mtod(*mp, struct ether_header *);
   2016  1.22       jdc 	ether_type = ntohs(eh1->ether_type);
   2017   1.9  perseant 
   2018   1.9  perseant 	/*
   2019   1.9  perseant 	 * Check for SNAP/LLC.
   2020   1.9  perseant 	 */
   2021  1.29     perry         if (ether_type < ETHERMTU) {
   2022  1.31       jdc                 struct llc *llc2 = (struct llc *)(eh1 + 1);
   2023  1.29     perry 
   2024   1.9  perseant                 if ((*mp)->m_len >= ETHER_HDR_LEN + 8 &&
   2025  1.31       jdc                     llc2->llc_dsap == LLC_SNAP_LSAP &&
   2026  1.31       jdc                     llc2->llc_ssap == LLC_SNAP_LSAP &&
   2027  1.31       jdc                     llc2->llc_control == LLC_UI) {
   2028  1.31       jdc                 	ether_type = htons(llc2->llc_un.type_snap.ether_type);
   2029   1.9  perseant 			snap = 1;
   2030   1.9  perseant                 }
   2031  1.29     perry         }
   2032   1.9  perseant 
   2033   1.9  perseant 	/*
   2034   1.9  perseant 	 * If we're trying to filter bridge traffic, don't look at anything
   2035   1.9  perseant 	 * other than IP and ARP traffic.  If the filter doesn't understand
   2036   1.9  perseant 	 * IPv6, don't allow IPv6 through the bridge either.  This is lame
   2037   1.9  perseant 	 * since if we really wanted, say, an AppleTalk filter, we are hosed,
   2038   1.9  perseant 	 * but of course we don't have an AppleTalk filter to begin with.
   2039   1.9  perseant 	 * (Note that since IPF doesn't understand ARP it will pass *ALL*
   2040   1.9  perseant 	 * ARP traffic.)
   2041   1.9  perseant 	 */
   2042   1.9  perseant 	switch (ether_type) {
   2043   1.9  perseant 		case ETHERTYPE_ARP:
   2044   1.9  perseant 		case ETHERTYPE_REVARP:
   2045   1.9  perseant 			return 0; /* Automatically pass */
   2046   1.9  perseant 		case ETHERTYPE_IP:
   2047   1.9  perseant # ifdef INET6
   2048   1.9  perseant 		case ETHERTYPE_IPV6:
   2049   1.9  perseant # endif /* INET6 */
   2050   1.9  perseant 			break;
   2051   1.9  perseant 		default:
   2052   1.9  perseant 			goto bad;
   2053   1.9  perseant 	}
   2054   1.9  perseant 
   2055  1.22       jdc 	/* Strip off the Ethernet header and keep a copy. */
   2056  1.50  christos 	m_copydata(*mp, 0, ETHER_HDR_LEN, (void *) &eh2);
   2057  1.22       jdc 	m_adj(*mp, ETHER_HDR_LEN);
   2058  1.22       jdc 
   2059   1.9  perseant 	/* Strip off snap header, if present */
   2060   1.9  perseant 	if (snap) {
   2061  1.50  christos 		m_copydata(*mp, 0, sizeof(struct llc), (void *) &llc1);
   2062  1.22       jdc 		m_adj(*mp, sizeof(struct llc));
   2063  1.19  christos 	}
   2064   1.9  perseant 
   2065   1.9  perseant 	/*
   2066  1.22       jdc 	 * Check basic packet sanity and run IPF through pfil.
   2067   1.9  perseant 	 */
   2068  1.65    bouyer 	KASSERT(!cpu_intr_p());
   2069  1.22       jdc 	switch (ether_type)
   2070  1.22       jdc 	{
   2071  1.22       jdc 	case ETHERTYPE_IP :
   2072  1.22       jdc 		error = (dir == PFIL_IN) ? bridge_ip_checkbasic(mp) : 0;
   2073  1.22       jdc 		if (error == 0)
   2074  1.22       jdc 			error = pfil_run_hooks(&inet_pfil_hook, mp, ifp, dir);
   2075  1.22       jdc 		break;
   2076   1.9  perseant # ifdef INET6
   2077  1.22       jdc 	case ETHERTYPE_IPV6 :
   2078  1.22       jdc 		error = (dir == PFIL_IN) ? bridge_ip6_checkbasic(mp) : 0;
   2079  1.22       jdc 		if (error == 0)
   2080  1.22       jdc 			error = pfil_run_hooks(&inet6_pfil_hook, mp, ifp, dir);
   2081  1.22       jdc 		break;
   2082  1.22       jdc # endif
   2083  1.22       jdc 	default :
   2084  1.22       jdc 		error = 0;
   2085  1.22       jdc 		break;
   2086   1.9  perseant 	}
   2087  1.22       jdc 
   2088  1.22       jdc 	if (*mp == NULL)
   2089  1.22       jdc 		return error;
   2090  1.22       jdc 	if (error != 0)
   2091  1.22       jdc 		goto bad;
   2092  1.22       jdc 
   2093  1.22       jdc 	error = -1;
   2094   1.9  perseant 
   2095   1.9  perseant 	/*
   2096   1.9  perseant 	 * Finally, put everything back the way it was and return
   2097   1.9  perseant 	 */
   2098  1.18       jdc 	if (snap) {
   2099  1.22       jdc 		M_PREPEND(*mp, sizeof(struct llc), M_DONTWAIT);
   2100  1.22       jdc 		if (*mp == NULL)
   2101  1.22       jdc 			return error;
   2102  1.50  christos 		bcopy(&llc1, mtod(*mp, void *), sizeof(struct llc));
   2103  1.18       jdc 	}
   2104  1.18       jdc 
   2105  1.22       jdc 	M_PREPEND(*mp, ETHER_HDR_LEN, M_DONTWAIT);
   2106  1.22       jdc 	if (*mp == NULL)
   2107  1.22       jdc 		return error;
   2108  1.50  christos 	bcopy(&eh2, mtod(*mp, void *), ETHER_HDR_LEN);
   2109  1.22       jdc 
   2110   1.9  perseant 	return 0;
   2111   1.9  perseant 
   2112   1.9  perseant     bad:
   2113   1.9  perseant 	m_freem(*mp);
   2114   1.9  perseant 	*mp = NULL;
   2115   1.9  perseant 	return error;
   2116   1.9  perseant }
   2117   1.9  perseant 
   2118   1.9  perseant /*
   2119   1.9  perseant  * Perform basic checks on header size since
   2120   1.9  perseant  * IPF assumes ip_input has already processed
   2121   1.9  perseant  * it for it.  Cut-and-pasted from ip_input.c.
   2122   1.9  perseant  * Given how simple the IPv6 version is,
   2123   1.9  perseant  * does the IPv4 version really need to be
   2124   1.9  perseant  * this complicated?
   2125   1.9  perseant  *
   2126   1.9  perseant  * XXX Should we update ipstat here, or not?
   2127   1.9  perseant  * XXX Right now we update ipstat but not
   2128   1.9  perseant  * XXX csum_counter.
   2129   1.9  perseant  */
   2130   1.9  perseant static int
   2131   1.9  perseant bridge_ip_checkbasic(struct mbuf **mp)
   2132   1.9  perseant {
   2133   1.9  perseant 	struct mbuf *m = *mp;
   2134   1.9  perseant 	struct ip *ip;
   2135   1.9  perseant 	int len, hlen;
   2136   1.9  perseant 
   2137   1.9  perseant 	if (*mp == NULL)
   2138   1.9  perseant 		return -1;
   2139   1.9  perseant 
   2140  1.50  christos 	if (IP_HDR_ALIGNED_P(mtod(m, void *)) == 0) {
   2141   1.9  perseant 		if ((m = m_copyup(m, sizeof(struct ip),
   2142   1.9  perseant 			(max_linkhdr + 3) & ~3)) == NULL) {
   2143   1.9  perseant 			/* XXXJRT new stat, please */
   2144  1.59   thorpej 			ip_statinc(IP_STAT_TOOSMALL);
   2145   1.9  perseant 			goto bad;
   2146   1.9  perseant 		}
   2147   1.9  perseant 	} else if (__predict_false(m->m_len < sizeof (struct ip))) {
   2148   1.9  perseant 		if ((m = m_pullup(m, sizeof (struct ip))) == NULL) {
   2149  1.59   thorpej 			ip_statinc(IP_STAT_TOOSMALL);
   2150   1.9  perseant 			goto bad;
   2151  1.29     perry 		}
   2152   1.9  perseant 	}
   2153   1.9  perseant 	ip = mtod(m, struct ip *);
   2154   1.9  perseant 	if (ip == NULL) goto bad;
   2155   1.9  perseant 
   2156   1.9  perseant 	if (ip->ip_v != IPVERSION) {
   2157  1.59   thorpej 		ip_statinc(IP_STAT_BADVERS);
   2158   1.9  perseant 		goto bad;
   2159   1.9  perseant 	}
   2160   1.9  perseant 	hlen = ip->ip_hl << 2;
   2161   1.9  perseant 	if (hlen < sizeof(struct ip)) { /* minimum header length */
   2162  1.59   thorpej 		ip_statinc(IP_STAT_BADHLEN);
   2163   1.9  perseant 		goto bad;
   2164   1.9  perseant 	}
   2165   1.9  perseant 	if (hlen > m->m_len) {
   2166   1.9  perseant 		if ((m = m_pullup(m, hlen)) == 0) {
   2167  1.59   thorpej 			ip_statinc(IP_STAT_BADHLEN);
   2168   1.9  perseant 			goto bad;
   2169   1.9  perseant 		}
   2170   1.9  perseant 		ip = mtod(m, struct ip *);
   2171   1.9  perseant 		if (ip == NULL) goto bad;
   2172   1.9  perseant 	}
   2173   1.9  perseant 
   2174   1.9  perseant         switch (m->m_pkthdr.csum_flags &
   2175   1.9  perseant                 ((m->m_pkthdr.rcvif->if_csum_flags_rx & M_CSUM_IPv4) |
   2176   1.9  perseant                  M_CSUM_IPv4_BAD)) {
   2177   1.9  perseant         case M_CSUM_IPv4|M_CSUM_IPv4_BAD:
   2178   1.9  perseant                 /* INET_CSUM_COUNTER_INCR(&ip_hwcsum_bad); */
   2179   1.9  perseant                 goto bad;
   2180   1.9  perseant 
   2181   1.9  perseant         case M_CSUM_IPv4:
   2182   1.9  perseant                 /* Checksum was okay. */
   2183   1.9  perseant                 /* INET_CSUM_COUNTER_INCR(&ip_hwcsum_ok); */
   2184   1.9  perseant                 break;
   2185   1.9  perseant 
   2186   1.9  perseant         default:
   2187   1.9  perseant                 /* Must compute it ourselves. */
   2188   1.9  perseant                 /* INET_CSUM_COUNTER_INCR(&ip_swcsum); */
   2189   1.9  perseant                 if (in_cksum(m, hlen) != 0)
   2190   1.9  perseant                         goto bad;
   2191   1.9  perseant                 break;
   2192   1.9  perseant         }
   2193   1.9  perseant 
   2194   1.9  perseant         /* Retrieve the packet length. */
   2195   1.9  perseant         len = ntohs(ip->ip_len);
   2196   1.9  perseant 
   2197   1.9  perseant         /*
   2198   1.9  perseant          * Check for additional length bogosity
   2199   1.9  perseant          */
   2200   1.9  perseant         if (len < hlen) {
   2201  1.59   thorpej 		ip_statinc(IP_STAT_BADLEN);
   2202   1.9  perseant                 goto bad;
   2203   1.9  perseant         }
   2204   1.9  perseant 
   2205   1.9  perseant         /*
   2206   1.9  perseant          * Check that the amount of data in the buffers
   2207   1.9  perseant          * is as at least much as the IP header would have us expect.
   2208   1.9  perseant          * Drop packet if shorter than we expect.
   2209   1.9  perseant          */
   2210   1.9  perseant         if (m->m_pkthdr.len < len) {
   2211  1.59   thorpej 		ip_statinc(IP_STAT_TOOSHORT);
   2212   1.9  perseant                 goto bad;
   2213   1.9  perseant         }
   2214   1.9  perseant 
   2215   1.9  perseant 	/* Checks out, proceed */
   2216   1.9  perseant 	*mp = m;
   2217   1.9  perseant 	return 0;
   2218   1.9  perseant 
   2219   1.9  perseant     bad:
   2220   1.9  perseant 	*mp = m;
   2221   1.9  perseant 	return -1;
   2222   1.9  perseant }
   2223   1.9  perseant 
   2224   1.9  perseant # ifdef INET6
   2225   1.9  perseant /*
   2226   1.9  perseant  * Same as above, but for IPv6.
   2227   1.9  perseant  * Cut-and-pasted from ip6_input.c.
   2228   1.9  perseant  * XXX Should we update ip6stat, or not?
   2229   1.9  perseant  */
   2230   1.9  perseant static int
   2231   1.9  perseant bridge_ip6_checkbasic(struct mbuf **mp)
   2232   1.9  perseant {
   2233   1.9  perseant 	struct mbuf *m = *mp;
   2234  1.16       jdc 	struct ip6_hdr *ip6;
   2235   1.9  perseant 
   2236   1.9  perseant         /*
   2237   1.9  perseant          * If the IPv6 header is not aligned, slurp it up into a new
   2238   1.9  perseant          * mbuf with space for link headers, in the event we forward
   2239   1.9  perseant          * it.  Otherwise, if it is aligned, make sure the entire base
   2240   1.9  perseant          * IPv6 header is in the first mbuf of the chain.
   2241   1.9  perseant          */
   2242  1.50  christos         if (IP6_HDR_ALIGNED_P(mtod(m, void *)) == 0) {
   2243   1.9  perseant                 struct ifnet *inifp = m->m_pkthdr.rcvif;
   2244   1.9  perseant                 if ((m = m_copyup(m, sizeof(struct ip6_hdr),
   2245   1.9  perseant                                   (max_linkhdr + 3) & ~3)) == NULL) {
   2246   1.9  perseant                         /* XXXJRT new stat, please */
   2247  1.61   thorpej 			ip6_statinc(IP6_STAT_TOOSMALL);
   2248   1.9  perseant                         in6_ifstat_inc(inifp, ifs6_in_hdrerr);
   2249   1.9  perseant                         goto bad;
   2250   1.9  perseant                 }
   2251   1.9  perseant         } else if (__predict_false(m->m_len < sizeof(struct ip6_hdr))) {
   2252   1.9  perseant                 struct ifnet *inifp = m->m_pkthdr.rcvif;
   2253   1.9  perseant                 if ((m = m_pullup(m, sizeof(struct ip6_hdr))) == NULL) {
   2254  1.61   thorpej 			ip6_statinc(IP6_STAT_TOOSMALL);
   2255   1.9  perseant                         in6_ifstat_inc(inifp, ifs6_in_hdrerr);
   2256   1.9  perseant                         goto bad;
   2257   1.9  perseant                 }
   2258   1.9  perseant         }
   2259   1.9  perseant 
   2260   1.9  perseant         ip6 = mtod(m, struct ip6_hdr *);
   2261   1.9  perseant 
   2262   1.9  perseant         if ((ip6->ip6_vfc & IPV6_VERSION_MASK) != IPV6_VERSION) {
   2263  1.61   thorpej 		ip6_statinc(IP6_STAT_BADVERS);
   2264   1.9  perseant                 in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_hdrerr);
   2265   1.9  perseant                 goto bad;
   2266   1.9  perseant         }
   2267   1.9  perseant 
   2268   1.9  perseant 	/* Checks out, proceed */
   2269   1.9  perseant 	*mp = m;
   2270   1.9  perseant 	return 0;
   2271   1.9  perseant 
   2272   1.9  perseant     bad:
   2273   1.9  perseant 	*mp = m;
   2274   1.9  perseant 	return -1;
   2275   1.9  perseant }
   2276   1.9  perseant # endif /* INET6 */
   2277  1.25  christos #endif /* BRIDGE_IPF && PFIL_HOOKS */
   2278