Home | History | Annotate | Line # | Download | only in netinet
in.c revision 1.156
      1  1.156       roy /*	$NetBSD: in.c,v 1.156 2015/05/16 12:12:46 roy Exp $	*/
      2   1.48    itojun 
      3   1.48    itojun /*
      4   1.48    itojun  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
      5   1.48    itojun  * All rights reserved.
      6   1.77    itojun  *
      7   1.48    itojun  * Redistribution and use in source and binary forms, with or without
      8   1.48    itojun  * modification, are permitted provided that the following conditions
      9   1.48    itojun  * are met:
     10   1.48    itojun  * 1. Redistributions of source code must retain the above copyright
     11   1.48    itojun  *    notice, this list of conditions and the following disclaimer.
     12   1.48    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     13   1.48    itojun  *    notice, this list of conditions and the following disclaimer in the
     14   1.48    itojun  *    documentation and/or other materials provided with the distribution.
     15   1.48    itojun  * 3. Neither the name of the project nor the names of its contributors
     16   1.48    itojun  *    may be used to endorse or promote products derived from this software
     17   1.48    itojun  *    without specific prior written permission.
     18   1.77    itojun  *
     19   1.48    itojun  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     20   1.48    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     21   1.48    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     22   1.48    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     23   1.48    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     24   1.48    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     25   1.48    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     26   1.48    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     27   1.48    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     28   1.48    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     29   1.48    itojun  * SUCH DAMAGE.
     30   1.48    itojun  */
     31   1.14       cgd 
     32   1.46   thorpej /*-
     33   1.46   thorpej  * Copyright (c) 1998 The NetBSD Foundation, Inc.
     34   1.46   thorpej  * All rights reserved.
     35   1.46   thorpej  *
     36   1.46   thorpej  * This code is derived from software contributed to The NetBSD Foundation
     37   1.46   thorpej  * by Public Access Networks Corporation ("Panix").  It was developed under
     38   1.46   thorpej  * contract to Panix by Eric Haszlakiewicz and Thor Lancelot Simon.
     39   1.46   thorpej  *
     40   1.46   thorpej  * Redistribution and use in source and binary forms, with or without
     41   1.46   thorpej  * modification, are permitted provided that the following conditions
     42   1.46   thorpej  * are met:
     43   1.46   thorpej  * 1. Redistributions of source code must retain the above copyright
     44   1.46   thorpej  *    notice, this list of conditions and the following disclaimer.
     45   1.46   thorpej  * 2. Redistributions in binary form must reproduce the above copyright
     46   1.46   thorpej  *    notice, this list of conditions and the following disclaimer in the
     47   1.46   thorpej  *    documentation and/or other materials provided with the distribution.
     48   1.46   thorpej  *
     49   1.46   thorpej  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     50   1.46   thorpej  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     51   1.46   thorpej  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     52   1.46   thorpej  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     53   1.46   thorpej  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     54   1.46   thorpej  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     55   1.46   thorpej  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     56   1.46   thorpej  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     57   1.46   thorpej  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     58   1.46   thorpej  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     59   1.46   thorpej  * POSSIBILITY OF SUCH DAMAGE.
     60   1.46   thorpej  */
     61   1.46   thorpej 
     62    1.1       cgd /*
     63   1.12   mycroft  * Copyright (c) 1982, 1986, 1991, 1993
     64   1.12   mycroft  *	The Regents of the University of California.  All rights reserved.
     65    1.1       cgd  *
     66    1.1       cgd  * Redistribution and use in source and binary forms, with or without
     67    1.1       cgd  * modification, are permitted provided that the following conditions
     68    1.1       cgd  * are met:
     69    1.1       cgd  * 1. Redistributions of source code must retain the above copyright
     70    1.1       cgd  *    notice, this list of conditions and the following disclaimer.
     71    1.1       cgd  * 2. Redistributions in binary form must reproduce the above copyright
     72    1.1       cgd  *    notice, this list of conditions and the following disclaimer in the
     73    1.1       cgd  *    documentation and/or other materials provided with the distribution.
     74   1.90       agc  * 3. Neither the name of the University nor the names of its contributors
     75    1.1       cgd  *    may be used to endorse or promote products derived from this software
     76    1.1       cgd  *    without specific prior written permission.
     77    1.1       cgd  *
     78    1.1       cgd  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     79    1.1       cgd  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     80    1.1       cgd  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     81    1.1       cgd  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     82    1.1       cgd  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     83    1.1       cgd  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     84    1.1       cgd  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     85    1.1       cgd  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     86    1.1       cgd  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     87    1.1       cgd  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     88    1.1       cgd  * SUCH DAMAGE.
     89    1.1       cgd  *
     90   1.36   thorpej  *	@(#)in.c	8.4 (Berkeley) 1/9/95
     91    1.1       cgd  */
     92   1.71     lukem 
     93   1.71     lukem #include <sys/cdefs.h>
     94  1.156       roy __KERNEL_RCSID(0, "$NetBSD: in.c,v 1.156 2015/05/16 12:12:46 roy Exp $");
     95   1.37    scottr 
     96  1.154     joerg #include "arp.h"
     97   1.41  jonathan #include "opt_inet.h"
     98   1.47  sommerfe #include "opt_inet_conf.h"
     99   1.37    scottr #include "opt_mrouting.h"
    100    1.1       cgd 
    101    1.6   mycroft #include <sys/param.h>
    102    1.6   mycroft #include <sys/ioctl.h>
    103   1.12   mycroft #include <sys/errno.h>
    104  1.152       roy #include <sys/kernel.h>
    105   1.12   mycroft #include <sys/malloc.h>
    106    1.6   mycroft #include <sys/socket.h>
    107    1.6   mycroft #include <sys/socketvar.h>
    108  1.114    dyoung #include <sys/sysctl.h>
    109   1.26  christos #include <sys/systm.h>
    110   1.27   mycroft #include <sys/proc.h>
    111   1.72  christos #include <sys/syslog.h>
    112  1.108      elad #include <sys/kauth.h>
    113    1.6   mycroft 
    114  1.141       tls #include <sys/cprng.h>
    115  1.141       tls 
    116    1.6   mycroft #include <net/if.h>
    117    1.6   mycroft #include <net/route.h>
    118  1.144     rmind #include <net/pfil.h>
    119    1.6   mycroft 
    120   1.34        is #include <net/if_ether.h>
    121   1.34        is 
    122   1.12   mycroft #include <netinet/in_systm.h>
    123    1.6   mycroft #include <netinet/in.h>
    124    1.6   mycroft #include <netinet/in_var.h>
    125   1.84      matt #include <netinet/ip.h>
    126   1.84      matt #include <netinet/ip_var.h>
    127  1.114    dyoung #include <netinet/in_ifattach.h>
    128   1.84      matt #include <netinet/in_pcb.h>
    129   1.34        is #include <netinet/if_inarp.h>
    130   1.19   mycroft #include <netinet/ip_mroute.h>
    131   1.26  christos #include <netinet/igmp_var.h>
    132   1.13    chopps 
    133  1.114    dyoung #ifdef IPSELSRC
    134  1.114    dyoung #include <netinet/in_selsrc.h>
    135  1.114    dyoung #endif
    136  1.114    dyoung 
    137  1.145     rmind static u_int	in_mask2len(struct in_addr *);
    138  1.145     rmind static void	in_len2mask(struct in_addr *, u_int);
    139  1.145     rmind static int	in_lifaddr_ioctl(struct socket *, u_long, void *,
    140  1.147       rtr 	struct ifnet *);
    141   1.48    itojun 
    142  1.145     rmind static int	in_addprefix(struct in_ifaddr *, int);
    143  1.145     rmind static int	in_scrubprefix(struct in_ifaddr *);
    144  1.145     rmind static void	in_sysctl_init(struct sysctllog **);
    145   1.67    itojun 
    146    1.1       cgd #ifndef SUBNETSARELOCAL
    147    1.1       cgd #define	SUBNETSARELOCAL	1
    148    1.1       cgd #endif
    149   1.47  sommerfe 
    150   1.47  sommerfe #ifndef HOSTZEROBROADCAST
    151   1.47  sommerfe #define HOSTZEROBROADCAST 1
    152   1.47  sommerfe #endif
    153   1.47  sommerfe 
    154  1.146     rmind /* Note: 61, 127, 251, 509, 1021, 2039 are good. */
    155  1.146     rmind #ifndef IN_MULTI_HASH_SIZE
    156  1.146     rmind #define IN_MULTI_HASH_SIZE	509
    157  1.146     rmind #endif
    158  1.146     rmind 
    159  1.145     rmind static int			subnetsarelocal = SUBNETSARELOCAL;
    160  1.145     rmind static int			hostzeroisbroadcast = HOSTZEROBROADCAST;
    161   1.30       mrg 
    162    1.1       cgd /*
    163   1.65     enami  * This list is used to keep track of in_multi chains which belong to
    164   1.65     enami  * deleted interface addresses.  We use in_ifaddr so that a chain head
    165   1.65     enami  * won't be deallocated until all multicast address record are deleted.
    166   1.64    itojun  */
    167  1.146     rmind 
    168  1.146     rmind LIST_HEAD(in_multihashhead, in_multi);		/* Type of the hash head */
    169  1.145     rmind 
    170  1.145     rmind static struct pool		inmulti_pool;
    171  1.145     rmind static u_int			in_multientries;
    172  1.146     rmind static struct in_multihashhead *in_multihashtbl;
    173  1.146     rmind static u_long			in_multihash;
    174  1.146     rmind static krwlock_t		in_multilock;
    175  1.146     rmind 
    176  1.146     rmind #define IN_MULTI_HASH(x, ifp) \
    177  1.146     rmind     (in_multihashtbl[(u_long)((x) ^ (ifp->if_index)) % IN_MULTI_HASH_SIZE])
    178  1.145     rmind 
    179  1.145     rmind struct in_ifaddrhashhead *	in_ifaddrhashtbl;
    180  1.145     rmind u_long				in_ifaddrhash;
    181  1.145     rmind struct in_ifaddrhead		in_ifaddrhead;
    182  1.145     rmind 
    183  1.145     rmind void
    184  1.145     rmind in_init(void)
    185  1.145     rmind {
    186  1.145     rmind 	pool_init(&inmulti_pool, sizeof(struct in_multi), 0, 0, 0, "inmltpl",
    187  1.145     rmind 	    NULL, IPL_SOFTNET);
    188  1.145     rmind 	TAILQ_INIT(&in_ifaddrhead);
    189  1.145     rmind 
    190  1.145     rmind 	in_ifaddrhashtbl = hashinit(IN_IFADDR_HASH_SIZE, HASH_LIST, true,
    191  1.145     rmind 	    &in_ifaddrhash);
    192  1.145     rmind 	in_multihashtbl = hashinit(IN_IFADDR_HASH_SIZE, HASH_LIST, true,
    193  1.145     rmind 	    &in_multihash);
    194  1.146     rmind 	rw_init(&in_multilock);
    195  1.145     rmind 
    196  1.145     rmind 	in_sysctl_init(NULL);
    197  1.145     rmind }
    198   1.64    itojun 
    199   1.64    itojun /*
    200    1.1       cgd  * Return 1 if an internet address is for a ``local'' host
    201    1.1       cgd  * (one to which we have a connection).  If subnetsarelocal
    202    1.1       cgd  * is true, this includes other subnets of the local net.
    203    1.1       cgd  * Otherwise, it includes only the directly-connected (sub)nets.
    204    1.1       cgd  */
    205    1.8   mycroft int
    206  1.103     perry in_localaddr(struct in_addr in)
    207    1.1       cgd {
    208   1.59  augustss 	struct in_ifaddr *ia;
    209    1.1       cgd 
    210    1.1       cgd 	if (subnetsarelocal) {
    211   1.93  jonathan 		TAILQ_FOREACH(ia, &in_ifaddrhead, ia_list)
    212   1.20   mycroft 			if ((in.s_addr & ia->ia_netmask) == ia->ia_net)
    213    1.1       cgd 				return (1);
    214    1.1       cgd 	} else {
    215   1.93  jonathan 		TAILQ_FOREACH(ia, &in_ifaddrhead, ia_list)
    216   1.20   mycroft 			if ((in.s_addr & ia->ia_subnetmask) == ia->ia_subnet)
    217    1.1       cgd 				return (1);
    218    1.1       cgd 	}
    219    1.1       cgd 	return (0);
    220    1.1       cgd }
    221    1.1       cgd 
    222    1.1       cgd /*
    223    1.1       cgd  * Determine whether an IP address is in a reserved set of addresses
    224    1.1       cgd  * that may not be forwarded, or whether datagrams to that destination
    225    1.1       cgd  * may be forwarded.
    226    1.1       cgd  */
    227    1.8   mycroft int
    228  1.103     perry in_canforward(struct in_addr in)
    229    1.1       cgd {
    230   1.59  augustss 	u_int32_t net;
    231    1.1       cgd 
    232   1.20   mycroft 	if (IN_EXPERIMENTAL(in.s_addr) || IN_MULTICAST(in.s_addr))
    233    1.1       cgd 		return (0);
    234   1.20   mycroft 	if (IN_CLASSA(in.s_addr)) {
    235   1.20   mycroft 		net = in.s_addr & IN_CLASSA_NET;
    236   1.20   mycroft 		if (net == 0 || net == htonl(IN_LOOPBACKNET << IN_CLASSA_NSHIFT))
    237    1.1       cgd 			return (0);
    238    1.1       cgd 	}
    239    1.1       cgd 	return (1);
    240    1.1       cgd }
    241    1.1       cgd 
    242   1.12   mycroft /*
    243   1.12   mycroft  * Trim a mask in a sockaddr
    244   1.12   mycroft  */
    245   1.12   mycroft void
    246  1.103     perry in_socktrim(struct sockaddr_in *ap)
    247   1.12   mycroft {
    248   1.59  augustss 	char *cplim = (char *) &ap->sin_addr;
    249   1.59  augustss 	char *cp = (char *) (&ap->sin_addr + 1);
    250   1.12   mycroft 
    251   1.12   mycroft 	ap->sin_len = 0;
    252   1.15   mycroft 	while (--cp >= cplim)
    253   1.12   mycroft 		if (*cp) {
    254   1.12   mycroft 			(ap)->sin_len = cp - (char *) (ap) + 1;
    255   1.12   mycroft 			break;
    256   1.12   mycroft 		}
    257   1.40      matt }
    258   1.40      matt 
    259   1.40      matt /*
    260   1.40      matt  *  Routine to take an Internet address and convert into a
    261   1.40      matt  *  "dotted quad" representation for printing.
    262   1.40      matt  */
    263   1.40      matt const char *
    264  1.103     perry in_fmtaddr(struct in_addr addr)
    265   1.40      matt {
    266   1.40      matt 	static char buf[sizeof("123.456.789.123")];
    267   1.40      matt 
    268   1.40      matt 	addr.s_addr = ntohl(addr.s_addr);
    269   1.40      matt 
    270   1.94    itojun 	snprintf(buf, sizeof(buf), "%d.%d.%d.%d",
    271   1.40      matt 		(addr.s_addr >> 24) & 0xFF,
    272   1.40      matt 		(addr.s_addr >> 16) & 0xFF,
    273   1.40      matt 		(addr.s_addr >>  8) & 0xFF,
    274   1.40      matt 		(addr.s_addr >>  0) & 0xFF);
    275   1.40      matt 	return buf;
    276   1.12   mycroft }
    277   1.12   mycroft 
    278   1.35   thorpej /*
    279   1.35   thorpej  * Maintain the "in_maxmtu" variable, which is the largest
    280   1.35   thorpej  * mtu for non-local interfaces with AF_INET addresses assigned
    281   1.35   thorpej  * to them that are up.
    282   1.35   thorpej  */
    283   1.35   thorpej unsigned long in_maxmtu;
    284   1.35   thorpej 
    285   1.35   thorpej void
    286  1.103     perry in_setmaxmtu(void)
    287   1.35   thorpej {
    288   1.59  augustss 	struct in_ifaddr *ia;
    289   1.59  augustss 	struct ifnet *ifp;
    290   1.35   thorpej 	unsigned long maxmtu = 0;
    291   1.35   thorpej 
    292   1.93  jonathan 	TAILQ_FOREACH(ia, &in_ifaddrhead, ia_list) {
    293   1.35   thorpej 		if ((ifp = ia->ia_ifp) == 0)
    294   1.35   thorpej 			continue;
    295   1.35   thorpej 		if ((ifp->if_flags & (IFF_UP|IFF_LOOPBACK)) != IFF_UP)
    296   1.35   thorpej 			continue;
    297   1.35   thorpej 		if (ifp->if_mtu > maxmtu)
    298   1.38       tls 			maxmtu = ifp->if_mtu;
    299   1.35   thorpej 	}
    300   1.35   thorpej 	if (maxmtu)
    301   1.35   thorpej 		in_maxmtu = maxmtu;
    302   1.35   thorpej }
    303   1.35   thorpej 
    304   1.82   thorpej static u_int
    305  1.103     perry in_mask2len(struct in_addr *mask)
    306   1.48    itojun {
    307   1.82   thorpej 	u_int x, y;
    308   1.48    itojun 	u_char *p;
    309   1.48    itojun 
    310   1.48    itojun 	p = (u_char *)mask;
    311   1.48    itojun 	for (x = 0; x < sizeof(*mask); x++) {
    312   1.48    itojun 		if (p[x] != 0xff)
    313   1.48    itojun 			break;
    314   1.48    itojun 	}
    315   1.48    itojun 	y = 0;
    316   1.48    itojun 	if (x < sizeof(*mask)) {
    317  1.124    dyoung 		for (y = 0; y < NBBY; y++) {
    318   1.48    itojun 			if ((p[x] & (0x80 >> y)) == 0)
    319   1.48    itojun 				break;
    320   1.48    itojun 		}
    321   1.48    itojun 	}
    322  1.124    dyoung 	return x * NBBY + y;
    323   1.48    itojun }
    324   1.48    itojun 
    325   1.48    itojun static void
    326  1.103     perry in_len2mask(struct in_addr *mask, u_int len)
    327   1.48    itojun {
    328   1.82   thorpej 	u_int i;
    329   1.48    itojun 	u_char *p;
    330   1.48    itojun 
    331   1.48    itojun 	p = (u_char *)mask;
    332  1.132    cegger 	memset(mask, 0, sizeof(*mask));
    333  1.124    dyoung 	for (i = 0; i < len / NBBY; i++)
    334   1.48    itojun 		p[i] = 0xff;
    335  1.124    dyoung 	if (len % NBBY)
    336  1.124    dyoung 		p[i] = (0xff00 >> (len % NBBY)) & 0xff;
    337   1.48    itojun }
    338   1.48    itojun 
    339    1.1       cgd /*
    340    1.1       cgd  * Generic internet control operations (ioctl's).
    341    1.1       cgd  * Ifp is 0 if not an interface-specific ioctl.
    342    1.1       cgd  */
    343    1.1       cgd /* ARGSUSED */
    344    1.8   mycroft int
    345  1.147       rtr in_control(struct socket *so, u_long cmd, void *data, struct ifnet *ifp)
    346    1.1       cgd {
    347   1.59  augustss 	struct ifreq *ifr = (struct ifreq *)data;
    348  1.136    dyoung 	struct in_ifaddr *ia = NULL;
    349    1.1       cgd 	struct in_aliasreq *ifra = (struct in_aliasreq *)data;
    350    1.1       cgd 	struct sockaddr_in oldaddr;
    351    1.1       cgd 	int error, hostIsNew, maskIsNew;
    352  1.100      yamt 	int newifaddr = 0;
    353   1.48    itojun 
    354   1.48    itojun 	switch (cmd) {
    355   1.48    itojun 	case SIOCALIFADDR:
    356   1.48    itojun 	case SIOCDLIFADDR:
    357  1.135    dyoung 	case SIOCGLIFADDR:
    358  1.135    dyoung 		if (ifp == NULL)
    359  1.135    dyoung 			return EINVAL;
    360  1.147       rtr 		return in_lifaddr_ioctl(so, cmd, data, ifp);
    361  1.135    dyoung 	case SIOCGIFADDRPREF:
    362  1.114    dyoung 	case SIOCSIFADDRPREF:
    363  1.117    dyoung 		if (ifp == NULL)
    364   1.48    itojun 			return EINVAL;
    365  1.147       rtr 		return ifaddrpref_ioctl(so, cmd, data, ifp);
    366   1.48    itojun 	}
    367   1.48    itojun 
    368    1.1       cgd 	/*
    369    1.1       cgd 	 * Find address for this interface, if it exists.
    370    1.1       cgd 	 */
    371  1.117    dyoung 	if (ifp != NULL)
    372   1.38       tls 		IFP_TO_IA(ifp, ia);
    373    1.1       cgd 
    374  1.153       roy 	hostIsNew = 1;		/* moved here to appease gcc */
    375    1.1       cgd 	switch (cmd) {
    376    1.1       cgd 	case SIOCAIFADDR:
    377    1.1       cgd 	case SIOCDIFADDR:
    378   1.43  christos 	case SIOCGIFALIAS:
    379  1.152       roy 	case SIOCGIFAFLAG_IN:
    380    1.1       cgd 		if (ifra->ifra_addr.sin_family == AF_INET)
    381   1.70      matt 			LIST_FOREACH(ia,
    382   1.70      matt 			    &IN_IFADDR_HASH(ifra->ifra_addr.sin_addr.s_addr),
    383   1.70      matt 			    ia_hash) {
    384  1.117    dyoung 				if (ia->ia_ifp == ifp &&
    385   1.38       tls 				    in_hosteq(ia->ia_addr.sin_addr,
    386   1.38       tls 				    ifra->ifra_addr.sin_addr))
    387   1.28   mycroft 					break;
    388   1.28   mycroft 			}
    389  1.152       roy 		if ((cmd == SIOCDIFADDR ||
    390  1.152       roy 		    cmd == SIOCGIFALIAS ||
    391  1.152       roy 		    cmd == SIOCGIFAFLAG_IN) &&
    392  1.152       roy 		    ia == NULL)
    393  1.105     seanb 			return (EADDRNOTAVAIL);
    394  1.105     seanb 
    395  1.105     seanb 		if (cmd == SIOCDIFADDR &&
    396  1.105     seanb 		    ifra->ifra_addr.sin_family == AF_UNSPEC) {
    397  1.105     seanb 			ifra->ifra_addr.sin_family = AF_INET;
    398  1.105     seanb 		}
    399    1.1       cgd 		/* FALLTHROUGH */
    400    1.1       cgd 	case SIOCSIFADDR:
    401  1.152       roy 		if (ia == NULL || ia->ia_addr.sin_family != AF_INET)
    402  1.152       roy 			;
    403  1.152       roy 		else if (ifra->ifra_addr.sin_len == 0) {
    404  1.152       roy 			ifra->ifra_addr = ia->ia_addr;
    405  1.152       roy 			hostIsNew = 0;
    406  1.152       roy 		} else if (in_hosteq(ia->ia_addr.sin_addr,
    407  1.152       roy 		           ifra->ifra_addr.sin_addr))
    408  1.152       roy 			hostIsNew = 0;
    409  1.152       roy 		/* FALLTHROUGH */
    410   1.52    itojun 	case SIOCSIFDSTADDR:
    411   1.54    itojun 		if (ifra->ifra_addr.sin_family != AF_INET)
    412   1.54    itojun 			return (EAFNOSUPPORT);
    413   1.54    itojun 		/* FALLTHROUGH */
    414    1.1       cgd 	case SIOCSIFNETMASK:
    415  1.117    dyoung 		if (ifp == NULL)
    416   1.44  christos 			panic("in_control");
    417   1.44  christos 
    418  1.152       roy 		if (cmd == SIOCGIFALIAS || cmd == SIOCGIFAFLAG_IN)
    419   1.44  christos 			break;
    420   1.44  christos 
    421  1.100      yamt 		if (ia == NULL &&
    422  1.100      yamt 		    (cmd == SIOCSIFNETMASK || cmd == SIOCSIFDSTADDR))
    423  1.100      yamt 			return (EADDRNOTAVAIL);
    424  1.100      yamt 
    425  1.147       rtr 		if (kauth_authorize_network(curlwp->l_cred, KAUTH_NETWORK_INTERFACE,
    426  1.113      elad 		    KAUTH_REQ_NETWORK_INTERFACE_SETPRIV, ifp, (void *)cmd,
    427  1.113      elad 		    NULL) != 0)
    428    1.1       cgd 			return (EPERM);
    429    1.1       cgd 
    430  1.136    dyoung 		if (ia == NULL) {
    431  1.129    cegger 			ia = malloc(sizeof(*ia), M_IFADDR, M_WAITOK|M_ZERO);
    432  1.136    dyoung 			if (ia == NULL)
    433    1.1       cgd 				return (ENOBUFS);
    434   1.93  jonathan 			TAILQ_INSERT_TAIL(&in_ifaddrhead, ia, ia_list);
    435  1.148     rmind 			ifaref(&ia->ia_ifa);
    436  1.122    dyoung 			ifa_insert(ifp, &ia->ia_ifa);
    437   1.21   mycroft 			ia->ia_ifa.ifa_addr = sintosa(&ia->ia_addr);
    438   1.21   mycroft 			ia->ia_ifa.ifa_dstaddr = sintosa(&ia->ia_dstaddr);
    439   1.21   mycroft 			ia->ia_ifa.ifa_netmask = sintosa(&ia->ia_sockmask);
    440  1.114    dyoung #ifdef IPSELSRC
    441  1.114    dyoung 			ia->ia_ifa.ifa_getifa = in_getifa;
    442  1.114    dyoung #else /* IPSELSRC */
    443  1.114    dyoung 			ia->ia_ifa.ifa_getifa = NULL;
    444  1.114    dyoung #endif /* IPSELSRC */
    445    1.1       cgd 			ia->ia_sockmask.sin_len = 8;
    446  1.149  christos 			ia->ia_sockmask.sin_family = AF_INET;
    447    1.1       cgd 			if (ifp->if_flags & IFF_BROADCAST) {
    448    1.1       cgd 				ia->ia_broadaddr.sin_len = sizeof(ia->ia_addr);
    449    1.1       cgd 				ia->ia_broadaddr.sin_family = AF_INET;
    450    1.1       cgd 			}
    451    1.1       cgd 			ia->ia_ifp = ifp;
    452  1.141       tls 			ia->ia_idsalt = cprng_fast32() % 65535;
    453   1.24   mycroft 			LIST_INIT(&ia->ia_multiaddrs);
    454  1.100      yamt 			newifaddr = 1;
    455   1.81    simonb 		}
    456    1.1       cgd 		break;
    457    1.1       cgd 
    458    1.1       cgd 	case SIOCSIFBRDADDR:
    459  1.147       rtr 		if (kauth_authorize_network(curlwp->l_cred, KAUTH_NETWORK_INTERFACE,
    460  1.113      elad 		    KAUTH_REQ_NETWORK_INTERFACE_SETPRIV, ifp, (void *)cmd,
    461  1.113      elad 		    NULL) != 0)
    462    1.1       cgd 			return (EPERM);
    463    1.1       cgd 		/* FALLTHROUGH */
    464    1.1       cgd 
    465    1.1       cgd 	case SIOCGIFADDR:
    466    1.1       cgd 	case SIOCGIFNETMASK:
    467    1.1       cgd 	case SIOCGIFDSTADDR:
    468    1.1       cgd 	case SIOCGIFBRDADDR:
    469  1.136    dyoung 		if (ia == NULL)
    470    1.1       cgd 			return (EADDRNOTAVAIL);
    471    1.1       cgd 		break;
    472    1.1       cgd 	}
    473  1.100      yamt 	error = 0;
    474    1.1       cgd 	switch (cmd) {
    475    1.1       cgd 
    476    1.1       cgd 	case SIOCGIFADDR:
    477  1.118    dyoung 		ifreq_setaddr(cmd, ifr, sintocsa(&ia->ia_addr));
    478    1.1       cgd 		break;
    479    1.1       cgd 
    480    1.1       cgd 	case SIOCGIFBRDADDR:
    481    1.1       cgd 		if ((ifp->if_flags & IFF_BROADCAST) == 0)
    482    1.1       cgd 			return (EINVAL);
    483  1.118    dyoung 		ifreq_setdstaddr(cmd, ifr, sintocsa(&ia->ia_broadaddr));
    484    1.1       cgd 		break;
    485    1.1       cgd 
    486    1.1       cgd 	case SIOCGIFDSTADDR:
    487    1.1       cgd 		if ((ifp->if_flags & IFF_POINTOPOINT) == 0)
    488    1.1       cgd 			return (EINVAL);
    489  1.118    dyoung 		ifreq_setdstaddr(cmd, ifr, sintocsa(&ia->ia_dstaddr));
    490    1.1       cgd 		break;
    491    1.1       cgd 
    492    1.1       cgd 	case SIOCGIFNETMASK:
    493  1.149  christos 		/*
    494  1.149  christos 		 * We keep the number of trailing zero bytes the sin_len field
    495  1.149  christos 		 * of ia_sockmask, so we fix this before we pass it back to
    496  1.149  christos 		 * userland.
    497  1.149  christos 		 */
    498  1.149  christos 		oldaddr = ia->ia_sockmask;
    499  1.149  christos 		oldaddr.sin_len = sizeof(struct sockaddr_in);
    500  1.149  christos 		ifreq_setaddr(cmd, ifr, (const void *)&oldaddr);
    501    1.1       cgd 		break;
    502    1.1       cgd 
    503    1.1       cgd 	case SIOCSIFDSTADDR:
    504    1.1       cgd 		if ((ifp->if_flags & IFF_POINTOPOINT) == 0)
    505    1.1       cgd 			return (EINVAL);
    506    1.1       cgd 		oldaddr = ia->ia_dstaddr;
    507  1.118    dyoung 		ia->ia_dstaddr = *satocsin(ifreq_getdstaddr(cmd, ifr));
    508  1.139    dyoung 		if ((error = if_addr_init(ifp, &ia->ia_ifa, false)) != 0) {
    509    1.1       cgd 			ia->ia_dstaddr = oldaddr;
    510  1.117    dyoung 			return error;
    511    1.1       cgd 		}
    512    1.1       cgd 		if (ia->ia_flags & IFA_ROUTE) {
    513   1.21   mycroft 			ia->ia_ifa.ifa_dstaddr = sintosa(&oldaddr);
    514  1.117    dyoung 			rtinit(&ia->ia_ifa, RTM_DELETE, RTF_HOST);
    515   1.21   mycroft 			ia->ia_ifa.ifa_dstaddr = sintosa(&ia->ia_dstaddr);
    516  1.117    dyoung 			rtinit(&ia->ia_ifa, RTM_ADD, RTF_HOST|RTF_UP);
    517    1.1       cgd 		}
    518    1.1       cgd 		break;
    519    1.1       cgd 
    520    1.1       cgd 	case SIOCSIFBRDADDR:
    521    1.1       cgd 		if ((ifp->if_flags & IFF_BROADCAST) == 0)
    522  1.117    dyoung 			return EINVAL;
    523  1.118    dyoung 		ia->ia_broadaddr = *satocsin(ifreq_getbroadaddr(cmd, ifr));
    524    1.1       cgd 		break;
    525    1.1       cgd 
    526    1.1       cgd 	case SIOCSIFADDR:
    527  1.118    dyoung 		error = in_ifinit(ifp, ia, satocsin(ifreq_getaddr(cmd, ifr)),
    528  1.152       roy 		    1, hostIsNew);
    529  1.144     rmind 		if (error == 0) {
    530  1.144     rmind 			(void)pfil_run_hooks(if_pfil,
    531   1.96    itojun 			    (struct mbuf **)SIOCSIFADDR, ifp, PFIL_IFADDR);
    532  1.144     rmind 		}
    533  1.100      yamt 		break;
    534    1.1       cgd 
    535    1.1       cgd 	case SIOCSIFNETMASK:
    536   1.97   mycroft 		in_ifscrub(ifp, ia);
    537  1.118    dyoung 		ia->ia_sockmask = *satocsin(ifreq_getaddr(cmd, ifr));
    538   1.97   mycroft 		ia->ia_subnetmask = ia->ia_sockmask.sin_addr.s_addr;
    539  1.152       roy 		error = in_ifinit(ifp, ia, NULL, 0, 0);
    540  1.100      yamt 		break;
    541    1.1       cgd 
    542    1.1       cgd 	case SIOCAIFADDR:
    543    1.1       cgd 		maskIsNew = 0;
    544    1.1       cgd 		if (ifra->ifra_mask.sin_len) {
    545  1.142       roy 			/* Only scrub if we control the prefix route,
    546  1.142       roy 			 * otherwise userland gets a bogus message */
    547  1.142       roy 			if ((ia->ia_flags & IFA_ROUTE))
    548  1.142       roy 				in_ifscrub(ifp, ia);
    549    1.1       cgd 			ia->ia_sockmask = ifra->ifra_mask;
    550   1.20   mycroft 			ia->ia_subnetmask = ia->ia_sockmask.sin_addr.s_addr;
    551    1.1       cgd 			maskIsNew = 1;
    552    1.1       cgd 		}
    553    1.1       cgd 		if ((ifp->if_flags & IFF_POINTOPOINT) &&
    554    1.1       cgd 		    (ifra->ifra_dstaddr.sin_family == AF_INET)) {
    555  1.142       roy 			/* Only scrub if we control the prefix route,
    556  1.142       roy 			 * otherwise userland gets a bogus message */
    557  1.142       roy 			if ((ia->ia_flags & IFA_ROUTE))
    558  1.142       roy 				in_ifscrub(ifp, ia);
    559    1.1       cgd 			ia->ia_dstaddr = ifra->ifra_dstaddr;
    560    1.1       cgd 			maskIsNew  = 1; /* We lie; but the effect's the same */
    561    1.1       cgd 		}
    562    1.1       cgd 		if (ifra->ifra_addr.sin_family == AF_INET &&
    563   1.56    itojun 		    (hostIsNew || maskIsNew)) {
    564  1.152       roy 			error = in_ifinit(ifp, ia, &ifra->ifra_addr, 0,
    565  1.152       roy 			    hostIsNew);
    566   1.56    itojun 		}
    567    1.1       cgd 		if ((ifp->if_flags & IFF_BROADCAST) &&
    568    1.1       cgd 		    (ifra->ifra_broadaddr.sin_family == AF_INET))
    569    1.1       cgd 			ia->ia_broadaddr = ifra->ifra_broadaddr;
    570  1.117    dyoung 		if (error == 0)
    571  1.144     rmind 			(void)pfil_run_hooks(if_pfil,
    572   1.99      yamt 			    (struct mbuf **)SIOCAIFADDR, ifp, PFIL_IFADDR);
    573  1.100      yamt 		break;
    574   1.43  christos 
    575   1.43  christos 	case SIOCGIFALIAS:
    576   1.43  christos 		ifra->ifra_mask = ia->ia_sockmask;
    577   1.43  christos 		if ((ifp->if_flags & IFF_POINTOPOINT) &&
    578   1.43  christos 		    (ia->ia_dstaddr.sin_family == AF_INET))
    579   1.43  christos 			ifra->ifra_dstaddr = ia->ia_dstaddr;
    580   1.43  christos 		else if ((ifp->if_flags & IFF_BROADCAST) &&
    581   1.43  christos 		    (ia->ia_broadaddr.sin_family == AF_INET))
    582   1.43  christos 			ifra->ifra_broadaddr = ia->ia_broadaddr;
    583   1.43  christos 		else
    584  1.117    dyoung 			memset(&ifra->ifra_broadaddr, 0,
    585   1.48    itojun 			      sizeof(ifra->ifra_broadaddr));
    586  1.100      yamt 		break;
    587    1.1       cgd 
    588  1.152       roy 	case SIOCGIFAFLAG_IN:
    589  1.152       roy 		ifr->ifr_addrflags = ia->ia4_flags;
    590  1.152       roy 		break;
    591  1.152       roy 
    592    1.1       cgd 	case SIOCDIFADDR:
    593  1.121    dyoung 		in_purgeaddr(&ia->ia_ifa);
    594  1.144     rmind 		(void)pfil_run_hooks(if_pfil, (struct mbuf **)SIOCDIFADDR,
    595   1.96    itojun 		    ifp, PFIL_IFADDR);
    596    1.1       cgd 		break;
    597   1.19   mycroft 
    598   1.19   mycroft #ifdef MROUTING
    599   1.19   mycroft 	case SIOCGETVIFCNT:
    600   1.19   mycroft 	case SIOCGETSGCNT:
    601  1.100      yamt 		error = mrt_ioctl(so, cmd, data);
    602  1.100      yamt 		break;
    603   1.19   mycroft #endif /* MROUTING */
    604    1.1       cgd 
    605    1.1       cgd 	default:
    606  1.128    dyoung 		return ENOTTY;
    607  1.100      yamt 	}
    608  1.100      yamt 
    609  1.117    dyoung 	if (error != 0 && newifaddr) {
    610  1.100      yamt 		KASSERT(ia != NULL);
    611  1.121    dyoung 		in_purgeaddr(&ia->ia_ifa);
    612    1.1       cgd 	}
    613  1.100      yamt 
    614  1.100      yamt 	return error;
    615   1.50   thorpej }
    616   1.50   thorpej 
    617  1.150       roy /* Add ownaddr as loopback rtentry. */
    618  1.150       roy static void
    619  1.150       roy in_ifaddlocal(struct ifaddr *ifa)
    620  1.150       roy {
    621  1.151       roy 	struct in_ifaddr *ia;
    622  1.151       roy 
    623  1.151       roy 	ia = (struct in_ifaddr *)ifa;
    624  1.151       roy 	if (ia->ia_addr.sin_addr.s_addr == INADDR_ANY ||
    625  1.151       roy 	    (ia->ia_ifp->if_flags & IFF_POINTOPOINT &&
    626  1.151       roy 	    in_hosteq(ia->ia_dstaddr.sin_addr, ia->ia_addr.sin_addr)))
    627  1.151       roy 	{
    628  1.151       roy 		rt_newaddrmsg(RTM_NEWADDR, ifa, 0, NULL);
    629  1.151       roy 		return;
    630  1.151       roy 	}
    631  1.150       roy 
    632  1.150       roy 	rt_ifa_addlocal(ifa);
    633  1.150       roy }
    634  1.150       roy 
    635  1.150       roy /* Rempve loopback entry of ownaddr */
    636  1.150       roy static void
    637  1.150       roy in_ifremlocal(struct ifaddr *ifa)
    638  1.150       roy {
    639  1.150       roy 	struct in_ifaddr *ia, *p;
    640  1.150       roy 	struct ifaddr *alt_ifa = NULL;
    641  1.150       roy 	int ia_count = 0;
    642  1.150       roy 
    643  1.150       roy 	ia = (struct in_ifaddr *)ifa;
    644  1.150       roy 	/* Delete the entry if exactly one ifaddr matches the
    645  1.150       roy 	 * address, ifa->ifa_addr. */
    646  1.150       roy 	TAILQ_FOREACH(p, &in_ifaddrhead, ia_list) {
    647  1.150       roy 		if (!in_hosteq(p->ia_addr.sin_addr, ia->ia_addr.sin_addr))
    648  1.150       roy 			continue;
    649  1.150       roy 		if (p->ia_ifp != ia->ia_ifp)
    650  1.150       roy 			alt_ifa = &p->ia_ifa;
    651  1.150       roy 		if (++ia_count > 1 && alt_ifa != NULL)
    652  1.150       roy 			break;
    653  1.150       roy 	}
    654  1.150       roy 
    655  1.150       roy 	if (ia_count == 0)
    656  1.150       roy 		return;
    657  1.150       roy 
    658  1.150       roy 	rt_ifa_remlocal(ifa, ia_count == 1 ? NULL : alt_ifa);
    659  1.150       roy }
    660  1.150       roy 
    661   1.50   thorpej void
    662  1.121    dyoung in_purgeaddr(struct ifaddr *ifa)
    663   1.50   thorpej {
    664  1.121    dyoung 	struct ifnet *ifp = ifa->ifa_ifp;
    665   1.50   thorpej 	struct in_ifaddr *ia = (void *) ifa;
    666   1.50   thorpej 
    667  1.154     joerg 	/* stop DAD processing */
    668  1.156       roy 	if (ia->ia_dad_stop != NULL)
    669  1.156       roy 		ia->ia_dad_stop(ifa);
    670  1.152       roy 
    671   1.50   thorpej 	in_ifscrub(ifp, ia);
    672  1.150       roy 	in_ifremlocal(ifa);
    673   1.50   thorpej 	LIST_REMOVE(ia, ia_hash);
    674  1.122    dyoung 	ifa_remove(ifp, &ia->ia_ifa);
    675   1.93  jonathan 	TAILQ_REMOVE(&in_ifaddrhead, ia, ia_list);
    676   1.65     enami 	if (ia->ia_allhosts != NULL)
    677   1.65     enami 		in_delmulti(ia->ia_allhosts);
    678  1.148     rmind 	ifafree(&ia->ia_ifa);
    679   1.50   thorpej 	in_setmaxmtu();
    680   1.51   thorpej }
    681   1.51   thorpej 
    682   1.51   thorpej void
    683  1.111       tls in_purgeif(struct ifnet *ifp)		/* MUST be called at splsoftnet() */
    684   1.51   thorpej {
    685  1.121    dyoung 	if_purgeaddrs(ifp, AF_INET, in_purgeaddr);
    686  1.111       tls 	igmp_purgeif(ifp);		/* manipulates pools */
    687   1.89    itojun #ifdef MROUTING
    688   1.89    itojun 	ip_mrouter_detach(ifp);
    689   1.89    itojun #endif
    690   1.48    itojun }
    691   1.48    itojun 
    692   1.48    itojun /*
    693   1.48    itojun  * SIOC[GAD]LIFADDR.
    694   1.48    itojun  *	SIOCGLIFADDR: get first address. (???)
    695   1.48    itojun  *	SIOCGLIFADDR with IFLR_PREFIX:
    696   1.48    itojun  *		get first address that matches the specified prefix.
    697   1.48    itojun  *	SIOCALIFADDR: add the specified address.
    698   1.48    itojun  *	SIOCALIFADDR with IFLR_PREFIX:
    699   1.48    itojun  *		EINVAL since we can't deduce hostid part of the address.
    700   1.48    itojun  *	SIOCDLIFADDR: delete the specified address.
    701   1.48    itojun  *	SIOCDLIFADDR with IFLR_PREFIX:
    702   1.48    itojun  *		delete the first address that matches the specified prefix.
    703   1.48    itojun  * return values:
    704   1.48    itojun  *	EINVAL on invalid parameters
    705   1.48    itojun  *	EADDRNOTAVAIL on prefix match failed/specified address not found
    706   1.48    itojun  *	other values may be returned from in_ioctl()
    707   1.48    itojun  */
    708   1.48    itojun static int
    709  1.116  christos in_lifaddr_ioctl(struct socket *so, u_long cmd, void *data,
    710  1.147       rtr     struct ifnet *ifp)
    711   1.48    itojun {
    712   1.48    itojun 	struct if_laddrreq *iflr = (struct if_laddrreq *)data;
    713   1.48    itojun 	struct ifaddr *ifa;
    714   1.49    itojun 	struct sockaddr *sa;
    715   1.48    itojun 
    716   1.48    itojun 	/* sanity checks */
    717  1.119    dyoung 	if (data == NULL || ifp == NULL) {
    718   1.48    itojun 		panic("invalid argument to in_lifaddr_ioctl");
    719   1.48    itojun 		/*NOTRECHED*/
    720   1.48    itojun 	}
    721   1.48    itojun 
    722   1.48    itojun 	switch (cmd) {
    723   1.48    itojun 	case SIOCGLIFADDR:
    724   1.48    itojun 		/* address must be specified on GET with IFLR_PREFIX */
    725   1.48    itojun 		if ((iflr->flags & IFLR_PREFIX) == 0)
    726   1.48    itojun 			break;
    727   1.48    itojun 		/*FALLTHROUGH*/
    728   1.48    itojun 	case SIOCALIFADDR:
    729   1.48    itojun 	case SIOCDLIFADDR:
    730   1.48    itojun 		/* address must be specified on ADD and DELETE */
    731   1.49    itojun 		sa = (struct sockaddr *)&iflr->addr;
    732   1.49    itojun 		if (sa->sa_family != AF_INET)
    733   1.48    itojun 			return EINVAL;
    734   1.49    itojun 		if (sa->sa_len != sizeof(struct sockaddr_in))
    735   1.48    itojun 			return EINVAL;
    736   1.48    itojun 		/* XXX need improvement */
    737   1.49    itojun 		sa = (struct sockaddr *)&iflr->dstaddr;
    738  1.126    dyoung 		if (sa->sa_family != AF_UNSPEC && sa->sa_family != AF_INET)
    739   1.48    itojun 			return EINVAL;
    740  1.126    dyoung 		if (sa->sa_len != 0 && sa->sa_len != sizeof(struct sockaddr_in))
    741   1.48    itojun 			return EINVAL;
    742   1.48    itojun 		break;
    743   1.48    itojun 	default: /*shouldn't happen*/
    744   1.48    itojun #if 0
    745   1.48    itojun 		panic("invalid cmd to in_lifaddr_ioctl");
    746   1.48    itojun 		/*NOTREACHED*/
    747   1.48    itojun #else
    748   1.48    itojun 		return EOPNOTSUPP;
    749   1.48    itojun #endif
    750   1.48    itojun 	}
    751  1.124    dyoung 	if (sizeof(struct in_addr) * NBBY < iflr->prefixlen)
    752   1.48    itojun 		return EINVAL;
    753   1.48    itojun 
    754   1.48    itojun 	switch (cmd) {
    755   1.48    itojun 	case SIOCALIFADDR:
    756   1.48    itojun 	    {
    757   1.48    itojun 		struct in_aliasreq ifra;
    758   1.48    itojun 
    759   1.48    itojun 		if (iflr->flags & IFLR_PREFIX)
    760   1.48    itojun 			return EINVAL;
    761   1.48    itojun 
    762  1.110      elad 		/* copy args to in_aliasreq, perform ioctl(SIOCAIFADDR). */
    763  1.132    cegger 		memset(&ifra, 0, sizeof(ifra));
    764  1.134   tsutsui 		memcpy(ifra.ifra_name, iflr->iflr_name,
    765   1.48    itojun 			sizeof(ifra.ifra_name));
    766   1.48    itojun 
    767  1.134   tsutsui 		memcpy(&ifra.ifra_addr, &iflr->addr,
    768   1.49    itojun 			((struct sockaddr *)&iflr->addr)->sa_len);
    769   1.48    itojun 
    770   1.49    itojun 		if (((struct sockaddr *)&iflr->dstaddr)->sa_family) {	/*XXX*/
    771  1.134   tsutsui 			memcpy(&ifra.ifra_dstaddr, &iflr->dstaddr,
    772   1.49    itojun 				((struct sockaddr *)&iflr->dstaddr)->sa_len);
    773   1.48    itojun 		}
    774   1.48    itojun 
    775   1.48    itojun 		ifra.ifra_mask.sin_family = AF_INET;
    776   1.48    itojun 		ifra.ifra_mask.sin_len = sizeof(struct sockaddr_in);
    777   1.48    itojun 		in_len2mask(&ifra.ifra_mask.sin_addr, iflr->prefixlen);
    778   1.48    itojun 
    779  1.147       rtr 		return in_control(so, SIOCAIFADDR, &ifra, ifp);
    780   1.48    itojun 	    }
    781   1.48    itojun 	case SIOCGLIFADDR:
    782   1.48    itojun 	case SIOCDLIFADDR:
    783   1.48    itojun 	    {
    784   1.48    itojun 		struct in_ifaddr *ia;
    785   1.48    itojun 		struct in_addr mask, candidate, match;
    786   1.48    itojun 		struct sockaddr_in *sin;
    787   1.48    itojun 		int cmp;
    788   1.48    itojun 
    789  1.132    cegger 		memset(&mask, 0, sizeof(mask));
    790  1.132    cegger 		memset(&match, 0, sizeof(match));	/* XXX gcc */
    791   1.48    itojun 		if (iflr->flags & IFLR_PREFIX) {
    792   1.48    itojun 			/* lookup a prefix rather than address. */
    793   1.48    itojun 			in_len2mask(&mask, iflr->prefixlen);
    794   1.48    itojun 
    795   1.48    itojun 			sin = (struct sockaddr_in *)&iflr->addr;
    796   1.48    itojun 			match.s_addr = sin->sin_addr.s_addr;
    797   1.48    itojun 			match.s_addr &= mask.s_addr;
    798   1.48    itojun 
    799   1.48    itojun 			/* if you set extra bits, that's wrong */
    800   1.48    itojun 			if (match.s_addr != sin->sin_addr.s_addr)
    801   1.48    itojun 				return EINVAL;
    802   1.48    itojun 
    803   1.48    itojun 			cmp = 1;
    804   1.48    itojun 		} else {
    805   1.48    itojun 			if (cmd == SIOCGLIFADDR) {
    806   1.48    itojun 				/* on getting an address, take the 1st match */
    807   1.48    itojun 				cmp = 0;	/*XXX*/
    808   1.48    itojun 			} else {
    809   1.48    itojun 				/* on deleting an address, do exact match */
    810   1.48    itojun 				in_len2mask(&mask, 32);
    811   1.48    itojun 				sin = (struct sockaddr_in *)&iflr->addr;
    812   1.48    itojun 				match.s_addr = sin->sin_addr.s_addr;
    813   1.48    itojun 
    814   1.48    itojun 				cmp = 1;
    815   1.48    itojun 			}
    816   1.48    itojun 		}
    817   1.48    itojun 
    818  1.101      matt 		IFADDR_FOREACH(ifa, ifp) {
    819   1.95    itojun 			if (ifa->ifa_addr->sa_family != AF_INET)
    820   1.48    itojun 				continue;
    821  1.119    dyoung 			if (cmp == 0)
    822   1.48    itojun 				break;
    823  1.143       gdt 			candidate.s_addr = ((struct sockaddr_in *)ifa->ifa_addr)->sin_addr.s_addr;
    824   1.48    itojun 			candidate.s_addr &= mask.s_addr;
    825   1.48    itojun 			if (candidate.s_addr == match.s_addr)
    826   1.48    itojun 				break;
    827   1.48    itojun 		}
    828  1.119    dyoung 		if (ifa == NULL)
    829   1.48    itojun 			return EADDRNOTAVAIL;
    830   1.48    itojun 		ia = (struct in_ifaddr *)ifa;
    831   1.48    itojun 
    832   1.48    itojun 		if (cmd == SIOCGLIFADDR) {
    833   1.48    itojun 			/* fill in the if_laddrreq structure */
    834  1.134   tsutsui 			memcpy(&iflr->addr, &ia->ia_addr, ia->ia_addr.sin_len);
    835   1.48    itojun 
    836   1.48    itojun 			if ((ifp->if_flags & IFF_POINTOPOINT) != 0) {
    837  1.134   tsutsui 				memcpy(&iflr->dstaddr, &ia->ia_dstaddr,
    838   1.48    itojun 					ia->ia_dstaddr.sin_len);
    839   1.48    itojun 			} else
    840  1.132    cegger 				memset(&iflr->dstaddr, 0, sizeof(iflr->dstaddr));
    841   1.48    itojun 
    842   1.48    itojun 			iflr->prefixlen =
    843   1.48    itojun 				in_mask2len(&ia->ia_sockmask.sin_addr);
    844   1.48    itojun 
    845   1.48    itojun 			iflr->flags = 0;	/*XXX*/
    846   1.48    itojun 
    847   1.48    itojun 			return 0;
    848   1.48    itojun 		} else {
    849   1.48    itojun 			struct in_aliasreq ifra;
    850   1.48    itojun 
    851  1.110      elad 			/* fill in_aliasreq and do ioctl(SIOCDIFADDR) */
    852  1.132    cegger 			memset(&ifra, 0, sizeof(ifra));
    853  1.134   tsutsui 			memcpy(ifra.ifra_name, iflr->iflr_name,
    854   1.48    itojun 				sizeof(ifra.ifra_name));
    855   1.48    itojun 
    856  1.134   tsutsui 			memcpy(&ifra.ifra_addr, &ia->ia_addr,
    857   1.48    itojun 				ia->ia_addr.sin_len);
    858   1.48    itojun 			if ((ifp->if_flags & IFF_POINTOPOINT) != 0) {
    859  1.134   tsutsui 				memcpy(&ifra.ifra_dstaddr, &ia->ia_dstaddr,
    860   1.48    itojun 					ia->ia_dstaddr.sin_len);
    861   1.48    itojun 			}
    862  1.134   tsutsui 			memcpy(&ifra.ifra_dstaddr, &ia->ia_sockmask,
    863   1.48    itojun 				ia->ia_sockmask.sin_len);
    864   1.48    itojun 
    865  1.147       rtr 			return in_control(so, SIOCDIFADDR, &ifra, ifp);
    866   1.48    itojun 		}
    867   1.48    itojun 	    }
    868   1.48    itojun 	}
    869   1.48    itojun 
    870   1.48    itojun 	return EOPNOTSUPP;	/*just for safety*/
    871    1.1       cgd }
    872    1.1       cgd 
    873    1.1       cgd /*
    874    1.1       cgd  * Delete any existing route for an interface.
    875    1.1       cgd  */
    876   1.12   mycroft void
    877  1.115  christos in_ifscrub(struct ifnet *ifp, struct in_ifaddr *ia)
    878    1.1       cgd {
    879    1.1       cgd 
    880   1.67    itojun 	in_scrubprefix(ia);
    881    1.1       cgd }
    882    1.1       cgd 
    883    1.1       cgd /*
    884    1.1       cgd  * Initialize an interface's internet address
    885    1.1       cgd  * and routing table entry.
    886    1.1       cgd  */
    887   1.12   mycroft int
    888  1.103     perry in_ifinit(struct ifnet *ifp, struct in_ifaddr *ia,
    889  1.152       roy     const struct sockaddr_in *sin, int scrub, int hostIsNew)
    890    1.1       cgd {
    891   1.97   mycroft 	u_int32_t i;
    892    1.1       cgd 	struct sockaddr_in oldaddr;
    893   1.66   thorpej 	int s = splnet(), flags = RTF_UP, error;
    894    1.1       cgd 
    895  1.118    dyoung 	if (sin == NULL)
    896   1.97   mycroft 		sin = &ia->ia_addr;
    897   1.97   mycroft 
    898   1.32   mycroft 	/*
    899   1.32   mycroft 	 * Set up new addresses.
    900   1.32   mycroft 	 */
    901    1.1       cgd 	oldaddr = ia->ia_addr;
    902   1.38       tls 	if (ia->ia_addr.sin_family == AF_INET)
    903   1.38       tls 		LIST_REMOVE(ia, ia_hash);
    904    1.1       cgd 	ia->ia_addr = *sin;
    905   1.38       tls 	LIST_INSERT_HEAD(&IN_IFADDR_HASH(ia->ia_addr.sin_addr.s_addr), ia, ia_hash);
    906   1.38       tls 
    907  1.156       roy 	/* Set IN_IFF flags early for if_addr_init() */
    908  1.152       roy 	if (hostIsNew && if_do_dad(ifp) && !in_nullhost(ia->ia_addr.sin_addr)) {
    909  1.152       roy 		if (ifp->if_link_state == LINK_STATE_DOWN)
    910  1.152       roy 			ia->ia4_flags |= IN_IFF_DETACHED;
    911  1.152       roy 		else
    912  1.156       roy 			/* State the intent to try DAD if possible */
    913  1.156       roy 			ia->ia4_flags |= IN_IFF_TRYTENTATIVE;
    914  1.152       roy 	}
    915  1.152       roy 
    916    1.1       cgd 	/*
    917    1.1       cgd 	 * Give the interface a chance to initialize
    918    1.1       cgd 	 * if this is its first address,
    919    1.1       cgd 	 * and to validate the address if necessary.
    920    1.1       cgd 	 */
    921  1.139    dyoung 	if ((error = if_addr_init(ifp, &ia->ia_ifa, true)) != 0)
    922   1.32   mycroft 		goto bad;
    923  1.156       roy 	/* Now clear the try tentative flag, it's job is done. */
    924  1.156       roy 	ia->ia4_flags &= ~IN_IFF_TRYTENTATIVE;
    925    1.1       cgd 	splx(s);
    926  1.156       roy 
    927    1.1       cgd 	if (scrub) {
    928   1.21   mycroft 		ia->ia_ifa.ifa_addr = sintosa(&oldaddr);
    929    1.1       cgd 		in_ifscrub(ifp, ia);
    930   1.21   mycroft 		ia->ia_ifa.ifa_addr = sintosa(&ia->ia_addr);
    931    1.1       cgd 	}
    932   1.35   thorpej 
    933  1.150       roy 	/* Add the local route to the address */
    934  1.150       roy 	in_ifaddlocal(&ia->ia_ifa);
    935  1.150       roy 
    936   1.97   mycroft 	i = ia->ia_addr.sin_addr.s_addr;
    937    1.1       cgd 	if (IN_CLASSA(i))
    938    1.1       cgd 		ia->ia_netmask = IN_CLASSA_NET;
    939    1.1       cgd 	else if (IN_CLASSB(i))
    940    1.1       cgd 		ia->ia_netmask = IN_CLASSB_NET;
    941    1.1       cgd 	else
    942    1.1       cgd 		ia->ia_netmask = IN_CLASSC_NET;
    943    1.1       cgd 	/*
    944   1.12   mycroft 	 * The subnet mask usually includes at least the standard network part,
    945   1.12   mycroft 	 * but may may be smaller in the case of supernetting.
    946   1.12   mycroft 	 * If it is set, we believe it.
    947    1.1       cgd 	 */
    948   1.12   mycroft 	if (ia->ia_subnetmask == 0) {
    949   1.12   mycroft 		ia->ia_subnetmask = ia->ia_netmask;
    950   1.20   mycroft 		ia->ia_sockmask.sin_addr.s_addr = ia->ia_subnetmask;
    951   1.12   mycroft 	} else
    952   1.12   mycroft 		ia->ia_netmask &= ia->ia_subnetmask;
    953   1.35   thorpej 
    954   1.12   mycroft 	ia->ia_net = i & ia->ia_netmask;
    955    1.1       cgd 	ia->ia_subnet = i & ia->ia_subnetmask;
    956   1.12   mycroft 	in_socktrim(&ia->ia_sockmask);
    957   1.35   thorpej 	/* re-calculate the "in_maxmtu" value */
    958   1.35   thorpej 	in_setmaxmtu();
    959    1.1       cgd 	/*
    960    1.1       cgd 	 * Add route for the network.
    961    1.1       cgd 	 */
    962   1.12   mycroft 	ia->ia_ifa.ifa_metric = ifp->if_metric;
    963    1.1       cgd 	if (ifp->if_flags & IFF_BROADCAST) {
    964   1.12   mycroft 		ia->ia_broadaddr.sin_addr.s_addr =
    965   1.20   mycroft 			ia->ia_subnet | ~ia->ia_subnetmask;
    966    1.1       cgd 		ia->ia_netbroadcast.s_addr =
    967   1.20   mycroft 			ia->ia_net | ~ia->ia_netmask;
    968    1.1       cgd 	} else if (ifp->if_flags & IFF_LOOPBACK) {
    969   1.83      onoe 		ia->ia_dstaddr = ia->ia_addr;
    970    1.1       cgd 		flags |= RTF_HOST;
    971    1.1       cgd 	} else if (ifp->if_flags & IFF_POINTOPOINT) {
    972    1.1       cgd 		if (ia->ia_dstaddr.sin_family != AF_INET)
    973    1.1       cgd 			return (0);
    974    1.1       cgd 		flags |= RTF_HOST;
    975    1.1       cgd 	}
    976   1.67    itojun 	error = in_addprefix(ia, flags);
    977    1.5   hpeyerl 	/*
    978    1.5   hpeyerl 	 * If the interface supports multicast, join the "all hosts"
    979    1.5   hpeyerl 	 * multicast group on that interface.
    980    1.5   hpeyerl 	 */
    981   1.65     enami 	if ((ifp->if_flags & IFF_MULTICAST) != 0 && ia->ia_allhosts == NULL) {
    982    1.5   hpeyerl 		struct in_addr addr;
    983    1.5   hpeyerl 
    984   1.20   mycroft 		addr.s_addr = INADDR_ALLHOSTS_GROUP;
    985   1.65     enami 		ia->ia_allhosts = in_addmulti(&addr, ifp);
    986    1.5   hpeyerl 	}
    987  1.152       roy 
    988  1.152       roy 	if (hostIsNew && if_do_dad(ifp) &&
    989  1.152       roy 	    !in_nullhost(ia->ia_addr.sin_addr) &&
    990  1.152       roy 	    ia->ia4_flags & IN_IFF_TENTATIVE)
    991  1.156       roy 		ia->ia_dad_start((struct ifaddr *)ia);
    992  1.152       roy 
    993    1.1       cgd 	return (error);
    994   1.32   mycroft bad:
    995   1.32   mycroft 	splx(s);
    996   1.38       tls 	LIST_REMOVE(ia, ia_hash);
    997   1.32   mycroft 	ia->ia_addr = oldaddr;
    998   1.38       tls 	if (ia->ia_addr.sin_family == AF_INET)
    999   1.38       tls 		LIST_INSERT_HEAD(&IN_IFADDR_HASH(ia->ia_addr.sin_addr.s_addr),
   1000   1.38       tls 		    ia, ia_hash);
   1001   1.32   mycroft 	return (error);
   1002    1.1       cgd }
   1003   1.67    itojun 
   1004   1.67    itojun #define rtinitflags(x) \
   1005   1.68    itojun 	((((x)->ia_ifp->if_flags & (IFF_LOOPBACK | IFF_POINTOPOINT)) != 0) \
   1006   1.68    itojun 	    ? RTF_HOST : 0)
   1007   1.67    itojun 
   1008   1.67    itojun /*
   1009   1.67    itojun  * add a route to prefix ("connected route" in cisco terminology).
   1010   1.67    itojun  * does nothing if there's some interface address with the same prefix already.
   1011   1.67    itojun  */
   1012   1.67    itojun static int
   1013  1.103     perry in_addprefix(struct in_ifaddr *target, int flags)
   1014   1.67    itojun {
   1015   1.67    itojun 	struct in_ifaddr *ia;
   1016   1.67    itojun 	struct in_addr prefix, mask, p;
   1017   1.67    itojun 	int error;
   1018   1.67    itojun 
   1019   1.67    itojun 	if ((flags & RTF_HOST) != 0)
   1020   1.67    itojun 		prefix = target->ia_dstaddr.sin_addr;
   1021   1.85    itojun 	else {
   1022   1.67    itojun 		prefix = target->ia_addr.sin_addr;
   1023   1.85    itojun 		mask = target->ia_sockmask.sin_addr;
   1024   1.85    itojun 		prefix.s_addr &= mask.s_addr;
   1025   1.85    itojun 	}
   1026   1.67    itojun 
   1027   1.93  jonathan 	TAILQ_FOREACH(ia, &in_ifaddrhead, ia_list) {
   1028   1.67    itojun 		if (rtinitflags(ia))
   1029   1.67    itojun 			p = ia->ia_dstaddr.sin_addr;
   1030   1.85    itojun 		else {
   1031   1.67    itojun 			p = ia->ia_addr.sin_addr;
   1032   1.85    itojun 			p.s_addr &= ia->ia_sockmask.sin_addr.s_addr;
   1033   1.85    itojun 		}
   1034   1.85    itojun 
   1035   1.67    itojun 		if (prefix.s_addr != p.s_addr)
   1036   1.67    itojun 			continue;
   1037   1.67    itojun 
   1038   1.67    itojun 		/*
   1039   1.67    itojun 		 * if we got a matching prefix route inserted by other
   1040   1.69    martin 		 * interface address, we don't need to bother
   1041  1.114    dyoung 		 *
   1042  1.114    dyoung 		 * XXX RADIX_MPATH implications here? -dyoung
   1043   1.67    itojun 		 */
   1044  1.150       roy 		if (ia->ia_flags & IFA_ROUTE)
   1045   1.67    itojun 			return 0;
   1046   1.67    itojun 	}
   1047   1.67    itojun 
   1048   1.67    itojun 	/*
   1049   1.67    itojun 	 * noone seem to have prefix route.  insert it.
   1050   1.67    itojun 	 */
   1051  1.119    dyoung 	error = rtinit(&target->ia_ifa, RTM_ADD, flags);
   1052  1.119    dyoung 	if (error == 0)
   1053   1.67    itojun 		target->ia_flags |= IFA_ROUTE;
   1054  1.130       roy 	else if (error == EEXIST) {
   1055  1.150       roy 		/*
   1056  1.130       roy 		 * the fact the route already exists is not an error.
   1057  1.150       roy 		 */
   1058  1.130       roy 		error = 0;
   1059  1.130       roy 	}
   1060   1.67    itojun 	return error;
   1061   1.67    itojun }
   1062   1.67    itojun 
   1063   1.67    itojun /*
   1064   1.67    itojun  * remove a route to prefix ("connected route" in cisco terminology).
   1065   1.67    itojun  * re-installs the route by using another interface address, if there's one
   1066   1.67    itojun  * with the same prefix (otherwise we lose the route mistakenly).
   1067   1.67    itojun  */
   1068   1.67    itojun static int
   1069  1.103     perry in_scrubprefix(struct in_ifaddr *target)
   1070   1.67    itojun {
   1071   1.67    itojun 	struct in_ifaddr *ia;
   1072   1.67    itojun 	struct in_addr prefix, mask, p;
   1073   1.67    itojun 	int error;
   1074   1.67    itojun 
   1075  1.142       roy 	/* If we don't have IFA_ROUTE we should still inform userland */
   1076  1.150       roy 	if ((target->ia_flags & IFA_ROUTE) == 0)
   1077   1.67    itojun 		return 0;
   1078   1.67    itojun 
   1079   1.67    itojun 	if (rtinitflags(target))
   1080   1.67    itojun 		prefix = target->ia_dstaddr.sin_addr;
   1081   1.85    itojun 	else {
   1082   1.67    itojun 		prefix = target->ia_addr.sin_addr;
   1083   1.85    itojun 		mask = target->ia_sockmask.sin_addr;
   1084   1.85    itojun 		prefix.s_addr &= mask.s_addr;
   1085   1.85    itojun 	}
   1086   1.67    itojun 
   1087   1.93  jonathan 	TAILQ_FOREACH(ia, &in_ifaddrhead, ia_list) {
   1088   1.67    itojun 		if (rtinitflags(ia))
   1089   1.67    itojun 			p = ia->ia_dstaddr.sin_addr;
   1090   1.85    itojun 		else {
   1091   1.67    itojun 			p = ia->ia_addr.sin_addr;
   1092   1.85    itojun 			p.s_addr &= ia->ia_sockmask.sin_addr.s_addr;
   1093   1.85    itojun 		}
   1094   1.85    itojun 
   1095   1.67    itojun 		if (prefix.s_addr != p.s_addr)
   1096   1.67    itojun 			continue;
   1097   1.67    itojun 
   1098   1.67    itojun 		/*
   1099   1.67    itojun 		 * if we got a matching prefix route, move IFA_ROUTE to him
   1100   1.67    itojun 		 */
   1101   1.67    itojun 		if ((ia->ia_flags & IFA_ROUTE) == 0) {
   1102  1.119    dyoung 			rtinit(&target->ia_ifa, RTM_DELETE,
   1103   1.67    itojun 			    rtinitflags(target));
   1104   1.67    itojun 			target->ia_flags &= ~IFA_ROUTE;
   1105   1.67    itojun 
   1106  1.119    dyoung 			error = rtinit(&ia->ia_ifa, RTM_ADD,
   1107   1.67    itojun 			    rtinitflags(ia) | RTF_UP);
   1108   1.67    itojun 			if (error == 0)
   1109   1.67    itojun 				ia->ia_flags |= IFA_ROUTE;
   1110   1.67    itojun 			return error;
   1111   1.67    itojun 		}
   1112   1.67    itojun 	}
   1113   1.67    itojun 
   1114   1.67    itojun 	/*
   1115   1.67    itojun 	 * noone seem to have prefix route.  remove it.
   1116   1.67    itojun 	 */
   1117  1.119    dyoung 	rtinit(&target->ia_ifa, RTM_DELETE, rtinitflags(target));
   1118   1.67    itojun 	target->ia_flags &= ~IFA_ROUTE;
   1119   1.67    itojun 	return 0;
   1120   1.67    itojun }
   1121   1.67    itojun 
   1122   1.67    itojun #undef rtinitflags
   1123    1.1       cgd 
   1124    1.1       cgd /*
   1125    1.1       cgd  * Return 1 if the address might be a local broadcast address.
   1126    1.1       cgd  */
   1127    1.8   mycroft int
   1128  1.103     perry in_broadcast(struct in_addr in, struct ifnet *ifp)
   1129    1.1       cgd {
   1130   1.59  augustss 	struct ifaddr *ifa;
   1131    1.1       cgd 
   1132   1.12   mycroft 	if (in.s_addr == INADDR_BROADCAST ||
   1133   1.32   mycroft 	    in_nullhost(in))
   1134   1.12   mycroft 		return 1;
   1135   1.12   mycroft 	if ((ifp->if_flags & IFF_BROADCAST) == 0)
   1136   1.12   mycroft 		return 0;
   1137    1.1       cgd 	/*
   1138    1.1       cgd 	 * Look through the list of addresses for a match
   1139    1.1       cgd 	 * with a broadcast address.
   1140    1.1       cgd 	 */
   1141   1.22   mycroft #define ia (ifatoia(ifa))
   1142  1.101      matt 	IFADDR_FOREACH(ifa, ifp)
   1143   1.12   mycroft 		if (ifa->ifa_addr->sa_family == AF_INET &&
   1144   1.75    itojun 		    !in_hosteq(in, ia->ia_addr.sin_addr) &&
   1145   1.32   mycroft 		    (in_hosteq(in, ia->ia_broadaddr.sin_addr) ||
   1146   1.32   mycroft 		     in_hosteq(in, ia->ia_netbroadcast) ||
   1147   1.77    itojun 		     (hostzeroisbroadcast &&
   1148   1.47  sommerfe 		      /*
   1149   1.47  sommerfe 		       * Check for old-style (host 0) broadcast.
   1150   1.47  sommerfe 		       */
   1151   1.47  sommerfe 		      (in.s_addr == ia->ia_subnet ||
   1152   1.47  sommerfe 		       in.s_addr == ia->ia_net))))
   1153   1.47  sommerfe 			return 1;
   1154    1.1       cgd 	return (0);
   1155   1.12   mycroft #undef ia
   1156   1.64    itojun }
   1157   1.64    itojun 
   1158   1.64    itojun /*
   1159  1.152       roy  * perform DAD when interface becomes IFF_UP.
   1160  1.152       roy  */
   1161  1.152       roy void
   1162  1.152       roy in_if_link_up(struct ifnet *ifp)
   1163  1.152       roy {
   1164  1.152       roy 	struct ifaddr *ifa;
   1165  1.152       roy 	struct in_ifaddr *ia;
   1166  1.152       roy 
   1167  1.152       roy 	/* Ensure it's sane to run DAD */
   1168  1.152       roy 	if (ifp->if_link_state == LINK_STATE_DOWN)
   1169  1.152       roy 		return;
   1170  1.152       roy 	if ((ifp->if_flags & (IFF_UP|IFF_RUNNING)) != (IFF_UP|IFF_RUNNING))
   1171  1.152       roy 		return;
   1172  1.152       roy 
   1173  1.152       roy 	IFADDR_FOREACH(ifa, ifp) {
   1174  1.152       roy 		if (ifa->ifa_addr->sa_family != AF_INET)
   1175  1.152       roy 			continue;
   1176  1.152       roy 		ia = (struct in_ifaddr *)ifa;
   1177  1.152       roy 
   1178  1.152       roy 		/* If detached then mark as tentative */
   1179  1.152       roy 		if (ia->ia4_flags & IN_IFF_DETACHED) {
   1180  1.152       roy 			ia->ia4_flags &= ~IN_IFF_DETACHED;
   1181  1.156       roy 			if (if_do_dad(ifp) && ia->ia_dad_start != NULL)
   1182  1.152       roy 				ia->ia4_flags |= IN_IFF_TENTATIVE;
   1183  1.156       roy 			else if ((ia->ia4_flags & IN_IFF_TENTATIVE) == 0)
   1184  1.152       roy 				rt_newaddrmsg(RTM_NEWADDR, ifa, 0, NULL);
   1185  1.152       roy 		}
   1186  1.152       roy 
   1187  1.152       roy 		if (ia->ia4_flags & IN_IFF_TENTATIVE) {
   1188  1.152       roy 			/* Clear the duplicated flag as we're starting DAD. */
   1189  1.152       roy 			ia->ia4_flags &= ~IN_IFF_DUPLICATED;
   1190  1.156       roy 			ia->ia_dad_start(ifa);
   1191  1.152       roy 		}
   1192  1.152       roy 	}
   1193  1.152       roy }
   1194  1.152       roy 
   1195  1.152       roy void
   1196  1.152       roy in_if_up(struct ifnet *ifp)
   1197  1.152       roy {
   1198  1.152       roy 
   1199  1.152       roy 	/* interface may not support link state, so bring it up also */
   1200  1.152       roy 	in_if_link_up(ifp);
   1201  1.152       roy }
   1202  1.152       roy 
   1203  1.152       roy /*
   1204  1.152       roy  * Mark all addresses as detached.
   1205  1.152       roy  */
   1206  1.152       roy void
   1207  1.152       roy in_if_link_down(struct ifnet *ifp)
   1208  1.152       roy {
   1209  1.152       roy 	struct ifaddr *ifa;
   1210  1.152       roy 	struct in_ifaddr *ia;
   1211  1.152       roy 
   1212  1.152       roy 	IFADDR_FOREACH(ifa, ifp) {
   1213  1.152       roy 		if (ifa->ifa_addr->sa_family != AF_INET)
   1214  1.152       roy 			continue;
   1215  1.152       roy 		ia = (struct in_ifaddr *)ifa;
   1216  1.152       roy 
   1217  1.152       roy 		/* Stop DAD processing */
   1218  1.156       roy 		if (ia->ia_dad_stop != NULL)
   1219  1.156       roy 			ia->ia_dad_stop(ifa);
   1220  1.152       roy 
   1221  1.152       roy 		/*
   1222  1.152       roy 		 * Mark the address as detached.
   1223  1.152       roy 		 */
   1224  1.152       roy 		if (!(ia->ia4_flags & IN_IFF_DETACHED)) {
   1225  1.152       roy 			ia->ia4_flags |= IN_IFF_DETACHED;
   1226  1.152       roy 			ia->ia4_flags &=
   1227  1.152       roy 			    ~(IN_IFF_TENTATIVE | IN_IFF_DUPLICATED);
   1228  1.152       roy 			rt_newaddrmsg(RTM_NEWADDR, ifa, 0, NULL);
   1229  1.152       roy 		}
   1230  1.152       roy 	}
   1231  1.152       roy }
   1232  1.152       roy 
   1233  1.152       roy void
   1234  1.152       roy in_if_down(struct ifnet *ifp)
   1235  1.152       roy {
   1236  1.152       roy 
   1237  1.152       roy 	in_if_link_down(ifp);
   1238  1.152       roy }
   1239  1.152       roy 
   1240  1.152       roy void
   1241  1.152       roy in_if_link_state_change(struct ifnet *ifp, int link_state)
   1242  1.152       roy {
   1243  1.152       roy 
   1244  1.152       roy 	switch (link_state) {
   1245  1.152       roy 	case LINK_STATE_DOWN:
   1246  1.152       roy 		in_if_link_down(ifp);
   1247  1.152       roy 		break;
   1248  1.152       roy 	case LINK_STATE_UP:
   1249  1.152       roy 		in_if_link_up(ifp);
   1250  1.152       roy 		break;
   1251  1.152       roy 	}
   1252  1.152       roy }
   1253  1.152       roy 
   1254  1.152       roy /*
   1255  1.146     rmind  * in_lookup_multi: look up the in_multi record for a given IP
   1256  1.146     rmind  * multicast address on a given interface.  If no matching record is
   1257  1.146     rmind  * found, return NULL.
   1258  1.146     rmind  */
   1259  1.146     rmind struct in_multi *
   1260  1.146     rmind in_lookup_multi(struct in_addr addr, ifnet_t *ifp)
   1261  1.146     rmind {
   1262  1.146     rmind 	struct in_multi *inm;
   1263  1.146     rmind 
   1264  1.146     rmind 	KASSERT(rw_lock_held(&in_multilock));
   1265  1.146     rmind 
   1266  1.146     rmind 	LIST_FOREACH(inm, &IN_MULTI_HASH(addr.s_addr, ifp), inm_list) {
   1267  1.146     rmind 		if (in_hosteq(inm->inm_addr, addr) && inm->inm_ifp == ifp)
   1268  1.146     rmind 			break;
   1269  1.146     rmind 	}
   1270  1.146     rmind 	return inm;
   1271  1.146     rmind }
   1272  1.146     rmind 
   1273  1.146     rmind /*
   1274  1.146     rmind  * in_multi_group: check whether the address belongs to an IP multicast
   1275  1.146     rmind  * group we are joined on this interface.  Returns true or false.
   1276  1.146     rmind  */
   1277  1.146     rmind bool
   1278  1.146     rmind in_multi_group(struct in_addr addr, ifnet_t *ifp, int flags)
   1279  1.146     rmind {
   1280  1.146     rmind 	bool ingroup;
   1281  1.146     rmind 
   1282  1.146     rmind 	if (__predict_true(flags & IP_IGMP_MCAST) == 0) {
   1283  1.146     rmind 		rw_enter(&in_multilock, RW_READER);
   1284  1.146     rmind 		ingroup = in_lookup_multi(addr, ifp) != NULL;
   1285  1.146     rmind 		rw_exit(&in_multilock);
   1286  1.146     rmind 	} else {
   1287  1.146     rmind 		/* XXX Recursive call from ip_output(). */
   1288  1.146     rmind 		KASSERT(rw_lock_held(&in_multilock));
   1289  1.146     rmind 		ingroup = in_lookup_multi(addr, ifp) != NULL;
   1290  1.146     rmind 	}
   1291  1.146     rmind 	return ingroup;
   1292  1.146     rmind }
   1293  1.146     rmind 
   1294  1.146     rmind /*
   1295    1.5   hpeyerl  * Add an address to the list of IP multicast addresses for a given interface.
   1296    1.5   hpeyerl  */
   1297    1.5   hpeyerl struct in_multi *
   1298  1.146     rmind in_addmulti(struct in_addr *ap, ifnet_t *ifp)
   1299    1.5   hpeyerl {
   1300  1.118    dyoung 	struct sockaddr_in sin;
   1301   1.59  augustss 	struct in_multi *inm;
   1302    1.5   hpeyerl 
   1303    1.5   hpeyerl 	/*
   1304    1.5   hpeyerl 	 * See if address already in list.
   1305    1.5   hpeyerl 	 */
   1306  1.146     rmind 	rw_enter(&in_multilock, RW_WRITER);
   1307  1.146     rmind 	inm = in_lookup_multi(*ap, ifp);
   1308    1.5   hpeyerl 	if (inm != NULL) {
   1309    1.5   hpeyerl 		/*
   1310    1.5   hpeyerl 		 * Found it; just increment the reference count.
   1311    1.5   hpeyerl 		 */
   1312  1.146     rmind 		inm->inm_refcount++;
   1313  1.146     rmind 		rw_exit(&in_multilock);
   1314  1.146     rmind 		return inm;
   1315  1.146     rmind 	}
   1316  1.146     rmind 
   1317  1.146     rmind 	/*
   1318  1.146     rmind 	 * New address; allocate a new multicast record.
   1319  1.146     rmind 	 */
   1320  1.146     rmind 	inm = pool_get(&inmulti_pool, PR_NOWAIT);
   1321  1.146     rmind 	if (inm == NULL) {
   1322  1.146     rmind 		rw_exit(&in_multilock);
   1323  1.146     rmind 		return NULL;
   1324  1.146     rmind 	}
   1325  1.146     rmind 	inm->inm_addr = *ap;
   1326  1.146     rmind 	inm->inm_ifp = ifp;
   1327  1.146     rmind 	inm->inm_refcount = 1;
   1328  1.146     rmind 
   1329  1.146     rmind 	/*
   1330  1.146     rmind 	 * Ask the network driver to update its multicast reception
   1331  1.146     rmind 	 * filter appropriately for the new address.
   1332  1.146     rmind 	 */
   1333  1.146     rmind 	sockaddr_in_init(&sin, ap, 0);
   1334  1.146     rmind 	if (if_mcast_op(ifp, SIOCADDMULTI, sintosa(&sin)) != 0) {
   1335  1.146     rmind 		rw_exit(&in_multilock);
   1336  1.146     rmind 		pool_put(&inmulti_pool, inm);
   1337  1.146     rmind 		return NULL;
   1338  1.146     rmind 	}
   1339  1.146     rmind 
   1340  1.146     rmind 	/*
   1341  1.146     rmind 	 * Let IGMP know that we have joined a new IP multicast group.
   1342  1.146     rmind 	 */
   1343  1.146     rmind 	if (igmp_joingroup(inm) != 0) {
   1344  1.146     rmind 		rw_exit(&in_multilock);
   1345  1.146     rmind 		pool_put(&inmulti_pool, inm);
   1346  1.146     rmind 		return NULL;
   1347    1.5   hpeyerl 	}
   1348  1.146     rmind 	LIST_INSERT_HEAD(
   1349  1.146     rmind 	    &IN_MULTI_HASH(inm->inm_addr.s_addr, ifp),
   1350  1.146     rmind 	    inm, inm_list);
   1351  1.146     rmind 	in_multientries++;
   1352  1.146     rmind 	rw_exit(&in_multilock);
   1353  1.146     rmind 
   1354  1.146     rmind 	return inm;
   1355    1.5   hpeyerl }
   1356    1.5   hpeyerl 
   1357    1.5   hpeyerl /*
   1358    1.5   hpeyerl  * Delete a multicast address record.
   1359    1.5   hpeyerl  */
   1360   1.26  christos void
   1361  1.103     perry in_delmulti(struct in_multi *inm)
   1362    1.5   hpeyerl {
   1363  1.118    dyoung 	struct sockaddr_in sin;
   1364    1.5   hpeyerl 
   1365  1.146     rmind 	rw_enter(&in_multilock, RW_WRITER);
   1366  1.146     rmind 	if (--inm->inm_refcount > 0) {
   1367  1.146     rmind 		rw_exit(&in_multilock);
   1368  1.146     rmind 		return;
   1369  1.146     rmind 	}
   1370  1.146     rmind 
   1371  1.146     rmind 	/*
   1372  1.146     rmind 	 * No remaining claims to this record; let IGMP know that
   1373  1.146     rmind 	 * we are leaving the multicast group.
   1374  1.146     rmind 	 */
   1375  1.146     rmind 	igmp_leavegroup(inm);
   1376  1.146     rmind 
   1377  1.146     rmind 	/*
   1378  1.146     rmind 	 * Notify the network driver to update its multicast reception
   1379  1.146     rmind 	 * filter.
   1380  1.146     rmind 	 */
   1381  1.146     rmind 	sockaddr_in_init(&sin, &inm->inm_addr, 0);
   1382  1.146     rmind 	if_mcast_op(inm->inm_ifp, SIOCDELMULTI, sintosa(&sin));
   1383  1.146     rmind 
   1384  1.146     rmind 	/*
   1385  1.146     rmind 	 * Unlink from list.
   1386  1.146     rmind 	 */
   1387  1.146     rmind 	LIST_REMOVE(inm, inm_list);
   1388  1.146     rmind 	in_multientries--;
   1389  1.146     rmind 	rw_exit(&in_multilock);
   1390  1.146     rmind 
   1391  1.146     rmind 	pool_put(&inmulti_pool, inm);
   1392  1.146     rmind }
   1393  1.146     rmind 
   1394  1.146     rmind /*
   1395  1.146     rmind  * in_next_multi: step through all of the in_multi records, one at a time.
   1396  1.146     rmind  * The current position is remembered in "step", which the caller must
   1397  1.146     rmind  * provide.  in_first_multi(), below, must be called to initialize "step"
   1398  1.146     rmind  * and get the first record.  Both macros return a NULL "inm" when there
   1399  1.146     rmind  * are no remaining records.
   1400  1.146     rmind  */
   1401  1.146     rmind struct in_multi *
   1402  1.146     rmind in_next_multi(struct in_multistep *step)
   1403  1.146     rmind {
   1404  1.146     rmind 	struct in_multi *inm;
   1405  1.146     rmind 
   1406  1.146     rmind 	KASSERT(rw_lock_held(&in_multilock));
   1407  1.146     rmind 
   1408  1.146     rmind 	while (step->i_inm == NULL && step->i_n < IN_MULTI_HASH_SIZE) {
   1409  1.146     rmind 		step->i_inm = LIST_FIRST(&in_multihashtbl[++step->i_n]);
   1410  1.146     rmind 	}
   1411  1.146     rmind 	if ((inm = step->i_inm) != NULL) {
   1412  1.146     rmind 		step->i_inm = LIST_NEXT(inm, inm_list);
   1413    1.5   hpeyerl 	}
   1414  1.146     rmind 	return inm;
   1415  1.146     rmind }
   1416  1.146     rmind 
   1417  1.146     rmind struct in_multi *
   1418  1.146     rmind in_first_multi(struct in_multistep *step)
   1419  1.146     rmind {
   1420  1.146     rmind 	KASSERT(rw_lock_held(&in_multilock));
   1421  1.146     rmind 
   1422  1.146     rmind 	step->i_n = 0;
   1423  1.146     rmind 	step->i_inm = LIST_FIRST(&in_multihashtbl[0]);
   1424  1.146     rmind 	return in_next_multi(step);
   1425  1.146     rmind }
   1426  1.146     rmind 
   1427  1.146     rmind void
   1428  1.146     rmind in_multi_lock(int op)
   1429  1.146     rmind {
   1430  1.146     rmind 	rw_enter(&in_multilock, op);
   1431  1.146     rmind }
   1432  1.146     rmind 
   1433  1.146     rmind void
   1434  1.146     rmind in_multi_unlock(void)
   1435  1.146     rmind {
   1436  1.146     rmind 	rw_exit(&in_multilock);
   1437  1.146     rmind }
   1438  1.146     rmind 
   1439  1.146     rmind int
   1440  1.146     rmind in_multi_lock_held(void)
   1441  1.146     rmind {
   1442  1.146     rmind 	return rw_lock_held(&in_multilock);
   1443    1.5   hpeyerl }
   1444  1.145     rmind 
   1445  1.145     rmind struct sockaddr_in *
   1446  1.145     rmind in_selectsrc(struct sockaddr_in *sin, struct route *ro,
   1447  1.145     rmind     int soopts, struct ip_moptions *mopts, int *errorp)
   1448  1.145     rmind {
   1449  1.145     rmind 	struct rtentry *rt = NULL;
   1450  1.145     rmind 	struct in_ifaddr *ia = NULL;
   1451  1.145     rmind 
   1452  1.145     rmind 	/*
   1453  1.145     rmind          * If route is known or can be allocated now, take the
   1454  1.145     rmind          * source address from the interface.  Otherwise, punt.
   1455  1.145     rmind 	 */
   1456  1.145     rmind 	if ((soopts & SO_DONTROUTE) != 0)
   1457  1.145     rmind 		rtcache_free(ro);
   1458  1.145     rmind 	else {
   1459  1.145     rmind 		union {
   1460  1.145     rmind 			struct sockaddr		dst;
   1461  1.145     rmind 			struct sockaddr_in	dst4;
   1462  1.145     rmind 		} u;
   1463  1.145     rmind 
   1464  1.145     rmind 		sockaddr_in_init(&u.dst4, &sin->sin_addr, 0);
   1465  1.145     rmind 		rt = rtcache_lookup(ro, &u.dst);
   1466  1.145     rmind 	}
   1467  1.145     rmind 	/*
   1468  1.145     rmind 	 * If we found a route, use the address
   1469  1.145     rmind 	 * corresponding to the outgoing interface
   1470  1.145     rmind 	 * unless it is the loopback (in case a route
   1471  1.145     rmind 	 * to our address on another net goes to loopback).
   1472  1.145     rmind 	 *
   1473  1.145     rmind 	 * XXX Is this still true?  Do we care?
   1474  1.145     rmind 	 */
   1475  1.145     rmind 	if (rt != NULL && (rt->rt_ifp->if_flags & IFF_LOOPBACK) == 0)
   1476  1.145     rmind 		ia = ifatoia(rt->rt_ifa);
   1477  1.145     rmind 	if (ia == NULL) {
   1478  1.145     rmind 		u_int16_t fport = sin->sin_port;
   1479  1.145     rmind 
   1480  1.145     rmind 		sin->sin_port = 0;
   1481  1.145     rmind 		ia = ifatoia(ifa_ifwithladdr(sintosa(sin)));
   1482  1.145     rmind 		sin->sin_port = fport;
   1483  1.145     rmind 		if (ia == NULL) {
   1484  1.145     rmind 			/* Find 1st non-loopback AF_INET address */
   1485  1.145     rmind 			TAILQ_FOREACH(ia, &in_ifaddrhead, ia_list) {
   1486  1.145     rmind 				if (!(ia->ia_ifp->if_flags & IFF_LOOPBACK))
   1487  1.145     rmind 					break;
   1488  1.145     rmind 			}
   1489  1.145     rmind 		}
   1490  1.145     rmind 		if (ia == NULL) {
   1491  1.145     rmind 			*errorp = EADDRNOTAVAIL;
   1492  1.145     rmind 			return NULL;
   1493  1.145     rmind 		}
   1494  1.145     rmind 	}
   1495  1.145     rmind 	/*
   1496  1.145     rmind 	 * If the destination address is multicast and an outgoing
   1497  1.145     rmind 	 * interface has been set as a multicast option, use the
   1498  1.145     rmind 	 * address of that interface as our source address.
   1499  1.145     rmind 	 */
   1500  1.145     rmind 	if (IN_MULTICAST(sin->sin_addr.s_addr) && mopts != NULL) {
   1501  1.145     rmind 		struct ip_moptions *imo;
   1502  1.145     rmind 		struct ifnet *ifp;
   1503  1.145     rmind 
   1504  1.145     rmind 		imo = mopts;
   1505  1.145     rmind 		if (imo->imo_multicast_ifp != NULL) {
   1506  1.145     rmind 			ifp = imo->imo_multicast_ifp;
   1507  1.145     rmind 			IFP_TO_IA(ifp, ia);		/* XXX */
   1508  1.152       roy 			if (ia == 0 || ia->ia4_flags & IN_IFF_NOTREADY) {
   1509  1.145     rmind 				*errorp = EADDRNOTAVAIL;
   1510  1.145     rmind 				return NULL;
   1511  1.145     rmind 			}
   1512  1.145     rmind 		}
   1513  1.145     rmind 	}
   1514  1.145     rmind 	if (ia->ia_ifa.ifa_getifa != NULL) {
   1515  1.145     rmind 		ia = ifatoia((*ia->ia_ifa.ifa_getifa)(&ia->ia_ifa,
   1516  1.145     rmind 		                                      sintosa(sin)));
   1517  1.152       roy 		if (ia == NULL) {
   1518  1.152       roy 			*errorp = EADDRNOTAVAIL;
   1519  1.152       roy 			return NULL;
   1520  1.152       roy 		}
   1521  1.145     rmind 	}
   1522  1.145     rmind #ifdef GETIFA_DEBUG
   1523  1.145     rmind 	else
   1524  1.145     rmind 		printf("%s: missing ifa_getifa\n", __func__);
   1525  1.145     rmind #endif
   1526  1.145     rmind 	return satosin(&ia->ia_addr);
   1527  1.145     rmind }
   1528  1.145     rmind 
   1529  1.145     rmind static void
   1530  1.145     rmind in_sysctl_init(struct sysctllog **clog)
   1531  1.145     rmind {
   1532  1.145     rmind 	sysctl_createv(clog, 0, NULL, NULL,
   1533  1.145     rmind 		       CTLFLAG_PERMANENT,
   1534  1.145     rmind 		       CTLTYPE_NODE, "inet",
   1535  1.145     rmind 		       SYSCTL_DESCR("PF_INET related settings"),
   1536  1.145     rmind 		       NULL, 0, NULL, 0,
   1537  1.145     rmind 		       CTL_NET, PF_INET, CTL_EOL);
   1538  1.145     rmind 	sysctl_createv(clog, 0, NULL, NULL,
   1539  1.145     rmind 		       CTLFLAG_PERMANENT,
   1540  1.145     rmind 		       CTLTYPE_NODE, "ip",
   1541  1.145     rmind 		       SYSCTL_DESCR("IPv4 related settings"),
   1542  1.145     rmind 		       NULL, 0, NULL, 0,
   1543  1.145     rmind 		       CTL_NET, PF_INET, IPPROTO_IP, CTL_EOL);
   1544  1.145     rmind 
   1545  1.145     rmind 	sysctl_createv(clog, 0, NULL, NULL,
   1546  1.145     rmind 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1547  1.145     rmind 		       CTLTYPE_INT, "subnetsarelocal",
   1548  1.145     rmind 		       SYSCTL_DESCR("Whether logical subnets are considered "
   1549  1.145     rmind 				    "local"),
   1550  1.145     rmind 		       NULL, 0, &subnetsarelocal, 0,
   1551  1.145     rmind 		       CTL_NET, PF_INET, IPPROTO_IP,
   1552  1.145     rmind 		       IPCTL_SUBNETSARELOCAL, CTL_EOL);
   1553  1.145     rmind 	sysctl_createv(clog, 0, NULL, NULL,
   1554  1.145     rmind 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1555  1.145     rmind 		       CTLTYPE_INT, "hostzerobroadcast",
   1556  1.145     rmind 		       SYSCTL_DESCR("All zeroes address is broadcast address"),
   1557  1.145     rmind 		       NULL, 0, &hostzeroisbroadcast, 0,
   1558  1.145     rmind 		       CTL_NET, PF_INET, IPPROTO_IP,
   1559  1.145     rmind 		       IPCTL_HOSTZEROBROADCAST, CTL_EOL);
   1560  1.145     rmind }
   1561