Home | History | Annotate | Line # | Download | only in netinet
in_pcb.c revision 1.142
      1  1.142      yamt /*	$NetBSD: in_pcb.c,v 1.142 2012/06/21 10:31:45 yamt Exp $	*/
      2   1.59    itojun 
      3   1.59    itojun /*
      4   1.59    itojun  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
      5   1.59    itojun  * All rights reserved.
      6   1.78    itojun  *
      7   1.59    itojun  * Redistribution and use in source and binary forms, with or without
      8   1.59    itojun  * modification, are permitted provided that the following conditions
      9   1.59    itojun  * are met:
     10   1.59    itojun  * 1. Redistributions of source code must retain the above copyright
     11   1.59    itojun  *    notice, this list of conditions and the following disclaimer.
     12   1.59    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     13   1.59    itojun  *    notice, this list of conditions and the following disclaimer in the
     14   1.59    itojun  *    documentation and/or other materials provided with the distribution.
     15   1.59    itojun  * 3. Neither the name of the project nor the names of its contributors
     16   1.59    itojun  *    may be used to endorse or promote products derived from this software
     17   1.59    itojun  *    without specific prior written permission.
     18   1.78    itojun  *
     19   1.59    itojun  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     20   1.59    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     21   1.59    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     22   1.59    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     23   1.59    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     24   1.59    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     25   1.59    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     26   1.59    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     27   1.59    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     28   1.59    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     29   1.59    itojun  * SUCH DAMAGE.
     30   1.59    itojun  */
     31   1.57   thorpej 
     32   1.57   thorpej /*-
     33  1.138    dyoung  * Copyright (c) 1998, 2011 The NetBSD Foundation, Inc.
     34   1.57   thorpej  * All rights reserved.
     35   1.57   thorpej  *
     36   1.57   thorpej  * This code is derived from software contributed to The NetBSD Foundation
     37  1.138    dyoung  * by Coyote Point Systems, Inc.
     38  1.138    dyoung  * This code is derived from software contributed to The NetBSD Foundation
     39   1.57   thorpej  * by Public Access Networks Corporation ("Panix").  It was developed under
     40   1.57   thorpej  * contract to Panix by Eric Haszlakiewicz and Thor Lancelot Simon.
     41   1.57   thorpej  *
     42   1.57   thorpej  * Redistribution and use in source and binary forms, with or without
     43   1.57   thorpej  * modification, are permitted provided that the following conditions
     44   1.57   thorpej  * are met:
     45   1.57   thorpej  * 1. Redistributions of source code must retain the above copyright
     46   1.57   thorpej  *    notice, this list of conditions and the following disclaimer.
     47   1.57   thorpej  * 2. Redistributions in binary form must reproduce the above copyright
     48   1.57   thorpej  *    notice, this list of conditions and the following disclaimer in the
     49   1.57   thorpej  *    documentation and/or other materials provided with the distribution.
     50   1.57   thorpej  *
     51   1.57   thorpej  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     52   1.57   thorpej  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     53   1.57   thorpej  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     54   1.57   thorpej  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     55   1.57   thorpej  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     56   1.57   thorpej  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     57   1.57   thorpej  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     58   1.57   thorpej  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     59   1.57   thorpej  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     60   1.57   thorpej  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     61   1.57   thorpej  * POSSIBILITY OF SUCH DAMAGE.
     62   1.57   thorpej  */
     63   1.11       cgd 
     64    1.1       cgd /*
     65   1.44   thorpej  * Copyright (c) 1982, 1986, 1991, 1993, 1995
     66   1.10   mycroft  *	The Regents of the University of California.  All rights reserved.
     67    1.1       cgd  *
     68    1.1       cgd  * Redistribution and use in source and binary forms, with or without
     69    1.1       cgd  * modification, are permitted provided that the following conditions
     70    1.1       cgd  * are met:
     71    1.1       cgd  * 1. Redistributions of source code must retain the above copyright
     72    1.1       cgd  *    notice, this list of conditions and the following disclaimer.
     73    1.1       cgd  * 2. Redistributions in binary form must reproduce the above copyright
     74    1.1       cgd  *    notice, this list of conditions and the following disclaimer in the
     75    1.1       cgd  *    documentation and/or other materials provided with the distribution.
     76   1.86       agc  * 3. Neither the name of the University nor the names of its contributors
     77    1.1       cgd  *    may be used to endorse or promote products derived from this software
     78    1.1       cgd  *    without specific prior written permission.
     79    1.1       cgd  *
     80    1.1       cgd  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     81    1.1       cgd  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     82    1.1       cgd  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     83    1.1       cgd  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     84    1.1       cgd  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     85    1.1       cgd  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     86    1.1       cgd  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     87    1.1       cgd  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     88    1.1       cgd  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     89    1.1       cgd  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     90    1.1       cgd  * SUCH DAMAGE.
     91    1.1       cgd  *
     92   1.44   thorpej  *	@(#)in_pcb.c	8.4 (Berkeley) 5/24/95
     93    1.1       cgd  */
     94   1.73     lukem 
     95   1.73     lukem #include <sys/cdefs.h>
     96  1.142      yamt __KERNEL_RCSID(0, "$NetBSD: in_pcb.c,v 1.142 2012/06/21 10:31:45 yamt Exp $");
     97   1.60   thorpej 
     98   1.88    itojun #include "opt_inet.h"
     99   1.60   thorpej #include "opt_ipsec.h"
    100    1.1       cgd 
    101    1.7   mycroft #include <sys/param.h>
    102    1.7   mycroft #include <sys/systm.h>
    103    1.7   mycroft #include <sys/malloc.h>
    104    1.7   mycroft #include <sys/mbuf.h>
    105    1.7   mycroft #include <sys/protosw.h>
    106    1.7   mycroft #include <sys/socket.h>
    107    1.7   mycroft #include <sys/socketvar.h>
    108    1.7   mycroft #include <sys/ioctl.h>
    109   1.10   mycroft #include <sys/errno.h>
    110   1.10   mycroft #include <sys/time.h>
    111  1.128     pooka #include <sys/once.h>
    112   1.52   thorpej #include <sys/pool.h>
    113   1.10   mycroft #include <sys/proc.h>
    114  1.102      elad #include <sys/kauth.h>
    115  1.129     pooka #include <sys/uidinfo.h>
    116  1.132      elad #include <sys/domain.h>
    117    1.1       cgd 
    118    1.7   mycroft #include <net/if.h>
    119    1.7   mycroft #include <net/route.h>
    120    1.1       cgd 
    121    1.7   mycroft #include <netinet/in.h>
    122    1.7   mycroft #include <netinet/in_systm.h>
    123    1.7   mycroft #include <netinet/ip.h>
    124    1.7   mycroft #include <netinet/in_pcb.h>
    125    1.7   mycroft #include <netinet/in_var.h>
    126    1.7   mycroft #include <netinet/ip_var.h>
    127  1.139  christos #include <netinet/rfc6056.h>
    128    1.1       cgd 
    129   1.88    itojun #ifdef INET6
    130   1.88    itojun #include <netinet/ip6.h>
    131   1.88    itojun #include <netinet6/ip6_var.h>
    132   1.88    itojun #include <netinet6/in6_pcb.h>
    133   1.88    itojun #endif
    134   1.88    itojun 
    135  1.141  drochner #ifdef FAST_IPSEC
    136   1.87  jonathan #include <netipsec/ipsec.h>
    137   1.87  jonathan #include <netipsec/key.h>
    138   1.59    itojun #endif /* IPSEC */
    139   1.59    itojun 
    140  1.138    dyoung #include <netinet/tcp_vtw.h>
    141  1.138    dyoung 
    142    1.1       cgd struct	in_addr zeroin_addr;
    143    1.1       cgd 
    144   1.90    provos #define	INPCBHASH_PORT(table, lport) \
    145   1.92    itojun 	&(table)->inpt_porthashtbl[ntohs(lport) & (table)->inpt_porthash]
    146   1.33   mycroft #define	INPCBHASH_BIND(table, laddr, lport) \
    147   1.33   mycroft 	&(table)->inpt_bindhashtbl[ \
    148   1.33   mycroft 	    ((ntohl((laddr).s_addr) + ntohs(lport))) & (table)->inpt_bindhash]
    149   1.33   mycroft #define	INPCBHASH_CONNECT(table, faddr, fport, laddr, lport) \
    150   1.33   mycroft 	&(table)->inpt_connecthashtbl[ \
    151   1.33   mycroft 	    ((ntohl((faddr).s_addr) + ntohs(fport)) + \
    152   1.33   mycroft 	     (ntohl((laddr).s_addr) + ntohs(lport))) & (table)->inpt_connecthash]
    153   1.33   mycroft 
    154   1.43     lukem int	anonportmin = IPPORT_ANONMIN;
    155   1.43     lukem int	anonportmax = IPPORT_ANONMAX;
    156   1.67      tron int	lowportmin  = IPPORT_RESERVEDMIN;
    157   1.67      tron int	lowportmax  = IPPORT_RESERVEDMAX;
    158   1.43     lukem 
    159  1.128     pooka static struct pool inpcb_pool;
    160  1.128     pooka 
    161  1.128     pooka static int
    162  1.128     pooka inpcb_poolinit(void)
    163  1.128     pooka {
    164  1.128     pooka 
    165  1.128     pooka 	pool_init(&inpcb_pool, sizeof(struct inpcb), 0, 0, 0, "inpcbpl", NULL,
    166  1.128     pooka 	    IPL_NET);
    167  1.128     pooka 	return 0;
    168  1.128     pooka }
    169   1.52   thorpej 
    170   1.18   mycroft void
    171   1.98     perry in_pcbinit(struct inpcbtable *table, int bindhashsize, int connecthashsize)
    172   1.18   mycroft {
    173  1.128     pooka 	static ONCE_DECL(control);
    174   1.18   mycroft 
    175   1.21       cgd 	CIRCLEQ_INIT(&table->inpt_queue);
    176  1.125        ad 	table->inpt_porthashtbl = hashinit(bindhashsize, HASH_LIST, true,
    177  1.125        ad 	    &table->inpt_porthash);
    178  1.125        ad 	table->inpt_bindhashtbl = hashinit(bindhashsize, HASH_LIST, true,
    179  1.125        ad 	    &table->inpt_bindhash);
    180  1.125        ad 	table->inpt_connecthashtbl = hashinit(connecthashsize, HASH_LIST, true,
    181  1.125        ad 	    &table->inpt_connecthash);
    182   1.47     lukem 	table->inpt_lastlow = IPPORT_RESERVEDMAX;
    183   1.47     lukem 	table->inpt_lastport = (u_int16_t)anonportmax;
    184  1.128     pooka 
    185  1.128     pooka 	RUN_ONCE(&control, inpcb_poolinit);
    186   1.18   mycroft }
    187   1.18   mycroft 
    188   1.10   mycroft int
    189   1.98     perry in_pcballoc(struct socket *so, void *v)
    190    1.1       cgd {
    191   1.25  christos 	struct inpcbtable *table = v;
    192   1.64  augustss 	struct inpcb *inp;
    193   1.24   mycroft 	int s;
    194  1.141  drochner #if defined(FAST_IPSEC)
    195   1.70    itojun 	int error;
    196   1.70    itojun #endif
    197    1.1       cgd 
    198  1.106       tls 	s = splnet();
    199   1.52   thorpej 	inp = pool_get(&inpcb_pool, PR_NOWAIT);
    200  1.106       tls 	splx(s);
    201   1.10   mycroft 	if (inp == NULL)
    202    1.1       cgd 		return (ENOBUFS);
    203  1.139  christos 	memset(inp, 0, sizeof(*inp));
    204   1.88    itojun 	inp->inp_af = AF_INET;
    205   1.18   mycroft 	inp->inp_table = table;
    206    1.1       cgd 	inp->inp_socket = so;
    207   1.39      matt 	inp->inp_errormtu = -1;
    208  1.139  christos 	inp->inp_rfc6056algo = RFC6056_ALGO_DEFAULT;
    209  1.139  christos 	inp->inp_bindportonsend = false;
    210  1.141  drochner #if defined(FAST_IPSEC)
    211   1.79    itojun 	error = ipsec_init_pcbpolicy(so, &inp->inp_sp);
    212   1.70    itojun 	if (error != 0) {
    213  1.106       tls 		s = splnet();
    214   1.70    itojun 		pool_put(&inpcb_pool, inp);
    215  1.106       tls 		splx(s);
    216   1.70    itojun 		return error;
    217   1.70    itojun 	}
    218   1.70    itojun #endif
    219   1.33   mycroft 	so->so_pcb = inp;
    220   1.24   mycroft 	s = splnet();
    221   1.88    itojun 	CIRCLEQ_INSERT_HEAD(&table->inpt_queue, &inp->inp_head,
    222   1.88    itojun 	    inph_queue);
    223   1.90    provos 	LIST_INSERT_HEAD(INPCBHASH_PORT(table, inp->inp_lport), &inp->inp_head,
    224   1.90    provos 	    inph_lhash);
    225   1.33   mycroft 	in_pcbstate(inp, INP_ATTACHED);
    226   1.24   mycroft 	splx(s);
    227    1.1       cgd 	return (0);
    228    1.1       cgd }
    229    1.8   mycroft 
    230  1.132      elad static int
    231  1.134      elad in_pcbsetport(struct sockaddr_in *sin, struct inpcb *inp, kauth_cred_t cred)
    232    1.1       cgd {
    233  1.132      elad 	struct inpcbtable *table = inp->inp_table;
    234   1.64  augustss 	struct socket *so = inp->inp_socket;
    235  1.132      elad 	u_int16_t *lastport;
    236   1.13       cgd 	u_int16_t lport = 0;
    237  1.134      elad 	enum kauth_network_req req;
    238  1.134      elad 	int error;
    239    1.1       cgd 
    240  1.132      elad 	if (inp->inp_flags & INP_LOWPORT) {
    241  1.132      elad #ifndef IPNOPRIVPORTS
    242  1.134      elad 		req = KAUTH_REQ_NETWORK_BIND_PRIVPORT;
    243  1.134      elad #else
    244  1.134      elad 		req = KAUTH_REQ_NETWORK_BIND_PORT;
    245  1.132      elad #endif
    246  1.134      elad 
    247  1.132      elad 		lastport = &table->inpt_lastlow;
    248  1.132      elad 	} else {
    249  1.134      elad 		req = KAUTH_REQ_NETWORK_BIND_PORT;
    250  1.134      elad 
    251  1.132      elad 		lastport = &table->inpt_lastport;
    252  1.132      elad 	}
    253  1.134      elad 
    254  1.134      elad 	/* XXX-kauth: KAUTH_REQ_NETWORK_BIND_AUTOASSIGN_{,PRIV}PORT */
    255  1.134      elad 	error = kauth_authorize_network(cred, KAUTH_NETWORK_BIND, req, so, sin,
    256  1.134      elad 	    NULL);
    257  1.134      elad 	if (error)
    258  1.137      elad 		return (EACCES);
    259  1.134      elad 
    260  1.139  christos        /*
    261  1.139  christos         * Use RFC6056 randomized port selection
    262  1.139  christos         */
    263  1.139  christos 	error = rfc6056_randport(&lport, &inp->inp_head, cred);
    264  1.139  christos 	if (error)
    265  1.139  christos 		return error;
    266  1.132      elad 
    267  1.132      elad 	inp->inp_flags |= INP_ANONPORT;
    268  1.132      elad 	*lastport = lport;
    269  1.132      elad 	lport = htons(lport);
    270  1.132      elad 	inp->inp_lport = lport;
    271  1.132      elad 	in_pcbstate(inp, INP_BOUND);
    272  1.132      elad 
    273  1.132      elad 	return (0);
    274  1.132      elad }
    275   1.88    itojun 
    276  1.132      elad static int
    277  1.132      elad in_pcbbind_addr(struct inpcb *inp, struct sockaddr_in *sin, kauth_cred_t cred)
    278  1.132      elad {
    279   1.28   mycroft 	if (sin->sin_family != AF_INET)
    280   1.28   mycroft 		return (EAFNOSUPPORT);
    281  1.132      elad 
    282  1.136      elad 	if (IN_MULTICAST(sin->sin_addr.s_addr)) {
    283  1.136      elad 		/* Always succeed; port reuse handled in in_pcbbind_port(). */
    284  1.136      elad 	} else if (!in_nullhost(sin->sin_addr)) {
    285  1.132      elad 		struct in_ifaddr *ia = NULL;
    286  1.132      elad 
    287  1.132      elad 		INADDR_TO_IA(sin->sin_addr, ia);
    288  1.132      elad 		/* check for broadcast addresses */
    289  1.132      elad 		if (ia == NULL)
    290  1.132      elad 			ia = ifatoia(ifa_ifwithaddr(sintosa(sin)));
    291  1.132      elad 		if (ia == NULL)
    292  1.132      elad 			return (EADDRNOTAVAIL);
    293  1.132      elad 	}
    294  1.132      elad 
    295  1.132      elad 	inp->inp_laddr = sin->sin_addr;
    296  1.132      elad 
    297  1.132      elad 	return (0);
    298  1.132      elad }
    299  1.132      elad 
    300  1.132      elad static int
    301  1.132      elad in_pcbbind_port(struct inpcb *inp, struct sockaddr_in *sin, kauth_cred_t cred)
    302  1.132      elad {
    303  1.132      elad 	struct inpcbtable *table = inp->inp_table;
    304  1.132      elad 	struct socket *so = inp->inp_socket;
    305  1.132      elad 	int reuseport = (so->so_options & SO_REUSEPORT);
    306  1.133      elad 	int wild = 0, error;
    307  1.132      elad 
    308   1.28   mycroft 	if (IN_MULTICAST(sin->sin_addr.s_addr)) {
    309   1.10   mycroft 		/*
    310   1.28   mycroft 		 * Treat SO_REUSEADDR as SO_REUSEPORT for multicast;
    311   1.28   mycroft 		 * allow complete duplication of binding if
    312   1.28   mycroft 		 * SO_REUSEPORT is set, or if SO_REUSEADDR is set
    313   1.28   mycroft 		 * and a multicast address is bound on both
    314   1.28   mycroft 		 * new and duplicated sockets.
    315   1.10   mycroft 		 */
    316   1.28   mycroft 		if (so->so_options & SO_REUSEADDR)
    317   1.28   mycroft 			reuseport = SO_REUSEADDR|SO_REUSEPORT;
    318  1.132      elad 	}
    319  1.132      elad 
    320  1.132      elad 	if (sin->sin_port == 0) {
    321  1.134      elad 		error = in_pcbsetport(sin, inp, cred);
    322  1.132      elad 		if (error)
    323  1.132      elad 			return (error);
    324  1.132      elad 	} else {
    325   1.28   mycroft 		struct inpcb *t;
    326  1.138    dyoung 		vestigial_inpcb_t vestige;
    327   1.88    itojun #ifdef INET6
    328   1.88    itojun 		struct in6pcb *t6;
    329   1.88    itojun 		struct in6_addr mapped;
    330   1.88    itojun #endif
    331  1.133      elad 		enum kauth_network_req req;
    332  1.132      elad 
    333  1.132      elad 		if ((so->so_options & (SO_REUSEADDR|SO_REUSEPORT)) == 0)
    334  1.132      elad 			wild = 1;
    335  1.132      elad 
    336   1.31     perry #ifndef IPNOPRIVPORTS
    337  1.133      elad 		if (ntohs(sin->sin_port) < IPPORT_RESERVED)
    338  1.133      elad 			req = KAUTH_REQ_NETWORK_BIND_PRIVPORT;
    339  1.133      elad 		else
    340  1.133      elad #endif /* !IPNOPRIVPORTS */
    341  1.133      elad 			req = KAUTH_REQ_NETWORK_BIND_PORT;
    342  1.133      elad 
    343  1.133      elad 		error = kauth_authorize_network(cred, KAUTH_NETWORK_BIND, req,
    344  1.133      elad 		    so, sin, NULL);
    345  1.133      elad 		if (error)
    346  1.137      elad 			return (EACCES);
    347  1.133      elad 
    348   1.88    itojun #ifdef INET6
    349   1.88    itojun 		memset(&mapped, 0, sizeof(mapped));
    350   1.88    itojun 		mapped.s6_addr16[5] = 0xffff;
    351   1.88    itojun 		memcpy(&mapped.s6_addr32[3], &sin->sin_addr,
    352   1.88    itojun 		    sizeof(mapped.s6_addr32[3]));
    353  1.138    dyoung 		t6 = in6_pcblookup_port(table, &mapped, sin->sin_port, wild, &vestige);
    354   1.88    itojun 		if (t6 && (reuseport & t6->in6p_socket->so_options) == 0)
    355   1.88    itojun 			return (EADDRINUSE);
    356  1.138    dyoung 		if (!t6 && vestige.valid) {
    357  1.138    dyoung 		    if (!!reuseport != !!vestige.reuse_port) {
    358  1.138    dyoung 			return EADDRINUSE;
    359  1.138    dyoung 		    }
    360  1.138    dyoung 		}
    361   1.88    itojun #endif
    362  1.133      elad 
    363  1.133      elad 		/* XXX-kauth */
    364   1.99  christos 		if (so->so_uidinfo->ui_uid && !IN_MULTICAST(sin->sin_addr.s_addr)) {
    365  1.138    dyoung 			t = in_pcblookup_port(table, sin->sin_addr, sin->sin_port, 1, &vestige);
    366  1.133      elad 			/*
    367  1.133      elad 			 * XXX:	investigate ramifications of loosening this
    368  1.133      elad 			 *	restriction so that as long as both ports have
    369  1.133      elad 			 *	SO_REUSEPORT allow the bind
    370  1.133      elad 			 */
    371   1.58     lukem 			if (t &&
    372   1.58     lukem 			    (!in_nullhost(sin->sin_addr) ||
    373   1.58     lukem 			     !in_nullhost(t->inp_laddr) ||
    374   1.58     lukem 			     (t->inp_socket->so_options & SO_REUSEPORT) == 0)
    375   1.99  christos 			    && (so->so_uidinfo->ui_uid != t->inp_socket->so_uidinfo->ui_uid)) {
    376   1.58     lukem 				return (EADDRINUSE);
    377   1.58     lukem 			}
    378  1.138    dyoung 			if (!t && vestige.valid) {
    379  1.138    dyoung 				if ((!in_nullhost(sin->sin_addr)
    380  1.138    dyoung 				     || !in_nullhost(vestige.laddr.v4)
    381  1.138    dyoung 				     || !vestige.reuse_port)
    382  1.138    dyoung 				    && so->so_uidinfo->ui_uid != vestige.uid) {
    383  1.138    dyoung 					return EADDRINUSE;
    384  1.138    dyoung 				}
    385  1.138    dyoung 			}
    386   1.58     lukem 		}
    387  1.138    dyoung 		t = in_pcblookup_port(table, sin->sin_addr, sin->sin_port, wild, &vestige);
    388   1.28   mycroft 		if (t && (reuseport & t->inp_socket->so_options) == 0)
    389   1.28   mycroft 			return (EADDRINUSE);
    390  1.138    dyoung 		if (!t
    391  1.138    dyoung 		    && vestige.valid
    392  1.138    dyoung 		    && !(reuseport && vestige.reuse_port))
    393  1.138    dyoung 			return EADDRINUSE;
    394  1.132      elad 
    395  1.132      elad 		inp->inp_lport = sin->sin_port;
    396  1.132      elad 		in_pcbstate(inp, INP_BOUND);
    397    1.1       cgd 	}
    398   1.45     lukem 
    399   1.90    provos 	LIST_REMOVE(&inp->inp_head, inph_lhash);
    400   1.90    provos 	LIST_INSERT_HEAD(INPCBHASH_PORT(table, inp->inp_lport), &inp->inp_head,
    401   1.90    provos 	    inph_lhash);
    402  1.132      elad 
    403  1.132      elad 	return (0);
    404  1.132      elad }
    405  1.132      elad 
    406  1.132      elad int
    407  1.132      elad in_pcbbind(void *v, struct mbuf *nam, struct lwp *l)
    408  1.132      elad {
    409  1.132      elad 	struct inpcb *inp = v;
    410  1.132      elad 	struct sockaddr_in *sin = NULL; /* XXXGCC */
    411  1.134      elad 	struct sockaddr_in lsin;
    412  1.132      elad 	int error;
    413  1.132      elad 
    414  1.132      elad 	if (inp->inp_af != AF_INET)
    415  1.132      elad 		return (EINVAL);
    416  1.132      elad 
    417  1.132      elad 	if (TAILQ_FIRST(&in_ifaddrhead) == 0)
    418  1.132      elad 		return (EADDRNOTAVAIL);
    419  1.132      elad 	if (inp->inp_lport || !in_nullhost(inp->inp_laddr))
    420  1.132      elad 		return (EINVAL);
    421  1.132      elad 
    422  1.132      elad 	if (nam != NULL) {
    423  1.132      elad 		sin = mtod(nam, struct sockaddr_in *);
    424  1.132      elad 		if (nam->m_len != sizeof (*sin))
    425  1.132      elad 			return (EINVAL);
    426  1.132      elad 	} else {
    427  1.134      elad 		lsin = *((const struct sockaddr_in *)
    428  1.134      elad 		    inp->inp_socket->so_proto->pr_domain->dom_sa_any);
    429  1.134      elad 		sin = &lsin;
    430  1.132      elad 	}
    431  1.132      elad 
    432  1.132      elad 	/* Bind address. */
    433  1.132      elad 	error = in_pcbbind_addr(inp, sin, l->l_cred);
    434  1.132      elad 	if (error)
    435  1.132      elad 		return (error);
    436  1.132      elad 
    437  1.132      elad 	/* Bind port. */
    438  1.132      elad 	error = in_pcbbind_port(inp, sin, l->l_cred);
    439  1.132      elad 	if (error) {
    440  1.132      elad 		inp->inp_laddr.s_addr = INADDR_ANY;
    441  1.132      elad 
    442  1.132      elad 		return (error);
    443  1.132      elad 	}
    444  1.132      elad 
    445    1.1       cgd 	return (0);
    446    1.1       cgd }
    447    1.1       cgd 
    448    1.1       cgd /*
    449    1.1       cgd  * Connect from a socket to a specified address.
    450    1.1       cgd  * Both address and port must be specified in argument sin.
    451    1.1       cgd  * If don't have a local address for this socket yet,
    452    1.1       cgd  * then pick one.
    453    1.1       cgd  */
    454   1.10   mycroft int
    455  1.103        ad in_pcbconnect(void *v, struct mbuf *nam, struct lwp *l)
    456    1.1       cgd {
    457   1.64  augustss 	struct inpcb *inp = v;
    458   1.82      matt 	struct in_ifaddr *ia = NULL;
    459   1.25  christos 	struct sockaddr_in *ifaddr = NULL;
    460   1.64  augustss 	struct sockaddr_in *sin = mtod(nam, struct sockaddr_in *);
    461  1.138    dyoung 	vestigial_inpcb_t vestige;
    462   1.40   thorpej 	int error;
    463    1.1       cgd 
    464   1.88    itojun 	if (inp->inp_af != AF_INET)
    465   1.88    itojun 		return (EINVAL);
    466   1.88    itojun 
    467    1.1       cgd 	if (nam->m_len != sizeof (*sin))
    468    1.1       cgd 		return (EINVAL);
    469    1.1       cgd 	if (sin->sin_family != AF_INET)
    470    1.1       cgd 		return (EAFNOSUPPORT);
    471    1.1       cgd 	if (sin->sin_port == 0)
    472    1.1       cgd 		return (EADDRNOTAVAIL);
    473   1.91  jonathan 	if (TAILQ_FIRST(&in_ifaddrhead) != 0) {
    474    1.1       cgd 		/*
    475    1.1       cgd 		 * If the destination address is INADDR_ANY,
    476   1.49       tls 		 * use any local address (likely loopback).
    477    1.1       cgd 		 * If the supplied address is INADDR_BROADCAST,
    478   1.49       tls 		 * use the broadcast address of an interface
    479   1.49       tls 		 * which supports broadcast. (loopback does not)
    480    1.1       cgd 		 */
    481   1.49       tls 
    482   1.72      matt 		if (in_nullhost(sin->sin_addr)) {
    483   1.72      matt 			sin->sin_addr =
    484   1.91  jonathan 			    TAILQ_FIRST(&in_ifaddrhead)->ia_addr.sin_addr;
    485   1.72      matt 		} else if (sin->sin_addr.s_addr == INADDR_BROADCAST) {
    486   1.91  jonathan 			TAILQ_FOREACH(ia, &in_ifaddrhead, ia_list) {
    487   1.72      matt 				if (ia->ia_ifp->if_flags & IFF_BROADCAST) {
    488   1.72      matt 					sin->sin_addr =
    489   1.72      matt 					    ia->ia_broadaddr.sin_addr;
    490   1.72      matt 					break;
    491   1.72      matt 				}
    492   1.49       tls 			}
    493   1.72      matt 		}
    494    1.1       cgd 	}
    495   1.32   mycroft 	/*
    496   1.32   mycroft 	 * If we haven't bound which network number to use as ours,
    497   1.32   mycroft 	 * we will use the number of the outgoing interface.
    498   1.32   mycroft 	 * This depends on having done a routing lookup, which
    499   1.32   mycroft 	 * we will probably have to do anyway, so we might
    500   1.32   mycroft 	 * as well do it now.  On the other hand if we are
    501   1.32   mycroft 	 * sending to multiple destinations we may have already
    502   1.32   mycroft 	 * done the lookup, so see if we can use the route
    503   1.32   mycroft 	 * from before.  In any case, we only
    504   1.32   mycroft 	 * chose a port number once, even if sending to multiple
    505   1.32   mycroft 	 * destinations.
    506   1.32   mycroft 	 */
    507   1.32   mycroft 	if (in_nullhost(inp->inp_laddr)) {
    508  1.100  christos 		int xerror;
    509   1.59    itojun 		ifaddr = in_selectsrc(sin, &inp->inp_route,
    510  1.100  christos 		    inp->inp_socket->so_options, inp->inp_moptions, &xerror);
    511   1.59    itojun 		if (ifaddr == NULL) {
    512  1.100  christos 			if (xerror == 0)
    513  1.100  christos 				xerror = EADDRNOTAVAIL;
    514  1.100  christos 			return xerror;
    515   1.59    itojun 		}
    516   1.82      matt 		INADDR_TO_IA(ifaddr->sin_addr, ia);
    517   1.83    itojun 		if (ia == NULL)
    518   1.83    itojun 			return (EADDRNOTAVAIL);
    519    1.1       cgd 	}
    520   1.33   mycroft 	if (in_pcblookup_connect(inp->inp_table, sin->sin_addr, sin->sin_port,
    521   1.32   mycroft 	    !in_nullhost(inp->inp_laddr) ? inp->inp_laddr : ifaddr->sin_addr,
    522  1.138    dyoung 				 inp->inp_lport, &vestige) != 0
    523  1.138    dyoung 	    || vestige.valid)
    524    1.1       cgd 		return (EADDRINUSE);
    525   1.32   mycroft 	if (in_nullhost(inp->inp_laddr)) {
    526   1.40   thorpej 		if (inp->inp_lport == 0) {
    527  1.103        ad 			error = in_pcbbind(inp, NULL, l);
    528   1.40   thorpej 			/*
    529   1.40   thorpej 			 * This used to ignore the return value
    530   1.40   thorpej 			 * completely, but we need to check for
    531   1.40   thorpej 			 * ephemeral port shortage.
    532  1.101       dsl 			 * And attempts to request low ports if not root.
    533   1.40   thorpej 			 */
    534  1.101       dsl 			if (error != 0)
    535   1.40   thorpej 				return (error);
    536   1.40   thorpej 		}
    537    1.1       cgd 		inp->inp_laddr = ifaddr->sin_addr;
    538    1.1       cgd 	}
    539    1.1       cgd 	inp->inp_faddr = sin->sin_addr;
    540    1.1       cgd 	inp->inp_fport = sin->sin_port;
    541  1.139  christos 
    542  1.139  christos         /* Late bind, if needed */
    543  1.139  christos 	if (inp->inp_bindportonsend) {
    544  1.139  christos                struct sockaddr_in lsin = *((const struct sockaddr_in *)
    545  1.139  christos 		    inp->inp_socket->so_proto->pr_domain->dom_sa_any);
    546  1.139  christos 		lsin.sin_addr = inp->inp_laddr;
    547  1.139  christos 		lsin.sin_port = 0;
    548  1.139  christos 
    549  1.139  christos                if ((error = in_pcbbind_port(inp, &lsin, l->l_cred)) != 0)
    550  1.139  christos                        return error;
    551  1.139  christos 	}
    552  1.139  christos 
    553   1.33   mycroft 	in_pcbstate(inp, INP_CONNECTED);
    554  1.141  drochner #if defined(FAST_IPSEC)
    555   1.71    itojun 	if (inp->inp_socket->so_type == SOCK_STREAM)
    556   1.71    itojun 		ipsec_pcbconn(inp->inp_sp);
    557   1.71    itojun #endif
    558    1.1       cgd 	return (0);
    559    1.1       cgd }
    560    1.1       cgd 
    561   1.25  christos void
    562   1.98     perry in_pcbdisconnect(void *v)
    563    1.1       cgd {
    564   1.25  christos 	struct inpcb *inp = v;
    565    1.1       cgd 
    566   1.88    itojun 	if (inp->inp_af != AF_INET)
    567   1.88    itojun 		return;
    568   1.88    itojun 
    569   1.32   mycroft 	inp->inp_faddr = zeroin_addr;
    570    1.1       cgd 	inp->inp_fport = 0;
    571   1.33   mycroft 	in_pcbstate(inp, INP_BOUND);
    572  1.141  drochner #if defined(FAST_IPSEC)
    573   1.71    itojun 	ipsec_pcbdisconn(inp->inp_sp);
    574   1.71    itojun #endif
    575   1.93    itojun 	if (inp->inp_socket->so_state & SS_NOFDREF)
    576   1.93    itojun 		in_pcbdetach(inp);
    577    1.1       cgd }
    578    1.1       cgd 
    579   1.25  christos void
    580   1.98     perry in_pcbdetach(void *v)
    581    1.1       cgd {
    582   1.25  christos 	struct inpcb *inp = v;
    583    1.1       cgd 	struct socket *so = inp->inp_socket;
    584   1.24   mycroft 	int s;
    585    1.1       cgd 
    586   1.88    itojun 	if (inp->inp_af != AF_INET)
    587   1.88    itojun 		return;
    588   1.88    itojun 
    589  1.141  drochner #if defined(FAST_IPSEC)
    590   1.59    itojun 	ipsec4_delete_pcbpolicy(inp);
    591   1.59    itojun #endif /*IPSEC*/
    592    1.1       cgd 	so->so_pcb = 0;
    593    1.1       cgd 	if (inp->inp_options)
    594    1.1       cgd 		(void)m_free(inp->inp_options);
    595  1.112     joerg 	rtcache_free(&inp->inp_route);
    596    1.6   hpeyerl 	ip_freemoptions(inp->inp_moptions);
    597   1.24   mycroft 	s = splnet();
    598   1.33   mycroft 	in_pcbstate(inp, INP_ATTACHED);
    599   1.90    provos 	LIST_REMOVE(&inp->inp_head, inph_lhash);
    600   1.88    itojun 	CIRCLEQ_REMOVE(&inp->inp_table->inpt_queue, &inp->inp_head,
    601   1.88    itojun 	    inph_queue);
    602  1.106       tls 	pool_put(&inpcb_pool, inp);
    603   1.24   mycroft 	splx(s);
    604  1.127       spz 	sofree(so);			/* drops the socket's lock */
    605  1.126      matt 	mutex_enter(softnet_lock);	/* reacquire the softnet_lock */
    606    1.1       cgd }
    607    1.1       cgd 
    608   1.25  christos void
    609   1.98     perry in_setsockaddr(struct inpcb *inp, struct mbuf *nam)
    610    1.1       cgd {
    611   1.64  augustss 	struct sockaddr_in *sin;
    612   1.78    itojun 
    613   1.88    itojun 	if (inp->inp_af != AF_INET)
    614   1.88    itojun 		return;
    615   1.88    itojun 
    616    1.1       cgd 	sin = mtod(nam, struct sockaddr_in *);
    617  1.119    dyoung 	sockaddr_in_init(sin, &inp->inp_laddr, inp->inp_lport);
    618  1.119    dyoung 	nam->m_len = sin->sin_len;
    619    1.1       cgd }
    620    1.1       cgd 
    621   1.25  christos void
    622   1.98     perry in_setpeeraddr(struct inpcb *inp, struct mbuf *nam)
    623    1.1       cgd {
    624   1.64  augustss 	struct sockaddr_in *sin;
    625   1.78    itojun 
    626   1.88    itojun 	if (inp->inp_af != AF_INET)
    627   1.88    itojun 		return;
    628   1.88    itojun 
    629    1.1       cgd 	sin = mtod(nam, struct sockaddr_in *);
    630  1.119    dyoung 	sockaddr_in_init(sin, &inp->inp_faddr, inp->inp_fport);
    631  1.119    dyoung 	nam->m_len = sin->sin_len;
    632    1.1       cgd }
    633    1.1       cgd 
    634    1.1       cgd /*
    635    1.1       cgd  * Pass some notification to all connections of a protocol
    636    1.1       cgd  * associated with address dst.  The local address and/or port numbers
    637    1.1       cgd  * may be specified to limit the search.  The "usual action" will be
    638    1.1       cgd  * taken, depending on the ctlinput cmd.  The caller must filter any
    639    1.1       cgd  * cmds that are uninteresting (e.g., no error in the map).
    640    1.1       cgd  * Call the protocol specific routine (if any) to report
    641    1.1       cgd  * any errors for each matching socket.
    642    1.1       cgd  *
    643   1.22   mycroft  * Must be called at splsoftnet.
    644    1.1       cgd  */
    645   1.37   thorpej int
    646   1.98     perry in_pcbnotify(struct inpcbtable *table, struct in_addr faddr, u_int fport_arg,
    647   1.98     perry     struct in_addr laddr, u_int lport_arg, int errno,
    648   1.98     perry     void (*notify)(struct inpcb *, int))
    649    1.1       cgd {
    650   1.33   mycroft 	struct inpcbhead *head;
    651   1.64  augustss 	struct inpcb *inp, *ninp;
    652   1.13       cgd 	u_int16_t fport = fport_arg, lport = lport_arg;
    653   1.37   thorpej 	int nmatch;
    654    1.1       cgd 
    655   1.33   mycroft 	if (in_nullhost(faddr) || notify == 0)
    656   1.37   thorpej 		return (0);
    657    1.1       cgd 
    658   1.37   thorpej 	nmatch = 0;
    659   1.33   mycroft 	head = INPCBHASH_CONNECT(table, faddr, fport, laddr, lport);
    660   1.88    itojun 	for (inp = (struct inpcb *)LIST_FIRST(head); inp != NULL; inp = ninp) {
    661   1.88    itojun 		ninp = (struct inpcb *)LIST_NEXT(inp, inp_hash);
    662   1.88    itojun 		if (inp->inp_af != AF_INET)
    663   1.88    itojun 			continue;
    664   1.33   mycroft 		if (in_hosteq(inp->inp_faddr, faddr) &&
    665   1.33   mycroft 		    inp->inp_fport == fport &&
    666   1.33   mycroft 		    inp->inp_lport == lport &&
    667   1.37   thorpej 		    in_hosteq(inp->inp_laddr, laddr)) {
    668   1.33   mycroft 			(*notify)(inp, errno);
    669   1.37   thorpej 			nmatch++;
    670   1.37   thorpej 		}
    671    1.1       cgd 	}
    672   1.37   thorpej 	return (nmatch);
    673   1.18   mycroft }
    674   1.18   mycroft 
    675   1.20   mycroft void
    676   1.98     perry in_pcbnotifyall(struct inpcbtable *table, struct in_addr faddr, int errno,
    677   1.98     perry     void (*notify)(struct inpcb *, int))
    678   1.18   mycroft {
    679   1.64  augustss 	struct inpcb *inp, *ninp;
    680   1.18   mycroft 
    681   1.33   mycroft 	if (in_nullhost(faddr) || notify == 0)
    682   1.18   mycroft 		return;
    683   1.18   mycroft 
    684   1.88    itojun 	for (inp = (struct inpcb *)CIRCLEQ_FIRST(&table->inpt_queue);
    685   1.72      matt 	    inp != (void *)&table->inpt_queue;
    686   1.33   mycroft 	    inp = ninp) {
    687   1.88    itojun 		ninp = (struct inpcb *)CIRCLEQ_NEXT(inp, inp_queue);
    688   1.88    itojun 		if (inp->inp_af != AF_INET)
    689   1.88    itojun 			continue;
    690   1.33   mycroft 		if (in_hosteq(inp->inp_faddr, faddr))
    691   1.33   mycroft 			(*notify)(inp, errno);
    692   1.63   thorpej 	}
    693   1.63   thorpej }
    694   1.63   thorpej 
    695   1.63   thorpej void
    696   1.98     perry in_pcbpurgeif0(struct inpcbtable *table, struct ifnet *ifp)
    697   1.63   thorpej {
    698   1.64  augustss 	struct inpcb *inp, *ninp;
    699   1.65     enami 	struct ip_moptions *imo;
    700   1.65     enami 	int i, gap;
    701   1.63   thorpej 
    702   1.88    itojun 	for (inp = (struct inpcb *)CIRCLEQ_FIRST(&table->inpt_queue);
    703   1.72      matt 	    inp != (void *)&table->inpt_queue;
    704   1.63   thorpej 	    inp = ninp) {
    705   1.88    itojun 		ninp = (struct inpcb *)CIRCLEQ_NEXT(inp, inp_queue);
    706   1.88    itojun 		if (inp->inp_af != AF_INET)
    707   1.88    itojun 			continue;
    708   1.65     enami 		imo = inp->inp_moptions;
    709   1.65     enami 		if (imo != NULL) {
    710   1.65     enami 			/*
    711   1.65     enami 			 * Unselect the outgoing interface if it is being
    712   1.65     enami 			 * detached.
    713   1.65     enami 			 */
    714   1.65     enami 			if (imo->imo_multicast_ifp == ifp)
    715   1.65     enami 				imo->imo_multicast_ifp = NULL;
    716   1.65     enami 
    717   1.65     enami 			/*
    718   1.65     enami 			 * Drop multicast group membership if we joined
    719   1.65     enami 			 * through the interface being detached.
    720   1.65     enami 			 */
    721   1.65     enami 			for (i = 0, gap = 0; i < imo->imo_num_memberships;
    722   1.65     enami 			    i++) {
    723   1.65     enami 				if (imo->imo_membership[i]->inm_ifp == ifp) {
    724   1.65     enami 					in_delmulti(imo->imo_membership[i]);
    725   1.65     enami 					gap++;
    726   1.65     enami 				} else if (gap != 0)
    727   1.65     enami 					imo->imo_membership[i - gap] =
    728   1.65     enami 					    imo->imo_membership[i];
    729   1.65     enami 			}
    730   1.65     enami 			imo->imo_num_memberships -= gap;
    731   1.65     enami 		}
    732   1.69    itojun 	}
    733   1.69    itojun }
    734   1.69    itojun 
    735   1.69    itojun void
    736   1.98     perry in_pcbpurgeif(struct inpcbtable *table, struct ifnet *ifp)
    737   1.69    itojun {
    738  1.121    dyoung 	struct rtentry *rt;
    739   1.69    itojun 	struct inpcb *inp, *ninp;
    740   1.69    itojun 
    741   1.88    itojun 	for (inp = (struct inpcb *)CIRCLEQ_FIRST(&table->inpt_queue);
    742   1.72      matt 	    inp != (void *)&table->inpt_queue;
    743   1.69    itojun 	    inp = ninp) {
    744   1.88    itojun 		ninp = (struct inpcb *)CIRCLEQ_NEXT(inp, inp_queue);
    745   1.88    itojun 		if (inp->inp_af != AF_INET)
    746   1.88    itojun 			continue;
    747  1.122    dyoung 		if ((rt = rtcache_validate(&inp->inp_route)) != NULL &&
    748  1.121    dyoung 		    rt->rt_ifp == ifp)
    749   1.69    itojun 			in_rtchange(inp, 0);
    750    1.1       cgd 	}
    751    1.1       cgd }
    752    1.1       cgd 
    753    1.1       cgd /*
    754    1.1       cgd  * Check for alternatives when higher level complains
    755    1.1       cgd  * about service problems.  For now, invalidate cached
    756    1.1       cgd  * routing information.  If the route was created dynamically
    757    1.1       cgd  * (by a redirect), time to try a default gateway again.
    758    1.1       cgd  */
    759   1.25  christos void
    760   1.98     perry in_losing(struct inpcb *inp)
    761    1.1       cgd {
    762   1.64  augustss 	struct rtentry *rt;
    763   1.10   mycroft 	struct rt_addrinfo info;
    764    1.1       cgd 
    765   1.88    itojun 	if (inp->inp_af != AF_INET)
    766   1.88    itojun 		return;
    767   1.88    itojun 
    768  1.122    dyoung 	if ((rt = rtcache_validate(&inp->inp_route)) == NULL)
    769  1.122    dyoung 		return;
    770  1.122    dyoung 
    771  1.122    dyoung 	memset(&info, 0, sizeof(info));
    772  1.122    dyoung 	info.rti_info[RTAX_DST] = rtcache_getdst(&inp->inp_route);
    773  1.122    dyoung 	info.rti_info[RTAX_GATEWAY] = rt->rt_gateway;
    774  1.122    dyoung 	info.rti_info[RTAX_NETMASK] = rt_mask(rt);
    775  1.122    dyoung 	rt_missmsg(RTM_LOSING, &info, rt->rt_flags, 0);
    776  1.122    dyoung 	if (rt->rt_flags & RTF_DYNAMIC)
    777  1.122    dyoung 		(void) rtrequest(RTM_DELETE, rt_getkey(rt),
    778  1.122    dyoung 			rt->rt_gateway, rt_mask(rt), rt->rt_flags,
    779  1.122    dyoung 			NULL);
    780  1.122    dyoung 	/*
    781  1.122    dyoung 	 * A new route can be allocated
    782  1.122    dyoung 	 * the next time output is attempted.
    783  1.122    dyoung 	 */
    784  1.122    dyoung 	rtcache_free(&inp->inp_route);
    785    1.1       cgd }
    786    1.1       cgd 
    787    1.1       cgd /*
    788  1.111    dyoung  * After a routing change, flush old routing.  A new route can be
    789  1.111    dyoung  * allocated the next time output is attempted.
    790    1.1       cgd  */
    791   1.10   mycroft void
    792  1.109  christos in_rtchange(struct inpcb *inp, int errno)
    793    1.1       cgd {
    794   1.32   mycroft 
    795   1.88    itojun 	if (inp->inp_af != AF_INET)
    796   1.88    itojun 		return;
    797   1.88    itojun 
    798  1.112     joerg 	rtcache_free(&inp->inp_route);
    799  1.112     joerg 
    800   1.49       tls 	/* XXX SHOULD NOTIFY HIGHER-LEVEL PROTOCOLS */
    801    1.1       cgd }
    802    1.1       cgd 
    803    1.1       cgd struct inpcb *
    804   1.98     perry in_pcblookup_port(struct inpcbtable *table, struct in_addr laddr,
    805  1.138    dyoung 		  u_int lport_arg, int lookup_wildcard, vestigial_inpcb_t *vp)
    806    1.1       cgd {
    807   1.90    provos 	struct inpcbhead *head;
    808   1.88    itojun 	struct inpcb_hdr *inph;
    809  1.142      yamt 	struct inpcb *match = NULL;
    810  1.142      yamt 	int matchwild = 3;
    811  1.142      yamt 	int wildcard;
    812   1.33   mycroft 	u_int16_t lport = lport_arg;
    813    1.1       cgd 
    814  1.138    dyoung 	if (vp)
    815  1.138    dyoung 		vp->valid = 0;
    816  1.138    dyoung 
    817   1.90    provos 	head = INPCBHASH_PORT(table, lport);
    818   1.90    provos 	LIST_FOREACH(inph, head, inph_lhash) {
    819  1.142      yamt 		struct inpcb * const inp = (struct inpcb *)inph;
    820  1.142      yamt 
    821   1.88    itojun 		if (inp->inp_af != AF_INET)
    822   1.88    itojun 			continue;
    823    1.1       cgd 		if (inp->inp_lport != lport)
    824    1.1       cgd 			continue;
    825  1.142      yamt 		/*
    826  1.142      yamt 		 * check if inp's faddr and laddr match with ours.
    827  1.142      yamt 		 * our faddr is considered null.
    828  1.142      yamt 		 * count the number of wildcard matches. (0 - 2)
    829  1.142      yamt 		 *
    830  1.142      yamt 		 *	null	null	match
    831  1.142      yamt 		 *	A	null	wildcard match
    832  1.142      yamt 		 *	null	B	wildcard match
    833  1.142      yamt 		 *	A	B	non match
    834  1.142      yamt 		 *	A	A	match
    835  1.142      yamt 		 */
    836    1.1       cgd 		wildcard = 0;
    837   1.33   mycroft 		if (!in_nullhost(inp->inp_faddr))
    838   1.33   mycroft 			wildcard++;
    839   1.32   mycroft 		if (in_nullhost(inp->inp_laddr)) {
    840   1.32   mycroft 			if (!in_nullhost(laddr))
    841    1.1       cgd 				wildcard++;
    842    1.1       cgd 		} else {
    843   1.32   mycroft 			if (in_nullhost(laddr))
    844    1.1       cgd 				wildcard++;
    845   1.32   mycroft 			else {
    846   1.32   mycroft 				if (!in_hosteq(inp->inp_laddr, laddr))
    847   1.32   mycroft 					continue;
    848   1.32   mycroft 			}
    849    1.1       cgd 		}
    850   1.54     lukem 		if (wildcard && !lookup_wildcard)
    851    1.1       cgd 			continue;
    852  1.142      yamt 		/*
    853  1.142      yamt 		 * prefer an address with less wildcards.
    854  1.142      yamt 		 */
    855    1.1       cgd 		if (wildcard < matchwild) {
    856    1.1       cgd 			match = inp;
    857    1.1       cgd 			matchwild = wildcard;
    858    1.1       cgd 			if (matchwild == 0)
    859    1.1       cgd 				break;
    860    1.1       cgd 		}
    861    1.1       cgd 	}
    862  1.138    dyoung 	if (match && matchwild == 0)
    863  1.138    dyoung 		return match;
    864  1.138    dyoung 
    865  1.138    dyoung 	if (vp && table->vestige) {
    866  1.138    dyoung 		void	*state = (*table->vestige->init_ports4)(laddr, lport_arg, lookup_wildcard);
    867  1.138    dyoung 		vestigial_inpcb_t better;
    868  1.138    dyoung 
    869  1.138    dyoung 		while (table->vestige
    870  1.138    dyoung 		       && (*table->vestige->next_port4)(state, vp)) {
    871  1.138    dyoung 
    872  1.138    dyoung 			if (vp->lport != lport)
    873  1.138    dyoung 				continue;
    874  1.138    dyoung 			wildcard = 0;
    875  1.138    dyoung 			if (!in_nullhost(vp->faddr.v4))
    876  1.138    dyoung 				wildcard++;
    877  1.138    dyoung 			if (in_nullhost(vp->laddr.v4)) {
    878  1.138    dyoung 				if (!in_nullhost(laddr))
    879  1.138    dyoung 					wildcard++;
    880  1.138    dyoung 			} else {
    881  1.138    dyoung 				if (in_nullhost(laddr))
    882  1.138    dyoung 					wildcard++;
    883  1.138    dyoung 				else {
    884  1.138    dyoung 					if (!in_hosteq(vp->laddr.v4, laddr))
    885  1.138    dyoung 						continue;
    886  1.138    dyoung 				}
    887  1.138    dyoung 			}
    888  1.138    dyoung 			if (wildcard && !lookup_wildcard)
    889  1.138    dyoung 				continue;
    890  1.138    dyoung 			if (wildcard < matchwild) {
    891  1.138    dyoung 				better = *vp;
    892  1.138    dyoung 				match  = (void*)&better;
    893  1.138    dyoung 
    894  1.138    dyoung 				matchwild = wildcard;
    895  1.138    dyoung 				if (matchwild == 0)
    896  1.138    dyoung 					break;
    897  1.138    dyoung 			}
    898  1.138    dyoung 		}
    899  1.138    dyoung 
    900  1.138    dyoung 		if (match) {
    901  1.138    dyoung 			if (match != (void*)&better)
    902  1.138    dyoung 				return match;
    903  1.138    dyoung 			else {
    904  1.138    dyoung 				*vp = better;
    905  1.138    dyoung 				return 0;
    906  1.138    dyoung 			}
    907  1.138    dyoung 		}
    908  1.138    dyoung 	}
    909  1.138    dyoung 
    910    1.1       cgd 	return (match);
    911   1.24   mycroft }
    912   1.24   mycroft 
    913   1.24   mycroft #ifdef DIAGNOSTIC
    914   1.24   mycroft int	in_pcbnotifymiss = 0;
    915   1.24   mycroft #endif
    916   1.24   mycroft 
    917   1.24   mycroft struct inpcb *
    918   1.98     perry in_pcblookup_connect(struct inpcbtable *table,
    919   1.98     perry     struct in_addr faddr, u_int fport_arg,
    920  1.138    dyoung     struct in_addr laddr, u_int lport_arg,
    921  1.138    dyoung     vestigial_inpcb_t *vp)
    922   1.24   mycroft {
    923   1.24   mycroft 	struct inpcbhead *head;
    924   1.88    itojun 	struct inpcb_hdr *inph;
    925   1.64  augustss 	struct inpcb *inp;
    926   1.24   mycroft 	u_int16_t fport = fport_arg, lport = lport_arg;
    927   1.24   mycroft 
    928  1.138    dyoung 	if (vp)
    929  1.138    dyoung 		vp->valid = 0;
    930  1.138    dyoung 
    931   1.33   mycroft 	head = INPCBHASH_CONNECT(table, faddr, fport, laddr, lport);
    932   1.88    itojun 	LIST_FOREACH(inph, head, inph_hash) {
    933   1.88    itojun 		inp = (struct inpcb *)inph;
    934   1.88    itojun 		if (inp->inp_af != AF_INET)
    935   1.88    itojun 			continue;
    936   1.88    itojun 
    937   1.33   mycroft 		if (in_hosteq(inp->inp_faddr, faddr) &&
    938   1.33   mycroft 		    inp->inp_fport == fport &&
    939   1.33   mycroft 		    inp->inp_lport == lport &&
    940   1.33   mycroft 		    in_hosteq(inp->inp_laddr, laddr))
    941   1.33   mycroft 			goto out;
    942   1.24   mycroft 	}
    943  1.138    dyoung 	if (vp && table->vestige) {
    944  1.138    dyoung 		if ((*table->vestige->lookup4)(faddr, fport_arg,
    945  1.138    dyoung 					       laddr, lport_arg, vp))
    946  1.138    dyoung 			return 0;
    947  1.138    dyoung 	}
    948  1.138    dyoung 
    949   1.24   mycroft #ifdef DIAGNOSTIC
    950   1.33   mycroft 	if (in_pcbnotifymiss) {
    951   1.35  christos 		printf("in_pcblookup_connect: faddr=%08x fport=%d laddr=%08x lport=%d\n",
    952   1.24   mycroft 		    ntohl(faddr.s_addr), ntohs(fport),
    953   1.24   mycroft 		    ntohl(laddr.s_addr), ntohs(lport));
    954   1.24   mycroft 	}
    955   1.24   mycroft #endif
    956   1.33   mycroft 	return (0);
    957   1.33   mycroft 
    958   1.33   mycroft out:
    959   1.33   mycroft 	/* Move this PCB to the head of hash chain. */
    960   1.88    itojun 	inph = &inp->inp_head;
    961   1.88    itojun 	if (inph != LIST_FIRST(head)) {
    962   1.88    itojun 		LIST_REMOVE(inph, inph_hash);
    963   1.88    itojun 		LIST_INSERT_HEAD(head, inph, inph_hash);
    964   1.33   mycroft 	}
    965   1.33   mycroft 	return (inp);
    966   1.33   mycroft }
    967   1.33   mycroft 
    968   1.33   mycroft struct inpcb *
    969   1.98     perry in_pcblookup_bind(struct inpcbtable *table,
    970   1.98     perry     struct in_addr laddr, u_int lport_arg)
    971   1.33   mycroft {
    972   1.33   mycroft 	struct inpcbhead *head;
    973   1.88    itojun 	struct inpcb_hdr *inph;
    974   1.64  augustss 	struct inpcb *inp;
    975   1.33   mycroft 	u_int16_t lport = lport_arg;
    976   1.33   mycroft 
    977   1.33   mycroft 	head = INPCBHASH_BIND(table, laddr, lport);
    978   1.88    itojun 	LIST_FOREACH(inph, head, inph_hash) {
    979   1.88    itojun 		inp = (struct inpcb *)inph;
    980   1.88    itojun 		if (inp->inp_af != AF_INET)
    981   1.88    itojun 			continue;
    982   1.88    itojun 
    983   1.33   mycroft 		if (inp->inp_lport == lport &&
    984   1.33   mycroft 		    in_hosteq(inp->inp_laddr, laddr))
    985   1.33   mycroft 			goto out;
    986   1.33   mycroft 	}
    987   1.33   mycroft 	head = INPCBHASH_BIND(table, zeroin_addr, lport);
    988   1.88    itojun 	LIST_FOREACH(inph, head, inph_hash) {
    989   1.88    itojun 		inp = (struct inpcb *)inph;
    990   1.88    itojun 		if (inp->inp_af != AF_INET)
    991   1.88    itojun 			continue;
    992   1.88    itojun 
    993   1.33   mycroft 		if (inp->inp_lport == lport &&
    994   1.33   mycroft 		    in_hosteq(inp->inp_laddr, zeroin_addr))
    995   1.33   mycroft 			goto out;
    996   1.33   mycroft 	}
    997   1.33   mycroft #ifdef DIAGNOSTIC
    998   1.33   mycroft 	if (in_pcbnotifymiss) {
    999   1.35  christos 		printf("in_pcblookup_bind: laddr=%08x lport=%d\n",
   1000   1.33   mycroft 		    ntohl(laddr.s_addr), ntohs(lport));
   1001   1.33   mycroft 	}
   1002   1.33   mycroft #endif
   1003   1.33   mycroft 	return (0);
   1004   1.33   mycroft 
   1005   1.33   mycroft out:
   1006   1.33   mycroft 	/* Move this PCB to the head of hash chain. */
   1007   1.88    itojun 	inph = &inp->inp_head;
   1008   1.88    itojun 	if (inph != LIST_FIRST(head)) {
   1009   1.88    itojun 		LIST_REMOVE(inph, inph_hash);
   1010   1.88    itojun 		LIST_INSERT_HEAD(head, inph, inph_hash);
   1011   1.33   mycroft 	}
   1012   1.24   mycroft 	return (inp);
   1013   1.33   mycroft }
   1014   1.33   mycroft 
   1015   1.33   mycroft void
   1016   1.98     perry in_pcbstate(struct inpcb *inp, int state)
   1017   1.33   mycroft {
   1018   1.33   mycroft 
   1019   1.88    itojun 	if (inp->inp_af != AF_INET)
   1020   1.88    itojun 		return;
   1021   1.88    itojun 
   1022   1.33   mycroft 	if (inp->inp_state > INP_ATTACHED)
   1023   1.88    itojun 		LIST_REMOVE(&inp->inp_head, inph_hash);
   1024   1.33   mycroft 
   1025   1.33   mycroft 	switch (state) {
   1026   1.33   mycroft 	case INP_BOUND:
   1027   1.33   mycroft 		LIST_INSERT_HEAD(INPCBHASH_BIND(inp->inp_table,
   1028   1.88    itojun 		    inp->inp_laddr, inp->inp_lport), &inp->inp_head,
   1029   1.88    itojun 		    inph_hash);
   1030   1.33   mycroft 		break;
   1031   1.33   mycroft 	case INP_CONNECTED:
   1032   1.33   mycroft 		LIST_INSERT_HEAD(INPCBHASH_CONNECT(inp->inp_table,
   1033   1.33   mycroft 		    inp->inp_faddr, inp->inp_fport,
   1034   1.88    itojun 		    inp->inp_laddr, inp->inp_lport), &inp->inp_head,
   1035   1.88    itojun 		    inph_hash);
   1036   1.33   mycroft 		break;
   1037   1.33   mycroft 	}
   1038   1.33   mycroft 
   1039   1.33   mycroft 	inp->inp_state = state;
   1040   1.38   thorpej }
   1041   1.38   thorpej 
   1042   1.38   thorpej struct rtentry *
   1043   1.98     perry in_pcbrtentry(struct inpcb *inp)
   1044   1.38   thorpej {
   1045   1.38   thorpej 	struct route *ro;
   1046  1.117    dyoung 	union {
   1047  1.117    dyoung 		struct sockaddr		dst;
   1048  1.117    dyoung 		struct sockaddr_in	dst4;
   1049  1.117    dyoung 	} u;
   1050   1.88    itojun 
   1051   1.88    itojun 	if (inp->inp_af != AF_INET)
   1052   1.88    itojun 		return (NULL);
   1053   1.38   thorpej 
   1054   1.38   thorpej 	ro = &inp->inp_route;
   1055   1.38   thorpej 
   1056  1.117    dyoung 	sockaddr_in_init(&u.dst4, &inp->inp_faddr, 0);
   1057  1.117    dyoung 	return rtcache_lookup(ro, &u.dst);
   1058   1.59    itojun }
   1059   1.59    itojun 
   1060   1.59    itojun struct sockaddr_in *
   1061   1.98     perry in_selectsrc(struct sockaddr_in *sin, struct route *ro,
   1062   1.98     perry     int soopts, struct ip_moptions *mopts, int *errorp)
   1063   1.59    itojun {
   1064  1.122    dyoung 	struct rtentry *rt = NULL;
   1065  1.113    dyoung 	struct in_ifaddr *ia = NULL;
   1066   1.59    itojun 
   1067   1.78    itojun 	/*
   1068  1.117    dyoung          * If route is known or can be allocated now, take the
   1069  1.117    dyoung          * source address from the interface.  Otherwise, punt.
   1070   1.59    itojun 	 */
   1071  1.117    dyoung 	if ((soopts & SO_DONTROUTE) != 0)
   1072  1.112     joerg 		rtcache_free(ro);
   1073  1.117    dyoung 	else {
   1074  1.117    dyoung 		union {
   1075  1.117    dyoung 			struct sockaddr		dst;
   1076  1.117    dyoung 			struct sockaddr_in	dst4;
   1077  1.117    dyoung 		} u;
   1078  1.117    dyoung 
   1079  1.117    dyoung 		sockaddr_in_init(&u.dst4, &sin->sin_addr, 0);
   1080  1.122    dyoung 		rt = rtcache_lookup(ro, &u.dst);
   1081   1.59    itojun 	}
   1082   1.59    itojun 	/*
   1083   1.59    itojun 	 * If we found a route, use the address
   1084   1.59    itojun 	 * corresponding to the outgoing interface
   1085   1.59    itojun 	 * unless it is the loopback (in case a route
   1086   1.59    itojun 	 * to our address on another net goes to loopback).
   1087   1.78    itojun 	 *
   1088   1.59    itojun 	 * XXX Is this still true?  Do we care?
   1089   1.59    itojun 	 */
   1090  1.122    dyoung 	if (rt != NULL && (rt->rt_ifp->if_flags & IFF_LOOPBACK) == 0)
   1091  1.121    dyoung 		ia = ifatoia(rt->rt_ifa);
   1092   1.62   thorpej 	if (ia == NULL) {
   1093   1.59    itojun 		u_int16_t fport = sin->sin_port;
   1094   1.59    itojun 
   1095   1.59    itojun 		sin->sin_port = 0;
   1096   1.59    itojun 		ia = ifatoia(ifa_ifwithladdr(sintosa(sin)));
   1097   1.59    itojun 		sin->sin_port = fport;
   1098  1.117    dyoung 		if (ia == NULL) {
   1099   1.59    itojun 			/* Find 1st non-loopback AF_INET address */
   1100   1.91  jonathan 			TAILQ_FOREACH(ia, &in_ifaddrhead, ia_list) {
   1101   1.59    itojun 				if (!(ia->ia_ifp->if_flags & IFF_LOOPBACK))
   1102   1.59    itojun 					break;
   1103   1.62   thorpej 			}
   1104   1.59    itojun 		}
   1105   1.62   thorpej 		if (ia == NULL) {
   1106   1.59    itojun 			*errorp = EADDRNOTAVAIL;
   1107   1.59    itojun 			return NULL;
   1108   1.59    itojun 		}
   1109   1.59    itojun 	}
   1110   1.59    itojun 	/*
   1111   1.59    itojun 	 * If the destination address is multicast and an outgoing
   1112   1.59    itojun 	 * interface has been set as a multicast option, use the
   1113   1.59    itojun 	 * address of that interface as our source address.
   1114   1.59    itojun 	 */
   1115   1.59    itojun 	if (IN_MULTICAST(sin->sin_addr.s_addr) && mopts != NULL) {
   1116   1.59    itojun 		struct ip_moptions *imo;
   1117   1.59    itojun 		struct ifnet *ifp;
   1118   1.59    itojun 
   1119   1.59    itojun 		imo = mopts;
   1120   1.59    itojun 		if (imo->imo_multicast_ifp != NULL) {
   1121   1.59    itojun 			ifp = imo->imo_multicast_ifp;
   1122   1.59    itojun 			IFP_TO_IA(ifp, ia);		/* XXX */
   1123   1.59    itojun 			if (ia == 0) {
   1124   1.59    itojun 				*errorp = EADDRNOTAVAIL;
   1125   1.59    itojun 				return NULL;
   1126   1.59    itojun 			}
   1127   1.59    itojun 		}
   1128   1.59    itojun 	}
   1129  1.108    dyoung 	if (ia->ia_ifa.ifa_getifa != NULL) {
   1130  1.108    dyoung 		ia = ifatoia((*ia->ia_ifa.ifa_getifa)(&ia->ia_ifa,
   1131  1.108    dyoung 		                                      sintosa(sin)));
   1132  1.108    dyoung 	}
   1133  1.108    dyoung #ifdef GETIFA_DEBUG
   1134  1.108    dyoung 	else
   1135  1.108    dyoung 		printf("%s: missing ifa_getifa\n", __func__);
   1136  1.108    dyoung #endif
   1137   1.59    itojun 	return satosin(&ia->ia_addr);
   1138    1.1       cgd }
   1139