in_pcb.c revision 1.196 1 1.196 ozaki /* $NetBSD: in_pcb.c,v 1.196 2022/11/04 09:01:53 ozaki-r Exp $ */
2 1.59 itojun
3 1.59 itojun /*
4 1.59 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
5 1.59 itojun * All rights reserved.
6 1.78 itojun *
7 1.59 itojun * Redistribution and use in source and binary forms, with or without
8 1.59 itojun * modification, are permitted provided that the following conditions
9 1.59 itojun * are met:
10 1.59 itojun * 1. Redistributions of source code must retain the above copyright
11 1.59 itojun * notice, this list of conditions and the following disclaimer.
12 1.59 itojun * 2. Redistributions in binary form must reproduce the above copyright
13 1.59 itojun * notice, this list of conditions and the following disclaimer in the
14 1.59 itojun * documentation and/or other materials provided with the distribution.
15 1.59 itojun * 3. Neither the name of the project nor the names of its contributors
16 1.59 itojun * may be used to endorse or promote products derived from this software
17 1.59 itojun * without specific prior written permission.
18 1.78 itojun *
19 1.59 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
20 1.59 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 1.59 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 1.59 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
23 1.59 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 1.59 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 1.59 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 1.59 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 1.59 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 1.59 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 1.59 itojun * SUCH DAMAGE.
30 1.59 itojun */
31 1.57 thorpej
32 1.57 thorpej /*-
33 1.138 dyoung * Copyright (c) 1998, 2011 The NetBSD Foundation, Inc.
34 1.57 thorpej * All rights reserved.
35 1.57 thorpej *
36 1.57 thorpej * This code is derived from software contributed to The NetBSD Foundation
37 1.138 dyoung * by Coyote Point Systems, Inc.
38 1.138 dyoung * This code is derived from software contributed to The NetBSD Foundation
39 1.57 thorpej * by Public Access Networks Corporation ("Panix"). It was developed under
40 1.57 thorpej * contract to Panix by Eric Haszlakiewicz and Thor Lancelot Simon.
41 1.57 thorpej *
42 1.57 thorpej * Redistribution and use in source and binary forms, with or without
43 1.57 thorpej * modification, are permitted provided that the following conditions
44 1.57 thorpej * are met:
45 1.57 thorpej * 1. Redistributions of source code must retain the above copyright
46 1.57 thorpej * notice, this list of conditions and the following disclaimer.
47 1.57 thorpej * 2. Redistributions in binary form must reproduce the above copyright
48 1.57 thorpej * notice, this list of conditions and the following disclaimer in the
49 1.57 thorpej * documentation and/or other materials provided with the distribution.
50 1.57 thorpej *
51 1.57 thorpej * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
52 1.57 thorpej * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
53 1.57 thorpej * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
54 1.57 thorpej * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
55 1.57 thorpej * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
56 1.57 thorpej * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
57 1.57 thorpej * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
58 1.57 thorpej * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
59 1.57 thorpej * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
60 1.57 thorpej * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
61 1.57 thorpej * POSSIBILITY OF SUCH DAMAGE.
62 1.57 thorpej */
63 1.11 cgd
64 1.1 cgd /*
65 1.44 thorpej * Copyright (c) 1982, 1986, 1991, 1993, 1995
66 1.10 mycroft * The Regents of the University of California. All rights reserved.
67 1.1 cgd *
68 1.1 cgd * Redistribution and use in source and binary forms, with or without
69 1.1 cgd * modification, are permitted provided that the following conditions
70 1.1 cgd * are met:
71 1.1 cgd * 1. Redistributions of source code must retain the above copyright
72 1.1 cgd * notice, this list of conditions and the following disclaimer.
73 1.1 cgd * 2. Redistributions in binary form must reproduce the above copyright
74 1.1 cgd * notice, this list of conditions and the following disclaimer in the
75 1.1 cgd * documentation and/or other materials provided with the distribution.
76 1.86 agc * 3. Neither the name of the University nor the names of its contributors
77 1.1 cgd * may be used to endorse or promote products derived from this software
78 1.1 cgd * without specific prior written permission.
79 1.1 cgd *
80 1.1 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
81 1.1 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
82 1.1 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
83 1.1 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
84 1.1 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
85 1.1 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
86 1.1 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
87 1.1 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
88 1.1 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
89 1.1 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
90 1.1 cgd * SUCH DAMAGE.
91 1.1 cgd *
92 1.44 thorpej * @(#)in_pcb.c 8.4 (Berkeley) 5/24/95
93 1.1 cgd */
94 1.73 lukem
95 1.73 lukem #include <sys/cdefs.h>
96 1.196 ozaki __KERNEL_RCSID(0, "$NetBSD: in_pcb.c,v 1.196 2022/11/04 09:01:53 ozaki-r Exp $");
97 1.60 thorpej
98 1.162 pooka #ifdef _KERNEL_OPT
99 1.88 itojun #include "opt_inet.h"
100 1.60 thorpej #include "opt_ipsec.h"
101 1.162 pooka #endif
102 1.1 cgd
103 1.7 mycroft #include <sys/param.h>
104 1.7 mycroft #include <sys/systm.h>
105 1.7 mycroft #include <sys/mbuf.h>
106 1.7 mycroft #include <sys/socket.h>
107 1.7 mycroft #include <sys/socketvar.h>
108 1.7 mycroft #include <sys/ioctl.h>
109 1.10 mycroft #include <sys/errno.h>
110 1.10 mycroft #include <sys/time.h>
111 1.128 pooka #include <sys/once.h>
112 1.52 thorpej #include <sys/pool.h>
113 1.10 mycroft #include <sys/proc.h>
114 1.102 elad #include <sys/kauth.h>
115 1.129 pooka #include <sys/uidinfo.h>
116 1.132 elad #include <sys/domain.h>
117 1.1 cgd
118 1.7 mycroft #include <net/if.h>
119 1.7 mycroft #include <net/route.h>
120 1.1 cgd
121 1.7 mycroft #include <netinet/in.h>
122 1.7 mycroft #include <netinet/in_systm.h>
123 1.7 mycroft #include <netinet/ip.h>
124 1.7 mycroft #include <netinet/in_pcb.h>
125 1.7 mycroft #include <netinet/in_var.h>
126 1.7 mycroft #include <netinet/ip_var.h>
127 1.143 christos #include <netinet/portalgo.h>
128 1.1 cgd
129 1.88 itojun #ifdef INET6
130 1.88 itojun #include <netinet/ip6.h>
131 1.88 itojun #include <netinet6/ip6_var.h>
132 1.88 itojun #include <netinet6/in6_pcb.h>
133 1.88 itojun #endif
134 1.88 itojun
135 1.145 christos #ifdef IPSEC
136 1.87 jonathan #include <netipsec/ipsec.h>
137 1.87 jonathan #include <netipsec/key.h>
138 1.59 itojun #endif /* IPSEC */
139 1.59 itojun
140 1.138 dyoung #include <netinet/tcp_vtw.h>
141 1.138 dyoung
142 1.1 cgd struct in_addr zeroin_addr;
143 1.1 cgd
144 1.90 provos #define INPCBHASH_PORT(table, lport) \
145 1.92 itojun &(table)->inpt_porthashtbl[ntohs(lport) & (table)->inpt_porthash]
146 1.33 mycroft #define INPCBHASH_BIND(table, laddr, lport) \
147 1.33 mycroft &(table)->inpt_bindhashtbl[ \
148 1.33 mycroft ((ntohl((laddr).s_addr) + ntohs(lport))) & (table)->inpt_bindhash]
149 1.33 mycroft #define INPCBHASH_CONNECT(table, faddr, fport, laddr, lport) \
150 1.33 mycroft &(table)->inpt_connecthashtbl[ \
151 1.33 mycroft ((ntohl((faddr).s_addr) + ntohs(fport)) + \
152 1.33 mycroft (ntohl((laddr).s_addr) + ntohs(lport))) & (table)->inpt_connecthash]
153 1.33 mycroft
154 1.43 lukem int anonportmin = IPPORT_ANONMIN;
155 1.43 lukem int anonportmax = IPPORT_ANONMAX;
156 1.67 tron int lowportmin = IPPORT_RESERVEDMIN;
157 1.67 tron int lowportmax = IPPORT_RESERVEDMAX;
158 1.43 lukem
159 1.193 ozaki static struct pool in4pcb_pool;
160 1.194 ozaki #ifdef INET6
161 1.193 ozaki static struct pool in6pcb_pool;
162 1.194 ozaki #endif
163 1.128 pooka
164 1.128 pooka static int
165 1.128 pooka inpcb_poolinit(void)
166 1.128 pooka {
167 1.128 pooka
168 1.193 ozaki pool_init(&in4pcb_pool, sizeof(struct in4pcb), 0, 0, 0, "in4pcbpl", NULL,
169 1.193 ozaki IPL_NET);
170 1.194 ozaki #ifdef INET6
171 1.193 ozaki pool_init(&in6pcb_pool, sizeof(struct in6pcb), 0, 0, 0, "in6pcbpl", NULL,
172 1.128 pooka IPL_NET);
173 1.194 ozaki #endif
174 1.128 pooka return 0;
175 1.128 pooka }
176 1.52 thorpej
177 1.18 mycroft void
178 1.195 ozaki inpcb_init(struct inpcbtable *table, int bindhashsize, int connecthashsize)
179 1.18 mycroft {
180 1.128 pooka static ONCE_DECL(control);
181 1.18 mycroft
182 1.146 christos TAILQ_INIT(&table->inpt_queue);
183 1.125 ad table->inpt_porthashtbl = hashinit(bindhashsize, HASH_LIST, true,
184 1.125 ad &table->inpt_porthash);
185 1.125 ad table->inpt_bindhashtbl = hashinit(bindhashsize, HASH_LIST, true,
186 1.125 ad &table->inpt_bindhash);
187 1.125 ad table->inpt_connecthashtbl = hashinit(connecthashsize, HASH_LIST, true,
188 1.125 ad &table->inpt_connecthash);
189 1.47 lukem table->inpt_lastlow = IPPORT_RESERVEDMAX;
190 1.47 lukem table->inpt_lastport = (u_int16_t)anonportmax;
191 1.128 pooka
192 1.128 pooka RUN_ONCE(&control, inpcb_poolinit);
193 1.18 mycroft }
194 1.18 mycroft
195 1.10 mycroft int
196 1.195 ozaki inpcb_create(struct socket *so, void *v)
197 1.1 cgd {
198 1.25 christos struct inpcbtable *table = v;
199 1.64 augustss struct inpcb *inp;
200 1.24 mycroft int s;
201 1.1 cgd
202 1.194 ozaki #ifdef INET6
203 1.192 ozaki KASSERT(soaf(so) == AF_INET || soaf(so) == AF_INET6);
204 1.177 ozaki
205 1.193 ozaki if (soaf(so) == AF_INET)
206 1.193 ozaki inp = pool_get(&in4pcb_pool, PR_NOWAIT|PR_ZERO);
207 1.193 ozaki else
208 1.193 ozaki inp = pool_get(&in6pcb_pool, PR_NOWAIT|PR_ZERO);
209 1.194 ozaki #else
210 1.194 ozaki KASSERT(soaf(so) == AF_INET);
211 1.194 ozaki inp = pool_get(&in4pcb_pool, PR_NOWAIT|PR_ZERO);
212 1.194 ozaki #endif
213 1.10 mycroft if (inp == NULL)
214 1.1 cgd return (ENOBUFS);
215 1.192 ozaki inp->inp_af = soaf(so);
216 1.18 mycroft inp->inp_table = table;
217 1.1 cgd inp->inp_socket = so;
218 1.143 christos inp->inp_portalgo = PORTALGO_DEFAULT;
219 1.139 christos inp->inp_bindportonsend = false;
220 1.184 riastrad inp->inp_overudp_cb = NULL;
221 1.184 riastrad inp->inp_overudp_arg = NULL;
222 1.193 ozaki
223 1.193 ozaki if (inp->inp_af == AF_INET) {
224 1.193 ozaki in4p_errormtu(inp) = -1;
225 1.193 ozaki in4p_prefsrcip(inp).s_addr = INADDR_ANY;
226 1.193 ozaki }
227 1.192 ozaki #ifdef INET6
228 1.193 ozaki else {
229 1.193 ozaki in6p_hops6(inp) = -1; /* use kernel default */
230 1.193 ozaki if (ip6_v6only)
231 1.193 ozaki inp->inp_flags |= IN6P_IPV6_V6ONLY;
232 1.193 ozaki }
233 1.192 ozaki #endif
234 1.145 christos #if defined(IPSEC)
235 1.148 christos if (ipsec_enabled) {
236 1.148 christos int error = ipsec_init_pcbpolicy(so, &inp->inp_sp);
237 1.148 christos if (error != 0) {
238 1.194 ozaki #ifdef INET6
239 1.193 ozaki if (inp->inp_af == AF_INET)
240 1.193 ozaki pool_put(&in4pcb_pool, inp);
241 1.193 ozaki else
242 1.193 ozaki pool_put(&in6pcb_pool, inp);
243 1.194 ozaki #else
244 1.194 ozaki KASSERT(inp->inp_af == AF_INET);
245 1.194 ozaki pool_put(&in4pcb_pool, inp);
246 1.194 ozaki #endif
247 1.148 christos return error;
248 1.148 christos }
249 1.192 ozaki inp->inp_sp->sp_inp = inp;
250 1.70 itojun }
251 1.70 itojun #endif
252 1.33 mycroft so->so_pcb = inp;
253 1.175 ozaki s = splsoftnet();
254 1.192 ozaki TAILQ_INSERT_HEAD(&table->inpt_queue, inp, inp_queue);
255 1.192 ozaki LIST_INSERT_HEAD(INPCBHASH_PORT(table, inp->inp_lport), inp,
256 1.192 ozaki inp_lhash);
257 1.195 ozaki inpcb_set_state(inp, INP_ATTACHED);
258 1.24 mycroft splx(s);
259 1.1 cgd return (0);
260 1.1 cgd }
261 1.8 mycroft
262 1.132 elad static int
263 1.195 ozaki inpcb_set_port(struct sockaddr_in *sin, struct inpcb *inp, kauth_cred_t cred)
264 1.1 cgd {
265 1.132 elad struct inpcbtable *table = inp->inp_table;
266 1.64 augustss struct socket *so = inp->inp_socket;
267 1.132 elad u_int16_t *lastport;
268 1.13 cgd u_int16_t lport = 0;
269 1.134 elad enum kauth_network_req req;
270 1.134 elad int error;
271 1.1 cgd
272 1.132 elad if (inp->inp_flags & INP_LOWPORT) {
273 1.132 elad #ifndef IPNOPRIVPORTS
274 1.134 elad req = KAUTH_REQ_NETWORK_BIND_PRIVPORT;
275 1.134 elad #else
276 1.134 elad req = KAUTH_REQ_NETWORK_BIND_PORT;
277 1.132 elad #endif
278 1.134 elad
279 1.132 elad lastport = &table->inpt_lastlow;
280 1.132 elad } else {
281 1.134 elad req = KAUTH_REQ_NETWORK_BIND_PORT;
282 1.134 elad
283 1.132 elad lastport = &table->inpt_lastport;
284 1.132 elad }
285 1.134 elad
286 1.134 elad /* XXX-kauth: KAUTH_REQ_NETWORK_BIND_AUTOASSIGN_{,PRIV}PORT */
287 1.134 elad error = kauth_authorize_network(cred, KAUTH_NETWORK_BIND, req, so, sin,
288 1.134 elad NULL);
289 1.134 elad if (error)
290 1.137 elad return (EACCES);
291 1.134 elad
292 1.139 christos /*
293 1.139 christos * Use RFC6056 randomized port selection
294 1.139 christos */
295 1.192 ozaki error = portalgo_randport(&lport, inp, cred);
296 1.139 christos if (error)
297 1.139 christos return error;
298 1.132 elad
299 1.132 elad inp->inp_flags |= INP_ANONPORT;
300 1.132 elad *lastport = lport;
301 1.132 elad lport = htons(lport);
302 1.132 elad inp->inp_lport = lport;
303 1.195 ozaki inpcb_set_state(inp, INP_BOUND);
304 1.132 elad
305 1.132 elad return (0);
306 1.132 elad }
307 1.88 itojun
308 1.179 ryo int
309 1.195 ozaki inpcb_bindableaddr(const struct inpcb *inp, struct sockaddr_in *sin,
310 1.185 christos kauth_cred_t cred)
311 1.132 elad {
312 1.168 ozaki int error = EADDRNOTAVAIL;
313 1.168 ozaki struct ifaddr *ifa = NULL;
314 1.168 ozaki int s;
315 1.168 ozaki
316 1.28 mycroft if (sin->sin_family != AF_INET)
317 1.28 mycroft return (EAFNOSUPPORT);
318 1.132 elad
319 1.168 ozaki s = pserialize_read_enter();
320 1.136 elad if (IN_MULTICAST(sin->sin_addr.s_addr)) {
321 1.195 ozaki /* Always succeed; port reuse handled in inpcb_bind_port(). */
322 1.136 elad } else if (!in_nullhost(sin->sin_addr)) {
323 1.168 ozaki struct in_ifaddr *ia;
324 1.132 elad
325 1.166 ozaki ia = in_get_ia(sin->sin_addr);
326 1.132 elad /* check for broadcast addresses */
327 1.168 ozaki if (ia == NULL) {
328 1.168 ozaki ifa = ifa_ifwithaddr(sintosa(sin));
329 1.168 ozaki if (ifa != NULL)
330 1.168 ozaki ia = ifatoia(ifa);
331 1.185 christos else if ((inp->inp_flags & INP_BINDANY) != 0) {
332 1.185 christos error = 0;
333 1.185 christos goto error;
334 1.185 christos }
335 1.168 ozaki }
336 1.132 elad if (ia == NULL)
337 1.168 ozaki goto error;
338 1.170 roy if (ia->ia4_flags & IN_IFF_DUPLICATED)
339 1.168 ozaki goto error;
340 1.132 elad }
341 1.179 ryo error = 0;
342 1.179 ryo error:
343 1.168 ozaki pserialize_read_exit(s);
344 1.179 ryo return error;
345 1.179 ryo }
346 1.132 elad
347 1.179 ryo static int
348 1.195 ozaki inpcb_bind_addr(struct inpcb *inp, struct sockaddr_in *sin, kauth_cred_t cred)
349 1.179 ryo {
350 1.179 ryo int error;
351 1.132 elad
352 1.195 ozaki error = inpcb_bindableaddr(inp, sin, cred);
353 1.179 ryo if (error == 0)
354 1.193 ozaki in4p_laddr(inp) = sin->sin_addr;
355 1.168 ozaki return error;
356 1.132 elad }
357 1.132 elad
358 1.132 elad static int
359 1.195 ozaki inpcb_bind_port(struct inpcb *inp, struct sockaddr_in *sin, kauth_cred_t cred)
360 1.132 elad {
361 1.132 elad struct inpcbtable *table = inp->inp_table;
362 1.132 elad struct socket *so = inp->inp_socket;
363 1.132 elad int reuseport = (so->so_options & SO_REUSEPORT);
364 1.133 elad int wild = 0, error;
365 1.132 elad
366 1.28 mycroft if (IN_MULTICAST(sin->sin_addr.s_addr)) {
367 1.10 mycroft /*
368 1.28 mycroft * Treat SO_REUSEADDR as SO_REUSEPORT for multicast;
369 1.28 mycroft * allow complete duplication of binding if
370 1.28 mycroft * SO_REUSEPORT is set, or if SO_REUSEADDR is set
371 1.28 mycroft * and a multicast address is bound on both
372 1.28 mycroft * new and duplicated sockets.
373 1.10 mycroft */
374 1.155 seanb if (so->so_options & (SO_REUSEADDR | SO_REUSEPORT))
375 1.28 mycroft reuseport = SO_REUSEADDR|SO_REUSEPORT;
376 1.132 elad }
377 1.132 elad
378 1.132 elad if (sin->sin_port == 0) {
379 1.195 ozaki error = inpcb_set_port(sin, inp, cred);
380 1.132 elad if (error)
381 1.132 elad return (error);
382 1.132 elad } else {
383 1.28 mycroft struct inpcb *t;
384 1.138 dyoung vestigial_inpcb_t vestige;
385 1.88 itojun #ifdef INET6
386 1.192 ozaki struct inpcb *t6;
387 1.88 itojun struct in6_addr mapped;
388 1.88 itojun #endif
389 1.133 elad enum kauth_network_req req;
390 1.132 elad
391 1.132 elad if ((so->so_options & (SO_REUSEADDR|SO_REUSEPORT)) == 0)
392 1.132 elad wild = 1;
393 1.132 elad
394 1.31 perry #ifndef IPNOPRIVPORTS
395 1.133 elad if (ntohs(sin->sin_port) < IPPORT_RESERVED)
396 1.133 elad req = KAUTH_REQ_NETWORK_BIND_PRIVPORT;
397 1.133 elad else
398 1.133 elad #endif /* !IPNOPRIVPORTS */
399 1.133 elad req = KAUTH_REQ_NETWORK_BIND_PORT;
400 1.133 elad
401 1.133 elad error = kauth_authorize_network(cred, KAUTH_NETWORK_BIND, req,
402 1.133 elad so, sin, NULL);
403 1.133 elad if (error)
404 1.137 elad return (EACCES);
405 1.133 elad
406 1.88 itojun #ifdef INET6
407 1.163 rtr in6_in_2_v4mapin6(&sin->sin_addr, &mapped);
408 1.196 ozaki t6 = in6pcb_lookup_local(table, &mapped, sin->sin_port, wild, &vestige);
409 1.192 ozaki if (t6 && (reuseport & t6->inp_socket->so_options) == 0)
410 1.88 itojun return (EADDRINUSE);
411 1.138 dyoung if (!t6 && vestige.valid) {
412 1.138 dyoung if (!!reuseport != !!vestige.reuse_port) {
413 1.138 dyoung return EADDRINUSE;
414 1.138 dyoung }
415 1.138 dyoung }
416 1.88 itojun #endif
417 1.133 elad
418 1.133 elad /* XXX-kauth */
419 1.99 christos if (so->so_uidinfo->ui_uid && !IN_MULTICAST(sin->sin_addr.s_addr)) {
420 1.195 ozaki t = inpcb_lookup_local(table, sin->sin_addr, sin->sin_port, 1, &vestige);
421 1.133 elad /*
422 1.133 elad * XXX: investigate ramifications of loosening this
423 1.133 elad * restriction so that as long as both ports have
424 1.133 elad * SO_REUSEPORT allow the bind
425 1.133 elad */
426 1.58 lukem if (t &&
427 1.58 lukem (!in_nullhost(sin->sin_addr) ||
428 1.193 ozaki !in_nullhost(in4p_laddr(t)) ||
429 1.58 lukem (t->inp_socket->so_options & SO_REUSEPORT) == 0)
430 1.99 christos && (so->so_uidinfo->ui_uid != t->inp_socket->so_uidinfo->ui_uid)) {
431 1.58 lukem return (EADDRINUSE);
432 1.58 lukem }
433 1.138 dyoung if (!t && vestige.valid) {
434 1.138 dyoung if ((!in_nullhost(sin->sin_addr)
435 1.138 dyoung || !in_nullhost(vestige.laddr.v4)
436 1.138 dyoung || !vestige.reuse_port)
437 1.138 dyoung && so->so_uidinfo->ui_uid != vestige.uid) {
438 1.138 dyoung return EADDRINUSE;
439 1.138 dyoung }
440 1.138 dyoung }
441 1.58 lukem }
442 1.195 ozaki t = inpcb_lookup_local(table, sin->sin_addr, sin->sin_port, wild, &vestige);
443 1.28 mycroft if (t && (reuseport & t->inp_socket->so_options) == 0)
444 1.28 mycroft return (EADDRINUSE);
445 1.138 dyoung if (!t
446 1.138 dyoung && vestige.valid
447 1.138 dyoung && !(reuseport && vestige.reuse_port))
448 1.138 dyoung return EADDRINUSE;
449 1.132 elad
450 1.132 elad inp->inp_lport = sin->sin_port;
451 1.195 ozaki inpcb_set_state(inp, INP_BOUND);
452 1.1 cgd }
453 1.45 lukem
454 1.192 ozaki LIST_REMOVE(inp, inp_lhash);
455 1.192 ozaki LIST_INSERT_HEAD(INPCBHASH_PORT(table, inp->inp_lport), inp,
456 1.192 ozaki inp_lhash);
457 1.132 elad
458 1.132 elad return (0);
459 1.132 elad }
460 1.132 elad
461 1.132 elad int
462 1.195 ozaki inpcb_bind(void *v, struct sockaddr_in *sin, struct lwp *l)
463 1.132 elad {
464 1.132 elad struct inpcb *inp = v;
465 1.134 elad struct sockaddr_in lsin;
466 1.132 elad int error;
467 1.132 elad
468 1.132 elad if (inp->inp_af != AF_INET)
469 1.132 elad return (EINVAL);
470 1.132 elad
471 1.193 ozaki if (inp->inp_lport || !in_nullhost(in4p_laddr(inp)))
472 1.132 elad return (EINVAL);
473 1.132 elad
474 1.156 rtr if (NULL != sin) {
475 1.156 rtr if (sin->sin_len != sizeof(*sin))
476 1.132 elad return (EINVAL);
477 1.132 elad } else {
478 1.134 elad lsin = *((const struct sockaddr_in *)
479 1.134 elad inp->inp_socket->so_proto->pr_domain->dom_sa_any);
480 1.134 elad sin = &lsin;
481 1.132 elad }
482 1.132 elad
483 1.132 elad /* Bind address. */
484 1.195 ozaki error = inpcb_bind_addr(inp, sin, l->l_cred);
485 1.132 elad if (error)
486 1.132 elad return (error);
487 1.132 elad
488 1.132 elad /* Bind port. */
489 1.195 ozaki error = inpcb_bind_port(inp, sin, l->l_cred);
490 1.132 elad if (error) {
491 1.193 ozaki in4p_laddr(inp).s_addr = INADDR_ANY;
492 1.132 elad
493 1.132 elad return (error);
494 1.132 elad }
495 1.132 elad
496 1.1 cgd return (0);
497 1.1 cgd }
498 1.1 cgd
499 1.1 cgd /*
500 1.1 cgd * Connect from a socket to a specified address.
501 1.1 cgd * Both address and port must be specified in argument sin.
502 1.1 cgd * If don't have a local address for this socket yet,
503 1.1 cgd * then pick one.
504 1.1 cgd */
505 1.10 mycroft int
506 1.195 ozaki inpcb_connect(void *v, struct sockaddr_in *sin, struct lwp *l)
507 1.1 cgd {
508 1.64 augustss struct inpcb *inp = v;
509 1.138 dyoung vestigial_inpcb_t vestige;
510 1.40 thorpej int error;
511 1.167 ozaki struct in_addr laddr;
512 1.1 cgd
513 1.88 itojun if (inp->inp_af != AF_INET)
514 1.88 itojun return (EINVAL);
515 1.88 itojun
516 1.158 rtr if (sin->sin_len != sizeof (*sin))
517 1.158 rtr return (EINVAL);
518 1.1 cgd if (sin->sin_family != AF_INET)
519 1.1 cgd return (EAFNOSUPPORT);
520 1.1 cgd if (sin->sin_port == 0)
521 1.1 cgd return (EADDRNOTAVAIL);
522 1.144 christos
523 1.144 christos if (IN_MULTICAST(sin->sin_addr.s_addr) &&
524 1.144 christos inp->inp_socket->so_type == SOCK_STREAM)
525 1.144 christos return EADDRNOTAVAIL;
526 1.144 christos
527 1.165 ozaki if (!IN_ADDRLIST_READER_EMPTY()) {
528 1.1 cgd /*
529 1.1 cgd * If the destination address is INADDR_ANY,
530 1.49 tls * use any local address (likely loopback).
531 1.1 cgd * If the supplied address is INADDR_BROADCAST,
532 1.49 tls * use the broadcast address of an interface
533 1.49 tls * which supports broadcast. (loopback does not)
534 1.1 cgd */
535 1.49 tls
536 1.72 matt if (in_nullhost(sin->sin_addr)) {
537 1.165 ozaki /* XXX racy */
538 1.72 matt sin->sin_addr =
539 1.165 ozaki IN_ADDRLIST_READER_FIRST()->ia_addr.sin_addr;
540 1.72 matt } else if (sin->sin_addr.s_addr == INADDR_BROADCAST) {
541 1.167 ozaki struct in_ifaddr *ia;
542 1.168 ozaki int s = pserialize_read_enter();
543 1.165 ozaki IN_ADDRLIST_READER_FOREACH(ia) {
544 1.72 matt if (ia->ia_ifp->if_flags & IFF_BROADCAST) {
545 1.72 matt sin->sin_addr =
546 1.72 matt ia->ia_broadaddr.sin_addr;
547 1.72 matt break;
548 1.72 matt }
549 1.49 tls }
550 1.168 ozaki pserialize_read_exit(s);
551 1.72 matt }
552 1.1 cgd }
553 1.32 mycroft /*
554 1.32 mycroft * If we haven't bound which network number to use as ours,
555 1.32 mycroft * we will use the number of the outgoing interface.
556 1.32 mycroft * This depends on having done a routing lookup, which
557 1.32 mycroft * we will probably have to do anyway, so we might
558 1.32 mycroft * as well do it now. On the other hand if we are
559 1.32 mycroft * sending to multiple destinations we may have already
560 1.32 mycroft * done the lookup, so see if we can use the route
561 1.32 mycroft * from before. In any case, we only
562 1.32 mycroft * chose a port number once, even if sending to multiple
563 1.32 mycroft * destinations.
564 1.32 mycroft */
565 1.193 ozaki if (in_nullhost(in4p_laddr(inp))) {
566 1.100 christos int xerror;
567 1.168 ozaki struct in_ifaddr *ia, *_ia;
568 1.168 ozaki int s;
569 1.168 ozaki struct psref psref;
570 1.168 ozaki int bound;
571 1.168 ozaki
572 1.168 ozaki bound = curlwp_bind();
573 1.168 ozaki ia = in_selectsrc(sin, &inp->inp_route,
574 1.168 ozaki inp->inp_socket->so_options, inp->inp_moptions, &xerror,
575 1.168 ozaki &psref);
576 1.168 ozaki if (ia == NULL) {
577 1.168 ozaki curlwp_bindx(bound);
578 1.100 christos if (xerror == 0)
579 1.100 christos xerror = EADDRNOTAVAIL;
580 1.100 christos return xerror;
581 1.59 itojun }
582 1.168 ozaki s = pserialize_read_enter();
583 1.168 ozaki _ia = in_get_ia(IA_SIN(ia)->sin_addr);
584 1.185 christos if (_ia == NULL && (inp->inp_flags & INP_BINDANY) == 0) {
585 1.168 ozaki pserialize_read_exit(s);
586 1.168 ozaki ia4_release(ia, &psref);
587 1.168 ozaki curlwp_bindx(bound);
588 1.83 itojun return (EADDRNOTAVAIL);
589 1.168 ozaki }
590 1.168 ozaki pserialize_read_exit(s);
591 1.168 ozaki laddr = IA_SIN(ia)->sin_addr;
592 1.168 ozaki ia4_release(ia, &psref);
593 1.168 ozaki curlwp_bindx(bound);
594 1.167 ozaki } else
595 1.193 ozaki laddr = in4p_laddr(inp);
596 1.195 ozaki if (inpcb_lookup(inp->inp_table, sin->sin_addr, sin->sin_port,
597 1.168 ozaki laddr, inp->inp_lport, &vestige) != NULL ||
598 1.168 ozaki vestige.valid) {
599 1.1 cgd return (EADDRINUSE);
600 1.168 ozaki }
601 1.193 ozaki if (in_nullhost(in4p_laddr(inp))) {
602 1.40 thorpej if (inp->inp_lport == 0) {
603 1.195 ozaki error = inpcb_bind(inp, NULL, l);
604 1.40 thorpej /*
605 1.40 thorpej * This used to ignore the return value
606 1.40 thorpej * completely, but we need to check for
607 1.40 thorpej * ephemeral port shortage.
608 1.101 dsl * And attempts to request low ports if not root.
609 1.40 thorpej */
610 1.101 dsl if (error != 0)
611 1.40 thorpej return (error);
612 1.40 thorpej }
613 1.193 ozaki in4p_laddr(inp) = laddr;
614 1.1 cgd }
615 1.193 ozaki in4p_faddr(inp) = sin->sin_addr;
616 1.1 cgd inp->inp_fport = sin->sin_port;
617 1.139 christos
618 1.139 christos /* Late bind, if needed */
619 1.139 christos if (inp->inp_bindportonsend) {
620 1.139 christos struct sockaddr_in lsin = *((const struct sockaddr_in *)
621 1.139 christos inp->inp_socket->so_proto->pr_domain->dom_sa_any);
622 1.193 ozaki lsin.sin_addr = in4p_laddr(inp);
623 1.139 christos lsin.sin_port = 0;
624 1.139 christos
625 1.195 ozaki if ((error = inpcb_bind_port(inp, &lsin, l->l_cred)) != 0)
626 1.139 christos return error;
627 1.139 christos }
628 1.139 christos
629 1.195 ozaki inpcb_set_state(inp, INP_CONNECTED);
630 1.145 christos #if defined(IPSEC)
631 1.148 christos if (ipsec_enabled && inp->inp_socket->so_type == SOCK_STREAM)
632 1.71 itojun ipsec_pcbconn(inp->inp_sp);
633 1.71 itojun #endif
634 1.1 cgd return (0);
635 1.1 cgd }
636 1.1 cgd
637 1.25 christos void
638 1.195 ozaki inpcb_disconnect(void *v)
639 1.1 cgd {
640 1.25 christos struct inpcb *inp = v;
641 1.1 cgd
642 1.88 itojun if (inp->inp_af != AF_INET)
643 1.88 itojun return;
644 1.88 itojun
645 1.193 ozaki in4p_faddr(inp) = zeroin_addr;
646 1.1 cgd inp->inp_fport = 0;
647 1.195 ozaki inpcb_set_state(inp, INP_BOUND);
648 1.145 christos #if defined(IPSEC)
649 1.148 christos if (ipsec_enabled)
650 1.148 christos ipsec_pcbdisconn(inp->inp_sp);
651 1.71 itojun #endif
652 1.93 itojun if (inp->inp_socket->so_state & SS_NOFDREF)
653 1.195 ozaki inpcb_destroy(inp);
654 1.1 cgd }
655 1.1 cgd
656 1.25 christos void
657 1.195 ozaki inpcb_destroy(void *v)
658 1.1 cgd {
659 1.25 christos struct inpcb *inp = v;
660 1.1 cgd struct socket *so = inp->inp_socket;
661 1.24 mycroft int s;
662 1.1 cgd
663 1.192 ozaki KASSERT(inp->inp_af == AF_INET || inp->inp_af == AF_INET6);
664 1.88 itojun
665 1.145 christos #if defined(IPSEC)
666 1.148 christos if (ipsec_enabled)
667 1.182 maxv ipsec_delete_pcbpolicy(inp);
668 1.150 rmind #endif
669 1.150 rmind so->so_pcb = NULL;
670 1.150 rmind
671 1.175 ozaki s = splsoftnet();
672 1.195 ozaki inpcb_set_state(inp, INP_ATTACHED);
673 1.192 ozaki LIST_REMOVE(inp, inp_lhash);
674 1.192 ozaki TAILQ_REMOVE(&inp->inp_table->inpt_queue, inp, inp_queue);
675 1.24 mycroft splx(s);
676 1.150 rmind
677 1.150 rmind if (inp->inp_options) {
678 1.150 rmind m_free(inp->inp_options);
679 1.150 rmind }
680 1.150 rmind rtcache_free(&inp->inp_route);
681 1.152 rmind ip_freemoptions(inp->inp_moptions);
682 1.194 ozaki #ifdef INET6
683 1.193 ozaki if (inp->inp_af == AF_INET6) {
684 1.193 ozaki if (in6p_outputopts(inp) != NULL) {
685 1.193 ozaki ip6_clearpktopts(in6p_outputopts(inp), -1);
686 1.193 ozaki free(in6p_outputopts(inp), M_IP6OPT);
687 1.193 ozaki }
688 1.193 ozaki ip6_freemoptions(in6p_moptions(inp));
689 1.193 ozaki }
690 1.194 ozaki #endif
691 1.127 spz sofree(so); /* drops the socket's lock */
692 1.150 rmind
693 1.194 ozaki #ifdef INET6
694 1.193 ozaki if (inp->inp_af == AF_INET)
695 1.193 ozaki pool_put(&in4pcb_pool, inp);
696 1.193 ozaki else
697 1.193 ozaki pool_put(&in6pcb_pool, inp);
698 1.194 ozaki #else
699 1.194 ozaki KASSERT(inp->inp_af == AF_INET);
700 1.194 ozaki pool_put(&in4pcb_pool, inp);
701 1.194 ozaki #endif
702 1.126 matt mutex_enter(softnet_lock); /* reacquire the softnet_lock */
703 1.1 cgd }
704 1.1 cgd
705 1.25 christos void
706 1.195 ozaki inpcb_fetch_sockaddr(struct inpcb *inp, struct sockaddr_in *sin)
707 1.1 cgd {
708 1.78 itojun
709 1.88 itojun if (inp->inp_af != AF_INET)
710 1.88 itojun return;
711 1.88 itojun
712 1.193 ozaki sockaddr_in_init(sin, &in4p_laddr(inp), inp->inp_lport);
713 1.1 cgd }
714 1.1 cgd
715 1.25 christos void
716 1.195 ozaki inpcb_fetch_peeraddr(struct inpcb *inp, struct sockaddr_in *sin)
717 1.1 cgd {
718 1.78 itojun
719 1.88 itojun if (inp->inp_af != AF_INET)
720 1.88 itojun return;
721 1.88 itojun
722 1.193 ozaki sockaddr_in_init(sin, &in4p_faddr(inp), inp->inp_fport);
723 1.1 cgd }
724 1.1 cgd
725 1.1 cgd /*
726 1.1 cgd * Pass some notification to all connections of a protocol
727 1.1 cgd * associated with address dst. The local address and/or port numbers
728 1.1 cgd * may be specified to limit the search. The "usual action" will be
729 1.1 cgd * taken, depending on the ctlinput cmd. The caller must filter any
730 1.1 cgd * cmds that are uninteresting (e.g., no error in the map).
731 1.1 cgd * Call the protocol specific routine (if any) to report
732 1.1 cgd * any errors for each matching socket.
733 1.1 cgd *
734 1.22 mycroft * Must be called at splsoftnet.
735 1.1 cgd */
736 1.37 thorpej int
737 1.195 ozaki inpcb_notify(struct inpcbtable *table, struct in_addr faddr, u_int fport_arg,
738 1.98 perry struct in_addr laddr, u_int lport_arg, int errno,
739 1.98 perry void (*notify)(struct inpcb *, int))
740 1.1 cgd {
741 1.33 mycroft struct inpcbhead *head;
742 1.188 knakahar struct inpcb *inp;
743 1.13 cgd u_int16_t fport = fport_arg, lport = lport_arg;
744 1.37 thorpej int nmatch;
745 1.1 cgd
746 1.33 mycroft if (in_nullhost(faddr) || notify == 0)
747 1.37 thorpej return (0);
748 1.1 cgd
749 1.37 thorpej nmatch = 0;
750 1.33 mycroft head = INPCBHASH_CONNECT(table, faddr, fport, laddr, lport);
751 1.192 ozaki LIST_FOREACH(inp, head, inp_hash) {
752 1.88 itojun if (inp->inp_af != AF_INET)
753 1.88 itojun continue;
754 1.188 knakahar
755 1.193 ozaki if (in_hosteq(in4p_faddr(inp), faddr) &&
756 1.33 mycroft inp->inp_fport == fport &&
757 1.33 mycroft inp->inp_lport == lport &&
758 1.193 ozaki in_hosteq(in4p_laddr(inp), laddr)) {
759 1.33 mycroft (*notify)(inp, errno);
760 1.37 thorpej nmatch++;
761 1.37 thorpej }
762 1.1 cgd }
763 1.37 thorpej return (nmatch);
764 1.18 mycroft }
765 1.18 mycroft
766 1.20 mycroft void
767 1.195 ozaki inpcb_notifyall(struct inpcbtable *table, struct in_addr faddr, int errno,
768 1.98 perry void (*notify)(struct inpcb *, int))
769 1.18 mycroft {
770 1.192 ozaki struct inpcb *inp;
771 1.18 mycroft
772 1.33 mycroft if (in_nullhost(faddr) || notify == 0)
773 1.18 mycroft return;
774 1.18 mycroft
775 1.192 ozaki TAILQ_FOREACH(inp, &table->inpt_queue, inp_queue) {
776 1.88 itojun if (inp->inp_af != AF_INET)
777 1.88 itojun continue;
778 1.193 ozaki if (in_hosteq(in4p_faddr(inp), faddr))
779 1.33 mycroft (*notify)(inp, errno);
780 1.63 thorpej }
781 1.63 thorpej }
782 1.63 thorpej
783 1.63 thorpej void
784 1.154 seanb in_purgeifmcast(struct ip_moptions *imo, struct ifnet *ifp)
785 1.154 seanb {
786 1.154 seanb int i, gap;
787 1.154 seanb
788 1.176 ozaki /* The owner of imo should be protected by solock */
789 1.164 ozaki KASSERT(ifp != NULL);
790 1.164 ozaki
791 1.154 seanb if (imo == NULL)
792 1.154 seanb return;
793 1.154 seanb
794 1.154 seanb /*
795 1.154 seanb * Unselect the outgoing interface if it is being
796 1.154 seanb * detached.
797 1.154 seanb */
798 1.164 ozaki if (imo->imo_multicast_if_index == ifp->if_index)
799 1.164 ozaki imo->imo_multicast_if_index = 0;
800 1.154 seanb
801 1.154 seanb /*
802 1.154 seanb * Drop multicast group membership if we joined
803 1.154 seanb * through the interface being detached.
804 1.154 seanb */
805 1.154 seanb for (i = 0, gap = 0; i < imo->imo_num_memberships; i++) {
806 1.154 seanb if (imo->imo_membership[i]->inm_ifp == ifp) {
807 1.154 seanb in_delmulti(imo->imo_membership[i]);
808 1.154 seanb gap++;
809 1.154 seanb } else if (gap != 0)
810 1.154 seanb imo->imo_membership[i - gap] = imo->imo_membership[i];
811 1.154 seanb }
812 1.154 seanb imo->imo_num_memberships -= gap;
813 1.154 seanb }
814 1.154 seanb
815 1.154 seanb void
816 1.195 ozaki inpcb_purgeif0(struct inpcbtable *table, struct ifnet *ifp)
817 1.63 thorpej {
818 1.192 ozaki struct inpcb *inp;
819 1.63 thorpej
820 1.192 ozaki TAILQ_FOREACH(inp, &table->inpt_queue, inp_queue) {
821 1.176 ozaki bool need_unlock = false;
822 1.176 ozaki
823 1.88 itojun if (inp->inp_af != AF_INET)
824 1.88 itojun continue;
825 1.176 ozaki
826 1.176 ozaki /* The caller holds either one of inps' lock */
827 1.176 ozaki if (!inp_locked(inp)) {
828 1.176 ozaki inp_lock(inp);
829 1.176 ozaki need_unlock = true;
830 1.176 ozaki }
831 1.176 ozaki
832 1.154 seanb in_purgeifmcast(inp->inp_moptions, ifp);
833 1.176 ozaki
834 1.176 ozaki if (need_unlock)
835 1.176 ozaki inp_unlock(inp);
836 1.69 itojun }
837 1.69 itojun }
838 1.69 itojun
839 1.69 itojun void
840 1.195 ozaki inpcb_purgeif(struct inpcbtable *table, struct ifnet *ifp)
841 1.69 itojun {
842 1.121 dyoung struct rtentry *rt;
843 1.192 ozaki struct inpcb *inp;
844 1.69 itojun
845 1.192 ozaki TAILQ_FOREACH(inp, &table->inpt_queue, inp_queue) {
846 1.88 itojun if (inp->inp_af != AF_INET)
847 1.88 itojun continue;
848 1.122 dyoung if ((rt = rtcache_validate(&inp->inp_route)) != NULL &&
849 1.171 ozaki rt->rt_ifp == ifp) {
850 1.171 ozaki rtcache_unref(rt, &inp->inp_route);
851 1.195 ozaki inpcb_rtchange(inp, 0);
852 1.171 ozaki } else
853 1.171 ozaki rtcache_unref(rt, &inp->inp_route);
854 1.1 cgd }
855 1.1 cgd }
856 1.1 cgd
857 1.1 cgd /*
858 1.1 cgd * Check for alternatives when higher level complains
859 1.1 cgd * about service problems. For now, invalidate cached
860 1.1 cgd * routing information. If the route was created dynamically
861 1.1 cgd * (by a redirect), time to try a default gateway again.
862 1.1 cgd */
863 1.25 christos void
864 1.195 ozaki inpcb_losing(struct inpcb *inp)
865 1.1 cgd {
866 1.64 augustss struct rtentry *rt;
867 1.10 mycroft struct rt_addrinfo info;
868 1.1 cgd
869 1.88 itojun if (inp->inp_af != AF_INET)
870 1.88 itojun return;
871 1.88 itojun
872 1.122 dyoung if ((rt = rtcache_validate(&inp->inp_route)) == NULL)
873 1.122 dyoung return;
874 1.122 dyoung
875 1.122 dyoung memset(&info, 0, sizeof(info));
876 1.122 dyoung info.rti_info[RTAX_DST] = rtcache_getdst(&inp->inp_route);
877 1.122 dyoung info.rti_info[RTAX_GATEWAY] = rt->rt_gateway;
878 1.122 dyoung info.rti_info[RTAX_NETMASK] = rt_mask(rt);
879 1.122 dyoung rt_missmsg(RTM_LOSING, &info, rt->rt_flags, 0);
880 1.171 ozaki if (rt->rt_flags & RTF_DYNAMIC) {
881 1.171 ozaki int error;
882 1.171 ozaki struct rtentry *nrt;
883 1.171 ozaki
884 1.171 ozaki error = rtrequest(RTM_DELETE, rt_getkey(rt),
885 1.171 ozaki rt->rt_gateway, rt_mask(rt), rt->rt_flags, &nrt);
886 1.171 ozaki rtcache_unref(rt, &inp->inp_route);
887 1.190 knakahar if (error == 0) {
888 1.190 knakahar rt_newmsg_dynamic(RTM_DELETE, nrt);
889 1.172 ozaki rt_free(nrt);
890 1.190 knakahar }
891 1.171 ozaki } else
892 1.171 ozaki rtcache_unref(rt, &inp->inp_route);
893 1.122 dyoung /*
894 1.122 dyoung * A new route can be allocated
895 1.122 dyoung * the next time output is attempted.
896 1.122 dyoung */
897 1.122 dyoung rtcache_free(&inp->inp_route);
898 1.1 cgd }
899 1.1 cgd
900 1.1 cgd /*
901 1.111 dyoung * After a routing change, flush old routing. A new route can be
902 1.111 dyoung * allocated the next time output is attempted.
903 1.1 cgd */
904 1.10 mycroft void
905 1.195 ozaki inpcb_rtchange(struct inpcb *inp, int errno)
906 1.1 cgd {
907 1.32 mycroft
908 1.88 itojun if (inp->inp_af != AF_INET)
909 1.88 itojun return;
910 1.88 itojun
911 1.112 joerg rtcache_free(&inp->inp_route);
912 1.112 joerg
913 1.49 tls /* XXX SHOULD NOTIFY HIGHER-LEVEL PROTOCOLS */
914 1.1 cgd }
915 1.1 cgd
916 1.1 cgd struct inpcb *
917 1.195 ozaki inpcb_lookup_local(struct inpcbtable *table, struct in_addr laddr,
918 1.138 dyoung u_int lport_arg, int lookup_wildcard, vestigial_inpcb_t *vp)
919 1.1 cgd {
920 1.90 provos struct inpcbhead *head;
921 1.192 ozaki struct inpcb *inp;
922 1.142 yamt struct inpcb *match = NULL;
923 1.142 yamt int matchwild = 3;
924 1.142 yamt int wildcard;
925 1.33 mycroft u_int16_t lport = lport_arg;
926 1.1 cgd
927 1.138 dyoung if (vp)
928 1.138 dyoung vp->valid = 0;
929 1.138 dyoung
930 1.90 provos head = INPCBHASH_PORT(table, lport);
931 1.192 ozaki LIST_FOREACH(inp, head, inp_lhash) {
932 1.88 itojun if (inp->inp_af != AF_INET)
933 1.88 itojun continue;
934 1.1 cgd if (inp->inp_lport != lport)
935 1.1 cgd continue;
936 1.142 yamt /*
937 1.142 yamt * check if inp's faddr and laddr match with ours.
938 1.142 yamt * our faddr is considered null.
939 1.142 yamt * count the number of wildcard matches. (0 - 2)
940 1.142 yamt *
941 1.142 yamt * null null match
942 1.142 yamt * A null wildcard match
943 1.142 yamt * null B wildcard match
944 1.142 yamt * A B non match
945 1.142 yamt * A A match
946 1.142 yamt */
947 1.1 cgd wildcard = 0;
948 1.193 ozaki if (!in_nullhost(in4p_faddr(inp)))
949 1.33 mycroft wildcard++;
950 1.193 ozaki if (in_nullhost(in4p_laddr(inp))) {
951 1.32 mycroft if (!in_nullhost(laddr))
952 1.1 cgd wildcard++;
953 1.1 cgd } else {
954 1.32 mycroft if (in_nullhost(laddr))
955 1.1 cgd wildcard++;
956 1.32 mycroft else {
957 1.193 ozaki if (!in_hosteq(in4p_laddr(inp), laddr))
958 1.32 mycroft continue;
959 1.32 mycroft }
960 1.1 cgd }
961 1.54 lukem if (wildcard && !lookup_wildcard)
962 1.1 cgd continue;
963 1.142 yamt /*
964 1.142 yamt * prefer an address with less wildcards.
965 1.142 yamt */
966 1.1 cgd if (wildcard < matchwild) {
967 1.1 cgd match = inp;
968 1.1 cgd matchwild = wildcard;
969 1.1 cgd if (matchwild == 0)
970 1.1 cgd break;
971 1.1 cgd }
972 1.1 cgd }
973 1.138 dyoung if (match && matchwild == 0)
974 1.138 dyoung return match;
975 1.138 dyoung
976 1.138 dyoung if (vp && table->vestige) {
977 1.138 dyoung void *state = (*table->vestige->init_ports4)(laddr, lport_arg, lookup_wildcard);
978 1.138 dyoung vestigial_inpcb_t better;
979 1.191 ryo bool has_better = false;
980 1.138 dyoung
981 1.138 dyoung while (table->vestige
982 1.138 dyoung && (*table->vestige->next_port4)(state, vp)) {
983 1.138 dyoung
984 1.138 dyoung if (vp->lport != lport)
985 1.138 dyoung continue;
986 1.138 dyoung wildcard = 0;
987 1.138 dyoung if (!in_nullhost(vp->faddr.v4))
988 1.138 dyoung wildcard++;
989 1.138 dyoung if (in_nullhost(vp->laddr.v4)) {
990 1.138 dyoung if (!in_nullhost(laddr))
991 1.138 dyoung wildcard++;
992 1.138 dyoung } else {
993 1.138 dyoung if (in_nullhost(laddr))
994 1.138 dyoung wildcard++;
995 1.138 dyoung else {
996 1.138 dyoung if (!in_hosteq(vp->laddr.v4, laddr))
997 1.138 dyoung continue;
998 1.138 dyoung }
999 1.138 dyoung }
1000 1.138 dyoung if (wildcard && !lookup_wildcard)
1001 1.138 dyoung continue;
1002 1.138 dyoung if (wildcard < matchwild) {
1003 1.138 dyoung better = *vp;
1004 1.191 ryo has_better = true;
1005 1.138 dyoung
1006 1.138 dyoung matchwild = wildcard;
1007 1.138 dyoung if (matchwild == 0)
1008 1.138 dyoung break;
1009 1.138 dyoung }
1010 1.138 dyoung }
1011 1.138 dyoung
1012 1.191 ryo if (has_better) {
1013 1.191 ryo *vp = better;
1014 1.191 ryo return 0;
1015 1.138 dyoung }
1016 1.138 dyoung }
1017 1.138 dyoung
1018 1.1 cgd return (match);
1019 1.24 mycroft }
1020 1.24 mycroft
1021 1.24 mycroft #ifdef DIAGNOSTIC
1022 1.195 ozaki int inpcb_notifymiss = 0;
1023 1.24 mycroft #endif
1024 1.24 mycroft
1025 1.24 mycroft struct inpcb *
1026 1.195 ozaki inpcb_lookup(struct inpcbtable *table,
1027 1.98 perry struct in_addr faddr, u_int fport_arg,
1028 1.138 dyoung struct in_addr laddr, u_int lport_arg,
1029 1.138 dyoung vestigial_inpcb_t *vp)
1030 1.24 mycroft {
1031 1.24 mycroft struct inpcbhead *head;
1032 1.64 augustss struct inpcb *inp;
1033 1.24 mycroft u_int16_t fport = fport_arg, lport = lport_arg;
1034 1.24 mycroft
1035 1.138 dyoung if (vp)
1036 1.138 dyoung vp->valid = 0;
1037 1.138 dyoung
1038 1.33 mycroft head = INPCBHASH_CONNECT(table, faddr, fport, laddr, lport);
1039 1.192 ozaki LIST_FOREACH(inp, head, inp_hash) {
1040 1.88 itojun if (inp->inp_af != AF_INET)
1041 1.88 itojun continue;
1042 1.88 itojun
1043 1.193 ozaki if (in_hosteq(in4p_faddr(inp), faddr) &&
1044 1.33 mycroft inp->inp_fport == fport &&
1045 1.33 mycroft inp->inp_lport == lport &&
1046 1.193 ozaki in_hosteq(in4p_laddr(inp), laddr))
1047 1.33 mycroft goto out;
1048 1.24 mycroft }
1049 1.138 dyoung if (vp && table->vestige) {
1050 1.138 dyoung if ((*table->vestige->lookup4)(faddr, fport_arg,
1051 1.138 dyoung laddr, lport_arg, vp))
1052 1.138 dyoung return 0;
1053 1.138 dyoung }
1054 1.138 dyoung
1055 1.24 mycroft #ifdef DIAGNOSTIC
1056 1.195 ozaki if (inpcb_notifymiss) {
1057 1.195 ozaki printf("inpcb_lookup: faddr=%08x fport=%d laddr=%08x lport=%d\n",
1058 1.24 mycroft ntohl(faddr.s_addr), ntohs(fport),
1059 1.24 mycroft ntohl(laddr.s_addr), ntohs(lport));
1060 1.24 mycroft }
1061 1.24 mycroft #endif
1062 1.33 mycroft return (0);
1063 1.33 mycroft
1064 1.33 mycroft out:
1065 1.33 mycroft /* Move this PCB to the head of hash chain. */
1066 1.192 ozaki if (inp != LIST_FIRST(head)) {
1067 1.192 ozaki LIST_REMOVE(inp, inp_hash);
1068 1.192 ozaki LIST_INSERT_HEAD(head, inp, inp_hash);
1069 1.33 mycroft }
1070 1.33 mycroft return (inp);
1071 1.33 mycroft }
1072 1.33 mycroft
1073 1.33 mycroft struct inpcb *
1074 1.195 ozaki inpcb_lookup_bound(struct inpcbtable *table,
1075 1.98 perry struct in_addr laddr, u_int lport_arg)
1076 1.33 mycroft {
1077 1.33 mycroft struct inpcbhead *head;
1078 1.64 augustss struct inpcb *inp;
1079 1.33 mycroft u_int16_t lport = lport_arg;
1080 1.33 mycroft
1081 1.33 mycroft head = INPCBHASH_BIND(table, laddr, lport);
1082 1.192 ozaki LIST_FOREACH(inp, head, inp_hash) {
1083 1.88 itojun if (inp->inp_af != AF_INET)
1084 1.88 itojun continue;
1085 1.88 itojun
1086 1.33 mycroft if (inp->inp_lport == lport &&
1087 1.193 ozaki in_hosteq(in4p_laddr(inp), laddr))
1088 1.33 mycroft goto out;
1089 1.33 mycroft }
1090 1.33 mycroft head = INPCBHASH_BIND(table, zeroin_addr, lport);
1091 1.192 ozaki LIST_FOREACH(inp, head, inp_hash) {
1092 1.88 itojun if (inp->inp_af != AF_INET)
1093 1.88 itojun continue;
1094 1.88 itojun
1095 1.33 mycroft if (inp->inp_lport == lport &&
1096 1.193 ozaki in_hosteq(in4p_laddr(inp), zeroin_addr))
1097 1.33 mycroft goto out;
1098 1.33 mycroft }
1099 1.33 mycroft #ifdef DIAGNOSTIC
1100 1.195 ozaki if (inpcb_notifymiss) {
1101 1.195 ozaki printf("inpcb_lookup_bound: laddr=%08x lport=%d\n",
1102 1.33 mycroft ntohl(laddr.s_addr), ntohs(lport));
1103 1.33 mycroft }
1104 1.33 mycroft #endif
1105 1.33 mycroft return (0);
1106 1.33 mycroft
1107 1.33 mycroft out:
1108 1.33 mycroft /* Move this PCB to the head of hash chain. */
1109 1.192 ozaki if (inp != LIST_FIRST(head)) {
1110 1.192 ozaki LIST_REMOVE(inp, inp_hash);
1111 1.192 ozaki LIST_INSERT_HEAD(head, inp, inp_hash);
1112 1.33 mycroft }
1113 1.24 mycroft return (inp);
1114 1.33 mycroft }
1115 1.33 mycroft
1116 1.33 mycroft void
1117 1.195 ozaki inpcb_set_state(struct inpcb *inp, int state)
1118 1.33 mycroft {
1119 1.33 mycroft
1120 1.194 ozaki #ifdef INET6
1121 1.192 ozaki if (inp->inp_af == AF_INET6) {
1122 1.196 ozaki in6pcb_set_state(inp, state);
1123 1.88 itojun return;
1124 1.192 ozaki }
1125 1.194 ozaki #else
1126 1.194 ozaki if (inp->inp_af != AF_INET)
1127 1.194 ozaki return;
1128 1.194 ozaki #endif
1129 1.88 itojun
1130 1.33 mycroft if (inp->inp_state > INP_ATTACHED)
1131 1.192 ozaki LIST_REMOVE(inp, inp_hash);
1132 1.33 mycroft
1133 1.33 mycroft switch (state) {
1134 1.33 mycroft case INP_BOUND:
1135 1.33 mycroft LIST_INSERT_HEAD(INPCBHASH_BIND(inp->inp_table,
1136 1.193 ozaki in4p_laddr(inp), inp->inp_lport), inp,
1137 1.192 ozaki inp_hash);
1138 1.33 mycroft break;
1139 1.33 mycroft case INP_CONNECTED:
1140 1.33 mycroft LIST_INSERT_HEAD(INPCBHASH_CONNECT(inp->inp_table,
1141 1.193 ozaki in4p_faddr(inp), inp->inp_fport,
1142 1.193 ozaki in4p_laddr(inp), inp->inp_lport), inp,
1143 1.192 ozaki inp_hash);
1144 1.33 mycroft break;
1145 1.33 mycroft }
1146 1.33 mycroft
1147 1.33 mycroft inp->inp_state = state;
1148 1.38 thorpej }
1149 1.38 thorpej
1150 1.38 thorpej struct rtentry *
1151 1.195 ozaki inpcb_rtentry(struct inpcb *inp)
1152 1.38 thorpej {
1153 1.38 thorpej struct route *ro;
1154 1.117 dyoung union {
1155 1.117 dyoung struct sockaddr dst;
1156 1.117 dyoung struct sockaddr_in dst4;
1157 1.117 dyoung } u;
1158 1.88 itojun
1159 1.194 ozaki #ifdef INET6
1160 1.192 ozaki if (inp->inp_af == AF_INET6)
1161 1.196 ozaki return in6pcb_rtentry(inp);
1162 1.194 ozaki #endif
1163 1.88 itojun if (inp->inp_af != AF_INET)
1164 1.88 itojun return (NULL);
1165 1.38 thorpej
1166 1.38 thorpej ro = &inp->inp_route;
1167 1.38 thorpej
1168 1.193 ozaki sockaddr_in_init(&u.dst4, &in4p_faddr(inp), 0);
1169 1.117 dyoung return rtcache_lookup(ro, &u.dst);
1170 1.59 itojun }
1171 1.171 ozaki
1172 1.171 ozaki void
1173 1.195 ozaki inpcb_rtentry_unref(struct rtentry *rt, struct inpcb *inp)
1174 1.171 ozaki {
1175 1.171 ozaki
1176 1.171 ozaki rtcache_unref(rt, &inp->inp_route);
1177 1.171 ozaki }
1178