Home | History | Annotate | Line # | Download | only in netinet6
in6_pcb.c revision 1.26
      1  1.26   itojun /*	$NetBSD: in6_pcb.c,v 1.26 2000/06/08 13:51:33 itojun Exp $	*/
      2  1.24   itojun /*	$KAME: in6_pcb.c,v 1.45 2000/06/05 00:41:58 itojun Exp $	*/
      3   1.5  thorpej 
      4   1.2   itojun /*
      5   1.2   itojun  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
      6   1.2   itojun  * All rights reserved.
      7  1.23   itojun  *
      8   1.2   itojun  * Redistribution and use in source and binary forms, with or without
      9   1.2   itojun  * modification, are permitted provided that the following conditions
     10   1.2   itojun  * are met:
     11   1.2   itojun  * 1. Redistributions of source code must retain the above copyright
     12   1.2   itojun  *    notice, this list of conditions and the following disclaimer.
     13   1.2   itojun  * 2. Redistributions in binary form must reproduce the above copyright
     14   1.2   itojun  *    notice, this list of conditions and the following disclaimer in the
     15   1.2   itojun  *    documentation and/or other materials provided with the distribution.
     16   1.2   itojun  * 3. Neither the name of the project nor the names of its contributors
     17   1.2   itojun  *    may be used to endorse or promote products derived from this software
     18   1.2   itojun  *    without specific prior written permission.
     19  1.23   itojun  *
     20   1.2   itojun  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     21   1.2   itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     22   1.2   itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     23   1.2   itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     24   1.2   itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     25   1.2   itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     26   1.2   itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     27   1.2   itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     28   1.2   itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     29   1.2   itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     30   1.2   itojun  * SUCH DAMAGE.
     31   1.2   itojun  */
     32   1.2   itojun 
     33   1.2   itojun /*
     34   1.2   itojun  * Copyright (c) 1982, 1986, 1991, 1993
     35   1.2   itojun  *	The Regents of the University of California.  All rights reserved.
     36   1.2   itojun  *
     37   1.2   itojun  * Redistribution and use in source and binary forms, with or without
     38   1.2   itojun  * modification, are permitted provided that the following conditions
     39   1.2   itojun  * are met:
     40   1.2   itojun  * 1. Redistributions of source code must retain the above copyright
     41   1.2   itojun  *    notice, this list of conditions and the following disclaimer.
     42   1.2   itojun  * 2. Redistributions in binary form must reproduce the above copyright
     43   1.2   itojun  *    notice, this list of conditions and the following disclaimer in the
     44   1.2   itojun  *    documentation and/or other materials provided with the distribution.
     45   1.2   itojun  * 3. All advertising materials mentioning features or use of this software
     46   1.2   itojun  *    must display the following acknowledgement:
     47   1.2   itojun  *	This product includes software developed by the University of
     48   1.2   itojun  *	California, Berkeley and its contributors.
     49   1.2   itojun  * 4. Neither the name of the University nor the names of its contributors
     50   1.2   itojun  *    may be used to endorse or promote products derived from this software
     51   1.2   itojun  *    without specific prior written permission.
     52   1.2   itojun  *
     53   1.2   itojun  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     54   1.2   itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     55   1.2   itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     56   1.2   itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     57   1.2   itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     58   1.2   itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     59   1.2   itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     60   1.2   itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     61   1.2   itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     62   1.2   itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     63   1.2   itojun  * SUCH DAMAGE.
     64   1.2   itojun  *
     65   1.2   itojun  *	@(#)in_pcb.c	8.2 (Berkeley) 1/4/94
     66   1.2   itojun  */
     67   1.7  thorpej 
     68   1.7  thorpej #include "opt_ipsec.h"
     69   1.2   itojun 
     70   1.2   itojun #include <sys/param.h>
     71   1.2   itojun #include <sys/systm.h>
     72   1.2   itojun #include <sys/malloc.h>
     73   1.2   itojun #include <sys/mbuf.h>
     74   1.2   itojun #include <sys/protosw.h>
     75   1.2   itojun #include <sys/socket.h>
     76   1.2   itojun #include <sys/socketvar.h>
     77   1.2   itojun #include <sys/ioctl.h>
     78   1.2   itojun #include <sys/errno.h>
     79   1.2   itojun #include <sys/time.h>
     80   1.2   itojun #include <sys/proc.h>
     81   1.2   itojun 
     82   1.2   itojun #include <net/if.h>
     83   1.2   itojun #include <net/route.h>
     84   1.2   itojun 
     85   1.2   itojun #include <netinet/in.h>
     86   1.2   itojun #include <netinet/in_var.h>
     87   1.2   itojun #include <netinet/in_systm.h>
     88   1.2   itojun #include <netinet/ip.h>
     89   1.2   itojun #include <netinet/in_pcb.h>
     90  1.19   itojun #include <netinet/ip6.h>
     91  1.11   itojun #include <netinet6/ip6_var.h>
     92   1.2   itojun #include <netinet6/in6_pcb.h>
     93   1.2   itojun #include <netinet6/nd6.h>
     94   1.2   itojun 
     95   1.2   itojun #include "loop.h"
     96   1.2   itojun extern struct ifnet loif[NLOOP];
     97   1.8   itojun #include "faith.h"
     98   1.2   itojun 
     99   1.2   itojun #ifdef IPSEC
    100   1.2   itojun #include <netinet6/ipsec.h>
    101   1.2   itojun #include <netkey/key.h>
    102   1.2   itojun #include <netkey/key_debug.h>
    103   1.2   itojun #endif /* IPSEC */
    104   1.2   itojun 
    105   1.2   itojun struct in6_addr zeroin6_addr;
    106   1.2   itojun 
    107   1.2   itojun int
    108   1.2   itojun in6_pcballoc(so, head)
    109   1.2   itojun 	struct socket *so;
    110   1.2   itojun 	struct in6pcb *head;
    111   1.2   itojun {
    112   1.2   itojun 	struct in6pcb *in6p;
    113   1.2   itojun 
    114   1.2   itojun 	MALLOC(in6p, struct in6pcb *, sizeof(*in6p), M_PCB, M_NOWAIT);
    115   1.2   itojun 	if (in6p == NULL)
    116   1.2   itojun 		return(ENOBUFS);
    117   1.2   itojun 	bzero((caddr_t)in6p, sizeof(*in6p));
    118   1.2   itojun 	in6p->in6p_head = head;
    119   1.2   itojun 	in6p->in6p_socket = so;
    120   1.2   itojun 	in6p->in6p_hops = -1;	/* use kernel default */
    121   1.2   itojun 	in6p->in6p_icmp6filt = NULL;
    122   1.3   itojun 	in6p->in6p_next = head->in6p_next;
    123   1.3   itojun 	head->in6p_next = in6p;
    124   1.3   itojun 	in6p->in6p_prev = head;
    125   1.3   itojun 	in6p->in6p_next->in6p_prev = in6p;
    126  1.12   itojun #ifndef INET6_BINDV6ONLY
    127  1.11   itojun 	if (ip6_bindv6only)
    128  1.11   itojun 		in6p->in6p_flags |= IN6P_BINDV6ONLY;
    129  1.11   itojun #else
    130  1.11   itojun 	in6p->in6p_flags |= IN6P_BINDV6ONLY;	/*just for safety*/
    131  1.11   itojun #endif
    132   1.2   itojun 	so->so_pcb = (caddr_t)in6p;
    133   1.2   itojun 	return(0);
    134   1.2   itojun }
    135   1.2   itojun 
    136   1.2   itojun int
    137  1.24   itojun in6_pcbbind(in6p, nam, p)
    138   1.2   itojun 	register struct in6pcb *in6p;
    139   1.2   itojun 	struct mbuf *nam;
    140  1.24   itojun 	struct proc *p;
    141   1.2   itojun {
    142   1.2   itojun 	struct socket *so = in6p->in6p_socket;
    143   1.2   itojun 	struct in6pcb *head = in6p->in6p_head;
    144   1.2   itojun 	struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)NULL;
    145  1.18   itojun 	u_int16_t lport = 0;
    146   1.2   itojun 	int wild = 0, reuseport = (so->so_options & SO_REUSEPORT);
    147   1.2   itojun 	int error;
    148   1.2   itojun 
    149  1.10   itojun 	if (in6p->in6p_lport || !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr))
    150   1.2   itojun 		return(EINVAL);
    151   1.2   itojun 	if ((so->so_options & (SO_REUSEADDR|SO_REUSEPORT)) == 0 &&
    152   1.2   itojun 	   ((so->so_proto->pr_flags & PR_CONNREQUIRED) == 0 ||
    153   1.2   itojun 	    (so->so_options & SO_ACCEPTCONN) == 0))
    154   1.2   itojun 		wild = IN6PLOOKUP_WILDCARD;
    155   1.2   itojun 	if (nam) {
    156   1.2   itojun 		sin6 = mtod(nam, struct sockaddr_in6 *);
    157   1.2   itojun 		if (nam->m_len != sizeof(*sin6))
    158   1.2   itojun 			return(EINVAL);
    159   1.2   itojun 		/*
    160   1.2   itojun 		 * We should check the family, but old programs
    161   1.2   itojun 		 * incorrectly fail to intialize it.
    162   1.2   itojun 		 */
    163   1.2   itojun 		if (sin6->sin6_family != AF_INET6)
    164   1.2   itojun 			return(EAFNOSUPPORT);
    165  1.22   itojun 
    166  1.22   itojun 		/*
    167  1.22   itojun 		 * since we do not check port number duplicate with IPv4 space,
    168  1.22   itojun 		 * we reject it at this moment.  If we leave it, we make normal
    169  1.22   itojun 		 * user to hijack port number from other users.
    170  1.22   itojun 		 */
    171  1.22   itojun 		if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr))
    172  1.22   itojun 			return(EADDRNOTAVAIL);
    173   1.2   itojun 
    174   1.2   itojun 		/*
    175   1.2   itojun 		 * If the scope of the destination is link-local, embed the
    176   1.2   itojun 		 * interface index in the address.
    177   1.2   itojun 		 */
    178   1.2   itojun 		if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) {
    179   1.2   itojun 			/* XXX boundary check is assumed to be already done. */
    180   1.2   itojun 			/* XXX sin6_scope_id is weaker than advanced-api. */
    181   1.2   itojun 			struct in6_pktinfo *pi;
    182   1.2   itojun 			if (in6p->in6p_outputopts &&
    183   1.2   itojun 			    (pi = in6p->in6p_outputopts->ip6po_pktinfo) &&
    184   1.2   itojun 			    pi->ipi6_ifindex) {
    185   1.2   itojun 				sin6->sin6_addr.s6_addr16[1]
    186   1.2   itojun 					= htons(pi->ipi6_ifindex);
    187   1.2   itojun 			} else if (IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)
    188   1.2   itojun 				&& in6p->in6p_moptions
    189   1.2   itojun 				&& in6p->in6p_moptions->im6o_multicast_ifp) {
    190   1.2   itojun 				sin6->sin6_addr.s6_addr16[1] =
    191   1.2   itojun 					htons(in6p->in6p_moptions->im6o_multicast_ifp->if_index);
    192   1.2   itojun 			} else if (sin6->sin6_scope_id) {
    193   1.2   itojun 				/* boundary check */
    194  1.23   itojun 				if (sin6->sin6_scope_id < 0
    195   1.2   itojun 				 || if_index < sin6->sin6_scope_id) {
    196   1.2   itojun 					return ENXIO;  /* XXX EINVAL? */
    197   1.2   itojun 				}
    198   1.2   itojun 				sin6->sin6_addr.s6_addr16[1]
    199   1.2   itojun 					= htons(sin6->sin6_scope_id & 0xffff);/*XXX*/
    200   1.2   itojun 				/* this must be cleared for ifa_ifwithaddr() */
    201   1.2   itojun 				sin6->sin6_scope_id = 0;
    202   1.2   itojun 			}
    203   1.2   itojun 		}
    204   1.2   itojun 
    205   1.2   itojun 		lport = sin6->sin6_port;
    206   1.2   itojun 		if (IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)) {
    207   1.2   itojun 			/*
    208   1.2   itojun 			 * Treat SO_REUSEADDR as SO_REUSEPORT for multicast;
    209   1.2   itojun 			 * allow compepte duplication of binding if
    210   1.2   itojun 			 * SO_REUSEPORT is set, or if SO_REUSEADDR is set
    211   1.2   itojun 			 * and a multicast address is bound on both
    212   1.2   itojun 			 * new and duplicated sockets.
    213   1.2   itojun 			 */
    214   1.2   itojun 			if (so->so_options & SO_REUSEADDR)
    215   1.2   itojun 				reuseport = SO_REUSEADDR|SO_REUSEPORT;
    216   1.2   itojun 		} else if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
    217   1.2   itojun 			struct sockaddr_in sin;
    218   1.2   itojun 
    219   1.2   itojun 			bzero(&sin, sizeof(sin));
    220   1.2   itojun 			sin.sin_len = sizeof(sin);
    221   1.2   itojun 			sin.sin_family = AF_INET;
    222   1.2   itojun 			bcopy(&sin6->sin6_addr.s6_addr32[3], &sin.sin_addr,
    223   1.2   itojun 				sizeof(sin.sin_addr));
    224   1.2   itojun 			if (ifa_ifwithaddr((struct sockaddr *)&sin) == 0)
    225   1.2   itojun 				return EADDRNOTAVAIL;
    226  1.10   itojun 		} else if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
    227   1.2   itojun 			struct ifaddr *ia = NULL;
    228   1.2   itojun 
    229   1.2   itojun 			sin6->sin6_port = 0;		/* yech... */
    230  1.10   itojun #if defined(NFAITH) && NFAITH > 0
    231  1.10   itojun 			if ((in6p->in6p_flags & IN6P_FAITH) == 0
    232  1.10   itojun 			 && (ia = ifa_ifwithaddr((struct sockaddr *)sin6)) == 0)
    233  1.10   itojun #else
    234   1.2   itojun 			if ((ia = ifa_ifwithaddr((struct sockaddr *)sin6)) == 0)
    235  1.10   itojun #endif
    236   1.2   itojun 				return(EADDRNOTAVAIL);
    237   1.2   itojun 
    238   1.2   itojun 			/*
    239   1.2   itojun 			 * XXX: bind to an anycast address might accidentally
    240   1.2   itojun 			 * cause sending a packet with anycast source address.
    241   1.2   itojun 			 */
    242  1.20   itojun 			if (ia &&
    243  1.20   itojun 			    ((struct in6_ifaddr *)ia)->ia6_flags &
    244  1.20   itojun 			    (IN6_IFF_ANYCAST|IN6_IFF_NOTREADY|
    245  1.20   itojun 			     IN6_IFF_DETACHED|IN6_IFF_DEPRECATED)) {
    246  1.20   itojun 				return(EADDRNOTAVAIL);
    247   1.2   itojun 			}
    248   1.2   itojun 		}
    249   1.2   itojun 		if (lport) {
    250  1.13   itojun #ifndef IPNOPRIVPORTS
    251   1.2   itojun 			/* GROSS */
    252   1.2   itojun 			if (ntohs(lport) < IPV6PORT_RESERVED &&
    253  1.13   itojun 			    (p == 0 ||
    254  1.13   itojun 			     (error = suser(p->p_ucred, &p->p_acflag))))
    255   1.2   itojun 				return(EACCES);
    256  1.13   itojun #endif
    257   1.2   itojun 
    258   1.2   itojun 			if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
    259   1.2   itojun 				/* should check this but we can't ... */
    260   1.2   itojun #if 0
    261   1.2   itojun 				struct inpcb *t;
    262   1.2   itojun 
    263   1.2   itojun 				t = in_pcblookup_bind(&tcbtable,
    264   1.2   itojun 					(struct in_addr *)&sin6->sin6_addr.s6_addr32[3],
    265   1.2   itojun 					lport);
    266   1.2   itojun 				if (t && (reuseport & t->inp_socket->so_options) == 0)
    267   1.2   itojun 					return EADDRINUSE;
    268   1.2   itojun #endif
    269   1.2   itojun 			} else {
    270   1.2   itojun 				struct in6pcb *t;
    271   1.2   itojun 
    272   1.2   itojun 				t = in6_pcblookup(head, &zeroin6_addr, 0,
    273   1.2   itojun 						  &sin6->sin6_addr, lport, wild);
    274   1.2   itojun 				if (t && (reuseport & t->in6p_socket->so_options) == 0)
    275   1.2   itojun 					return(EADDRINUSE);
    276   1.2   itojun 			}
    277   1.2   itojun 		}
    278   1.2   itojun 		in6p->in6p_laddr = sin6->sin6_addr;
    279   1.2   itojun 	}
    280  1.10   itojun 
    281   1.2   itojun 	if (lport == 0) {
    282  1.10   itojun 		int e;
    283  1.10   itojun 		if ((e = in6_pcbsetport(&in6p->in6p_laddr, in6p)) != 0)
    284  1.10   itojun 			return(e);
    285  1.10   itojun 	}
    286  1.10   itojun 	else
    287  1.10   itojun 		in6p->in6p_lport = lport;
    288  1.10   itojun 
    289  1.10   itojun 	in6p->in6p_flowinfo = sin6 ? sin6->sin6_flowinfo : 0;	/*XXX*/
    290  1.10   itojun 	return(0);
    291  1.10   itojun }
    292  1.10   itojun 
    293  1.10   itojun /*
    294   1.2   itojun  * Connect from a socket to a specified address.
    295   1.2   itojun  * Both address and port must be specified in argument sin6.
    296   1.2   itojun  * If don't have a local address for this socket yet,
    297   1.2   itojun  * then pick one.
    298   1.2   itojun  */
    299   1.2   itojun int
    300   1.2   itojun in6_pcbconnect(in6p, nam)
    301   1.2   itojun 	struct in6pcb *in6p;
    302   1.2   itojun 	struct mbuf *nam;
    303   1.2   itojun {
    304   1.2   itojun 	struct in6_addr *in6a = NULL;
    305   1.2   itojun 	struct sockaddr_in6 *sin6 = mtod(nam, struct sockaddr_in6 *);
    306   1.2   itojun 	struct in6_pktinfo *pi;
    307   1.2   itojun 	struct ifnet *ifp = NULL;	/* outgoing interface */
    308   1.2   itojun 	int error = 0;
    309   1.2   itojun 	struct in6_addr mapped;
    310  1.26   itojun 	struct sockaddr_in6 tmp;
    311   1.2   itojun 
    312   1.2   itojun 	(void)&in6a;				/* XXX fool gcc */
    313   1.2   itojun 
    314   1.2   itojun 	if (nam->m_len != sizeof(*sin6))
    315   1.2   itojun 		return(EINVAL);
    316   1.2   itojun 	if (sin6->sin6_family != AF_INET6)
    317   1.2   itojun 		return(EAFNOSUPPORT);
    318   1.2   itojun 	if (sin6->sin6_port == 0)
    319   1.2   itojun 		return(EADDRNOTAVAIL);
    320   1.2   itojun 
    321   1.2   itojun 	/* sanity check for mapped address case */
    322   1.2   itojun 	if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
    323   1.2   itojun 		if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr))
    324   1.2   itojun 			in6p->in6p_laddr.s6_addr16[5] = htons(0xffff);
    325   1.2   itojun 		if (!IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr))
    326   1.2   itojun 			return EINVAL;
    327   1.2   itojun 	} else {
    328   1.2   itojun 		if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr))
    329   1.2   itojun 			return EINVAL;
    330   1.2   itojun 	}
    331  1.26   itojun 
    332  1.26   itojun 	/* protect *sin6 from overwrites */
    333  1.26   itojun 	tmp = *sin6;
    334  1.26   itojun 	sin6 = &tmp;
    335   1.2   itojun 
    336   1.2   itojun 	/*
    337   1.2   itojun 	 * If the scope of the destination is link-local, embed the interface
    338   1.2   itojun 	 * index in the address.
    339   1.2   itojun 	 */
    340   1.2   itojun 	if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) {
    341   1.2   itojun 		/* XXX boundary check is assumed to be already done. */
    342   1.2   itojun 		/* XXX sin6_scope_id is weaker than advanced-api. */
    343   1.2   itojun 		if (in6p->in6p_outputopts &&
    344   1.2   itojun 		    (pi = in6p->in6p_outputopts->ip6po_pktinfo) &&
    345   1.2   itojun 		    pi->ipi6_ifindex) {
    346   1.2   itojun 			sin6->sin6_addr.s6_addr16[1] = htons(pi->ipi6_ifindex);
    347   1.2   itojun 			ifp = ifindex2ifnet[pi->ipi6_ifindex];
    348   1.2   itojun 		}
    349   1.2   itojun 		else if (IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr) &&
    350   1.2   itojun 			 in6p->in6p_moptions &&
    351   1.2   itojun 			 in6p->in6p_moptions->im6o_multicast_ifp) {
    352   1.2   itojun 			sin6->sin6_addr.s6_addr16[1] =
    353   1.2   itojun 				htons(in6p->in6p_moptions->im6o_multicast_ifp->if_index);
    354   1.2   itojun 			ifp = ifindex2ifnet[in6p->in6p_moptions->im6o_multicast_ifp->if_index];
    355   1.2   itojun 		} else if (sin6->sin6_scope_id) {
    356   1.2   itojun 			/* boundary check */
    357  1.23   itojun 			if (sin6->sin6_scope_id < 0
    358   1.2   itojun 			 || if_index < sin6->sin6_scope_id) {
    359   1.2   itojun 				return ENXIO;  /* XXX EINVAL? */
    360   1.2   itojun 			}
    361   1.2   itojun 			sin6->sin6_addr.s6_addr16[1]
    362   1.2   itojun 				= htons(sin6->sin6_scope_id & 0xffff);/*XXX*/
    363   1.2   itojun 			ifp = ifindex2ifnet[sin6->sin6_scope_id];
    364   1.2   itojun 		}
    365   1.2   itojun 	}
    366   1.2   itojun 
    367   1.2   itojun 	/* Source address selection. */
    368   1.2   itojun 	if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr)
    369   1.2   itojun 	 && in6p->in6p_laddr.s6_addr32[3] == 0) {
    370   1.2   itojun 		struct sockaddr_in sin, *sinp;
    371   1.2   itojun 
    372   1.2   itojun 		bzero(&sin, sizeof(sin));
    373   1.2   itojun 		sin.sin_len = sizeof(sin);
    374   1.2   itojun 		sin.sin_family = AF_INET;
    375   1.2   itojun 		bcopy(&sin6->sin6_addr.s6_addr32[3], &sin.sin_addr,
    376   1.2   itojun 			sizeof(sin.sin_addr));
    377   1.2   itojun 		sinp = in_selectsrc(&sin, (struct route *)&in6p->in6p_route,
    378   1.2   itojun 			in6p->in6p_socket->so_options, NULL, &error);
    379   1.2   itojun 		if (sinp == 0) {
    380   1.2   itojun 			if (error == 0)
    381   1.2   itojun 				error = EADDRNOTAVAIL;
    382   1.2   itojun 			return(error);
    383   1.2   itojun 		}
    384   1.2   itojun 		bzero(&mapped, sizeof(mapped));
    385   1.2   itojun 		mapped.s6_addr16[5] = htons(0xffff);
    386   1.2   itojun 		bcopy(&sinp->sin_addr, &mapped.s6_addr32[3], sizeof(sinp->sin_addr));
    387   1.2   itojun 		in6a = &mapped;
    388  1.10   itojun 	} else {
    389  1.10   itojun 		/*
    390  1.10   itojun 		 * XXX: in6_selectsrc might replace the bound local address
    391  1.10   itojun 		 * with the address specified by setsockopt(IPV6_PKTINFO).
    392  1.10   itojun 		 * Is it the intended behavior?
    393  1.10   itojun 		 */
    394   1.2   itojun 		in6a = in6_selectsrc(sin6, in6p->in6p_outputopts,
    395  1.10   itojun 				     in6p->in6p_moptions,
    396  1.10   itojun 				     &in6p->in6p_route,
    397  1.10   itojun 				     &in6p->in6p_laddr, &error);
    398   1.2   itojun 		if (in6a == 0) {
    399   1.2   itojun 			if (error == 0)
    400   1.2   itojun 				error = EADDRNOTAVAIL;
    401   1.2   itojun 			return(error);
    402   1.2   itojun 		}
    403   1.2   itojun 	}
    404   1.2   itojun 	if (in6p->in6p_route.ro_rt)
    405   1.2   itojun 		ifp = in6p->in6p_route.ro_rt->rt_ifp;
    406   1.2   itojun 
    407  1.10   itojun 	in6p->in6p_ip6.ip6_hlim = (u_int8_t)in6_selecthlim(in6p, ifp);
    408   1.2   itojun 
    409   1.2   itojun 	if (in6_pcblookup(in6p->in6p_head,
    410   1.2   itojun 			 &sin6->sin6_addr,
    411   1.2   itojun 			 sin6->sin6_port,
    412  1.10   itojun 			 IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) ?
    413   1.2   itojun 			  in6a : &in6p->in6p_laddr,
    414   1.2   itojun 			 in6p->in6p_lport,
    415   1.2   itojun 			 0))
    416   1.2   itojun 		return(EADDRINUSE);
    417  1.10   itojun 	if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)
    418   1.2   itojun 	 || (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr)
    419   1.2   itojun 	  && in6p->in6p_laddr.s6_addr32[3] == 0)) {
    420   1.2   itojun 		if (in6p->in6p_lport == 0)
    421  1.24   itojun 			(void)in6_pcbbind(in6p, (struct mbuf *)0,
    422  1.24   itojun 			    (struct proc *)0);
    423   1.2   itojun 		in6p->in6p_laddr = *in6a;
    424   1.2   itojun 	}
    425   1.2   itojun 	in6p->in6p_faddr = sin6->sin6_addr;
    426   1.2   itojun 	in6p->in6p_fport = sin6->sin6_port;
    427   1.2   itojun 	/*
    428   1.2   itojun 	 * xxx kazu flowlabel is necessary for connect?
    429   1.2   itojun 	 * but if this line is missing, the garbage value remains.
    430   1.2   itojun 	 */
    431   1.2   itojun 	in6p->in6p_flowinfo = sin6->sin6_flowinfo;
    432   1.2   itojun 	return(0);
    433   1.2   itojun }
    434   1.2   itojun 
    435   1.2   itojun void
    436   1.2   itojun in6_pcbdisconnect(in6p)
    437   1.2   itojun 	struct in6pcb *in6p;
    438   1.2   itojun {
    439   1.2   itojun 	bzero((caddr_t)&in6p->in6p_faddr, sizeof(in6p->in6p_faddr));
    440   1.2   itojun 	in6p->in6p_fport = 0;
    441   1.2   itojun 	if (in6p->in6p_socket->so_state & SS_NOFDREF)
    442   1.2   itojun 		in6_pcbdetach(in6p);
    443   1.2   itojun }
    444   1.2   itojun 
    445   1.2   itojun void
    446   1.2   itojun in6_pcbdetach(in6p)
    447   1.2   itojun 	struct in6pcb *in6p;
    448   1.2   itojun {
    449   1.2   itojun 	struct socket *so = in6p->in6p_socket;
    450   1.2   itojun 
    451   1.2   itojun #ifdef IPSEC
    452   1.2   itojun 	ipsec6_delete_pcbpolicy(in6p);
    453   1.2   itojun #endif /* IPSEC */
    454   1.2   itojun 	sotoin6pcb(so) = 0;
    455   1.2   itojun 	sofree(so);
    456   1.2   itojun 	if (in6p->in6p_options)
    457   1.2   itojun 		m_freem(in6p->in6p_options);
    458   1.2   itojun 	if (in6p->in6p_outputopts) {
    459   1.2   itojun 		if (in6p->in6p_outputopts->ip6po_rthdr &&
    460   1.2   itojun 		    in6p->in6p_outputopts->ip6po_route.ro_rt)
    461   1.2   itojun 			RTFREE(in6p->in6p_outputopts->ip6po_route.ro_rt);
    462   1.2   itojun 		if (in6p->in6p_outputopts->ip6po_m)
    463   1.2   itojun 			(void)m_free(in6p->in6p_outputopts->ip6po_m);
    464   1.2   itojun 		free(in6p->in6p_outputopts, M_IP6OPT);
    465   1.2   itojun 	}
    466   1.2   itojun 	if (in6p->in6p_route.ro_rt)
    467   1.2   itojun 		rtfree(in6p->in6p_route.ro_rt);
    468   1.2   itojun 	ip6_freemoptions(in6p->in6p_moptions);
    469   1.3   itojun 	in6p->in6p_next->in6p_prev = in6p->in6p_prev;
    470   1.3   itojun 	in6p->in6p_prev->in6p_next = in6p->in6p_next;
    471   1.3   itojun 	in6p->in6p_prev = NULL;
    472   1.2   itojun 	FREE(in6p, M_PCB);
    473   1.2   itojun }
    474   1.2   itojun 
    475   1.2   itojun void
    476   1.2   itojun in6_setsockaddr(in6p, nam)
    477   1.2   itojun 	struct in6pcb *in6p;
    478   1.2   itojun 	struct mbuf *nam;
    479   1.2   itojun {
    480   1.2   itojun 	struct sockaddr_in6 *sin6;
    481   1.2   itojun 
    482   1.2   itojun 	nam->m_len = sizeof(*sin6);
    483   1.2   itojun 	sin6 = mtod(nam, struct sockaddr_in6 *);
    484   1.2   itojun 	bzero((caddr_t)sin6, sizeof(*sin6));
    485   1.2   itojun 	sin6->sin6_family = AF_INET6;
    486   1.2   itojun 	sin6->sin6_len = sizeof(struct sockaddr_in6);
    487   1.2   itojun 	sin6->sin6_port = in6p->in6p_lport;
    488   1.2   itojun 	sin6->sin6_addr = in6p->in6p_laddr;
    489   1.2   itojun 	if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr))
    490   1.2   itojun 		sin6->sin6_scope_id = ntohs(sin6->sin6_addr.s6_addr16[1]);
    491   1.2   itojun 	else
    492   1.2   itojun 		sin6->sin6_scope_id = 0;	/*XXX*/
    493   1.2   itojun 	if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr))
    494   1.2   itojun 		sin6->sin6_addr.s6_addr16[1] = 0;
    495   1.2   itojun }
    496   1.2   itojun 
    497   1.2   itojun void
    498   1.2   itojun in6_setpeeraddr(in6p, nam)
    499   1.2   itojun 	struct in6pcb *in6p;
    500   1.2   itojun 	struct mbuf *nam;
    501   1.2   itojun {
    502   1.2   itojun 	struct sockaddr_in6 *sin6;
    503   1.2   itojun 
    504   1.2   itojun 	nam->m_len = sizeof(*sin6);
    505   1.2   itojun 	sin6 = mtod(nam, struct sockaddr_in6 *);
    506   1.2   itojun 	bzero((caddr_t)sin6, sizeof(*sin6));
    507   1.2   itojun 	sin6->sin6_family = AF_INET6;
    508   1.2   itojun 	sin6->sin6_len = sizeof(struct sockaddr_in6);
    509   1.2   itojun 	sin6->sin6_port = in6p->in6p_fport;
    510   1.2   itojun 	sin6->sin6_addr = in6p->in6p_faddr;
    511   1.2   itojun 	if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr))
    512   1.2   itojun 		sin6->sin6_scope_id = ntohs(sin6->sin6_addr.s6_addr16[1]);
    513   1.2   itojun 	else
    514   1.2   itojun 		sin6->sin6_scope_id = 0;	/*XXX*/
    515   1.2   itojun 	if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr))
    516   1.2   itojun 		sin6->sin6_addr.s6_addr16[1] = 0;
    517   1.2   itojun }
    518   1.2   itojun 
    519   1.2   itojun /*
    520   1.2   itojun  * Pass some notification to all connections of a protocol
    521   1.2   itojun  * associated with address dst.  The local address and/or port numbers
    522   1.2   itojun  * may be specified to limit the search.  The "usual action" will be
    523   1.2   itojun  * taken, depending on the ctlinput cmd.  The caller must filter any
    524   1.2   itojun  * cmds that are uninteresting (e.g., no error in the map).
    525   1.2   itojun  * Call the protocol specific routine (if any) to report
    526   1.2   itojun  * any errors for each matching socket.
    527   1.2   itojun  *
    528   1.6   itojun  * Must be called at splsoftnet.
    529   1.2   itojun  */
    530   1.2   itojun int
    531   1.2   itojun in6_pcbnotify(head, dst, fport_arg, laddr6, lport_arg, cmd, notify)
    532   1.2   itojun 	struct in6pcb *head;
    533   1.2   itojun 	struct sockaddr *dst;
    534   1.2   itojun 	u_int fport_arg, lport_arg;
    535   1.2   itojun 	struct in6_addr *laddr6;
    536   1.2   itojun 	int cmd;
    537   1.2   itojun 	void (*notify) __P((struct in6pcb *, int));
    538   1.2   itojun {
    539  1.20   itojun 	struct in6pcb *in6p, *nin6p;
    540   1.2   itojun 	struct in6_addr faddr6;
    541  1.18   itojun 	u_int16_t fport = fport_arg, lport = lport_arg;
    542   1.2   itojun 	int errno;
    543   1.2   itojun 	int nmatch = 0;
    544  1.25   itojun 	void (*notify2) __P((struct in6pcb *, int));
    545  1.25   itojun 
    546  1.25   itojun 	notify2 = NULL;
    547   1.2   itojun 
    548   1.2   itojun 	if ((unsigned)cmd > PRC_NCMDS || dst->sa_family != AF_INET6)
    549   1.2   itojun 		return 0;
    550   1.2   itojun 	faddr6 = ((struct sockaddr_in6 *)dst)->sin6_addr;
    551  1.10   itojun 	if (IN6_IS_ADDR_UNSPECIFIED(&faddr6))
    552   1.2   itojun 		return 0;
    553   1.2   itojun 
    554   1.2   itojun 	/*
    555   1.2   itojun 	 * Redirects go to all references to the destination,
    556  1.20   itojun 	 * and use in6_rtchange to invalidate the route cache.
    557  1.20   itojun 	 * Dead host indications: also use in6_rtchange to invalidate
    558  1.20   itojun 	 * the cache, and deliver the error to all the sockets.
    559   1.2   itojun 	 * Otherwise, if we have knowledge of the local port and address,
    560   1.2   itojun 	 * deliver only to that socket.
    561   1.2   itojun 	 */
    562   1.2   itojun 	if (PRC_IS_REDIRECT(cmd) || cmd == PRC_HOSTDEAD) {
    563   1.2   itojun 		fport = 0;
    564   1.2   itojun 		lport = 0;
    565   1.2   itojun 		bzero((caddr_t)laddr6, sizeof(*laddr6));
    566  1.20   itojun 
    567  1.25   itojun 		/*
    568  1.25   itojun 		 * Keep the old notify function to store a soft error
    569  1.25   itojun 		 * in each PCB.
    570  1.25   itojun 		 */
    571  1.25   itojun 		if (cmd == PRC_HOSTDEAD && notify != in6_rtchange)
    572  1.25   itojun 			notify2 = notify;
    573  1.25   itojun 
    574  1.25   itojun 		notify = in6_rtchange;
    575   1.2   itojun 	}
    576  1.20   itojun 
    577   1.2   itojun 	if (notify == NULL)
    578   1.2   itojun 		return 0;
    579  1.20   itojun 
    580   1.2   itojun 	errno = inet6ctlerrmap[cmd];
    581  1.20   itojun 	for (in6p = head->in6p_next; in6p != head; in6p = nin6p) {
    582  1.20   itojun 		nin6p = in6p->in6p_next;
    583  1.20   itojun 
    584  1.25   itojun 		if (notify == in6_rtchange) {
    585  1.20   itojun 			/*
    586  1.20   itojun 			 * Since a non-connected PCB might have a cached route,
    587  1.20   itojun 			 * we always call in6_rtchange without matching
    588  1.20   itojun 			 * the PCB to the src/dst pair.
    589  1.20   itojun 			 *
    590  1.20   itojun 			 * XXX: we assume in6_rtchange does not free the PCB.
    591  1.20   itojun 			 */
    592  1.20   itojun 			if (IN6_ARE_ADDR_EQUAL(&in6p->in6p_route.ro_dst.sin6_addr,
    593  1.20   itojun 					       &faddr6))
    594  1.20   itojun 				in6_rtchange(in6p, errno);
    595  1.20   itojun 
    596  1.25   itojun 			if (notify2 == NULL)
    597  1.25   itojun 				continue;
    598  1.25   itojun 
    599  1.25   itojun 			notify = notify2;
    600  1.20   itojun 		}
    601  1.20   itojun 
    602  1.20   itojun 		/* at this point, we can assume that NOTIFY is not NULL. */
    603  1.20   itojun 
    604  1.20   itojun 		if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, &faddr6) ||
    605  1.20   itojun 		    in6p->in6p_socket == 0 ||
    606  1.20   itojun 		    (lport && in6p->in6p_lport != lport) ||
    607  1.20   itojun 		    (!IN6_IS_ADDR_UNSPECIFIED(laddr6) &&
    608  1.20   itojun 		     !IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, laddr6)) ||
    609  1.20   itojun 		    (fport && in6p->in6p_fport != fport))
    610   1.2   itojun 			continue;
    611  1.20   itojun 
    612  1.20   itojun 		(*notify)(in6p, errno);
    613   1.2   itojun 		nmatch++;
    614   1.2   itojun 	}
    615   1.2   itojun 	return nmatch;
    616  1.16  thorpej }
    617  1.16  thorpej 
    618  1.16  thorpej void
    619  1.16  thorpej in6_pcbpurgeif(head, ifp)
    620  1.16  thorpej 	struct in6pcb *head;
    621  1.16  thorpej 	struct ifnet *ifp;
    622  1.16  thorpej {
    623  1.16  thorpej 	struct in6pcb *in6p, *nin6p;
    624  1.16  thorpej 
    625  1.16  thorpej 	for (in6p = head->in6p_next; in6p != head; in6p = nin6p) {
    626  1.16  thorpej 		nin6p = in6p->in6p_next;
    627  1.16  thorpej 		if (in6p->in6p_route.ro_rt != NULL &&
    628  1.16  thorpej 		    in6p->in6p_route.ro_rt->rt_ifp == ifp)
    629  1.16  thorpej 			in6_rtchange(in6p, 0);
    630  1.16  thorpej 	}
    631   1.2   itojun }
    632   1.2   itojun 
    633   1.2   itojun /*
    634   1.2   itojun  * Check for alternatives when higher level complains
    635   1.2   itojun  * about service problems.  For now, invalidate cached
    636   1.2   itojun  * routing information.  If the route was created dynamically
    637   1.2   itojun  * (by a redirect), time to try a default gateway again.
    638   1.2   itojun  */
    639   1.2   itojun void
    640   1.2   itojun in6_losing(in6p)
    641   1.2   itojun 	struct in6pcb *in6p;
    642   1.2   itojun {
    643   1.2   itojun 	struct rtentry *rt;
    644   1.2   itojun 	struct rt_addrinfo info;
    645   1.2   itojun 
    646   1.2   itojun 	if ((rt = in6p->in6p_route.ro_rt) != NULL) {
    647   1.2   itojun 		in6p->in6p_route.ro_rt = 0;
    648   1.2   itojun 		bzero((caddr_t)&info, sizeof(info));
    649   1.2   itojun 		info.rti_info[RTAX_DST] =
    650   1.2   itojun 			(struct sockaddr *)&in6p->in6p_route.ro_dst;
    651   1.2   itojun 		info.rti_info[RTAX_GATEWAY] = rt->rt_gateway;
    652   1.2   itojun 		info.rti_info[RTAX_NETMASK] = rt_mask(rt);
    653   1.2   itojun 		rt_missmsg(RTM_LOSING, &info, rt->rt_flags, 0);
    654   1.2   itojun 		if (rt->rt_flags & RTF_DYNAMIC)
    655   1.2   itojun 			(void)rtrequest(RTM_DELETE, rt_key(rt),
    656   1.2   itojun 					rt->rt_gateway, rt_mask(rt), rt->rt_flags,
    657   1.2   itojun 					(struct rtentry **)0);
    658   1.2   itojun 		else
    659   1.2   itojun 		/*
    660   1.2   itojun 		 * A new route can be allocated
    661   1.2   itojun 		 * the next time output is attempted.
    662   1.2   itojun 		 */
    663   1.2   itojun 			rtfree(rt);
    664   1.2   itojun 	}
    665   1.2   itojun }
    666   1.2   itojun 
    667   1.2   itojun /*
    668   1.2   itojun  * After a routing change, flush old routing
    669   1.2   itojun  * and allocate a (hopefully) better one.
    670   1.2   itojun  */
    671   1.2   itojun void
    672   1.2   itojun in6_rtchange(in6p, errno)
    673   1.2   itojun 	struct in6pcb *in6p;
    674   1.2   itojun 	int errno;
    675   1.2   itojun {
    676   1.2   itojun 	if (in6p->in6p_route.ro_rt) {
    677   1.2   itojun 		rtfree(in6p->in6p_route.ro_rt);
    678   1.2   itojun 		in6p->in6p_route.ro_rt = 0;
    679   1.2   itojun 		/*
    680   1.2   itojun 		 * A new route can be allocated the next time
    681   1.2   itojun 		 * output is attempted.
    682   1.2   itojun 		 */
    683   1.2   itojun 	}
    684   1.2   itojun }
    685   1.2   itojun 
    686   1.2   itojun struct in6pcb *
    687   1.2   itojun in6_pcblookup(head, faddr6, fport_arg, laddr6, lport_arg, flags)
    688   1.2   itojun 	struct in6pcb *head;
    689   1.2   itojun 	struct in6_addr *faddr6, *laddr6;
    690   1.2   itojun 	u_int fport_arg, lport_arg;
    691   1.2   itojun 	int flags;
    692   1.2   itojun {
    693   1.2   itojun 	struct in6pcb *in6p, *match = 0;
    694   1.2   itojun 	int matchwild = 3, wildcard;
    695  1.18   itojun 	u_int16_t fport = fport_arg, lport = lport_arg;
    696   1.2   itojun 
    697   1.2   itojun 	for (in6p = head->in6p_next; in6p != head; in6p = in6p->in6p_next) {
    698   1.2   itojun 		if (in6p->in6p_lport != lport)
    699   1.2   itojun 			continue;
    700   1.2   itojun 		wildcard = 0;
    701  1.10   itojun 		if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) {
    702  1.10   itojun 			if (IN6_IS_ADDR_UNSPECIFIED(laddr6))
    703   1.2   itojun 				wildcard++;
    704   1.2   itojun 			else if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, laddr6))
    705   1.2   itojun 				continue;
    706  1.11   itojun 		}
    707  1.11   itojun #ifndef TCP6
    708  1.11   itojun 		else if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr)
    709  1.11   itojun 			&& in6p->in6p_laddr.s6_addr32[3] == 0) {
    710  1.11   itojun 			if (!IN6_IS_ADDR_V4MAPPED(laddr6))
    711  1.11   itojun 				continue;
    712  1.11   itojun 			if (laddr6->s6_addr32[3] == 0)
    713  1.11   itojun 				;
    714  1.11   itojun 			else
    715  1.11   itojun 				wildcard++;
    716  1.11   itojun 		}
    717  1.11   itojun #endif
    718  1.11   itojun 		else {
    719  1.11   itojun 			if (IN6_IS_ADDR_V4MAPPED(laddr6)) {
    720  1.11   itojun #if !defined(TCP6) && !defined(INET6_BINDV6ONLY)
    721  1.11   itojun 				if (in6p->in6p_flags & IN6P_BINDV6ONLY)
    722  1.11   itojun 					continue;
    723  1.11   itojun 				else
    724  1.11   itojun 					wildcard++;
    725  1.11   itojun #else
    726  1.11   itojun 				continue;
    727  1.11   itojun #endif
    728  1.11   itojun 			} else if (!IN6_IS_ADDR_UNSPECIFIED(laddr6))
    729   1.2   itojun 				wildcard++;
    730   1.2   itojun 		}
    731  1.10   itojun 		if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr)) {
    732  1.10   itojun 			if (IN6_IS_ADDR_UNSPECIFIED(faddr6))
    733   1.2   itojun 				wildcard++;
    734   1.2   itojun 			else if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, faddr6)
    735   1.2   itojun 			      || in6p->in6p_fport != fport)
    736   1.2   itojun 				continue;
    737  1.11   itojun 		}
    738  1.11   itojun #ifndef TCP6
    739  1.11   itojun 		else if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_faddr)
    740  1.11   itojun 			&& in6p->in6p_faddr.s6_addr32[3] == 0) {
    741  1.11   itojun 			if (!IN6_IS_ADDR_V4MAPPED(faddr6))
    742  1.11   itojun 				continue;
    743  1.11   itojun 			if (faddr6->s6_addr32[3] == 0)
    744  1.11   itojun 				;
    745  1.11   itojun 			else
    746  1.11   itojun 				wildcard++;
    747  1.11   itojun 		}
    748  1.11   itojun #endif
    749  1.11   itojun 		else {
    750  1.11   itojun 			if (IN6_IS_ADDR_V4MAPPED(faddr6)) {
    751  1.11   itojun #if !defined(TCP6) && !defined(INET6_BINDV6ONLY)
    752  1.11   itojun 				if (in6p->in6p_flags & IN6P_BINDV6ONLY)
    753  1.11   itojun 					continue;
    754  1.11   itojun 				else
    755  1.11   itojun 					wildcard++;
    756  1.11   itojun #else
    757  1.11   itojun 				continue;
    758  1.11   itojun #endif
    759  1.11   itojun 			} else if (!IN6_IS_ADDR_UNSPECIFIED(faddr6))
    760   1.2   itojun 				wildcard++;
    761   1.2   itojun 		}
    762  1.11   itojun 
    763   1.2   itojun 		if (wildcard && (flags & IN6PLOOKUP_WILDCARD) == 0)
    764   1.2   itojun 			continue;
    765   1.2   itojun 		if (wildcard < matchwild) {
    766   1.2   itojun 			match = in6p;
    767   1.2   itojun 			matchwild = wildcard;
    768   1.2   itojun 			if (matchwild == 0)
    769   1.2   itojun 				break;
    770   1.2   itojun 		}
    771   1.2   itojun 	}
    772   1.2   itojun 	return(match);
    773   1.2   itojun }
    774   1.2   itojun 
    775   1.2   itojun #ifndef TCP6
    776   1.2   itojun struct rtentry *
    777   1.2   itojun in6_pcbrtentry(in6p)
    778   1.2   itojun 	struct in6pcb *in6p;
    779   1.2   itojun {
    780   1.2   itojun 	struct route_in6 *ro;
    781   1.2   itojun 
    782   1.2   itojun 	ro = &in6p->in6p_route;
    783   1.2   itojun 
    784   1.2   itojun 	if (ro->ro_rt == NULL) {
    785   1.2   itojun 		/*
    786   1.2   itojun 		 * No route yet, so try to acquire one.
    787   1.2   itojun 		 */
    788   1.2   itojun 		if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr)) {
    789   1.2   itojun 			bzero(&ro->ro_dst, sizeof(ro->ro_dst));
    790   1.2   itojun 			ro->ro_dst.sin6_family = AF_INET6;
    791   1.2   itojun 			ro->ro_dst.sin6_len = sizeof(struct sockaddr_in6);
    792   1.2   itojun 			satosin6(&ro->ro_dst)->sin6_addr = in6p->in6p_faddr;
    793   1.2   itojun 			rtalloc((struct route *)ro);
    794   1.2   itojun 		}
    795   1.2   itojun 	}
    796   1.2   itojun 	return (ro->ro_rt);
    797   1.2   itojun }
    798   1.2   itojun 
    799   1.2   itojun struct in6pcb *
    800   1.8   itojun in6_pcblookup_connect(head, faddr6, fport_arg, laddr6, lport_arg, faith)
    801   1.2   itojun 	struct in6pcb *head;
    802   1.2   itojun 	struct in6_addr *faddr6, *laddr6;
    803   1.2   itojun 	u_int fport_arg, lport_arg;
    804   1.8   itojun 	int faith;
    805   1.2   itojun {
    806   1.2   itojun 	struct in6pcb *in6p;
    807  1.18   itojun 	u_int16_t fport = fport_arg, lport = lport_arg;
    808   1.2   itojun 
    809   1.2   itojun 	for (in6p = head->in6p_next; in6p != head; in6p = in6p->in6p_next) {
    810   1.8   itojun #if defined(NFAITH) && NFAITH > 0
    811   1.8   itojun 		if (faith && (in6p->in6p_flags & IN6P_FAITH) == 0)
    812   1.8   itojun 			continue;
    813   1.8   itojun #endif
    814   1.2   itojun 		/* find exact match on both source and dest */
    815   1.2   itojun 		if (in6p->in6p_fport != fport)
    816   1.2   itojun 			continue;
    817   1.2   itojun 		if (in6p->in6p_lport != lport)
    818   1.2   itojun 			continue;
    819   1.2   itojun 		if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr))
    820   1.2   itojun 			continue;
    821   1.2   itojun 		if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, faddr6))
    822   1.2   itojun 			continue;
    823   1.2   itojun 		if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr))
    824   1.2   itojun 			continue;
    825   1.2   itojun 		if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, laddr6))
    826   1.2   itojun 			continue;
    827   1.2   itojun 		return in6p;
    828   1.2   itojun 	}
    829   1.2   itojun 	return NULL;
    830   1.2   itojun }
    831   1.2   itojun 
    832   1.2   itojun struct in6pcb *
    833   1.8   itojun in6_pcblookup_bind(head, laddr6, lport_arg, faith)
    834   1.2   itojun 	struct in6pcb *head;
    835   1.2   itojun 	struct in6_addr *laddr6;
    836   1.2   itojun 	u_int lport_arg;
    837   1.8   itojun 	int faith;
    838   1.2   itojun {
    839   1.2   itojun 	struct in6pcb *in6p, *match;
    840  1.18   itojun 	u_int16_t lport = lport_arg;
    841   1.2   itojun 
    842   1.2   itojun 	match = NULL;
    843   1.2   itojun 	for (in6p = head->in6p_next; in6p != head; in6p = in6p->in6p_next) {
    844   1.2   itojun 		/*
    845   1.2   itojun 	 	 * find destination match.  exact match is preferred
    846   1.2   itojun 		 * against wildcard match.
    847   1.2   itojun 		 */
    848   1.8   itojun #if defined(NFAITH) && NFAITH > 0
    849   1.8   itojun 		if (faith && (in6p->in6p_flags & IN6P_FAITH) == 0)
    850   1.8   itojun 			continue;
    851   1.8   itojun #endif
    852   1.2   itojun 		if (in6p->in6p_fport != 0)
    853   1.2   itojun 			continue;
    854   1.2   itojun 		if (in6p->in6p_lport != lport)
    855   1.2   itojun 			continue;
    856  1.11   itojun 		if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) {
    857  1.11   itojun 			if (IN6_IS_ADDR_V4MAPPED(laddr6)) {
    858  1.11   itojun #ifndef INET6_BINDV6ONLY
    859  1.11   itojun 				if (in6p->in6p_flags & IN6P_BINDV6ONLY)
    860  1.11   itojun 					continue;
    861  1.11   itojun 				else
    862  1.11   itojun 					match = in6p;
    863  1.11   itojun #else
    864  1.11   itojun 				continue;
    865  1.11   itojun #endif
    866  1.11   itojun 			} else
    867  1.11   itojun 				match = in6p;
    868  1.11   itojun 		}
    869  1.20   itojun 		else if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr) &&
    870  1.11   itojun 			 in6p->in6p_laddr.s6_addr32[3] == 0) {
    871  1.20   itojun 			if (IN6_IS_ADDR_V4MAPPED(laddr6) &&
    872  1.20   itojun 			    laddr6->s6_addr32[3] != 0)
    873  1.11   itojun 				match = in6p;
    874  1.11   itojun 		}
    875   1.2   itojun 		else if (IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, laddr6))
    876   1.2   itojun 			return in6p;
    877   1.2   itojun 	}
    878   1.2   itojun 	return match;
    879   1.2   itojun }
    880   1.2   itojun #endif
    881