in6_pcb.c revision 1.42 1 1.42 itojun /* $NetBSD: in6_pcb.c,v 1.42 2001/10/16 04:57:38 itojun Exp $ */
2 1.35 itojun /* $KAME: in6_pcb.c,v 1.84 2001/02/08 18:02:08 itojun Exp $ */
3 1.5 thorpej
4 1.2 itojun /*
5 1.2 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6 1.2 itojun * All rights reserved.
7 1.23 itojun *
8 1.2 itojun * Redistribution and use in source and binary forms, with or without
9 1.2 itojun * modification, are permitted provided that the following conditions
10 1.2 itojun * are met:
11 1.2 itojun * 1. Redistributions of source code must retain the above copyright
12 1.2 itojun * notice, this list of conditions and the following disclaimer.
13 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
14 1.2 itojun * notice, this list of conditions and the following disclaimer in the
15 1.2 itojun * documentation and/or other materials provided with the distribution.
16 1.2 itojun * 3. Neither the name of the project nor the names of its contributors
17 1.2 itojun * may be used to endorse or promote products derived from this software
18 1.2 itojun * without specific prior written permission.
19 1.23 itojun *
20 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.2 itojun * SUCH DAMAGE.
31 1.2 itojun */
32 1.2 itojun
33 1.2 itojun /*
34 1.2 itojun * Copyright (c) 1982, 1986, 1991, 1993
35 1.2 itojun * The Regents of the University of California. All rights reserved.
36 1.2 itojun *
37 1.2 itojun * Redistribution and use in source and binary forms, with or without
38 1.2 itojun * modification, are permitted provided that the following conditions
39 1.2 itojun * are met:
40 1.2 itojun * 1. Redistributions of source code must retain the above copyright
41 1.2 itojun * notice, this list of conditions and the following disclaimer.
42 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
43 1.2 itojun * notice, this list of conditions and the following disclaimer in the
44 1.2 itojun * documentation and/or other materials provided with the distribution.
45 1.2 itojun * 3. All advertising materials mentioning features or use of this software
46 1.2 itojun * must display the following acknowledgement:
47 1.2 itojun * This product includes software developed by the University of
48 1.2 itojun * California, Berkeley and its contributors.
49 1.2 itojun * 4. Neither the name of the University nor the names of its contributors
50 1.2 itojun * may be used to endorse or promote products derived from this software
51 1.2 itojun * without specific prior written permission.
52 1.2 itojun *
53 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
54 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
55 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
56 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
57 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
58 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
59 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
60 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
61 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
62 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
63 1.2 itojun * SUCH DAMAGE.
64 1.2 itojun *
65 1.2 itojun * @(#)in_pcb.c 8.2 (Berkeley) 1/4/94
66 1.2 itojun */
67 1.7 thorpej
68 1.7 thorpej #include "opt_ipsec.h"
69 1.2 itojun
70 1.2 itojun #include <sys/param.h>
71 1.2 itojun #include <sys/systm.h>
72 1.2 itojun #include <sys/malloc.h>
73 1.2 itojun #include <sys/mbuf.h>
74 1.2 itojun #include <sys/protosw.h>
75 1.2 itojun #include <sys/socket.h>
76 1.2 itojun #include <sys/socketvar.h>
77 1.2 itojun #include <sys/ioctl.h>
78 1.2 itojun #include <sys/errno.h>
79 1.2 itojun #include <sys/time.h>
80 1.2 itojun #include <sys/proc.h>
81 1.2 itojun
82 1.2 itojun #include <net/if.h>
83 1.2 itojun #include <net/route.h>
84 1.2 itojun
85 1.2 itojun #include <netinet/in.h>
86 1.2 itojun #include <netinet/in_var.h>
87 1.2 itojun #include <netinet/in_systm.h>
88 1.2 itojun #include <netinet/ip.h>
89 1.2 itojun #include <netinet/in_pcb.h>
90 1.19 itojun #include <netinet/ip6.h>
91 1.11 itojun #include <netinet6/ip6_var.h>
92 1.2 itojun #include <netinet6/in6_pcb.h>
93 1.2 itojun #include <netinet6/nd6.h>
94 1.2 itojun
95 1.2 itojun #include "loop.h"
96 1.2 itojun extern struct ifnet loif[NLOOP];
97 1.8 itojun #include "faith.h"
98 1.2 itojun
99 1.2 itojun #ifdef IPSEC
100 1.2 itojun #include <netinet6/ipsec.h>
101 1.2 itojun #include <netkey/key.h>
102 1.2 itojun #endif /* IPSEC */
103 1.2 itojun
104 1.2 itojun struct in6_addr zeroin6_addr;
105 1.30 itojun
106 1.30 itojun int ip6_anonportmin = IPV6PORT_ANONMIN;
107 1.30 itojun int ip6_anonportmax = IPV6PORT_ANONMAX;
108 1.30 itojun int ip6_lowportmin = IPV6PORT_RESERVEDMIN;
109 1.30 itojun int ip6_lowportmax = IPV6PORT_RESERVEDMAX;
110 1.2 itojun
111 1.2 itojun int
112 1.2 itojun in6_pcballoc(so, head)
113 1.2 itojun struct socket *so;
114 1.2 itojun struct in6pcb *head;
115 1.2 itojun {
116 1.2 itojun struct in6pcb *in6p;
117 1.39 itojun #ifdef IPSEC
118 1.39 itojun int error;
119 1.39 itojun #endif
120 1.2 itojun
121 1.2 itojun MALLOC(in6p, struct in6pcb *, sizeof(*in6p), M_PCB, M_NOWAIT);
122 1.2 itojun if (in6p == NULL)
123 1.2 itojun return(ENOBUFS);
124 1.2 itojun bzero((caddr_t)in6p, sizeof(*in6p));
125 1.2 itojun in6p->in6p_head = head;
126 1.2 itojun in6p->in6p_socket = so;
127 1.2 itojun in6p->in6p_hops = -1; /* use kernel default */
128 1.2 itojun in6p->in6p_icmp6filt = NULL;
129 1.39 itojun #ifdef IPSEC
130 1.39 itojun error = ipsec_init_policy(so, &in6p->in6p_sp);
131 1.39 itojun if (error != 0) {
132 1.39 itojun FREE(in6p, M_PCB);
133 1.39 itojun return error;
134 1.39 itojun }
135 1.39 itojun #endif /*IPSEC*/
136 1.3 itojun in6p->in6p_next = head->in6p_next;
137 1.3 itojun head->in6p_next = in6p;
138 1.3 itojun in6p->in6p_prev = head;
139 1.3 itojun in6p->in6p_next->in6p_prev = in6p;
140 1.41 itojun if (ip6_v6only)
141 1.41 itojun in6p->in6p_flags |= IN6P_IPV6_V6ONLY;
142 1.2 itojun so->so_pcb = (caddr_t)in6p;
143 1.2 itojun return(0);
144 1.2 itojun }
145 1.2 itojun
146 1.2 itojun int
147 1.24 itojun in6_pcbbind(in6p, nam, p)
148 1.34 itojun struct in6pcb *in6p;
149 1.2 itojun struct mbuf *nam;
150 1.24 itojun struct proc *p;
151 1.2 itojun {
152 1.2 itojun struct socket *so = in6p->in6p_socket;
153 1.2 itojun struct in6pcb *head = in6p->in6p_head;
154 1.2 itojun struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)NULL;
155 1.18 itojun u_int16_t lport = 0;
156 1.2 itojun int wild = 0, reuseport = (so->so_options & SO_REUSEPORT);
157 1.2 itojun
158 1.10 itojun if (in6p->in6p_lport || !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr))
159 1.2 itojun return(EINVAL);
160 1.2 itojun if ((so->so_options & (SO_REUSEADDR|SO_REUSEPORT)) == 0 &&
161 1.2 itojun ((so->so_proto->pr_flags & PR_CONNREQUIRED) == 0 ||
162 1.2 itojun (so->so_options & SO_ACCEPTCONN) == 0))
163 1.2 itojun wild = IN6PLOOKUP_WILDCARD;
164 1.2 itojun if (nam) {
165 1.2 itojun sin6 = mtod(nam, struct sockaddr_in6 *);
166 1.2 itojun if (nam->m_len != sizeof(*sin6))
167 1.2 itojun return(EINVAL);
168 1.2 itojun /*
169 1.2 itojun * We should check the family, but old programs
170 1.2 itojun * incorrectly fail to intialize it.
171 1.2 itojun */
172 1.2 itojun if (sin6->sin6_family != AF_INET6)
173 1.2 itojun return(EAFNOSUPPORT);
174 1.22 itojun
175 1.22 itojun /*
176 1.22 itojun * since we do not check port number duplicate with IPv4 space,
177 1.42 itojun * we reject it at this moment. If we leave it, we would
178 1.42 itojun * mistakenly allow normal users to hijack tcp/udp ports from
179 1.42 itojun * other users.
180 1.22 itojun */
181 1.22 itojun if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr))
182 1.22 itojun return(EADDRNOTAVAIL);
183 1.2 itojun
184 1.29 itojun /* KAME hack: embed scopeid */
185 1.29 itojun if (in6_embedscope(&sin6->sin6_addr, sin6, in6p, NULL) != 0)
186 1.29 itojun return EINVAL;
187 1.29 itojun /* this must be cleared for ifa_ifwithaddr() */
188 1.29 itojun sin6->sin6_scope_id = 0;
189 1.2 itojun
190 1.2 itojun lport = sin6->sin6_port;
191 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)) {
192 1.2 itojun /*
193 1.2 itojun * Treat SO_REUSEADDR as SO_REUSEPORT for multicast;
194 1.2 itojun * allow compepte duplication of binding if
195 1.2 itojun * SO_REUSEPORT is set, or if SO_REUSEADDR is set
196 1.2 itojun * and a multicast address is bound on both
197 1.2 itojun * new and duplicated sockets.
198 1.2 itojun */
199 1.2 itojun if (so->so_options & SO_REUSEADDR)
200 1.2 itojun reuseport = SO_REUSEADDR|SO_REUSEPORT;
201 1.41 itojun }
202 1.41 itojun else if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
203 1.2 itojun struct sockaddr_in sin;
204 1.2 itojun
205 1.2 itojun bzero(&sin, sizeof(sin));
206 1.2 itojun sin.sin_len = sizeof(sin);
207 1.2 itojun sin.sin_family = AF_INET;
208 1.2 itojun bcopy(&sin6->sin6_addr.s6_addr32[3], &sin.sin_addr,
209 1.2 itojun sizeof(sin.sin_addr));
210 1.2 itojun if (ifa_ifwithaddr((struct sockaddr *)&sin) == 0)
211 1.2 itojun return EADDRNOTAVAIL;
212 1.41 itojun }
213 1.41 itojun else if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
214 1.2 itojun struct ifaddr *ia = NULL;
215 1.2 itojun
216 1.2 itojun sin6->sin6_port = 0; /* yech... */
217 1.36 itojun if ((in6p->in6p_flags & IN6P_FAITH) == 0 &&
218 1.36 itojun (ia = ifa_ifwithaddr((struct sockaddr *)sin6)) == 0)
219 1.2 itojun return(EADDRNOTAVAIL);
220 1.2 itojun
221 1.2 itojun /*
222 1.2 itojun * XXX: bind to an anycast address might accidentally
223 1.2 itojun * cause sending a packet with anycast source address.
224 1.2 itojun */
225 1.20 itojun if (ia &&
226 1.20 itojun ((struct in6_ifaddr *)ia)->ia6_flags &
227 1.20 itojun (IN6_IFF_ANYCAST|IN6_IFF_NOTREADY|
228 1.20 itojun IN6_IFF_DETACHED|IN6_IFF_DEPRECATED)) {
229 1.20 itojun return(EADDRNOTAVAIL);
230 1.2 itojun }
231 1.2 itojun }
232 1.2 itojun if (lport) {
233 1.13 itojun #ifndef IPNOPRIVPORTS
234 1.29 itojun int priv;
235 1.29 itojun
236 1.29 itojun /*
237 1.29 itojun * NOTE: all operating systems use suser() for
238 1.29 itojun * privilege check! do not rewrite it into SS_PRIV.
239 1.29 itojun */
240 1.29 itojun priv = (p && !suser(p->p_ucred, &p->p_acflag)) ? 1 : 0;
241 1.2 itojun /* GROSS */
242 1.29 itojun if (ntohs(lport) < IPV6PORT_RESERVED && !priv)
243 1.2 itojun return(EACCES);
244 1.13 itojun #endif
245 1.2 itojun
246 1.2 itojun if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
247 1.2 itojun /* should check this but we can't ... */
248 1.2 itojun #if 0
249 1.2 itojun struct inpcb *t;
250 1.2 itojun
251 1.2 itojun t = in_pcblookup_bind(&tcbtable,
252 1.2 itojun (struct in_addr *)&sin6->sin6_addr.s6_addr32[3],
253 1.2 itojun lport);
254 1.2 itojun if (t && (reuseport & t->inp_socket->so_options) == 0)
255 1.2 itojun return EADDRINUSE;
256 1.2 itojun #endif
257 1.42 itojun } else
258 1.42 itojun {
259 1.2 itojun struct in6pcb *t;
260 1.2 itojun
261 1.2 itojun t = in6_pcblookup(head, &zeroin6_addr, 0,
262 1.2 itojun &sin6->sin6_addr, lport, wild);
263 1.2 itojun if (t && (reuseport & t->in6p_socket->so_options) == 0)
264 1.2 itojun return(EADDRINUSE);
265 1.2 itojun }
266 1.2 itojun }
267 1.2 itojun in6p->in6p_laddr = sin6->sin6_addr;
268 1.2 itojun }
269 1.10 itojun
270 1.2 itojun if (lport == 0) {
271 1.10 itojun int e;
272 1.10 itojun if ((e = in6_pcbsetport(&in6p->in6p_laddr, in6p)) != 0)
273 1.10 itojun return(e);
274 1.10 itojun }
275 1.10 itojun else
276 1.10 itojun in6p->in6p_lport = lport;
277 1.10 itojun
278 1.10 itojun in6p->in6p_flowinfo = sin6 ? sin6->sin6_flowinfo : 0; /*XXX*/
279 1.10 itojun return(0);
280 1.10 itojun }
281 1.10 itojun
282 1.10 itojun /*
283 1.2 itojun * Connect from a socket to a specified address.
284 1.2 itojun * Both address and port must be specified in argument sin6.
285 1.2 itojun * If don't have a local address for this socket yet,
286 1.2 itojun * then pick one.
287 1.2 itojun */
288 1.2 itojun int
289 1.2 itojun in6_pcbconnect(in6p, nam)
290 1.2 itojun struct in6pcb *in6p;
291 1.2 itojun struct mbuf *nam;
292 1.2 itojun {
293 1.2 itojun struct in6_addr *in6a = NULL;
294 1.2 itojun struct sockaddr_in6 *sin6 = mtod(nam, struct sockaddr_in6 *);
295 1.2 itojun struct ifnet *ifp = NULL; /* outgoing interface */
296 1.2 itojun int error = 0;
297 1.31 itojun #ifdef INET
298 1.2 itojun struct in6_addr mapped;
299 1.31 itojun #endif
300 1.26 itojun struct sockaddr_in6 tmp;
301 1.2 itojun
302 1.2 itojun (void)&in6a; /* XXX fool gcc */
303 1.2 itojun
304 1.2 itojun if (nam->m_len != sizeof(*sin6))
305 1.2 itojun return(EINVAL);
306 1.2 itojun if (sin6->sin6_family != AF_INET6)
307 1.2 itojun return(EAFNOSUPPORT);
308 1.2 itojun if (sin6->sin6_port == 0)
309 1.2 itojun return(EADDRNOTAVAIL);
310 1.2 itojun
311 1.2 itojun /* sanity check for mapped address case */
312 1.2 itojun if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
313 1.41 itojun if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY) != 0)
314 1.41 itojun return EINVAL;
315 1.2 itojun if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr))
316 1.2 itojun in6p->in6p_laddr.s6_addr16[5] = htons(0xffff);
317 1.2 itojun if (!IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr))
318 1.2 itojun return EINVAL;
319 1.41 itojun } else
320 1.41 itojun {
321 1.2 itojun if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr))
322 1.2 itojun return EINVAL;
323 1.2 itojun }
324 1.26 itojun
325 1.26 itojun /* protect *sin6 from overwrites */
326 1.26 itojun tmp = *sin6;
327 1.26 itojun sin6 = &tmp;
328 1.2 itojun
329 1.29 itojun /* KAME hack: embed scopeid */
330 1.29 itojun if (in6_embedscope(&sin6->sin6_addr, sin6, in6p, &ifp) != 0)
331 1.29 itojun return EINVAL;
332 1.2 itojun
333 1.2 itojun /* Source address selection. */
334 1.2 itojun if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr)
335 1.2 itojun && in6p->in6p_laddr.s6_addr32[3] == 0) {
336 1.31 itojun #ifdef INET
337 1.2 itojun struct sockaddr_in sin, *sinp;
338 1.2 itojun
339 1.2 itojun bzero(&sin, sizeof(sin));
340 1.2 itojun sin.sin_len = sizeof(sin);
341 1.2 itojun sin.sin_family = AF_INET;
342 1.2 itojun bcopy(&sin6->sin6_addr.s6_addr32[3], &sin.sin_addr,
343 1.2 itojun sizeof(sin.sin_addr));
344 1.2 itojun sinp = in_selectsrc(&sin, (struct route *)&in6p->in6p_route,
345 1.2 itojun in6p->in6p_socket->so_options, NULL, &error);
346 1.2 itojun if (sinp == 0) {
347 1.2 itojun if (error == 0)
348 1.2 itojun error = EADDRNOTAVAIL;
349 1.2 itojun return(error);
350 1.2 itojun }
351 1.2 itojun bzero(&mapped, sizeof(mapped));
352 1.2 itojun mapped.s6_addr16[5] = htons(0xffff);
353 1.2 itojun bcopy(&sinp->sin_addr, &mapped.s6_addr32[3], sizeof(sinp->sin_addr));
354 1.2 itojun in6a = &mapped;
355 1.31 itojun #else
356 1.31 itojun return EADDRNOTAVAIL;
357 1.31 itojun #endif
358 1.41 itojun } else
359 1.41 itojun {
360 1.10 itojun /*
361 1.10 itojun * XXX: in6_selectsrc might replace the bound local address
362 1.10 itojun * with the address specified by setsockopt(IPV6_PKTINFO).
363 1.10 itojun * Is it the intended behavior?
364 1.10 itojun */
365 1.2 itojun in6a = in6_selectsrc(sin6, in6p->in6p_outputopts,
366 1.10 itojun in6p->in6p_moptions,
367 1.10 itojun &in6p->in6p_route,
368 1.10 itojun &in6p->in6p_laddr, &error);
369 1.2 itojun if (in6a == 0) {
370 1.2 itojun if (error == 0)
371 1.2 itojun error = EADDRNOTAVAIL;
372 1.2 itojun return(error);
373 1.2 itojun }
374 1.2 itojun }
375 1.2 itojun if (in6p->in6p_route.ro_rt)
376 1.2 itojun ifp = in6p->in6p_route.ro_rt->rt_ifp;
377 1.2 itojun
378 1.10 itojun in6p->in6p_ip6.ip6_hlim = (u_int8_t)in6_selecthlim(in6p, ifp);
379 1.2 itojun
380 1.2 itojun if (in6_pcblookup(in6p->in6p_head,
381 1.2 itojun &sin6->sin6_addr,
382 1.2 itojun sin6->sin6_port,
383 1.10 itojun IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) ?
384 1.2 itojun in6a : &in6p->in6p_laddr,
385 1.2 itojun in6p->in6p_lport,
386 1.2 itojun 0))
387 1.2 itojun return(EADDRINUSE);
388 1.10 itojun if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)
389 1.2 itojun || (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr)
390 1.41 itojun && in6p->in6p_laddr.s6_addr32[3] == 0))
391 1.41 itojun {
392 1.41 itojun /*
393 1.41 itojun * XXX in IPv4 mapped address case, we should grab fresh
394 1.41 itojun * local port number by in_pcbbind, not in6_pcbbind.
395 1.41 itojun * if we are in bad luck, we may assign conflicting port number
396 1.41 itojun * between IPv4 and IPv6 unwillingly.
397 1.41 itojun */
398 1.29 itojun if (in6p->in6p_lport == 0) {
399 1.24 itojun (void)in6_pcbbind(in6p, (struct mbuf *)0,
400 1.24 itojun (struct proc *)0);
401 1.29 itojun }
402 1.2 itojun in6p->in6p_laddr = *in6a;
403 1.2 itojun }
404 1.2 itojun in6p->in6p_faddr = sin6->sin6_addr;
405 1.2 itojun in6p->in6p_fport = sin6->sin6_port;
406 1.2 itojun /*
407 1.2 itojun * xxx kazu flowlabel is necessary for connect?
408 1.2 itojun * but if this line is missing, the garbage value remains.
409 1.2 itojun */
410 1.2 itojun in6p->in6p_flowinfo = sin6->sin6_flowinfo;
411 1.40 itojun #ifdef IPSEC
412 1.40 itojun if (in6p->in6p_socket->so_type == SOCK_STREAM)
413 1.40 itojun ipsec_pcbconn(in6p->in6p_sp);
414 1.40 itojun #endif
415 1.2 itojun return(0);
416 1.2 itojun }
417 1.2 itojun
418 1.2 itojun void
419 1.2 itojun in6_pcbdisconnect(in6p)
420 1.2 itojun struct in6pcb *in6p;
421 1.2 itojun {
422 1.2 itojun bzero((caddr_t)&in6p->in6p_faddr, sizeof(in6p->in6p_faddr));
423 1.2 itojun in6p->in6p_fport = 0;
424 1.2 itojun if (in6p->in6p_socket->so_state & SS_NOFDREF)
425 1.2 itojun in6_pcbdetach(in6p);
426 1.40 itojun #ifdef IPSEC
427 1.40 itojun ipsec_pcbdisconn(in6p->in6p_sp);
428 1.40 itojun #endif
429 1.2 itojun }
430 1.2 itojun
431 1.2 itojun void
432 1.2 itojun in6_pcbdetach(in6p)
433 1.2 itojun struct in6pcb *in6p;
434 1.2 itojun {
435 1.2 itojun struct socket *so = in6p->in6p_socket;
436 1.2 itojun
437 1.2 itojun #ifdef IPSEC
438 1.2 itojun ipsec6_delete_pcbpolicy(in6p);
439 1.2 itojun #endif /* IPSEC */
440 1.2 itojun sotoin6pcb(so) = 0;
441 1.2 itojun sofree(so);
442 1.2 itojun if (in6p->in6p_options)
443 1.2 itojun m_freem(in6p->in6p_options);
444 1.2 itojun if (in6p->in6p_outputopts) {
445 1.2 itojun if (in6p->in6p_outputopts->ip6po_rthdr &&
446 1.2 itojun in6p->in6p_outputopts->ip6po_route.ro_rt)
447 1.2 itojun RTFREE(in6p->in6p_outputopts->ip6po_route.ro_rt);
448 1.2 itojun if (in6p->in6p_outputopts->ip6po_m)
449 1.2 itojun (void)m_free(in6p->in6p_outputopts->ip6po_m);
450 1.2 itojun free(in6p->in6p_outputopts, M_IP6OPT);
451 1.2 itojun }
452 1.2 itojun if (in6p->in6p_route.ro_rt)
453 1.2 itojun rtfree(in6p->in6p_route.ro_rt);
454 1.2 itojun ip6_freemoptions(in6p->in6p_moptions);
455 1.3 itojun in6p->in6p_next->in6p_prev = in6p->in6p_prev;
456 1.3 itojun in6p->in6p_prev->in6p_next = in6p->in6p_next;
457 1.3 itojun in6p->in6p_prev = NULL;
458 1.2 itojun FREE(in6p, M_PCB);
459 1.2 itojun }
460 1.2 itojun
461 1.2 itojun void
462 1.2 itojun in6_setsockaddr(in6p, nam)
463 1.2 itojun struct in6pcb *in6p;
464 1.2 itojun struct mbuf *nam;
465 1.2 itojun {
466 1.2 itojun struct sockaddr_in6 *sin6;
467 1.2 itojun
468 1.2 itojun nam->m_len = sizeof(*sin6);
469 1.2 itojun sin6 = mtod(nam, struct sockaddr_in6 *);
470 1.2 itojun bzero((caddr_t)sin6, sizeof(*sin6));
471 1.2 itojun sin6->sin6_family = AF_INET6;
472 1.2 itojun sin6->sin6_len = sizeof(struct sockaddr_in6);
473 1.2 itojun sin6->sin6_port = in6p->in6p_lport;
474 1.29 itojun /* KAME hack: recover scopeid */
475 1.29 itojun (void)in6_recoverscope(sin6, &in6p->in6p_laddr, NULL);
476 1.2 itojun }
477 1.2 itojun
478 1.2 itojun void
479 1.2 itojun in6_setpeeraddr(in6p, nam)
480 1.2 itojun struct in6pcb *in6p;
481 1.2 itojun struct mbuf *nam;
482 1.2 itojun {
483 1.2 itojun struct sockaddr_in6 *sin6;
484 1.2 itojun
485 1.2 itojun nam->m_len = sizeof(*sin6);
486 1.2 itojun sin6 = mtod(nam, struct sockaddr_in6 *);
487 1.2 itojun bzero((caddr_t)sin6, sizeof(*sin6));
488 1.2 itojun sin6->sin6_family = AF_INET6;
489 1.2 itojun sin6->sin6_len = sizeof(struct sockaddr_in6);
490 1.2 itojun sin6->sin6_port = in6p->in6p_fport;
491 1.29 itojun /* KAME hack: recover scopeid */
492 1.29 itojun (void)in6_recoverscope(sin6, &in6p->in6p_faddr, NULL);
493 1.2 itojun }
494 1.2 itojun
495 1.2 itojun /*
496 1.2 itojun * Pass some notification to all connections of a protocol
497 1.2 itojun * associated with address dst. The local address and/or port numbers
498 1.2 itojun * may be specified to limit the search. The "usual action" will be
499 1.2 itojun * taken, depending on the ctlinput cmd. The caller must filter any
500 1.2 itojun * cmds that are uninteresting (e.g., no error in the map).
501 1.2 itojun * Call the protocol specific routine (if any) to report
502 1.2 itojun * any errors for each matching socket.
503 1.2 itojun *
504 1.6 itojun * Must be called at splsoftnet.
505 1.35 itojun *
506 1.35 itojun * Note: src (4th arg) carries the flowlabel value on the original IPv6
507 1.35 itojun * header, in sin6_flowinfo member.
508 1.2 itojun */
509 1.2 itojun int
510 1.35 itojun in6_pcbnotify(head, dst, fport_arg, src, lport_arg, cmd, cmdarg, notify)
511 1.2 itojun struct in6pcb *head;
512 1.35 itojun struct sockaddr *dst, *src;
513 1.2 itojun u_int fport_arg, lport_arg;
514 1.2 itojun int cmd;
515 1.35 itojun void *cmdarg;
516 1.2 itojun void (*notify) __P((struct in6pcb *, int));
517 1.2 itojun {
518 1.20 itojun struct in6pcb *in6p, *nin6p;
519 1.35 itojun struct sockaddr_in6 sa6_src, *sa6_dst;
520 1.18 itojun u_int16_t fport = fport_arg, lport = lport_arg;
521 1.2 itojun int errno;
522 1.2 itojun int nmatch = 0;
523 1.35 itojun u_int32_t flowinfo;
524 1.2 itojun
525 1.2 itojun if ((unsigned)cmd > PRC_NCMDS || dst->sa_family != AF_INET6)
526 1.2 itojun return 0;
527 1.35 itojun
528 1.35 itojun sa6_dst = (struct sockaddr_in6 *)dst;
529 1.35 itojun if (IN6_IS_ADDR_UNSPECIFIED(&sa6_dst->sin6_addr))
530 1.2 itojun return 0;
531 1.2 itojun
532 1.2 itojun /*
533 1.35 itojun * note that src can be NULL when we get notify by local fragmentation.
534 1.35 itojun */
535 1.35 itojun sa6_src = (src == NULL) ? sa6_any : *(struct sockaddr_in6 *)src;
536 1.35 itojun flowinfo = sa6_src.sin6_flowinfo;
537 1.35 itojun
538 1.35 itojun /*
539 1.2 itojun * Redirects go to all references to the destination,
540 1.20 itojun * and use in6_rtchange to invalidate the route cache.
541 1.20 itojun * Dead host indications: also use in6_rtchange to invalidate
542 1.20 itojun * the cache, and deliver the error to all the sockets.
543 1.2 itojun * Otherwise, if we have knowledge of the local port and address,
544 1.2 itojun * deliver only to that socket.
545 1.2 itojun */
546 1.2 itojun if (PRC_IS_REDIRECT(cmd) || cmd == PRC_HOSTDEAD) {
547 1.2 itojun fport = 0;
548 1.2 itojun lport = 0;
549 1.35 itojun bzero((caddr_t)&sa6_src.sin6_addr, sizeof(sa6_src.sin6_addr));
550 1.20 itojun
551 1.35 itojun if (cmd != PRC_HOSTDEAD)
552 1.35 itojun notify = in6_rtchange;
553 1.2 itojun }
554 1.20 itojun
555 1.2 itojun errno = inet6ctlerrmap[cmd];
556 1.20 itojun for (in6p = head->in6p_next; in6p != head; in6p = nin6p) {
557 1.20 itojun nin6p = in6p->in6p_next;
558 1.20 itojun
559 1.35 itojun /*
560 1.35 itojun * Under the following condition, notify of redirects
561 1.35 itojun * to the pcb, without making address matches against inpcb.
562 1.35 itojun * - redirect notification is arrived.
563 1.35 itojun * - the inpcb is unconnected.
564 1.35 itojun * - the inpcb is caching !RTF_HOST routing entry.
565 1.35 itojun * - the ICMPv6 notification is from the gateway cached in the
566 1.35 itojun * inpcb. i.e. ICMPv6 notification is from nexthop gateway
567 1.35 itojun * the inpcb used very recently.
568 1.35 itojun *
569 1.35 itojun * This is to improve interaction between netbsd/openbsd
570 1.35 itojun * redirect handling code, and inpcb route cache code.
571 1.35 itojun * without the clause, !RTF_HOST routing entry (which carries
572 1.35 itojun * gateway used by inpcb right before the ICMPv6 redirect)
573 1.35 itojun * will be cached forever in unconnected inpcb.
574 1.35 itojun *
575 1.35 itojun * There still is a question regarding to what is TRT:
576 1.35 itojun * - On bsdi/freebsd, RTF_HOST (cloned) routing entry will be
577 1.35 itojun * generated on packet output. inpcb will always cache
578 1.35 itojun * RTF_HOST routing entry so there's no need for the clause
579 1.35 itojun * (ICMPv6 redirect will update RTF_HOST routing entry,
580 1.35 itojun * and inpcb is caching it already).
581 1.35 itojun * However, bsdi/freebsd are vulnerable to local DoS attacks
582 1.35 itojun * due to the cloned routing entries.
583 1.35 itojun * - Specwise, "destination cache" is mentioned in RFC2461.
584 1.35 itojun * Jinmei says that it implies bsdi/freebsd behavior, itojun
585 1.35 itojun * is not really convinced.
586 1.35 itojun * - Having hiwat/lowat on # of cloned host route (redirect/
587 1.35 itojun * pmtud) may be a good idea. netbsd/openbsd has it. see
588 1.35 itojun * icmp6_mtudisc_update().
589 1.35 itojun */
590 1.35 itojun if ((PRC_IS_REDIRECT(cmd) || cmd == PRC_HOSTDEAD) &&
591 1.35 itojun IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) &&
592 1.35 itojun in6p->in6p_route.ro_rt &&
593 1.35 itojun !(in6p->in6p_route.ro_rt->rt_flags & RTF_HOST)) {
594 1.35 itojun struct sockaddr_in6 *dst6;
595 1.35 itojun
596 1.35 itojun dst6 = (struct sockaddr_in6 *)&in6p->in6p_route.ro_dst;
597 1.35 itojun if (IN6_ARE_ADDR_EQUAL(&dst6->sin6_addr,
598 1.35 itojun &sa6_dst->sin6_addr))
599 1.35 itojun goto do_notify;
600 1.20 itojun }
601 1.20 itojun
602 1.35 itojun /*
603 1.35 itojun * Detect if we should notify the error. If no source and
604 1.42 itojun * destination ports are specified, but non-zero flowinfo and
605 1.35 itojun * local address match, notify the error. This is the case
606 1.35 itojun * when the error is delivered with an encrypted buffer
607 1.35 itojun * by ESP. Otherwise, just compare addresses and ports
608 1.35 itojun * as usual.
609 1.35 itojun */
610 1.35 itojun if (lport == 0 && fport == 0 && flowinfo &&
611 1.35 itojun in6p->in6p_socket != NULL &&
612 1.35 itojun flowinfo == (in6p->in6p_flowinfo & IPV6_FLOWLABEL_MASK) &&
613 1.35 itojun IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &sa6_src.sin6_addr))
614 1.35 itojun goto do_notify;
615 1.35 itojun else if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr,
616 1.35 itojun &sa6_dst->sin6_addr) ||
617 1.20 itojun in6p->in6p_socket == 0 ||
618 1.20 itojun (lport && in6p->in6p_lport != lport) ||
619 1.35 itojun (!IN6_IS_ADDR_UNSPECIFIED(&sa6_src.sin6_addr) &&
620 1.35 itojun !IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr,
621 1.35 itojun &sa6_src.sin6_addr)) ||
622 1.20 itojun (fport && in6p->in6p_fport != fport))
623 1.2 itojun continue;
624 1.20 itojun
625 1.35 itojun do_notify:
626 1.35 itojun if (notify)
627 1.35 itojun (*notify)(in6p, errno);
628 1.2 itojun nmatch++;
629 1.2 itojun }
630 1.2 itojun return nmatch;
631 1.16 thorpej }
632 1.16 thorpej
633 1.16 thorpej void
634 1.38 itojun in6_pcbpurgeif0(head, ifp)
635 1.16 thorpej struct in6pcb *head;
636 1.16 thorpej struct ifnet *ifp;
637 1.16 thorpej {
638 1.16 thorpej struct in6pcb *in6p, *nin6p;
639 1.37 itojun struct ip6_moptions *im6o;
640 1.37 itojun struct in6_multi_mship *imm, *nimm;
641 1.16 thorpej
642 1.16 thorpej for (in6p = head->in6p_next; in6p != head; in6p = nin6p) {
643 1.16 thorpej nin6p = in6p->in6p_next;
644 1.37 itojun im6o = in6p->in6p_moptions;
645 1.37 itojun if (im6o) {
646 1.37 itojun /*
647 1.37 itojun * Unselect the outgoing interface if it is being
648 1.37 itojun * detached.
649 1.37 itojun */
650 1.37 itojun if (im6o->im6o_multicast_ifp == ifp)
651 1.37 itojun im6o->im6o_multicast_ifp = NULL;
652 1.37 itojun
653 1.37 itojun /*
654 1.37 itojun * Drop multicast group membership if we joined
655 1.37 itojun * through the interface being detached.
656 1.37 itojun * XXX controversial - is it really legal for kernel
657 1.37 itojun * to force this?
658 1.37 itojun */
659 1.37 itojun for (imm = im6o->im6o_memberships.lh_first;
660 1.37 itojun imm != NULL; imm = nimm) {
661 1.37 itojun nimm = imm->i6mm_chain.le_next;
662 1.37 itojun if (imm->i6mm_maddr->in6m_ifp == ifp) {
663 1.37 itojun LIST_REMOVE(imm, i6mm_chain);
664 1.37 itojun in6_delmulti(imm->i6mm_maddr);
665 1.37 itojun free(imm, M_IPMADDR);
666 1.37 itojun }
667 1.37 itojun }
668 1.37 itojun }
669 1.38 itojun }
670 1.38 itojun }
671 1.38 itojun
672 1.38 itojun void
673 1.38 itojun in6_pcbpurgeif(head, ifp)
674 1.38 itojun struct in6pcb *head;
675 1.38 itojun struct ifnet *ifp;
676 1.38 itojun {
677 1.38 itojun struct in6pcb *in6p, *nin6p;
678 1.38 itojun
679 1.38 itojun for (in6p = head->in6p_next; in6p != head; in6p = nin6p) {
680 1.38 itojun nin6p = in6p->in6p_next;
681 1.38 itojun if (in6p->in6p_route.ro_rt != NULL &&
682 1.38 itojun in6p->in6p_route.ro_rt->rt_ifp == ifp)
683 1.38 itojun in6_rtchange(in6p, 0);
684 1.16 thorpej }
685 1.2 itojun }
686 1.2 itojun
687 1.2 itojun /*
688 1.2 itojun * Check for alternatives when higher level complains
689 1.2 itojun * about service problems. For now, invalidate cached
690 1.2 itojun * routing information. If the route was created dynamically
691 1.2 itojun * (by a redirect), time to try a default gateway again.
692 1.2 itojun */
693 1.2 itojun void
694 1.2 itojun in6_losing(in6p)
695 1.2 itojun struct in6pcb *in6p;
696 1.2 itojun {
697 1.2 itojun struct rtentry *rt;
698 1.2 itojun struct rt_addrinfo info;
699 1.2 itojun
700 1.2 itojun if ((rt = in6p->in6p_route.ro_rt) != NULL) {
701 1.2 itojun in6p->in6p_route.ro_rt = 0;
702 1.2 itojun bzero((caddr_t)&info, sizeof(info));
703 1.2 itojun info.rti_info[RTAX_DST] =
704 1.2 itojun (struct sockaddr *)&in6p->in6p_route.ro_dst;
705 1.2 itojun info.rti_info[RTAX_GATEWAY] = rt->rt_gateway;
706 1.2 itojun info.rti_info[RTAX_NETMASK] = rt_mask(rt);
707 1.2 itojun rt_missmsg(RTM_LOSING, &info, rt->rt_flags, 0);
708 1.42 itojun if (rt->rt_flags & RTF_DYNAMIC) {
709 1.2 itojun (void)rtrequest(RTM_DELETE, rt_key(rt),
710 1.2 itojun rt->rt_gateway, rt_mask(rt), rt->rt_flags,
711 1.2 itojun (struct rtentry **)0);
712 1.42 itojun } else {
713 1.42 itojun /*
714 1.42 itojun * A new route can be allocated
715 1.42 itojun * the next time output is attempted.
716 1.42 itojun */
717 1.2 itojun rtfree(rt);
718 1.42 itojun }
719 1.2 itojun }
720 1.2 itojun }
721 1.2 itojun
722 1.2 itojun /*
723 1.2 itojun * After a routing change, flush old routing
724 1.2 itojun * and allocate a (hopefully) better one.
725 1.2 itojun */
726 1.2 itojun void
727 1.2 itojun in6_rtchange(in6p, errno)
728 1.2 itojun struct in6pcb *in6p;
729 1.2 itojun int errno;
730 1.2 itojun {
731 1.2 itojun if (in6p->in6p_route.ro_rt) {
732 1.2 itojun rtfree(in6p->in6p_route.ro_rt);
733 1.2 itojun in6p->in6p_route.ro_rt = 0;
734 1.2 itojun /*
735 1.2 itojun * A new route can be allocated the next time
736 1.2 itojun * output is attempted.
737 1.2 itojun */
738 1.2 itojun }
739 1.2 itojun }
740 1.2 itojun
741 1.2 itojun struct in6pcb *
742 1.2 itojun in6_pcblookup(head, faddr6, fport_arg, laddr6, lport_arg, flags)
743 1.2 itojun struct in6pcb *head;
744 1.2 itojun struct in6_addr *faddr6, *laddr6;
745 1.2 itojun u_int fport_arg, lport_arg;
746 1.2 itojun int flags;
747 1.2 itojun {
748 1.2 itojun struct in6pcb *in6p, *match = 0;
749 1.2 itojun int matchwild = 3, wildcard;
750 1.18 itojun u_int16_t fport = fport_arg, lport = lport_arg;
751 1.2 itojun
752 1.2 itojun for (in6p = head->in6p_next; in6p != head; in6p = in6p->in6p_next) {
753 1.2 itojun if (in6p->in6p_lport != lport)
754 1.2 itojun continue;
755 1.2 itojun wildcard = 0;
756 1.10 itojun if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) {
757 1.10 itojun if (IN6_IS_ADDR_UNSPECIFIED(laddr6))
758 1.2 itojun wildcard++;
759 1.2 itojun else if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, laddr6))
760 1.2 itojun continue;
761 1.11 itojun }
762 1.11 itojun else if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr)
763 1.11 itojun && in6p->in6p_laddr.s6_addr32[3] == 0) {
764 1.11 itojun if (!IN6_IS_ADDR_V4MAPPED(laddr6))
765 1.11 itojun continue;
766 1.11 itojun if (laddr6->s6_addr32[3] == 0)
767 1.11 itojun ;
768 1.11 itojun else
769 1.11 itojun wildcard++;
770 1.11 itojun }
771 1.11 itojun else {
772 1.11 itojun if (IN6_IS_ADDR_V4MAPPED(laddr6)) {
773 1.41 itojun if (in6p->in6p_flags & IN6P_IPV6_V6ONLY)
774 1.11 itojun continue;
775 1.11 itojun else
776 1.11 itojun wildcard++;
777 1.11 itojun } else if (!IN6_IS_ADDR_UNSPECIFIED(laddr6))
778 1.2 itojun wildcard++;
779 1.2 itojun }
780 1.10 itojun if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr)) {
781 1.10 itojun if (IN6_IS_ADDR_UNSPECIFIED(faddr6))
782 1.2 itojun wildcard++;
783 1.2 itojun else if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, faddr6)
784 1.2 itojun || in6p->in6p_fport != fport)
785 1.2 itojun continue;
786 1.11 itojun }
787 1.11 itojun else if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_faddr)
788 1.11 itojun && in6p->in6p_faddr.s6_addr32[3] == 0) {
789 1.11 itojun if (!IN6_IS_ADDR_V4MAPPED(faddr6))
790 1.11 itojun continue;
791 1.11 itojun if (faddr6->s6_addr32[3] == 0)
792 1.11 itojun ;
793 1.11 itojun else
794 1.11 itojun wildcard++;
795 1.11 itojun }
796 1.11 itojun else {
797 1.11 itojun if (IN6_IS_ADDR_V4MAPPED(faddr6)) {
798 1.41 itojun if (in6p->in6p_flags & IN6P_IPV6_V6ONLY)
799 1.11 itojun continue;
800 1.11 itojun else
801 1.11 itojun wildcard++;
802 1.11 itojun } else if (!IN6_IS_ADDR_UNSPECIFIED(faddr6))
803 1.2 itojun wildcard++;
804 1.2 itojun }
805 1.11 itojun
806 1.2 itojun if (wildcard && (flags & IN6PLOOKUP_WILDCARD) == 0)
807 1.2 itojun continue;
808 1.2 itojun if (wildcard < matchwild) {
809 1.2 itojun match = in6p;
810 1.2 itojun matchwild = wildcard;
811 1.2 itojun if (matchwild == 0)
812 1.2 itojun break;
813 1.2 itojun }
814 1.2 itojun }
815 1.2 itojun return(match);
816 1.2 itojun }
817 1.2 itojun
818 1.2 itojun struct rtentry *
819 1.2 itojun in6_pcbrtentry(in6p)
820 1.2 itojun struct in6pcb *in6p;
821 1.2 itojun {
822 1.2 itojun struct route_in6 *ro;
823 1.34 itojun struct sockaddr_in6 *dst6;
824 1.2 itojun
825 1.2 itojun ro = &in6p->in6p_route;
826 1.34 itojun dst6 = (struct sockaddr_in6 *)&ro->ro_dst;
827 1.2 itojun
828 1.2 itojun if (ro->ro_rt == NULL) {
829 1.2 itojun /*
830 1.2 itojun * No route yet, so try to acquire one.
831 1.2 itojun */
832 1.2 itojun if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr)) {
833 1.34 itojun bzero(dst6, sizeof(*dst6));
834 1.34 itojun dst6->sin6_family = AF_INET6;
835 1.34 itojun dst6->sin6_len = sizeof(struct sockaddr_in6);
836 1.34 itojun dst6->sin6_addr = in6p->in6p_faddr;
837 1.2 itojun rtalloc((struct route *)ro);
838 1.2 itojun }
839 1.2 itojun }
840 1.2 itojun return (ro->ro_rt);
841 1.2 itojun }
842 1.2 itojun
843 1.2 itojun struct in6pcb *
844 1.8 itojun in6_pcblookup_connect(head, faddr6, fport_arg, laddr6, lport_arg, faith)
845 1.2 itojun struct in6pcb *head;
846 1.2 itojun struct in6_addr *faddr6, *laddr6;
847 1.2 itojun u_int fport_arg, lport_arg;
848 1.8 itojun int faith;
849 1.2 itojun {
850 1.2 itojun struct in6pcb *in6p;
851 1.18 itojun u_int16_t fport = fport_arg, lport = lport_arg;
852 1.2 itojun
853 1.2 itojun for (in6p = head->in6p_next; in6p != head; in6p = in6p->in6p_next) {
854 1.2 itojun /* find exact match on both source and dest */
855 1.2 itojun if (in6p->in6p_fport != fport)
856 1.2 itojun continue;
857 1.2 itojun if (in6p->in6p_lport != lport)
858 1.2 itojun continue;
859 1.2 itojun if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr))
860 1.2 itojun continue;
861 1.2 itojun if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, faddr6))
862 1.2 itojun continue;
863 1.2 itojun if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr))
864 1.2 itojun continue;
865 1.2 itojun if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, laddr6))
866 1.2 itojun continue;
867 1.41 itojun if ((IN6_IS_ADDR_V4MAPPED(laddr6) ||
868 1.41 itojun IN6_IS_ADDR_V4MAPPED(faddr6)) &&
869 1.41 itojun (in6p->in6p_flags & IN6P_IPV6_V6ONLY))
870 1.41 itojun continue;
871 1.2 itojun return in6p;
872 1.2 itojun }
873 1.2 itojun return NULL;
874 1.2 itojun }
875 1.2 itojun
876 1.2 itojun struct in6pcb *
877 1.8 itojun in6_pcblookup_bind(head, laddr6, lport_arg, faith)
878 1.2 itojun struct in6pcb *head;
879 1.2 itojun struct in6_addr *laddr6;
880 1.2 itojun u_int lport_arg;
881 1.8 itojun int faith;
882 1.2 itojun {
883 1.2 itojun struct in6pcb *in6p, *match;
884 1.18 itojun u_int16_t lport = lport_arg;
885 1.2 itojun
886 1.2 itojun match = NULL;
887 1.2 itojun for (in6p = head->in6p_next; in6p != head; in6p = in6p->in6p_next) {
888 1.2 itojun /*
889 1.2 itojun * find destination match. exact match is preferred
890 1.2 itojun * against wildcard match.
891 1.2 itojun */
892 1.8 itojun if (faith && (in6p->in6p_flags & IN6P_FAITH) == 0)
893 1.8 itojun continue;
894 1.2 itojun if (in6p->in6p_fport != 0)
895 1.2 itojun continue;
896 1.2 itojun if (in6p->in6p_lport != lport)
897 1.2 itojun continue;
898 1.11 itojun if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) {
899 1.11 itojun if (IN6_IS_ADDR_V4MAPPED(laddr6)) {
900 1.41 itojun if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY))
901 1.11 itojun continue;
902 1.11 itojun else
903 1.11 itojun match = in6p;
904 1.11 itojun } else
905 1.11 itojun match = in6p;
906 1.11 itojun }
907 1.20 itojun else if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr) &&
908 1.41 itojun !(in6p->in6p_flags & IN6P_IPV6_V6ONLY) &&
909 1.11 itojun in6p->in6p_laddr.s6_addr32[3] == 0) {
910 1.20 itojun if (IN6_IS_ADDR_V4MAPPED(laddr6) &&
911 1.20 itojun laddr6->s6_addr32[3] != 0)
912 1.11 itojun match = in6p;
913 1.11 itojun }
914 1.2 itojun else if (IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, laddr6))
915 1.2 itojun return in6p;
916 1.2 itojun }
917 1.2 itojun return match;
918 1.2 itojun }
919