in6_pcb.c revision 1.72 1 1.72 ad /* $NetBSD: in6_pcb.c,v 1.72 2006/07/23 22:06:13 ad Exp $ */
2 1.35 itojun /* $KAME: in6_pcb.c,v 1.84 2001/02/08 18:02:08 itojun Exp $ */
3 1.5 thorpej
4 1.2 itojun /*
5 1.2 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6 1.2 itojun * All rights reserved.
7 1.23 itojun *
8 1.2 itojun * Redistribution and use in source and binary forms, with or without
9 1.2 itojun * modification, are permitted provided that the following conditions
10 1.2 itojun * are met:
11 1.2 itojun * 1. Redistributions of source code must retain the above copyright
12 1.2 itojun * notice, this list of conditions and the following disclaimer.
13 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
14 1.2 itojun * notice, this list of conditions and the following disclaimer in the
15 1.2 itojun * documentation and/or other materials provided with the distribution.
16 1.2 itojun * 3. Neither the name of the project nor the names of its contributors
17 1.2 itojun * may be used to endorse or promote products derived from this software
18 1.2 itojun * without specific prior written permission.
19 1.23 itojun *
20 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.2 itojun * SUCH DAMAGE.
31 1.2 itojun */
32 1.2 itojun
33 1.2 itojun /*
34 1.2 itojun * Copyright (c) 1982, 1986, 1991, 1993
35 1.2 itojun * The Regents of the University of California. All rights reserved.
36 1.2 itojun *
37 1.2 itojun * Redistribution and use in source and binary forms, with or without
38 1.2 itojun * modification, are permitted provided that the following conditions
39 1.2 itojun * are met:
40 1.2 itojun * 1. Redistributions of source code must retain the above copyright
41 1.2 itojun * notice, this list of conditions and the following disclaimer.
42 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
43 1.2 itojun * notice, this list of conditions and the following disclaimer in the
44 1.2 itojun * documentation and/or other materials provided with the distribution.
45 1.54 agc * 3. Neither the name of the University nor the names of its contributors
46 1.2 itojun * may be used to endorse or promote products derived from this software
47 1.2 itojun * without specific prior written permission.
48 1.2 itojun *
49 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
50 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
51 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
52 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
53 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
54 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
55 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
56 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
57 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
58 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
59 1.2 itojun * SUCH DAMAGE.
60 1.2 itojun *
61 1.2 itojun * @(#)in_pcb.c 8.2 (Berkeley) 1/4/94
62 1.2 itojun */
63 1.44 lukem
64 1.44 lukem #include <sys/cdefs.h>
65 1.72 ad __KERNEL_RCSID(0, "$NetBSD: in6_pcb.c,v 1.72 2006/07/23 22:06:13 ad Exp $");
66 1.7 thorpej
67 1.53 perry #include "opt_inet.h"
68 1.7 thorpej #include "opt_ipsec.h"
69 1.2 itojun
70 1.2 itojun #include <sys/param.h>
71 1.2 itojun #include <sys/systm.h>
72 1.2 itojun #include <sys/malloc.h>
73 1.2 itojun #include <sys/mbuf.h>
74 1.2 itojun #include <sys/protosw.h>
75 1.2 itojun #include <sys/socket.h>
76 1.2 itojun #include <sys/socketvar.h>
77 1.2 itojun #include <sys/ioctl.h>
78 1.2 itojun #include <sys/errno.h>
79 1.2 itojun #include <sys/time.h>
80 1.2 itojun #include <sys/proc.h>
81 1.71 elad #include <sys/kauth.h>
82 1.2 itojun
83 1.2 itojun #include <net/if.h>
84 1.2 itojun #include <net/route.h>
85 1.2 itojun
86 1.2 itojun #include <netinet/in.h>
87 1.2 itojun #include <netinet/in_var.h>
88 1.2 itojun #include <netinet/in_systm.h>
89 1.2 itojun #include <netinet/ip.h>
90 1.2 itojun #include <netinet/in_pcb.h>
91 1.19 itojun #include <netinet/ip6.h>
92 1.11 itojun #include <netinet6/ip6_var.h>
93 1.2 itojun #include <netinet6/in6_pcb.h>
94 1.69 rpaulo #include <netinet6/scope6_var.h>
95 1.2 itojun #include <netinet6/nd6.h>
96 1.2 itojun
97 1.8 itojun #include "faith.h"
98 1.2 itojun
99 1.2 itojun #ifdef IPSEC
100 1.2 itojun #include <netinet6/ipsec.h>
101 1.2 itojun #include <netkey/key.h>
102 1.2 itojun #endif /* IPSEC */
103 1.2 itojun
104 1.64 jonathan #ifdef FAST_IPSEC
105 1.64 jonathan #include <netipsec/ipsec.h>
106 1.64 jonathan #include <netipsec/ipsec6.h>
107 1.64 jonathan #include <netipsec/key.h>
108 1.64 jonathan #endif /* FAST_IPSEC */
109 1.64 jonathan
110 1.2 itojun struct in6_addr zeroin6_addr;
111 1.30 itojun
112 1.60 itojun #define IN6PCBHASH_PORT(table, lport) \
113 1.60 itojun &(table)->inpt_porthashtbl[ntohs(lport) & (table)->inpt_porthash]
114 1.56 itojun #define IN6PCBHASH_BIND(table, laddr, lport) \
115 1.56 itojun &(table)->inpt_bindhashtbl[ \
116 1.56 itojun (((laddr)->s6_addr32[0] ^ (laddr)->s6_addr32[1] ^ \
117 1.56 itojun (laddr)->s6_addr32[2] ^ (laddr)->s6_addr32[3]) + ntohs(lport)) & \
118 1.56 itojun (table)->inpt_bindhash]
119 1.56 itojun #define IN6PCBHASH_CONNECT(table, faddr, fport, laddr, lport) \
120 1.56 itojun &(table)->inpt_bindhashtbl[ \
121 1.56 itojun ((((faddr)->s6_addr32[0] ^ (faddr)->s6_addr32[1] ^ \
122 1.56 itojun (faddr)->s6_addr32[2] ^ (faddr)->s6_addr32[3]) + ntohs(fport)) + \
123 1.56 itojun (((laddr)->s6_addr32[0] ^ (laddr)->s6_addr32[1] ^ \
124 1.56 itojun (laddr)->s6_addr32[2] ^ (laddr)->s6_addr32[3]) + \
125 1.56 itojun ntohs(lport))) & (table)->inpt_bindhash]
126 1.56 itojun
127 1.30 itojun int ip6_anonportmin = IPV6PORT_ANONMIN;
128 1.30 itojun int ip6_anonportmax = IPV6PORT_ANONMAX;
129 1.30 itojun int ip6_lowportmin = IPV6PORT_RESERVEDMIN;
130 1.30 itojun int ip6_lowportmax = IPV6PORT_RESERVEDMAX;
131 1.2 itojun
132 1.63 simonb POOL_INIT(in6pcb_pool, sizeof(struct in6pcb), 0, 0, 0, "in6pcbpl", NULL);
133 1.56 itojun
134 1.56 itojun void
135 1.56 itojun in6_pcbinit(table, bindhashsize, connecthashsize)
136 1.56 itojun struct inpcbtable *table;
137 1.56 itojun int bindhashsize, connecthashsize;
138 1.56 itojun {
139 1.56 itojun
140 1.56 itojun in_pcbinit(table, bindhashsize, connecthashsize);
141 1.56 itojun table->inpt_lastport = (u_int16_t)ip6_anonportmax;
142 1.56 itojun }
143 1.56 itojun
144 1.2 itojun int
145 1.56 itojun in6_pcballoc(so, v)
146 1.2 itojun struct socket *so;
147 1.56 itojun void *v;
148 1.2 itojun {
149 1.56 itojun struct inpcbtable *table = v;
150 1.2 itojun struct in6pcb *in6p;
151 1.46 itojun int s;
152 1.64 jonathan #if defined(IPSEC) || defined(FAST_IPSEC)
153 1.39 itojun int error;
154 1.39 itojun #endif
155 1.2 itojun
156 1.56 itojun in6p = pool_get(&in6pcb_pool, PR_NOWAIT);
157 1.2 itojun if (in6p == NULL)
158 1.52 itojun return (ENOBUFS);
159 1.2 itojun bzero((caddr_t)in6p, sizeof(*in6p));
160 1.56 itojun in6p->in6p_af = AF_INET6;
161 1.56 itojun in6p->in6p_table = table;
162 1.2 itojun in6p->in6p_socket = so;
163 1.2 itojun in6p->in6p_hops = -1; /* use kernel default */
164 1.2 itojun in6p->in6p_icmp6filt = NULL;
165 1.64 jonathan #if defined(IPSEC) || defined(FAST_IPSEC)
166 1.49 itojun error = ipsec_init_pcbpolicy(so, &in6p->in6p_sp);
167 1.39 itojun if (error != 0) {
168 1.56 itojun pool_put(&in6pcb_pool, in6p);
169 1.39 itojun return error;
170 1.39 itojun }
171 1.43 itojun #endif /* IPSEC */
172 1.46 itojun s = splnet();
173 1.56 itojun CIRCLEQ_INSERT_HEAD(&table->inpt_queue, (struct inpcb_hdr*)in6p,
174 1.56 itojun inph_queue);
175 1.60 itojun LIST_INSERT_HEAD(IN6PCBHASH_PORT(table, in6p->in6p_lport),
176 1.60 itojun &in6p->in6p_head, inph_lhash);
177 1.56 itojun in6_pcbstate(in6p, IN6P_ATTACHED);
178 1.46 itojun splx(s);
179 1.41 itojun if (ip6_v6only)
180 1.41 itojun in6p->in6p_flags |= IN6P_IPV6_V6ONLY;
181 1.2 itojun so->so_pcb = (caddr_t)in6p;
182 1.52 itojun return (0);
183 1.2 itojun }
184 1.2 itojun
185 1.2 itojun int
186 1.72 ad in6_pcbbind(v, nam, l)
187 1.56 itojun void *v;
188 1.2 itojun struct mbuf *nam;
189 1.72 ad struct lwp *l;
190 1.2 itojun {
191 1.56 itojun struct in6pcb *in6p = v;
192 1.2 itojun struct socket *so = in6p->in6p_socket;
193 1.56 itojun struct inpcbtable *table = in6p->in6p_table;
194 1.2 itojun struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)NULL;
195 1.18 itojun u_int16_t lport = 0;
196 1.2 itojun int wild = 0, reuseport = (so->so_options & SO_REUSEPORT);
197 1.2 itojun
198 1.56 itojun if (in6p->in6p_af != AF_INET6)
199 1.56 itojun return (EINVAL);
200 1.56 itojun
201 1.10 itojun if (in6p->in6p_lport || !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr))
202 1.52 itojun return (EINVAL);
203 1.2 itojun if ((so->so_options & (SO_REUSEADDR|SO_REUSEPORT)) == 0 &&
204 1.2 itojun ((so->so_proto->pr_flags & PR_CONNREQUIRED) == 0 ||
205 1.2 itojun (so->so_options & SO_ACCEPTCONN) == 0))
206 1.56 itojun wild = 1;
207 1.2 itojun if (nam) {
208 1.69 rpaulo int error;
209 1.69 rpaulo
210 1.2 itojun sin6 = mtod(nam, struct sockaddr_in6 *);
211 1.2 itojun if (nam->m_len != sizeof(*sin6))
212 1.52 itojun return (EINVAL);
213 1.2 itojun /*
214 1.2 itojun * We should check the family, but old programs
215 1.2 itojun * incorrectly fail to intialize it.
216 1.2 itojun */
217 1.2 itojun if (sin6->sin6_family != AF_INET6)
218 1.52 itojun return (EAFNOSUPPORT);
219 1.22 itojun
220 1.56 itojun #ifndef INET
221 1.22 itojun if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr))
222 1.52 itojun return (EADDRNOTAVAIL);
223 1.56 itojun #endif
224 1.2 itojun
225 1.69 rpaulo if ((error = sa6_embedscope(sin6, ip6_use_defzone)) != 0)
226 1.69 rpaulo return (error);
227 1.2 itojun
228 1.2 itojun lport = sin6->sin6_port;
229 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)) {
230 1.2 itojun /*
231 1.2 itojun * Treat SO_REUSEADDR as SO_REUSEPORT for multicast;
232 1.2 itojun * allow compepte duplication of binding if
233 1.2 itojun * SO_REUSEPORT is set, or if SO_REUSEADDR is set
234 1.2 itojun * and a multicast address is bound on both
235 1.2 itojun * new and duplicated sockets.
236 1.2 itojun */
237 1.2 itojun if (so->so_options & SO_REUSEADDR)
238 1.2 itojun reuseport = SO_REUSEADDR|SO_REUSEPORT;
239 1.69 rpaulo } else if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
240 1.56 itojun if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY) != 0)
241 1.56 itojun return (EINVAL);
242 1.56 itojun if (sin6->sin6_addr.s6_addr32[3]) {
243 1.56 itojun struct sockaddr_in sin;
244 1.56 itojun
245 1.56 itojun bzero(&sin, sizeof(sin));
246 1.56 itojun sin.sin_len = sizeof(sin);
247 1.56 itojun sin.sin_family = AF_INET;
248 1.56 itojun bcopy(&sin6->sin6_addr.s6_addr32[3],
249 1.56 itojun &sin.sin_addr, sizeof(sin.sin_addr));
250 1.56 itojun if (ifa_ifwithaddr((struct sockaddr *)&sin) == 0)
251 1.56 itojun return EADDRNOTAVAIL;
252 1.56 itojun }
253 1.69 rpaulo } else if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
254 1.2 itojun struct ifaddr *ia = NULL;
255 1.2 itojun
256 1.2 itojun sin6->sin6_port = 0; /* yech... */
257 1.36 itojun if ((in6p->in6p_flags & IN6P_FAITH) == 0 &&
258 1.36 itojun (ia = ifa_ifwithaddr((struct sockaddr *)sin6)) == 0)
259 1.52 itojun return (EADDRNOTAVAIL);
260 1.2 itojun
261 1.2 itojun /*
262 1.45 itojun * bind to an anycast address might accidentally
263 1.45 itojun * cause sending a packet with an anycast source
264 1.45 itojun * address, so we forbid it.
265 1.50 itojun *
266 1.50 itojun * We should allow to bind to a deprecated address,
267 1.50 itojun * since the application dare to use it.
268 1.50 itojun * But, can we assume that they are careful enough
269 1.50 itojun * to check if the address is deprecated or not?
270 1.50 itojun * Maybe, as a safeguard, we should have a setsockopt
271 1.50 itojun * flag to control the bind(2) behavior against
272 1.50 itojun * deprecated addresses (default: forbid bind(2)).
273 1.2 itojun */
274 1.20 itojun if (ia &&
275 1.20 itojun ((struct in6_ifaddr *)ia)->ia6_flags &
276 1.50 itojun (IN6_IFF_ANYCAST|IN6_IFF_NOTREADY|IN6_IFF_DETACHED))
277 1.52 itojun return (EADDRNOTAVAIL);
278 1.2 itojun }
279 1.2 itojun if (lport) {
280 1.13 itojun #ifndef IPNOPRIVPORTS
281 1.29 itojun int priv;
282 1.29 itojun
283 1.29 itojun /*
284 1.29 itojun * NOTE: all operating systems use suser() for
285 1.29 itojun * privilege check! do not rewrite it into SS_PRIV.
286 1.29 itojun */
287 1.72 ad priv = (l && !kauth_authorize_generic(l->l_cred,
288 1.72 ad KAUTH_GENERIC_ISSUSER, &l->l_acflag)) ? 1 : 0;
289 1.2 itojun /* GROSS */
290 1.29 itojun if (ntohs(lport) < IPV6PORT_RESERVED && !priv)
291 1.52 itojun return (EACCES);
292 1.13 itojun #endif
293 1.2 itojun
294 1.2 itojun if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
295 1.56 itojun #ifdef INET
296 1.2 itojun struct inpcb *t;
297 1.2 itojun
298 1.56 itojun t = in_pcblookup_port(table,
299 1.56 itojun *(struct in_addr *)&sin6->sin6_addr.s6_addr32[3],
300 1.56 itojun lport, wild);
301 1.2 itojun if (t && (reuseport & t->inp_socket->so_options) == 0)
302 1.56 itojun return (EADDRINUSE);
303 1.56 itojun #else
304 1.56 itojun return (EADDRNOTAVAIL);
305 1.2 itojun #endif
306 1.56 itojun }
307 1.56 itojun
308 1.42 itojun {
309 1.2 itojun struct in6pcb *t;
310 1.2 itojun
311 1.56 itojun t = in6_pcblookup_port(table, &sin6->sin6_addr,
312 1.56 itojun lport, wild);
313 1.2 itojun if (t && (reuseport & t->in6p_socket->so_options) == 0)
314 1.52 itojun return (EADDRINUSE);
315 1.2 itojun }
316 1.2 itojun }
317 1.2 itojun in6p->in6p_laddr = sin6->sin6_addr;
318 1.2 itojun }
319 1.10 itojun
320 1.2 itojun if (lport == 0) {
321 1.10 itojun int e;
322 1.72 ad e = in6_pcbsetport(&in6p->in6p_laddr, in6p, l);
323 1.56 itojun if (e != 0)
324 1.52 itojun return (e);
325 1.56 itojun } else {
326 1.56 itojun in6p->in6p_lport = lport;
327 1.56 itojun in6_pcbstate(in6p, IN6P_BOUND);
328 1.10 itojun }
329 1.10 itojun
330 1.60 itojun LIST_REMOVE(&in6p->in6p_head, inph_lhash);
331 1.60 itojun LIST_INSERT_HEAD(IN6PCBHASH_PORT(table, in6p->in6p_lport),
332 1.60 itojun &in6p->in6p_head, inph_lhash);
333 1.60 itojun
334 1.57 itojun #if 0
335 1.57 itojun in6p->in6p_flowinfo = 0; /* XXX */
336 1.57 itojun #endif
337 1.52 itojun return (0);
338 1.10 itojun }
339 1.10 itojun
340 1.10 itojun /*
341 1.2 itojun * Connect from a socket to a specified address.
342 1.2 itojun * Both address and port must be specified in argument sin6.
343 1.2 itojun * If don't have a local address for this socket yet,
344 1.2 itojun * then pick one.
345 1.2 itojun */
346 1.2 itojun int
347 1.72 ad in6_pcbconnect(v, nam, l)
348 1.56 itojun void *v;
349 1.2 itojun struct mbuf *nam;
350 1.72 ad struct lwp *l;
351 1.2 itojun {
352 1.56 itojun struct in6pcb *in6p = v;
353 1.2 itojun struct in6_addr *in6a = NULL;
354 1.2 itojun struct sockaddr_in6 *sin6 = mtod(nam, struct sockaddr_in6 *);
355 1.2 itojun struct ifnet *ifp = NULL; /* outgoing interface */
356 1.2 itojun int error = 0;
357 1.69 rpaulo int scope_ambiguous = 0;
358 1.31 itojun #ifdef INET
359 1.2 itojun struct in6_addr mapped;
360 1.31 itojun #endif
361 1.26 itojun struct sockaddr_in6 tmp;
362 1.2 itojun
363 1.2 itojun (void)&in6a; /* XXX fool gcc */
364 1.2 itojun
365 1.56 itojun if (in6p->in6p_af != AF_INET6)
366 1.56 itojun return (EINVAL);
367 1.56 itojun
368 1.2 itojun if (nam->m_len != sizeof(*sin6))
369 1.52 itojun return (EINVAL);
370 1.2 itojun if (sin6->sin6_family != AF_INET6)
371 1.52 itojun return (EAFNOSUPPORT);
372 1.2 itojun if (sin6->sin6_port == 0)
373 1.52 itojun return (EADDRNOTAVAIL);
374 1.2 itojun
375 1.69 rpaulo if (sin6->sin6_scope_id == 0 && !ip6_use_defzone)
376 1.69 rpaulo scope_ambiguous = 1;
377 1.69 rpaulo if ((error = sa6_embedscope(sin6, ip6_use_defzone)) != 0)
378 1.69 rpaulo return(error);
379 1.69 rpaulo
380 1.2 itojun /* sanity check for mapped address case */
381 1.2 itojun if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
382 1.41 itojun if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY) != 0)
383 1.41 itojun return EINVAL;
384 1.2 itojun if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr))
385 1.2 itojun in6p->in6p_laddr.s6_addr16[5] = htons(0xffff);
386 1.2 itojun if (!IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr))
387 1.2 itojun return EINVAL;
388 1.41 itojun } else
389 1.41 itojun {
390 1.2 itojun if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr))
391 1.2 itojun return EINVAL;
392 1.2 itojun }
393 1.26 itojun
394 1.26 itojun /* protect *sin6 from overwrites */
395 1.26 itojun tmp = *sin6;
396 1.26 itojun sin6 = &tmp;
397 1.2 itojun
398 1.2 itojun /* Source address selection. */
399 1.56 itojun if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr) &&
400 1.56 itojun in6p->in6p_laddr.s6_addr32[3] == 0) {
401 1.31 itojun #ifdef INET
402 1.2 itojun struct sockaddr_in sin, *sinp;
403 1.2 itojun
404 1.2 itojun bzero(&sin, sizeof(sin));
405 1.2 itojun sin.sin_len = sizeof(sin);
406 1.2 itojun sin.sin_family = AF_INET;
407 1.2 itojun bcopy(&sin6->sin6_addr.s6_addr32[3], &sin.sin_addr,
408 1.2 itojun sizeof(sin.sin_addr));
409 1.2 itojun sinp = in_selectsrc(&sin, (struct route *)&in6p->in6p_route,
410 1.2 itojun in6p->in6p_socket->so_options, NULL, &error);
411 1.2 itojun if (sinp == 0) {
412 1.2 itojun if (error == 0)
413 1.2 itojun error = EADDRNOTAVAIL;
414 1.52 itojun return (error);
415 1.2 itojun }
416 1.2 itojun bzero(&mapped, sizeof(mapped));
417 1.2 itojun mapped.s6_addr16[5] = htons(0xffff);
418 1.2 itojun bcopy(&sinp->sin_addr, &mapped.s6_addr32[3], sizeof(sinp->sin_addr));
419 1.2 itojun in6a = &mapped;
420 1.31 itojun #else
421 1.31 itojun return EADDRNOTAVAIL;
422 1.31 itojun #endif
423 1.69 rpaulo } else {
424 1.10 itojun /*
425 1.10 itojun * XXX: in6_selectsrc might replace the bound local address
426 1.10 itojun * with the address specified by setsockopt(IPV6_PKTINFO).
427 1.10 itojun * Is it the intended behavior?
428 1.10 itojun */
429 1.2 itojun in6a = in6_selectsrc(sin6, in6p->in6p_outputopts,
430 1.10 itojun in6p->in6p_moptions,
431 1.10 itojun &in6p->in6p_route,
432 1.69 rpaulo &in6p->in6p_laddr, &ifp, &error);
433 1.69 rpaulo if (ifp && scope_ambiguous &&
434 1.69 rpaulo (error = in6_setscope(&sin6->sin6_addr, ifp, NULL)) != 0) {
435 1.69 rpaulo return(error);
436 1.69 rpaulo }
437 1.69 rpaulo
438 1.2 itojun if (in6a == 0) {
439 1.2 itojun if (error == 0)
440 1.2 itojun error = EADDRNOTAVAIL;
441 1.52 itojun return (error);
442 1.2 itojun }
443 1.2 itojun }
444 1.69 rpaulo if (ifp == NULL && in6p->in6p_route.ro_rt)
445 1.2 itojun ifp = in6p->in6p_route.ro_rt->rt_ifp;
446 1.2 itojun
447 1.10 itojun in6p->in6p_ip6.ip6_hlim = (u_int8_t)in6_selecthlim(in6p, ifp);
448 1.2 itojun
449 1.56 itojun if (in6_pcblookup_connect(in6p->in6p_table, &sin6->sin6_addr,
450 1.56 itojun sin6->sin6_port,
451 1.56 itojun IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) ? in6a : &in6p->in6p_laddr,
452 1.56 itojun in6p->in6p_lport, 0))
453 1.52 itojun return (EADDRINUSE);
454 1.56 itojun if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) ||
455 1.56 itojun (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr) &&
456 1.56 itojun in6p->in6p_laddr.s6_addr32[3] == 0))
457 1.41 itojun {
458 1.29 itojun if (in6p->in6p_lport == 0) {
459 1.72 ad error = in6_pcbbind(in6p, (struct mbuf *)0, l);
460 1.68 dsl if (error != 0)
461 1.68 dsl return error;
462 1.29 itojun }
463 1.2 itojun in6p->in6p_laddr = *in6a;
464 1.2 itojun }
465 1.2 itojun in6p->in6p_faddr = sin6->sin6_addr;
466 1.2 itojun in6p->in6p_fport = sin6->sin6_port;
467 1.56 itojun in6_pcbstate(in6p, IN6P_CONNECTED);
468 1.57 itojun in6p->in6p_flowinfo &= ~IPV6_FLOWLABEL_MASK;
469 1.57 itojun if (ip6_auto_flowlabel)
470 1.57 itojun in6p->in6p_flowinfo |=
471 1.58 itojun (htonl(ip6_randomflowlabel()) & IPV6_FLOWLABEL_MASK);
472 1.64 jonathan #if defined(IPSEC) || defined(FAST_IPSEC)
473 1.40 itojun if (in6p->in6p_socket->so_type == SOCK_STREAM)
474 1.40 itojun ipsec_pcbconn(in6p->in6p_sp);
475 1.40 itojun #endif
476 1.52 itojun return (0);
477 1.2 itojun }
478 1.2 itojun
479 1.2 itojun void
480 1.2 itojun in6_pcbdisconnect(in6p)
481 1.2 itojun struct in6pcb *in6p;
482 1.2 itojun {
483 1.2 itojun bzero((caddr_t)&in6p->in6p_faddr, sizeof(in6p->in6p_faddr));
484 1.2 itojun in6p->in6p_fport = 0;
485 1.56 itojun in6_pcbstate(in6p, IN6P_BOUND);
486 1.57 itojun in6p->in6p_flowinfo &= ~IPV6_FLOWLABEL_MASK;
487 1.64 jonathan #if defined(IPSEC) || defined(FAST_IPSEC)
488 1.40 itojun ipsec_pcbdisconn(in6p->in6p_sp);
489 1.40 itojun #endif
490 1.61 itojun if (in6p->in6p_socket->so_state & SS_NOFDREF)
491 1.61 itojun in6_pcbdetach(in6p);
492 1.2 itojun }
493 1.2 itojun
494 1.2 itojun void
495 1.2 itojun in6_pcbdetach(in6p)
496 1.2 itojun struct in6pcb *in6p;
497 1.2 itojun {
498 1.2 itojun struct socket *so = in6p->in6p_socket;
499 1.46 itojun int s;
500 1.2 itojun
501 1.56 itojun if (in6p->in6p_af != AF_INET6)
502 1.56 itojun return;
503 1.56 itojun
504 1.64 jonathan #if defined(IPSEC) || defined(FAST_IPSEC)
505 1.2 itojun ipsec6_delete_pcbpolicy(in6p);
506 1.2 itojun #endif /* IPSEC */
507 1.65 drochner so->so_pcb = 0;
508 1.2 itojun sofree(so);
509 1.2 itojun if (in6p->in6p_options)
510 1.2 itojun m_freem(in6p->in6p_options);
511 1.2 itojun if (in6p->in6p_outputopts) {
512 1.2 itojun if (in6p->in6p_outputopts->ip6po_rthdr &&
513 1.2 itojun in6p->in6p_outputopts->ip6po_route.ro_rt)
514 1.2 itojun RTFREE(in6p->in6p_outputopts->ip6po_route.ro_rt);
515 1.2 itojun if (in6p->in6p_outputopts->ip6po_m)
516 1.2 itojun (void)m_free(in6p->in6p_outputopts->ip6po_m);
517 1.2 itojun free(in6p->in6p_outputopts, M_IP6OPT);
518 1.2 itojun }
519 1.2 itojun if (in6p->in6p_route.ro_rt)
520 1.2 itojun rtfree(in6p->in6p_route.ro_rt);
521 1.2 itojun ip6_freemoptions(in6p->in6p_moptions);
522 1.46 itojun s = splnet();
523 1.56 itojun in6_pcbstate(in6p, IN6P_ATTACHED);
524 1.60 itojun LIST_REMOVE(&in6p->in6p_head, inph_lhash);
525 1.56 itojun CIRCLEQ_REMOVE(&in6p->in6p_table->inpt_queue, &in6p->in6p_head,
526 1.56 itojun inph_queue);
527 1.46 itojun splx(s);
528 1.56 itojun pool_put(&in6pcb_pool, in6p);
529 1.2 itojun }
530 1.2 itojun
531 1.2 itojun void
532 1.2 itojun in6_setsockaddr(in6p, nam)
533 1.2 itojun struct in6pcb *in6p;
534 1.2 itojun struct mbuf *nam;
535 1.2 itojun {
536 1.2 itojun struct sockaddr_in6 *sin6;
537 1.2 itojun
538 1.56 itojun if (in6p->in6p_af != AF_INET6)
539 1.56 itojun return;
540 1.56 itojun
541 1.2 itojun nam->m_len = sizeof(*sin6);
542 1.2 itojun sin6 = mtod(nam, struct sockaddr_in6 *);
543 1.2 itojun bzero((caddr_t)sin6, sizeof(*sin6));
544 1.2 itojun sin6->sin6_family = AF_INET6;
545 1.2 itojun sin6->sin6_len = sizeof(struct sockaddr_in6);
546 1.2 itojun sin6->sin6_port = in6p->in6p_lport;
547 1.69 rpaulo sin6->sin6_addr = in6p->in6p_laddr;
548 1.69 rpaulo (void)sa6_recoverscope(sin6); /* XXX: should catch errors */
549 1.2 itojun }
550 1.2 itojun
551 1.2 itojun void
552 1.2 itojun in6_setpeeraddr(in6p, nam)
553 1.2 itojun struct in6pcb *in6p;
554 1.2 itojun struct mbuf *nam;
555 1.2 itojun {
556 1.2 itojun struct sockaddr_in6 *sin6;
557 1.2 itojun
558 1.56 itojun if (in6p->in6p_af != AF_INET6)
559 1.56 itojun return;
560 1.56 itojun
561 1.2 itojun nam->m_len = sizeof(*sin6);
562 1.2 itojun sin6 = mtod(nam, struct sockaddr_in6 *);
563 1.2 itojun bzero((caddr_t)sin6, sizeof(*sin6));
564 1.2 itojun sin6->sin6_family = AF_INET6;
565 1.2 itojun sin6->sin6_len = sizeof(struct sockaddr_in6);
566 1.2 itojun sin6->sin6_port = in6p->in6p_fport;
567 1.69 rpaulo sin6->sin6_addr = in6p->in6p_faddr;
568 1.69 rpaulo (void)sa6_recoverscope(sin6); /* XXX: should catch errors */
569 1.2 itojun }
570 1.2 itojun
571 1.2 itojun /*
572 1.2 itojun * Pass some notification to all connections of a protocol
573 1.2 itojun * associated with address dst. The local address and/or port numbers
574 1.2 itojun * may be specified to limit the search. The "usual action" will be
575 1.2 itojun * taken, depending on the ctlinput cmd. The caller must filter any
576 1.2 itojun * cmds that are uninteresting (e.g., no error in the map).
577 1.2 itojun * Call the protocol specific routine (if any) to report
578 1.2 itojun * any errors for each matching socket.
579 1.2 itojun *
580 1.6 itojun * Must be called at splsoftnet.
581 1.35 itojun *
582 1.35 itojun * Note: src (4th arg) carries the flowlabel value on the original IPv6
583 1.35 itojun * header, in sin6_flowinfo member.
584 1.2 itojun */
585 1.2 itojun int
586 1.56 itojun in6_pcbnotify(table, dst, fport_arg, src, lport_arg, cmd, cmdarg, notify)
587 1.56 itojun struct inpcbtable *table;
588 1.67 christos struct sockaddr *dst;
589 1.67 christos const struct sockaddr *src;
590 1.2 itojun u_int fport_arg, lport_arg;
591 1.2 itojun int cmd;
592 1.35 itojun void *cmdarg;
593 1.2 itojun void (*notify) __P((struct in6pcb *, int));
594 1.2 itojun {
595 1.20 itojun struct in6pcb *in6p, *nin6p;
596 1.35 itojun struct sockaddr_in6 sa6_src, *sa6_dst;
597 1.18 itojun u_int16_t fport = fport_arg, lport = lport_arg;
598 1.2 itojun int errno;
599 1.2 itojun int nmatch = 0;
600 1.35 itojun u_int32_t flowinfo;
601 1.2 itojun
602 1.59 christos if ((unsigned)cmd >= PRC_NCMDS || dst->sa_family != AF_INET6)
603 1.2 itojun return 0;
604 1.35 itojun
605 1.35 itojun sa6_dst = (struct sockaddr_in6 *)dst;
606 1.35 itojun if (IN6_IS_ADDR_UNSPECIFIED(&sa6_dst->sin6_addr))
607 1.2 itojun return 0;
608 1.2 itojun
609 1.2 itojun /*
610 1.35 itojun * note that src can be NULL when we get notify by local fragmentation.
611 1.35 itojun */
612 1.67 christos sa6_src = (src == NULL) ? sa6_any : *(const struct sockaddr_in6 *)src;
613 1.35 itojun flowinfo = sa6_src.sin6_flowinfo;
614 1.35 itojun
615 1.35 itojun /*
616 1.2 itojun * Redirects go to all references to the destination,
617 1.20 itojun * and use in6_rtchange to invalidate the route cache.
618 1.20 itojun * Dead host indications: also use in6_rtchange to invalidate
619 1.20 itojun * the cache, and deliver the error to all the sockets.
620 1.2 itojun * Otherwise, if we have knowledge of the local port and address,
621 1.2 itojun * deliver only to that socket.
622 1.2 itojun */
623 1.2 itojun if (PRC_IS_REDIRECT(cmd) || cmd == PRC_HOSTDEAD) {
624 1.2 itojun fport = 0;
625 1.2 itojun lport = 0;
626 1.35 itojun bzero((caddr_t)&sa6_src.sin6_addr, sizeof(sa6_src.sin6_addr));
627 1.20 itojun
628 1.35 itojun if (cmd != PRC_HOSTDEAD)
629 1.35 itojun notify = in6_rtchange;
630 1.2 itojun }
631 1.20 itojun
632 1.2 itojun errno = inet6ctlerrmap[cmd];
633 1.56 itojun for (in6p = (struct in6pcb *)CIRCLEQ_FIRST(&table->inpt_queue);
634 1.56 itojun in6p != (void *)&table->inpt_queue;
635 1.56 itojun in6p = nin6p) {
636 1.56 itojun nin6p = (struct in6pcb *)CIRCLEQ_NEXT(in6p, in6p_queue);
637 1.56 itojun
638 1.56 itojun if (in6p->in6p_af != AF_INET6)
639 1.56 itojun continue;
640 1.20 itojun
641 1.35 itojun /*
642 1.35 itojun * Under the following condition, notify of redirects
643 1.35 itojun * to the pcb, without making address matches against inpcb.
644 1.35 itojun * - redirect notification is arrived.
645 1.35 itojun * - the inpcb is unconnected.
646 1.35 itojun * - the inpcb is caching !RTF_HOST routing entry.
647 1.35 itojun * - the ICMPv6 notification is from the gateway cached in the
648 1.35 itojun * inpcb. i.e. ICMPv6 notification is from nexthop gateway
649 1.35 itojun * the inpcb used very recently.
650 1.35 itojun *
651 1.35 itojun * This is to improve interaction between netbsd/openbsd
652 1.35 itojun * redirect handling code, and inpcb route cache code.
653 1.35 itojun * without the clause, !RTF_HOST routing entry (which carries
654 1.35 itojun * gateway used by inpcb right before the ICMPv6 redirect)
655 1.35 itojun * will be cached forever in unconnected inpcb.
656 1.35 itojun *
657 1.35 itojun * There still is a question regarding to what is TRT:
658 1.35 itojun * - On bsdi/freebsd, RTF_HOST (cloned) routing entry will be
659 1.35 itojun * generated on packet output. inpcb will always cache
660 1.35 itojun * RTF_HOST routing entry so there's no need for the clause
661 1.35 itojun * (ICMPv6 redirect will update RTF_HOST routing entry,
662 1.35 itojun * and inpcb is caching it already).
663 1.35 itojun * However, bsdi/freebsd are vulnerable to local DoS attacks
664 1.35 itojun * due to the cloned routing entries.
665 1.35 itojun * - Specwise, "destination cache" is mentioned in RFC2461.
666 1.35 itojun * Jinmei says that it implies bsdi/freebsd behavior, itojun
667 1.35 itojun * is not really convinced.
668 1.35 itojun * - Having hiwat/lowat on # of cloned host route (redirect/
669 1.35 itojun * pmtud) may be a good idea. netbsd/openbsd has it. see
670 1.35 itojun * icmp6_mtudisc_update().
671 1.35 itojun */
672 1.35 itojun if ((PRC_IS_REDIRECT(cmd) || cmd == PRC_HOSTDEAD) &&
673 1.35 itojun IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) &&
674 1.35 itojun in6p->in6p_route.ro_rt &&
675 1.35 itojun !(in6p->in6p_route.ro_rt->rt_flags & RTF_HOST)) {
676 1.35 itojun struct sockaddr_in6 *dst6;
677 1.35 itojun
678 1.35 itojun dst6 = (struct sockaddr_in6 *)&in6p->in6p_route.ro_dst;
679 1.35 itojun if (IN6_ARE_ADDR_EQUAL(&dst6->sin6_addr,
680 1.35 itojun &sa6_dst->sin6_addr))
681 1.35 itojun goto do_notify;
682 1.20 itojun }
683 1.20 itojun
684 1.35 itojun /*
685 1.70 rpaulo * If the error designates a new path MTU for a destination
686 1.70 rpaulo * and the application (associated with this socket) wanted to
687 1.70 rpaulo * know the value, notify. Note that we notify for all
688 1.70 rpaulo * disconnected sockets if the corresponding application
689 1.70 rpaulo * wanted. This is because some UDP applications keep sending
690 1.70 rpaulo * sockets disconnected.
691 1.70 rpaulo * XXX: should we avoid to notify the value to TCP sockets?
692 1.70 rpaulo */
693 1.70 rpaulo if (cmd == PRC_MSGSIZE && (in6p->in6p_flags & IN6P_MTU) != 0 &&
694 1.70 rpaulo (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr) ||
695 1.70 rpaulo IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, &sa6_dst->sin6_addr))) {
696 1.70 rpaulo ip6_notify_pmtu(in6p, (struct sockaddr_in6 *)dst,
697 1.70 rpaulo (u_int32_t *)cmdarg);
698 1.70 rpaulo }
699 1.70 rpaulo
700 1.70 rpaulo /*
701 1.35 itojun * Detect if we should notify the error. If no source and
702 1.42 itojun * destination ports are specified, but non-zero flowinfo and
703 1.35 itojun * local address match, notify the error. This is the case
704 1.35 itojun * when the error is delivered with an encrypted buffer
705 1.35 itojun * by ESP. Otherwise, just compare addresses and ports
706 1.35 itojun * as usual.
707 1.35 itojun */
708 1.35 itojun if (lport == 0 && fport == 0 && flowinfo &&
709 1.35 itojun in6p->in6p_socket != NULL &&
710 1.35 itojun flowinfo == (in6p->in6p_flowinfo & IPV6_FLOWLABEL_MASK) &&
711 1.35 itojun IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &sa6_src.sin6_addr))
712 1.35 itojun goto do_notify;
713 1.35 itojun else if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr,
714 1.35 itojun &sa6_dst->sin6_addr) ||
715 1.20 itojun in6p->in6p_socket == 0 ||
716 1.20 itojun (lport && in6p->in6p_lport != lport) ||
717 1.35 itojun (!IN6_IS_ADDR_UNSPECIFIED(&sa6_src.sin6_addr) &&
718 1.35 itojun !IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr,
719 1.35 itojun &sa6_src.sin6_addr)) ||
720 1.20 itojun (fport && in6p->in6p_fport != fport))
721 1.2 itojun continue;
722 1.20 itojun
723 1.35 itojun do_notify:
724 1.35 itojun if (notify)
725 1.35 itojun (*notify)(in6p, errno);
726 1.2 itojun nmatch++;
727 1.2 itojun }
728 1.2 itojun return nmatch;
729 1.16 thorpej }
730 1.16 thorpej
731 1.16 thorpej void
732 1.56 itojun in6_pcbpurgeif0(table, ifp)
733 1.56 itojun struct inpcbtable *table;
734 1.16 thorpej struct ifnet *ifp;
735 1.16 thorpej {
736 1.16 thorpej struct in6pcb *in6p, *nin6p;
737 1.37 itojun struct ip6_moptions *im6o;
738 1.37 itojun struct in6_multi_mship *imm, *nimm;
739 1.16 thorpej
740 1.56 itojun for (in6p = (struct in6pcb *)CIRCLEQ_FIRST(&table->inpt_queue);
741 1.56 itojun in6p != (void *)&table->inpt_queue;
742 1.56 itojun in6p = nin6p) {
743 1.56 itojun nin6p = (struct in6pcb *)CIRCLEQ_NEXT(in6p, in6p_queue);
744 1.56 itojun if (in6p->in6p_af != AF_INET6)
745 1.56 itojun continue;
746 1.56 itojun
747 1.37 itojun im6o = in6p->in6p_moptions;
748 1.37 itojun if (im6o) {
749 1.37 itojun /*
750 1.37 itojun * Unselect the outgoing interface if it is being
751 1.37 itojun * detached.
752 1.37 itojun */
753 1.37 itojun if (im6o->im6o_multicast_ifp == ifp)
754 1.37 itojun im6o->im6o_multicast_ifp = NULL;
755 1.37 itojun
756 1.37 itojun /*
757 1.37 itojun * Drop multicast group membership if we joined
758 1.37 itojun * through the interface being detached.
759 1.37 itojun * XXX controversial - is it really legal for kernel
760 1.37 itojun * to force this?
761 1.37 itojun */
762 1.37 itojun for (imm = im6o->im6o_memberships.lh_first;
763 1.37 itojun imm != NULL; imm = nimm) {
764 1.37 itojun nimm = imm->i6mm_chain.le_next;
765 1.37 itojun if (imm->i6mm_maddr->in6m_ifp == ifp) {
766 1.37 itojun LIST_REMOVE(imm, i6mm_chain);
767 1.45 itojun in6_leavegroup(imm);
768 1.37 itojun }
769 1.37 itojun }
770 1.37 itojun }
771 1.38 itojun }
772 1.38 itojun }
773 1.38 itojun
774 1.38 itojun void
775 1.56 itojun in6_pcbpurgeif(table, ifp)
776 1.56 itojun struct inpcbtable *table;
777 1.38 itojun struct ifnet *ifp;
778 1.38 itojun {
779 1.38 itojun struct in6pcb *in6p, *nin6p;
780 1.38 itojun
781 1.56 itojun for (in6p = (struct in6pcb *)CIRCLEQ_FIRST(&table->inpt_queue);
782 1.56 itojun in6p != (void *)&table->inpt_queue;
783 1.56 itojun in6p = nin6p) {
784 1.56 itojun nin6p = (struct in6pcb *)CIRCLEQ_NEXT(in6p, in6p_queue);
785 1.56 itojun if (in6p->in6p_af != AF_INET6)
786 1.56 itojun continue;
787 1.38 itojun if (in6p->in6p_route.ro_rt != NULL &&
788 1.38 itojun in6p->in6p_route.ro_rt->rt_ifp == ifp)
789 1.38 itojun in6_rtchange(in6p, 0);
790 1.16 thorpej }
791 1.2 itojun }
792 1.2 itojun
793 1.2 itojun /*
794 1.2 itojun * Check for alternatives when higher level complains
795 1.2 itojun * about service problems. For now, invalidate cached
796 1.2 itojun * routing information. If the route was created dynamically
797 1.2 itojun * (by a redirect), time to try a default gateway again.
798 1.2 itojun */
799 1.2 itojun void
800 1.2 itojun in6_losing(in6p)
801 1.2 itojun struct in6pcb *in6p;
802 1.2 itojun {
803 1.2 itojun struct rtentry *rt;
804 1.2 itojun struct rt_addrinfo info;
805 1.2 itojun
806 1.56 itojun if (in6p->in6p_af != AF_INET6)
807 1.56 itojun return;
808 1.56 itojun
809 1.2 itojun if ((rt = in6p->in6p_route.ro_rt) != NULL) {
810 1.2 itojun in6p->in6p_route.ro_rt = 0;
811 1.2 itojun bzero((caddr_t)&info, sizeof(info));
812 1.2 itojun info.rti_info[RTAX_DST] =
813 1.2 itojun (struct sockaddr *)&in6p->in6p_route.ro_dst;
814 1.2 itojun info.rti_info[RTAX_GATEWAY] = rt->rt_gateway;
815 1.2 itojun info.rti_info[RTAX_NETMASK] = rt_mask(rt);
816 1.2 itojun rt_missmsg(RTM_LOSING, &info, rt->rt_flags, 0);
817 1.42 itojun if (rt->rt_flags & RTF_DYNAMIC) {
818 1.2 itojun (void)rtrequest(RTM_DELETE, rt_key(rt),
819 1.2 itojun rt->rt_gateway, rt_mask(rt), rt->rt_flags,
820 1.2 itojun (struct rtentry **)0);
821 1.42 itojun } else {
822 1.42 itojun /*
823 1.42 itojun * A new route can be allocated
824 1.42 itojun * the next time output is attempted.
825 1.42 itojun */
826 1.2 itojun rtfree(rt);
827 1.42 itojun }
828 1.2 itojun }
829 1.2 itojun }
830 1.2 itojun
831 1.2 itojun /*
832 1.2 itojun * After a routing change, flush old routing
833 1.2 itojun * and allocate a (hopefully) better one.
834 1.2 itojun */
835 1.2 itojun void
836 1.2 itojun in6_rtchange(in6p, errno)
837 1.2 itojun struct in6pcb *in6p;
838 1.2 itojun int errno;
839 1.2 itojun {
840 1.56 itojun if (in6p->in6p_af != AF_INET6)
841 1.56 itojun return;
842 1.56 itojun
843 1.2 itojun if (in6p->in6p_route.ro_rt) {
844 1.2 itojun rtfree(in6p->in6p_route.ro_rt);
845 1.2 itojun in6p->in6p_route.ro_rt = 0;
846 1.2 itojun /*
847 1.2 itojun * A new route can be allocated the next time
848 1.2 itojun * output is attempted.
849 1.2 itojun */
850 1.2 itojun }
851 1.2 itojun }
852 1.2 itojun
853 1.2 itojun struct in6pcb *
854 1.56 itojun in6_pcblookup_port(table, laddr6, lport_arg, lookup_wildcard)
855 1.56 itojun struct inpcbtable *table;
856 1.56 itojun struct in6_addr *laddr6;
857 1.56 itojun u_int lport_arg;
858 1.56 itojun int lookup_wildcard;
859 1.2 itojun {
860 1.60 itojun struct inpcbhead *head;
861 1.56 itojun struct inpcb_hdr *inph;
862 1.2 itojun struct in6pcb *in6p, *match = 0;
863 1.2 itojun int matchwild = 3, wildcard;
864 1.56 itojun u_int16_t lport = lport_arg;
865 1.56 itojun
866 1.60 itojun head = IN6PCBHASH_PORT(table, lport);
867 1.60 itojun LIST_FOREACH(inph, head, inph_lhash) {
868 1.56 itojun in6p = (struct in6pcb *)inph;
869 1.56 itojun if (in6p->in6p_af != AF_INET6)
870 1.56 itojun continue;
871 1.2 itojun
872 1.2 itojun if (in6p->in6p_lport != lport)
873 1.2 itojun continue;
874 1.2 itojun wildcard = 0;
875 1.56 itojun if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_faddr)) {
876 1.56 itojun if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY) != 0)
877 1.2 itojun continue;
878 1.11 itojun }
879 1.56 itojun if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr))
880 1.56 itojun wildcard++;
881 1.56 itojun if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr)) {
882 1.56 itojun if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY) != 0)
883 1.56 itojun continue;
884 1.11 itojun if (!IN6_IS_ADDR_V4MAPPED(laddr6))
885 1.11 itojun continue;
886 1.56 itojun
887 1.56 itojun /* duplicate of IPv4 logic */
888 1.56 itojun wildcard = 0;
889 1.56 itojun if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_faddr) &&
890 1.56 itojun in6p->in6p_faddr.s6_addr32[3])
891 1.11 itojun wildcard++;
892 1.56 itojun if (!in6p->in6p_laddr.s6_addr32[3]) {
893 1.56 itojun if (laddr6->s6_addr32[3])
894 1.56 itojun wildcard++;
895 1.56 itojun } else {
896 1.56 itojun if (!laddr6->s6_addr32[3])
897 1.56 itojun wildcard++;
898 1.56 itojun else {
899 1.56 itojun if (in6p->in6p_laddr.s6_addr32[3] !=
900 1.56 itojun laddr6->s6_addr32[3])
901 1.56 itojun continue;
902 1.56 itojun }
903 1.56 itojun }
904 1.56 itojun } else if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) {
905 1.11 itojun if (IN6_IS_ADDR_V4MAPPED(laddr6)) {
906 1.56 itojun if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY) != 0)
907 1.11 itojun continue;
908 1.56 itojun }
909 1.56 itojun if (!IN6_IS_ADDR_UNSPECIFIED(laddr6))
910 1.2 itojun wildcard++;
911 1.56 itojun } else {
912 1.56 itojun if (IN6_IS_ADDR_V4MAPPED(laddr6)) {
913 1.56 itojun if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY) != 0)
914 1.56 itojun continue;
915 1.56 itojun }
916 1.56 itojun if (IN6_IS_ADDR_UNSPECIFIED(laddr6))
917 1.2 itojun wildcard++;
918 1.56 itojun else {
919 1.56 itojun if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr,
920 1.56 itojun laddr6))
921 1.11 itojun continue;
922 1.56 itojun }
923 1.2 itojun }
924 1.56 itojun if (wildcard && !lookup_wildcard)
925 1.2 itojun continue;
926 1.2 itojun if (wildcard < matchwild) {
927 1.2 itojun match = in6p;
928 1.2 itojun matchwild = wildcard;
929 1.2 itojun if (matchwild == 0)
930 1.2 itojun break;
931 1.2 itojun }
932 1.2 itojun }
933 1.52 itojun return (match);
934 1.2 itojun }
935 1.56 itojun #undef continue
936 1.2 itojun
937 1.55 itojun /*
938 1.55 itojun * WARNING: return value (rtentry) could be IPv4 one if in6pcb is connected to
939 1.55 itojun * IPv4 mapped address.
940 1.55 itojun */
941 1.2 itojun struct rtentry *
942 1.2 itojun in6_pcbrtentry(in6p)
943 1.2 itojun struct in6pcb *in6p;
944 1.2 itojun {
945 1.2 itojun struct route_in6 *ro;
946 1.34 itojun struct sockaddr_in6 *dst6;
947 1.2 itojun
948 1.2 itojun ro = &in6p->in6p_route;
949 1.34 itojun dst6 = (struct sockaddr_in6 *)&ro->ro_dst;
950 1.2 itojun
951 1.56 itojun if (in6p->in6p_af != AF_INET6)
952 1.56 itojun return (NULL);
953 1.56 itojun
954 1.48 itojun if (ro->ro_rt && ((ro->ro_rt->rt_flags & RTF_UP) == 0 ||
955 1.48 itojun !IN6_ARE_ADDR_EQUAL(&dst6->sin6_addr, &in6p->in6p_faddr))) {
956 1.48 itojun RTFREE(ro->ro_rt);
957 1.48 itojun ro->ro_rt = (struct rtentry *)NULL;
958 1.48 itojun }
959 1.55 itojun #ifdef INET
960 1.55 itojun if (ro->ro_rt == (struct rtentry *)NULL &&
961 1.55 itojun IN6_IS_ADDR_V4MAPPED(&in6p->in6p_faddr)) {
962 1.55 itojun struct sockaddr_in *dst = (struct sockaddr_in *)&ro->ro_dst;
963 1.55 itojun
964 1.55 itojun bzero(dst, sizeof(*dst));
965 1.55 itojun dst->sin_family = AF_INET;
966 1.55 itojun dst->sin_len = sizeof(struct sockaddr_in);
967 1.55 itojun bcopy(&in6p->in6p_faddr.s6_addr32[3], &dst->sin_addr,
968 1.55 itojun sizeof(dst->sin_addr));
969 1.55 itojun rtalloc((struct route *)ro);
970 1.55 itojun } else
971 1.55 itojun #endif
972 1.48 itojun if (ro->ro_rt == (struct rtentry *)NULL &&
973 1.48 itojun !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr)) {
974 1.48 itojun bzero(dst6, sizeof(*dst6));
975 1.48 itojun dst6->sin6_family = AF_INET6;
976 1.48 itojun dst6->sin6_len = sizeof(struct sockaddr_in6);
977 1.48 itojun dst6->sin6_addr = in6p->in6p_faddr;
978 1.48 itojun rtalloc((struct route *)ro);
979 1.2 itojun }
980 1.2 itojun return (ro->ro_rt);
981 1.2 itojun }
982 1.2 itojun
983 1.2 itojun struct in6pcb *
984 1.56 itojun in6_pcblookup_connect(table, faddr6, fport_arg, laddr6, lport_arg, faith)
985 1.56 itojun struct inpcbtable *table;
986 1.67 christos struct in6_addr *faddr6;
987 1.67 christos const struct in6_addr *laddr6;
988 1.2 itojun u_int fport_arg, lport_arg;
989 1.8 itojun int faith;
990 1.2 itojun {
991 1.56 itojun struct inpcbhead *head;
992 1.56 itojun struct inpcb_hdr *inph;
993 1.2 itojun struct in6pcb *in6p;
994 1.18 itojun u_int16_t fport = fport_arg, lport = lport_arg;
995 1.2 itojun
996 1.56 itojun head = IN6PCBHASH_CONNECT(table, faddr6, fport, laddr6, lport);
997 1.56 itojun LIST_FOREACH(inph, head, inph_hash) {
998 1.56 itojun in6p = (struct in6pcb *)inph;
999 1.56 itojun if (in6p->in6p_af != AF_INET6)
1000 1.56 itojun continue;
1001 1.56 itojun
1002 1.2 itojun /* find exact match on both source and dest */
1003 1.2 itojun if (in6p->in6p_fport != fport)
1004 1.2 itojun continue;
1005 1.2 itojun if (in6p->in6p_lport != lport)
1006 1.2 itojun continue;
1007 1.2 itojun if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr))
1008 1.2 itojun continue;
1009 1.2 itojun if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, faddr6))
1010 1.2 itojun continue;
1011 1.2 itojun if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr))
1012 1.2 itojun continue;
1013 1.2 itojun if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, laddr6))
1014 1.2 itojun continue;
1015 1.41 itojun if ((IN6_IS_ADDR_V4MAPPED(laddr6) ||
1016 1.41 itojun IN6_IS_ADDR_V4MAPPED(faddr6)) &&
1017 1.41 itojun (in6p->in6p_flags & IN6P_IPV6_V6ONLY))
1018 1.41 itojun continue;
1019 1.2 itojun return in6p;
1020 1.2 itojun }
1021 1.2 itojun return NULL;
1022 1.2 itojun }
1023 1.2 itojun
1024 1.2 itojun struct in6pcb *
1025 1.56 itojun in6_pcblookup_bind(table, laddr6, lport_arg, faith)
1026 1.56 itojun struct inpcbtable *table;
1027 1.2 itojun struct in6_addr *laddr6;
1028 1.2 itojun u_int lport_arg;
1029 1.8 itojun int faith;
1030 1.2 itojun {
1031 1.56 itojun struct inpcbhead *head;
1032 1.56 itojun struct inpcb_hdr *inph;
1033 1.56 itojun struct in6pcb *in6p;
1034 1.18 itojun u_int16_t lport = lport_arg;
1035 1.62 atatat #ifdef INET
1036 1.56 itojun struct in6_addr zero_mapped;
1037 1.56 itojun #endif
1038 1.56 itojun
1039 1.56 itojun head = IN6PCBHASH_BIND(table, laddr6, lport);
1040 1.56 itojun LIST_FOREACH(inph, head, inph_hash) {
1041 1.56 itojun in6p = (struct in6pcb *)inph;
1042 1.56 itojun if (in6p->in6p_af != AF_INET6)
1043 1.56 itojun continue;
1044 1.2 itojun
1045 1.8 itojun if (faith && (in6p->in6p_flags & IN6P_FAITH) == 0)
1046 1.8 itojun continue;
1047 1.2 itojun if (in6p->in6p_fport != 0)
1048 1.2 itojun continue;
1049 1.2 itojun if (in6p->in6p_lport != lport)
1050 1.2 itojun continue;
1051 1.56 itojun if (IN6_IS_ADDR_V4MAPPED(laddr6) &&
1052 1.56 itojun (in6p->in6p_flags & IN6P_IPV6_V6ONLY) != 0)
1053 1.56 itojun continue;
1054 1.56 itojun if (IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, laddr6))
1055 1.56 itojun goto out;
1056 1.56 itojun }
1057 1.56 itojun #ifdef INET
1058 1.56 itojun if (IN6_IS_ADDR_V4MAPPED(laddr6)) {
1059 1.56 itojun memset(&zero_mapped, 0, sizeof(zero_mapped));
1060 1.56 itojun zero_mapped.s6_addr16[5] = 0xffff;
1061 1.56 itojun head = IN6PCBHASH_BIND(table, &zero_mapped, lport);
1062 1.56 itojun LIST_FOREACH(inph, head, inph_hash) {
1063 1.56 itojun in6p = (struct in6pcb *)inph;
1064 1.56 itojun if (in6p->in6p_af != AF_INET6)
1065 1.56 itojun continue;
1066 1.56 itojun
1067 1.56 itojun if (faith && (in6p->in6p_flags & IN6P_FAITH) == 0)
1068 1.56 itojun continue;
1069 1.56 itojun if (in6p->in6p_fport != 0)
1070 1.56 itojun continue;
1071 1.56 itojun if (in6p->in6p_lport != lport)
1072 1.56 itojun continue;
1073 1.56 itojun if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY) != 0)
1074 1.56 itojun continue;
1075 1.56 itojun if (IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &zero_mapped))
1076 1.56 itojun goto out;
1077 1.11 itojun }
1078 1.2 itojun }
1079 1.56 itojun #endif
1080 1.56 itojun head = IN6PCBHASH_BIND(table, &zeroin6_addr, lport);
1081 1.56 itojun LIST_FOREACH(inph, head, inph_hash) {
1082 1.56 itojun in6p = (struct in6pcb *)inph;
1083 1.56 itojun if (in6p->in6p_af != AF_INET6)
1084 1.56 itojun continue;
1085 1.56 itojun
1086 1.56 itojun if (faith && (in6p->in6p_flags & IN6P_FAITH) == 0)
1087 1.56 itojun continue;
1088 1.56 itojun if (in6p->in6p_fport != 0)
1089 1.56 itojun continue;
1090 1.56 itojun if (in6p->in6p_lport != lport)
1091 1.56 itojun continue;
1092 1.56 itojun if (IN6_IS_ADDR_V4MAPPED(laddr6) &&
1093 1.56 itojun (in6p->in6p_flags & IN6P_IPV6_V6ONLY) != 0)
1094 1.56 itojun continue;
1095 1.56 itojun if (IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &zeroin6_addr))
1096 1.56 itojun goto out;
1097 1.56 itojun }
1098 1.56 itojun return (NULL);
1099 1.56 itojun
1100 1.56 itojun out:
1101 1.56 itojun inph = &in6p->in6p_head;
1102 1.56 itojun if (inph != LIST_FIRST(head)) {
1103 1.56 itojun LIST_REMOVE(inph, inph_hash);
1104 1.56 itojun LIST_INSERT_HEAD(head, inph, inph_hash);
1105 1.56 itojun }
1106 1.56 itojun return in6p;
1107 1.56 itojun }
1108 1.56 itojun
1109 1.56 itojun void
1110 1.56 itojun in6_pcbstate(in6p, state)
1111 1.56 itojun struct in6pcb *in6p;
1112 1.56 itojun int state;
1113 1.56 itojun {
1114 1.56 itojun
1115 1.56 itojun if (in6p->in6p_af != AF_INET6)
1116 1.56 itojun return;
1117 1.56 itojun
1118 1.56 itojun if (in6p->in6p_state > IN6P_ATTACHED)
1119 1.56 itojun LIST_REMOVE(&in6p->in6p_head, inph_hash);
1120 1.56 itojun
1121 1.56 itojun switch (state) {
1122 1.56 itojun case IN6P_BOUND:
1123 1.56 itojun LIST_INSERT_HEAD(IN6PCBHASH_BIND(in6p->in6p_table,
1124 1.56 itojun &in6p->in6p_laddr, in6p->in6p_lport), &in6p->in6p_head,
1125 1.56 itojun inph_hash);
1126 1.56 itojun break;
1127 1.56 itojun case IN6P_CONNECTED:
1128 1.56 itojun LIST_INSERT_HEAD(IN6PCBHASH_CONNECT(in6p->in6p_table,
1129 1.56 itojun &in6p->in6p_faddr, in6p->in6p_fport,
1130 1.56 itojun &in6p->in6p_laddr, in6p->in6p_lport), &in6p->in6p_head,
1131 1.56 itojun inph_hash);
1132 1.56 itojun break;
1133 1.56 itojun }
1134 1.56 itojun
1135 1.56 itojun in6p->in6p_state = state;
1136 1.2 itojun }
1137