Home | History | Annotate | Line # | Download | only in netinet6
ip6_input.c revision 1.177
      1  1.177     ozaki /*	$NetBSD: ip6_input.c,v 1.177 2017/03/14 04:25:10 ozaki-r Exp $	*/
      2   1.40    itojun /*	$KAME: ip6_input.c,v 1.188 2001/03/29 05:34:31 itojun Exp $	*/
      3    1.3   thorpej 
      4    1.2    itojun /*
      5    1.2    itojun  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
      6    1.2    itojun  * All rights reserved.
      7   1.21    itojun  *
      8    1.2    itojun  * Redistribution and use in source and binary forms, with or without
      9    1.2    itojun  * modification, are permitted provided that the following conditions
     10    1.2    itojun  * are met:
     11    1.2    itojun  * 1. Redistributions of source code must retain the above copyright
     12    1.2    itojun  *    notice, this list of conditions and the following disclaimer.
     13    1.2    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     14    1.2    itojun  *    notice, this list of conditions and the following disclaimer in the
     15    1.2    itojun  *    documentation and/or other materials provided with the distribution.
     16    1.2    itojun  * 3. Neither the name of the project nor the names of its contributors
     17    1.2    itojun  *    may be used to endorse or promote products derived from this software
     18    1.2    itojun  *    without specific prior written permission.
     19   1.21    itojun  *
     20    1.2    itojun  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     21    1.2    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     22    1.2    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     23    1.2    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     24    1.2    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     25    1.2    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     26    1.2    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     27    1.2    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     28    1.2    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     29    1.2    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     30    1.2    itojun  * SUCH DAMAGE.
     31    1.2    itojun  */
     32    1.2    itojun 
     33    1.2    itojun /*
     34    1.2    itojun  * Copyright (c) 1982, 1986, 1988, 1993
     35    1.2    itojun  *	The Regents of the University of California.  All rights reserved.
     36    1.2    itojun  *
     37    1.2    itojun  * Redistribution and use in source and binary forms, with or without
     38    1.2    itojun  * modification, are permitted provided that the following conditions
     39    1.2    itojun  * are met:
     40    1.2    itojun  * 1. Redistributions of source code must retain the above copyright
     41    1.2    itojun  *    notice, this list of conditions and the following disclaimer.
     42    1.2    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     43    1.2    itojun  *    notice, this list of conditions and the following disclaimer in the
     44    1.2    itojun  *    documentation and/or other materials provided with the distribution.
     45   1.65       agc  * 3. Neither the name of the University nor the names of its contributors
     46    1.2    itojun  *    may be used to endorse or promote products derived from this software
     47    1.2    itojun  *    without specific prior written permission.
     48    1.2    itojun  *
     49    1.2    itojun  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     50    1.2    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     51    1.2    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     52    1.2    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     53    1.2    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     54    1.2    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     55    1.2    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     56    1.2    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     57    1.2    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     58    1.2    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     59    1.2    itojun  * SUCH DAMAGE.
     60    1.2    itojun  *
     61    1.2    itojun  *	@(#)ip_input.c	8.2 (Berkeley) 1/4/94
     62    1.2    itojun  */
     63   1.48     lukem 
     64   1.48     lukem #include <sys/cdefs.h>
     65  1.177     ozaki __KERNEL_RCSID(0, "$NetBSD: ip6_input.c,v 1.177 2017/03/14 04:25:10 ozaki-r Exp $");
     66    1.2    itojun 
     67  1.152     pooka #ifdef _KERNEL_OPT
     68  1.129     joerg #include "opt_gateway.h"
     69    1.2    itojun #include "opt_inet.h"
     70   1.85    rpaulo #include "opt_inet6.h"
     71    1.4   thorpej #include "opt_ipsec.h"
     72  1.123  christos #include "opt_compat_netbsd.h"
     73  1.169     ozaki #include "opt_net_mpsafe.h"
     74  1.152     pooka #endif
     75    1.2    itojun 
     76    1.2    itojun #include <sys/param.h>
     77    1.2    itojun #include <sys/systm.h>
     78    1.2    itojun #include <sys/mbuf.h>
     79    1.2    itojun #include <sys/domain.h>
     80    1.2    itojun #include <sys/protosw.h>
     81    1.2    itojun #include <sys/socket.h>
     82    1.2    itojun #include <sys/socketvar.h>
     83    1.2    itojun #include <sys/errno.h>
     84    1.2    itojun #include <sys/time.h>
     85    1.2    itojun #include <sys/kernel.h>
     86    1.2    itojun #include <sys/syslog.h>
     87    1.2    itojun #include <sys/proc.h>
     88   1.46    simonb #include <sys/sysctl.h>
     89  1.133       tls #include <sys/cprng.h>
     90  1.167     ozaki #include <sys/percpu.h>
     91    1.2    itojun 
     92    1.2    itojun #include <net/if.h>
     93    1.2    itojun #include <net/if_types.h>
     94    1.2    itojun #include <net/if_dl.h>
     95    1.2    itojun #include <net/route.h>
     96  1.148     rmind #include <net/pktqueue.h>
     97   1.15   darrenr #include <net/pfil.h>
     98    1.2    itojun 
     99    1.2    itojun #include <netinet/in.h>
    100    1.9    itojun #include <netinet/in_systm.h>
    101    1.9    itojun #ifdef INET
    102    1.9    itojun #include <netinet/ip.h>
    103  1.148     rmind #include <netinet/ip_var.h>
    104    1.9    itojun #include <netinet/ip_icmp.h>
    105   1.45    itojun #endif /* INET */
    106   1.14    itojun #include <netinet/ip6.h>
    107  1.140  christos #include <netinet/portalgo.h>
    108    1.2    itojun #include <netinet6/in6_var.h>
    109   1.11    itojun #include <netinet6/ip6_var.h>
    110  1.116   thorpej #include <netinet6/ip6_private.h>
    111    1.2    itojun #include <netinet6/in6_pcb.h>
    112   1.14    itojun #include <netinet/icmp6.h>
    113   1.81    rpaulo #include <netinet6/scope6_var.h>
    114    1.2    itojun #include <netinet6/in6_ifattach.h>
    115    1.2    itojun #include <netinet6/nd6.h>
    116    1.2    itojun 
    117  1.142  christos #ifdef IPSEC
    118   1.94  degroote #include <netipsec/ipsec.h>
    119   1.94  degroote #include <netipsec/ipsec6.h>
    120   1.94  degroote #include <netipsec/key.h>
    121  1.142  christos #endif /* IPSEC */
    122   1.94  degroote 
    123  1.123  christos #ifdef COMPAT_50
    124  1.123  christos #include <compat/sys/time.h>
    125  1.123  christos #include <compat/sys/socket.h>
    126  1.123  christos #endif
    127  1.123  christos 
    128    1.2    itojun #include <netinet6/ip6protosw.h>
    129    1.2    itojun 
    130    1.2    itojun #include "faith.h"
    131    1.2    itojun 
    132    1.9    itojun #include <net/net_osdep.h>
    133    1.9    itojun 
    134    1.2    itojun extern struct domain inet6domain;
    135    1.2    itojun 
    136    1.2    itojun u_char ip6_protox[IPPROTO_MAX];
    137  1.148     rmind pktqueue_t *ip6_pktq __read_mostly;
    138    1.2    itojun 
    139    1.2    itojun int ip6_forward_srcrt;			/* XXX */
    140    1.2    itojun int ip6_sourcecheck;			/* XXX */
    141    1.2    itojun int ip6_sourcecheck_interval;		/* XXX */
    142    1.9    itojun 
    143  1.143     rmind pfil_head_t *inet6_pfil_hook;
    144   1.29   thorpej 
    145  1.116   thorpej percpu_t *ip6stat_percpu;
    146    1.2    itojun 
    147  1.167     ozaki percpu_t *ip6_forward_rt_percpu __cacheline_aligned;
    148  1.167     ozaki 
    149  1.156     ozaki static void ip6_init2(void);
    150  1.148     rmind static void ip6intr(void *);
    151  1.112    dyoung static struct m_tag *ip6_setdstifaddr(struct mbuf *, const struct in6_ifaddr *);
    152    1.2    itojun 
    153  1.136  drochner static int ip6_process_hopopts(struct mbuf *, u_int8_t *, int, u_int32_t *,
    154  1.136  drochner 	u_int32_t *);
    155  1.111    dyoung static struct mbuf *ip6_pullexthdr(struct mbuf *, size_t, int);
    156  1.128     pooka static void sysctl_net_inet6_ip6_setup(struct sysctllog **);
    157    1.2    itojun 
    158  1.169     ozaki #ifdef NET_MPSAFE
    159  1.169     ozaki #define	SOFTNET_LOCK()		mutex_enter(softnet_lock)
    160  1.169     ozaki #define	SOFTNET_UNLOCK()	mutex_exit(softnet_lock)
    161  1.169     ozaki #else
    162  1.169     ozaki #define	SOFTNET_LOCK()		KASSERT(mutex_owned(softnet_lock))
    163  1.169     ozaki #define	SOFTNET_UNLOCK()	KASSERT(mutex_owned(softnet_lock))
    164  1.169     ozaki #endif
    165  1.169     ozaki 
    166    1.2    itojun /*
    167    1.2    itojun  * IP6 initialization: fill in IP6 protocol switch table.
    168    1.2    itojun  * All protocols not implemented in kernel go to raw IP6 protocol handler.
    169    1.2    itojun  */
    170    1.2    itojun void
    171  1.114      matt ip6_init(void)
    172    1.2    itojun {
    173   1.78  christos 	const struct ip6protosw *pr;
    174   1.35    itojun 	int i;
    175    1.2    itojun 
    176  1.163     ozaki 	in6_init();
    177  1.162     ozaki 
    178  1.128     pooka 	sysctl_net_inet6_ip6_setup(NULL);
    179   1.78  christos 	pr = (const struct ip6protosw *)pffindproto(PF_INET6, IPPROTO_RAW, SOCK_RAW);
    180    1.2    itojun 	if (pr == 0)
    181    1.2    itojun 		panic("ip6_init");
    182    1.2    itojun 	for (i = 0; i < IPPROTO_MAX; i++)
    183    1.2    itojun 		ip6_protox[i] = pr - inet6sw;
    184   1.78  christos 	for (pr = (const struct ip6protosw *)inet6domain.dom_protosw;
    185   1.78  christos 	    pr < (const struct ip6protosw *)inet6domain.dom_protoswNPROTOSW; pr++)
    186    1.2    itojun 		if (pr->pr_domain->dom_family == PF_INET6 &&
    187    1.2    itojun 		    pr->pr_protocol && pr->pr_protocol != IPPROTO_RAW)
    188    1.2    itojun 			ip6_protox[pr->pr_protocol] = pr - inet6sw;
    189  1.148     rmind 
    190  1.149     ozaki 	ip6_pktq = pktq_create(IFQ_MAXLEN, ip6intr, NULL);
    191  1.148     rmind 	KASSERT(ip6_pktq != NULL);
    192  1.148     rmind 
    193   1.81    rpaulo 	scope6_init();
    194   1.81    rpaulo 	addrsel_policy_init();
    195    1.2    itojun 	nd6_init();
    196    1.2    itojun 	frag6_init();
    197  1.133       tls 	ip6_desync_factor = cprng_fast32() % MAX_TEMP_DESYNC_FACTOR;
    198    1.2    itojun 
    199  1.156     ozaki 	ip6_init2();
    200   1.98  liamjfoy #ifdef GATEWAY
    201   1.99  liamjfoy 	ip6flow_init(ip6_hashsize);
    202   1.98  liamjfoy #endif
    203   1.29   thorpej 	/* Register our Packet Filter hook. */
    204  1.143     rmind 	inet6_pfil_hook = pfil_head_create(PFIL_TYPE_AF, (void *)AF_INET6);
    205  1.143     rmind 	KASSERT(inet6_pfil_hook != NULL);
    206  1.116   thorpej 
    207  1.116   thorpej 	ip6stat_percpu = percpu_alloc(sizeof(uint64_t) * IP6_NSTATS);
    208  1.167     ozaki 
    209  1.167     ozaki 	ip6_forward_rt_percpu = percpu_alloc(sizeof(struct route));
    210  1.167     ozaki 	if (ip6_forward_rt_percpu == NULL)
    211  1.167     ozaki 		panic("failed to alllocate ip6_forward_rt_percpu");
    212    1.2    itojun }
    213    1.2    itojun 
    214    1.2    itojun static void
    215  1.156     ozaki ip6_init2(void)
    216    1.2    itojun {
    217    1.2    itojun 
    218   1.83    rpaulo 	/* timer for regeneranation of temporary addresses randomize ID */
    219  1.118        ad 	callout_init(&in6_tmpaddrtimer_ch, CALLOUT_MPSAFE);
    220   1.83    rpaulo 	callout_reset(&in6_tmpaddrtimer_ch,
    221   1.83    rpaulo 		      (ip6_temp_preferred_lifetime - ip6_desync_factor -
    222   1.83    rpaulo 		       ip6_temp_regen_advance) * hz,
    223   1.83    rpaulo 		      in6_tmpaddrtimer, NULL);
    224    1.2    itojun }
    225    1.2    itojun 
    226    1.2    itojun /*
    227    1.2    itojun  * IP6 input interrupt handling. Just pass the packet to ip6_input.
    228    1.2    itojun  */
    229  1.148     rmind static void
    230  1.148     rmind ip6intr(void *arg __unused)
    231    1.2    itojun {
    232    1.2    itojun 	struct mbuf *m;
    233    1.2    itojun 
    234  1.169     ozaki #ifndef NET_MPSAFE
    235  1.118        ad 	mutex_enter(softnet_lock);
    236  1.169     ozaki #endif
    237  1.148     rmind 	while ((m = pktq_dequeue(ip6_pktq)) != NULL) {
    238  1.160     ozaki 		struct psref psref;
    239  1.160     ozaki 		struct ifnet *rcvif = m_get_rcvif_psref(m, &psref);
    240  1.148     rmind 
    241  1.160     ozaki 		if (rcvif == NULL) {
    242  1.160     ozaki 			m_freem(m);
    243  1.160     ozaki 			continue;
    244  1.160     ozaki 		}
    245  1.148     rmind 		/*
    246  1.148     rmind 		 * Drop the packet if IPv6 is disabled on the interface.
    247  1.148     rmind 		 */
    248  1.160     ozaki 		if ((ND_IFINFO(rcvif)->flags & ND6_IFF_IFDISABLED)) {
    249  1.160     ozaki 			m_put_rcvif_psref(rcvif, &psref);
    250   1.83    rpaulo 			m_freem(m);
    251  1.148     rmind 			continue;
    252   1.83    rpaulo 		}
    253  1.160     ozaki 		ip6_input(m, rcvif);
    254  1.160     ozaki 		m_put_rcvif_psref(rcvif, &psref);
    255    1.2    itojun 	}
    256  1.169     ozaki #ifndef NET_MPSAFE
    257  1.118        ad 	mutex_exit(softnet_lock);
    258  1.169     ozaki #endif
    259    1.2    itojun }
    260    1.2    itojun 
    261    1.2    itojun void
    262  1.160     ozaki ip6_input(struct mbuf *m, struct ifnet *rcvif)
    263    1.2    itojun {
    264    1.9    itojun 	struct ip6_hdr *ip6;
    265  1.105    dyoung 	int hit, off = sizeof(struct ip6_hdr), nest;
    266    1.2    itojun 	u_int32_t plen;
    267    1.5    itojun 	u_int32_t rtalert = ~0;
    268  1.104      yamt 	int nxt, ours = 0, rh_present = 0;
    269    1.9    itojun 	struct ifnet *deliverifp = NULL;
    270   1.64    itojun 	int srcrt = 0;
    271  1.171     ozaki 	struct rtentry *rt = NULL;
    272  1.105    dyoung 	union {
    273  1.105    dyoung 		struct sockaddr		dst;
    274  1.105    dyoung 		struct sockaddr_in6	dst6;
    275  1.105    dyoung 	} u;
    276  1.167     ozaki 	struct route *ro;
    277    1.2    itojun 
    278    1.2    itojun 	/*
    279   1.81    rpaulo 	 * make sure we don't have onion peering information into m_tag.
    280   1.81    rpaulo 	 */
    281   1.81    rpaulo 	ip6_delaux(m);
    282   1.81    rpaulo 
    283   1.81    rpaulo 	/*
    284   1.44    itojun 	 * mbuf statistics
    285    1.2    itojun 	 */
    286    1.2    itojun 	if (m->m_flags & M_EXT) {
    287    1.2    itojun 		if (m->m_next)
    288  1.116   thorpej 			IP6_STATINC(IP6_STAT_MEXT2M);
    289    1.2    itojun 		else
    290  1.116   thorpej 			IP6_STATINC(IP6_STAT_MEXT1);
    291    1.2    itojun 	} else {
    292  1.115   thorpej #define M2MMAX	32
    293    1.2    itojun 		if (m->m_next) {
    294  1.159     ozaki 			if (m->m_flags & M_LOOP)
    295  1.116   thorpej 			/*XXX*/	IP6_STATINC(IP6_STAT_M2M + lo0ifp->if_index);
    296  1.159     ozaki 			else if (rcvif->if_index < M2MMAX)
    297  1.159     ozaki 				IP6_STATINC(IP6_STAT_M2M + rcvif->if_index);
    298  1.159     ozaki 			else
    299  1.116   thorpej 				IP6_STATINC(IP6_STAT_M2M);
    300    1.2    itojun 		} else
    301  1.116   thorpej 			IP6_STATINC(IP6_STAT_M1);
    302   1.40    itojun #undef M2MMAX
    303    1.2    itojun 	}
    304    1.2    itojun 
    305  1.159     ozaki 	in6_ifstat_inc(rcvif, ifs6_in_receive);
    306  1.116   thorpej 	IP6_STATINC(IP6_STAT_TOTAL);
    307    1.9    itojun 
    308   1.57   thorpej 	/*
    309   1.57   thorpej 	 * If the IPv6 header is not aligned, slurp it up into a new
    310   1.57   thorpej 	 * mbuf with space for link headers, in the event we forward
    311   1.81    rpaulo 	 * it.  Otherwise, if it is aligned, make sure the entire base
    312   1.57   thorpej 	 * IPv6 header is in the first mbuf of the chain.
    313   1.57   thorpej 	 */
    314   1.97  christos 	if (IP6_HDR_ALIGNED_P(mtod(m, void *)) == 0) {
    315   1.57   thorpej 		if ((m = m_copyup(m, sizeof(struct ip6_hdr),
    316   1.57   thorpej 				  (max_linkhdr + 3) & ~3)) == NULL) {
    317   1.57   thorpej 			/* XXXJRT new stat, please */
    318  1.116   thorpej 			IP6_STATINC(IP6_STAT_TOOSMALL);
    319  1.159     ozaki 			in6_ifstat_inc(rcvif, ifs6_in_hdrerr);
    320   1.57   thorpej 			return;
    321   1.57   thorpej 		}
    322   1.57   thorpej 	} else if (__predict_false(m->m_len < sizeof(struct ip6_hdr))) {
    323   1.55    itojun 		if ((m = m_pullup(m, sizeof(struct ip6_hdr))) == NULL) {
    324  1.116   thorpej 			IP6_STATINC(IP6_STAT_TOOSMALL);
    325  1.159     ozaki 			in6_ifstat_inc(rcvif, ifs6_in_hdrerr);
    326    1.9    itojun 			return;
    327    1.9    itojun 		}
    328    1.2    itojun 	}
    329    1.2    itojun 
    330    1.2    itojun 	ip6 = mtod(m, struct ip6_hdr *);
    331    1.2    itojun 
    332    1.2    itojun 	if ((ip6->ip6_vfc & IPV6_VERSION_MASK) != IPV6_VERSION) {
    333  1.116   thorpej 		IP6_STATINC(IP6_STAT_BADVERS);
    334  1.159     ozaki 		in6_ifstat_inc(rcvif, ifs6_in_hdrerr);
    335    1.2    itojun 		goto bad;
    336    1.2    itojun 	}
    337   1.15   darrenr 
    338   1.98  liamjfoy 	/*
    339   1.98  liamjfoy 	 * Assume that we can create a fast-forward IP flow entry
    340   1.98  liamjfoy 	 * based on this packet.
    341   1.98  liamjfoy 	 */
    342   1.98  liamjfoy 	m->m_flags |= M_CANFASTFWD;
    343   1.98  liamjfoy 
    344   1.15   darrenr 	/*
    345   1.15   darrenr 	 * Run through list of hooks for input packets.  If there are any
    346   1.15   darrenr 	 * filters which require that additional packets in the flow are
    347   1.15   darrenr 	 * not fast-forwarded, they must clear the M_CANFASTFWD flag.
    348   1.15   darrenr 	 * Note that filters must _never_ set this flag, as another filter
    349   1.15   darrenr 	 * in the list may have previously cleared it.
    350   1.15   darrenr 	 */
    351   1.39    itojun 	/*
    352   1.39    itojun 	 * let ipfilter look at packet on the wire,
    353   1.39    itojun 	 * not the decapsulated packet.
    354   1.39    itojun 	 */
    355  1.142  christos #if defined(IPSEC)
    356  1.146  christos 	if (!ipsec_used || !ipsec_indone(m))
    357   1.39    itojun #else
    358   1.39    itojun 	if (1)
    359   1.39    itojun #endif
    360   1.39    itojun 	{
    361   1.64    itojun 		struct in6_addr odst;
    362   1.64    itojun 
    363   1.64    itojun 		odst = ip6->ip6_dst;
    364  1.159     ozaki 		if (pfil_run_hooks(inet6_pfil_hook, &m, rcvif, PFIL_IN) != 0)
    365   1.39    itojun 			return;
    366   1.39    itojun 		if (m == NULL)
    367   1.39    itojun 			return;
    368   1.39    itojun 		ip6 = mtod(m, struct ip6_hdr *);
    369   1.64    itojun 		srcrt = !IN6_ARE_ADDR_EQUAL(&odst, &ip6->ip6_dst);
    370   1.39    itojun 	}
    371   1.15   darrenr 
    372  1.116   thorpej 	IP6_STATINC(IP6_STAT_NXTHIST + ip6->ip6_nxt);
    373    1.2    itojun 
    374   1.30   thorpej #ifdef ALTQ
    375  1.169     ozaki 	if (altq_input != NULL) {
    376  1.169     ozaki 		SOFTNET_LOCK();
    377  1.169     ozaki 		if ((*altq_input)(m, AF_INET6) == 0) {
    378  1.169     ozaki 			SOFTNET_UNLOCK();
    379  1.169     ozaki 			/* packet is dropped by traffic conditioner */
    380  1.169     ozaki 			return;
    381  1.169     ozaki 		}
    382  1.169     ozaki 		SOFTNET_UNLOCK();
    383    1.9    itojun 	}
    384    1.9    itojun #endif
    385    1.9    itojun 
    386    1.2    itojun 	/*
    387   1.44    itojun 	 * Check against address spoofing/corruption.
    388    1.2    itojun 	 */
    389    1.2    itojun 	if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_src) ||
    390    1.2    itojun 	    IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_dst)) {
    391   1.55    itojun 		/*
    392   1.55    itojun 		 * XXX: "badscope" is not very suitable for a multicast source.
    393   1.55    itojun 		 */
    394  1.116   thorpej 		IP6_STATINC(IP6_STAT_BADSCOPE);
    395  1.159     ozaki 		in6_ifstat_inc(rcvif, ifs6_in_addrerr);
    396    1.2    itojun 		goto bad;
    397    1.2    itojun 	}
    398   1.13    itojun 	/*
    399   1.44    itojun 	 * The following check is not documented in specs.  A malicious
    400   1.44    itojun 	 * party may be able to use IPv4 mapped addr to confuse tcp/udp stack
    401   1.44    itojun 	 * and bypass security checks (act as if it was from 127.0.0.1 by using
    402   1.44    itojun 	 * IPv6 src ::ffff:127.0.0.1).  Be cautious.
    403   1.35    itojun 	 *
    404   1.44    itojun 	 * This check chokes if we are in an SIIT cloud.  As none of BSDs
    405   1.44    itojun 	 * support IPv4-less kernel compilation, we cannot support SIIT
    406   1.44    itojun 	 * environment at all.  So, it makes more sense for us to reject any
    407   1.44    itojun 	 * malicious packets for non-SIIT environment, than try to do a
    408   1.52       wiz 	 * partial support for SIIT environment.
    409   1.13    itojun 	 */
    410   1.13    itojun 	if (IN6_IS_ADDR_V4MAPPED(&ip6->ip6_src) ||
    411   1.13    itojun 	    IN6_IS_ADDR_V4MAPPED(&ip6->ip6_dst)) {
    412  1.116   thorpej 		IP6_STATINC(IP6_STAT_BADSCOPE);
    413  1.159     ozaki 		in6_ifstat_inc(rcvif, ifs6_in_addrerr);
    414   1.13    itojun 		goto bad;
    415   1.13    itojun 	}
    416   1.17    itojun #if 0
    417   1.13    itojun 	/*
    418   1.17    itojun 	 * Reject packets with IPv4 compatible addresses (auto tunnel).
    419   1.17    itojun 	 *
    420   1.17    itojun 	 * The code forbids auto tunnel relay case in RFC1933 (the check is
    421   1.17    itojun 	 * stronger than RFC1933).  We may want to re-enable it if mech-xx
    422   1.17    itojun 	 * is revised to forbid relaying case.
    423   1.13    itojun 	 */
    424   1.13    itojun 	if (IN6_IS_ADDR_V4COMPAT(&ip6->ip6_src) ||
    425   1.13    itojun 	    IN6_IS_ADDR_V4COMPAT(&ip6->ip6_dst)) {
    426  1.116   thorpej 		IP6_STATINC(IP6_STAT_BADSCOPE);
    427  1.159     ozaki 		in6_ifstat_inc(rcvif, ifs6_in_addrerr);
    428   1.13    itojun 		goto bad;
    429   1.13    itojun 	}
    430   1.13    itojun #endif
    431   1.35    itojun 
    432    1.2    itojun 	/*
    433   1.82      yamt 	 * Disambiguate address scope zones (if there is ambiguity).
    434   1.82      yamt 	 * We first make sure that the original source or destination address
    435   1.82      yamt 	 * is not in our internal form for scoped addresses.  Such addresses
    436   1.82      yamt 	 * are not necessarily invalid spec-wise, but we cannot accept them due
    437   1.82      yamt 	 * to the usage conflict.
    438   1.82      yamt 	 * in6_setscope() then also checks and rejects the cases where src or
    439   1.82      yamt 	 * dst are the loopback address and the receiving interface
    440   1.82      yamt 	 * is not loopback.
    441   1.82      yamt 	 */
    442   1.88    bouyer 	if (__predict_false(
    443   1.88    bouyer 	    m_makewritable(&m, 0, sizeof(struct ip6_hdr), M_DONTWAIT)))
    444   1.88    bouyer 		goto bad;
    445   1.88    bouyer 	ip6 = mtod(m, struct ip6_hdr *);
    446   1.82      yamt 	if (in6_clearscope(&ip6->ip6_src) || in6_clearscope(&ip6->ip6_dst)) {
    447  1.116   thorpej 		IP6_STATINC(IP6_STAT_BADSCOPE);	/* XXX */
    448   1.82      yamt 		goto bad;
    449   1.82      yamt 	}
    450  1.159     ozaki 	if (in6_setscope(&ip6->ip6_src, rcvif, NULL) ||
    451  1.159     ozaki 	    in6_setscope(&ip6->ip6_dst, rcvif, NULL)) {
    452  1.116   thorpej 		IP6_STATINC(IP6_STAT_BADSCOPE);
    453   1.82      yamt 		goto bad;
    454   1.82      yamt 	}
    455   1.82      yamt 
    456  1.171     ozaki 	ro = percpu_getref(ip6_forward_rt_percpu);
    457   1.82      yamt 	/*
    458    1.2    itojun 	 * Multicast check
    459    1.2    itojun 	 */
    460    1.2    itojun 	if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
    461  1.176     ozaki 		bool ingroup;
    462    1.9    itojun 
    463  1.159     ozaki 		in6_ifstat_inc(rcvif, ifs6_in_mcast);
    464    1.2    itojun 		/*
    465    1.2    itojun 		 * See if we belong to the destination multicast group on the
    466    1.2    itojun 		 * arrival interface.
    467    1.2    itojun 		 */
    468  1.176     ozaki 		ingroup = in6_multi_group(&ip6->ip6_dst, rcvif);
    469  1.176     ozaki 		if (ingroup)
    470    1.2    itojun 			ours = 1;
    471    1.2    itojun 		else if (!ip6_mrouter) {
    472  1.116   thorpej 			uint64_t *ip6s = IP6_STAT_GETREF();
    473  1.116   thorpej 			ip6s[IP6_STAT_NOTMEMBER]++;
    474  1.116   thorpej 			ip6s[IP6_STAT_CANTFORWARD]++;
    475  1.116   thorpej 			IP6_STAT_PUTREF();
    476  1.159     ozaki 			in6_ifstat_inc(rcvif, ifs6_in_discard);
    477  1.171     ozaki 			goto bad_unref;
    478    1.2    itojun 		}
    479  1.159     ozaki 		deliverifp = rcvif;
    480    1.2    itojun 		goto hbhcheck;
    481    1.2    itojun 	}
    482    1.2    itojun 
    483  1.105    dyoung 	sockaddr_in6_init(&u.dst6, &ip6->ip6_dst, 0, 0, 0);
    484  1.105    dyoung 
    485    1.2    itojun 	/*
    486    1.2    itojun 	 *  Unicast check
    487    1.2    itojun 	 */
    488  1.167     ozaki 	rt = rtcache_lookup2(ro, &u.dst, 1, &hit);
    489  1.105    dyoung 	if (hit)
    490  1.116   thorpej 		IP6_STATINC(IP6_STAT_FORWARD_CACHEHIT);
    491   1.93     joerg 	else
    492  1.116   thorpej 		IP6_STATINC(IP6_STAT_FORWARD_CACHEMISS);
    493   1.22    itojun 
    494  1.109    dyoung #define rt6_getkey(__rt) satocsin6(rt_getkey(__rt))
    495    1.2    itojun 
    496    1.2    itojun 	/*
    497    1.2    itojun 	 * Accept the packet if the forwarding interface to the destination
    498    1.2    itojun 	 * according to the routing table is the loopback interface,
    499    1.2    itojun 	 * unless the associated route has a gateway.
    500    1.2    itojun 	 * Note that this approach causes to accept a packet if there is a
    501    1.2    itojun 	 * route to the loopback interface for the destination of the packet.
    502    1.2    itojun 	 * But we think it's even useful in some situations, e.g. when using
    503    1.2    itojun 	 * a special daemon which wants to intercept the packet.
    504    1.2    itojun 	 */
    505  1.105    dyoung 	if (rt != NULL &&
    506  1.105    dyoung 	    (rt->rt_flags & (RTF_HOST|RTF_GATEWAY)) == RTF_HOST &&
    507    1.2    itojun #if 0
    508    1.2    itojun 	    /*
    509    1.2    itojun 	     * The check below is redundant since the comparison of
    510    1.2    itojun 	     * the destination and the key of the rtentry has
    511    1.2    itojun 	     * already done through looking up the routing table.
    512    1.2    itojun 	     */
    513  1.109    dyoung 	    IN6_ARE_ADDR_EQUAL(&ip6->ip6_dst, &rt6_getkey(rt)->sin6_addr) &&
    514    1.2    itojun #endif
    515  1.105    dyoung 	    rt->rt_ifp->if_type == IFT_LOOP) {
    516  1.105    dyoung 		struct in6_ifaddr *ia6 = (struct in6_ifaddr *)rt->rt_ifa;
    517    1.2    itojun 		if (ia6->ia6_flags & IN6_IFF_ANYCAST)
    518    1.2    itojun 			m->m_flags |= M_ANYCAST6;
    519   1.24    itojun 		/*
    520   1.24    itojun 		 * packets to a tentative, duplicated, or somehow invalid
    521   1.24    itojun 		 * address must not be accepted.
    522   1.24    itojun 		 */
    523  1.168       roy 		if (!(ia6->ia6_flags & (IN6_IFF_NOTREADY | IN6_IFF_DETACHED))) {
    524   1.24    itojun 			/* this address is ready */
    525    1.2    itojun 			ours = 1;
    526    1.9    itojun 			deliverifp = ia6->ia_ifp;	/* correct? */
    527    1.2    itojun 			goto hbhcheck;
    528    1.2    itojun 		} else {
    529   1.24    itojun 			/* address is not ready, so discard the packet. */
    530  1.172       ryo 			char ip6bufs[INET6_ADDRSTRLEN];
    531  1.172       ryo 			char ip6bufd[INET6_ADDRSTRLEN];
    532  1.157     ozaki 			nd6log(LOG_INFO, "packet to an unready address %s->%s\n",
    533  1.173  christos 			    IN6_PRINT(ip6bufs, &ip6->ip6_src),
    534  1.173  christos 			    IN6_PRINT(ip6bufd, &ip6->ip6_dst));
    535   1.24    itojun 
    536  1.171     ozaki 			goto bad_unref;
    537    1.2    itojun 		}
    538    1.2    itojun 	}
    539    1.2    itojun 
    540    1.2    itojun 	/*
    541   1.55    itojun 	 * FAITH (Firewall Aided Internet Translator)
    542    1.2    itojun 	 */
    543    1.2    itojun #if defined(NFAITH) && 0 < NFAITH
    544    1.2    itojun 	if (ip6_keepfaith) {
    545  1.105    dyoung 		if (rt != NULL && rt->rt_ifp != NULL &&
    546  1.105    dyoung 		    rt->rt_ifp->if_type == IFT_FAITH) {
    547    1.2    itojun 			/* XXX do we need more sanity checks? */
    548    1.2    itojun 			ours = 1;
    549  1.105    dyoung 			deliverifp = rt->rt_ifp; /* faith */
    550    1.9    itojun 			goto hbhcheck;
    551    1.9    itojun 		}
    552    1.9    itojun 	}
    553    1.9    itojun #endif
    554    1.9    itojun 
    555    1.9    itojun #if 0
    556    1.9    itojun     {
    557    1.9    itojun 	/*
    558    1.9    itojun 	 * Last resort: check in6_ifaddr for incoming interface.
    559    1.9    itojun 	 * The code is here until I update the "goto ours hack" code above
    560    1.9    itojun 	 * working right.
    561    1.9    itojun 	 */
    562    1.9    itojun 	struct ifaddr *ifa;
    563  1.164     ozaki 	IFADDR_READER_FOREACH(ifa, rcvif) {
    564    1.9    itojun 		if (ifa->ifa_addr->sa_family != AF_INET6)
    565    1.9    itojun 			continue;
    566    1.9    itojun 		if (IN6_ARE_ADDR_EQUAL(IFA_IN6(ifa), &ip6->ip6_dst)) {
    567    1.9    itojun 			ours = 1;
    568    1.9    itojun 			deliverifp = ifa->ifa_ifp;
    569    1.2    itojun 			goto hbhcheck;
    570    1.2    itojun 		}
    571    1.2    itojun 	}
    572    1.9    itojun     }
    573    1.2    itojun #endif
    574    1.2    itojun 
    575    1.2    itojun 	/*
    576    1.2    itojun 	 * Now there is no reason to process the packet if it's not our own
    577    1.2    itojun 	 * and we're not a router.
    578    1.2    itojun 	 */
    579    1.2    itojun 	if (!ip6_forwarding) {
    580  1.116   thorpej 		IP6_STATINC(IP6_STAT_CANTFORWARD);
    581  1.159     ozaki 		in6_ifstat_inc(rcvif, ifs6_in_discard);
    582  1.171     ozaki 		goto bad_unref;
    583    1.2    itojun 	}
    584    1.2    itojun 
    585    1.2    itojun   hbhcheck:
    586    1.2    itojun 	/*
    587   1.81    rpaulo 	 * record address information into m_tag, if we don't have one yet.
    588   1.81    rpaulo 	 * note that we are unable to record it, if the address is not listed
    589   1.81    rpaulo 	 * as our interface address (e.g. multicast addresses, addresses
    590   1.81    rpaulo 	 * within FAITH prefixes and such).
    591   1.81    rpaulo 	 */
    592  1.111    dyoung 	if (deliverifp && ip6_getdstifaddr(m) == NULL) {
    593   1.81    rpaulo 		struct in6_ifaddr *ia6;
    594  1.165     ozaki 		int s = pserialize_read_enter();
    595   1.81    rpaulo 
    596   1.81    rpaulo 		ia6 = in6_ifawithifp(deliverifp, &ip6->ip6_dst);
    597  1.165     ozaki 		/* Depends on ip6_setdstifaddr never sleep */
    598  1.111    dyoung 		if (ia6 != NULL && ip6_setdstifaddr(m, ia6) == NULL) {
    599  1.111    dyoung 			/*
    600  1.111    dyoung 			 * XXX maybe we should drop the packet here,
    601  1.111    dyoung 			 * as we could not provide enough information
    602  1.111    dyoung 			 * to the upper layers.
    603  1.111    dyoung 			 */
    604   1.81    rpaulo 		}
    605  1.165     ozaki 		pserialize_read_exit(s);
    606   1.81    rpaulo 	}
    607   1.81    rpaulo 
    608   1.81    rpaulo 	/*
    609    1.2    itojun 	 * Process Hop-by-Hop options header if it's contained.
    610    1.2    itojun 	 * m may be modified in ip6_hopopts_input().
    611    1.2    itojun 	 * If a JumboPayload option is included, plen will also be modified.
    612    1.2    itojun 	 */
    613    1.2    itojun 	plen = (u_int32_t)ntohs(ip6->ip6_plen);
    614    1.2    itojun 	if (ip6->ip6_nxt == IPPROTO_HOPOPTS) {
    615    1.9    itojun 		struct ip6_hbh *hbh;
    616    1.9    itojun 
    617    1.9    itojun 		if (ip6_hopopts_input(&plen, &rtalert, &m, &off)) {
    618    1.9    itojun #if 0	/*touches NULL pointer*/
    619  1.159     ozaki 			in6_ifstat_inc(rcvif, ifs6_in_discard);
    620    1.9    itojun #endif
    621  1.171     ozaki 			rtcache_unref(rt, ro);
    622  1.171     ozaki 			percpu_putref(ip6_forward_rt_percpu);
    623    1.2    itojun 			return;	/* m have already been freed */
    624    1.9    itojun 		}
    625   1.22    itojun 
    626    1.2    itojun 		/* adjust pointer */
    627    1.2    itojun 		ip6 = mtod(m, struct ip6_hdr *);
    628   1.22    itojun 
    629   1.22    itojun 		/*
    630   1.49    itojun 		 * if the payload length field is 0 and the next header field
    631   1.22    itojun 		 * indicates Hop-by-Hop Options header, then a Jumbo Payload
    632   1.22    itojun 		 * option MUST be included.
    633   1.22    itojun 		 */
    634   1.22    itojun 		if (ip6->ip6_plen == 0 && plen == 0) {
    635   1.22    itojun 			/*
    636   1.22    itojun 			 * Note that if a valid jumbo payload option is
    637   1.83    rpaulo 			 * contained, ip6_hopopts_input() must set a valid
    638   1.55    itojun 			 * (non-zero) payload length to the variable plen.
    639   1.22    itojun 			 */
    640  1.116   thorpej 			IP6_STATINC(IP6_STAT_BADOPTIONS);
    641  1.159     ozaki 			in6_ifstat_inc(rcvif, ifs6_in_discard);
    642  1.159     ozaki 			in6_ifstat_inc(rcvif, ifs6_in_hdrerr);
    643   1.22    itojun 			icmp6_error(m, ICMP6_PARAM_PROB,
    644   1.22    itojun 				    ICMP6_PARAMPROB_HEADER,
    645   1.97  christos 				    (char *)&ip6->ip6_plen - (char *)ip6);
    646  1.171     ozaki 			rtcache_unref(rt, ro);
    647  1.171     ozaki 			percpu_putref(ip6_forward_rt_percpu);
    648   1.22    itojun 			return;
    649   1.22    itojun 		}
    650    1.9    itojun 		IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m, sizeof(struct ip6_hdr),
    651    1.9    itojun 			sizeof(struct ip6_hbh));
    652    1.9    itojun 		if (hbh == NULL) {
    653  1.116   thorpej 			IP6_STATINC(IP6_STAT_TOOSHORT);
    654  1.171     ozaki 			rtcache_unref(rt, ro);
    655  1.171     ozaki 			percpu_putref(ip6_forward_rt_percpu);
    656    1.9    itojun 			return;
    657    1.9    itojun 		}
    658   1.57   thorpej 		KASSERT(IP6_HDR_ALIGNED_P(hbh));
    659    1.9    itojun 		nxt = hbh->ip6h_nxt;
    660    1.2    itojun 
    661    1.2    itojun 		/*
    662    1.2    itojun 		 * accept the packet if a router alert option is included
    663    1.2    itojun 		 * and we act as an IPv6 router.
    664    1.2    itojun 		 */
    665    1.5    itojun 		if (rtalert != ~0 && ip6_forwarding)
    666    1.2    itojun 			ours = 1;
    667    1.2    itojun 	} else
    668    1.2    itojun 		nxt = ip6->ip6_nxt;
    669    1.2    itojun 
    670    1.2    itojun 	/*
    671    1.2    itojun 	 * Check that the amount of data in the buffers
    672    1.2    itojun 	 * is as at least much as the IPv6 header would have us expect.
    673    1.2    itojun 	 * Trim mbufs if longer than we expect.
    674    1.2    itojun 	 * Drop packet if shorter than we expect.
    675    1.2    itojun 	 */
    676    1.2    itojun 	if (m->m_pkthdr.len - sizeof(struct ip6_hdr) < plen) {
    677  1.116   thorpej 		IP6_STATINC(IP6_STAT_TOOSHORT);
    678  1.159     ozaki 		in6_ifstat_inc(rcvif, ifs6_in_truncated);
    679  1.171     ozaki 		goto bad_unref;
    680    1.2    itojun 	}
    681    1.2    itojun 	if (m->m_pkthdr.len > sizeof(struct ip6_hdr) + plen) {
    682    1.2    itojun 		if (m->m_len == m->m_pkthdr.len) {
    683    1.2    itojun 			m->m_len = sizeof(struct ip6_hdr) + plen;
    684    1.2    itojun 			m->m_pkthdr.len = sizeof(struct ip6_hdr) + plen;
    685    1.2    itojun 		} else
    686    1.2    itojun 			m_adj(m, sizeof(struct ip6_hdr) + plen - m->m_pkthdr.len);
    687    1.2    itojun 	}
    688    1.2    itojun 
    689    1.2    itojun 	/*
    690    1.2    itojun 	 * Forward if desirable.
    691    1.2    itojun 	 */
    692    1.2    itojun 	if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
    693    1.2    itojun 		/*
    694    1.2    itojun 		 * If we are acting as a multicast router, all
    695    1.2    itojun 		 * incoming multicast packets are passed to the
    696    1.2    itojun 		 * kernel-level multicast forwarding function.
    697    1.2    itojun 		 * The packet is returned (relatively) intact; if
    698    1.2    itojun 		 * ip6_mforward() returns a non-zero value, the packet
    699    1.2    itojun 		 * must be discarded, else it may be accepted below.
    700    1.2    itojun 		 */
    701  1.169     ozaki 		if (ip6_mrouter != NULL) {
    702  1.169     ozaki 			int error;
    703  1.169     ozaki 
    704  1.169     ozaki 			SOFTNET_LOCK();
    705  1.169     ozaki 			error = ip6_mforward(ip6, rcvif, m);
    706  1.169     ozaki 			SOFTNET_UNLOCK();
    707  1.169     ozaki 
    708  1.169     ozaki 			if (error != 0) {
    709  1.171     ozaki 				rtcache_unref(rt, ro);
    710  1.171     ozaki 				percpu_putref(ip6_forward_rt_percpu);
    711  1.169     ozaki 				IP6_STATINC(IP6_STAT_CANTFORWARD);
    712  1.170     ozaki 				goto bad;
    713  1.169     ozaki 			}
    714    1.2    itojun 		}
    715  1.170     ozaki 		if (!ours)
    716  1.171     ozaki 			goto bad_unref;
    717   1.22    itojun 	} else if (!ours) {
    718  1.171     ozaki 		rtcache_unref(rt, ro);
    719  1.171     ozaki 		percpu_putref(ip6_forward_rt_percpu);
    720   1.64    itojun 		ip6_forward(m, srcrt);
    721    1.2    itojun 		return;
    722   1.56    itojun 	}
    723   1.25    itojun 
    724   1.25    itojun 	ip6 = mtod(m, struct ip6_hdr *);
    725   1.25    itojun 
    726   1.25    itojun 	/*
    727   1.25    itojun 	 * Malicious party may be able to use IPv4 mapped addr to confuse
    728   1.25    itojun 	 * tcp/udp stack and bypass security checks (act as if it was from
    729   1.25    itojun 	 * 127.0.0.1 by using IPv6 src ::ffff:127.0.0.1).  Be cautious.
    730   1.25    itojun 	 *
    731   1.25    itojun 	 * For SIIT end node behavior, you may want to disable the check.
    732   1.25    itojun 	 * However, you will  become vulnerable to attacks using IPv4 mapped
    733   1.25    itojun 	 * source.
    734   1.25    itojun 	 */
    735   1.25    itojun 	if (IN6_IS_ADDR_V4MAPPED(&ip6->ip6_src) ||
    736   1.25    itojun 	    IN6_IS_ADDR_V4MAPPED(&ip6->ip6_dst)) {
    737  1.116   thorpej 		IP6_STATINC(IP6_STAT_BADSCOPE);
    738  1.159     ozaki 		in6_ifstat_inc(rcvif, ifs6_in_addrerr);
    739  1.171     ozaki 		goto bad_unref;
    740   1.25    itojun 	}
    741    1.2    itojun 
    742    1.2    itojun 	/*
    743    1.2    itojun 	 * Tell launch routine the next header
    744    1.2    itojun 	 */
    745   1.12    itojun #ifdef IFA_STATS
    746   1.28    itojun 	if (deliverifp != NULL) {
    747    1.9    itojun 		struct in6_ifaddr *ia6;
    748  1.165     ozaki 		int s = pserialize_read_enter();
    749    1.9    itojun 		ia6 = in6_ifawithifp(deliverifp, &ip6->ip6_dst);
    750    1.9    itojun 		if (ia6)
    751    1.9    itojun 			ia6->ia_ifa.ifa_data.ifad_inbytes += m->m_pkthdr.len;
    752  1.165     ozaki 		pserialize_read_exit(s);
    753    1.9    itojun 	}
    754    1.9    itojun #endif
    755  1.116   thorpej 	IP6_STATINC(IP6_STAT_DELIVERED);
    756    1.9    itojun 	in6_ifstat_inc(deliverifp, ifs6_in_deliver);
    757    1.2    itojun 	nest = 0;
    758   1.40    itojun 
    759  1.171     ozaki 	if (rt != NULL) {
    760  1.171     ozaki 		rtcache_unref(rt, ro);
    761  1.171     ozaki 		rt = NULL;
    762  1.171     ozaki 	}
    763  1.171     ozaki 	percpu_putref(ip6_forward_rt_percpu);
    764  1.171     ozaki 
    765  1.104      yamt 	rh_present = 0;
    766    1.2    itojun 	while (nxt != IPPROTO_DONE) {
    767    1.2    itojun 		if (ip6_hdrnestlimit && (++nest > ip6_hdrnestlimit)) {
    768  1.116   thorpej 			IP6_STATINC(IP6_STAT_TOOMANYHDR);
    769  1.159     ozaki 			in6_ifstat_inc(rcvif, ifs6_in_hdrerr);
    770    1.2    itojun 			goto bad;
    771    1.2    itojun 		}
    772    1.8    itojun 
    773    1.8    itojun 		/*
    774    1.8    itojun 		 * protection against faulty packet - there should be
    775    1.8    itojun 		 * more sanity checks in header chain processing.
    776    1.8    itojun 		 */
    777    1.8    itojun 		if (m->m_pkthdr.len < off) {
    778  1.116   thorpej 			IP6_STATINC(IP6_STAT_TOOSHORT);
    779  1.159     ozaki 			in6_ifstat_inc(rcvif, ifs6_in_truncated);
    780    1.8    itojun 			goto bad;
    781    1.8    itojun 		}
    782    1.8    itojun 
    783  1.104      yamt 		if (nxt == IPPROTO_ROUTING) {
    784  1.104      yamt 			if (rh_present++) {
    785  1.159     ozaki 				in6_ifstat_inc(rcvif, ifs6_in_hdrerr);
    786  1.116   thorpej 				IP6_STATINC(IP6_STAT_BADOPTIONS);
    787  1.104      yamt 				goto bad;
    788  1.104      yamt 			}
    789  1.104      yamt 		}
    790  1.104      yamt 
    791  1.142  christos #ifdef IPSEC
    792  1.146  christos 		if (ipsec_used) {
    793   1.94  degroote 			/*
    794  1.146  christos 			 * enforce IPsec policy checking if we are seeing last
    795  1.146  christos 			 * header. note that we do not visit this with
    796  1.146  christos 			 * protocols with pcb layer code - like udp/tcp/raw ip.
    797   1.94  degroote 			 */
    798  1.146  christos 			if ((inet6sw[ip_protox[nxt]].pr_flags
    799  1.146  christos 			    & PR_LASTHDR) != 0) {
    800  1.169     ozaki 				int error;
    801  1.169     ozaki 
    802  1.169     ozaki 				SOFTNET_LOCK();
    803  1.169     ozaki 				error = ipsec6_input(m);
    804  1.169     ozaki 				SOFTNET_UNLOCK();
    805  1.146  christos 				if (error)
    806  1.146  christos 					goto bad;
    807  1.146  christos 			}
    808   1.94  degroote 		}
    809  1.142  christos #endif /* IPSEC */
    810   1.94  degroote 
    811  1.169     ozaki 		SOFTNET_LOCK();
    812    1.2    itojun 		nxt = (*inet6sw[ip6_protox[nxt]].pr_input)(&m, &off, nxt);
    813  1.169     ozaki 		SOFTNET_UNLOCK();
    814    1.2    itojun 	}
    815    1.2    itojun 	return;
    816  1.171     ozaki 
    817  1.171     ozaki  bad_unref:
    818  1.171     ozaki 	rtcache_unref(rt, ro);
    819  1.171     ozaki 	percpu_putref(ip6_forward_rt_percpu);
    820    1.2    itojun  bad:
    821    1.2    itojun 	m_freem(m);
    822  1.171     ozaki 	return;
    823    1.2    itojun }
    824    1.2    itojun 
    825    1.2    itojun /*
    826   1.81    rpaulo  * set/grab in6_ifaddr correspond to IPv6 destination address.
    827   1.81    rpaulo  */
    828   1.81    rpaulo static struct m_tag *
    829  1.112    dyoung ip6_setdstifaddr(struct mbuf *m, const struct in6_ifaddr *ia)
    830   1.81    rpaulo {
    831   1.81    rpaulo 	struct m_tag *mtag;
    832  1.144  christos 	struct ip6aux *ip6a;
    833   1.81    rpaulo 
    834   1.81    rpaulo 	mtag = ip6_addaux(m);
    835  1.144  christos 	if (mtag == NULL)
    836  1.144  christos 		return NULL;
    837  1.112    dyoung 
    838  1.144  christos 	ip6a = (struct ip6aux *)(mtag + 1);
    839  1.144  christos 	if (in6_setscope(&ip6a->ip6a_src, ia->ia_ifp, &ip6a->ip6a_scope_id)) {
    840  1.144  christos 		IP6_STATINC(IP6_STAT_BADSCOPE);
    841  1.144  christos 		return NULL;
    842  1.112    dyoung 	}
    843  1.144  christos 
    844  1.144  christos 	ip6a->ip6a_src = ia->ia_addr.sin6_addr;
    845  1.144  christos 	ip6a->ip6a_flags = ia->ia6_flags;
    846  1.144  christos 	return mtag;
    847   1.81    rpaulo }
    848   1.81    rpaulo 
    849  1.112    dyoung const struct ip6aux *
    850  1.107  christos ip6_getdstifaddr(struct mbuf *m)
    851   1.81    rpaulo {
    852   1.81    rpaulo 	struct m_tag *mtag;
    853   1.81    rpaulo 
    854   1.81    rpaulo 	mtag = ip6_findaux(m);
    855  1.112    dyoung 	if (mtag != NULL)
    856  1.112    dyoung 		return (struct ip6aux *)(mtag + 1);
    857   1.81    rpaulo 	else
    858   1.81    rpaulo 		return NULL;
    859   1.81    rpaulo }
    860   1.81    rpaulo 
    861   1.81    rpaulo /*
    862    1.2    itojun  * Hop-by-Hop options header processing. If a valid jumbo payload option is
    863    1.2    itojun  * included, the real payload length will be stored in plenp.
    864  1.107  christos  *
    865  1.107  christos  * rtalertp - XXX: should be stored more smart way
    866    1.2    itojun  */
    867  1.136  drochner int
    868  1.107  christos ip6_hopopts_input(u_int32_t *plenp, u_int32_t *rtalertp,
    869  1.107  christos 	struct mbuf **mp, int *offp)
    870    1.2    itojun {
    871   1.35    itojun 	struct mbuf *m = *mp;
    872    1.2    itojun 	int off = *offp, hbhlen;
    873    1.2    itojun 	struct ip6_hbh *hbh;
    874    1.2    itojun 
    875    1.2    itojun 	/* validation of the length of the header */
    876    1.9    itojun 	IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m,
    877    1.9    itojun 		sizeof(struct ip6_hdr), sizeof(struct ip6_hbh));
    878    1.9    itojun 	if (hbh == NULL) {
    879  1.116   thorpej 		IP6_STATINC(IP6_STAT_TOOSHORT);
    880    1.9    itojun 		return -1;
    881    1.9    itojun 	}
    882    1.9    itojun 	hbhlen = (hbh->ip6h_len + 1) << 3;
    883    1.9    itojun 	IP6_EXTHDR_GET(hbh, struct ip6_hbh *, m, sizeof(struct ip6_hdr),
    884    1.9    itojun 		hbhlen);
    885    1.9    itojun 	if (hbh == NULL) {
    886  1.116   thorpej 		IP6_STATINC(IP6_STAT_TOOSHORT);
    887    1.9    itojun 		return -1;
    888    1.9    itojun 	}
    889   1.57   thorpej 	KASSERT(IP6_HDR_ALIGNED_P(hbh));
    890    1.2    itojun 	off += hbhlen;
    891    1.2    itojun 	hbhlen -= sizeof(struct ip6_hbh);
    892    1.2    itojun 
    893    1.2    itojun 	if (ip6_process_hopopts(m, (u_int8_t *)hbh + sizeof(struct ip6_hbh),
    894    1.2    itojun 				hbhlen, rtalertp, plenp) < 0)
    895   1.58    itojun 		return (-1);
    896    1.2    itojun 
    897    1.2    itojun 	*offp = off;
    898    1.2    itojun 	*mp = m;
    899   1.58    itojun 	return (0);
    900    1.2    itojun }
    901    1.2    itojun 
    902    1.2    itojun /*
    903    1.2    itojun  * Search header for all Hop-by-hop options and process each option.
    904    1.2    itojun  * This function is separate from ip6_hopopts_input() in order to
    905    1.2    itojun  * handle a case where the sending node itself process its hop-by-hop
    906    1.2    itojun  * options header. In such a case, the function is called from ip6_output().
    907   1.55    itojun  *
    908   1.55    itojun  * The function assumes that hbh header is located right after the IPv6 header
    909   1.55    itojun  * (RFC2460 p7), opthead is pointer into data content in m, and opthead to
    910   1.55    itojun  * opthead + hbhlen is located in continuous memory region.
    911    1.2    itojun  */
    912  1.136  drochner static int
    913  1.107  christos ip6_process_hopopts(struct mbuf *m, u_int8_t *opthead, int hbhlen,
    914  1.107  christos 	u_int32_t *rtalertp, u_int32_t *plenp)
    915    1.2    itojun {
    916    1.2    itojun 	struct ip6_hdr *ip6;
    917    1.2    itojun 	int optlen = 0;
    918    1.2    itojun 	u_int8_t *opt = opthead;
    919    1.2    itojun 	u_int16_t rtalert_val;
    920   1.22    itojun 	u_int32_t jumboplen;
    921   1.55    itojun 	const int erroff = sizeof(struct ip6_hdr) + sizeof(struct ip6_hbh);
    922    1.2    itojun 
    923    1.2    itojun 	for (; hbhlen > 0; hbhlen -= optlen, opt += optlen) {
    924   1.35    itojun 		switch (*opt) {
    925   1.35    itojun 		case IP6OPT_PAD1:
    926   1.35    itojun 			optlen = 1;
    927   1.35    itojun 			break;
    928   1.35    itojun 		case IP6OPT_PADN:
    929   1.35    itojun 			if (hbhlen < IP6OPT_MINLEN) {
    930  1.116   thorpej 				IP6_STATINC(IP6_STAT_TOOSMALL);
    931   1.35    itojun 				goto bad;
    932   1.35    itojun 			}
    933   1.35    itojun 			optlen = *(opt + 1) + 2;
    934   1.35    itojun 			break;
    935   1.35    itojun 		case IP6OPT_RTALERT:
    936   1.35    itojun 			/* XXX may need check for alignment */
    937   1.35    itojun 			if (hbhlen < IP6OPT_RTALERT_LEN) {
    938  1.116   thorpej 				IP6_STATINC(IP6_STAT_TOOSMALL);
    939   1.35    itojun 				goto bad;
    940   1.35    itojun 			}
    941   1.35    itojun 			if (*(opt + 1) != IP6OPT_RTALERT_LEN - 2) {
    942   1.55    itojun 				/* XXX stat */
    943   1.55    itojun 				icmp6_error(m, ICMP6_PARAM_PROB,
    944   1.55    itojun 				    ICMP6_PARAMPROB_HEADER,
    945   1.55    itojun 				    erroff + opt + 1 - opthead);
    946   1.55    itojun 				return (-1);
    947   1.35    itojun 			}
    948   1.35    itojun 			optlen = IP6OPT_RTALERT_LEN;
    949  1.126   tsutsui 			memcpy((void *)&rtalert_val, (void *)(opt + 2), 2);
    950   1.35    itojun 			*rtalertp = ntohs(rtalert_val);
    951   1.35    itojun 			break;
    952   1.35    itojun 		case IP6OPT_JUMBO:
    953   1.22    itojun 			/* XXX may need check for alignment */
    954   1.22    itojun 			if (hbhlen < IP6OPT_JUMBO_LEN) {
    955  1.116   thorpej 				IP6_STATINC(IP6_STAT_TOOSMALL);
    956   1.22    itojun 				goto bad;
    957   1.22    itojun 			}
    958   1.35    itojun 			if (*(opt + 1) != IP6OPT_JUMBO_LEN - 2) {
    959   1.55    itojun 				/* XXX stat */
    960   1.55    itojun 				icmp6_error(m, ICMP6_PARAM_PROB,
    961   1.55    itojun 				    ICMP6_PARAMPROB_HEADER,
    962   1.55    itojun 				    erroff + opt + 1 - opthead);
    963   1.55    itojun 				return (-1);
    964   1.35    itojun 			}
    965   1.22    itojun 			optlen = IP6OPT_JUMBO_LEN;
    966   1.22    itojun 
    967   1.22    itojun 			/*
    968   1.22    itojun 			 * IPv6 packets that have non 0 payload length
    969   1.35    itojun 			 * must not contain a jumbo payload option.
    970   1.22    itojun 			 */
    971   1.22    itojun 			ip6 = mtod(m, struct ip6_hdr *);
    972   1.22    itojun 			if (ip6->ip6_plen) {
    973  1.116   thorpej 				IP6_STATINC(IP6_STAT_BADOPTIONS);
    974   1.22    itojun 				icmp6_error(m, ICMP6_PARAM_PROB,
    975   1.55    itojun 				    ICMP6_PARAMPROB_HEADER,
    976   1.55    itojun 				    erroff + opt - opthead);
    977   1.55    itojun 				return (-1);
    978   1.22    itojun 			}
    979    1.2    itojun 
    980   1.22    itojun 			/*
    981   1.22    itojun 			 * We may see jumbolen in unaligned location, so
    982   1.22    itojun 			 * we'd need to perform bcopy().
    983   1.22    itojun 			 */
    984  1.126   tsutsui 			memcpy(&jumboplen, opt + 2, sizeof(jumboplen));
    985   1.22    itojun 			jumboplen = (u_int32_t)htonl(jumboplen);
    986   1.22    itojun 
    987   1.22    itojun #if 1
    988   1.22    itojun 			/*
    989   1.22    itojun 			 * if there are multiple jumbo payload options,
    990   1.22    itojun 			 * *plenp will be non-zero and the packet will be
    991   1.22    itojun 			 * rejected.
    992   1.22    itojun 			 * the behavior may need some debate in ipngwg -
    993   1.22    itojun 			 * multiple options does not make sense, however,
    994   1.22    itojun 			 * there's no explicit mention in specification.
    995   1.22    itojun 			 */
    996   1.22    itojun 			if (*plenp != 0) {
    997  1.116   thorpej 				IP6_STATINC(IP6_STAT_BADOPTIONS);
    998   1.22    itojun 				icmp6_error(m, ICMP6_PARAM_PROB,
    999   1.55    itojun 				    ICMP6_PARAMPROB_HEADER,
   1000   1.55    itojun 				    erroff + opt + 2 - opthead);
   1001   1.55    itojun 				return (-1);
   1002   1.22    itojun 			}
   1003    1.8    itojun #endif
   1004    1.2    itojun 
   1005   1.22    itojun 			/*
   1006   1.22    itojun 			 * jumbo payload length must be larger than 65535.
   1007   1.22    itojun 			 */
   1008   1.22    itojun 			if (jumboplen <= IPV6_MAXPACKET) {
   1009  1.116   thorpej 				IP6_STATINC(IP6_STAT_BADOPTIONS);
   1010   1.22    itojun 				icmp6_error(m, ICMP6_PARAM_PROB,
   1011   1.55    itojun 				    ICMP6_PARAMPROB_HEADER,
   1012   1.55    itojun 				    erroff + opt + 2 - opthead);
   1013   1.55    itojun 				return (-1);
   1014   1.22    itojun 			}
   1015   1.22    itojun 			*plenp = jumboplen;
   1016   1.22    itojun 
   1017   1.22    itojun 			break;
   1018   1.35    itojun 		default:		/* unknown option */
   1019   1.35    itojun 			if (hbhlen < IP6OPT_MINLEN) {
   1020  1.116   thorpej 				IP6_STATINC(IP6_STAT_TOOSMALL);
   1021   1.35    itojun 				goto bad;
   1022   1.35    itojun 			}
   1023   1.55    itojun 			optlen = ip6_unknown_opt(opt, m,
   1024   1.55    itojun 			    erroff + opt - opthead);
   1025   1.55    itojun 			if (optlen == -1)
   1026   1.55    itojun 				return (-1);
   1027   1.35    itojun 			optlen += 2;
   1028   1.35    itojun 			break;
   1029    1.2    itojun 		}
   1030    1.2    itojun 	}
   1031    1.2    itojun 
   1032   1.55    itojun 	return (0);
   1033    1.2    itojun 
   1034    1.2    itojun   bad:
   1035    1.2    itojun 	m_freem(m);
   1036   1.55    itojun 	return (-1);
   1037    1.2    itojun }
   1038    1.2    itojun 
   1039    1.2    itojun /*
   1040    1.2    itojun  * Unknown option processing.
   1041    1.2    itojun  * The third argument `off' is the offset from the IPv6 header to the option,
   1042    1.2    itojun  * which is necessary if the IPv6 header the and option header and IPv6 header
   1043    1.2    itojun  * is not continuous in order to return an ICMPv6 error.
   1044    1.2    itojun  */
   1045    1.2    itojun int
   1046  1.107  christos ip6_unknown_opt(u_int8_t *optp, struct mbuf *m, int off)
   1047    1.2    itojun {
   1048    1.2    itojun 	struct ip6_hdr *ip6;
   1049    1.2    itojun 
   1050   1.35    itojun 	switch (IP6OPT_TYPE(*optp)) {
   1051   1.35    itojun 	case IP6OPT_TYPE_SKIP: /* ignore the option */
   1052   1.58    itojun 		return ((int)*(optp + 1));
   1053   1.35    itojun 	case IP6OPT_TYPE_DISCARD:	/* silently discard */
   1054   1.35    itojun 		m_freem(m);
   1055   1.58    itojun 		return (-1);
   1056   1.35    itojun 	case IP6OPT_TYPE_FORCEICMP: /* send ICMP even if multicasted */
   1057  1.116   thorpej 		IP6_STATINC(IP6_STAT_BADOPTIONS);
   1058   1.35    itojun 		icmp6_error(m, ICMP6_PARAM_PROB, ICMP6_PARAMPROB_OPTION, off);
   1059   1.58    itojun 		return (-1);
   1060   1.35    itojun 	case IP6OPT_TYPE_ICMP: /* send ICMP if not multicasted */
   1061  1.116   thorpej 		IP6_STATINC(IP6_STAT_BADOPTIONS);
   1062   1.35    itojun 		ip6 = mtod(m, struct ip6_hdr *);
   1063   1.35    itojun 		if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) ||
   1064   1.35    itojun 		    (m->m_flags & (M_BCAST|M_MCAST)))
   1065   1.35    itojun 			m_freem(m);
   1066   1.35    itojun 		else
   1067   1.35    itojun 			icmp6_error(m, ICMP6_PARAM_PROB,
   1068   1.35    itojun 				    ICMP6_PARAMPROB_OPTION, off);
   1069   1.58    itojun 		return (-1);
   1070    1.2    itojun 	}
   1071    1.2    itojun 
   1072    1.2    itojun 	m_freem(m);		/* XXX: NOTREACHED */
   1073   1.58    itojun 	return (-1);
   1074    1.2    itojun }
   1075    1.2    itojun 
   1076    1.2    itojun /*
   1077    1.9    itojun  * Create the "control" list for this pcb.
   1078    1.9    itojun  *
   1079    1.9    itojun  * The routine will be called from upper layer handlers like tcp6_input().
   1080    1.9    itojun  * Thus the routine assumes that the caller (tcp6_input) have already
   1081    1.9    itojun  * called IP6_EXTHDR_CHECK() and all the extension headers are located in the
   1082    1.9    itojun  * very first mbuf on the mbuf chain.
   1083    1.9    itojun  * We may want to add some infinite loop prevention or sanity checks for safety.
   1084    1.9    itojun  * (This applies only when you are using KAME mbuf chain restriction, i.e.
   1085    1.9    itojun  * you are using IP6_EXTHDR_CHECK() not m_pulldown())
   1086    1.2    itojun  */
   1087    1.2    itojun void
   1088  1.107  christos ip6_savecontrol(struct in6pcb *in6p, struct mbuf **mp,
   1089  1.107  christos 	struct ip6_hdr *ip6, struct mbuf *m)
   1090    1.2    itojun {
   1091   1.85    rpaulo #ifdef RFC2292
   1092   1.85    rpaulo #define IS2292(x, y)	((in6p->in6p_flags & IN6P_RFC2292) ? (x) : (y))
   1093   1.85    rpaulo #else
   1094   1.85    rpaulo #define IS2292(x, y)	(y)
   1095   1.85    rpaulo #endif
   1096   1.85    rpaulo 
   1097  1.123  christos 	if (in6p->in6p_socket->so_options & SO_TIMESTAMP
   1098  1.123  christos #ifdef SO_OTIMESTAMP
   1099  1.123  christos 	    || in6p->in6p_socket->so_options & SO_OTIMESTAMP
   1100  1.123  christos #endif
   1101  1.123  christos 	) {
   1102    1.2    itojun 		struct timeval tv;
   1103    1.2    itojun 
   1104    1.2    itojun 		microtime(&tv);
   1105  1.123  christos #ifdef SO_OTIMESTAMP
   1106  1.123  christos 		if (in6p->in6p_socket->so_options & SO_OTIMESTAMP) {
   1107  1.123  christos 			struct timeval50 tv50;
   1108  1.123  christos 			timeval_to_timeval50(&tv, &tv50);
   1109  1.123  christos 			*mp = sbcreatecontrol((void *) &tv50, sizeof(tv50),
   1110  1.123  christos 			    SCM_OTIMESTAMP, SOL_SOCKET);
   1111  1.123  christos 		} else
   1112  1.123  christos #endif
   1113   1.97  christos 		*mp = sbcreatecontrol((void *) &tv, sizeof(tv),
   1114   1.63    itojun 		    SCM_TIMESTAMP, SOL_SOCKET);
   1115    1.2    itojun 		if (*mp)
   1116    1.2    itojun 			mp = &(*mp)->m_next;
   1117    1.2    itojun 	}
   1118   1.87    rpaulo 
   1119   1.87    rpaulo 	/* some OSes call this logic with IPv4 packet, for SO_TIMESTAMP */
   1120   1.87    rpaulo 	if ((ip6->ip6_vfc & IPV6_VERSION_MASK) != IPV6_VERSION)
   1121   1.87    rpaulo 		return;
   1122   1.87    rpaulo 
   1123    1.2    itojun 	/* RFC 2292 sec. 5 */
   1124   1.35    itojun 	if ((in6p->in6p_flags & IN6P_PKTINFO) != 0) {
   1125    1.2    itojun 		struct in6_pktinfo pi6;
   1126   1.85    rpaulo 
   1127  1.126   tsutsui 		memcpy(&pi6.ipi6_addr, &ip6->ip6_dst, sizeof(struct in6_addr));
   1128   1.81    rpaulo 		in6_clearscope(&pi6.ipi6_addr);	/* XXX */
   1129  1.160     ozaki 		pi6.ipi6_ifindex = m->m_pkthdr.rcvif_index;
   1130   1.97  christos 		*mp = sbcreatecontrol((void *) &pi6,
   1131   1.85    rpaulo 		    sizeof(struct in6_pktinfo),
   1132   1.85    rpaulo 		    IS2292(IPV6_2292PKTINFO, IPV6_PKTINFO), IPPROTO_IPV6);
   1133    1.2    itojun 		if (*mp)
   1134    1.2    itojun 			mp = &(*mp)->m_next;
   1135    1.2    itojun 	}
   1136   1.85    rpaulo 
   1137    1.2    itojun 	if (in6p->in6p_flags & IN6P_HOPLIMIT) {
   1138    1.2    itojun 		int hlim = ip6->ip6_hlim & 0xff;
   1139   1.85    rpaulo 
   1140   1.97  christos 		*mp = sbcreatecontrol((void *) &hlim, sizeof(int),
   1141   1.85    rpaulo 		    IS2292(IPV6_2292HOPLIMIT, IPV6_HOPLIMIT), IPPROTO_IPV6);
   1142   1.85    rpaulo 		if (*mp)
   1143   1.85    rpaulo 			mp = &(*mp)->m_next;
   1144   1.85    rpaulo 	}
   1145   1.85    rpaulo 
   1146   1.85    rpaulo 	if ((in6p->in6p_flags & IN6P_TCLASS) != 0) {
   1147   1.85    rpaulo 		u_int32_t flowinfo;
   1148   1.85    rpaulo 		int tclass;
   1149   1.85    rpaulo 
   1150   1.85    rpaulo 		flowinfo = (u_int32_t)ntohl(ip6->ip6_flow & IPV6_FLOWINFO_MASK);
   1151   1.85    rpaulo 		flowinfo >>= 20;
   1152   1.85    rpaulo 
   1153   1.85    rpaulo 		tclass = flowinfo & 0xff;
   1154   1.97  christos 		*mp = sbcreatecontrol((void *)&tclass, sizeof(tclass),
   1155   1.85    rpaulo 		    IPV6_TCLASS, IPPROTO_IPV6);
   1156   1.85    rpaulo 
   1157    1.2    itojun 		if (*mp)
   1158    1.2    itojun 			mp = &(*mp)->m_next;
   1159    1.2    itojun 	}
   1160    1.2    itojun 
   1161    1.2    itojun 	/*
   1162   1.75    itojun 	 * IPV6_HOPOPTS socket option.  Recall that we required super-user
   1163   1.75    itojun 	 * privilege for the option (see ip6_ctloutput), but it might be too
   1164   1.75    itojun 	 * strict, since there might be some hop-by-hop options which can be
   1165   1.75    itojun 	 * returned to normal user.
   1166   1.85    rpaulo 	 * See also RFC3542 section 8 (or RFC2292 section 6).
   1167    1.2    itojun 	 */
   1168   1.75    itojun 	if ((in6p->in6p_flags & IN6P_HOPOPTS) != 0) {
   1169    1.2    itojun 		/*
   1170    1.2    itojun 		 * Check if a hop-by-hop options header is contatined in the
   1171    1.2    itojun 		 * received packet, and if so, store the options as ancillary
   1172    1.2    itojun 		 * data. Note that a hop-by-hop options header must be
   1173    1.2    itojun 		 * just after the IPv6 header, which fact is assured through
   1174    1.2    itojun 		 * the IPv6 input processing.
   1175    1.2    itojun 		 */
   1176   1.78  christos 		struct ip6_hdr *xip6 = mtod(m, struct ip6_hdr *);
   1177   1.78  christos 		if (xip6->ip6_nxt == IPPROTO_HOPOPTS) {
   1178    1.9    itojun 			struct ip6_hbh *hbh;
   1179    1.9    itojun 			int hbhlen;
   1180   1.62    itojun 			struct mbuf *ext;
   1181    1.9    itojun 
   1182   1.62    itojun 			ext = ip6_pullexthdr(m, sizeof(struct ip6_hdr),
   1183   1.78  christos 			    xip6->ip6_nxt);
   1184   1.62    itojun 			if (ext == NULL) {
   1185  1.116   thorpej 				IP6_STATINC(IP6_STAT_TOOSHORT);
   1186    1.9    itojun 				return;
   1187    1.9    itojun 			}
   1188   1.62    itojun 			hbh = mtod(ext, struct ip6_hbh *);
   1189    1.9    itojun 			hbhlen = (hbh->ip6h_len + 1) << 3;
   1190   1.62    itojun 			if (hbhlen != ext->m_len) {
   1191   1.62    itojun 				m_freem(ext);
   1192  1.116   thorpej 				IP6_STATINC(IP6_STAT_TOOSHORT);
   1193    1.9    itojun 				return;
   1194    1.9    itojun 			}
   1195    1.2    itojun 
   1196    1.2    itojun 			/*
   1197    1.2    itojun 			 * XXX: We copy whole the header even if a jumbo
   1198    1.2    itojun 			 * payload option is included, which option is to
   1199    1.2    itojun 			 * be removed before returning in the RFC 2292.
   1200   1.85    rpaulo 			 * Note: this constraint is removed in RFC3542.
   1201    1.2    itojun 			 */
   1202   1.97  christos 			*mp = sbcreatecontrol((void *)hbh, hbhlen,
   1203   1.85    rpaulo 			    IS2292(IPV6_2292HOPOPTS, IPV6_HOPOPTS),
   1204   1.85    rpaulo 			    IPPROTO_IPV6);
   1205    1.2    itojun 			if (*mp)
   1206    1.2    itojun 				mp = &(*mp)->m_next;
   1207   1.62    itojun 			m_freem(ext);
   1208    1.2    itojun 		}
   1209    1.2    itojun 	}
   1210    1.2    itojun 
   1211    1.2    itojun 	/* IPV6_DSTOPTS and IPV6_RTHDR socket options */
   1212    1.2    itojun 	if (in6p->in6p_flags & (IN6P_DSTOPTS | IN6P_RTHDR)) {
   1213   1.78  christos 		struct ip6_hdr *xip6 = mtod(m, struct ip6_hdr *);
   1214   1.78  christos 		int nxt = xip6->ip6_nxt, off = sizeof(struct ip6_hdr);
   1215    1.2    itojun 
   1216    1.2    itojun 		/*
   1217    1.2    itojun 		 * Search for destination options headers or routing
   1218    1.2    itojun 		 * header(s) through the header chain, and stores each
   1219    1.2    itojun 		 * header as ancillary data.
   1220    1.2    itojun 		 * Note that the order of the headers remains in
   1221    1.2    itojun 		 * the chain of ancillary data.
   1222    1.2    itojun 		 */
   1223   1.86    rpaulo 		for (;;) {	/* is explicit loop prevention necessary? */
   1224   1.62    itojun 			struct ip6_ext *ip6e = NULL;
   1225    1.9    itojun 			int elen;
   1226   1.62    itojun 			struct mbuf *ext = NULL;
   1227    1.9    itojun 
   1228   1.62    itojun 			/*
   1229   1.62    itojun 			 * if it is not an extension header, don't try to
   1230   1.62    itojun 			 * pull it from the chain.
   1231   1.62    itojun 			 */
   1232   1.62    itojun 			switch (nxt) {
   1233   1.62    itojun 			case IPPROTO_DSTOPTS:
   1234   1.62    itojun 			case IPPROTO_ROUTING:
   1235   1.62    itojun 			case IPPROTO_HOPOPTS:
   1236   1.62    itojun 			case IPPROTO_AH: /* is it possible? */
   1237   1.62    itojun 				break;
   1238   1.62    itojun 			default:
   1239   1.62    itojun 				goto loopend;
   1240   1.62    itojun 			}
   1241   1.62    itojun 
   1242   1.62    itojun 			ext = ip6_pullexthdr(m, off, nxt);
   1243   1.62    itojun 			if (ext == NULL) {
   1244  1.116   thorpej 				IP6_STATINC(IP6_STAT_TOOSHORT);
   1245    1.9    itojun 				return;
   1246    1.9    itojun 			}
   1247   1.62    itojun 			ip6e = mtod(ext, struct ip6_ext *);
   1248    1.9    itojun 			if (nxt == IPPROTO_AH)
   1249    1.9    itojun 				elen = (ip6e->ip6e_len + 2) << 2;
   1250    1.9    itojun 			else
   1251    1.9    itojun 				elen = (ip6e->ip6e_len + 1) << 3;
   1252   1.62    itojun 			if (elen != ext->m_len) {
   1253   1.62    itojun 				m_freem(ext);
   1254  1.116   thorpej 				IP6_STATINC(IP6_STAT_TOOSHORT);
   1255    1.9    itojun 				return;
   1256    1.9    itojun 			}
   1257   1.57   thorpej 			KASSERT(IP6_HDR_ALIGNED_P(ip6e));
   1258    1.2    itojun 
   1259   1.35    itojun 			switch (nxt) {
   1260   1.62    itojun 			case IPPROTO_DSTOPTS:
   1261  1.127    martin 				if (!(in6p->in6p_flags & IN6P_DSTOPTS))
   1262   1.35    itojun 					break;
   1263   1.35    itojun 
   1264   1.97  christos 				*mp = sbcreatecontrol((void *)ip6e, elen,
   1265   1.85    rpaulo 				    IS2292(IPV6_2292DSTOPTS, IPV6_DSTOPTS),
   1266   1.85    rpaulo 				    IPPROTO_IPV6);
   1267   1.35    itojun 				if (*mp)
   1268   1.35    itojun 					mp = &(*mp)->m_next;
   1269   1.35    itojun 				break;
   1270   1.35    itojun 
   1271   1.35    itojun 			case IPPROTO_ROUTING:
   1272  1.127    martin 				if (!(in6p->in6p_flags & IN6P_RTHDR))
   1273   1.35    itojun 					break;
   1274   1.35    itojun 
   1275   1.97  christos 				*mp = sbcreatecontrol((void *)ip6e, elen,
   1276   1.85    rpaulo 				    IS2292(IPV6_2292RTHDR, IPV6_RTHDR),
   1277   1.85    rpaulo 				    IPPROTO_IPV6);
   1278   1.35    itojun 				if (*mp)
   1279   1.35    itojun 					mp = &(*mp)->m_next;
   1280   1.35    itojun 				break;
   1281   1.35    itojun 
   1282   1.62    itojun 			case IPPROTO_HOPOPTS:
   1283   1.62    itojun 			case IPPROTO_AH: /* is it possible? */
   1284   1.62    itojun 				break;
   1285   1.62    itojun 
   1286   1.35    itojun 			default:
   1287   1.35    itojun 				/*
   1288   1.62    itojun 			 	 * other cases have been filtered in the above.
   1289   1.62    itojun 				 * none will visit this case.  here we supply
   1290   1.62    itojun 				 * the code just in case (nxt overwritten or
   1291   1.62    itojun 				 * other cases).
   1292   1.35    itojun 				 */
   1293   1.62    itojun 				m_freem(ext);
   1294   1.35    itojun 				goto loopend;
   1295   1.35    itojun 
   1296    1.2    itojun 			}
   1297    1.2    itojun 
   1298    1.2    itojun 			/* proceed with the next header. */
   1299    1.9    itojun 			off += elen;
   1300    1.2    itojun 			nxt = ip6e->ip6e_nxt;
   1301   1.62    itojun 			ip6e = NULL;
   1302   1.62    itojun 			m_freem(ext);
   1303   1.62    itojun 			ext = NULL;
   1304    1.2    itojun 		}
   1305    1.2    itojun 	  loopend:
   1306   1.62    itojun 	  	;
   1307    1.2    itojun 	}
   1308   1.62    itojun }
   1309   1.85    rpaulo #undef IS2292
   1310   1.85    rpaulo 
   1311   1.85    rpaulo 
   1312   1.85    rpaulo void
   1313   1.95    dyoung ip6_notify_pmtu(struct in6pcb *in6p, const struct sockaddr_in6 *dst,
   1314   1.95    dyoung     uint32_t *mtu)
   1315   1.85    rpaulo {
   1316   1.85    rpaulo 	struct socket *so;
   1317   1.85    rpaulo 	struct mbuf *m_mtu;
   1318   1.85    rpaulo 	struct ip6_mtuinfo mtuctl;
   1319   1.85    rpaulo 
   1320   1.85    rpaulo 	so = in6p->in6p_socket;
   1321   1.85    rpaulo 
   1322   1.85    rpaulo 	if (mtu == NULL)
   1323   1.85    rpaulo 		return;
   1324   1.85    rpaulo 
   1325  1.177     ozaki 	KASSERT(so != NULL);
   1326   1.85    rpaulo 
   1327   1.85    rpaulo 	memset(&mtuctl, 0, sizeof(mtuctl));	/* zero-clear for safety */
   1328   1.85    rpaulo 	mtuctl.ip6m_mtu = *mtu;
   1329   1.85    rpaulo 	mtuctl.ip6m_addr = *dst;
   1330   1.85    rpaulo 	if (sa6_recoverscope(&mtuctl.ip6m_addr))
   1331   1.85    rpaulo 		return;
   1332   1.85    rpaulo 
   1333   1.97  christos 	if ((m_mtu = sbcreatecontrol((void *)&mtuctl, sizeof(mtuctl),
   1334   1.85    rpaulo 	    IPV6_PATHMTU, IPPROTO_IPV6)) == NULL)
   1335   1.85    rpaulo 		return;
   1336   1.85    rpaulo 
   1337   1.95    dyoung 	if (sbappendaddr(&so->so_rcv, (const struct sockaddr *)dst, NULL, m_mtu)
   1338   1.85    rpaulo 	    == 0) {
   1339   1.85    rpaulo 		m_freem(m_mtu);
   1340   1.85    rpaulo 		/* XXX: should count statistics */
   1341   1.85    rpaulo 	} else
   1342   1.85    rpaulo 		sorwakeup(so);
   1343   1.85    rpaulo 
   1344   1.85    rpaulo 	return;
   1345   1.85    rpaulo }
   1346   1.62    itojun 
   1347   1.62    itojun /*
   1348   1.62    itojun  * pull single extension header from mbuf chain.  returns single mbuf that
   1349   1.62    itojun  * contains the result, or NULL on error.
   1350   1.62    itojun  */
   1351   1.62    itojun static struct mbuf *
   1352  1.107  christos ip6_pullexthdr(struct mbuf *m, size_t off, int nxt)
   1353   1.62    itojun {
   1354   1.62    itojun 	struct ip6_ext ip6e;
   1355   1.62    itojun 	size_t elen;
   1356   1.62    itojun 	struct mbuf *n;
   1357   1.62    itojun 
   1358   1.62    itojun #ifdef DIAGNOSTIC
   1359   1.62    itojun 	switch (nxt) {
   1360   1.62    itojun 	case IPPROTO_DSTOPTS:
   1361   1.62    itojun 	case IPPROTO_ROUTING:
   1362   1.62    itojun 	case IPPROTO_HOPOPTS:
   1363   1.62    itojun 	case IPPROTO_AH: /* is it possible? */
   1364   1.62    itojun 		break;
   1365   1.62    itojun 	default:
   1366   1.62    itojun 		printf("ip6_pullexthdr: invalid nxt=%d\n", nxt);
   1367    1.2    itojun 	}
   1368   1.62    itojun #endif
   1369    1.2    itojun 
   1370   1.97  christos 	m_copydata(m, off, sizeof(ip6e), (void *)&ip6e);
   1371   1.62    itojun 	if (nxt == IPPROTO_AH)
   1372   1.62    itojun 		elen = (ip6e.ip6e_len + 2) << 2;
   1373   1.62    itojun 	else
   1374   1.62    itojun 		elen = (ip6e.ip6e_len + 1) << 3;
   1375   1.62    itojun 
   1376   1.62    itojun 	MGET(n, M_DONTWAIT, MT_DATA);
   1377   1.62    itojun 	if (n && elen >= MLEN) {
   1378   1.62    itojun 		MCLGET(n, M_DONTWAIT);
   1379   1.62    itojun 		if ((n->m_flags & M_EXT) == 0) {
   1380   1.62    itojun 			m_free(n);
   1381   1.62    itojun 			n = NULL;
   1382   1.62    itojun 		}
   1383   1.62    itojun 	}
   1384   1.62    itojun 	if (!n)
   1385   1.62    itojun 		return NULL;
   1386   1.62    itojun 
   1387   1.62    itojun 	n->m_len = 0;
   1388   1.62    itojun 	if (elen >= M_TRAILINGSPACE(n)) {
   1389   1.62    itojun 		m_free(n);
   1390   1.62    itojun 		return NULL;
   1391   1.62    itojun 	}
   1392   1.62    itojun 
   1393   1.97  christos 	m_copydata(m, off, elen, mtod(n, void *));
   1394   1.62    itojun 	n->m_len = elen;
   1395   1.62    itojun 	return n;
   1396    1.2    itojun }
   1397    1.2    itojun 
   1398    1.2    itojun /*
   1399    1.2    itojun  * Get pointer to the previous header followed by the header
   1400    1.2    itojun  * currently processed.
   1401    1.2    itojun  * XXX: This function supposes that
   1402    1.2    itojun  *	M includes all headers,
   1403    1.2    itojun  *	the next header field and the header length field of each header
   1404    1.2    itojun  *	are valid, and
   1405    1.2    itojun  *	the sum of each header length equals to OFF.
   1406    1.2    itojun  * Because of these assumptions, this function must be called very
   1407    1.2    itojun  * carefully. Moreover, it will not be used in the near future when
   1408    1.2    itojun  * we develop `neater' mechanism to process extension headers.
   1409    1.2    itojun  */
   1410   1.58    itojun u_int8_t *
   1411  1.107  christos ip6_get_prevhdr(struct mbuf *m, int off)
   1412    1.2    itojun {
   1413    1.2    itojun 	struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
   1414    1.2    itojun 
   1415    1.2    itojun 	if (off == sizeof(struct ip6_hdr))
   1416   1.58    itojun 		return (&ip6->ip6_nxt);
   1417    1.2    itojun 	else {
   1418    1.2    itojun 		int len, nxt;
   1419    1.2    itojun 		struct ip6_ext *ip6e = NULL;
   1420    1.2    itojun 
   1421    1.2    itojun 		nxt = ip6->ip6_nxt;
   1422    1.2    itojun 		len = sizeof(struct ip6_hdr);
   1423    1.2    itojun 		while (len < off) {
   1424   1.97  christos 			ip6e = (struct ip6_ext *)(mtod(m, char *) + len);
   1425    1.2    itojun 
   1426   1.35    itojun 			switch (nxt) {
   1427    1.2    itojun 			case IPPROTO_FRAGMENT:
   1428    1.2    itojun 				len += sizeof(struct ip6_frag);
   1429    1.2    itojun 				break;
   1430    1.2    itojun 			case IPPROTO_AH:
   1431    1.2    itojun 				len += (ip6e->ip6e_len + 2) << 2;
   1432    1.2    itojun 				break;
   1433    1.2    itojun 			default:
   1434    1.2    itojun 				len += (ip6e->ip6e_len + 1) << 3;
   1435    1.2    itojun 				break;
   1436    1.2    itojun 			}
   1437    1.2    itojun 			nxt = ip6e->ip6e_nxt;
   1438    1.2    itojun 		}
   1439    1.2    itojun 		if (ip6e)
   1440   1.58    itojun 			return (&ip6e->ip6e_nxt);
   1441    1.2    itojun 		else
   1442    1.2    itojun 			return NULL;
   1443   1.18    itojun 	}
   1444   1.18    itojun }
   1445   1.18    itojun 
   1446   1.18    itojun /*
   1447   1.18    itojun  * get next header offset.  m will be retained.
   1448   1.18    itojun  */
   1449   1.18    itojun int
   1450  1.107  christos ip6_nexthdr(struct mbuf *m, int off, int proto, int *nxtp)
   1451   1.18    itojun {
   1452   1.18    itojun 	struct ip6_hdr ip6;
   1453   1.18    itojun 	struct ip6_ext ip6e;
   1454   1.18    itojun 	struct ip6_frag fh;
   1455   1.18    itojun 
   1456   1.18    itojun 	/* just in case */
   1457   1.18    itojun 	if (m == NULL)
   1458   1.18    itojun 		panic("ip6_nexthdr: m == NULL");
   1459   1.18    itojun 	if ((m->m_flags & M_PKTHDR) == 0 || m->m_pkthdr.len < off)
   1460   1.18    itojun 		return -1;
   1461   1.18    itojun 
   1462   1.18    itojun 	switch (proto) {
   1463   1.18    itojun 	case IPPROTO_IPV6:
   1464   1.83    rpaulo 		/* do not chase beyond intermediate IPv6 headers */
   1465   1.83    rpaulo 		if (off != 0)
   1466   1.83    rpaulo 			return -1;
   1467   1.18    itojun 		if (m->m_pkthdr.len < off + sizeof(ip6))
   1468   1.18    itojun 			return -1;
   1469   1.97  christos 		m_copydata(m, off, sizeof(ip6), (void *)&ip6);
   1470   1.18    itojun 		if (nxtp)
   1471   1.18    itojun 			*nxtp = ip6.ip6_nxt;
   1472   1.18    itojun 		off += sizeof(ip6);
   1473   1.18    itojun 		return off;
   1474   1.18    itojun 
   1475   1.18    itojun 	case IPPROTO_FRAGMENT:
   1476   1.18    itojun 		/*
   1477   1.18    itojun 		 * terminate parsing if it is not the first fragment,
   1478   1.18    itojun 		 * it does not make sense to parse through it.
   1479   1.18    itojun 		 */
   1480   1.18    itojun 		if (m->m_pkthdr.len < off + sizeof(fh))
   1481   1.18    itojun 			return -1;
   1482   1.97  christos 		m_copydata(m, off, sizeof(fh), (void *)&fh);
   1483   1.67    itojun 		if ((fh.ip6f_offlg & IP6F_OFF_MASK) != 0)
   1484   1.18    itojun 			return -1;
   1485   1.18    itojun 		if (nxtp)
   1486   1.18    itojun 			*nxtp = fh.ip6f_nxt;
   1487   1.18    itojun 		off += sizeof(struct ip6_frag);
   1488   1.18    itojun 		return off;
   1489   1.18    itojun 
   1490   1.18    itojun 	case IPPROTO_AH:
   1491   1.18    itojun 		if (m->m_pkthdr.len < off + sizeof(ip6e))
   1492   1.18    itojun 			return -1;
   1493   1.97  christos 		m_copydata(m, off, sizeof(ip6e), (void *)&ip6e);
   1494   1.18    itojun 		if (nxtp)
   1495   1.18    itojun 			*nxtp = ip6e.ip6e_nxt;
   1496   1.18    itojun 		off += (ip6e.ip6e_len + 2) << 2;
   1497   1.47    itojun 		if (m->m_pkthdr.len < off)
   1498   1.47    itojun 			return -1;
   1499   1.18    itojun 		return off;
   1500   1.18    itojun 
   1501   1.18    itojun 	case IPPROTO_HOPOPTS:
   1502   1.18    itojun 	case IPPROTO_ROUTING:
   1503   1.18    itojun 	case IPPROTO_DSTOPTS:
   1504   1.18    itojun 		if (m->m_pkthdr.len < off + sizeof(ip6e))
   1505   1.18    itojun 			return -1;
   1506   1.97  christos 		m_copydata(m, off, sizeof(ip6e), (void *)&ip6e);
   1507   1.18    itojun 		if (nxtp)
   1508   1.18    itojun 			*nxtp = ip6e.ip6e_nxt;
   1509   1.18    itojun 		off += (ip6e.ip6e_len + 1) << 3;
   1510   1.47    itojun 		if (m->m_pkthdr.len < off)
   1511   1.47    itojun 			return -1;
   1512   1.18    itojun 		return off;
   1513   1.18    itojun 
   1514   1.18    itojun 	case IPPROTO_NONE:
   1515   1.18    itojun 	case IPPROTO_ESP:
   1516   1.18    itojun 	case IPPROTO_IPCOMP:
   1517   1.18    itojun 		/* give up */
   1518   1.18    itojun 		return -1;
   1519   1.18    itojun 
   1520   1.18    itojun 	default:
   1521   1.18    itojun 		return -1;
   1522   1.18    itojun 	}
   1523   1.18    itojun }
   1524   1.18    itojun 
   1525   1.18    itojun /*
   1526   1.18    itojun  * get offset for the last header in the chain.  m will be kept untainted.
   1527   1.18    itojun  */
   1528   1.18    itojun int
   1529  1.107  christos ip6_lasthdr(struct mbuf *m, int off, int proto, int *nxtp)
   1530   1.18    itojun {
   1531   1.18    itojun 	int newoff;
   1532   1.18    itojun 	int nxt;
   1533   1.18    itojun 
   1534   1.18    itojun 	if (!nxtp) {
   1535   1.18    itojun 		nxt = -1;
   1536   1.18    itojun 		nxtp = &nxt;
   1537   1.18    itojun 	}
   1538   1.86    rpaulo 	for (;;) {
   1539   1.18    itojun 		newoff = ip6_nexthdr(m, off, proto, nxtp);
   1540   1.18    itojun 		if (newoff < 0)
   1541   1.18    itojun 			return off;
   1542   1.18    itojun 		else if (newoff < off)
   1543   1.18    itojun 			return -1;	/* invalid */
   1544   1.18    itojun 		else if (newoff == off)
   1545   1.18    itojun 			return newoff;
   1546   1.18    itojun 
   1547   1.18    itojun 		off = newoff;
   1548   1.18    itojun 		proto = *nxtp;
   1549    1.2    itojun 	}
   1550    1.2    itojun }
   1551    1.2    itojun 
   1552   1.81    rpaulo struct m_tag *
   1553  1.107  christos ip6_addaux(struct mbuf *m)
   1554   1.81    rpaulo {
   1555   1.81    rpaulo 	struct m_tag *mtag;
   1556   1.81    rpaulo 
   1557   1.81    rpaulo 	mtag = m_tag_find(m, PACKET_TAG_INET6, NULL);
   1558   1.81    rpaulo 	if (!mtag) {
   1559   1.81    rpaulo 		mtag = m_tag_get(PACKET_TAG_INET6, sizeof(struct ip6aux),
   1560   1.81    rpaulo 		    M_NOWAIT);
   1561   1.81    rpaulo 		if (mtag) {
   1562   1.81    rpaulo 			m_tag_prepend(m, mtag);
   1563  1.124    cegger 			memset(mtag + 1, 0, sizeof(struct ip6aux));
   1564   1.81    rpaulo 		}
   1565   1.81    rpaulo 	}
   1566   1.81    rpaulo 	return mtag;
   1567   1.81    rpaulo }
   1568   1.81    rpaulo 
   1569   1.81    rpaulo struct m_tag *
   1570  1.107  christos ip6_findaux(struct mbuf *m)
   1571   1.81    rpaulo {
   1572   1.81    rpaulo 	struct m_tag *mtag;
   1573   1.81    rpaulo 
   1574   1.81    rpaulo 	mtag = m_tag_find(m, PACKET_TAG_INET6, NULL);
   1575   1.81    rpaulo 	return mtag;
   1576   1.81    rpaulo }
   1577   1.81    rpaulo 
   1578   1.81    rpaulo void
   1579  1.107  christos ip6_delaux(struct mbuf *m)
   1580   1.81    rpaulo {
   1581   1.81    rpaulo 	struct m_tag *mtag;
   1582   1.81    rpaulo 
   1583   1.81    rpaulo 	mtag = m_tag_find(m, PACKET_TAG_INET6, NULL);
   1584   1.81    rpaulo 	if (mtag)
   1585   1.81    rpaulo 		m_tag_delete(m, mtag);
   1586   1.81    rpaulo }
   1587   1.81    rpaulo 
   1588    1.2    itojun /*
   1589    1.2    itojun  * System control for IP6
   1590    1.2    itojun  */
   1591    1.2    itojun 
   1592  1.120      matt const u_char inet6ctlerrmap[PRC_NCMDS] = {
   1593    1.2    itojun 	0,		0,		0,		0,
   1594    1.2    itojun 	0,		EMSGSIZE,	EHOSTDOWN,	EHOSTUNREACH,
   1595    1.2    itojun 	EHOSTUNREACH,	EHOSTUNREACH,	ECONNREFUSED,	ECONNREFUSED,
   1596    1.2    itojun 	EMSGSIZE,	EHOSTUNREACH,	0,		0,
   1597    1.2    itojun 	0,		0,		0,		0,
   1598    1.2    itojun 	ENOPROTOOPT
   1599    1.2    itojun };
   1600    1.2    itojun 
   1601  1.153  christos extern int sysctl_net_inet6_addrctlpolicy(SYSCTLFN_ARGS);
   1602  1.153  christos 
   1603  1.116   thorpej static int
   1604  1.116   thorpej sysctl_net_inet6_ip6_stats(SYSCTLFN_ARGS)
   1605  1.116   thorpej {
   1606  1.116   thorpej 
   1607  1.119   thorpej 	return (NETSTAT_SYSCTL(ip6stat_percpu, IP6_NSTATS));
   1608  1.116   thorpej }
   1609  1.116   thorpej 
   1610  1.128     pooka static void
   1611  1.128     pooka sysctl_net_inet6_ip6_setup(struct sysctllog **clog)
   1612    1.2    itojun {
   1613   1.85    rpaulo #ifdef RFC2292
   1614   1.85    rpaulo #define IS2292(x, y)	((in6p->in6p_flags & IN6P_RFC2292) ? (x) : (y))
   1615   1.85    rpaulo #else
   1616   1.85    rpaulo #define IS2292(x, y)	(y)
   1617   1.85    rpaulo #endif
   1618   1.26    itojun 
   1619   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1620   1.73    atatat 		       CTLFLAG_PERMANENT,
   1621   1.74    atatat 		       CTLTYPE_NODE, "inet6",
   1622   1.74    atatat 		       SYSCTL_DESCR("PF_INET6 related settings"),
   1623   1.70    atatat 		       NULL, 0, NULL, 0,
   1624   1.70    atatat 		       CTL_NET, PF_INET6, CTL_EOL);
   1625   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1626   1.73    atatat 		       CTLFLAG_PERMANENT,
   1627   1.74    atatat 		       CTLTYPE_NODE, "ip6",
   1628   1.74    atatat 		       SYSCTL_DESCR("IPv6 related settings"),
   1629   1.70    atatat 		       NULL, 0, NULL, 0,
   1630   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6, CTL_EOL);
   1631   1.70    atatat 
   1632   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1633   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1634   1.74    atatat 		       CTLTYPE_INT, "forwarding",
   1635   1.74    atatat 		       SYSCTL_DESCR("Enable forwarding of INET6 datagrams"),
   1636   1.70    atatat 		       NULL, 0, &ip6_forwarding, 0,
   1637   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1638   1.70    atatat 		       IPV6CTL_FORWARDING, CTL_EOL);
   1639   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1640   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1641   1.74    atatat 		       CTLTYPE_INT, "redirect",
   1642   1.74    atatat 		       SYSCTL_DESCR("Enable sending of ICMPv6 redirect messages"),
   1643   1.70    atatat 		       NULL, 0, &ip6_sendredirects, 0,
   1644   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1645   1.70    atatat 		       IPV6CTL_SENDREDIRECTS, CTL_EOL);
   1646   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1647   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1648   1.74    atatat 		       CTLTYPE_INT, "hlim",
   1649   1.74    atatat 		       SYSCTL_DESCR("Hop limit for an INET6 datagram"),
   1650   1.70    atatat 		       NULL, 0, &ip6_defhlim, 0,
   1651   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1652   1.70    atatat 		       IPV6CTL_DEFHLIM, CTL_EOL);
   1653   1.70    atatat #ifdef notyet
   1654   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1655   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1656   1.70    atatat 		       CTLTYPE_INT, "mtu", NULL,
   1657   1.70    atatat 		       NULL, 0, &, 0,
   1658   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1659   1.70    atatat 		       IPV6CTL_DEFMTU, CTL_EOL);
   1660   1.70    atatat #endif
   1661   1.70    atatat #ifdef __no_idea__
   1662   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1663   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1664   1.70    atatat 		       CTLTYPE_INT, "forwsrcrt", NULL,
   1665   1.70    atatat 		       NULL, 0, &?, 0,
   1666   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1667   1.70    atatat 		       IPV6CTL_FORWSRCRT, CTL_EOL);
   1668   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1669   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1670   1.70    atatat 		       CTLTYPE_STRUCT, "mrtstats", NULL,
   1671   1.70    atatat 		       NULL, 0, &?, sizeof(?),
   1672   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1673   1.70    atatat 		       IPV6CTL_MRTSTATS, CTL_EOL);
   1674   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1675   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1676   1.70    atatat 		       CTLTYPE_?, "mrtproto", NULL,
   1677   1.70    atatat 		       NULL, 0, &?, sizeof(?),
   1678   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1679   1.70    atatat 		       IPV6CTL_MRTPROTO, CTL_EOL);
   1680   1.70    atatat #endif
   1681   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1682   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1683   1.74    atatat 		       CTLTYPE_INT, "maxfragpackets",
   1684   1.74    atatat 		       SYSCTL_DESCR("Maximum number of fragments to buffer "
   1685   1.74    atatat 				    "for reassembly"),
   1686   1.70    atatat 		       NULL, 0, &ip6_maxfragpackets, 0,
   1687   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1688   1.70    atatat 		       IPV6CTL_MAXFRAGPACKETS, CTL_EOL);
   1689   1.70    atatat #ifdef __no_idea__
   1690   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1691   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1692   1.70    atatat 		       CTLTYPE_INT, "sourcecheck", NULL,
   1693   1.70    atatat 		       NULL, 0, &?, 0,
   1694   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1695   1.70    atatat 		       IPV6CTL_SOURCECHECK, CTL_EOL);
   1696   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1697   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1698   1.70    atatat 		       CTLTYPE_INT, "sourcecheck_logint", NULL,
   1699   1.70    atatat 		       NULL, 0, &?, 0,
   1700   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1701   1.70    atatat 		       IPV6CTL_SOURCECHECK_LOGINT, CTL_EOL);
   1702   1.70    atatat #endif
   1703   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1704   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1705   1.74    atatat 		       CTLTYPE_INT, "accept_rtadv",
   1706   1.74    atatat 		       SYSCTL_DESCR("Accept router advertisements"),
   1707   1.70    atatat 		       NULL, 0, &ip6_accept_rtadv, 0,
   1708   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1709   1.70    atatat 		       IPV6CTL_ACCEPT_RTADV, CTL_EOL);
   1710   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1711   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1712  1.131       spz 		       CTLTYPE_INT, "rtadv_maxroutes",
   1713  1.131       spz 		       SYSCTL_DESCR("Maximum number of routes accepted via router advertisements"),
   1714  1.131       spz 		       NULL, 0, &ip6_rtadv_maxroutes, 0,
   1715  1.131       spz 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1716  1.131       spz 		       IPV6CTL_RTADV_MAXROUTES, CTL_EOL);
   1717  1.131       spz 	sysctl_createv(clog, 0, NULL, NULL,
   1718  1.131       spz 		       CTLFLAG_PERMANENT,
   1719  1.131       spz 		       CTLTYPE_INT, "rtadv_numroutes",
   1720  1.131       spz 		       SYSCTL_DESCR("Current number of routes accepted via router advertisements"),
   1721  1.131       spz 		       NULL, 0, &nd6_numroutes, 0,
   1722  1.131       spz 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1723  1.131       spz 		       IPV6CTL_RTADV_NUMROUTES, CTL_EOL);
   1724  1.131       spz 	sysctl_createv(clog, 0, NULL, NULL,
   1725  1.131       spz 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1726   1.74    atatat 		       CTLTYPE_INT, "keepfaith",
   1727   1.74    atatat 		       SYSCTL_DESCR("Activate faith interface"),
   1728   1.70    atatat 		       NULL, 0, &ip6_keepfaith, 0,
   1729   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1730   1.70    atatat 		       IPV6CTL_KEEPFAITH, CTL_EOL);
   1731   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1732   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1733   1.74    atatat 		       CTLTYPE_INT, "log_interval",
   1734   1.74    atatat 		       SYSCTL_DESCR("Minumum interval between logging "
   1735   1.74    atatat 				    "unroutable packets"),
   1736   1.70    atatat 		       NULL, 0, &ip6_log_interval, 0,
   1737   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1738   1.70    atatat 		       IPV6CTL_LOG_INTERVAL, CTL_EOL);
   1739   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1740   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1741   1.74    atatat 		       CTLTYPE_INT, "hdrnestlimit",
   1742   1.74    atatat 		       SYSCTL_DESCR("Maximum number of nested IPv6 headers"),
   1743   1.70    atatat 		       NULL, 0, &ip6_hdrnestlimit, 0,
   1744   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1745   1.70    atatat 		       IPV6CTL_HDRNESTLIMIT, CTL_EOL);
   1746   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1747   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1748   1.74    atatat 		       CTLTYPE_INT, "dad_count",
   1749   1.74    atatat 		       SYSCTL_DESCR("Number of Duplicate Address Detection "
   1750   1.74    atatat 				    "probes to send"),
   1751   1.70    atatat 		       NULL, 0, &ip6_dad_count, 0,
   1752   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1753   1.70    atatat 		       IPV6CTL_DAD_COUNT, CTL_EOL);
   1754   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1755   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1756   1.74    atatat 		       CTLTYPE_INT, "auto_flowlabel",
   1757   1.74    atatat 		       SYSCTL_DESCR("Assign random IPv6 flow labels"),
   1758   1.70    atatat 		       NULL, 0, &ip6_auto_flowlabel, 0,
   1759   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1760   1.70    atatat 		       IPV6CTL_AUTO_FLOWLABEL, CTL_EOL);
   1761   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1762   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1763   1.74    atatat 		       CTLTYPE_INT, "defmcasthlim",
   1764   1.74    atatat 		       SYSCTL_DESCR("Default multicast hop limit"),
   1765   1.70    atatat 		       NULL, 0, &ip6_defmcasthlim, 0,
   1766   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1767   1.70    atatat 		       IPV6CTL_DEFMCASTHLIM, CTL_EOL);
   1768   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1769   1.73    atatat 		       CTLFLAG_PERMANENT,
   1770   1.74    atatat 		       CTLTYPE_STRING, "kame_version",
   1771   1.74    atatat 		       SYSCTL_DESCR("KAME Version"),
   1772   1.78  christos 		       NULL, 0, __UNCONST(__KAME_VERSION), 0,
   1773   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1774   1.70    atatat 		       IPV6CTL_KAME_VERSION, CTL_EOL);
   1775   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1776   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1777   1.74    atatat 		       CTLTYPE_INT, "use_deprecated",
   1778   1.74    atatat 		       SYSCTL_DESCR("Allow use of deprecated addresses as "
   1779   1.74    atatat 				    "source addresses"),
   1780   1.70    atatat 		       NULL, 0, &ip6_use_deprecated, 0,
   1781   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1782   1.70    atatat 		       IPV6CTL_USE_DEPRECATED, CTL_EOL);
   1783   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1784   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1785   1.70    atatat 		       CTLTYPE_INT, "rr_prune", NULL,
   1786   1.70    atatat 		       NULL, 0, &ip6_rr_prune, 0,
   1787   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1788   1.70    atatat 		       IPV6CTL_RR_PRUNE, CTL_EOL);
   1789   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1790   1.73    atatat 		       CTLFLAG_PERMANENT
   1791   1.70    atatat #ifndef INET6_BINDV6ONLY
   1792   1.73    atatat 		       |CTLFLAG_READWRITE,
   1793   1.70    atatat #endif
   1794   1.74    atatat 		       CTLTYPE_INT, "v6only",
   1795   1.74    atatat 		       SYSCTL_DESCR("Disallow PF_INET6 sockets from connecting "
   1796   1.74    atatat 				    "to PF_INET sockets"),
   1797   1.70    atatat 		       NULL, 0, &ip6_v6only, 0,
   1798   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1799   1.70    atatat 		       IPV6CTL_V6ONLY, CTL_EOL);
   1800   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1801   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1802   1.74    atatat 		       CTLTYPE_INT, "anonportmin",
   1803   1.74    atatat 		       SYSCTL_DESCR("Lowest ephemeral port number to assign"),
   1804   1.70    atatat 		       sysctl_net_inet_ip_ports, 0, &ip6_anonportmin, 0,
   1805   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1806   1.70    atatat 		       IPV6CTL_ANONPORTMIN, CTL_EOL);
   1807   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1808   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1809   1.74    atatat 		       CTLTYPE_INT, "anonportmax",
   1810   1.74    atatat 		       SYSCTL_DESCR("Highest ephemeral port number to assign"),
   1811   1.70    atatat 		       sysctl_net_inet_ip_ports, 0, &ip6_anonportmax, 0,
   1812   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1813   1.70    atatat 		       IPV6CTL_ANONPORTMAX, CTL_EOL);
   1814   1.26    itojun #ifndef IPNOPRIVPORTS
   1815   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1816   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1817   1.74    atatat 		       CTLTYPE_INT, "lowportmin",
   1818   1.74    atatat 		       SYSCTL_DESCR("Lowest privileged ephemeral port number "
   1819   1.74    atatat 				    "to assign"),
   1820   1.70    atatat 		       sysctl_net_inet_ip_ports, 0, &ip6_lowportmin, 0,
   1821   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1822   1.70    atatat 		       IPV6CTL_LOWPORTMIN, CTL_EOL);
   1823   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1824   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1825   1.74    atatat 		       CTLTYPE_INT, "lowportmax",
   1826   1.74    atatat 		       SYSCTL_DESCR("Highest privileged ephemeral port number "
   1827   1.74    atatat 				    "to assign"),
   1828   1.70    atatat 		       sysctl_net_inet_ip_ports, 0, &ip6_lowportmax, 0,
   1829   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1830   1.70    atatat 		       IPV6CTL_LOWPORTMAX, CTL_EOL);
   1831   1.70    atatat #endif /* IPNOPRIVPORTS */
   1832   1.73    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1833   1.73    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1834  1.153  christos 		       CTLTYPE_INT, "auto_linklocal",
   1835  1.153  christos 		       SYSCTL_DESCR("Default value of per-interface flag for "
   1836  1.153  christos 		                    "adding an IPv6 link-local address to "
   1837  1.153  christos 				    "interfaces when attached"),
   1838  1.153  christos 		       NULL, 0, &ip6_auto_linklocal, 0,
   1839  1.153  christos 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1840  1.153  christos 		       IPV6CTL_AUTO_LINKLOCAL, CTL_EOL);
   1841  1.153  christos 	sysctl_createv(clog, 0, NULL, NULL,
   1842  1.153  christos 		       CTLFLAG_PERMANENT|CTLFLAG_READONLY,
   1843  1.153  christos 		       CTLTYPE_STRUCT, "addctlpolicy",
   1844  1.153  christos 		       SYSCTL_DESCR("Return the current address control"
   1845  1.153  christos 			   " policy"),
   1846  1.153  christos 		       sysctl_net_inet6_addrctlpolicy, 0, NULL, 0,
   1847  1.153  christos 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1848  1.153  christos 		       IPV6CTL_ADDRCTLPOLICY, CTL_EOL);
   1849  1.153  christos 	sysctl_createv(clog, 0, NULL, NULL,
   1850  1.153  christos 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1851   1.83    rpaulo 		       CTLTYPE_INT, "use_tempaddr",
   1852   1.83    rpaulo 		       SYSCTL_DESCR("Use temporary address"),
   1853   1.83    rpaulo 		       NULL, 0, &ip6_use_tempaddr, 0,
   1854   1.83    rpaulo 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1855   1.83    rpaulo 		       CTL_CREATE, CTL_EOL);
   1856   1.83    rpaulo 	sysctl_createv(clog, 0, NULL, NULL,
   1857   1.83    rpaulo 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1858  1.150       roy 		       CTLTYPE_INT, "prefer_tempaddr",
   1859  1.150       roy 		       SYSCTL_DESCR("Prefer temporary address as source "
   1860  1.150       roy 		                    "address"),
   1861  1.150       roy 		       NULL, 0, &ip6_prefer_tempaddr, 0,
   1862  1.150       roy 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1863  1.150       roy 		       CTL_CREATE, CTL_EOL);
   1864  1.150       roy 	sysctl_createv(clog, 0, NULL, NULL,
   1865  1.150       roy 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1866   1.83    rpaulo 		       CTLTYPE_INT, "temppltime",
   1867   1.83    rpaulo 		       SYSCTL_DESCR("preferred lifetime of a temporary address"),
   1868   1.83    rpaulo 		       NULL, 0, &ip6_temp_preferred_lifetime, 0,
   1869   1.83    rpaulo 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1870   1.83    rpaulo 		       CTL_CREATE, CTL_EOL);
   1871   1.83    rpaulo 	sysctl_createv(clog, 0, NULL, NULL,
   1872   1.83    rpaulo 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1873   1.83    rpaulo 		       CTLTYPE_INT, "tempvltime",
   1874   1.83    rpaulo 		       SYSCTL_DESCR("valid lifetime of a temporary address"),
   1875   1.83    rpaulo 		       NULL, 0, &ip6_temp_valid_lifetime, 0,
   1876   1.83    rpaulo 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1877   1.83    rpaulo 		       CTL_CREATE, CTL_EOL);
   1878   1.83    rpaulo 	sysctl_createv(clog, 0, NULL, NULL,
   1879   1.83    rpaulo 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1880   1.74    atatat 		       CTLTYPE_INT, "maxfrags",
   1881   1.74    atatat 		       SYSCTL_DESCR("Maximum fragments in reassembly queue"),
   1882   1.70    atatat 		       NULL, 0, &ip6_maxfrags, 0,
   1883   1.70    atatat 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1884   1.70    atatat 		       IPV6CTL_MAXFRAGS, CTL_EOL);
   1885   1.79    rpaulo 	sysctl_createv(clog, 0, NULL, NULL,
   1886   1.79    rpaulo 		       CTLFLAG_PERMANENT,
   1887   1.79    rpaulo 		       CTLTYPE_STRUCT, "stats",
   1888   1.79    rpaulo 		       SYSCTL_DESCR("IPv6 statistics"),
   1889  1.116   thorpej 		       sysctl_net_inet6_ip6_stats, 0, NULL, 0,
   1890   1.79    rpaulo 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1891   1.79    rpaulo 		       IPV6CTL_STATS, CTL_EOL);
   1892   1.81    rpaulo 	sysctl_createv(clog, 0, NULL, NULL,
   1893   1.81    rpaulo 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1894   1.81    rpaulo 		       CTLTYPE_INT, "use_defaultzone",
   1895   1.81    rpaulo 		       SYSCTL_DESCR("Whether to use the default scope zones"),
   1896   1.81    rpaulo 		       NULL, 0, &ip6_use_defzone, 0,
   1897   1.81    rpaulo 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1898   1.81    rpaulo 		       IPV6CTL_USE_DEFAULTZONE, CTL_EOL);
   1899   1.83    rpaulo 	sysctl_createv(clog, 0, NULL, NULL,
   1900   1.83    rpaulo 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1901   1.83    rpaulo 		       CTLTYPE_INT, "mcast_pmtu",
   1902   1.83    rpaulo 		       SYSCTL_DESCR("Enable pMTU discovery for multicast packet"),
   1903   1.83    rpaulo 		       NULL, 0, &ip6_mcast_pmtu, 0,
   1904   1.83    rpaulo 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1905   1.83    rpaulo 		       CTL_CREATE, CTL_EOL);
   1906  1.138  christos 	/* anonportalgo RFC6056 subtree */
   1907  1.140  christos 	const struct sysctlnode *portalgo_node;
   1908  1.140  christos 	sysctl_createv(clog, 0, NULL, &portalgo_node,
   1909  1.138  christos 		       CTLFLAG_PERMANENT,
   1910  1.138  christos 		       CTLTYPE_NODE, "anonportalgo",
   1911  1.138  christos 		       SYSCTL_DESCR("Anonymous port algorithm selection (RFC 6056)"),
   1912  1.138  christos 	    	       NULL, 0, NULL, 0,
   1913  1.138  christos 		       CTL_NET, PF_INET6, IPPROTO_IPV6, CTL_CREATE, CTL_EOL);
   1914  1.140  christos 	sysctl_createv(clog, 0, &portalgo_node, NULL,
   1915  1.138  christos 		       CTLFLAG_PERMANENT,
   1916  1.138  christos 		       CTLTYPE_STRING, "available",
   1917  1.138  christos 		       SYSCTL_DESCR("available algorithms"),
   1918  1.140  christos 		       sysctl_portalgo_available, 0, NULL, PORTALGO_MAXLEN,
   1919  1.138  christos 		       CTL_CREATE, CTL_EOL);
   1920  1.140  christos 	sysctl_createv(clog, 0, &portalgo_node, NULL,
   1921  1.138  christos 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1922  1.138  christos 		       CTLTYPE_STRING, "selected",
   1923  1.138  christos 		       SYSCTL_DESCR("selected algorithm"),
   1924  1.140  christos 	               sysctl_portalgo_selected6, 0, NULL, PORTALGO_MAXLEN,
   1925  1.138  christos 		       CTL_CREATE, CTL_EOL);
   1926  1.141  christos 	sysctl_createv(clog, 0, &portalgo_node, NULL,
   1927  1.141  christos 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1928  1.141  christos 		       CTLTYPE_STRUCT, "reserve",
   1929  1.141  christos 		       SYSCTL_DESCR("bitmap of reserved ports"),
   1930  1.141  christos 		       sysctl_portalgo_reserve6, 0, NULL, 0,
   1931  1.141  christos 		       CTL_CREATE, CTL_EOL);
   1932  1.139  christos 	sysctl_createv(clog, 0, NULL, NULL,
   1933  1.139  christos 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1934  1.139  christos 		       CTLTYPE_INT, "neighborgcthresh",
   1935  1.139  christos 		       SYSCTL_DESCR("Maximum number of entries in neighbor"
   1936  1.139  christos 			" cache"),
   1937  1.139  christos 		       NULL, 1, &ip6_neighborgcthresh, 0,
   1938  1.139  christos 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1939  1.139  christos 		       CTL_CREATE, CTL_EOL);
   1940  1.139  christos 	sysctl_createv(clog, 0, NULL, NULL,
   1941  1.139  christos 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1942  1.139  christos 		       CTLTYPE_INT, "maxifprefixes",
   1943  1.139  christos 		       SYSCTL_DESCR("Maximum number of prefixes created by"
   1944  1.139  christos 			   " route advertisement per interface"),
   1945  1.139  christos 		       NULL, 1, &ip6_maxifprefixes, 0,
   1946  1.139  christos 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1947  1.139  christos 		       CTL_CREATE, CTL_EOL);
   1948  1.139  christos 	sysctl_createv(clog, 0, NULL, NULL,
   1949  1.139  christos 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1950  1.139  christos 		       CTLTYPE_INT, "maxifdefrouters",
   1951  1.139  christos 		       SYSCTL_DESCR("Maximum number of default routers created"
   1952  1.139  christos 			   " by route advertisement per interface"),
   1953  1.139  christos 		       NULL, 1, &ip6_maxifdefrouters, 0,
   1954  1.139  christos 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1955  1.139  christos 		       CTL_CREATE, CTL_EOL);
   1956  1.139  christos 	sysctl_createv(clog, 0, NULL, NULL,
   1957  1.139  christos 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1958  1.139  christos 		       CTLTYPE_INT, "maxdynroutes",
   1959  1.139  christos 		       SYSCTL_DESCR("Maximum number of routes created via"
   1960  1.139  christos 			   " redirect"),
   1961  1.139  christos 		       NULL, 1, &ip6_maxdynroutes, 0,
   1962  1.139  christos 		       CTL_NET, PF_INET6, IPPROTO_IPV6,
   1963  1.139  christos 		       CTL_CREATE, CTL_EOL);
   1964    1.2    itojun }
   1965  1.116   thorpej 
   1966  1.116   thorpej void
   1967  1.116   thorpej ip6_statinc(u_int stat)
   1968  1.116   thorpej {
   1969  1.116   thorpej 
   1970  1.116   thorpej 	KASSERT(stat < IP6_NSTATS);
   1971  1.116   thorpej 	IP6_STATINC(stat);
   1972  1.116   thorpej }
   1973