Home | History | Annotate | Line # | Download | only in netinet6
ip6_output.c revision 1.142
      1  1.142  christos /*	$NetBSD: ip6_output.c,v 1.142 2011/12/31 20:41:59 christos Exp $	*/
      2   1.33    itojun /*	$KAME: ip6_output.c,v 1.172 2001/03/25 09:55:56 itojun Exp $	*/
      3    1.3   thorpej 
      4    1.2    itojun /*
      5    1.2    itojun  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
      6    1.2    itojun  * All rights reserved.
      7   1.19    itojun  *
      8    1.2    itojun  * Redistribution and use in source and binary forms, with or without
      9    1.2    itojun  * modification, are permitted provided that the following conditions
     10    1.2    itojun  * are met:
     11    1.2    itojun  * 1. Redistributions of source code must retain the above copyright
     12    1.2    itojun  *    notice, this list of conditions and the following disclaimer.
     13    1.2    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     14    1.2    itojun  *    notice, this list of conditions and the following disclaimer in the
     15    1.2    itojun  *    documentation and/or other materials provided with the distribution.
     16    1.2    itojun  * 3. Neither the name of the project nor the names of its contributors
     17    1.2    itojun  *    may be used to endorse or promote products derived from this software
     18    1.2    itojun  *    without specific prior written permission.
     19   1.19    itojun  *
     20    1.2    itojun  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     21    1.2    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     22    1.2    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     23    1.2    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     24    1.2    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     25    1.2    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     26    1.2    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     27    1.2    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     28    1.2    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     29    1.2    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     30    1.2    itojun  * SUCH DAMAGE.
     31    1.2    itojun  */
     32    1.2    itojun 
     33    1.2    itojun /*
     34    1.2    itojun  * Copyright (c) 1982, 1986, 1988, 1990, 1993
     35    1.2    itojun  *	The Regents of the University of California.  All rights reserved.
     36    1.2    itojun  *
     37    1.2    itojun  * Redistribution and use in source and binary forms, with or without
     38    1.2    itojun  * modification, are permitted provided that the following conditions
     39    1.2    itojun  * are met:
     40    1.2    itojun  * 1. Redistributions of source code must retain the above copyright
     41    1.2    itojun  *    notice, this list of conditions and the following disclaimer.
     42    1.2    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     43    1.2    itojun  *    notice, this list of conditions and the following disclaimer in the
     44    1.2    itojun  *    documentation and/or other materials provided with the distribution.
     45   1.62       agc  * 3. Neither the name of the University nor the names of its contributors
     46    1.2    itojun  *    may be used to endorse or promote products derived from this software
     47    1.2    itojun  *    without specific prior written permission.
     48    1.2    itojun  *
     49    1.2    itojun  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     50    1.2    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     51    1.2    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     52    1.2    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     53    1.2    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     54    1.2    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     55    1.2    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     56    1.2    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     57    1.2    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     58    1.2    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     59    1.2    itojun  * SUCH DAMAGE.
     60    1.2    itojun  *
     61    1.2    itojun  *	@(#)ip_output.c	8.3 (Berkeley) 1/21/94
     62    1.2    itojun  */
     63   1.41     lukem 
     64   1.41     lukem #include <sys/cdefs.h>
     65  1.142  christos __KERNEL_RCSID(0, "$NetBSD: ip6_output.c,v 1.142 2011/12/31 20:41:59 christos Exp $");
     66    1.2    itojun 
     67    1.2    itojun #include "opt_inet.h"
     68   1.97    rpaulo #include "opt_inet6.h"
     69    1.4   thorpej #include "opt_ipsec.h"
     70   1.15   darrenr #include "opt_pfil_hooks.h"
     71    1.2    itojun 
     72    1.2    itojun #include <sys/param.h>
     73    1.2    itojun #include <sys/malloc.h>
     74    1.2    itojun #include <sys/mbuf.h>
     75    1.2    itojun #include <sys/errno.h>
     76    1.2    itojun #include <sys/protosw.h>
     77    1.2    itojun #include <sys/socket.h>
     78    1.2    itojun #include <sys/socketvar.h>
     79    1.2    itojun #include <sys/systm.h>
     80    1.2    itojun #include <sys/proc.h>
     81   1.98      elad #include <sys/kauth.h>
     82    1.2    itojun 
     83    1.2    itojun #include <net/if.h>
     84    1.2    itojun #include <net/route.h>
     85   1.15   darrenr #ifdef PFIL_HOOKS
     86   1.15   darrenr #include <net/pfil.h>
     87   1.15   darrenr #endif
     88    1.2    itojun 
     89    1.2    itojun #include <netinet/in.h>
     90    1.2    itojun #include <netinet/in_var.h>
     91   1.14    itojun #include <netinet/ip6.h>
     92   1.14    itojun #include <netinet/icmp6.h>
     93   1.90      yamt #include <netinet/in_offload.h>
     94  1.105      yamt #include <netinet6/in6_offload.h>
     95   1.10    itojun #include <netinet6/ip6_var.h>
     96  1.128   thorpej #include <netinet6/ip6_private.h>
     97    1.2    itojun #include <netinet6/in6_pcb.h>
     98    1.2    itojun #include <netinet6/nd6.h>
     99   1.78    itojun #include <netinet6/ip6protosw.h>
    100   1.94    rpaulo #include <netinet6/scope6_var.h>
    101    1.2    itojun 
    102  1.141  drochner #ifdef KAME_IPSEC
    103    1.2    itojun #include <netinet6/ipsec.h>
    104  1.129   thorpej #include <netinet6/ipsec_private.h>
    105    1.2    itojun #include <netkey/key.h>
    106  1.141  drochner #endif /* KAME_IPSEC */
    107    1.2    itojun 
    108  1.114  degroote #ifdef FAST_IPSEC
    109  1.114  degroote #include <netipsec/ipsec.h>
    110  1.114  degroote #include <netipsec/ipsec6.h>
    111  1.114  degroote #include <netipsec/key.h>
    112  1.114  degroote #include <netipsec/xform.h>
    113  1.114  degroote #endif
    114  1.114  degroote 
    115  1.114  degroote 
    116    1.9    itojun #include <net/net_osdep.h>
    117    1.9    itojun 
    118   1.27   thorpej #ifdef PFIL_HOOKS
    119   1.27   thorpej extern struct pfil_head inet6_pfil_hook;	/* XXX */
    120   1.27   thorpej #endif
    121   1.27   thorpej 
    122    1.2    itojun struct ip6_exthdrs {
    123    1.2    itojun 	struct mbuf *ip6e_ip6;
    124    1.2    itojun 	struct mbuf *ip6e_hbh;
    125    1.2    itojun 	struct mbuf *ip6e_dest1;
    126    1.2    itojun 	struct mbuf *ip6e_rthdr;
    127    1.2    itojun 	struct mbuf *ip6e_dest2;
    128    1.2    itojun };
    129    1.2    itojun 
    130  1.122    dyoung static int ip6_pcbopt(int, u_char *, int, struct ip6_pktopts **,
    131  1.138      elad 	kauth_cred_t, int);
    132  1.130    plunky static int ip6_getpcbopt(struct ip6_pktopts *, int, struct sockopt *);
    133  1.138      elad static int ip6_setpktopt(int, u_char *, int, struct ip6_pktopts *, kauth_cred_t,
    134  1.122    dyoung 	int, int, int);
    135  1.132    plunky static int ip6_setmoptions(const struct sockopt *, struct ip6_moptions **);
    136  1.132    plunky static int ip6_getmoptions(struct sockopt *, struct ip6_moptions *);
    137  1.122    dyoung static int ip6_copyexthdr(struct mbuf **, void *, int);
    138  1.122    dyoung static int ip6_insertfraghdr(struct mbuf *, struct mbuf *, int,
    139  1.122    dyoung 	struct ip6_frag **);
    140  1.122    dyoung static int ip6_insert_jumboopt(struct ip6_exthdrs *, u_int32_t);
    141  1.122    dyoung static int ip6_splithdr(struct mbuf *, struct ip6_exthdrs *);
    142  1.118    dyoung static int ip6_getpmtu(struct route *, struct route *, struct ifnet *,
    143  1.115    dyoung     const struct in6_addr *, u_long *, int *);
    144  1.122    dyoung static int copypktopts(struct ip6_pktopts *, struct ip6_pktopts *, int);
    145   1.97    rpaulo 
    146   1.97    rpaulo #ifdef RFC2292
    147  1.130    plunky static int ip6_pcbopts(struct ip6_pktopts **, struct socket *, struct sockopt *);
    148   1.97    rpaulo #endif
    149    1.2    itojun 
    150    1.2    itojun /*
    151    1.2    itojun  * IP6 output. The packet in mbuf chain m contains a skeletal IP6
    152    1.2    itojun  * header (with pri, len, nxt, hlim, src, dst).
    153    1.2    itojun  * This function may modify ver and hlim only.
    154    1.2    itojun  * The mbuf chain containing the packet will be freed.
    155    1.2    itojun  * The mbuf opt, if present, will not be freed.
    156   1.52    itojun  *
    157   1.52    itojun  * type of "mtu": rt_rmx.rmx_mtu is u_long, ifnet.ifr_mtu is int, and
    158   1.52    itojun  * nd_ifinfo.linkmtu is u_int32_t.  so we use u_long to hold largest one,
    159   1.52    itojun  * which is rt_rmx.rmx_mtu.
    160    1.2    itojun  */
    161    1.2    itojun int
    162  1.103  christos ip6_output(
    163  1.103  christos     struct mbuf *m0,
    164  1.103  christos     struct ip6_pktopts *opt,
    165  1.118    dyoung     struct route *ro,
    166  1.103  christos     int flags,
    167  1.103  christos     struct ip6_moptions *im6o,
    168  1.104  christos     struct socket *so,
    169  1.103  christos     struct ifnet **ifpp		/* XXX: just for statistics */
    170  1.103  christos )
    171    1.2    itojun {
    172    1.2    itojun 	struct ip6_hdr *ip6, *mhip6;
    173   1.19    itojun 	struct ifnet *ifp, *origifp;
    174    1.2    itojun 	struct mbuf *m = m0;
    175    1.2    itojun 	int hlen, tlen, len, off;
    176  1.116   thorpej 	bool tso;
    177  1.118    dyoung 	struct route ip6route;
    178   1.94    rpaulo 	struct rtentry *rt = NULL;
    179  1.118    dyoung 	const struct sockaddr_in6 *dst = NULL;
    180  1.118    dyoung 	struct sockaddr_in6 src_sa, dst_sa;
    181    1.2    itojun 	int error = 0;
    182   1.94    rpaulo 	struct in6_ifaddr *ia = NULL;
    183    1.2    itojun 	u_long mtu;
    184   1.78    itojun 	int alwaysfrag, dontfrag;
    185    1.2    itojun 	u_int32_t optlen = 0, plen = 0, unfragpartlen = 0;
    186    1.2    itojun 	struct ip6_exthdrs exthdrs;
    187   1.94    rpaulo 	struct in6_addr finaldst, src0, dst0;
    188   1.94    rpaulo 	u_int32_t zone;
    189  1.118    dyoung 	struct route *ro_pmtu = NULL;
    190    1.2    itojun 	int hdrsplit = 0;
    191    1.2    itojun 	int needipsec = 0;
    192  1.141  drochner #ifdef KAME_IPSEC
    193    1.2    itojun 	int needipsectun = 0;
    194    1.2    itojun 	struct secpolicy *sp = NULL;
    195    1.2    itojun 
    196    1.2    itojun 	ip6 = mtod(m, struct ip6_hdr *);
    197  1.141  drochner #endif /* KAME_IPSEC */
    198  1.114  degroote #ifdef FAST_IPSEC
    199  1.114  degroote 	struct secpolicy *sp = NULL;
    200  1.114  degroote 	int s;
    201  1.114  degroote #endif
    202  1.114  degroote 
    203  1.124    dyoung 	memset(&ip6route, 0, sizeof(ip6route));
    204    1.2    itojun 
    205  1.100      tron #ifdef  DIAGNOSTIC
    206  1.100      tron 	if ((m->m_flags & M_PKTHDR) == 0)
    207  1.100      tron 		panic("ip6_output: no HDR");
    208  1.100      tron 
    209  1.100      tron 	if ((m->m_pkthdr.csum_flags &
    210  1.100      tron 	    (M_CSUM_TCPv4|M_CSUM_UDPv4|M_CSUM_TSOv4)) != 0) {
    211  1.100      tron 		panic("ip6_output: IPv4 checksum offload flags: %d",
    212  1.100      tron 		    m->m_pkthdr.csum_flags);
    213  1.100      tron 	}
    214  1.100      tron 
    215  1.100      tron 	if ((m->m_pkthdr.csum_flags & (M_CSUM_TCPv6|M_CSUM_UDPv6)) ==
    216  1.100      tron 	    (M_CSUM_TCPv6|M_CSUM_UDPv6)) {
    217  1.100      tron 		panic("ip6_output: conflicting checksum offload flags: %d",
    218  1.100      tron 		    m->m_pkthdr.csum_flags);
    219  1.100      tron 	}
    220  1.100      tron #endif
    221  1.100      tron 
    222   1.89      yamt 	M_CSUM_DATA_IPv6_HL_SET(m->m_pkthdr.csum_data, sizeof(struct ip6_hdr));
    223   1.89      yamt 
    224   1.22    itojun #define MAKE_EXTHDR(hp, mp)						\
    225   1.22    itojun     do {								\
    226    1.2    itojun 	if (hp) {							\
    227    1.2    itojun 		struct ip6_ext *eh = (struct ip6_ext *)(hp);		\
    228  1.117  christos 		error = ip6_copyexthdr((mp), (void *)(hp), 		\
    229   1.49    itojun 		    ((eh)->ip6e_len + 1) << 3);				\
    230    1.2    itojun 		if (error)						\
    231    1.2    itojun 			goto freehdrs;					\
    232    1.2    itojun 	}								\
    233   1.60     perry     } while (/*CONSTCOND*/ 0)
    234   1.51    itojun 
    235  1.136    cegger 	memset(&exthdrs, 0, sizeof(exthdrs));
    236    1.2    itojun 	if (opt) {
    237    1.2    itojun 		/* Hop-by-Hop options header */
    238    1.2    itojun 		MAKE_EXTHDR(opt->ip6po_hbh, &exthdrs.ip6e_hbh);
    239    1.2    itojun 		/* Destination options header(1st part) */
    240    1.2    itojun 		MAKE_EXTHDR(opt->ip6po_dest1, &exthdrs.ip6e_dest1);
    241    1.2    itojun 		/* Routing header */
    242    1.2    itojun 		MAKE_EXTHDR(opt->ip6po_rthdr, &exthdrs.ip6e_rthdr);
    243    1.2    itojun 		/* Destination options header(2nd part) */
    244    1.2    itojun 		MAKE_EXTHDR(opt->ip6po_dest2, &exthdrs.ip6e_dest2);
    245    1.2    itojun 	}
    246    1.2    itojun 
    247  1.141  drochner #ifdef KAME_IPSEC
    248   1.76    itojun 	if ((flags & IPV6_FORWARDING) != 0) {
    249   1.76    itojun 		needipsec = 0;
    250   1.76    itojun 		goto skippolicycheck;
    251   1.76    itojun 	}
    252   1.76    itojun 
    253    1.2    itojun 	/* get a security policy for this packet */
    254    1.2    itojun 	if (so == NULL)
    255   1.13    itojun 		sp = ipsec6_getpolicybyaddr(m, IPSEC_DIR_OUTBOUND, 0, &error);
    256   1.81   thorpej 	else {
    257   1.81   thorpej 		if (IPSEC_PCB_SKIP_IPSEC(sotoinpcb_hdr(so)->inph_sp,
    258   1.81   thorpej 					 IPSEC_DIR_OUTBOUND)) {
    259   1.81   thorpej 			needipsec = 0;
    260   1.81   thorpej 			goto skippolicycheck;
    261   1.81   thorpej 		}
    262   1.13    itojun 		sp = ipsec6_getpolicybysock(m, IPSEC_DIR_OUTBOUND, so, &error);
    263   1.81   thorpej 	}
    264    1.2    itojun 
    265    1.2    itojun 	if (sp == NULL) {
    266  1.129   thorpej 		IPSEC6_STATINC(IPSEC_STAT_OUT_INVAL);
    267   1.23    itojun 		goto freehdrs;
    268    1.2    itojun 	}
    269    1.2    itojun 
    270    1.2    itojun 	error = 0;
    271    1.2    itojun 
    272    1.2    itojun 	/* check policy */
    273    1.2    itojun 	switch (sp->policy) {
    274    1.2    itojun 	case IPSEC_POLICY_DISCARD:
    275    1.2    itojun 		/*
    276    1.2    itojun 		 * This packet is just discarded.
    277    1.2    itojun 		 */
    278  1.129   thorpej 		IPSEC6_STATINC(IPSEC_STAT_OUT_POLVIO);
    279   1.23    itojun 		goto freehdrs;
    280    1.2    itojun 
    281    1.2    itojun 	case IPSEC_POLICY_BYPASS:
    282    1.2    itojun 	case IPSEC_POLICY_NONE:
    283    1.2    itojun 		/* no need to do IPsec. */
    284    1.2    itojun 		needipsec = 0;
    285    1.2    itojun 		break;
    286   1.51    itojun 
    287    1.2    itojun 	case IPSEC_POLICY_IPSEC:
    288    1.2    itojun 		if (sp->req == NULL) {
    289    1.2    itojun 			/* XXX should be panic ? */
    290    1.2    itojun 			printf("ip6_output: No IPsec request specified.\n");
    291    1.2    itojun 			error = EINVAL;
    292   1.23    itojun 			goto freehdrs;
    293    1.2    itojun 		}
    294    1.2    itojun 		needipsec = 1;
    295    1.2    itojun 		break;
    296    1.2    itojun 
    297    1.2    itojun 	case IPSEC_POLICY_ENTRUST:
    298    1.2    itojun 	default:
    299    1.2    itojun 		printf("ip6_output: Invalid policy found. %d\n", sp->policy);
    300    1.2    itojun 	}
    301   1.76    itojun 
    302   1.76    itojun   skippolicycheck:;
    303  1.141  drochner #endif /* KAME_IPSEC */
    304    1.2    itojun 
    305    1.2    itojun 	/*
    306    1.2    itojun 	 * Calculate the total length of the extension header chain.
    307    1.2    itojun 	 * Keep the length of the unfragmentable part for fragmentation.
    308    1.2    itojun 	 */
    309    1.9    itojun 	optlen = 0;
    310    1.2    itojun 	if (exthdrs.ip6e_hbh) optlen += exthdrs.ip6e_hbh->m_len;
    311    1.2    itojun 	if (exthdrs.ip6e_dest1) optlen += exthdrs.ip6e_dest1->m_len;
    312    1.2    itojun 	if (exthdrs.ip6e_rthdr) optlen += exthdrs.ip6e_rthdr->m_len;
    313    1.9    itojun 	unfragpartlen = optlen + sizeof(struct ip6_hdr);
    314    1.2    itojun 	/* NOTE: we don't add AH/ESP length here. do that later. */
    315    1.2    itojun 	if (exthdrs.ip6e_dest2) optlen += exthdrs.ip6e_dest2->m_len;
    316    1.2    itojun 
    317  1.114  degroote #ifdef FAST_IPSEC
    318  1.114  degroote 	/* Check the security policy (SP) for the packet */
    319  1.114  degroote 
    320  1.114  degroote 	/* XXX For moment, we doesn't support packet with extented action */
    321  1.114  degroote 	if (optlen !=0)
    322  1.114  degroote 		goto freehdrs;
    323  1.114  degroote 
    324  1.114  degroote 	sp = ipsec6_check_policy(m,so,flags,&needipsec,&error);
    325  1.114  degroote 	if (error != 0) {
    326  1.114  degroote 		/*
    327  1.114  degroote 		 * Hack: -EINVAL is used to signal that a packet
    328  1.114  degroote 		 * should be silently discarded.  This is typically
    329  1.114  degroote 		 * because we asked key management for an SA and
    330  1.114  degroote 		 * it was delayed (e.g. kicked up to IKE).
    331  1.114  degroote 		 */
    332  1.114  degroote 	if (error == -EINVAL)
    333  1.114  degroote 		error = 0;
    334  1.114  degroote 	goto freehdrs;
    335  1.114  degroote     }
    336  1.114  degroote #endif /* FAST_IPSEC */
    337  1.114  degroote 
    338  1.114  degroote 
    339  1.114  degroote 	if (needipsec &&
    340  1.114  degroote 	    (m->m_pkthdr.csum_flags & (M_CSUM_UDPv6|M_CSUM_TCPv6)) != 0) {
    341  1.114  degroote 		in6_delayed_cksum(m);
    342  1.114  degroote 		m->m_pkthdr.csum_flags &= ~(M_CSUM_UDPv6|M_CSUM_TCPv6);
    343  1.114  degroote 	}
    344  1.114  degroote 
    345  1.114  degroote 
    346    1.2    itojun 	/*
    347    1.2    itojun 	 * If we need IPsec, or there is at least one extension header,
    348    1.2    itojun 	 * separate IP6 header from the payload.
    349    1.2    itojun 	 */
    350    1.2    itojun 	if ((needipsec || optlen) && !hdrsplit) {
    351    1.2    itojun 		if ((error = ip6_splithdr(m, &exthdrs)) != 0) {
    352    1.2    itojun 			m = NULL;
    353    1.2    itojun 			goto freehdrs;
    354    1.2    itojun 		}
    355    1.2    itojun 		m = exthdrs.ip6e_ip6;
    356    1.2    itojun 		hdrsplit++;
    357    1.2    itojun 	}
    358    1.2    itojun 
    359    1.2    itojun 	/* adjust pointer */
    360    1.2    itojun 	ip6 = mtod(m, struct ip6_hdr *);
    361    1.2    itojun 
    362    1.2    itojun 	/* adjust mbuf packet header length */
    363    1.2    itojun 	m->m_pkthdr.len += optlen;
    364    1.2    itojun 	plen = m->m_pkthdr.len - sizeof(*ip6);
    365    1.2    itojun 
    366    1.2    itojun 	/* If this is a jumbo payload, insert a jumbo payload option. */
    367    1.2    itojun 	if (plen > IPV6_MAXPACKET) {
    368    1.2    itojun 		if (!hdrsplit) {
    369    1.2    itojun 			if ((error = ip6_splithdr(m, &exthdrs)) != 0) {
    370    1.2    itojun 				m = NULL;
    371    1.2    itojun 				goto freehdrs;
    372    1.2    itojun 			}
    373    1.2    itojun 			m = exthdrs.ip6e_ip6;
    374    1.2    itojun 			hdrsplit++;
    375    1.2    itojun 		}
    376    1.2    itojun 		/* adjust pointer */
    377    1.2    itojun 		ip6 = mtod(m, struct ip6_hdr *);
    378    1.2    itojun 		if ((error = ip6_insert_jumboopt(&exthdrs, plen)) != 0)
    379    1.2    itojun 			goto freehdrs;
    380   1.89      yamt 		optlen += 8; /* XXX JUMBOOPTLEN */
    381    1.2    itojun 		ip6->ip6_plen = 0;
    382    1.2    itojun 	} else
    383    1.2    itojun 		ip6->ip6_plen = htons(plen);
    384    1.2    itojun 
    385    1.2    itojun 	/*
    386    1.2    itojun 	 * Concatenate headers and fill in next header fields.
    387    1.2    itojun 	 * Here we have, on "m"
    388    1.9    itojun 	 *	IPv6 payload
    389    1.2    itojun 	 * and we insert headers accordingly.  Finally, we should be getting:
    390    1.2    itojun 	 *	IPv6 hbh dest1 rthdr ah* [esp* dest2 payload]
    391    1.9    itojun 	 *
    392    1.9    itojun 	 * during the header composing process, "m" points to IPv6 header.
    393    1.9    itojun 	 * "mprev" points to an extension header prior to esp.
    394    1.2    itojun 	 */
    395    1.2    itojun 	{
    396    1.2    itojun 		u_char *nexthdrp = &ip6->ip6_nxt;
    397    1.2    itojun 		struct mbuf *mprev = m;
    398    1.2    itojun 
    399    1.2    itojun 		/*
    400    1.2    itojun 		 * we treat dest2 specially.  this makes IPsec processing
    401   1.78    itojun 		 * much easier.  the goal here is to make mprev point the
    402   1.78    itojun 		 * mbuf prior to dest2.
    403    1.9    itojun 		 *
    404    1.9    itojun 		 * result: IPv6 dest2 payload
    405    1.9    itojun 		 * m and mprev will point to IPv6 header.
    406    1.2    itojun 		 */
    407    1.2    itojun 		if (exthdrs.ip6e_dest2) {
    408    1.2    itojun 			if (!hdrsplit)
    409    1.2    itojun 				panic("assumption failed: hdr not split");
    410    1.9    itojun 			exthdrs.ip6e_dest2->m_next = m->m_next;
    411    1.9    itojun 			m->m_next = exthdrs.ip6e_dest2;
    412    1.2    itojun 			*mtod(exthdrs.ip6e_dest2, u_char *) = ip6->ip6_nxt;
    413    1.2    itojun 			ip6->ip6_nxt = IPPROTO_DSTOPTS;
    414    1.2    itojun 		}
    415    1.2    itojun 
    416   1.22    itojun #define MAKE_CHAIN(m, mp, p, i)\
    417   1.22    itojun     do {\
    418    1.2    itojun 	if (m) {\
    419    1.2    itojun 		if (!hdrsplit) \
    420    1.2    itojun 			panic("assumption failed: hdr not split"); \
    421    1.2    itojun 		*mtod((m), u_char *) = *(p);\
    422    1.2    itojun 		*(p) = (i);\
    423    1.2    itojun 		p = mtod((m), u_char *);\
    424    1.2    itojun 		(m)->m_next = (mp)->m_next;\
    425    1.2    itojun 		(mp)->m_next = (m);\
    426    1.2    itojun 		(mp) = (m);\
    427    1.2    itojun 	}\
    428   1.60     perry     } while (/*CONSTCOND*/ 0)
    429    1.9    itojun 		/*
    430    1.9    itojun 		 * result: IPv6 hbh dest1 rthdr dest2 payload
    431    1.9    itojun 		 * m will point to IPv6 header.  mprev will point to the
    432    1.9    itojun 		 * extension header prior to dest2 (rthdr in the above case).
    433    1.9    itojun 		 */
    434   1.49    itojun 		MAKE_CHAIN(exthdrs.ip6e_hbh, mprev, nexthdrp, IPPROTO_HOPOPTS);
    435   1.49    itojun 		MAKE_CHAIN(exthdrs.ip6e_dest1, mprev, nexthdrp,
    436   1.49    itojun 		    IPPROTO_DSTOPTS);
    437   1.49    itojun 		MAKE_CHAIN(exthdrs.ip6e_rthdr, mprev, nexthdrp,
    438   1.49    itojun 		    IPPROTO_ROUTING);
    439    1.2    itojun 
    440   1.89      yamt 		M_CSUM_DATA_IPv6_HL_SET(m->m_pkthdr.csum_data,
    441   1.89      yamt 		    sizeof(struct ip6_hdr) + optlen);
    442   1.89      yamt 
    443  1.141  drochner #ifdef KAME_IPSEC
    444    1.2    itojun 		if (!needipsec)
    445    1.2    itojun 			goto skip_ipsec2;
    446    1.2    itojun 
    447    1.2    itojun 		/*
    448    1.2    itojun 		 * pointers after IPsec headers are not valid any more.
    449    1.2    itojun 		 * other pointers need a great care too.
    450    1.2    itojun 		 * (IPsec routines should not mangle mbufs prior to AH/ESP)
    451    1.2    itojun 		 */
    452    1.2    itojun 		exthdrs.ip6e_dest2 = NULL;
    453    1.2    itojun 
    454    1.2    itojun 	    {
    455    1.2    itojun 		struct ip6_rthdr *rh = NULL;
    456    1.2    itojun 		int segleft_org = 0;
    457    1.2    itojun 		struct ipsec_output_state state;
    458    1.2    itojun 
    459    1.2    itojun 		if (exthdrs.ip6e_rthdr) {
    460    1.2    itojun 			rh = mtod(exthdrs.ip6e_rthdr, struct ip6_rthdr *);
    461    1.2    itojun 			segleft_org = rh->ip6r_segleft;
    462    1.2    itojun 			rh->ip6r_segleft = 0;
    463    1.2    itojun 		}
    464    1.2    itojun 
    465  1.136    cegger 		memset(&state, 0, sizeof(state));
    466    1.2    itojun 		state.m = m;
    467    1.2    itojun 		error = ipsec6_output_trans(&state, nexthdrp, mprev, sp, flags,
    468   1.78    itojun 		    &needipsectun);
    469    1.2    itojun 		m = state.m;
    470    1.2    itojun 		if (error) {
    471  1.115    dyoung 			rh = mtod(exthdrs.ip6e_rthdr, struct ip6_rthdr *);
    472    1.2    itojun 			/* mbuf is already reclaimed in ipsec6_output_trans. */
    473    1.2    itojun 			m = NULL;
    474    1.2    itojun 			switch (error) {
    475    1.2    itojun 			case EHOSTUNREACH:
    476    1.2    itojun 			case ENETUNREACH:
    477    1.2    itojun 			case EMSGSIZE:
    478    1.2    itojun 			case ENOBUFS:
    479    1.2    itojun 			case ENOMEM:
    480    1.2    itojun 				break;
    481    1.2    itojun 			default:
    482    1.2    itojun 				printf("ip6_output (ipsec): error code %d\n", error);
    483   1.48    itojun 				/* FALLTHROUGH */
    484    1.2    itojun 			case ENOENT:
    485    1.2    itojun 				/* don't show these error codes to the user */
    486    1.2    itojun 				error = 0;
    487    1.2    itojun 				break;
    488    1.2    itojun 			}
    489    1.2    itojun 			goto bad;
    490    1.2    itojun 		}
    491    1.2    itojun 		if (exthdrs.ip6e_rthdr) {
    492    1.2    itojun 			/* ah6_output doesn't modify mbuf chain */
    493    1.2    itojun 			rh->ip6r_segleft = segleft_org;
    494    1.2    itojun 		}
    495    1.2    itojun 	    }
    496    1.2    itojun skip_ipsec2:;
    497    1.2    itojun #endif
    498    1.2    itojun 	}
    499    1.2    itojun 
    500    1.2    itojun 	/*
    501    1.2    itojun 	 * If there is a routing header, replace destination address field
    502    1.2    itojun 	 * with the first hop of the routing header.
    503    1.2    itojun 	 */
    504    1.2    itojun 	if (exthdrs.ip6e_rthdr) {
    505   1.49    itojun 		struct ip6_rthdr *rh;
    506    1.2    itojun 		struct ip6_rthdr0 *rh0;
    507   1.61    itojun 		struct in6_addr *addr;
    508   1.94    rpaulo 		struct sockaddr_in6 sa;
    509    1.2    itojun 
    510   1.49    itojun 		rh = (struct ip6_rthdr *)(mtod(exthdrs.ip6e_rthdr,
    511   1.49    itojun 		    struct ip6_rthdr *));
    512    1.2    itojun 		finaldst = ip6->ip6_dst;
    513   1.31    itojun 		switch (rh->ip6r_type) {
    514    1.2    itojun 		case IPV6_RTHDR_TYPE_0:
    515    1.2    itojun 			 rh0 = (struct ip6_rthdr0 *)rh;
    516   1.61    itojun 			 addr = (struct in6_addr *)(rh0 + 1);
    517   1.94    rpaulo 
    518   1.94    rpaulo 			 /*
    519   1.94    rpaulo 			  * construct a sockaddr_in6 form of
    520   1.94    rpaulo 			  * the first hop.
    521   1.94    rpaulo 			  *
    522   1.94    rpaulo 			  * XXX: we may not have enough
    523   1.94    rpaulo 			  * information about its scope zone;
    524   1.94    rpaulo 			  * there is no standard API to pass
    525   1.94    rpaulo 			  * the information from the
    526   1.94    rpaulo 			  * application.
    527   1.94    rpaulo 			  */
    528  1.123    dyoung 			 sockaddr_in6_init(&sa, addr, 0, 0, 0);
    529   1.94    rpaulo 			 if ((error = sa6_embedscope(&sa,
    530   1.94    rpaulo 			     ip6_use_defzone)) != 0) {
    531   1.94    rpaulo 				 goto bad;
    532   1.94    rpaulo 			 }
    533   1.94    rpaulo 			 ip6->ip6_dst = sa.sin6_addr;
    534   1.92  christos 			 (void)memmove(&addr[0], &addr[1],
    535   1.94    rpaulo 			     sizeof(struct in6_addr) *
    536   1.94    rpaulo 			     (rh0->ip6r0_segleft - 1));
    537   1.61    itojun 			 addr[rh0->ip6r0_segleft - 1] = finaldst;
    538   1.94    rpaulo 			 /* XXX */
    539   1.94    rpaulo 			 in6_clearscope(addr + rh0->ip6r0_segleft - 1);
    540    1.2    itojun 			 break;
    541    1.2    itojun 		default:	/* is it possible? */
    542    1.2    itojun 			 error = EINVAL;
    543    1.2    itojun 			 goto bad;
    544    1.2    itojun 		}
    545    1.2    itojun 	}
    546    1.2    itojun 
    547    1.2    itojun 	/* Source address validation */
    548    1.2    itojun 	if (IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_src) &&
    549   1.54    itojun 	    (flags & IPV6_UNSPECSRC) == 0) {
    550    1.2    itojun 		error = EOPNOTSUPP;
    551  1.128   thorpej 		IP6_STATINC(IP6_STAT_BADSCOPE);
    552    1.2    itojun 		goto bad;
    553    1.2    itojun 	}
    554    1.2    itojun 	if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_src)) {
    555    1.2    itojun 		error = EOPNOTSUPP;
    556  1.128   thorpej 		IP6_STATINC(IP6_STAT_BADSCOPE);
    557    1.2    itojun 		goto bad;
    558    1.2    itojun 	}
    559    1.2    itojun 
    560  1.128   thorpej 	IP6_STATINC(IP6_STAT_LOCALOUT);
    561    1.2    itojun 
    562    1.2    itojun 	/*
    563    1.2    itojun 	 * Route packet.
    564    1.2    itojun 	 */
    565   1.78    itojun 	/* initialize cached route */
    566  1.113    dyoung 	if (ro == NULL) {
    567    1.2    itojun 		ro = &ip6route;
    568    1.2    itojun 	}
    569    1.2    itojun 	ro_pmtu = ro;
    570    1.2    itojun 	if (opt && opt->ip6po_rthdr)
    571    1.2    itojun 		ro = &opt->ip6po_route;
    572   1.94    rpaulo 
    573   1.94    rpaulo  	/*
    574   1.94    rpaulo 	 * if specified, try to fill in the traffic class field.
    575   1.94    rpaulo 	 * do not override if a non-zero value is already set.
    576   1.94    rpaulo 	 * we check the diffserv field and the ecn field separately.
    577   1.94    rpaulo 	 */
    578   1.94    rpaulo 	if (opt && opt->ip6po_tclass >= 0) {
    579   1.94    rpaulo 		int mask = 0;
    580   1.94    rpaulo 
    581   1.94    rpaulo 		if ((ip6->ip6_flow & htonl(0xfc << 20)) == 0)
    582   1.94    rpaulo 			mask |= 0xfc;
    583   1.94    rpaulo 		if ((ip6->ip6_flow & htonl(0x03 << 20)) == 0)
    584   1.94    rpaulo 			mask |= 0x03;
    585   1.94    rpaulo 		if (mask != 0)
    586   1.94    rpaulo 			ip6->ip6_flow |= htonl((opt->ip6po_tclass & mask) << 20);
    587    1.2    itojun 	}
    588   1.94    rpaulo 
    589   1.94    rpaulo 	/* fill in or override the hop limit field, if necessary. */
    590   1.94    rpaulo 	if (opt && opt->ip6po_hlim != -1)
    591   1.94    rpaulo 		ip6->ip6_hlim = opt->ip6po_hlim & 0xff;
    592   1.94    rpaulo 	else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
    593   1.94    rpaulo 		if (im6o != NULL)
    594   1.94    rpaulo 			ip6->ip6_hlim = im6o->im6o_multicast_hlim;
    595   1.94    rpaulo 		else
    596   1.94    rpaulo 			ip6->ip6_hlim = ip6_defmcasthlim;
    597    1.2    itojun 	}
    598   1.94    rpaulo 
    599  1.141  drochner #ifdef KAME_IPSEC
    600    1.2    itojun 	if (needipsec && needipsectun) {
    601    1.2    itojun 		struct ipsec_output_state state;
    602    1.2    itojun 
    603    1.2    itojun 		/*
    604    1.2    itojun 		 * All the extension headers will become inaccessible
    605    1.2    itojun 		 * (since they can be encrypted).
    606    1.2    itojun 		 * Don't panic, we need no more updates to extension headers
    607    1.2    itojun 		 * on inner IPv6 packet (since they are now encapsulated).
    608    1.2    itojun 		 *
    609    1.2    itojun 		 * IPv6 [ESP|AH] IPv6 [extension headers] payload
    610    1.2    itojun 		 */
    611  1.136    cegger 		memset(&exthdrs, 0, sizeof(exthdrs));
    612    1.2    itojun 		exthdrs.ip6e_ip6 = m;
    613    1.2    itojun 
    614  1.136    cegger 		memset(&state, 0, sizeof(state));
    615    1.2    itojun 		state.m = m;
    616  1.118    dyoung 		state.ro = ro;
    617  1.118    dyoung 		state.dst = rtcache_getdst(ro);
    618    1.2    itojun 
    619    1.2    itojun 		error = ipsec6_output_tunnel(&state, sp, flags);
    620    1.2    itojun 
    621    1.2    itojun 		m = state.m;
    622  1.118    dyoung 		ro_pmtu = ro = state.ro;
    623  1.118    dyoung 		dst = satocsin6(state.dst);
    624    1.2    itojun 		if (error) {
    625    1.2    itojun 			/* mbuf is already reclaimed in ipsec6_output_tunnel. */
    626    1.2    itojun 			m0 = m = NULL;
    627    1.2    itojun 			m = NULL;
    628    1.2    itojun 			switch (error) {
    629    1.2    itojun 			case EHOSTUNREACH:
    630    1.2    itojun 			case ENETUNREACH:
    631    1.2    itojun 			case EMSGSIZE:
    632    1.2    itojun 			case ENOBUFS:
    633    1.2    itojun 			case ENOMEM:
    634    1.2    itojun 				break;
    635    1.2    itojun 			default:
    636    1.2    itojun 				printf("ip6_output (ipsec): error code %d\n", error);
    637   1.48    itojun 				/* FALLTHROUGH */
    638    1.2    itojun 			case ENOENT:
    639    1.2    itojun 				/* don't show these error codes to the user */
    640    1.2    itojun 				error = 0;
    641    1.2    itojun 				break;
    642    1.2    itojun 			}
    643    1.2    itojun 			goto bad;
    644    1.2    itojun 		}
    645    1.2    itojun 
    646    1.2    itojun 		exthdrs.ip6e_ip6 = m;
    647    1.2    itojun 	}
    648  1.141  drochner #endif /* KAME_IPSEC */
    649  1.114  degroote #ifdef FAST_IPSEC
    650  1.114  degroote 	if (needipsec) {
    651  1.114  degroote 		s = splsoftnet();
    652  1.114  degroote 		error = ipsec6_process_packet(m,sp->req);
    653  1.114  degroote 
    654  1.114  degroote 		/*
    655  1.114  degroote 		 * Preserve KAME behaviour: ENOENT can be returned
    656  1.114  degroote 		 * when an SA acquire is in progress.  Don't propagate
    657  1.114  degroote 		 * this to user-level; it confuses applications.
    658  1.114  degroote 		 * XXX this will go away when the SADB is redone.
    659  1.114  degroote 		 */
    660  1.114  degroote 		if (error == ENOENT)
    661  1.114  degroote 			error = 0;
    662  1.114  degroote 		splx(s);
    663  1.114  degroote 		goto done;
    664  1.118    dyoung 	}
    665  1.114  degroote #endif /* FAST_IPSEC */
    666  1.114  degroote 
    667  1.114  degroote 
    668    1.2    itojun 
    669   1.94    rpaulo 	/* adjust pointer */
    670   1.94    rpaulo 	ip6 = mtod(m, struct ip6_hdr *);
    671    1.2    itojun 
    672  1.123    dyoung 	sockaddr_in6_init(&dst_sa, &ip6->ip6_dst, 0, 0, 0);
    673  1.118    dyoung 	if ((error = in6_selectroute(&dst_sa, opt, im6o, ro,
    674  1.115    dyoung 	    &ifp, &rt, 0)) != 0) {
    675   1.94    rpaulo 		if (ifp != NULL)
    676   1.94    rpaulo 			in6_ifstat_inc(ifp, ifs6_out_discard);
    677   1.94    rpaulo 		goto bad;
    678   1.94    rpaulo 	}
    679   1.94    rpaulo 	if (rt == NULL) {
    680   1.94    rpaulo 		/*
    681   1.94    rpaulo 		 * If in6_selectroute() does not return a route entry,
    682   1.94    rpaulo 		 * dst may not have been updated.
    683   1.94    rpaulo 		 */
    684  1.118    dyoung 		rtcache_setdst(ro, sin6tosa(&dst_sa));
    685   1.94    rpaulo 	}
    686    1.2    itojun 
    687   1.94    rpaulo 	/*
    688   1.94    rpaulo 	 * then rt (for unicast) and ifp must be non-NULL valid values.
    689   1.94    rpaulo 	 */
    690   1.94    rpaulo 	if ((flags & IPV6_FORWARDING) == 0) {
    691   1.94    rpaulo 		/* XXX: the FORWARDING flag can be set for mrouting. */
    692    1.9    itojun 		in6_ifstat_inc(ifp, ifs6_out_request);
    693   1.94    rpaulo 	}
    694   1.94    rpaulo 	if (rt != NULL) {
    695   1.94    rpaulo 		ia = (struct in6_ifaddr *)(rt->rt_ifa);
    696   1.94    rpaulo 		rt->rt_use++;
    697   1.94    rpaulo 	}
    698    1.9    itojun 
    699   1.94    rpaulo 	/*
    700   1.94    rpaulo 	 * The outgoing interface must be in the zone of source and
    701   1.94    rpaulo 	 * destination addresses.  We should use ia_ifp to support the
    702   1.94    rpaulo 	 * case of sending packets to an address of our own.
    703   1.94    rpaulo 	 */
    704   1.94    rpaulo 	if (ia != NULL && ia->ia_ifp)
    705   1.94    rpaulo 		origifp = ia->ia_ifp;
    706   1.94    rpaulo 	else
    707   1.94    rpaulo 		origifp = ifp;
    708    1.2    itojun 
    709   1.94    rpaulo 	src0 = ip6->ip6_src;
    710   1.94    rpaulo 	if (in6_setscope(&src0, origifp, &zone))
    711   1.94    rpaulo 		goto badscope;
    712  1.123    dyoung 	sockaddr_in6_init(&src_sa, &ip6->ip6_src, 0, 0, 0);
    713   1.94    rpaulo 	if (sa6_recoverscope(&src_sa) || zone != src_sa.sin6_scope_id)
    714   1.94    rpaulo 		goto badscope;
    715   1.94    rpaulo 
    716   1.94    rpaulo 	dst0 = ip6->ip6_dst;
    717   1.94    rpaulo 	if (in6_setscope(&dst0, origifp, &zone))
    718   1.94    rpaulo 		goto badscope;
    719   1.94    rpaulo 	/* re-initialize to be sure */
    720  1.123    dyoung 	sockaddr_in6_init(&dst_sa, &ip6->ip6_dst, 0, 0, 0);
    721   1.94    rpaulo 	if (sa6_recoverscope(&dst_sa) || zone != dst_sa.sin6_scope_id)
    722   1.94    rpaulo 		goto badscope;
    723   1.94    rpaulo 
    724   1.94    rpaulo 	/* scope check is done. */
    725   1.94    rpaulo 
    726  1.118    dyoung 	if (rt == NULL || IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
    727  1.118    dyoung 		if (dst == NULL)
    728  1.118    dyoung 			dst = satocsin6(rtcache_getdst(ro));
    729  1.118    dyoung 		KASSERT(dst != NULL);
    730  1.126    dyoung 	} else if (opt && rtcache_validate(&opt->ip6po_nextroute) != NULL) {
    731  1.118    dyoung 		/*
    732  1.118    dyoung 		 * The nexthop is explicitly specified by the
    733  1.118    dyoung 		 * application.  We assume the next hop is an IPv6
    734  1.118    dyoung 		 * address.
    735  1.118    dyoung 		 */
    736  1.118    dyoung 		dst = (struct sockaddr_in6 *)opt->ip6po_nexthop;
    737  1.118    dyoung 	} else if ((rt->rt_flags & RTF_GATEWAY))
    738  1.118    dyoung 		dst = (struct sockaddr_in6 *)rt->rt_gateway;
    739  1.118    dyoung 	else if (dst == NULL)
    740  1.118    dyoung 		dst = satocsin6(rtcache_getdst(ro));
    741    1.2    itojun 
    742   1.94    rpaulo 	/*
    743   1.94    rpaulo 	 * XXXXXX: original code follows:
    744   1.94    rpaulo 	 */
    745   1.94    rpaulo 	if (!IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst))
    746   1.94    rpaulo 		m->m_flags &= ~(M_BCAST | M_MCAST);	/* just in case */
    747   1.94    rpaulo 	else {
    748   1.94    rpaulo 		struct	in6_multi *in6m;
    749    1.2    itojun 
    750   1.94    rpaulo 		m->m_flags = (m->m_flags & ~M_BCAST) | M_MCAST;
    751    1.9    itojun 
    752    1.9    itojun 		in6_ifstat_inc(ifp, ifs6_out_mcast);
    753    1.9    itojun 
    754    1.2    itojun 		/*
    755    1.2    itojun 		 * Confirm that the outgoing interface supports multicast.
    756    1.2    itojun 		 */
    757   1.94    rpaulo 		if (!(ifp->if_flags & IFF_MULTICAST)) {
    758  1.128   thorpej 			IP6_STATINC(IP6_STAT_NOROUTE);
    759    1.9    itojun 			in6_ifstat_inc(ifp, ifs6_out_discard);
    760    1.2    itojun 			error = ENETUNREACH;
    761    1.2    itojun 			goto bad;
    762    1.2    itojun 		}
    763   1.94    rpaulo 
    764    1.2    itojun 		IN6_LOOKUP_MULTI(ip6->ip6_dst, ifp, in6m);
    765    1.2    itojun 		if (in6m != NULL &&
    766    1.2    itojun 		   (im6o == NULL || im6o->im6o_multicast_loop)) {
    767    1.2    itojun 			/*
    768    1.2    itojun 			 * If we belong to the destination multicast group
    769    1.2    itojun 			 * on the outgoing interface, and the caller did not
    770    1.2    itojun 			 * forbid loopback, loop back a copy.
    771    1.2    itojun 			 */
    772  1.118    dyoung 			KASSERT(dst != NULL);
    773    1.2    itojun 			ip6_mloopback(ifp, m, dst);
    774    1.2    itojun 		} else {
    775    1.2    itojun 			/*
    776    1.2    itojun 			 * If we are acting as a multicast router, perform
    777    1.2    itojun 			 * multicast forwarding as if the packet had just
    778    1.2    itojun 			 * arrived on the interface to which we are about
    779    1.2    itojun 			 * to send.  The multicast forwarding function
    780    1.2    itojun 			 * recursively calls this function, using the
    781    1.2    itojun 			 * IPV6_FORWARDING flag to prevent infinite recursion.
    782    1.2    itojun 			 *
    783    1.2    itojun 			 * Multicasts that are looped back by ip6_mloopback(),
    784    1.2    itojun 			 * above, will be forwarded by the ip6_input() routine,
    785    1.2    itojun 			 * if necessary.
    786    1.2    itojun 			 */
    787    1.2    itojun 			if (ip6_mrouter && (flags & IPV6_FORWARDING) == 0) {
    788   1.20   thorpej 				if (ip6_mforward(ip6, ifp, m) != 0) {
    789    1.2    itojun 					m_freem(m);
    790    1.2    itojun 					goto done;
    791    1.2    itojun 				}
    792    1.2    itojun 			}
    793    1.2    itojun 		}
    794    1.2    itojun 		/*
    795    1.2    itojun 		 * Multicasts with a hoplimit of zero may be looped back,
    796    1.2    itojun 		 * above, but must not be transmitted on a network.
    797    1.2    itojun 		 * Also, multicasts addressed to the loopback interface
    798    1.2    itojun 		 * are not sent -- the above call to ip6_mloopback() will
    799    1.2    itojun 		 * loop back a copy if this host actually belongs to the
    800    1.2    itojun 		 * destination group on the loopback interface.
    801    1.2    itojun 		 */
    802   1.94    rpaulo 		if (ip6->ip6_hlim == 0 || (ifp->if_flags & IFF_LOOPBACK) ||
    803   1.94    rpaulo 		    IN6_IS_ADDR_MC_INTFACELOCAL(&ip6->ip6_dst)) {
    804    1.2    itojun 			m_freem(m);
    805    1.2    itojun 			goto done;
    806    1.2    itojun 		}
    807    1.2    itojun 	}
    808    1.2    itojun 
    809    1.2    itojun 	/*
    810    1.9    itojun 	 * Fill the outgoing inteface to tell the upper layer
    811    1.9    itojun 	 * to increment per-interface statistics.
    812    1.9    itojun 	 */
    813    1.9    itojun 	if (ifpp)
    814    1.9    itojun 		*ifpp = ifp;
    815    1.9    itojun 
    816   1.45    itojun 	/* Determine path MTU. */
    817   1.78    itojun 	if ((error = ip6_getpmtu(ro_pmtu, ro, ifp, &finaldst, &mtu,
    818   1.78    itojun 	    &alwaysfrag)) != 0)
    819   1.45    itojun 		goto bad;
    820  1.141  drochner #ifdef KAME_IPSEC
    821   1.85    itojun 	if (needipsectun)
    822   1.85    itojun 		mtu = IPV6_MMTU;
    823   1.85    itojun #endif
    824   1.45    itojun 
    825    1.9    itojun 	/*
    826   1.45    itojun 	 * The caller of this function may specify to use the minimum MTU
    827   1.45    itojun 	 * in some cases.
    828   1.97    rpaulo 	 * An advanced API option (IPV6_USE_MIN_MTU) can also override MTU
    829   1.97    rpaulo 	 * setting.  The logic is a bit complicated; by default, unicast
    830   1.97    rpaulo 	 * packets will follow path MTU while multicast packets will be sent at
    831   1.97    rpaulo 	 * the minimum MTU.  If IP6PO_MINMTU_ALL is specified, all packets
    832   1.97    rpaulo 	 * including unicast ones will be sent at the minimum MTU.  Multicast
    833   1.97    rpaulo 	 * packets will always be sent at the minimum MTU unless
    834   1.97    rpaulo 	 * IP6PO_MINMTU_DISABLE is explicitly specified.
    835   1.97    rpaulo 	 * See RFC 3542 for more details.
    836    1.2    itojun 	 */
    837   1.45    itojun 	if (mtu > IPV6_MMTU) {
    838   1.45    itojun 		if ((flags & IPV6_MINMTU))
    839   1.45    itojun 			mtu = IPV6_MMTU;
    840   1.97    rpaulo 		else if (opt && opt->ip6po_minmtu == IP6PO_MINMTU_ALL)
    841   1.97    rpaulo 			mtu = IPV6_MMTU;
    842   1.97    rpaulo 		else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) &&
    843   1.97    rpaulo 			 (opt == NULL ||
    844   1.97    rpaulo 			  opt->ip6po_minmtu != IP6PO_MINMTU_DISABLE)) {
    845   1.97    rpaulo 			mtu = IPV6_MMTU;
    846   1.97    rpaulo 		}
    847   1.43    itojun 	}
    848   1.43    itojun 
    849   1.94    rpaulo 	/*
    850   1.94    rpaulo 	 * clear embedded scope identifiers if necessary.
    851   1.94    rpaulo 	 * in6_clearscope will touch the addresses only when necessary.
    852   1.94    rpaulo 	 */
    853   1.94    rpaulo 	in6_clearscope(&ip6->ip6_src);
    854   1.94    rpaulo 	in6_clearscope(&ip6->ip6_dst);
    855    1.2    itojun 
    856    1.2    itojun 	/*
    857    1.2    itojun 	 * If the outgoing packet contains a hop-by-hop options header,
    858    1.2    itojun 	 * it must be examined and processed even by the source node.
    859    1.2    itojun 	 * (RFC 2460, section 4.)
    860    1.2    itojun 	 */
    861    1.2    itojun 	if (exthdrs.ip6e_hbh) {
    862   1.31    itojun 		struct ip6_hbh *hbh = mtod(exthdrs.ip6e_hbh, struct ip6_hbh *);
    863    1.5    itojun 		u_int32_t dummy1; /* XXX unused */
    864    1.2    itojun 		u_int32_t dummy2; /* XXX unused */
    865    1.2    itojun 
    866    1.2    itojun 		/*
    867    1.2    itojun 		 *  XXX: if we have to send an ICMPv6 error to the sender,
    868    1.2    itojun 		 *       we need the M_LOOP flag since icmp6_error() expects
    869    1.2    itojun 		 *       the IPv6 and the hop-by-hop options header are
    870    1.2    itojun 		 *       continuous unless the flag is set.
    871    1.2    itojun 		 */
    872    1.2    itojun 		m->m_flags |= M_LOOP;
    873    1.2    itojun 		m->m_pkthdr.rcvif = ifp;
    874   1.49    itojun 		if (ip6_process_hopopts(m, (u_int8_t *)(hbh + 1),
    875   1.49    itojun 		    ((hbh->ip6h_len + 1) << 3) - sizeof(struct ip6_hbh),
    876   1.49    itojun 		    &dummy1, &dummy2) < 0) {
    877    1.2    itojun 			/* m was already freed at this point */
    878    1.2    itojun 			error = EINVAL;/* better error? */
    879    1.2    itojun 			goto done;
    880    1.2    itojun 		}
    881    1.2    itojun 		m->m_flags &= ~M_LOOP; /* XXX */
    882    1.2    itojun 		m->m_pkthdr.rcvif = NULL;
    883    1.2    itojun 	}
    884    1.2    itojun 
    885   1.15   darrenr #ifdef PFIL_HOOKS
    886   1.15   darrenr 	/*
    887   1.15   darrenr 	 * Run through list of hooks for output packets.
    888   1.15   darrenr 	 */
    889   1.49    itojun 	if ((error = pfil_run_hooks(&inet6_pfil_hook, &m, ifp, PFIL_OUT)) != 0)
    890   1.27   thorpej 		goto done;
    891   1.27   thorpej 	if (m == NULL)
    892   1.27   thorpej 		goto done;
    893   1.27   thorpej 	ip6 = mtod(m, struct ip6_hdr *);
    894   1.15   darrenr #endif /* PFIL_HOOKS */
    895    1.2    itojun 	/*
    896    1.2    itojun 	 * Send the packet to the outgoing interface.
    897   1.19    itojun 	 * If necessary, do IPv6 fragmentation before sending.
    898   1.78    itojun 	 *
    899   1.78    itojun 	 * the logic here is rather complex:
    900   1.78    itojun 	 * 1: normal case (dontfrag == 0, alwaysfrag == 0)
    901   1.78    itojun 	 * 1-a:	send as is if tlen <= path mtu
    902   1.78    itojun 	 * 1-b:	fragment if tlen > path mtu
    903   1.78    itojun 	 *
    904   1.78    itojun 	 * 2: if user asks us not to fragment (dontfrag == 1)
    905   1.78    itojun 	 * 2-a:	send as is if tlen <= interface mtu
    906   1.78    itojun 	 * 2-b:	error if tlen > interface mtu
    907   1.78    itojun 	 *
    908   1.78    itojun 	 * 3: if we always need to attach fragment header (alwaysfrag == 1)
    909   1.78    itojun 	 *	always fragment
    910   1.78    itojun 	 *
    911   1.78    itojun 	 * 4: if dontfrag == 1 && alwaysfrag == 1
    912   1.78    itojun 	 *	error, as we cannot handle this conflicting request
    913    1.2    itojun 	 */
    914    1.2    itojun 	tlen = m->m_pkthdr.len;
    915  1.105      yamt 	tso = (m->m_pkthdr.csum_flags & M_CSUM_TSOv6) != 0;
    916   1.97    rpaulo 	if (opt && (opt->ip6po_flags & IP6PO_DONTFRAG))
    917   1.97    rpaulo 		dontfrag = 1;
    918   1.97    rpaulo 	else
    919   1.97    rpaulo 		dontfrag = 0;
    920   1.97    rpaulo 
    921   1.78    itojun 	if (dontfrag && alwaysfrag) {	/* case 4 */
    922   1.78    itojun 		/* conflicting request - can't transmit */
    923   1.78    itojun 		error = EMSGSIZE;
    924   1.78    itojun 		goto bad;
    925   1.78    itojun 	}
    926  1.105      yamt 	if (dontfrag && (!tso && tlen > IN6_LINKMTU(ifp))) {	/* case 2-b */
    927   1.78    itojun 		/*
    928   1.78    itojun 		 * Even if the DONTFRAG option is specified, we cannot send the
    929   1.78    itojun 		 * packet when the data length is larger than the MTU of the
    930   1.78    itojun 		 * outgoing interface.
    931   1.78    itojun 		 * Notify the error by sending IPV6_PATHMTU ancillary data as
    932   1.78    itojun 		 * well as returning an error code (the latter is not described
    933   1.78    itojun 		 * in the API spec.)
    934   1.78    itojun 		 */
    935   1.78    itojun 		u_int32_t mtu32;
    936   1.78    itojun 		struct ip6ctlparam ip6cp;
    937   1.78    itojun 
    938   1.78    itojun 		mtu32 = (u_int32_t)mtu;
    939  1.136    cegger 		memset(&ip6cp, 0, sizeof(ip6cp));
    940   1.78    itojun 		ip6cp.ip6c_cmdarg = (void *)&mtu32;
    941  1.115    dyoung 		pfctlinput2(PRC_MSGSIZE,
    942  1.118    dyoung 		    rtcache_getdst(ro_pmtu), &ip6cp);
    943   1.78    itojun 
    944   1.78    itojun 		error = EMSGSIZE;
    945   1.78    itojun 		goto bad;
    946   1.78    itojun 	}
    947   1.97    rpaulo 
    948   1.78    itojun 	/*
    949   1.78    itojun 	 * transmit packet without fragmentation
    950   1.78    itojun 	 */
    951  1.105      yamt 	if (dontfrag || (!alwaysfrag && (tlen <= mtu || tso))) {
    952  1.105      yamt 		/* case 1-a and 2-a */
    953   1.26    itojun 		struct in6_ifaddr *ia6;
    954   1.89      yamt 		int sw_csum;
    955   1.78    itojun 
    956   1.26    itojun 		ip6 = mtod(m, struct ip6_hdr *);
    957   1.26    itojun 		ia6 = in6_ifawithifp(ifp, &ip6->ip6_src);
    958   1.26    itojun 		if (ia6) {
    959   1.42    itojun 			/* Record statistics for this interface address. */
    960   1.78    itojun 			ia6->ia_ifa.ifa_data.ifad_outbytes += m->m_pkthdr.len;
    961    1.9    itojun 		}
    962  1.141  drochner #ifdef KAME_IPSEC
    963   1.28    itojun 		/* clean ipsec history once it goes out of the node */
    964   1.28    itojun 		ipsec_delaux(m);
    965   1.28    itojun #endif
    966   1.89      yamt 
    967   1.89      yamt 		sw_csum = m->m_pkthdr.csum_flags & ~ifp->if_csum_flags_tx;
    968   1.89      yamt 		if ((sw_csum & (M_CSUM_UDPv6|M_CSUM_TCPv6)) != 0) {
    969   1.90      yamt 			if (IN6_NEED_CHECKSUM(ifp,
    970   1.90      yamt 			    sw_csum & (M_CSUM_UDPv6|M_CSUM_TCPv6))) {
    971   1.90      yamt 				in6_delayed_cksum(m);
    972   1.90      yamt 			}
    973   1.89      yamt 			m->m_pkthdr.csum_flags &= ~(M_CSUM_UDPv6|M_CSUM_TCPv6);
    974   1.89      yamt 		}
    975   1.89      yamt 
    976  1.118    dyoung 		KASSERT(dst != NULL);
    977  1.105      yamt 		if (__predict_true(!tso ||
    978  1.105      yamt 		    (ifp->if_capenable & IFCAP_TSOv6) != 0)) {
    979  1.105      yamt 			error = nd6_output(ifp, origifp, m, dst, rt);
    980  1.105      yamt 		} else {
    981  1.105      yamt 			error = ip6_tso_output(ifp, origifp, m, dst, rt);
    982  1.105      yamt 		}
    983    1.2    itojun 		goto done;
    984   1.78    itojun 	}
    985   1.78    itojun 
    986  1.105      yamt 	if (tso) {
    987  1.105      yamt 		error = EINVAL; /* XXX */
    988  1.105      yamt 		goto bad;
    989  1.105      yamt 	}
    990  1.105      yamt 
    991   1.78    itojun 	/*
    992   1.78    itojun 	 * try to fragment the packet.  case 1-b and 3
    993   1.78    itojun 	 */
    994   1.78    itojun 	if (mtu < IPV6_MMTU) {
    995   1.78    itojun 		/* path MTU cannot be less than IPV6_MMTU */
    996    1.2    itojun 		error = EMSGSIZE;
    997    1.9    itojun 		in6_ifstat_inc(ifp, ifs6_out_fragfail);
    998    1.2    itojun 		goto bad;
    999   1.78    itojun 	} else if (ip6->ip6_plen == 0) {
   1000   1.78    itojun 		/* jumbo payload cannot be fragmented */
   1001    1.2    itojun 		error = EMSGSIZE;
   1002    1.9    itojun 		in6_ifstat_inc(ifp, ifs6_out_fragfail);
   1003    1.2    itojun 		goto bad;
   1004    1.2    itojun 	} else {
   1005    1.2    itojun 		struct mbuf **mnext, *m_frgpart;
   1006    1.2    itojun 		struct ip6_frag *ip6f;
   1007   1.70    itojun 		u_int32_t id = htonl(ip6_randomid());
   1008    1.2    itojun 		u_char nextproto;
   1009   1.99    rpaulo #if 0				/* see below */
   1010   1.78    itojun 		struct ip6ctlparam ip6cp;
   1011   1.78    itojun 		u_int32_t mtu32;
   1012   1.99    rpaulo #endif
   1013    1.2    itojun 
   1014    1.2    itojun 		/*
   1015    1.2    itojun 		 * Too large for the destination or interface;
   1016    1.2    itojun 		 * fragment if possible.
   1017    1.2    itojun 		 * Must be able to put at least 8 bytes per fragment.
   1018    1.2    itojun 		 */
   1019    1.2    itojun 		hlen = unfragpartlen;
   1020    1.2    itojun 		if (mtu > IPV6_MAXPACKET)
   1021    1.2    itojun 			mtu = IPV6_MAXPACKET;
   1022   1.78    itojun 
   1023   1.99    rpaulo #if 0
   1024   1.99    rpaulo 		/*
   1025   1.99    rpaulo 		 * It is believed this code is a leftover from the
   1026   1.99    rpaulo 		 * development of the IPV6_RECVPATHMTU sockopt and
   1027   1.99    rpaulo 		 * associated work to implement RFC3542.
   1028   1.99    rpaulo 		 * It's not entirely clear what the intent of the API
   1029   1.99    rpaulo 		 * is at this point, so disable this code for now.
   1030   1.99    rpaulo 		 * The IPV6_RECVPATHMTU sockopt and/or IPV6_DONTFRAG
   1031   1.99    rpaulo 		 * will send notifications if the application requests.
   1032   1.99    rpaulo 		 */
   1033   1.99    rpaulo 
   1034   1.78    itojun 		/* Notify a proper path MTU to applications. */
   1035   1.78    itojun 		mtu32 = (u_int32_t)mtu;
   1036  1.136    cegger 		memset(&ip6cp, 0, sizeof(ip6cp));
   1037   1.78    itojun 		ip6cp.ip6c_cmdarg = (void *)&mtu32;
   1038  1.115    dyoung 		pfctlinput2(PRC_MSGSIZE,
   1039  1.118    dyoung 		    rtcache_getdst(ro_pmtu), &ip6cp);
   1040   1.99    rpaulo #endif
   1041   1.78    itojun 
   1042    1.2    itojun 		len = (mtu - hlen - sizeof(struct ip6_frag)) & ~7;
   1043    1.2    itojun 		if (len < 8) {
   1044    1.2    itojun 			error = EMSGSIZE;
   1045    1.9    itojun 			in6_ifstat_inc(ifp, ifs6_out_fragfail);
   1046    1.2    itojun 			goto bad;
   1047    1.2    itojun 		}
   1048    1.2    itojun 
   1049    1.2    itojun 		mnext = &m->m_nextpkt;
   1050    1.2    itojun 
   1051    1.2    itojun 		/*
   1052    1.2    itojun 		 * Change the next header field of the last header in the
   1053    1.2    itojun 		 * unfragmentable part.
   1054    1.2    itojun 		 */
   1055    1.2    itojun 		if (exthdrs.ip6e_rthdr) {
   1056    1.2    itojun 			nextproto = *mtod(exthdrs.ip6e_rthdr, u_char *);
   1057    1.2    itojun 			*mtod(exthdrs.ip6e_rthdr, u_char *) = IPPROTO_FRAGMENT;
   1058   1.19    itojun 		} else if (exthdrs.ip6e_dest1) {
   1059    1.2    itojun 			nextproto = *mtod(exthdrs.ip6e_dest1, u_char *);
   1060    1.2    itojun 			*mtod(exthdrs.ip6e_dest1, u_char *) = IPPROTO_FRAGMENT;
   1061   1.19    itojun 		} else if (exthdrs.ip6e_hbh) {
   1062    1.2    itojun 			nextproto = *mtod(exthdrs.ip6e_hbh, u_char *);
   1063    1.2    itojun 			*mtod(exthdrs.ip6e_hbh, u_char *) = IPPROTO_FRAGMENT;
   1064   1.19    itojun 		} else {
   1065    1.2    itojun 			nextproto = ip6->ip6_nxt;
   1066    1.2    itojun 			ip6->ip6_nxt = IPPROTO_FRAGMENT;
   1067    1.2    itojun 		}
   1068    1.2    itojun 
   1069   1.89      yamt 		if ((m->m_pkthdr.csum_flags & (M_CSUM_UDPv6|M_CSUM_TCPv6))
   1070   1.89      yamt 		    != 0) {
   1071   1.90      yamt 			if (IN6_NEED_CHECKSUM(ifp,
   1072   1.90      yamt 			    m->m_pkthdr.csum_flags &
   1073   1.90      yamt 			    (M_CSUM_UDPv6|M_CSUM_TCPv6))) {
   1074   1.90      yamt 				in6_delayed_cksum(m);
   1075   1.90      yamt 			}
   1076   1.89      yamt 			m->m_pkthdr.csum_flags &= ~(M_CSUM_UDPv6|M_CSUM_TCPv6);
   1077   1.89      yamt 		}
   1078   1.89      yamt 
   1079    1.2    itojun 		/*
   1080    1.2    itojun 		 * Loop through length of segment after first fragment,
   1081   1.42    itojun 		 * make new header and copy data of each part and link onto
   1082   1.42    itojun 		 * chain.
   1083    1.2    itojun 		 */
   1084    1.2    itojun 		m0 = m;
   1085    1.2    itojun 		for (off = hlen; off < tlen; off += len) {
   1086   1.68    itojun 			struct mbuf *mlast;
   1087   1.68    itojun 
   1088    1.2    itojun 			MGETHDR(m, M_DONTWAIT, MT_HEADER);
   1089    1.2    itojun 			if (!m) {
   1090    1.2    itojun 				error = ENOBUFS;
   1091  1.128   thorpej 				IP6_STATINC(IP6_STAT_ODROPPED);
   1092    1.2    itojun 				goto sendorfree;
   1093    1.2    itojun 			}
   1094   1.78    itojun 			m->m_pkthdr.rcvif = NULL;
   1095    1.2    itojun 			m->m_flags = m0->m_flags & M_COPYFLAGS;
   1096    1.2    itojun 			*mnext = m;
   1097    1.2    itojun 			mnext = &m->m_nextpkt;
   1098    1.2    itojun 			m->m_data += max_linkhdr;
   1099    1.2    itojun 			mhip6 = mtod(m, struct ip6_hdr *);
   1100    1.2    itojun 			*mhip6 = *ip6;
   1101    1.2    itojun 			m->m_len = sizeof(*mhip6);
   1102   1.42    itojun 			error = ip6_insertfraghdr(m0, m, hlen, &ip6f);
   1103   1.42    itojun 			if (error) {
   1104  1.128   thorpej 				IP6_STATINC(IP6_STAT_ODROPPED);
   1105    1.2    itojun 				goto sendorfree;
   1106    1.2    itojun 			}
   1107   1.69    itojun 			ip6f->ip6f_offlg = htons((u_int16_t)((off - hlen) & ~7));
   1108    1.2    itojun 			if (off + len >= tlen)
   1109    1.2    itojun 				len = tlen - off;
   1110    1.2    itojun 			else
   1111    1.2    itojun 				ip6f->ip6f_offlg |= IP6F_MORE_FRAG;
   1112   1.69    itojun 			mhip6->ip6_plen = htons((u_int16_t)(len + hlen +
   1113   1.49    itojun 			    sizeof(*ip6f) - sizeof(struct ip6_hdr)));
   1114    1.2    itojun 			if ((m_frgpart = m_copy(m0, off, len)) == 0) {
   1115    1.2    itojun 				error = ENOBUFS;
   1116  1.128   thorpej 				IP6_STATINC(IP6_STAT_ODROPPED);
   1117    1.2    itojun 				goto sendorfree;
   1118    1.2    itojun 			}
   1119   1.68    itojun 			for (mlast = m; mlast->m_next; mlast = mlast->m_next)
   1120   1.68    itojun 				;
   1121   1.68    itojun 			mlast->m_next = m_frgpart;
   1122    1.2    itojun 			m->m_pkthdr.len = len + hlen + sizeof(*ip6f);
   1123  1.142  christos 			m->m_pkthdr.rcvif = NULL;
   1124    1.2    itojun 			ip6f->ip6f_reserved = 0;
   1125    1.2    itojun 			ip6f->ip6f_ident = id;
   1126    1.2    itojun 			ip6f->ip6f_nxt = nextproto;
   1127  1.128   thorpej 			IP6_STATINC(IP6_STAT_OFRAGMENTS);
   1128    1.9    itojun 			in6_ifstat_inc(ifp, ifs6_out_fragcreat);
   1129    1.2    itojun 		}
   1130    1.9    itojun 
   1131    1.9    itojun 		in6_ifstat_inc(ifp, ifs6_out_fragok);
   1132    1.2    itojun 	}
   1133    1.2    itojun 
   1134    1.2    itojun 	/*
   1135    1.2    itojun 	 * Remove leading garbages.
   1136    1.2    itojun 	 */
   1137    1.2    itojun sendorfree:
   1138    1.2    itojun 	m = m0->m_nextpkt;
   1139    1.2    itojun 	m0->m_nextpkt = 0;
   1140    1.2    itojun 	m_freem(m0);
   1141    1.2    itojun 	for (m0 = m; m; m = m0) {
   1142    1.2    itojun 		m0 = m->m_nextpkt;
   1143    1.2    itojun 		m->m_nextpkt = 0;
   1144    1.2    itojun 		if (error == 0) {
   1145   1.26    itojun 			struct in6_ifaddr *ia6;
   1146   1.26    itojun 			ip6 = mtod(m, struct ip6_hdr *);
   1147   1.26    itojun 			ia6 = in6_ifawithifp(ifp, &ip6->ip6_src);
   1148   1.26    itojun 			if (ia6) {
   1149   1.42    itojun 				/*
   1150   1.42    itojun 				 * Record statistics for this interface
   1151   1.42    itojun 				 * address.
   1152   1.42    itojun 				 */
   1153   1.26    itojun 				ia6->ia_ifa.ifa_data.ifad_outbytes +=
   1154   1.78    itojun 				    m->m_pkthdr.len;
   1155    1.9    itojun 			}
   1156  1.141  drochner #ifdef KAME_IPSEC
   1157   1.28    itojun 			/* clean ipsec history once it goes out of the node */
   1158   1.28    itojun 			ipsec_delaux(m);
   1159    1.9    itojun #endif
   1160  1.118    dyoung 			KASSERT(dst != NULL);
   1161   1.97    rpaulo 			error = nd6_output(ifp, origifp, m, dst, rt);
   1162   1.19    itojun 		} else
   1163    1.2    itojun 			m_freem(m);
   1164    1.2    itojun 	}
   1165    1.2    itojun 
   1166    1.2    itojun 	if (error == 0)
   1167  1.128   thorpej 		IP6_STATINC(IP6_STAT_FRAGMENTED);
   1168    1.2    itojun 
   1169    1.2    itojun done:
   1170  1.124    dyoung 	rtcache_free(&ip6route);
   1171    1.2    itojun 
   1172  1.141  drochner #ifdef KAME_IPSEC
   1173    1.2    itojun 	if (sp != NULL)
   1174    1.2    itojun 		key_freesp(sp);
   1175  1.141  drochner #endif /* KAME_IPSEC */
   1176  1.114  degroote #ifdef FAST_IPSEC
   1177  1.114  degroote 	if (sp != NULL)
   1178  1.114  degroote 		KEY_FREESP(&sp);
   1179  1.114  degroote #endif /* FAST_IPSEC */
   1180  1.114  degroote 
   1181    1.2    itojun 
   1182   1.57    itojun 	return (error);
   1183    1.2    itojun 
   1184    1.2    itojun freehdrs:
   1185    1.2    itojun 	m_freem(exthdrs.ip6e_hbh);	/* m_freem will check if mbuf is 0 */
   1186    1.2    itojun 	m_freem(exthdrs.ip6e_dest1);
   1187    1.2    itojun 	m_freem(exthdrs.ip6e_rthdr);
   1188    1.2    itojun 	m_freem(exthdrs.ip6e_dest2);
   1189   1.48    itojun 	/* FALLTHROUGH */
   1190    1.2    itojun bad:
   1191    1.2    itojun 	m_freem(m);
   1192    1.2    itojun 	goto done;
   1193  1.118    dyoung badscope:
   1194  1.128   thorpej 	IP6_STATINC(IP6_STAT_BADSCOPE);
   1195  1.118    dyoung 	in6_ifstat_inc(origifp, ifs6_out_discard);
   1196  1.118    dyoung 	if (error == 0)
   1197  1.118    dyoung 		error = EHOSTUNREACH; /* XXX */
   1198  1.118    dyoung 	goto bad;
   1199    1.2    itojun }
   1200    1.2    itojun 
   1201    1.2    itojun static int
   1202  1.119  christos ip6_copyexthdr(struct mbuf **mp, void *hdr, int hlen)
   1203    1.2    itojun {
   1204    1.2    itojun 	struct mbuf *m;
   1205    1.2    itojun 
   1206    1.2    itojun 	if (hlen > MCLBYTES)
   1207   1.57    itojun 		return (ENOBUFS); /* XXX */
   1208    1.2    itojun 
   1209    1.2    itojun 	MGET(m, M_DONTWAIT, MT_DATA);
   1210    1.2    itojun 	if (!m)
   1211   1.57    itojun 		return (ENOBUFS);
   1212    1.2    itojun 
   1213    1.2    itojun 	if (hlen > MLEN) {
   1214    1.2    itojun 		MCLGET(m, M_DONTWAIT);
   1215    1.2    itojun 		if ((m->m_flags & M_EXT) == 0) {
   1216    1.2    itojun 			m_free(m);
   1217   1.57    itojun 			return (ENOBUFS);
   1218    1.2    itojun 		}
   1219    1.2    itojun 	}
   1220    1.2    itojun 	m->m_len = hlen;
   1221    1.2    itojun 	if (hdr)
   1222  1.117  christos 		bcopy(hdr, mtod(m, void *), hlen);
   1223    1.2    itojun 
   1224    1.2    itojun 	*mp = m;
   1225   1.57    itojun 	return (0);
   1226    1.2    itojun }
   1227    1.2    itojun 
   1228    1.2    itojun /*
   1229   1.89      yamt  * Process a delayed payload checksum calculation.
   1230   1.89      yamt  */
   1231   1.89      yamt void
   1232   1.89      yamt in6_delayed_cksum(struct mbuf *m)
   1233   1.89      yamt {
   1234   1.89      yamt 	uint16_t csum, offset;
   1235   1.89      yamt 
   1236   1.89      yamt 	KASSERT((m->m_pkthdr.csum_flags & (M_CSUM_UDPv6|M_CSUM_TCPv6)) != 0);
   1237   1.89      yamt 	KASSERT((~m->m_pkthdr.csum_flags & (M_CSUM_UDPv6|M_CSUM_TCPv6)) != 0);
   1238   1.89      yamt 	KASSERT((m->m_pkthdr.csum_flags
   1239   1.89      yamt 	    & (M_CSUM_UDPv4|M_CSUM_TCPv4|M_CSUM_TSOv4)) == 0);
   1240   1.89      yamt 
   1241   1.89      yamt 	offset = M_CSUM_DATA_IPv6_HL(m->m_pkthdr.csum_data);
   1242   1.89      yamt 	csum = in6_cksum(m, 0, offset, m->m_pkthdr.len - offset);
   1243   1.89      yamt 	if (csum == 0 && (m->m_pkthdr.csum_flags & M_CSUM_UDPv6) != 0) {
   1244   1.89      yamt 		csum = 0xffff;
   1245   1.89      yamt 	}
   1246   1.89      yamt 
   1247   1.89      yamt 	offset += M_CSUM_DATA_IPv6_OFFSET(m->m_pkthdr.csum_data);
   1248   1.89      yamt 	if ((offset + sizeof(csum)) > m->m_len) {
   1249   1.89      yamt 		m_copyback(m, offset, sizeof(csum), &csum);
   1250   1.89      yamt 	} else {
   1251  1.117  christos 		*(uint16_t *)(mtod(m, char *) + offset) = csum;
   1252   1.89      yamt 	}
   1253   1.89      yamt }
   1254   1.89      yamt 
   1255   1.89      yamt /*
   1256   1.19    itojun  * Insert jumbo payload option.
   1257    1.2    itojun  */
   1258    1.2    itojun static int
   1259  1.119  christos ip6_insert_jumboopt(struct ip6_exthdrs *exthdrs, u_int32_t plen)
   1260    1.2    itojun {
   1261    1.2    itojun 	struct mbuf *mopt;
   1262   1.56    itojun 	u_int8_t *optbuf;
   1263   1.25    itojun 	u_int32_t v;
   1264    1.2    itojun 
   1265    1.2    itojun #define JUMBOOPTLEN	8	/* length of jumbo payload option and padding */
   1266    1.2    itojun 
   1267    1.2    itojun 	/*
   1268    1.2    itojun 	 * If there is no hop-by-hop options header, allocate new one.
   1269    1.2    itojun 	 * If there is one but it doesn't have enough space to store the
   1270    1.2    itojun 	 * jumbo payload option, allocate a cluster to store the whole options.
   1271    1.2    itojun 	 * Otherwise, use it to store the options.
   1272    1.2    itojun 	 */
   1273    1.2    itojun 	if (exthdrs->ip6e_hbh == 0) {
   1274    1.2    itojun 		MGET(mopt, M_DONTWAIT, MT_DATA);
   1275    1.2    itojun 		if (mopt == 0)
   1276   1.57    itojun 			return (ENOBUFS);
   1277    1.2    itojun 		mopt->m_len = JUMBOOPTLEN;
   1278   1.56    itojun 		optbuf = mtod(mopt, u_int8_t *);
   1279    1.2    itojun 		optbuf[1] = 0;	/* = ((JUMBOOPTLEN) >> 3) - 1 */
   1280    1.2    itojun 		exthdrs->ip6e_hbh = mopt;
   1281   1.19    itojun 	} else {
   1282    1.2    itojun 		struct ip6_hbh *hbh;
   1283    1.2    itojun 
   1284    1.2    itojun 		mopt = exthdrs->ip6e_hbh;
   1285    1.2    itojun 		if (M_TRAILINGSPACE(mopt) < JUMBOOPTLEN) {
   1286   1.25    itojun 			/*
   1287   1.25    itojun 			 * XXX assumption:
   1288   1.25    itojun 			 * - exthdrs->ip6e_hbh is not referenced from places
   1289   1.25    itojun 			 *   other than exthdrs.
   1290   1.25    itojun 			 * - exthdrs->ip6e_hbh is not an mbuf chain.
   1291   1.25    itojun 			 */
   1292    1.2    itojun 			int oldoptlen = mopt->m_len;
   1293   1.25    itojun 			struct mbuf *n;
   1294    1.2    itojun 
   1295   1.25    itojun 			/*
   1296   1.25    itojun 			 * XXX: give up if the whole (new) hbh header does
   1297   1.25    itojun 			 * not fit even in an mbuf cluster.
   1298   1.25    itojun 			 */
   1299   1.25    itojun 			if (oldoptlen + JUMBOOPTLEN > MCLBYTES)
   1300   1.57    itojun 				return (ENOBUFS);
   1301    1.2    itojun 
   1302   1.25    itojun 			/*
   1303   1.25    itojun 			 * As a consequence, we must always prepare a cluster
   1304   1.25    itojun 			 * at this point.
   1305   1.25    itojun 			 */
   1306   1.25    itojun 			MGET(n, M_DONTWAIT, MT_DATA);
   1307   1.25    itojun 			if (n) {
   1308   1.25    itojun 				MCLGET(n, M_DONTWAIT);
   1309   1.25    itojun 				if ((n->m_flags & M_EXT) == 0) {
   1310   1.25    itojun 					m_freem(n);
   1311   1.25    itojun 					n = NULL;
   1312   1.25    itojun 				}
   1313   1.25    itojun 			}
   1314   1.25    itojun 			if (!n)
   1315   1.57    itojun 				return (ENOBUFS);
   1316   1.25    itojun 			n->m_len = oldoptlen + JUMBOOPTLEN;
   1317  1.117  christos 			bcopy(mtod(mopt, void *), mtod(n, void *),
   1318   1.78    itojun 			    oldoptlen);
   1319   1.56    itojun 			optbuf = mtod(n, u_int8_t *) + oldoptlen;
   1320   1.25    itojun 			m_freem(mopt);
   1321   1.33    itojun 			mopt = exthdrs->ip6e_hbh = n;
   1322   1.19    itojun 		} else {
   1323   1.56    itojun 			optbuf = mtod(mopt, u_int8_t *) + mopt->m_len;
   1324    1.2    itojun 			mopt->m_len += JUMBOOPTLEN;
   1325    1.2    itojun 		}
   1326    1.2    itojun 		optbuf[0] = IP6OPT_PADN;
   1327   1.58    itojun 		optbuf[1] = 0;
   1328    1.2    itojun 
   1329    1.2    itojun 		/*
   1330    1.2    itojun 		 * Adjust the header length according to the pad and
   1331    1.2    itojun 		 * the jumbo payload option.
   1332    1.2    itojun 		 */
   1333    1.2    itojun 		hbh = mtod(mopt, struct ip6_hbh *);
   1334    1.2    itojun 		hbh->ip6h_len += (JUMBOOPTLEN >> 3);
   1335    1.2    itojun 	}
   1336    1.2    itojun 
   1337    1.2    itojun 	/* fill in the option. */
   1338    1.2    itojun 	optbuf[2] = IP6OPT_JUMBO;
   1339    1.2    itojun 	optbuf[3] = 4;
   1340   1.25    itojun 	v = (u_int32_t)htonl(plen + JUMBOOPTLEN);
   1341   1.25    itojun 	bcopy(&v, &optbuf[4], sizeof(u_int32_t));
   1342    1.2    itojun 
   1343    1.2    itojun 	/* finally, adjust the packet header length */
   1344    1.2    itojun 	exthdrs->ip6e_ip6->m_pkthdr.len += JUMBOOPTLEN;
   1345    1.2    itojun 
   1346   1.57    itojun 	return (0);
   1347    1.2    itojun #undef JUMBOOPTLEN
   1348    1.2    itojun }
   1349    1.2    itojun 
   1350    1.2    itojun /*
   1351    1.2    itojun  * Insert fragment header and copy unfragmentable header portions.
   1352    1.2    itojun  */
   1353    1.2    itojun static int
   1354  1.119  christos ip6_insertfraghdr(struct mbuf *m0, struct mbuf *m, int hlen,
   1355  1.119  christos 	struct ip6_frag **frghdrp)
   1356    1.2    itojun {
   1357    1.2    itojun 	struct mbuf *n, *mlast;
   1358    1.2    itojun 
   1359    1.2    itojun 	if (hlen > sizeof(struct ip6_hdr)) {
   1360    1.2    itojun 		n = m_copym(m0, sizeof(struct ip6_hdr),
   1361   1.49    itojun 		    hlen - sizeof(struct ip6_hdr), M_DONTWAIT);
   1362    1.2    itojun 		if (n == 0)
   1363   1.57    itojun 			return (ENOBUFS);
   1364    1.2    itojun 		m->m_next = n;
   1365   1.19    itojun 	} else
   1366    1.2    itojun 		n = m;
   1367    1.2    itojun 
   1368    1.2    itojun 	/* Search for the last mbuf of unfragmentable part. */
   1369    1.2    itojun 	for (mlast = n; mlast->m_next; mlast = mlast->m_next)
   1370    1.2    itojun 		;
   1371    1.2    itojun 
   1372    1.2    itojun 	if ((mlast->m_flags & M_EXT) == 0 &&
   1373   1.22    itojun 	    M_TRAILINGSPACE(mlast) >= sizeof(struct ip6_frag)) {
   1374    1.2    itojun 		/* use the trailing space of the last mbuf for the fragment hdr */
   1375  1.117  christos 		*frghdrp = (struct ip6_frag *)(mtod(mlast, char *) +
   1376   1.49    itojun 		    mlast->m_len);
   1377    1.2    itojun 		mlast->m_len += sizeof(struct ip6_frag);
   1378    1.2    itojun 		m->m_pkthdr.len += sizeof(struct ip6_frag);
   1379   1.19    itojun 	} else {
   1380    1.2    itojun 		/* allocate a new mbuf for the fragment header */
   1381    1.2    itojun 		struct mbuf *mfrg;
   1382    1.2    itojun 
   1383    1.2    itojun 		MGET(mfrg, M_DONTWAIT, MT_DATA);
   1384    1.2    itojun 		if (mfrg == 0)
   1385   1.57    itojun 			return (ENOBUFS);
   1386    1.2    itojun 		mfrg->m_len = sizeof(struct ip6_frag);
   1387    1.2    itojun 		*frghdrp = mtod(mfrg, struct ip6_frag *);
   1388    1.2    itojun 		mlast->m_next = mfrg;
   1389    1.2    itojun 	}
   1390    1.2    itojun 
   1391   1.57    itojun 	return (0);
   1392   1.45    itojun }
   1393   1.45    itojun 
   1394   1.88    itojun static int
   1395  1.118    dyoung ip6_getpmtu(struct route *ro_pmtu, struct route *ro, struct ifnet *ifp,
   1396  1.115    dyoung     const struct in6_addr *dst, u_long *mtup, int *alwaysfragp)
   1397   1.45    itojun {
   1398  1.124    dyoung 	struct rtentry *rt;
   1399   1.45    itojun 	u_int32_t mtu = 0;
   1400   1.78    itojun 	int alwaysfrag = 0;
   1401   1.45    itojun 	int error = 0;
   1402   1.45    itojun 
   1403   1.45    itojun 	if (ro_pmtu != ro) {
   1404  1.118    dyoung 		union {
   1405  1.118    dyoung 			struct sockaddr		dst;
   1406  1.118    dyoung 			struct sockaddr_in6	dst6;
   1407  1.118    dyoung 		} u;
   1408  1.118    dyoung 
   1409   1.45    itojun 		/* The first hop and the final destination may differ. */
   1410  1.118    dyoung 		sockaddr_in6_init(&u.dst6, dst, 0, 0, 0);
   1411  1.126    dyoung 		rt = rtcache_lookup(ro_pmtu, &u.dst);
   1412  1.126    dyoung 	} else
   1413  1.126    dyoung 		rt = rtcache_validate(ro_pmtu);
   1414  1.126    dyoung 	if (rt != NULL) {
   1415   1.45    itojun 		u_int32_t ifmtu;
   1416   1.45    itojun 
   1417   1.45    itojun 		if (ifp == NULL)
   1418  1.124    dyoung 			ifp = rt->rt_ifp;
   1419   1.45    itojun 		ifmtu = IN6_LINKMTU(ifp);
   1420  1.124    dyoung 		mtu = rt->rt_rmx.rmx_mtu;
   1421   1.46    itojun 		if (mtu == 0)
   1422   1.46    itojun 			mtu = ifmtu;
   1423   1.78    itojun 		else if (mtu < IPV6_MMTU) {
   1424   1.78    itojun 			/*
   1425   1.78    itojun 			 * RFC2460 section 5, last paragraph:
   1426   1.78    itojun 			 * if we record ICMPv6 too big message with
   1427   1.78    itojun 			 * mtu < IPV6_MMTU, transmit packets sized IPV6_MMTU
   1428   1.78    itojun 			 * or smaller, with fragment header attached.
   1429   1.78    itojun 			 * (fragment header is needed regardless from the
   1430   1.78    itojun 			 * packet size, for translators to identify packets)
   1431   1.78    itojun 			 */
   1432   1.78    itojun 			alwaysfrag = 1;
   1433   1.78    itojun 			mtu = IPV6_MMTU;
   1434   1.78    itojun 		} else if (mtu > ifmtu) {
   1435   1.45    itojun 			/*
   1436   1.45    itojun 			 * The MTU on the route is larger than the MTU on
   1437   1.45    itojun 			 * the interface!  This shouldn't happen, unless the
   1438   1.45    itojun 			 * MTU of the interface has been changed after the
   1439   1.45    itojun 			 * interface was brought up.  Change the MTU in the
   1440   1.45    itojun 			 * route to match the interface MTU (as long as the
   1441   1.45    itojun 			 * field isn't locked).
   1442   1.45    itojun 			 */
   1443   1.45    itojun 			mtu = ifmtu;
   1444  1.124    dyoung 			if (!(rt->rt_rmx.rmx_locks & RTV_MTU))
   1445  1.124    dyoung 				rt->rt_rmx.rmx_mtu = mtu;
   1446   1.45    itojun 		}
   1447   1.45    itojun 	} else if (ifp) {
   1448   1.45    itojun 		mtu = IN6_LINKMTU(ifp);
   1449   1.45    itojun 	} else
   1450   1.45    itojun 		error = EHOSTUNREACH; /* XXX */
   1451   1.45    itojun 
   1452   1.45    itojun 	*mtup = mtu;
   1453   1.78    itojun 	if (alwaysfragp)
   1454   1.78    itojun 		*alwaysfragp = alwaysfrag;
   1455   1.57    itojun 	return (error);
   1456    1.2    itojun }
   1457    1.2    itojun 
   1458    1.2    itojun /*
   1459    1.2    itojun  * IP6 socket option processing.
   1460    1.2    itojun  */
   1461    1.2    itojun int
   1462  1.130    plunky ip6_ctloutput(int op, struct socket *so, struct sockopt *sopt)
   1463    1.2    itojun {
   1464  1.138      elad 	int optdatalen, uproto;
   1465   1.97    rpaulo 	void *optdata;
   1466   1.31    itojun 	struct in6pcb *in6p = sotoin6pcb(so);
   1467   1.97    rpaulo 	int error, optval;
   1468  1.130    plunky 	int level, optname;
   1469  1.130    plunky 
   1470  1.130    plunky 	KASSERT(sopt != NULL);
   1471  1.130    plunky 
   1472  1.130    plunky 	level = sopt->sopt_level;
   1473  1.130    plunky 	optname = sopt->sopt_name;
   1474    1.2    itojun 
   1475   1.97    rpaulo 	error = optval = 0;
   1476   1.97    rpaulo 	uproto = (int)so->so_proto->pr_protocol;
   1477   1.97    rpaulo 
   1478  1.121    dyoung 	if (level != IPPROTO_IPV6) {
   1479  1.121    dyoung 		return ENOPROTOOPT;
   1480  1.121    dyoung 	}
   1481  1.121    dyoung 	switch (op) {
   1482  1.121    dyoung 	case PRCO_SETOPT:
   1483  1.121    dyoung 		switch (optname) {
   1484   1.97    rpaulo #ifdef RFC2292
   1485  1.121    dyoung 		case IPV6_2292PKTOPTIONS:
   1486  1.130    plunky 			error = ip6_pcbopts(&in6p->in6p_outputopts, so, sopt);
   1487  1.121    dyoung 			break;
   1488  1.121    dyoung #endif
   1489  1.121    dyoung 
   1490  1.121    dyoung 		/*
   1491  1.121    dyoung 		 * Use of some Hop-by-Hop options or some
   1492  1.121    dyoung 		 * Destination options, might require special
   1493  1.121    dyoung 		 * privilege.  That is, normal applications
   1494  1.121    dyoung 		 * (without special privilege) might be forbidden
   1495  1.121    dyoung 		 * from setting certain options in outgoing packets,
   1496  1.121    dyoung 		 * and might never see certain options in received
   1497  1.121    dyoung 		 * packets. [RFC 2292 Section 6]
   1498  1.121    dyoung 		 * KAME specific note:
   1499  1.121    dyoung 		 *  KAME prevents non-privileged users from sending or
   1500  1.121    dyoung 		 *  receiving ANY hbh/dst options in order to avoid
   1501  1.121    dyoung 		 *  overhead of parsing options in the kernel.
   1502  1.121    dyoung 		 */
   1503  1.121    dyoung 		case IPV6_RECVHOPOPTS:
   1504  1.121    dyoung 		case IPV6_RECVDSTOPTS:
   1505  1.121    dyoung 		case IPV6_RECVRTHDRDSTOPTS:
   1506  1.138      elad 			error = kauth_authorize_generic(kauth_cred_get(),
   1507  1.138      elad 			    KAUTH_GENERIC_ISSUSER, NULL);
   1508  1.138      elad 			if (error)
   1509  1.121    dyoung 				break;
   1510  1.121    dyoung 			/* FALLTHROUGH */
   1511  1.121    dyoung 		case IPV6_UNICAST_HOPS:
   1512  1.121    dyoung 		case IPV6_HOPLIMIT:
   1513  1.121    dyoung 		case IPV6_FAITH:
   1514  1.121    dyoung 
   1515  1.121    dyoung 		case IPV6_RECVPKTINFO:
   1516  1.121    dyoung 		case IPV6_RECVHOPLIMIT:
   1517  1.121    dyoung 		case IPV6_RECVRTHDR:
   1518  1.121    dyoung 		case IPV6_RECVPATHMTU:
   1519  1.121    dyoung 		case IPV6_RECVTCLASS:
   1520  1.121    dyoung 		case IPV6_V6ONLY:
   1521  1.130    plunky 			error = sockopt_getint(sopt, &optval);
   1522  1.130    plunky 			if (error)
   1523   1.97    rpaulo 				break;
   1524  1.121    dyoung 			switch (optname) {
   1525    1.2    itojun 			case IPV6_UNICAST_HOPS:
   1526  1.121    dyoung 				if (optval < -1 || optval >= 256)
   1527    1.2    itojun 					error = EINVAL;
   1528  1.121    dyoung 				else {
   1529  1.121    dyoung 					/* -1 = kernel default */
   1530  1.121    dyoung 					in6p->in6p_hops = optval;
   1531   1.37    itojun 				}
   1532  1.121    dyoung 				break;
   1533    1.2    itojun #define OPTSET(bit) \
   1534   1.49    itojun do { \
   1535  1.121    dyoung if (optval) \
   1536  1.121    dyoung 	in6p->in6p_flags |= (bit); \
   1537  1.121    dyoung else \
   1538  1.121    dyoung 	in6p->in6p_flags &= ~(bit); \
   1539   1.60     perry } while (/*CONSTCOND*/ 0)
   1540    1.2    itojun 
   1541   1.97    rpaulo #ifdef RFC2292
   1542   1.97    rpaulo #define OPTSET2292(bit) 			\
   1543   1.97    rpaulo do { 						\
   1544  1.121    dyoung in6p->in6p_flags |= IN6P_RFC2292; 	\
   1545  1.121    dyoung if (optval) 				\
   1546  1.121    dyoung 	in6p->in6p_flags |= (bit); 	\
   1547  1.121    dyoung else 					\
   1548  1.121    dyoung 	in6p->in6p_flags &= ~(bit); 	\
   1549   1.97    rpaulo } while (/*CONSTCOND*/ 0)
   1550   1.97    rpaulo #endif
   1551   1.97    rpaulo 
   1552   1.97    rpaulo #define OPTBIT(bit) (in6p->in6p_flags & (bit) ? 1 : 0)
   1553    1.2    itojun 
   1554  1.121    dyoung 			case IPV6_RECVPKTINFO:
   1555   1.97    rpaulo #ifdef RFC2292
   1556  1.121    dyoung 				/* cannot mix with RFC2292 */
   1557  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1558  1.121    dyoung 					error = EINVAL;
   1559  1.121    dyoung 					break;
   1560  1.121    dyoung 				}
   1561   1.97    rpaulo #endif
   1562  1.121    dyoung 				OPTSET(IN6P_PKTINFO);
   1563  1.121    dyoung 				break;
   1564  1.121    dyoung 
   1565  1.121    dyoung 			case IPV6_HOPLIMIT:
   1566  1.121    dyoung 			{
   1567  1.121    dyoung 				struct ip6_pktopts **optp;
   1568    1.2    itojun 
   1569  1.121    dyoung #ifdef RFC2292
   1570  1.121    dyoung 				/* cannot mix with RFC2292 */
   1571  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1572  1.121    dyoung 					error = EINVAL;
   1573   1.37    itojun 					break;
   1574   1.97    rpaulo 				}
   1575  1.121    dyoung #endif
   1576  1.121    dyoung 				optp = &in6p->in6p_outputopts;
   1577  1.121    dyoung 				error = ip6_pcbopt(IPV6_HOPLIMIT,
   1578  1.121    dyoung 						   (u_char *)&optval,
   1579  1.121    dyoung 						   sizeof(optval),
   1580  1.121    dyoung 						   optp,
   1581  1.138      elad 						   kauth_cred_get(), uproto);
   1582  1.121    dyoung 				break;
   1583  1.121    dyoung 			}
   1584    1.2    itojun 
   1585  1.121    dyoung 			case IPV6_RECVHOPLIMIT:
   1586   1.97    rpaulo #ifdef RFC2292
   1587  1.121    dyoung 				/* cannot mix with RFC2292 */
   1588  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1589  1.121    dyoung 					error = EINVAL;
   1590  1.121    dyoung 					break;
   1591  1.121    dyoung 				}
   1592   1.97    rpaulo #endif
   1593  1.121    dyoung 				OPTSET(IN6P_HOPLIMIT);
   1594  1.121    dyoung 				break;
   1595    1.2    itojun 
   1596  1.121    dyoung 			case IPV6_RECVHOPOPTS:
   1597   1.97    rpaulo #ifdef RFC2292
   1598  1.121    dyoung 				/* cannot mix with RFC2292 */
   1599  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1600  1.121    dyoung 					error = EINVAL;
   1601  1.121    dyoung 					break;
   1602  1.121    dyoung 				}
   1603   1.97    rpaulo #endif
   1604  1.121    dyoung 				OPTSET(IN6P_HOPOPTS);
   1605  1.121    dyoung 				break;
   1606    1.2    itojun 
   1607  1.121    dyoung 			case IPV6_RECVDSTOPTS:
   1608   1.97    rpaulo #ifdef RFC2292
   1609  1.121    dyoung 				/* cannot mix with RFC2292 */
   1610  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1611  1.121    dyoung 					error = EINVAL;
   1612  1.121    dyoung 					break;
   1613  1.121    dyoung 				}
   1614   1.97    rpaulo #endif
   1615  1.121    dyoung 				OPTSET(IN6P_DSTOPTS);
   1616  1.121    dyoung 				break;
   1617    1.2    itojun 
   1618  1.121    dyoung 			case IPV6_RECVRTHDRDSTOPTS:
   1619   1.97    rpaulo #ifdef RFC2292
   1620  1.121    dyoung 				/* cannot mix with RFC2292 */
   1621  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1622  1.121    dyoung 					error = EINVAL;
   1623  1.121    dyoung 					break;
   1624  1.121    dyoung 				}
   1625   1.97    rpaulo #endif
   1626  1.121    dyoung 				OPTSET(IN6P_RTHDRDSTOPTS);
   1627  1.121    dyoung 				break;
   1628   1.97    rpaulo 
   1629  1.121    dyoung 			case IPV6_RECVRTHDR:
   1630   1.97    rpaulo #ifdef RFC2292
   1631  1.121    dyoung 				/* cannot mix with RFC2292 */
   1632  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1633  1.121    dyoung 					error = EINVAL;
   1634  1.121    dyoung 					break;
   1635  1.121    dyoung 				}
   1636   1.97    rpaulo #endif
   1637  1.121    dyoung 				OPTSET(IN6P_RTHDR);
   1638  1.121    dyoung 				break;
   1639  1.121    dyoung 
   1640  1.121    dyoung 			case IPV6_FAITH:
   1641  1.121    dyoung 				OPTSET(IN6P_FAITH);
   1642  1.121    dyoung 				break;
   1643    1.2    itojun 
   1644  1.121    dyoung 			case IPV6_RECVPATHMTU:
   1645  1.121    dyoung 				/*
   1646  1.121    dyoung 				 * We ignore this option for TCP
   1647  1.121    dyoung 				 * sockets.
   1648  1.121    dyoung 				 * (RFC3542 leaves this case
   1649  1.121    dyoung 				 * unspecified.)
   1650  1.121    dyoung 				 */
   1651  1.121    dyoung 				if (uproto != IPPROTO_TCP)
   1652  1.121    dyoung 					OPTSET(IN6P_MTU);
   1653  1.121    dyoung 				break;
   1654   1.10    itojun 
   1655  1.121    dyoung 			case IPV6_V6ONLY:
   1656  1.121    dyoung 				/*
   1657  1.121    dyoung 				 * make setsockopt(IPV6_V6ONLY)
   1658  1.121    dyoung 				 * available only prior to bind(2).
   1659  1.121    dyoung 				 * see ipng mailing list, Jun 22 2001.
   1660  1.121    dyoung 				 */
   1661  1.121    dyoung 				if (in6p->in6p_lport ||
   1662  1.121    dyoung 				    !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) {
   1663  1.121    dyoung 					error = EINVAL;
   1664   1.83    itojun 					break;
   1665  1.121    dyoung 				}
   1666   1.37    itojun #ifdef INET6_BINDV6ONLY
   1667  1.121    dyoung 				if (!optval)
   1668  1.121    dyoung 					error = EINVAL;
   1669   1.37    itojun #else
   1670  1.121    dyoung 				OPTSET(IN6P_IPV6_V6ONLY);
   1671   1.10    itojun #endif
   1672  1.121    dyoung 				break;
   1673  1.121    dyoung 			case IPV6_RECVTCLASS:
   1674  1.121    dyoung #ifdef RFC2292
   1675  1.121    dyoung 				/* cannot mix with RFC2292 XXX */
   1676  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1677  1.121    dyoung 					error = EINVAL;
   1678   1.37    itojun 					break;
   1679  1.121    dyoung 				}
   1680   1.97    rpaulo #endif
   1681  1.121    dyoung 				OPTSET(IN6P_TCLASS);
   1682  1.121    dyoung 				break;
   1683  1.121    dyoung 
   1684  1.121    dyoung 			}
   1685  1.121    dyoung 			break;
   1686  1.121    dyoung 
   1687  1.121    dyoung 		case IPV6_OTCLASS:
   1688  1.121    dyoung 		{
   1689  1.121    dyoung 			struct ip6_pktopts **optp;
   1690  1.121    dyoung 			u_int8_t tclass;
   1691   1.97    rpaulo 
   1692  1.130    plunky 			error = sockopt_get(sopt, &tclass, sizeof(tclass));
   1693  1.130    plunky 			if (error)
   1694   1.97    rpaulo 				break;
   1695  1.121    dyoung 			optp = &in6p->in6p_outputopts;
   1696  1.121    dyoung 			error = ip6_pcbopt(optname,
   1697  1.121    dyoung 					   (u_char *)&tclass,
   1698  1.121    dyoung 					   sizeof(tclass),
   1699  1.121    dyoung 					   optp,
   1700  1.138      elad 					   kauth_cred_get(), uproto);
   1701  1.121    dyoung 			break;
   1702  1.121    dyoung 		}
   1703   1.97    rpaulo 
   1704  1.121    dyoung 		case IPV6_TCLASS:
   1705  1.121    dyoung 		case IPV6_DONTFRAG:
   1706  1.121    dyoung 		case IPV6_USE_MIN_MTU:
   1707  1.130    plunky 			error = sockopt_getint(sopt, &optval);
   1708  1.130    plunky 			if (error)
   1709  1.121    dyoung 				break;
   1710   1.97    rpaulo 			{
   1711   1.97    rpaulo 				struct ip6_pktopts **optp;
   1712   1.97    rpaulo 				optp = &in6p->in6p_outputopts;
   1713   1.97    rpaulo 				error = ip6_pcbopt(optname,
   1714  1.121    dyoung 						   (u_char *)&optval,
   1715  1.121    dyoung 						   sizeof(optval),
   1716   1.97    rpaulo 						   optp,
   1717  1.138      elad 						   kauth_cred_get(), uproto);
   1718   1.97    rpaulo 				break;
   1719   1.97    rpaulo 			}
   1720   1.97    rpaulo 
   1721   1.97    rpaulo #ifdef RFC2292
   1722  1.121    dyoung 		case IPV6_2292PKTINFO:
   1723  1.121    dyoung 		case IPV6_2292HOPLIMIT:
   1724  1.121    dyoung 		case IPV6_2292HOPOPTS:
   1725  1.121    dyoung 		case IPV6_2292DSTOPTS:
   1726  1.121    dyoung 		case IPV6_2292RTHDR:
   1727  1.121    dyoung 			/* RFC 2292 */
   1728  1.130    plunky 			error = sockopt_getint(sopt, &optval);
   1729  1.130    plunky 			if (error)
   1730  1.121    dyoung 				break;
   1731  1.130    plunky 
   1732  1.121    dyoung 			switch (optname) {
   1733   1.97    rpaulo 			case IPV6_2292PKTINFO:
   1734  1.121    dyoung 				OPTSET2292(IN6P_PKTINFO);
   1735  1.121    dyoung 				break;
   1736   1.97    rpaulo 			case IPV6_2292HOPLIMIT:
   1737  1.121    dyoung 				OPTSET2292(IN6P_HOPLIMIT);
   1738  1.121    dyoung 				break;
   1739   1.97    rpaulo 			case IPV6_2292HOPOPTS:
   1740  1.121    dyoung 				/*
   1741  1.121    dyoung 				 * Check super-user privilege.
   1742  1.121    dyoung 				 * See comments for IPV6_RECVHOPOPTS.
   1743  1.121    dyoung 				 */
   1744  1.138      elad 				error =
   1745  1.138      elad 				    kauth_authorize_generic(kauth_cred_get(),
   1746  1.138      elad 				    KAUTH_GENERIC_ISSUSER, NULL);
   1747  1.138      elad 				if (error)
   1748  1.138      elad 					return (error);
   1749  1.121    dyoung 				OPTSET2292(IN6P_HOPOPTS);
   1750  1.121    dyoung 				break;
   1751   1.97    rpaulo 			case IPV6_2292DSTOPTS:
   1752  1.138      elad 				error =
   1753  1.138      elad 				    kauth_authorize_generic(kauth_cred_get(),
   1754  1.138      elad 				    KAUTH_GENERIC_ISSUSER, NULL);
   1755  1.138      elad 				if (error)
   1756  1.138      elad 					return (error);
   1757  1.121    dyoung 				OPTSET2292(IN6P_DSTOPTS|IN6P_RTHDRDSTOPTS); /* XXX */
   1758  1.121    dyoung 				break;
   1759   1.97    rpaulo 			case IPV6_2292RTHDR:
   1760  1.121    dyoung 				OPTSET2292(IN6P_RTHDR);
   1761   1.97    rpaulo 				break;
   1762  1.121    dyoung 			}
   1763  1.121    dyoung 			break;
   1764   1.97    rpaulo #endif
   1765  1.121    dyoung 		case IPV6_PKTINFO:
   1766  1.121    dyoung 		case IPV6_HOPOPTS:
   1767  1.121    dyoung 		case IPV6_RTHDR:
   1768  1.121    dyoung 		case IPV6_DSTOPTS:
   1769  1.121    dyoung 		case IPV6_RTHDRDSTOPTS:
   1770  1.130    plunky 		case IPV6_NEXTHOP: {
   1771  1.121    dyoung 			/* new advanced API (RFC3542) */
   1772  1.130    plunky 			void *optbuf;
   1773  1.121    dyoung 			int optbuflen;
   1774  1.121    dyoung 			struct ip6_pktopts **optp;
   1775   1.97    rpaulo 
   1776   1.97    rpaulo #ifdef RFC2292
   1777  1.121    dyoung 			/* cannot mix with RFC2292 */
   1778  1.121    dyoung 			if (OPTBIT(IN6P_RFC2292)) {
   1779  1.121    dyoung 				error = EINVAL;
   1780  1.121    dyoung 				break;
   1781  1.121    dyoung 			}
   1782   1.97    rpaulo #endif
   1783   1.97    rpaulo 
   1784  1.131    plunky 			optbuflen = sopt->sopt_size;
   1785  1.131    plunky 			optbuf = malloc(optbuflen, M_IP6OPT, M_NOWAIT);
   1786  1.131    plunky 			if (optbuf == NULL) {
   1787  1.131    plunky 				error = ENOBUFS;
   1788  1.131    plunky 				break;
   1789  1.131    plunky 			}
   1790  1.131    plunky 
   1791  1.130    plunky 			sockopt_get(sopt, optbuf, optbuflen);
   1792  1.121    dyoung 			optp = &in6p->in6p_outputopts;
   1793  1.121    dyoung 			error = ip6_pcbopt(optname, optbuf, optbuflen,
   1794  1.138      elad 			    optp, kauth_cred_get(), uproto);
   1795  1.121    dyoung 			break;
   1796  1.130    plunky 			}
   1797    1.2    itojun #undef OPTSET
   1798    1.2    itojun 
   1799  1.121    dyoung 		case IPV6_MULTICAST_IF:
   1800  1.121    dyoung 		case IPV6_MULTICAST_HOPS:
   1801  1.121    dyoung 		case IPV6_MULTICAST_LOOP:
   1802  1.121    dyoung 		case IPV6_JOIN_GROUP:
   1803  1.132    plunky 		case IPV6_LEAVE_GROUP:
   1804  1.132    plunky 			error = ip6_setmoptions(sopt, &in6p->in6p_moptions);
   1805  1.121    dyoung 			break;
   1806  1.121    dyoung 
   1807  1.121    dyoung 		case IPV6_PORTRANGE:
   1808  1.130    plunky 			error = sockopt_getint(sopt, &optval);
   1809  1.130    plunky 			if (error)
   1810    1.2    itojun 				break;
   1811    1.2    itojun 
   1812  1.121    dyoung 			switch (optval) {
   1813  1.121    dyoung 			case IPV6_PORTRANGE_DEFAULT:
   1814  1.121    dyoung 				in6p->in6p_flags &= ~(IN6P_LOWPORT);
   1815  1.121    dyoung 				in6p->in6p_flags &= ~(IN6P_HIGHPORT);
   1816  1.121    dyoung 				break;
   1817   1.12    itojun 
   1818  1.121    dyoung 			case IPV6_PORTRANGE_HIGH:
   1819  1.121    dyoung 				in6p->in6p_flags &= ~(IN6P_LOWPORT);
   1820  1.121    dyoung 				in6p->in6p_flags |= IN6P_HIGHPORT;
   1821  1.121    dyoung 				break;
   1822   1.12    itojun 
   1823  1.121    dyoung 			case IPV6_PORTRANGE_LOW:
   1824  1.121    dyoung 				in6p->in6p_flags &= ~(IN6P_HIGHPORT);
   1825  1.121    dyoung 				in6p->in6p_flags |= IN6P_LOWPORT;
   1826  1.121    dyoung 				break;
   1827   1.12    itojun 
   1828  1.121    dyoung 			default:
   1829  1.121    dyoung 				error = EINVAL;
   1830   1.12    itojun 				break;
   1831  1.121    dyoung 			}
   1832  1.121    dyoung 			break;
   1833   1.12    itojun 
   1834  1.114  degroote 
   1835  1.141  drochner #if defined(KAME_IPSEC) || defined(FAST_IPSEC)
   1836  1.121    dyoung 		case IPV6_IPSEC_POLICY:
   1837  1.130    plunky 			error = ipsec6_set_policy(in6p, optname,
   1838  1.138      elad 			    sopt->sopt_data, sopt->sopt_size, kauth_cred_get());
   1839  1.121    dyoung 			break;
   1840    1.2    itojun #endif /* IPSEC */
   1841    1.2    itojun 
   1842  1.121    dyoung 		default:
   1843  1.121    dyoung 			error = ENOPROTOOPT;
   1844    1.2    itojun 			break;
   1845  1.121    dyoung 		}
   1846  1.121    dyoung 		break;
   1847    1.2    itojun 
   1848  1.121    dyoung 	case PRCO_GETOPT:
   1849  1.121    dyoung 		switch (optname) {
   1850   1.97    rpaulo #ifdef RFC2292
   1851  1.121    dyoung 		case IPV6_2292PKTOPTIONS:
   1852  1.121    dyoung 			/*
   1853  1.121    dyoung 			 * RFC3542 (effectively) deprecated the
   1854  1.121    dyoung 			 * semantics of the 2292-style pktoptions.
   1855  1.121    dyoung 			 * Since it was not reliable in nature (i.e.,
   1856  1.121    dyoung 			 * applications had to expect the lack of some
   1857  1.121    dyoung 			 * information after all), it would make sense
   1858  1.121    dyoung 			 * to simplify this part by always returning
   1859  1.121    dyoung 			 * empty data.
   1860  1.121    dyoung 			 */
   1861  1.121    dyoung 			break;
   1862   1.97    rpaulo #endif
   1863    1.2    itojun 
   1864  1.121    dyoung 		case IPV6_RECVHOPOPTS:
   1865  1.121    dyoung 		case IPV6_RECVDSTOPTS:
   1866  1.121    dyoung 		case IPV6_RECVRTHDRDSTOPTS:
   1867  1.121    dyoung 		case IPV6_UNICAST_HOPS:
   1868  1.121    dyoung 		case IPV6_RECVPKTINFO:
   1869  1.121    dyoung 		case IPV6_RECVHOPLIMIT:
   1870  1.121    dyoung 		case IPV6_RECVRTHDR:
   1871  1.121    dyoung 		case IPV6_RECVPATHMTU:
   1872  1.121    dyoung 
   1873  1.121    dyoung 		case IPV6_FAITH:
   1874  1.121    dyoung 		case IPV6_V6ONLY:
   1875  1.121    dyoung 		case IPV6_PORTRANGE:
   1876  1.121    dyoung 		case IPV6_RECVTCLASS:
   1877  1.121    dyoung 			switch (optname) {
   1878  1.121    dyoung 
   1879   1.97    rpaulo 			case IPV6_RECVHOPOPTS:
   1880  1.121    dyoung 				optval = OPTBIT(IN6P_HOPOPTS);
   1881  1.121    dyoung 				break;
   1882  1.121    dyoung 
   1883   1.97    rpaulo 			case IPV6_RECVDSTOPTS:
   1884  1.121    dyoung 				optval = OPTBIT(IN6P_DSTOPTS);
   1885  1.121    dyoung 				break;
   1886  1.121    dyoung 
   1887   1.97    rpaulo 			case IPV6_RECVRTHDRDSTOPTS:
   1888  1.121    dyoung 				optval = OPTBIT(IN6P_RTHDRDSTOPTS);
   1889  1.121    dyoung 				break;
   1890  1.121    dyoung 
   1891   1.97    rpaulo 			case IPV6_UNICAST_HOPS:
   1892  1.121    dyoung 				optval = in6p->in6p_hops;
   1893  1.121    dyoung 				break;
   1894  1.121    dyoung 
   1895   1.97    rpaulo 			case IPV6_RECVPKTINFO:
   1896  1.121    dyoung 				optval = OPTBIT(IN6P_PKTINFO);
   1897  1.121    dyoung 				break;
   1898  1.121    dyoung 
   1899   1.97    rpaulo 			case IPV6_RECVHOPLIMIT:
   1900  1.121    dyoung 				optval = OPTBIT(IN6P_HOPLIMIT);
   1901  1.121    dyoung 				break;
   1902  1.121    dyoung 
   1903   1.97    rpaulo 			case IPV6_RECVRTHDR:
   1904  1.121    dyoung 				optval = OPTBIT(IN6P_RTHDR);
   1905  1.121    dyoung 				break;
   1906  1.121    dyoung 
   1907   1.97    rpaulo 			case IPV6_RECVPATHMTU:
   1908  1.121    dyoung 				optval = OPTBIT(IN6P_MTU);
   1909  1.121    dyoung 				break;
   1910    1.2    itojun 
   1911    1.2    itojun 			case IPV6_FAITH:
   1912  1.121    dyoung 				optval = OPTBIT(IN6P_FAITH);
   1913  1.121    dyoung 				break;
   1914  1.121    dyoung 
   1915   1.37    itojun 			case IPV6_V6ONLY:
   1916  1.121    dyoung 				optval = OPTBIT(IN6P_IPV6_V6ONLY);
   1917  1.121    dyoung 				break;
   1918  1.121    dyoung 
   1919   1.97    rpaulo 			case IPV6_PORTRANGE:
   1920  1.121    dyoung 			    {
   1921  1.121    dyoung 				int flags;
   1922  1.121    dyoung 				flags = in6p->in6p_flags;
   1923  1.121    dyoung 				if (flags & IN6P_HIGHPORT)
   1924  1.121    dyoung 					optval = IPV6_PORTRANGE_HIGH;
   1925  1.121    dyoung 				else if (flags & IN6P_LOWPORT)
   1926  1.121    dyoung 					optval = IPV6_PORTRANGE_LOW;
   1927  1.121    dyoung 				else
   1928  1.121    dyoung 					optval = 0;
   1929  1.121    dyoung 				break;
   1930  1.121    dyoung 			    }
   1931   1.97    rpaulo 			case IPV6_RECVTCLASS:
   1932  1.121    dyoung 				optval = OPTBIT(IN6P_TCLASS);
   1933  1.121    dyoung 				break;
   1934    1.2    itojun 
   1935  1.121    dyoung 			}
   1936  1.121    dyoung 			if (error)
   1937   1.97    rpaulo 				break;
   1938  1.130    plunky 			error = sockopt_setint(sopt, optval);
   1939  1.121    dyoung 			break;
   1940   1.97    rpaulo 
   1941  1.121    dyoung 		case IPV6_PATHMTU:
   1942  1.121    dyoung 		    {
   1943  1.121    dyoung 			u_long pmtu = 0;
   1944  1.121    dyoung 			struct ip6_mtuinfo mtuinfo;
   1945  1.121    dyoung 			struct route *ro = &in6p->in6p_route;
   1946    1.2    itojun 
   1947  1.121    dyoung 			if (!(so->so_state & SS_ISCONNECTED))
   1948  1.121    dyoung 				return (ENOTCONN);
   1949  1.121    dyoung 			/*
   1950  1.121    dyoung 			 * XXX: we dot not consider the case of source
   1951  1.121    dyoung 			 * routing, or optional information to specify
   1952  1.121    dyoung 			 * the outgoing interface.
   1953  1.121    dyoung 			 */
   1954  1.121    dyoung 			error = ip6_getpmtu(ro, NULL, NULL,
   1955  1.121    dyoung 			    &in6p->in6p_faddr, &pmtu, NULL);
   1956  1.121    dyoung 			if (error)
   1957  1.121    dyoung 				break;
   1958  1.121    dyoung 			if (pmtu > IPV6_MAXPACKET)
   1959  1.121    dyoung 				pmtu = IPV6_MAXPACKET;
   1960  1.121    dyoung 
   1961  1.121    dyoung 			memset(&mtuinfo, 0, sizeof(mtuinfo));
   1962  1.121    dyoung 			mtuinfo.ip6m_mtu = (u_int32_t)pmtu;
   1963  1.121    dyoung 			optdata = (void *)&mtuinfo;
   1964  1.121    dyoung 			optdatalen = sizeof(mtuinfo);
   1965  1.121    dyoung 			if (optdatalen > MCLBYTES)
   1966  1.121    dyoung 				return (EMSGSIZE); /* XXX */
   1967  1.130    plunky 			error = sockopt_set(sopt, optdata, optdatalen);
   1968  1.121    dyoung 			break;
   1969  1.121    dyoung 		    }
   1970   1.97    rpaulo 
   1971   1.97    rpaulo #ifdef RFC2292
   1972  1.121    dyoung 		case IPV6_2292PKTINFO:
   1973  1.121    dyoung 		case IPV6_2292HOPLIMIT:
   1974  1.121    dyoung 		case IPV6_2292HOPOPTS:
   1975  1.121    dyoung 		case IPV6_2292RTHDR:
   1976  1.121    dyoung 		case IPV6_2292DSTOPTS:
   1977  1.121    dyoung 			switch (optname) {
   1978   1.97    rpaulo 			case IPV6_2292PKTINFO:
   1979  1.121    dyoung 				optval = OPTBIT(IN6P_PKTINFO);
   1980  1.121    dyoung 				break;
   1981   1.97    rpaulo 			case IPV6_2292HOPLIMIT:
   1982  1.121    dyoung 				optval = OPTBIT(IN6P_HOPLIMIT);
   1983  1.121    dyoung 				break;
   1984   1.97    rpaulo 			case IPV6_2292HOPOPTS:
   1985  1.121    dyoung 				optval = OPTBIT(IN6P_HOPOPTS);
   1986  1.121    dyoung 				break;
   1987   1.97    rpaulo 			case IPV6_2292RTHDR:
   1988  1.121    dyoung 				optval = OPTBIT(IN6P_RTHDR);
   1989  1.121    dyoung 				break;
   1990   1.97    rpaulo 			case IPV6_2292DSTOPTS:
   1991  1.121    dyoung 				optval = OPTBIT(IN6P_DSTOPTS|IN6P_RTHDRDSTOPTS);
   1992    1.2    itojun 				break;
   1993  1.121    dyoung 			}
   1994  1.130    plunky 			error = sockopt_setint(sopt, optval);
   1995  1.121    dyoung 			break;
   1996  1.121    dyoung #endif
   1997  1.121    dyoung 		case IPV6_PKTINFO:
   1998  1.121    dyoung 		case IPV6_HOPOPTS:
   1999  1.121    dyoung 		case IPV6_RTHDR:
   2000  1.121    dyoung 		case IPV6_DSTOPTS:
   2001  1.121    dyoung 		case IPV6_RTHDRDSTOPTS:
   2002  1.121    dyoung 		case IPV6_NEXTHOP:
   2003  1.121    dyoung 		case IPV6_OTCLASS:
   2004  1.121    dyoung 		case IPV6_TCLASS:
   2005  1.121    dyoung 		case IPV6_DONTFRAG:
   2006  1.121    dyoung 		case IPV6_USE_MIN_MTU:
   2007  1.121    dyoung 			error = ip6_getpcbopt(in6p->in6p_outputopts,
   2008  1.130    plunky 			    optname, sopt);
   2009  1.121    dyoung 			break;
   2010  1.121    dyoung 
   2011  1.121    dyoung 		case IPV6_MULTICAST_IF:
   2012  1.121    dyoung 		case IPV6_MULTICAST_HOPS:
   2013  1.121    dyoung 		case IPV6_MULTICAST_LOOP:
   2014  1.121    dyoung 		case IPV6_JOIN_GROUP:
   2015  1.132    plunky 		case IPV6_LEAVE_GROUP:
   2016  1.132    plunky 			error = ip6_getmoptions(sopt, in6p->in6p_moptions);
   2017  1.121    dyoung 			break;
   2018    1.2    itojun 
   2019  1.141  drochner #if defined(KAME_IPSEC) || defined(FAST_IPSEC)
   2020  1.121    dyoung 		case IPV6_IPSEC_POLICY:
   2021  1.121    dyoung 		    {
   2022  1.130    plunky 			struct mbuf *m = NULL;
   2023  1.130    plunky 
   2024  1.130    plunky 			/* XXX this will return EINVAL as sopt is empty */
   2025  1.130    plunky 			error = ipsec6_get_policy(in6p, sopt->sopt_data,
   2026  1.130    plunky 			    sopt->sopt_size, &m);
   2027  1.130    plunky 			if (!error)
   2028  1.130    plunky 				error = sockopt_setmbuf(sopt, m);
   2029  1.130    plunky 
   2030  1.121    dyoung 			break;
   2031  1.121    dyoung 		    }
   2032    1.2    itojun #endif /* IPSEC */
   2033    1.2    itojun 
   2034  1.121    dyoung 		default:
   2035  1.121    dyoung 			error = ENOPROTOOPT;
   2036    1.2    itojun 			break;
   2037    1.2    itojun 		}
   2038  1.121    dyoung 		break;
   2039    1.2    itojun 	}
   2040   1.57    itojun 	return (error);
   2041   1.53    itojun }
   2042   1.53    itojun 
   2043   1.53    itojun int
   2044  1.130    plunky ip6_raw_ctloutput(int op, struct socket *so, struct sockopt *sopt)
   2045   1.53    itojun {
   2046  1.130    plunky 	int error = 0, optval;
   2047   1.53    itojun 	const int icmp6off = offsetof(struct icmp6_hdr, icmp6_cksum);
   2048   1.53    itojun 	struct in6pcb *in6p = sotoin6pcb(so);
   2049  1.130    plunky 	int level, optname;
   2050   1.53    itojun 
   2051  1.130    plunky 	KASSERT(sopt != NULL);
   2052  1.130    plunky 
   2053  1.130    plunky 	level = sopt->sopt_level;
   2054  1.130    plunky 	optname = sopt->sopt_name;
   2055   1.53    itojun 
   2056   1.53    itojun 	if (level != IPPROTO_IPV6) {
   2057  1.121    dyoung 		return ENOPROTOOPT;
   2058   1.53    itojun 	}
   2059   1.55    itojun 
   2060   1.53    itojun 	switch (optname) {
   2061   1.53    itojun 	case IPV6_CHECKSUM:
   2062   1.53    itojun 		/*
   2063   1.53    itojun 		 * For ICMPv6 sockets, no modification allowed for checksum
   2064   1.53    itojun 		 * offset, permit "no change" values to help existing apps.
   2065   1.53    itojun 		 *
   2066   1.97    rpaulo 		 * XXX RFC3542 says: "An attempt to set IPV6_CHECKSUM
   2067   1.97    rpaulo 		 * for an ICMPv6 socket will fail."  The current
   2068   1.97    rpaulo 		 * behavior does not meet RFC3542.
   2069   1.53    itojun 		 */
   2070   1.53    itojun 		switch (op) {
   2071   1.53    itojun 		case PRCO_SETOPT:
   2072  1.130    plunky 			error = sockopt_getint(sopt, &optval);
   2073  1.130    plunky 			if (error)
   2074   1.53    itojun 				break;
   2075   1.53    itojun 			if ((optval % 2) != 0) {
   2076   1.53    itojun 				/* the API assumes even offset values */
   2077   1.53    itojun 				error = EINVAL;
   2078   1.53    itojun 			} else if (so->so_proto->pr_protocol ==
   2079   1.53    itojun 			    IPPROTO_ICMPV6) {
   2080   1.53    itojun 				if (optval != icmp6off)
   2081   1.53    itojun 					error = EINVAL;
   2082   1.53    itojun 			} else
   2083   1.53    itojun 				in6p->in6p_cksum = optval;
   2084   1.53    itojun 			break;
   2085   1.53    itojun 
   2086   1.53    itojun 		case PRCO_GETOPT:
   2087   1.53    itojun 			if (so->so_proto->pr_protocol == IPPROTO_ICMPV6)
   2088   1.53    itojun 				optval = icmp6off;
   2089   1.53    itojun 			else
   2090   1.53    itojun 				optval = in6p->in6p_cksum;
   2091   1.53    itojun 
   2092  1.130    plunky 			error = sockopt_setint(sopt, optval);
   2093   1.53    itojun 			break;
   2094   1.53    itojun 
   2095   1.53    itojun 		default:
   2096   1.53    itojun 			error = EINVAL;
   2097   1.53    itojun 			break;
   2098   1.53    itojun 		}
   2099   1.53    itojun 		break;
   2100   1.53    itojun 
   2101   1.53    itojun 	default:
   2102   1.53    itojun 		error = ENOPROTOOPT;
   2103   1.53    itojun 		break;
   2104   1.53    itojun 	}
   2105   1.53    itojun 
   2106   1.57    itojun 	return (error);
   2107    1.2    itojun }
   2108    1.2    itojun 
   2109   1.97    rpaulo #ifdef RFC2292
   2110    1.2    itojun /*
   2111   1.97    rpaulo  * Set up IP6 options in pcb for insertion in output packets or
   2112   1.97    rpaulo  * specifying behavior of outgoing packets.
   2113    1.2    itojun  */
   2114    1.2    itojun static int
   2115  1.130    plunky ip6_pcbopts(struct ip6_pktopts **pktopt, struct socket *so,
   2116  1.130    plunky     struct sockopt *sopt)
   2117    1.2    itojun {
   2118   1.31    itojun 	struct ip6_pktopts *opt = *pktopt;
   2119  1.130    plunky 	struct mbuf *m;
   2120    1.2    itojun 	int error = 0;
   2121    1.2    itojun 
   2122    1.2    itojun 	/* turn off any old options. */
   2123    1.2    itojun 	if (opt) {
   2124   1.97    rpaulo #ifdef DIAGNOSTIC
   2125   1.97    rpaulo 	    if (opt->ip6po_pktinfo || opt->ip6po_nexthop ||
   2126   1.97    rpaulo 		opt->ip6po_hbh || opt->ip6po_dest1 || opt->ip6po_dest2 ||
   2127   1.97    rpaulo 		opt->ip6po_rhinfo.ip6po_rhi_rthdr)
   2128   1.97    rpaulo 		    printf("ip6_pcbopts: all specified options are cleared.\n");
   2129   1.97    rpaulo #endif
   2130   1.97    rpaulo 		ip6_clearpktopts(opt, -1);
   2131  1.134    plunky 	} else {
   2132  1.134    plunky 		opt = malloc(sizeof(*opt), M_IP6OPT, M_NOWAIT);
   2133  1.134    plunky 		if (opt == NULL)
   2134  1.134    plunky 			return (ENOBUFS);
   2135  1.134    plunky 	}
   2136   1.97    rpaulo 	*pktopt = NULL;
   2137    1.2    itojun 
   2138  1.130    plunky 	if (sopt == NULL || sopt->sopt_size == 0) {
   2139    1.2    itojun 		/*
   2140   1.97    rpaulo 		 * Only turning off any previous options, regardless of
   2141   1.97    rpaulo 		 * whether the opt is just created or given.
   2142    1.2    itojun 		 */
   2143   1.59    itojun 		free(opt, M_IP6OPT);
   2144   1.57    itojun 		return (0);
   2145    1.2    itojun 	}
   2146    1.2    itojun 
   2147    1.2    itojun 	/*  set options specified by user. */
   2148  1.130    plunky 	m = sockopt_getmbuf(sopt);
   2149  1.135    plunky 	if (m == NULL) {
   2150  1.135    plunky 		free(opt, M_IP6OPT);
   2151  1.135    plunky 		return (ENOBUFS);
   2152  1.135    plunky 	}
   2153  1.135    plunky 
   2154  1.138      elad 	error = ip6_setpktopts(m, opt, NULL, kauth_cred_get(),
   2155  1.138      elad 	    so->so_proto->pr_protocol);
   2156  1.130    plunky 	m_freem(m);
   2157  1.130    plunky 	if (error != 0) {
   2158   1.97    rpaulo 		ip6_clearpktopts(opt, -1); /* XXX: discard all options */
   2159   1.59    itojun 		free(opt, M_IP6OPT);
   2160   1.57    itojun 		return (error);
   2161    1.2    itojun 	}
   2162    1.2    itojun 	*pktopt = opt;
   2163   1.57    itojun 	return (0);
   2164    1.2    itojun }
   2165   1.97    rpaulo #endif
   2166   1.97    rpaulo 
   2167   1.97    rpaulo /*
   2168   1.97    rpaulo  * initialize ip6_pktopts.  beware that there are non-zero default values in
   2169   1.97    rpaulo  * the struct.
   2170   1.97    rpaulo  */
   2171   1.97    rpaulo void
   2172   1.97    rpaulo ip6_initpktopts(struct ip6_pktopts *opt)
   2173   1.97    rpaulo {
   2174   1.97    rpaulo 
   2175   1.97    rpaulo 	memset(opt, 0, sizeof(*opt));
   2176   1.97    rpaulo 	opt->ip6po_hlim = -1;	/* -1 means default hop limit */
   2177   1.97    rpaulo 	opt->ip6po_tclass = -1;	/* -1 means default traffic class */
   2178   1.97    rpaulo 	opt->ip6po_minmtu = IP6PO_MINMTU_MCASTONLY;
   2179   1.97    rpaulo }
   2180   1.97    rpaulo 
   2181   1.97    rpaulo #define sin6tosa(sin6)	((struct sockaddr *)(sin6)) /* XXX */
   2182   1.97    rpaulo static int
   2183   1.97    rpaulo ip6_pcbopt(int optname, u_char *buf, int len, struct ip6_pktopts **pktopt,
   2184  1.138      elad     kauth_cred_t cred, int uproto)
   2185   1.97    rpaulo {
   2186   1.97    rpaulo 	struct ip6_pktopts *opt;
   2187   1.97    rpaulo 
   2188   1.97    rpaulo 	if (*pktopt == NULL) {
   2189   1.97    rpaulo 		*pktopt = malloc(sizeof(struct ip6_pktopts), M_IP6OPT,
   2190  1.133    plunky 		    M_NOWAIT);
   2191  1.133    plunky 		if (*pktopt == NULL)
   2192  1.133    plunky 			return (ENOBUFS);
   2193  1.133    plunky 
   2194   1.97    rpaulo 		ip6_initpktopts(*pktopt);
   2195   1.97    rpaulo 	}
   2196   1.97    rpaulo 	opt = *pktopt;
   2197   1.97    rpaulo 
   2198  1.138      elad 	return (ip6_setpktopt(optname, buf, len, opt, cred, 1, 0, uproto));
   2199   1.97    rpaulo }
   2200   1.97    rpaulo 
   2201   1.97    rpaulo static int
   2202  1.130    plunky ip6_getpcbopt(struct ip6_pktopts *pktopt, int optname, struct sockopt *sopt)
   2203   1.97    rpaulo {
   2204   1.97    rpaulo 	void *optdata = NULL;
   2205   1.97    rpaulo 	int optdatalen = 0;
   2206   1.97    rpaulo 	struct ip6_ext *ip6e;
   2207   1.97    rpaulo 	int error = 0;
   2208   1.97    rpaulo 	struct in6_pktinfo null_pktinfo;
   2209   1.97    rpaulo 	int deftclass = 0, on;
   2210   1.97    rpaulo 	int defminmtu = IP6PO_MINMTU_MCASTONLY;
   2211   1.97    rpaulo 
   2212   1.97    rpaulo 	switch (optname) {
   2213   1.97    rpaulo 	case IPV6_PKTINFO:
   2214   1.97    rpaulo 		if (pktopt && pktopt->ip6po_pktinfo)
   2215   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_pktinfo;
   2216   1.97    rpaulo 		else {
   2217   1.97    rpaulo 			/* XXX: we don't have to do this every time... */
   2218   1.97    rpaulo 			memset(&null_pktinfo, 0, sizeof(null_pktinfo));
   2219   1.97    rpaulo 			optdata = (void *)&null_pktinfo;
   2220   1.97    rpaulo 		}
   2221   1.97    rpaulo 		optdatalen = sizeof(struct in6_pktinfo);
   2222   1.97    rpaulo 		break;
   2223   1.97    rpaulo 	case IPV6_OTCLASS:
   2224   1.97    rpaulo 		/* XXX */
   2225   1.97    rpaulo 		return (EINVAL);
   2226   1.97    rpaulo 	case IPV6_TCLASS:
   2227   1.97    rpaulo 		if (pktopt && pktopt->ip6po_tclass >= 0)
   2228   1.97    rpaulo 			optdata = (void *)&pktopt->ip6po_tclass;
   2229   1.97    rpaulo 		else
   2230   1.97    rpaulo 			optdata = (void *)&deftclass;
   2231   1.97    rpaulo 		optdatalen = sizeof(int);
   2232   1.97    rpaulo 		break;
   2233   1.97    rpaulo 	case IPV6_HOPOPTS:
   2234   1.97    rpaulo 		if (pktopt && pktopt->ip6po_hbh) {
   2235   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_hbh;
   2236   1.97    rpaulo 			ip6e = (struct ip6_ext *)pktopt->ip6po_hbh;
   2237   1.97    rpaulo 			optdatalen = (ip6e->ip6e_len + 1) << 3;
   2238   1.97    rpaulo 		}
   2239   1.97    rpaulo 		break;
   2240   1.97    rpaulo 	case IPV6_RTHDR:
   2241   1.97    rpaulo 		if (pktopt && pktopt->ip6po_rthdr) {
   2242   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_rthdr;
   2243   1.97    rpaulo 			ip6e = (struct ip6_ext *)pktopt->ip6po_rthdr;
   2244   1.97    rpaulo 			optdatalen = (ip6e->ip6e_len + 1) << 3;
   2245   1.97    rpaulo 		}
   2246   1.97    rpaulo 		break;
   2247   1.97    rpaulo 	case IPV6_RTHDRDSTOPTS:
   2248   1.97    rpaulo 		if (pktopt && pktopt->ip6po_dest1) {
   2249   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_dest1;
   2250   1.97    rpaulo 			ip6e = (struct ip6_ext *)pktopt->ip6po_dest1;
   2251   1.97    rpaulo 			optdatalen = (ip6e->ip6e_len + 1) << 3;
   2252   1.97    rpaulo 		}
   2253   1.97    rpaulo 		break;
   2254   1.97    rpaulo 	case IPV6_DSTOPTS:
   2255   1.97    rpaulo 		if (pktopt && pktopt->ip6po_dest2) {
   2256   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_dest2;
   2257   1.97    rpaulo 			ip6e = (struct ip6_ext *)pktopt->ip6po_dest2;
   2258   1.97    rpaulo 			optdatalen = (ip6e->ip6e_len + 1) << 3;
   2259   1.97    rpaulo 		}
   2260   1.97    rpaulo 		break;
   2261   1.97    rpaulo 	case IPV6_NEXTHOP:
   2262   1.97    rpaulo 		if (pktopt && pktopt->ip6po_nexthop) {
   2263   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_nexthop;
   2264   1.97    rpaulo 			optdatalen = pktopt->ip6po_nexthop->sa_len;
   2265   1.97    rpaulo 		}
   2266   1.97    rpaulo 		break;
   2267   1.97    rpaulo 	case IPV6_USE_MIN_MTU:
   2268   1.97    rpaulo 		if (pktopt)
   2269   1.97    rpaulo 			optdata = (void *)&pktopt->ip6po_minmtu;
   2270   1.97    rpaulo 		else
   2271   1.97    rpaulo 			optdata = (void *)&defminmtu;
   2272   1.97    rpaulo 		optdatalen = sizeof(int);
   2273   1.97    rpaulo 		break;
   2274   1.97    rpaulo 	case IPV6_DONTFRAG:
   2275   1.97    rpaulo 		if (pktopt && ((pktopt->ip6po_flags) & IP6PO_DONTFRAG))
   2276   1.97    rpaulo 			on = 1;
   2277   1.97    rpaulo 		else
   2278   1.97    rpaulo 			on = 0;
   2279   1.97    rpaulo 		optdata = (void *)&on;
   2280   1.97    rpaulo 		optdatalen = sizeof(on);
   2281   1.97    rpaulo 		break;
   2282   1.97    rpaulo 	default:		/* should not happen */
   2283   1.97    rpaulo #ifdef DIAGNOSTIC
   2284   1.97    rpaulo 		panic("ip6_getpcbopt: unexpected option\n");
   2285   1.97    rpaulo #endif
   2286   1.97    rpaulo 		return (ENOPROTOOPT);
   2287   1.97    rpaulo 	}
   2288   1.97    rpaulo 
   2289  1.130    plunky 	error = sockopt_set(sopt, optdata, optdatalen);
   2290   1.97    rpaulo 
   2291   1.97    rpaulo 	return (error);
   2292   1.97    rpaulo }
   2293   1.97    rpaulo 
   2294   1.97    rpaulo void
   2295   1.97    rpaulo ip6_clearpktopts(struct ip6_pktopts *pktopt, int optname)
   2296   1.97    rpaulo {
   2297   1.97    rpaulo 	if (optname == -1 || optname == IPV6_PKTINFO) {
   2298   1.97    rpaulo 		if (pktopt->ip6po_pktinfo)
   2299   1.97    rpaulo 			free(pktopt->ip6po_pktinfo, M_IP6OPT);
   2300   1.97    rpaulo 		pktopt->ip6po_pktinfo = NULL;
   2301   1.97    rpaulo 	}
   2302   1.97    rpaulo 	if (optname == -1 || optname == IPV6_HOPLIMIT)
   2303   1.97    rpaulo 		pktopt->ip6po_hlim = -1;
   2304   1.97    rpaulo 	if (optname == -1 || optname == IPV6_TCLASS)
   2305   1.97    rpaulo 		pktopt->ip6po_tclass = -1;
   2306   1.97    rpaulo 	if (optname == -1 || optname == IPV6_NEXTHOP) {
   2307  1.118    dyoung 		rtcache_free(&pktopt->ip6po_nextroute);
   2308   1.97    rpaulo 		if (pktopt->ip6po_nexthop)
   2309   1.97    rpaulo 			free(pktopt->ip6po_nexthop, M_IP6OPT);
   2310   1.97    rpaulo 		pktopt->ip6po_nexthop = NULL;
   2311   1.97    rpaulo 	}
   2312   1.97    rpaulo 	if (optname == -1 || optname == IPV6_HOPOPTS) {
   2313   1.97    rpaulo 		if (pktopt->ip6po_hbh)
   2314   1.97    rpaulo 			free(pktopt->ip6po_hbh, M_IP6OPT);
   2315   1.97    rpaulo 		pktopt->ip6po_hbh = NULL;
   2316   1.97    rpaulo 	}
   2317   1.97    rpaulo 	if (optname == -1 || optname == IPV6_RTHDRDSTOPTS) {
   2318   1.97    rpaulo 		if (pktopt->ip6po_dest1)
   2319   1.97    rpaulo 			free(pktopt->ip6po_dest1, M_IP6OPT);
   2320   1.97    rpaulo 		pktopt->ip6po_dest1 = NULL;
   2321   1.97    rpaulo 	}
   2322   1.97    rpaulo 	if (optname == -1 || optname == IPV6_RTHDR) {
   2323   1.97    rpaulo 		if (pktopt->ip6po_rhinfo.ip6po_rhi_rthdr)
   2324   1.97    rpaulo 			free(pktopt->ip6po_rhinfo.ip6po_rhi_rthdr, M_IP6OPT);
   2325   1.97    rpaulo 		pktopt->ip6po_rhinfo.ip6po_rhi_rthdr = NULL;
   2326  1.118    dyoung 		rtcache_free(&pktopt->ip6po_route);
   2327   1.97    rpaulo 	}
   2328   1.97    rpaulo 	if (optname == -1 || optname == IPV6_DSTOPTS) {
   2329   1.97    rpaulo 		if (pktopt->ip6po_dest2)
   2330   1.97    rpaulo 			free(pktopt->ip6po_dest2, M_IP6OPT);
   2331   1.97    rpaulo 		pktopt->ip6po_dest2 = NULL;
   2332   1.97    rpaulo 	}
   2333   1.97    rpaulo }
   2334   1.97    rpaulo 
   2335   1.97    rpaulo #define PKTOPT_EXTHDRCPY(type) 					\
   2336   1.97    rpaulo do {								\
   2337   1.97    rpaulo 	if (src->type) {					\
   2338   1.97    rpaulo 		int hlen = (((struct ip6_ext *)src->type)->ip6e_len + 1) << 3;\
   2339   1.97    rpaulo 		dst->type = malloc(hlen, M_IP6OPT, canwait);	\
   2340   1.97    rpaulo 		if (dst->type == NULL && canwait == M_NOWAIT)	\
   2341   1.97    rpaulo 			goto bad;				\
   2342   1.97    rpaulo 		memcpy(dst->type, src->type, hlen);		\
   2343   1.97    rpaulo 	}							\
   2344   1.97    rpaulo } while (/*CONSTCOND*/ 0)
   2345   1.97    rpaulo 
   2346   1.97    rpaulo static int
   2347   1.97    rpaulo copypktopts(struct ip6_pktopts *dst, struct ip6_pktopts *src, int canwait)
   2348   1.97    rpaulo {
   2349   1.97    rpaulo 	dst->ip6po_hlim = src->ip6po_hlim;
   2350   1.97    rpaulo 	dst->ip6po_tclass = src->ip6po_tclass;
   2351   1.97    rpaulo 	dst->ip6po_flags = src->ip6po_flags;
   2352   1.97    rpaulo 	if (src->ip6po_pktinfo) {
   2353   1.97    rpaulo 		dst->ip6po_pktinfo = malloc(sizeof(*dst->ip6po_pktinfo),
   2354   1.97    rpaulo 		    M_IP6OPT, canwait);
   2355   1.97    rpaulo 		if (dst->ip6po_pktinfo == NULL && canwait == M_NOWAIT)
   2356   1.97    rpaulo 			goto bad;
   2357   1.97    rpaulo 		*dst->ip6po_pktinfo = *src->ip6po_pktinfo;
   2358   1.97    rpaulo 	}
   2359   1.97    rpaulo 	if (src->ip6po_nexthop) {
   2360   1.97    rpaulo 		dst->ip6po_nexthop = malloc(src->ip6po_nexthop->sa_len,
   2361   1.97    rpaulo 		    M_IP6OPT, canwait);
   2362   1.97    rpaulo 		if (dst->ip6po_nexthop == NULL && canwait == M_NOWAIT)
   2363   1.97    rpaulo 			goto bad;
   2364   1.97    rpaulo 		memcpy(dst->ip6po_nexthop, src->ip6po_nexthop,
   2365   1.97    rpaulo 		    src->ip6po_nexthop->sa_len);
   2366   1.97    rpaulo 	}
   2367   1.97    rpaulo 	PKTOPT_EXTHDRCPY(ip6po_hbh);
   2368   1.97    rpaulo 	PKTOPT_EXTHDRCPY(ip6po_dest1);
   2369   1.97    rpaulo 	PKTOPT_EXTHDRCPY(ip6po_dest2);
   2370   1.97    rpaulo 	PKTOPT_EXTHDRCPY(ip6po_rthdr); /* not copy the cached route */
   2371   1.97    rpaulo 	return (0);
   2372   1.97    rpaulo 
   2373   1.97    rpaulo   bad:
   2374   1.97    rpaulo 	if (dst->ip6po_pktinfo) free(dst->ip6po_pktinfo, M_IP6OPT);
   2375   1.97    rpaulo 	if (dst->ip6po_nexthop) free(dst->ip6po_nexthop, M_IP6OPT);
   2376   1.97    rpaulo 	if (dst->ip6po_hbh) free(dst->ip6po_hbh, M_IP6OPT);
   2377   1.97    rpaulo 	if (dst->ip6po_dest1) free(dst->ip6po_dest1, M_IP6OPT);
   2378   1.97    rpaulo 	if (dst->ip6po_dest2) free(dst->ip6po_dest2, M_IP6OPT);
   2379   1.97    rpaulo 	if (dst->ip6po_rthdr) free(dst->ip6po_rthdr, M_IP6OPT);
   2380   1.97    rpaulo 
   2381   1.97    rpaulo 	return (ENOBUFS);
   2382   1.97    rpaulo }
   2383   1.97    rpaulo #undef PKTOPT_EXTHDRCPY
   2384   1.97    rpaulo 
   2385   1.97    rpaulo struct ip6_pktopts *
   2386   1.97    rpaulo ip6_copypktopts(struct ip6_pktopts *src, int canwait)
   2387   1.97    rpaulo {
   2388   1.97    rpaulo 	int error;
   2389   1.97    rpaulo 	struct ip6_pktopts *dst;
   2390   1.97    rpaulo 
   2391   1.97    rpaulo 	dst = malloc(sizeof(*dst), M_IP6OPT, canwait);
   2392   1.97    rpaulo 	if (dst == NULL && canwait == M_NOWAIT)
   2393   1.97    rpaulo 		return (NULL);
   2394   1.97    rpaulo 	ip6_initpktopts(dst);
   2395   1.97    rpaulo 
   2396   1.97    rpaulo 	if ((error = copypktopts(dst, src, canwait)) != 0) {
   2397   1.97    rpaulo 		free(dst, M_IP6OPT);
   2398   1.97    rpaulo 		return (NULL);
   2399   1.97    rpaulo 	}
   2400   1.97    rpaulo 
   2401   1.97    rpaulo 	return (dst);
   2402   1.97    rpaulo }
   2403   1.97    rpaulo 
   2404   1.97    rpaulo void
   2405   1.97    rpaulo ip6_freepcbopts(struct ip6_pktopts *pktopt)
   2406   1.97    rpaulo {
   2407   1.97    rpaulo 	if (pktopt == NULL)
   2408   1.97    rpaulo 		return;
   2409   1.97    rpaulo 
   2410   1.97    rpaulo 	ip6_clearpktopts(pktopt, -1);
   2411   1.97    rpaulo 
   2412   1.97    rpaulo 	free(pktopt, M_IP6OPT);
   2413   1.97    rpaulo }
   2414    1.2    itojun 
   2415    1.2    itojun /*
   2416    1.2    itojun  * Set the IP6 multicast options in response to user setsockopt().
   2417    1.2    itojun  */
   2418    1.2    itojun static int
   2419  1.132    plunky ip6_setmoptions(const struct sockopt *sopt, struct ip6_moptions **im6op)
   2420    1.2    itojun {
   2421    1.2    itojun 	int error = 0;
   2422    1.2    itojun 	u_int loop, ifindex;
   2423  1.132    plunky 	struct ipv6_mreq mreq;
   2424    1.2    itojun 	struct ifnet *ifp;
   2425    1.2    itojun 	struct ip6_moptions *im6o = *im6op;
   2426  1.118    dyoung 	struct route ro;
   2427    1.2    itojun 	struct in6_multi_mship *imm;
   2428  1.101        ad 	struct lwp *l = curlwp;	/* XXX */
   2429    1.2    itojun 
   2430    1.2    itojun 	if (im6o == NULL) {
   2431    1.2    itojun 		/*
   2432    1.2    itojun 		 * No multicast option buffer attached to the pcb;
   2433    1.2    itojun 		 * allocate one and initialize to default values.
   2434    1.2    itojun 		 */
   2435  1.132    plunky 		im6o = malloc(sizeof(*im6o), M_IPMOPTS, M_NOWAIT);
   2436    1.2    itojun 		if (im6o == NULL)
   2437   1.57    itojun 			return (ENOBUFS);
   2438  1.132    plunky 
   2439    1.2    itojun 		*im6op = im6o;
   2440    1.2    itojun 		im6o->im6o_multicast_ifp = NULL;
   2441    1.2    itojun 		im6o->im6o_multicast_hlim = ip6_defmcasthlim;
   2442    1.2    itojun 		im6o->im6o_multicast_loop = IPV6_DEFAULT_MULTICAST_LOOP;
   2443    1.2    itojun 		LIST_INIT(&im6o->im6o_memberships);
   2444    1.2    itojun 	}
   2445    1.2    itojun 
   2446  1.132    plunky 	switch (sopt->sopt_name) {
   2447    1.2    itojun 
   2448    1.2    itojun 	case IPV6_MULTICAST_IF:
   2449    1.2    itojun 		/*
   2450    1.2    itojun 		 * Select the interface for outgoing multicast packets.
   2451    1.2    itojun 		 */
   2452  1.132    plunky 		error = sockopt_get(sopt, &ifindex, sizeof(ifindex));
   2453  1.132    plunky 		if (error != 0)
   2454    1.2    itojun 			break;
   2455  1.132    plunky 
   2456   1.87  drochner 		if (ifindex != 0) {
   2457  1.102  christos 			if (if_indexlim <= ifindex || !ifindex2ifnet[ifindex]) {
   2458   1.87  drochner 				error = ENXIO;	/* XXX EINVAL? */
   2459   1.87  drochner 				break;
   2460   1.87  drochner 			}
   2461   1.87  drochner 			ifp = ifindex2ifnet[ifindex];
   2462   1.87  drochner 			if ((ifp->if_flags & IFF_MULTICAST) == 0) {
   2463   1.87  drochner 				error = EADDRNOTAVAIL;
   2464   1.87  drochner 				break;
   2465   1.87  drochner 			}
   2466   1.87  drochner 		} else
   2467   1.87  drochner 			ifp = NULL;
   2468    1.2    itojun 		im6o->im6o_multicast_ifp = ifp;
   2469    1.2    itojun 		break;
   2470    1.2    itojun 
   2471    1.2    itojun 	case IPV6_MULTICAST_HOPS:
   2472    1.2    itojun 	    {
   2473    1.2    itojun 		/*
   2474    1.2    itojun 		 * Set the IP6 hoplimit for outgoing multicast packets.
   2475    1.2    itojun 		 */
   2476    1.2    itojun 		int optval;
   2477  1.132    plunky 
   2478  1.132    plunky 		error = sockopt_getint(sopt, &optval);
   2479  1.132    plunky 		if (error != 0)
   2480    1.2    itojun 			break;
   2481  1.132    plunky 
   2482    1.2    itojun 		if (optval < -1 || optval >= 256)
   2483    1.2    itojun 			error = EINVAL;
   2484    1.2    itojun 		else if (optval == -1)
   2485    1.2    itojun 			im6o->im6o_multicast_hlim = ip6_defmcasthlim;
   2486    1.2    itojun 		else
   2487    1.2    itojun 			im6o->im6o_multicast_hlim = optval;
   2488    1.2    itojun 		break;
   2489    1.2    itojun 	    }
   2490    1.2    itojun 
   2491    1.2    itojun 	case IPV6_MULTICAST_LOOP:
   2492    1.2    itojun 		/*
   2493    1.2    itojun 		 * Set the loopback flag for outgoing multicast packets.
   2494    1.2    itojun 		 * Must be zero or one.
   2495    1.2    itojun 		 */
   2496  1.132    plunky 		error = sockopt_get(sopt, &loop, sizeof(loop));
   2497  1.132    plunky 		if (error != 0)
   2498   1.25    itojun 			break;
   2499   1.25    itojun 		if (loop > 1) {
   2500    1.2    itojun 			error = EINVAL;
   2501    1.2    itojun 			break;
   2502    1.2    itojun 		}
   2503    1.2    itojun 		im6o->im6o_multicast_loop = loop;
   2504    1.2    itojun 		break;
   2505    1.2    itojun 
   2506    1.2    itojun 	case IPV6_JOIN_GROUP:
   2507    1.2    itojun 		/*
   2508    1.2    itojun 		 * Add a multicast group membership.
   2509    1.2    itojun 		 * Group must be a valid IP6 multicast address.
   2510    1.2    itojun 		 */
   2511  1.132    plunky 		error = sockopt_get(sopt, &mreq, sizeof(mreq));
   2512  1.132    plunky 		if (error != 0)
   2513    1.2    itojun 			break;
   2514  1.132    plunky 
   2515  1.132    plunky 		if (IN6_IS_ADDR_UNSPECIFIED(&mreq.ipv6mr_multiaddr)) {
   2516    1.2    itojun 			/*
   2517    1.2    itojun 			 * We use the unspecified address to specify to accept
   2518    1.2    itojun 			 * all multicast addresses. Only super user is allowed
   2519    1.2    itojun 			 * to do this.
   2520    1.2    itojun 			 */
   2521  1.101        ad 			if (kauth_authorize_generic(l->l_cred,
   2522  1.111      elad 			    KAUTH_GENERIC_ISSUSER, NULL))
   2523   1.31    itojun 			{
   2524    1.2    itojun 				error = EACCES;
   2525    1.2    itojun 				break;
   2526    1.2    itojun 			}
   2527  1.132    plunky 		} else if (!IN6_IS_ADDR_MULTICAST(&mreq.ipv6mr_multiaddr)) {
   2528    1.2    itojun 			error = EINVAL;
   2529    1.2    itojun 			break;
   2530    1.2    itojun 		}
   2531    1.2    itojun 
   2532    1.2    itojun 		/*
   2533    1.2    itojun 		 * If no interface was explicitly specified, choose an
   2534    1.2    itojun 		 * appropriate one according to the given multicast address.
   2535    1.2    itojun 		 */
   2536  1.132    plunky 		if (mreq.ipv6mr_interface == 0) {
   2537  1.124    dyoung 			struct rtentry *rt;
   2538  1.118    dyoung 			union {
   2539  1.118    dyoung 				struct sockaddr		dst;
   2540  1.118    dyoung 				struct sockaddr_in6	dst6;
   2541  1.118    dyoung 			} u;
   2542   1.94    rpaulo 
   2543   1.94    rpaulo 			/*
   2544   1.94    rpaulo 			 * Look up the routing table for the
   2545   1.94    rpaulo 			 * address, and choose the outgoing interface.
   2546   1.94    rpaulo 			 *   XXX: is it a good approach?
   2547   1.94    rpaulo 			 */
   2548  1.113    dyoung 			memset(&ro, 0, sizeof(ro));
   2549  1.132    plunky 			sockaddr_in6_init(&u.dst6, &mreq.ipv6mr_multiaddr, 0,
   2550  1.118    dyoung 			    0, 0);
   2551  1.118    dyoung 			rtcache_setdst(&ro, &u.dst);
   2552  1.125    dyoung 			ifp = (rt = rtcache_init(&ro)) != NULL ? rt->rt_ifp
   2553  1.124    dyoung 			                                        : NULL;
   2554  1.118    dyoung 			rtcache_free(&ro);
   2555   1.94    rpaulo 		} else {
   2556   1.94    rpaulo 			/*
   2557   1.94    rpaulo 			 * If the interface is specified, validate it.
   2558   1.94    rpaulo 			 */
   2559  1.132    plunky 			if (if_indexlim <= mreq.ipv6mr_interface ||
   2560  1.132    plunky 			    !ifindex2ifnet[mreq.ipv6mr_interface]) {
   2561   1.87  drochner 				error = ENXIO;	/* XXX EINVAL? */
   2562   1.87  drochner 				break;
   2563   1.87  drochner 			}
   2564  1.132    plunky 			ifp = ifindex2ifnet[mreq.ipv6mr_interface];
   2565   1.87  drochner 		}
   2566    1.2    itojun 
   2567    1.2    itojun 		/*
   2568    1.2    itojun 		 * See if we found an interface, and confirm that it
   2569    1.2    itojun 		 * supports multicast
   2570    1.2    itojun 		 */
   2571    1.2    itojun 		if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) {
   2572    1.2    itojun 			error = EADDRNOTAVAIL;
   2573    1.2    itojun 			break;
   2574    1.2    itojun 		}
   2575   1.94    rpaulo 
   2576  1.132    plunky 		if (in6_setscope(&mreq.ipv6mr_multiaddr, ifp, NULL)) {
   2577   1.94    rpaulo 			error = EADDRNOTAVAIL; /* XXX: should not happen */
   2578   1.94    rpaulo 			break;
   2579    1.2    itojun 		}
   2580   1.94    rpaulo 
   2581    1.2    itojun 		/*
   2582    1.2    itojun 		 * See if the membership already exists.
   2583    1.2    itojun 		 */
   2584    1.2    itojun 		for (imm = im6o->im6o_memberships.lh_first;
   2585    1.2    itojun 		     imm != NULL; imm = imm->i6mm_chain.le_next)
   2586    1.2    itojun 			if (imm->i6mm_maddr->in6m_ifp == ifp &&
   2587    1.2    itojun 			    IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr,
   2588  1.132    plunky 			    &mreq.ipv6mr_multiaddr))
   2589    1.2    itojun 				break;
   2590    1.2    itojun 		if (imm != NULL) {
   2591    1.2    itojun 			error = EADDRINUSE;
   2592    1.2    itojun 			break;
   2593    1.2    itojun 		}
   2594    1.2    itojun 		/*
   2595    1.2    itojun 		 * Everything looks good; add a new record to the multicast
   2596    1.2    itojun 		 * address list for the given interface.
   2597    1.2    itojun 		 */
   2598  1.132    plunky 		imm = in6_joingroup(ifp, &mreq.ipv6mr_multiaddr, &error, 0);
   2599   1.95    rpaulo 		if (imm == NULL)
   2600    1.2    itojun 			break;
   2601    1.2    itojun 		LIST_INSERT_HEAD(&im6o->im6o_memberships, imm, i6mm_chain);
   2602    1.2    itojun 		break;
   2603    1.2    itojun 
   2604    1.2    itojun 	case IPV6_LEAVE_GROUP:
   2605    1.2    itojun 		/*
   2606    1.2    itojun 		 * Drop a multicast group membership.
   2607    1.2    itojun 		 * Group must be a valid IP6 multicast address.
   2608    1.2    itojun 		 */
   2609  1.132    plunky 		error = sockopt_get(sopt, &mreq, sizeof(mreq));
   2610  1.132    plunky 		if (error != 0)
   2611    1.2    itojun 			break;
   2612   1.94    rpaulo 
   2613    1.2    itojun 		/*
   2614    1.2    itojun 		 * If an interface address was specified, get a pointer
   2615    1.2    itojun 		 * to its ifnet structure.
   2616    1.2    itojun 		 */
   2617  1.132    plunky 		if (mreq.ipv6mr_interface != 0) {
   2618  1.132    plunky 			if (if_indexlim <= mreq.ipv6mr_interface ||
   2619  1.132    plunky 			    !ifindex2ifnet[mreq.ipv6mr_interface]) {
   2620   1.87  drochner 				error = ENXIO;	/* XXX EINVAL? */
   2621   1.87  drochner 				break;
   2622   1.87  drochner 			}
   2623  1.132    plunky 			ifp = ifindex2ifnet[mreq.ipv6mr_interface];
   2624   1.87  drochner 		} else
   2625   1.87  drochner 			ifp = NULL;
   2626   1.94    rpaulo 
   2627   1.94    rpaulo 		/* Fill in the scope zone ID */
   2628   1.94    rpaulo 		if (ifp) {
   2629  1.132    plunky 			if (in6_setscope(&mreq.ipv6mr_multiaddr, ifp, NULL)) {
   2630   1.94    rpaulo 				/* XXX: should not happen */
   2631   1.94    rpaulo 				error = EADDRNOTAVAIL;
   2632   1.94    rpaulo 				break;
   2633   1.94    rpaulo 			}
   2634  1.132    plunky 		} else if (mreq.ipv6mr_interface != 0) {
   2635   1.94    rpaulo 			/*
   2636   1.94    rpaulo 			 * XXX: This case would happens when the (positive)
   2637   1.94    rpaulo 			 * index is in the valid range, but the corresponding
   2638   1.94    rpaulo 			 * interface has been detached dynamically.  The above
   2639   1.94    rpaulo 			 * check probably avoids such case to happen here, but
   2640   1.94    rpaulo 			 * we check it explicitly for safety.
   2641   1.94    rpaulo 			 */
   2642   1.94    rpaulo 			error = EADDRNOTAVAIL;
   2643   1.94    rpaulo 			break;
   2644   1.94    rpaulo 		} else {	/* ipv6mr_interface == 0 */
   2645   1.94    rpaulo 			struct sockaddr_in6 sa6_mc;
   2646   1.94    rpaulo 
   2647   1.94    rpaulo 			/*
   2648   1.94    rpaulo 			 * The API spec says as follows:
   2649   1.94    rpaulo 			 *  If the interface index is specified as 0, the
   2650   1.94    rpaulo 			 *  system may choose a multicast group membership to
   2651   1.94    rpaulo 			 *  drop by matching the multicast address only.
   2652   1.94    rpaulo 			 * On the other hand, we cannot disambiguate the scope
   2653   1.94    rpaulo 			 * zone unless an interface is provided.  Thus, we
   2654   1.94    rpaulo 			 * check if there's ambiguity with the default scope
   2655   1.94    rpaulo 			 * zone as the last resort.
   2656   1.94    rpaulo 			 */
   2657  1.132    plunky 			sockaddr_in6_init(&sa6_mc, &mreq.ipv6mr_multiaddr,
   2658  1.123    dyoung 			    0, 0, 0);
   2659   1.94    rpaulo 			error = sa6_embedscope(&sa6_mc, ip6_use_defzone);
   2660   1.94    rpaulo 			if (error != 0)
   2661   1.94    rpaulo 				break;
   2662  1.132    plunky 			mreq.ipv6mr_multiaddr = sa6_mc.sin6_addr;
   2663    1.2    itojun 		}
   2664   1.94    rpaulo 
   2665    1.2    itojun 		/*
   2666    1.2    itojun 		 * Find the membership in the membership list.
   2667    1.2    itojun 		 */
   2668    1.2    itojun 		for (imm = im6o->im6o_memberships.lh_first;
   2669    1.2    itojun 		     imm != NULL; imm = imm->i6mm_chain.le_next) {
   2670   1.49    itojun 			if ((ifp == NULL || imm->i6mm_maddr->in6m_ifp == ifp) &&
   2671    1.2    itojun 			    IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr,
   2672  1.132    plunky 			    &mreq.ipv6mr_multiaddr))
   2673    1.2    itojun 				break;
   2674    1.2    itojun 		}
   2675    1.2    itojun 		if (imm == NULL) {
   2676    1.2    itojun 			/* Unable to resolve interface */
   2677    1.2    itojun 			error = EADDRNOTAVAIL;
   2678    1.2    itojun 			break;
   2679    1.2    itojun 		}
   2680    1.2    itojun 		/*
   2681    1.2    itojun 		 * Give up the multicast address record to which the
   2682    1.2    itojun 		 * membership points.
   2683    1.2    itojun 		 */
   2684    1.2    itojun 		LIST_REMOVE(imm, i6mm_chain);
   2685   1.43    itojun 		in6_leavegroup(imm);
   2686    1.2    itojun 		break;
   2687    1.2    itojun 
   2688    1.2    itojun 	default:
   2689    1.2    itojun 		error = EOPNOTSUPP;
   2690    1.2    itojun 		break;
   2691    1.2    itojun 	}
   2692    1.2    itojun 
   2693    1.2    itojun 	/*
   2694    1.2    itojun 	 * If all options have default values, no need to keep the mbuf.
   2695    1.2    itojun 	 */
   2696    1.2    itojun 	if (im6o->im6o_multicast_ifp == NULL &&
   2697    1.2    itojun 	    im6o->im6o_multicast_hlim == ip6_defmcasthlim &&
   2698    1.2    itojun 	    im6o->im6o_multicast_loop == IPV6_DEFAULT_MULTICAST_LOOP &&
   2699    1.2    itojun 	    im6o->im6o_memberships.lh_first == NULL) {
   2700    1.2    itojun 		free(*im6op, M_IPMOPTS);
   2701    1.2    itojun 		*im6op = NULL;
   2702    1.2    itojun 	}
   2703    1.2    itojun 
   2704   1.57    itojun 	return (error);
   2705    1.2    itojun }
   2706    1.2    itojun 
   2707    1.2    itojun /*
   2708    1.2    itojun  * Return the IP6 multicast options in response to user getsockopt().
   2709    1.2    itojun  */
   2710    1.2    itojun static int
   2711  1.132    plunky ip6_getmoptions(struct sockopt *sopt, struct ip6_moptions *im6o)
   2712    1.2    itojun {
   2713  1.132    plunky 	u_int optval;
   2714  1.132    plunky 	int error;
   2715    1.2    itojun 
   2716  1.132    plunky 	switch (sopt->sopt_name) {
   2717    1.2    itojun 	case IPV6_MULTICAST_IF:
   2718    1.2    itojun 		if (im6o == NULL || im6o->im6o_multicast_ifp == NULL)
   2719  1.132    plunky 			optval = 0;
   2720    1.2    itojun 		else
   2721  1.132    plunky 			optval = im6o->im6o_multicast_ifp->if_index;
   2722  1.132    plunky 
   2723  1.132    plunky 		error = sockopt_set(sopt, &optval, sizeof(optval));
   2724  1.132    plunky 		break;
   2725    1.2    itojun 
   2726    1.2    itojun 	case IPV6_MULTICAST_HOPS:
   2727    1.2    itojun 		if (im6o == NULL)
   2728  1.132    plunky 			optval = ip6_defmcasthlim;
   2729    1.2    itojun 		else
   2730  1.132    plunky 			optval = im6o->im6o_multicast_hlim;
   2731  1.132    plunky 
   2732  1.132    plunky 		error = sockopt_set(sopt, &optval, sizeof(optval));
   2733  1.132    plunky 		break;
   2734    1.2    itojun 
   2735    1.2    itojun 	case IPV6_MULTICAST_LOOP:
   2736    1.2    itojun 		if (im6o == NULL)
   2737  1.132    plunky 			optval = ip6_defmcasthlim;
   2738    1.2    itojun 		else
   2739  1.132    plunky 			optval = im6o->im6o_multicast_loop;
   2740  1.132    plunky 
   2741  1.132    plunky 		error = sockopt_set(sopt, &optval, sizeof(optval));
   2742  1.132    plunky 		break;
   2743    1.2    itojun 
   2744    1.2    itojun 	default:
   2745  1.132    plunky 		error = EOPNOTSUPP;
   2746    1.2    itojun 	}
   2747  1.132    plunky 
   2748  1.132    plunky 	return (error);
   2749    1.2    itojun }
   2750    1.2    itojun 
   2751    1.2    itojun /*
   2752    1.2    itojun  * Discard the IP6 multicast options.
   2753    1.2    itojun  */
   2754    1.2    itojun void
   2755  1.119  christos ip6_freemoptions(struct ip6_moptions *im6o)
   2756    1.2    itojun {
   2757    1.2    itojun 	struct in6_multi_mship *imm;
   2758    1.2    itojun 
   2759    1.2    itojun 	if (im6o == NULL)
   2760    1.2    itojun 		return;
   2761    1.2    itojun 
   2762    1.2    itojun 	while ((imm = im6o->im6o_memberships.lh_first) != NULL) {
   2763    1.2    itojun 		LIST_REMOVE(imm, i6mm_chain);
   2764   1.43    itojun 		in6_leavegroup(imm);
   2765    1.2    itojun 	}
   2766    1.2    itojun 	free(im6o, M_IPMOPTS);
   2767    1.2    itojun }
   2768    1.2    itojun 
   2769    1.2    itojun /*
   2770    1.2    itojun  * Set IPv6 outgoing packet options based on advanced API.
   2771    1.2    itojun  */
   2772    1.2    itojun int
   2773  1.119  christos ip6_setpktopts(struct mbuf *control, struct ip6_pktopts *opt,
   2774  1.138      elad 	struct ip6_pktopts *stickyopt, kauth_cred_t cred, int uproto)
   2775    1.2    itojun {
   2776   1.31    itojun 	struct cmsghdr *cm = 0;
   2777    1.2    itojun 
   2778   1.97    rpaulo 	if (control == NULL || opt == NULL)
   2779   1.57    itojun 		return (EINVAL);
   2780    1.2    itojun 
   2781   1.97    rpaulo 	ip6_initpktopts(opt);
   2782   1.97    rpaulo 	if (stickyopt) {
   2783   1.97    rpaulo 		int error;
   2784   1.97    rpaulo 
   2785   1.97    rpaulo 		/*
   2786   1.97    rpaulo 		 * If stickyopt is provided, make a local copy of the options
   2787   1.97    rpaulo 		 * for this particular packet, then override them by ancillary
   2788   1.97    rpaulo 		 * objects.
   2789   1.97    rpaulo 		 * XXX: copypktopts() does not copy the cached route to a next
   2790   1.97    rpaulo 		 * hop (if any).  This is not very good in terms of efficiency,
   2791   1.97    rpaulo 		 * but we can allow this since this option should be rarely
   2792   1.97    rpaulo 		 * used.
   2793   1.97    rpaulo 		 */
   2794   1.97    rpaulo 		if ((error = copypktopts(opt, stickyopt, M_NOWAIT)) != 0)
   2795   1.97    rpaulo 			return (error);
   2796   1.97    rpaulo 	}
   2797    1.2    itojun 
   2798    1.2    itojun 	/*
   2799    1.2    itojun 	 * XXX: Currently, we assume all the optional information is stored
   2800    1.2    itojun 	 * in a single mbuf.
   2801    1.2    itojun 	 */
   2802    1.2    itojun 	if (control->m_next)
   2803   1.57    itojun 		return (EINVAL);
   2804    1.2    itojun 
   2805  1.137  drochner 	/* XXX if cm->cmsg_len is not aligned, control->m_len can become <0 */
   2806  1.137  drochner 	for (; control->m_len > 0; control->m_data += CMSG_ALIGN(cm->cmsg_len),
   2807   1.49    itojun 	    control->m_len -= CMSG_ALIGN(cm->cmsg_len)) {
   2808   1.97    rpaulo 		int error;
   2809   1.97    rpaulo 
   2810   1.97    rpaulo 		if (control->m_len < CMSG_LEN(0))
   2811   1.97    rpaulo 			return (EINVAL);
   2812   1.97    rpaulo 
   2813    1.2    itojun 		cm = mtod(control, struct cmsghdr *);
   2814    1.2    itojun 		if (cm->cmsg_len == 0 || cm->cmsg_len > control->m_len)
   2815   1.57    itojun 			return (EINVAL);
   2816    1.2    itojun 		if (cm->cmsg_level != IPPROTO_IPV6)
   2817    1.2    itojun 			continue;
   2818    1.2    itojun 
   2819   1.97    rpaulo 		error = ip6_setpktopt(cm->cmsg_type, CMSG_DATA(cm),
   2820  1.138      elad 		    cm->cmsg_len - CMSG_LEN(0), opt, cred, 0, 1, uproto);
   2821   1.97    rpaulo 		if (error)
   2822   1.97    rpaulo 			return (error);
   2823   1.97    rpaulo 	}
   2824   1.97    rpaulo 
   2825   1.97    rpaulo 	return (0);
   2826   1.97    rpaulo }
   2827   1.97    rpaulo 
   2828   1.97    rpaulo /*
   2829   1.97    rpaulo  * Set a particular packet option, as a sticky option or an ancillary data
   2830   1.97    rpaulo  * item.  "len" can be 0 only when it's a sticky option.
   2831   1.97    rpaulo  * We have 4 cases of combination of "sticky" and "cmsg":
   2832   1.97    rpaulo  * "sticky=0, cmsg=0": impossible
   2833   1.97    rpaulo  * "sticky=0, cmsg=1": RFC2292 or RFC3542 ancillary data
   2834   1.97    rpaulo  * "sticky=1, cmsg=0": RFC3542 socket option
   2835   1.97    rpaulo  * "sticky=1, cmsg=1": RFC2292 socket option
   2836   1.97    rpaulo  */
   2837   1.97    rpaulo static int
   2838   1.97    rpaulo ip6_setpktopt(int optname, u_char *buf, int len, struct ip6_pktopts *opt,
   2839  1.138      elad     kauth_cred_t cred, int sticky, int cmsg, int uproto)
   2840   1.97    rpaulo {
   2841   1.97    rpaulo 	int minmtupolicy;
   2842  1.139      elad 	int error;
   2843   1.97    rpaulo 
   2844   1.97    rpaulo 	if (!sticky && !cmsg) {
   2845   1.97    rpaulo #ifdef DIAGNOSTIC
   2846   1.97    rpaulo 		printf("ip6_setpktopt: impossible case\n");
   2847   1.97    rpaulo #endif
   2848   1.97    rpaulo 		return (EINVAL);
   2849   1.97    rpaulo 	}
   2850   1.97    rpaulo 
   2851   1.97    rpaulo 	/*
   2852   1.97    rpaulo 	 * IPV6_2292xxx is for backward compatibility to RFC2292, and should
   2853   1.97    rpaulo 	 * not be specified in the context of RFC3542.  Conversely,
   2854   1.97    rpaulo 	 * RFC3542 types should not be specified in the context of RFC2292.
   2855   1.97    rpaulo 	 */
   2856   1.97    rpaulo 	if (!cmsg) {
   2857   1.97    rpaulo 		switch (optname) {
   2858   1.97    rpaulo 		case IPV6_2292PKTINFO:
   2859   1.97    rpaulo 		case IPV6_2292HOPLIMIT:
   2860   1.97    rpaulo 		case IPV6_2292NEXTHOP:
   2861   1.97    rpaulo 		case IPV6_2292HOPOPTS:
   2862   1.97    rpaulo 		case IPV6_2292DSTOPTS:
   2863   1.97    rpaulo 		case IPV6_2292RTHDR:
   2864   1.97    rpaulo 		case IPV6_2292PKTOPTIONS:
   2865   1.97    rpaulo 			return (ENOPROTOOPT);
   2866   1.97    rpaulo 		}
   2867   1.97    rpaulo 	}
   2868   1.97    rpaulo 	if (sticky && cmsg) {
   2869   1.97    rpaulo 		switch (optname) {
   2870    1.2    itojun 		case IPV6_PKTINFO:
   2871   1.97    rpaulo 		case IPV6_HOPLIMIT:
   2872   1.97    rpaulo 		case IPV6_NEXTHOP:
   2873   1.97    rpaulo 		case IPV6_HOPOPTS:
   2874   1.97    rpaulo 		case IPV6_DSTOPTS:
   2875   1.97    rpaulo 		case IPV6_RTHDRDSTOPTS:
   2876   1.97    rpaulo 		case IPV6_RTHDR:
   2877   1.97    rpaulo 		case IPV6_USE_MIN_MTU:
   2878   1.97    rpaulo 		case IPV6_DONTFRAG:
   2879   1.97    rpaulo 		case IPV6_OTCLASS:
   2880   1.97    rpaulo 		case IPV6_TCLASS:
   2881   1.97    rpaulo 			return (ENOPROTOOPT);
   2882   1.97    rpaulo 		}
   2883   1.97    rpaulo 	}
   2884   1.97    rpaulo 
   2885   1.97    rpaulo 	switch (optname) {
   2886   1.97    rpaulo #ifdef RFC2292
   2887   1.97    rpaulo 	case IPV6_2292PKTINFO:
   2888   1.97    rpaulo #endif
   2889   1.97    rpaulo 	case IPV6_PKTINFO:
   2890   1.97    rpaulo 	{
   2891   1.97    rpaulo 		struct ifnet *ifp = NULL;
   2892   1.97    rpaulo 		struct in6_pktinfo *pktinfo;
   2893   1.97    rpaulo 
   2894   1.97    rpaulo 		if (len != sizeof(struct in6_pktinfo))
   2895   1.97    rpaulo 			return (EINVAL);
   2896   1.97    rpaulo 
   2897   1.97    rpaulo 		pktinfo = (struct in6_pktinfo *)buf;
   2898   1.97    rpaulo 
   2899   1.97    rpaulo 		/*
   2900   1.97    rpaulo 		 * An application can clear any sticky IPV6_PKTINFO option by
   2901   1.97    rpaulo 		 * doing a "regular" setsockopt with ipi6_addr being
   2902   1.97    rpaulo 		 * in6addr_any and ipi6_ifindex being zero.
   2903   1.97    rpaulo 		 * [RFC 3542, Section 6]
   2904   1.97    rpaulo 		 */
   2905   1.97    rpaulo 		if (optname == IPV6_PKTINFO && opt->ip6po_pktinfo &&
   2906   1.97    rpaulo 		    pktinfo->ipi6_ifindex == 0 &&
   2907   1.97    rpaulo 		    IN6_IS_ADDR_UNSPECIFIED(&pktinfo->ipi6_addr)) {
   2908   1.97    rpaulo 			ip6_clearpktopts(opt, optname);
   2909   1.97    rpaulo 			break;
   2910   1.97    rpaulo 		}
   2911   1.97    rpaulo 
   2912   1.97    rpaulo 		if (uproto == IPPROTO_TCP && optname == IPV6_PKTINFO &&
   2913   1.97    rpaulo 		    sticky && !IN6_IS_ADDR_UNSPECIFIED(&pktinfo->ipi6_addr)) {
   2914   1.97    rpaulo 			return (EINVAL);
   2915   1.97    rpaulo 		}
   2916   1.97    rpaulo 
   2917   1.97    rpaulo 		/* validate the interface index if specified. */
   2918  1.102  christos 		if (pktinfo->ipi6_ifindex >= if_indexlim) {
   2919   1.97    rpaulo 			 return (ENXIO);
   2920   1.97    rpaulo 		}
   2921   1.97    rpaulo 		if (pktinfo->ipi6_ifindex) {
   2922   1.97    rpaulo 			ifp = ifindex2ifnet[pktinfo->ipi6_ifindex];
   2923   1.97    rpaulo 			if (ifp == NULL)
   2924   1.57    itojun 				return (ENXIO);
   2925   1.97    rpaulo 		}
   2926   1.97    rpaulo 
   2927   1.97    rpaulo 		/*
   2928   1.97    rpaulo 		 * We store the address anyway, and let in6_selectsrc()
   2929   1.97    rpaulo 		 * validate the specified address.  This is because ipi6_addr
   2930   1.97    rpaulo 		 * may not have enough information about its scope zone, and
   2931   1.97    rpaulo 		 * we may need additional information (such as outgoing
   2932   1.97    rpaulo 		 * interface or the scope zone of a destination address) to
   2933   1.97    rpaulo 		 * disambiguate the scope.
   2934   1.97    rpaulo 		 * XXX: the delay of the validation may confuse the
   2935   1.97    rpaulo 		 * application when it is used as a sticky option.
   2936   1.97    rpaulo 		 */
   2937   1.97    rpaulo 		if (opt->ip6po_pktinfo == NULL) {
   2938   1.97    rpaulo 			opt->ip6po_pktinfo = malloc(sizeof(*pktinfo),
   2939   1.97    rpaulo 			    M_IP6OPT, M_NOWAIT);
   2940   1.97    rpaulo 			if (opt->ip6po_pktinfo == NULL)
   2941   1.97    rpaulo 				return (ENOBUFS);
   2942   1.97    rpaulo 		}
   2943   1.97    rpaulo 		memcpy(opt->ip6po_pktinfo, pktinfo, sizeof(*pktinfo));
   2944   1.97    rpaulo 		break;
   2945   1.97    rpaulo 	}
   2946   1.97    rpaulo 
   2947   1.97    rpaulo #ifdef RFC2292
   2948   1.97    rpaulo 	case IPV6_2292HOPLIMIT:
   2949   1.97    rpaulo #endif
   2950   1.97    rpaulo 	case IPV6_HOPLIMIT:
   2951   1.97    rpaulo 	{
   2952   1.97    rpaulo 		int *hlimp;
   2953   1.97    rpaulo 
   2954   1.97    rpaulo 		/*
   2955   1.97    rpaulo 		 * RFC 3542 deprecated the usage of sticky IPV6_HOPLIMIT
   2956   1.97    rpaulo 		 * to simplify the ordering among hoplimit options.
   2957   1.97    rpaulo 		 */
   2958   1.97    rpaulo 		if (optname == IPV6_HOPLIMIT && sticky)
   2959   1.97    rpaulo 			return (ENOPROTOOPT);
   2960   1.97    rpaulo 
   2961   1.97    rpaulo 		if (len != sizeof(int))
   2962   1.97    rpaulo 			return (EINVAL);
   2963   1.97    rpaulo 		hlimp = (int *)buf;
   2964   1.97    rpaulo 		if (*hlimp < -1 || *hlimp > 255)
   2965   1.97    rpaulo 			return (EINVAL);
   2966   1.97    rpaulo 
   2967   1.97    rpaulo 		opt->ip6po_hlim = *hlimp;
   2968   1.97    rpaulo 		break;
   2969   1.97    rpaulo 	}
   2970   1.97    rpaulo 
   2971   1.97    rpaulo 	case IPV6_OTCLASS:
   2972   1.97    rpaulo 		if (len != sizeof(u_int8_t))
   2973   1.97    rpaulo 			return (EINVAL);
   2974   1.97    rpaulo 
   2975   1.97    rpaulo 		opt->ip6po_tclass = *(u_int8_t *)buf;
   2976   1.97    rpaulo 		break;
   2977   1.97    rpaulo 
   2978   1.97    rpaulo 	case IPV6_TCLASS:
   2979   1.97    rpaulo 	{
   2980   1.97    rpaulo 		int tclass;
   2981   1.97    rpaulo 
   2982   1.97    rpaulo 		if (len != sizeof(int))
   2983   1.97    rpaulo 			return (EINVAL);
   2984   1.97    rpaulo 		tclass = *(int *)buf;
   2985   1.97    rpaulo 		if (tclass < -1 || tclass > 255)
   2986   1.97    rpaulo 			return (EINVAL);
   2987    1.2    itojun 
   2988   1.97    rpaulo 		opt->ip6po_tclass = tclass;
   2989   1.97    rpaulo 		break;
   2990   1.97    rpaulo 	}
   2991   1.94    rpaulo 
   2992   1.97    rpaulo #ifdef RFC2292
   2993   1.97    rpaulo 	case IPV6_2292NEXTHOP:
   2994   1.97    rpaulo #endif
   2995   1.97    rpaulo 	case IPV6_NEXTHOP:
   2996  1.139      elad 		error = kauth_authorize_generic(cred, KAUTH_GENERIC_ISSUSER,
   2997  1.139      elad 		    NULL);
   2998  1.139      elad 		if (error)
   2999  1.139      elad 			return (error);
   3000   1.35    itojun 
   3001   1.97    rpaulo 		if (len == 0) {	/* just remove the option */
   3002   1.97    rpaulo 			ip6_clearpktopts(opt, IPV6_NEXTHOP);
   3003    1.2    itojun 			break;
   3004   1.97    rpaulo 		}
   3005   1.97    rpaulo 
   3006   1.97    rpaulo 		/* check if cmsg_len is large enough for sa_len */
   3007   1.97    rpaulo 		if (len < sizeof(struct sockaddr) || len < *buf)
   3008   1.97    rpaulo 			return (EINVAL);
   3009   1.97    rpaulo 
   3010   1.97    rpaulo 		switch (((struct sockaddr *)buf)->sa_family) {
   3011   1.97    rpaulo 		case AF_INET6:
   3012   1.97    rpaulo 		{
   3013   1.97    rpaulo 			struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *)buf;
   3014    1.2    itojun 
   3015   1.97    rpaulo 			if (sa6->sin6_len != sizeof(struct sockaddr_in6))
   3016   1.57    itojun 				return (EINVAL);
   3017    1.2    itojun 
   3018   1.97    rpaulo 			if (IN6_IS_ADDR_UNSPECIFIED(&sa6->sin6_addr) ||
   3019   1.97    rpaulo 			    IN6_IS_ADDR_MULTICAST(&sa6->sin6_addr)) {
   3020   1.97    rpaulo 				return (EINVAL);
   3021   1.97    rpaulo 			}
   3022   1.97    rpaulo 			if ((error = sa6_embedscope(sa6, ip6_use_defzone))
   3023   1.97    rpaulo 			    != 0) {
   3024   1.97    rpaulo 				return (error);
   3025   1.67    itojun 			}
   3026    1.2    itojun 			break;
   3027   1.97    rpaulo 		}
   3028   1.97    rpaulo 		case AF_LINK:	/* eventually be supported? */
   3029   1.97    rpaulo 		default:
   3030   1.97    rpaulo 			return (EAFNOSUPPORT);
   3031   1.97    rpaulo 		}
   3032    1.2    itojun 
   3033   1.97    rpaulo 		/* turn off the previous option, then set the new option. */
   3034   1.97    rpaulo 		ip6_clearpktopts(opt, IPV6_NEXTHOP);
   3035   1.97    rpaulo 		opt->ip6po_nexthop = malloc(*buf, M_IP6OPT, M_NOWAIT);
   3036   1.97    rpaulo 		if (opt->ip6po_nexthop == NULL)
   3037   1.97    rpaulo 			return (ENOBUFS);
   3038   1.97    rpaulo 		memcpy(opt->ip6po_nexthop, buf, *buf);
   3039   1.97    rpaulo 		break;
   3040   1.97    rpaulo 
   3041   1.97    rpaulo #ifdef RFC2292
   3042   1.97    rpaulo 	case IPV6_2292HOPOPTS:
   3043   1.97    rpaulo #endif
   3044   1.97    rpaulo 	case IPV6_HOPOPTS:
   3045   1.97    rpaulo 	{
   3046   1.97    rpaulo 		struct ip6_hbh *hbh;
   3047   1.97    rpaulo 		int hbhlen;
   3048   1.97    rpaulo 
   3049   1.97    rpaulo 		/*
   3050   1.97    rpaulo 		 * XXX: We don't allow a non-privileged user to set ANY HbH
   3051   1.97    rpaulo 		 * options, since per-option restriction has too much
   3052   1.97    rpaulo 		 * overhead.
   3053   1.97    rpaulo 		 */
   3054  1.139      elad 		error = kauth_authorize_generic(cred, KAUTH_GENERIC_ISSUSER,
   3055  1.139      elad 		    NULL);
   3056  1.139      elad 		if (error)
   3057  1.139      elad 			return (error);
   3058   1.97    rpaulo 
   3059   1.97    rpaulo 		if (len == 0) {
   3060   1.97    rpaulo 			ip6_clearpktopts(opt, IPV6_HOPOPTS);
   3061   1.97    rpaulo 			break;	/* just remove the option */
   3062   1.97    rpaulo 		}
   3063   1.31    itojun 
   3064   1.97    rpaulo 		/* message length validation */
   3065   1.97    rpaulo 		if (len < sizeof(struct ip6_hbh))
   3066   1.97    rpaulo 			return (EINVAL);
   3067   1.97    rpaulo 		hbh = (struct ip6_hbh *)buf;
   3068   1.97    rpaulo 		hbhlen = (hbh->ip6h_len + 1) << 3;
   3069   1.97    rpaulo 		if (len != hbhlen)
   3070   1.97    rpaulo 			return (EINVAL);
   3071    1.2    itojun 
   3072   1.97    rpaulo 		/* turn off the previous option, then set the new option. */
   3073   1.97    rpaulo 		ip6_clearpktopts(opt, IPV6_HOPOPTS);
   3074   1.97    rpaulo 		opt->ip6po_hbh = malloc(hbhlen, M_IP6OPT, M_NOWAIT);
   3075   1.97    rpaulo 		if (opt->ip6po_hbh == NULL)
   3076   1.97    rpaulo 			return (ENOBUFS);
   3077   1.97    rpaulo 		memcpy(opt->ip6po_hbh, hbh, hbhlen);
   3078    1.2    itojun 
   3079   1.97    rpaulo 		break;
   3080   1.97    rpaulo 	}
   3081    1.2    itojun 
   3082   1.97    rpaulo #ifdef RFC2292
   3083   1.97    rpaulo 	case IPV6_2292DSTOPTS:
   3084   1.97    rpaulo #endif
   3085   1.97    rpaulo 	case IPV6_DSTOPTS:
   3086   1.97    rpaulo 	case IPV6_RTHDRDSTOPTS:
   3087   1.97    rpaulo 	{
   3088   1.97    rpaulo 		struct ip6_dest *dest, **newdest = NULL;
   3089   1.97    rpaulo 		int destlen;
   3090   1.67    itojun 
   3091  1.139      elad 		/* XXX: see the comment for IPV6_HOPOPTS */
   3092  1.139      elad 		error = kauth_authorize_generic(cred, KAUTH_GENERIC_ISSUSER,
   3093  1.139      elad 		    NULL);
   3094  1.139      elad 		if (error)
   3095  1.139      elad 			return (error);
   3096    1.2    itojun 
   3097   1.97    rpaulo 		if (len == 0) {
   3098   1.97    rpaulo 			ip6_clearpktopts(opt, optname);
   3099   1.97    rpaulo 			break;	/* just remove the option */
   3100   1.97    rpaulo 		}
   3101    1.2    itojun 
   3102   1.97    rpaulo 		/* message length validation */
   3103   1.97    rpaulo 		if (len < sizeof(struct ip6_dest))
   3104   1.97    rpaulo 			return (EINVAL);
   3105   1.97    rpaulo 		dest = (struct ip6_dest *)buf;
   3106   1.97    rpaulo 		destlen = (dest->ip6d_len + 1) << 3;
   3107   1.97    rpaulo 		if (len != destlen)
   3108   1.97    rpaulo 			return (EINVAL);
   3109   1.97    rpaulo 		/*
   3110   1.97    rpaulo 		 * Determine the position that the destination options header
   3111   1.97    rpaulo 		 * should be inserted; before or after the routing header.
   3112   1.97    rpaulo 		 */
   3113   1.97    rpaulo 		switch (optname) {
   3114   1.97    rpaulo 		case IPV6_2292DSTOPTS:
   3115    1.2    itojun 			/*
   3116   1.97    rpaulo 			 * The old advanced API is ambiguous on this point.
   3117   1.97    rpaulo 			 * Our approach is to determine the position based
   3118   1.97    rpaulo 			 * according to the existence of a routing header.
   3119   1.97    rpaulo 			 * Note, however, that this depends on the order of the
   3120   1.97    rpaulo 			 * extension headers in the ancillary data; the 1st
   3121   1.97    rpaulo 			 * part of the destination options header must appear
   3122   1.97    rpaulo 			 * before the routing header in the ancillary data,
   3123   1.97    rpaulo 			 * too.
   3124   1.97    rpaulo 			 * RFC3542 solved the ambiguity by introducing
   3125   1.97    rpaulo 			 * separate ancillary data or option types.
   3126    1.2    itojun 			 */
   3127   1.97    rpaulo 			if (opt->ip6po_rthdr == NULL)
   3128   1.97    rpaulo 				newdest = &opt->ip6po_dest1;
   3129   1.97    rpaulo 			else
   3130   1.97    rpaulo 				newdest = &opt->ip6po_dest2;
   3131   1.97    rpaulo 			break;
   3132   1.97    rpaulo 		case IPV6_RTHDRDSTOPTS:
   3133   1.97    rpaulo 			newdest = &opt->ip6po_dest1;
   3134   1.97    rpaulo 			break;
   3135   1.97    rpaulo 		case IPV6_DSTOPTS:
   3136   1.97    rpaulo 			newdest = &opt->ip6po_dest2;
   3137   1.97    rpaulo 			break;
   3138   1.97    rpaulo 		}
   3139   1.97    rpaulo 
   3140   1.97    rpaulo 		/* turn off the previous option, then set the new option. */
   3141   1.97    rpaulo 		ip6_clearpktopts(opt, optname);
   3142   1.97    rpaulo 		*newdest = malloc(destlen, M_IP6OPT, M_NOWAIT);
   3143   1.97    rpaulo 		if (*newdest == NULL)
   3144   1.97    rpaulo 			return (ENOBUFS);
   3145   1.97    rpaulo 		memcpy(*newdest, dest, destlen);
   3146   1.67    itojun 
   3147   1.97    rpaulo 		break;
   3148   1.97    rpaulo 	}
   3149   1.97    rpaulo 
   3150   1.97    rpaulo #ifdef RFC2292
   3151   1.97    rpaulo 	case IPV6_2292RTHDR:
   3152   1.97    rpaulo #endif
   3153   1.97    rpaulo 	case IPV6_RTHDR:
   3154   1.97    rpaulo 	{
   3155   1.97    rpaulo 		struct ip6_rthdr *rth;
   3156   1.97    rpaulo 		int rthlen;
   3157   1.97    rpaulo 
   3158   1.97    rpaulo 		if (len == 0) {
   3159   1.97    rpaulo 			ip6_clearpktopts(opt, IPV6_RTHDR);
   3160   1.97    rpaulo 			break;	/* just remove the option */
   3161   1.97    rpaulo 		}
   3162    1.2    itojun 
   3163   1.97    rpaulo 		/* message length validation */
   3164   1.97    rpaulo 		if (len < sizeof(struct ip6_rthdr))
   3165   1.97    rpaulo 			return (EINVAL);
   3166   1.97    rpaulo 		rth = (struct ip6_rthdr *)buf;
   3167   1.97    rpaulo 		rthlen = (rth->ip6r_len + 1) << 3;
   3168   1.97    rpaulo 		if (len != rthlen)
   3169   1.97    rpaulo 			return (EINVAL);
   3170   1.97    rpaulo 		switch (rth->ip6r_type) {
   3171   1.97    rpaulo 		case IPV6_RTHDR_TYPE_0:
   3172   1.97    rpaulo 			if (rth->ip6r_len == 0)	/* must contain one addr */
   3173   1.97    rpaulo 				return (EINVAL);
   3174   1.97    rpaulo 			if (rth->ip6r_len % 2) /* length must be even */
   3175   1.97    rpaulo 				return (EINVAL);
   3176   1.97    rpaulo 			if (rth->ip6r_len / 2 != rth->ip6r_segleft)
   3177   1.57    itojun 				return (EINVAL);
   3178    1.2    itojun 			break;
   3179    1.2    itojun 		default:
   3180   1.97    rpaulo 			return (EINVAL);	/* not supported */
   3181    1.2    itojun 		}
   3182   1.97    rpaulo 		/* turn off the previous option */
   3183   1.97    rpaulo 		ip6_clearpktopts(opt, IPV6_RTHDR);
   3184   1.97    rpaulo 		opt->ip6po_rthdr = malloc(rthlen, M_IP6OPT, M_NOWAIT);
   3185   1.97    rpaulo 		if (opt->ip6po_rthdr == NULL)
   3186   1.97    rpaulo 			return (ENOBUFS);
   3187   1.97    rpaulo 		memcpy(opt->ip6po_rthdr, rth, rthlen);
   3188   1.97    rpaulo 		break;
   3189    1.2    itojun 	}
   3190    1.2    itojun 
   3191   1.97    rpaulo 	case IPV6_USE_MIN_MTU:
   3192   1.97    rpaulo 		if (len != sizeof(int))
   3193   1.97    rpaulo 			return (EINVAL);
   3194   1.97    rpaulo 		minmtupolicy = *(int *)buf;
   3195   1.97    rpaulo 		if (minmtupolicy != IP6PO_MINMTU_MCASTONLY &&
   3196   1.97    rpaulo 		    minmtupolicy != IP6PO_MINMTU_DISABLE &&
   3197   1.97    rpaulo 		    minmtupolicy != IP6PO_MINMTU_ALL) {
   3198   1.97    rpaulo 			return (EINVAL);
   3199   1.97    rpaulo 		}
   3200   1.97    rpaulo 		opt->ip6po_minmtu = minmtupolicy;
   3201   1.97    rpaulo 		break;
   3202   1.97    rpaulo 
   3203   1.97    rpaulo 	case IPV6_DONTFRAG:
   3204   1.97    rpaulo 		if (len != sizeof(int))
   3205   1.97    rpaulo 			return (EINVAL);
   3206   1.97    rpaulo 
   3207   1.97    rpaulo 		if (uproto == IPPROTO_TCP || *(int *)buf == 0) {
   3208   1.97    rpaulo 			/*
   3209   1.97    rpaulo 			 * we ignore this option for TCP sockets.
   3210   1.97    rpaulo 			 * (RFC3542 leaves this case unspecified.)
   3211   1.97    rpaulo 			 */
   3212   1.97    rpaulo 			opt->ip6po_flags &= ~IP6PO_DONTFRAG;
   3213   1.97    rpaulo 		} else
   3214   1.97    rpaulo 			opt->ip6po_flags |= IP6PO_DONTFRAG;
   3215   1.97    rpaulo 		break;
   3216   1.97    rpaulo 
   3217   1.97    rpaulo 	default:
   3218   1.97    rpaulo 		return (ENOPROTOOPT);
   3219   1.97    rpaulo 	} /* end of switch */
   3220   1.97    rpaulo 
   3221   1.57    itojun 	return (0);
   3222    1.2    itojun }
   3223    1.2    itojun 
   3224    1.2    itojun /*
   3225    1.2    itojun  * Routine called from ip6_output() to loop back a copy of an IP6 multicast
   3226    1.2    itojun  * packet to the input queue of a specified interface.  Note that this
   3227    1.2    itojun  * calls the output routine of the loopback "driver", but with an interface
   3228   1.86     peter  * pointer that might NOT be lo0ifp -- easier than replicating that code here.
   3229    1.2    itojun  */
   3230    1.2    itojun void
   3231  1.119  christos ip6_mloopback(struct ifnet *ifp, struct mbuf *m,
   3232  1.119  christos 	const struct sockaddr_in6 *dst)
   3233    1.2    itojun {
   3234   1.22    itojun 	struct mbuf *copym;
   3235   1.22    itojun 	struct ip6_hdr *ip6;
   3236    1.2    itojun 
   3237    1.2    itojun 	copym = m_copy(m, 0, M_COPYALL);
   3238   1.22    itojun 	if (copym == NULL)
   3239   1.22    itojun 		return;
   3240   1.22    itojun 
   3241   1.22    itojun 	/*
   3242   1.22    itojun 	 * Make sure to deep-copy IPv6 header portion in case the data
   3243   1.22    itojun 	 * is in an mbuf cluster, so that we can safely override the IPv6
   3244   1.22    itojun 	 * header portion later.
   3245   1.22    itojun 	 */
   3246   1.22    itojun 	if ((copym->m_flags & M_EXT) != 0 ||
   3247   1.22    itojun 	    copym->m_len < sizeof(struct ip6_hdr)) {
   3248   1.22    itojun 		copym = m_pullup(copym, sizeof(struct ip6_hdr));
   3249   1.22    itojun 		if (copym == NULL)
   3250   1.22    itojun 			return;
   3251   1.22    itojun 	}
   3252   1.22    itojun 
   3253   1.22    itojun #ifdef DIAGNOSTIC
   3254   1.22    itojun 	if (copym->m_len < sizeof(*ip6)) {
   3255   1.22    itojun 		m_freem(copym);
   3256   1.22    itojun 		return;
   3257   1.22    itojun 	}
   3258   1.22    itojun #endif
   3259   1.22    itojun 
   3260   1.34    itojun 	ip6 = mtod(copym, struct ip6_hdr *);
   3261   1.94    rpaulo 	/*
   3262   1.94    rpaulo 	 * clear embedded scope identifiers if necessary.
   3263   1.94    rpaulo 	 * in6_clearscope will touch the addresses only when necessary.
   3264   1.94    rpaulo 	 */
   3265   1.94    rpaulo 	in6_clearscope(&ip6->ip6_src);
   3266   1.94    rpaulo 	in6_clearscope(&ip6->ip6_dst);
   3267   1.22    itojun 
   3268  1.115    dyoung 	(void)looutput(ifp, copym, (const struct sockaddr *)dst, NULL);
   3269    1.2    itojun }
   3270    1.2    itojun 
   3271    1.2    itojun /*
   3272    1.2    itojun  * Chop IPv6 header off from the payload.
   3273    1.2    itojun  */
   3274    1.2    itojun static int
   3275  1.119  christos ip6_splithdr(struct mbuf *m,  struct ip6_exthdrs *exthdrs)
   3276    1.2    itojun {
   3277    1.2    itojun 	struct mbuf *mh;
   3278    1.2    itojun 	struct ip6_hdr *ip6;
   3279    1.2    itojun 
   3280    1.2    itojun 	ip6 = mtod(m, struct ip6_hdr *);
   3281    1.2    itojun 	if (m->m_len > sizeof(*ip6)) {
   3282    1.2    itojun 		MGETHDR(mh, M_DONTWAIT, MT_HEADER);
   3283    1.2    itojun 		if (mh == 0) {
   3284    1.2    itojun 			m_freem(m);
   3285    1.2    itojun 			return ENOBUFS;
   3286    1.2    itojun 		}
   3287   1.91      yamt 		M_MOVE_PKTHDR(mh, m);
   3288    1.2    itojun 		MH_ALIGN(mh, sizeof(*ip6));
   3289    1.2    itojun 		m->m_len -= sizeof(*ip6);
   3290    1.2    itojun 		m->m_data += sizeof(*ip6);
   3291    1.2    itojun 		mh->m_next = m;
   3292    1.2    itojun 		m = mh;
   3293    1.2    itojun 		m->m_len = sizeof(*ip6);
   3294  1.117  christos 		bcopy((void *)ip6, mtod(m, void *), sizeof(*ip6));
   3295    1.2    itojun 	}
   3296    1.2    itojun 	exthdrs->ip6e_ip6 = m;
   3297    1.2    itojun 	return 0;
   3298    1.2    itojun }
   3299    1.2    itojun 
   3300    1.2    itojun /*
   3301    1.2    itojun  * Compute IPv6 extension header length.
   3302    1.2    itojun  */
   3303    1.2    itojun int
   3304  1.119  christos ip6_optlen(struct in6pcb *in6p)
   3305    1.2    itojun {
   3306    1.2    itojun 	int len;
   3307    1.2    itojun 
   3308    1.2    itojun 	if (!in6p->in6p_outputopts)
   3309    1.2    itojun 		return 0;
   3310    1.2    itojun 
   3311    1.2    itojun 	len = 0;
   3312    1.2    itojun #define elen(x) \
   3313    1.2    itojun     (((struct ip6_ext *)(x)) ? (((struct ip6_ext *)(x))->ip6e_len + 1) << 3 : 0)
   3314    1.2    itojun 
   3315    1.2    itojun 	len += elen(in6p->in6p_outputopts->ip6po_hbh);
   3316    1.2    itojun 	len += elen(in6p->in6p_outputopts->ip6po_dest1);
   3317    1.2    itojun 	len += elen(in6p->in6p_outputopts->ip6po_rthdr);
   3318    1.2    itojun 	len += elen(in6p->in6p_outputopts->ip6po_dest2);
   3319    1.2    itojun 	return len;
   3320    1.2    itojun #undef elen
   3321    1.2    itojun }
   3322