Home | History | Annotate | Line # | Download | only in netinet6
ip6_output.c revision 1.149
      1  1.149  christos /*	$NetBSD: ip6_output.c,v 1.149 2012/06/25 15:28:40 christos Exp $	*/
      2   1.33    itojun /*	$KAME: ip6_output.c,v 1.172 2001/03/25 09:55:56 itojun Exp $	*/
      3    1.3   thorpej 
      4    1.2    itojun /*
      5    1.2    itojun  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
      6    1.2    itojun  * All rights reserved.
      7   1.19    itojun  *
      8    1.2    itojun  * Redistribution and use in source and binary forms, with or without
      9    1.2    itojun  * modification, are permitted provided that the following conditions
     10    1.2    itojun  * are met:
     11    1.2    itojun  * 1. Redistributions of source code must retain the above copyright
     12    1.2    itojun  *    notice, this list of conditions and the following disclaimer.
     13    1.2    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     14    1.2    itojun  *    notice, this list of conditions and the following disclaimer in the
     15    1.2    itojun  *    documentation and/or other materials provided with the distribution.
     16    1.2    itojun  * 3. Neither the name of the project nor the names of its contributors
     17    1.2    itojun  *    may be used to endorse or promote products derived from this software
     18    1.2    itojun  *    without specific prior written permission.
     19   1.19    itojun  *
     20    1.2    itojun  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     21    1.2    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     22    1.2    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     23    1.2    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     24    1.2    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     25    1.2    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     26    1.2    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     27    1.2    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     28    1.2    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     29    1.2    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     30    1.2    itojun  * SUCH DAMAGE.
     31    1.2    itojun  */
     32    1.2    itojun 
     33    1.2    itojun /*
     34    1.2    itojun  * Copyright (c) 1982, 1986, 1988, 1990, 1993
     35    1.2    itojun  *	The Regents of the University of California.  All rights reserved.
     36    1.2    itojun  *
     37    1.2    itojun  * Redistribution and use in source and binary forms, with or without
     38    1.2    itojun  * modification, are permitted provided that the following conditions
     39    1.2    itojun  * are met:
     40    1.2    itojun  * 1. Redistributions of source code must retain the above copyright
     41    1.2    itojun  *    notice, this list of conditions and the following disclaimer.
     42    1.2    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     43    1.2    itojun  *    notice, this list of conditions and the following disclaimer in the
     44    1.2    itojun  *    documentation and/or other materials provided with the distribution.
     45   1.62       agc  * 3. Neither the name of the University nor the names of its contributors
     46    1.2    itojun  *    may be used to endorse or promote products derived from this software
     47    1.2    itojun  *    without specific prior written permission.
     48    1.2    itojun  *
     49    1.2    itojun  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     50    1.2    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     51    1.2    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     52    1.2    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     53    1.2    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     54    1.2    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     55    1.2    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     56    1.2    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     57    1.2    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     58    1.2    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     59    1.2    itojun  * SUCH DAMAGE.
     60    1.2    itojun  *
     61    1.2    itojun  *	@(#)ip_output.c	8.3 (Berkeley) 1/21/94
     62    1.2    itojun  */
     63   1.41     lukem 
     64   1.41     lukem #include <sys/cdefs.h>
     65  1.149  christos __KERNEL_RCSID(0, "$NetBSD: ip6_output.c,v 1.149 2012/06/25 15:28:40 christos Exp $");
     66    1.2    itojun 
     67    1.2    itojun #include "opt_inet.h"
     68   1.97    rpaulo #include "opt_inet6.h"
     69    1.4   thorpej #include "opt_ipsec.h"
     70   1.15   darrenr #include "opt_pfil_hooks.h"
     71    1.2    itojun 
     72    1.2    itojun #include <sys/param.h>
     73    1.2    itojun #include <sys/malloc.h>
     74    1.2    itojun #include <sys/mbuf.h>
     75    1.2    itojun #include <sys/errno.h>
     76    1.2    itojun #include <sys/protosw.h>
     77    1.2    itojun #include <sys/socket.h>
     78    1.2    itojun #include <sys/socketvar.h>
     79    1.2    itojun #include <sys/systm.h>
     80    1.2    itojun #include <sys/proc.h>
     81   1.98      elad #include <sys/kauth.h>
     82    1.2    itojun 
     83    1.2    itojun #include <net/if.h>
     84    1.2    itojun #include <net/route.h>
     85   1.15   darrenr #ifdef PFIL_HOOKS
     86   1.15   darrenr #include <net/pfil.h>
     87   1.15   darrenr #endif
     88    1.2    itojun 
     89    1.2    itojun #include <netinet/in.h>
     90    1.2    itojun #include <netinet/in_var.h>
     91   1.14    itojun #include <netinet/ip6.h>
     92   1.14    itojun #include <netinet/icmp6.h>
     93   1.90      yamt #include <netinet/in_offload.h>
     94  1.149  christos #include <netinet/portalgo.h>
     95  1.105      yamt #include <netinet6/in6_offload.h>
     96   1.10    itojun #include <netinet6/ip6_var.h>
     97  1.128   thorpej #include <netinet6/ip6_private.h>
     98    1.2    itojun #include <netinet6/in6_pcb.h>
     99    1.2    itojun #include <netinet6/nd6.h>
    100   1.78    itojun #include <netinet6/ip6protosw.h>
    101   1.94    rpaulo #include <netinet6/scope6_var.h>
    102    1.2    itojun 
    103  1.114  degroote #ifdef FAST_IPSEC
    104  1.114  degroote #include <netipsec/ipsec.h>
    105  1.114  degroote #include <netipsec/ipsec6.h>
    106  1.114  degroote #include <netipsec/key.h>
    107  1.114  degroote #include <netipsec/xform.h>
    108  1.114  degroote #endif
    109  1.114  degroote 
    110  1.114  degroote 
    111    1.9    itojun #include <net/net_osdep.h>
    112    1.9    itojun 
    113   1.27   thorpej #ifdef PFIL_HOOKS
    114   1.27   thorpej extern struct pfil_head inet6_pfil_hook;	/* XXX */
    115   1.27   thorpej #endif
    116   1.27   thorpej 
    117    1.2    itojun struct ip6_exthdrs {
    118    1.2    itojun 	struct mbuf *ip6e_ip6;
    119    1.2    itojun 	struct mbuf *ip6e_hbh;
    120    1.2    itojun 	struct mbuf *ip6e_dest1;
    121    1.2    itojun 	struct mbuf *ip6e_rthdr;
    122    1.2    itojun 	struct mbuf *ip6e_dest2;
    123    1.2    itojun };
    124    1.2    itojun 
    125  1.122    dyoung static int ip6_pcbopt(int, u_char *, int, struct ip6_pktopts **,
    126  1.138      elad 	kauth_cred_t, int);
    127  1.130    plunky static int ip6_getpcbopt(struct ip6_pktopts *, int, struct sockopt *);
    128  1.138      elad static int ip6_setpktopt(int, u_char *, int, struct ip6_pktopts *, kauth_cred_t,
    129  1.122    dyoung 	int, int, int);
    130  1.132    plunky static int ip6_setmoptions(const struct sockopt *, struct ip6_moptions **);
    131  1.132    plunky static int ip6_getmoptions(struct sockopt *, struct ip6_moptions *);
    132  1.122    dyoung static int ip6_copyexthdr(struct mbuf **, void *, int);
    133  1.122    dyoung static int ip6_insertfraghdr(struct mbuf *, struct mbuf *, int,
    134  1.122    dyoung 	struct ip6_frag **);
    135  1.122    dyoung static int ip6_insert_jumboopt(struct ip6_exthdrs *, u_int32_t);
    136  1.122    dyoung static int ip6_splithdr(struct mbuf *, struct ip6_exthdrs *);
    137  1.118    dyoung static int ip6_getpmtu(struct route *, struct route *, struct ifnet *,
    138  1.115    dyoung     const struct in6_addr *, u_long *, int *);
    139  1.122    dyoung static int copypktopts(struct ip6_pktopts *, struct ip6_pktopts *, int);
    140   1.97    rpaulo 
    141   1.97    rpaulo #ifdef RFC2292
    142  1.130    plunky static int ip6_pcbopts(struct ip6_pktopts **, struct socket *, struct sockopt *);
    143   1.97    rpaulo #endif
    144    1.2    itojun 
    145    1.2    itojun /*
    146    1.2    itojun  * IP6 output. The packet in mbuf chain m contains a skeletal IP6
    147    1.2    itojun  * header (with pri, len, nxt, hlim, src, dst).
    148    1.2    itojun  * This function may modify ver and hlim only.
    149    1.2    itojun  * The mbuf chain containing the packet will be freed.
    150    1.2    itojun  * The mbuf opt, if present, will not be freed.
    151   1.52    itojun  *
    152   1.52    itojun  * type of "mtu": rt_rmx.rmx_mtu is u_long, ifnet.ifr_mtu is int, and
    153   1.52    itojun  * nd_ifinfo.linkmtu is u_int32_t.  so we use u_long to hold largest one,
    154   1.52    itojun  * which is rt_rmx.rmx_mtu.
    155    1.2    itojun  */
    156    1.2    itojun int
    157  1.103  christos ip6_output(
    158  1.103  christos     struct mbuf *m0,
    159  1.103  christos     struct ip6_pktopts *opt,
    160  1.118    dyoung     struct route *ro,
    161  1.103  christos     int flags,
    162  1.103  christos     struct ip6_moptions *im6o,
    163  1.104  christos     struct socket *so,
    164  1.103  christos     struct ifnet **ifpp		/* XXX: just for statistics */
    165  1.103  christos )
    166    1.2    itojun {
    167    1.2    itojun 	struct ip6_hdr *ip6, *mhip6;
    168   1.19    itojun 	struct ifnet *ifp, *origifp;
    169    1.2    itojun 	struct mbuf *m = m0;
    170    1.2    itojun 	int hlen, tlen, len, off;
    171  1.116   thorpej 	bool tso;
    172  1.118    dyoung 	struct route ip6route;
    173   1.94    rpaulo 	struct rtentry *rt = NULL;
    174  1.118    dyoung 	const struct sockaddr_in6 *dst = NULL;
    175  1.118    dyoung 	struct sockaddr_in6 src_sa, dst_sa;
    176    1.2    itojun 	int error = 0;
    177   1.94    rpaulo 	struct in6_ifaddr *ia = NULL;
    178    1.2    itojun 	u_long mtu;
    179   1.78    itojun 	int alwaysfrag, dontfrag;
    180    1.2    itojun 	u_int32_t optlen = 0, plen = 0, unfragpartlen = 0;
    181    1.2    itojun 	struct ip6_exthdrs exthdrs;
    182   1.94    rpaulo 	struct in6_addr finaldst, src0, dst0;
    183   1.94    rpaulo 	u_int32_t zone;
    184  1.118    dyoung 	struct route *ro_pmtu = NULL;
    185    1.2    itojun 	int hdrsplit = 0;
    186    1.2    itojun 	int needipsec = 0;
    187  1.114  degroote #ifdef FAST_IPSEC
    188  1.114  degroote 	struct secpolicy *sp = NULL;
    189  1.114  degroote 	int s;
    190  1.114  degroote #endif
    191  1.114  degroote 
    192  1.124    dyoung 	memset(&ip6route, 0, sizeof(ip6route));
    193    1.2    itojun 
    194  1.100      tron #ifdef  DIAGNOSTIC
    195  1.100      tron 	if ((m->m_flags & M_PKTHDR) == 0)
    196  1.100      tron 		panic("ip6_output: no HDR");
    197  1.100      tron 
    198  1.100      tron 	if ((m->m_pkthdr.csum_flags &
    199  1.100      tron 	    (M_CSUM_TCPv4|M_CSUM_UDPv4|M_CSUM_TSOv4)) != 0) {
    200  1.100      tron 		panic("ip6_output: IPv4 checksum offload flags: %d",
    201  1.100      tron 		    m->m_pkthdr.csum_flags);
    202  1.100      tron 	}
    203  1.100      tron 
    204  1.100      tron 	if ((m->m_pkthdr.csum_flags & (M_CSUM_TCPv6|M_CSUM_UDPv6)) ==
    205  1.100      tron 	    (M_CSUM_TCPv6|M_CSUM_UDPv6)) {
    206  1.100      tron 		panic("ip6_output: conflicting checksum offload flags: %d",
    207  1.100      tron 		    m->m_pkthdr.csum_flags);
    208  1.100      tron 	}
    209  1.100      tron #endif
    210  1.100      tron 
    211   1.89      yamt 	M_CSUM_DATA_IPv6_HL_SET(m->m_pkthdr.csum_data, sizeof(struct ip6_hdr));
    212   1.89      yamt 
    213   1.22    itojun #define MAKE_EXTHDR(hp, mp)						\
    214   1.22    itojun     do {								\
    215    1.2    itojun 	if (hp) {							\
    216    1.2    itojun 		struct ip6_ext *eh = (struct ip6_ext *)(hp);		\
    217  1.117  christos 		error = ip6_copyexthdr((mp), (void *)(hp), 		\
    218   1.49    itojun 		    ((eh)->ip6e_len + 1) << 3);				\
    219    1.2    itojun 		if (error)						\
    220    1.2    itojun 			goto freehdrs;					\
    221    1.2    itojun 	}								\
    222   1.60     perry     } while (/*CONSTCOND*/ 0)
    223   1.51    itojun 
    224  1.136    cegger 	memset(&exthdrs, 0, sizeof(exthdrs));
    225    1.2    itojun 	if (opt) {
    226    1.2    itojun 		/* Hop-by-Hop options header */
    227    1.2    itojun 		MAKE_EXTHDR(opt->ip6po_hbh, &exthdrs.ip6e_hbh);
    228    1.2    itojun 		/* Destination options header(1st part) */
    229    1.2    itojun 		MAKE_EXTHDR(opt->ip6po_dest1, &exthdrs.ip6e_dest1);
    230    1.2    itojun 		/* Routing header */
    231    1.2    itojun 		MAKE_EXTHDR(opt->ip6po_rthdr, &exthdrs.ip6e_rthdr);
    232    1.2    itojun 		/* Destination options header(2nd part) */
    233    1.2    itojun 		MAKE_EXTHDR(opt->ip6po_dest2, &exthdrs.ip6e_dest2);
    234    1.2    itojun 	}
    235    1.2    itojun 
    236    1.2    itojun 	/*
    237    1.2    itojun 	 * Calculate the total length of the extension header chain.
    238    1.2    itojun 	 * Keep the length of the unfragmentable part for fragmentation.
    239    1.2    itojun 	 */
    240    1.9    itojun 	optlen = 0;
    241    1.2    itojun 	if (exthdrs.ip6e_hbh) optlen += exthdrs.ip6e_hbh->m_len;
    242    1.2    itojun 	if (exthdrs.ip6e_dest1) optlen += exthdrs.ip6e_dest1->m_len;
    243    1.2    itojun 	if (exthdrs.ip6e_rthdr) optlen += exthdrs.ip6e_rthdr->m_len;
    244    1.9    itojun 	unfragpartlen = optlen + sizeof(struct ip6_hdr);
    245    1.2    itojun 	/* NOTE: we don't add AH/ESP length here. do that later. */
    246    1.2    itojun 	if (exthdrs.ip6e_dest2) optlen += exthdrs.ip6e_dest2->m_len;
    247    1.2    itojun 
    248  1.114  degroote #ifdef FAST_IPSEC
    249  1.114  degroote 	/* Check the security policy (SP) for the packet */
    250  1.114  degroote 
    251  1.114  degroote 	sp = ipsec6_check_policy(m,so,flags,&needipsec,&error);
    252  1.114  degroote 	if (error != 0) {
    253  1.114  degroote 		/*
    254  1.114  degroote 		 * Hack: -EINVAL is used to signal that a packet
    255  1.114  degroote 		 * should be silently discarded.  This is typically
    256  1.114  degroote 		 * because we asked key management for an SA and
    257  1.114  degroote 		 * it was delayed (e.g. kicked up to IKE).
    258  1.114  degroote 		 */
    259  1.114  degroote 	if (error == -EINVAL)
    260  1.114  degroote 		error = 0;
    261  1.114  degroote 	goto freehdrs;
    262  1.114  degroote     }
    263  1.114  degroote #endif /* FAST_IPSEC */
    264  1.114  degroote 
    265  1.114  degroote 
    266  1.114  degroote 	if (needipsec &&
    267  1.114  degroote 	    (m->m_pkthdr.csum_flags & (M_CSUM_UDPv6|M_CSUM_TCPv6)) != 0) {
    268  1.114  degroote 		in6_delayed_cksum(m);
    269  1.114  degroote 		m->m_pkthdr.csum_flags &= ~(M_CSUM_UDPv6|M_CSUM_TCPv6);
    270  1.114  degroote 	}
    271  1.114  degroote 
    272  1.114  degroote 
    273    1.2    itojun 	/*
    274    1.2    itojun 	 * If we need IPsec, or there is at least one extension header,
    275    1.2    itojun 	 * separate IP6 header from the payload.
    276    1.2    itojun 	 */
    277    1.2    itojun 	if ((needipsec || optlen) && !hdrsplit) {
    278    1.2    itojun 		if ((error = ip6_splithdr(m, &exthdrs)) != 0) {
    279    1.2    itojun 			m = NULL;
    280    1.2    itojun 			goto freehdrs;
    281    1.2    itojun 		}
    282    1.2    itojun 		m = exthdrs.ip6e_ip6;
    283    1.2    itojun 		hdrsplit++;
    284    1.2    itojun 	}
    285    1.2    itojun 
    286    1.2    itojun 	/* adjust pointer */
    287    1.2    itojun 	ip6 = mtod(m, struct ip6_hdr *);
    288    1.2    itojun 
    289    1.2    itojun 	/* adjust mbuf packet header length */
    290    1.2    itojun 	m->m_pkthdr.len += optlen;
    291    1.2    itojun 	plen = m->m_pkthdr.len - sizeof(*ip6);
    292    1.2    itojun 
    293    1.2    itojun 	/* If this is a jumbo payload, insert a jumbo payload option. */
    294    1.2    itojun 	if (plen > IPV6_MAXPACKET) {
    295    1.2    itojun 		if (!hdrsplit) {
    296    1.2    itojun 			if ((error = ip6_splithdr(m, &exthdrs)) != 0) {
    297    1.2    itojun 				m = NULL;
    298    1.2    itojun 				goto freehdrs;
    299    1.2    itojun 			}
    300    1.2    itojun 			m = exthdrs.ip6e_ip6;
    301    1.2    itojun 			hdrsplit++;
    302    1.2    itojun 		}
    303    1.2    itojun 		/* adjust pointer */
    304    1.2    itojun 		ip6 = mtod(m, struct ip6_hdr *);
    305    1.2    itojun 		if ((error = ip6_insert_jumboopt(&exthdrs, plen)) != 0)
    306    1.2    itojun 			goto freehdrs;
    307   1.89      yamt 		optlen += 8; /* XXX JUMBOOPTLEN */
    308    1.2    itojun 		ip6->ip6_plen = 0;
    309    1.2    itojun 	} else
    310    1.2    itojun 		ip6->ip6_plen = htons(plen);
    311    1.2    itojun 
    312    1.2    itojun 	/*
    313    1.2    itojun 	 * Concatenate headers and fill in next header fields.
    314    1.2    itojun 	 * Here we have, on "m"
    315    1.9    itojun 	 *	IPv6 payload
    316    1.2    itojun 	 * and we insert headers accordingly.  Finally, we should be getting:
    317    1.2    itojun 	 *	IPv6 hbh dest1 rthdr ah* [esp* dest2 payload]
    318    1.9    itojun 	 *
    319    1.9    itojun 	 * during the header composing process, "m" points to IPv6 header.
    320    1.9    itojun 	 * "mprev" points to an extension header prior to esp.
    321    1.2    itojun 	 */
    322    1.2    itojun 	{
    323    1.2    itojun 		u_char *nexthdrp = &ip6->ip6_nxt;
    324    1.2    itojun 		struct mbuf *mprev = m;
    325    1.2    itojun 
    326    1.2    itojun 		/*
    327    1.2    itojun 		 * we treat dest2 specially.  this makes IPsec processing
    328   1.78    itojun 		 * much easier.  the goal here is to make mprev point the
    329   1.78    itojun 		 * mbuf prior to dest2.
    330    1.9    itojun 		 *
    331    1.9    itojun 		 * result: IPv6 dest2 payload
    332    1.9    itojun 		 * m and mprev will point to IPv6 header.
    333    1.2    itojun 		 */
    334    1.2    itojun 		if (exthdrs.ip6e_dest2) {
    335    1.2    itojun 			if (!hdrsplit)
    336    1.2    itojun 				panic("assumption failed: hdr not split");
    337    1.9    itojun 			exthdrs.ip6e_dest2->m_next = m->m_next;
    338    1.9    itojun 			m->m_next = exthdrs.ip6e_dest2;
    339    1.2    itojun 			*mtod(exthdrs.ip6e_dest2, u_char *) = ip6->ip6_nxt;
    340    1.2    itojun 			ip6->ip6_nxt = IPPROTO_DSTOPTS;
    341    1.2    itojun 		}
    342    1.2    itojun 
    343   1.22    itojun #define MAKE_CHAIN(m, mp, p, i)\
    344   1.22    itojun     do {\
    345    1.2    itojun 	if (m) {\
    346    1.2    itojun 		if (!hdrsplit) \
    347    1.2    itojun 			panic("assumption failed: hdr not split"); \
    348    1.2    itojun 		*mtod((m), u_char *) = *(p);\
    349    1.2    itojun 		*(p) = (i);\
    350    1.2    itojun 		p = mtod((m), u_char *);\
    351    1.2    itojun 		(m)->m_next = (mp)->m_next;\
    352    1.2    itojun 		(mp)->m_next = (m);\
    353    1.2    itojun 		(mp) = (m);\
    354    1.2    itojun 	}\
    355   1.60     perry     } while (/*CONSTCOND*/ 0)
    356    1.9    itojun 		/*
    357    1.9    itojun 		 * result: IPv6 hbh dest1 rthdr dest2 payload
    358    1.9    itojun 		 * m will point to IPv6 header.  mprev will point to the
    359    1.9    itojun 		 * extension header prior to dest2 (rthdr in the above case).
    360    1.9    itojun 		 */
    361   1.49    itojun 		MAKE_CHAIN(exthdrs.ip6e_hbh, mprev, nexthdrp, IPPROTO_HOPOPTS);
    362   1.49    itojun 		MAKE_CHAIN(exthdrs.ip6e_dest1, mprev, nexthdrp,
    363   1.49    itojun 		    IPPROTO_DSTOPTS);
    364   1.49    itojun 		MAKE_CHAIN(exthdrs.ip6e_rthdr, mprev, nexthdrp,
    365   1.49    itojun 		    IPPROTO_ROUTING);
    366    1.2    itojun 
    367   1.89      yamt 		M_CSUM_DATA_IPv6_HL_SET(m->m_pkthdr.csum_data,
    368   1.89      yamt 		    sizeof(struct ip6_hdr) + optlen);
    369    1.2    itojun 	}
    370    1.2    itojun 
    371    1.2    itojun 	/*
    372    1.2    itojun 	 * If there is a routing header, replace destination address field
    373    1.2    itojun 	 * with the first hop of the routing header.
    374    1.2    itojun 	 */
    375    1.2    itojun 	if (exthdrs.ip6e_rthdr) {
    376   1.49    itojun 		struct ip6_rthdr *rh;
    377    1.2    itojun 		struct ip6_rthdr0 *rh0;
    378   1.61    itojun 		struct in6_addr *addr;
    379   1.94    rpaulo 		struct sockaddr_in6 sa;
    380    1.2    itojun 
    381   1.49    itojun 		rh = (struct ip6_rthdr *)(mtod(exthdrs.ip6e_rthdr,
    382   1.49    itojun 		    struct ip6_rthdr *));
    383    1.2    itojun 		finaldst = ip6->ip6_dst;
    384   1.31    itojun 		switch (rh->ip6r_type) {
    385    1.2    itojun 		case IPV6_RTHDR_TYPE_0:
    386    1.2    itojun 			 rh0 = (struct ip6_rthdr0 *)rh;
    387   1.61    itojun 			 addr = (struct in6_addr *)(rh0 + 1);
    388   1.94    rpaulo 
    389   1.94    rpaulo 			 /*
    390   1.94    rpaulo 			  * construct a sockaddr_in6 form of
    391   1.94    rpaulo 			  * the first hop.
    392   1.94    rpaulo 			  *
    393   1.94    rpaulo 			  * XXX: we may not have enough
    394   1.94    rpaulo 			  * information about its scope zone;
    395   1.94    rpaulo 			  * there is no standard API to pass
    396   1.94    rpaulo 			  * the information from the
    397   1.94    rpaulo 			  * application.
    398   1.94    rpaulo 			  */
    399  1.123    dyoung 			 sockaddr_in6_init(&sa, addr, 0, 0, 0);
    400   1.94    rpaulo 			 if ((error = sa6_embedscope(&sa,
    401   1.94    rpaulo 			     ip6_use_defzone)) != 0) {
    402   1.94    rpaulo 				 goto bad;
    403   1.94    rpaulo 			 }
    404   1.94    rpaulo 			 ip6->ip6_dst = sa.sin6_addr;
    405   1.92  christos 			 (void)memmove(&addr[0], &addr[1],
    406   1.94    rpaulo 			     sizeof(struct in6_addr) *
    407   1.94    rpaulo 			     (rh0->ip6r0_segleft - 1));
    408   1.61    itojun 			 addr[rh0->ip6r0_segleft - 1] = finaldst;
    409   1.94    rpaulo 			 /* XXX */
    410   1.94    rpaulo 			 in6_clearscope(addr + rh0->ip6r0_segleft - 1);
    411    1.2    itojun 			 break;
    412    1.2    itojun 		default:	/* is it possible? */
    413    1.2    itojun 			 error = EINVAL;
    414    1.2    itojun 			 goto bad;
    415    1.2    itojun 		}
    416    1.2    itojun 	}
    417    1.2    itojun 
    418    1.2    itojun 	/* Source address validation */
    419    1.2    itojun 	if (IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_src) &&
    420   1.54    itojun 	    (flags & IPV6_UNSPECSRC) == 0) {
    421    1.2    itojun 		error = EOPNOTSUPP;
    422  1.128   thorpej 		IP6_STATINC(IP6_STAT_BADSCOPE);
    423    1.2    itojun 		goto bad;
    424    1.2    itojun 	}
    425    1.2    itojun 	if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_src)) {
    426    1.2    itojun 		error = EOPNOTSUPP;
    427  1.128   thorpej 		IP6_STATINC(IP6_STAT_BADSCOPE);
    428    1.2    itojun 		goto bad;
    429    1.2    itojun 	}
    430    1.2    itojun 
    431  1.128   thorpej 	IP6_STATINC(IP6_STAT_LOCALOUT);
    432    1.2    itojun 
    433    1.2    itojun 	/*
    434    1.2    itojun 	 * Route packet.
    435    1.2    itojun 	 */
    436   1.78    itojun 	/* initialize cached route */
    437  1.113    dyoung 	if (ro == NULL) {
    438    1.2    itojun 		ro = &ip6route;
    439    1.2    itojun 	}
    440    1.2    itojun 	ro_pmtu = ro;
    441    1.2    itojun 	if (opt && opt->ip6po_rthdr)
    442    1.2    itojun 		ro = &opt->ip6po_route;
    443   1.94    rpaulo 
    444   1.94    rpaulo  	/*
    445   1.94    rpaulo 	 * if specified, try to fill in the traffic class field.
    446   1.94    rpaulo 	 * do not override if a non-zero value is already set.
    447   1.94    rpaulo 	 * we check the diffserv field and the ecn field separately.
    448   1.94    rpaulo 	 */
    449   1.94    rpaulo 	if (opt && opt->ip6po_tclass >= 0) {
    450   1.94    rpaulo 		int mask = 0;
    451   1.94    rpaulo 
    452   1.94    rpaulo 		if ((ip6->ip6_flow & htonl(0xfc << 20)) == 0)
    453   1.94    rpaulo 			mask |= 0xfc;
    454   1.94    rpaulo 		if ((ip6->ip6_flow & htonl(0x03 << 20)) == 0)
    455   1.94    rpaulo 			mask |= 0x03;
    456   1.94    rpaulo 		if (mask != 0)
    457   1.94    rpaulo 			ip6->ip6_flow |= htonl((opt->ip6po_tclass & mask) << 20);
    458    1.2    itojun 	}
    459   1.94    rpaulo 
    460   1.94    rpaulo 	/* fill in or override the hop limit field, if necessary. */
    461   1.94    rpaulo 	if (opt && opt->ip6po_hlim != -1)
    462   1.94    rpaulo 		ip6->ip6_hlim = opt->ip6po_hlim & 0xff;
    463   1.94    rpaulo 	else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
    464   1.94    rpaulo 		if (im6o != NULL)
    465   1.94    rpaulo 			ip6->ip6_hlim = im6o->im6o_multicast_hlim;
    466   1.94    rpaulo 		else
    467   1.94    rpaulo 			ip6->ip6_hlim = ip6_defmcasthlim;
    468    1.2    itojun 	}
    469   1.94    rpaulo 
    470  1.114  degroote #ifdef FAST_IPSEC
    471  1.114  degroote 	if (needipsec) {
    472  1.114  degroote 		s = splsoftnet();
    473  1.114  degroote 		error = ipsec6_process_packet(m,sp->req);
    474  1.114  degroote 
    475  1.114  degroote 		/*
    476  1.114  degroote 		 * Preserve KAME behaviour: ENOENT can be returned
    477  1.114  degroote 		 * when an SA acquire is in progress.  Don't propagate
    478  1.114  degroote 		 * this to user-level; it confuses applications.
    479  1.114  degroote 		 * XXX this will go away when the SADB is redone.
    480  1.114  degroote 		 */
    481  1.114  degroote 		if (error == ENOENT)
    482  1.114  degroote 			error = 0;
    483  1.114  degroote 		splx(s);
    484  1.114  degroote 		goto done;
    485  1.118    dyoung 	}
    486  1.114  degroote #endif /* FAST_IPSEC */
    487  1.114  degroote 
    488  1.114  degroote 
    489    1.2    itojun 
    490   1.94    rpaulo 	/* adjust pointer */
    491   1.94    rpaulo 	ip6 = mtod(m, struct ip6_hdr *);
    492    1.2    itojun 
    493  1.123    dyoung 	sockaddr_in6_init(&dst_sa, &ip6->ip6_dst, 0, 0, 0);
    494  1.118    dyoung 	if ((error = in6_selectroute(&dst_sa, opt, im6o, ro,
    495  1.115    dyoung 	    &ifp, &rt, 0)) != 0) {
    496   1.94    rpaulo 		if (ifp != NULL)
    497   1.94    rpaulo 			in6_ifstat_inc(ifp, ifs6_out_discard);
    498   1.94    rpaulo 		goto bad;
    499   1.94    rpaulo 	}
    500   1.94    rpaulo 	if (rt == NULL) {
    501   1.94    rpaulo 		/*
    502   1.94    rpaulo 		 * If in6_selectroute() does not return a route entry,
    503   1.94    rpaulo 		 * dst may not have been updated.
    504   1.94    rpaulo 		 */
    505  1.145     rmind 		error = rtcache_setdst(ro, sin6tosa(&dst_sa));
    506  1.145     rmind 		if (error) {
    507  1.145     rmind 			goto bad;
    508  1.145     rmind 		}
    509   1.94    rpaulo 	}
    510    1.2    itojun 
    511   1.94    rpaulo 	/*
    512   1.94    rpaulo 	 * then rt (for unicast) and ifp must be non-NULL valid values.
    513   1.94    rpaulo 	 */
    514   1.94    rpaulo 	if ((flags & IPV6_FORWARDING) == 0) {
    515   1.94    rpaulo 		/* XXX: the FORWARDING flag can be set for mrouting. */
    516    1.9    itojun 		in6_ifstat_inc(ifp, ifs6_out_request);
    517   1.94    rpaulo 	}
    518   1.94    rpaulo 	if (rt != NULL) {
    519   1.94    rpaulo 		ia = (struct in6_ifaddr *)(rt->rt_ifa);
    520   1.94    rpaulo 		rt->rt_use++;
    521   1.94    rpaulo 	}
    522    1.9    itojun 
    523   1.94    rpaulo 	/*
    524   1.94    rpaulo 	 * The outgoing interface must be in the zone of source and
    525   1.94    rpaulo 	 * destination addresses.  We should use ia_ifp to support the
    526   1.94    rpaulo 	 * case of sending packets to an address of our own.
    527   1.94    rpaulo 	 */
    528   1.94    rpaulo 	if (ia != NULL && ia->ia_ifp)
    529   1.94    rpaulo 		origifp = ia->ia_ifp;
    530   1.94    rpaulo 	else
    531   1.94    rpaulo 		origifp = ifp;
    532    1.2    itojun 
    533   1.94    rpaulo 	src0 = ip6->ip6_src;
    534   1.94    rpaulo 	if (in6_setscope(&src0, origifp, &zone))
    535   1.94    rpaulo 		goto badscope;
    536  1.123    dyoung 	sockaddr_in6_init(&src_sa, &ip6->ip6_src, 0, 0, 0);
    537   1.94    rpaulo 	if (sa6_recoverscope(&src_sa) || zone != src_sa.sin6_scope_id)
    538   1.94    rpaulo 		goto badscope;
    539   1.94    rpaulo 
    540   1.94    rpaulo 	dst0 = ip6->ip6_dst;
    541   1.94    rpaulo 	if (in6_setscope(&dst0, origifp, &zone))
    542   1.94    rpaulo 		goto badscope;
    543   1.94    rpaulo 	/* re-initialize to be sure */
    544  1.123    dyoung 	sockaddr_in6_init(&dst_sa, &ip6->ip6_dst, 0, 0, 0);
    545   1.94    rpaulo 	if (sa6_recoverscope(&dst_sa) || zone != dst_sa.sin6_scope_id)
    546   1.94    rpaulo 		goto badscope;
    547   1.94    rpaulo 
    548   1.94    rpaulo 	/* scope check is done. */
    549   1.94    rpaulo 
    550  1.118    dyoung 	if (rt == NULL || IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
    551  1.118    dyoung 		if (dst == NULL)
    552  1.118    dyoung 			dst = satocsin6(rtcache_getdst(ro));
    553  1.118    dyoung 		KASSERT(dst != NULL);
    554  1.126    dyoung 	} else if (opt && rtcache_validate(&opt->ip6po_nextroute) != NULL) {
    555  1.118    dyoung 		/*
    556  1.118    dyoung 		 * The nexthop is explicitly specified by the
    557  1.118    dyoung 		 * application.  We assume the next hop is an IPv6
    558  1.118    dyoung 		 * address.
    559  1.118    dyoung 		 */
    560  1.118    dyoung 		dst = (struct sockaddr_in6 *)opt->ip6po_nexthop;
    561  1.118    dyoung 	} else if ((rt->rt_flags & RTF_GATEWAY))
    562  1.118    dyoung 		dst = (struct sockaddr_in6 *)rt->rt_gateway;
    563  1.118    dyoung 	else if (dst == NULL)
    564  1.118    dyoung 		dst = satocsin6(rtcache_getdst(ro));
    565    1.2    itojun 
    566   1.94    rpaulo 	/*
    567   1.94    rpaulo 	 * XXXXXX: original code follows:
    568   1.94    rpaulo 	 */
    569   1.94    rpaulo 	if (!IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst))
    570   1.94    rpaulo 		m->m_flags &= ~(M_BCAST | M_MCAST);	/* just in case */
    571   1.94    rpaulo 	else {
    572   1.94    rpaulo 		struct	in6_multi *in6m;
    573    1.2    itojun 
    574   1.94    rpaulo 		m->m_flags = (m->m_flags & ~M_BCAST) | M_MCAST;
    575    1.9    itojun 
    576    1.9    itojun 		in6_ifstat_inc(ifp, ifs6_out_mcast);
    577    1.9    itojun 
    578    1.2    itojun 		/*
    579    1.2    itojun 		 * Confirm that the outgoing interface supports multicast.
    580    1.2    itojun 		 */
    581   1.94    rpaulo 		if (!(ifp->if_flags & IFF_MULTICAST)) {
    582  1.128   thorpej 			IP6_STATINC(IP6_STAT_NOROUTE);
    583    1.9    itojun 			in6_ifstat_inc(ifp, ifs6_out_discard);
    584    1.2    itojun 			error = ENETUNREACH;
    585    1.2    itojun 			goto bad;
    586    1.2    itojun 		}
    587   1.94    rpaulo 
    588    1.2    itojun 		IN6_LOOKUP_MULTI(ip6->ip6_dst, ifp, in6m);
    589    1.2    itojun 		if (in6m != NULL &&
    590    1.2    itojun 		   (im6o == NULL || im6o->im6o_multicast_loop)) {
    591    1.2    itojun 			/*
    592    1.2    itojun 			 * If we belong to the destination multicast group
    593    1.2    itojun 			 * on the outgoing interface, and the caller did not
    594    1.2    itojun 			 * forbid loopback, loop back a copy.
    595    1.2    itojun 			 */
    596  1.118    dyoung 			KASSERT(dst != NULL);
    597    1.2    itojun 			ip6_mloopback(ifp, m, dst);
    598    1.2    itojun 		} else {
    599    1.2    itojun 			/*
    600    1.2    itojun 			 * If we are acting as a multicast router, perform
    601    1.2    itojun 			 * multicast forwarding as if the packet had just
    602    1.2    itojun 			 * arrived on the interface to which we are about
    603    1.2    itojun 			 * to send.  The multicast forwarding function
    604    1.2    itojun 			 * recursively calls this function, using the
    605    1.2    itojun 			 * IPV6_FORWARDING flag to prevent infinite recursion.
    606    1.2    itojun 			 *
    607    1.2    itojun 			 * Multicasts that are looped back by ip6_mloopback(),
    608    1.2    itojun 			 * above, will be forwarded by the ip6_input() routine,
    609    1.2    itojun 			 * if necessary.
    610    1.2    itojun 			 */
    611    1.2    itojun 			if (ip6_mrouter && (flags & IPV6_FORWARDING) == 0) {
    612   1.20   thorpej 				if (ip6_mforward(ip6, ifp, m) != 0) {
    613    1.2    itojun 					m_freem(m);
    614    1.2    itojun 					goto done;
    615    1.2    itojun 				}
    616    1.2    itojun 			}
    617    1.2    itojun 		}
    618    1.2    itojun 		/*
    619    1.2    itojun 		 * Multicasts with a hoplimit of zero may be looped back,
    620    1.2    itojun 		 * above, but must not be transmitted on a network.
    621    1.2    itojun 		 * Also, multicasts addressed to the loopback interface
    622    1.2    itojun 		 * are not sent -- the above call to ip6_mloopback() will
    623    1.2    itojun 		 * loop back a copy if this host actually belongs to the
    624    1.2    itojun 		 * destination group on the loopback interface.
    625    1.2    itojun 		 */
    626   1.94    rpaulo 		if (ip6->ip6_hlim == 0 || (ifp->if_flags & IFF_LOOPBACK) ||
    627   1.94    rpaulo 		    IN6_IS_ADDR_MC_INTFACELOCAL(&ip6->ip6_dst)) {
    628    1.2    itojun 			m_freem(m);
    629    1.2    itojun 			goto done;
    630    1.2    itojun 		}
    631    1.2    itojun 	}
    632    1.2    itojun 
    633    1.2    itojun 	/*
    634    1.9    itojun 	 * Fill the outgoing inteface to tell the upper layer
    635    1.9    itojun 	 * to increment per-interface statistics.
    636    1.9    itojun 	 */
    637    1.9    itojun 	if (ifpp)
    638    1.9    itojun 		*ifpp = ifp;
    639    1.9    itojun 
    640   1.45    itojun 	/* Determine path MTU. */
    641   1.78    itojun 	if ((error = ip6_getpmtu(ro_pmtu, ro, ifp, &finaldst, &mtu,
    642   1.78    itojun 	    &alwaysfrag)) != 0)
    643   1.45    itojun 		goto bad;
    644   1.45    itojun 
    645    1.9    itojun 	/*
    646   1.45    itojun 	 * The caller of this function may specify to use the minimum MTU
    647   1.45    itojun 	 * in some cases.
    648   1.97    rpaulo 	 * An advanced API option (IPV6_USE_MIN_MTU) can also override MTU
    649   1.97    rpaulo 	 * setting.  The logic is a bit complicated; by default, unicast
    650   1.97    rpaulo 	 * packets will follow path MTU while multicast packets will be sent at
    651   1.97    rpaulo 	 * the minimum MTU.  If IP6PO_MINMTU_ALL is specified, all packets
    652   1.97    rpaulo 	 * including unicast ones will be sent at the minimum MTU.  Multicast
    653   1.97    rpaulo 	 * packets will always be sent at the minimum MTU unless
    654   1.97    rpaulo 	 * IP6PO_MINMTU_DISABLE is explicitly specified.
    655   1.97    rpaulo 	 * See RFC 3542 for more details.
    656    1.2    itojun 	 */
    657   1.45    itojun 	if (mtu > IPV6_MMTU) {
    658   1.45    itojun 		if ((flags & IPV6_MINMTU))
    659   1.45    itojun 			mtu = IPV6_MMTU;
    660   1.97    rpaulo 		else if (opt && opt->ip6po_minmtu == IP6PO_MINMTU_ALL)
    661   1.97    rpaulo 			mtu = IPV6_MMTU;
    662   1.97    rpaulo 		else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) &&
    663   1.97    rpaulo 			 (opt == NULL ||
    664   1.97    rpaulo 			  opt->ip6po_minmtu != IP6PO_MINMTU_DISABLE)) {
    665   1.97    rpaulo 			mtu = IPV6_MMTU;
    666   1.97    rpaulo 		}
    667   1.43    itojun 	}
    668   1.43    itojun 
    669   1.94    rpaulo 	/*
    670   1.94    rpaulo 	 * clear embedded scope identifiers if necessary.
    671   1.94    rpaulo 	 * in6_clearscope will touch the addresses only when necessary.
    672   1.94    rpaulo 	 */
    673   1.94    rpaulo 	in6_clearscope(&ip6->ip6_src);
    674   1.94    rpaulo 	in6_clearscope(&ip6->ip6_dst);
    675    1.2    itojun 
    676    1.2    itojun 	/*
    677    1.2    itojun 	 * If the outgoing packet contains a hop-by-hop options header,
    678    1.2    itojun 	 * it must be examined and processed even by the source node.
    679    1.2    itojun 	 * (RFC 2460, section 4.)
    680    1.2    itojun 	 */
    681  1.143  drochner 	if (ip6->ip6_nxt == IPV6_HOPOPTS) {
    682    1.5    itojun 		u_int32_t dummy1; /* XXX unused */
    683    1.2    itojun 		u_int32_t dummy2; /* XXX unused */
    684  1.143  drochner 		int hoff = sizeof(struct ip6_hdr);
    685    1.2    itojun 
    686  1.143  drochner 		if (ip6_hopopts_input(&dummy1, &dummy2, &m, &hoff)) {
    687    1.2    itojun 			/* m was already freed at this point */
    688    1.2    itojun 			error = EINVAL;/* better error? */
    689    1.2    itojun 			goto done;
    690    1.2    itojun 		}
    691  1.143  drochner 
    692  1.143  drochner 		ip6 = mtod(m, struct ip6_hdr *);
    693    1.2    itojun 	}
    694    1.2    itojun 
    695   1.15   darrenr #ifdef PFIL_HOOKS
    696   1.15   darrenr 	/*
    697   1.15   darrenr 	 * Run through list of hooks for output packets.
    698   1.15   darrenr 	 */
    699   1.49    itojun 	if ((error = pfil_run_hooks(&inet6_pfil_hook, &m, ifp, PFIL_OUT)) != 0)
    700   1.27   thorpej 		goto done;
    701   1.27   thorpej 	if (m == NULL)
    702   1.27   thorpej 		goto done;
    703   1.27   thorpej 	ip6 = mtod(m, struct ip6_hdr *);
    704   1.15   darrenr #endif /* PFIL_HOOKS */
    705    1.2    itojun 	/*
    706    1.2    itojun 	 * Send the packet to the outgoing interface.
    707   1.19    itojun 	 * If necessary, do IPv6 fragmentation before sending.
    708   1.78    itojun 	 *
    709   1.78    itojun 	 * the logic here is rather complex:
    710   1.78    itojun 	 * 1: normal case (dontfrag == 0, alwaysfrag == 0)
    711   1.78    itojun 	 * 1-a:	send as is if tlen <= path mtu
    712   1.78    itojun 	 * 1-b:	fragment if tlen > path mtu
    713   1.78    itojun 	 *
    714   1.78    itojun 	 * 2: if user asks us not to fragment (dontfrag == 1)
    715   1.78    itojun 	 * 2-a:	send as is if tlen <= interface mtu
    716   1.78    itojun 	 * 2-b:	error if tlen > interface mtu
    717   1.78    itojun 	 *
    718   1.78    itojun 	 * 3: if we always need to attach fragment header (alwaysfrag == 1)
    719   1.78    itojun 	 *	always fragment
    720   1.78    itojun 	 *
    721   1.78    itojun 	 * 4: if dontfrag == 1 && alwaysfrag == 1
    722   1.78    itojun 	 *	error, as we cannot handle this conflicting request
    723    1.2    itojun 	 */
    724    1.2    itojun 	tlen = m->m_pkthdr.len;
    725  1.105      yamt 	tso = (m->m_pkthdr.csum_flags & M_CSUM_TSOv6) != 0;
    726   1.97    rpaulo 	if (opt && (opt->ip6po_flags & IP6PO_DONTFRAG))
    727   1.97    rpaulo 		dontfrag = 1;
    728   1.97    rpaulo 	else
    729   1.97    rpaulo 		dontfrag = 0;
    730   1.97    rpaulo 
    731   1.78    itojun 	if (dontfrag && alwaysfrag) {	/* case 4 */
    732   1.78    itojun 		/* conflicting request - can't transmit */
    733   1.78    itojun 		error = EMSGSIZE;
    734   1.78    itojun 		goto bad;
    735   1.78    itojun 	}
    736  1.105      yamt 	if (dontfrag && (!tso && tlen > IN6_LINKMTU(ifp))) {	/* case 2-b */
    737   1.78    itojun 		/*
    738   1.78    itojun 		 * Even if the DONTFRAG option is specified, we cannot send the
    739   1.78    itojun 		 * packet when the data length is larger than the MTU of the
    740   1.78    itojun 		 * outgoing interface.
    741   1.78    itojun 		 * Notify the error by sending IPV6_PATHMTU ancillary data as
    742   1.78    itojun 		 * well as returning an error code (the latter is not described
    743   1.78    itojun 		 * in the API spec.)
    744   1.78    itojun 		 */
    745   1.78    itojun 		u_int32_t mtu32;
    746   1.78    itojun 		struct ip6ctlparam ip6cp;
    747   1.78    itojun 
    748   1.78    itojun 		mtu32 = (u_int32_t)mtu;
    749  1.136    cegger 		memset(&ip6cp, 0, sizeof(ip6cp));
    750   1.78    itojun 		ip6cp.ip6c_cmdarg = (void *)&mtu32;
    751  1.115    dyoung 		pfctlinput2(PRC_MSGSIZE,
    752  1.118    dyoung 		    rtcache_getdst(ro_pmtu), &ip6cp);
    753   1.78    itojun 
    754   1.78    itojun 		error = EMSGSIZE;
    755   1.78    itojun 		goto bad;
    756   1.78    itojun 	}
    757   1.97    rpaulo 
    758   1.78    itojun 	/*
    759   1.78    itojun 	 * transmit packet without fragmentation
    760   1.78    itojun 	 */
    761  1.105      yamt 	if (dontfrag || (!alwaysfrag && (tlen <= mtu || tso))) {
    762  1.105      yamt 		/* case 1-a and 2-a */
    763   1.26    itojun 		struct in6_ifaddr *ia6;
    764   1.89      yamt 		int sw_csum;
    765   1.78    itojun 
    766   1.26    itojun 		ip6 = mtod(m, struct ip6_hdr *);
    767   1.26    itojun 		ia6 = in6_ifawithifp(ifp, &ip6->ip6_src);
    768   1.26    itojun 		if (ia6) {
    769   1.42    itojun 			/* Record statistics for this interface address. */
    770   1.78    itojun 			ia6->ia_ifa.ifa_data.ifad_outbytes += m->m_pkthdr.len;
    771    1.9    itojun 		}
    772   1.89      yamt 
    773   1.89      yamt 		sw_csum = m->m_pkthdr.csum_flags & ~ifp->if_csum_flags_tx;
    774   1.89      yamt 		if ((sw_csum & (M_CSUM_UDPv6|M_CSUM_TCPv6)) != 0) {
    775   1.90      yamt 			if (IN6_NEED_CHECKSUM(ifp,
    776   1.90      yamt 			    sw_csum & (M_CSUM_UDPv6|M_CSUM_TCPv6))) {
    777   1.90      yamt 				in6_delayed_cksum(m);
    778   1.90      yamt 			}
    779   1.89      yamt 			m->m_pkthdr.csum_flags &= ~(M_CSUM_UDPv6|M_CSUM_TCPv6);
    780   1.89      yamt 		}
    781   1.89      yamt 
    782  1.118    dyoung 		KASSERT(dst != NULL);
    783  1.105      yamt 		if (__predict_true(!tso ||
    784  1.105      yamt 		    (ifp->if_capenable & IFCAP_TSOv6) != 0)) {
    785  1.105      yamt 			error = nd6_output(ifp, origifp, m, dst, rt);
    786  1.105      yamt 		} else {
    787  1.105      yamt 			error = ip6_tso_output(ifp, origifp, m, dst, rt);
    788  1.105      yamt 		}
    789    1.2    itojun 		goto done;
    790   1.78    itojun 	}
    791   1.78    itojun 
    792  1.105      yamt 	if (tso) {
    793  1.105      yamt 		error = EINVAL; /* XXX */
    794  1.105      yamt 		goto bad;
    795  1.105      yamt 	}
    796  1.105      yamt 
    797   1.78    itojun 	/*
    798   1.78    itojun 	 * try to fragment the packet.  case 1-b and 3
    799   1.78    itojun 	 */
    800   1.78    itojun 	if (mtu < IPV6_MMTU) {
    801   1.78    itojun 		/* path MTU cannot be less than IPV6_MMTU */
    802    1.2    itojun 		error = EMSGSIZE;
    803    1.9    itojun 		in6_ifstat_inc(ifp, ifs6_out_fragfail);
    804    1.2    itojun 		goto bad;
    805   1.78    itojun 	} else if (ip6->ip6_plen == 0) {
    806   1.78    itojun 		/* jumbo payload cannot be fragmented */
    807    1.2    itojun 		error = EMSGSIZE;
    808    1.9    itojun 		in6_ifstat_inc(ifp, ifs6_out_fragfail);
    809    1.2    itojun 		goto bad;
    810    1.2    itojun 	} else {
    811    1.2    itojun 		struct mbuf **mnext, *m_frgpart;
    812    1.2    itojun 		struct ip6_frag *ip6f;
    813   1.70    itojun 		u_int32_t id = htonl(ip6_randomid());
    814    1.2    itojun 		u_char nextproto;
    815   1.99    rpaulo #if 0				/* see below */
    816   1.78    itojun 		struct ip6ctlparam ip6cp;
    817   1.78    itojun 		u_int32_t mtu32;
    818   1.99    rpaulo #endif
    819    1.2    itojun 
    820    1.2    itojun 		/*
    821    1.2    itojun 		 * Too large for the destination or interface;
    822    1.2    itojun 		 * fragment if possible.
    823    1.2    itojun 		 * Must be able to put at least 8 bytes per fragment.
    824    1.2    itojun 		 */
    825    1.2    itojun 		hlen = unfragpartlen;
    826    1.2    itojun 		if (mtu > IPV6_MAXPACKET)
    827    1.2    itojun 			mtu = IPV6_MAXPACKET;
    828   1.78    itojun 
    829   1.99    rpaulo #if 0
    830   1.99    rpaulo 		/*
    831   1.99    rpaulo 		 * It is believed this code is a leftover from the
    832   1.99    rpaulo 		 * development of the IPV6_RECVPATHMTU sockopt and
    833   1.99    rpaulo 		 * associated work to implement RFC3542.
    834   1.99    rpaulo 		 * It's not entirely clear what the intent of the API
    835   1.99    rpaulo 		 * is at this point, so disable this code for now.
    836   1.99    rpaulo 		 * The IPV6_RECVPATHMTU sockopt and/or IPV6_DONTFRAG
    837   1.99    rpaulo 		 * will send notifications if the application requests.
    838   1.99    rpaulo 		 */
    839   1.99    rpaulo 
    840   1.78    itojun 		/* Notify a proper path MTU to applications. */
    841   1.78    itojun 		mtu32 = (u_int32_t)mtu;
    842  1.136    cegger 		memset(&ip6cp, 0, sizeof(ip6cp));
    843   1.78    itojun 		ip6cp.ip6c_cmdarg = (void *)&mtu32;
    844  1.115    dyoung 		pfctlinput2(PRC_MSGSIZE,
    845  1.118    dyoung 		    rtcache_getdst(ro_pmtu), &ip6cp);
    846   1.99    rpaulo #endif
    847   1.78    itojun 
    848    1.2    itojun 		len = (mtu - hlen - sizeof(struct ip6_frag)) & ~7;
    849    1.2    itojun 		if (len < 8) {
    850    1.2    itojun 			error = EMSGSIZE;
    851    1.9    itojun 			in6_ifstat_inc(ifp, ifs6_out_fragfail);
    852    1.2    itojun 			goto bad;
    853    1.2    itojun 		}
    854    1.2    itojun 
    855    1.2    itojun 		mnext = &m->m_nextpkt;
    856    1.2    itojun 
    857    1.2    itojun 		/*
    858    1.2    itojun 		 * Change the next header field of the last header in the
    859    1.2    itojun 		 * unfragmentable part.
    860    1.2    itojun 		 */
    861    1.2    itojun 		if (exthdrs.ip6e_rthdr) {
    862    1.2    itojun 			nextproto = *mtod(exthdrs.ip6e_rthdr, u_char *);
    863    1.2    itojun 			*mtod(exthdrs.ip6e_rthdr, u_char *) = IPPROTO_FRAGMENT;
    864   1.19    itojun 		} else if (exthdrs.ip6e_dest1) {
    865    1.2    itojun 			nextproto = *mtod(exthdrs.ip6e_dest1, u_char *);
    866    1.2    itojun 			*mtod(exthdrs.ip6e_dest1, u_char *) = IPPROTO_FRAGMENT;
    867   1.19    itojun 		} else if (exthdrs.ip6e_hbh) {
    868    1.2    itojun 			nextproto = *mtod(exthdrs.ip6e_hbh, u_char *);
    869    1.2    itojun 			*mtod(exthdrs.ip6e_hbh, u_char *) = IPPROTO_FRAGMENT;
    870   1.19    itojun 		} else {
    871    1.2    itojun 			nextproto = ip6->ip6_nxt;
    872    1.2    itojun 			ip6->ip6_nxt = IPPROTO_FRAGMENT;
    873    1.2    itojun 		}
    874    1.2    itojun 
    875   1.89      yamt 		if ((m->m_pkthdr.csum_flags & (M_CSUM_UDPv6|M_CSUM_TCPv6))
    876   1.89      yamt 		    != 0) {
    877   1.90      yamt 			if (IN6_NEED_CHECKSUM(ifp,
    878   1.90      yamt 			    m->m_pkthdr.csum_flags &
    879   1.90      yamt 			    (M_CSUM_UDPv6|M_CSUM_TCPv6))) {
    880   1.90      yamt 				in6_delayed_cksum(m);
    881   1.90      yamt 			}
    882   1.89      yamt 			m->m_pkthdr.csum_flags &= ~(M_CSUM_UDPv6|M_CSUM_TCPv6);
    883   1.89      yamt 		}
    884   1.89      yamt 
    885    1.2    itojun 		/*
    886    1.2    itojun 		 * Loop through length of segment after first fragment,
    887   1.42    itojun 		 * make new header and copy data of each part and link onto
    888   1.42    itojun 		 * chain.
    889    1.2    itojun 		 */
    890    1.2    itojun 		m0 = m;
    891    1.2    itojun 		for (off = hlen; off < tlen; off += len) {
    892   1.68    itojun 			struct mbuf *mlast;
    893   1.68    itojun 
    894    1.2    itojun 			MGETHDR(m, M_DONTWAIT, MT_HEADER);
    895    1.2    itojun 			if (!m) {
    896    1.2    itojun 				error = ENOBUFS;
    897  1.128   thorpej 				IP6_STATINC(IP6_STAT_ODROPPED);
    898    1.2    itojun 				goto sendorfree;
    899    1.2    itojun 			}
    900   1.78    itojun 			m->m_pkthdr.rcvif = NULL;
    901    1.2    itojun 			m->m_flags = m0->m_flags & M_COPYFLAGS;
    902    1.2    itojun 			*mnext = m;
    903    1.2    itojun 			mnext = &m->m_nextpkt;
    904    1.2    itojun 			m->m_data += max_linkhdr;
    905    1.2    itojun 			mhip6 = mtod(m, struct ip6_hdr *);
    906    1.2    itojun 			*mhip6 = *ip6;
    907    1.2    itojun 			m->m_len = sizeof(*mhip6);
    908   1.42    itojun 			error = ip6_insertfraghdr(m0, m, hlen, &ip6f);
    909   1.42    itojun 			if (error) {
    910  1.128   thorpej 				IP6_STATINC(IP6_STAT_ODROPPED);
    911    1.2    itojun 				goto sendorfree;
    912    1.2    itojun 			}
    913   1.69    itojun 			ip6f->ip6f_offlg = htons((u_int16_t)((off - hlen) & ~7));
    914    1.2    itojun 			if (off + len >= tlen)
    915    1.2    itojun 				len = tlen - off;
    916    1.2    itojun 			else
    917    1.2    itojun 				ip6f->ip6f_offlg |= IP6F_MORE_FRAG;
    918   1.69    itojun 			mhip6->ip6_plen = htons((u_int16_t)(len + hlen +
    919   1.49    itojun 			    sizeof(*ip6f) - sizeof(struct ip6_hdr)));
    920    1.2    itojun 			if ((m_frgpart = m_copy(m0, off, len)) == 0) {
    921    1.2    itojun 				error = ENOBUFS;
    922  1.128   thorpej 				IP6_STATINC(IP6_STAT_ODROPPED);
    923    1.2    itojun 				goto sendorfree;
    924    1.2    itojun 			}
    925   1.68    itojun 			for (mlast = m; mlast->m_next; mlast = mlast->m_next)
    926   1.68    itojun 				;
    927   1.68    itojun 			mlast->m_next = m_frgpart;
    928    1.2    itojun 			m->m_pkthdr.len = len + hlen + sizeof(*ip6f);
    929  1.142  christos 			m->m_pkthdr.rcvif = NULL;
    930    1.2    itojun 			ip6f->ip6f_reserved = 0;
    931    1.2    itojun 			ip6f->ip6f_ident = id;
    932    1.2    itojun 			ip6f->ip6f_nxt = nextproto;
    933  1.128   thorpej 			IP6_STATINC(IP6_STAT_OFRAGMENTS);
    934    1.9    itojun 			in6_ifstat_inc(ifp, ifs6_out_fragcreat);
    935    1.2    itojun 		}
    936    1.9    itojun 
    937    1.9    itojun 		in6_ifstat_inc(ifp, ifs6_out_fragok);
    938    1.2    itojun 	}
    939    1.2    itojun 
    940    1.2    itojun 	/*
    941    1.2    itojun 	 * Remove leading garbages.
    942    1.2    itojun 	 */
    943    1.2    itojun sendorfree:
    944    1.2    itojun 	m = m0->m_nextpkt;
    945    1.2    itojun 	m0->m_nextpkt = 0;
    946    1.2    itojun 	m_freem(m0);
    947    1.2    itojun 	for (m0 = m; m; m = m0) {
    948    1.2    itojun 		m0 = m->m_nextpkt;
    949    1.2    itojun 		m->m_nextpkt = 0;
    950    1.2    itojun 		if (error == 0) {
    951   1.26    itojun 			struct in6_ifaddr *ia6;
    952   1.26    itojun 			ip6 = mtod(m, struct ip6_hdr *);
    953   1.26    itojun 			ia6 = in6_ifawithifp(ifp, &ip6->ip6_src);
    954   1.26    itojun 			if (ia6) {
    955   1.42    itojun 				/*
    956   1.42    itojun 				 * Record statistics for this interface
    957   1.42    itojun 				 * address.
    958   1.42    itojun 				 */
    959   1.26    itojun 				ia6->ia_ifa.ifa_data.ifad_outbytes +=
    960   1.78    itojun 				    m->m_pkthdr.len;
    961    1.9    itojun 			}
    962  1.118    dyoung 			KASSERT(dst != NULL);
    963   1.97    rpaulo 			error = nd6_output(ifp, origifp, m, dst, rt);
    964   1.19    itojun 		} else
    965    1.2    itojun 			m_freem(m);
    966    1.2    itojun 	}
    967    1.2    itojun 
    968    1.2    itojun 	if (error == 0)
    969  1.128   thorpej 		IP6_STATINC(IP6_STAT_FRAGMENTED);
    970    1.2    itojun 
    971    1.2    itojun done:
    972  1.124    dyoung 	rtcache_free(&ip6route);
    973    1.2    itojun 
    974  1.114  degroote #ifdef FAST_IPSEC
    975  1.114  degroote 	if (sp != NULL)
    976  1.114  degroote 		KEY_FREESP(&sp);
    977  1.114  degroote #endif /* FAST_IPSEC */
    978  1.114  degroote 
    979    1.2    itojun 
    980   1.57    itojun 	return (error);
    981    1.2    itojun 
    982    1.2    itojun freehdrs:
    983    1.2    itojun 	m_freem(exthdrs.ip6e_hbh);	/* m_freem will check if mbuf is 0 */
    984    1.2    itojun 	m_freem(exthdrs.ip6e_dest1);
    985    1.2    itojun 	m_freem(exthdrs.ip6e_rthdr);
    986    1.2    itojun 	m_freem(exthdrs.ip6e_dest2);
    987   1.48    itojun 	/* FALLTHROUGH */
    988    1.2    itojun bad:
    989    1.2    itojun 	m_freem(m);
    990    1.2    itojun 	goto done;
    991  1.118    dyoung badscope:
    992  1.128   thorpej 	IP6_STATINC(IP6_STAT_BADSCOPE);
    993  1.118    dyoung 	in6_ifstat_inc(origifp, ifs6_out_discard);
    994  1.118    dyoung 	if (error == 0)
    995  1.118    dyoung 		error = EHOSTUNREACH; /* XXX */
    996  1.118    dyoung 	goto bad;
    997    1.2    itojun }
    998    1.2    itojun 
    999    1.2    itojun static int
   1000  1.119  christos ip6_copyexthdr(struct mbuf **mp, void *hdr, int hlen)
   1001    1.2    itojun {
   1002    1.2    itojun 	struct mbuf *m;
   1003    1.2    itojun 
   1004    1.2    itojun 	if (hlen > MCLBYTES)
   1005   1.57    itojun 		return (ENOBUFS); /* XXX */
   1006    1.2    itojun 
   1007    1.2    itojun 	MGET(m, M_DONTWAIT, MT_DATA);
   1008    1.2    itojun 	if (!m)
   1009   1.57    itojun 		return (ENOBUFS);
   1010    1.2    itojun 
   1011    1.2    itojun 	if (hlen > MLEN) {
   1012    1.2    itojun 		MCLGET(m, M_DONTWAIT);
   1013    1.2    itojun 		if ((m->m_flags & M_EXT) == 0) {
   1014    1.2    itojun 			m_free(m);
   1015   1.57    itojun 			return (ENOBUFS);
   1016    1.2    itojun 		}
   1017    1.2    itojun 	}
   1018    1.2    itojun 	m->m_len = hlen;
   1019    1.2    itojun 	if (hdr)
   1020  1.117  christos 		bcopy(hdr, mtod(m, void *), hlen);
   1021    1.2    itojun 
   1022    1.2    itojun 	*mp = m;
   1023   1.57    itojun 	return (0);
   1024    1.2    itojun }
   1025    1.2    itojun 
   1026    1.2    itojun /*
   1027   1.89      yamt  * Process a delayed payload checksum calculation.
   1028   1.89      yamt  */
   1029   1.89      yamt void
   1030   1.89      yamt in6_delayed_cksum(struct mbuf *m)
   1031   1.89      yamt {
   1032   1.89      yamt 	uint16_t csum, offset;
   1033   1.89      yamt 
   1034   1.89      yamt 	KASSERT((m->m_pkthdr.csum_flags & (M_CSUM_UDPv6|M_CSUM_TCPv6)) != 0);
   1035   1.89      yamt 	KASSERT((~m->m_pkthdr.csum_flags & (M_CSUM_UDPv6|M_CSUM_TCPv6)) != 0);
   1036   1.89      yamt 	KASSERT((m->m_pkthdr.csum_flags
   1037   1.89      yamt 	    & (M_CSUM_UDPv4|M_CSUM_TCPv4|M_CSUM_TSOv4)) == 0);
   1038   1.89      yamt 
   1039   1.89      yamt 	offset = M_CSUM_DATA_IPv6_HL(m->m_pkthdr.csum_data);
   1040   1.89      yamt 	csum = in6_cksum(m, 0, offset, m->m_pkthdr.len - offset);
   1041   1.89      yamt 	if (csum == 0 && (m->m_pkthdr.csum_flags & M_CSUM_UDPv6) != 0) {
   1042   1.89      yamt 		csum = 0xffff;
   1043   1.89      yamt 	}
   1044   1.89      yamt 
   1045   1.89      yamt 	offset += M_CSUM_DATA_IPv6_OFFSET(m->m_pkthdr.csum_data);
   1046   1.89      yamt 	if ((offset + sizeof(csum)) > m->m_len) {
   1047   1.89      yamt 		m_copyback(m, offset, sizeof(csum), &csum);
   1048   1.89      yamt 	} else {
   1049  1.117  christos 		*(uint16_t *)(mtod(m, char *) + offset) = csum;
   1050   1.89      yamt 	}
   1051   1.89      yamt }
   1052   1.89      yamt 
   1053   1.89      yamt /*
   1054   1.19    itojun  * Insert jumbo payload option.
   1055    1.2    itojun  */
   1056    1.2    itojun static int
   1057  1.119  christos ip6_insert_jumboopt(struct ip6_exthdrs *exthdrs, u_int32_t plen)
   1058    1.2    itojun {
   1059    1.2    itojun 	struct mbuf *mopt;
   1060   1.56    itojun 	u_int8_t *optbuf;
   1061   1.25    itojun 	u_int32_t v;
   1062    1.2    itojun 
   1063    1.2    itojun #define JUMBOOPTLEN	8	/* length of jumbo payload option and padding */
   1064    1.2    itojun 
   1065    1.2    itojun 	/*
   1066    1.2    itojun 	 * If there is no hop-by-hop options header, allocate new one.
   1067    1.2    itojun 	 * If there is one but it doesn't have enough space to store the
   1068    1.2    itojun 	 * jumbo payload option, allocate a cluster to store the whole options.
   1069    1.2    itojun 	 * Otherwise, use it to store the options.
   1070    1.2    itojun 	 */
   1071    1.2    itojun 	if (exthdrs->ip6e_hbh == 0) {
   1072    1.2    itojun 		MGET(mopt, M_DONTWAIT, MT_DATA);
   1073    1.2    itojun 		if (mopt == 0)
   1074   1.57    itojun 			return (ENOBUFS);
   1075    1.2    itojun 		mopt->m_len = JUMBOOPTLEN;
   1076   1.56    itojun 		optbuf = mtod(mopt, u_int8_t *);
   1077    1.2    itojun 		optbuf[1] = 0;	/* = ((JUMBOOPTLEN) >> 3) - 1 */
   1078    1.2    itojun 		exthdrs->ip6e_hbh = mopt;
   1079   1.19    itojun 	} else {
   1080    1.2    itojun 		struct ip6_hbh *hbh;
   1081    1.2    itojun 
   1082    1.2    itojun 		mopt = exthdrs->ip6e_hbh;
   1083    1.2    itojun 		if (M_TRAILINGSPACE(mopt) < JUMBOOPTLEN) {
   1084   1.25    itojun 			/*
   1085   1.25    itojun 			 * XXX assumption:
   1086   1.25    itojun 			 * - exthdrs->ip6e_hbh is not referenced from places
   1087   1.25    itojun 			 *   other than exthdrs.
   1088   1.25    itojun 			 * - exthdrs->ip6e_hbh is not an mbuf chain.
   1089   1.25    itojun 			 */
   1090    1.2    itojun 			int oldoptlen = mopt->m_len;
   1091   1.25    itojun 			struct mbuf *n;
   1092    1.2    itojun 
   1093   1.25    itojun 			/*
   1094   1.25    itojun 			 * XXX: give up if the whole (new) hbh header does
   1095   1.25    itojun 			 * not fit even in an mbuf cluster.
   1096   1.25    itojun 			 */
   1097   1.25    itojun 			if (oldoptlen + JUMBOOPTLEN > MCLBYTES)
   1098   1.57    itojun 				return (ENOBUFS);
   1099    1.2    itojun 
   1100   1.25    itojun 			/*
   1101   1.25    itojun 			 * As a consequence, we must always prepare a cluster
   1102   1.25    itojun 			 * at this point.
   1103   1.25    itojun 			 */
   1104   1.25    itojun 			MGET(n, M_DONTWAIT, MT_DATA);
   1105   1.25    itojun 			if (n) {
   1106   1.25    itojun 				MCLGET(n, M_DONTWAIT);
   1107   1.25    itojun 				if ((n->m_flags & M_EXT) == 0) {
   1108   1.25    itojun 					m_freem(n);
   1109   1.25    itojun 					n = NULL;
   1110   1.25    itojun 				}
   1111   1.25    itojun 			}
   1112   1.25    itojun 			if (!n)
   1113   1.57    itojun 				return (ENOBUFS);
   1114   1.25    itojun 			n->m_len = oldoptlen + JUMBOOPTLEN;
   1115  1.117  christos 			bcopy(mtod(mopt, void *), mtod(n, void *),
   1116   1.78    itojun 			    oldoptlen);
   1117   1.56    itojun 			optbuf = mtod(n, u_int8_t *) + oldoptlen;
   1118   1.25    itojun 			m_freem(mopt);
   1119   1.33    itojun 			mopt = exthdrs->ip6e_hbh = n;
   1120   1.19    itojun 		} else {
   1121   1.56    itojun 			optbuf = mtod(mopt, u_int8_t *) + mopt->m_len;
   1122    1.2    itojun 			mopt->m_len += JUMBOOPTLEN;
   1123    1.2    itojun 		}
   1124    1.2    itojun 		optbuf[0] = IP6OPT_PADN;
   1125   1.58    itojun 		optbuf[1] = 0;
   1126    1.2    itojun 
   1127    1.2    itojun 		/*
   1128    1.2    itojun 		 * Adjust the header length according to the pad and
   1129    1.2    itojun 		 * the jumbo payload option.
   1130    1.2    itojun 		 */
   1131    1.2    itojun 		hbh = mtod(mopt, struct ip6_hbh *);
   1132    1.2    itojun 		hbh->ip6h_len += (JUMBOOPTLEN >> 3);
   1133    1.2    itojun 	}
   1134    1.2    itojun 
   1135    1.2    itojun 	/* fill in the option. */
   1136    1.2    itojun 	optbuf[2] = IP6OPT_JUMBO;
   1137    1.2    itojun 	optbuf[3] = 4;
   1138   1.25    itojun 	v = (u_int32_t)htonl(plen + JUMBOOPTLEN);
   1139   1.25    itojun 	bcopy(&v, &optbuf[4], sizeof(u_int32_t));
   1140    1.2    itojun 
   1141    1.2    itojun 	/* finally, adjust the packet header length */
   1142    1.2    itojun 	exthdrs->ip6e_ip6->m_pkthdr.len += JUMBOOPTLEN;
   1143    1.2    itojun 
   1144   1.57    itojun 	return (0);
   1145    1.2    itojun #undef JUMBOOPTLEN
   1146    1.2    itojun }
   1147    1.2    itojun 
   1148    1.2    itojun /*
   1149    1.2    itojun  * Insert fragment header and copy unfragmentable header portions.
   1150    1.2    itojun  */
   1151    1.2    itojun static int
   1152  1.119  christos ip6_insertfraghdr(struct mbuf *m0, struct mbuf *m, int hlen,
   1153  1.119  christos 	struct ip6_frag **frghdrp)
   1154    1.2    itojun {
   1155    1.2    itojun 	struct mbuf *n, *mlast;
   1156    1.2    itojun 
   1157    1.2    itojun 	if (hlen > sizeof(struct ip6_hdr)) {
   1158    1.2    itojun 		n = m_copym(m0, sizeof(struct ip6_hdr),
   1159   1.49    itojun 		    hlen - sizeof(struct ip6_hdr), M_DONTWAIT);
   1160    1.2    itojun 		if (n == 0)
   1161   1.57    itojun 			return (ENOBUFS);
   1162    1.2    itojun 		m->m_next = n;
   1163   1.19    itojun 	} else
   1164    1.2    itojun 		n = m;
   1165    1.2    itojun 
   1166    1.2    itojun 	/* Search for the last mbuf of unfragmentable part. */
   1167    1.2    itojun 	for (mlast = n; mlast->m_next; mlast = mlast->m_next)
   1168    1.2    itojun 		;
   1169    1.2    itojun 
   1170    1.2    itojun 	if ((mlast->m_flags & M_EXT) == 0 &&
   1171   1.22    itojun 	    M_TRAILINGSPACE(mlast) >= sizeof(struct ip6_frag)) {
   1172    1.2    itojun 		/* use the trailing space of the last mbuf for the fragment hdr */
   1173  1.117  christos 		*frghdrp = (struct ip6_frag *)(mtod(mlast, char *) +
   1174   1.49    itojun 		    mlast->m_len);
   1175    1.2    itojun 		mlast->m_len += sizeof(struct ip6_frag);
   1176    1.2    itojun 		m->m_pkthdr.len += sizeof(struct ip6_frag);
   1177   1.19    itojun 	} else {
   1178    1.2    itojun 		/* allocate a new mbuf for the fragment header */
   1179    1.2    itojun 		struct mbuf *mfrg;
   1180    1.2    itojun 
   1181    1.2    itojun 		MGET(mfrg, M_DONTWAIT, MT_DATA);
   1182    1.2    itojun 		if (mfrg == 0)
   1183   1.57    itojun 			return (ENOBUFS);
   1184    1.2    itojun 		mfrg->m_len = sizeof(struct ip6_frag);
   1185    1.2    itojun 		*frghdrp = mtod(mfrg, struct ip6_frag *);
   1186    1.2    itojun 		mlast->m_next = mfrg;
   1187    1.2    itojun 	}
   1188    1.2    itojun 
   1189   1.57    itojun 	return (0);
   1190   1.45    itojun }
   1191   1.45    itojun 
   1192   1.88    itojun static int
   1193  1.118    dyoung ip6_getpmtu(struct route *ro_pmtu, struct route *ro, struct ifnet *ifp,
   1194  1.115    dyoung     const struct in6_addr *dst, u_long *mtup, int *alwaysfragp)
   1195   1.45    itojun {
   1196  1.124    dyoung 	struct rtentry *rt;
   1197   1.45    itojun 	u_int32_t mtu = 0;
   1198   1.78    itojun 	int alwaysfrag = 0;
   1199   1.45    itojun 	int error = 0;
   1200   1.45    itojun 
   1201   1.45    itojun 	if (ro_pmtu != ro) {
   1202  1.118    dyoung 		union {
   1203  1.118    dyoung 			struct sockaddr		dst;
   1204  1.118    dyoung 			struct sockaddr_in6	dst6;
   1205  1.118    dyoung 		} u;
   1206  1.118    dyoung 
   1207   1.45    itojun 		/* The first hop and the final destination may differ. */
   1208  1.118    dyoung 		sockaddr_in6_init(&u.dst6, dst, 0, 0, 0);
   1209  1.126    dyoung 		rt = rtcache_lookup(ro_pmtu, &u.dst);
   1210  1.126    dyoung 	} else
   1211  1.126    dyoung 		rt = rtcache_validate(ro_pmtu);
   1212  1.126    dyoung 	if (rt != NULL) {
   1213   1.45    itojun 		u_int32_t ifmtu;
   1214   1.45    itojun 
   1215   1.45    itojun 		if (ifp == NULL)
   1216  1.124    dyoung 			ifp = rt->rt_ifp;
   1217   1.45    itojun 		ifmtu = IN6_LINKMTU(ifp);
   1218  1.124    dyoung 		mtu = rt->rt_rmx.rmx_mtu;
   1219   1.46    itojun 		if (mtu == 0)
   1220   1.46    itojun 			mtu = ifmtu;
   1221   1.78    itojun 		else if (mtu < IPV6_MMTU) {
   1222   1.78    itojun 			/*
   1223   1.78    itojun 			 * RFC2460 section 5, last paragraph:
   1224   1.78    itojun 			 * if we record ICMPv6 too big message with
   1225   1.78    itojun 			 * mtu < IPV6_MMTU, transmit packets sized IPV6_MMTU
   1226   1.78    itojun 			 * or smaller, with fragment header attached.
   1227   1.78    itojun 			 * (fragment header is needed regardless from the
   1228   1.78    itojun 			 * packet size, for translators to identify packets)
   1229   1.78    itojun 			 */
   1230   1.78    itojun 			alwaysfrag = 1;
   1231   1.78    itojun 			mtu = IPV6_MMTU;
   1232   1.78    itojun 		} else if (mtu > ifmtu) {
   1233   1.45    itojun 			/*
   1234   1.45    itojun 			 * The MTU on the route is larger than the MTU on
   1235   1.45    itojun 			 * the interface!  This shouldn't happen, unless the
   1236   1.45    itojun 			 * MTU of the interface has been changed after the
   1237   1.45    itojun 			 * interface was brought up.  Change the MTU in the
   1238   1.45    itojun 			 * route to match the interface MTU (as long as the
   1239   1.45    itojun 			 * field isn't locked).
   1240   1.45    itojun 			 */
   1241   1.45    itojun 			mtu = ifmtu;
   1242  1.124    dyoung 			if (!(rt->rt_rmx.rmx_locks & RTV_MTU))
   1243  1.124    dyoung 				rt->rt_rmx.rmx_mtu = mtu;
   1244   1.45    itojun 		}
   1245   1.45    itojun 	} else if (ifp) {
   1246   1.45    itojun 		mtu = IN6_LINKMTU(ifp);
   1247   1.45    itojun 	} else
   1248   1.45    itojun 		error = EHOSTUNREACH; /* XXX */
   1249   1.45    itojun 
   1250   1.45    itojun 	*mtup = mtu;
   1251   1.78    itojun 	if (alwaysfragp)
   1252   1.78    itojun 		*alwaysfragp = alwaysfrag;
   1253   1.57    itojun 	return (error);
   1254    1.2    itojun }
   1255    1.2    itojun 
   1256    1.2    itojun /*
   1257    1.2    itojun  * IP6 socket option processing.
   1258    1.2    itojun  */
   1259    1.2    itojun int
   1260  1.130    plunky ip6_ctloutput(int op, struct socket *so, struct sockopt *sopt)
   1261    1.2    itojun {
   1262  1.138      elad 	int optdatalen, uproto;
   1263   1.97    rpaulo 	void *optdata;
   1264   1.31    itojun 	struct in6pcb *in6p = sotoin6pcb(so);
   1265   1.97    rpaulo 	int error, optval;
   1266  1.130    plunky 	int level, optname;
   1267  1.130    plunky 
   1268  1.130    plunky 	KASSERT(sopt != NULL);
   1269  1.130    plunky 
   1270  1.130    plunky 	level = sopt->sopt_level;
   1271  1.130    plunky 	optname = sopt->sopt_name;
   1272    1.2    itojun 
   1273   1.97    rpaulo 	error = optval = 0;
   1274   1.97    rpaulo 	uproto = (int)so->so_proto->pr_protocol;
   1275   1.97    rpaulo 
   1276  1.121    dyoung 	if (level != IPPROTO_IPV6) {
   1277  1.121    dyoung 		return ENOPROTOOPT;
   1278  1.121    dyoung 	}
   1279  1.121    dyoung 	switch (op) {
   1280  1.121    dyoung 	case PRCO_SETOPT:
   1281  1.121    dyoung 		switch (optname) {
   1282   1.97    rpaulo #ifdef RFC2292
   1283  1.121    dyoung 		case IPV6_2292PKTOPTIONS:
   1284  1.130    plunky 			error = ip6_pcbopts(&in6p->in6p_outputopts, so, sopt);
   1285  1.121    dyoung 			break;
   1286  1.121    dyoung #endif
   1287  1.121    dyoung 
   1288  1.121    dyoung 		/*
   1289  1.121    dyoung 		 * Use of some Hop-by-Hop options or some
   1290  1.121    dyoung 		 * Destination options, might require special
   1291  1.121    dyoung 		 * privilege.  That is, normal applications
   1292  1.121    dyoung 		 * (without special privilege) might be forbidden
   1293  1.121    dyoung 		 * from setting certain options in outgoing packets,
   1294  1.121    dyoung 		 * and might never see certain options in received
   1295  1.121    dyoung 		 * packets. [RFC 2292 Section 6]
   1296  1.121    dyoung 		 * KAME specific note:
   1297  1.121    dyoung 		 *  KAME prevents non-privileged users from sending or
   1298  1.121    dyoung 		 *  receiving ANY hbh/dst options in order to avoid
   1299  1.121    dyoung 		 *  overhead of parsing options in the kernel.
   1300  1.121    dyoung 		 */
   1301  1.121    dyoung 		case IPV6_RECVHOPOPTS:
   1302  1.121    dyoung 		case IPV6_RECVDSTOPTS:
   1303  1.121    dyoung 		case IPV6_RECVRTHDRDSTOPTS:
   1304  1.146      elad 			error = kauth_authorize_network(kauth_cred_get(),
   1305  1.146      elad 			    KAUTH_NETWORK_IPV6, KAUTH_REQ_NETWORK_IPV6_HOPBYHOP,
   1306  1.146      elad 			    NULL, NULL, NULL);
   1307  1.138      elad 			if (error)
   1308  1.121    dyoung 				break;
   1309  1.121    dyoung 			/* FALLTHROUGH */
   1310  1.121    dyoung 		case IPV6_UNICAST_HOPS:
   1311  1.121    dyoung 		case IPV6_HOPLIMIT:
   1312  1.121    dyoung 		case IPV6_FAITH:
   1313  1.121    dyoung 
   1314  1.121    dyoung 		case IPV6_RECVPKTINFO:
   1315  1.121    dyoung 		case IPV6_RECVHOPLIMIT:
   1316  1.121    dyoung 		case IPV6_RECVRTHDR:
   1317  1.121    dyoung 		case IPV6_RECVPATHMTU:
   1318  1.121    dyoung 		case IPV6_RECVTCLASS:
   1319  1.121    dyoung 		case IPV6_V6ONLY:
   1320  1.130    plunky 			error = sockopt_getint(sopt, &optval);
   1321  1.130    plunky 			if (error)
   1322   1.97    rpaulo 				break;
   1323  1.121    dyoung 			switch (optname) {
   1324    1.2    itojun 			case IPV6_UNICAST_HOPS:
   1325  1.121    dyoung 				if (optval < -1 || optval >= 256)
   1326    1.2    itojun 					error = EINVAL;
   1327  1.121    dyoung 				else {
   1328  1.121    dyoung 					/* -1 = kernel default */
   1329  1.121    dyoung 					in6p->in6p_hops = optval;
   1330   1.37    itojun 				}
   1331  1.121    dyoung 				break;
   1332    1.2    itojun #define OPTSET(bit) \
   1333   1.49    itojun do { \
   1334  1.121    dyoung if (optval) \
   1335  1.121    dyoung 	in6p->in6p_flags |= (bit); \
   1336  1.121    dyoung else \
   1337  1.121    dyoung 	in6p->in6p_flags &= ~(bit); \
   1338   1.60     perry } while (/*CONSTCOND*/ 0)
   1339    1.2    itojun 
   1340   1.97    rpaulo #ifdef RFC2292
   1341   1.97    rpaulo #define OPTSET2292(bit) 			\
   1342   1.97    rpaulo do { 						\
   1343  1.121    dyoung in6p->in6p_flags |= IN6P_RFC2292; 	\
   1344  1.121    dyoung if (optval) 				\
   1345  1.121    dyoung 	in6p->in6p_flags |= (bit); 	\
   1346  1.121    dyoung else 					\
   1347  1.121    dyoung 	in6p->in6p_flags &= ~(bit); 	\
   1348   1.97    rpaulo } while (/*CONSTCOND*/ 0)
   1349   1.97    rpaulo #endif
   1350   1.97    rpaulo 
   1351   1.97    rpaulo #define OPTBIT(bit) (in6p->in6p_flags & (bit) ? 1 : 0)
   1352    1.2    itojun 
   1353  1.121    dyoung 			case IPV6_RECVPKTINFO:
   1354   1.97    rpaulo #ifdef RFC2292
   1355  1.121    dyoung 				/* cannot mix with RFC2292 */
   1356  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1357  1.121    dyoung 					error = EINVAL;
   1358  1.121    dyoung 					break;
   1359  1.121    dyoung 				}
   1360   1.97    rpaulo #endif
   1361  1.121    dyoung 				OPTSET(IN6P_PKTINFO);
   1362  1.121    dyoung 				break;
   1363  1.121    dyoung 
   1364  1.121    dyoung 			case IPV6_HOPLIMIT:
   1365  1.121    dyoung 			{
   1366  1.121    dyoung 				struct ip6_pktopts **optp;
   1367    1.2    itojun 
   1368  1.121    dyoung #ifdef RFC2292
   1369  1.121    dyoung 				/* cannot mix with RFC2292 */
   1370  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1371  1.121    dyoung 					error = EINVAL;
   1372   1.37    itojun 					break;
   1373   1.97    rpaulo 				}
   1374  1.121    dyoung #endif
   1375  1.121    dyoung 				optp = &in6p->in6p_outputopts;
   1376  1.121    dyoung 				error = ip6_pcbopt(IPV6_HOPLIMIT,
   1377  1.121    dyoung 						   (u_char *)&optval,
   1378  1.121    dyoung 						   sizeof(optval),
   1379  1.121    dyoung 						   optp,
   1380  1.138      elad 						   kauth_cred_get(), uproto);
   1381  1.121    dyoung 				break;
   1382  1.121    dyoung 			}
   1383    1.2    itojun 
   1384  1.121    dyoung 			case IPV6_RECVHOPLIMIT:
   1385   1.97    rpaulo #ifdef RFC2292
   1386  1.121    dyoung 				/* cannot mix with RFC2292 */
   1387  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1388  1.121    dyoung 					error = EINVAL;
   1389  1.121    dyoung 					break;
   1390  1.121    dyoung 				}
   1391   1.97    rpaulo #endif
   1392  1.121    dyoung 				OPTSET(IN6P_HOPLIMIT);
   1393  1.121    dyoung 				break;
   1394    1.2    itojun 
   1395  1.121    dyoung 			case IPV6_RECVHOPOPTS:
   1396   1.97    rpaulo #ifdef RFC2292
   1397  1.121    dyoung 				/* cannot mix with RFC2292 */
   1398  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1399  1.121    dyoung 					error = EINVAL;
   1400  1.121    dyoung 					break;
   1401  1.121    dyoung 				}
   1402   1.97    rpaulo #endif
   1403  1.121    dyoung 				OPTSET(IN6P_HOPOPTS);
   1404  1.121    dyoung 				break;
   1405    1.2    itojun 
   1406  1.121    dyoung 			case IPV6_RECVDSTOPTS:
   1407   1.97    rpaulo #ifdef RFC2292
   1408  1.121    dyoung 				/* cannot mix with RFC2292 */
   1409  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1410  1.121    dyoung 					error = EINVAL;
   1411  1.121    dyoung 					break;
   1412  1.121    dyoung 				}
   1413   1.97    rpaulo #endif
   1414  1.121    dyoung 				OPTSET(IN6P_DSTOPTS);
   1415  1.121    dyoung 				break;
   1416    1.2    itojun 
   1417  1.121    dyoung 			case IPV6_RECVRTHDRDSTOPTS:
   1418   1.97    rpaulo #ifdef RFC2292
   1419  1.121    dyoung 				/* cannot mix with RFC2292 */
   1420  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1421  1.121    dyoung 					error = EINVAL;
   1422  1.121    dyoung 					break;
   1423  1.121    dyoung 				}
   1424   1.97    rpaulo #endif
   1425  1.121    dyoung 				OPTSET(IN6P_RTHDRDSTOPTS);
   1426  1.121    dyoung 				break;
   1427   1.97    rpaulo 
   1428  1.121    dyoung 			case IPV6_RECVRTHDR:
   1429   1.97    rpaulo #ifdef RFC2292
   1430  1.121    dyoung 				/* cannot mix with RFC2292 */
   1431  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1432  1.121    dyoung 					error = EINVAL;
   1433  1.121    dyoung 					break;
   1434  1.121    dyoung 				}
   1435   1.97    rpaulo #endif
   1436  1.121    dyoung 				OPTSET(IN6P_RTHDR);
   1437  1.121    dyoung 				break;
   1438  1.121    dyoung 
   1439  1.121    dyoung 			case IPV6_FAITH:
   1440  1.121    dyoung 				OPTSET(IN6P_FAITH);
   1441  1.121    dyoung 				break;
   1442    1.2    itojun 
   1443  1.121    dyoung 			case IPV6_RECVPATHMTU:
   1444  1.121    dyoung 				/*
   1445  1.121    dyoung 				 * We ignore this option for TCP
   1446  1.121    dyoung 				 * sockets.
   1447  1.121    dyoung 				 * (RFC3542 leaves this case
   1448  1.121    dyoung 				 * unspecified.)
   1449  1.121    dyoung 				 */
   1450  1.121    dyoung 				if (uproto != IPPROTO_TCP)
   1451  1.121    dyoung 					OPTSET(IN6P_MTU);
   1452  1.121    dyoung 				break;
   1453   1.10    itojun 
   1454  1.121    dyoung 			case IPV6_V6ONLY:
   1455  1.121    dyoung 				/*
   1456  1.121    dyoung 				 * make setsockopt(IPV6_V6ONLY)
   1457  1.121    dyoung 				 * available only prior to bind(2).
   1458  1.121    dyoung 				 * see ipng mailing list, Jun 22 2001.
   1459  1.121    dyoung 				 */
   1460  1.121    dyoung 				if (in6p->in6p_lport ||
   1461  1.121    dyoung 				    !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) {
   1462  1.121    dyoung 					error = EINVAL;
   1463   1.83    itojun 					break;
   1464  1.121    dyoung 				}
   1465   1.37    itojun #ifdef INET6_BINDV6ONLY
   1466  1.121    dyoung 				if (!optval)
   1467  1.121    dyoung 					error = EINVAL;
   1468   1.37    itojun #else
   1469  1.121    dyoung 				OPTSET(IN6P_IPV6_V6ONLY);
   1470   1.10    itojun #endif
   1471  1.121    dyoung 				break;
   1472  1.121    dyoung 			case IPV6_RECVTCLASS:
   1473  1.121    dyoung #ifdef RFC2292
   1474  1.121    dyoung 				/* cannot mix with RFC2292 XXX */
   1475  1.121    dyoung 				if (OPTBIT(IN6P_RFC2292)) {
   1476  1.121    dyoung 					error = EINVAL;
   1477   1.37    itojun 					break;
   1478  1.121    dyoung 				}
   1479   1.97    rpaulo #endif
   1480  1.121    dyoung 				OPTSET(IN6P_TCLASS);
   1481  1.121    dyoung 				break;
   1482  1.121    dyoung 
   1483  1.121    dyoung 			}
   1484  1.121    dyoung 			break;
   1485  1.121    dyoung 
   1486  1.121    dyoung 		case IPV6_OTCLASS:
   1487  1.121    dyoung 		{
   1488  1.121    dyoung 			struct ip6_pktopts **optp;
   1489  1.121    dyoung 			u_int8_t tclass;
   1490   1.97    rpaulo 
   1491  1.130    plunky 			error = sockopt_get(sopt, &tclass, sizeof(tclass));
   1492  1.130    plunky 			if (error)
   1493   1.97    rpaulo 				break;
   1494  1.121    dyoung 			optp = &in6p->in6p_outputopts;
   1495  1.121    dyoung 			error = ip6_pcbopt(optname,
   1496  1.121    dyoung 					   (u_char *)&tclass,
   1497  1.121    dyoung 					   sizeof(tclass),
   1498  1.121    dyoung 					   optp,
   1499  1.138      elad 					   kauth_cred_get(), uproto);
   1500  1.121    dyoung 			break;
   1501  1.121    dyoung 		}
   1502   1.97    rpaulo 
   1503  1.121    dyoung 		case IPV6_TCLASS:
   1504  1.121    dyoung 		case IPV6_DONTFRAG:
   1505  1.121    dyoung 		case IPV6_USE_MIN_MTU:
   1506  1.130    plunky 			error = sockopt_getint(sopt, &optval);
   1507  1.130    plunky 			if (error)
   1508  1.121    dyoung 				break;
   1509   1.97    rpaulo 			{
   1510   1.97    rpaulo 				struct ip6_pktopts **optp;
   1511   1.97    rpaulo 				optp = &in6p->in6p_outputopts;
   1512   1.97    rpaulo 				error = ip6_pcbopt(optname,
   1513  1.121    dyoung 						   (u_char *)&optval,
   1514  1.121    dyoung 						   sizeof(optval),
   1515   1.97    rpaulo 						   optp,
   1516  1.138      elad 						   kauth_cred_get(), uproto);
   1517   1.97    rpaulo 				break;
   1518   1.97    rpaulo 			}
   1519   1.97    rpaulo 
   1520   1.97    rpaulo #ifdef RFC2292
   1521  1.121    dyoung 		case IPV6_2292PKTINFO:
   1522  1.121    dyoung 		case IPV6_2292HOPLIMIT:
   1523  1.121    dyoung 		case IPV6_2292HOPOPTS:
   1524  1.121    dyoung 		case IPV6_2292DSTOPTS:
   1525  1.121    dyoung 		case IPV6_2292RTHDR:
   1526  1.121    dyoung 			/* RFC 2292 */
   1527  1.130    plunky 			error = sockopt_getint(sopt, &optval);
   1528  1.130    plunky 			if (error)
   1529  1.121    dyoung 				break;
   1530  1.130    plunky 
   1531  1.121    dyoung 			switch (optname) {
   1532   1.97    rpaulo 			case IPV6_2292PKTINFO:
   1533  1.121    dyoung 				OPTSET2292(IN6P_PKTINFO);
   1534  1.121    dyoung 				break;
   1535   1.97    rpaulo 			case IPV6_2292HOPLIMIT:
   1536  1.121    dyoung 				OPTSET2292(IN6P_HOPLIMIT);
   1537  1.121    dyoung 				break;
   1538   1.97    rpaulo 			case IPV6_2292HOPOPTS:
   1539  1.121    dyoung 				/*
   1540  1.121    dyoung 				 * Check super-user privilege.
   1541  1.121    dyoung 				 * See comments for IPV6_RECVHOPOPTS.
   1542  1.121    dyoung 				 */
   1543  1.138      elad 				error =
   1544  1.146      elad 				    kauth_authorize_network(kauth_cred_get(),
   1545  1.146      elad 				    KAUTH_NETWORK_IPV6,
   1546  1.146      elad 				    KAUTH_REQ_NETWORK_IPV6_HOPBYHOP, NULL,
   1547  1.146      elad 				    NULL, NULL);
   1548  1.138      elad 				if (error)
   1549  1.138      elad 					return (error);
   1550  1.121    dyoung 				OPTSET2292(IN6P_HOPOPTS);
   1551  1.121    dyoung 				break;
   1552   1.97    rpaulo 			case IPV6_2292DSTOPTS:
   1553  1.138      elad 				error =
   1554  1.146      elad 				    kauth_authorize_network(kauth_cred_get(),
   1555  1.146      elad 				    KAUTH_NETWORK_IPV6,
   1556  1.146      elad 				    KAUTH_REQ_NETWORK_IPV6_HOPBYHOP, NULL,
   1557  1.146      elad 				    NULL, NULL);
   1558  1.138      elad 				if (error)
   1559  1.138      elad 					return (error);
   1560  1.121    dyoung 				OPTSET2292(IN6P_DSTOPTS|IN6P_RTHDRDSTOPTS); /* XXX */
   1561  1.121    dyoung 				break;
   1562   1.97    rpaulo 			case IPV6_2292RTHDR:
   1563  1.121    dyoung 				OPTSET2292(IN6P_RTHDR);
   1564   1.97    rpaulo 				break;
   1565  1.121    dyoung 			}
   1566  1.121    dyoung 			break;
   1567   1.97    rpaulo #endif
   1568  1.121    dyoung 		case IPV6_PKTINFO:
   1569  1.121    dyoung 		case IPV6_HOPOPTS:
   1570  1.121    dyoung 		case IPV6_RTHDR:
   1571  1.121    dyoung 		case IPV6_DSTOPTS:
   1572  1.121    dyoung 		case IPV6_RTHDRDSTOPTS:
   1573  1.130    plunky 		case IPV6_NEXTHOP: {
   1574  1.121    dyoung 			/* new advanced API (RFC3542) */
   1575  1.130    plunky 			void *optbuf;
   1576  1.121    dyoung 			int optbuflen;
   1577  1.121    dyoung 			struct ip6_pktopts **optp;
   1578   1.97    rpaulo 
   1579   1.97    rpaulo #ifdef RFC2292
   1580  1.121    dyoung 			/* cannot mix with RFC2292 */
   1581  1.121    dyoung 			if (OPTBIT(IN6P_RFC2292)) {
   1582  1.121    dyoung 				error = EINVAL;
   1583  1.121    dyoung 				break;
   1584  1.121    dyoung 			}
   1585   1.97    rpaulo #endif
   1586   1.97    rpaulo 
   1587  1.131    plunky 			optbuflen = sopt->sopt_size;
   1588  1.131    plunky 			optbuf = malloc(optbuflen, M_IP6OPT, M_NOWAIT);
   1589  1.131    plunky 			if (optbuf == NULL) {
   1590  1.131    plunky 				error = ENOBUFS;
   1591  1.131    plunky 				break;
   1592  1.131    plunky 			}
   1593  1.131    plunky 
   1594  1.130    plunky 			sockopt_get(sopt, optbuf, optbuflen);
   1595  1.121    dyoung 			optp = &in6p->in6p_outputopts;
   1596  1.121    dyoung 			error = ip6_pcbopt(optname, optbuf, optbuflen,
   1597  1.138      elad 			    optp, kauth_cred_get(), uproto);
   1598  1.121    dyoung 			break;
   1599  1.130    plunky 			}
   1600    1.2    itojun #undef OPTSET
   1601    1.2    itojun 
   1602  1.121    dyoung 		case IPV6_MULTICAST_IF:
   1603  1.121    dyoung 		case IPV6_MULTICAST_HOPS:
   1604  1.121    dyoung 		case IPV6_MULTICAST_LOOP:
   1605  1.121    dyoung 		case IPV6_JOIN_GROUP:
   1606  1.132    plunky 		case IPV6_LEAVE_GROUP:
   1607  1.132    plunky 			error = ip6_setmoptions(sopt, &in6p->in6p_moptions);
   1608  1.121    dyoung 			break;
   1609  1.121    dyoung 
   1610  1.121    dyoung 		case IPV6_PORTRANGE:
   1611  1.130    plunky 			error = sockopt_getint(sopt, &optval);
   1612  1.130    plunky 			if (error)
   1613    1.2    itojun 				break;
   1614    1.2    itojun 
   1615  1.121    dyoung 			switch (optval) {
   1616  1.121    dyoung 			case IPV6_PORTRANGE_DEFAULT:
   1617  1.121    dyoung 				in6p->in6p_flags &= ~(IN6P_LOWPORT);
   1618  1.121    dyoung 				in6p->in6p_flags &= ~(IN6P_HIGHPORT);
   1619  1.121    dyoung 				break;
   1620   1.12    itojun 
   1621  1.121    dyoung 			case IPV6_PORTRANGE_HIGH:
   1622  1.121    dyoung 				in6p->in6p_flags &= ~(IN6P_LOWPORT);
   1623  1.121    dyoung 				in6p->in6p_flags |= IN6P_HIGHPORT;
   1624  1.121    dyoung 				break;
   1625   1.12    itojun 
   1626  1.121    dyoung 			case IPV6_PORTRANGE_LOW:
   1627  1.121    dyoung 				in6p->in6p_flags &= ~(IN6P_HIGHPORT);
   1628  1.121    dyoung 				in6p->in6p_flags |= IN6P_LOWPORT;
   1629  1.121    dyoung 				break;
   1630   1.12    itojun 
   1631  1.121    dyoung 			default:
   1632  1.121    dyoung 				error = EINVAL;
   1633   1.12    itojun 				break;
   1634  1.121    dyoung 			}
   1635  1.121    dyoung 			break;
   1636   1.12    itojun 
   1637  1.148  christos 		case IPV6_PORTALGO:
   1638  1.148  christos 			error = sockopt_getint(sopt, &optval);
   1639  1.148  christos 			if (error)
   1640  1.148  christos 				break;
   1641  1.148  christos 
   1642  1.149  christos 			error = portalgo_algo_index_select(
   1643  1.148  christos 			    (struct inpcb_hdr *)in6p, optval);
   1644  1.148  christos 			break;
   1645  1.114  degroote 
   1646  1.147  drochner #if defined(FAST_IPSEC)
   1647  1.121    dyoung 		case IPV6_IPSEC_POLICY:
   1648  1.130    plunky 			error = ipsec6_set_policy(in6p, optname,
   1649  1.138      elad 			    sopt->sopt_data, sopt->sopt_size, kauth_cred_get());
   1650  1.121    dyoung 			break;
   1651    1.2    itojun #endif /* IPSEC */
   1652    1.2    itojun 
   1653  1.121    dyoung 		default:
   1654  1.121    dyoung 			error = ENOPROTOOPT;
   1655    1.2    itojun 			break;
   1656  1.121    dyoung 		}
   1657  1.121    dyoung 		break;
   1658    1.2    itojun 
   1659  1.121    dyoung 	case PRCO_GETOPT:
   1660  1.121    dyoung 		switch (optname) {
   1661   1.97    rpaulo #ifdef RFC2292
   1662  1.121    dyoung 		case IPV6_2292PKTOPTIONS:
   1663  1.121    dyoung 			/*
   1664  1.121    dyoung 			 * RFC3542 (effectively) deprecated the
   1665  1.121    dyoung 			 * semantics of the 2292-style pktoptions.
   1666  1.121    dyoung 			 * Since it was not reliable in nature (i.e.,
   1667  1.121    dyoung 			 * applications had to expect the lack of some
   1668  1.121    dyoung 			 * information after all), it would make sense
   1669  1.121    dyoung 			 * to simplify this part by always returning
   1670  1.121    dyoung 			 * empty data.
   1671  1.121    dyoung 			 */
   1672  1.121    dyoung 			break;
   1673   1.97    rpaulo #endif
   1674    1.2    itojun 
   1675  1.121    dyoung 		case IPV6_RECVHOPOPTS:
   1676  1.121    dyoung 		case IPV6_RECVDSTOPTS:
   1677  1.121    dyoung 		case IPV6_RECVRTHDRDSTOPTS:
   1678  1.121    dyoung 		case IPV6_UNICAST_HOPS:
   1679  1.121    dyoung 		case IPV6_RECVPKTINFO:
   1680  1.121    dyoung 		case IPV6_RECVHOPLIMIT:
   1681  1.121    dyoung 		case IPV6_RECVRTHDR:
   1682  1.121    dyoung 		case IPV6_RECVPATHMTU:
   1683  1.121    dyoung 
   1684  1.121    dyoung 		case IPV6_FAITH:
   1685  1.121    dyoung 		case IPV6_V6ONLY:
   1686  1.121    dyoung 		case IPV6_PORTRANGE:
   1687  1.121    dyoung 		case IPV6_RECVTCLASS:
   1688  1.121    dyoung 			switch (optname) {
   1689  1.121    dyoung 
   1690   1.97    rpaulo 			case IPV6_RECVHOPOPTS:
   1691  1.121    dyoung 				optval = OPTBIT(IN6P_HOPOPTS);
   1692  1.121    dyoung 				break;
   1693  1.121    dyoung 
   1694   1.97    rpaulo 			case IPV6_RECVDSTOPTS:
   1695  1.121    dyoung 				optval = OPTBIT(IN6P_DSTOPTS);
   1696  1.121    dyoung 				break;
   1697  1.121    dyoung 
   1698   1.97    rpaulo 			case IPV6_RECVRTHDRDSTOPTS:
   1699  1.121    dyoung 				optval = OPTBIT(IN6P_RTHDRDSTOPTS);
   1700  1.121    dyoung 				break;
   1701  1.121    dyoung 
   1702   1.97    rpaulo 			case IPV6_UNICAST_HOPS:
   1703  1.121    dyoung 				optval = in6p->in6p_hops;
   1704  1.121    dyoung 				break;
   1705  1.121    dyoung 
   1706   1.97    rpaulo 			case IPV6_RECVPKTINFO:
   1707  1.121    dyoung 				optval = OPTBIT(IN6P_PKTINFO);
   1708  1.121    dyoung 				break;
   1709  1.121    dyoung 
   1710   1.97    rpaulo 			case IPV6_RECVHOPLIMIT:
   1711  1.121    dyoung 				optval = OPTBIT(IN6P_HOPLIMIT);
   1712  1.121    dyoung 				break;
   1713  1.121    dyoung 
   1714   1.97    rpaulo 			case IPV6_RECVRTHDR:
   1715  1.121    dyoung 				optval = OPTBIT(IN6P_RTHDR);
   1716  1.121    dyoung 				break;
   1717  1.121    dyoung 
   1718   1.97    rpaulo 			case IPV6_RECVPATHMTU:
   1719  1.121    dyoung 				optval = OPTBIT(IN6P_MTU);
   1720  1.121    dyoung 				break;
   1721    1.2    itojun 
   1722    1.2    itojun 			case IPV6_FAITH:
   1723  1.121    dyoung 				optval = OPTBIT(IN6P_FAITH);
   1724  1.121    dyoung 				break;
   1725  1.121    dyoung 
   1726   1.37    itojun 			case IPV6_V6ONLY:
   1727  1.121    dyoung 				optval = OPTBIT(IN6P_IPV6_V6ONLY);
   1728  1.121    dyoung 				break;
   1729  1.121    dyoung 
   1730   1.97    rpaulo 			case IPV6_PORTRANGE:
   1731  1.121    dyoung 			    {
   1732  1.121    dyoung 				int flags;
   1733  1.121    dyoung 				flags = in6p->in6p_flags;
   1734  1.121    dyoung 				if (flags & IN6P_HIGHPORT)
   1735  1.121    dyoung 					optval = IPV6_PORTRANGE_HIGH;
   1736  1.121    dyoung 				else if (flags & IN6P_LOWPORT)
   1737  1.121    dyoung 					optval = IPV6_PORTRANGE_LOW;
   1738  1.121    dyoung 				else
   1739  1.121    dyoung 					optval = 0;
   1740  1.121    dyoung 				break;
   1741  1.121    dyoung 			    }
   1742   1.97    rpaulo 			case IPV6_RECVTCLASS:
   1743  1.121    dyoung 				optval = OPTBIT(IN6P_TCLASS);
   1744  1.121    dyoung 				break;
   1745    1.2    itojun 
   1746  1.121    dyoung 			}
   1747  1.121    dyoung 			if (error)
   1748   1.97    rpaulo 				break;
   1749  1.130    plunky 			error = sockopt_setint(sopt, optval);
   1750  1.121    dyoung 			break;
   1751   1.97    rpaulo 
   1752  1.121    dyoung 		case IPV6_PATHMTU:
   1753  1.121    dyoung 		    {
   1754  1.121    dyoung 			u_long pmtu = 0;
   1755  1.121    dyoung 			struct ip6_mtuinfo mtuinfo;
   1756  1.121    dyoung 			struct route *ro = &in6p->in6p_route;
   1757    1.2    itojun 
   1758  1.121    dyoung 			if (!(so->so_state & SS_ISCONNECTED))
   1759  1.121    dyoung 				return (ENOTCONN);
   1760  1.121    dyoung 			/*
   1761  1.121    dyoung 			 * XXX: we dot not consider the case of source
   1762  1.121    dyoung 			 * routing, or optional information to specify
   1763  1.121    dyoung 			 * the outgoing interface.
   1764  1.121    dyoung 			 */
   1765  1.121    dyoung 			error = ip6_getpmtu(ro, NULL, NULL,
   1766  1.121    dyoung 			    &in6p->in6p_faddr, &pmtu, NULL);
   1767  1.121    dyoung 			if (error)
   1768  1.121    dyoung 				break;
   1769  1.121    dyoung 			if (pmtu > IPV6_MAXPACKET)
   1770  1.121    dyoung 				pmtu = IPV6_MAXPACKET;
   1771  1.121    dyoung 
   1772  1.121    dyoung 			memset(&mtuinfo, 0, sizeof(mtuinfo));
   1773  1.121    dyoung 			mtuinfo.ip6m_mtu = (u_int32_t)pmtu;
   1774  1.121    dyoung 			optdata = (void *)&mtuinfo;
   1775  1.121    dyoung 			optdatalen = sizeof(mtuinfo);
   1776  1.121    dyoung 			if (optdatalen > MCLBYTES)
   1777  1.121    dyoung 				return (EMSGSIZE); /* XXX */
   1778  1.130    plunky 			error = sockopt_set(sopt, optdata, optdatalen);
   1779  1.121    dyoung 			break;
   1780  1.121    dyoung 		    }
   1781   1.97    rpaulo 
   1782   1.97    rpaulo #ifdef RFC2292
   1783  1.121    dyoung 		case IPV6_2292PKTINFO:
   1784  1.121    dyoung 		case IPV6_2292HOPLIMIT:
   1785  1.121    dyoung 		case IPV6_2292HOPOPTS:
   1786  1.121    dyoung 		case IPV6_2292RTHDR:
   1787  1.121    dyoung 		case IPV6_2292DSTOPTS:
   1788  1.121    dyoung 			switch (optname) {
   1789   1.97    rpaulo 			case IPV6_2292PKTINFO:
   1790  1.121    dyoung 				optval = OPTBIT(IN6P_PKTINFO);
   1791  1.121    dyoung 				break;
   1792   1.97    rpaulo 			case IPV6_2292HOPLIMIT:
   1793  1.121    dyoung 				optval = OPTBIT(IN6P_HOPLIMIT);
   1794  1.121    dyoung 				break;
   1795   1.97    rpaulo 			case IPV6_2292HOPOPTS:
   1796  1.121    dyoung 				optval = OPTBIT(IN6P_HOPOPTS);
   1797  1.121    dyoung 				break;
   1798   1.97    rpaulo 			case IPV6_2292RTHDR:
   1799  1.121    dyoung 				optval = OPTBIT(IN6P_RTHDR);
   1800  1.121    dyoung 				break;
   1801   1.97    rpaulo 			case IPV6_2292DSTOPTS:
   1802  1.121    dyoung 				optval = OPTBIT(IN6P_DSTOPTS|IN6P_RTHDRDSTOPTS);
   1803    1.2    itojun 				break;
   1804  1.121    dyoung 			}
   1805  1.130    plunky 			error = sockopt_setint(sopt, optval);
   1806  1.121    dyoung 			break;
   1807  1.121    dyoung #endif
   1808  1.121    dyoung 		case IPV6_PKTINFO:
   1809  1.121    dyoung 		case IPV6_HOPOPTS:
   1810  1.121    dyoung 		case IPV6_RTHDR:
   1811  1.121    dyoung 		case IPV6_DSTOPTS:
   1812  1.121    dyoung 		case IPV6_RTHDRDSTOPTS:
   1813  1.121    dyoung 		case IPV6_NEXTHOP:
   1814  1.121    dyoung 		case IPV6_OTCLASS:
   1815  1.121    dyoung 		case IPV6_TCLASS:
   1816  1.121    dyoung 		case IPV6_DONTFRAG:
   1817  1.121    dyoung 		case IPV6_USE_MIN_MTU:
   1818  1.121    dyoung 			error = ip6_getpcbopt(in6p->in6p_outputopts,
   1819  1.130    plunky 			    optname, sopt);
   1820  1.121    dyoung 			break;
   1821  1.121    dyoung 
   1822  1.121    dyoung 		case IPV6_MULTICAST_IF:
   1823  1.121    dyoung 		case IPV6_MULTICAST_HOPS:
   1824  1.121    dyoung 		case IPV6_MULTICAST_LOOP:
   1825  1.121    dyoung 		case IPV6_JOIN_GROUP:
   1826  1.132    plunky 		case IPV6_LEAVE_GROUP:
   1827  1.132    plunky 			error = ip6_getmoptions(sopt, in6p->in6p_moptions);
   1828  1.121    dyoung 			break;
   1829    1.2    itojun 
   1830  1.148  christos 		case IPV6_PORTALGO:
   1831  1.149  christos 			optval = ((struct inpcb_hdr *)in6p)->inph_portalgo;
   1832  1.148  christos 			error = sockopt_setint(sopt, optval);
   1833  1.148  christos 			break;
   1834  1.148  christos 
   1835  1.147  drochner #if defined(FAST_IPSEC)
   1836  1.121    dyoung 		case IPV6_IPSEC_POLICY:
   1837  1.121    dyoung 		    {
   1838  1.130    plunky 			struct mbuf *m = NULL;
   1839  1.130    plunky 
   1840  1.130    plunky 			/* XXX this will return EINVAL as sopt is empty */
   1841  1.130    plunky 			error = ipsec6_get_policy(in6p, sopt->sopt_data,
   1842  1.130    plunky 			    sopt->sopt_size, &m);
   1843  1.130    plunky 			if (!error)
   1844  1.130    plunky 				error = sockopt_setmbuf(sopt, m);
   1845  1.130    plunky 
   1846  1.121    dyoung 			break;
   1847  1.121    dyoung 		    }
   1848    1.2    itojun #endif /* IPSEC */
   1849    1.2    itojun 
   1850  1.121    dyoung 		default:
   1851  1.121    dyoung 			error = ENOPROTOOPT;
   1852    1.2    itojun 			break;
   1853    1.2    itojun 		}
   1854  1.121    dyoung 		break;
   1855    1.2    itojun 	}
   1856   1.57    itojun 	return (error);
   1857   1.53    itojun }
   1858   1.53    itojun 
   1859   1.53    itojun int
   1860  1.130    plunky ip6_raw_ctloutput(int op, struct socket *so, struct sockopt *sopt)
   1861   1.53    itojun {
   1862  1.130    plunky 	int error = 0, optval;
   1863   1.53    itojun 	const int icmp6off = offsetof(struct icmp6_hdr, icmp6_cksum);
   1864   1.53    itojun 	struct in6pcb *in6p = sotoin6pcb(so);
   1865  1.130    plunky 	int level, optname;
   1866   1.53    itojun 
   1867  1.130    plunky 	KASSERT(sopt != NULL);
   1868  1.130    plunky 
   1869  1.130    plunky 	level = sopt->sopt_level;
   1870  1.130    plunky 	optname = sopt->sopt_name;
   1871   1.53    itojun 
   1872   1.53    itojun 	if (level != IPPROTO_IPV6) {
   1873  1.121    dyoung 		return ENOPROTOOPT;
   1874   1.53    itojun 	}
   1875   1.55    itojun 
   1876   1.53    itojun 	switch (optname) {
   1877   1.53    itojun 	case IPV6_CHECKSUM:
   1878   1.53    itojun 		/*
   1879   1.53    itojun 		 * For ICMPv6 sockets, no modification allowed for checksum
   1880   1.53    itojun 		 * offset, permit "no change" values to help existing apps.
   1881   1.53    itojun 		 *
   1882   1.97    rpaulo 		 * XXX RFC3542 says: "An attempt to set IPV6_CHECKSUM
   1883   1.97    rpaulo 		 * for an ICMPv6 socket will fail."  The current
   1884   1.97    rpaulo 		 * behavior does not meet RFC3542.
   1885   1.53    itojun 		 */
   1886   1.53    itojun 		switch (op) {
   1887   1.53    itojun 		case PRCO_SETOPT:
   1888  1.130    plunky 			error = sockopt_getint(sopt, &optval);
   1889  1.130    plunky 			if (error)
   1890   1.53    itojun 				break;
   1891   1.53    itojun 			if ((optval % 2) != 0) {
   1892   1.53    itojun 				/* the API assumes even offset values */
   1893   1.53    itojun 				error = EINVAL;
   1894   1.53    itojun 			} else if (so->so_proto->pr_protocol ==
   1895   1.53    itojun 			    IPPROTO_ICMPV6) {
   1896   1.53    itojun 				if (optval != icmp6off)
   1897   1.53    itojun 					error = EINVAL;
   1898   1.53    itojun 			} else
   1899   1.53    itojun 				in6p->in6p_cksum = optval;
   1900   1.53    itojun 			break;
   1901   1.53    itojun 
   1902   1.53    itojun 		case PRCO_GETOPT:
   1903   1.53    itojun 			if (so->so_proto->pr_protocol == IPPROTO_ICMPV6)
   1904   1.53    itojun 				optval = icmp6off;
   1905   1.53    itojun 			else
   1906   1.53    itojun 				optval = in6p->in6p_cksum;
   1907   1.53    itojun 
   1908  1.130    plunky 			error = sockopt_setint(sopt, optval);
   1909   1.53    itojun 			break;
   1910   1.53    itojun 
   1911   1.53    itojun 		default:
   1912   1.53    itojun 			error = EINVAL;
   1913   1.53    itojun 			break;
   1914   1.53    itojun 		}
   1915   1.53    itojun 		break;
   1916   1.53    itojun 
   1917   1.53    itojun 	default:
   1918   1.53    itojun 		error = ENOPROTOOPT;
   1919   1.53    itojun 		break;
   1920   1.53    itojun 	}
   1921   1.53    itojun 
   1922   1.57    itojun 	return (error);
   1923    1.2    itojun }
   1924    1.2    itojun 
   1925   1.97    rpaulo #ifdef RFC2292
   1926    1.2    itojun /*
   1927   1.97    rpaulo  * Set up IP6 options in pcb for insertion in output packets or
   1928   1.97    rpaulo  * specifying behavior of outgoing packets.
   1929    1.2    itojun  */
   1930    1.2    itojun static int
   1931  1.130    plunky ip6_pcbopts(struct ip6_pktopts **pktopt, struct socket *so,
   1932  1.130    plunky     struct sockopt *sopt)
   1933    1.2    itojun {
   1934   1.31    itojun 	struct ip6_pktopts *opt = *pktopt;
   1935  1.130    plunky 	struct mbuf *m;
   1936    1.2    itojun 	int error = 0;
   1937    1.2    itojun 
   1938    1.2    itojun 	/* turn off any old options. */
   1939    1.2    itojun 	if (opt) {
   1940   1.97    rpaulo #ifdef DIAGNOSTIC
   1941   1.97    rpaulo 	    if (opt->ip6po_pktinfo || opt->ip6po_nexthop ||
   1942   1.97    rpaulo 		opt->ip6po_hbh || opt->ip6po_dest1 || opt->ip6po_dest2 ||
   1943   1.97    rpaulo 		opt->ip6po_rhinfo.ip6po_rhi_rthdr)
   1944   1.97    rpaulo 		    printf("ip6_pcbopts: all specified options are cleared.\n");
   1945   1.97    rpaulo #endif
   1946   1.97    rpaulo 		ip6_clearpktopts(opt, -1);
   1947  1.134    plunky 	} else {
   1948  1.134    plunky 		opt = malloc(sizeof(*opt), M_IP6OPT, M_NOWAIT);
   1949  1.134    plunky 		if (opt == NULL)
   1950  1.134    plunky 			return (ENOBUFS);
   1951  1.134    plunky 	}
   1952   1.97    rpaulo 	*pktopt = NULL;
   1953    1.2    itojun 
   1954  1.130    plunky 	if (sopt == NULL || sopt->sopt_size == 0) {
   1955    1.2    itojun 		/*
   1956   1.97    rpaulo 		 * Only turning off any previous options, regardless of
   1957   1.97    rpaulo 		 * whether the opt is just created or given.
   1958    1.2    itojun 		 */
   1959   1.59    itojun 		free(opt, M_IP6OPT);
   1960   1.57    itojun 		return (0);
   1961    1.2    itojun 	}
   1962    1.2    itojun 
   1963    1.2    itojun 	/*  set options specified by user. */
   1964  1.130    plunky 	m = sockopt_getmbuf(sopt);
   1965  1.135    plunky 	if (m == NULL) {
   1966  1.135    plunky 		free(opt, M_IP6OPT);
   1967  1.135    plunky 		return (ENOBUFS);
   1968  1.135    plunky 	}
   1969  1.135    plunky 
   1970  1.138      elad 	error = ip6_setpktopts(m, opt, NULL, kauth_cred_get(),
   1971  1.138      elad 	    so->so_proto->pr_protocol);
   1972  1.130    plunky 	m_freem(m);
   1973  1.130    plunky 	if (error != 0) {
   1974   1.97    rpaulo 		ip6_clearpktopts(opt, -1); /* XXX: discard all options */
   1975   1.59    itojun 		free(opt, M_IP6OPT);
   1976   1.57    itojun 		return (error);
   1977    1.2    itojun 	}
   1978    1.2    itojun 	*pktopt = opt;
   1979   1.57    itojun 	return (0);
   1980    1.2    itojun }
   1981   1.97    rpaulo #endif
   1982   1.97    rpaulo 
   1983   1.97    rpaulo /*
   1984   1.97    rpaulo  * initialize ip6_pktopts.  beware that there are non-zero default values in
   1985   1.97    rpaulo  * the struct.
   1986   1.97    rpaulo  */
   1987   1.97    rpaulo void
   1988   1.97    rpaulo ip6_initpktopts(struct ip6_pktopts *opt)
   1989   1.97    rpaulo {
   1990   1.97    rpaulo 
   1991   1.97    rpaulo 	memset(opt, 0, sizeof(*opt));
   1992   1.97    rpaulo 	opt->ip6po_hlim = -1;	/* -1 means default hop limit */
   1993   1.97    rpaulo 	opt->ip6po_tclass = -1;	/* -1 means default traffic class */
   1994   1.97    rpaulo 	opt->ip6po_minmtu = IP6PO_MINMTU_MCASTONLY;
   1995   1.97    rpaulo }
   1996   1.97    rpaulo 
   1997   1.97    rpaulo #define sin6tosa(sin6)	((struct sockaddr *)(sin6)) /* XXX */
   1998   1.97    rpaulo static int
   1999   1.97    rpaulo ip6_pcbopt(int optname, u_char *buf, int len, struct ip6_pktopts **pktopt,
   2000  1.138      elad     kauth_cred_t cred, int uproto)
   2001   1.97    rpaulo {
   2002   1.97    rpaulo 	struct ip6_pktopts *opt;
   2003   1.97    rpaulo 
   2004   1.97    rpaulo 	if (*pktopt == NULL) {
   2005   1.97    rpaulo 		*pktopt = malloc(sizeof(struct ip6_pktopts), M_IP6OPT,
   2006  1.133    plunky 		    M_NOWAIT);
   2007  1.133    plunky 		if (*pktopt == NULL)
   2008  1.133    plunky 			return (ENOBUFS);
   2009  1.133    plunky 
   2010   1.97    rpaulo 		ip6_initpktopts(*pktopt);
   2011   1.97    rpaulo 	}
   2012   1.97    rpaulo 	opt = *pktopt;
   2013   1.97    rpaulo 
   2014  1.138      elad 	return (ip6_setpktopt(optname, buf, len, opt, cred, 1, 0, uproto));
   2015   1.97    rpaulo }
   2016   1.97    rpaulo 
   2017   1.97    rpaulo static int
   2018  1.130    plunky ip6_getpcbopt(struct ip6_pktopts *pktopt, int optname, struct sockopt *sopt)
   2019   1.97    rpaulo {
   2020   1.97    rpaulo 	void *optdata = NULL;
   2021   1.97    rpaulo 	int optdatalen = 0;
   2022   1.97    rpaulo 	struct ip6_ext *ip6e;
   2023   1.97    rpaulo 	int error = 0;
   2024   1.97    rpaulo 	struct in6_pktinfo null_pktinfo;
   2025   1.97    rpaulo 	int deftclass = 0, on;
   2026   1.97    rpaulo 	int defminmtu = IP6PO_MINMTU_MCASTONLY;
   2027   1.97    rpaulo 
   2028   1.97    rpaulo 	switch (optname) {
   2029   1.97    rpaulo 	case IPV6_PKTINFO:
   2030   1.97    rpaulo 		if (pktopt && pktopt->ip6po_pktinfo)
   2031   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_pktinfo;
   2032   1.97    rpaulo 		else {
   2033   1.97    rpaulo 			/* XXX: we don't have to do this every time... */
   2034   1.97    rpaulo 			memset(&null_pktinfo, 0, sizeof(null_pktinfo));
   2035   1.97    rpaulo 			optdata = (void *)&null_pktinfo;
   2036   1.97    rpaulo 		}
   2037   1.97    rpaulo 		optdatalen = sizeof(struct in6_pktinfo);
   2038   1.97    rpaulo 		break;
   2039   1.97    rpaulo 	case IPV6_OTCLASS:
   2040   1.97    rpaulo 		/* XXX */
   2041   1.97    rpaulo 		return (EINVAL);
   2042   1.97    rpaulo 	case IPV6_TCLASS:
   2043   1.97    rpaulo 		if (pktopt && pktopt->ip6po_tclass >= 0)
   2044   1.97    rpaulo 			optdata = (void *)&pktopt->ip6po_tclass;
   2045   1.97    rpaulo 		else
   2046   1.97    rpaulo 			optdata = (void *)&deftclass;
   2047   1.97    rpaulo 		optdatalen = sizeof(int);
   2048   1.97    rpaulo 		break;
   2049   1.97    rpaulo 	case IPV6_HOPOPTS:
   2050   1.97    rpaulo 		if (pktopt && pktopt->ip6po_hbh) {
   2051   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_hbh;
   2052   1.97    rpaulo 			ip6e = (struct ip6_ext *)pktopt->ip6po_hbh;
   2053   1.97    rpaulo 			optdatalen = (ip6e->ip6e_len + 1) << 3;
   2054   1.97    rpaulo 		}
   2055   1.97    rpaulo 		break;
   2056   1.97    rpaulo 	case IPV6_RTHDR:
   2057   1.97    rpaulo 		if (pktopt && pktopt->ip6po_rthdr) {
   2058   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_rthdr;
   2059   1.97    rpaulo 			ip6e = (struct ip6_ext *)pktopt->ip6po_rthdr;
   2060   1.97    rpaulo 			optdatalen = (ip6e->ip6e_len + 1) << 3;
   2061   1.97    rpaulo 		}
   2062   1.97    rpaulo 		break;
   2063   1.97    rpaulo 	case IPV6_RTHDRDSTOPTS:
   2064   1.97    rpaulo 		if (pktopt && pktopt->ip6po_dest1) {
   2065   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_dest1;
   2066   1.97    rpaulo 			ip6e = (struct ip6_ext *)pktopt->ip6po_dest1;
   2067   1.97    rpaulo 			optdatalen = (ip6e->ip6e_len + 1) << 3;
   2068   1.97    rpaulo 		}
   2069   1.97    rpaulo 		break;
   2070   1.97    rpaulo 	case IPV6_DSTOPTS:
   2071   1.97    rpaulo 		if (pktopt && pktopt->ip6po_dest2) {
   2072   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_dest2;
   2073   1.97    rpaulo 			ip6e = (struct ip6_ext *)pktopt->ip6po_dest2;
   2074   1.97    rpaulo 			optdatalen = (ip6e->ip6e_len + 1) << 3;
   2075   1.97    rpaulo 		}
   2076   1.97    rpaulo 		break;
   2077   1.97    rpaulo 	case IPV6_NEXTHOP:
   2078   1.97    rpaulo 		if (pktopt && pktopt->ip6po_nexthop) {
   2079   1.97    rpaulo 			optdata = (void *)pktopt->ip6po_nexthop;
   2080   1.97    rpaulo 			optdatalen = pktopt->ip6po_nexthop->sa_len;
   2081   1.97    rpaulo 		}
   2082   1.97    rpaulo 		break;
   2083   1.97    rpaulo 	case IPV6_USE_MIN_MTU:
   2084   1.97    rpaulo 		if (pktopt)
   2085   1.97    rpaulo 			optdata = (void *)&pktopt->ip6po_minmtu;
   2086   1.97    rpaulo 		else
   2087   1.97    rpaulo 			optdata = (void *)&defminmtu;
   2088   1.97    rpaulo 		optdatalen = sizeof(int);
   2089   1.97    rpaulo 		break;
   2090   1.97    rpaulo 	case IPV6_DONTFRAG:
   2091   1.97    rpaulo 		if (pktopt && ((pktopt->ip6po_flags) & IP6PO_DONTFRAG))
   2092   1.97    rpaulo 			on = 1;
   2093   1.97    rpaulo 		else
   2094   1.97    rpaulo 			on = 0;
   2095   1.97    rpaulo 		optdata = (void *)&on;
   2096   1.97    rpaulo 		optdatalen = sizeof(on);
   2097   1.97    rpaulo 		break;
   2098   1.97    rpaulo 	default:		/* should not happen */
   2099   1.97    rpaulo #ifdef DIAGNOSTIC
   2100   1.97    rpaulo 		panic("ip6_getpcbopt: unexpected option\n");
   2101   1.97    rpaulo #endif
   2102   1.97    rpaulo 		return (ENOPROTOOPT);
   2103   1.97    rpaulo 	}
   2104   1.97    rpaulo 
   2105  1.130    plunky 	error = sockopt_set(sopt, optdata, optdatalen);
   2106   1.97    rpaulo 
   2107   1.97    rpaulo 	return (error);
   2108   1.97    rpaulo }
   2109   1.97    rpaulo 
   2110   1.97    rpaulo void
   2111   1.97    rpaulo ip6_clearpktopts(struct ip6_pktopts *pktopt, int optname)
   2112   1.97    rpaulo {
   2113   1.97    rpaulo 	if (optname == -1 || optname == IPV6_PKTINFO) {
   2114   1.97    rpaulo 		if (pktopt->ip6po_pktinfo)
   2115   1.97    rpaulo 			free(pktopt->ip6po_pktinfo, M_IP6OPT);
   2116   1.97    rpaulo 		pktopt->ip6po_pktinfo = NULL;
   2117   1.97    rpaulo 	}
   2118   1.97    rpaulo 	if (optname == -1 || optname == IPV6_HOPLIMIT)
   2119   1.97    rpaulo 		pktopt->ip6po_hlim = -1;
   2120   1.97    rpaulo 	if (optname == -1 || optname == IPV6_TCLASS)
   2121   1.97    rpaulo 		pktopt->ip6po_tclass = -1;
   2122   1.97    rpaulo 	if (optname == -1 || optname == IPV6_NEXTHOP) {
   2123  1.118    dyoung 		rtcache_free(&pktopt->ip6po_nextroute);
   2124   1.97    rpaulo 		if (pktopt->ip6po_nexthop)
   2125   1.97    rpaulo 			free(pktopt->ip6po_nexthop, M_IP6OPT);
   2126   1.97    rpaulo 		pktopt->ip6po_nexthop = NULL;
   2127   1.97    rpaulo 	}
   2128   1.97    rpaulo 	if (optname == -1 || optname == IPV6_HOPOPTS) {
   2129   1.97    rpaulo 		if (pktopt->ip6po_hbh)
   2130   1.97    rpaulo 			free(pktopt->ip6po_hbh, M_IP6OPT);
   2131   1.97    rpaulo 		pktopt->ip6po_hbh = NULL;
   2132   1.97    rpaulo 	}
   2133   1.97    rpaulo 	if (optname == -1 || optname == IPV6_RTHDRDSTOPTS) {
   2134   1.97    rpaulo 		if (pktopt->ip6po_dest1)
   2135   1.97    rpaulo 			free(pktopt->ip6po_dest1, M_IP6OPT);
   2136   1.97    rpaulo 		pktopt->ip6po_dest1 = NULL;
   2137   1.97    rpaulo 	}
   2138   1.97    rpaulo 	if (optname == -1 || optname == IPV6_RTHDR) {
   2139   1.97    rpaulo 		if (pktopt->ip6po_rhinfo.ip6po_rhi_rthdr)
   2140   1.97    rpaulo 			free(pktopt->ip6po_rhinfo.ip6po_rhi_rthdr, M_IP6OPT);
   2141   1.97    rpaulo 		pktopt->ip6po_rhinfo.ip6po_rhi_rthdr = NULL;
   2142  1.118    dyoung 		rtcache_free(&pktopt->ip6po_route);
   2143   1.97    rpaulo 	}
   2144   1.97    rpaulo 	if (optname == -1 || optname == IPV6_DSTOPTS) {
   2145   1.97    rpaulo 		if (pktopt->ip6po_dest2)
   2146   1.97    rpaulo 			free(pktopt->ip6po_dest2, M_IP6OPT);
   2147   1.97    rpaulo 		pktopt->ip6po_dest2 = NULL;
   2148   1.97    rpaulo 	}
   2149   1.97    rpaulo }
   2150   1.97    rpaulo 
   2151   1.97    rpaulo #define PKTOPT_EXTHDRCPY(type) 					\
   2152   1.97    rpaulo do {								\
   2153   1.97    rpaulo 	if (src->type) {					\
   2154   1.97    rpaulo 		int hlen = (((struct ip6_ext *)src->type)->ip6e_len + 1) << 3;\
   2155   1.97    rpaulo 		dst->type = malloc(hlen, M_IP6OPT, canwait);	\
   2156  1.144  drochner 		if (dst->type == NULL)				\
   2157   1.97    rpaulo 			goto bad;				\
   2158   1.97    rpaulo 		memcpy(dst->type, src->type, hlen);		\
   2159   1.97    rpaulo 	}							\
   2160   1.97    rpaulo } while (/*CONSTCOND*/ 0)
   2161   1.97    rpaulo 
   2162   1.97    rpaulo static int
   2163   1.97    rpaulo copypktopts(struct ip6_pktopts *dst, struct ip6_pktopts *src, int canwait)
   2164   1.97    rpaulo {
   2165   1.97    rpaulo 	dst->ip6po_hlim = src->ip6po_hlim;
   2166   1.97    rpaulo 	dst->ip6po_tclass = src->ip6po_tclass;
   2167   1.97    rpaulo 	dst->ip6po_flags = src->ip6po_flags;
   2168   1.97    rpaulo 	if (src->ip6po_pktinfo) {
   2169   1.97    rpaulo 		dst->ip6po_pktinfo = malloc(sizeof(*dst->ip6po_pktinfo),
   2170   1.97    rpaulo 		    M_IP6OPT, canwait);
   2171  1.144  drochner 		if (dst->ip6po_pktinfo == NULL)
   2172   1.97    rpaulo 			goto bad;
   2173   1.97    rpaulo 		*dst->ip6po_pktinfo = *src->ip6po_pktinfo;
   2174   1.97    rpaulo 	}
   2175   1.97    rpaulo 	if (src->ip6po_nexthop) {
   2176   1.97    rpaulo 		dst->ip6po_nexthop = malloc(src->ip6po_nexthop->sa_len,
   2177   1.97    rpaulo 		    M_IP6OPT, canwait);
   2178  1.144  drochner 		if (dst->ip6po_nexthop == NULL)
   2179   1.97    rpaulo 			goto bad;
   2180   1.97    rpaulo 		memcpy(dst->ip6po_nexthop, src->ip6po_nexthop,
   2181   1.97    rpaulo 		    src->ip6po_nexthop->sa_len);
   2182   1.97    rpaulo 	}
   2183   1.97    rpaulo 	PKTOPT_EXTHDRCPY(ip6po_hbh);
   2184   1.97    rpaulo 	PKTOPT_EXTHDRCPY(ip6po_dest1);
   2185   1.97    rpaulo 	PKTOPT_EXTHDRCPY(ip6po_dest2);
   2186   1.97    rpaulo 	PKTOPT_EXTHDRCPY(ip6po_rthdr); /* not copy the cached route */
   2187   1.97    rpaulo 	return (0);
   2188   1.97    rpaulo 
   2189   1.97    rpaulo   bad:
   2190   1.97    rpaulo 	if (dst->ip6po_pktinfo) free(dst->ip6po_pktinfo, M_IP6OPT);
   2191   1.97    rpaulo 	if (dst->ip6po_nexthop) free(dst->ip6po_nexthop, M_IP6OPT);
   2192   1.97    rpaulo 	if (dst->ip6po_hbh) free(dst->ip6po_hbh, M_IP6OPT);
   2193   1.97    rpaulo 	if (dst->ip6po_dest1) free(dst->ip6po_dest1, M_IP6OPT);
   2194   1.97    rpaulo 	if (dst->ip6po_dest2) free(dst->ip6po_dest2, M_IP6OPT);
   2195   1.97    rpaulo 	if (dst->ip6po_rthdr) free(dst->ip6po_rthdr, M_IP6OPT);
   2196   1.97    rpaulo 
   2197   1.97    rpaulo 	return (ENOBUFS);
   2198   1.97    rpaulo }
   2199   1.97    rpaulo #undef PKTOPT_EXTHDRCPY
   2200   1.97    rpaulo 
   2201   1.97    rpaulo struct ip6_pktopts *
   2202   1.97    rpaulo ip6_copypktopts(struct ip6_pktopts *src, int canwait)
   2203   1.97    rpaulo {
   2204   1.97    rpaulo 	int error;
   2205   1.97    rpaulo 	struct ip6_pktopts *dst;
   2206   1.97    rpaulo 
   2207   1.97    rpaulo 	dst = malloc(sizeof(*dst), M_IP6OPT, canwait);
   2208  1.144  drochner 	if (dst == NULL)
   2209   1.97    rpaulo 		return (NULL);
   2210   1.97    rpaulo 	ip6_initpktopts(dst);
   2211   1.97    rpaulo 
   2212   1.97    rpaulo 	if ((error = copypktopts(dst, src, canwait)) != 0) {
   2213   1.97    rpaulo 		free(dst, M_IP6OPT);
   2214   1.97    rpaulo 		return (NULL);
   2215   1.97    rpaulo 	}
   2216   1.97    rpaulo 
   2217   1.97    rpaulo 	return (dst);
   2218   1.97    rpaulo }
   2219   1.97    rpaulo 
   2220   1.97    rpaulo void
   2221   1.97    rpaulo ip6_freepcbopts(struct ip6_pktopts *pktopt)
   2222   1.97    rpaulo {
   2223   1.97    rpaulo 	if (pktopt == NULL)
   2224   1.97    rpaulo 		return;
   2225   1.97    rpaulo 
   2226   1.97    rpaulo 	ip6_clearpktopts(pktopt, -1);
   2227   1.97    rpaulo 
   2228   1.97    rpaulo 	free(pktopt, M_IP6OPT);
   2229   1.97    rpaulo }
   2230    1.2    itojun 
   2231    1.2    itojun /*
   2232    1.2    itojun  * Set the IP6 multicast options in response to user setsockopt().
   2233    1.2    itojun  */
   2234    1.2    itojun static int
   2235  1.132    plunky ip6_setmoptions(const struct sockopt *sopt, struct ip6_moptions **im6op)
   2236    1.2    itojun {
   2237    1.2    itojun 	int error = 0;
   2238    1.2    itojun 	u_int loop, ifindex;
   2239  1.132    plunky 	struct ipv6_mreq mreq;
   2240    1.2    itojun 	struct ifnet *ifp;
   2241    1.2    itojun 	struct ip6_moptions *im6o = *im6op;
   2242  1.118    dyoung 	struct route ro;
   2243    1.2    itojun 	struct in6_multi_mship *imm;
   2244  1.101        ad 	struct lwp *l = curlwp;	/* XXX */
   2245    1.2    itojun 
   2246    1.2    itojun 	if (im6o == NULL) {
   2247    1.2    itojun 		/*
   2248    1.2    itojun 		 * No multicast option buffer attached to the pcb;
   2249    1.2    itojun 		 * allocate one and initialize to default values.
   2250    1.2    itojun 		 */
   2251  1.132    plunky 		im6o = malloc(sizeof(*im6o), M_IPMOPTS, M_NOWAIT);
   2252    1.2    itojun 		if (im6o == NULL)
   2253   1.57    itojun 			return (ENOBUFS);
   2254  1.132    plunky 
   2255    1.2    itojun 		*im6op = im6o;
   2256    1.2    itojun 		im6o->im6o_multicast_ifp = NULL;
   2257    1.2    itojun 		im6o->im6o_multicast_hlim = ip6_defmcasthlim;
   2258    1.2    itojun 		im6o->im6o_multicast_loop = IPV6_DEFAULT_MULTICAST_LOOP;
   2259    1.2    itojun 		LIST_INIT(&im6o->im6o_memberships);
   2260    1.2    itojun 	}
   2261    1.2    itojun 
   2262  1.132    plunky 	switch (sopt->sopt_name) {
   2263    1.2    itojun 
   2264    1.2    itojun 	case IPV6_MULTICAST_IF:
   2265    1.2    itojun 		/*
   2266    1.2    itojun 		 * Select the interface for outgoing multicast packets.
   2267    1.2    itojun 		 */
   2268  1.132    plunky 		error = sockopt_get(sopt, &ifindex, sizeof(ifindex));
   2269  1.132    plunky 		if (error != 0)
   2270    1.2    itojun 			break;
   2271  1.132    plunky 
   2272   1.87  drochner 		if (ifindex != 0) {
   2273  1.102  christos 			if (if_indexlim <= ifindex || !ifindex2ifnet[ifindex]) {
   2274   1.87  drochner 				error = ENXIO;	/* XXX EINVAL? */
   2275   1.87  drochner 				break;
   2276   1.87  drochner 			}
   2277   1.87  drochner 			ifp = ifindex2ifnet[ifindex];
   2278   1.87  drochner 			if ((ifp->if_flags & IFF_MULTICAST) == 0) {
   2279   1.87  drochner 				error = EADDRNOTAVAIL;
   2280   1.87  drochner 				break;
   2281   1.87  drochner 			}
   2282   1.87  drochner 		} else
   2283   1.87  drochner 			ifp = NULL;
   2284    1.2    itojun 		im6o->im6o_multicast_ifp = ifp;
   2285    1.2    itojun 		break;
   2286    1.2    itojun 
   2287    1.2    itojun 	case IPV6_MULTICAST_HOPS:
   2288    1.2    itojun 	    {
   2289    1.2    itojun 		/*
   2290    1.2    itojun 		 * Set the IP6 hoplimit for outgoing multicast packets.
   2291    1.2    itojun 		 */
   2292    1.2    itojun 		int optval;
   2293  1.132    plunky 
   2294  1.132    plunky 		error = sockopt_getint(sopt, &optval);
   2295  1.132    plunky 		if (error != 0)
   2296    1.2    itojun 			break;
   2297  1.132    plunky 
   2298    1.2    itojun 		if (optval < -1 || optval >= 256)
   2299    1.2    itojun 			error = EINVAL;
   2300    1.2    itojun 		else if (optval == -1)
   2301    1.2    itojun 			im6o->im6o_multicast_hlim = ip6_defmcasthlim;
   2302    1.2    itojun 		else
   2303    1.2    itojun 			im6o->im6o_multicast_hlim = optval;
   2304    1.2    itojun 		break;
   2305    1.2    itojun 	    }
   2306    1.2    itojun 
   2307    1.2    itojun 	case IPV6_MULTICAST_LOOP:
   2308    1.2    itojun 		/*
   2309    1.2    itojun 		 * Set the loopback flag for outgoing multicast packets.
   2310    1.2    itojun 		 * Must be zero or one.
   2311    1.2    itojun 		 */
   2312  1.132    plunky 		error = sockopt_get(sopt, &loop, sizeof(loop));
   2313  1.132    plunky 		if (error != 0)
   2314   1.25    itojun 			break;
   2315   1.25    itojun 		if (loop > 1) {
   2316    1.2    itojun 			error = EINVAL;
   2317    1.2    itojun 			break;
   2318    1.2    itojun 		}
   2319    1.2    itojun 		im6o->im6o_multicast_loop = loop;
   2320    1.2    itojun 		break;
   2321    1.2    itojun 
   2322    1.2    itojun 	case IPV6_JOIN_GROUP:
   2323    1.2    itojun 		/*
   2324    1.2    itojun 		 * Add a multicast group membership.
   2325    1.2    itojun 		 * Group must be a valid IP6 multicast address.
   2326    1.2    itojun 		 */
   2327  1.132    plunky 		error = sockopt_get(sopt, &mreq, sizeof(mreq));
   2328  1.132    plunky 		if (error != 0)
   2329    1.2    itojun 			break;
   2330  1.132    plunky 
   2331  1.132    plunky 		if (IN6_IS_ADDR_UNSPECIFIED(&mreq.ipv6mr_multiaddr)) {
   2332    1.2    itojun 			/*
   2333    1.2    itojun 			 * We use the unspecified address to specify to accept
   2334    1.2    itojun 			 * all multicast addresses. Only super user is allowed
   2335    1.2    itojun 			 * to do this.
   2336    1.2    itojun 			 */
   2337  1.146      elad 			if (kauth_authorize_network(l->l_cred, KAUTH_NETWORK_IPV6,
   2338  1.146      elad 			    KAUTH_REQ_NETWORK_IPV6_JOIN_MULTICAST, NULL, NULL, NULL))
   2339   1.31    itojun 			{
   2340    1.2    itojun 				error = EACCES;
   2341    1.2    itojun 				break;
   2342    1.2    itojun 			}
   2343  1.132    plunky 		} else if (!IN6_IS_ADDR_MULTICAST(&mreq.ipv6mr_multiaddr)) {
   2344    1.2    itojun 			error = EINVAL;
   2345    1.2    itojun 			break;
   2346    1.2    itojun 		}
   2347    1.2    itojun 
   2348    1.2    itojun 		/*
   2349    1.2    itojun 		 * If no interface was explicitly specified, choose an
   2350    1.2    itojun 		 * appropriate one according to the given multicast address.
   2351    1.2    itojun 		 */
   2352  1.132    plunky 		if (mreq.ipv6mr_interface == 0) {
   2353  1.124    dyoung 			struct rtentry *rt;
   2354  1.118    dyoung 			union {
   2355  1.118    dyoung 				struct sockaddr		dst;
   2356  1.118    dyoung 				struct sockaddr_in6	dst6;
   2357  1.118    dyoung 			} u;
   2358   1.94    rpaulo 
   2359   1.94    rpaulo 			/*
   2360   1.94    rpaulo 			 * Look up the routing table for the
   2361   1.94    rpaulo 			 * address, and choose the outgoing interface.
   2362   1.94    rpaulo 			 *   XXX: is it a good approach?
   2363   1.94    rpaulo 			 */
   2364  1.113    dyoung 			memset(&ro, 0, sizeof(ro));
   2365  1.132    plunky 			sockaddr_in6_init(&u.dst6, &mreq.ipv6mr_multiaddr, 0,
   2366  1.118    dyoung 			    0, 0);
   2367  1.118    dyoung 			rtcache_setdst(&ro, &u.dst);
   2368  1.125    dyoung 			ifp = (rt = rtcache_init(&ro)) != NULL ? rt->rt_ifp
   2369  1.124    dyoung 			                                        : NULL;
   2370  1.118    dyoung 			rtcache_free(&ro);
   2371   1.94    rpaulo 		} else {
   2372   1.94    rpaulo 			/*
   2373   1.94    rpaulo 			 * If the interface is specified, validate it.
   2374   1.94    rpaulo 			 */
   2375  1.132    plunky 			if (if_indexlim <= mreq.ipv6mr_interface ||
   2376  1.132    plunky 			    !ifindex2ifnet[mreq.ipv6mr_interface]) {
   2377   1.87  drochner 				error = ENXIO;	/* XXX EINVAL? */
   2378   1.87  drochner 				break;
   2379   1.87  drochner 			}
   2380  1.132    plunky 			ifp = ifindex2ifnet[mreq.ipv6mr_interface];
   2381   1.87  drochner 		}
   2382    1.2    itojun 
   2383    1.2    itojun 		/*
   2384    1.2    itojun 		 * See if we found an interface, and confirm that it
   2385    1.2    itojun 		 * supports multicast
   2386    1.2    itojun 		 */
   2387    1.2    itojun 		if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) {
   2388    1.2    itojun 			error = EADDRNOTAVAIL;
   2389    1.2    itojun 			break;
   2390    1.2    itojun 		}
   2391   1.94    rpaulo 
   2392  1.132    plunky 		if (in6_setscope(&mreq.ipv6mr_multiaddr, ifp, NULL)) {
   2393   1.94    rpaulo 			error = EADDRNOTAVAIL; /* XXX: should not happen */
   2394   1.94    rpaulo 			break;
   2395    1.2    itojun 		}
   2396   1.94    rpaulo 
   2397    1.2    itojun 		/*
   2398    1.2    itojun 		 * See if the membership already exists.
   2399    1.2    itojun 		 */
   2400    1.2    itojun 		for (imm = im6o->im6o_memberships.lh_first;
   2401    1.2    itojun 		     imm != NULL; imm = imm->i6mm_chain.le_next)
   2402    1.2    itojun 			if (imm->i6mm_maddr->in6m_ifp == ifp &&
   2403    1.2    itojun 			    IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr,
   2404  1.132    plunky 			    &mreq.ipv6mr_multiaddr))
   2405    1.2    itojun 				break;
   2406    1.2    itojun 		if (imm != NULL) {
   2407    1.2    itojun 			error = EADDRINUSE;
   2408    1.2    itojun 			break;
   2409    1.2    itojun 		}
   2410    1.2    itojun 		/*
   2411    1.2    itojun 		 * Everything looks good; add a new record to the multicast
   2412    1.2    itojun 		 * address list for the given interface.
   2413    1.2    itojun 		 */
   2414  1.132    plunky 		imm = in6_joingroup(ifp, &mreq.ipv6mr_multiaddr, &error, 0);
   2415   1.95    rpaulo 		if (imm == NULL)
   2416    1.2    itojun 			break;
   2417    1.2    itojun 		LIST_INSERT_HEAD(&im6o->im6o_memberships, imm, i6mm_chain);
   2418    1.2    itojun 		break;
   2419    1.2    itojun 
   2420    1.2    itojun 	case IPV6_LEAVE_GROUP:
   2421    1.2    itojun 		/*
   2422    1.2    itojun 		 * Drop a multicast group membership.
   2423    1.2    itojun 		 * Group must be a valid IP6 multicast address.
   2424    1.2    itojun 		 */
   2425  1.132    plunky 		error = sockopt_get(sopt, &mreq, sizeof(mreq));
   2426  1.132    plunky 		if (error != 0)
   2427    1.2    itojun 			break;
   2428   1.94    rpaulo 
   2429    1.2    itojun 		/*
   2430    1.2    itojun 		 * If an interface address was specified, get a pointer
   2431    1.2    itojun 		 * to its ifnet structure.
   2432    1.2    itojun 		 */
   2433  1.132    plunky 		if (mreq.ipv6mr_interface != 0) {
   2434  1.132    plunky 			if (if_indexlim <= mreq.ipv6mr_interface ||
   2435  1.132    plunky 			    !ifindex2ifnet[mreq.ipv6mr_interface]) {
   2436   1.87  drochner 				error = ENXIO;	/* XXX EINVAL? */
   2437   1.87  drochner 				break;
   2438   1.87  drochner 			}
   2439  1.132    plunky 			ifp = ifindex2ifnet[mreq.ipv6mr_interface];
   2440   1.87  drochner 		} else
   2441   1.87  drochner 			ifp = NULL;
   2442   1.94    rpaulo 
   2443   1.94    rpaulo 		/* Fill in the scope zone ID */
   2444   1.94    rpaulo 		if (ifp) {
   2445  1.132    plunky 			if (in6_setscope(&mreq.ipv6mr_multiaddr, ifp, NULL)) {
   2446   1.94    rpaulo 				/* XXX: should not happen */
   2447   1.94    rpaulo 				error = EADDRNOTAVAIL;
   2448   1.94    rpaulo 				break;
   2449   1.94    rpaulo 			}
   2450  1.132    plunky 		} else if (mreq.ipv6mr_interface != 0) {
   2451   1.94    rpaulo 			/*
   2452   1.94    rpaulo 			 * XXX: This case would happens when the (positive)
   2453   1.94    rpaulo 			 * index is in the valid range, but the corresponding
   2454   1.94    rpaulo 			 * interface has been detached dynamically.  The above
   2455   1.94    rpaulo 			 * check probably avoids such case to happen here, but
   2456   1.94    rpaulo 			 * we check it explicitly for safety.
   2457   1.94    rpaulo 			 */
   2458   1.94    rpaulo 			error = EADDRNOTAVAIL;
   2459   1.94    rpaulo 			break;
   2460   1.94    rpaulo 		} else {	/* ipv6mr_interface == 0 */
   2461   1.94    rpaulo 			struct sockaddr_in6 sa6_mc;
   2462   1.94    rpaulo 
   2463   1.94    rpaulo 			/*
   2464   1.94    rpaulo 			 * The API spec says as follows:
   2465   1.94    rpaulo 			 *  If the interface index is specified as 0, the
   2466   1.94    rpaulo 			 *  system may choose a multicast group membership to
   2467   1.94    rpaulo 			 *  drop by matching the multicast address only.
   2468   1.94    rpaulo 			 * On the other hand, we cannot disambiguate the scope
   2469   1.94    rpaulo 			 * zone unless an interface is provided.  Thus, we
   2470   1.94    rpaulo 			 * check if there's ambiguity with the default scope
   2471   1.94    rpaulo 			 * zone as the last resort.
   2472   1.94    rpaulo 			 */
   2473  1.132    plunky 			sockaddr_in6_init(&sa6_mc, &mreq.ipv6mr_multiaddr,
   2474  1.123    dyoung 			    0, 0, 0);
   2475   1.94    rpaulo 			error = sa6_embedscope(&sa6_mc, ip6_use_defzone);
   2476   1.94    rpaulo 			if (error != 0)
   2477   1.94    rpaulo 				break;
   2478  1.132    plunky 			mreq.ipv6mr_multiaddr = sa6_mc.sin6_addr;
   2479    1.2    itojun 		}
   2480   1.94    rpaulo 
   2481    1.2    itojun 		/*
   2482    1.2    itojun 		 * Find the membership in the membership list.
   2483    1.2    itojun 		 */
   2484    1.2    itojun 		for (imm = im6o->im6o_memberships.lh_first;
   2485    1.2    itojun 		     imm != NULL; imm = imm->i6mm_chain.le_next) {
   2486   1.49    itojun 			if ((ifp == NULL || imm->i6mm_maddr->in6m_ifp == ifp) &&
   2487    1.2    itojun 			    IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr,
   2488  1.132    plunky 			    &mreq.ipv6mr_multiaddr))
   2489    1.2    itojun 				break;
   2490    1.2    itojun 		}
   2491    1.2    itojun 		if (imm == NULL) {
   2492    1.2    itojun 			/* Unable to resolve interface */
   2493    1.2    itojun 			error = EADDRNOTAVAIL;
   2494    1.2    itojun 			break;
   2495    1.2    itojun 		}
   2496    1.2    itojun 		/*
   2497    1.2    itojun 		 * Give up the multicast address record to which the
   2498    1.2    itojun 		 * membership points.
   2499    1.2    itojun 		 */
   2500    1.2    itojun 		LIST_REMOVE(imm, i6mm_chain);
   2501   1.43    itojun 		in6_leavegroup(imm);
   2502    1.2    itojun 		break;
   2503    1.2    itojun 
   2504    1.2    itojun 	default:
   2505    1.2    itojun 		error = EOPNOTSUPP;
   2506    1.2    itojun 		break;
   2507    1.2    itojun 	}
   2508    1.2    itojun 
   2509    1.2    itojun 	/*
   2510    1.2    itojun 	 * If all options have default values, no need to keep the mbuf.
   2511    1.2    itojun 	 */
   2512    1.2    itojun 	if (im6o->im6o_multicast_ifp == NULL &&
   2513    1.2    itojun 	    im6o->im6o_multicast_hlim == ip6_defmcasthlim &&
   2514    1.2    itojun 	    im6o->im6o_multicast_loop == IPV6_DEFAULT_MULTICAST_LOOP &&
   2515    1.2    itojun 	    im6o->im6o_memberships.lh_first == NULL) {
   2516    1.2    itojun 		free(*im6op, M_IPMOPTS);
   2517    1.2    itojun 		*im6op = NULL;
   2518    1.2    itojun 	}
   2519    1.2    itojun 
   2520   1.57    itojun 	return (error);
   2521    1.2    itojun }
   2522    1.2    itojun 
   2523    1.2    itojun /*
   2524    1.2    itojun  * Return the IP6 multicast options in response to user getsockopt().
   2525    1.2    itojun  */
   2526    1.2    itojun static int
   2527  1.132    plunky ip6_getmoptions(struct sockopt *sopt, struct ip6_moptions *im6o)
   2528    1.2    itojun {
   2529  1.132    plunky 	u_int optval;
   2530  1.132    plunky 	int error;
   2531    1.2    itojun 
   2532  1.132    plunky 	switch (sopt->sopt_name) {
   2533    1.2    itojun 	case IPV6_MULTICAST_IF:
   2534    1.2    itojun 		if (im6o == NULL || im6o->im6o_multicast_ifp == NULL)
   2535  1.132    plunky 			optval = 0;
   2536    1.2    itojun 		else
   2537  1.132    plunky 			optval = im6o->im6o_multicast_ifp->if_index;
   2538  1.132    plunky 
   2539  1.132    plunky 		error = sockopt_set(sopt, &optval, sizeof(optval));
   2540  1.132    plunky 		break;
   2541    1.2    itojun 
   2542    1.2    itojun 	case IPV6_MULTICAST_HOPS:
   2543    1.2    itojun 		if (im6o == NULL)
   2544  1.132    plunky 			optval = ip6_defmcasthlim;
   2545    1.2    itojun 		else
   2546  1.132    plunky 			optval = im6o->im6o_multicast_hlim;
   2547  1.132    plunky 
   2548  1.132    plunky 		error = sockopt_set(sopt, &optval, sizeof(optval));
   2549  1.132    plunky 		break;
   2550    1.2    itojun 
   2551    1.2    itojun 	case IPV6_MULTICAST_LOOP:
   2552    1.2    itojun 		if (im6o == NULL)
   2553  1.132    plunky 			optval = ip6_defmcasthlim;
   2554    1.2    itojun 		else
   2555  1.132    plunky 			optval = im6o->im6o_multicast_loop;
   2556  1.132    plunky 
   2557  1.132    plunky 		error = sockopt_set(sopt, &optval, sizeof(optval));
   2558  1.132    plunky 		break;
   2559    1.2    itojun 
   2560    1.2    itojun 	default:
   2561  1.132    plunky 		error = EOPNOTSUPP;
   2562    1.2    itojun 	}
   2563  1.132    plunky 
   2564  1.132    plunky 	return (error);
   2565    1.2    itojun }
   2566    1.2    itojun 
   2567    1.2    itojun /*
   2568    1.2    itojun  * Discard the IP6 multicast options.
   2569    1.2    itojun  */
   2570    1.2    itojun void
   2571  1.119  christos ip6_freemoptions(struct ip6_moptions *im6o)
   2572    1.2    itojun {
   2573    1.2    itojun 	struct in6_multi_mship *imm;
   2574    1.2    itojun 
   2575    1.2    itojun 	if (im6o == NULL)
   2576    1.2    itojun 		return;
   2577    1.2    itojun 
   2578    1.2    itojun 	while ((imm = im6o->im6o_memberships.lh_first) != NULL) {
   2579    1.2    itojun 		LIST_REMOVE(imm, i6mm_chain);
   2580   1.43    itojun 		in6_leavegroup(imm);
   2581    1.2    itojun 	}
   2582    1.2    itojun 	free(im6o, M_IPMOPTS);
   2583    1.2    itojun }
   2584    1.2    itojun 
   2585    1.2    itojun /*
   2586    1.2    itojun  * Set IPv6 outgoing packet options based on advanced API.
   2587    1.2    itojun  */
   2588    1.2    itojun int
   2589  1.119  christos ip6_setpktopts(struct mbuf *control, struct ip6_pktopts *opt,
   2590  1.138      elad 	struct ip6_pktopts *stickyopt, kauth_cred_t cred, int uproto)
   2591    1.2    itojun {
   2592   1.31    itojun 	struct cmsghdr *cm = 0;
   2593    1.2    itojun 
   2594   1.97    rpaulo 	if (control == NULL || opt == NULL)
   2595   1.57    itojun 		return (EINVAL);
   2596    1.2    itojun 
   2597   1.97    rpaulo 	ip6_initpktopts(opt);
   2598   1.97    rpaulo 	if (stickyopt) {
   2599   1.97    rpaulo 		int error;
   2600   1.97    rpaulo 
   2601   1.97    rpaulo 		/*
   2602   1.97    rpaulo 		 * If stickyopt is provided, make a local copy of the options
   2603   1.97    rpaulo 		 * for this particular packet, then override them by ancillary
   2604   1.97    rpaulo 		 * objects.
   2605   1.97    rpaulo 		 * XXX: copypktopts() does not copy the cached route to a next
   2606   1.97    rpaulo 		 * hop (if any).  This is not very good in terms of efficiency,
   2607   1.97    rpaulo 		 * but we can allow this since this option should be rarely
   2608   1.97    rpaulo 		 * used.
   2609   1.97    rpaulo 		 */
   2610   1.97    rpaulo 		if ((error = copypktopts(opt, stickyopt, M_NOWAIT)) != 0)
   2611   1.97    rpaulo 			return (error);
   2612   1.97    rpaulo 	}
   2613    1.2    itojun 
   2614    1.2    itojun 	/*
   2615    1.2    itojun 	 * XXX: Currently, we assume all the optional information is stored
   2616    1.2    itojun 	 * in a single mbuf.
   2617    1.2    itojun 	 */
   2618    1.2    itojun 	if (control->m_next)
   2619   1.57    itojun 		return (EINVAL);
   2620    1.2    itojun 
   2621  1.137  drochner 	/* XXX if cm->cmsg_len is not aligned, control->m_len can become <0 */
   2622  1.137  drochner 	for (; control->m_len > 0; control->m_data += CMSG_ALIGN(cm->cmsg_len),
   2623   1.49    itojun 	    control->m_len -= CMSG_ALIGN(cm->cmsg_len)) {
   2624   1.97    rpaulo 		int error;
   2625   1.97    rpaulo 
   2626   1.97    rpaulo 		if (control->m_len < CMSG_LEN(0))
   2627   1.97    rpaulo 			return (EINVAL);
   2628   1.97    rpaulo 
   2629    1.2    itojun 		cm = mtod(control, struct cmsghdr *);
   2630    1.2    itojun 		if (cm->cmsg_len == 0 || cm->cmsg_len > control->m_len)
   2631   1.57    itojun 			return (EINVAL);
   2632    1.2    itojun 		if (cm->cmsg_level != IPPROTO_IPV6)
   2633    1.2    itojun 			continue;
   2634    1.2    itojun 
   2635   1.97    rpaulo 		error = ip6_setpktopt(cm->cmsg_type, CMSG_DATA(cm),
   2636  1.138      elad 		    cm->cmsg_len - CMSG_LEN(0), opt, cred, 0, 1, uproto);
   2637   1.97    rpaulo 		if (error)
   2638   1.97    rpaulo 			return (error);
   2639   1.97    rpaulo 	}
   2640   1.97    rpaulo 
   2641   1.97    rpaulo 	return (0);
   2642   1.97    rpaulo }
   2643   1.97    rpaulo 
   2644   1.97    rpaulo /*
   2645   1.97    rpaulo  * Set a particular packet option, as a sticky option or an ancillary data
   2646   1.97    rpaulo  * item.  "len" can be 0 only when it's a sticky option.
   2647   1.97    rpaulo  * We have 4 cases of combination of "sticky" and "cmsg":
   2648   1.97    rpaulo  * "sticky=0, cmsg=0": impossible
   2649   1.97    rpaulo  * "sticky=0, cmsg=1": RFC2292 or RFC3542 ancillary data
   2650   1.97    rpaulo  * "sticky=1, cmsg=0": RFC3542 socket option
   2651   1.97    rpaulo  * "sticky=1, cmsg=1": RFC2292 socket option
   2652   1.97    rpaulo  */
   2653   1.97    rpaulo static int
   2654   1.97    rpaulo ip6_setpktopt(int optname, u_char *buf, int len, struct ip6_pktopts *opt,
   2655  1.138      elad     kauth_cred_t cred, int sticky, int cmsg, int uproto)
   2656   1.97    rpaulo {
   2657   1.97    rpaulo 	int minmtupolicy;
   2658  1.139      elad 	int error;
   2659   1.97    rpaulo 
   2660   1.97    rpaulo 	if (!sticky && !cmsg) {
   2661   1.97    rpaulo #ifdef DIAGNOSTIC
   2662   1.97    rpaulo 		printf("ip6_setpktopt: impossible case\n");
   2663   1.97    rpaulo #endif
   2664   1.97    rpaulo 		return (EINVAL);
   2665   1.97    rpaulo 	}
   2666   1.97    rpaulo 
   2667   1.97    rpaulo 	/*
   2668   1.97    rpaulo 	 * IPV6_2292xxx is for backward compatibility to RFC2292, and should
   2669   1.97    rpaulo 	 * not be specified in the context of RFC3542.  Conversely,
   2670   1.97    rpaulo 	 * RFC3542 types should not be specified in the context of RFC2292.
   2671   1.97    rpaulo 	 */
   2672   1.97    rpaulo 	if (!cmsg) {
   2673   1.97    rpaulo 		switch (optname) {
   2674   1.97    rpaulo 		case IPV6_2292PKTINFO:
   2675   1.97    rpaulo 		case IPV6_2292HOPLIMIT:
   2676   1.97    rpaulo 		case IPV6_2292NEXTHOP:
   2677   1.97    rpaulo 		case IPV6_2292HOPOPTS:
   2678   1.97    rpaulo 		case IPV6_2292DSTOPTS:
   2679   1.97    rpaulo 		case IPV6_2292RTHDR:
   2680   1.97    rpaulo 		case IPV6_2292PKTOPTIONS:
   2681   1.97    rpaulo 			return (ENOPROTOOPT);
   2682   1.97    rpaulo 		}
   2683   1.97    rpaulo 	}
   2684   1.97    rpaulo 	if (sticky && cmsg) {
   2685   1.97    rpaulo 		switch (optname) {
   2686    1.2    itojun 		case IPV6_PKTINFO:
   2687   1.97    rpaulo 		case IPV6_HOPLIMIT:
   2688   1.97    rpaulo 		case IPV6_NEXTHOP:
   2689   1.97    rpaulo 		case IPV6_HOPOPTS:
   2690   1.97    rpaulo 		case IPV6_DSTOPTS:
   2691   1.97    rpaulo 		case IPV6_RTHDRDSTOPTS:
   2692   1.97    rpaulo 		case IPV6_RTHDR:
   2693   1.97    rpaulo 		case IPV6_USE_MIN_MTU:
   2694   1.97    rpaulo 		case IPV6_DONTFRAG:
   2695   1.97    rpaulo 		case IPV6_OTCLASS:
   2696   1.97    rpaulo 		case IPV6_TCLASS:
   2697   1.97    rpaulo 			return (ENOPROTOOPT);
   2698   1.97    rpaulo 		}
   2699   1.97    rpaulo 	}
   2700   1.97    rpaulo 
   2701   1.97    rpaulo 	switch (optname) {
   2702   1.97    rpaulo #ifdef RFC2292
   2703   1.97    rpaulo 	case IPV6_2292PKTINFO:
   2704   1.97    rpaulo #endif
   2705   1.97    rpaulo 	case IPV6_PKTINFO:
   2706   1.97    rpaulo 	{
   2707   1.97    rpaulo 		struct ifnet *ifp = NULL;
   2708   1.97    rpaulo 		struct in6_pktinfo *pktinfo;
   2709   1.97    rpaulo 
   2710   1.97    rpaulo 		if (len != sizeof(struct in6_pktinfo))
   2711   1.97    rpaulo 			return (EINVAL);
   2712   1.97    rpaulo 
   2713   1.97    rpaulo 		pktinfo = (struct in6_pktinfo *)buf;
   2714   1.97    rpaulo 
   2715   1.97    rpaulo 		/*
   2716   1.97    rpaulo 		 * An application can clear any sticky IPV6_PKTINFO option by
   2717   1.97    rpaulo 		 * doing a "regular" setsockopt with ipi6_addr being
   2718   1.97    rpaulo 		 * in6addr_any and ipi6_ifindex being zero.
   2719   1.97    rpaulo 		 * [RFC 3542, Section 6]
   2720   1.97    rpaulo 		 */
   2721   1.97    rpaulo 		if (optname == IPV6_PKTINFO && opt->ip6po_pktinfo &&
   2722   1.97    rpaulo 		    pktinfo->ipi6_ifindex == 0 &&
   2723   1.97    rpaulo 		    IN6_IS_ADDR_UNSPECIFIED(&pktinfo->ipi6_addr)) {
   2724   1.97    rpaulo 			ip6_clearpktopts(opt, optname);
   2725   1.97    rpaulo 			break;
   2726   1.97    rpaulo 		}
   2727   1.97    rpaulo 
   2728   1.97    rpaulo 		if (uproto == IPPROTO_TCP && optname == IPV6_PKTINFO &&
   2729   1.97    rpaulo 		    sticky && !IN6_IS_ADDR_UNSPECIFIED(&pktinfo->ipi6_addr)) {
   2730   1.97    rpaulo 			return (EINVAL);
   2731   1.97    rpaulo 		}
   2732   1.97    rpaulo 
   2733   1.97    rpaulo 		/* validate the interface index if specified. */
   2734  1.102  christos 		if (pktinfo->ipi6_ifindex >= if_indexlim) {
   2735   1.97    rpaulo 			 return (ENXIO);
   2736   1.97    rpaulo 		}
   2737   1.97    rpaulo 		if (pktinfo->ipi6_ifindex) {
   2738   1.97    rpaulo 			ifp = ifindex2ifnet[pktinfo->ipi6_ifindex];
   2739   1.97    rpaulo 			if (ifp == NULL)
   2740   1.57    itojun 				return (ENXIO);
   2741   1.97    rpaulo 		}
   2742   1.97    rpaulo 
   2743   1.97    rpaulo 		/*
   2744   1.97    rpaulo 		 * We store the address anyway, and let in6_selectsrc()
   2745   1.97    rpaulo 		 * validate the specified address.  This is because ipi6_addr
   2746   1.97    rpaulo 		 * may not have enough information about its scope zone, and
   2747   1.97    rpaulo 		 * we may need additional information (such as outgoing
   2748   1.97    rpaulo 		 * interface or the scope zone of a destination address) to
   2749   1.97    rpaulo 		 * disambiguate the scope.
   2750   1.97    rpaulo 		 * XXX: the delay of the validation may confuse the
   2751   1.97    rpaulo 		 * application when it is used as a sticky option.
   2752   1.97    rpaulo 		 */
   2753   1.97    rpaulo 		if (opt->ip6po_pktinfo == NULL) {
   2754   1.97    rpaulo 			opt->ip6po_pktinfo = malloc(sizeof(*pktinfo),
   2755   1.97    rpaulo 			    M_IP6OPT, M_NOWAIT);
   2756   1.97    rpaulo 			if (opt->ip6po_pktinfo == NULL)
   2757   1.97    rpaulo 				return (ENOBUFS);
   2758   1.97    rpaulo 		}
   2759   1.97    rpaulo 		memcpy(opt->ip6po_pktinfo, pktinfo, sizeof(*pktinfo));
   2760   1.97    rpaulo 		break;
   2761   1.97    rpaulo 	}
   2762   1.97    rpaulo 
   2763   1.97    rpaulo #ifdef RFC2292
   2764   1.97    rpaulo 	case IPV6_2292HOPLIMIT:
   2765   1.97    rpaulo #endif
   2766   1.97    rpaulo 	case IPV6_HOPLIMIT:
   2767   1.97    rpaulo 	{
   2768   1.97    rpaulo 		int *hlimp;
   2769   1.97    rpaulo 
   2770   1.97    rpaulo 		/*
   2771   1.97    rpaulo 		 * RFC 3542 deprecated the usage of sticky IPV6_HOPLIMIT
   2772   1.97    rpaulo 		 * to simplify the ordering among hoplimit options.
   2773   1.97    rpaulo 		 */
   2774   1.97    rpaulo 		if (optname == IPV6_HOPLIMIT && sticky)
   2775   1.97    rpaulo 			return (ENOPROTOOPT);
   2776   1.97    rpaulo 
   2777   1.97    rpaulo 		if (len != sizeof(int))
   2778   1.97    rpaulo 			return (EINVAL);
   2779   1.97    rpaulo 		hlimp = (int *)buf;
   2780   1.97    rpaulo 		if (*hlimp < -1 || *hlimp > 255)
   2781   1.97    rpaulo 			return (EINVAL);
   2782   1.97    rpaulo 
   2783   1.97    rpaulo 		opt->ip6po_hlim = *hlimp;
   2784   1.97    rpaulo 		break;
   2785   1.97    rpaulo 	}
   2786   1.97    rpaulo 
   2787   1.97    rpaulo 	case IPV6_OTCLASS:
   2788   1.97    rpaulo 		if (len != sizeof(u_int8_t))
   2789   1.97    rpaulo 			return (EINVAL);
   2790   1.97    rpaulo 
   2791   1.97    rpaulo 		opt->ip6po_tclass = *(u_int8_t *)buf;
   2792   1.97    rpaulo 		break;
   2793   1.97    rpaulo 
   2794   1.97    rpaulo 	case IPV6_TCLASS:
   2795   1.97    rpaulo 	{
   2796   1.97    rpaulo 		int tclass;
   2797   1.97    rpaulo 
   2798   1.97    rpaulo 		if (len != sizeof(int))
   2799   1.97    rpaulo 			return (EINVAL);
   2800   1.97    rpaulo 		tclass = *(int *)buf;
   2801   1.97    rpaulo 		if (tclass < -1 || tclass > 255)
   2802   1.97    rpaulo 			return (EINVAL);
   2803    1.2    itojun 
   2804   1.97    rpaulo 		opt->ip6po_tclass = tclass;
   2805   1.97    rpaulo 		break;
   2806   1.97    rpaulo 	}
   2807   1.94    rpaulo 
   2808   1.97    rpaulo #ifdef RFC2292
   2809   1.97    rpaulo 	case IPV6_2292NEXTHOP:
   2810   1.97    rpaulo #endif
   2811   1.97    rpaulo 	case IPV6_NEXTHOP:
   2812  1.146      elad 		error = kauth_authorize_network(cred, KAUTH_NETWORK_IPV6,
   2813  1.146      elad 		    KAUTH_REQ_NETWORK_IPV6_HOPBYHOP, NULL, NULL, NULL);
   2814  1.139      elad 		if (error)
   2815  1.139      elad 			return (error);
   2816   1.35    itojun 
   2817   1.97    rpaulo 		if (len == 0) {	/* just remove the option */
   2818   1.97    rpaulo 			ip6_clearpktopts(opt, IPV6_NEXTHOP);
   2819    1.2    itojun 			break;
   2820   1.97    rpaulo 		}
   2821   1.97    rpaulo 
   2822   1.97    rpaulo 		/* check if cmsg_len is large enough for sa_len */
   2823   1.97    rpaulo 		if (len < sizeof(struct sockaddr) || len < *buf)
   2824   1.97    rpaulo 			return (EINVAL);
   2825   1.97    rpaulo 
   2826   1.97    rpaulo 		switch (((struct sockaddr *)buf)->sa_family) {
   2827   1.97    rpaulo 		case AF_INET6:
   2828   1.97    rpaulo 		{
   2829   1.97    rpaulo 			struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *)buf;
   2830    1.2    itojun 
   2831   1.97    rpaulo 			if (sa6->sin6_len != sizeof(struct sockaddr_in6))
   2832   1.57    itojun 				return (EINVAL);
   2833    1.2    itojun 
   2834   1.97    rpaulo 			if (IN6_IS_ADDR_UNSPECIFIED(&sa6->sin6_addr) ||
   2835   1.97    rpaulo 			    IN6_IS_ADDR_MULTICAST(&sa6->sin6_addr)) {
   2836   1.97    rpaulo 				return (EINVAL);
   2837   1.97    rpaulo 			}
   2838   1.97    rpaulo 			if ((error = sa6_embedscope(sa6, ip6_use_defzone))
   2839   1.97    rpaulo 			    != 0) {
   2840   1.97    rpaulo 				return (error);
   2841   1.67    itojun 			}
   2842    1.2    itojun 			break;
   2843   1.97    rpaulo 		}
   2844   1.97    rpaulo 		case AF_LINK:	/* eventually be supported? */
   2845   1.97    rpaulo 		default:
   2846   1.97    rpaulo 			return (EAFNOSUPPORT);
   2847   1.97    rpaulo 		}
   2848    1.2    itojun 
   2849   1.97    rpaulo 		/* turn off the previous option, then set the new option. */
   2850   1.97    rpaulo 		ip6_clearpktopts(opt, IPV6_NEXTHOP);
   2851   1.97    rpaulo 		opt->ip6po_nexthop = malloc(*buf, M_IP6OPT, M_NOWAIT);
   2852   1.97    rpaulo 		if (opt->ip6po_nexthop == NULL)
   2853   1.97    rpaulo 			return (ENOBUFS);
   2854   1.97    rpaulo 		memcpy(opt->ip6po_nexthop, buf, *buf);
   2855   1.97    rpaulo 		break;
   2856   1.97    rpaulo 
   2857   1.97    rpaulo #ifdef RFC2292
   2858   1.97    rpaulo 	case IPV6_2292HOPOPTS:
   2859   1.97    rpaulo #endif
   2860   1.97    rpaulo 	case IPV6_HOPOPTS:
   2861   1.97    rpaulo 	{
   2862   1.97    rpaulo 		struct ip6_hbh *hbh;
   2863   1.97    rpaulo 		int hbhlen;
   2864   1.97    rpaulo 
   2865   1.97    rpaulo 		/*
   2866   1.97    rpaulo 		 * XXX: We don't allow a non-privileged user to set ANY HbH
   2867   1.97    rpaulo 		 * options, since per-option restriction has too much
   2868   1.97    rpaulo 		 * overhead.
   2869   1.97    rpaulo 		 */
   2870  1.146      elad 		error = kauth_authorize_network(cred, KAUTH_NETWORK_IPV6,
   2871  1.146      elad 		    KAUTH_REQ_NETWORK_IPV6_HOPBYHOP, NULL, NULL, NULL);
   2872  1.139      elad 		if (error)
   2873  1.139      elad 			return (error);
   2874   1.97    rpaulo 
   2875   1.97    rpaulo 		if (len == 0) {
   2876   1.97    rpaulo 			ip6_clearpktopts(opt, IPV6_HOPOPTS);
   2877   1.97    rpaulo 			break;	/* just remove the option */
   2878   1.97    rpaulo 		}
   2879   1.31    itojun 
   2880   1.97    rpaulo 		/* message length validation */
   2881   1.97    rpaulo 		if (len < sizeof(struct ip6_hbh))
   2882   1.97    rpaulo 			return (EINVAL);
   2883   1.97    rpaulo 		hbh = (struct ip6_hbh *)buf;
   2884   1.97    rpaulo 		hbhlen = (hbh->ip6h_len + 1) << 3;
   2885   1.97    rpaulo 		if (len != hbhlen)
   2886   1.97    rpaulo 			return (EINVAL);
   2887    1.2    itojun 
   2888   1.97    rpaulo 		/* turn off the previous option, then set the new option. */
   2889   1.97    rpaulo 		ip6_clearpktopts(opt, IPV6_HOPOPTS);
   2890   1.97    rpaulo 		opt->ip6po_hbh = malloc(hbhlen, M_IP6OPT, M_NOWAIT);
   2891   1.97    rpaulo 		if (opt->ip6po_hbh == NULL)
   2892   1.97    rpaulo 			return (ENOBUFS);
   2893   1.97    rpaulo 		memcpy(opt->ip6po_hbh, hbh, hbhlen);
   2894    1.2    itojun 
   2895   1.97    rpaulo 		break;
   2896   1.97    rpaulo 	}
   2897    1.2    itojun 
   2898   1.97    rpaulo #ifdef RFC2292
   2899   1.97    rpaulo 	case IPV6_2292DSTOPTS:
   2900   1.97    rpaulo #endif
   2901   1.97    rpaulo 	case IPV6_DSTOPTS:
   2902   1.97    rpaulo 	case IPV6_RTHDRDSTOPTS:
   2903   1.97    rpaulo 	{
   2904   1.97    rpaulo 		struct ip6_dest *dest, **newdest = NULL;
   2905   1.97    rpaulo 		int destlen;
   2906   1.67    itojun 
   2907  1.139      elad 		/* XXX: see the comment for IPV6_HOPOPTS */
   2908  1.146      elad 		error = kauth_authorize_network(cred, KAUTH_NETWORK_IPV6,
   2909  1.146      elad 		    KAUTH_REQ_NETWORK_IPV6_HOPBYHOP, NULL, NULL, NULL);
   2910  1.139      elad 		if (error)
   2911  1.139      elad 			return (error);
   2912    1.2    itojun 
   2913   1.97    rpaulo 		if (len == 0) {
   2914   1.97    rpaulo 			ip6_clearpktopts(opt, optname);
   2915   1.97    rpaulo 			break;	/* just remove the option */
   2916   1.97    rpaulo 		}
   2917    1.2    itojun 
   2918   1.97    rpaulo 		/* message length validation */
   2919   1.97    rpaulo 		if (len < sizeof(struct ip6_dest))
   2920   1.97    rpaulo 			return (EINVAL);
   2921   1.97    rpaulo 		dest = (struct ip6_dest *)buf;
   2922   1.97    rpaulo 		destlen = (dest->ip6d_len + 1) << 3;
   2923   1.97    rpaulo 		if (len != destlen)
   2924   1.97    rpaulo 			return (EINVAL);
   2925   1.97    rpaulo 		/*
   2926   1.97    rpaulo 		 * Determine the position that the destination options header
   2927   1.97    rpaulo 		 * should be inserted; before or after the routing header.
   2928   1.97    rpaulo 		 */
   2929   1.97    rpaulo 		switch (optname) {
   2930   1.97    rpaulo 		case IPV6_2292DSTOPTS:
   2931    1.2    itojun 			/*
   2932   1.97    rpaulo 			 * The old advanced API is ambiguous on this point.
   2933   1.97    rpaulo 			 * Our approach is to determine the position based
   2934   1.97    rpaulo 			 * according to the existence of a routing header.
   2935   1.97    rpaulo 			 * Note, however, that this depends on the order of the
   2936   1.97    rpaulo 			 * extension headers in the ancillary data; the 1st
   2937   1.97    rpaulo 			 * part of the destination options header must appear
   2938   1.97    rpaulo 			 * before the routing header in the ancillary data,
   2939   1.97    rpaulo 			 * too.
   2940   1.97    rpaulo 			 * RFC3542 solved the ambiguity by introducing
   2941   1.97    rpaulo 			 * separate ancillary data or option types.
   2942    1.2    itojun 			 */
   2943   1.97    rpaulo 			if (opt->ip6po_rthdr == NULL)
   2944   1.97    rpaulo 				newdest = &opt->ip6po_dest1;
   2945   1.97    rpaulo 			else
   2946   1.97    rpaulo 				newdest = &opt->ip6po_dest2;
   2947   1.97    rpaulo 			break;
   2948   1.97    rpaulo 		case IPV6_RTHDRDSTOPTS:
   2949   1.97    rpaulo 			newdest = &opt->ip6po_dest1;
   2950   1.97    rpaulo 			break;
   2951   1.97    rpaulo 		case IPV6_DSTOPTS:
   2952   1.97    rpaulo 			newdest = &opt->ip6po_dest2;
   2953   1.97    rpaulo 			break;
   2954   1.97    rpaulo 		}
   2955   1.97    rpaulo 
   2956   1.97    rpaulo 		/* turn off the previous option, then set the new option. */
   2957   1.97    rpaulo 		ip6_clearpktopts(opt, optname);
   2958   1.97    rpaulo 		*newdest = malloc(destlen, M_IP6OPT, M_NOWAIT);
   2959   1.97    rpaulo 		if (*newdest == NULL)
   2960   1.97    rpaulo 			return (ENOBUFS);
   2961   1.97    rpaulo 		memcpy(*newdest, dest, destlen);
   2962   1.67    itojun 
   2963   1.97    rpaulo 		break;
   2964   1.97    rpaulo 	}
   2965   1.97    rpaulo 
   2966   1.97    rpaulo #ifdef RFC2292
   2967   1.97    rpaulo 	case IPV6_2292RTHDR:
   2968   1.97    rpaulo #endif
   2969   1.97    rpaulo 	case IPV6_RTHDR:
   2970   1.97    rpaulo 	{
   2971   1.97    rpaulo 		struct ip6_rthdr *rth;
   2972   1.97    rpaulo 		int rthlen;
   2973   1.97    rpaulo 
   2974   1.97    rpaulo 		if (len == 0) {
   2975   1.97    rpaulo 			ip6_clearpktopts(opt, IPV6_RTHDR);
   2976   1.97    rpaulo 			break;	/* just remove the option */
   2977   1.97    rpaulo 		}
   2978    1.2    itojun 
   2979   1.97    rpaulo 		/* message length validation */
   2980   1.97    rpaulo 		if (len < sizeof(struct ip6_rthdr))
   2981   1.97    rpaulo 			return (EINVAL);
   2982   1.97    rpaulo 		rth = (struct ip6_rthdr *)buf;
   2983   1.97    rpaulo 		rthlen = (rth->ip6r_len + 1) << 3;
   2984   1.97    rpaulo 		if (len != rthlen)
   2985   1.97    rpaulo 			return (EINVAL);
   2986   1.97    rpaulo 		switch (rth->ip6r_type) {
   2987   1.97    rpaulo 		case IPV6_RTHDR_TYPE_0:
   2988   1.97    rpaulo 			if (rth->ip6r_len == 0)	/* must contain one addr */
   2989   1.97    rpaulo 				return (EINVAL);
   2990   1.97    rpaulo 			if (rth->ip6r_len % 2) /* length must be even */
   2991   1.97    rpaulo 				return (EINVAL);
   2992   1.97    rpaulo 			if (rth->ip6r_len / 2 != rth->ip6r_segleft)
   2993   1.57    itojun 				return (EINVAL);
   2994    1.2    itojun 			break;
   2995    1.2    itojun 		default:
   2996   1.97    rpaulo 			return (EINVAL);	/* not supported */
   2997    1.2    itojun 		}
   2998   1.97    rpaulo 		/* turn off the previous option */
   2999   1.97    rpaulo 		ip6_clearpktopts(opt, IPV6_RTHDR);
   3000   1.97    rpaulo 		opt->ip6po_rthdr = malloc(rthlen, M_IP6OPT, M_NOWAIT);
   3001   1.97    rpaulo 		if (opt->ip6po_rthdr == NULL)
   3002   1.97    rpaulo 			return (ENOBUFS);
   3003   1.97    rpaulo 		memcpy(opt->ip6po_rthdr, rth, rthlen);
   3004   1.97    rpaulo 		break;
   3005    1.2    itojun 	}
   3006    1.2    itojun 
   3007   1.97    rpaulo 	case IPV6_USE_MIN_MTU:
   3008   1.97    rpaulo 		if (len != sizeof(int))
   3009   1.97    rpaulo 			return (EINVAL);
   3010   1.97    rpaulo 		minmtupolicy = *(int *)buf;
   3011   1.97    rpaulo 		if (minmtupolicy != IP6PO_MINMTU_MCASTONLY &&
   3012   1.97    rpaulo 		    minmtupolicy != IP6PO_MINMTU_DISABLE &&
   3013   1.97    rpaulo 		    minmtupolicy != IP6PO_MINMTU_ALL) {
   3014   1.97    rpaulo 			return (EINVAL);
   3015   1.97    rpaulo 		}
   3016   1.97    rpaulo 		opt->ip6po_minmtu = minmtupolicy;
   3017   1.97    rpaulo 		break;
   3018   1.97    rpaulo 
   3019   1.97    rpaulo 	case IPV6_DONTFRAG:
   3020   1.97    rpaulo 		if (len != sizeof(int))
   3021   1.97    rpaulo 			return (EINVAL);
   3022   1.97    rpaulo 
   3023   1.97    rpaulo 		if (uproto == IPPROTO_TCP || *(int *)buf == 0) {
   3024   1.97    rpaulo 			/*
   3025   1.97    rpaulo 			 * we ignore this option for TCP sockets.
   3026   1.97    rpaulo 			 * (RFC3542 leaves this case unspecified.)
   3027   1.97    rpaulo 			 */
   3028   1.97    rpaulo 			opt->ip6po_flags &= ~IP6PO_DONTFRAG;
   3029   1.97    rpaulo 		} else
   3030   1.97    rpaulo 			opt->ip6po_flags |= IP6PO_DONTFRAG;
   3031   1.97    rpaulo 		break;
   3032   1.97    rpaulo 
   3033   1.97    rpaulo 	default:
   3034   1.97    rpaulo 		return (ENOPROTOOPT);
   3035   1.97    rpaulo 	} /* end of switch */
   3036   1.97    rpaulo 
   3037   1.57    itojun 	return (0);
   3038    1.2    itojun }
   3039    1.2    itojun 
   3040    1.2    itojun /*
   3041    1.2    itojun  * Routine called from ip6_output() to loop back a copy of an IP6 multicast
   3042    1.2    itojun  * packet to the input queue of a specified interface.  Note that this
   3043    1.2    itojun  * calls the output routine of the loopback "driver", but with an interface
   3044   1.86     peter  * pointer that might NOT be lo0ifp -- easier than replicating that code here.
   3045    1.2    itojun  */
   3046    1.2    itojun void
   3047  1.119  christos ip6_mloopback(struct ifnet *ifp, struct mbuf *m,
   3048  1.119  christos 	const struct sockaddr_in6 *dst)
   3049    1.2    itojun {
   3050   1.22    itojun 	struct mbuf *copym;
   3051   1.22    itojun 	struct ip6_hdr *ip6;
   3052    1.2    itojun 
   3053    1.2    itojun 	copym = m_copy(m, 0, M_COPYALL);
   3054   1.22    itojun 	if (copym == NULL)
   3055   1.22    itojun 		return;
   3056   1.22    itojun 
   3057   1.22    itojun 	/*
   3058   1.22    itojun 	 * Make sure to deep-copy IPv6 header portion in case the data
   3059   1.22    itojun 	 * is in an mbuf cluster, so that we can safely override the IPv6
   3060   1.22    itojun 	 * header portion later.
   3061   1.22    itojun 	 */
   3062   1.22    itojun 	if ((copym->m_flags & M_EXT) != 0 ||
   3063   1.22    itojun 	    copym->m_len < sizeof(struct ip6_hdr)) {
   3064   1.22    itojun 		copym = m_pullup(copym, sizeof(struct ip6_hdr));
   3065   1.22    itojun 		if (copym == NULL)
   3066   1.22    itojun 			return;
   3067   1.22    itojun 	}
   3068   1.22    itojun 
   3069   1.22    itojun #ifdef DIAGNOSTIC
   3070   1.22    itojun 	if (copym->m_len < sizeof(*ip6)) {
   3071   1.22    itojun 		m_freem(copym);
   3072   1.22    itojun 		return;
   3073   1.22    itojun 	}
   3074   1.22    itojun #endif
   3075   1.22    itojun 
   3076   1.34    itojun 	ip6 = mtod(copym, struct ip6_hdr *);
   3077   1.94    rpaulo 	/*
   3078   1.94    rpaulo 	 * clear embedded scope identifiers if necessary.
   3079   1.94    rpaulo 	 * in6_clearscope will touch the addresses only when necessary.
   3080   1.94    rpaulo 	 */
   3081   1.94    rpaulo 	in6_clearscope(&ip6->ip6_src);
   3082   1.94    rpaulo 	in6_clearscope(&ip6->ip6_dst);
   3083   1.22    itojun 
   3084  1.115    dyoung 	(void)looutput(ifp, copym, (const struct sockaddr *)dst, NULL);
   3085    1.2    itojun }
   3086    1.2    itojun 
   3087    1.2    itojun /*
   3088    1.2    itojun  * Chop IPv6 header off from the payload.
   3089    1.2    itojun  */
   3090    1.2    itojun static int
   3091  1.119  christos ip6_splithdr(struct mbuf *m,  struct ip6_exthdrs *exthdrs)
   3092    1.2    itojun {
   3093    1.2    itojun 	struct mbuf *mh;
   3094    1.2    itojun 	struct ip6_hdr *ip6;
   3095    1.2    itojun 
   3096    1.2    itojun 	ip6 = mtod(m, struct ip6_hdr *);
   3097    1.2    itojun 	if (m->m_len > sizeof(*ip6)) {
   3098    1.2    itojun 		MGETHDR(mh, M_DONTWAIT, MT_HEADER);
   3099    1.2    itojun 		if (mh == 0) {
   3100    1.2    itojun 			m_freem(m);
   3101    1.2    itojun 			return ENOBUFS;
   3102    1.2    itojun 		}
   3103   1.91      yamt 		M_MOVE_PKTHDR(mh, m);
   3104    1.2    itojun 		MH_ALIGN(mh, sizeof(*ip6));
   3105    1.2    itojun 		m->m_len -= sizeof(*ip6);
   3106    1.2    itojun 		m->m_data += sizeof(*ip6);
   3107    1.2    itojun 		mh->m_next = m;
   3108    1.2    itojun 		m = mh;
   3109    1.2    itojun 		m->m_len = sizeof(*ip6);
   3110  1.117  christos 		bcopy((void *)ip6, mtod(m, void *), sizeof(*ip6));
   3111    1.2    itojun 	}
   3112    1.2    itojun 	exthdrs->ip6e_ip6 = m;
   3113    1.2    itojun 	return 0;
   3114    1.2    itojun }
   3115    1.2    itojun 
   3116    1.2    itojun /*
   3117    1.2    itojun  * Compute IPv6 extension header length.
   3118    1.2    itojun  */
   3119    1.2    itojun int
   3120  1.119  christos ip6_optlen(struct in6pcb *in6p)
   3121    1.2    itojun {
   3122    1.2    itojun 	int len;
   3123    1.2    itojun 
   3124    1.2    itojun 	if (!in6p->in6p_outputopts)
   3125    1.2    itojun 		return 0;
   3126    1.2    itojun 
   3127    1.2    itojun 	len = 0;
   3128    1.2    itojun #define elen(x) \
   3129    1.2    itojun     (((struct ip6_ext *)(x)) ? (((struct ip6_ext *)(x))->ip6e_len + 1) << 3 : 0)
   3130    1.2    itojun 
   3131    1.2    itojun 	len += elen(in6p->in6p_outputopts->ip6po_hbh);
   3132    1.2    itojun 	len += elen(in6p->in6p_outputopts->ip6po_dest1);
   3133    1.2    itojun 	len += elen(in6p->in6p_outputopts->ip6po_rthdr);
   3134    1.2    itojun 	len += elen(in6p->in6p_outputopts->ip6po_dest2);
   3135    1.2    itojun 	return len;
   3136    1.2    itojun #undef elen
   3137    1.2    itojun }
   3138