ip6_output.c revision 1.2.2.2
1 1.2.2.2 thorpej /* 2 1.2.2.2 thorpej * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 3 1.2.2.2 thorpej * All rights reserved. 4 1.2.2.2 thorpej * 5 1.2.2.2 thorpej * Redistribution and use in source and binary forms, with or without 6 1.2.2.2 thorpej * modification, are permitted provided that the following conditions 7 1.2.2.2 thorpej * are met: 8 1.2.2.2 thorpej * 1. Redistributions of source code must retain the above copyright 9 1.2.2.2 thorpej * notice, this list of conditions and the following disclaimer. 10 1.2.2.2 thorpej * 2. Redistributions in binary form must reproduce the above copyright 11 1.2.2.2 thorpej * notice, this list of conditions and the following disclaimer in the 12 1.2.2.2 thorpej * documentation and/or other materials provided with the distribution. 13 1.2.2.2 thorpej * 3. Neither the name of the project nor the names of its contributors 14 1.2.2.2 thorpej * may be used to endorse or promote products derived from this software 15 1.2.2.2 thorpej * without specific prior written permission. 16 1.2.2.2 thorpej * 17 1.2.2.2 thorpej * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 18 1.2.2.2 thorpej * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19 1.2.2.2 thorpej * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20 1.2.2.2 thorpej * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 21 1.2.2.2 thorpej * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 1.2.2.2 thorpej * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 1.2.2.2 thorpej * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 1.2.2.2 thorpej * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25 1.2.2.2 thorpej * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26 1.2.2.2 thorpej * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27 1.2.2.2 thorpej * SUCH DAMAGE. 28 1.2.2.2 thorpej */ 29 1.2.2.2 thorpej 30 1.2.2.2 thorpej /* 31 1.2.2.2 thorpej * Copyright (c) 1982, 1986, 1988, 1990, 1993 32 1.2.2.2 thorpej * The Regents of the University of California. All rights reserved. 33 1.2.2.2 thorpej * 34 1.2.2.2 thorpej * Redistribution and use in source and binary forms, with or without 35 1.2.2.2 thorpej * modification, are permitted provided that the following conditions 36 1.2.2.2 thorpej * are met: 37 1.2.2.2 thorpej * 1. Redistributions of source code must retain the above copyright 38 1.2.2.2 thorpej * notice, this list of conditions and the following disclaimer. 39 1.2.2.2 thorpej * 2. Redistributions in binary form must reproduce the above copyright 40 1.2.2.2 thorpej * notice, this list of conditions and the following disclaimer in the 41 1.2.2.2 thorpej * documentation and/or other materials provided with the distribution. 42 1.2.2.2 thorpej * 3. All advertising materials mentioning features or use of this software 43 1.2.2.2 thorpej * must display the following acknowledgement: 44 1.2.2.2 thorpej * This product includes software developed by the University of 45 1.2.2.2 thorpej * California, Berkeley and its contributors. 46 1.2.2.2 thorpej * 4. Neither the name of the University nor the names of its contributors 47 1.2.2.2 thorpej * may be used to endorse or promote products derived from this software 48 1.2.2.2 thorpej * without specific prior written permission. 49 1.2.2.2 thorpej * 50 1.2.2.2 thorpej * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 51 1.2.2.2 thorpej * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 52 1.2.2.2 thorpej * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 53 1.2.2.2 thorpej * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 54 1.2.2.2 thorpej * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 55 1.2.2.2 thorpej * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 56 1.2.2.2 thorpej * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 57 1.2.2.2 thorpej * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 58 1.2.2.2 thorpej * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 59 1.2.2.2 thorpej * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 60 1.2.2.2 thorpej * SUCH DAMAGE. 61 1.2.2.2 thorpej * 62 1.2.2.2 thorpej * @(#)ip_output.c 8.3 (Berkeley) 1/21/94 63 1.2.2.2 thorpej */ 64 1.2.2.2 thorpej 65 1.2.2.2 thorpej #ifdef __FreeBSD__ 66 1.2.2.2 thorpej #include "opt_ip6fw.h" 67 1.2.2.2 thorpej #endif 68 1.2.2.2 thorpej #if (defined(__FreeBSD__) && __FreeBSD__ >= 3) || defined(__NetBSD__) 69 1.2.2.2 thorpej #include "opt_inet.h" 70 1.2.2.2 thorpej #endif 71 1.2.2.2 thorpej 72 1.2.2.2 thorpej #include <sys/param.h> 73 1.2.2.2 thorpej #include <sys/malloc.h> 74 1.2.2.2 thorpej #include <sys/mbuf.h> 75 1.2.2.2 thorpej #include <sys/errno.h> 76 1.2.2.2 thorpej #include <sys/protosw.h> 77 1.2.2.2 thorpej #include <sys/socket.h> 78 1.2.2.2 thorpej #include <sys/socketvar.h> 79 1.2.2.2 thorpej #include <sys/systm.h> 80 1.2.2.2 thorpej #include <sys/proc.h> 81 1.2.2.2 thorpej 82 1.2.2.2 thorpej #include <net/if.h> 83 1.2.2.2 thorpej #include <net/route.h> 84 1.2.2.2 thorpej 85 1.2.2.2 thorpej #include <netinet/in.h> 86 1.2.2.2 thorpej #include <netinet/in_var.h> 87 1.2.2.2 thorpej #include <netinet6/in6_systm.h> 88 1.2.2.2 thorpej #include <netinet6/ip6.h> 89 1.2.2.2 thorpej #include <netinet6/icmp6.h> 90 1.2.2.2 thorpej #if !defined(__FreeBSD__) || __FreeBSD__ < 3 91 1.2.2.2 thorpej #include <netinet6/in6_pcb.h> 92 1.2.2.2 thorpej #else 93 1.2.2.2 thorpej #include <netinet/in_pcb.h> 94 1.2.2.2 thorpej #endif 95 1.2.2.2 thorpej #include <netinet6/ip6_var.h> 96 1.2.2.2 thorpej #include <netinet6/nd6.h> 97 1.2.2.2 thorpej 98 1.2.2.2 thorpej #ifdef IPSEC 99 1.2.2.2 thorpej #include <netinet6/ipsec.h> 100 1.2.2.2 thorpej #include <netkey/key.h> 101 1.2.2.2 thorpej #include <netkey/key_debug.h> 102 1.2.2.2 thorpej #endif /* IPSEC */ 103 1.2.2.2 thorpej 104 1.2.2.2 thorpej #include "loop.h" 105 1.2.2.2 thorpej 106 1.2.2.2 thorpej struct ip6_exthdrs { 107 1.2.2.2 thorpej struct mbuf *ip6e_ip6; 108 1.2.2.2 thorpej struct mbuf *ip6e_hbh; 109 1.2.2.2 thorpej struct mbuf *ip6e_dest1; 110 1.2.2.2 thorpej struct mbuf *ip6e_rthdr; 111 1.2.2.2 thorpej struct mbuf *ip6e_dest2; 112 1.2.2.2 thorpej }; 113 1.2.2.2 thorpej 114 1.2.2.2 thorpej static int ip6_pcbopts __P((struct ip6_pktopts **, struct mbuf *, 115 1.2.2.2 thorpej struct socket *)); 116 1.2.2.2 thorpej static int ip6_setmoptions __P((int, struct ip6_moptions **, struct mbuf *)); 117 1.2.2.2 thorpej static int ip6_getmoptions __P((int, struct ip6_moptions *, struct mbuf **)); 118 1.2.2.2 thorpej static int ip6_copyexthdr __P((struct mbuf **, caddr_t, int)); 119 1.2.2.2 thorpej static int ip6_insertfraghdr __P((struct mbuf *, struct mbuf *, int, 120 1.2.2.2 thorpej struct ip6_frag **)); 121 1.2.2.2 thorpej static int ip6_insert_jumboopt __P((struct ip6_exthdrs *, u_int32_t)); 122 1.2.2.2 thorpej static int ip6_splithdr __P((struct mbuf *, struct ip6_exthdrs *)); 123 1.2.2.2 thorpej #ifdef __bsdi__ 124 1.2.2.2 thorpej extern struct ifnet loif; 125 1.2.2.2 thorpej #endif 126 1.2.2.2 thorpej 127 1.2.2.2 thorpej #ifdef __NetBSD__ 128 1.2.2.2 thorpej extern struct ifnet **ifindex2ifnet; 129 1.2.2.2 thorpej extern struct ifnet loif[NLOOP]; 130 1.2.2.2 thorpej #endif 131 1.2.2.2 thorpej 132 1.2.2.2 thorpej /* 133 1.2.2.2 thorpej * IP6 output. The packet in mbuf chain m contains a skeletal IP6 134 1.2.2.2 thorpej * header (with pri, len, nxt, hlim, src, dst). 135 1.2.2.2 thorpej * This function may modify ver and hlim only. 136 1.2.2.2 thorpej * The mbuf chain containing the packet will be freed. 137 1.2.2.2 thorpej * The mbuf opt, if present, will not be freed. 138 1.2.2.2 thorpej */ 139 1.2.2.2 thorpej int 140 1.2.2.2 thorpej ip6_output(m0, opt, ro, flags, im6o) 141 1.2.2.2 thorpej struct mbuf *m0; 142 1.2.2.2 thorpej struct ip6_pktopts *opt; 143 1.2.2.2 thorpej struct route_in6 *ro; 144 1.2.2.2 thorpej int flags; 145 1.2.2.2 thorpej struct ip6_moptions *im6o; 146 1.2.2.2 thorpej { 147 1.2.2.2 thorpej struct ip6_hdr *ip6, *mhip6; 148 1.2.2.2 thorpej struct ifnet *ifp; 149 1.2.2.2 thorpej struct mbuf *m = m0; 150 1.2.2.2 thorpej int hlen, tlen, len, off; 151 1.2.2.2 thorpej struct route_in6 ip6route; 152 1.2.2.2 thorpej struct sockaddr_in6 *dst; 153 1.2.2.2 thorpej int error = 0; 154 1.2.2.2 thorpej struct in6_ifaddr *ia; 155 1.2.2.2 thorpej u_long mtu; 156 1.2.2.2 thorpej u_int32_t optlen = 0, plen = 0, unfragpartlen = 0; 157 1.2.2.2 thorpej struct ip6_exthdrs exthdrs; 158 1.2.2.2 thorpej struct in6_addr finaldst; 159 1.2.2.2 thorpej struct route_in6 *ro_pmtu = NULL; 160 1.2.2.2 thorpej int hdrsplit = 0; 161 1.2.2.2 thorpej int needipsec = 0; 162 1.2.2.2 thorpej #ifdef IPSEC 163 1.2.2.2 thorpej int needipsectun = 0; 164 1.2.2.2 thorpej struct socket *so; 165 1.2.2.2 thorpej struct secpolicy *sp = NULL; 166 1.2.2.2 thorpej 167 1.2.2.2 thorpej /* for AH processing. stupid to have "socket" variable in IP layer... */ 168 1.2.2.2 thorpej so = (struct socket *)m->m_pkthdr.rcvif; 169 1.2.2.2 thorpej m->m_pkthdr.rcvif = NULL; 170 1.2.2.2 thorpej ip6 = mtod(m, struct ip6_hdr *); 171 1.2.2.2 thorpej #endif /* IPSEC */ 172 1.2.2.2 thorpej 173 1.2.2.2 thorpej #define MAKE_EXTHDR(hp,mp) \ 174 1.2.2.2 thorpej { \ 175 1.2.2.2 thorpej if (hp) { \ 176 1.2.2.2 thorpej struct ip6_ext *eh = (struct ip6_ext *)(hp); \ 177 1.2.2.2 thorpej error = ip6_copyexthdr((mp), (caddr_t)(hp), \ 178 1.2.2.2 thorpej ((eh)->ip6e_len + 1) << 3); \ 179 1.2.2.2 thorpej if (error) \ 180 1.2.2.2 thorpej goto freehdrs; \ 181 1.2.2.2 thorpej } \ 182 1.2.2.2 thorpej } 183 1.2.2.2 thorpej 184 1.2.2.2 thorpej bzero(&exthdrs, sizeof(exthdrs)); 185 1.2.2.2 thorpej if (opt) { 186 1.2.2.2 thorpej /* Hop-by-Hop options header */ 187 1.2.2.2 thorpej MAKE_EXTHDR(opt->ip6po_hbh, &exthdrs.ip6e_hbh); 188 1.2.2.2 thorpej /* Destination options header(1st part) */ 189 1.2.2.2 thorpej MAKE_EXTHDR(opt->ip6po_dest1, &exthdrs.ip6e_dest1); 190 1.2.2.2 thorpej /* Routing header */ 191 1.2.2.2 thorpej MAKE_EXTHDR(opt->ip6po_rthdr, &exthdrs.ip6e_rthdr); 192 1.2.2.2 thorpej /* Destination options header(2nd part) */ 193 1.2.2.2 thorpej MAKE_EXTHDR(opt->ip6po_dest2, &exthdrs.ip6e_dest2); 194 1.2.2.2 thorpej } 195 1.2.2.2 thorpej 196 1.2.2.2 thorpej #ifdef IPSEC 197 1.2.2.2 thorpej /* get a security policy for this packet */ 198 1.2.2.2 thorpej if (so == NULL) 199 1.2.2.2 thorpej sp = ipsec6_getpolicybyaddr(m, 0, &error); 200 1.2.2.2 thorpej else 201 1.2.2.2 thorpej sp = ipsec6_getpolicybysock(m, so, &error); 202 1.2.2.2 thorpej 203 1.2.2.2 thorpej if (sp == NULL) { 204 1.2.2.2 thorpej ipsec6stat.out_inval++; 205 1.2.2.2 thorpej goto bad; 206 1.2.2.2 thorpej } 207 1.2.2.2 thorpej 208 1.2.2.2 thorpej error = 0; 209 1.2.2.2 thorpej 210 1.2.2.2 thorpej /* check policy */ 211 1.2.2.2 thorpej switch (sp->policy) { 212 1.2.2.2 thorpej case IPSEC_POLICY_DISCARD: 213 1.2.2.2 thorpej /* 214 1.2.2.2 thorpej * This packet is just discarded. 215 1.2.2.2 thorpej */ 216 1.2.2.2 thorpej ipsec6stat.out_polvio++; 217 1.2.2.2 thorpej goto bad; 218 1.2.2.2 thorpej 219 1.2.2.2 thorpej case IPSEC_POLICY_BYPASS: 220 1.2.2.2 thorpej case IPSEC_POLICY_NONE: 221 1.2.2.2 thorpej /* no need to do IPsec. */ 222 1.2.2.2 thorpej needipsec = 0; 223 1.2.2.2 thorpej break; 224 1.2.2.2 thorpej 225 1.2.2.2 thorpej case IPSEC_POLICY_IPSEC: 226 1.2.2.2 thorpej if (sp->req == NULL) { 227 1.2.2.2 thorpej /* XXX should be panic ? */ 228 1.2.2.2 thorpej printf("ip6_output: No IPsec request specified.\n"); 229 1.2.2.2 thorpej error = EINVAL; 230 1.2.2.2 thorpej goto bad; 231 1.2.2.2 thorpej } 232 1.2.2.2 thorpej needipsec = 1; 233 1.2.2.2 thorpej break; 234 1.2.2.2 thorpej 235 1.2.2.2 thorpej case IPSEC_POLICY_ENTRUST: 236 1.2.2.2 thorpej default: 237 1.2.2.2 thorpej printf("ip6_output: Invalid policy found. %d\n", sp->policy); 238 1.2.2.2 thorpej } 239 1.2.2.2 thorpej #endif /* IPSEC */ 240 1.2.2.2 thorpej 241 1.2.2.2 thorpej /* 242 1.2.2.2 thorpej * Calculate the total length of the extension header chain. 243 1.2.2.2 thorpej * Keep the length of the unfragmentable part for fragmentation. 244 1.2.2.2 thorpej */ 245 1.2.2.2 thorpej if (exthdrs.ip6e_hbh) optlen += exthdrs.ip6e_hbh->m_len; 246 1.2.2.2 thorpej if (exthdrs.ip6e_dest1) optlen += exthdrs.ip6e_dest1->m_len; 247 1.2.2.2 thorpej if (exthdrs.ip6e_rthdr) optlen += exthdrs.ip6e_rthdr->m_len; 248 1.2.2.2 thorpej unfragpartlen = plen + sizeof(struct ip6_hdr); 249 1.2.2.2 thorpej /* NOTE: we don't add AH/ESP length here. do that later. */ 250 1.2.2.2 thorpej if (exthdrs.ip6e_dest2) optlen += exthdrs.ip6e_dest2->m_len; 251 1.2.2.2 thorpej 252 1.2.2.2 thorpej /* 253 1.2.2.2 thorpej * If we need IPsec, or there is at least one extension header, 254 1.2.2.2 thorpej * separate IP6 header from the payload. 255 1.2.2.2 thorpej */ 256 1.2.2.2 thorpej if ((needipsec || optlen) && !hdrsplit) { 257 1.2.2.2 thorpej if ((error = ip6_splithdr(m, &exthdrs)) != 0) { 258 1.2.2.2 thorpej m = NULL; 259 1.2.2.2 thorpej goto freehdrs; 260 1.2.2.2 thorpej } 261 1.2.2.2 thorpej m = exthdrs.ip6e_ip6; 262 1.2.2.2 thorpej hdrsplit++; 263 1.2.2.2 thorpej } 264 1.2.2.2 thorpej 265 1.2.2.2 thorpej /* adjust pointer */ 266 1.2.2.2 thorpej ip6 = mtod(m, struct ip6_hdr *); 267 1.2.2.2 thorpej 268 1.2.2.2 thorpej /* adjust mbuf packet header length */ 269 1.2.2.2 thorpej m->m_pkthdr.len += optlen; 270 1.2.2.2 thorpej plen = m->m_pkthdr.len - sizeof(*ip6); 271 1.2.2.2 thorpej 272 1.2.2.2 thorpej /* If this is a jumbo payload, insert a jumbo payload option. */ 273 1.2.2.2 thorpej if (plen > IPV6_MAXPACKET) { 274 1.2.2.2 thorpej if (!hdrsplit) { 275 1.2.2.2 thorpej if ((error = ip6_splithdr(m, &exthdrs)) != 0) { 276 1.2.2.2 thorpej m = NULL; 277 1.2.2.2 thorpej goto freehdrs; 278 1.2.2.2 thorpej } 279 1.2.2.2 thorpej m = exthdrs.ip6e_ip6; 280 1.2.2.2 thorpej hdrsplit++; 281 1.2.2.2 thorpej } 282 1.2.2.2 thorpej /* adjust pointer */ 283 1.2.2.2 thorpej ip6 = mtod(m, struct ip6_hdr *); 284 1.2.2.2 thorpej if ((error = ip6_insert_jumboopt(&exthdrs, plen)) != 0) 285 1.2.2.2 thorpej goto freehdrs; 286 1.2.2.2 thorpej ip6->ip6_plen = 0; 287 1.2.2.2 thorpej } else 288 1.2.2.2 thorpej ip6->ip6_plen = htons(plen); 289 1.2.2.2 thorpej 290 1.2.2.2 thorpej /* 291 1.2.2.2 thorpej * Concatenate headers and fill in next header fields. 292 1.2.2.2 thorpej * Here we have, on "m" 293 1.2.2.2 thorpej * IPv6 payload or 294 1.2.2.2 thorpej * IPv6 [esp* dest2 payload] 295 1.2.2.2 thorpej * and we insert headers accordingly. Finally, we should be getting: 296 1.2.2.2 thorpej * IPv6 hbh dest1 rthdr ah* dest2 payload or 297 1.2.2.2 thorpej * IPv6 hbh dest1 rthdr ah* [esp* dest2 payload] 298 1.2.2.2 thorpej */ 299 1.2.2.2 thorpej { 300 1.2.2.2 thorpej u_char *nexthdrp = &ip6->ip6_nxt; 301 1.2.2.2 thorpej struct mbuf *mprev = m; 302 1.2.2.2 thorpej 303 1.2.2.2 thorpej /* 304 1.2.2.2 thorpej * we treat dest2 specially. this makes IPsec processing 305 1.2.2.2 thorpej * much easier. 306 1.2.2.2 thorpej */ 307 1.2.2.2 thorpej if (exthdrs.ip6e_dest2) { 308 1.2.2.2 thorpej if (!hdrsplit) 309 1.2.2.2 thorpej panic("assumption failed: hdr not split"); 310 1.2.2.2 thorpej *mtod(exthdrs.ip6e_dest2, u_char *) = ip6->ip6_nxt; 311 1.2.2.2 thorpej ip6->ip6_nxt = IPPROTO_DSTOPTS; 312 1.2.2.2 thorpej } 313 1.2.2.2 thorpej 314 1.2.2.2 thorpej #define MAKE_CHAIN(m,mp,p,i)\ 315 1.2.2.2 thorpej {\ 316 1.2.2.2 thorpej if (m) {\ 317 1.2.2.2 thorpej if (!hdrsplit) \ 318 1.2.2.2 thorpej panic("assumption failed: hdr not split"); \ 319 1.2.2.2 thorpej *mtod((m), u_char *) = *(p);\ 320 1.2.2.2 thorpej *(p) = (i);\ 321 1.2.2.2 thorpej p = mtod((m), u_char *);\ 322 1.2.2.2 thorpej (m)->m_next = (mp)->m_next;\ 323 1.2.2.2 thorpej (mp)->m_next = (m);\ 324 1.2.2.2 thorpej (mp) = (m);\ 325 1.2.2.2 thorpej }\ 326 1.2.2.2 thorpej } 327 1.2.2.2 thorpej MAKE_CHAIN(exthdrs.ip6e_hbh, mprev, 328 1.2.2.2 thorpej nexthdrp, IPPROTO_HOPOPTS); 329 1.2.2.2 thorpej MAKE_CHAIN(exthdrs.ip6e_dest1, mprev, 330 1.2.2.2 thorpej nexthdrp, IPPROTO_DSTOPTS); 331 1.2.2.2 thorpej MAKE_CHAIN(exthdrs.ip6e_rthdr, mprev, 332 1.2.2.2 thorpej nexthdrp, IPPROTO_ROUTING); 333 1.2.2.2 thorpej 334 1.2.2.2 thorpej #ifdef IPSEC 335 1.2.2.2 thorpej if (!needipsec) 336 1.2.2.2 thorpej goto skip_ipsec2; 337 1.2.2.2 thorpej 338 1.2.2.2 thorpej /* 339 1.2.2.2 thorpej * pointers after IPsec headers are not valid any more. 340 1.2.2.2 thorpej * other pointers need a great care too. 341 1.2.2.2 thorpej * (IPsec routines should not mangle mbufs prior to AH/ESP) 342 1.2.2.2 thorpej */ 343 1.2.2.2 thorpej exthdrs.ip6e_dest2 = NULL; 344 1.2.2.2 thorpej 345 1.2.2.2 thorpej { 346 1.2.2.2 thorpej struct ip6_rthdr *rh = NULL; 347 1.2.2.2 thorpej int segleft_org = 0; 348 1.2.2.2 thorpej struct ipsec_output_state state; 349 1.2.2.2 thorpej 350 1.2.2.2 thorpej if (exthdrs.ip6e_rthdr) { 351 1.2.2.2 thorpej rh = mtod(exthdrs.ip6e_rthdr, struct ip6_rthdr *); 352 1.2.2.2 thorpej segleft_org = rh->ip6r_segleft; 353 1.2.2.2 thorpej rh->ip6r_segleft = 0; 354 1.2.2.2 thorpej } 355 1.2.2.2 thorpej 356 1.2.2.2 thorpej bzero(&state, sizeof(state)); 357 1.2.2.2 thorpej state.m = m; 358 1.2.2.2 thorpej error = ipsec6_output_trans(&state, nexthdrp, mprev, sp, flags, 359 1.2.2.2 thorpej &needipsectun); 360 1.2.2.2 thorpej m = state.m; 361 1.2.2.2 thorpej if (error) { 362 1.2.2.2 thorpej /* mbuf is already reclaimed in ipsec6_output_trans. */ 363 1.2.2.2 thorpej m = NULL; 364 1.2.2.2 thorpej switch (error) { 365 1.2.2.2 thorpej case EHOSTUNREACH: 366 1.2.2.2 thorpej case ENETUNREACH: 367 1.2.2.2 thorpej case EMSGSIZE: 368 1.2.2.2 thorpej case ENOBUFS: 369 1.2.2.2 thorpej case ENOMEM: 370 1.2.2.2 thorpej break; 371 1.2.2.2 thorpej default: 372 1.2.2.2 thorpej printf("ip6_output (ipsec): error code %d\n", error); 373 1.2.2.2 thorpej /*fall through*/ 374 1.2.2.2 thorpej case ENOENT: 375 1.2.2.2 thorpej /* don't show these error codes to the user */ 376 1.2.2.2 thorpej error = 0; 377 1.2.2.2 thorpej break; 378 1.2.2.2 thorpej } 379 1.2.2.2 thorpej goto bad; 380 1.2.2.2 thorpej } 381 1.2.2.2 thorpej if (exthdrs.ip6e_rthdr) { 382 1.2.2.2 thorpej /* ah6_output doesn't modify mbuf chain */ 383 1.2.2.2 thorpej rh->ip6r_segleft = segleft_org; 384 1.2.2.2 thorpej } 385 1.2.2.2 thorpej } 386 1.2.2.2 thorpej skip_ipsec2:; 387 1.2.2.2 thorpej #endif 388 1.2.2.2 thorpej } 389 1.2.2.2 thorpej 390 1.2.2.2 thorpej /* 391 1.2.2.2 thorpej * If there is a routing header, replace destination address field 392 1.2.2.2 thorpej * with the first hop of the routing header. 393 1.2.2.2 thorpej */ 394 1.2.2.2 thorpej if (exthdrs.ip6e_rthdr) { 395 1.2.2.2 thorpej struct ip6_rthdr *rh = 396 1.2.2.2 thorpej (struct ip6_rthdr *)(mtod(exthdrs.ip6e_rthdr, 397 1.2.2.2 thorpej struct ip6_rthdr *)); 398 1.2.2.2 thorpej struct ip6_rthdr0 *rh0; 399 1.2.2.2 thorpej 400 1.2.2.2 thorpej finaldst = ip6->ip6_dst; 401 1.2.2.2 thorpej switch(rh->ip6r_type) { 402 1.2.2.2 thorpej case IPV6_RTHDR_TYPE_0: 403 1.2.2.2 thorpej rh0 = (struct ip6_rthdr0 *)rh; 404 1.2.2.2 thorpej ip6->ip6_dst = rh0->ip6r0_addr[0]; 405 1.2.2.2 thorpej bcopy((caddr_t)&rh0->ip6r0_addr[1], 406 1.2.2.2 thorpej (caddr_t)&rh0->ip6r0_addr[0], 407 1.2.2.2 thorpej sizeof(struct in6_addr)*(rh0->ip6r0_segleft - 1) 408 1.2.2.2 thorpej ); 409 1.2.2.2 thorpej rh0->ip6r0_addr[rh0->ip6r0_segleft - 1] = finaldst; 410 1.2.2.2 thorpej break; 411 1.2.2.2 thorpej default: /* is it possible? */ 412 1.2.2.2 thorpej error = EINVAL; 413 1.2.2.2 thorpej goto bad; 414 1.2.2.2 thorpej } 415 1.2.2.2 thorpej } 416 1.2.2.2 thorpej 417 1.2.2.2 thorpej /* Source address validation */ 418 1.2.2.2 thorpej if (IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_src) && 419 1.2.2.2 thorpej (flags & IPV6_DADOUTPUT) == 0) { 420 1.2.2.2 thorpej error = EOPNOTSUPP; 421 1.2.2.2 thorpej ip6stat.ip6s_badscope++; 422 1.2.2.2 thorpej goto bad; 423 1.2.2.2 thorpej } 424 1.2.2.2 thorpej if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_src)) { 425 1.2.2.2 thorpej error = EOPNOTSUPP; 426 1.2.2.2 thorpej ip6stat.ip6s_badscope++; 427 1.2.2.2 thorpej goto bad; 428 1.2.2.2 thorpej } 429 1.2.2.2 thorpej 430 1.2.2.2 thorpej ip6stat.ip6s_localout++; 431 1.2.2.2 thorpej 432 1.2.2.2 thorpej /* 433 1.2.2.2 thorpej * Route packet. 434 1.2.2.2 thorpej */ 435 1.2.2.2 thorpej if (ro == 0) { 436 1.2.2.2 thorpej ro = &ip6route; 437 1.2.2.2 thorpej bzero((caddr_t)ro, sizeof(*ro)); 438 1.2.2.2 thorpej } 439 1.2.2.2 thorpej ro_pmtu = ro; 440 1.2.2.2 thorpej if (opt && opt->ip6po_rthdr) 441 1.2.2.2 thorpej ro = &opt->ip6po_route; 442 1.2.2.2 thorpej dst = (struct sockaddr_in6 *)&ro->ro_dst; 443 1.2.2.2 thorpej /* 444 1.2.2.2 thorpej * If there is a cached route, 445 1.2.2.2 thorpej * check that it is to the same destination 446 1.2.2.2 thorpej * and is still up. If not, free it and try again. 447 1.2.2.2 thorpej */ 448 1.2.2.2 thorpej if (ro->ro_rt && ((ro->ro_rt->rt_flags & RTF_UP) == 0 || 449 1.2.2.2 thorpej !IN6_ARE_ADDR_EQUAL(&dst->sin6_addr, &ip6->ip6_dst))) { 450 1.2.2.2 thorpej RTFREE(ro->ro_rt); 451 1.2.2.2 thorpej ro->ro_rt = (struct rtentry *)0; 452 1.2.2.2 thorpej } 453 1.2.2.2 thorpej if (ro->ro_rt == 0) { 454 1.2.2.2 thorpej bzero(dst, sizeof(*dst)); 455 1.2.2.2 thorpej dst->sin6_family = AF_INET6; 456 1.2.2.2 thorpej dst->sin6_len = sizeof(struct sockaddr_in6); 457 1.2.2.2 thorpej dst->sin6_addr = ip6->ip6_dst; 458 1.2.2.2 thorpej } 459 1.2.2.2 thorpej #ifdef IPSEC 460 1.2.2.2 thorpej if (needipsec && needipsectun) { 461 1.2.2.2 thorpej struct ipsec_output_state state; 462 1.2.2.2 thorpej 463 1.2.2.2 thorpej /* 464 1.2.2.2 thorpej * All the extension headers will become inaccessible 465 1.2.2.2 thorpej * (since they can be encrypted). 466 1.2.2.2 thorpej * Don't panic, we need no more updates to extension headers 467 1.2.2.2 thorpej * on inner IPv6 packet (since they are now encapsulated). 468 1.2.2.2 thorpej * 469 1.2.2.2 thorpej * IPv6 [ESP|AH] IPv6 [extension headers] payload 470 1.2.2.2 thorpej */ 471 1.2.2.2 thorpej bzero(&exthdrs, sizeof(exthdrs)); 472 1.2.2.2 thorpej exthdrs.ip6e_ip6 = m; 473 1.2.2.2 thorpej 474 1.2.2.2 thorpej bzero(&state, sizeof(state)); 475 1.2.2.2 thorpej state.m = m; 476 1.2.2.2 thorpej state.ro = (struct route *)ro; 477 1.2.2.2 thorpej state.dst = (struct sockaddr *)dst; 478 1.2.2.2 thorpej 479 1.2.2.2 thorpej error = ipsec6_output_tunnel(&state, sp, flags); 480 1.2.2.2 thorpej 481 1.2.2.2 thorpej m = state.m; 482 1.2.2.2 thorpej ro = (struct route_in6 *)state.ro; 483 1.2.2.2 thorpej dst = (struct sockaddr_in6 *)state.dst; 484 1.2.2.2 thorpej if (error) { 485 1.2.2.2 thorpej /* mbuf is already reclaimed in ipsec6_output_tunnel. */ 486 1.2.2.2 thorpej m0 = m = NULL; 487 1.2.2.2 thorpej m = NULL; 488 1.2.2.2 thorpej switch (error) { 489 1.2.2.2 thorpej case EHOSTUNREACH: 490 1.2.2.2 thorpej case ENETUNREACH: 491 1.2.2.2 thorpej case EMSGSIZE: 492 1.2.2.2 thorpej case ENOBUFS: 493 1.2.2.2 thorpej case ENOMEM: 494 1.2.2.2 thorpej break; 495 1.2.2.2 thorpej default: 496 1.2.2.2 thorpej printf("ip6_output (ipsec): error code %d\n", error); 497 1.2.2.2 thorpej /*fall through*/ 498 1.2.2.2 thorpej case ENOENT: 499 1.2.2.2 thorpej /* don't show these error codes to the user */ 500 1.2.2.2 thorpej error = 0; 501 1.2.2.2 thorpej break; 502 1.2.2.2 thorpej } 503 1.2.2.2 thorpej goto bad; 504 1.2.2.2 thorpej } 505 1.2.2.2 thorpej 506 1.2.2.2 thorpej exthdrs.ip6e_ip6 = m; 507 1.2.2.2 thorpej } 508 1.2.2.2 thorpej #endif /*IPESC*/ 509 1.2.2.2 thorpej 510 1.2.2.2 thorpej if (!IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) { 511 1.2.2.2 thorpej /* Unicast */ 512 1.2.2.2 thorpej 513 1.2.2.2 thorpej #define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa)) 514 1.2.2.2 thorpej #define sin6tosa(sin6) ((struct sockaddr *)(sin6)) 515 1.2.2.2 thorpej /* xxx 516 1.2.2.2 thorpej * interface selection comes here 517 1.2.2.2 thorpej * if an interface is specified from an upper layer, 518 1.2.2.2 thorpej * ifp must point it. 519 1.2.2.2 thorpej */ 520 1.2.2.2 thorpej if (ro->ro_rt == 0) { 521 1.2.2.2 thorpej if (ro == &ip6route) /* xxx kazu */ 522 1.2.2.2 thorpej rtalloc((struct route *)ro); 523 1.2.2.2 thorpej else 524 1.2.2.2 thorpej rtcalloc((struct route *)ro); 525 1.2.2.2 thorpej } 526 1.2.2.2 thorpej if (ro->ro_rt == 0) { 527 1.2.2.2 thorpej ip6stat.ip6s_noroute++; 528 1.2.2.2 thorpej error = EHOSTUNREACH; 529 1.2.2.2 thorpej goto bad; 530 1.2.2.2 thorpej } 531 1.2.2.2 thorpej ia = ifatoia6(ro->ro_rt->rt_ifa); 532 1.2.2.2 thorpej ifp = ro->ro_rt->rt_ifp; 533 1.2.2.2 thorpej ro->ro_rt->rt_use++; 534 1.2.2.2 thorpej if (ro->ro_rt->rt_flags & RTF_GATEWAY) 535 1.2.2.2 thorpej dst = (struct sockaddr_in6 *)ro->ro_rt->rt_gateway; 536 1.2.2.2 thorpej m->m_flags &= ~(M_BCAST | M_MCAST); /* just in case */ 537 1.2.2.2 thorpej 538 1.2.2.2 thorpej /* 539 1.2.2.2 thorpej * Check if there is the outgoing interface conflicts with 540 1.2.2.2 thorpej * the interface specified by ifi6_ifindex(if specified). 541 1.2.2.2 thorpej * Note that loopback interface is always okay. 542 1.2.2.2 thorpej * (this happens when we are sending packet toward my 543 1.2.2.2 thorpej * interface) 544 1.2.2.2 thorpej */ 545 1.2.2.2 thorpej if (opt && opt->ip6po_pktinfo 546 1.2.2.2 thorpej && opt->ip6po_pktinfo->ipi6_ifindex) { 547 1.2.2.2 thorpej if (!(ifp->if_flags & IFF_LOOPBACK) 548 1.2.2.2 thorpej && ifp->if_index != opt->ip6po_pktinfo->ipi6_ifindex) { 549 1.2.2.2 thorpej ip6stat.ip6s_noroute++; 550 1.2.2.2 thorpej error = EHOSTUNREACH; 551 1.2.2.2 thorpej goto bad; 552 1.2.2.2 thorpej } 553 1.2.2.2 thorpej } 554 1.2.2.2 thorpej 555 1.2.2.2 thorpej if (opt && opt->ip6po_hlim != -1) 556 1.2.2.2 thorpej ip6->ip6_hlim = opt->ip6po_hlim & 0xff; 557 1.2.2.2 thorpej } else { 558 1.2.2.2 thorpej /* Multicast */ 559 1.2.2.2 thorpej struct in6_multi *in6m; 560 1.2.2.2 thorpej 561 1.2.2.2 thorpej m->m_flags = (m->m_flags & ~M_BCAST) | M_MCAST; 562 1.2.2.2 thorpej 563 1.2.2.2 thorpej /* 564 1.2.2.2 thorpej * See if the caller provided any multicast options 565 1.2.2.2 thorpej */ 566 1.2.2.2 thorpej ifp = NULL; 567 1.2.2.2 thorpej if (im6o != NULL) { 568 1.2.2.2 thorpej ip6->ip6_hlim = im6o->im6o_multicast_hlim; 569 1.2.2.2 thorpej if (im6o->im6o_multicast_ifp != NULL) 570 1.2.2.2 thorpej ifp = im6o->im6o_multicast_ifp; 571 1.2.2.2 thorpej } else 572 1.2.2.2 thorpej ip6->ip6_hlim = ip6_defmcasthlim; 573 1.2.2.2 thorpej 574 1.2.2.2 thorpej /* 575 1.2.2.2 thorpej * See if the caller provided the outgoing interface 576 1.2.2.2 thorpej * as an ancillary data. 577 1.2.2.2 thorpej * Boundary check for ifindex is assumed to be already done. 578 1.2.2.2 thorpej */ 579 1.2.2.2 thorpej if (opt && opt->ip6po_pktinfo && opt->ip6po_pktinfo->ipi6_ifindex) 580 1.2.2.2 thorpej ifp = ifindex2ifnet[opt->ip6po_pktinfo->ipi6_ifindex]; 581 1.2.2.2 thorpej 582 1.2.2.2 thorpej /* 583 1.2.2.2 thorpej * If the destination is a node-local scope multicast, 584 1.2.2.2 thorpej * the packet should be loop-backed only. 585 1.2.2.2 thorpej */ 586 1.2.2.2 thorpej if (IN6_IS_ADDR_MC_NODELOCAL(&ip6->ip6_dst)) { 587 1.2.2.2 thorpej /* 588 1.2.2.2 thorpej * If the outgoing interface is already specified, 589 1.2.2.2 thorpej * it should be a loopback interface. 590 1.2.2.2 thorpej */ 591 1.2.2.2 thorpej if (ifp && (ifp->if_flags & IFF_LOOPBACK) == 0) { 592 1.2.2.2 thorpej ip6stat.ip6s_badscope++; 593 1.2.2.2 thorpej error = ENETUNREACH; /* XXX: better error? */ 594 1.2.2.2 thorpej goto bad; 595 1.2.2.2 thorpej } 596 1.2.2.2 thorpej else { 597 1.2.2.2 thorpej #ifdef __bsdi__ 598 1.2.2.2 thorpej ifp = &loif; 599 1.2.2.2 thorpej #else 600 1.2.2.2 thorpej ifp = &loif[0]; 601 1.2.2.2 thorpej #endif 602 1.2.2.2 thorpej } 603 1.2.2.2 thorpej } 604 1.2.2.2 thorpej 605 1.2.2.2 thorpej if (opt && opt->ip6po_hlim != -1) 606 1.2.2.2 thorpej ip6->ip6_hlim = opt->ip6po_hlim & 0xff; 607 1.2.2.2 thorpej 608 1.2.2.2 thorpej /* 609 1.2.2.2 thorpej * If caller did not provide an interface lookup a 610 1.2.2.2 thorpej * default in the routing table. This is either a 611 1.2.2.2 thorpej * default for the speicfied group (i.e. a host 612 1.2.2.2 thorpej * route), or a multicast default (a route for the 613 1.2.2.2 thorpej * ``net'' ff00::/8). 614 1.2.2.2 thorpej */ 615 1.2.2.2 thorpej if (ifp == NULL) { 616 1.2.2.2 thorpej if (ro->ro_rt == 0) { 617 1.2.2.2 thorpej #ifdef __FreeBSD__ 618 1.2.2.2 thorpej ro->ro_rt = rtalloc1((struct sockaddr *) 619 1.2.2.2 thorpej &ro->ro_dst, 0, 0UL); 620 1.2.2.2 thorpej #endif /*__FreeBSD__*/ 621 1.2.2.2 thorpej #if defined(__bsdi__) || defined(__NetBSD__) 622 1.2.2.2 thorpej ro->ro_rt = rtalloc1((struct sockaddr *) 623 1.2.2.2 thorpej &ro->ro_dst, 0); 624 1.2.2.2 thorpej #endif /*__bsdi__*/ 625 1.2.2.2 thorpej } 626 1.2.2.2 thorpej if (ro->ro_rt == 0) { 627 1.2.2.2 thorpej ip6stat.ip6s_noroute++; 628 1.2.2.2 thorpej error = EHOSTUNREACH; 629 1.2.2.2 thorpej goto bad; 630 1.2.2.2 thorpej } 631 1.2.2.2 thorpej ia = ifatoia6(ro->ro_rt->rt_ifa); 632 1.2.2.2 thorpej ifp = ro->ro_rt->rt_ifp; 633 1.2.2.2 thorpej ro->ro_rt->rt_use++; 634 1.2.2.2 thorpej } 635 1.2.2.2 thorpej /* 636 1.2.2.2 thorpej * Confirm that the outgoing interface supports multicast. 637 1.2.2.2 thorpej */ 638 1.2.2.2 thorpej if ((ifp->if_flags & IFF_MULTICAST) == 0) { 639 1.2.2.2 thorpej ip6stat.ip6s_noroute++; 640 1.2.2.2 thorpej error = ENETUNREACH; 641 1.2.2.2 thorpej goto bad; 642 1.2.2.2 thorpej } 643 1.2.2.2 thorpej IN6_LOOKUP_MULTI(ip6->ip6_dst, ifp, in6m); 644 1.2.2.2 thorpej if (in6m != NULL && 645 1.2.2.2 thorpej (im6o == NULL || im6o->im6o_multicast_loop)) { 646 1.2.2.2 thorpej /* 647 1.2.2.2 thorpej * If we belong to the destination multicast group 648 1.2.2.2 thorpej * on the outgoing interface, and the caller did not 649 1.2.2.2 thorpej * forbid loopback, loop back a copy. 650 1.2.2.2 thorpej */ 651 1.2.2.2 thorpej ip6_mloopback(ifp, m, dst); 652 1.2.2.2 thorpej } else { 653 1.2.2.2 thorpej /* 654 1.2.2.2 thorpej * If we are acting as a multicast router, perform 655 1.2.2.2 thorpej * multicast forwarding as if the packet had just 656 1.2.2.2 thorpej * arrived on the interface to which we are about 657 1.2.2.2 thorpej * to send. The multicast forwarding function 658 1.2.2.2 thorpej * recursively calls this function, using the 659 1.2.2.2 thorpej * IPV6_FORWARDING flag to prevent infinite recursion. 660 1.2.2.2 thorpej * 661 1.2.2.2 thorpej * Multicasts that are looped back by ip6_mloopback(), 662 1.2.2.2 thorpej * above, will be forwarded by the ip6_input() routine, 663 1.2.2.2 thorpej * if necessary. 664 1.2.2.2 thorpej */ 665 1.2.2.2 thorpej if (ip6_mrouter && (flags & IPV6_FORWARDING) == 0) { 666 1.2.2.2 thorpej if (ip6_mforward(ip6, ifp, m) != NULL) { 667 1.2.2.2 thorpej m_freem(m); 668 1.2.2.2 thorpej goto done; 669 1.2.2.2 thorpej } 670 1.2.2.2 thorpej } 671 1.2.2.2 thorpej } 672 1.2.2.2 thorpej /* 673 1.2.2.2 thorpej * Multicasts with a hoplimit of zero may be looped back, 674 1.2.2.2 thorpej * above, but must not be transmitted on a network. 675 1.2.2.2 thorpej * Also, multicasts addressed to the loopback interface 676 1.2.2.2 thorpej * are not sent -- the above call to ip6_mloopback() will 677 1.2.2.2 thorpej * loop back a copy if this host actually belongs to the 678 1.2.2.2 thorpej * destination group on the loopback interface. 679 1.2.2.2 thorpej */ 680 1.2.2.2 thorpej if (ip6->ip6_hlim == 0 || (ifp->if_flags & IFF_LOOPBACK)) { 681 1.2.2.2 thorpej m_freem(m); 682 1.2.2.2 thorpej goto done; 683 1.2.2.2 thorpej } 684 1.2.2.2 thorpej } 685 1.2.2.2 thorpej 686 1.2.2.2 thorpej /* 687 1.2.2.2 thorpej * Determine path MTU. 688 1.2.2.2 thorpej */ 689 1.2.2.2 thorpej if (ro_pmtu != ro) { 690 1.2.2.2 thorpej /* The first hop and the final destination may differ. */ 691 1.2.2.2 thorpej struct sockaddr_in6 *sin6_fin = 692 1.2.2.2 thorpej (struct sockaddr_in6 *)&ro_pmtu->ro_dst; 693 1.2.2.2 thorpej if (ro_pmtu->ro_rt && ((ro->ro_rt->rt_flags & RTF_UP) == 0 || 694 1.2.2.2 thorpej !IN6_ARE_ADDR_EQUAL(&sin6_fin->sin6_addr, 695 1.2.2.2 thorpej &finaldst))) { 696 1.2.2.2 thorpej RTFREE(ro_pmtu->ro_rt); 697 1.2.2.2 thorpej ro_pmtu->ro_rt = (struct rtentry *)0; 698 1.2.2.2 thorpej } 699 1.2.2.2 thorpej if (ro_pmtu->ro_rt == 0) { 700 1.2.2.2 thorpej bzero(sin6_fin, sizeof(*sin6_fin)); 701 1.2.2.2 thorpej sin6_fin->sin6_family = AF_INET6; 702 1.2.2.2 thorpej sin6_fin->sin6_len = sizeof(struct sockaddr_in6); 703 1.2.2.2 thorpej sin6_fin->sin6_addr = finaldst; 704 1.2.2.2 thorpej 705 1.2.2.2 thorpej #if 0 706 1.2.2.2 thorpej rtcalloc((struct route *)ro_pmtu); 707 1.2.2.2 thorpej #else 708 1.2.2.2 thorpej rtalloc((struct route *)ro_pmtu); 709 1.2.2.2 thorpej #endif 710 1.2.2.2 thorpej } 711 1.2.2.2 thorpej } 712 1.2.2.2 thorpej if (ro_pmtu->ro_rt != NULL) { 713 1.2.2.2 thorpej u_int32_t ifmtu = nd_ifinfo[ifp->if_index].linkmtu; 714 1.2.2.2 thorpej 715 1.2.2.2 thorpej mtu = ro_pmtu->ro_rt->rt_rmx.rmx_mtu; 716 1.2.2.2 thorpej if (mtu > ifmtu) { 717 1.2.2.2 thorpej /* 718 1.2.2.2 thorpej * The MTU on the route is larger than the MTU on 719 1.2.2.2 thorpej * the interface! This shouldn't happen, unless the 720 1.2.2.2 thorpej * MTU of the interface has been changed after the 721 1.2.2.2 thorpej * interface was brought up. Change the MTU in the 722 1.2.2.2 thorpej * route to match the interface MTU (as long as the 723 1.2.2.2 thorpej * field isn't locked). 724 1.2.2.2 thorpej */ 725 1.2.2.2 thorpej mtu = ifmtu; 726 1.2.2.2 thorpej if ((ro_pmtu->ro_rt->rt_rmx.rmx_locks & RTV_MTU) == 0) 727 1.2.2.2 thorpej ro_pmtu->ro_rt->rt_rmx.rmx_mtu = mtu; /* XXX */ 728 1.2.2.2 thorpej } 729 1.2.2.2 thorpej } else { 730 1.2.2.2 thorpej mtu = nd_ifinfo[ifp->if_index].linkmtu; 731 1.2.2.2 thorpej } 732 1.2.2.2 thorpej 733 1.2.2.2 thorpej /* 734 1.2.2.2 thorpej * Fake link-local scope-class addresses 735 1.2.2.2 thorpej */ 736 1.2.2.2 thorpej if ((ifp->if_flags & IFF_LOOPBACK) == 0) { 737 1.2.2.2 thorpej if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_src)) 738 1.2.2.2 thorpej ip6->ip6_src.s6_addr16[1] = 0; 739 1.2.2.2 thorpej if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_dst)) 740 1.2.2.2 thorpej ip6->ip6_dst.s6_addr16[1] = 0; 741 1.2.2.2 thorpej } 742 1.2.2.2 thorpej 743 1.2.2.2 thorpej /* 744 1.2.2.2 thorpej * If the outgoing packet contains a hop-by-hop options header, 745 1.2.2.2 thorpej * it must be examined and processed even by the source node. 746 1.2.2.2 thorpej * (RFC 2460, section 4.) 747 1.2.2.2 thorpej */ 748 1.2.2.2 thorpej if (exthdrs.ip6e_hbh) { 749 1.2.2.2 thorpej struct ip6_hbh *hbh = mtod(exthdrs.ip6e_hbh, 750 1.2.2.2 thorpej struct ip6_hbh *); 751 1.2.2.2 thorpej long dummy1; /* XXX unused */ 752 1.2.2.2 thorpej u_int32_t dummy2; /* XXX unused */ 753 1.2.2.2 thorpej 754 1.2.2.2 thorpej /* 755 1.2.2.2 thorpej * XXX: if we have to send an ICMPv6 error to the sender, 756 1.2.2.2 thorpej * we need the M_LOOP flag since icmp6_error() expects 757 1.2.2.2 thorpej * the IPv6 and the hop-by-hop options header are 758 1.2.2.2 thorpej * continuous unless the flag is set. 759 1.2.2.2 thorpej */ 760 1.2.2.2 thorpej m->m_flags |= M_LOOP; 761 1.2.2.2 thorpej m->m_pkthdr.rcvif = ifp; 762 1.2.2.2 thorpej if (ip6_process_hopopts(m, 763 1.2.2.2 thorpej (u_int8_t *)(hbh + 1), 764 1.2.2.2 thorpej ((hbh->ip6h_len + 1) << 3) - 765 1.2.2.2 thorpej sizeof(struct ip6_hbh), 766 1.2.2.2 thorpej &dummy1, &dummy2) < 0) { 767 1.2.2.2 thorpej /* m was already freed at this point */ 768 1.2.2.2 thorpej error = EINVAL;/* better error? */ 769 1.2.2.2 thorpej goto done; 770 1.2.2.2 thorpej } 771 1.2.2.2 thorpej m->m_flags &= ~M_LOOP; /* XXX */ 772 1.2.2.2 thorpej m->m_pkthdr.rcvif = NULL; 773 1.2.2.2 thorpej } 774 1.2.2.2 thorpej 775 1.2.2.2 thorpej /* 776 1.2.2.2 thorpej * Send the packet to the outgoing interface. 777 1.2.2.2 thorpej * If necessary, do IPv6 fragmentation before sending. 778 1.2.2.2 thorpej */ 779 1.2.2.2 thorpej tlen = m->m_pkthdr.len; 780 1.2.2.2 thorpej if (tlen <= mtu 781 1.2.2.2 thorpej #ifdef notyet 782 1.2.2.2 thorpej /* 783 1.2.2.2 thorpej * On any link that cannot convey a 1280-octet packet in one piece, 784 1.2.2.2 thorpej * link-specific fragmentation and reassembly must be provided at 785 1.2.2.2 thorpej * a layer below IPv6. [RFC 2460, sec.5] 786 1.2.2.2 thorpej * Thus if the interface has ability of link-level fragmentation, 787 1.2.2.2 thorpej * we can just send the packet even if the packet size is 788 1.2.2.2 thorpej * larger than the link's MTU. 789 1.2.2.2 thorpej * XXX: IFF_FRAGMENTABLE (or such) flag has not been defined yet... 790 1.2.2.2 thorpej */ 791 1.2.2.2 thorpej 792 1.2.2.2 thorpej || ifp->if_flags & IFF_FRAGMENTABLE 793 1.2.2.2 thorpej #endif 794 1.2.2.2 thorpej ) 795 1.2.2.2 thorpej { 796 1.2.2.2 thorpej #ifdef NEWIP6OUTPUT 797 1.2.2.2 thorpej error = nd6_output(ifp, m, dst, ro->ro_rt); 798 1.2.2.2 thorpej #else 799 1.2.2.2 thorpej error = (*ifp->if_output)(ifp, m, (struct sockaddr *)dst, 800 1.2.2.2 thorpej ro->ro_rt); 801 1.2.2.2 thorpej #endif 802 1.2.2.2 thorpej goto done; 803 1.2.2.2 thorpej } else if (mtu < IPV6_MMTU) { 804 1.2.2.2 thorpej /* 805 1.2.2.2 thorpej * note that path MTU is never less than IPV6_MMTU 806 1.2.2.2 thorpej * (see icmp6_input). 807 1.2.2.2 thorpej */ 808 1.2.2.2 thorpej error = EMSGSIZE; 809 1.2.2.2 thorpej goto bad; 810 1.2.2.2 thorpej } else if (ip6->ip6_plen == 0) { /* jumbo payload cannot be fragmented */ 811 1.2.2.2 thorpej error = EMSGSIZE; 812 1.2.2.2 thorpej goto bad; 813 1.2.2.2 thorpej } else { 814 1.2.2.2 thorpej struct mbuf **mnext, *m_frgpart; 815 1.2.2.2 thorpej struct ip6_frag *ip6f; 816 1.2.2.2 thorpej u_long id = htonl(ip6_id++); 817 1.2.2.2 thorpej u_char nextproto; 818 1.2.2.2 thorpej 819 1.2.2.2 thorpej /* 820 1.2.2.2 thorpej * Too large for the destination or interface; 821 1.2.2.2 thorpej * fragment if possible. 822 1.2.2.2 thorpej * Must be able to put at least 8 bytes per fragment. 823 1.2.2.2 thorpej */ 824 1.2.2.2 thorpej hlen = unfragpartlen; 825 1.2.2.2 thorpej if (mtu > IPV6_MAXPACKET) 826 1.2.2.2 thorpej mtu = IPV6_MAXPACKET; 827 1.2.2.2 thorpej len = (mtu - hlen - sizeof(struct ip6_frag)) & ~7; 828 1.2.2.2 thorpej if (len < 8) { 829 1.2.2.2 thorpej error = EMSGSIZE; 830 1.2.2.2 thorpej goto bad; 831 1.2.2.2 thorpej } 832 1.2.2.2 thorpej 833 1.2.2.2 thorpej mnext = &m->m_nextpkt; 834 1.2.2.2 thorpej 835 1.2.2.2 thorpej /* 836 1.2.2.2 thorpej * Change the next header field of the last header in the 837 1.2.2.2 thorpej * unfragmentable part. 838 1.2.2.2 thorpej */ 839 1.2.2.2 thorpej if (exthdrs.ip6e_rthdr) { 840 1.2.2.2 thorpej nextproto = *mtod(exthdrs.ip6e_rthdr, u_char *); 841 1.2.2.2 thorpej *mtod(exthdrs.ip6e_rthdr, u_char *) = IPPROTO_FRAGMENT; 842 1.2.2.2 thorpej } 843 1.2.2.2 thorpej else if (exthdrs.ip6e_dest1) { 844 1.2.2.2 thorpej nextproto = *mtod(exthdrs.ip6e_dest1, u_char *); 845 1.2.2.2 thorpej *mtod(exthdrs.ip6e_dest1, u_char *) = IPPROTO_FRAGMENT; 846 1.2.2.2 thorpej } 847 1.2.2.2 thorpej else if (exthdrs.ip6e_hbh) { 848 1.2.2.2 thorpej nextproto = *mtod(exthdrs.ip6e_hbh, u_char *); 849 1.2.2.2 thorpej *mtod(exthdrs.ip6e_hbh, u_char *) = IPPROTO_FRAGMENT; 850 1.2.2.2 thorpej } 851 1.2.2.2 thorpej else { 852 1.2.2.2 thorpej nextproto = ip6->ip6_nxt; 853 1.2.2.2 thorpej ip6->ip6_nxt = IPPROTO_FRAGMENT; 854 1.2.2.2 thorpej } 855 1.2.2.2 thorpej 856 1.2.2.2 thorpej /* 857 1.2.2.2 thorpej * Loop through length of segment after first fragment, 858 1.2.2.2 thorpej * make new header and copy data of each part and link onto chain. 859 1.2.2.2 thorpej */ 860 1.2.2.2 thorpej m0 = m; 861 1.2.2.2 thorpej for (off = hlen; off < tlen; off += len) { 862 1.2.2.2 thorpej MGETHDR(m, M_DONTWAIT, MT_HEADER); 863 1.2.2.2 thorpej if (!m) { 864 1.2.2.2 thorpej error = ENOBUFS; 865 1.2.2.2 thorpej ip6stat.ip6s_odropped++; 866 1.2.2.2 thorpej goto sendorfree; 867 1.2.2.2 thorpej } 868 1.2.2.2 thorpej m->m_flags = m0->m_flags & M_COPYFLAGS; 869 1.2.2.2 thorpej *mnext = m; 870 1.2.2.2 thorpej mnext = &m->m_nextpkt; 871 1.2.2.2 thorpej m->m_data += max_linkhdr; 872 1.2.2.2 thorpej mhip6 = mtod(m, struct ip6_hdr *); 873 1.2.2.2 thorpej *mhip6 = *ip6; 874 1.2.2.2 thorpej m->m_len = sizeof(*mhip6); 875 1.2.2.2 thorpej error = ip6_insertfraghdr(m0, m, hlen, &ip6f); 876 1.2.2.2 thorpej if (error) { 877 1.2.2.2 thorpej ip6stat.ip6s_odropped++; 878 1.2.2.2 thorpej goto sendorfree; 879 1.2.2.2 thorpej } 880 1.2.2.2 thorpej ip6f->ip6f_offlg = htons((u_short)((off - hlen) & ~7)); 881 1.2.2.2 thorpej if (off + len >= tlen) 882 1.2.2.2 thorpej len = tlen - off; 883 1.2.2.2 thorpej else 884 1.2.2.2 thorpej ip6f->ip6f_offlg |= IP6F_MORE_FRAG; 885 1.2.2.2 thorpej mhip6->ip6_plen = htons((u_short)(len + hlen + 886 1.2.2.2 thorpej sizeof(*ip6f) - 887 1.2.2.2 thorpej sizeof(struct ip6_hdr))); 888 1.2.2.2 thorpej if ((m_frgpart = m_copy(m0, off, len)) == 0) { 889 1.2.2.2 thorpej error = ENOBUFS; 890 1.2.2.2 thorpej ip6stat.ip6s_odropped++; 891 1.2.2.2 thorpej goto sendorfree; 892 1.2.2.2 thorpej } 893 1.2.2.2 thorpej m_cat(m, m_frgpart); 894 1.2.2.2 thorpej m->m_pkthdr.len = len + hlen + sizeof(*ip6f); 895 1.2.2.2 thorpej m->m_pkthdr.rcvif = (struct ifnet *)0; 896 1.2.2.2 thorpej ip6f->ip6f_reserved = 0; 897 1.2.2.2 thorpej ip6f->ip6f_ident = id; 898 1.2.2.2 thorpej ip6f->ip6f_nxt = nextproto; 899 1.2.2.2 thorpej ip6stat.ip6s_ofragments++; 900 1.2.2.2 thorpej } 901 1.2.2.2 thorpej } 902 1.2.2.2 thorpej 903 1.2.2.2 thorpej /* 904 1.2.2.2 thorpej * Remove leading garbages. 905 1.2.2.2 thorpej */ 906 1.2.2.2 thorpej sendorfree: 907 1.2.2.2 thorpej m = m0->m_nextpkt; 908 1.2.2.2 thorpej m0->m_nextpkt = 0; 909 1.2.2.2 thorpej m_freem(m0); 910 1.2.2.2 thorpej for (m0 = m; m; m = m0) { 911 1.2.2.2 thorpej m0 = m->m_nextpkt; 912 1.2.2.2 thorpej m->m_nextpkt = 0; 913 1.2.2.2 thorpej if (error == 0) { 914 1.2.2.2 thorpej #ifdef NEWIP6OUTPUT 915 1.2.2.2 thorpej error = nd6_output(ifp, m, dst, ro->ro_rt); 916 1.2.2.2 thorpej #else 917 1.2.2.2 thorpej error = (*ifp->if_output)(ifp, m, 918 1.2.2.2 thorpej (struct sockaddr *)dst, 919 1.2.2.2 thorpej ro->ro_rt); 920 1.2.2.2 thorpej #endif 921 1.2.2.2 thorpej } 922 1.2.2.2 thorpej else 923 1.2.2.2 thorpej m_freem(m); 924 1.2.2.2 thorpej } 925 1.2.2.2 thorpej 926 1.2.2.2 thorpej if (error == 0) 927 1.2.2.2 thorpej ip6stat.ip6s_fragmented++; 928 1.2.2.2 thorpej 929 1.2.2.2 thorpej done: 930 1.2.2.2 thorpej if (ro == &ip6route && ro->ro_rt) { /* brace necessary for RTFREE */ 931 1.2.2.2 thorpej RTFREE(ro->ro_rt); 932 1.2.2.2 thorpej } else if (ro_pmtu == &ip6route && ro_pmtu->ro_rt) { 933 1.2.2.2 thorpej RTFREE(ro_pmtu->ro_rt); 934 1.2.2.2 thorpej } 935 1.2.2.2 thorpej 936 1.2.2.2 thorpej #ifdef IPSEC 937 1.2.2.2 thorpej if (sp != NULL) 938 1.2.2.2 thorpej key_freesp(sp); 939 1.2.2.2 thorpej #endif /* IPSEC */ 940 1.2.2.2 thorpej 941 1.2.2.2 thorpej return(error); 942 1.2.2.2 thorpej 943 1.2.2.2 thorpej freehdrs: 944 1.2.2.2 thorpej m_freem(exthdrs.ip6e_hbh); /* m_freem will check if mbuf is 0 */ 945 1.2.2.2 thorpej m_freem(exthdrs.ip6e_dest1); 946 1.2.2.2 thorpej m_freem(exthdrs.ip6e_rthdr); 947 1.2.2.2 thorpej m_freem(exthdrs.ip6e_dest2); 948 1.2.2.2 thorpej /* fall through */ 949 1.2.2.2 thorpej bad: 950 1.2.2.2 thorpej m_freem(m); 951 1.2.2.2 thorpej goto done; 952 1.2.2.2 thorpej } 953 1.2.2.2 thorpej 954 1.2.2.2 thorpej static int 955 1.2.2.2 thorpej ip6_copyexthdr(mp, hdr, hlen) 956 1.2.2.2 thorpej struct mbuf **mp; 957 1.2.2.2 thorpej caddr_t hdr; 958 1.2.2.2 thorpej int hlen; 959 1.2.2.2 thorpej { 960 1.2.2.2 thorpej struct mbuf *m; 961 1.2.2.2 thorpej 962 1.2.2.2 thorpej if (hlen > MCLBYTES) 963 1.2.2.2 thorpej return(ENOBUFS); /* XXX */ 964 1.2.2.2 thorpej 965 1.2.2.2 thorpej MGET(m, M_DONTWAIT, MT_DATA); 966 1.2.2.2 thorpej if (!m) 967 1.2.2.2 thorpej return(ENOBUFS); 968 1.2.2.2 thorpej 969 1.2.2.2 thorpej if (hlen > MLEN) { 970 1.2.2.2 thorpej MCLGET(m, M_DONTWAIT); 971 1.2.2.2 thorpej if ((m->m_flags & M_EXT) == 0) { 972 1.2.2.2 thorpej m_free(m); 973 1.2.2.2 thorpej return(ENOBUFS); 974 1.2.2.2 thorpej } 975 1.2.2.2 thorpej } 976 1.2.2.2 thorpej m->m_len = hlen; 977 1.2.2.2 thorpej if (hdr) 978 1.2.2.2 thorpej bcopy(hdr, mtod(m, caddr_t), hlen); 979 1.2.2.2 thorpej 980 1.2.2.2 thorpej *mp = m; 981 1.2.2.2 thorpej return(0); 982 1.2.2.2 thorpej } 983 1.2.2.2 thorpej 984 1.2.2.2 thorpej /* 985 1.2.2.2 thorpej * Insert jumbo payload option. 986 1.2.2.2 thorpej */ 987 1.2.2.2 thorpej static int 988 1.2.2.2 thorpej ip6_insert_jumboopt(exthdrs, plen) 989 1.2.2.2 thorpej struct ip6_exthdrs *exthdrs; 990 1.2.2.2 thorpej u_int32_t plen; 991 1.2.2.2 thorpej { 992 1.2.2.2 thorpej struct mbuf *mopt; 993 1.2.2.2 thorpej u_char *optbuf; 994 1.2.2.2 thorpej 995 1.2.2.2 thorpej #define JUMBOOPTLEN 8 /* length of jumbo payload option and padding */ 996 1.2.2.2 thorpej 997 1.2.2.2 thorpej /* 998 1.2.2.2 thorpej * If there is no hop-by-hop options header, allocate new one. 999 1.2.2.2 thorpej * If there is one but it doesn't have enough space to store the 1000 1.2.2.2 thorpej * jumbo payload option, allocate a cluster to store the whole options. 1001 1.2.2.2 thorpej * Otherwise, use it to store the options. 1002 1.2.2.2 thorpej */ 1003 1.2.2.2 thorpej if (exthdrs->ip6e_hbh == 0) { 1004 1.2.2.2 thorpej MGET(mopt, M_DONTWAIT, MT_DATA); 1005 1.2.2.2 thorpej if (mopt == 0) 1006 1.2.2.2 thorpej return(ENOBUFS); 1007 1.2.2.2 thorpej mopt->m_len = JUMBOOPTLEN; 1008 1.2.2.2 thorpej optbuf = mtod(mopt, u_char *); 1009 1.2.2.2 thorpej optbuf[1] = 0; /* = ((JUMBOOPTLEN) >> 3) - 1 */ 1010 1.2.2.2 thorpej exthdrs->ip6e_hbh = mopt; 1011 1.2.2.2 thorpej } 1012 1.2.2.2 thorpej else { 1013 1.2.2.2 thorpej struct ip6_hbh *hbh; 1014 1.2.2.2 thorpej 1015 1.2.2.2 thorpej mopt = exthdrs->ip6e_hbh; 1016 1.2.2.2 thorpej if (M_TRAILINGSPACE(mopt) < JUMBOOPTLEN) { 1017 1.2.2.2 thorpej caddr_t oldoptp = mtod(mopt, caddr_t); 1018 1.2.2.2 thorpej int oldoptlen = mopt->m_len; 1019 1.2.2.2 thorpej 1020 1.2.2.2 thorpej if (mopt->m_flags & M_EXT) 1021 1.2.2.2 thorpej return(ENOBUFS); /* XXX */ 1022 1.2.2.2 thorpej MCLGET(mopt, M_DONTWAIT); 1023 1.2.2.2 thorpej if ((mopt->m_flags & M_EXT) == 0) 1024 1.2.2.2 thorpej return(ENOBUFS); 1025 1.2.2.2 thorpej 1026 1.2.2.2 thorpej bcopy(oldoptp, mtod(mopt, caddr_t), oldoptlen); 1027 1.2.2.2 thorpej optbuf = mtod(mopt, caddr_t) + oldoptlen; 1028 1.2.2.2 thorpej mopt->m_len = oldoptlen + JUMBOOPTLEN; 1029 1.2.2.2 thorpej } 1030 1.2.2.2 thorpej else { 1031 1.2.2.2 thorpej optbuf = mtod(mopt, u_char *) + mopt->m_len; 1032 1.2.2.2 thorpej mopt->m_len += JUMBOOPTLEN; 1033 1.2.2.2 thorpej } 1034 1.2.2.2 thorpej optbuf[0] = IP6OPT_PADN; 1035 1.2.2.2 thorpej optbuf[1] = 1; 1036 1.2.2.2 thorpej 1037 1.2.2.2 thorpej /* 1038 1.2.2.2 thorpej * Adjust the header length according to the pad and 1039 1.2.2.2 thorpej * the jumbo payload option. 1040 1.2.2.2 thorpej */ 1041 1.2.2.2 thorpej hbh = mtod(mopt, struct ip6_hbh *); 1042 1.2.2.2 thorpej hbh->ip6h_len += (JUMBOOPTLEN >> 3); 1043 1.2.2.2 thorpej } 1044 1.2.2.2 thorpej 1045 1.2.2.2 thorpej /* fill in the option. */ 1046 1.2.2.2 thorpej optbuf[2] = IP6OPT_JUMBO; 1047 1.2.2.2 thorpej optbuf[3] = 4; 1048 1.2.2.2 thorpej *(u_int32_t *)&optbuf[4] = htonl(plen + JUMBOOPTLEN); 1049 1.2.2.2 thorpej 1050 1.2.2.2 thorpej /* finally, adjust the packet header length */ 1051 1.2.2.2 thorpej exthdrs->ip6e_ip6->m_pkthdr.len += JUMBOOPTLEN; 1052 1.2.2.2 thorpej 1053 1.2.2.2 thorpej return(0); 1054 1.2.2.2 thorpej #undef JUMBOOPTLEN 1055 1.2.2.2 thorpej } 1056 1.2.2.2 thorpej 1057 1.2.2.2 thorpej /* 1058 1.2.2.2 thorpej * Insert fragment header and copy unfragmentable header portions. 1059 1.2.2.2 thorpej */ 1060 1.2.2.2 thorpej static int 1061 1.2.2.2 thorpej ip6_insertfraghdr(m0, m, hlen, frghdrp) 1062 1.2.2.2 thorpej struct mbuf *m0, *m; 1063 1.2.2.2 thorpej int hlen; 1064 1.2.2.2 thorpej struct ip6_frag **frghdrp; 1065 1.2.2.2 thorpej { 1066 1.2.2.2 thorpej struct mbuf *n, *mlast; 1067 1.2.2.2 thorpej 1068 1.2.2.2 thorpej if (hlen > sizeof(struct ip6_hdr)) { 1069 1.2.2.2 thorpej n = m_copym(m0, sizeof(struct ip6_hdr), 1070 1.2.2.2 thorpej hlen - sizeof(struct ip6_hdr), M_DONTWAIT); 1071 1.2.2.2 thorpej if (n == 0) 1072 1.2.2.2 thorpej return(ENOBUFS); 1073 1.2.2.2 thorpej m->m_next = n; 1074 1.2.2.2 thorpej } 1075 1.2.2.2 thorpej else 1076 1.2.2.2 thorpej n = m; 1077 1.2.2.2 thorpej 1078 1.2.2.2 thorpej /* Search for the last mbuf of unfragmentable part. */ 1079 1.2.2.2 thorpej for (mlast = n; mlast->m_next; mlast = mlast->m_next) 1080 1.2.2.2 thorpej ; 1081 1.2.2.2 thorpej 1082 1.2.2.2 thorpej if ((mlast->m_flags & M_EXT) == 0 && 1083 1.2.2.2 thorpej M_TRAILINGSPACE(mlast) < sizeof(struct ip6_frag)) { 1084 1.2.2.2 thorpej /* use the trailing space of the last mbuf for the fragment hdr */ 1085 1.2.2.2 thorpej *frghdrp = 1086 1.2.2.2 thorpej (struct ip6_frag *)(mtod(mlast, caddr_t) + mlast->m_len); 1087 1.2.2.2 thorpej mlast->m_len += sizeof(struct ip6_frag); 1088 1.2.2.2 thorpej m->m_pkthdr.len += sizeof(struct ip6_frag); 1089 1.2.2.2 thorpej } 1090 1.2.2.2 thorpej else { 1091 1.2.2.2 thorpej /* allocate a new mbuf for the fragment header */ 1092 1.2.2.2 thorpej struct mbuf *mfrg; 1093 1.2.2.2 thorpej 1094 1.2.2.2 thorpej MGET(mfrg, M_DONTWAIT, MT_DATA); 1095 1.2.2.2 thorpej if (mfrg == 0) 1096 1.2.2.2 thorpej return(ENOBUFS); 1097 1.2.2.2 thorpej mfrg->m_len = sizeof(struct ip6_frag); 1098 1.2.2.2 thorpej *frghdrp = mtod(mfrg, struct ip6_frag *); 1099 1.2.2.2 thorpej mlast->m_next = mfrg; 1100 1.2.2.2 thorpej } 1101 1.2.2.2 thorpej 1102 1.2.2.2 thorpej return(0); 1103 1.2.2.2 thorpej } 1104 1.2.2.2 thorpej 1105 1.2.2.2 thorpej /* 1106 1.2.2.2 thorpej * IP6 socket option processing. 1107 1.2.2.2 thorpej */ 1108 1.2.2.2 thorpej int 1109 1.2.2.2 thorpej ip6_ctloutput(op, so, level, optname, mp) 1110 1.2.2.2 thorpej int op; 1111 1.2.2.2 thorpej struct socket *so; 1112 1.2.2.2 thorpej int level, optname; 1113 1.2.2.2 thorpej struct mbuf **mp; 1114 1.2.2.2 thorpej { 1115 1.2.2.2 thorpej register struct in6pcb *in6p = sotoin6pcb(so); 1116 1.2.2.2 thorpej register struct mbuf *m = *mp; 1117 1.2.2.2 thorpej register int optval = 0; 1118 1.2.2.2 thorpej int error = 0; 1119 1.2.2.2 thorpej struct proc *p = curproc; /* XXX */ 1120 1.2.2.2 thorpej 1121 1.2.2.2 thorpej if (level == IPPROTO_IPV6) 1122 1.2.2.2 thorpej switch (op) { 1123 1.2.2.2 thorpej 1124 1.2.2.2 thorpej case PRCO_SETOPT: 1125 1.2.2.2 thorpej switch (optname) { 1126 1.2.2.2 thorpej case IPV6_PKTOPTIONS: 1127 1.2.2.2 thorpej return(ip6_pcbopts(&in6p->in6p_outputopts, 1128 1.2.2.2 thorpej m, so)); 1129 1.2.2.2 thorpej case IPV6_HOPOPTS: 1130 1.2.2.2 thorpej case IPV6_DSTOPTS: 1131 1.2.2.2 thorpej if (p == 0 || suser(p->p_ucred, &p->p_acflag)) { 1132 1.2.2.2 thorpej error = EPERM; 1133 1.2.2.2 thorpej break; 1134 1.2.2.2 thorpej } 1135 1.2.2.2 thorpej /* fall through */ 1136 1.2.2.2 thorpej case IPV6_UNICAST_HOPS: 1137 1.2.2.2 thorpej case IPV6_RECVOPTS: 1138 1.2.2.2 thorpej case IPV6_RECVRETOPTS: 1139 1.2.2.2 thorpej case IPV6_RECVDSTADDR: 1140 1.2.2.2 thorpej case IPV6_PKTINFO: 1141 1.2.2.2 thorpej case IPV6_HOPLIMIT: 1142 1.2.2.2 thorpej case IPV6_RTHDR: 1143 1.2.2.2 thorpej case IPV6_CHECKSUM: 1144 1.2.2.2 thorpej case IPV6_FAITH: 1145 1.2.2.2 thorpej if (!m || m->m_len != sizeof(int)) 1146 1.2.2.2 thorpej error = EINVAL; 1147 1.2.2.2 thorpej else { 1148 1.2.2.2 thorpej optval = *mtod(m, int *); 1149 1.2.2.2 thorpej switch (optname) { 1150 1.2.2.2 thorpej 1151 1.2.2.2 thorpej case IPV6_UNICAST_HOPS: 1152 1.2.2.2 thorpej if (optval < -1 || optval >= 256) 1153 1.2.2.2 thorpej error = EINVAL; 1154 1.2.2.2 thorpej else { 1155 1.2.2.2 thorpej /* -1 = kernel default */ 1156 1.2.2.2 thorpej in6p->in6p_hops = optval; 1157 1.2.2.2 thorpej } 1158 1.2.2.2 thorpej break; 1159 1.2.2.2 thorpej #define OPTSET(bit) \ 1160 1.2.2.2 thorpej if (optval) \ 1161 1.2.2.2 thorpej in6p->in6p_flags |= bit; \ 1162 1.2.2.2 thorpej else \ 1163 1.2.2.2 thorpej in6p->in6p_flags &= ~bit; 1164 1.2.2.2 thorpej 1165 1.2.2.2 thorpej case IPV6_RECVOPTS: 1166 1.2.2.2 thorpej OPTSET(IN6P_RECVOPTS); 1167 1.2.2.2 thorpej break; 1168 1.2.2.2 thorpej 1169 1.2.2.2 thorpej case IPV6_RECVRETOPTS: 1170 1.2.2.2 thorpej OPTSET(IN6P_RECVRETOPTS); 1171 1.2.2.2 thorpej break; 1172 1.2.2.2 thorpej 1173 1.2.2.2 thorpej case IPV6_RECVDSTADDR: 1174 1.2.2.2 thorpej OPTSET(IN6P_RECVDSTADDR); 1175 1.2.2.2 thorpej break; 1176 1.2.2.2 thorpej 1177 1.2.2.2 thorpej case IPV6_PKTINFO: 1178 1.2.2.2 thorpej OPTSET(IN6P_PKTINFO); 1179 1.2.2.2 thorpej break; 1180 1.2.2.2 thorpej 1181 1.2.2.2 thorpej case IPV6_HOPLIMIT: 1182 1.2.2.2 thorpej OPTSET(IN6P_HOPLIMIT); 1183 1.2.2.2 thorpej break; 1184 1.2.2.2 thorpej 1185 1.2.2.2 thorpej case IPV6_HOPOPTS: 1186 1.2.2.2 thorpej OPTSET(IN6P_HOPOPTS); 1187 1.2.2.2 thorpej break; 1188 1.2.2.2 thorpej 1189 1.2.2.2 thorpej case IPV6_DSTOPTS: 1190 1.2.2.2 thorpej OPTSET(IN6P_DSTOPTS); 1191 1.2.2.2 thorpej break; 1192 1.2.2.2 thorpej 1193 1.2.2.2 thorpej case IPV6_RTHDR: 1194 1.2.2.2 thorpej OPTSET(IN6P_RTHDR); 1195 1.2.2.2 thorpej break; 1196 1.2.2.2 thorpej 1197 1.2.2.2 thorpej case IPV6_CHECKSUM: 1198 1.2.2.2 thorpej in6p->in6p_cksum = optval; 1199 1.2.2.2 thorpej break; 1200 1.2.2.2 thorpej 1201 1.2.2.2 thorpej case IPV6_FAITH: 1202 1.2.2.2 thorpej OPTSET(IN6P_FAITH); 1203 1.2.2.2 thorpej break; 1204 1.2.2.2 thorpej } 1205 1.2.2.2 thorpej } 1206 1.2.2.2 thorpej break; 1207 1.2.2.2 thorpej #undef OPTSET 1208 1.2.2.2 thorpej 1209 1.2.2.2 thorpej case IPV6_MULTICAST_IF: 1210 1.2.2.2 thorpej case IPV6_MULTICAST_HOPS: 1211 1.2.2.2 thorpej case IPV6_MULTICAST_LOOP: 1212 1.2.2.2 thorpej case IPV6_JOIN_GROUP: 1213 1.2.2.2 thorpej case IPV6_LEAVE_GROUP: 1214 1.2.2.2 thorpej error = ip6_setmoptions(optname, &in6p->in6p_moptions, m); 1215 1.2.2.2 thorpej break; 1216 1.2.2.2 thorpej 1217 1.2.2.2 thorpej #ifdef IPSEC 1218 1.2.2.2 thorpej case IPV6_IPSEC_POLICY: 1219 1.2.2.2 thorpej { 1220 1.2.2.2 thorpej caddr_t req = NULL; 1221 1.2.2.2 thorpej int len = 0; 1222 1.2.2.2 thorpej int priv = 0; 1223 1.2.2.2 thorpej #ifdef __NetBSD__ 1224 1.2.2.2 thorpej if (p == 0 || suser(p->p_ucred, &p->p_acflag)) 1225 1.2.2.2 thorpej priv = 0; 1226 1.2.2.2 thorpej else 1227 1.2.2.2 thorpej priv = 1; 1228 1.2.2.2 thorpej #else 1229 1.2.2.2 thorpej priv = (in6p->in6p_socket->so_state & SS_PRIV); 1230 1.2.2.2 thorpej #endif 1231 1.2.2.2 thorpej if (m != 0) { 1232 1.2.2.2 thorpej req = mtod(m, caddr_t); 1233 1.2.2.2 thorpej len = m->m_len; 1234 1.2.2.2 thorpej } 1235 1.2.2.2 thorpej error = ipsec_set_policy(&in6p->in6p_sp, 1236 1.2.2.2 thorpej optname, req, len, 1237 1.2.2.2 thorpej priv); 1238 1.2.2.2 thorpej } 1239 1.2.2.2 thorpej break; 1240 1.2.2.2 thorpej #endif /* IPSEC */ 1241 1.2.2.2 thorpej 1242 1.2.2.2 thorpej default: 1243 1.2.2.2 thorpej error = ENOPROTOOPT; 1244 1.2.2.2 thorpej break; 1245 1.2.2.2 thorpej } 1246 1.2.2.2 thorpej if (m) 1247 1.2.2.2 thorpej (void)m_free(m); 1248 1.2.2.2 thorpej break; 1249 1.2.2.2 thorpej 1250 1.2.2.2 thorpej case PRCO_GETOPT: 1251 1.2.2.2 thorpej switch (optname) { 1252 1.2.2.2 thorpej 1253 1.2.2.2 thorpej case IPV6_OPTIONS: 1254 1.2.2.2 thorpej case IPV6_RETOPTS: 1255 1.2.2.2 thorpej #if 0 1256 1.2.2.2 thorpej *mp = m = m_get(M_WAIT, MT_SOOPTS); 1257 1.2.2.2 thorpej if (in6p->in6p_options) { 1258 1.2.2.2 thorpej m->m_len = in6p->in6p_options->m_len; 1259 1.2.2.2 thorpej bcopy(mtod(in6p->in6p_options, caddr_t), 1260 1.2.2.2 thorpej mtod(m, caddr_t), 1261 1.2.2.2 thorpej (unsigned)m->m_len); 1262 1.2.2.2 thorpej } else 1263 1.2.2.2 thorpej m->m_len = 0; 1264 1.2.2.2 thorpej break; 1265 1.2.2.2 thorpej #else 1266 1.2.2.2 thorpej error = ENOPROTOOPT; 1267 1.2.2.2 thorpej break; 1268 1.2.2.2 thorpej #endif 1269 1.2.2.2 thorpej 1270 1.2.2.2 thorpej case IPV6_PKTOPTIONS: 1271 1.2.2.2 thorpej if (in6p->in6p_options) { 1272 1.2.2.2 thorpej *mp = m_copym(in6p->in6p_options, 0, 1273 1.2.2.2 thorpej M_COPYALL, M_WAIT); 1274 1.2.2.2 thorpej } else { 1275 1.2.2.2 thorpej *mp = m_get(M_WAIT, MT_SOOPTS); 1276 1.2.2.2 thorpej (*mp)->m_len = 0; 1277 1.2.2.2 thorpej } 1278 1.2.2.2 thorpej break; 1279 1.2.2.2 thorpej 1280 1.2.2.2 thorpej case IPV6_HOPOPTS: 1281 1.2.2.2 thorpej case IPV6_DSTOPTS: 1282 1.2.2.2 thorpej if (p == 0 || suser(p->p_ucred, &p->p_acflag)) { 1283 1.2.2.2 thorpej error = EPERM; 1284 1.2.2.2 thorpej break; 1285 1.2.2.2 thorpej } 1286 1.2.2.2 thorpej /* fall through */ 1287 1.2.2.2 thorpej case IPV6_UNICAST_HOPS: 1288 1.2.2.2 thorpej case IPV6_RECVOPTS: 1289 1.2.2.2 thorpej case IPV6_RECVRETOPTS: 1290 1.2.2.2 thorpej case IPV6_RECVDSTADDR: 1291 1.2.2.2 thorpej case IPV6_PKTINFO: 1292 1.2.2.2 thorpej case IPV6_HOPLIMIT: 1293 1.2.2.2 thorpej case IPV6_RTHDR: 1294 1.2.2.2 thorpej case IPV6_CHECKSUM: 1295 1.2.2.2 thorpej case IPV6_FAITH: 1296 1.2.2.2 thorpej *mp = m = m_get(M_WAIT, MT_SOOPTS); 1297 1.2.2.2 thorpej m->m_len = sizeof(int); 1298 1.2.2.2 thorpej switch (optname) { 1299 1.2.2.2 thorpej 1300 1.2.2.2 thorpej case IPV6_UNICAST_HOPS: 1301 1.2.2.2 thorpej optval = in6p->in6p_hops; 1302 1.2.2.2 thorpej break; 1303 1.2.2.2 thorpej 1304 1.2.2.2 thorpej #define OPTBIT(bit) (in6p->in6p_flags & bit ? 1 : 0) 1305 1.2.2.2 thorpej 1306 1.2.2.2 thorpej case IPV6_RECVOPTS: 1307 1.2.2.2 thorpej optval = OPTBIT(IN6P_RECVOPTS); 1308 1.2.2.2 thorpej break; 1309 1.2.2.2 thorpej 1310 1.2.2.2 thorpej case IPV6_RECVRETOPTS: 1311 1.2.2.2 thorpej optval = OPTBIT(IN6P_RECVRETOPTS); 1312 1.2.2.2 thorpej break; 1313 1.2.2.2 thorpej 1314 1.2.2.2 thorpej case IPV6_RECVDSTADDR: 1315 1.2.2.2 thorpej optval = OPTBIT(IN6P_RECVDSTADDR); 1316 1.2.2.2 thorpej break; 1317 1.2.2.2 thorpej 1318 1.2.2.2 thorpej case IPV6_PKTINFO: 1319 1.2.2.2 thorpej optval = OPTBIT(IN6P_PKTINFO); 1320 1.2.2.2 thorpej break; 1321 1.2.2.2 thorpej 1322 1.2.2.2 thorpej case IPV6_HOPLIMIT: 1323 1.2.2.2 thorpej optval = OPTBIT(IN6P_HOPLIMIT); 1324 1.2.2.2 thorpej break; 1325 1.2.2.2 thorpej 1326 1.2.2.2 thorpej case IPV6_HOPOPTS: 1327 1.2.2.2 thorpej optval = OPTBIT(IN6P_HOPOPTS); 1328 1.2.2.2 thorpej break; 1329 1.2.2.2 thorpej 1330 1.2.2.2 thorpej case IPV6_DSTOPTS: 1331 1.2.2.2 thorpej optval = OPTBIT(IN6P_DSTOPTS); 1332 1.2.2.2 thorpej break; 1333 1.2.2.2 thorpej 1334 1.2.2.2 thorpej case IPV6_RTHDR: 1335 1.2.2.2 thorpej optval = OPTBIT(IN6P_RTHDR); 1336 1.2.2.2 thorpej break; 1337 1.2.2.2 thorpej 1338 1.2.2.2 thorpej case IPV6_CHECKSUM: 1339 1.2.2.2 thorpej optval = in6p->in6p_cksum; 1340 1.2.2.2 thorpej break; 1341 1.2.2.2 thorpej 1342 1.2.2.2 thorpej case IPV6_FAITH: 1343 1.2.2.2 thorpej optval = OPTBIT(IN6P_FAITH); 1344 1.2.2.2 thorpej break; 1345 1.2.2.2 thorpej } 1346 1.2.2.2 thorpej *mtod(m, int *) = optval; 1347 1.2.2.2 thorpej break; 1348 1.2.2.2 thorpej 1349 1.2.2.2 thorpej case IPV6_MULTICAST_IF: 1350 1.2.2.2 thorpej case IPV6_MULTICAST_HOPS: 1351 1.2.2.2 thorpej case IPV6_MULTICAST_LOOP: 1352 1.2.2.2 thorpej case IPV6_JOIN_GROUP: 1353 1.2.2.2 thorpej case IPV6_LEAVE_GROUP: 1354 1.2.2.2 thorpej error = ip6_getmoptions(optname, in6p->in6p_moptions, mp); 1355 1.2.2.2 thorpej break; 1356 1.2.2.2 thorpej 1357 1.2.2.2 thorpej #ifdef IPSEC 1358 1.2.2.2 thorpej case IPV6_IPSEC_POLICY: 1359 1.2.2.2 thorpej error = ipsec_get_policy(in6p->in6p_sp, mp); 1360 1.2.2.2 thorpej break; 1361 1.2.2.2 thorpej #endif /* IPSEC */ 1362 1.2.2.2 thorpej 1363 1.2.2.2 thorpej default: 1364 1.2.2.2 thorpej error = ENOPROTOOPT; 1365 1.2.2.2 thorpej break; 1366 1.2.2.2 thorpej } 1367 1.2.2.2 thorpej break; 1368 1.2.2.2 thorpej } 1369 1.2.2.2 thorpej else { 1370 1.2.2.2 thorpej error = EINVAL; 1371 1.2.2.2 thorpej if (op == PRCO_SETOPT && *mp) 1372 1.2.2.2 thorpej (void)m_free(*mp); 1373 1.2.2.2 thorpej } 1374 1.2.2.2 thorpej return(error); 1375 1.2.2.2 thorpej } 1376 1.2.2.2 thorpej 1377 1.2.2.2 thorpej /* 1378 1.2.2.2 thorpej * Set up IP6 options in pcb for insertion in output packets. 1379 1.2.2.2 thorpej * Store in mbuf with pointer in pcbopt, adding pseudo-option 1380 1.2.2.2 thorpej * with destination address if source routed. 1381 1.2.2.2 thorpej */ 1382 1.2.2.2 thorpej static int 1383 1.2.2.2 thorpej ip6_pcbopts(pktopt, m, so) 1384 1.2.2.2 thorpej struct ip6_pktopts **pktopt; 1385 1.2.2.2 thorpej register struct mbuf *m; 1386 1.2.2.2 thorpej struct socket *so; 1387 1.2.2.2 thorpej { 1388 1.2.2.2 thorpej register struct ip6_pktopts *opt = *pktopt; 1389 1.2.2.2 thorpej int error = 0; 1390 1.2.2.2 thorpej struct proc *p = curproc; /* XXX */ 1391 1.2.2.2 thorpej int priv = 0; 1392 1.2.2.2 thorpej 1393 1.2.2.2 thorpej /* turn off any old options. */ 1394 1.2.2.2 thorpej if (opt) { 1395 1.2.2.2 thorpej if (opt->ip6po_m) 1396 1.2.2.2 thorpej (void)m_free(opt->ip6po_m); 1397 1.2.2.2 thorpej } 1398 1.2.2.2 thorpej else 1399 1.2.2.2 thorpej opt = malloc(sizeof(*opt), M_IP6OPT, M_WAITOK); 1400 1.2.2.2 thorpej *pktopt = 0; 1401 1.2.2.2 thorpej 1402 1.2.2.2 thorpej if (!m || m->m_len == 0) { 1403 1.2.2.2 thorpej /* 1404 1.2.2.2 thorpej * Only turning off any previous options. 1405 1.2.2.2 thorpej */ 1406 1.2.2.2 thorpej if (opt) 1407 1.2.2.2 thorpej free(opt, M_IP6OPT); 1408 1.2.2.2 thorpej if (m) 1409 1.2.2.2 thorpej (void)m_free(m); 1410 1.2.2.2 thorpej return(0); 1411 1.2.2.2 thorpej } 1412 1.2.2.2 thorpej 1413 1.2.2.2 thorpej /* set options specified by user. */ 1414 1.2.2.2 thorpej if (p && !suser(p->p_ucred, &p->p_acflag)) 1415 1.2.2.2 thorpej priv = 1; 1416 1.2.2.2 thorpej if ((error = ip6_setpktoptions(m, opt, priv)) != 0) { 1417 1.2.2.2 thorpej (void)m_free(m); 1418 1.2.2.2 thorpej return(error); 1419 1.2.2.2 thorpej } 1420 1.2.2.2 thorpej *pktopt = opt; 1421 1.2.2.2 thorpej return(0); 1422 1.2.2.2 thorpej } 1423 1.2.2.2 thorpej 1424 1.2.2.2 thorpej /* 1425 1.2.2.2 thorpej * Set the IP6 multicast options in response to user setsockopt(). 1426 1.2.2.2 thorpej */ 1427 1.2.2.2 thorpej static int 1428 1.2.2.2 thorpej ip6_setmoptions(optname, im6op, m) 1429 1.2.2.2 thorpej int optname; 1430 1.2.2.2 thorpej struct ip6_moptions **im6op; 1431 1.2.2.2 thorpej struct mbuf *m; 1432 1.2.2.2 thorpej { 1433 1.2.2.2 thorpej int error = 0; 1434 1.2.2.2 thorpej u_int loop, ifindex; 1435 1.2.2.2 thorpej struct ipv6_mreq *mreq; 1436 1.2.2.2 thorpej struct ifnet *ifp; 1437 1.2.2.2 thorpej struct ip6_moptions *im6o = *im6op; 1438 1.2.2.2 thorpej struct route_in6 ro; 1439 1.2.2.2 thorpej struct sockaddr_in6 *dst; 1440 1.2.2.2 thorpej struct in6_multi_mship *imm; 1441 1.2.2.2 thorpej struct proc *p = curproc; /* XXX */ 1442 1.2.2.2 thorpej 1443 1.2.2.2 thorpej if (im6o == NULL) { 1444 1.2.2.2 thorpej /* 1445 1.2.2.2 thorpej * No multicast option buffer attached to the pcb; 1446 1.2.2.2 thorpej * allocate one and initialize to default values. 1447 1.2.2.2 thorpej */ 1448 1.2.2.2 thorpej im6o = (struct ip6_moptions *) 1449 1.2.2.2 thorpej malloc(sizeof(*im6o), M_IPMOPTS, M_WAITOK); 1450 1.2.2.2 thorpej 1451 1.2.2.2 thorpej if (im6o == NULL) 1452 1.2.2.2 thorpej return(ENOBUFS); 1453 1.2.2.2 thorpej *im6op = im6o; 1454 1.2.2.2 thorpej im6o->im6o_multicast_ifp = NULL; 1455 1.2.2.2 thorpej im6o->im6o_multicast_hlim = ip6_defmcasthlim; 1456 1.2.2.2 thorpej im6o->im6o_multicast_loop = IPV6_DEFAULT_MULTICAST_LOOP; 1457 1.2.2.2 thorpej LIST_INIT(&im6o->im6o_memberships); 1458 1.2.2.2 thorpej } 1459 1.2.2.2 thorpej 1460 1.2.2.2 thorpej switch (optname) { 1461 1.2.2.2 thorpej 1462 1.2.2.2 thorpej case IPV6_MULTICAST_IF: 1463 1.2.2.2 thorpej /* 1464 1.2.2.2 thorpej * Select the interface for outgoing multicast packets. 1465 1.2.2.2 thorpej */ 1466 1.2.2.2 thorpej if (m == NULL || m->m_len != sizeof(u_int)) { 1467 1.2.2.2 thorpej error = EINVAL; 1468 1.2.2.2 thorpej break; 1469 1.2.2.2 thorpej } 1470 1.2.2.2 thorpej ifindex = *(mtod(m, u_int *)); 1471 1.2.2.2 thorpej if (ifindex < 0 || if_index < ifindex) { 1472 1.2.2.2 thorpej error = ENXIO; /* XXX EINVAL? */ 1473 1.2.2.2 thorpej break; 1474 1.2.2.2 thorpej } 1475 1.2.2.2 thorpej ifp = ifindex2ifnet[ifindex]; 1476 1.2.2.2 thorpej if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) { 1477 1.2.2.2 thorpej error = EADDRNOTAVAIL; 1478 1.2.2.2 thorpej break; 1479 1.2.2.2 thorpej } 1480 1.2.2.2 thorpej im6o->im6o_multicast_ifp = ifp; 1481 1.2.2.2 thorpej break; 1482 1.2.2.2 thorpej 1483 1.2.2.2 thorpej case IPV6_MULTICAST_HOPS: 1484 1.2.2.2 thorpej { 1485 1.2.2.2 thorpej /* 1486 1.2.2.2 thorpej * Set the IP6 hoplimit for outgoing multicast packets. 1487 1.2.2.2 thorpej */ 1488 1.2.2.2 thorpej int optval; 1489 1.2.2.2 thorpej if (m == NULL || m->m_len != sizeof(int)) { 1490 1.2.2.2 thorpej error = EINVAL; 1491 1.2.2.2 thorpej break; 1492 1.2.2.2 thorpej } 1493 1.2.2.2 thorpej optval = *(mtod(m, u_int *)); 1494 1.2.2.2 thorpej if (optval < -1 || optval >= 256) 1495 1.2.2.2 thorpej error = EINVAL; 1496 1.2.2.2 thorpej else if (optval == -1) 1497 1.2.2.2 thorpej im6o->im6o_multicast_hlim = ip6_defmcasthlim; 1498 1.2.2.2 thorpej else 1499 1.2.2.2 thorpej im6o->im6o_multicast_hlim = optval; 1500 1.2.2.2 thorpej break; 1501 1.2.2.2 thorpej } 1502 1.2.2.2 thorpej 1503 1.2.2.2 thorpej case IPV6_MULTICAST_LOOP: 1504 1.2.2.2 thorpej /* 1505 1.2.2.2 thorpej * Set the loopback flag for outgoing multicast packets. 1506 1.2.2.2 thorpej * Must be zero or one. 1507 1.2.2.2 thorpej */ 1508 1.2.2.2 thorpej if (m == NULL || m->m_len != sizeof(u_int) || 1509 1.2.2.2 thorpej (loop = *(mtod(m, u_int *))) > 1) { 1510 1.2.2.2 thorpej error = EINVAL; 1511 1.2.2.2 thorpej break; 1512 1.2.2.2 thorpej } 1513 1.2.2.2 thorpej im6o->im6o_multicast_loop = loop; 1514 1.2.2.2 thorpej break; 1515 1.2.2.2 thorpej 1516 1.2.2.2 thorpej case IPV6_JOIN_GROUP: 1517 1.2.2.2 thorpej /* 1518 1.2.2.2 thorpej * Add a multicast group membership. 1519 1.2.2.2 thorpej * Group must be a valid IP6 multicast address. 1520 1.2.2.2 thorpej */ 1521 1.2.2.2 thorpej if (m == NULL || m->m_len != sizeof(struct ipv6_mreq)) { 1522 1.2.2.2 thorpej error = EINVAL; 1523 1.2.2.2 thorpej break; 1524 1.2.2.2 thorpej } 1525 1.2.2.2 thorpej mreq = mtod(m, struct ipv6_mreq *); 1526 1.2.2.2 thorpej if (IN6_IS_ADDR_ANY(&mreq->ipv6mr_multiaddr)) { 1527 1.2.2.2 thorpej /* 1528 1.2.2.2 thorpej * We use the unspecified address to specify to accept 1529 1.2.2.2 thorpej * all multicast addresses. Only super user is allowed 1530 1.2.2.2 thorpej * to do this. 1531 1.2.2.2 thorpej */ 1532 1.2.2.2 thorpej if (suser(p->p_ucred, &p->p_acflag)) { 1533 1.2.2.2 thorpej error = EACCES; 1534 1.2.2.2 thorpej break; 1535 1.2.2.2 thorpej } 1536 1.2.2.2 thorpej } else if (!IN6_IS_ADDR_MULTICAST(&mreq->ipv6mr_multiaddr)) { 1537 1.2.2.2 thorpej error = EINVAL; 1538 1.2.2.2 thorpej break; 1539 1.2.2.2 thorpej } 1540 1.2.2.2 thorpej 1541 1.2.2.2 thorpej /* 1542 1.2.2.2 thorpej * If the interface is specified, validate it. 1543 1.2.2.2 thorpej */ 1544 1.2.2.2 thorpej if (mreq->ipv6mr_interface < 0 1545 1.2.2.2 thorpej || if_index < mreq->ipv6mr_interface) { 1546 1.2.2.2 thorpej error = ENXIO; /* XXX EINVAL? */ 1547 1.2.2.2 thorpej break; 1548 1.2.2.2 thorpej } 1549 1.2.2.2 thorpej /* 1550 1.2.2.2 thorpej * If no interface was explicitly specified, choose an 1551 1.2.2.2 thorpej * appropriate one according to the given multicast address. 1552 1.2.2.2 thorpej */ 1553 1.2.2.2 thorpej if (mreq->ipv6mr_interface == 0) { 1554 1.2.2.2 thorpej /* 1555 1.2.2.2 thorpej * If the multicast address is in node-local scope, 1556 1.2.2.2 thorpej * the interface should be a loopback interface. 1557 1.2.2.2 thorpej * Otherwise, look up the routing table for the 1558 1.2.2.2 thorpej * address, and choose the outgoing interface. 1559 1.2.2.2 thorpej * XXX: is it a good approach? 1560 1.2.2.2 thorpej */ 1561 1.2.2.2 thorpej if (IN6_IS_ADDR_MC_NODELOCAL(&mreq->ipv6mr_multiaddr)) { 1562 1.2.2.2 thorpej #ifdef __bsdi__ 1563 1.2.2.2 thorpej ifp = &loif; 1564 1.2.2.2 thorpej #else 1565 1.2.2.2 thorpej ifp = &loif[0]; 1566 1.2.2.2 thorpej #endif 1567 1.2.2.2 thorpej } 1568 1.2.2.2 thorpej else { 1569 1.2.2.2 thorpej ro.ro_rt = NULL; 1570 1.2.2.2 thorpej dst = (struct sockaddr_in6 *)&ro.ro_dst; 1571 1.2.2.2 thorpej bzero(dst, sizeof(*dst)); 1572 1.2.2.2 thorpej dst->sin6_len = sizeof(struct sockaddr_in6); 1573 1.2.2.2 thorpej dst->sin6_family = AF_INET6; 1574 1.2.2.2 thorpej dst->sin6_addr = mreq->ipv6mr_multiaddr; 1575 1.2.2.2 thorpej rtalloc((struct route *)&ro); 1576 1.2.2.2 thorpej if (ro.ro_rt == NULL) { 1577 1.2.2.2 thorpej error = EADDRNOTAVAIL; 1578 1.2.2.2 thorpej break; 1579 1.2.2.2 thorpej } 1580 1.2.2.2 thorpej ifp = ro.ro_rt->rt_ifp; 1581 1.2.2.2 thorpej rtfree(ro.ro_rt); 1582 1.2.2.2 thorpej } 1583 1.2.2.2 thorpej } else 1584 1.2.2.2 thorpej ifp = ifindex2ifnet[mreq->ipv6mr_interface]; 1585 1.2.2.2 thorpej 1586 1.2.2.2 thorpej /* 1587 1.2.2.2 thorpej * See if we found an interface, and confirm that it 1588 1.2.2.2 thorpej * supports multicast 1589 1.2.2.2 thorpej */ 1590 1.2.2.2 thorpej if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) { 1591 1.2.2.2 thorpej error = EADDRNOTAVAIL; 1592 1.2.2.2 thorpej break; 1593 1.2.2.2 thorpej } 1594 1.2.2.2 thorpej /* 1595 1.2.2.2 thorpej * Put interface index into the multicast address, 1596 1.2.2.2 thorpej * if the address has link-local scope. 1597 1.2.2.2 thorpej */ 1598 1.2.2.2 thorpej if (IN6_IS_ADDR_MC_LINKLOCAL(&mreq->ipv6mr_multiaddr)) { 1599 1.2.2.2 thorpej mreq->ipv6mr_multiaddr.s6_addr16[1] 1600 1.2.2.2 thorpej = htons(mreq->ipv6mr_interface); 1601 1.2.2.2 thorpej } 1602 1.2.2.2 thorpej /* 1603 1.2.2.2 thorpej * See if the membership already exists. 1604 1.2.2.2 thorpej */ 1605 1.2.2.2 thorpej for (imm = im6o->im6o_memberships.lh_first; 1606 1.2.2.2 thorpej imm != NULL; imm = imm->i6mm_chain.le_next) 1607 1.2.2.2 thorpej if (imm->i6mm_maddr->in6m_ifp == ifp && 1608 1.2.2.2 thorpej IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr, 1609 1.2.2.2 thorpej &mreq->ipv6mr_multiaddr)) 1610 1.2.2.2 thorpej break; 1611 1.2.2.2 thorpej if (imm != NULL) { 1612 1.2.2.2 thorpej error = EADDRINUSE; 1613 1.2.2.2 thorpej break; 1614 1.2.2.2 thorpej } 1615 1.2.2.2 thorpej /* 1616 1.2.2.2 thorpej * Everything looks good; add a new record to the multicast 1617 1.2.2.2 thorpej * address list for the given interface. 1618 1.2.2.2 thorpej */ 1619 1.2.2.2 thorpej imm = malloc(sizeof(*imm), M_IPMADDR, M_WAITOK); 1620 1.2.2.2 thorpej if (imm == NULL) { 1621 1.2.2.2 thorpej error = ENOBUFS; 1622 1.2.2.2 thorpej break; 1623 1.2.2.2 thorpej } 1624 1.2.2.2 thorpej if ((imm->i6mm_maddr = 1625 1.2.2.2 thorpej in6_addmulti(&mreq->ipv6mr_multiaddr, ifp, &error)) == NULL) { 1626 1.2.2.2 thorpej free(imm, M_IPMADDR); 1627 1.2.2.2 thorpej break; 1628 1.2.2.2 thorpej } 1629 1.2.2.2 thorpej LIST_INSERT_HEAD(&im6o->im6o_memberships, imm, i6mm_chain); 1630 1.2.2.2 thorpej break; 1631 1.2.2.2 thorpej 1632 1.2.2.2 thorpej case IPV6_LEAVE_GROUP: 1633 1.2.2.2 thorpej /* 1634 1.2.2.2 thorpej * Drop a multicast group membership. 1635 1.2.2.2 thorpej * Group must be a valid IP6 multicast address. 1636 1.2.2.2 thorpej */ 1637 1.2.2.2 thorpej if (m == NULL || m->m_len != sizeof(struct ipv6_mreq)) { 1638 1.2.2.2 thorpej error = EINVAL; 1639 1.2.2.2 thorpej break; 1640 1.2.2.2 thorpej } 1641 1.2.2.2 thorpej mreq = mtod(m, struct ipv6_mreq *); 1642 1.2.2.2 thorpej if (IN6_IS_ADDR_ANY(&mreq->ipv6mr_multiaddr)) { 1643 1.2.2.2 thorpej if (suser(p->p_ucred, &p->p_acflag)) { 1644 1.2.2.2 thorpej error = EACCES; 1645 1.2.2.2 thorpej break; 1646 1.2.2.2 thorpej } 1647 1.2.2.2 thorpej } else if (!IN6_IS_ADDR_MULTICAST(&mreq->ipv6mr_multiaddr)) { 1648 1.2.2.2 thorpej error = EINVAL; 1649 1.2.2.2 thorpej break; 1650 1.2.2.2 thorpej } 1651 1.2.2.2 thorpej /* 1652 1.2.2.2 thorpej * If an interface address was specified, get a pointer 1653 1.2.2.2 thorpej * to its ifnet structure. 1654 1.2.2.2 thorpej */ 1655 1.2.2.2 thorpej if (mreq->ipv6mr_interface < 0 1656 1.2.2.2 thorpej || if_index < mreq->ipv6mr_interface) { 1657 1.2.2.2 thorpej error = ENXIO; /* XXX EINVAL? */ 1658 1.2.2.2 thorpej break; 1659 1.2.2.2 thorpej } 1660 1.2.2.2 thorpej ifp = ifindex2ifnet[mreq->ipv6mr_interface]; 1661 1.2.2.2 thorpej /* 1662 1.2.2.2 thorpej * Put interface index into the multicast address, 1663 1.2.2.2 thorpej * if the address has link-local scope. 1664 1.2.2.2 thorpej */ 1665 1.2.2.2 thorpej if (IN6_IS_ADDR_MC_LINKLOCAL(&mreq->ipv6mr_multiaddr)) { 1666 1.2.2.2 thorpej mreq->ipv6mr_multiaddr.s6_addr16[1] 1667 1.2.2.2 thorpej = htons(mreq->ipv6mr_interface); 1668 1.2.2.2 thorpej } 1669 1.2.2.2 thorpej /* 1670 1.2.2.2 thorpej * Find the membership in the membership list. 1671 1.2.2.2 thorpej */ 1672 1.2.2.2 thorpej for (imm = im6o->im6o_memberships.lh_first; 1673 1.2.2.2 thorpej imm != NULL; imm = imm->i6mm_chain.le_next) { 1674 1.2.2.2 thorpej if ((ifp == NULL || 1675 1.2.2.2 thorpej imm->i6mm_maddr->in6m_ifp == ifp) && 1676 1.2.2.2 thorpej IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr, 1677 1.2.2.2 thorpej &mreq->ipv6mr_multiaddr)) 1678 1.2.2.2 thorpej break; 1679 1.2.2.2 thorpej } 1680 1.2.2.2 thorpej if (imm == NULL) { 1681 1.2.2.2 thorpej /* Unable to resolve interface */ 1682 1.2.2.2 thorpej error = EADDRNOTAVAIL; 1683 1.2.2.2 thorpej break; 1684 1.2.2.2 thorpej } 1685 1.2.2.2 thorpej /* 1686 1.2.2.2 thorpej * Give up the multicast address record to which the 1687 1.2.2.2 thorpej * membership points. 1688 1.2.2.2 thorpej */ 1689 1.2.2.2 thorpej LIST_REMOVE(imm, i6mm_chain); 1690 1.2.2.2 thorpej in6_delmulti(imm->i6mm_maddr); 1691 1.2.2.2 thorpej free(imm, M_IPMADDR); 1692 1.2.2.2 thorpej break; 1693 1.2.2.2 thorpej 1694 1.2.2.2 thorpej default: 1695 1.2.2.2 thorpej error = EOPNOTSUPP; 1696 1.2.2.2 thorpej break; 1697 1.2.2.2 thorpej } 1698 1.2.2.2 thorpej 1699 1.2.2.2 thorpej /* 1700 1.2.2.2 thorpej * If all options have default values, no need to keep the mbuf. 1701 1.2.2.2 thorpej */ 1702 1.2.2.2 thorpej if (im6o->im6o_multicast_ifp == NULL && 1703 1.2.2.2 thorpej im6o->im6o_multicast_hlim == ip6_defmcasthlim && 1704 1.2.2.2 thorpej im6o->im6o_multicast_loop == IPV6_DEFAULT_MULTICAST_LOOP && 1705 1.2.2.2 thorpej im6o->im6o_memberships.lh_first == NULL) { 1706 1.2.2.2 thorpej free(*im6op, M_IPMOPTS); 1707 1.2.2.2 thorpej *im6op = NULL; 1708 1.2.2.2 thorpej } 1709 1.2.2.2 thorpej 1710 1.2.2.2 thorpej return(error); 1711 1.2.2.2 thorpej } 1712 1.2.2.2 thorpej 1713 1.2.2.2 thorpej /* 1714 1.2.2.2 thorpej * Return the IP6 multicast options in response to user getsockopt(). 1715 1.2.2.2 thorpej */ 1716 1.2.2.2 thorpej static int 1717 1.2.2.2 thorpej ip6_getmoptions(optname, im6o, mp) 1718 1.2.2.2 thorpej int optname; 1719 1.2.2.2 thorpej register struct ip6_moptions *im6o; 1720 1.2.2.2 thorpej register struct mbuf **mp; 1721 1.2.2.2 thorpej { 1722 1.2.2.2 thorpej u_int *hlim, *loop, *ifindex; 1723 1.2.2.2 thorpej 1724 1.2.2.2 thorpej *mp = m_get(M_WAIT, MT_SOOPTS); 1725 1.2.2.2 thorpej 1726 1.2.2.2 thorpej switch (optname) { 1727 1.2.2.2 thorpej 1728 1.2.2.2 thorpej case IPV6_MULTICAST_IF: 1729 1.2.2.2 thorpej ifindex = mtod(*mp, u_int *); 1730 1.2.2.2 thorpej (*mp)->m_len = sizeof(u_int); 1731 1.2.2.2 thorpej if (im6o == NULL || im6o->im6o_multicast_ifp == NULL) 1732 1.2.2.2 thorpej *ifindex = 0; 1733 1.2.2.2 thorpej else 1734 1.2.2.2 thorpej *ifindex = im6o->im6o_multicast_ifp->if_index; 1735 1.2.2.2 thorpej return(0); 1736 1.2.2.2 thorpej 1737 1.2.2.2 thorpej case IPV6_MULTICAST_HOPS: 1738 1.2.2.2 thorpej hlim = mtod(*mp, u_int *); 1739 1.2.2.2 thorpej (*mp)->m_len = sizeof(u_int); 1740 1.2.2.2 thorpej if (im6o == NULL) 1741 1.2.2.2 thorpej *hlim = ip6_defmcasthlim; 1742 1.2.2.2 thorpej else 1743 1.2.2.2 thorpej *hlim = im6o->im6o_multicast_hlim; 1744 1.2.2.2 thorpej return(0); 1745 1.2.2.2 thorpej 1746 1.2.2.2 thorpej case IPV6_MULTICAST_LOOP: 1747 1.2.2.2 thorpej loop = mtod(*mp, u_int *); 1748 1.2.2.2 thorpej (*mp)->m_len = sizeof(u_int); 1749 1.2.2.2 thorpej if (im6o == NULL) 1750 1.2.2.2 thorpej *loop = ip6_defmcasthlim; 1751 1.2.2.2 thorpej else 1752 1.2.2.2 thorpej *loop = im6o->im6o_multicast_loop; 1753 1.2.2.2 thorpej return(0); 1754 1.2.2.2 thorpej 1755 1.2.2.2 thorpej default: 1756 1.2.2.2 thorpej return(EOPNOTSUPP); 1757 1.2.2.2 thorpej } 1758 1.2.2.2 thorpej } 1759 1.2.2.2 thorpej 1760 1.2.2.2 thorpej /* 1761 1.2.2.2 thorpej * Discard the IP6 multicast options. 1762 1.2.2.2 thorpej */ 1763 1.2.2.2 thorpej void 1764 1.2.2.2 thorpej ip6_freemoptions(im6o) 1765 1.2.2.2 thorpej register struct ip6_moptions *im6o; 1766 1.2.2.2 thorpej { 1767 1.2.2.2 thorpej struct in6_multi_mship *imm; 1768 1.2.2.2 thorpej 1769 1.2.2.2 thorpej if (im6o == NULL) 1770 1.2.2.2 thorpej return; 1771 1.2.2.2 thorpej 1772 1.2.2.2 thorpej while ((imm = im6o->im6o_memberships.lh_first) != NULL) { 1773 1.2.2.2 thorpej LIST_REMOVE(imm, i6mm_chain); 1774 1.2.2.2 thorpej if (imm->i6mm_maddr) 1775 1.2.2.2 thorpej in6_delmulti(imm->i6mm_maddr); 1776 1.2.2.2 thorpej free(imm, M_IPMADDR); 1777 1.2.2.2 thorpej } 1778 1.2.2.2 thorpej free(im6o, M_IPMOPTS); 1779 1.2.2.2 thorpej } 1780 1.2.2.2 thorpej 1781 1.2.2.2 thorpej /* 1782 1.2.2.2 thorpej * Set IPv6 outgoing packet options based on advanced API. 1783 1.2.2.2 thorpej */ 1784 1.2.2.2 thorpej int 1785 1.2.2.2 thorpej ip6_setpktoptions(control, opt, priv) 1786 1.2.2.2 thorpej struct mbuf *control; 1787 1.2.2.2 thorpej struct ip6_pktopts *opt; 1788 1.2.2.2 thorpej int priv; 1789 1.2.2.2 thorpej { 1790 1.2.2.2 thorpej register struct cmsghdr *cm = 0; 1791 1.2.2.2 thorpej 1792 1.2.2.2 thorpej if (control == 0 || opt == 0) 1793 1.2.2.2 thorpej return(EINVAL); 1794 1.2.2.2 thorpej 1795 1.2.2.2 thorpej bzero(opt, sizeof(*opt)); 1796 1.2.2.2 thorpej opt->ip6po_hlim = -1; /* -1 means to use default hop limit */ 1797 1.2.2.2 thorpej 1798 1.2.2.2 thorpej /* 1799 1.2.2.2 thorpej * XXX: Currently, we assume all the optional information is stored 1800 1.2.2.2 thorpej * in a single mbuf. 1801 1.2.2.2 thorpej */ 1802 1.2.2.2 thorpej if (control->m_next) 1803 1.2.2.2 thorpej return(EINVAL); 1804 1.2.2.2 thorpej 1805 1.2.2.2 thorpej opt->ip6po_m = control; 1806 1.2.2.2 thorpej 1807 1.2.2.2 thorpej for (; control->m_len; control->m_data += CMSG_ALIGN(cm->cmsg_len), 1808 1.2.2.2 thorpej control->m_len -= CMSG_ALIGN(cm->cmsg_len)) { 1809 1.2.2.2 thorpej cm = mtod(control, struct cmsghdr *); 1810 1.2.2.2 thorpej if (cm->cmsg_len == 0 || cm->cmsg_len > control->m_len) 1811 1.2.2.2 thorpej return(EINVAL); 1812 1.2.2.2 thorpej if (cm->cmsg_level != IPPROTO_IPV6) 1813 1.2.2.2 thorpej continue; 1814 1.2.2.2 thorpej 1815 1.2.2.2 thorpej switch(cm->cmsg_type) { 1816 1.2.2.2 thorpej case IPV6_PKTINFO: 1817 1.2.2.2 thorpej if (cm->cmsg_len != CMSG_LEN(sizeof(struct in6_pktinfo))) 1818 1.2.2.2 thorpej return(EINVAL); 1819 1.2.2.2 thorpej opt->ip6po_pktinfo = (struct in6_pktinfo *)CMSG_DATA(cm); 1820 1.2.2.2 thorpej if (opt->ip6po_pktinfo->ipi6_ifindex && 1821 1.2.2.2 thorpej IN6_IS_ADDR_LINKLOCAL(&opt->ip6po_pktinfo->ipi6_addr)) 1822 1.2.2.2 thorpej opt->ip6po_pktinfo->ipi6_addr.s6_addr16[1] = 1823 1.2.2.2 thorpej htons(opt->ip6po_pktinfo->ipi6_ifindex); 1824 1.2.2.2 thorpej 1825 1.2.2.2 thorpej if (opt->ip6po_pktinfo->ipi6_ifindex > if_index 1826 1.2.2.2 thorpej || opt->ip6po_pktinfo->ipi6_ifindex < 0) { 1827 1.2.2.2 thorpej return(ENXIO); 1828 1.2.2.2 thorpej } 1829 1.2.2.2 thorpej 1830 1.2.2.2 thorpej if (!IN6_IS_ADDR_ANY(&opt->ip6po_pktinfo->ipi6_addr)) { 1831 1.2.2.2 thorpej struct ifaddr *ia; 1832 1.2.2.2 thorpej struct sockaddr_in6 sin6; 1833 1.2.2.2 thorpej 1834 1.2.2.2 thorpej bzero(&sin6, sizeof(sin6)); 1835 1.2.2.2 thorpej sin6.sin6_len = sizeof(sin6); 1836 1.2.2.2 thorpej sin6.sin6_family = AF_INET6; 1837 1.2.2.2 thorpej sin6.sin6_addr = 1838 1.2.2.2 thorpej opt->ip6po_pktinfo->ipi6_addr; 1839 1.2.2.2 thorpej ia = ifa_ifwithaddr(sin6tosa(&sin6)); 1840 1.2.2.2 thorpej if (ia == NULL || 1841 1.2.2.2 thorpej (opt->ip6po_pktinfo->ipi6_ifindex && 1842 1.2.2.2 thorpej (ia->ifa_ifp->if_index != 1843 1.2.2.2 thorpej opt->ip6po_pktinfo->ipi6_ifindex))) { 1844 1.2.2.2 thorpej return(EADDRNOTAVAIL); 1845 1.2.2.2 thorpej } 1846 1.2.2.2 thorpej /* 1847 1.2.2.2 thorpej * Check if the requested source address is 1848 1.2.2.2 thorpej * indeed a unicast address assigned to the 1849 1.2.2.2 thorpej * node. 1850 1.2.2.2 thorpej */ 1851 1.2.2.2 thorpej if (IN6_IS_ADDR_MULTICAST(&opt->ip6po_pktinfo->ipi6_addr)) 1852 1.2.2.2 thorpej return(EADDRNOTAVAIL); 1853 1.2.2.2 thorpej } 1854 1.2.2.2 thorpej break; 1855 1.2.2.2 thorpej 1856 1.2.2.2 thorpej case IPV6_HOPLIMIT: 1857 1.2.2.2 thorpej if (cm->cmsg_len != CMSG_LEN(sizeof(int))) 1858 1.2.2.2 thorpej return(EINVAL); 1859 1.2.2.2 thorpej 1860 1.2.2.2 thorpej opt->ip6po_hlim = *(int *)CMSG_DATA(cm); 1861 1.2.2.2 thorpej if (opt->ip6po_hlim < -1 || opt->ip6po_hlim > 255) 1862 1.2.2.2 thorpej return(EINVAL); 1863 1.2.2.2 thorpej break; 1864 1.2.2.2 thorpej 1865 1.2.2.2 thorpej case IPV6_NEXTHOP: 1866 1.2.2.2 thorpej if (!priv) 1867 1.2.2.2 thorpej return(EPERM); 1868 1.2.2.2 thorpej if (cm->cmsg_len < sizeof(u_char) || 1869 1.2.2.2 thorpej cm->cmsg_len < CMSG_LEN(*CMSG_DATA(cm))) 1870 1.2.2.2 thorpej return(EINVAL); 1871 1.2.2.2 thorpej 1872 1.2.2.2 thorpej opt->ip6po_nexthop = (struct sockaddr *)CMSG_DATA(cm); 1873 1.2.2.2 thorpej 1874 1.2.2.2 thorpej break; 1875 1.2.2.2 thorpej 1876 1.2.2.2 thorpej case IPV6_HOPOPTS: 1877 1.2.2.2 thorpej if (cm->cmsg_len < CMSG_LEN(sizeof(struct ip6_hbh))) 1878 1.2.2.2 thorpej return(EINVAL); 1879 1.2.2.2 thorpej opt->ip6po_hbh = (struct ip6_hbh *)CMSG_DATA(cm); 1880 1.2.2.2 thorpej if (cm->cmsg_len != 1881 1.2.2.2 thorpej CMSG_LEN((opt->ip6po_hbh->ip6h_len + 1) << 3)) 1882 1.2.2.2 thorpej return(EINVAL); 1883 1.2.2.2 thorpej break; 1884 1.2.2.2 thorpej 1885 1.2.2.2 thorpej case IPV6_DSTOPTS: 1886 1.2.2.2 thorpej if (cm->cmsg_len < CMSG_LEN(sizeof(struct ip6_dest))) 1887 1.2.2.2 thorpej return(EINVAL); 1888 1.2.2.2 thorpej 1889 1.2.2.2 thorpej /* 1890 1.2.2.2 thorpej * If there is no routing header yet, the destination 1891 1.2.2.2 thorpej * options header should be put on the 1st part. 1892 1.2.2.2 thorpej * Otherwise, the header should be on the 2nd part. 1893 1.2.2.2 thorpej * (See RFC 2460, section 4.1) 1894 1.2.2.2 thorpej */ 1895 1.2.2.2 thorpej if (opt->ip6po_rthdr == NULL) { 1896 1.2.2.2 thorpej opt->ip6po_dest1 = 1897 1.2.2.2 thorpej (struct ip6_dest *)CMSG_DATA(cm); 1898 1.2.2.2 thorpej if (cm->cmsg_len != 1899 1.2.2.2 thorpej CMSG_LEN((opt->ip6po_dest1->ip6d_len + 1) 1900 1.2.2.2 thorpej << 3)) 1901 1.2.2.2 thorpej return(EINVAL); 1902 1.2.2.2 thorpej } 1903 1.2.2.2 thorpej else { 1904 1.2.2.2 thorpej opt->ip6po_dest2 = 1905 1.2.2.2 thorpej (struct ip6_dest *)CMSG_DATA(cm); 1906 1.2.2.2 thorpej if (cm->cmsg_len != 1907 1.2.2.2 thorpej CMSG_LEN((opt->ip6po_dest2->ip6d_len + 1) 1908 1.2.2.2 thorpej << 3)) 1909 1.2.2.2 thorpej return(EINVAL); 1910 1.2.2.2 thorpej } 1911 1.2.2.2 thorpej break; 1912 1.2.2.2 thorpej 1913 1.2.2.2 thorpej case IPV6_RTHDR: 1914 1.2.2.2 thorpej if (cm->cmsg_len < CMSG_LEN(sizeof(struct ip6_rthdr))) 1915 1.2.2.2 thorpej return(EINVAL); 1916 1.2.2.2 thorpej opt->ip6po_rthdr = (struct ip6_rthdr *)CMSG_DATA(cm); 1917 1.2.2.2 thorpej if (cm->cmsg_len != 1918 1.2.2.2 thorpej CMSG_LEN((opt->ip6po_rthdr->ip6r_len + 1) << 3)) 1919 1.2.2.2 thorpej return(EINVAL); 1920 1.2.2.2 thorpej switch(opt->ip6po_rthdr->ip6r_type) { 1921 1.2.2.2 thorpej case IPV6_RTHDR_TYPE_0: 1922 1.2.2.2 thorpej if (opt->ip6po_rthdr->ip6r_segleft == 0) 1923 1.2.2.2 thorpej return(EINVAL); 1924 1.2.2.2 thorpej break; 1925 1.2.2.2 thorpej default: 1926 1.2.2.2 thorpej return(EINVAL); 1927 1.2.2.2 thorpej } 1928 1.2.2.2 thorpej break; 1929 1.2.2.2 thorpej 1930 1.2.2.2 thorpej default: 1931 1.2.2.2 thorpej return(ENOPROTOOPT); 1932 1.2.2.2 thorpej } 1933 1.2.2.2 thorpej } 1934 1.2.2.2 thorpej 1935 1.2.2.2 thorpej return(0); 1936 1.2.2.2 thorpej } 1937 1.2.2.2 thorpej 1938 1.2.2.2 thorpej /* 1939 1.2.2.2 thorpej * Routine called from ip6_output() to loop back a copy of an IP6 multicast 1940 1.2.2.2 thorpej * packet to the input queue of a specified interface. Note that this 1941 1.2.2.2 thorpej * calls the output routine of the loopback "driver", but with an interface 1942 1.2.2.2 thorpej * pointer that might NOT be &loif -- easier than replicating that code here. 1943 1.2.2.2 thorpej */ 1944 1.2.2.2 thorpej void 1945 1.2.2.2 thorpej ip6_mloopback(ifp, m, dst) 1946 1.2.2.2 thorpej struct ifnet *ifp; 1947 1.2.2.2 thorpej register struct mbuf *m; 1948 1.2.2.2 thorpej register struct sockaddr_in6 *dst; 1949 1.2.2.2 thorpej { 1950 1.2.2.2 thorpej struct mbuf *copym; 1951 1.2.2.2 thorpej 1952 1.2.2.2 thorpej copym = m_copy(m, 0, M_COPYALL); 1953 1.2.2.2 thorpej if (copym != NULL) 1954 1.2.2.2 thorpej (void)looutput(ifp, copym, (struct sockaddr *)dst, NULL); 1955 1.2.2.2 thorpej } 1956 1.2.2.2 thorpej 1957 1.2.2.2 thorpej /* 1958 1.2.2.2 thorpej * Chop IPv6 header off from the payload. 1959 1.2.2.2 thorpej */ 1960 1.2.2.2 thorpej static int 1961 1.2.2.2 thorpej ip6_splithdr(m, exthdrs) 1962 1.2.2.2 thorpej struct mbuf *m; 1963 1.2.2.2 thorpej struct ip6_exthdrs *exthdrs; 1964 1.2.2.2 thorpej { 1965 1.2.2.2 thorpej struct mbuf *mh; 1966 1.2.2.2 thorpej struct ip6_hdr *ip6; 1967 1.2.2.2 thorpej 1968 1.2.2.2 thorpej ip6 = mtod(m, struct ip6_hdr *); 1969 1.2.2.2 thorpej if (m->m_len > sizeof(*ip6)) { 1970 1.2.2.2 thorpej MGETHDR(mh, M_DONTWAIT, MT_HEADER); 1971 1.2.2.2 thorpej if (mh == 0) { 1972 1.2.2.2 thorpej m_freem(m); 1973 1.2.2.2 thorpej return ENOBUFS; 1974 1.2.2.2 thorpej } 1975 1.2.2.2 thorpej M_COPY_PKTHDR(mh, m); 1976 1.2.2.2 thorpej MH_ALIGN(mh, sizeof(*ip6)); 1977 1.2.2.2 thorpej m->m_flags &= ~M_PKTHDR; 1978 1.2.2.2 thorpej m->m_len -= sizeof(*ip6); 1979 1.2.2.2 thorpej m->m_data += sizeof(*ip6); 1980 1.2.2.2 thorpej mh->m_next = m; 1981 1.2.2.2 thorpej m = mh; 1982 1.2.2.2 thorpej m->m_len = sizeof(*ip6); 1983 1.2.2.2 thorpej bcopy((caddr_t)ip6, mtod(m, caddr_t), sizeof(*ip6)); 1984 1.2.2.2 thorpej } 1985 1.2.2.2 thorpej exthdrs->ip6e_ip6 = m; 1986 1.2.2.2 thorpej return 0; 1987 1.2.2.2 thorpej } 1988 1.2.2.2 thorpej 1989 1.2.2.2 thorpej /* 1990 1.2.2.2 thorpej * Compute IPv6 extension header length. 1991 1.2.2.2 thorpej */ 1992 1.2.2.2 thorpej int 1993 1.2.2.2 thorpej ip6_optlen(in6p) 1994 1.2.2.2 thorpej struct in6pcb *in6p; 1995 1.2.2.2 thorpej { 1996 1.2.2.2 thorpej int len; 1997 1.2.2.2 thorpej 1998 1.2.2.2 thorpej if (!in6p->in6p_outputopts) 1999 1.2.2.2 thorpej return 0; 2000 1.2.2.2 thorpej 2001 1.2.2.2 thorpej len = 0; 2002 1.2.2.2 thorpej #define elen(x) \ 2003 1.2.2.2 thorpej (((struct ip6_ext *)(x)) ? (((struct ip6_ext *)(x))->ip6e_len + 1) << 3 : 0) 2004 1.2.2.2 thorpej 2005 1.2.2.2 thorpej len += elen(in6p->in6p_outputopts->ip6po_hbh); 2006 1.2.2.2 thorpej len += elen(in6p->in6p_outputopts->ip6po_dest1); 2007 1.2.2.2 thorpej len += elen(in6p->in6p_outputopts->ip6po_rthdr); 2008 1.2.2.2 thorpej len += elen(in6p->in6p_outputopts->ip6po_dest2); 2009 1.2.2.2 thorpej return len; 2010 1.2.2.2 thorpej #undef elen 2011 1.2.2.2 thorpej } 2012
Indexes created Wed Oct 01 07:09:59 GMT 2025