ip6_output.c revision 1.2.2.3
1 1.2.2.3 thorpej /* $NetBSD: ip6_output.c,v 1.2.2.3 1999/08/02 22:36:05 thorpej Exp $ */ 2 1.2.2.3 thorpej 3 1.2.2.2 thorpej /* 4 1.2.2.2 thorpej * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 5 1.2.2.2 thorpej * All rights reserved. 6 1.2.2.2 thorpej * 7 1.2.2.2 thorpej * Redistribution and use in source and binary forms, with or without 8 1.2.2.2 thorpej * modification, are permitted provided that the following conditions 9 1.2.2.2 thorpej * are met: 10 1.2.2.2 thorpej * 1. Redistributions of source code must retain the above copyright 11 1.2.2.2 thorpej * notice, this list of conditions and the following disclaimer. 12 1.2.2.2 thorpej * 2. Redistributions in binary form must reproduce the above copyright 13 1.2.2.2 thorpej * notice, this list of conditions and the following disclaimer in the 14 1.2.2.2 thorpej * documentation and/or other materials provided with the distribution. 15 1.2.2.2 thorpej * 3. Neither the name of the project nor the names of its contributors 16 1.2.2.2 thorpej * may be used to endorse or promote products derived from this software 17 1.2.2.2 thorpej * without specific prior written permission. 18 1.2.2.2 thorpej * 19 1.2.2.2 thorpej * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 20 1.2.2.2 thorpej * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 21 1.2.2.2 thorpej * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 22 1.2.2.2 thorpej * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 23 1.2.2.2 thorpej * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 24 1.2.2.2 thorpej * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25 1.2.2.2 thorpej * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26 1.2.2.2 thorpej * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27 1.2.2.2 thorpej * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28 1.2.2.2 thorpej * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29 1.2.2.2 thorpej * SUCH DAMAGE. 30 1.2.2.2 thorpej */ 31 1.2.2.2 thorpej 32 1.2.2.2 thorpej /* 33 1.2.2.2 thorpej * Copyright (c) 1982, 1986, 1988, 1990, 1993 34 1.2.2.2 thorpej * The Regents of the University of California. All rights reserved. 35 1.2.2.2 thorpej * 36 1.2.2.2 thorpej * Redistribution and use in source and binary forms, with or without 37 1.2.2.2 thorpej * modification, are permitted provided that the following conditions 38 1.2.2.2 thorpej * are met: 39 1.2.2.2 thorpej * 1. Redistributions of source code must retain the above copyright 40 1.2.2.2 thorpej * notice, this list of conditions and the following disclaimer. 41 1.2.2.2 thorpej * 2. Redistributions in binary form must reproduce the above copyright 42 1.2.2.2 thorpej * notice, this list of conditions and the following disclaimer in the 43 1.2.2.2 thorpej * documentation and/or other materials provided with the distribution. 44 1.2.2.2 thorpej * 3. All advertising materials mentioning features or use of this software 45 1.2.2.2 thorpej * must display the following acknowledgement: 46 1.2.2.2 thorpej * This product includes software developed by the University of 47 1.2.2.2 thorpej * California, Berkeley and its contributors. 48 1.2.2.2 thorpej * 4. Neither the name of the University nor the names of its contributors 49 1.2.2.2 thorpej * may be used to endorse or promote products derived from this software 50 1.2.2.2 thorpej * without specific prior written permission. 51 1.2.2.2 thorpej * 52 1.2.2.2 thorpej * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 53 1.2.2.2 thorpej * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 54 1.2.2.2 thorpej * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 55 1.2.2.2 thorpej * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 56 1.2.2.2 thorpej * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 57 1.2.2.2 thorpej * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 58 1.2.2.2 thorpej * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 59 1.2.2.2 thorpej * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 60 1.2.2.2 thorpej * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 61 1.2.2.2 thorpej * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 62 1.2.2.2 thorpej * SUCH DAMAGE. 63 1.2.2.2 thorpej * 64 1.2.2.2 thorpej * @(#)ip_output.c 8.3 (Berkeley) 1/21/94 65 1.2.2.2 thorpej */ 66 1.2.2.2 thorpej 67 1.2.2.2 thorpej #ifdef __FreeBSD__ 68 1.2.2.2 thorpej #include "opt_ip6fw.h" 69 1.2.2.2 thorpej #endif 70 1.2.2.2 thorpej #if (defined(__FreeBSD__) && __FreeBSD__ >= 3) || defined(__NetBSD__) 71 1.2.2.2 thorpej #include "opt_inet.h" 72 1.2.2.3 thorpej #ifdef __NetBSD__ /*XXX*/ 73 1.2.2.3 thorpej #include "opt_ipsec.h" 74 1.2.2.3 thorpej #endif 75 1.2.2.2 thorpej #endif 76 1.2.2.2 thorpej 77 1.2.2.2 thorpej #include <sys/param.h> 78 1.2.2.2 thorpej #include <sys/malloc.h> 79 1.2.2.2 thorpej #include <sys/mbuf.h> 80 1.2.2.2 thorpej #include <sys/errno.h> 81 1.2.2.2 thorpej #include <sys/protosw.h> 82 1.2.2.2 thorpej #include <sys/socket.h> 83 1.2.2.2 thorpej #include <sys/socketvar.h> 84 1.2.2.2 thorpej #include <sys/systm.h> 85 1.2.2.2 thorpej #include <sys/proc.h> 86 1.2.2.2 thorpej 87 1.2.2.2 thorpej #include <net/if.h> 88 1.2.2.2 thorpej #include <net/route.h> 89 1.2.2.2 thorpej 90 1.2.2.2 thorpej #include <netinet/in.h> 91 1.2.2.2 thorpej #include <netinet/in_var.h> 92 1.2.2.2 thorpej #include <netinet6/ip6.h> 93 1.2.2.2 thorpej #include <netinet6/icmp6.h> 94 1.2.2.2 thorpej #if !defined(__FreeBSD__) || __FreeBSD__ < 3 95 1.2.2.2 thorpej #include <netinet6/in6_pcb.h> 96 1.2.2.2 thorpej #else 97 1.2.2.2 thorpej #include <netinet/in_pcb.h> 98 1.2.2.2 thorpej #endif 99 1.2.2.2 thorpej #include <netinet6/ip6_var.h> 100 1.2.2.2 thorpej #include <netinet6/nd6.h> 101 1.2.2.2 thorpej 102 1.2.2.2 thorpej #ifdef IPSEC 103 1.2.2.2 thorpej #include <netinet6/ipsec.h> 104 1.2.2.2 thorpej #include <netkey/key.h> 105 1.2.2.2 thorpej #include <netkey/key_debug.h> 106 1.2.2.2 thorpej #endif /* IPSEC */ 107 1.2.2.2 thorpej 108 1.2.2.2 thorpej #include "loop.h" 109 1.2.2.2 thorpej 110 1.2.2.2 thorpej struct ip6_exthdrs { 111 1.2.2.2 thorpej struct mbuf *ip6e_ip6; 112 1.2.2.2 thorpej struct mbuf *ip6e_hbh; 113 1.2.2.2 thorpej struct mbuf *ip6e_dest1; 114 1.2.2.2 thorpej struct mbuf *ip6e_rthdr; 115 1.2.2.2 thorpej struct mbuf *ip6e_dest2; 116 1.2.2.2 thorpej }; 117 1.2.2.2 thorpej 118 1.2.2.2 thorpej static int ip6_pcbopts __P((struct ip6_pktopts **, struct mbuf *, 119 1.2.2.2 thorpej struct socket *)); 120 1.2.2.2 thorpej static int ip6_setmoptions __P((int, struct ip6_moptions **, struct mbuf *)); 121 1.2.2.2 thorpej static int ip6_getmoptions __P((int, struct ip6_moptions *, struct mbuf **)); 122 1.2.2.2 thorpej static int ip6_copyexthdr __P((struct mbuf **, caddr_t, int)); 123 1.2.2.2 thorpej static int ip6_insertfraghdr __P((struct mbuf *, struct mbuf *, int, 124 1.2.2.2 thorpej struct ip6_frag **)); 125 1.2.2.2 thorpej static int ip6_insert_jumboopt __P((struct ip6_exthdrs *, u_int32_t)); 126 1.2.2.2 thorpej static int ip6_splithdr __P((struct mbuf *, struct ip6_exthdrs *)); 127 1.2.2.2 thorpej #ifdef __bsdi__ 128 1.2.2.2 thorpej extern struct ifnet loif; 129 1.2.2.2 thorpej #endif 130 1.2.2.2 thorpej 131 1.2.2.2 thorpej #ifdef __NetBSD__ 132 1.2.2.2 thorpej extern struct ifnet **ifindex2ifnet; 133 1.2.2.2 thorpej extern struct ifnet loif[NLOOP]; 134 1.2.2.2 thorpej #endif 135 1.2.2.2 thorpej 136 1.2.2.2 thorpej /* 137 1.2.2.2 thorpej * IP6 output. The packet in mbuf chain m contains a skeletal IP6 138 1.2.2.2 thorpej * header (with pri, len, nxt, hlim, src, dst). 139 1.2.2.2 thorpej * This function may modify ver and hlim only. 140 1.2.2.2 thorpej * The mbuf chain containing the packet will be freed. 141 1.2.2.2 thorpej * The mbuf opt, if present, will not be freed. 142 1.2.2.2 thorpej */ 143 1.2.2.2 thorpej int 144 1.2.2.2 thorpej ip6_output(m0, opt, ro, flags, im6o) 145 1.2.2.2 thorpej struct mbuf *m0; 146 1.2.2.2 thorpej struct ip6_pktopts *opt; 147 1.2.2.2 thorpej struct route_in6 *ro; 148 1.2.2.2 thorpej int flags; 149 1.2.2.2 thorpej struct ip6_moptions *im6o; 150 1.2.2.2 thorpej { 151 1.2.2.2 thorpej struct ip6_hdr *ip6, *mhip6; 152 1.2.2.2 thorpej struct ifnet *ifp; 153 1.2.2.2 thorpej struct mbuf *m = m0; 154 1.2.2.2 thorpej int hlen, tlen, len, off; 155 1.2.2.2 thorpej struct route_in6 ip6route; 156 1.2.2.2 thorpej struct sockaddr_in6 *dst; 157 1.2.2.2 thorpej int error = 0; 158 1.2.2.2 thorpej struct in6_ifaddr *ia; 159 1.2.2.2 thorpej u_long mtu; 160 1.2.2.2 thorpej u_int32_t optlen = 0, plen = 0, unfragpartlen = 0; 161 1.2.2.2 thorpej struct ip6_exthdrs exthdrs; 162 1.2.2.2 thorpej struct in6_addr finaldst; 163 1.2.2.2 thorpej struct route_in6 *ro_pmtu = NULL; 164 1.2.2.2 thorpej int hdrsplit = 0; 165 1.2.2.2 thorpej int needipsec = 0; 166 1.2.2.2 thorpej #ifdef IPSEC 167 1.2.2.2 thorpej int needipsectun = 0; 168 1.2.2.2 thorpej struct socket *so; 169 1.2.2.2 thorpej struct secpolicy *sp = NULL; 170 1.2.2.2 thorpej 171 1.2.2.2 thorpej /* for AH processing. stupid to have "socket" variable in IP layer... */ 172 1.2.2.2 thorpej so = (struct socket *)m->m_pkthdr.rcvif; 173 1.2.2.2 thorpej m->m_pkthdr.rcvif = NULL; 174 1.2.2.2 thorpej ip6 = mtod(m, struct ip6_hdr *); 175 1.2.2.2 thorpej #endif /* IPSEC */ 176 1.2.2.2 thorpej 177 1.2.2.2 thorpej #define MAKE_EXTHDR(hp,mp) \ 178 1.2.2.2 thorpej { \ 179 1.2.2.2 thorpej if (hp) { \ 180 1.2.2.2 thorpej struct ip6_ext *eh = (struct ip6_ext *)(hp); \ 181 1.2.2.2 thorpej error = ip6_copyexthdr((mp), (caddr_t)(hp), \ 182 1.2.2.2 thorpej ((eh)->ip6e_len + 1) << 3); \ 183 1.2.2.2 thorpej if (error) \ 184 1.2.2.2 thorpej goto freehdrs; \ 185 1.2.2.2 thorpej } \ 186 1.2.2.2 thorpej } 187 1.2.2.2 thorpej 188 1.2.2.2 thorpej bzero(&exthdrs, sizeof(exthdrs)); 189 1.2.2.2 thorpej if (opt) { 190 1.2.2.2 thorpej /* Hop-by-Hop options header */ 191 1.2.2.2 thorpej MAKE_EXTHDR(opt->ip6po_hbh, &exthdrs.ip6e_hbh); 192 1.2.2.2 thorpej /* Destination options header(1st part) */ 193 1.2.2.2 thorpej MAKE_EXTHDR(opt->ip6po_dest1, &exthdrs.ip6e_dest1); 194 1.2.2.2 thorpej /* Routing header */ 195 1.2.2.2 thorpej MAKE_EXTHDR(opt->ip6po_rthdr, &exthdrs.ip6e_rthdr); 196 1.2.2.2 thorpej /* Destination options header(2nd part) */ 197 1.2.2.2 thorpej MAKE_EXTHDR(opt->ip6po_dest2, &exthdrs.ip6e_dest2); 198 1.2.2.2 thorpej } 199 1.2.2.2 thorpej 200 1.2.2.2 thorpej #ifdef IPSEC 201 1.2.2.2 thorpej /* get a security policy for this packet */ 202 1.2.2.2 thorpej if (so == NULL) 203 1.2.2.2 thorpej sp = ipsec6_getpolicybyaddr(m, 0, &error); 204 1.2.2.2 thorpej else 205 1.2.2.2 thorpej sp = ipsec6_getpolicybysock(m, so, &error); 206 1.2.2.2 thorpej 207 1.2.2.2 thorpej if (sp == NULL) { 208 1.2.2.2 thorpej ipsec6stat.out_inval++; 209 1.2.2.2 thorpej goto bad; 210 1.2.2.2 thorpej } 211 1.2.2.2 thorpej 212 1.2.2.2 thorpej error = 0; 213 1.2.2.2 thorpej 214 1.2.2.2 thorpej /* check policy */ 215 1.2.2.2 thorpej switch (sp->policy) { 216 1.2.2.2 thorpej case IPSEC_POLICY_DISCARD: 217 1.2.2.2 thorpej /* 218 1.2.2.2 thorpej * This packet is just discarded. 219 1.2.2.2 thorpej */ 220 1.2.2.2 thorpej ipsec6stat.out_polvio++; 221 1.2.2.2 thorpej goto bad; 222 1.2.2.2 thorpej 223 1.2.2.2 thorpej case IPSEC_POLICY_BYPASS: 224 1.2.2.2 thorpej case IPSEC_POLICY_NONE: 225 1.2.2.2 thorpej /* no need to do IPsec. */ 226 1.2.2.2 thorpej needipsec = 0; 227 1.2.2.2 thorpej break; 228 1.2.2.2 thorpej 229 1.2.2.2 thorpej case IPSEC_POLICY_IPSEC: 230 1.2.2.2 thorpej if (sp->req == NULL) { 231 1.2.2.2 thorpej /* XXX should be panic ? */ 232 1.2.2.2 thorpej printf("ip6_output: No IPsec request specified.\n"); 233 1.2.2.2 thorpej error = EINVAL; 234 1.2.2.2 thorpej goto bad; 235 1.2.2.2 thorpej } 236 1.2.2.2 thorpej needipsec = 1; 237 1.2.2.2 thorpej break; 238 1.2.2.2 thorpej 239 1.2.2.2 thorpej case IPSEC_POLICY_ENTRUST: 240 1.2.2.2 thorpej default: 241 1.2.2.2 thorpej printf("ip6_output: Invalid policy found. %d\n", sp->policy); 242 1.2.2.2 thorpej } 243 1.2.2.2 thorpej #endif /* IPSEC */ 244 1.2.2.2 thorpej 245 1.2.2.2 thorpej /* 246 1.2.2.2 thorpej * Calculate the total length of the extension header chain. 247 1.2.2.2 thorpej * Keep the length of the unfragmentable part for fragmentation. 248 1.2.2.2 thorpej */ 249 1.2.2.2 thorpej if (exthdrs.ip6e_hbh) optlen += exthdrs.ip6e_hbh->m_len; 250 1.2.2.2 thorpej if (exthdrs.ip6e_dest1) optlen += exthdrs.ip6e_dest1->m_len; 251 1.2.2.2 thorpej if (exthdrs.ip6e_rthdr) optlen += exthdrs.ip6e_rthdr->m_len; 252 1.2.2.2 thorpej unfragpartlen = plen + sizeof(struct ip6_hdr); 253 1.2.2.2 thorpej /* NOTE: we don't add AH/ESP length here. do that later. */ 254 1.2.2.2 thorpej if (exthdrs.ip6e_dest2) optlen += exthdrs.ip6e_dest2->m_len; 255 1.2.2.2 thorpej 256 1.2.2.2 thorpej /* 257 1.2.2.2 thorpej * If we need IPsec, or there is at least one extension header, 258 1.2.2.2 thorpej * separate IP6 header from the payload. 259 1.2.2.2 thorpej */ 260 1.2.2.2 thorpej if ((needipsec || optlen) && !hdrsplit) { 261 1.2.2.2 thorpej if ((error = ip6_splithdr(m, &exthdrs)) != 0) { 262 1.2.2.2 thorpej m = NULL; 263 1.2.2.2 thorpej goto freehdrs; 264 1.2.2.2 thorpej } 265 1.2.2.2 thorpej m = exthdrs.ip6e_ip6; 266 1.2.2.2 thorpej hdrsplit++; 267 1.2.2.2 thorpej } 268 1.2.2.2 thorpej 269 1.2.2.2 thorpej /* adjust pointer */ 270 1.2.2.2 thorpej ip6 = mtod(m, struct ip6_hdr *); 271 1.2.2.2 thorpej 272 1.2.2.2 thorpej /* adjust mbuf packet header length */ 273 1.2.2.2 thorpej m->m_pkthdr.len += optlen; 274 1.2.2.2 thorpej plen = m->m_pkthdr.len - sizeof(*ip6); 275 1.2.2.2 thorpej 276 1.2.2.2 thorpej /* If this is a jumbo payload, insert a jumbo payload option. */ 277 1.2.2.2 thorpej if (plen > IPV6_MAXPACKET) { 278 1.2.2.2 thorpej if (!hdrsplit) { 279 1.2.2.2 thorpej if ((error = ip6_splithdr(m, &exthdrs)) != 0) { 280 1.2.2.2 thorpej m = NULL; 281 1.2.2.2 thorpej goto freehdrs; 282 1.2.2.2 thorpej } 283 1.2.2.2 thorpej m = exthdrs.ip6e_ip6; 284 1.2.2.2 thorpej hdrsplit++; 285 1.2.2.2 thorpej } 286 1.2.2.2 thorpej /* adjust pointer */ 287 1.2.2.2 thorpej ip6 = mtod(m, struct ip6_hdr *); 288 1.2.2.2 thorpej if ((error = ip6_insert_jumboopt(&exthdrs, plen)) != 0) 289 1.2.2.2 thorpej goto freehdrs; 290 1.2.2.2 thorpej ip6->ip6_plen = 0; 291 1.2.2.2 thorpej } else 292 1.2.2.2 thorpej ip6->ip6_plen = htons(plen); 293 1.2.2.2 thorpej 294 1.2.2.2 thorpej /* 295 1.2.2.2 thorpej * Concatenate headers and fill in next header fields. 296 1.2.2.2 thorpej * Here we have, on "m" 297 1.2.2.2 thorpej * IPv6 payload or 298 1.2.2.2 thorpej * IPv6 [esp* dest2 payload] 299 1.2.2.2 thorpej * and we insert headers accordingly. Finally, we should be getting: 300 1.2.2.2 thorpej * IPv6 hbh dest1 rthdr ah* dest2 payload or 301 1.2.2.2 thorpej * IPv6 hbh dest1 rthdr ah* [esp* dest2 payload] 302 1.2.2.2 thorpej */ 303 1.2.2.2 thorpej { 304 1.2.2.2 thorpej u_char *nexthdrp = &ip6->ip6_nxt; 305 1.2.2.2 thorpej struct mbuf *mprev = m; 306 1.2.2.2 thorpej 307 1.2.2.2 thorpej /* 308 1.2.2.2 thorpej * we treat dest2 specially. this makes IPsec processing 309 1.2.2.2 thorpej * much easier. 310 1.2.2.2 thorpej */ 311 1.2.2.2 thorpej if (exthdrs.ip6e_dest2) { 312 1.2.2.2 thorpej if (!hdrsplit) 313 1.2.2.2 thorpej panic("assumption failed: hdr not split"); 314 1.2.2.2 thorpej *mtod(exthdrs.ip6e_dest2, u_char *) = ip6->ip6_nxt; 315 1.2.2.2 thorpej ip6->ip6_nxt = IPPROTO_DSTOPTS; 316 1.2.2.2 thorpej } 317 1.2.2.2 thorpej 318 1.2.2.2 thorpej #define MAKE_CHAIN(m,mp,p,i)\ 319 1.2.2.2 thorpej {\ 320 1.2.2.2 thorpej if (m) {\ 321 1.2.2.2 thorpej if (!hdrsplit) \ 322 1.2.2.2 thorpej panic("assumption failed: hdr not split"); \ 323 1.2.2.2 thorpej *mtod((m), u_char *) = *(p);\ 324 1.2.2.2 thorpej *(p) = (i);\ 325 1.2.2.2 thorpej p = mtod((m), u_char *);\ 326 1.2.2.2 thorpej (m)->m_next = (mp)->m_next;\ 327 1.2.2.2 thorpej (mp)->m_next = (m);\ 328 1.2.2.2 thorpej (mp) = (m);\ 329 1.2.2.2 thorpej }\ 330 1.2.2.2 thorpej } 331 1.2.2.2 thorpej MAKE_CHAIN(exthdrs.ip6e_hbh, mprev, 332 1.2.2.2 thorpej nexthdrp, IPPROTO_HOPOPTS); 333 1.2.2.2 thorpej MAKE_CHAIN(exthdrs.ip6e_dest1, mprev, 334 1.2.2.2 thorpej nexthdrp, IPPROTO_DSTOPTS); 335 1.2.2.2 thorpej MAKE_CHAIN(exthdrs.ip6e_rthdr, mprev, 336 1.2.2.2 thorpej nexthdrp, IPPROTO_ROUTING); 337 1.2.2.2 thorpej 338 1.2.2.2 thorpej #ifdef IPSEC 339 1.2.2.2 thorpej if (!needipsec) 340 1.2.2.2 thorpej goto skip_ipsec2; 341 1.2.2.2 thorpej 342 1.2.2.2 thorpej /* 343 1.2.2.2 thorpej * pointers after IPsec headers are not valid any more. 344 1.2.2.2 thorpej * other pointers need a great care too. 345 1.2.2.2 thorpej * (IPsec routines should not mangle mbufs prior to AH/ESP) 346 1.2.2.2 thorpej */ 347 1.2.2.2 thorpej exthdrs.ip6e_dest2 = NULL; 348 1.2.2.2 thorpej 349 1.2.2.2 thorpej { 350 1.2.2.2 thorpej struct ip6_rthdr *rh = NULL; 351 1.2.2.2 thorpej int segleft_org = 0; 352 1.2.2.2 thorpej struct ipsec_output_state state; 353 1.2.2.2 thorpej 354 1.2.2.2 thorpej if (exthdrs.ip6e_rthdr) { 355 1.2.2.2 thorpej rh = mtod(exthdrs.ip6e_rthdr, struct ip6_rthdr *); 356 1.2.2.2 thorpej segleft_org = rh->ip6r_segleft; 357 1.2.2.2 thorpej rh->ip6r_segleft = 0; 358 1.2.2.2 thorpej } 359 1.2.2.2 thorpej 360 1.2.2.2 thorpej bzero(&state, sizeof(state)); 361 1.2.2.2 thorpej state.m = m; 362 1.2.2.2 thorpej error = ipsec6_output_trans(&state, nexthdrp, mprev, sp, flags, 363 1.2.2.2 thorpej &needipsectun); 364 1.2.2.2 thorpej m = state.m; 365 1.2.2.2 thorpej if (error) { 366 1.2.2.2 thorpej /* mbuf is already reclaimed in ipsec6_output_trans. */ 367 1.2.2.2 thorpej m = NULL; 368 1.2.2.2 thorpej switch (error) { 369 1.2.2.2 thorpej case EHOSTUNREACH: 370 1.2.2.2 thorpej case ENETUNREACH: 371 1.2.2.2 thorpej case EMSGSIZE: 372 1.2.2.2 thorpej case ENOBUFS: 373 1.2.2.2 thorpej case ENOMEM: 374 1.2.2.2 thorpej break; 375 1.2.2.2 thorpej default: 376 1.2.2.2 thorpej printf("ip6_output (ipsec): error code %d\n", error); 377 1.2.2.2 thorpej /*fall through*/ 378 1.2.2.2 thorpej case ENOENT: 379 1.2.2.2 thorpej /* don't show these error codes to the user */ 380 1.2.2.2 thorpej error = 0; 381 1.2.2.2 thorpej break; 382 1.2.2.2 thorpej } 383 1.2.2.2 thorpej goto bad; 384 1.2.2.2 thorpej } 385 1.2.2.2 thorpej if (exthdrs.ip6e_rthdr) { 386 1.2.2.2 thorpej /* ah6_output doesn't modify mbuf chain */ 387 1.2.2.2 thorpej rh->ip6r_segleft = segleft_org; 388 1.2.2.2 thorpej } 389 1.2.2.2 thorpej } 390 1.2.2.2 thorpej skip_ipsec2:; 391 1.2.2.2 thorpej #endif 392 1.2.2.2 thorpej } 393 1.2.2.2 thorpej 394 1.2.2.2 thorpej /* 395 1.2.2.2 thorpej * If there is a routing header, replace destination address field 396 1.2.2.2 thorpej * with the first hop of the routing header. 397 1.2.2.2 thorpej */ 398 1.2.2.2 thorpej if (exthdrs.ip6e_rthdr) { 399 1.2.2.2 thorpej struct ip6_rthdr *rh = 400 1.2.2.2 thorpej (struct ip6_rthdr *)(mtod(exthdrs.ip6e_rthdr, 401 1.2.2.2 thorpej struct ip6_rthdr *)); 402 1.2.2.2 thorpej struct ip6_rthdr0 *rh0; 403 1.2.2.2 thorpej 404 1.2.2.2 thorpej finaldst = ip6->ip6_dst; 405 1.2.2.2 thorpej switch(rh->ip6r_type) { 406 1.2.2.2 thorpej case IPV6_RTHDR_TYPE_0: 407 1.2.2.2 thorpej rh0 = (struct ip6_rthdr0 *)rh; 408 1.2.2.2 thorpej ip6->ip6_dst = rh0->ip6r0_addr[0]; 409 1.2.2.2 thorpej bcopy((caddr_t)&rh0->ip6r0_addr[1], 410 1.2.2.2 thorpej (caddr_t)&rh0->ip6r0_addr[0], 411 1.2.2.2 thorpej sizeof(struct in6_addr)*(rh0->ip6r0_segleft - 1) 412 1.2.2.2 thorpej ); 413 1.2.2.2 thorpej rh0->ip6r0_addr[rh0->ip6r0_segleft - 1] = finaldst; 414 1.2.2.2 thorpej break; 415 1.2.2.2 thorpej default: /* is it possible? */ 416 1.2.2.2 thorpej error = EINVAL; 417 1.2.2.2 thorpej goto bad; 418 1.2.2.2 thorpej } 419 1.2.2.2 thorpej } 420 1.2.2.2 thorpej 421 1.2.2.2 thorpej /* Source address validation */ 422 1.2.2.2 thorpej if (IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_src) && 423 1.2.2.2 thorpej (flags & IPV6_DADOUTPUT) == 0) { 424 1.2.2.2 thorpej error = EOPNOTSUPP; 425 1.2.2.2 thorpej ip6stat.ip6s_badscope++; 426 1.2.2.2 thorpej goto bad; 427 1.2.2.2 thorpej } 428 1.2.2.2 thorpej if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_src)) { 429 1.2.2.2 thorpej error = EOPNOTSUPP; 430 1.2.2.2 thorpej ip6stat.ip6s_badscope++; 431 1.2.2.2 thorpej goto bad; 432 1.2.2.2 thorpej } 433 1.2.2.2 thorpej 434 1.2.2.2 thorpej ip6stat.ip6s_localout++; 435 1.2.2.2 thorpej 436 1.2.2.2 thorpej /* 437 1.2.2.2 thorpej * Route packet. 438 1.2.2.2 thorpej */ 439 1.2.2.2 thorpej if (ro == 0) { 440 1.2.2.2 thorpej ro = &ip6route; 441 1.2.2.2 thorpej bzero((caddr_t)ro, sizeof(*ro)); 442 1.2.2.2 thorpej } 443 1.2.2.2 thorpej ro_pmtu = ro; 444 1.2.2.2 thorpej if (opt && opt->ip6po_rthdr) 445 1.2.2.2 thorpej ro = &opt->ip6po_route; 446 1.2.2.2 thorpej dst = (struct sockaddr_in6 *)&ro->ro_dst; 447 1.2.2.2 thorpej /* 448 1.2.2.2 thorpej * If there is a cached route, 449 1.2.2.2 thorpej * check that it is to the same destination 450 1.2.2.2 thorpej * and is still up. If not, free it and try again. 451 1.2.2.2 thorpej */ 452 1.2.2.2 thorpej if (ro->ro_rt && ((ro->ro_rt->rt_flags & RTF_UP) == 0 || 453 1.2.2.2 thorpej !IN6_ARE_ADDR_EQUAL(&dst->sin6_addr, &ip6->ip6_dst))) { 454 1.2.2.2 thorpej RTFREE(ro->ro_rt); 455 1.2.2.2 thorpej ro->ro_rt = (struct rtentry *)0; 456 1.2.2.2 thorpej } 457 1.2.2.2 thorpej if (ro->ro_rt == 0) { 458 1.2.2.2 thorpej bzero(dst, sizeof(*dst)); 459 1.2.2.2 thorpej dst->sin6_family = AF_INET6; 460 1.2.2.2 thorpej dst->sin6_len = sizeof(struct sockaddr_in6); 461 1.2.2.2 thorpej dst->sin6_addr = ip6->ip6_dst; 462 1.2.2.2 thorpej } 463 1.2.2.2 thorpej #ifdef IPSEC 464 1.2.2.2 thorpej if (needipsec && needipsectun) { 465 1.2.2.2 thorpej struct ipsec_output_state state; 466 1.2.2.2 thorpej 467 1.2.2.2 thorpej /* 468 1.2.2.2 thorpej * All the extension headers will become inaccessible 469 1.2.2.2 thorpej * (since they can be encrypted). 470 1.2.2.2 thorpej * Don't panic, we need no more updates to extension headers 471 1.2.2.2 thorpej * on inner IPv6 packet (since they are now encapsulated). 472 1.2.2.2 thorpej * 473 1.2.2.2 thorpej * IPv6 [ESP|AH] IPv6 [extension headers] payload 474 1.2.2.2 thorpej */ 475 1.2.2.2 thorpej bzero(&exthdrs, sizeof(exthdrs)); 476 1.2.2.2 thorpej exthdrs.ip6e_ip6 = m; 477 1.2.2.2 thorpej 478 1.2.2.2 thorpej bzero(&state, sizeof(state)); 479 1.2.2.2 thorpej state.m = m; 480 1.2.2.2 thorpej state.ro = (struct route *)ro; 481 1.2.2.2 thorpej state.dst = (struct sockaddr *)dst; 482 1.2.2.2 thorpej 483 1.2.2.2 thorpej error = ipsec6_output_tunnel(&state, sp, flags); 484 1.2.2.2 thorpej 485 1.2.2.2 thorpej m = state.m; 486 1.2.2.2 thorpej ro = (struct route_in6 *)state.ro; 487 1.2.2.2 thorpej dst = (struct sockaddr_in6 *)state.dst; 488 1.2.2.2 thorpej if (error) { 489 1.2.2.2 thorpej /* mbuf is already reclaimed in ipsec6_output_tunnel. */ 490 1.2.2.2 thorpej m0 = m = NULL; 491 1.2.2.2 thorpej m = NULL; 492 1.2.2.2 thorpej switch (error) { 493 1.2.2.2 thorpej case EHOSTUNREACH: 494 1.2.2.2 thorpej case ENETUNREACH: 495 1.2.2.2 thorpej case EMSGSIZE: 496 1.2.2.2 thorpej case ENOBUFS: 497 1.2.2.2 thorpej case ENOMEM: 498 1.2.2.2 thorpej break; 499 1.2.2.2 thorpej default: 500 1.2.2.2 thorpej printf("ip6_output (ipsec): error code %d\n", error); 501 1.2.2.2 thorpej /*fall through*/ 502 1.2.2.2 thorpej case ENOENT: 503 1.2.2.2 thorpej /* don't show these error codes to the user */ 504 1.2.2.2 thorpej error = 0; 505 1.2.2.2 thorpej break; 506 1.2.2.2 thorpej } 507 1.2.2.2 thorpej goto bad; 508 1.2.2.2 thorpej } 509 1.2.2.2 thorpej 510 1.2.2.2 thorpej exthdrs.ip6e_ip6 = m; 511 1.2.2.2 thorpej } 512 1.2.2.2 thorpej #endif /*IPESC*/ 513 1.2.2.2 thorpej 514 1.2.2.2 thorpej if (!IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) { 515 1.2.2.2 thorpej /* Unicast */ 516 1.2.2.2 thorpej 517 1.2.2.2 thorpej #define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa)) 518 1.2.2.2 thorpej #define sin6tosa(sin6) ((struct sockaddr *)(sin6)) 519 1.2.2.2 thorpej /* xxx 520 1.2.2.2 thorpej * interface selection comes here 521 1.2.2.2 thorpej * if an interface is specified from an upper layer, 522 1.2.2.2 thorpej * ifp must point it. 523 1.2.2.2 thorpej */ 524 1.2.2.2 thorpej if (ro->ro_rt == 0) { 525 1.2.2.3 thorpej #ifdef __NetBSD__ 526 1.2.2.3 thorpej /* 527 1.2.2.3 thorpej * NetBSD always clones routes, if parent is 528 1.2.2.3 thorpej * PRF_CLONING. 529 1.2.2.3 thorpej */ 530 1.2.2.3 thorpej rtalloc((struct route *)ro); 531 1.2.2.3 thorpej #else 532 1.2.2.2 thorpej if (ro == &ip6route) /* xxx kazu */ 533 1.2.2.2 thorpej rtalloc((struct route *)ro); 534 1.2.2.2 thorpej else 535 1.2.2.2 thorpej rtcalloc((struct route *)ro); 536 1.2.2.3 thorpej #endif 537 1.2.2.2 thorpej } 538 1.2.2.2 thorpej if (ro->ro_rt == 0) { 539 1.2.2.2 thorpej ip6stat.ip6s_noroute++; 540 1.2.2.2 thorpej error = EHOSTUNREACH; 541 1.2.2.2 thorpej goto bad; 542 1.2.2.2 thorpej } 543 1.2.2.2 thorpej ia = ifatoia6(ro->ro_rt->rt_ifa); 544 1.2.2.2 thorpej ifp = ro->ro_rt->rt_ifp; 545 1.2.2.2 thorpej ro->ro_rt->rt_use++; 546 1.2.2.2 thorpej if (ro->ro_rt->rt_flags & RTF_GATEWAY) 547 1.2.2.2 thorpej dst = (struct sockaddr_in6 *)ro->ro_rt->rt_gateway; 548 1.2.2.2 thorpej m->m_flags &= ~(M_BCAST | M_MCAST); /* just in case */ 549 1.2.2.2 thorpej 550 1.2.2.2 thorpej /* 551 1.2.2.2 thorpej * Check if there is the outgoing interface conflicts with 552 1.2.2.2 thorpej * the interface specified by ifi6_ifindex(if specified). 553 1.2.2.2 thorpej * Note that loopback interface is always okay. 554 1.2.2.2 thorpej * (this happens when we are sending packet toward my 555 1.2.2.2 thorpej * interface) 556 1.2.2.2 thorpej */ 557 1.2.2.2 thorpej if (opt && opt->ip6po_pktinfo 558 1.2.2.2 thorpej && opt->ip6po_pktinfo->ipi6_ifindex) { 559 1.2.2.2 thorpej if (!(ifp->if_flags & IFF_LOOPBACK) 560 1.2.2.2 thorpej && ifp->if_index != opt->ip6po_pktinfo->ipi6_ifindex) { 561 1.2.2.2 thorpej ip6stat.ip6s_noroute++; 562 1.2.2.2 thorpej error = EHOSTUNREACH; 563 1.2.2.2 thorpej goto bad; 564 1.2.2.2 thorpej } 565 1.2.2.2 thorpej } 566 1.2.2.2 thorpej 567 1.2.2.2 thorpej if (opt && opt->ip6po_hlim != -1) 568 1.2.2.2 thorpej ip6->ip6_hlim = opt->ip6po_hlim & 0xff; 569 1.2.2.2 thorpej } else { 570 1.2.2.2 thorpej /* Multicast */ 571 1.2.2.2 thorpej struct in6_multi *in6m; 572 1.2.2.2 thorpej 573 1.2.2.2 thorpej m->m_flags = (m->m_flags & ~M_BCAST) | M_MCAST; 574 1.2.2.2 thorpej 575 1.2.2.2 thorpej /* 576 1.2.2.2 thorpej * See if the caller provided any multicast options 577 1.2.2.2 thorpej */ 578 1.2.2.2 thorpej ifp = NULL; 579 1.2.2.2 thorpej if (im6o != NULL) { 580 1.2.2.2 thorpej ip6->ip6_hlim = im6o->im6o_multicast_hlim; 581 1.2.2.2 thorpej if (im6o->im6o_multicast_ifp != NULL) 582 1.2.2.2 thorpej ifp = im6o->im6o_multicast_ifp; 583 1.2.2.2 thorpej } else 584 1.2.2.2 thorpej ip6->ip6_hlim = ip6_defmcasthlim; 585 1.2.2.2 thorpej 586 1.2.2.2 thorpej /* 587 1.2.2.2 thorpej * See if the caller provided the outgoing interface 588 1.2.2.2 thorpej * as an ancillary data. 589 1.2.2.2 thorpej * Boundary check for ifindex is assumed to be already done. 590 1.2.2.2 thorpej */ 591 1.2.2.2 thorpej if (opt && opt->ip6po_pktinfo && opt->ip6po_pktinfo->ipi6_ifindex) 592 1.2.2.2 thorpej ifp = ifindex2ifnet[opt->ip6po_pktinfo->ipi6_ifindex]; 593 1.2.2.2 thorpej 594 1.2.2.2 thorpej /* 595 1.2.2.2 thorpej * If the destination is a node-local scope multicast, 596 1.2.2.2 thorpej * the packet should be loop-backed only. 597 1.2.2.2 thorpej */ 598 1.2.2.2 thorpej if (IN6_IS_ADDR_MC_NODELOCAL(&ip6->ip6_dst)) { 599 1.2.2.2 thorpej /* 600 1.2.2.2 thorpej * If the outgoing interface is already specified, 601 1.2.2.2 thorpej * it should be a loopback interface. 602 1.2.2.2 thorpej */ 603 1.2.2.2 thorpej if (ifp && (ifp->if_flags & IFF_LOOPBACK) == 0) { 604 1.2.2.2 thorpej ip6stat.ip6s_badscope++; 605 1.2.2.2 thorpej error = ENETUNREACH; /* XXX: better error? */ 606 1.2.2.2 thorpej goto bad; 607 1.2.2.2 thorpej } 608 1.2.2.2 thorpej else { 609 1.2.2.2 thorpej #ifdef __bsdi__ 610 1.2.2.2 thorpej ifp = &loif; 611 1.2.2.2 thorpej #else 612 1.2.2.2 thorpej ifp = &loif[0]; 613 1.2.2.2 thorpej #endif 614 1.2.2.2 thorpej } 615 1.2.2.2 thorpej } 616 1.2.2.2 thorpej 617 1.2.2.2 thorpej if (opt && opt->ip6po_hlim != -1) 618 1.2.2.2 thorpej ip6->ip6_hlim = opt->ip6po_hlim & 0xff; 619 1.2.2.2 thorpej 620 1.2.2.2 thorpej /* 621 1.2.2.2 thorpej * If caller did not provide an interface lookup a 622 1.2.2.2 thorpej * default in the routing table. This is either a 623 1.2.2.2 thorpej * default for the speicfied group (i.e. a host 624 1.2.2.2 thorpej * route), or a multicast default (a route for the 625 1.2.2.2 thorpej * ``net'' ff00::/8). 626 1.2.2.2 thorpej */ 627 1.2.2.2 thorpej if (ifp == NULL) { 628 1.2.2.2 thorpej if (ro->ro_rt == 0) { 629 1.2.2.2 thorpej #ifdef __FreeBSD__ 630 1.2.2.2 thorpej ro->ro_rt = rtalloc1((struct sockaddr *) 631 1.2.2.2 thorpej &ro->ro_dst, 0, 0UL); 632 1.2.2.2 thorpej #endif /*__FreeBSD__*/ 633 1.2.2.2 thorpej #if defined(__bsdi__) || defined(__NetBSD__) 634 1.2.2.2 thorpej ro->ro_rt = rtalloc1((struct sockaddr *) 635 1.2.2.2 thorpej &ro->ro_dst, 0); 636 1.2.2.2 thorpej #endif /*__bsdi__*/ 637 1.2.2.2 thorpej } 638 1.2.2.2 thorpej if (ro->ro_rt == 0) { 639 1.2.2.2 thorpej ip6stat.ip6s_noroute++; 640 1.2.2.2 thorpej error = EHOSTUNREACH; 641 1.2.2.2 thorpej goto bad; 642 1.2.2.2 thorpej } 643 1.2.2.2 thorpej ia = ifatoia6(ro->ro_rt->rt_ifa); 644 1.2.2.2 thorpej ifp = ro->ro_rt->rt_ifp; 645 1.2.2.2 thorpej ro->ro_rt->rt_use++; 646 1.2.2.2 thorpej } 647 1.2.2.2 thorpej /* 648 1.2.2.2 thorpej * Confirm that the outgoing interface supports multicast. 649 1.2.2.2 thorpej */ 650 1.2.2.2 thorpej if ((ifp->if_flags & IFF_MULTICAST) == 0) { 651 1.2.2.2 thorpej ip6stat.ip6s_noroute++; 652 1.2.2.2 thorpej error = ENETUNREACH; 653 1.2.2.2 thorpej goto bad; 654 1.2.2.2 thorpej } 655 1.2.2.2 thorpej IN6_LOOKUP_MULTI(ip6->ip6_dst, ifp, in6m); 656 1.2.2.2 thorpej if (in6m != NULL && 657 1.2.2.2 thorpej (im6o == NULL || im6o->im6o_multicast_loop)) { 658 1.2.2.2 thorpej /* 659 1.2.2.2 thorpej * If we belong to the destination multicast group 660 1.2.2.2 thorpej * on the outgoing interface, and the caller did not 661 1.2.2.2 thorpej * forbid loopback, loop back a copy. 662 1.2.2.2 thorpej */ 663 1.2.2.2 thorpej ip6_mloopback(ifp, m, dst); 664 1.2.2.2 thorpej } else { 665 1.2.2.2 thorpej /* 666 1.2.2.2 thorpej * If we are acting as a multicast router, perform 667 1.2.2.2 thorpej * multicast forwarding as if the packet had just 668 1.2.2.2 thorpej * arrived on the interface to which we are about 669 1.2.2.2 thorpej * to send. The multicast forwarding function 670 1.2.2.2 thorpej * recursively calls this function, using the 671 1.2.2.2 thorpej * IPV6_FORWARDING flag to prevent infinite recursion. 672 1.2.2.2 thorpej * 673 1.2.2.2 thorpej * Multicasts that are looped back by ip6_mloopback(), 674 1.2.2.2 thorpej * above, will be forwarded by the ip6_input() routine, 675 1.2.2.2 thorpej * if necessary. 676 1.2.2.2 thorpej */ 677 1.2.2.2 thorpej if (ip6_mrouter && (flags & IPV6_FORWARDING) == 0) { 678 1.2.2.2 thorpej if (ip6_mforward(ip6, ifp, m) != NULL) { 679 1.2.2.2 thorpej m_freem(m); 680 1.2.2.2 thorpej goto done; 681 1.2.2.2 thorpej } 682 1.2.2.2 thorpej } 683 1.2.2.2 thorpej } 684 1.2.2.2 thorpej /* 685 1.2.2.2 thorpej * Multicasts with a hoplimit of zero may be looped back, 686 1.2.2.2 thorpej * above, but must not be transmitted on a network. 687 1.2.2.2 thorpej * Also, multicasts addressed to the loopback interface 688 1.2.2.2 thorpej * are not sent -- the above call to ip6_mloopback() will 689 1.2.2.2 thorpej * loop back a copy if this host actually belongs to the 690 1.2.2.2 thorpej * destination group on the loopback interface. 691 1.2.2.2 thorpej */ 692 1.2.2.2 thorpej if (ip6->ip6_hlim == 0 || (ifp->if_flags & IFF_LOOPBACK)) { 693 1.2.2.2 thorpej m_freem(m); 694 1.2.2.2 thorpej goto done; 695 1.2.2.2 thorpej } 696 1.2.2.2 thorpej } 697 1.2.2.2 thorpej 698 1.2.2.2 thorpej /* 699 1.2.2.2 thorpej * Determine path MTU. 700 1.2.2.2 thorpej */ 701 1.2.2.2 thorpej if (ro_pmtu != ro) { 702 1.2.2.2 thorpej /* The first hop and the final destination may differ. */ 703 1.2.2.2 thorpej struct sockaddr_in6 *sin6_fin = 704 1.2.2.2 thorpej (struct sockaddr_in6 *)&ro_pmtu->ro_dst; 705 1.2.2.2 thorpej if (ro_pmtu->ro_rt && ((ro->ro_rt->rt_flags & RTF_UP) == 0 || 706 1.2.2.2 thorpej !IN6_ARE_ADDR_EQUAL(&sin6_fin->sin6_addr, 707 1.2.2.2 thorpej &finaldst))) { 708 1.2.2.2 thorpej RTFREE(ro_pmtu->ro_rt); 709 1.2.2.2 thorpej ro_pmtu->ro_rt = (struct rtentry *)0; 710 1.2.2.2 thorpej } 711 1.2.2.2 thorpej if (ro_pmtu->ro_rt == 0) { 712 1.2.2.2 thorpej bzero(sin6_fin, sizeof(*sin6_fin)); 713 1.2.2.2 thorpej sin6_fin->sin6_family = AF_INET6; 714 1.2.2.2 thorpej sin6_fin->sin6_len = sizeof(struct sockaddr_in6); 715 1.2.2.2 thorpej sin6_fin->sin6_addr = finaldst; 716 1.2.2.2 thorpej 717 1.2.2.2 thorpej #if 0 718 1.2.2.2 thorpej rtcalloc((struct route *)ro_pmtu); 719 1.2.2.2 thorpej #else 720 1.2.2.2 thorpej rtalloc((struct route *)ro_pmtu); 721 1.2.2.2 thorpej #endif 722 1.2.2.2 thorpej } 723 1.2.2.2 thorpej } 724 1.2.2.2 thorpej if (ro_pmtu->ro_rt != NULL) { 725 1.2.2.2 thorpej u_int32_t ifmtu = nd_ifinfo[ifp->if_index].linkmtu; 726 1.2.2.2 thorpej 727 1.2.2.2 thorpej mtu = ro_pmtu->ro_rt->rt_rmx.rmx_mtu; 728 1.2.2.2 thorpej if (mtu > ifmtu) { 729 1.2.2.2 thorpej /* 730 1.2.2.2 thorpej * The MTU on the route is larger than the MTU on 731 1.2.2.2 thorpej * the interface! This shouldn't happen, unless the 732 1.2.2.2 thorpej * MTU of the interface has been changed after the 733 1.2.2.2 thorpej * interface was brought up. Change the MTU in the 734 1.2.2.2 thorpej * route to match the interface MTU (as long as the 735 1.2.2.2 thorpej * field isn't locked). 736 1.2.2.2 thorpej */ 737 1.2.2.2 thorpej mtu = ifmtu; 738 1.2.2.2 thorpej if ((ro_pmtu->ro_rt->rt_rmx.rmx_locks & RTV_MTU) == 0) 739 1.2.2.2 thorpej ro_pmtu->ro_rt->rt_rmx.rmx_mtu = mtu; /* XXX */ 740 1.2.2.2 thorpej } 741 1.2.2.2 thorpej } else { 742 1.2.2.2 thorpej mtu = nd_ifinfo[ifp->if_index].linkmtu; 743 1.2.2.2 thorpej } 744 1.2.2.2 thorpej 745 1.2.2.2 thorpej /* 746 1.2.2.2 thorpej * Fake link-local scope-class addresses 747 1.2.2.2 thorpej */ 748 1.2.2.2 thorpej if ((ifp->if_flags & IFF_LOOPBACK) == 0) { 749 1.2.2.2 thorpej if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_src)) 750 1.2.2.2 thorpej ip6->ip6_src.s6_addr16[1] = 0; 751 1.2.2.2 thorpej if (IN6_IS_SCOPE_LINKLOCAL(&ip6->ip6_dst)) 752 1.2.2.2 thorpej ip6->ip6_dst.s6_addr16[1] = 0; 753 1.2.2.2 thorpej } 754 1.2.2.2 thorpej 755 1.2.2.2 thorpej /* 756 1.2.2.2 thorpej * If the outgoing packet contains a hop-by-hop options header, 757 1.2.2.2 thorpej * it must be examined and processed even by the source node. 758 1.2.2.2 thorpej * (RFC 2460, section 4.) 759 1.2.2.2 thorpej */ 760 1.2.2.2 thorpej if (exthdrs.ip6e_hbh) { 761 1.2.2.2 thorpej struct ip6_hbh *hbh = mtod(exthdrs.ip6e_hbh, 762 1.2.2.2 thorpej struct ip6_hbh *); 763 1.2.2.3 thorpej u_int32_t dummy1; /* XXX unused */ 764 1.2.2.2 thorpej u_int32_t dummy2; /* XXX unused */ 765 1.2.2.2 thorpej 766 1.2.2.2 thorpej /* 767 1.2.2.2 thorpej * XXX: if we have to send an ICMPv6 error to the sender, 768 1.2.2.2 thorpej * we need the M_LOOP flag since icmp6_error() expects 769 1.2.2.2 thorpej * the IPv6 and the hop-by-hop options header are 770 1.2.2.2 thorpej * continuous unless the flag is set. 771 1.2.2.2 thorpej */ 772 1.2.2.2 thorpej m->m_flags |= M_LOOP; 773 1.2.2.2 thorpej m->m_pkthdr.rcvif = ifp; 774 1.2.2.2 thorpej if (ip6_process_hopopts(m, 775 1.2.2.2 thorpej (u_int8_t *)(hbh + 1), 776 1.2.2.2 thorpej ((hbh->ip6h_len + 1) << 3) - 777 1.2.2.2 thorpej sizeof(struct ip6_hbh), 778 1.2.2.2 thorpej &dummy1, &dummy2) < 0) { 779 1.2.2.2 thorpej /* m was already freed at this point */ 780 1.2.2.2 thorpej error = EINVAL;/* better error? */ 781 1.2.2.2 thorpej goto done; 782 1.2.2.2 thorpej } 783 1.2.2.2 thorpej m->m_flags &= ~M_LOOP; /* XXX */ 784 1.2.2.2 thorpej m->m_pkthdr.rcvif = NULL; 785 1.2.2.2 thorpej } 786 1.2.2.2 thorpej 787 1.2.2.2 thorpej /* 788 1.2.2.2 thorpej * Send the packet to the outgoing interface. 789 1.2.2.2 thorpej * If necessary, do IPv6 fragmentation before sending. 790 1.2.2.2 thorpej */ 791 1.2.2.2 thorpej tlen = m->m_pkthdr.len; 792 1.2.2.2 thorpej if (tlen <= mtu 793 1.2.2.2 thorpej #ifdef notyet 794 1.2.2.2 thorpej /* 795 1.2.2.2 thorpej * On any link that cannot convey a 1280-octet packet in one piece, 796 1.2.2.2 thorpej * link-specific fragmentation and reassembly must be provided at 797 1.2.2.2 thorpej * a layer below IPv6. [RFC 2460, sec.5] 798 1.2.2.2 thorpej * Thus if the interface has ability of link-level fragmentation, 799 1.2.2.2 thorpej * we can just send the packet even if the packet size is 800 1.2.2.2 thorpej * larger than the link's MTU. 801 1.2.2.2 thorpej * XXX: IFF_FRAGMENTABLE (or such) flag has not been defined yet... 802 1.2.2.2 thorpej */ 803 1.2.2.2 thorpej 804 1.2.2.2 thorpej || ifp->if_flags & IFF_FRAGMENTABLE 805 1.2.2.2 thorpej #endif 806 1.2.2.2 thorpej ) 807 1.2.2.2 thorpej { 808 1.2.2.2 thorpej #ifdef NEWIP6OUTPUT 809 1.2.2.2 thorpej error = nd6_output(ifp, m, dst, ro->ro_rt); 810 1.2.2.2 thorpej #else 811 1.2.2.2 thorpej error = (*ifp->if_output)(ifp, m, (struct sockaddr *)dst, 812 1.2.2.2 thorpej ro->ro_rt); 813 1.2.2.2 thorpej #endif 814 1.2.2.2 thorpej goto done; 815 1.2.2.2 thorpej } else if (mtu < IPV6_MMTU) { 816 1.2.2.2 thorpej /* 817 1.2.2.2 thorpej * note that path MTU is never less than IPV6_MMTU 818 1.2.2.2 thorpej * (see icmp6_input). 819 1.2.2.2 thorpej */ 820 1.2.2.2 thorpej error = EMSGSIZE; 821 1.2.2.2 thorpej goto bad; 822 1.2.2.2 thorpej } else if (ip6->ip6_plen == 0) { /* jumbo payload cannot be fragmented */ 823 1.2.2.2 thorpej error = EMSGSIZE; 824 1.2.2.2 thorpej goto bad; 825 1.2.2.2 thorpej } else { 826 1.2.2.2 thorpej struct mbuf **mnext, *m_frgpart; 827 1.2.2.2 thorpej struct ip6_frag *ip6f; 828 1.2.2.3 thorpej u_int32_t id = htonl(ip6_id++); 829 1.2.2.2 thorpej u_char nextproto; 830 1.2.2.2 thorpej 831 1.2.2.2 thorpej /* 832 1.2.2.2 thorpej * Too large for the destination or interface; 833 1.2.2.2 thorpej * fragment if possible. 834 1.2.2.2 thorpej * Must be able to put at least 8 bytes per fragment. 835 1.2.2.2 thorpej */ 836 1.2.2.2 thorpej hlen = unfragpartlen; 837 1.2.2.2 thorpej if (mtu > IPV6_MAXPACKET) 838 1.2.2.2 thorpej mtu = IPV6_MAXPACKET; 839 1.2.2.2 thorpej len = (mtu - hlen - sizeof(struct ip6_frag)) & ~7; 840 1.2.2.2 thorpej if (len < 8) { 841 1.2.2.2 thorpej error = EMSGSIZE; 842 1.2.2.2 thorpej goto bad; 843 1.2.2.2 thorpej } 844 1.2.2.2 thorpej 845 1.2.2.2 thorpej mnext = &m->m_nextpkt; 846 1.2.2.2 thorpej 847 1.2.2.2 thorpej /* 848 1.2.2.2 thorpej * Change the next header field of the last header in the 849 1.2.2.2 thorpej * unfragmentable part. 850 1.2.2.2 thorpej */ 851 1.2.2.2 thorpej if (exthdrs.ip6e_rthdr) { 852 1.2.2.2 thorpej nextproto = *mtod(exthdrs.ip6e_rthdr, u_char *); 853 1.2.2.2 thorpej *mtod(exthdrs.ip6e_rthdr, u_char *) = IPPROTO_FRAGMENT; 854 1.2.2.2 thorpej } 855 1.2.2.2 thorpej else if (exthdrs.ip6e_dest1) { 856 1.2.2.2 thorpej nextproto = *mtod(exthdrs.ip6e_dest1, u_char *); 857 1.2.2.2 thorpej *mtod(exthdrs.ip6e_dest1, u_char *) = IPPROTO_FRAGMENT; 858 1.2.2.2 thorpej } 859 1.2.2.2 thorpej else if (exthdrs.ip6e_hbh) { 860 1.2.2.2 thorpej nextproto = *mtod(exthdrs.ip6e_hbh, u_char *); 861 1.2.2.2 thorpej *mtod(exthdrs.ip6e_hbh, u_char *) = IPPROTO_FRAGMENT; 862 1.2.2.2 thorpej } 863 1.2.2.2 thorpej else { 864 1.2.2.2 thorpej nextproto = ip6->ip6_nxt; 865 1.2.2.2 thorpej ip6->ip6_nxt = IPPROTO_FRAGMENT; 866 1.2.2.2 thorpej } 867 1.2.2.2 thorpej 868 1.2.2.2 thorpej /* 869 1.2.2.2 thorpej * Loop through length of segment after first fragment, 870 1.2.2.2 thorpej * make new header and copy data of each part and link onto chain. 871 1.2.2.2 thorpej */ 872 1.2.2.2 thorpej m0 = m; 873 1.2.2.2 thorpej for (off = hlen; off < tlen; off += len) { 874 1.2.2.2 thorpej MGETHDR(m, M_DONTWAIT, MT_HEADER); 875 1.2.2.2 thorpej if (!m) { 876 1.2.2.2 thorpej error = ENOBUFS; 877 1.2.2.2 thorpej ip6stat.ip6s_odropped++; 878 1.2.2.2 thorpej goto sendorfree; 879 1.2.2.2 thorpej } 880 1.2.2.2 thorpej m->m_flags = m0->m_flags & M_COPYFLAGS; 881 1.2.2.2 thorpej *mnext = m; 882 1.2.2.2 thorpej mnext = &m->m_nextpkt; 883 1.2.2.2 thorpej m->m_data += max_linkhdr; 884 1.2.2.2 thorpej mhip6 = mtod(m, struct ip6_hdr *); 885 1.2.2.2 thorpej *mhip6 = *ip6; 886 1.2.2.2 thorpej m->m_len = sizeof(*mhip6); 887 1.2.2.2 thorpej error = ip6_insertfraghdr(m0, m, hlen, &ip6f); 888 1.2.2.2 thorpej if (error) { 889 1.2.2.2 thorpej ip6stat.ip6s_odropped++; 890 1.2.2.2 thorpej goto sendorfree; 891 1.2.2.2 thorpej } 892 1.2.2.2 thorpej ip6f->ip6f_offlg = htons((u_short)((off - hlen) & ~7)); 893 1.2.2.2 thorpej if (off + len >= tlen) 894 1.2.2.2 thorpej len = tlen - off; 895 1.2.2.2 thorpej else 896 1.2.2.2 thorpej ip6f->ip6f_offlg |= IP6F_MORE_FRAG; 897 1.2.2.2 thorpej mhip6->ip6_plen = htons((u_short)(len + hlen + 898 1.2.2.2 thorpej sizeof(*ip6f) - 899 1.2.2.2 thorpej sizeof(struct ip6_hdr))); 900 1.2.2.2 thorpej if ((m_frgpart = m_copy(m0, off, len)) == 0) { 901 1.2.2.2 thorpej error = ENOBUFS; 902 1.2.2.2 thorpej ip6stat.ip6s_odropped++; 903 1.2.2.2 thorpej goto sendorfree; 904 1.2.2.2 thorpej } 905 1.2.2.2 thorpej m_cat(m, m_frgpart); 906 1.2.2.2 thorpej m->m_pkthdr.len = len + hlen + sizeof(*ip6f); 907 1.2.2.2 thorpej m->m_pkthdr.rcvif = (struct ifnet *)0; 908 1.2.2.2 thorpej ip6f->ip6f_reserved = 0; 909 1.2.2.2 thorpej ip6f->ip6f_ident = id; 910 1.2.2.2 thorpej ip6f->ip6f_nxt = nextproto; 911 1.2.2.2 thorpej ip6stat.ip6s_ofragments++; 912 1.2.2.2 thorpej } 913 1.2.2.2 thorpej } 914 1.2.2.2 thorpej 915 1.2.2.2 thorpej /* 916 1.2.2.2 thorpej * Remove leading garbages. 917 1.2.2.2 thorpej */ 918 1.2.2.2 thorpej sendorfree: 919 1.2.2.2 thorpej m = m0->m_nextpkt; 920 1.2.2.2 thorpej m0->m_nextpkt = 0; 921 1.2.2.2 thorpej m_freem(m0); 922 1.2.2.2 thorpej for (m0 = m; m; m = m0) { 923 1.2.2.2 thorpej m0 = m->m_nextpkt; 924 1.2.2.2 thorpej m->m_nextpkt = 0; 925 1.2.2.2 thorpej if (error == 0) { 926 1.2.2.2 thorpej #ifdef NEWIP6OUTPUT 927 1.2.2.2 thorpej error = nd6_output(ifp, m, dst, ro->ro_rt); 928 1.2.2.2 thorpej #else 929 1.2.2.2 thorpej error = (*ifp->if_output)(ifp, m, 930 1.2.2.2 thorpej (struct sockaddr *)dst, 931 1.2.2.2 thorpej ro->ro_rt); 932 1.2.2.2 thorpej #endif 933 1.2.2.2 thorpej } 934 1.2.2.2 thorpej else 935 1.2.2.2 thorpej m_freem(m); 936 1.2.2.2 thorpej } 937 1.2.2.2 thorpej 938 1.2.2.2 thorpej if (error == 0) 939 1.2.2.2 thorpej ip6stat.ip6s_fragmented++; 940 1.2.2.2 thorpej 941 1.2.2.2 thorpej done: 942 1.2.2.2 thorpej if (ro == &ip6route && ro->ro_rt) { /* brace necessary for RTFREE */ 943 1.2.2.2 thorpej RTFREE(ro->ro_rt); 944 1.2.2.2 thorpej } else if (ro_pmtu == &ip6route && ro_pmtu->ro_rt) { 945 1.2.2.2 thorpej RTFREE(ro_pmtu->ro_rt); 946 1.2.2.2 thorpej } 947 1.2.2.2 thorpej 948 1.2.2.2 thorpej #ifdef IPSEC 949 1.2.2.2 thorpej if (sp != NULL) 950 1.2.2.2 thorpej key_freesp(sp); 951 1.2.2.2 thorpej #endif /* IPSEC */ 952 1.2.2.2 thorpej 953 1.2.2.2 thorpej return(error); 954 1.2.2.2 thorpej 955 1.2.2.2 thorpej freehdrs: 956 1.2.2.2 thorpej m_freem(exthdrs.ip6e_hbh); /* m_freem will check if mbuf is 0 */ 957 1.2.2.2 thorpej m_freem(exthdrs.ip6e_dest1); 958 1.2.2.2 thorpej m_freem(exthdrs.ip6e_rthdr); 959 1.2.2.2 thorpej m_freem(exthdrs.ip6e_dest2); 960 1.2.2.2 thorpej /* fall through */ 961 1.2.2.2 thorpej bad: 962 1.2.2.2 thorpej m_freem(m); 963 1.2.2.2 thorpej goto done; 964 1.2.2.2 thorpej } 965 1.2.2.2 thorpej 966 1.2.2.2 thorpej static int 967 1.2.2.2 thorpej ip6_copyexthdr(mp, hdr, hlen) 968 1.2.2.2 thorpej struct mbuf **mp; 969 1.2.2.2 thorpej caddr_t hdr; 970 1.2.2.2 thorpej int hlen; 971 1.2.2.2 thorpej { 972 1.2.2.2 thorpej struct mbuf *m; 973 1.2.2.2 thorpej 974 1.2.2.2 thorpej if (hlen > MCLBYTES) 975 1.2.2.2 thorpej return(ENOBUFS); /* XXX */ 976 1.2.2.2 thorpej 977 1.2.2.2 thorpej MGET(m, M_DONTWAIT, MT_DATA); 978 1.2.2.2 thorpej if (!m) 979 1.2.2.2 thorpej return(ENOBUFS); 980 1.2.2.2 thorpej 981 1.2.2.2 thorpej if (hlen > MLEN) { 982 1.2.2.2 thorpej MCLGET(m, M_DONTWAIT); 983 1.2.2.2 thorpej if ((m->m_flags & M_EXT) == 0) { 984 1.2.2.2 thorpej m_free(m); 985 1.2.2.2 thorpej return(ENOBUFS); 986 1.2.2.2 thorpej } 987 1.2.2.2 thorpej } 988 1.2.2.2 thorpej m->m_len = hlen; 989 1.2.2.2 thorpej if (hdr) 990 1.2.2.2 thorpej bcopy(hdr, mtod(m, caddr_t), hlen); 991 1.2.2.2 thorpej 992 1.2.2.2 thorpej *mp = m; 993 1.2.2.2 thorpej return(0); 994 1.2.2.2 thorpej } 995 1.2.2.2 thorpej 996 1.2.2.2 thorpej /* 997 1.2.2.2 thorpej * Insert jumbo payload option. 998 1.2.2.2 thorpej */ 999 1.2.2.2 thorpej static int 1000 1.2.2.2 thorpej ip6_insert_jumboopt(exthdrs, plen) 1001 1.2.2.2 thorpej struct ip6_exthdrs *exthdrs; 1002 1.2.2.2 thorpej u_int32_t plen; 1003 1.2.2.2 thorpej { 1004 1.2.2.2 thorpej struct mbuf *mopt; 1005 1.2.2.2 thorpej u_char *optbuf; 1006 1.2.2.2 thorpej 1007 1.2.2.2 thorpej #define JUMBOOPTLEN 8 /* length of jumbo payload option and padding */ 1008 1.2.2.2 thorpej 1009 1.2.2.2 thorpej /* 1010 1.2.2.2 thorpej * If there is no hop-by-hop options header, allocate new one. 1011 1.2.2.2 thorpej * If there is one but it doesn't have enough space to store the 1012 1.2.2.2 thorpej * jumbo payload option, allocate a cluster to store the whole options. 1013 1.2.2.2 thorpej * Otherwise, use it to store the options. 1014 1.2.2.2 thorpej */ 1015 1.2.2.2 thorpej if (exthdrs->ip6e_hbh == 0) { 1016 1.2.2.2 thorpej MGET(mopt, M_DONTWAIT, MT_DATA); 1017 1.2.2.2 thorpej if (mopt == 0) 1018 1.2.2.2 thorpej return(ENOBUFS); 1019 1.2.2.2 thorpej mopt->m_len = JUMBOOPTLEN; 1020 1.2.2.2 thorpej optbuf = mtod(mopt, u_char *); 1021 1.2.2.2 thorpej optbuf[1] = 0; /* = ((JUMBOOPTLEN) >> 3) - 1 */ 1022 1.2.2.2 thorpej exthdrs->ip6e_hbh = mopt; 1023 1.2.2.2 thorpej } 1024 1.2.2.2 thorpej else { 1025 1.2.2.2 thorpej struct ip6_hbh *hbh; 1026 1.2.2.2 thorpej 1027 1.2.2.2 thorpej mopt = exthdrs->ip6e_hbh; 1028 1.2.2.2 thorpej if (M_TRAILINGSPACE(mopt) < JUMBOOPTLEN) { 1029 1.2.2.2 thorpej caddr_t oldoptp = mtod(mopt, caddr_t); 1030 1.2.2.2 thorpej int oldoptlen = mopt->m_len; 1031 1.2.2.2 thorpej 1032 1.2.2.2 thorpej if (mopt->m_flags & M_EXT) 1033 1.2.2.2 thorpej return(ENOBUFS); /* XXX */ 1034 1.2.2.2 thorpej MCLGET(mopt, M_DONTWAIT); 1035 1.2.2.2 thorpej if ((mopt->m_flags & M_EXT) == 0) 1036 1.2.2.2 thorpej return(ENOBUFS); 1037 1.2.2.2 thorpej 1038 1.2.2.2 thorpej bcopy(oldoptp, mtod(mopt, caddr_t), oldoptlen); 1039 1.2.2.2 thorpej optbuf = mtod(mopt, caddr_t) + oldoptlen; 1040 1.2.2.2 thorpej mopt->m_len = oldoptlen + JUMBOOPTLEN; 1041 1.2.2.2 thorpej } 1042 1.2.2.2 thorpej else { 1043 1.2.2.2 thorpej optbuf = mtod(mopt, u_char *) + mopt->m_len; 1044 1.2.2.2 thorpej mopt->m_len += JUMBOOPTLEN; 1045 1.2.2.2 thorpej } 1046 1.2.2.2 thorpej optbuf[0] = IP6OPT_PADN; 1047 1.2.2.2 thorpej optbuf[1] = 1; 1048 1.2.2.2 thorpej 1049 1.2.2.2 thorpej /* 1050 1.2.2.2 thorpej * Adjust the header length according to the pad and 1051 1.2.2.2 thorpej * the jumbo payload option. 1052 1.2.2.2 thorpej */ 1053 1.2.2.2 thorpej hbh = mtod(mopt, struct ip6_hbh *); 1054 1.2.2.2 thorpej hbh->ip6h_len += (JUMBOOPTLEN >> 3); 1055 1.2.2.2 thorpej } 1056 1.2.2.2 thorpej 1057 1.2.2.2 thorpej /* fill in the option. */ 1058 1.2.2.2 thorpej optbuf[2] = IP6OPT_JUMBO; 1059 1.2.2.2 thorpej optbuf[3] = 4; 1060 1.2.2.2 thorpej *(u_int32_t *)&optbuf[4] = htonl(plen + JUMBOOPTLEN); 1061 1.2.2.2 thorpej 1062 1.2.2.2 thorpej /* finally, adjust the packet header length */ 1063 1.2.2.2 thorpej exthdrs->ip6e_ip6->m_pkthdr.len += JUMBOOPTLEN; 1064 1.2.2.2 thorpej 1065 1.2.2.2 thorpej return(0); 1066 1.2.2.2 thorpej #undef JUMBOOPTLEN 1067 1.2.2.2 thorpej } 1068 1.2.2.2 thorpej 1069 1.2.2.2 thorpej /* 1070 1.2.2.2 thorpej * Insert fragment header and copy unfragmentable header portions. 1071 1.2.2.2 thorpej */ 1072 1.2.2.2 thorpej static int 1073 1.2.2.2 thorpej ip6_insertfraghdr(m0, m, hlen, frghdrp) 1074 1.2.2.2 thorpej struct mbuf *m0, *m; 1075 1.2.2.2 thorpej int hlen; 1076 1.2.2.2 thorpej struct ip6_frag **frghdrp; 1077 1.2.2.2 thorpej { 1078 1.2.2.2 thorpej struct mbuf *n, *mlast; 1079 1.2.2.2 thorpej 1080 1.2.2.2 thorpej if (hlen > sizeof(struct ip6_hdr)) { 1081 1.2.2.2 thorpej n = m_copym(m0, sizeof(struct ip6_hdr), 1082 1.2.2.2 thorpej hlen - sizeof(struct ip6_hdr), M_DONTWAIT); 1083 1.2.2.2 thorpej if (n == 0) 1084 1.2.2.2 thorpej return(ENOBUFS); 1085 1.2.2.2 thorpej m->m_next = n; 1086 1.2.2.2 thorpej } 1087 1.2.2.2 thorpej else 1088 1.2.2.2 thorpej n = m; 1089 1.2.2.2 thorpej 1090 1.2.2.2 thorpej /* Search for the last mbuf of unfragmentable part. */ 1091 1.2.2.2 thorpej for (mlast = n; mlast->m_next; mlast = mlast->m_next) 1092 1.2.2.2 thorpej ; 1093 1.2.2.2 thorpej 1094 1.2.2.2 thorpej if ((mlast->m_flags & M_EXT) == 0 && 1095 1.2.2.2 thorpej M_TRAILINGSPACE(mlast) < sizeof(struct ip6_frag)) { 1096 1.2.2.2 thorpej /* use the trailing space of the last mbuf for the fragment hdr */ 1097 1.2.2.2 thorpej *frghdrp = 1098 1.2.2.2 thorpej (struct ip6_frag *)(mtod(mlast, caddr_t) + mlast->m_len); 1099 1.2.2.2 thorpej mlast->m_len += sizeof(struct ip6_frag); 1100 1.2.2.2 thorpej m->m_pkthdr.len += sizeof(struct ip6_frag); 1101 1.2.2.2 thorpej } 1102 1.2.2.2 thorpej else { 1103 1.2.2.2 thorpej /* allocate a new mbuf for the fragment header */ 1104 1.2.2.2 thorpej struct mbuf *mfrg; 1105 1.2.2.2 thorpej 1106 1.2.2.2 thorpej MGET(mfrg, M_DONTWAIT, MT_DATA); 1107 1.2.2.2 thorpej if (mfrg == 0) 1108 1.2.2.2 thorpej return(ENOBUFS); 1109 1.2.2.2 thorpej mfrg->m_len = sizeof(struct ip6_frag); 1110 1.2.2.2 thorpej *frghdrp = mtod(mfrg, struct ip6_frag *); 1111 1.2.2.2 thorpej mlast->m_next = mfrg; 1112 1.2.2.2 thorpej } 1113 1.2.2.2 thorpej 1114 1.2.2.2 thorpej return(0); 1115 1.2.2.2 thorpej } 1116 1.2.2.2 thorpej 1117 1.2.2.2 thorpej /* 1118 1.2.2.2 thorpej * IP6 socket option processing. 1119 1.2.2.2 thorpej */ 1120 1.2.2.2 thorpej int 1121 1.2.2.2 thorpej ip6_ctloutput(op, so, level, optname, mp) 1122 1.2.2.2 thorpej int op; 1123 1.2.2.2 thorpej struct socket *so; 1124 1.2.2.2 thorpej int level, optname; 1125 1.2.2.2 thorpej struct mbuf **mp; 1126 1.2.2.2 thorpej { 1127 1.2.2.2 thorpej register struct in6pcb *in6p = sotoin6pcb(so); 1128 1.2.2.2 thorpej register struct mbuf *m = *mp; 1129 1.2.2.2 thorpej register int optval = 0; 1130 1.2.2.2 thorpej int error = 0; 1131 1.2.2.2 thorpej struct proc *p = curproc; /* XXX */ 1132 1.2.2.2 thorpej 1133 1.2.2.2 thorpej if (level == IPPROTO_IPV6) 1134 1.2.2.2 thorpej switch (op) { 1135 1.2.2.2 thorpej 1136 1.2.2.2 thorpej case PRCO_SETOPT: 1137 1.2.2.2 thorpej switch (optname) { 1138 1.2.2.2 thorpej case IPV6_PKTOPTIONS: 1139 1.2.2.2 thorpej return(ip6_pcbopts(&in6p->in6p_outputopts, 1140 1.2.2.2 thorpej m, so)); 1141 1.2.2.2 thorpej case IPV6_HOPOPTS: 1142 1.2.2.2 thorpej case IPV6_DSTOPTS: 1143 1.2.2.2 thorpej if (p == 0 || suser(p->p_ucred, &p->p_acflag)) { 1144 1.2.2.2 thorpej error = EPERM; 1145 1.2.2.2 thorpej break; 1146 1.2.2.2 thorpej } 1147 1.2.2.2 thorpej /* fall through */ 1148 1.2.2.2 thorpej case IPV6_UNICAST_HOPS: 1149 1.2.2.2 thorpej case IPV6_RECVOPTS: 1150 1.2.2.2 thorpej case IPV6_RECVRETOPTS: 1151 1.2.2.2 thorpej case IPV6_RECVDSTADDR: 1152 1.2.2.2 thorpej case IPV6_PKTINFO: 1153 1.2.2.2 thorpej case IPV6_HOPLIMIT: 1154 1.2.2.2 thorpej case IPV6_RTHDR: 1155 1.2.2.2 thorpej case IPV6_CHECKSUM: 1156 1.2.2.2 thorpej case IPV6_FAITH: 1157 1.2.2.2 thorpej if (!m || m->m_len != sizeof(int)) 1158 1.2.2.2 thorpej error = EINVAL; 1159 1.2.2.2 thorpej else { 1160 1.2.2.2 thorpej optval = *mtod(m, int *); 1161 1.2.2.2 thorpej switch (optname) { 1162 1.2.2.2 thorpej 1163 1.2.2.2 thorpej case IPV6_UNICAST_HOPS: 1164 1.2.2.2 thorpej if (optval < -1 || optval >= 256) 1165 1.2.2.2 thorpej error = EINVAL; 1166 1.2.2.2 thorpej else { 1167 1.2.2.2 thorpej /* -1 = kernel default */ 1168 1.2.2.2 thorpej in6p->in6p_hops = optval; 1169 1.2.2.2 thorpej } 1170 1.2.2.2 thorpej break; 1171 1.2.2.2 thorpej #define OPTSET(bit) \ 1172 1.2.2.2 thorpej if (optval) \ 1173 1.2.2.2 thorpej in6p->in6p_flags |= bit; \ 1174 1.2.2.2 thorpej else \ 1175 1.2.2.2 thorpej in6p->in6p_flags &= ~bit; 1176 1.2.2.2 thorpej 1177 1.2.2.2 thorpej case IPV6_RECVOPTS: 1178 1.2.2.2 thorpej OPTSET(IN6P_RECVOPTS); 1179 1.2.2.2 thorpej break; 1180 1.2.2.2 thorpej 1181 1.2.2.2 thorpej case IPV6_RECVRETOPTS: 1182 1.2.2.2 thorpej OPTSET(IN6P_RECVRETOPTS); 1183 1.2.2.2 thorpej break; 1184 1.2.2.2 thorpej 1185 1.2.2.2 thorpej case IPV6_RECVDSTADDR: 1186 1.2.2.2 thorpej OPTSET(IN6P_RECVDSTADDR); 1187 1.2.2.2 thorpej break; 1188 1.2.2.2 thorpej 1189 1.2.2.2 thorpej case IPV6_PKTINFO: 1190 1.2.2.2 thorpej OPTSET(IN6P_PKTINFO); 1191 1.2.2.2 thorpej break; 1192 1.2.2.2 thorpej 1193 1.2.2.2 thorpej case IPV6_HOPLIMIT: 1194 1.2.2.2 thorpej OPTSET(IN6P_HOPLIMIT); 1195 1.2.2.2 thorpej break; 1196 1.2.2.2 thorpej 1197 1.2.2.2 thorpej case IPV6_HOPOPTS: 1198 1.2.2.2 thorpej OPTSET(IN6P_HOPOPTS); 1199 1.2.2.2 thorpej break; 1200 1.2.2.2 thorpej 1201 1.2.2.2 thorpej case IPV6_DSTOPTS: 1202 1.2.2.2 thorpej OPTSET(IN6P_DSTOPTS); 1203 1.2.2.2 thorpej break; 1204 1.2.2.2 thorpej 1205 1.2.2.2 thorpej case IPV6_RTHDR: 1206 1.2.2.2 thorpej OPTSET(IN6P_RTHDR); 1207 1.2.2.2 thorpej break; 1208 1.2.2.2 thorpej 1209 1.2.2.2 thorpej case IPV6_CHECKSUM: 1210 1.2.2.2 thorpej in6p->in6p_cksum = optval; 1211 1.2.2.2 thorpej break; 1212 1.2.2.2 thorpej 1213 1.2.2.2 thorpej case IPV6_FAITH: 1214 1.2.2.2 thorpej OPTSET(IN6P_FAITH); 1215 1.2.2.2 thorpej break; 1216 1.2.2.2 thorpej } 1217 1.2.2.2 thorpej } 1218 1.2.2.2 thorpej break; 1219 1.2.2.2 thorpej #undef OPTSET 1220 1.2.2.2 thorpej 1221 1.2.2.2 thorpej case IPV6_MULTICAST_IF: 1222 1.2.2.2 thorpej case IPV6_MULTICAST_HOPS: 1223 1.2.2.2 thorpej case IPV6_MULTICAST_LOOP: 1224 1.2.2.2 thorpej case IPV6_JOIN_GROUP: 1225 1.2.2.2 thorpej case IPV6_LEAVE_GROUP: 1226 1.2.2.2 thorpej error = ip6_setmoptions(optname, &in6p->in6p_moptions, m); 1227 1.2.2.2 thorpej break; 1228 1.2.2.2 thorpej 1229 1.2.2.2 thorpej #ifdef IPSEC 1230 1.2.2.2 thorpej case IPV6_IPSEC_POLICY: 1231 1.2.2.2 thorpej { 1232 1.2.2.2 thorpej caddr_t req = NULL; 1233 1.2.2.2 thorpej int len = 0; 1234 1.2.2.2 thorpej int priv = 0; 1235 1.2.2.2 thorpej #ifdef __NetBSD__ 1236 1.2.2.2 thorpej if (p == 0 || suser(p->p_ucred, &p->p_acflag)) 1237 1.2.2.2 thorpej priv = 0; 1238 1.2.2.2 thorpej else 1239 1.2.2.2 thorpej priv = 1; 1240 1.2.2.2 thorpej #else 1241 1.2.2.2 thorpej priv = (in6p->in6p_socket->so_state & SS_PRIV); 1242 1.2.2.2 thorpej #endif 1243 1.2.2.2 thorpej if (m != 0) { 1244 1.2.2.2 thorpej req = mtod(m, caddr_t); 1245 1.2.2.2 thorpej len = m->m_len; 1246 1.2.2.2 thorpej } 1247 1.2.2.2 thorpej error = ipsec_set_policy(&in6p->in6p_sp, 1248 1.2.2.2 thorpej optname, req, len, 1249 1.2.2.2 thorpej priv); 1250 1.2.2.2 thorpej } 1251 1.2.2.2 thorpej break; 1252 1.2.2.2 thorpej #endif /* IPSEC */ 1253 1.2.2.2 thorpej 1254 1.2.2.2 thorpej default: 1255 1.2.2.2 thorpej error = ENOPROTOOPT; 1256 1.2.2.2 thorpej break; 1257 1.2.2.2 thorpej } 1258 1.2.2.2 thorpej if (m) 1259 1.2.2.2 thorpej (void)m_free(m); 1260 1.2.2.2 thorpej break; 1261 1.2.2.2 thorpej 1262 1.2.2.2 thorpej case PRCO_GETOPT: 1263 1.2.2.2 thorpej switch (optname) { 1264 1.2.2.2 thorpej 1265 1.2.2.2 thorpej case IPV6_OPTIONS: 1266 1.2.2.2 thorpej case IPV6_RETOPTS: 1267 1.2.2.2 thorpej #if 0 1268 1.2.2.2 thorpej *mp = m = m_get(M_WAIT, MT_SOOPTS); 1269 1.2.2.2 thorpej if (in6p->in6p_options) { 1270 1.2.2.2 thorpej m->m_len = in6p->in6p_options->m_len; 1271 1.2.2.2 thorpej bcopy(mtod(in6p->in6p_options, caddr_t), 1272 1.2.2.2 thorpej mtod(m, caddr_t), 1273 1.2.2.2 thorpej (unsigned)m->m_len); 1274 1.2.2.2 thorpej } else 1275 1.2.2.2 thorpej m->m_len = 0; 1276 1.2.2.2 thorpej break; 1277 1.2.2.2 thorpej #else 1278 1.2.2.2 thorpej error = ENOPROTOOPT; 1279 1.2.2.2 thorpej break; 1280 1.2.2.2 thorpej #endif 1281 1.2.2.2 thorpej 1282 1.2.2.2 thorpej case IPV6_PKTOPTIONS: 1283 1.2.2.2 thorpej if (in6p->in6p_options) { 1284 1.2.2.2 thorpej *mp = m_copym(in6p->in6p_options, 0, 1285 1.2.2.2 thorpej M_COPYALL, M_WAIT); 1286 1.2.2.2 thorpej } else { 1287 1.2.2.2 thorpej *mp = m_get(M_WAIT, MT_SOOPTS); 1288 1.2.2.2 thorpej (*mp)->m_len = 0; 1289 1.2.2.2 thorpej } 1290 1.2.2.2 thorpej break; 1291 1.2.2.2 thorpej 1292 1.2.2.2 thorpej case IPV6_HOPOPTS: 1293 1.2.2.2 thorpej case IPV6_DSTOPTS: 1294 1.2.2.2 thorpej if (p == 0 || suser(p->p_ucred, &p->p_acflag)) { 1295 1.2.2.2 thorpej error = EPERM; 1296 1.2.2.2 thorpej break; 1297 1.2.2.2 thorpej } 1298 1.2.2.2 thorpej /* fall through */ 1299 1.2.2.2 thorpej case IPV6_UNICAST_HOPS: 1300 1.2.2.2 thorpej case IPV6_RECVOPTS: 1301 1.2.2.2 thorpej case IPV6_RECVRETOPTS: 1302 1.2.2.2 thorpej case IPV6_RECVDSTADDR: 1303 1.2.2.2 thorpej case IPV6_PKTINFO: 1304 1.2.2.2 thorpej case IPV6_HOPLIMIT: 1305 1.2.2.2 thorpej case IPV6_RTHDR: 1306 1.2.2.2 thorpej case IPV6_CHECKSUM: 1307 1.2.2.2 thorpej case IPV6_FAITH: 1308 1.2.2.2 thorpej *mp = m = m_get(M_WAIT, MT_SOOPTS); 1309 1.2.2.2 thorpej m->m_len = sizeof(int); 1310 1.2.2.2 thorpej switch (optname) { 1311 1.2.2.2 thorpej 1312 1.2.2.2 thorpej case IPV6_UNICAST_HOPS: 1313 1.2.2.2 thorpej optval = in6p->in6p_hops; 1314 1.2.2.2 thorpej break; 1315 1.2.2.2 thorpej 1316 1.2.2.2 thorpej #define OPTBIT(bit) (in6p->in6p_flags & bit ? 1 : 0) 1317 1.2.2.2 thorpej 1318 1.2.2.2 thorpej case IPV6_RECVOPTS: 1319 1.2.2.2 thorpej optval = OPTBIT(IN6P_RECVOPTS); 1320 1.2.2.2 thorpej break; 1321 1.2.2.2 thorpej 1322 1.2.2.2 thorpej case IPV6_RECVRETOPTS: 1323 1.2.2.2 thorpej optval = OPTBIT(IN6P_RECVRETOPTS); 1324 1.2.2.2 thorpej break; 1325 1.2.2.2 thorpej 1326 1.2.2.2 thorpej case IPV6_RECVDSTADDR: 1327 1.2.2.2 thorpej optval = OPTBIT(IN6P_RECVDSTADDR); 1328 1.2.2.2 thorpej break; 1329 1.2.2.2 thorpej 1330 1.2.2.2 thorpej case IPV6_PKTINFO: 1331 1.2.2.2 thorpej optval = OPTBIT(IN6P_PKTINFO); 1332 1.2.2.2 thorpej break; 1333 1.2.2.2 thorpej 1334 1.2.2.2 thorpej case IPV6_HOPLIMIT: 1335 1.2.2.2 thorpej optval = OPTBIT(IN6P_HOPLIMIT); 1336 1.2.2.2 thorpej break; 1337 1.2.2.2 thorpej 1338 1.2.2.2 thorpej case IPV6_HOPOPTS: 1339 1.2.2.2 thorpej optval = OPTBIT(IN6P_HOPOPTS); 1340 1.2.2.2 thorpej break; 1341 1.2.2.2 thorpej 1342 1.2.2.2 thorpej case IPV6_DSTOPTS: 1343 1.2.2.2 thorpej optval = OPTBIT(IN6P_DSTOPTS); 1344 1.2.2.2 thorpej break; 1345 1.2.2.2 thorpej 1346 1.2.2.2 thorpej case IPV6_RTHDR: 1347 1.2.2.2 thorpej optval = OPTBIT(IN6P_RTHDR); 1348 1.2.2.2 thorpej break; 1349 1.2.2.2 thorpej 1350 1.2.2.2 thorpej case IPV6_CHECKSUM: 1351 1.2.2.2 thorpej optval = in6p->in6p_cksum; 1352 1.2.2.2 thorpej break; 1353 1.2.2.2 thorpej 1354 1.2.2.2 thorpej case IPV6_FAITH: 1355 1.2.2.2 thorpej optval = OPTBIT(IN6P_FAITH); 1356 1.2.2.2 thorpej break; 1357 1.2.2.2 thorpej } 1358 1.2.2.2 thorpej *mtod(m, int *) = optval; 1359 1.2.2.2 thorpej break; 1360 1.2.2.2 thorpej 1361 1.2.2.2 thorpej case IPV6_MULTICAST_IF: 1362 1.2.2.2 thorpej case IPV6_MULTICAST_HOPS: 1363 1.2.2.2 thorpej case IPV6_MULTICAST_LOOP: 1364 1.2.2.2 thorpej case IPV6_JOIN_GROUP: 1365 1.2.2.2 thorpej case IPV6_LEAVE_GROUP: 1366 1.2.2.2 thorpej error = ip6_getmoptions(optname, in6p->in6p_moptions, mp); 1367 1.2.2.2 thorpej break; 1368 1.2.2.2 thorpej 1369 1.2.2.2 thorpej #ifdef IPSEC 1370 1.2.2.2 thorpej case IPV6_IPSEC_POLICY: 1371 1.2.2.2 thorpej error = ipsec_get_policy(in6p->in6p_sp, mp); 1372 1.2.2.2 thorpej break; 1373 1.2.2.2 thorpej #endif /* IPSEC */ 1374 1.2.2.2 thorpej 1375 1.2.2.2 thorpej default: 1376 1.2.2.2 thorpej error = ENOPROTOOPT; 1377 1.2.2.2 thorpej break; 1378 1.2.2.2 thorpej } 1379 1.2.2.2 thorpej break; 1380 1.2.2.2 thorpej } 1381 1.2.2.2 thorpej else { 1382 1.2.2.2 thorpej error = EINVAL; 1383 1.2.2.2 thorpej if (op == PRCO_SETOPT && *mp) 1384 1.2.2.2 thorpej (void)m_free(*mp); 1385 1.2.2.2 thorpej } 1386 1.2.2.2 thorpej return(error); 1387 1.2.2.2 thorpej } 1388 1.2.2.2 thorpej 1389 1.2.2.2 thorpej /* 1390 1.2.2.2 thorpej * Set up IP6 options in pcb for insertion in output packets. 1391 1.2.2.2 thorpej * Store in mbuf with pointer in pcbopt, adding pseudo-option 1392 1.2.2.2 thorpej * with destination address if source routed. 1393 1.2.2.2 thorpej */ 1394 1.2.2.2 thorpej static int 1395 1.2.2.2 thorpej ip6_pcbopts(pktopt, m, so) 1396 1.2.2.2 thorpej struct ip6_pktopts **pktopt; 1397 1.2.2.2 thorpej register struct mbuf *m; 1398 1.2.2.2 thorpej struct socket *so; 1399 1.2.2.2 thorpej { 1400 1.2.2.2 thorpej register struct ip6_pktopts *opt = *pktopt; 1401 1.2.2.2 thorpej int error = 0; 1402 1.2.2.2 thorpej struct proc *p = curproc; /* XXX */ 1403 1.2.2.2 thorpej int priv = 0; 1404 1.2.2.2 thorpej 1405 1.2.2.2 thorpej /* turn off any old options. */ 1406 1.2.2.2 thorpej if (opt) { 1407 1.2.2.2 thorpej if (opt->ip6po_m) 1408 1.2.2.2 thorpej (void)m_free(opt->ip6po_m); 1409 1.2.2.2 thorpej } 1410 1.2.2.2 thorpej else 1411 1.2.2.2 thorpej opt = malloc(sizeof(*opt), M_IP6OPT, M_WAITOK); 1412 1.2.2.2 thorpej *pktopt = 0; 1413 1.2.2.2 thorpej 1414 1.2.2.2 thorpej if (!m || m->m_len == 0) { 1415 1.2.2.2 thorpej /* 1416 1.2.2.2 thorpej * Only turning off any previous options. 1417 1.2.2.2 thorpej */ 1418 1.2.2.2 thorpej if (opt) 1419 1.2.2.2 thorpej free(opt, M_IP6OPT); 1420 1.2.2.2 thorpej if (m) 1421 1.2.2.2 thorpej (void)m_free(m); 1422 1.2.2.2 thorpej return(0); 1423 1.2.2.2 thorpej } 1424 1.2.2.2 thorpej 1425 1.2.2.2 thorpej /* set options specified by user. */ 1426 1.2.2.2 thorpej if (p && !suser(p->p_ucred, &p->p_acflag)) 1427 1.2.2.2 thorpej priv = 1; 1428 1.2.2.2 thorpej if ((error = ip6_setpktoptions(m, opt, priv)) != 0) { 1429 1.2.2.2 thorpej (void)m_free(m); 1430 1.2.2.2 thorpej return(error); 1431 1.2.2.2 thorpej } 1432 1.2.2.2 thorpej *pktopt = opt; 1433 1.2.2.2 thorpej return(0); 1434 1.2.2.2 thorpej } 1435 1.2.2.2 thorpej 1436 1.2.2.2 thorpej /* 1437 1.2.2.2 thorpej * Set the IP6 multicast options in response to user setsockopt(). 1438 1.2.2.2 thorpej */ 1439 1.2.2.2 thorpej static int 1440 1.2.2.2 thorpej ip6_setmoptions(optname, im6op, m) 1441 1.2.2.2 thorpej int optname; 1442 1.2.2.2 thorpej struct ip6_moptions **im6op; 1443 1.2.2.2 thorpej struct mbuf *m; 1444 1.2.2.2 thorpej { 1445 1.2.2.2 thorpej int error = 0; 1446 1.2.2.2 thorpej u_int loop, ifindex; 1447 1.2.2.2 thorpej struct ipv6_mreq *mreq; 1448 1.2.2.2 thorpej struct ifnet *ifp; 1449 1.2.2.2 thorpej struct ip6_moptions *im6o = *im6op; 1450 1.2.2.2 thorpej struct route_in6 ro; 1451 1.2.2.2 thorpej struct sockaddr_in6 *dst; 1452 1.2.2.2 thorpej struct in6_multi_mship *imm; 1453 1.2.2.2 thorpej struct proc *p = curproc; /* XXX */ 1454 1.2.2.2 thorpej 1455 1.2.2.2 thorpej if (im6o == NULL) { 1456 1.2.2.2 thorpej /* 1457 1.2.2.2 thorpej * No multicast option buffer attached to the pcb; 1458 1.2.2.2 thorpej * allocate one and initialize to default values. 1459 1.2.2.2 thorpej */ 1460 1.2.2.2 thorpej im6o = (struct ip6_moptions *) 1461 1.2.2.2 thorpej malloc(sizeof(*im6o), M_IPMOPTS, M_WAITOK); 1462 1.2.2.2 thorpej 1463 1.2.2.2 thorpej if (im6o == NULL) 1464 1.2.2.2 thorpej return(ENOBUFS); 1465 1.2.2.2 thorpej *im6op = im6o; 1466 1.2.2.2 thorpej im6o->im6o_multicast_ifp = NULL; 1467 1.2.2.2 thorpej im6o->im6o_multicast_hlim = ip6_defmcasthlim; 1468 1.2.2.2 thorpej im6o->im6o_multicast_loop = IPV6_DEFAULT_MULTICAST_LOOP; 1469 1.2.2.2 thorpej LIST_INIT(&im6o->im6o_memberships); 1470 1.2.2.2 thorpej } 1471 1.2.2.2 thorpej 1472 1.2.2.2 thorpej switch (optname) { 1473 1.2.2.2 thorpej 1474 1.2.2.2 thorpej case IPV6_MULTICAST_IF: 1475 1.2.2.2 thorpej /* 1476 1.2.2.2 thorpej * Select the interface for outgoing multicast packets. 1477 1.2.2.2 thorpej */ 1478 1.2.2.2 thorpej if (m == NULL || m->m_len != sizeof(u_int)) { 1479 1.2.2.2 thorpej error = EINVAL; 1480 1.2.2.2 thorpej break; 1481 1.2.2.2 thorpej } 1482 1.2.2.2 thorpej ifindex = *(mtod(m, u_int *)); 1483 1.2.2.2 thorpej if (ifindex < 0 || if_index < ifindex) { 1484 1.2.2.2 thorpej error = ENXIO; /* XXX EINVAL? */ 1485 1.2.2.2 thorpej break; 1486 1.2.2.2 thorpej } 1487 1.2.2.2 thorpej ifp = ifindex2ifnet[ifindex]; 1488 1.2.2.2 thorpej if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) { 1489 1.2.2.2 thorpej error = EADDRNOTAVAIL; 1490 1.2.2.2 thorpej break; 1491 1.2.2.2 thorpej } 1492 1.2.2.2 thorpej im6o->im6o_multicast_ifp = ifp; 1493 1.2.2.2 thorpej break; 1494 1.2.2.2 thorpej 1495 1.2.2.2 thorpej case IPV6_MULTICAST_HOPS: 1496 1.2.2.2 thorpej { 1497 1.2.2.2 thorpej /* 1498 1.2.2.2 thorpej * Set the IP6 hoplimit for outgoing multicast packets. 1499 1.2.2.2 thorpej */ 1500 1.2.2.2 thorpej int optval; 1501 1.2.2.2 thorpej if (m == NULL || m->m_len != sizeof(int)) { 1502 1.2.2.2 thorpej error = EINVAL; 1503 1.2.2.2 thorpej break; 1504 1.2.2.2 thorpej } 1505 1.2.2.2 thorpej optval = *(mtod(m, u_int *)); 1506 1.2.2.2 thorpej if (optval < -1 || optval >= 256) 1507 1.2.2.2 thorpej error = EINVAL; 1508 1.2.2.2 thorpej else if (optval == -1) 1509 1.2.2.2 thorpej im6o->im6o_multicast_hlim = ip6_defmcasthlim; 1510 1.2.2.2 thorpej else 1511 1.2.2.2 thorpej im6o->im6o_multicast_hlim = optval; 1512 1.2.2.2 thorpej break; 1513 1.2.2.2 thorpej } 1514 1.2.2.2 thorpej 1515 1.2.2.2 thorpej case IPV6_MULTICAST_LOOP: 1516 1.2.2.2 thorpej /* 1517 1.2.2.2 thorpej * Set the loopback flag for outgoing multicast packets. 1518 1.2.2.2 thorpej * Must be zero or one. 1519 1.2.2.2 thorpej */ 1520 1.2.2.2 thorpej if (m == NULL || m->m_len != sizeof(u_int) || 1521 1.2.2.2 thorpej (loop = *(mtod(m, u_int *))) > 1) { 1522 1.2.2.2 thorpej error = EINVAL; 1523 1.2.2.2 thorpej break; 1524 1.2.2.2 thorpej } 1525 1.2.2.2 thorpej im6o->im6o_multicast_loop = loop; 1526 1.2.2.2 thorpej break; 1527 1.2.2.2 thorpej 1528 1.2.2.2 thorpej case IPV6_JOIN_GROUP: 1529 1.2.2.2 thorpej /* 1530 1.2.2.2 thorpej * Add a multicast group membership. 1531 1.2.2.2 thorpej * Group must be a valid IP6 multicast address. 1532 1.2.2.2 thorpej */ 1533 1.2.2.2 thorpej if (m == NULL || m->m_len != sizeof(struct ipv6_mreq)) { 1534 1.2.2.2 thorpej error = EINVAL; 1535 1.2.2.2 thorpej break; 1536 1.2.2.2 thorpej } 1537 1.2.2.2 thorpej mreq = mtod(m, struct ipv6_mreq *); 1538 1.2.2.2 thorpej if (IN6_IS_ADDR_ANY(&mreq->ipv6mr_multiaddr)) { 1539 1.2.2.2 thorpej /* 1540 1.2.2.2 thorpej * We use the unspecified address to specify to accept 1541 1.2.2.2 thorpej * all multicast addresses. Only super user is allowed 1542 1.2.2.2 thorpej * to do this. 1543 1.2.2.2 thorpej */ 1544 1.2.2.2 thorpej if (suser(p->p_ucred, &p->p_acflag)) { 1545 1.2.2.2 thorpej error = EACCES; 1546 1.2.2.2 thorpej break; 1547 1.2.2.2 thorpej } 1548 1.2.2.2 thorpej } else if (!IN6_IS_ADDR_MULTICAST(&mreq->ipv6mr_multiaddr)) { 1549 1.2.2.2 thorpej error = EINVAL; 1550 1.2.2.2 thorpej break; 1551 1.2.2.2 thorpej } 1552 1.2.2.2 thorpej 1553 1.2.2.2 thorpej /* 1554 1.2.2.2 thorpej * If the interface is specified, validate it. 1555 1.2.2.2 thorpej */ 1556 1.2.2.2 thorpej if (mreq->ipv6mr_interface < 0 1557 1.2.2.2 thorpej || if_index < mreq->ipv6mr_interface) { 1558 1.2.2.2 thorpej error = ENXIO; /* XXX EINVAL? */ 1559 1.2.2.2 thorpej break; 1560 1.2.2.2 thorpej } 1561 1.2.2.2 thorpej /* 1562 1.2.2.2 thorpej * If no interface was explicitly specified, choose an 1563 1.2.2.2 thorpej * appropriate one according to the given multicast address. 1564 1.2.2.2 thorpej */ 1565 1.2.2.2 thorpej if (mreq->ipv6mr_interface == 0) { 1566 1.2.2.2 thorpej /* 1567 1.2.2.2 thorpej * If the multicast address is in node-local scope, 1568 1.2.2.2 thorpej * the interface should be a loopback interface. 1569 1.2.2.2 thorpej * Otherwise, look up the routing table for the 1570 1.2.2.2 thorpej * address, and choose the outgoing interface. 1571 1.2.2.2 thorpej * XXX: is it a good approach? 1572 1.2.2.2 thorpej */ 1573 1.2.2.2 thorpej if (IN6_IS_ADDR_MC_NODELOCAL(&mreq->ipv6mr_multiaddr)) { 1574 1.2.2.2 thorpej #ifdef __bsdi__ 1575 1.2.2.2 thorpej ifp = &loif; 1576 1.2.2.2 thorpej #else 1577 1.2.2.2 thorpej ifp = &loif[0]; 1578 1.2.2.2 thorpej #endif 1579 1.2.2.2 thorpej } 1580 1.2.2.2 thorpej else { 1581 1.2.2.2 thorpej ro.ro_rt = NULL; 1582 1.2.2.2 thorpej dst = (struct sockaddr_in6 *)&ro.ro_dst; 1583 1.2.2.2 thorpej bzero(dst, sizeof(*dst)); 1584 1.2.2.2 thorpej dst->sin6_len = sizeof(struct sockaddr_in6); 1585 1.2.2.2 thorpej dst->sin6_family = AF_INET6; 1586 1.2.2.2 thorpej dst->sin6_addr = mreq->ipv6mr_multiaddr; 1587 1.2.2.2 thorpej rtalloc((struct route *)&ro); 1588 1.2.2.2 thorpej if (ro.ro_rt == NULL) { 1589 1.2.2.2 thorpej error = EADDRNOTAVAIL; 1590 1.2.2.2 thorpej break; 1591 1.2.2.2 thorpej } 1592 1.2.2.2 thorpej ifp = ro.ro_rt->rt_ifp; 1593 1.2.2.2 thorpej rtfree(ro.ro_rt); 1594 1.2.2.2 thorpej } 1595 1.2.2.2 thorpej } else 1596 1.2.2.2 thorpej ifp = ifindex2ifnet[mreq->ipv6mr_interface]; 1597 1.2.2.2 thorpej 1598 1.2.2.2 thorpej /* 1599 1.2.2.2 thorpej * See if we found an interface, and confirm that it 1600 1.2.2.2 thorpej * supports multicast 1601 1.2.2.2 thorpej */ 1602 1.2.2.2 thorpej if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) { 1603 1.2.2.2 thorpej error = EADDRNOTAVAIL; 1604 1.2.2.2 thorpej break; 1605 1.2.2.2 thorpej } 1606 1.2.2.2 thorpej /* 1607 1.2.2.2 thorpej * Put interface index into the multicast address, 1608 1.2.2.2 thorpej * if the address has link-local scope. 1609 1.2.2.2 thorpej */ 1610 1.2.2.2 thorpej if (IN6_IS_ADDR_MC_LINKLOCAL(&mreq->ipv6mr_multiaddr)) { 1611 1.2.2.2 thorpej mreq->ipv6mr_multiaddr.s6_addr16[1] 1612 1.2.2.2 thorpej = htons(mreq->ipv6mr_interface); 1613 1.2.2.2 thorpej } 1614 1.2.2.2 thorpej /* 1615 1.2.2.2 thorpej * See if the membership already exists. 1616 1.2.2.2 thorpej */ 1617 1.2.2.2 thorpej for (imm = im6o->im6o_memberships.lh_first; 1618 1.2.2.2 thorpej imm != NULL; imm = imm->i6mm_chain.le_next) 1619 1.2.2.2 thorpej if (imm->i6mm_maddr->in6m_ifp == ifp && 1620 1.2.2.2 thorpej IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr, 1621 1.2.2.2 thorpej &mreq->ipv6mr_multiaddr)) 1622 1.2.2.2 thorpej break; 1623 1.2.2.2 thorpej if (imm != NULL) { 1624 1.2.2.2 thorpej error = EADDRINUSE; 1625 1.2.2.2 thorpej break; 1626 1.2.2.2 thorpej } 1627 1.2.2.2 thorpej /* 1628 1.2.2.2 thorpej * Everything looks good; add a new record to the multicast 1629 1.2.2.2 thorpej * address list for the given interface. 1630 1.2.2.2 thorpej */ 1631 1.2.2.2 thorpej imm = malloc(sizeof(*imm), M_IPMADDR, M_WAITOK); 1632 1.2.2.2 thorpej if (imm == NULL) { 1633 1.2.2.2 thorpej error = ENOBUFS; 1634 1.2.2.2 thorpej break; 1635 1.2.2.2 thorpej } 1636 1.2.2.2 thorpej if ((imm->i6mm_maddr = 1637 1.2.2.2 thorpej in6_addmulti(&mreq->ipv6mr_multiaddr, ifp, &error)) == NULL) { 1638 1.2.2.2 thorpej free(imm, M_IPMADDR); 1639 1.2.2.2 thorpej break; 1640 1.2.2.2 thorpej } 1641 1.2.2.2 thorpej LIST_INSERT_HEAD(&im6o->im6o_memberships, imm, i6mm_chain); 1642 1.2.2.2 thorpej break; 1643 1.2.2.2 thorpej 1644 1.2.2.2 thorpej case IPV6_LEAVE_GROUP: 1645 1.2.2.2 thorpej /* 1646 1.2.2.2 thorpej * Drop a multicast group membership. 1647 1.2.2.2 thorpej * Group must be a valid IP6 multicast address. 1648 1.2.2.2 thorpej */ 1649 1.2.2.2 thorpej if (m == NULL || m->m_len != sizeof(struct ipv6_mreq)) { 1650 1.2.2.2 thorpej error = EINVAL; 1651 1.2.2.2 thorpej break; 1652 1.2.2.2 thorpej } 1653 1.2.2.2 thorpej mreq = mtod(m, struct ipv6_mreq *); 1654 1.2.2.2 thorpej if (IN6_IS_ADDR_ANY(&mreq->ipv6mr_multiaddr)) { 1655 1.2.2.2 thorpej if (suser(p->p_ucred, &p->p_acflag)) { 1656 1.2.2.2 thorpej error = EACCES; 1657 1.2.2.2 thorpej break; 1658 1.2.2.2 thorpej } 1659 1.2.2.2 thorpej } else if (!IN6_IS_ADDR_MULTICAST(&mreq->ipv6mr_multiaddr)) { 1660 1.2.2.2 thorpej error = EINVAL; 1661 1.2.2.2 thorpej break; 1662 1.2.2.2 thorpej } 1663 1.2.2.2 thorpej /* 1664 1.2.2.2 thorpej * If an interface address was specified, get a pointer 1665 1.2.2.2 thorpej * to its ifnet structure. 1666 1.2.2.2 thorpej */ 1667 1.2.2.2 thorpej if (mreq->ipv6mr_interface < 0 1668 1.2.2.2 thorpej || if_index < mreq->ipv6mr_interface) { 1669 1.2.2.2 thorpej error = ENXIO; /* XXX EINVAL? */ 1670 1.2.2.2 thorpej break; 1671 1.2.2.2 thorpej } 1672 1.2.2.2 thorpej ifp = ifindex2ifnet[mreq->ipv6mr_interface]; 1673 1.2.2.2 thorpej /* 1674 1.2.2.2 thorpej * Put interface index into the multicast address, 1675 1.2.2.2 thorpej * if the address has link-local scope. 1676 1.2.2.2 thorpej */ 1677 1.2.2.2 thorpej if (IN6_IS_ADDR_MC_LINKLOCAL(&mreq->ipv6mr_multiaddr)) { 1678 1.2.2.2 thorpej mreq->ipv6mr_multiaddr.s6_addr16[1] 1679 1.2.2.2 thorpej = htons(mreq->ipv6mr_interface); 1680 1.2.2.2 thorpej } 1681 1.2.2.2 thorpej /* 1682 1.2.2.2 thorpej * Find the membership in the membership list. 1683 1.2.2.2 thorpej */ 1684 1.2.2.2 thorpej for (imm = im6o->im6o_memberships.lh_first; 1685 1.2.2.2 thorpej imm != NULL; imm = imm->i6mm_chain.le_next) { 1686 1.2.2.2 thorpej if ((ifp == NULL || 1687 1.2.2.2 thorpej imm->i6mm_maddr->in6m_ifp == ifp) && 1688 1.2.2.2 thorpej IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr, 1689 1.2.2.2 thorpej &mreq->ipv6mr_multiaddr)) 1690 1.2.2.2 thorpej break; 1691 1.2.2.2 thorpej } 1692 1.2.2.2 thorpej if (imm == NULL) { 1693 1.2.2.2 thorpej /* Unable to resolve interface */ 1694 1.2.2.2 thorpej error = EADDRNOTAVAIL; 1695 1.2.2.2 thorpej break; 1696 1.2.2.2 thorpej } 1697 1.2.2.2 thorpej /* 1698 1.2.2.2 thorpej * Give up the multicast address record to which the 1699 1.2.2.2 thorpej * membership points. 1700 1.2.2.2 thorpej */ 1701 1.2.2.2 thorpej LIST_REMOVE(imm, i6mm_chain); 1702 1.2.2.2 thorpej in6_delmulti(imm->i6mm_maddr); 1703 1.2.2.2 thorpej free(imm, M_IPMADDR); 1704 1.2.2.2 thorpej break; 1705 1.2.2.2 thorpej 1706 1.2.2.2 thorpej default: 1707 1.2.2.2 thorpej error = EOPNOTSUPP; 1708 1.2.2.2 thorpej break; 1709 1.2.2.2 thorpej } 1710 1.2.2.2 thorpej 1711 1.2.2.2 thorpej /* 1712 1.2.2.2 thorpej * If all options have default values, no need to keep the mbuf. 1713 1.2.2.2 thorpej */ 1714 1.2.2.2 thorpej if (im6o->im6o_multicast_ifp == NULL && 1715 1.2.2.2 thorpej im6o->im6o_multicast_hlim == ip6_defmcasthlim && 1716 1.2.2.2 thorpej im6o->im6o_multicast_loop == IPV6_DEFAULT_MULTICAST_LOOP && 1717 1.2.2.2 thorpej im6o->im6o_memberships.lh_first == NULL) { 1718 1.2.2.2 thorpej free(*im6op, M_IPMOPTS); 1719 1.2.2.2 thorpej *im6op = NULL; 1720 1.2.2.2 thorpej } 1721 1.2.2.2 thorpej 1722 1.2.2.2 thorpej return(error); 1723 1.2.2.2 thorpej } 1724 1.2.2.2 thorpej 1725 1.2.2.2 thorpej /* 1726 1.2.2.2 thorpej * Return the IP6 multicast options in response to user getsockopt(). 1727 1.2.2.2 thorpej */ 1728 1.2.2.2 thorpej static int 1729 1.2.2.2 thorpej ip6_getmoptions(optname, im6o, mp) 1730 1.2.2.2 thorpej int optname; 1731 1.2.2.2 thorpej register struct ip6_moptions *im6o; 1732 1.2.2.2 thorpej register struct mbuf **mp; 1733 1.2.2.2 thorpej { 1734 1.2.2.2 thorpej u_int *hlim, *loop, *ifindex; 1735 1.2.2.2 thorpej 1736 1.2.2.2 thorpej *mp = m_get(M_WAIT, MT_SOOPTS); 1737 1.2.2.2 thorpej 1738 1.2.2.2 thorpej switch (optname) { 1739 1.2.2.2 thorpej 1740 1.2.2.2 thorpej case IPV6_MULTICAST_IF: 1741 1.2.2.2 thorpej ifindex = mtod(*mp, u_int *); 1742 1.2.2.2 thorpej (*mp)->m_len = sizeof(u_int); 1743 1.2.2.2 thorpej if (im6o == NULL || im6o->im6o_multicast_ifp == NULL) 1744 1.2.2.2 thorpej *ifindex = 0; 1745 1.2.2.2 thorpej else 1746 1.2.2.2 thorpej *ifindex = im6o->im6o_multicast_ifp->if_index; 1747 1.2.2.2 thorpej return(0); 1748 1.2.2.2 thorpej 1749 1.2.2.2 thorpej case IPV6_MULTICAST_HOPS: 1750 1.2.2.2 thorpej hlim = mtod(*mp, u_int *); 1751 1.2.2.2 thorpej (*mp)->m_len = sizeof(u_int); 1752 1.2.2.2 thorpej if (im6o == NULL) 1753 1.2.2.2 thorpej *hlim = ip6_defmcasthlim; 1754 1.2.2.2 thorpej else 1755 1.2.2.2 thorpej *hlim = im6o->im6o_multicast_hlim; 1756 1.2.2.2 thorpej return(0); 1757 1.2.2.2 thorpej 1758 1.2.2.2 thorpej case IPV6_MULTICAST_LOOP: 1759 1.2.2.2 thorpej loop = mtod(*mp, u_int *); 1760 1.2.2.2 thorpej (*mp)->m_len = sizeof(u_int); 1761 1.2.2.2 thorpej if (im6o == NULL) 1762 1.2.2.2 thorpej *loop = ip6_defmcasthlim; 1763 1.2.2.2 thorpej else 1764 1.2.2.2 thorpej *loop = im6o->im6o_multicast_loop; 1765 1.2.2.2 thorpej return(0); 1766 1.2.2.2 thorpej 1767 1.2.2.2 thorpej default: 1768 1.2.2.2 thorpej return(EOPNOTSUPP); 1769 1.2.2.2 thorpej } 1770 1.2.2.2 thorpej } 1771 1.2.2.2 thorpej 1772 1.2.2.2 thorpej /* 1773 1.2.2.2 thorpej * Discard the IP6 multicast options. 1774 1.2.2.2 thorpej */ 1775 1.2.2.2 thorpej void 1776 1.2.2.2 thorpej ip6_freemoptions(im6o) 1777 1.2.2.2 thorpej register struct ip6_moptions *im6o; 1778 1.2.2.2 thorpej { 1779 1.2.2.2 thorpej struct in6_multi_mship *imm; 1780 1.2.2.2 thorpej 1781 1.2.2.2 thorpej if (im6o == NULL) 1782 1.2.2.2 thorpej return; 1783 1.2.2.2 thorpej 1784 1.2.2.2 thorpej while ((imm = im6o->im6o_memberships.lh_first) != NULL) { 1785 1.2.2.2 thorpej LIST_REMOVE(imm, i6mm_chain); 1786 1.2.2.2 thorpej if (imm->i6mm_maddr) 1787 1.2.2.2 thorpej in6_delmulti(imm->i6mm_maddr); 1788 1.2.2.2 thorpej free(imm, M_IPMADDR); 1789 1.2.2.2 thorpej } 1790 1.2.2.2 thorpej free(im6o, M_IPMOPTS); 1791 1.2.2.2 thorpej } 1792 1.2.2.2 thorpej 1793 1.2.2.2 thorpej /* 1794 1.2.2.2 thorpej * Set IPv6 outgoing packet options based on advanced API. 1795 1.2.2.2 thorpej */ 1796 1.2.2.2 thorpej int 1797 1.2.2.2 thorpej ip6_setpktoptions(control, opt, priv) 1798 1.2.2.2 thorpej struct mbuf *control; 1799 1.2.2.2 thorpej struct ip6_pktopts *opt; 1800 1.2.2.2 thorpej int priv; 1801 1.2.2.2 thorpej { 1802 1.2.2.2 thorpej register struct cmsghdr *cm = 0; 1803 1.2.2.2 thorpej 1804 1.2.2.2 thorpej if (control == 0 || opt == 0) 1805 1.2.2.2 thorpej return(EINVAL); 1806 1.2.2.2 thorpej 1807 1.2.2.2 thorpej bzero(opt, sizeof(*opt)); 1808 1.2.2.2 thorpej opt->ip6po_hlim = -1; /* -1 means to use default hop limit */ 1809 1.2.2.2 thorpej 1810 1.2.2.2 thorpej /* 1811 1.2.2.2 thorpej * XXX: Currently, we assume all the optional information is stored 1812 1.2.2.2 thorpej * in a single mbuf. 1813 1.2.2.2 thorpej */ 1814 1.2.2.2 thorpej if (control->m_next) 1815 1.2.2.2 thorpej return(EINVAL); 1816 1.2.2.2 thorpej 1817 1.2.2.2 thorpej opt->ip6po_m = control; 1818 1.2.2.2 thorpej 1819 1.2.2.2 thorpej for (; control->m_len; control->m_data += CMSG_ALIGN(cm->cmsg_len), 1820 1.2.2.2 thorpej control->m_len -= CMSG_ALIGN(cm->cmsg_len)) { 1821 1.2.2.2 thorpej cm = mtod(control, struct cmsghdr *); 1822 1.2.2.2 thorpej if (cm->cmsg_len == 0 || cm->cmsg_len > control->m_len) 1823 1.2.2.2 thorpej return(EINVAL); 1824 1.2.2.2 thorpej if (cm->cmsg_level != IPPROTO_IPV6) 1825 1.2.2.2 thorpej continue; 1826 1.2.2.2 thorpej 1827 1.2.2.2 thorpej switch(cm->cmsg_type) { 1828 1.2.2.2 thorpej case IPV6_PKTINFO: 1829 1.2.2.2 thorpej if (cm->cmsg_len != CMSG_LEN(sizeof(struct in6_pktinfo))) 1830 1.2.2.2 thorpej return(EINVAL); 1831 1.2.2.2 thorpej opt->ip6po_pktinfo = (struct in6_pktinfo *)CMSG_DATA(cm); 1832 1.2.2.2 thorpej if (opt->ip6po_pktinfo->ipi6_ifindex && 1833 1.2.2.2 thorpej IN6_IS_ADDR_LINKLOCAL(&opt->ip6po_pktinfo->ipi6_addr)) 1834 1.2.2.2 thorpej opt->ip6po_pktinfo->ipi6_addr.s6_addr16[1] = 1835 1.2.2.2 thorpej htons(opt->ip6po_pktinfo->ipi6_ifindex); 1836 1.2.2.2 thorpej 1837 1.2.2.2 thorpej if (opt->ip6po_pktinfo->ipi6_ifindex > if_index 1838 1.2.2.2 thorpej || opt->ip6po_pktinfo->ipi6_ifindex < 0) { 1839 1.2.2.2 thorpej return(ENXIO); 1840 1.2.2.2 thorpej } 1841 1.2.2.2 thorpej 1842 1.2.2.2 thorpej if (!IN6_IS_ADDR_ANY(&opt->ip6po_pktinfo->ipi6_addr)) { 1843 1.2.2.2 thorpej struct ifaddr *ia; 1844 1.2.2.2 thorpej struct sockaddr_in6 sin6; 1845 1.2.2.2 thorpej 1846 1.2.2.2 thorpej bzero(&sin6, sizeof(sin6)); 1847 1.2.2.2 thorpej sin6.sin6_len = sizeof(sin6); 1848 1.2.2.2 thorpej sin6.sin6_family = AF_INET6; 1849 1.2.2.2 thorpej sin6.sin6_addr = 1850 1.2.2.2 thorpej opt->ip6po_pktinfo->ipi6_addr; 1851 1.2.2.2 thorpej ia = ifa_ifwithaddr(sin6tosa(&sin6)); 1852 1.2.2.2 thorpej if (ia == NULL || 1853 1.2.2.2 thorpej (opt->ip6po_pktinfo->ipi6_ifindex && 1854 1.2.2.2 thorpej (ia->ifa_ifp->if_index != 1855 1.2.2.2 thorpej opt->ip6po_pktinfo->ipi6_ifindex))) { 1856 1.2.2.2 thorpej return(EADDRNOTAVAIL); 1857 1.2.2.2 thorpej } 1858 1.2.2.2 thorpej /* 1859 1.2.2.2 thorpej * Check if the requested source address is 1860 1.2.2.2 thorpej * indeed a unicast address assigned to the 1861 1.2.2.2 thorpej * node. 1862 1.2.2.2 thorpej */ 1863 1.2.2.2 thorpej if (IN6_IS_ADDR_MULTICAST(&opt->ip6po_pktinfo->ipi6_addr)) 1864 1.2.2.2 thorpej return(EADDRNOTAVAIL); 1865 1.2.2.2 thorpej } 1866 1.2.2.2 thorpej break; 1867 1.2.2.2 thorpej 1868 1.2.2.2 thorpej case IPV6_HOPLIMIT: 1869 1.2.2.2 thorpej if (cm->cmsg_len != CMSG_LEN(sizeof(int))) 1870 1.2.2.2 thorpej return(EINVAL); 1871 1.2.2.2 thorpej 1872 1.2.2.2 thorpej opt->ip6po_hlim = *(int *)CMSG_DATA(cm); 1873 1.2.2.2 thorpej if (opt->ip6po_hlim < -1 || opt->ip6po_hlim > 255) 1874 1.2.2.2 thorpej return(EINVAL); 1875 1.2.2.2 thorpej break; 1876 1.2.2.2 thorpej 1877 1.2.2.2 thorpej case IPV6_NEXTHOP: 1878 1.2.2.2 thorpej if (!priv) 1879 1.2.2.2 thorpej return(EPERM); 1880 1.2.2.2 thorpej if (cm->cmsg_len < sizeof(u_char) || 1881 1.2.2.2 thorpej cm->cmsg_len < CMSG_LEN(*CMSG_DATA(cm))) 1882 1.2.2.2 thorpej return(EINVAL); 1883 1.2.2.2 thorpej 1884 1.2.2.2 thorpej opt->ip6po_nexthop = (struct sockaddr *)CMSG_DATA(cm); 1885 1.2.2.2 thorpej 1886 1.2.2.2 thorpej break; 1887 1.2.2.2 thorpej 1888 1.2.2.2 thorpej case IPV6_HOPOPTS: 1889 1.2.2.2 thorpej if (cm->cmsg_len < CMSG_LEN(sizeof(struct ip6_hbh))) 1890 1.2.2.2 thorpej return(EINVAL); 1891 1.2.2.2 thorpej opt->ip6po_hbh = (struct ip6_hbh *)CMSG_DATA(cm); 1892 1.2.2.2 thorpej if (cm->cmsg_len != 1893 1.2.2.2 thorpej CMSG_LEN((opt->ip6po_hbh->ip6h_len + 1) << 3)) 1894 1.2.2.2 thorpej return(EINVAL); 1895 1.2.2.2 thorpej break; 1896 1.2.2.2 thorpej 1897 1.2.2.2 thorpej case IPV6_DSTOPTS: 1898 1.2.2.2 thorpej if (cm->cmsg_len < CMSG_LEN(sizeof(struct ip6_dest))) 1899 1.2.2.2 thorpej return(EINVAL); 1900 1.2.2.2 thorpej 1901 1.2.2.2 thorpej /* 1902 1.2.2.2 thorpej * If there is no routing header yet, the destination 1903 1.2.2.2 thorpej * options header should be put on the 1st part. 1904 1.2.2.2 thorpej * Otherwise, the header should be on the 2nd part. 1905 1.2.2.2 thorpej * (See RFC 2460, section 4.1) 1906 1.2.2.2 thorpej */ 1907 1.2.2.2 thorpej if (opt->ip6po_rthdr == NULL) { 1908 1.2.2.2 thorpej opt->ip6po_dest1 = 1909 1.2.2.2 thorpej (struct ip6_dest *)CMSG_DATA(cm); 1910 1.2.2.2 thorpej if (cm->cmsg_len != 1911 1.2.2.2 thorpej CMSG_LEN((opt->ip6po_dest1->ip6d_len + 1) 1912 1.2.2.2 thorpej << 3)) 1913 1.2.2.2 thorpej return(EINVAL); 1914 1.2.2.2 thorpej } 1915 1.2.2.2 thorpej else { 1916 1.2.2.2 thorpej opt->ip6po_dest2 = 1917 1.2.2.2 thorpej (struct ip6_dest *)CMSG_DATA(cm); 1918 1.2.2.2 thorpej if (cm->cmsg_len != 1919 1.2.2.2 thorpej CMSG_LEN((opt->ip6po_dest2->ip6d_len + 1) 1920 1.2.2.2 thorpej << 3)) 1921 1.2.2.2 thorpej return(EINVAL); 1922 1.2.2.2 thorpej } 1923 1.2.2.2 thorpej break; 1924 1.2.2.2 thorpej 1925 1.2.2.2 thorpej case IPV6_RTHDR: 1926 1.2.2.2 thorpej if (cm->cmsg_len < CMSG_LEN(sizeof(struct ip6_rthdr))) 1927 1.2.2.2 thorpej return(EINVAL); 1928 1.2.2.2 thorpej opt->ip6po_rthdr = (struct ip6_rthdr *)CMSG_DATA(cm); 1929 1.2.2.2 thorpej if (cm->cmsg_len != 1930 1.2.2.2 thorpej CMSG_LEN((opt->ip6po_rthdr->ip6r_len + 1) << 3)) 1931 1.2.2.2 thorpej return(EINVAL); 1932 1.2.2.2 thorpej switch(opt->ip6po_rthdr->ip6r_type) { 1933 1.2.2.2 thorpej case IPV6_RTHDR_TYPE_0: 1934 1.2.2.2 thorpej if (opt->ip6po_rthdr->ip6r_segleft == 0) 1935 1.2.2.2 thorpej return(EINVAL); 1936 1.2.2.2 thorpej break; 1937 1.2.2.2 thorpej default: 1938 1.2.2.2 thorpej return(EINVAL); 1939 1.2.2.2 thorpej } 1940 1.2.2.2 thorpej break; 1941 1.2.2.2 thorpej 1942 1.2.2.2 thorpej default: 1943 1.2.2.2 thorpej return(ENOPROTOOPT); 1944 1.2.2.2 thorpej } 1945 1.2.2.2 thorpej } 1946 1.2.2.2 thorpej 1947 1.2.2.2 thorpej return(0); 1948 1.2.2.2 thorpej } 1949 1.2.2.2 thorpej 1950 1.2.2.2 thorpej /* 1951 1.2.2.2 thorpej * Routine called from ip6_output() to loop back a copy of an IP6 multicast 1952 1.2.2.2 thorpej * packet to the input queue of a specified interface. Note that this 1953 1.2.2.2 thorpej * calls the output routine of the loopback "driver", but with an interface 1954 1.2.2.2 thorpej * pointer that might NOT be &loif -- easier than replicating that code here. 1955 1.2.2.2 thorpej */ 1956 1.2.2.2 thorpej void 1957 1.2.2.2 thorpej ip6_mloopback(ifp, m, dst) 1958 1.2.2.2 thorpej struct ifnet *ifp; 1959 1.2.2.2 thorpej register struct mbuf *m; 1960 1.2.2.2 thorpej register struct sockaddr_in6 *dst; 1961 1.2.2.2 thorpej { 1962 1.2.2.2 thorpej struct mbuf *copym; 1963 1.2.2.2 thorpej 1964 1.2.2.2 thorpej copym = m_copy(m, 0, M_COPYALL); 1965 1.2.2.2 thorpej if (copym != NULL) 1966 1.2.2.2 thorpej (void)looutput(ifp, copym, (struct sockaddr *)dst, NULL); 1967 1.2.2.2 thorpej } 1968 1.2.2.2 thorpej 1969 1.2.2.2 thorpej /* 1970 1.2.2.2 thorpej * Chop IPv6 header off from the payload. 1971 1.2.2.2 thorpej */ 1972 1.2.2.2 thorpej static int 1973 1.2.2.2 thorpej ip6_splithdr(m, exthdrs) 1974 1.2.2.2 thorpej struct mbuf *m; 1975 1.2.2.2 thorpej struct ip6_exthdrs *exthdrs; 1976 1.2.2.2 thorpej { 1977 1.2.2.2 thorpej struct mbuf *mh; 1978 1.2.2.2 thorpej struct ip6_hdr *ip6; 1979 1.2.2.2 thorpej 1980 1.2.2.2 thorpej ip6 = mtod(m, struct ip6_hdr *); 1981 1.2.2.2 thorpej if (m->m_len > sizeof(*ip6)) { 1982 1.2.2.2 thorpej MGETHDR(mh, M_DONTWAIT, MT_HEADER); 1983 1.2.2.2 thorpej if (mh == 0) { 1984 1.2.2.2 thorpej m_freem(m); 1985 1.2.2.2 thorpej return ENOBUFS; 1986 1.2.2.2 thorpej } 1987 1.2.2.2 thorpej M_COPY_PKTHDR(mh, m); 1988 1.2.2.2 thorpej MH_ALIGN(mh, sizeof(*ip6)); 1989 1.2.2.2 thorpej m->m_flags &= ~M_PKTHDR; 1990 1.2.2.2 thorpej m->m_len -= sizeof(*ip6); 1991 1.2.2.2 thorpej m->m_data += sizeof(*ip6); 1992 1.2.2.2 thorpej mh->m_next = m; 1993 1.2.2.2 thorpej m = mh; 1994 1.2.2.2 thorpej m->m_len = sizeof(*ip6); 1995 1.2.2.2 thorpej bcopy((caddr_t)ip6, mtod(m, caddr_t), sizeof(*ip6)); 1996 1.2.2.2 thorpej } 1997 1.2.2.2 thorpej exthdrs->ip6e_ip6 = m; 1998 1.2.2.2 thorpej return 0; 1999 1.2.2.2 thorpej } 2000 1.2.2.2 thorpej 2001 1.2.2.2 thorpej /* 2002 1.2.2.2 thorpej * Compute IPv6 extension header length. 2003 1.2.2.2 thorpej */ 2004 1.2.2.2 thorpej int 2005 1.2.2.2 thorpej ip6_optlen(in6p) 2006 1.2.2.2 thorpej struct in6pcb *in6p; 2007 1.2.2.2 thorpej { 2008 1.2.2.2 thorpej int len; 2009 1.2.2.2 thorpej 2010 1.2.2.2 thorpej if (!in6p->in6p_outputopts) 2011 1.2.2.2 thorpej return 0; 2012 1.2.2.2 thorpej 2013 1.2.2.2 thorpej len = 0; 2014 1.2.2.2 thorpej #define elen(x) \ 2015 1.2.2.2 thorpej (((struct ip6_ext *)(x)) ? (((struct ip6_ext *)(x))->ip6e_len + 1) << 3 : 0) 2016 1.2.2.2 thorpej 2017 1.2.2.2 thorpej len += elen(in6p->in6p_outputopts->ip6po_hbh); 2018 1.2.2.2 thorpej len += elen(in6p->in6p_outputopts->ip6po_dest1); 2019 1.2.2.2 thorpej len += elen(in6p->in6p_outputopts->ip6po_rthdr); 2020 1.2.2.2 thorpej len += elen(in6p->in6p_outputopts->ip6po_dest2); 2021 1.2.2.2 thorpej return len; 2022 1.2.2.2 thorpej #undef elen 2023 1.2.2.2 thorpej } 2024
Indexes created Wed Oct 01 07:09:59 GMT 2025