Home | History | Annotate | Line # | Download | only in netinet6
mld6.c revision 1.83
      1  1.83     ozaki /*	$NetBSD: mld6.c,v 1.83 2017/02/23 07:57:10 ozaki-r Exp $	*/
      2  1.13    itojun /*	$KAME: mld6.c,v 1.25 2001/01/16 14:14:18 itojun Exp $	*/
      3   1.3   thorpej 
      4   1.2    itojun /*
      5   1.2    itojun  * Copyright (C) 1998 WIDE Project.
      6   1.2    itojun  * All rights reserved.
      7  1.13    itojun  *
      8   1.2    itojun  * Redistribution and use in source and binary forms, with or without
      9   1.2    itojun  * modification, are permitted provided that the following conditions
     10   1.2    itojun  * are met:
     11   1.2    itojun  * 1. Redistributions of source code must retain the above copyright
     12   1.2    itojun  *    notice, this list of conditions and the following disclaimer.
     13   1.2    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     14   1.2    itojun  *    notice, this list of conditions and the following disclaimer in the
     15   1.2    itojun  *    documentation and/or other materials provided with the distribution.
     16   1.2    itojun  * 3. Neither the name of the project nor the names of its contributors
     17   1.2    itojun  *    may be used to endorse or promote products derived from this software
     18   1.2    itojun  *    without specific prior written permission.
     19  1.13    itojun  *
     20   1.2    itojun  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     21   1.2    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     22   1.2    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     23   1.2    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     24   1.2    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     25   1.2    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     26   1.2    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     27   1.2    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     28   1.2    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     29   1.2    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     30   1.2    itojun  * SUCH DAMAGE.
     31   1.2    itojun  */
     32   1.2    itojun 
     33   1.2    itojun /*
     34   1.2    itojun  * Copyright (c) 1992, 1993
     35   1.2    itojun  *	The Regents of the University of California.  All rights reserved.
     36   1.2    itojun  *
     37   1.2    itojun  * This code is derived from software contributed to Berkeley by
     38   1.2    itojun  * Stephen Deering of Stanford University.
     39   1.2    itojun  *
     40   1.2    itojun  * Redistribution and use in source and binary forms, with or without
     41   1.2    itojun  * modification, are permitted provided that the following conditions
     42   1.2    itojun  * are met:
     43   1.2    itojun  * 1. Redistributions of source code must retain the above copyright
     44   1.2    itojun  *    notice, this list of conditions and the following disclaimer.
     45   1.2    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     46   1.2    itojun  *    notice, this list of conditions and the following disclaimer in the
     47   1.2    itojun  *    documentation and/or other materials provided with the distribution.
     48  1.23       agc  * 3. Neither the name of the University nor the names of its contributors
     49  1.23       agc  *    may be used to endorse or promote products derived from this software
     50  1.23       agc  *    without specific prior written permission.
     51  1.23       agc  *
     52  1.23       agc  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     53  1.23       agc  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     54  1.23       agc  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     55  1.23       agc  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     56  1.23       agc  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     57  1.23       agc  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     58  1.23       agc  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     59  1.23       agc  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     60  1.23       agc  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     61  1.23       agc  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     62  1.23       agc  * SUCH DAMAGE.
     63  1.23       agc  *
     64  1.23       agc  *	@(#)igmp.c	8.1 (Berkeley) 7/19/93
     65  1.23       agc  */
     66  1.23       agc 
     67  1.23       agc /*
     68  1.23       agc  * Copyright (c) 1988 Stephen Deering.
     69  1.23       agc  *
     70  1.23       agc  * This code is derived from software contributed to Berkeley by
     71  1.23       agc  * Stephen Deering of Stanford University.
     72  1.23       agc  *
     73  1.23       agc  * Redistribution and use in source and binary forms, with or without
     74  1.23       agc  * modification, are permitted provided that the following conditions
     75  1.23       agc  * are met:
     76  1.23       agc  * 1. Redistributions of source code must retain the above copyright
     77  1.23       agc  *    notice, this list of conditions and the following disclaimer.
     78  1.23       agc  * 2. Redistributions in binary form must reproduce the above copyright
     79  1.23       agc  *    notice, this list of conditions and the following disclaimer in the
     80  1.23       agc  *    documentation and/or other materials provided with the distribution.
     81   1.2    itojun  * 3. All advertising materials mentioning features or use of this software
     82   1.2    itojun  *    must display the following acknowledgement:
     83   1.2    itojun  *	This product includes software developed by the University of
     84   1.2    itojun  *	California, Berkeley and its contributors.
     85   1.2    itojun  * 4. Neither the name of the University nor the names of its contributors
     86   1.2    itojun  *    may be used to endorse or promote products derived from this software
     87   1.2    itojun  *    without specific prior written permission.
     88   1.2    itojun  *
     89   1.2    itojun  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     90   1.2    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     91   1.2    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     92   1.2    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     93   1.2    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     94   1.2    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     95   1.2    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     96   1.2    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     97   1.2    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     98   1.2    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     99   1.2    itojun  * SUCH DAMAGE.
    100   1.2    itojun  *
    101   1.2    itojun  *	@(#)igmp.c	8.1 (Berkeley) 7/19/93
    102   1.2    itojun  */
    103  1.16     lukem 
    104  1.16     lukem #include <sys/cdefs.h>
    105  1.83     ozaki __KERNEL_RCSID(0, "$NetBSD: mld6.c,v 1.83 2017/02/23 07:57:10 ozaki-r Exp $");
    106   1.2    itojun 
    107  1.63     pooka #ifdef _KERNEL_OPT
    108   1.2    itojun #include "opt_inet.h"
    109  1.75  knakahar #include "opt_net_mpsafe.h"
    110  1.63     pooka #endif
    111   1.2    itojun 
    112   1.2    itojun #include <sys/param.h>
    113   1.2    itojun #include <sys/systm.h>
    114   1.2    itojun #include <sys/mbuf.h>
    115   1.2    itojun #include <sys/socket.h>
    116  1.45        ad #include <sys/socketvar.h>
    117   1.2    itojun #include <sys/syslog.h>
    118  1.31    rpaulo #include <sys/sysctl.h>
    119  1.31    rpaulo #include <sys/kernel.h>
    120  1.31    rpaulo #include <sys/callout.h>
    121  1.55       tls #include <sys/cprng.h>
    122   1.2    itojun 
    123   1.2    itojun #include <net/if.h>
    124   1.2    itojun 
    125   1.2    itojun #include <netinet/in.h>
    126   1.2    itojun #include <netinet/in_var.h>
    127  1.31    rpaulo #include <netinet6/in6_var.h>
    128  1.10    itojun #include <netinet/ip6.h>
    129   1.2    itojun #include <netinet6/ip6_var.h>
    130  1.29    rpaulo #include <netinet6/scope6_var.h>
    131  1.10    itojun #include <netinet/icmp6.h>
    132  1.44   thorpej #include <netinet6/icmp6_private.h>
    133   1.2    itojun #include <netinet6/mld6_var.h>
    134   1.2    itojun 
    135   1.7    itojun #include <net/net_osdep.h>
    136   1.7    itojun 
    137  1.31    rpaulo 
    138  1.31    rpaulo /*
    139   1.2    itojun  * Protocol constants
    140   1.2    itojun  */
    141   1.2    itojun 
    142   1.2    itojun /*
    143   1.2    itojun  * time between repetitions of a node's initial report of interest in a
    144   1.2    itojun  * multicast address(in seconds)
    145   1.2    itojun  */
    146  1.22    itojun #define MLD_UNSOLICITED_REPORT_INTERVAL	10
    147   1.2    itojun 
    148   1.2    itojun static struct ip6_pktopts ip6_opts;
    149   1.2    itojun 
    150  1.31    rpaulo static void mld_start_listening(struct in6_multi *);
    151  1.31    rpaulo static void mld_stop_listening(struct in6_multi *);
    152  1.31    rpaulo 
    153  1.31    rpaulo static struct mld_hdr * mld_allocbuf(struct mbuf **, int, struct in6_multi *,
    154  1.31    rpaulo 	int);
    155  1.31    rpaulo static void mld_sendpkt(struct in6_multi *, int, const struct in6_addr *);
    156  1.31    rpaulo static void mld_starttimer(struct in6_multi *);
    157  1.31    rpaulo static void mld_stoptimer(struct in6_multi *);
    158  1.31    rpaulo static u_long mld_timerresid(struct in6_multi *);
    159   1.2    itojun 
    160   1.2    itojun void
    161  1.42      matt mld_init(void)
    162   1.2    itojun {
    163   1.2    itojun 	static u_int8_t hbh_buf[8];
    164   1.2    itojun 	struct ip6_hbh *hbh = (struct ip6_hbh *)hbh_buf;
    165   1.2    itojun 	u_int16_t rtalert_code = htons((u_int16_t)IP6OPT_RTALERT_MLD);
    166   1.2    itojun 
    167   1.2    itojun 	/* ip6h_nxt will be fill in later */
    168  1.11    itojun 	hbh->ip6h_len = 0;	/* (8 >> 3) - 1 */
    169   1.2    itojun 
    170   1.2    itojun 	/* XXX: grotty hard coding... */
    171   1.2    itojun 	hbh_buf[2] = IP6OPT_PADN;	/* 2 byte padding */
    172   1.2    itojun 	hbh_buf[3] = 0;
    173   1.2    itojun 	hbh_buf[4] = IP6OPT_RTALERT;
    174   1.2    itojun 	hbh_buf[5] = IP6OPT_RTALERT_LEN - 2;
    175  1.50   tsutsui 	memcpy(&hbh_buf[6], (void *)&rtalert_code, sizeof(u_int16_t));
    176   1.2    itojun 
    177   1.2    itojun 	ip6_opts.ip6po_hbh = hbh;
    178   1.2    itojun 	/* We will specify the hoplimit by a multicast option. */
    179   1.2    itojun 	ip6_opts.ip6po_hlim = -1;
    180  1.62       roy 	ip6_opts.ip6po_prefer_tempaddr = IP6PO_TEMPADDR_NOTPREFER;
    181   1.2    itojun }
    182   1.2    itojun 
    183  1.31    rpaulo static void
    184  1.38  christos mld_starttimer(struct in6_multi *in6m)
    185  1.31    rpaulo {
    186  1.31    rpaulo 	struct timeval now;
    187  1.31    rpaulo 
    188  1.61     ozaki 	KASSERT(in6m->in6m_timer != IN6M_TIMER_UNDEF);
    189  1.61     ozaki 
    190  1.31    rpaulo 	microtime(&now);
    191  1.31    rpaulo 	in6m->in6m_timer_expire.tv_sec = now.tv_sec + in6m->in6m_timer / hz;
    192  1.31    rpaulo 	in6m->in6m_timer_expire.tv_usec = now.tv_usec +
    193  1.31    rpaulo 	    (in6m->in6m_timer % hz) * (1000000 / hz);
    194  1.31    rpaulo 	if (in6m->in6m_timer_expire.tv_usec > 1000000) {
    195  1.31    rpaulo 		in6m->in6m_timer_expire.tv_sec++;
    196  1.31    rpaulo 		in6m->in6m_timer_expire.tv_usec -= 1000000;
    197  1.31    rpaulo 	}
    198  1.31    rpaulo 
    199  1.31    rpaulo 	/* start or restart the timer */
    200  1.41     joerg 	callout_schedule(&in6m->in6m_timer_ch, in6m->in6m_timer);
    201  1.31    rpaulo }
    202  1.31    rpaulo 
    203  1.31    rpaulo static void
    204  1.38  christos mld_stoptimer(struct in6_multi *in6m)
    205  1.31    rpaulo {
    206  1.31    rpaulo 	if (in6m->in6m_timer == IN6M_TIMER_UNDEF)
    207  1.31    rpaulo 		return;
    208  1.31    rpaulo 
    209  1.41     joerg 	callout_stop(&in6m->in6m_timer_ch);
    210  1.31    rpaulo 
    211  1.31    rpaulo 	in6m->in6m_timer = IN6M_TIMER_UNDEF;
    212  1.31    rpaulo }
    213  1.31    rpaulo 
    214  1.31    rpaulo static void
    215  1.41     joerg mld_timeo(void *arg)
    216  1.31    rpaulo {
    217  1.41     joerg 	struct in6_multi *in6m = arg;
    218  1.45        ad 
    219  1.80     ozaki 	/* XXX NOMPSAFE still need softnet_lock */
    220  1.45        ad 	mutex_enter(softnet_lock);
    221  1.45        ad 	KERNEL_LOCK(1, NULL);
    222  1.31    rpaulo 
    223  1.61     ozaki 	if (in6m->in6m_timer == IN6M_TIMER_UNDEF)
    224  1.61     ozaki 		goto out;
    225  1.61     ozaki 
    226  1.31    rpaulo 	in6m->in6m_timer = IN6M_TIMER_UNDEF;
    227  1.31    rpaulo 
    228  1.31    rpaulo 	switch (in6m->in6m_state) {
    229  1.31    rpaulo 	case MLD_REPORTPENDING:
    230  1.31    rpaulo 		mld_start_listening(in6m);
    231  1.31    rpaulo 		break;
    232  1.31    rpaulo 	default:
    233  1.31    rpaulo 		mld_sendpkt(in6m, MLD_LISTENER_REPORT, NULL);
    234  1.31    rpaulo 		break;
    235  1.31    rpaulo 	}
    236  1.31    rpaulo 
    237  1.61     ozaki out:
    238  1.45        ad 	KERNEL_UNLOCK_ONE(NULL);
    239  1.45        ad 	mutex_exit(softnet_lock);
    240  1.31    rpaulo }
    241  1.31    rpaulo 
    242  1.31    rpaulo static u_long
    243  1.38  christos mld_timerresid(struct in6_multi *in6m)
    244  1.31    rpaulo {
    245  1.31    rpaulo 	struct timeval now, diff;
    246  1.31    rpaulo 
    247  1.31    rpaulo 	microtime(&now);
    248  1.31    rpaulo 
    249  1.31    rpaulo 	if (now.tv_sec > in6m->in6m_timer_expire.tv_sec ||
    250  1.31    rpaulo 	    (now.tv_sec == in6m->in6m_timer_expire.tv_sec &&
    251  1.31    rpaulo 	    now.tv_usec > in6m->in6m_timer_expire.tv_usec)) {
    252  1.31    rpaulo 		return (0);
    253  1.31    rpaulo 	}
    254  1.31    rpaulo 	diff = in6m->in6m_timer_expire;
    255  1.31    rpaulo 	diff.tv_sec -= now.tv_sec;
    256  1.31    rpaulo 	diff.tv_usec -= now.tv_usec;
    257  1.31    rpaulo 	if (diff.tv_usec < 0) {
    258  1.31    rpaulo 		diff.tv_sec--;
    259  1.31    rpaulo 		diff.tv_usec += 1000000;
    260  1.31    rpaulo 	}
    261  1.31    rpaulo 
    262  1.31    rpaulo 	/* return the remaining time in milliseconds */
    263  1.47   adrianp 	return diff.tv_sec * 1000 + diff.tv_usec / 1000;
    264  1.31    rpaulo }
    265  1.31    rpaulo 
    266  1.31    rpaulo static void
    267  1.38  christos mld_start_listening(struct in6_multi *in6m)
    268   1.2    itojun {
    269  1.29    rpaulo 	struct in6_addr all_in6;
    270  1.29    rpaulo 
    271   1.2    itojun 	/*
    272  1.11    itojun 	 * RFC2710 page 10:
    273   1.2    itojun 	 * The node never sends a Report or Done for the link-scope all-nodes
    274   1.2    itojun 	 * address.
    275   1.2    itojun 	 * MLD messages are never sent for multicast addresses whose scope is 0
    276   1.2    itojun 	 * (reserved) or 1 (node-local).
    277   1.2    itojun 	 */
    278  1.29    rpaulo 	all_in6 = in6addr_linklocal_allnodes;
    279  1.29    rpaulo 	if (in6_setscope(&all_in6, in6m->in6m_ifp, NULL)) {
    280  1.29    rpaulo 		/* XXX: this should not happen! */
    281  1.29    rpaulo 		in6m->in6m_timer = 0;
    282  1.29    rpaulo 		in6m->in6m_state = MLD_OTHERLISTENER;
    283  1.29    rpaulo 	}
    284  1.29    rpaulo 	if (IN6_ARE_ADDR_EQUAL(&in6m->in6m_addr, &all_in6) ||
    285   1.2    itojun 	    IPV6_ADDR_MC_SCOPE(&in6m->in6m_addr) < IPV6_ADDR_SCOPE_LINKLOCAL) {
    286  1.31    rpaulo 		in6m->in6m_timer = IN6M_TIMER_UNDEF;
    287  1.22    itojun 		in6m->in6m_state = MLD_OTHERLISTENER;
    288   1.2    itojun 	} else {
    289  1.31    rpaulo 		mld_sendpkt(in6m, MLD_LISTENER_REPORT, NULL);
    290  1.55       tls 		in6m->in6m_timer = cprng_fast32() %
    291  1.31    rpaulo 		    (MLD_UNSOLICITED_REPORT_INTERVAL * hz);
    292  1.22    itojun 		in6m->in6m_state = MLD_IREPORTEDLAST;
    293  1.31    rpaulo 
    294  1.31    rpaulo 		mld_starttimer(in6m);
    295   1.2    itojun 	}
    296   1.2    itojun }
    297   1.2    itojun 
    298  1.31    rpaulo static void
    299  1.38  christos mld_stop_listening(struct in6_multi *in6m)
    300   1.2    itojun {
    301  1.29    rpaulo 	struct in6_addr allnode, allrouter;
    302  1.29    rpaulo 
    303  1.29    rpaulo 	allnode = in6addr_linklocal_allnodes;
    304  1.29    rpaulo 	if (in6_setscope(&allnode, in6m->in6m_ifp, NULL)) {
    305  1.29    rpaulo 		/* XXX: this should not happen! */
    306  1.29    rpaulo 		return;
    307  1.29    rpaulo 	}
    308  1.29    rpaulo 	allrouter = in6addr_linklocal_allrouters;
    309  1.29    rpaulo 	if (in6_setscope(&allrouter, in6m->in6m_ifp, NULL)) {
    310  1.29    rpaulo 		/* XXX impossible */
    311  1.29    rpaulo 		return;
    312  1.29    rpaulo 	}
    313   1.2    itojun 
    314  1.22    itojun 	if (in6m->in6m_state == MLD_IREPORTEDLAST &&
    315  1.29    rpaulo 	    (!IN6_ARE_ADDR_EQUAL(&in6m->in6m_addr, &allnode)) &&
    316  1.29    rpaulo 	    IPV6_ADDR_MC_SCOPE(&in6m->in6m_addr) >
    317  1.29    rpaulo 	    IPV6_ADDR_SCOPE_INTFACELOCAL) {
    318  1.31    rpaulo 		mld_sendpkt(in6m, MLD_LISTENER_DONE, &allrouter);
    319  1.29    rpaulo 	}
    320   1.2    itojun }
    321   1.2    itojun 
    322   1.2    itojun void
    323  1.38  christos mld_input(struct mbuf *m, int off)
    324   1.2    itojun {
    325  1.52  dholland 	struct ip6_hdr *ip6;
    326  1.22    itojun 	struct mld_hdr *mldh;
    327  1.66     ozaki 	struct ifnet *ifp;
    328  1.31    rpaulo 	struct in6_multi *in6m = NULL;
    329  1.29    rpaulo 	struct in6_addr mld_addr, all_in6;
    330  1.47   adrianp 	u_long timer = 0;	/* timer value in the MLD query header */
    331  1.83     ozaki 	struct psref psref;
    332   1.2    itojun 
    333  1.83     ozaki 	ifp = m_get_rcvif_psref(m, &psref);
    334  1.81     ozaki 	if (__predict_false(ifp == NULL))
    335  1.81     ozaki 		goto out;
    336  1.22    itojun 	IP6_EXTHDR_GET(mldh, struct mld_hdr *, m, off, sizeof(*mldh));
    337  1.13    itojun 	if (mldh == NULL) {
    338  1.44   thorpej 		ICMP6_STATINC(ICMP6_STAT_TOOSHORT);
    339  1.66     ozaki 		goto out_nodrop;
    340  1.13    itojun 	}
    341  1.13    itojun 
    342   1.2    itojun 	/* source address validation */
    343  1.13    itojun 	ip6 = mtod(m, struct ip6_hdr *);/* in case mpullup */
    344   1.2    itojun 	if (!IN6_IS_ADDR_LINKLOCAL(&ip6->ip6_src)) {
    345  1.31    rpaulo 		/*
    346  1.31    rpaulo 		 * RFC3590 allows the IPv6 unspecified address as the source
    347  1.31    rpaulo 		 * address of MLD report and done messages.  However, as this
    348  1.31    rpaulo 		 * same document says, this special rule is for snooping
    349  1.31    rpaulo 		 * switches and the RFC requires routers to discard MLD packets
    350  1.31    rpaulo 		 * with the unspecified source address.  The RFC only talks
    351  1.31    rpaulo 		 * about hosts receiving an MLD query or report in Security
    352  1.31    rpaulo 		 * Considerations, but this is probably the correct intention.
    353  1.31    rpaulo 		 * RFC3590 does not talk about other cases than link-local and
    354  1.31    rpaulo 		 * the unspecified source addresses, but we believe the same
    355  1.31    rpaulo 		 * rule should be applied.
    356  1.31    rpaulo 		 * As a result, we only allow link-local addresses as the
    357  1.31    rpaulo 		 * source address; otherwise, simply discard the packet.
    358  1.31    rpaulo 		 */
    359  1.18    itojun #if 0
    360  1.31    rpaulo 		/*
    361  1.31    rpaulo 		 * XXX: do not log in an input path to avoid log flooding,
    362  1.31    rpaulo 		 * though RFC3590 says "SHOULD log" if the source of a query
    363  1.31    rpaulo 		 * is the unspecified address.
    364  1.31    rpaulo 		 */
    365  1.78       ryo 		char ip6bufs[INET6_ADDRSTRLEN];
    366  1.78       ryo 		char ip6bufm[INET6_ADDRSTRLEN];
    367  1.31    rpaulo 		log(LOG_INFO,
    368  1.22    itojun 		    "mld_input: src %s is not link-local (grp=%s)\n",
    369  1.79  christos 		    IN6_PRINT(ip6bufs,&ip6->ip6_src),
    370  1.79  christos 		    IN6_PRINT(ip6bufm, &mldh->mld_addr));
    371  1.18    itojun #endif
    372  1.66     ozaki 		goto out;
    373   1.2    itojun 	}
    374   1.2    itojun 
    375   1.2    itojun 	/*
    376  1.29    rpaulo 	 * make a copy for local work (in6_setscope() may modify the 1st arg)
    377  1.29    rpaulo 	 */
    378  1.29    rpaulo 	mld_addr = mldh->mld_addr;
    379  1.29    rpaulo 	if (in6_setscope(&mld_addr, ifp, NULL)) {
    380  1.29    rpaulo 		/* XXX: this should not happen! */
    381  1.66     ozaki 		goto out;
    382  1.29    rpaulo 	}
    383  1.29    rpaulo 
    384  1.29    rpaulo 	/*
    385  1.31    rpaulo 	 * In the MLD specification, there are 3 states and a flag.
    386   1.2    itojun 	 *
    387   1.2    itojun 	 * In Non-Listener state, we simply don't have a membership record.
    388   1.2    itojun 	 * In Delaying Listener state, our timer is running (in6m->in6m_timer)
    389  1.31    rpaulo 	 * In Idle Listener state, our timer is not running
    390  1.31    rpaulo 	 * (in6m->in6m_timer==IN6M_TIMER_UNDEF)
    391   1.2    itojun 	 *
    392  1.22    itojun 	 * The flag is in6m->in6m_state, it is set to MLD_OTHERLISTENER if
    393  1.22    itojun 	 * we have heard a report from another member, or MLD_IREPORTEDLAST
    394   1.2    itojun 	 * if we sent the last report.
    395   1.2    itojun 	 */
    396  1.22    itojun 	switch (mldh->mld_type) {
    397  1.74     ozaki 	case MLD_LISTENER_QUERY: {
    398   1.7    itojun 		if (ifp->if_flags & IFF_LOOPBACK)
    399   1.7    itojun 			break;
    400   1.7    itojun 
    401  1.29    rpaulo 		if (!IN6_IS_ADDR_UNSPECIFIED(&mld_addr) &&
    402  1.29    rpaulo 		    !IN6_IS_ADDR_MULTICAST(&mld_addr))
    403   1.7    itojun 			break;	/* print error or log stat? */
    404  1.29    rpaulo 
    405  1.29    rpaulo 		all_in6 = in6addr_linklocal_allnodes;
    406  1.29    rpaulo 		if (in6_setscope(&all_in6, ifp, NULL)) {
    407  1.29    rpaulo 			/* XXX: this should not happen! */
    408  1.29    rpaulo 			break;
    409  1.29    rpaulo 		}
    410   1.2    itojun 
    411   1.7    itojun 		/*
    412  1.11    itojun 		 * - Start the timers in all of our membership records
    413  1.11    itojun 		 *   that the query applies to for the interface on
    414  1.11    itojun 		 *   which the query arrived excl. those that belong
    415  1.11    itojun 		 *   to the "all-nodes" group (ff02::1).
    416  1.11    itojun 		 * - Restart any timer that is already running but has
    417  1.30    rpaulo 		 *   a value longer than the requested timeout.
    418  1.11    itojun 		 * - Use the value specified in the query message as
    419  1.11    itojun 		 *   the maximum timeout.
    420  1.11    itojun 		 */
    421  1.31    rpaulo 		timer = ntohs(mldh->mld_maxdelay);
    422  1.31    rpaulo 
    423  1.83     ozaki 		LIST_FOREACH(in6m, &ifp->if_multiaddrs, in6m_entry) {
    424  1.29    rpaulo 			if (IN6_ARE_ADDR_EQUAL(&in6m->in6m_addr, &all_in6) ||
    425   1.7    itojun 			    IPV6_ADDR_MC_SCOPE(&in6m->in6m_addr) <
    426   1.7    itojun 			    IPV6_ADDR_SCOPE_LINKLOCAL)
    427   1.7    itojun 				continue;
    428   1.2    itojun 
    429  1.31    rpaulo 			if (in6m->in6m_state == MLD_REPORTPENDING)
    430  1.31    rpaulo 				continue; /* we are not yet ready */
    431  1.31    rpaulo 
    432  1.31    rpaulo 			if (!IN6_IS_ADDR_UNSPECIFIED(&mld_addr) &&
    433  1.31    rpaulo 			    !IN6_ARE_ADDR_EQUAL(&mld_addr, &in6m->in6m_addr))
    434  1.31    rpaulo 				continue;
    435  1.31    rpaulo 
    436  1.31    rpaulo 			if (timer == 0) {
    437  1.31    rpaulo 				/* send a report immediately */
    438  1.31    rpaulo 				mld_stoptimer(in6m);
    439  1.31    rpaulo 				mld_sendpkt(in6m, MLD_LISTENER_REPORT, NULL);
    440  1.31    rpaulo 				in6m->in6m_state = MLD_IREPORTEDLAST;
    441  1.31    rpaulo 			} else if (in6m->in6m_timer == IN6M_TIMER_UNDEF ||
    442  1.47   adrianp 			    mld_timerresid(in6m) > timer) {
    443  1.47   adrianp 				in6m->in6m_timer =
    444  1.55       tls 				   1 + (cprng_fast32() % timer) * hz / 1000;
    445  1.31    rpaulo 				mld_starttimer(in6m);
    446   1.7    itojun 			}
    447   1.7    itojun 		}
    448  1.29    rpaulo 		break;
    449  1.74     ozaki 	    }
    450   1.2    itojun 
    451  1.22    itojun 	case MLD_LISTENER_REPORT:
    452   1.2    itojun 		/*
    453  1.11    itojun 		 * For fast leave to work, we have to know that we are the
    454  1.11    itojun 		 * last person to send a report for this group.  Reports
    455  1.11    itojun 		 * can potentially get looped back if we are a multicast
    456  1.11    itojun 		 * router, so discard reports sourced by me.
    457  1.11    itojun 		 * Note that it is impossible to check IFF_LOOPBACK flag of
    458  1.11    itojun 		 * ifp for this purpose, since ip6_mloopback pass the physical
    459  1.11    itojun 		 * interface to looutput.
    460  1.11    itojun 		 */
    461   1.7    itojun 		if (m->m_flags & M_LOOP) /* XXX: grotty flag, but efficient */
    462   1.7    itojun 			break;
    463   1.7    itojun 
    464  1.22    itojun 		if (!IN6_IS_ADDR_MULTICAST(&mldh->mld_addr))
    465   1.7    itojun 			break;
    466   1.7    itojun 
    467   1.7    itojun 		/*
    468  1.11    itojun 		 * If we belong to the group being reported, stop
    469  1.11    itojun 		 * our timer for that group.
    470  1.11    itojun 		 */
    471  1.82     ozaki 		in6m = in6_lookup_multi(&mld_addr, ifp);
    472   1.7    itojun 		if (in6m) {
    473  1.31    rpaulo 			mld_stoptimer(in6m); /* transit to idle state */
    474  1.22    itojun 			in6m->in6m_state = MLD_OTHERLISTENER; /* clear flag */
    475   1.7    itojun 		}
    476   1.7    itojun 		break;
    477   1.7    itojun 	default:		/* this is impossible */
    478  1.18    itojun #if 0
    479  1.19    itojun 		/*
    480  1.19    itojun 		 * this case should be impossible because of filtering in
    481  1.19    itojun 		 * icmp6_input().  But we explicitly disabled this part
    482  1.19    itojun 		 * just in case.
    483  1.19    itojun 		 */
    484  1.31    rpaulo 		log(LOG_ERR, "mld_input: illegal type(%d)", mldh->mld_type);
    485  1.18    itojun #endif
    486   1.7    itojun 		break;
    487   1.2    itojun 	}
    488  1.11    itojun 
    489  1.66     ozaki out:
    490  1.11    itojun 	m_freem(m);
    491  1.66     ozaki out_nodrop:
    492  1.83     ozaki 	m_put_rcvif_psref(ifp, &psref);
    493   1.2    itojun }
    494   1.2    itojun 
    495   1.2    itojun static void
    496  1.38  christos mld_sendpkt(struct in6_multi *in6m, int type,
    497  1.38  christos 	const struct in6_addr *dst)
    498   1.2    itojun {
    499  1.31    rpaulo 	struct mbuf *mh;
    500  1.22    itojun 	struct mld_hdr *mldh;
    501  1.31    rpaulo 	struct ip6_hdr *ip6 = NULL;
    502   1.2    itojun 	struct ip6_moptions im6o;
    503  1.31    rpaulo 	struct in6_ifaddr *ia = NULL;
    504   1.2    itojun 	struct ifnet *ifp = in6m->in6m_ifp;
    505  1.19    itojun 	int ignflags;
    506  1.74     ozaki 	struct psref psref;
    507  1.74     ozaki 	int bound;
    508   1.2    itojun 
    509   1.2    itojun 	/*
    510   1.2    itojun 	 * At first, find a link local address on the outgoing interface
    511   1.2    itojun 	 * to use as the source address of the MLD packet.
    512  1.19    itojun 	 * We do not reject tentative addresses for MLD report to deal with
    513  1.19    itojun 	 * the case where we first join a link-local address.
    514   1.2    itojun 	 */
    515  1.19    itojun 	ignflags = (IN6_IFF_NOTREADY|IN6_IFF_ANYCAST) & ~IN6_IFF_TENTATIVE;
    516  1.74     ozaki 	bound = curlwp_bind();
    517  1.74     ozaki 	ia = in6ifa_ifpforlinklocal_psref(ifp, ignflags, &psref);
    518  1.74     ozaki 	if (ia == NULL) {
    519  1.74     ozaki 		curlwp_bindx(bound);
    520   1.2    itojun 		return;
    521  1.74     ozaki 	}
    522  1.74     ozaki 	if ((ia->ia6_flags & IN6_IFF_TENTATIVE)) {
    523  1.74     ozaki 		ia6_release(ia, &psref);
    524  1.19    itojun 		ia = NULL;
    525  1.74     ozaki 	}
    526   1.2    itojun 
    527  1.31    rpaulo 	/* Allocate two mbufs to store IPv6 header and MLD header */
    528  1.31    rpaulo 	mldh = mld_allocbuf(&mh, sizeof(struct mld_hdr), in6m, type);
    529  1.74     ozaki 	if (mldh == NULL) {
    530  1.74     ozaki 		ia6_release(ia, &psref);
    531  1.74     ozaki 		curlwp_bindx(bound);
    532   1.2    itojun 		return;
    533  1.74     ozaki 	}
    534   1.2    itojun 
    535  1.31    rpaulo 	/* fill src/dst here */
    536  1.31    rpaulo  	ip6 = mtod(mh, struct ip6_hdr *);
    537  1.31    rpaulo  	ip6->ip6_src = ia ? ia->ia_addr.sin6_addr : in6addr_any;
    538  1.31    rpaulo  	ip6->ip6_dst = dst ? *dst : in6m->in6m_addr;
    539  1.74     ozaki 	ia6_release(ia, &psref);
    540  1.74     ozaki 	curlwp_bindx(bound);
    541   1.2    itojun 
    542  1.22    itojun 	mldh->mld_addr = in6m->in6m_addr;
    543  1.29    rpaulo 	in6_clearscope(&mldh->mld_addr); /* XXX */
    544  1.22    itojun 	mldh->mld_cksum = in6_cksum(mh, IPPROTO_ICMPV6, sizeof(struct ip6_hdr),
    545  1.22    itojun 	    sizeof(struct mld_hdr));
    546   1.2    itojun 
    547   1.2    itojun 	/* construct multicast option */
    548  1.31    rpaulo 	memset(&im6o, 0, sizeof(im6o));
    549  1.68     ozaki 	im6o.im6o_multicast_if_index = if_get_index(ifp);
    550   1.2    itojun 	im6o.im6o_multicast_hlim = 1;
    551   1.2    itojun 
    552   1.2    itojun 	/*
    553   1.2    itojun 	 * Request loopback of the report if we are acting as a multicast
    554   1.2    itojun 	 * router, so that the process-level routing daemon can hear it.
    555   1.2    itojun 	 */
    556   1.2    itojun 	im6o.im6o_multicast_loop = (ip6_mrouter != NULL);
    557   1.2    itojun 
    558   1.2    itojun 	/* increment output statictics */
    559  1.44   thorpej 	ICMP6_STATINC(ICMP6_STAT_OUTHIST + type);
    560  1.15    itojun 	icmp6_ifstat_inc(ifp, ifs6_out_msg);
    561  1.17    itojun 	switch (type) {
    562  1.22    itojun 	case MLD_LISTENER_QUERY:
    563  1.15    itojun 		icmp6_ifstat_inc(ifp, ifs6_out_mldquery);
    564  1.15    itojun 		break;
    565  1.22    itojun 	case MLD_LISTENER_REPORT:
    566  1.15    itojun 		icmp6_ifstat_inc(ifp, ifs6_out_mldreport);
    567  1.15    itojun 		break;
    568  1.22    itojun 	case MLD_LISTENER_DONE:
    569  1.15    itojun 		icmp6_ifstat_inc(ifp, ifs6_out_mlddone);
    570  1.15    itojun 		break;
    571   1.7    itojun 	}
    572  1.19    itojun 
    573  1.27     perry 	ip6_output(mh, &ip6_opts, NULL, ia ? 0 : IPV6_UNSPECSRC,
    574  1.53    plunky 	    &im6o, NULL, NULL);
    575   1.2    itojun }
    576  1.31    rpaulo 
    577  1.31    rpaulo static struct mld_hdr *
    578  1.34  christos mld_allocbuf(struct mbuf **mh, int len, struct in6_multi *in6m,
    579  1.33  christos     int type)
    580  1.31    rpaulo {
    581  1.31    rpaulo 	struct mbuf *md;
    582  1.31    rpaulo 	struct mld_hdr *mldh;
    583  1.31    rpaulo 	struct ip6_hdr *ip6;
    584  1.31    rpaulo 
    585  1.31    rpaulo 	/*
    586  1.31    rpaulo 	 * Allocate mbufs to store ip6 header and MLD header.
    587  1.31    rpaulo 	 * We allocate 2 mbufs and make chain in advance because
    588  1.31    rpaulo 	 * it is more convenient when inserting the hop-by-hop option later.
    589  1.31    rpaulo 	 */
    590  1.31    rpaulo 	MGETHDR(*mh, M_DONTWAIT, MT_HEADER);
    591  1.31    rpaulo 	if (*mh == NULL)
    592  1.31    rpaulo 		return NULL;
    593  1.31    rpaulo 	MGET(md, M_DONTWAIT, MT_DATA);
    594  1.31    rpaulo 	if (md == NULL) {
    595  1.31    rpaulo 		m_free(*mh);
    596  1.31    rpaulo 		*mh = NULL;
    597  1.31    rpaulo 		return NULL;
    598  1.31    rpaulo 	}
    599  1.31    rpaulo 	(*mh)->m_next = md;
    600  1.31    rpaulo 	md->m_next = NULL;
    601  1.31    rpaulo 
    602  1.65     ozaki 	m_reset_rcvif((*mh));
    603  1.31    rpaulo 	(*mh)->m_pkthdr.len = sizeof(struct ip6_hdr) + len;
    604  1.31    rpaulo 	(*mh)->m_len = sizeof(struct ip6_hdr);
    605  1.31    rpaulo 	MH_ALIGN(*mh, sizeof(struct ip6_hdr));
    606  1.31    rpaulo 
    607  1.31    rpaulo 	/* fill in the ip6 header */
    608  1.31    rpaulo 	ip6 = mtod(*mh, struct ip6_hdr *);
    609  1.31    rpaulo 	memset(ip6, 0, sizeof(*ip6));
    610  1.31    rpaulo 	ip6->ip6_flow = 0;
    611  1.31    rpaulo 	ip6->ip6_vfc &= ~IPV6_VERSION_MASK;
    612  1.31    rpaulo 	ip6->ip6_vfc |= IPV6_VERSION;
    613  1.31    rpaulo 	/* ip6_plen will be set later */
    614  1.31    rpaulo 	ip6->ip6_nxt = IPPROTO_ICMPV6;
    615  1.31    rpaulo 	/* ip6_hlim will be set by im6o.im6o_multicast_hlim */
    616  1.31    rpaulo 	/* ip6_src/dst will be set by mld_sendpkt() or mld_sendbuf() */
    617  1.31    rpaulo 
    618  1.31    rpaulo 	/* fill in the MLD header as much as possible */
    619  1.31    rpaulo 	md->m_len = len;
    620  1.31    rpaulo 	mldh = mtod(md, struct mld_hdr *);
    621  1.31    rpaulo 	memset(mldh, 0, len);
    622  1.31    rpaulo 	mldh->mld_type = type;
    623  1.31    rpaulo 	return mldh;
    624  1.31    rpaulo }
    625  1.31    rpaulo 
    626  1.31    rpaulo /*
    627  1.31    rpaulo  * Add an address to the list of IP6 multicast addresses for a given interface.
    628  1.31    rpaulo  */
    629  1.31    rpaulo struct	in6_multi *
    630  1.38  christos in6_addmulti(struct in6_addr *maddr6, struct ifnet *ifp,
    631  1.38  christos 	int *errorp, int timer)
    632  1.31    rpaulo {
    633  1.54    dyoung 	struct	sockaddr_in6 sin6;
    634  1.31    rpaulo 	struct	in6_multi *in6m;
    635  1.31    rpaulo 	int	s = splsoftnet();
    636  1.31    rpaulo 
    637  1.31    rpaulo 	*errorp = 0;
    638  1.31    rpaulo 
    639  1.31    rpaulo 	/*
    640  1.31    rpaulo 	 * See if address already in list.
    641  1.31    rpaulo 	 */
    642  1.82     ozaki 	in6m = in6_lookup_multi(maddr6, ifp);
    643  1.31    rpaulo 	if (in6m != NULL) {
    644  1.31    rpaulo 		/*
    645  1.31    rpaulo 		 * Found it; just increment the refrence count.
    646  1.31    rpaulo 		 */
    647  1.31    rpaulo 		in6m->in6m_refcount++;
    648  1.31    rpaulo 	} else {
    649  1.31    rpaulo 		/*
    650  1.31    rpaulo 		 * New address; allocate a new multicast record
    651  1.31    rpaulo 		 * and link it into the interface's multicast list.
    652  1.31    rpaulo 		 */
    653  1.31    rpaulo 		in6m = (struct in6_multi *)
    654  1.51    dyoung 			malloc(sizeof(*in6m), M_IPMADDR, M_NOWAIT|M_ZERO);
    655  1.31    rpaulo 		if (in6m == NULL) {
    656  1.31    rpaulo 			splx(s);
    657  1.31    rpaulo 			*errorp = ENOBUFS;
    658  1.31    rpaulo 			return (NULL);
    659  1.31    rpaulo 		}
    660  1.31    rpaulo 
    661  1.31    rpaulo 		in6m->in6m_addr = *maddr6;
    662  1.31    rpaulo 		in6m->in6m_ifp = ifp;
    663  1.31    rpaulo 		in6m->in6m_refcount = 1;
    664  1.31    rpaulo 		in6m->in6m_timer = IN6M_TIMER_UNDEF;
    665  1.64     joerg 		callout_init(&in6m->in6m_timer_ch, CALLOUT_MPSAFE);
    666  1.64     joerg 		callout_setfunc(&in6m->in6m_timer_ch, mld_timeo, in6m);
    667  1.64     joerg 
    668  1.74     ozaki 		/* FIXME NOMPSAFE: need to lock */
    669  1.83     ozaki 		LIST_INSERT_HEAD(&ifp->if_multiaddrs, in6m, in6m_entry);
    670  1.31    rpaulo 
    671  1.31    rpaulo 		/*
    672  1.31    rpaulo 		 * Ask the network driver to update its multicast reception
    673  1.31    rpaulo 		 * filter appropriately for the new address.
    674  1.31    rpaulo 		 */
    675  1.54    dyoung 		sockaddr_in6_init(&sin6, maddr6, 0, 0, 0);
    676  1.54    dyoung 		*errorp = if_mcast_op(ifp, SIOCADDMULTI, sin6tosa(&sin6));
    677  1.31    rpaulo 		if (*errorp) {
    678  1.64     joerg 			callout_destroy(&in6m->in6m_timer_ch);
    679  1.31    rpaulo 			LIST_REMOVE(in6m, in6m_entry);
    680  1.31    rpaulo 			free(in6m, M_IPMADDR);
    681  1.31    rpaulo 			splx(s);
    682  1.31    rpaulo 			return (NULL);
    683  1.31    rpaulo 		}
    684  1.31    rpaulo 
    685  1.32    rpaulo 		in6m->in6m_timer = timer;
    686  1.31    rpaulo 		if (in6m->in6m_timer > 0) {
    687  1.31    rpaulo 			in6m->in6m_state = MLD_REPORTPENDING;
    688  1.31    rpaulo 			mld_starttimer(in6m);
    689  1.31    rpaulo 
    690  1.31    rpaulo 			splx(s);
    691  1.31    rpaulo 			return (in6m);
    692  1.31    rpaulo 		}
    693  1.31    rpaulo 
    694  1.31    rpaulo 		/*
    695  1.31    rpaulo 		 * Let MLD6 know that we have joined a new IP6 multicast
    696  1.31    rpaulo 		 * group.
    697  1.31    rpaulo 		 */
    698  1.31    rpaulo 		mld_start_listening(in6m);
    699  1.31    rpaulo 	}
    700  1.31    rpaulo 	splx(s);
    701  1.31    rpaulo 	return (in6m);
    702  1.31    rpaulo }
    703  1.31    rpaulo 
    704  1.31    rpaulo /*
    705  1.31    rpaulo  * Delete a multicast address record.
    706  1.31    rpaulo  */
    707  1.31    rpaulo void
    708  1.38  christos in6_delmulti(struct in6_multi *in6m)
    709  1.31    rpaulo {
    710  1.54    dyoung 	struct	sockaddr_in6 sin6;
    711  1.31    rpaulo 	struct	in6_ifaddr *ia;
    712  1.31    rpaulo 	int	s = splsoftnet();
    713  1.31    rpaulo 
    714  1.31    rpaulo 	mld_stoptimer(in6m);
    715  1.31    rpaulo 
    716  1.31    rpaulo 	if (--in6m->in6m_refcount == 0) {
    717  1.73     ozaki 		int _s;
    718  1.73     ozaki 
    719  1.31    rpaulo 		/*
    720  1.31    rpaulo 		 * No remaining claims to this record; let MLD6 know
    721  1.31    rpaulo 		 * that we are leaving the multicast group.
    722  1.31    rpaulo 		 */
    723  1.31    rpaulo 		mld_stop_listening(in6m);
    724  1.31    rpaulo 
    725  1.31    rpaulo 		/*
    726  1.31    rpaulo 		 * Unlink from list.
    727  1.31    rpaulo 		 */
    728  1.83     ozaki 		/* FIXME NOMPSAFE: need to lock */
    729  1.31    rpaulo 		LIST_REMOVE(in6m, in6m_entry);
    730  1.31    rpaulo 
    731  1.31    rpaulo 		/*
    732  1.31    rpaulo 		 * Delete all references of this multicasting group from
    733  1.31    rpaulo 		 * the membership arrays
    734  1.31    rpaulo 		 */
    735  1.73     ozaki 		_s = pserialize_read_enter();
    736  1.70     ozaki 		IN6_ADDRLIST_READER_FOREACH(ia) {
    737  1.31    rpaulo 			struct in6_multi_mship *imm;
    738  1.35    dyoung 			LIST_FOREACH(imm, &ia->ia6_memberships, i6mm_chain) {
    739  1.31    rpaulo 				if (imm->i6mm_maddr == in6m)
    740  1.31    rpaulo 					imm->i6mm_maddr = NULL;
    741  1.31    rpaulo 			}
    742  1.31    rpaulo 		}
    743  1.73     ozaki 		pserialize_read_exit(_s);
    744  1.31    rpaulo 
    745  1.31    rpaulo 		/*
    746  1.31    rpaulo 		 * Notify the network driver to update its multicast
    747  1.31    rpaulo 		 * reception filter.
    748  1.31    rpaulo 		 */
    749  1.54    dyoung 		sockaddr_in6_init(&sin6, &in6m->in6m_addr, 0, 0, 0);
    750  1.54    dyoung 		if_mcast_op(in6m->in6m_ifp, SIOCDELMULTI, sin6tosa(&sin6));
    751  1.61     ozaki 
    752  1.61     ozaki 		/* Tell mld_timeo we're halting the timer */
    753  1.61     ozaki 		in6m->in6m_timer = IN6M_TIMER_UNDEF;
    754  1.80     ozaki 		if (mutex_owned(softnet_lock))
    755  1.80     ozaki 			callout_halt(&in6m->in6m_timer_ch, softnet_lock);
    756  1.80     ozaki 		else
    757  1.80     ozaki 			callout_halt(&in6m->in6m_timer_ch, NULL);
    758  1.41     joerg 		callout_destroy(&in6m->in6m_timer_ch);
    759  1.61     ozaki 
    760  1.31    rpaulo 		free(in6m, M_IPMADDR);
    761  1.31    rpaulo 	}
    762  1.31    rpaulo 	splx(s);
    763  1.31    rpaulo }
    764  1.31    rpaulo 
    765  1.83     ozaki /*
    766  1.83     ozaki  * Look up the in6_multi record for a given IP6 multicast address
    767  1.83     ozaki  * on a given interface. If no matching record is found, "in6m"
    768  1.83     ozaki  * returns NULL.
    769  1.83     ozaki  */
    770  1.83     ozaki struct in6_multi *
    771  1.83     ozaki in6_lookup_multi(const struct in6_addr *addr, const struct ifnet *ifp)
    772  1.83     ozaki {
    773  1.83     ozaki 	struct in6_multi *in6m;
    774  1.83     ozaki 
    775  1.83     ozaki 	/* XXX NOMPSAFE */
    776  1.83     ozaki 	LIST_FOREACH(in6m, &ifp->if_multiaddrs, in6m_entry) {
    777  1.83     ozaki 		if (IN6_ARE_ADDR_EQUAL(&in6m->in6m_addr, addr))
    778  1.83     ozaki 			break;
    779  1.83     ozaki 	}
    780  1.83     ozaki 	return in6m;
    781  1.83     ozaki }
    782  1.83     ozaki 
    783  1.83     ozaki /*
    784  1.83     ozaki  * Purge in6_multi records associated to the interface.
    785  1.83     ozaki  */
    786  1.83     ozaki void
    787  1.83     ozaki in6_purge_multi(struct ifnet *ifp)
    788  1.83     ozaki {
    789  1.83     ozaki 	struct in6_multi *in6m, *next;
    790  1.83     ozaki 
    791  1.83     ozaki 	/* XXX NOMPSAFE */
    792  1.83     ozaki 	LIST_FOREACH_SAFE(in6m, &ifp->if_multiaddrs, in6m_entry, next) {
    793  1.83     ozaki 		in6_delmulti(in6m);
    794  1.83     ozaki 	}
    795  1.83     ozaki }
    796  1.31    rpaulo 
    797  1.31    rpaulo struct in6_multi_mship *
    798  1.38  christos in6_joingroup(struct ifnet *ifp, struct in6_addr *addr,
    799  1.38  christos 	int *errorp, int timer)
    800  1.31    rpaulo {
    801  1.31    rpaulo 	struct in6_multi_mship *imm;
    802  1.31    rpaulo 
    803  1.51    dyoung 	imm = malloc(sizeof(*imm), M_IPMADDR, M_NOWAIT|M_ZERO);
    804  1.51    dyoung 	if (imm == NULL) {
    805  1.31    rpaulo 		*errorp = ENOBUFS;
    806  1.31    rpaulo 		return NULL;
    807  1.31    rpaulo 	}
    808  1.31    rpaulo 
    809  1.32    rpaulo 	imm->i6mm_maddr = in6_addmulti(addr, ifp, errorp, timer);
    810  1.31    rpaulo 	if (!imm->i6mm_maddr) {
    811  1.36    dyoung 		/* *errorp is already set */
    812  1.31    rpaulo 		free(imm, M_IPMADDR);
    813  1.31    rpaulo 		return NULL;
    814  1.31    rpaulo 	}
    815  1.31    rpaulo 	return imm;
    816  1.31    rpaulo }
    817  1.31    rpaulo 
    818  1.31    rpaulo int
    819  1.38  christos in6_leavegroup(struct in6_multi_mship *imm)
    820  1.31    rpaulo {
    821  1.31    rpaulo 
    822  1.31    rpaulo 	if (imm->i6mm_maddr) {
    823  1.31    rpaulo 		in6_delmulti(imm->i6mm_maddr);
    824  1.31    rpaulo 	}
    825  1.31    rpaulo 	free(imm, M_IPMADDR);
    826  1.31    rpaulo 	return 0;
    827  1.31    rpaulo }
    828  1.31    rpaulo 
    829  1.31    rpaulo /*
    830  1.83     ozaki  * DEPRECATED: keep it just to avoid breaking old sysctl users.
    831  1.31    rpaulo  */
    832  1.57     joerg static int
    833  1.57     joerg in6_mkludge_sysctl(SYSCTLFN_ARGS)
    834  1.57     joerg {
    835  1.57     joerg 
    836  1.57     joerg 	if (namelen != 1)
    837  1.57     joerg 		return EINVAL;
    838  1.83     ozaki 	*oldlenp = 0;
    839  1.83     ozaki 	return 0;
    840  1.57     joerg }
    841  1.57     joerg 
    842  1.57     joerg static int
    843  1.57     joerg in6_multicast_sysctl(SYSCTLFN_ARGS)
    844  1.57     joerg {
    845  1.57     joerg 	struct ifnet *ifp;
    846  1.57     joerg 	struct ifaddr *ifa;
    847  1.83     ozaki 	struct in6_ifaddr *ia6;
    848  1.57     joerg 	struct in6_multi *in6m;
    849  1.57     joerg 	uint32_t tmp;
    850  1.57     joerg 	int error;
    851  1.57     joerg 	size_t written;
    852  1.74     ozaki 	struct psref psref, psref_ia;
    853  1.74     ozaki 	int bound, s;
    854  1.57     joerg 
    855  1.57     joerg 	if (namelen != 1)
    856  1.57     joerg 		return EINVAL;
    857  1.57     joerg 
    858  1.67     ozaki 	bound = curlwp_bind();
    859  1.67     ozaki 	ifp = if_get_byindex(name[0], &psref);
    860  1.67     ozaki 	if (ifp == NULL) {
    861  1.67     ozaki 		curlwp_bindx(bound);
    862  1.57     joerg 		return ENODEV;
    863  1.67     ozaki 	}
    864  1.57     joerg 
    865  1.57     joerg 	if (oldp == NULL) {
    866  1.57     joerg 		*oldlenp = 0;
    867  1.74     ozaki 		s = pserialize_read_enter();
    868  1.71     ozaki 		IFADDR_READER_FOREACH(ifa, ifp) {
    869  1.83     ozaki 			LIST_FOREACH(in6m, &ifp->if_multiaddrs, in6m_entry) {
    870  1.57     joerg 				*oldlenp += 2 * sizeof(struct in6_addr) +
    871  1.57     joerg 				    sizeof(uint32_t);
    872  1.57     joerg 			}
    873  1.57     joerg 		}
    874  1.74     ozaki 		pserialize_read_exit(s);
    875  1.67     ozaki 		if_put(ifp, &psref);
    876  1.67     ozaki 		curlwp_bindx(bound);
    877  1.57     joerg 		return 0;
    878  1.57     joerg 	}
    879  1.57     joerg 
    880  1.57     joerg 	error = 0;
    881  1.57     joerg 	written = 0;
    882  1.74     ozaki 	s = pserialize_read_enter();
    883  1.71     ozaki 	IFADDR_READER_FOREACH(ifa, ifp) {
    884  1.57     joerg 		if (ifa->ifa_addr->sa_family != AF_INET6)
    885  1.57     joerg 			continue;
    886  1.74     ozaki 
    887  1.74     ozaki 		ifa_acquire(ifa, &psref_ia);
    888  1.74     ozaki 		pserialize_read_exit(s);
    889  1.74     ozaki 
    890  1.83     ozaki 		ia6 = ifatoia6(ifa);
    891  1.83     ozaki 		LIST_FOREACH(in6m, &ifp->if_multiaddrs, in6m_entry) {
    892  1.57     joerg 			if (written + 2 * sizeof(struct in6_addr) +
    893  1.57     joerg 			    sizeof(uint32_t) > *oldlenp)
    894  1.57     joerg 				goto done;
    895  1.83     ozaki 			/*
    896  1.83     ozaki 			 * XXX return the first IPv6 address to keep backward
    897  1.83     ozaki 			 * compatibility, however now multicast addresses
    898  1.83     ozaki 			 * don't belong to any IPv6 addresses so it should be
    899  1.83     ozaki 			 * unnecessary.
    900  1.83     ozaki 			 */
    901  1.83     ozaki 			error = sysctl_copyout(l, &ia6->ia_addr.sin6_addr,
    902  1.57     joerg 			    oldp, sizeof(struct in6_addr));
    903  1.57     joerg 			if (error)
    904  1.57     joerg 				goto done;
    905  1.57     joerg 			oldp = (char *)oldp + sizeof(struct in6_addr);
    906  1.57     joerg 			written += sizeof(struct in6_addr);
    907  1.57     joerg 			error = sysctl_copyout(l, &in6m->in6m_addr,
    908  1.57     joerg 			    oldp, sizeof(struct in6_addr));
    909  1.57     joerg 			if (error)
    910  1.57     joerg 				goto done;
    911  1.57     joerg 			oldp = (char *)oldp + sizeof(struct in6_addr);
    912  1.57     joerg 			written += sizeof(struct in6_addr);
    913  1.57     joerg 			tmp = in6m->in6m_refcount;
    914  1.57     joerg 			error = sysctl_copyout(l, &tmp, oldp, sizeof(tmp));
    915  1.57     joerg 			if (error)
    916  1.57     joerg 				goto done;
    917  1.57     joerg 			oldp = (char *)oldp + sizeof(tmp);
    918  1.57     joerg 			written += sizeof(tmp);
    919  1.57     joerg 		}
    920  1.74     ozaki 
    921  1.74     ozaki 		s = pserialize_read_enter();
    922  1.74     ozaki 		ifa_release(ifa, &psref_ia);
    923  1.83     ozaki 
    924  1.83     ozaki 		break;
    925  1.57     joerg 	}
    926  1.74     ozaki 	pserialize_read_exit(s);
    927  1.57     joerg done:
    928  1.74     ozaki 	ifa_release(ifa, &psref_ia);
    929  1.67     ozaki 	if_put(ifp, &psref);
    930  1.67     ozaki 	curlwp_bindx(bound);
    931  1.57     joerg 	*oldlenp = written;
    932  1.57     joerg 	return error;
    933  1.57     joerg }
    934  1.57     joerg 
    935  1.76     ozaki void
    936  1.76     ozaki in6_sysctl_multicast_setup(struct sysctllog **clog)
    937  1.57     joerg {
    938  1.57     joerg 
    939  1.57     joerg 	sysctl_createv(clog, 0, NULL, NULL,
    940  1.57     joerg 		       CTLFLAG_PERMANENT,
    941  1.59     joerg 		       CTLTYPE_NODE, "inet6", NULL,
    942  1.59     joerg 		       NULL, 0, NULL, 0,
    943  1.59     joerg 		       CTL_NET, PF_INET6, CTL_EOL);
    944  1.59     joerg 
    945  1.59     joerg 	sysctl_createv(clog, 0, NULL, NULL,
    946  1.59     joerg 		       CTLFLAG_PERMANENT,
    947  1.57     joerg 		       CTLTYPE_NODE, "multicast",
    948  1.57     joerg 		       SYSCTL_DESCR("Multicast information"),
    949  1.57     joerg 		       in6_multicast_sysctl, 0, NULL, 0,
    950  1.57     joerg 		       CTL_NET, PF_INET6, CTL_CREATE, CTL_EOL);
    951  1.57     joerg 
    952  1.57     joerg 	sysctl_createv(clog, 0, NULL, NULL,
    953  1.57     joerg 		       CTLFLAG_PERMANENT,
    954  1.57     joerg 		       CTLTYPE_NODE, "multicast_kludge",
    955  1.57     joerg 		       SYSCTL_DESCR("multicast kludge information"),
    956  1.57     joerg 		       in6_mkludge_sysctl, 0, NULL, 0,
    957  1.57     joerg 		       CTL_NET, PF_INET6, CTL_CREATE, CTL_EOL);
    958  1.57     joerg }
    959