nd6.c revision 1.107 1 1.107 christos /* $NetBSD: nd6.c,v 1.107 2006/11/16 01:33:45 christos Exp $ */
2 1.65 itojun /* $KAME: nd6.c,v 1.279 2002/06/08 11:16:51 itojun Exp $ */
3 1.4 thorpej
4 1.2 itojun /*
5 1.2 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6 1.2 itojun * All rights reserved.
7 1.25 itojun *
8 1.2 itojun * Redistribution and use in source and binary forms, with or without
9 1.2 itojun * modification, are permitted provided that the following conditions
10 1.2 itojun * are met:
11 1.2 itojun * 1. Redistributions of source code must retain the above copyright
12 1.2 itojun * notice, this list of conditions and the following disclaimer.
13 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
14 1.2 itojun * notice, this list of conditions and the following disclaimer in the
15 1.2 itojun * documentation and/or other materials provided with the distribution.
16 1.2 itojun * 3. Neither the name of the project nor the names of its contributors
17 1.2 itojun * may be used to endorse or promote products derived from this software
18 1.2 itojun * without specific prior written permission.
19 1.25 itojun *
20 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.2 itojun * SUCH DAMAGE.
31 1.2 itojun */
32 1.2 itojun
33 1.55 lukem #include <sys/cdefs.h>
34 1.107 christos __KERNEL_RCSID(0, "$NetBSD: nd6.c,v 1.107 2006/11/16 01:33:45 christos Exp $");
35 1.87 itojun
36 1.87 itojun #include "opt_ipsec.h"
37 1.2 itojun
38 1.2 itojun #include <sys/param.h>
39 1.2 itojun #include <sys/systm.h>
40 1.20 thorpej #include <sys/callout.h>
41 1.2 itojun #include <sys/malloc.h>
42 1.2 itojun #include <sys/mbuf.h>
43 1.2 itojun #include <sys/socket.h>
44 1.2 itojun #include <sys/sockio.h>
45 1.2 itojun #include <sys/time.h>
46 1.2 itojun #include <sys/kernel.h>
47 1.18 itojun #include <sys/protosw.h>
48 1.2 itojun #include <sys/errno.h>
49 1.2 itojun #include <sys/ioctl.h>
50 1.2 itojun #include <sys/syslog.h>
51 1.2 itojun #include <sys/queue.h>
52 1.2 itojun
53 1.2 itojun #include <net/if.h>
54 1.2 itojun #include <net/if_dl.h>
55 1.2 itojun #include <net/if_types.h>
56 1.2 itojun #include <net/route.h>
57 1.62 itojun #include <net/if_ether.h>
58 1.62 itojun #include <net/if_fddi.h>
59 1.62 itojun #include <net/if_arc.h>
60 1.2 itojun
61 1.2 itojun #include <netinet/in.h>
62 1.2 itojun #include <netinet6/in6_var.h>
63 1.17 itojun #include <netinet/ip6.h>
64 1.2 itojun #include <netinet6/ip6_var.h>
65 1.96 rpaulo #include <netinet6/scope6_var.h>
66 1.2 itojun #include <netinet6/nd6.h>
67 1.17 itojun #include <netinet/icmp6.h>
68 1.87 itojun
69 1.87 itojun #ifdef IPSEC
70 1.87 itojun #include <netinet6/ipsec.h>
71 1.87 itojun #endif
72 1.2 itojun
73 1.12 itojun #include <net/net_osdep.h>
74 1.12 itojun
75 1.2 itojun #define ND6_SLOWTIMER_INTERVAL (60 * 60) /* 1 hour */
76 1.2 itojun #define ND6_RECALC_REACHTM_INTERVAL (60 * 120) /* 2 hours */
77 1.2 itojun
78 1.2 itojun #define SIN6(s) ((struct sockaddr_in6 *)s)
79 1.2 itojun #define SDL(s) ((struct sockaddr_dl *)s)
80 1.2 itojun
81 1.2 itojun /* timer values */
82 1.2 itojun int nd6_prune = 1; /* walk list every 1 seconds */
83 1.2 itojun int nd6_delay = 5; /* delay first probe time 5 second */
84 1.2 itojun int nd6_umaxtries = 3; /* maximum unicast query */
85 1.2 itojun int nd6_mmaxtries = 3; /* maximum multicast query */
86 1.2 itojun int nd6_useloopback = 1; /* use loopback interface for local traffic */
87 1.42 itojun int nd6_gctimer = (60 * 60 * 24); /* 1 day: garbage collection timer */
88 1.2 itojun
89 1.12 itojun /* preventing too many loops in ND option parsing */
90 1.12 itojun int nd6_maxndopt = 10; /* max # of ND options allowed */
91 1.12 itojun
92 1.31 itojun int nd6_maxnudhint = 0; /* max # of subsequent upper layer hints */
93 1.31 itojun
94 1.99 rpaulo int nd6_maxqueuelen = 1; /* max # of packets cached in unresolved ND entries */
95 1.99 rpaulo
96 1.36 itojun #ifdef ND6_DEBUG
97 1.36 itojun int nd6_debug = 1;
98 1.36 itojun #else
99 1.36 itojun int nd6_debug = 0;
100 1.36 itojun #endif
101 1.36 itojun
102 1.2 itojun /* for debugging? */
103 1.2 itojun static int nd6_inuse, nd6_allocated;
104 1.2 itojun
105 1.104 christos struct llinfo_nd6 llinfo_nd6 = {
106 1.104 christos .ln_prev = &llinfo_nd6,
107 1.104 christos .ln_next = &llinfo_nd6,
108 1.104 christos };
109 1.12 itojun struct nd_drhead nd_defrouter;
110 1.2 itojun struct nd_prhead nd_prefix = { 0 };
111 1.2 itojun
112 1.2 itojun int nd6_recalc_reachtm_interval = ND6_RECALC_REACHTM_INTERVAL;
113 1.12 itojun static struct sockaddr_in6 all1_sa;
114 1.2 itojun
115 1.61 itojun static void nd6_setmtu0 __P((struct ifnet *, struct nd_ifinfo *));
116 1.2 itojun static void nd6_slowtimo __P((void *));
117 1.99 rpaulo static int regen_tmpaddr __P((struct in6_ifaddr *));
118 1.54 itojun static struct llinfo_nd6 *nd6_free __P((struct rtentry *, int));
119 1.86 itojun static void nd6_llinfo_timer __P((void *));
120 1.100 rpaulo static void clear_llinfo_pqueue __P((struct llinfo_nd6 *));
121 1.2 itojun
122 1.80 he struct callout nd6_slowtimo_ch = CALLOUT_INITIALIZER;
123 1.80 he struct callout nd6_timer_ch = CALLOUT_INITIALIZER;
124 1.99 rpaulo extern struct callout in6_tmpaddrtimer_ch;
125 1.20 thorpej
126 1.65 itojun static int fill_drlist __P((void *, size_t *, size_t));
127 1.65 itojun static int fill_prlist __P((void *, size_t *, size_t));
128 1.79 thorpej
129 1.79 thorpej MALLOC_DEFINE(M_IP6NDP, "NDP", "IPv6 Neighbour Discovery");
130 1.65 itojun
131 1.2 itojun void
132 1.2 itojun nd6_init()
133 1.2 itojun {
134 1.2 itojun static int nd6_init_done = 0;
135 1.12 itojun int i;
136 1.2 itojun
137 1.2 itojun if (nd6_init_done) {
138 1.2 itojun log(LOG_NOTICE, "nd6_init called more than once(ignored)\n");
139 1.2 itojun return;
140 1.2 itojun }
141 1.12 itojun
142 1.12 itojun all1_sa.sin6_family = AF_INET6;
143 1.12 itojun all1_sa.sin6_len = sizeof(struct sockaddr_in6);
144 1.12 itojun for (i = 0; i < sizeof(all1_sa.sin6_addr); i++)
145 1.12 itojun all1_sa.sin6_addr.s6_addr[i] = 0xff;
146 1.12 itojun
147 1.12 itojun /* initialization of the default router list */
148 1.12 itojun TAILQ_INIT(&nd_defrouter);
149 1.12 itojun
150 1.2 itojun nd6_init_done = 1;
151 1.2 itojun
152 1.2 itojun /* start timer */
153 1.20 thorpej callout_reset(&nd6_slowtimo_ch, ND6_SLOWTIMER_INTERVAL * hz,
154 1.20 thorpej nd6_slowtimo, NULL);
155 1.2 itojun }
156 1.2 itojun
157 1.58 itojun struct nd_ifinfo *
158 1.2 itojun nd6_ifattach(ifp)
159 1.2 itojun struct ifnet *ifp;
160 1.2 itojun {
161 1.58 itojun struct nd_ifinfo *nd;
162 1.2 itojun
163 1.58 itojun nd = (struct nd_ifinfo *)malloc(sizeof(*nd), M_IP6NDP, M_WAITOK);
164 1.58 itojun bzero(nd, sizeof(*nd));
165 1.2 itojun
166 1.58 itojun nd->initialized = 1;
167 1.2 itojun
168 1.58 itojun nd->chlim = IPV6_DEFHLIM;
169 1.58 itojun nd->basereachable = REACHABLE_TIME;
170 1.58 itojun nd->reachable = ND_COMPUTE_RTIME(nd->basereachable);
171 1.58 itojun nd->retrans = RETRANS_TIMER;
172 1.65 itojun /*
173 1.65 itojun * Note that the default value of ip6_accept_rtadv is 0, which means
174 1.65 itojun * we won't accept RAs by default even if we set ND6_IFF_ACCEPT_RTADV
175 1.65 itojun * here.
176 1.65 itojun */
177 1.65 itojun nd->flags = (ND6_IFF_PERFORMNUD | ND6_IFF_ACCEPT_RTADV);
178 1.61 itojun
179 1.61 itojun /* XXX: we cannot call nd6_setmtu since ifp is not fully initialized */
180 1.61 itojun nd6_setmtu0(ifp, nd);
181 1.2 itojun
182 1.58 itojun return nd;
183 1.58 itojun }
184 1.21 itojun
185 1.58 itojun void
186 1.58 itojun nd6_ifdetach(nd)
187 1.58 itojun struct nd_ifinfo *nd;
188 1.58 itojun {
189 1.21 itojun
190 1.58 itojun free(nd, M_IP6NDP);
191 1.2 itojun }
192 1.2 itojun
193 1.2 itojun void
194 1.61 itojun nd6_setmtu(ifp)
195 1.61 itojun struct ifnet *ifp;
196 1.61 itojun {
197 1.61 itojun nd6_setmtu0(ifp, ND_IFINFO(ifp));
198 1.61 itojun }
199 1.61 itojun
200 1.61 itojun void
201 1.61 itojun nd6_setmtu0(ifp, ndi)
202 1.2 itojun struct ifnet *ifp;
203 1.58 itojun struct nd_ifinfo *ndi;
204 1.2 itojun {
205 1.61 itojun u_int32_t omaxmtu;
206 1.61 itojun
207 1.61 itojun omaxmtu = ndi->maxmtu;
208 1.2 itojun
209 1.40 itojun switch (ifp->if_type) {
210 1.62 itojun case IFT_ARCNET:
211 1.62 itojun ndi->maxmtu = MIN(ARC_PHDS_MAXMTU, ifp->if_mtu); /* RFC2497 */
212 1.39 itojun break;
213 1.58 itojun case IFT_FDDI:
214 1.58 itojun ndi->maxmtu = MIN(FDDIIPMTU, ifp->if_mtu);
215 1.58 itojun break;
216 1.39 itojun default:
217 1.39 itojun ndi->maxmtu = ifp->if_mtu;
218 1.39 itojun break;
219 1.2 itojun }
220 1.2 itojun
221 1.61 itojun /*
222 1.61 itojun * Decreasing the interface MTU under IPV6 minimum MTU may cause
223 1.61 itojun * undesirable situation. We thus notify the operator of the change
224 1.61 itojun * explicitly. The check for omaxmtu is necessary to restrict the
225 1.63 itojun * log to the case of changing the MTU, not initializing it.
226 1.61 itojun */
227 1.61 itojun if (omaxmtu >= IPV6_MMTU && ndi->maxmtu < IPV6_MMTU) {
228 1.81 christos log(LOG_NOTICE, "nd6_setmtu0: new link MTU on %s (%lu) is too"
229 1.81 christos " small for IPv6 which needs %lu\n",
230 1.81 christos if_name(ifp), (unsigned long)ndi->maxmtu, (unsigned long)
231 1.81 christos IPV6_MMTU);
232 1.2 itojun }
233 1.58 itojun
234 1.58 itojun if (ndi->maxmtu > in6_maxmtu)
235 1.58 itojun in6_setmaxmtu(); /* check all interfaces just in case */
236 1.2 itojun }
237 1.2 itojun
238 1.2 itojun void
239 1.2 itojun nd6_option_init(opt, icmp6len, ndopts)
240 1.2 itojun void *opt;
241 1.2 itojun int icmp6len;
242 1.2 itojun union nd_opts *ndopts;
243 1.2 itojun {
244 1.58 itojun
245 1.2 itojun bzero(ndopts, sizeof(*ndopts));
246 1.2 itojun ndopts->nd_opts_search = (struct nd_opt_hdr *)opt;
247 1.2 itojun ndopts->nd_opts_last
248 1.2 itojun = (struct nd_opt_hdr *)(((u_char *)opt) + icmp6len);
249 1.2 itojun
250 1.2 itojun if (icmp6len == 0) {
251 1.2 itojun ndopts->nd_opts_done = 1;
252 1.2 itojun ndopts->nd_opts_search = NULL;
253 1.2 itojun }
254 1.2 itojun }
255 1.2 itojun
256 1.2 itojun /*
257 1.2 itojun * Take one ND option.
258 1.2 itojun */
259 1.2 itojun struct nd_opt_hdr *
260 1.2 itojun nd6_option(ndopts)
261 1.2 itojun union nd_opts *ndopts;
262 1.2 itojun {
263 1.2 itojun struct nd_opt_hdr *nd_opt;
264 1.2 itojun int olen;
265 1.2 itojun
266 1.99 rpaulo if (ndopts == NULL)
267 1.76 provos panic("ndopts == NULL in nd6_option");
268 1.99 rpaulo if (ndopts->nd_opts_last == NULL)
269 1.76 provos panic("uninitialized ndopts in nd6_option");
270 1.99 rpaulo if (ndopts->nd_opts_search == NULL)
271 1.2 itojun return NULL;
272 1.2 itojun if (ndopts->nd_opts_done)
273 1.2 itojun return NULL;
274 1.2 itojun
275 1.2 itojun nd_opt = ndopts->nd_opts_search;
276 1.2 itojun
277 1.40 itojun /* make sure nd_opt_len is inside the buffer */
278 1.40 itojun if ((caddr_t)&nd_opt->nd_opt_len >= (caddr_t)ndopts->nd_opts_last) {
279 1.40 itojun bzero(ndopts, sizeof(*ndopts));
280 1.40 itojun return NULL;
281 1.40 itojun }
282 1.40 itojun
283 1.2 itojun olen = nd_opt->nd_opt_len << 3;
284 1.2 itojun if (olen == 0) {
285 1.2 itojun /*
286 1.2 itojun * Message validation requires that all included
287 1.2 itojun * options have a length that is greater than zero.
288 1.2 itojun */
289 1.2 itojun bzero(ndopts, sizeof(*ndopts));
290 1.2 itojun return NULL;
291 1.2 itojun }
292 1.2 itojun
293 1.2 itojun ndopts->nd_opts_search = (struct nd_opt_hdr *)((caddr_t)nd_opt + olen);
294 1.40 itojun if (ndopts->nd_opts_search > ndopts->nd_opts_last) {
295 1.40 itojun /* option overruns the end of buffer, invalid */
296 1.40 itojun bzero(ndopts, sizeof(*ndopts));
297 1.40 itojun return NULL;
298 1.40 itojun } else if (ndopts->nd_opts_search == ndopts->nd_opts_last) {
299 1.40 itojun /* reached the end of options chain */
300 1.2 itojun ndopts->nd_opts_done = 1;
301 1.2 itojun ndopts->nd_opts_search = NULL;
302 1.2 itojun }
303 1.2 itojun return nd_opt;
304 1.2 itojun }
305 1.2 itojun
306 1.2 itojun /*
307 1.2 itojun * Parse multiple ND options.
308 1.2 itojun * This function is much easier to use, for ND routines that do not need
309 1.2 itojun * multiple options of the same type.
310 1.2 itojun */
311 1.2 itojun int
312 1.2 itojun nd6_options(ndopts)
313 1.2 itojun union nd_opts *ndopts;
314 1.2 itojun {
315 1.2 itojun struct nd_opt_hdr *nd_opt;
316 1.2 itojun int i = 0;
317 1.2 itojun
318 1.99 rpaulo if (ndopts == NULL)
319 1.76 provos panic("ndopts == NULL in nd6_options");
320 1.99 rpaulo if (ndopts->nd_opts_last == NULL)
321 1.76 provos panic("uninitialized ndopts in nd6_options");
322 1.99 rpaulo if (ndopts->nd_opts_search == NULL)
323 1.2 itojun return 0;
324 1.99 rpaulo
325 1.2 itojun while (1) {
326 1.2 itojun nd_opt = nd6_option(ndopts);
327 1.99 rpaulo if (nd_opt == NULL && ndopts->nd_opts_last == NULL) {
328 1.2 itojun /*
329 1.2 itojun * Message validation requires that all included
330 1.2 itojun * options have a length that is greater than zero.
331 1.2 itojun */
332 1.36 itojun icmp6stat.icp6s_nd_badopt++;
333 1.2 itojun bzero(ndopts, sizeof(*ndopts));
334 1.2 itojun return -1;
335 1.2 itojun }
336 1.2 itojun
337 1.99 rpaulo if (nd_opt == NULL)
338 1.2 itojun goto skip1;
339 1.2 itojun
340 1.2 itojun switch (nd_opt->nd_opt_type) {
341 1.2 itojun case ND_OPT_SOURCE_LINKADDR:
342 1.2 itojun case ND_OPT_TARGET_LINKADDR:
343 1.2 itojun case ND_OPT_MTU:
344 1.2 itojun case ND_OPT_REDIRECTED_HEADER:
345 1.2 itojun if (ndopts->nd_opt_array[nd_opt->nd_opt_type]) {
346 1.36 itojun nd6log((LOG_INFO,
347 1.36 itojun "duplicated ND6 option found (type=%d)\n",
348 1.36 itojun nd_opt->nd_opt_type));
349 1.2 itojun /* XXX bark? */
350 1.2 itojun } else {
351 1.2 itojun ndopts->nd_opt_array[nd_opt->nd_opt_type]
352 1.2 itojun = nd_opt;
353 1.2 itojun }
354 1.2 itojun break;
355 1.2 itojun case ND_OPT_PREFIX_INFORMATION:
356 1.2 itojun if (ndopts->nd_opt_array[nd_opt->nd_opt_type] == 0) {
357 1.2 itojun ndopts->nd_opt_array[nd_opt->nd_opt_type]
358 1.2 itojun = nd_opt;
359 1.2 itojun }
360 1.2 itojun ndopts->nd_opts_pi_end =
361 1.2 itojun (struct nd_opt_prefix_info *)nd_opt;
362 1.2 itojun break;
363 1.2 itojun default:
364 1.2 itojun /*
365 1.2 itojun * Unknown options must be silently ignored,
366 1.2 itojun * to accomodate future extension to the protocol.
367 1.2 itojun */
368 1.36 itojun nd6log((LOG_DEBUG,
369 1.2 itojun "nd6_options: unsupported option %d - "
370 1.36 itojun "option ignored\n", nd_opt->nd_opt_type));
371 1.2 itojun }
372 1.2 itojun
373 1.2 itojun skip1:
374 1.2 itojun i++;
375 1.12 itojun if (i > nd6_maxndopt) {
376 1.12 itojun icmp6stat.icp6s_nd_toomanyopt++;
377 1.36 itojun nd6log((LOG_INFO, "too many loop in nd opt\n"));
378 1.2 itojun break;
379 1.2 itojun }
380 1.2 itojun
381 1.2 itojun if (ndopts->nd_opts_done)
382 1.2 itojun break;
383 1.2 itojun }
384 1.2 itojun
385 1.2 itojun return 0;
386 1.2 itojun }
387 1.2 itojun
388 1.2 itojun /*
389 1.86 itojun * ND6 timer routine to handle ND6 entries
390 1.2 itojun */
391 1.2 itojun void
392 1.94 christos nd6_llinfo_settimer(ln, xtick)
393 1.86 itojun struct llinfo_nd6 *ln;
394 1.94 christos long xtick;
395 1.86 itojun {
396 1.86 itojun int s;
397 1.86 itojun
398 1.86 itojun s = splsoftnet();
399 1.86 itojun
400 1.94 christos if (xtick < 0) {
401 1.86 itojun ln->ln_expire = 0;
402 1.86 itojun ln->ln_ntick = 0;
403 1.86 itojun callout_stop(&ln->ln_timer_ch);
404 1.86 itojun } else {
405 1.103 kardel ln->ln_expire = time_second + xtick / hz;
406 1.94 christos if (xtick > INT_MAX) {
407 1.94 christos ln->ln_ntick = xtick - INT_MAX;
408 1.86 itojun callout_reset(&ln->ln_timer_ch, INT_MAX,
409 1.86 itojun nd6_llinfo_timer, ln);
410 1.86 itojun } else {
411 1.86 itojun ln->ln_ntick = 0;
412 1.94 christos callout_reset(&ln->ln_timer_ch, xtick,
413 1.86 itojun nd6_llinfo_timer, ln);
414 1.86 itojun }
415 1.86 itojun }
416 1.86 itojun
417 1.86 itojun splx(s);
418 1.86 itojun }
419 1.86 itojun
420 1.86 itojun static void
421 1.86 itojun nd6_llinfo_timer(arg)
422 1.86 itojun void *arg;
423 1.2 itojun {
424 1.2 itojun int s;
425 1.38 itojun struct llinfo_nd6 *ln;
426 1.86 itojun struct rtentry *rt;
427 1.86 itojun const struct sockaddr_in6 *dst;
428 1.65 itojun struct ifnet *ifp;
429 1.86 itojun struct nd_ifinfo *ndi = NULL;
430 1.63 itojun
431 1.5 itojun s = splsoftnet();
432 1.2 itojun
433 1.86 itojun ln = (struct llinfo_nd6 *)arg;
434 1.86 itojun
435 1.86 itojun if (ln->ln_ntick > 0) {
436 1.97 dyoung nd6_llinfo_settimer(ln, ln->ln_ntick);
437 1.86 itojun splx(s);
438 1.86 itojun return;
439 1.86 itojun }
440 1.86 itojun
441 1.86 itojun if ((rt = ln->ln_rt) == NULL)
442 1.86 itojun panic("ln->ln_rt == NULL");
443 1.86 itojun if ((ifp = rt->rt_ifp) == NULL)
444 1.86 itojun panic("ln->ln_rt->rt_ifp == NULL");
445 1.86 itojun ndi = ND_IFINFO(ifp);
446 1.86 itojun dst = (struct sockaddr_in6 *)rt_key(rt);
447 1.86 itojun
448 1.86 itojun /* sanity check */
449 1.86 itojun if (rt->rt_llinfo && (struct llinfo_nd6 *)rt->rt_llinfo != ln)
450 1.86 itojun panic("rt_llinfo(%p) is not equal to ln(%p)",
451 1.86 itojun rt->rt_llinfo, ln);
452 1.86 itojun if (!dst)
453 1.86 itojun panic("dst=0 in nd6_timer(ln=%p)", ln);
454 1.86 itojun
455 1.86 itojun switch (ln->ln_state) {
456 1.86 itojun case ND6_LLINFO_INCOMPLETE:
457 1.86 itojun if (ln->ln_asked < nd6_mmaxtries) {
458 1.86 itojun ln->ln_asked++;
459 1.86 itojun nd6_llinfo_settimer(ln, (long)ndi->retrans * hz / 1000);
460 1.86 itojun nd6_ns_output(ifp, NULL, &dst->sin6_addr, ln, 0);
461 1.86 itojun } else {
462 1.86 itojun struct mbuf *m = ln->ln_hold;
463 1.86 itojun if (m) {
464 1.100 rpaulo struct mbuf *m0;
465 1.100 rpaulo
466 1.86 itojun /*
467 1.96 rpaulo * assuming every packet in ln_hold has
468 1.96 rpaulo * the same IP header
469 1.86 itojun */
470 1.100 rpaulo m0 = m->m_nextpkt;
471 1.100 rpaulo m->m_nextpkt = NULL;
472 1.96 rpaulo icmp6_error2(m, ICMP6_DST_UNREACH,
473 1.96 rpaulo ICMP6_DST_UNREACH_ADDR, 0, rt->rt_ifp);
474 1.100 rpaulo
475 1.100 rpaulo ln->ln_hold = m0;
476 1.100 rpaulo clear_llinfo_pqueue(ln);
477 1.100 rpaulo }
478 1.86 itojun (void)nd6_free(rt, 0);
479 1.86 itojun ln = NULL;
480 1.2 itojun }
481 1.86 itojun break;
482 1.86 itojun case ND6_LLINFO_REACHABLE:
483 1.86 itojun if (!ND6_LLINFO_PERMANENT(ln)) {
484 1.86 itojun ln->ln_state = ND6_LLINFO_STALE;
485 1.86 itojun nd6_llinfo_settimer(ln, (long)nd6_gctimer * hz);
486 1.2 itojun }
487 1.86 itojun break;
488 1.2 itojun
489 1.86 itojun case ND6_LLINFO_STALE:
490 1.86 itojun /* Garbage Collection(RFC 2461 5.3) */
491 1.86 itojun if (!ND6_LLINFO_PERMANENT(ln)) {
492 1.86 itojun (void)nd6_free(rt, 1);
493 1.86 itojun ln = NULL;
494 1.2 itojun }
495 1.86 itojun break;
496 1.54 itojun
497 1.86 itojun case ND6_LLINFO_DELAY:
498 1.86 itojun if (ndi && (ndi->flags & ND6_IFF_PERFORMNUD) != 0) {
499 1.86 itojun /* We need NUD */
500 1.86 itojun ln->ln_asked = 1;
501 1.86 itojun ln->ln_state = ND6_LLINFO_PROBE;
502 1.86 itojun nd6_llinfo_settimer(ln, (long)ndi->retrans * hz / 1000);
503 1.86 itojun nd6_ns_output(ifp, &dst->sin6_addr,
504 1.86 itojun &dst->sin6_addr, ln, 0);
505 1.86 itojun } else {
506 1.86 itojun ln->ln_state = ND6_LLINFO_STALE; /* XXX */
507 1.86 itojun nd6_llinfo_settimer(ln, (long)nd6_gctimer * hz);
508 1.86 itojun }
509 1.86 itojun break;
510 1.86 itojun case ND6_LLINFO_PROBE:
511 1.86 itojun if (ln->ln_asked < nd6_umaxtries) {
512 1.86 itojun ln->ln_asked++;
513 1.86 itojun nd6_llinfo_settimer(ln, (long)ndi->retrans * hz / 1000);
514 1.86 itojun nd6_ns_output(ifp, &dst->sin6_addr,
515 1.86 itojun &dst->sin6_addr, ln, 0);
516 1.86 itojun } else {
517 1.86 itojun (void)nd6_free(rt, 0);
518 1.86 itojun ln = NULL;
519 1.86 itojun }
520 1.86 itojun break;
521 1.86 itojun }
522 1.65 itojun
523 1.86 itojun splx(s);
524 1.86 itojun }
525 1.42 itojun
526 1.86 itojun /*
527 1.86 itojun * ND6 timer routine to expire default route list and prefix list
528 1.86 itojun */
529 1.86 itojun void
530 1.107 christos nd6_timer(void *ignored_arg)
531 1.86 itojun {
532 1.86 itojun int s;
533 1.86 itojun struct nd_defrouter *dr;
534 1.86 itojun struct nd_prefix *pr;
535 1.86 itojun struct in6_ifaddr *ia6, *nia6;
536 1.99 rpaulo struct in6_addrlifetime *lt6;
537 1.42 itojun
538 1.86 itojun s = splsoftnet();
539 1.86 itojun callout_reset(&nd6_timer_ch, nd6_prune * hz,
540 1.86 itojun nd6_timer, NULL);
541 1.63 itojun
542 1.43 itojun /* expire default router list */
543 1.12 itojun dr = TAILQ_FIRST(&nd_defrouter);
544 1.2 itojun while (dr) {
545 1.103 kardel if (dr->expire && dr->expire < time_second) {
546 1.2 itojun struct nd_defrouter *t;
547 1.12 itojun t = TAILQ_NEXT(dr, dr_entry);
548 1.2 itojun defrtrlist_del(dr);
549 1.2 itojun dr = t;
550 1.31 itojun } else {
551 1.12 itojun dr = TAILQ_NEXT(dr, dr_entry);
552 1.31 itojun }
553 1.2 itojun }
554 1.2 itojun
555 1.65 itojun /*
556 1.65 itojun * expire interface addresses.
557 1.65 itojun * in the past the loop was inside prefix expiry processing.
558 1.65 itojun * However, from a stricter speci-confrmance standpoint, we should
559 1.65 itojun * rather separate address lifetimes and prefix lifetimes.
560 1.65 itojun */
561 1.99 rpaulo addrloop:
562 1.65 itojun for (ia6 = in6_ifaddr; ia6; ia6 = nia6) {
563 1.65 itojun nia6 = ia6->ia_next;
564 1.65 itojun /* check address lifetime */
565 1.99 rpaulo lt6 = &ia6->ia6_lifetime;
566 1.65 itojun if (IFA6_IS_INVALID(ia6)) {
567 1.99 rpaulo int regen = 0;
568 1.99 rpaulo
569 1.99 rpaulo /*
570 1.99 rpaulo * If the expiring address is temporary, try
571 1.99 rpaulo * regenerating a new one. This would be useful when
572 1.99 rpaulo * we suspended a laptop PC, then turned it on after a
573 1.99 rpaulo * period that could invalidate all temporary
574 1.99 rpaulo * addresses. Although we may have to restart the
575 1.99 rpaulo * loop (see below), it must be after purging the
576 1.99 rpaulo * address. Otherwise, we'd see an infinite loop of
577 1.99 rpaulo * regeneration.
578 1.99 rpaulo */
579 1.99 rpaulo if (ip6_use_tempaddr &&
580 1.99 rpaulo (ia6->ia6_flags & IN6_IFF_TEMPORARY) != 0) {
581 1.99 rpaulo if (regen_tmpaddr(ia6) == 0)
582 1.99 rpaulo regen = 1;
583 1.99 rpaulo }
584 1.99 rpaulo
585 1.99 rpaulo in6_purgeaddr(&ia6->ia_ifa);
586 1.99 rpaulo
587 1.99 rpaulo if (regen)
588 1.99 rpaulo goto addrloop; /* XXX: see below */
589 1.99 rpaulo } else if (IFA6_IS_DEPRECATED(ia6)) {
590 1.99 rpaulo int oldflags = ia6->ia6_flags;
591 1.99 rpaulo
592 1.99 rpaulo ia6->ia6_flags |= IN6_IFF_DEPRECATED;
593 1.99 rpaulo
594 1.99 rpaulo /*
595 1.99 rpaulo * If a temporary address has just become deprecated,
596 1.99 rpaulo * regenerate a new one if possible.
597 1.99 rpaulo */
598 1.99 rpaulo if (ip6_use_tempaddr &&
599 1.99 rpaulo (ia6->ia6_flags & IN6_IFF_TEMPORARY) != 0 &&
600 1.99 rpaulo (oldflags & IN6_IFF_DEPRECATED) == 0) {
601 1.99 rpaulo
602 1.99 rpaulo if (regen_tmpaddr(ia6) == 0) {
603 1.99 rpaulo /*
604 1.99 rpaulo * A new temporary address is
605 1.99 rpaulo * generated.
606 1.99 rpaulo * XXX: this means the address chain
607 1.99 rpaulo * has changed while we are still in
608 1.99 rpaulo * the loop. Although the change
609 1.99 rpaulo * would not cause disaster (because
610 1.99 rpaulo * it's not a deletion, but an
611 1.99 rpaulo * addition,) we'd rather restart the
612 1.99 rpaulo * loop just for safety. Or does this
613 1.99 rpaulo * significantly reduce performance??
614 1.99 rpaulo */
615 1.99 rpaulo goto addrloop;
616 1.99 rpaulo }
617 1.99 rpaulo }
618 1.65 itojun } else {
619 1.65 itojun /*
620 1.65 itojun * A new RA might have made a deprecated address
621 1.65 itojun * preferred.
622 1.65 itojun */
623 1.65 itojun ia6->ia6_flags &= ~IN6_IFF_DEPRECATED;
624 1.2 itojun }
625 1.65 itojun }
626 1.2 itojun
627 1.65 itojun /* expire prefix list */
628 1.65 itojun pr = nd_prefix.lh_first;
629 1.65 itojun while (pr) {
630 1.2 itojun /*
631 1.2 itojun * check prefix lifetime.
632 1.2 itojun * since pltime is just for autoconf, pltime processing for
633 1.2 itojun * prefix is not necessary.
634 1.2 itojun */
635 1.65 itojun if (pr->ndpr_vltime != ND6_INFINITE_LIFETIME &&
636 1.103 kardel time_second - pr->ndpr_lastupdate > pr->ndpr_vltime) {
637 1.2 itojun struct nd_prefix *t;
638 1.2 itojun t = pr->ndpr_next;
639 1.2 itojun
640 1.2 itojun /*
641 1.2 itojun * address expiration and prefix expiration are
642 1.65 itojun * separate. NEVER perform in6_purgeaddr here.
643 1.2 itojun */
644 1.2 itojun
645 1.2 itojun prelist_remove(pr);
646 1.2 itojun pr = t;
647 1.2 itojun } else
648 1.2 itojun pr = pr->ndpr_next;
649 1.2 itojun }
650 1.2 itojun splx(s);
651 1.16 itojun }
652 1.16 itojun
653 1.99 rpaulo static int
654 1.99 rpaulo regen_tmpaddr(ia6)
655 1.99 rpaulo struct in6_ifaddr *ia6; /* deprecated/invalidated temporary address */
656 1.99 rpaulo {
657 1.99 rpaulo struct ifaddr *ifa;
658 1.99 rpaulo struct ifnet *ifp;
659 1.99 rpaulo struct in6_ifaddr *public_ifa6 = NULL;
660 1.99 rpaulo
661 1.99 rpaulo ifp = ia6->ia_ifa.ifa_ifp;
662 1.99 rpaulo for (ifa = ifp->if_addrlist.tqh_first; ifa;
663 1.99 rpaulo ifa = ifa->ifa_list.tqe_next) {
664 1.99 rpaulo struct in6_ifaddr *it6;
665 1.99 rpaulo
666 1.99 rpaulo if (ifa->ifa_addr->sa_family != AF_INET6)
667 1.99 rpaulo continue;
668 1.99 rpaulo
669 1.99 rpaulo it6 = (struct in6_ifaddr *)ifa;
670 1.99 rpaulo
671 1.99 rpaulo /* ignore no autoconf addresses. */
672 1.99 rpaulo if ((it6->ia6_flags & IN6_IFF_AUTOCONF) == 0)
673 1.99 rpaulo continue;
674 1.99 rpaulo
675 1.99 rpaulo /* ignore autoconf addresses with different prefixes. */
676 1.99 rpaulo if (it6->ia6_ndpr == NULL || it6->ia6_ndpr != ia6->ia6_ndpr)
677 1.99 rpaulo continue;
678 1.99 rpaulo
679 1.99 rpaulo /*
680 1.99 rpaulo * Now we are looking at an autoconf address with the same
681 1.99 rpaulo * prefix as ours. If the address is temporary and is still
682 1.99 rpaulo * preferred, do not create another one. It would be rare, but
683 1.99 rpaulo * could happen, for example, when we resume a laptop PC after
684 1.99 rpaulo * a long period.
685 1.99 rpaulo */
686 1.99 rpaulo if ((it6->ia6_flags & IN6_IFF_TEMPORARY) != 0 &&
687 1.99 rpaulo !IFA6_IS_DEPRECATED(it6)) {
688 1.99 rpaulo public_ifa6 = NULL;
689 1.99 rpaulo break;
690 1.99 rpaulo }
691 1.99 rpaulo
692 1.99 rpaulo /*
693 1.99 rpaulo * This is a public autoconf address that has the same prefix
694 1.99 rpaulo * as ours. If it is preferred, keep it. We can't break the
695 1.99 rpaulo * loop here, because there may be a still-preferred temporary
696 1.99 rpaulo * address with the prefix.
697 1.99 rpaulo */
698 1.99 rpaulo if (!IFA6_IS_DEPRECATED(it6))
699 1.99 rpaulo public_ifa6 = it6;
700 1.99 rpaulo }
701 1.99 rpaulo
702 1.99 rpaulo if (public_ifa6 != NULL) {
703 1.99 rpaulo int e;
704 1.99 rpaulo
705 1.99 rpaulo /*
706 1.99 rpaulo * Random factor is introduced in the preferred lifetime, so
707 1.99 rpaulo * we do not need additional delay (3rd arg to in6_tmpifadd).
708 1.99 rpaulo */
709 1.99 rpaulo if ((e = in6_tmpifadd(public_ifa6, 0, 0)) != 0) {
710 1.99 rpaulo log(LOG_NOTICE, "regen_tmpaddr: failed to create a new"
711 1.99 rpaulo " tmp addr, errno=%d\n", e);
712 1.99 rpaulo return (-1);
713 1.99 rpaulo }
714 1.99 rpaulo return (0);
715 1.99 rpaulo }
716 1.99 rpaulo
717 1.99 rpaulo return (-1);
718 1.99 rpaulo }
719 1.99 rpaulo
720 1.16 itojun /*
721 1.16 itojun * Nuke neighbor cache/prefix/default router management table, right before
722 1.16 itojun * ifp goes away.
723 1.16 itojun */
724 1.16 itojun void
725 1.16 itojun nd6_purge(ifp)
726 1.16 itojun struct ifnet *ifp;
727 1.16 itojun {
728 1.16 itojun struct llinfo_nd6 *ln, *nln;
729 1.65 itojun struct nd_defrouter *dr, *ndr;
730 1.16 itojun struct nd_prefix *pr, *npr;
731 1.16 itojun
732 1.65 itojun /*
733 1.65 itojun * Nuke default router list entries toward ifp.
734 1.65 itojun * We defer removal of default router list entries that is installed
735 1.65 itojun * in the routing table, in order to keep additional side effects as
736 1.65 itojun * small as possible.
737 1.65 itojun */
738 1.65 itojun for (dr = TAILQ_FIRST(&nd_defrouter); dr; dr = ndr) {
739 1.65 itojun ndr = TAILQ_NEXT(dr, dr_entry);
740 1.65 itojun if (dr->installed)
741 1.65 itojun continue;
742 1.65 itojun
743 1.65 itojun if (dr->ifp == ifp)
744 1.65 itojun defrtrlist_del(dr);
745 1.65 itojun }
746 1.65 itojun for (dr = TAILQ_FIRST(&nd_defrouter); dr; dr = ndr) {
747 1.65 itojun ndr = TAILQ_NEXT(dr, dr_entry);
748 1.65 itojun if (!dr->installed)
749 1.65 itojun continue;
750 1.65 itojun
751 1.16 itojun if (dr->ifp == ifp)
752 1.16 itojun defrtrlist_del(dr);
753 1.16 itojun }
754 1.16 itojun
755 1.16 itojun /* Nuke prefix list entries toward ifp */
756 1.16 itojun for (pr = nd_prefix.lh_first; pr; pr = npr) {
757 1.16 itojun npr = pr->ndpr_next;
758 1.16 itojun if (pr->ndpr_ifp == ifp) {
759 1.65 itojun /*
760 1.92 tron * Because if_detach() does *not* release prefixes
761 1.92 tron * while purging addresses the reference count will
762 1.92 tron * still be above zero. We therefore reset it to
763 1.92 tron * make sure that the prefix really gets purged.
764 1.92 tron */
765 1.92 tron pr->ndpr_refcnt = 0;
766 1.92 tron /*
767 1.65 itojun * Previously, pr->ndpr_addr is removed as well,
768 1.65 itojun * but I strongly believe we don't have to do it.
769 1.65 itojun * nd6_purge() is only called from in6_ifdetach(),
770 1.65 itojun * which removes all the associated interface addresses
771 1.65 itojun * by itself.
772 1.65 itojun * (jinmei (at) kame.net 20010129)
773 1.65 itojun */
774 1.16 itojun prelist_remove(pr);
775 1.16 itojun }
776 1.16 itojun }
777 1.16 itojun
778 1.16 itojun /* cancel default outgoing interface setting */
779 1.16 itojun if (nd6_defifindex == ifp->if_index)
780 1.16 itojun nd6_setdefaultiface(0);
781 1.16 itojun
782 1.48 itojun if (!ip6_forwarding && ip6_accept_rtadv) { /* XXX: too restrictive? */
783 1.48 itojun /* refresh default router list */
784 1.48 itojun defrouter_select();
785 1.48 itojun }
786 1.16 itojun
787 1.16 itojun /*
788 1.16 itojun * Nuke neighbor cache entries for the ifp.
789 1.16 itojun * Note that rt->rt_ifp may not be the same as ifp,
790 1.16 itojun * due to KAME goto ours hack. See RTM_RESOLVE case in
791 1.18 itojun * nd6_rtrequest(), and ip6_input().
792 1.16 itojun */
793 1.16 itojun ln = llinfo_nd6.ln_next;
794 1.16 itojun while (ln && ln != &llinfo_nd6) {
795 1.16 itojun struct rtentry *rt;
796 1.16 itojun struct sockaddr_dl *sdl;
797 1.16 itojun
798 1.16 itojun nln = ln->ln_next;
799 1.16 itojun rt = ln->ln_rt;
800 1.16 itojun if (rt && rt->rt_gateway &&
801 1.16 itojun rt->rt_gateway->sa_family == AF_LINK) {
802 1.16 itojun sdl = (struct sockaddr_dl *)rt->rt_gateway;
803 1.16 itojun if (sdl->sdl_index == ifp->if_index)
804 1.54 itojun nln = nd6_free(rt, 0);
805 1.16 itojun }
806 1.16 itojun ln = nln;
807 1.16 itojun }
808 1.2 itojun }
809 1.2 itojun
810 1.2 itojun struct rtentry *
811 1.2 itojun nd6_lookup(addr6, create, ifp)
812 1.2 itojun struct in6_addr *addr6;
813 1.2 itojun int create;
814 1.2 itojun struct ifnet *ifp;
815 1.2 itojun {
816 1.2 itojun struct rtentry *rt;
817 1.2 itojun struct sockaddr_in6 sin6;
818 1.2 itojun
819 1.2 itojun bzero(&sin6, sizeof(sin6));
820 1.2 itojun sin6.sin6_len = sizeof(struct sockaddr_in6);
821 1.2 itojun sin6.sin6_family = AF_INET6;
822 1.2 itojun sin6.sin6_addr = *addr6;
823 1.13 itojun rt = rtalloc1((struct sockaddr *)&sin6, create);
824 1.2 itojun if (rt && (rt->rt_flags & RTF_LLINFO) == 0) {
825 1.2 itojun /*
826 1.2 itojun * This is the case for the default route.
827 1.25 itojun * If we want to create a neighbor cache for the address, we
828 1.2 itojun * should free the route for the destination and allocate an
829 1.2 itojun * interface route.
830 1.2 itojun */
831 1.2 itojun if (create) {
832 1.2 itojun RTFREE(rt);
833 1.99 rpaulo rt = NULL;
834 1.2 itojun }
835 1.2 itojun }
836 1.99 rpaulo if (rt == NULL) {
837 1.2 itojun if (create && ifp) {
838 1.25 itojun int e;
839 1.25 itojun
840 1.2 itojun /*
841 1.2 itojun * If no route is available and create is set,
842 1.2 itojun * we allocate a host route for the destination
843 1.2 itojun * and treat it like an interface route.
844 1.2 itojun * This hack is necessary for a neighbor which can't
845 1.2 itojun * be covered by our own prefix.
846 1.2 itojun */
847 1.2 itojun struct ifaddr *ifa =
848 1.65 itojun ifaof_ifpforaddr((struct sockaddr *)&sin6, ifp);
849 1.2 itojun if (ifa == NULL)
850 1.73 itojun return (NULL);
851 1.2 itojun
852 1.2 itojun /*
853 1.52 itojun * Create a new route. RTF_LLINFO is necessary
854 1.2 itojun * to create a Neighbor Cache entry for the
855 1.2 itojun * destination in nd6_rtrequest which will be
856 1.52 itojun * called in rtrequest via ifa->ifa_rtrequest.
857 1.2 itojun */
858 1.25 itojun if ((e = rtrequest(RTM_ADD, (struct sockaddr *)&sin6,
859 1.65 itojun ifa->ifa_addr, (struct sockaddr *)&all1_sa,
860 1.65 itojun (ifa->ifa_flags | RTF_HOST | RTF_LLINFO) &
861 1.65 itojun ~RTF_CLONING, &rt)) != 0) {
862 1.54 itojun #if 0
863 1.2 itojun log(LOG_ERR,
864 1.2 itojun "nd6_lookup: failed to add route for a "
865 1.25 itojun "neighbor(%s), errno=%d\n",
866 1.25 itojun ip6_sprintf(addr6), e);
867 1.54 itojun #endif
868 1.73 itojun return (NULL);
869 1.54 itojun }
870 1.2 itojun if (rt == NULL)
871 1.73 itojun return (NULL);
872 1.2 itojun if (rt->rt_llinfo) {
873 1.2 itojun struct llinfo_nd6 *ln =
874 1.65 itojun (struct llinfo_nd6 *)rt->rt_llinfo;
875 1.2 itojun ln->ln_state = ND6_LLINFO_NOSTATE;
876 1.2 itojun }
877 1.31 itojun } else
878 1.73 itojun return (NULL);
879 1.2 itojun }
880 1.2 itojun rt->rt_refcnt--;
881 1.12 itojun /*
882 1.12 itojun * Validation for the entry.
883 1.65 itojun * Note that the check for rt_llinfo is necessary because a cloned
884 1.65 itojun * route from a parent route that has the L flag (e.g. the default
885 1.65 itojun * route to a p2p interface) may have the flag, too, while the
886 1.65 itojun * destination is not actually a neighbor.
887 1.12 itojun * XXX: we can't use rt->rt_ifp to check for the interface, since
888 1.12 itojun * it might be the loopback interface if the entry is for our
889 1.12 itojun * own address on a non-loopback interface. Instead, we should
890 1.65 itojun * use rt->rt_ifa->ifa_ifp, which would specify the REAL
891 1.65 itojun * interface.
892 1.99 rpaulo * Note also that ifa_ifp and ifp may differ when we connect two
893 1.99 rpaulo * interfaces to a same link, install a link prefix to an interface,
894 1.99 rpaulo * and try to install a neighbor cache on an interface that does not
895 1.99 rpaulo * have a route to the prefix.
896 1.12 itojun */
897 1.2 itojun if ((rt->rt_flags & RTF_GATEWAY) || (rt->rt_flags & RTF_LLINFO) == 0 ||
898 1.65 itojun rt->rt_gateway->sa_family != AF_LINK || rt->rt_llinfo == NULL ||
899 1.12 itojun (ifp && rt->rt_ifa->ifa_ifp != ifp)) {
900 1.2 itojun if (create) {
901 1.77 itojun nd6log((LOG_DEBUG,
902 1.65 itojun "nd6_lookup: failed to lookup %s (if = %s)\n",
903 1.65 itojun ip6_sprintf(addr6),
904 1.77 itojun ifp ? if_name(ifp) : "unspec"));
905 1.2 itojun }
906 1.73 itojun return (NULL);
907 1.2 itojun }
908 1.73 itojun return (rt);
909 1.6 itojun }
910 1.6 itojun
911 1.6 itojun /*
912 1.6 itojun * Detect if a given IPv6 address identifies a neighbor on a given link.
913 1.25 itojun * XXX: should take care of the destination of a p2p link?
914 1.6 itojun */
915 1.6 itojun int
916 1.6 itojun nd6_is_addr_neighbor(addr, ifp)
917 1.29 itojun struct sockaddr_in6 *addr;
918 1.6 itojun struct ifnet *ifp;
919 1.6 itojun {
920 1.65 itojun struct nd_prefix *pr;
921 1.6 itojun
922 1.29 itojun /*
923 1.29 itojun * A link-local address is always a neighbor.
924 1.52 itojun * XXX: a link does not necessarily specify a single interface.
925 1.29 itojun */
926 1.96 rpaulo if (IN6_IS_ADDR_LINKLOCAL(&addr->sin6_addr)) {
927 1.96 rpaulo struct sockaddr_in6 sin6_copy;
928 1.96 rpaulo u_int32_t zone;
929 1.96 rpaulo
930 1.96 rpaulo /*
931 1.96 rpaulo * We need sin6_copy since sa6_recoverscope() may modify the
932 1.96 rpaulo * content (XXX).
933 1.96 rpaulo */
934 1.96 rpaulo sin6_copy = *addr;
935 1.96 rpaulo if (sa6_recoverscope(&sin6_copy))
936 1.96 rpaulo return (0); /* XXX: should be impossible */
937 1.96 rpaulo if (in6_setscope(&sin6_copy.sin6_addr, ifp, &zone))
938 1.96 rpaulo return (0);
939 1.96 rpaulo if (sin6_copy.sin6_scope_id == zone)
940 1.96 rpaulo return (1);
941 1.96 rpaulo else
942 1.96 rpaulo return (0);
943 1.96 rpaulo }
944 1.6 itojun
945 1.6 itojun /*
946 1.65 itojun * If the address matches one of our on-link prefixes, it should be a
947 1.65 itojun * neighbor.
948 1.6 itojun */
949 1.65 itojun for (pr = nd_prefix.lh_first; pr; pr = pr->ndpr_next) {
950 1.65 itojun if (pr->ndpr_ifp != ifp)
951 1.65 itojun continue;
952 1.65 itojun
953 1.65 itojun if (!(pr->ndpr_stateflags & NDPRF_ONLINK))
954 1.65 itojun continue;
955 1.65 itojun
956 1.65 itojun if (IN6_ARE_MASKED_ADDR_EQUAL(&pr->ndpr_prefix.sin6_addr,
957 1.65 itojun &addr->sin6_addr, &pr->ndpr_mask))
958 1.65 itojun return (1);
959 1.65 itojun }
960 1.6 itojun
961 1.65 itojun /*
962 1.65 itojun * If the default router list is empty, all addresses are regarded
963 1.65 itojun * as on-link, and thus, as a neighbor.
964 1.65 itojun * XXX: we restrict the condition to hosts, because routers usually do
965 1.65 itojun * not have the "default router list".
966 1.65 itojun */
967 1.65 itojun if (!ip6_forwarding && TAILQ_FIRST(&nd_defrouter) == NULL &&
968 1.65 itojun nd6_defifindex == ifp->if_index) {
969 1.73 itojun return (1);
970 1.6 itojun }
971 1.6 itojun
972 1.6 itojun /*
973 1.6 itojun * Even if the address matches none of our addresses, it might be
974 1.6 itojun * in the neighbor cache.
975 1.6 itojun */
976 1.88 simonb if (nd6_lookup(&addr->sin6_addr, 0, ifp) != NULL)
977 1.73 itojun return (1);
978 1.6 itojun
979 1.73 itojun return (0);
980 1.2 itojun }
981 1.2 itojun
982 1.2 itojun /*
983 1.2 itojun * Free an nd6 llinfo entry.
984 1.54 itojun * Since the function would cause significant changes in the kernel, DO NOT
985 1.54 itojun * make it global, unless you have a strong reason for the change, and are sure
986 1.54 itojun * that the change is safe.
987 1.2 itojun */
988 1.54 itojun static struct llinfo_nd6 *
989 1.54 itojun nd6_free(rt, gc)
990 1.2 itojun struct rtentry *rt;
991 1.54 itojun int gc;
992 1.2 itojun {
993 1.37 itojun struct llinfo_nd6 *ln = (struct llinfo_nd6 *)rt->rt_llinfo, *next;
994 1.12 itojun struct in6_addr in6 = ((struct sockaddr_in6 *)rt_key(rt))->sin6_addr;
995 1.12 itojun struct nd_defrouter *dr;
996 1.2 itojun
997 1.18 itojun /*
998 1.54 itojun * we used to have pfctlinput(PRC_HOSTDEAD) here.
999 1.54 itojun * even though it is not harmful, it was not really necessary.
1000 1.18 itojun */
1001 1.18 itojun
1002 1.86 itojun /* cancel timer */
1003 1.86 itojun nd6_llinfo_settimer(ln, -1);
1004 1.86 itojun
1005 1.85 itojun if (!ip6_forwarding) {
1006 1.2 itojun int s;
1007 1.5 itojun s = splsoftnet();
1008 1.12 itojun dr = defrouter_lookup(&((struct sockaddr_in6 *)rt_key(rt))->sin6_addr,
1009 1.65 itojun rt->rt_ifp);
1010 1.54 itojun
1011 1.54 itojun if (dr != NULL && dr->expire &&
1012 1.54 itojun ln->ln_state == ND6_LLINFO_STALE && gc) {
1013 1.54 itojun /*
1014 1.54 itojun * If the reason for the deletion is just garbage
1015 1.54 itojun * collection, and the neighbor is an active default
1016 1.54 itojun * router, do not delete it. Instead, reset the GC
1017 1.54 itojun * timer using the router's lifetime.
1018 1.54 itojun * Simply deleting the entry would affect default
1019 1.54 itojun * router selection, which is not necessarily a good
1020 1.54 itojun * thing, especially when we're using router preference
1021 1.54 itojun * values.
1022 1.54 itojun * XXX: the check for ln_state would be redundant,
1023 1.54 itojun * but we intentionally keep it just in case.
1024 1.54 itojun */
1025 1.103 kardel if (dr->expire > time_second)
1026 1.86 itojun nd6_llinfo_settimer(ln,
1027 1.103 kardel (dr->expire - time_second) * hz);
1028 1.86 itojun else
1029 1.86 itojun nd6_llinfo_settimer(ln, (long)nd6_gctimer * hz);
1030 1.54 itojun splx(s);
1031 1.73 itojun return (ln->ln_next);
1032 1.54 itojun }
1033 1.54 itojun
1034 1.12 itojun if (ln->ln_router || dr) {
1035 1.12 itojun /*
1036 1.12 itojun * rt6_flush must be called whether or not the neighbor
1037 1.12 itojun * is in the Default Router List.
1038 1.12 itojun * See a corresponding comment in nd6_na_input().
1039 1.12 itojun */
1040 1.12 itojun rt6_flush(&in6, rt->rt_ifp);
1041 1.12 itojun }
1042 1.12 itojun
1043 1.12 itojun if (dr) {
1044 1.12 itojun /*
1045 1.12 itojun * Unreachablity of a router might affect the default
1046 1.12 itojun * router selection and on-link detection of advertised
1047 1.12 itojun * prefixes.
1048 1.12 itojun */
1049 1.12 itojun
1050 1.2 itojun /*
1051 1.12 itojun * Temporarily fake the state to choose a new default
1052 1.12 itojun * router and to perform on-link determination of
1053 1.54 itojun * prefixes correctly.
1054 1.12 itojun * Below the state will be set correctly,
1055 1.12 itojun * or the entry itself will be deleted.
1056 1.2 itojun */
1057 1.12 itojun ln->ln_state = ND6_LLINFO_INCOMPLETE;
1058 1.12 itojun
1059 1.54 itojun /*
1060 1.54 itojun * Since defrouter_select() does not affect the
1061 1.54 itojun * on-link determination and MIP6 needs the check
1062 1.54 itojun * before the default router selection, we perform
1063 1.54 itojun * the check now.
1064 1.54 itojun */
1065 1.54 itojun pfxlist_onlink_check();
1066 1.54 itojun
1067 1.65 itojun /*
1068 1.65 itojun * refresh default router list
1069 1.65 itojun */
1070 1.65 itojun defrouter_select();
1071 1.2 itojun }
1072 1.2 itojun splx(s);
1073 1.2 itojun }
1074 1.12 itojun
1075 1.37 itojun /*
1076 1.37 itojun * Before deleting the entry, remember the next entry as the
1077 1.37 itojun * return value. We need this because pfxlist_onlink_check() above
1078 1.37 itojun * might have freed other entries (particularly the old next entry) as
1079 1.52 itojun * a side effect (XXX).
1080 1.37 itojun */
1081 1.37 itojun next = ln->ln_next;
1082 1.37 itojun
1083 1.37 itojun /*
1084 1.37 itojun * Detach the route from the routing tree and the list of neighbor
1085 1.37 itojun * caches, and disable the route entry not to be used in already
1086 1.37 itojun * cached routes.
1087 1.37 itojun */
1088 1.12 itojun rtrequest(RTM_DELETE, rt_key(rt), (struct sockaddr *)0,
1089 1.65 itojun rt_mask(rt), 0, (struct rtentry **)0);
1090 1.37 itojun
1091 1.73 itojun return (next);
1092 1.2 itojun }
1093 1.2 itojun
1094 1.2 itojun /*
1095 1.2 itojun * Upper-layer reachability hint for Neighbor Unreachability Detection.
1096 1.2 itojun *
1097 1.98 rpaulo * XXX cost-effective methods?
1098 1.2 itojun */
1099 1.2 itojun void
1100 1.31 itojun nd6_nud_hint(rt, dst6, force)
1101 1.2 itojun struct rtentry *rt;
1102 1.2 itojun struct in6_addr *dst6;
1103 1.31 itojun int force;
1104 1.2 itojun {
1105 1.2 itojun struct llinfo_nd6 *ln;
1106 1.2 itojun
1107 1.2 itojun /*
1108 1.2 itojun * If the caller specified "rt", use that. Otherwise, resolve the
1109 1.2 itojun * routing table by supplied "dst6".
1110 1.2 itojun */
1111 1.99 rpaulo if (rt == NULL) {
1112 1.99 rpaulo if (dst6 == NULL)
1113 1.2 itojun return;
1114 1.99 rpaulo if ((rt = nd6_lookup(dst6, 0, NULL)) == NULL)
1115 1.2 itojun return;
1116 1.2 itojun }
1117 1.2 itojun
1118 1.31 itojun if ((rt->rt_flags & RTF_GATEWAY) != 0 ||
1119 1.31 itojun (rt->rt_flags & RTF_LLINFO) == 0 ||
1120 1.31 itojun !rt->rt_llinfo || !rt->rt_gateway ||
1121 1.31 itojun rt->rt_gateway->sa_family != AF_LINK) {
1122 1.2 itojun /* This is not a host route. */
1123 1.2 itojun return;
1124 1.2 itojun }
1125 1.2 itojun
1126 1.2 itojun ln = (struct llinfo_nd6 *)rt->rt_llinfo;
1127 1.22 itojun if (ln->ln_state < ND6_LLINFO_REACHABLE)
1128 1.2 itojun return;
1129 1.2 itojun
1130 1.31 itojun /*
1131 1.31 itojun * if we get upper-layer reachability confirmation many times,
1132 1.31 itojun * it is possible we have false information.
1133 1.31 itojun */
1134 1.31 itojun if (!force) {
1135 1.31 itojun ln->ln_byhint++;
1136 1.31 itojun if (ln->ln_byhint > nd6_maxnudhint)
1137 1.31 itojun return;
1138 1.31 itojun }
1139 1.31 itojun
1140 1.2 itojun ln->ln_state = ND6_LLINFO_REACHABLE;
1141 1.86 itojun if (!ND6_LLINFO_PERMANENT(ln)) {
1142 1.86 itojun nd6_llinfo_settimer(ln,
1143 1.86 itojun (long)ND_IFINFO(rt->rt_ifp)->reachable * hz);
1144 1.86 itojun }
1145 1.2 itojun }
1146 1.2 itojun
1147 1.2 itojun void
1148 1.107 christos nd6_rtrequest(int req, struct rtentry *rt, struct rt_addrinfo *info)
1149 1.2 itojun {
1150 1.2 itojun struct sockaddr *gate = rt->rt_gateway;
1151 1.2 itojun struct llinfo_nd6 *ln = (struct llinfo_nd6 *)rt->rt_llinfo;
1152 1.104 christos static const struct sockaddr_dl null_sdl = {
1153 1.104 christos .sdl_len = sizeof(null_sdl),
1154 1.104 christos .sdl_family = AF_LINK,
1155 1.104 christos };
1156 1.2 itojun struct ifnet *ifp = rt->rt_ifp;
1157 1.2 itojun struct ifaddr *ifa;
1158 1.2 itojun
1159 1.65 itojun if ((rt->rt_flags & RTF_GATEWAY) != 0)
1160 1.2 itojun return;
1161 1.2 itojun
1162 1.54 itojun if (nd6_need_cache(ifp) == 0 && (rt->rt_flags & RTF_HOST) == 0) {
1163 1.54 itojun /*
1164 1.54 itojun * This is probably an interface direct route for a link
1165 1.54 itojun * which does not need neighbor caches (e.g. fe80::%lo0/64).
1166 1.54 itojun * We do not need special treatment below for such a route.
1167 1.54 itojun * Moreover, the RTF_LLINFO flag which would be set below
1168 1.54 itojun * would annoy the ndp(8) command.
1169 1.54 itojun */
1170 1.54 itojun return;
1171 1.54 itojun }
1172 1.54 itojun
1173 1.65 itojun if (req == RTM_RESOLVE &&
1174 1.65 itojun (nd6_need_cache(ifp) == 0 || /* stf case */
1175 1.65 itojun !nd6_is_addr_neighbor((struct sockaddr_in6 *)rt_key(rt), ifp))) {
1176 1.65 itojun /*
1177 1.65 itojun * FreeBSD and BSD/OS often make a cloned host route based
1178 1.65 itojun * on a less-specific route (e.g. the default route).
1179 1.65 itojun * If the less specific route does not have a "gateway"
1180 1.65 itojun * (this is the case when the route just goes to a p2p or an
1181 1.65 itojun * stf interface), we'll mistakenly make a neighbor cache for
1182 1.65 itojun * the host route, and will see strange neighbor solicitation
1183 1.65 itojun * for the corresponding destination. In order to avoid the
1184 1.65 itojun * confusion, we check if the destination of the route is
1185 1.65 itojun * a neighbor in terms of neighbor discovery, and stop the
1186 1.65 itojun * process if not. Additionally, we remove the LLINFO flag
1187 1.65 itojun * so that ndp(8) will not try to get the neighbor information
1188 1.65 itojun * of the destination.
1189 1.65 itojun */
1190 1.65 itojun rt->rt_flags &= ~RTF_LLINFO;
1191 1.65 itojun return;
1192 1.65 itojun }
1193 1.65 itojun
1194 1.2 itojun switch (req) {
1195 1.2 itojun case RTM_ADD:
1196 1.2 itojun /*
1197 1.2 itojun * There is no backward compatibility :)
1198 1.2 itojun *
1199 1.2 itojun * if ((rt->rt_flags & RTF_HOST) == 0 &&
1200 1.2 itojun * SIN(rt_mask(rt))->sin_addr.s_addr != 0xffffffff)
1201 1.2 itojun * rt->rt_flags |= RTF_CLONING;
1202 1.2 itojun */
1203 1.84 itojun if ((rt->rt_flags & RTF_CLONING) ||
1204 1.84 itojun ((rt->rt_flags & RTF_LLINFO) && !ln)) {
1205 1.2 itojun /*
1206 1.84 itojun * Case 1: This route should come from a route to
1207 1.84 itojun * interface (RTF_CLONING case) or the route should be
1208 1.84 itojun * treated as on-link but is currently not
1209 1.84 itojun * (RTF_LLINFO && !ln case).
1210 1.2 itojun */
1211 1.2 itojun rt_setgate(rt, rt_key(rt),
1212 1.104 christos (const struct sockaddr *)&null_sdl);
1213 1.2 itojun gate = rt->rt_gateway;
1214 1.2 itojun SDL(gate)->sdl_type = ifp->if_type;
1215 1.2 itojun SDL(gate)->sdl_index = ifp->if_index;
1216 1.2 itojun if (ln)
1217 1.86 itojun nd6_llinfo_settimer(ln, 0);
1218 1.65 itojun if ((rt->rt_flags & RTF_CLONING) != 0)
1219 1.2 itojun break;
1220 1.2 itojun }
1221 1.18 itojun /*
1222 1.18 itojun * In IPv4 code, we try to annonuce new RTF_ANNOUNCE entry here.
1223 1.18 itojun * We don't do that here since llinfo is not ready yet.
1224 1.18 itojun *
1225 1.18 itojun * There are also couple of other things to be discussed:
1226 1.18 itojun * - unsolicited NA code needs improvement beforehand
1227 1.18 itojun * - RFC2461 says we MAY send multicast unsolicited NA
1228 1.18 itojun * (7.2.6 paragraph 4), however, it also says that we
1229 1.18 itojun * SHOULD provide a mechanism to prevent multicast NA storm.
1230 1.18 itojun * we don't have anything like it right now.
1231 1.38 itojun * note that the mechanism needs a mutual agreement
1232 1.18 itojun * between proxies, which means that we need to implement
1233 1.38 itojun * a new protocol, or a new kludge.
1234 1.38 itojun * - from RFC2461 6.2.4, host MUST NOT send an unsolicited NA.
1235 1.18 itojun * we need to check ip6forwarding before sending it.
1236 1.18 itojun * (or should we allow proxy ND configuration only for
1237 1.18 itojun * routers? there's no mention about proxy ND from hosts)
1238 1.18 itojun */
1239 1.18 itojun #if 0
1240 1.18 itojun /* XXX it does not work */
1241 1.2 itojun if (rt->rt_flags & RTF_ANNOUNCE)
1242 1.2 itojun nd6_na_output(ifp,
1243 1.18 itojun &SIN6(rt_key(rt))->sin6_addr,
1244 1.18 itojun &SIN6(rt_key(rt))->sin6_addr,
1245 1.18 itojun ip6_forwarding ? ND_NA_FLAG_ROUTER : 0,
1246 1.18 itojun 1, NULL);
1247 1.18 itojun #endif
1248 1.2 itojun /* FALLTHROUGH */
1249 1.2 itojun case RTM_RESOLVE:
1250 1.65 itojun if ((ifp->if_flags & (IFF_POINTOPOINT | IFF_LOOPBACK)) == 0) {
1251 1.26 itojun /*
1252 1.26 itojun * Address resolution isn't necessary for a point to
1253 1.26 itojun * point link, so we can skip this test for a p2p link.
1254 1.26 itojun */
1255 1.26 itojun if (gate->sa_family != AF_LINK ||
1256 1.26 itojun gate->sa_len < sizeof(null_sdl)) {
1257 1.26 itojun log(LOG_DEBUG,
1258 1.36 itojun "nd6_rtrequest: bad gateway value: %s\n",
1259 1.36 itojun if_name(ifp));
1260 1.26 itojun break;
1261 1.26 itojun }
1262 1.26 itojun SDL(gate)->sdl_type = ifp->if_type;
1263 1.26 itojun SDL(gate)->sdl_index = ifp->if_index;
1264 1.2 itojun }
1265 1.26 itojun if (ln != NULL)
1266 1.2 itojun break; /* This happens on a route change */
1267 1.2 itojun /*
1268 1.2 itojun * Case 2: This route may come from cloning, or a manual route
1269 1.2 itojun * add with a LL address.
1270 1.2 itojun */
1271 1.2 itojun R_Malloc(ln, struct llinfo_nd6 *, sizeof(*ln));
1272 1.2 itojun rt->rt_llinfo = (caddr_t)ln;
1273 1.99 rpaulo if (ln == NULL) {
1274 1.2 itojun log(LOG_DEBUG, "nd6_rtrequest: malloc failed\n");
1275 1.2 itojun break;
1276 1.2 itojun }
1277 1.2 itojun nd6_inuse++;
1278 1.2 itojun nd6_allocated++;
1279 1.99 rpaulo bzero(ln, sizeof(*ln));
1280 1.2 itojun ln->ln_rt = rt;
1281 1.86 itojun callout_init(&ln->ln_timer_ch);
1282 1.2 itojun /* this is required for "ndp" command. - shin */
1283 1.2 itojun if (req == RTM_ADD) {
1284 1.2 itojun /*
1285 1.2 itojun * gate should have some valid AF_LINK entry,
1286 1.2 itojun * and ln->ln_expire should have some lifetime
1287 1.2 itojun * which is specified by ndp command.
1288 1.2 itojun */
1289 1.2 itojun ln->ln_state = ND6_LLINFO_REACHABLE;
1290 1.31 itojun ln->ln_byhint = 0;
1291 1.2 itojun } else {
1292 1.25 itojun /*
1293 1.2 itojun * When req == RTM_RESOLVE, rt is created and
1294 1.2 itojun * initialized in rtrequest(), so rt_expire is 0.
1295 1.2 itojun */
1296 1.12 itojun ln->ln_state = ND6_LLINFO_NOSTATE;
1297 1.86 itojun nd6_llinfo_settimer(ln, 0);
1298 1.2 itojun }
1299 1.2 itojun rt->rt_flags |= RTF_LLINFO;
1300 1.3 itojun ln->ln_next = llinfo_nd6.ln_next;
1301 1.3 itojun llinfo_nd6.ln_next = ln;
1302 1.3 itojun ln->ln_prev = &llinfo_nd6;
1303 1.3 itojun ln->ln_next->ln_prev = ln;
1304 1.2 itojun
1305 1.2 itojun /*
1306 1.2 itojun * check if rt_key(rt) is one of my address assigned
1307 1.2 itojun * to the interface.
1308 1.2 itojun */
1309 1.2 itojun ifa = (struct ifaddr *)in6ifa_ifpwithaddr(rt->rt_ifp,
1310 1.65 itojun &SIN6(rt_key(rt))->sin6_addr);
1311 1.2 itojun if (ifa) {
1312 1.2 itojun caddr_t macp = nd6_ifptomac(ifp);
1313 1.86 itojun nd6_llinfo_settimer(ln, -1);
1314 1.2 itojun ln->ln_state = ND6_LLINFO_REACHABLE;
1315 1.31 itojun ln->ln_byhint = 0;
1316 1.2 itojun if (macp) {
1317 1.99 rpaulo bcopy(macp, LLADDR(SDL(gate)), ifp->if_addrlen);
1318 1.2 itojun SDL(gate)->sdl_alen = ifp->if_addrlen;
1319 1.2 itojun }
1320 1.2 itojun if (nd6_useloopback) {
1321 1.91 peter rt->rt_ifp = lo0ifp; /* XXX */
1322 1.2 itojun /*
1323 1.2 itojun * Make sure rt_ifa be equal to the ifaddr
1324 1.2 itojun * corresponding to the address.
1325 1.2 itojun * We need this because when we refer
1326 1.2 itojun * rt_ifa->ia6_flags in ip6_input, we assume
1327 1.2 itojun * that the rt_ifa points to the address instead
1328 1.2 itojun * of the loopback address.
1329 1.2 itojun */
1330 1.106 dyoung if (ifa != rt->rt_ifa)
1331 1.106 dyoung rt_replace_ifa(rt, ifa);
1332 1.2 itojun }
1333 1.18 itojun } else if (rt->rt_flags & RTF_ANNOUNCE) {
1334 1.86 itojun nd6_llinfo_settimer(ln, -1);
1335 1.18 itojun ln->ln_state = ND6_LLINFO_REACHABLE;
1336 1.31 itojun ln->ln_byhint = 0;
1337 1.18 itojun
1338 1.18 itojun /* join solicited node multicast for proxy ND */
1339 1.18 itojun if (ifp->if_flags & IFF_MULTICAST) {
1340 1.18 itojun struct in6_addr llsol;
1341 1.18 itojun int error;
1342 1.18 itojun
1343 1.18 itojun llsol = SIN6(rt_key(rt))->sin6_addr;
1344 1.96 rpaulo llsol.s6_addr32[0] = htonl(0xff020000);
1345 1.18 itojun llsol.s6_addr32[1] = 0;
1346 1.18 itojun llsol.s6_addr32[2] = htonl(1);
1347 1.18 itojun llsol.s6_addr8[12] = 0xff;
1348 1.96 rpaulo if (in6_setscope(&llsol, ifp, NULL))
1349 1.96 rpaulo break;
1350 1.99 rpaulo if (!in6_addmulti(&llsol, ifp, &error, 0)) {
1351 1.54 itojun nd6log((LOG_ERR, "%s: failed to join "
1352 1.54 itojun "%s (errno=%d)\n", if_name(ifp),
1353 1.54 itojun ip6_sprintf(&llsol), error));
1354 1.46 itojun }
1355 1.18 itojun }
1356 1.2 itojun }
1357 1.2 itojun break;
1358 1.2 itojun
1359 1.2 itojun case RTM_DELETE:
1360 1.99 rpaulo if (ln == NULL)
1361 1.2 itojun break;
1362 1.18 itojun /* leave from solicited node multicast for proxy ND */
1363 1.18 itojun if ((rt->rt_flags & RTF_ANNOUNCE) != 0 &&
1364 1.18 itojun (ifp->if_flags & IFF_MULTICAST) != 0) {
1365 1.18 itojun struct in6_addr llsol;
1366 1.18 itojun struct in6_multi *in6m;
1367 1.18 itojun
1368 1.18 itojun llsol = SIN6(rt_key(rt))->sin6_addr;
1369 1.96 rpaulo llsol.s6_addr32[0] = htonl(0xff020000);
1370 1.18 itojun llsol.s6_addr32[1] = 0;
1371 1.18 itojun llsol.s6_addr32[2] = htonl(1);
1372 1.18 itojun llsol.s6_addr8[12] = 0xff;
1373 1.96 rpaulo if (in6_setscope(&llsol, ifp, NULL) == 0) {
1374 1.96 rpaulo IN6_LOOKUP_MULTI(llsol, ifp, in6m);
1375 1.96 rpaulo if (in6m)
1376 1.96 rpaulo in6_delmulti(in6m);
1377 1.104 christos }
1378 1.18 itojun }
1379 1.2 itojun nd6_inuse--;
1380 1.3 itojun ln->ln_next->ln_prev = ln->ln_prev;
1381 1.3 itojun ln->ln_prev->ln_next = ln->ln_next;
1382 1.3 itojun ln->ln_prev = NULL;
1383 1.86 itojun nd6_llinfo_settimer(ln, -1);
1384 1.2 itojun rt->rt_llinfo = 0;
1385 1.2 itojun rt->rt_flags &= ~RTF_LLINFO;
1386 1.100 rpaulo clear_llinfo_pqueue(ln);
1387 1.2 itojun Free((caddr_t)ln);
1388 1.2 itojun }
1389 1.2 itojun }
1390 1.2 itojun
1391 1.2 itojun int
1392 1.2 itojun nd6_ioctl(cmd, data, ifp)
1393 1.2 itojun u_long cmd;
1394 1.2 itojun caddr_t data;
1395 1.2 itojun struct ifnet *ifp;
1396 1.2 itojun {
1397 1.2 itojun struct in6_drlist *drl = (struct in6_drlist *)data;
1398 1.65 itojun struct in6_oprlist *oprl = (struct in6_oprlist *)data;
1399 1.2 itojun struct in6_ndireq *ndi = (struct in6_ndireq *)data;
1400 1.2 itojun struct in6_nbrinfo *nbi = (struct in6_nbrinfo *)data;
1401 1.12 itojun struct in6_ndifreq *ndif = (struct in6_ndifreq *)data;
1402 1.65 itojun struct nd_defrouter *dr;
1403 1.2 itojun struct nd_prefix *pr;
1404 1.2 itojun struct rtentry *rt;
1405 1.2 itojun int i = 0, error = 0;
1406 1.2 itojun int s;
1407 1.2 itojun
1408 1.2 itojun switch (cmd) {
1409 1.2 itojun case SIOCGDRLST_IN6:
1410 1.65 itojun /*
1411 1.65 itojun * obsolete API, use sysctl under net.inet6.icmp6
1412 1.65 itojun */
1413 1.2 itojun bzero(drl, sizeof(*drl));
1414 1.5 itojun s = splsoftnet();
1415 1.12 itojun dr = TAILQ_FIRST(&nd_defrouter);
1416 1.2 itojun while (dr && i < DRLSTSIZ) {
1417 1.2 itojun drl->defrouter[i].rtaddr = dr->rtaddr;
1418 1.96 rpaulo in6_clearscope(&drl->defrouter[i].rtaddr);
1419 1.2 itojun
1420 1.2 itojun drl->defrouter[i].flags = dr->flags;
1421 1.2 itojun drl->defrouter[i].rtlifetime = dr->rtlifetime;
1422 1.2 itojun drl->defrouter[i].expire = dr->expire;
1423 1.2 itojun drl->defrouter[i].if_index = dr->ifp->if_index;
1424 1.2 itojun i++;
1425 1.12 itojun dr = TAILQ_NEXT(dr, dr_entry);
1426 1.2 itojun }
1427 1.2 itojun splx(s);
1428 1.2 itojun break;
1429 1.2 itojun case SIOCGPRLST_IN6:
1430 1.18 itojun /*
1431 1.65 itojun * obsolete API, use sysctl under net.inet6.icmp6
1432 1.65 itojun *
1433 1.65 itojun * XXX the structure in6_prlist was changed in backward-
1434 1.65 itojun * incompatible manner. in6_oprlist is used for SIOCGPRLST_IN6,
1435 1.65 itojun * in6_prlist is used for nd6_sysctl() - fill_prlist().
1436 1.65 itojun */
1437 1.65 itojun /*
1438 1.18 itojun * XXX meaning of fields, especialy "raflags", is very
1439 1.18 itojun * differnet between RA prefix list and RR/static prefix list.
1440 1.18 itojun * how about separating ioctls into two?
1441 1.18 itojun */
1442 1.65 itojun bzero(oprl, sizeof(*oprl));
1443 1.5 itojun s = splsoftnet();
1444 1.2 itojun pr = nd_prefix.lh_first;
1445 1.2 itojun while (pr && i < PRLSTSIZ) {
1446 1.2 itojun struct nd_pfxrouter *pfr;
1447 1.2 itojun int j;
1448 1.2 itojun
1449 1.65 itojun oprl->prefix[i].prefix = pr->ndpr_prefix.sin6_addr;
1450 1.65 itojun oprl->prefix[i].raflags = pr->ndpr_raf;
1451 1.65 itojun oprl->prefix[i].prefixlen = pr->ndpr_plen;
1452 1.65 itojun oprl->prefix[i].vltime = pr->ndpr_vltime;
1453 1.65 itojun oprl->prefix[i].pltime = pr->ndpr_pltime;
1454 1.65 itojun oprl->prefix[i].if_index = pr->ndpr_ifp->if_index;
1455 1.99 rpaulo if (pr->ndpr_vltime == ND6_INFINITE_LIFETIME)
1456 1.99 rpaulo oprl->prefix[i].expire = 0;
1457 1.99 rpaulo else {
1458 1.99 rpaulo time_t maxexpire;
1459 1.99 rpaulo
1460 1.99 rpaulo /* XXX: we assume time_t is signed. */
1461 1.99 rpaulo maxexpire = (-1) &
1462 1.99 rpaulo ~((time_t)1 <<
1463 1.99 rpaulo ((sizeof(maxexpire) * 8) - 1));
1464 1.99 rpaulo if (pr->ndpr_vltime <
1465 1.99 rpaulo maxexpire - pr->ndpr_lastupdate) {
1466 1.99 rpaulo oprl->prefix[i].expire =
1467 1.99 rpaulo pr->ndpr_lastupdate +
1468 1.99 rpaulo pr->ndpr_vltime;
1469 1.99 rpaulo } else
1470 1.99 rpaulo oprl->prefix[i].expire = maxexpire;
1471 1.99 rpaulo }
1472 1.2 itojun
1473 1.2 itojun pfr = pr->ndpr_advrtrs.lh_first;
1474 1.2 itojun j = 0;
1475 1.43 itojun while (pfr) {
1476 1.2 itojun if (j < DRLSTSIZ) {
1477 1.65 itojun #define RTRADDR oprl->prefix[i].advrtr[j]
1478 1.2 itojun RTRADDR = pfr->router->rtaddr;
1479 1.96 rpaulo in6_clearscope(&RTRADDR);
1480 1.2 itojun #undef RTRADDR
1481 1.2 itojun }
1482 1.2 itojun j++;
1483 1.2 itojun pfr = pfr->pfr_next;
1484 1.2 itojun }
1485 1.65 itojun oprl->prefix[i].advrtrs = j;
1486 1.65 itojun oprl->prefix[i].origin = PR_ORIG_RA;
1487 1.2 itojun
1488 1.2 itojun i++;
1489 1.2 itojun pr = pr->ndpr_next;
1490 1.2 itojun }
1491 1.18 itojun splx(s);
1492 1.12 itojun
1493 1.2 itojun break;
1494 1.58 itojun case OSIOCGIFINFO_IN6:
1495 1.99 rpaulo #define ND ndi->ndi
1496 1.58 itojun /* XXX: old ndp(8) assumes a positive value for linkmtu. */
1497 1.99 rpaulo memset(&ND, 0, sizeof(ND));
1498 1.99 rpaulo ND.linkmtu = IN6_LINKMTU(ifp);
1499 1.99 rpaulo ND.maxmtu = ND_IFINFO(ifp)->maxmtu;
1500 1.99 rpaulo ND.basereachable = ND_IFINFO(ifp)->basereachable;
1501 1.99 rpaulo ND.reachable = ND_IFINFO(ifp)->reachable;
1502 1.99 rpaulo ND.retrans = ND_IFINFO(ifp)->retrans;
1503 1.99 rpaulo ND.flags = ND_IFINFO(ifp)->flags;
1504 1.99 rpaulo ND.recalctm = ND_IFINFO(ifp)->recalctm;
1505 1.99 rpaulo ND.chlim = ND_IFINFO(ifp)->chlim;
1506 1.58 itojun break;
1507 1.2 itojun case SIOCGIFINFO_IN6:
1508 1.99 rpaulo ND = *ND_IFINFO(ifp);
1509 1.2 itojun break;
1510 1.99 rpaulo case SIOCSIFINFO_IN6:
1511 1.99 rpaulo /*
1512 1.99 rpaulo * used to change host variables from userland.
1513 1.99 rpaulo * intented for a use on router to reflect RA configurations.
1514 1.99 rpaulo */
1515 1.99 rpaulo /* 0 means 'unspecified' */
1516 1.99 rpaulo if (ND.linkmtu != 0) {
1517 1.99 rpaulo if (ND.linkmtu < IPV6_MMTU ||
1518 1.99 rpaulo ND.linkmtu > IN6_LINKMTU(ifp)) {
1519 1.99 rpaulo error = EINVAL;
1520 1.99 rpaulo break;
1521 1.99 rpaulo }
1522 1.99 rpaulo ND_IFINFO(ifp)->linkmtu = ND.linkmtu;
1523 1.99 rpaulo }
1524 1.99 rpaulo
1525 1.99 rpaulo if (ND.basereachable != 0) {
1526 1.99 rpaulo int obasereachable = ND_IFINFO(ifp)->basereachable;
1527 1.99 rpaulo
1528 1.99 rpaulo ND_IFINFO(ifp)->basereachable = ND.basereachable;
1529 1.99 rpaulo if (ND.basereachable != obasereachable)
1530 1.99 rpaulo ND_IFINFO(ifp)->reachable =
1531 1.99 rpaulo ND_COMPUTE_RTIME(ND.basereachable);
1532 1.99 rpaulo }
1533 1.99 rpaulo if (ND.retrans != 0)
1534 1.99 rpaulo ND_IFINFO(ifp)->retrans = ND.retrans;
1535 1.99 rpaulo if (ND.chlim != 0)
1536 1.99 rpaulo ND_IFINFO(ifp)->chlim = ND.chlim;
1537 1.99 rpaulo /* FALLTHROUGH */
1538 1.26 itojun case SIOCSIFINFO_FLAGS:
1539 1.99 rpaulo ND_IFINFO(ifp)->flags = ND.flags;
1540 1.26 itojun break;
1541 1.99 rpaulo #undef ND
1542 1.12 itojun case SIOCSNDFLUSH_IN6: /* XXX: the ioctl name is confusing... */
1543 1.65 itojun /* sync kernel routing table with the default router list */
1544 1.65 itojun defrouter_reset();
1545 1.12 itojun defrouter_select();
1546 1.2 itojun break;
1547 1.2 itojun case SIOCSPFXFLUSH_IN6:
1548 1.65 itojun {
1549 1.2 itojun /* flush all the prefix advertised by routers */
1550 1.94 christos struct nd_prefix *pfx, *next;
1551 1.2 itojun
1552 1.5 itojun s = splsoftnet();
1553 1.94 christos for (pfx = nd_prefix.lh_first; pfx; pfx = next) {
1554 1.65 itojun struct in6_ifaddr *ia, *ia_next;
1555 1.65 itojun
1556 1.94 christos next = pfx->ndpr_next;
1557 1.65 itojun
1558 1.94 christos if (IN6_IS_ADDR_LINKLOCAL(&pfx->ndpr_prefix.sin6_addr))
1559 1.65 itojun continue; /* XXX */
1560 1.65 itojun
1561 1.65 itojun /* do we really have to remove addresses as well? */
1562 1.65 itojun for (ia = in6_ifaddr; ia; ia = ia_next) {
1563 1.65 itojun /* ia might be removed. keep the next ptr. */
1564 1.65 itojun ia_next = ia->ia_next;
1565 1.65 itojun
1566 1.65 itojun if ((ia->ia6_flags & IN6_IFF_AUTOCONF) == 0)
1567 1.65 itojun continue;
1568 1.65 itojun
1569 1.94 christos if (ia->ia6_ndpr == pfx)
1570 1.65 itojun in6_purgeaddr(&ia->ia_ifa);
1571 1.65 itojun }
1572 1.94 christos prelist_remove(pfx);
1573 1.2 itojun }
1574 1.2 itojun splx(s);
1575 1.2 itojun break;
1576 1.65 itojun }
1577 1.2 itojun case SIOCSRTRFLUSH_IN6:
1578 1.65 itojun {
1579 1.2 itojun /* flush all the default routers */
1580 1.94 christos struct nd_defrouter *drtr, *next;
1581 1.2 itojun
1582 1.5 itojun s = splsoftnet();
1583 1.65 itojun defrouter_reset();
1584 1.94 christos for (drtr = TAILQ_FIRST(&nd_defrouter); drtr; drtr = next) {
1585 1.94 christos next = TAILQ_NEXT(drtr, dr_entry);
1586 1.94 christos defrtrlist_del(drtr);
1587 1.2 itojun }
1588 1.65 itojun defrouter_select();
1589 1.2 itojun splx(s);
1590 1.2 itojun break;
1591 1.65 itojun }
1592 1.2 itojun case SIOCGNBRINFO_IN6:
1593 1.99 rpaulo {
1594 1.12 itojun struct llinfo_nd6 *ln;
1595 1.12 itojun struct in6_addr nb_addr = nbi->addr; /* make local for safety */
1596 1.12 itojun
1597 1.96 rpaulo if ((error = in6_setscope(&nb_addr, ifp, NULL)) != 0)
1598 1.96 rpaulo return (error);
1599 1.2 itojun
1600 1.12 itojun s = splsoftnet();
1601 1.65 itojun if ((rt = nd6_lookup(&nb_addr, 0, ifp)) == NULL ||
1602 1.65 itojun (ln = (struct llinfo_nd6 *)rt->rt_llinfo) == NULL) {
1603 1.12 itojun error = EINVAL;
1604 1.12 itojun splx(s);
1605 1.12 itojun break;
1606 1.12 itojun }
1607 1.12 itojun nbi->state = ln->ln_state;
1608 1.12 itojun nbi->asked = ln->ln_asked;
1609 1.12 itojun nbi->isrouter = ln->ln_router;
1610 1.12 itojun nbi->expire = ln->ln_expire;
1611 1.12 itojun splx(s);
1612 1.63 itojun
1613 1.12 itojun break;
1614 1.65 itojun }
1615 1.12 itojun case SIOCGDEFIFACE_IN6: /* XXX: should be implemented as a sysctl? */
1616 1.12 itojun ndif->ifindex = nd6_defifindex;
1617 1.12 itojun break;
1618 1.12 itojun case SIOCSDEFIFACE_IN6: /* XXX: should be implemented as a sysctl? */
1619 1.73 itojun return (nd6_setdefaultiface(ndif->ifindex));
1620 1.2 itojun }
1621 1.73 itojun return (error);
1622 1.2 itojun }
1623 1.2 itojun
1624 1.2 itojun /*
1625 1.2 itojun * Create neighbor cache entry and cache link-layer address,
1626 1.52 itojun * on reception of inbound ND6 packets. (RS/RA/NS/redirect)
1627 1.2 itojun */
1628 1.2 itojun struct rtentry *
1629 1.105 christos nd6_cache_lladdr(
1630 1.105 christos struct ifnet *ifp,
1631 1.105 christos struct in6_addr *from,
1632 1.105 christos char *lladdr,
1633 1.107 christos int lladdrlen,
1634 1.105 christos int type, /* ICMP6 type */
1635 1.105 christos int code /* type dependent information */
1636 1.105 christos )
1637 1.2 itojun {
1638 1.2 itojun struct rtentry *rt = NULL;
1639 1.2 itojun struct llinfo_nd6 *ln = NULL;
1640 1.2 itojun int is_newentry;
1641 1.2 itojun struct sockaddr_dl *sdl = NULL;
1642 1.2 itojun int do_update;
1643 1.2 itojun int olladdr;
1644 1.2 itojun int llchange;
1645 1.2 itojun int newstate = 0;
1646 1.2 itojun
1647 1.99 rpaulo if (ifp == NULL)
1648 1.2 itojun panic("ifp == NULL in nd6_cache_lladdr");
1649 1.99 rpaulo if (from == NULL)
1650 1.2 itojun panic("from == NULL in nd6_cache_lladdr");
1651 1.2 itojun
1652 1.2 itojun /* nothing must be updated for unspecified address */
1653 1.2 itojun if (IN6_IS_ADDR_UNSPECIFIED(from))
1654 1.2 itojun return NULL;
1655 1.2 itojun
1656 1.2 itojun /*
1657 1.2 itojun * Validation about ifp->if_addrlen and lladdrlen must be done in
1658 1.2 itojun * the caller.
1659 1.2 itojun *
1660 1.2 itojun * XXX If the link does not have link-layer adderss, what should
1661 1.2 itojun * we do? (ifp->if_addrlen == 0)
1662 1.2 itojun * Spec says nothing in sections for RA, RS and NA. There's small
1663 1.2 itojun * description on it in NS section (RFC 2461 7.2.3).
1664 1.2 itojun */
1665 1.2 itojun
1666 1.2 itojun rt = nd6_lookup(from, 0, ifp);
1667 1.99 rpaulo if (rt == NULL) {
1668 1.2 itojun #if 0
1669 1.2 itojun /* nothing must be done if there's no lladdr */
1670 1.2 itojun if (!lladdr || !lladdrlen)
1671 1.2 itojun return NULL;
1672 1.2 itojun #endif
1673 1.2 itojun
1674 1.2 itojun rt = nd6_lookup(from, 1, ifp);
1675 1.2 itojun is_newentry = 1;
1676 1.43 itojun } else {
1677 1.43 itojun /* do nothing if static ndp is set */
1678 1.43 itojun if (rt->rt_flags & RTF_STATIC)
1679 1.43 itojun return NULL;
1680 1.2 itojun is_newentry = 0;
1681 1.43 itojun }
1682 1.2 itojun
1683 1.99 rpaulo if (rt == NULL)
1684 1.2 itojun return NULL;
1685 1.2 itojun if ((rt->rt_flags & (RTF_GATEWAY | RTF_LLINFO)) != RTF_LLINFO) {
1686 1.2 itojun fail:
1687 1.54 itojun (void)nd6_free(rt, 0);
1688 1.2 itojun return NULL;
1689 1.2 itojun }
1690 1.2 itojun ln = (struct llinfo_nd6 *)rt->rt_llinfo;
1691 1.99 rpaulo if (ln == NULL)
1692 1.2 itojun goto fail;
1693 1.99 rpaulo if (rt->rt_gateway == NULL)
1694 1.2 itojun goto fail;
1695 1.2 itojun if (rt->rt_gateway->sa_family != AF_LINK)
1696 1.2 itojun goto fail;
1697 1.2 itojun sdl = SDL(rt->rt_gateway);
1698 1.2 itojun
1699 1.2 itojun olladdr = (sdl->sdl_alen) ? 1 : 0;
1700 1.2 itojun if (olladdr && lladdr) {
1701 1.2 itojun if (bcmp(lladdr, LLADDR(sdl), ifp->if_addrlen))
1702 1.2 itojun llchange = 1;
1703 1.2 itojun else
1704 1.2 itojun llchange = 0;
1705 1.2 itojun } else
1706 1.2 itojun llchange = 0;
1707 1.2 itojun
1708 1.2 itojun /*
1709 1.2 itojun * newentry olladdr lladdr llchange (*=record)
1710 1.2 itojun * 0 n n -- (1)
1711 1.2 itojun * 0 y n -- (2)
1712 1.2 itojun * 0 n y -- (3) * STALE
1713 1.2 itojun * 0 y y n (4) *
1714 1.2 itojun * 0 y y y (5) * STALE
1715 1.2 itojun * 1 -- n -- (6) NOSTATE(= PASSIVE)
1716 1.2 itojun * 1 -- y -- (7) * STALE
1717 1.2 itojun */
1718 1.2 itojun
1719 1.52 itojun if (lladdr) { /* (3-5) and (7) */
1720 1.2 itojun /*
1721 1.2 itojun * Record source link-layer address
1722 1.2 itojun * XXX is it dependent to ifp->if_type?
1723 1.2 itojun */
1724 1.2 itojun sdl->sdl_alen = ifp->if_addrlen;
1725 1.2 itojun bcopy(lladdr, LLADDR(sdl), ifp->if_addrlen);
1726 1.2 itojun }
1727 1.2 itojun
1728 1.2 itojun if (!is_newentry) {
1729 1.65 itojun if ((!olladdr && lladdr) || /* (3) */
1730 1.65 itojun (olladdr && lladdr && llchange)) { /* (5) */
1731 1.2 itojun do_update = 1;
1732 1.2 itojun newstate = ND6_LLINFO_STALE;
1733 1.52 itojun } else /* (1-2,4) */
1734 1.2 itojun do_update = 0;
1735 1.2 itojun } else {
1736 1.2 itojun do_update = 1;
1737 1.99 rpaulo if (lladdr == NULL) /* (6) */
1738 1.2 itojun newstate = ND6_LLINFO_NOSTATE;
1739 1.52 itojun else /* (7) */
1740 1.2 itojun newstate = ND6_LLINFO_STALE;
1741 1.2 itojun }
1742 1.2 itojun
1743 1.2 itojun if (do_update) {
1744 1.2 itojun /*
1745 1.2 itojun * Update the state of the neighbor cache.
1746 1.2 itojun */
1747 1.2 itojun ln->ln_state = newstate;
1748 1.2 itojun
1749 1.2 itojun if (ln->ln_state == ND6_LLINFO_STALE) {
1750 1.44 itojun /*
1751 1.44 itojun * XXX: since nd6_output() below will cause
1752 1.44 itojun * state tansition to DELAY and reset the timer,
1753 1.44 itojun * we must set the timer now, although it is actually
1754 1.44 itojun * meaningless.
1755 1.44 itojun */
1756 1.86 itojun nd6_llinfo_settimer(ln, (long)nd6_gctimer * hz);
1757 1.44 itojun
1758 1.99 rpaulo if (ln->ln_hold) {
1759 1.99 rpaulo struct mbuf *m_hold, *m_hold_next;
1760 1.99 rpaulo for (m_hold = ln->ln_hold; m_hold;
1761 1.99 rpaulo m_hold = m_hold_next) {
1762 1.99 rpaulo struct mbuf *mpkt = NULL;
1763 1.99 rpaulo
1764 1.99 rpaulo m_hold_next = m_hold->m_nextpkt;
1765 1.99 rpaulo mpkt = m_copym(m_hold, 0, M_COPYALL, M_DONTWAIT);
1766 1.99 rpaulo if (mpkt == NULL) {
1767 1.99 rpaulo m_freem(m_hold);
1768 1.99 rpaulo break;
1769 1.99 rpaulo }
1770 1.99 rpaulo mpkt->m_nextpkt = NULL;
1771 1.99 rpaulo
1772 1.99 rpaulo /*
1773 1.99 rpaulo * we assume ifp is not a p2p here, so
1774 1.99 rpaulo * just set the 2nd argument as the
1775 1.99 rpaulo * 1st one.
1776 1.99 rpaulo */
1777 1.99 rpaulo nd6_output(ifp, ifp, mpkt,
1778 1.99 rpaulo (struct sockaddr_in6 *)rt_key(rt),
1779 1.99 rpaulo rt);
1780 1.99 rpaulo }
1781 1.99 rpaulo ln->ln_hold = NULL;
1782 1.99 rpaulo }
1783 1.2 itojun } else if (ln->ln_state == ND6_LLINFO_INCOMPLETE) {
1784 1.2 itojun /* probe right away */
1785 1.86 itojun nd6_llinfo_settimer((void *)ln, 0);
1786 1.2 itojun }
1787 1.2 itojun }
1788 1.2 itojun
1789 1.2 itojun /*
1790 1.2 itojun * ICMP6 type dependent behavior.
1791 1.2 itojun *
1792 1.2 itojun * NS: clear IsRouter if new entry
1793 1.2 itojun * RS: clear IsRouter
1794 1.2 itojun * RA: set IsRouter if there's lladdr
1795 1.2 itojun * redir: clear IsRouter if new entry
1796 1.2 itojun *
1797 1.2 itojun * RA case, (1):
1798 1.2 itojun * The spec says that we must set IsRouter in the following cases:
1799 1.2 itojun * - If lladdr exist, set IsRouter. This means (1-5).
1800 1.2 itojun * - If it is old entry (!newentry), set IsRouter. This means (7).
1801 1.2 itojun * So, based on the spec, in (1-5) and (7) cases we must set IsRouter.
1802 1.2 itojun * A quetion arises for (1) case. (1) case has no lladdr in the
1803 1.2 itojun * neighbor cache, this is similar to (6).
1804 1.2 itojun * This case is rare but we figured that we MUST NOT set IsRouter.
1805 1.2 itojun *
1806 1.2 itojun * newentry olladdr lladdr llchange NS RS RA redir
1807 1.8 itojun * D R
1808 1.8 itojun * 0 n n -- (1) c ? s
1809 1.8 itojun * 0 y n -- (2) c s s
1810 1.8 itojun * 0 n y -- (3) c s s
1811 1.8 itojun * 0 y y n (4) c s s
1812 1.8 itojun * 0 y y y (5) c s s
1813 1.8 itojun * 1 -- n -- (6) c c c s
1814 1.8 itojun * 1 -- y -- (7) c c s c s
1815 1.2 itojun *
1816 1.2 itojun * (c=clear s=set)
1817 1.2 itojun */
1818 1.2 itojun switch (type & 0xff) {
1819 1.2 itojun case ND_NEIGHBOR_SOLICIT:
1820 1.2 itojun /*
1821 1.2 itojun * New entry must have is_router flag cleared.
1822 1.2 itojun */
1823 1.52 itojun if (is_newentry) /* (6-7) */
1824 1.8 itojun ln->ln_router = 0;
1825 1.8 itojun break;
1826 1.8 itojun case ND_REDIRECT:
1827 1.8 itojun /*
1828 1.8 itojun * If the icmp is a redirect to a better router, always set the
1829 1.52 itojun * is_router flag. Otherwise, if the entry is newly created,
1830 1.52 itojun * clear the flag. [RFC 2461, sec 8.3]
1831 1.8 itojun */
1832 1.8 itojun if (code == ND_REDIRECT_ROUTER)
1833 1.8 itojun ln->ln_router = 1;
1834 1.52 itojun else if (is_newentry) /* (6-7) */
1835 1.2 itojun ln->ln_router = 0;
1836 1.2 itojun break;
1837 1.2 itojun case ND_ROUTER_SOLICIT:
1838 1.2 itojun /*
1839 1.2 itojun * is_router flag must always be cleared.
1840 1.2 itojun */
1841 1.2 itojun ln->ln_router = 0;
1842 1.2 itojun break;
1843 1.2 itojun case ND_ROUTER_ADVERT:
1844 1.2 itojun /*
1845 1.2 itojun * Mark an entry with lladdr as a router.
1846 1.2 itojun */
1847 1.65 itojun if ((!is_newentry && (olladdr || lladdr)) || /* (2-5) */
1848 1.65 itojun (is_newentry && lladdr)) { /* (7) */
1849 1.2 itojun ln->ln_router = 1;
1850 1.2 itojun }
1851 1.2 itojun break;
1852 1.2 itojun }
1853 1.47 itojun
1854 1.47 itojun /*
1855 1.47 itojun * When the link-layer address of a router changes, select the
1856 1.47 itojun * best router again. In particular, when the neighbor entry is newly
1857 1.47 itojun * created, it might affect the selection policy.
1858 1.47 itojun * Question: can we restrict the first condition to the "is_newentry"
1859 1.47 itojun * case?
1860 1.47 itojun * XXX: when we hear an RA from a new router with the link-layer
1861 1.47 itojun * address option, defrouter_select() is called twice, since
1862 1.47 itojun * defrtrlist_update called the function as well. However, I believe
1863 1.47 itojun * we can compromise the overhead, since it only happens the first
1864 1.47 itojun * time.
1865 1.52 itojun * XXX: although defrouter_select() should not have a bad effect
1866 1.52 itojun * for those are not autoconfigured hosts, we explicitly avoid such
1867 1.52 itojun * cases for safety.
1868 1.47 itojun */
1869 1.49 itojun if (do_update && ln->ln_router && !ip6_forwarding && ip6_accept_rtadv)
1870 1.47 itojun defrouter_select();
1871 1.2 itojun
1872 1.2 itojun return rt;
1873 1.2 itojun }
1874 1.2 itojun
1875 1.2 itojun static void
1876 1.107 christos nd6_slowtimo(void *ignored_arg)
1877 1.2 itojun {
1878 1.5 itojun int s = splsoftnet();
1879 1.38 itojun struct nd_ifinfo *nd6if;
1880 1.58 itojun struct ifnet *ifp;
1881 1.2 itojun
1882 1.20 thorpej callout_reset(&nd6_slowtimo_ch, ND6_SLOWTIMER_INTERVAL * hz,
1883 1.20 thorpej nd6_slowtimo, NULL);
1884 1.58 itojun for (ifp = TAILQ_FIRST(&ifnet); ifp; ifp = TAILQ_NEXT(ifp, if_list))
1885 1.58 itojun {
1886 1.58 itojun nd6if = ND_IFINFO(ifp);
1887 1.2 itojun if (nd6if->basereachable && /* already initialized */
1888 1.2 itojun (nd6if->recalctm -= ND6_SLOWTIMER_INTERVAL) <= 0) {
1889 1.2 itojun /*
1890 1.2 itojun * Since reachable time rarely changes by router
1891 1.2 itojun * advertisements, we SHOULD insure that a new random
1892 1.2 itojun * value gets recomputed at least once every few hours.
1893 1.2 itojun * (RFC 2461, 6.3.4)
1894 1.2 itojun */
1895 1.2 itojun nd6if->recalctm = nd6_recalc_reachtm_interval;
1896 1.2 itojun nd6if->reachable = ND_COMPUTE_RTIME(nd6if->basereachable);
1897 1.2 itojun }
1898 1.2 itojun }
1899 1.2 itojun splx(s);
1900 1.2 itojun }
1901 1.2 itojun
1902 1.2 itojun #define senderr(e) { error = (e); goto bad;}
1903 1.2 itojun int
1904 1.30 itojun nd6_output(ifp, origifp, m0, dst, rt0)
1905 1.38 itojun struct ifnet *ifp;
1906 1.30 itojun struct ifnet *origifp;
1907 1.2 itojun struct mbuf *m0;
1908 1.2 itojun struct sockaddr_in6 *dst;
1909 1.2 itojun struct rtentry *rt0;
1910 1.2 itojun {
1911 1.38 itojun struct mbuf *m = m0;
1912 1.38 itojun struct rtentry *rt = rt0;
1913 1.29 itojun struct sockaddr_in6 *gw6 = NULL;
1914 1.2 itojun struct llinfo_nd6 *ln = NULL;
1915 1.2 itojun int error = 0;
1916 1.2 itojun
1917 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&dst->sin6_addr))
1918 1.2 itojun goto sendpkt;
1919 1.2 itojun
1920 1.54 itojun if (nd6_need_cache(ifp) == 0)
1921 1.2 itojun goto sendpkt;
1922 1.2 itojun
1923 1.2 itojun /*
1924 1.98 rpaulo * next hop determination. This routine is derived from ether_output.
1925 1.2 itojun */
1926 1.2 itojun if (rt) {
1927 1.2 itojun if ((rt->rt_flags & RTF_UP) == 0) {
1928 1.65 itojun if ((rt0 = rt = rtalloc1((struct sockaddr *)dst,
1929 1.65 itojun 1)) != NULL)
1930 1.12 itojun {
1931 1.2 itojun rt->rt_refcnt--;
1932 1.90 itojun if (rt->rt_ifp != ifp)
1933 1.90 itojun senderr(EHOSTUNREACH);
1934 1.25 itojun } else
1935 1.2 itojun senderr(EHOSTUNREACH);
1936 1.2 itojun }
1937 1.29 itojun
1938 1.2 itojun if (rt->rt_flags & RTF_GATEWAY) {
1939 1.29 itojun gw6 = (struct sockaddr_in6 *)rt->rt_gateway;
1940 1.29 itojun
1941 1.29 itojun /*
1942 1.29 itojun * We skip link-layer address resolution and NUD
1943 1.29 itojun * if the gateway is not a neighbor from ND point
1944 1.65 itojun * of view, regardless of the value of nd_ifinfo.flags.
1945 1.56 itojun * The second condition is a bit tricky; we skip
1946 1.29 itojun * if the gateway is our own address, which is
1947 1.29 itojun * sometimes used to install a route to a p2p link.
1948 1.29 itojun */
1949 1.29 itojun if (!nd6_is_addr_neighbor(gw6, ifp) ||
1950 1.29 itojun in6ifa_ifpwithaddr(ifp, &gw6->sin6_addr)) {
1951 1.29 itojun /*
1952 1.29 itojun * We allow this kind of tricky route only
1953 1.29 itojun * when the outgoing interface is p2p.
1954 1.29 itojun * XXX: we may need a more generic rule here.
1955 1.29 itojun */
1956 1.29 itojun if ((ifp->if_flags & IFF_POINTOPOINT) == 0)
1957 1.29 itojun senderr(EHOSTUNREACH);
1958 1.29 itojun
1959 1.29 itojun goto sendpkt;
1960 1.29 itojun }
1961 1.29 itojun
1962 1.2 itojun if (rt->rt_gwroute == 0)
1963 1.2 itojun goto lookup;
1964 1.2 itojun if (((rt = rt->rt_gwroute)->rt_flags & RTF_UP) == 0) {
1965 1.2 itojun rtfree(rt); rt = rt0;
1966 1.50 itojun lookup:
1967 1.50 itojun rt->rt_gwroute = rtalloc1(rt->rt_gateway, 1);
1968 1.2 itojun if ((rt = rt->rt_gwroute) == 0)
1969 1.2 itojun senderr(EHOSTUNREACH);
1970 1.50 itojun /* the "G" test below also prevents rt == rt0 */
1971 1.50 itojun if ((rt->rt_flags & RTF_GATEWAY) ||
1972 1.50 itojun (rt->rt_ifp != ifp)) {
1973 1.50 itojun rt->rt_refcnt--;
1974 1.50 itojun rt0->rt_gwroute = 0;
1975 1.50 itojun senderr(EHOSTUNREACH);
1976 1.50 itojun }
1977 1.2 itojun }
1978 1.2 itojun }
1979 1.2 itojun }
1980 1.2 itojun
1981 1.2 itojun /*
1982 1.2 itojun * Address resolution or Neighbor Unreachability Detection
1983 1.2 itojun * for the next hop.
1984 1.2 itojun * At this point, the destination of the packet must be a unicast
1985 1.2 itojun * or an anycast address(i.e. not a multicast).
1986 1.2 itojun */
1987 1.2 itojun
1988 1.2 itojun /* Look up the neighbor cache for the nexthop */
1989 1.2 itojun if (rt && (rt->rt_flags & RTF_LLINFO) != 0)
1990 1.2 itojun ln = (struct llinfo_nd6 *)rt->rt_llinfo;
1991 1.2 itojun else {
1992 1.29 itojun /*
1993 1.29 itojun * Since nd6_is_addr_neighbor() internally calls nd6_lookup(),
1994 1.52 itojun * the condition below is not very efficient. But we believe
1995 1.29 itojun * it is tolerable, because this should be a rare case.
1996 1.29 itojun */
1997 1.29 itojun if (nd6_is_addr_neighbor(dst, ifp) &&
1998 1.29 itojun (rt = nd6_lookup(&dst->sin6_addr, 1, ifp)) != NULL)
1999 1.2 itojun ln = (struct llinfo_nd6 *)rt->rt_llinfo;
2000 1.2 itojun }
2001 1.99 rpaulo if (ln == NULL || rt == NULL) {
2002 1.29 itojun if ((ifp->if_flags & IFF_POINTOPOINT) == 0 &&
2003 1.58 itojun !(ND_IFINFO(ifp)->flags & ND6_IFF_PERFORMNUD)) {
2004 1.29 itojun log(LOG_DEBUG,
2005 1.29 itojun "nd6_output: can't allocate llinfo for %s "
2006 1.29 itojun "(ln=%p, rt=%p)\n",
2007 1.29 itojun ip6_sprintf(&dst->sin6_addr), ln, rt);
2008 1.29 itojun senderr(EIO); /* XXX: good error? */
2009 1.29 itojun }
2010 1.29 itojun
2011 1.29 itojun goto sendpkt; /* send anyway */
2012 1.2 itojun }
2013 1.2 itojun
2014 1.26 itojun /* We don't have to do link-layer address resolution on a p2p link. */
2015 1.26 itojun if ((ifp->if_flags & IFF_POINTOPOINT) != 0 &&
2016 1.42 itojun ln->ln_state < ND6_LLINFO_REACHABLE) {
2017 1.26 itojun ln->ln_state = ND6_LLINFO_STALE;
2018 1.86 itojun nd6_llinfo_settimer(ln, (long)nd6_gctimer * hz);
2019 1.42 itojun }
2020 1.2 itojun
2021 1.2 itojun /*
2022 1.2 itojun * The first time we send a packet to a neighbor whose entry is
2023 1.2 itojun * STALE, we have to change the state to DELAY and a sets a timer to
2024 1.2 itojun * expire in DELAY_FIRST_PROBE_TIME seconds to ensure do
2025 1.2 itojun * neighbor unreachability detection on expiration.
2026 1.2 itojun * (RFC 2461 7.3.3)
2027 1.2 itojun */
2028 1.2 itojun if (ln->ln_state == ND6_LLINFO_STALE) {
2029 1.2 itojun ln->ln_asked = 0;
2030 1.2 itojun ln->ln_state = ND6_LLINFO_DELAY;
2031 1.99 rpaulo nd6_llinfo_settimer(ln, (long)nd6_delay * hz);
2032 1.2 itojun }
2033 1.2 itojun
2034 1.2 itojun /*
2035 1.2 itojun * If the neighbor cache entry has a state other than INCOMPLETE
2036 1.52 itojun * (i.e. its link-layer address is already resolved), just
2037 1.2 itojun * send the packet.
2038 1.2 itojun */
2039 1.2 itojun if (ln->ln_state > ND6_LLINFO_INCOMPLETE)
2040 1.2 itojun goto sendpkt;
2041 1.2 itojun
2042 1.2 itojun /*
2043 1.2 itojun * There is a neighbor cache entry, but no ethernet address
2044 1.99 rpaulo * response yet. Append this latest packet to the end of the
2045 1.99 rpaulo * packet queue in the mbuf, unless the number of the packet
2046 1.99 rpaulo * does not exceed nd6_maxqueuelen. When it exceeds nd6_maxqueuelen,
2047 1.99 rpaulo * the oldest packet in the queue will be removed.
2048 1.2 itojun */
2049 1.41 itojun if (ln->ln_state == ND6_LLINFO_NOSTATE)
2050 1.2 itojun ln->ln_state = ND6_LLINFO_INCOMPLETE;
2051 1.99 rpaulo if (ln->ln_hold) {
2052 1.99 rpaulo struct mbuf *m_hold;
2053 1.99 rpaulo int i;
2054 1.99 rpaulo
2055 1.99 rpaulo i = 0;
2056 1.99 rpaulo for (m_hold = ln->ln_hold; m_hold; m_hold = m_hold->m_nextpkt) {
2057 1.99 rpaulo i++;
2058 1.99 rpaulo if (m_hold->m_nextpkt == NULL) {
2059 1.99 rpaulo m_hold->m_nextpkt = m;
2060 1.99 rpaulo break;
2061 1.99 rpaulo }
2062 1.99 rpaulo }
2063 1.99 rpaulo while (i >= nd6_maxqueuelen) {
2064 1.99 rpaulo m_hold = ln->ln_hold;
2065 1.99 rpaulo ln->ln_hold = ln->ln_hold->m_nextpkt;
2066 1.100 rpaulo m_freem(m_hold);
2067 1.99 rpaulo i--;
2068 1.99 rpaulo }
2069 1.99 rpaulo } else {
2070 1.99 rpaulo ln->ln_hold = m;
2071 1.99 rpaulo }
2072 1.99 rpaulo
2073 1.64 itojun /*
2074 1.64 itojun * If there has been no NS for the neighbor after entering the
2075 1.64 itojun * INCOMPLETE state, send the first solicitation.
2076 1.64 itojun */
2077 1.86 itojun if (!ND6_LLINFO_PERMANENT(ln) && ln->ln_asked == 0) {
2078 1.64 itojun ln->ln_asked++;
2079 1.86 itojun nd6_llinfo_settimer(ln,
2080 1.86 itojun (long)ND_IFINFO(ifp)->retrans * hz / 1000);
2081 1.64 itojun nd6_ns_output(ifp, NULL, &dst->sin6_addr, ln, 0);
2082 1.2 itojun }
2083 1.73 itojun return (0);
2084 1.63 itojun
2085 1.2 itojun sendpkt:
2086 1.99 rpaulo /* discard the packet if IPv6 operation is disabled on the interface */
2087 1.99 rpaulo if ((ND_IFINFO(ifp)->flags & ND6_IFF_IFDISABLED)) {
2088 1.99 rpaulo error = ENETDOWN; /* better error? */
2089 1.99 rpaulo goto bad;
2090 1.99 rpaulo }
2091 1.30 itojun
2092 1.78 itojun #ifdef IPSEC
2093 1.78 itojun /* clean ipsec history once it goes out of the node */
2094 1.78 itojun ipsec_delaux(m);
2095 1.78 itojun #endif
2096 1.43 itojun if ((ifp->if_flags & IFF_LOOPBACK) != 0) {
2097 1.73 itojun return ((*ifp->if_output)(origifp, m, (struct sockaddr *)dst,
2098 1.30 itojun rt));
2099 1.30 itojun }
2100 1.73 itojun return ((*ifp->if_output)(ifp, m, (struct sockaddr *)dst, rt));
2101 1.25 itojun
2102 1.2 itojun bad:
2103 1.2 itojun if (m)
2104 1.2 itojun m_freem(m);
2105 1.2 itojun return (error);
2106 1.63 itojun }
2107 1.2 itojun #undef senderr
2108 1.54 itojun
2109 1.54 itojun int
2110 1.54 itojun nd6_need_cache(ifp)
2111 1.54 itojun struct ifnet *ifp;
2112 1.54 itojun {
2113 1.54 itojun /*
2114 1.54 itojun * XXX: we currently do not make neighbor cache on any interface
2115 1.54 itojun * other than ARCnet, Ethernet, FDDI and GIF.
2116 1.54 itojun *
2117 1.54 itojun * RFC2893 says:
2118 1.54 itojun * - unidirectional tunnels needs no ND
2119 1.54 itojun */
2120 1.54 itojun switch (ifp->if_type) {
2121 1.54 itojun case IFT_ARCNET:
2122 1.54 itojun case IFT_ETHER:
2123 1.54 itojun case IFT_FDDI:
2124 1.54 itojun case IFT_IEEE1394:
2125 1.102 liamjfoy case IFT_CARP:
2126 1.54 itojun case IFT_GIF: /* XXX need more cases? */
2127 1.99 rpaulo case IFT_PPP:
2128 1.99 rpaulo case IFT_TUNNEL:
2129 1.73 itojun return (1);
2130 1.54 itojun default:
2131 1.73 itojun return (0);
2132 1.54 itojun }
2133 1.54 itojun }
2134 1.2 itojun
2135 1.2 itojun int
2136 1.2 itojun nd6_storelladdr(ifp, rt, m, dst, desten)
2137 1.2 itojun struct ifnet *ifp;
2138 1.2 itojun struct rtentry *rt;
2139 1.2 itojun struct mbuf *m;
2140 1.2 itojun struct sockaddr *dst;
2141 1.2 itojun u_char *desten;
2142 1.2 itojun {
2143 1.2 itojun struct sockaddr_dl *sdl;
2144 1.2 itojun
2145 1.2 itojun if (m->m_flags & M_MCAST) {
2146 1.2 itojun switch (ifp->if_type) {
2147 1.2 itojun case IFT_ETHER:
2148 1.63 itojun case IFT_FDDI:
2149 1.2 itojun ETHER_MAP_IPV6_MULTICAST(&SIN6(dst)->sin6_addr,
2150 1.2 itojun desten);
2151 1.73 itojun return (1);
2152 1.33 onoe case IFT_IEEE1394:
2153 1.33 onoe bcopy(ifp->if_broadcastaddr, desten, ifp->if_addrlen);
2154 1.73 itojun return (1);
2155 1.9 is case IFT_ARCNET:
2156 1.9 is *desten = 0;
2157 1.73 itojun return (1);
2158 1.2 itojun default:
2159 1.43 itojun m_freem(m);
2160 1.73 itojun return (0);
2161 1.2 itojun }
2162 1.2 itojun }
2163 1.2 itojun
2164 1.32 itojun if (rt == NULL) {
2165 1.32 itojun /* this could happen, if we could not allocate memory */
2166 1.43 itojun m_freem(m);
2167 1.73 itojun return (0);
2168 1.32 itojun }
2169 1.32 itojun if (rt->rt_gateway->sa_family != AF_LINK) {
2170 1.2 itojun printf("nd6_storelladdr: something odd happens\n");
2171 1.43 itojun m_freem(m);
2172 1.73 itojun return (0);
2173 1.2 itojun }
2174 1.2 itojun sdl = SDL(rt->rt_gateway);
2175 1.23 itojun if (sdl->sdl_alen == 0) {
2176 1.24 itojun /* this should be impossible, but we bark here for debugging */
2177 1.56 itojun printf("nd6_storelladdr: sdl_alen == 0, dst=%s, if=%s\n",
2178 1.65 itojun ip6_sprintf(&SIN6(dst)->sin6_addr), if_name(ifp));
2179 1.43 itojun m_freem(m);
2180 1.73 itojun return (0);
2181 1.23 itojun }
2182 1.2 itojun
2183 1.23 itojun bcopy(LLADDR(sdl), desten, sdl->sdl_alen);
2184 1.73 itojun return (1);
2185 1.65 itojun }
2186 1.65 itojun
2187 1.100 rpaulo static void
2188 1.100 rpaulo clear_llinfo_pqueue(ln)
2189 1.100 rpaulo struct llinfo_nd6 *ln;
2190 1.100 rpaulo {
2191 1.100 rpaulo struct mbuf *m_hold, *m_hold_next;
2192 1.100 rpaulo
2193 1.100 rpaulo for (m_hold = ln->ln_hold; m_hold; m_hold = m_hold_next) {
2194 1.100 rpaulo m_hold_next = m_hold->m_nextpkt;
2195 1.100 rpaulo m_hold->m_nextpkt = NULL;
2196 1.100 rpaulo m_freem(m_hold);
2197 1.100 rpaulo }
2198 1.100 rpaulo
2199 1.100 rpaulo ln->ln_hold = NULL;
2200 1.100 rpaulo return;
2201 1.100 rpaulo }
2202 1.100 rpaulo
2203 1.65 itojun int
2204 1.105 christos nd6_sysctl(
2205 1.105 christos int name,
2206 1.105 christos void *oldp, /* syscall arg, need copyout */
2207 1.105 christos size_t *oldlenp,
2208 1.105 christos void *newp, /* syscall arg, need copyin */
2209 1.107 christos size_t newlen
2210 1.105 christos )
2211 1.65 itojun {
2212 1.69 itojun void *p;
2213 1.88 simonb size_t ol;
2214 1.65 itojun int error;
2215 1.65 itojun
2216 1.65 itojun error = 0;
2217 1.65 itojun
2218 1.65 itojun if (newp)
2219 1.65 itojun return EPERM;
2220 1.65 itojun if (oldp && !oldlenp)
2221 1.65 itojun return EINVAL;
2222 1.65 itojun ol = oldlenp ? *oldlenp : 0;
2223 1.65 itojun
2224 1.69 itojun if (oldp) {
2225 1.69 itojun p = malloc(*oldlenp, M_TEMP, M_WAITOK);
2226 1.99 rpaulo if (p == NULL)
2227 1.69 itojun return ENOMEM;
2228 1.69 itojun } else
2229 1.69 itojun p = NULL;
2230 1.65 itojun switch (name) {
2231 1.65 itojun case ICMPV6CTL_ND6_DRLIST:
2232 1.69 itojun error = fill_drlist(p, oldlenp, ol);
2233 1.99 rpaulo if (!error && p != NULL && oldp != NULL)
2234 1.71 itojun error = copyout(p, oldp, *oldlenp);
2235 1.65 itojun break;
2236 1.65 itojun
2237 1.65 itojun case ICMPV6CTL_ND6_PRLIST:
2238 1.69 itojun error = fill_prlist(p, oldlenp, ol);
2239 1.99 rpaulo if (!error && p != NULL && oldp != NULL)
2240 1.71 itojun error = copyout(p, oldp, *oldlenp);
2241 1.65 itojun break;
2242 1.65 itojun
2243 1.99 rpaulo case ICMPV6CTL_ND6_MAXQLEN:
2244 1.99 rpaulo break;
2245 1.99 rpaulo
2246 1.65 itojun default:
2247 1.65 itojun error = ENOPROTOOPT;
2248 1.65 itojun break;
2249 1.65 itojun }
2250 1.69 itojun if (p)
2251 1.69 itojun free(p, M_TEMP);
2252 1.65 itojun
2253 1.73 itojun return (error);
2254 1.65 itojun }
2255 1.65 itojun
2256 1.65 itojun static int
2257 1.65 itojun fill_drlist(oldp, oldlenp, ol)
2258 1.65 itojun void *oldp;
2259 1.65 itojun size_t *oldlenp, ol;
2260 1.65 itojun {
2261 1.65 itojun int error = 0, s;
2262 1.65 itojun struct in6_defrouter *d = NULL, *de = NULL;
2263 1.65 itojun struct nd_defrouter *dr;
2264 1.65 itojun size_t l;
2265 1.65 itojun
2266 1.65 itojun s = splsoftnet();
2267 1.66 itojun
2268 1.65 itojun if (oldp) {
2269 1.65 itojun d = (struct in6_defrouter *)oldp;
2270 1.65 itojun de = (struct in6_defrouter *)((caddr_t)oldp + *oldlenp);
2271 1.65 itojun }
2272 1.65 itojun l = 0;
2273 1.65 itojun
2274 1.65 itojun for (dr = TAILQ_FIRST(&nd_defrouter); dr;
2275 1.65 itojun dr = TAILQ_NEXT(dr, dr_entry)) {
2276 1.65 itojun
2277 1.65 itojun if (oldp && d + 1 <= de) {
2278 1.65 itojun bzero(d, sizeof(*d));
2279 1.65 itojun d->rtaddr.sin6_family = AF_INET6;
2280 1.65 itojun d->rtaddr.sin6_len = sizeof(struct sockaddr_in6);
2281 1.65 itojun d->rtaddr.sin6_addr = dr->rtaddr;
2282 1.96 rpaulo if (sa6_recoverscope(&d->rtaddr)) {
2283 1.96 rpaulo log(LOG_ERR,
2284 1.96 rpaulo "scope error in router list (%s)\n",
2285 1.96 rpaulo ip6_sprintf(&d->rtaddr.sin6_addr));
2286 1.96 rpaulo /* XXX: press on... */
2287 1.96 rpaulo }
2288 1.65 itojun d->flags = dr->flags;
2289 1.65 itojun d->rtlifetime = dr->rtlifetime;
2290 1.65 itojun d->expire = dr->expire;
2291 1.65 itojun d->if_index = dr->ifp->if_index;
2292 1.65 itojun }
2293 1.65 itojun
2294 1.65 itojun l += sizeof(*d);
2295 1.65 itojun if (d)
2296 1.65 itojun d++;
2297 1.65 itojun }
2298 1.65 itojun
2299 1.65 itojun if (oldp) {
2300 1.65 itojun if (l > ol)
2301 1.65 itojun error = ENOMEM;
2302 1.101 christos }
2303 1.101 christos if (oldlenp)
2304 1.101 christos *oldlenp = l; /* (caddr_t)d - (caddr_t)oldp */
2305 1.65 itojun
2306 1.65 itojun splx(s);
2307 1.65 itojun
2308 1.73 itojun return (error);
2309 1.65 itojun }
2310 1.65 itojun
2311 1.65 itojun static int
2312 1.65 itojun fill_prlist(oldp, oldlenp, ol)
2313 1.65 itojun void *oldp;
2314 1.65 itojun size_t *oldlenp, ol;
2315 1.65 itojun {
2316 1.65 itojun int error = 0, s;
2317 1.65 itojun struct nd_prefix *pr;
2318 1.65 itojun struct in6_prefix *p = NULL;
2319 1.65 itojun struct in6_prefix *pe = NULL;
2320 1.65 itojun size_t l;
2321 1.65 itojun
2322 1.65 itojun s = splsoftnet();
2323 1.65 itojun
2324 1.65 itojun if (oldp) {
2325 1.65 itojun p = (struct in6_prefix *)oldp;
2326 1.65 itojun pe = (struct in6_prefix *)((caddr_t)oldp + *oldlenp);
2327 1.65 itojun }
2328 1.65 itojun l = 0;
2329 1.65 itojun
2330 1.65 itojun for (pr = nd_prefix.lh_first; pr; pr = pr->ndpr_next) {
2331 1.65 itojun u_short advrtrs;
2332 1.65 itojun size_t advance;
2333 1.65 itojun struct sockaddr_in6 *sin6;
2334 1.65 itojun struct sockaddr_in6 *s6;
2335 1.65 itojun struct nd_pfxrouter *pfr;
2336 1.65 itojun
2337 1.65 itojun if (oldp && p + 1 <= pe)
2338 1.65 itojun {
2339 1.65 itojun bzero(p, sizeof(*p));
2340 1.65 itojun sin6 = (struct sockaddr_in6 *)(p + 1);
2341 1.65 itojun
2342 1.65 itojun p->prefix = pr->ndpr_prefix;
2343 1.96 rpaulo if (sa6_recoverscope(&p->prefix)) {
2344 1.65 itojun log(LOG_ERR,
2345 1.65 itojun "scope error in prefix list (%s)\n",
2346 1.65 itojun ip6_sprintf(&p->prefix.sin6_addr));
2347 1.96 rpaulo /* XXX: press on... */
2348 1.96 rpaulo }
2349 1.65 itojun p->raflags = pr->ndpr_raf;
2350 1.65 itojun p->prefixlen = pr->ndpr_plen;
2351 1.65 itojun p->vltime = pr->ndpr_vltime;
2352 1.65 itojun p->pltime = pr->ndpr_pltime;
2353 1.65 itojun p->if_index = pr->ndpr_ifp->if_index;
2354 1.65 itojun if (pr->ndpr_vltime == ND6_INFINITE_LIFETIME)
2355 1.65 itojun p->expire = 0;
2356 1.65 itojun else {
2357 1.65 itojun time_t maxexpire;
2358 1.65 itojun
2359 1.65 itojun /* XXX: we assume time_t is signed. */
2360 1.65 itojun maxexpire = (-1) &
2361 1.99 rpaulo ~((time_t)1 <<
2362 1.99 rpaulo ((sizeof(maxexpire) * 8) - 1));
2363 1.65 itojun if (pr->ndpr_vltime <
2364 1.65 itojun maxexpire - pr->ndpr_lastupdate) {
2365 1.65 itojun p->expire = pr->ndpr_lastupdate +
2366 1.65 itojun pr->ndpr_vltime;
2367 1.65 itojun } else
2368 1.65 itojun p->expire = maxexpire;
2369 1.65 itojun }
2370 1.65 itojun p->refcnt = pr->ndpr_refcnt;
2371 1.65 itojun p->flags = pr->ndpr_stateflags;
2372 1.65 itojun p->origin = PR_ORIG_RA;
2373 1.65 itojun advrtrs = 0;
2374 1.65 itojun for (pfr = pr->ndpr_advrtrs.lh_first; pfr;
2375 1.65 itojun pfr = pfr->pfr_next) {
2376 1.65 itojun if ((void *)&sin6[advrtrs + 1] > (void *)pe) {
2377 1.65 itojun advrtrs++;
2378 1.65 itojun continue;
2379 1.65 itojun }
2380 1.65 itojun s6 = &sin6[advrtrs];
2381 1.65 itojun s6->sin6_family = AF_INET6;
2382 1.65 itojun s6->sin6_len = sizeof(struct sockaddr_in6);
2383 1.65 itojun s6->sin6_addr = pfr->router->rtaddr;
2384 1.96 rpaulo s6->sin6_scope_id = 0;
2385 1.96 rpaulo if (sa6_recoverscope(s6)) {
2386 1.96 rpaulo log(LOG_ERR,
2387 1.96 rpaulo "scope error in "
2388 1.96 rpaulo "prefix list (%s)\n",
2389 1.96 rpaulo ip6_sprintf(&pfr->router->rtaddr));
2390 1.96 rpaulo }
2391 1.65 itojun advrtrs++;
2392 1.65 itojun }
2393 1.65 itojun p->advrtrs = advrtrs;
2394 1.65 itojun }
2395 1.65 itojun else {
2396 1.65 itojun advrtrs = 0;
2397 1.65 itojun for (pfr = pr->ndpr_advrtrs.lh_first; pfr;
2398 1.65 itojun pfr = pfr->pfr_next)
2399 1.65 itojun advrtrs++;
2400 1.65 itojun }
2401 1.65 itojun
2402 1.65 itojun advance = sizeof(*p) + sizeof(*sin6) * advrtrs;
2403 1.65 itojun l += advance;
2404 1.65 itojun if (p)
2405 1.65 itojun p = (struct in6_prefix *)((caddr_t)p + advance);
2406 1.65 itojun }
2407 1.65 itojun
2408 1.65 itojun if (oldp) {
2409 1.65 itojun *oldlenp = l; /* (caddr_t)d - (caddr_t)oldp */
2410 1.65 itojun if (l > ol)
2411 1.65 itojun error = ENOMEM;
2412 1.65 itojun } else
2413 1.65 itojun *oldlenp = l;
2414 1.65 itojun
2415 1.65 itojun splx(s);
2416 1.65 itojun
2417 1.73 itojun return (error);
2418 1.2 itojun }
2419