nd6_nbr.c revision 1.2.2.2
1 1.2.2.2 thorpej /* 2 1.2.2.2 thorpej * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 3 1.2.2.2 thorpej * All rights reserved. 4 1.2.2.2 thorpej * 5 1.2.2.2 thorpej * Redistribution and use in source and binary forms, with or without 6 1.2.2.2 thorpej * modification, are permitted provided that the following conditions 7 1.2.2.2 thorpej * are met: 8 1.2.2.2 thorpej * 1. Redistributions of source code must retain the above copyright 9 1.2.2.2 thorpej * notice, this list of conditions and the following disclaimer. 10 1.2.2.2 thorpej * 2. Redistributions in binary form must reproduce the above copyright 11 1.2.2.2 thorpej * notice, this list of conditions and the following disclaimer in the 12 1.2.2.2 thorpej * documentation and/or other materials provided with the distribution. 13 1.2.2.2 thorpej * 3. Neither the name of the project nor the names of its contributors 14 1.2.2.2 thorpej * may be used to endorse or promote products derived from this software 15 1.2.2.2 thorpej * without specific prior written permission. 16 1.2.2.2 thorpej * 17 1.2.2.2 thorpej * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 18 1.2.2.2 thorpej * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19 1.2.2.2 thorpej * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20 1.2.2.2 thorpej * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 21 1.2.2.2 thorpej * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 1.2.2.2 thorpej * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 1.2.2.2 thorpej * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 1.2.2.2 thorpej * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25 1.2.2.2 thorpej * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26 1.2.2.2 thorpej * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27 1.2.2.2 thorpej * SUCH DAMAGE. 28 1.2.2.2 thorpej */ 29 1.2.2.2 thorpej 30 1.2.2.2 thorpej #if (defined(__FreeBSD__) && __FreeBSD__ >= 3) || defined(__NetBSD__) 31 1.2.2.2 thorpej #include "opt_inet.h" 32 1.2.2.2 thorpej #endif 33 1.2.2.2 thorpej 34 1.2.2.2 thorpej #include <sys/param.h> 35 1.2.2.2 thorpej #include <sys/systm.h> 36 1.2.2.2 thorpej #include <sys/malloc.h> 37 1.2.2.2 thorpej #include <sys/mbuf.h> 38 1.2.2.2 thorpej #include <sys/socket.h> 39 1.2.2.2 thorpej #include <sys/sockio.h> 40 1.2.2.2 thorpej #include <sys/time.h> 41 1.2.2.2 thorpej #include <sys/kernel.h> 42 1.2.2.2 thorpej #include <sys/errno.h> 43 1.2.2.2 thorpej #if !defined(__FreeBSD__) || __FreeBSD__ < 3 44 1.2.2.2 thorpej #include <sys/ioctl.h> 45 1.2.2.2 thorpej #endif 46 1.2.2.2 thorpej #include <sys/syslog.h> 47 1.2.2.2 thorpej #include <sys/queue.h> 48 1.2.2.2 thorpej 49 1.2.2.2 thorpej #include <net/if.h> 50 1.2.2.2 thorpej #include <net/if_types.h> 51 1.2.2.2 thorpej #include <net/if_dl.h> 52 1.2.2.2 thorpej #include <net/route.h> 53 1.2.2.2 thorpej 54 1.2.2.2 thorpej #include <netinet/in.h> 55 1.2.2.2 thorpej #include <netinet/in_var.h> 56 1.2.2.2 thorpej #include <netinet6/in6_var.h> 57 1.2.2.2 thorpej #include <netinet6/ip6.h> 58 1.2.2.2 thorpej #include <netinet6/ip6_var.h> 59 1.2.2.2 thorpej #include <netinet6/nd6.h> 60 1.2.2.2 thorpej #include <netinet6/icmp6.h> 61 1.2.2.2 thorpej 62 1.2.2.2 thorpej #define SDL(s) ((struct sockaddr_dl *)s) 63 1.2.2.2 thorpej 64 1.2.2.2 thorpej #if 0 65 1.2.2.2 thorpej extern struct timeval time; 66 1.2.2.2 thorpej #endif 67 1.2.2.2 thorpej 68 1.2.2.2 thorpej struct dadq; 69 1.2.2.2 thorpej static struct dadq *nd6_dad_find __P((struct ifaddr *)); 70 1.2.2.2 thorpej static void nd6_dad_timer __P((struct ifaddr *)); 71 1.2.2.2 thorpej static void nd6_dad_ns_input __P((struct ifaddr *)); 72 1.2.2.2 thorpej static void nd6_dad_na_input __P((struct ifaddr *)); 73 1.2.2.2 thorpej 74 1.2.2.2 thorpej /* ignore NS in DAD - specwise incorrect, */ 75 1.2.2.2 thorpej int dad_ignore_ns = 0; 76 1.2.2.2 thorpej 77 1.2.2.2 thorpej /* 78 1.2.2.2 thorpej * Input an Neighbor Solicitation Message. 79 1.2.2.2 thorpej * 80 1.2.2.2 thorpej * Based on RFC 2461 81 1.2.2.2 thorpej * Based on RFC 2462 (duplicated address detection) 82 1.2.2.2 thorpej * 83 1.2.2.2 thorpej * XXX proxy advertisement 84 1.2.2.2 thorpej */ 85 1.2.2.2 thorpej void 86 1.2.2.2 thorpej nd6_ns_input(m, off, icmp6len) 87 1.2.2.2 thorpej struct mbuf *m; 88 1.2.2.2 thorpej int off, icmp6len; 89 1.2.2.2 thorpej { 90 1.2.2.2 thorpej struct ifnet *ifp = m->m_pkthdr.rcvif; 91 1.2.2.2 thorpej struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *); 92 1.2.2.2 thorpej struct nd_neighbor_solicit *nd_ns 93 1.2.2.2 thorpej = (struct nd_neighbor_solicit *)((caddr_t)ip6 + off); 94 1.2.2.2 thorpej struct in6_addr saddr6 = ip6->ip6_src; 95 1.2.2.2 thorpej struct in6_addr daddr6 = ip6->ip6_dst; 96 1.2.2.2 thorpej struct in6_addr taddr6 = nd_ns->nd_ns_target; 97 1.2.2.2 thorpej struct in6_addr myaddr6; 98 1.2.2.2 thorpej char *lladdr = NULL; 99 1.2.2.2 thorpej struct ifaddr *ifa; 100 1.2.2.2 thorpej int lladdrlen = 0; 101 1.2.2.2 thorpej int anycast = 0, proxy = 0, tentative = 0; 102 1.2.2.2 thorpej int tlladdr; 103 1.2.2.2 thorpej union nd_opts ndopts; 104 1.2.2.2 thorpej 105 1.2.2.2 thorpej if (ip6->ip6_hlim != 255) { 106 1.2.2.2 thorpej log(LOG_ERR, 107 1.2.2.2 thorpej "nd6_ns_input: invalid hlim %d\n", ip6->ip6_hlim); 108 1.2.2.2 thorpej return; 109 1.2.2.2 thorpej } 110 1.2.2.2 thorpej 111 1.2.2.2 thorpej if (IN6_IS_ADDR_UNSPECIFIED(&saddr6)) { 112 1.2.2.2 thorpej /* dst has to be solicited node multicast address. */ 113 1.2.2.2 thorpej if (daddr6.s6_addr16[0] == IPV6_ADDR_INT16_MLL 114 1.2.2.2 thorpej /*don't check ifindex portion*/ 115 1.2.2.2 thorpej && daddr6.s6_addr32[1] == 0 116 1.2.2.2 thorpej && daddr6.s6_addr32[2] == IPV6_ADDR_INT32_ONE 117 1.2.2.2 thorpej && daddr6.s6_addr8[12] == 0xff) { 118 1.2.2.2 thorpej ; /*good*/ 119 1.2.2.2 thorpej } else { 120 1.2.2.2 thorpej log(LOG_INFO, "nd6_ns_input: bad DAD packet " 121 1.2.2.2 thorpej "(wrong ip6 dst)\n"); 122 1.2.2.2 thorpej goto bad; 123 1.2.2.2 thorpej } 124 1.2.2.2 thorpej } 125 1.2.2.2 thorpej 126 1.2.2.2 thorpej if (IN6_IS_ADDR_MULTICAST(&taddr6)) { 127 1.2.2.2 thorpej log(LOG_INFO, "nd6_ns_input: bad NS target (multicast)\n"); 128 1.2.2.2 thorpej goto bad; 129 1.2.2.2 thorpej } 130 1.2.2.2 thorpej 131 1.2.2.2 thorpej if (IN6_IS_SCOPE_LINKLOCAL(&taddr6)) 132 1.2.2.2 thorpej taddr6.s6_addr16[1] = htons(ifp->if_index); 133 1.2.2.2 thorpej 134 1.2.2.2 thorpej icmp6len -= sizeof(*nd_ns); 135 1.2.2.2 thorpej nd6_option_init(nd_ns + 1, icmp6len, &ndopts); 136 1.2.2.2 thorpej if (nd6_options(&ndopts) < 0) { 137 1.2.2.2 thorpej log(LOG_INFO, "nd6_ns_input: invalid ND option, ignored\n"); 138 1.2.2.2 thorpej goto bad; 139 1.2.2.2 thorpej } 140 1.2.2.2 thorpej 141 1.2.2.2 thorpej if (ndopts.nd_opts_src_lladdr) { 142 1.2.2.2 thorpej lladdr = (char *)(ndopts.nd_opts_src_lladdr +1); 143 1.2.2.2 thorpej lladdrlen = ndopts.nd_opts_src_lladdr->nd_opt_len << 3; 144 1.2.2.2 thorpej } 145 1.2.2.2 thorpej 146 1.2.2.2 thorpej if (IN6_IS_ADDR_UNSPECIFIED(&ip6->ip6_src) && lladdr) { 147 1.2.2.2 thorpej log(LOG_INFO, "nd6_ns_input: bad DAD packet " 148 1.2.2.2 thorpej "(link-layer address option)\n"); 149 1.2.2.2 thorpej goto bad; 150 1.2.2.2 thorpej } 151 1.2.2.2 thorpej 152 1.2.2.2 thorpej /* 153 1.2.2.2 thorpej * Attaching target link-layer address to the NA? 154 1.2.2.2 thorpej * (RFC 2461 7.2.4) 155 1.2.2.2 thorpej * 156 1.2.2.2 thorpej * NS IP dst is unicast/anycast MUST NOT add 157 1.2.2.2 thorpej * NS IP dst is solicited-node multicast MUST add 158 1.2.2.2 thorpej * 159 1.2.2.2 thorpej * In implementation, we add target link-layer address by default. 160 1.2.2.2 thorpej * We do not add one in MUST NOT cases. 161 1.2.2.2 thorpej */ 162 1.2.2.2 thorpej #if 0 /* too much! */ 163 1.2.2.2 thorpej ifa = (struct ifaddr *)in6ifa_ifpwithaddr(ifp, &daddr6); 164 1.2.2.2 thorpej if (ifa && (((struct in6_ifaddr *)ifa)->ia6_flags & IN6_IFF_ANYCAST)) 165 1.2.2.2 thorpej tlladdr = 0; 166 1.2.2.2 thorpej else 167 1.2.2.2 thorpej #endif 168 1.2.2.2 thorpej if (!IN6_IS_ADDR_MULTICAST(&daddr6)) 169 1.2.2.2 thorpej tlladdr = 0; 170 1.2.2.2 thorpej else 171 1.2.2.2 thorpej tlladdr = 1; 172 1.2.2.2 thorpej 173 1.2.2.2 thorpej /* 174 1.2.2.2 thorpej * Target address (taddr6) must be either: 175 1.2.2.2 thorpej * (1) Valid unicast/anycast address for my receiving interface, 176 1.2.2.2 thorpej * (2) Unicast address for which I'm offering proxy service, or 177 1.2.2.2 thorpej * (3) "tentative" address on which DAD is being performed. 178 1.2.2.2 thorpej */ 179 1.2.2.2 thorpej /* (1) and (3) check. */ 180 1.2.2.2 thorpej ifa = (struct ifaddr *)in6ifa_ifpwithaddr(ifp, &taddr6); 181 1.2.2.2 thorpej 182 1.2.2.2 thorpej /* (2) check. */ 183 1.2.2.2 thorpej if (!ifa && nd6_proxyall) { 184 1.2.2.2 thorpej struct rtentry *rt; 185 1.2.2.2 thorpej struct sockaddr_in6 tsin6; 186 1.2.2.2 thorpej 187 1.2.2.2 thorpej bzero(&tsin6, sizeof tsin6); 188 1.2.2.2 thorpej tsin6.sin6_len = sizeof(struct sockaddr_in6); 189 1.2.2.2 thorpej tsin6.sin6_family = AF_INET6; 190 1.2.2.2 thorpej tsin6.sin6_addr = taddr6; 191 1.2.2.2 thorpej 192 1.2.2.2 thorpej rt = rtalloc1((struct sockaddr *)&tsin6, 0 193 1.2.2.2 thorpej #ifdef __FreeBSD__ 194 1.2.2.2 thorpej , 0 195 1.2.2.2 thorpej #endif /* __FreeBSD__ */ 196 1.2.2.2 thorpej ); 197 1.2.2.2 thorpej if (rt && rt->rt_ifp != ifp) { 198 1.2.2.2 thorpej /* 199 1.2.2.2 thorpej * search link local addr for ifp, and use it for 200 1.2.2.2 thorpej * proxy NA. 201 1.2.2.2 thorpej */ 202 1.2.2.2 thorpej ifa = (struct ifaddr *)in6ifa_ifpforlinklocal(ifp); 203 1.2.2.2 thorpej if (ifa) 204 1.2.2.2 thorpej proxy = 1; 205 1.2.2.2 thorpej } 206 1.2.2.2 thorpej rtfree(rt); 207 1.2.2.2 thorpej } 208 1.2.2.2 thorpej if (!ifa) { 209 1.2.2.2 thorpej /* 210 1.2.2.2 thorpej * We've got a NS packet, and we don't have that adddress 211 1.2.2.2 thorpej * assigned for us. We MUST silently ignore it. 212 1.2.2.2 thorpej * See RFC2461 7.2.3. 213 1.2.2.2 thorpej */ 214 1.2.2.2 thorpej return; 215 1.2.2.2 thorpej } 216 1.2.2.2 thorpej myaddr6 = IFA_IN6(ifa); 217 1.2.2.2 thorpej anycast = ((struct in6_ifaddr *)ifa)->ia6_flags & IN6_IFF_ANYCAST; 218 1.2.2.2 thorpej tentative = ((struct in6_ifaddr *)ifa)->ia6_flags & IN6_IFF_TENTATIVE; 219 1.2.2.2 thorpej if (((struct in6_ifaddr *)ifa)->ia6_flags & IN6_IFF_DUPLICATED) 220 1.2.2.2 thorpej return; 221 1.2.2.2 thorpej 222 1.2.2.2 thorpej if (lladdr && ((ifp->if_addrlen + 2 + 7) & ~7) != lladdrlen) { 223 1.2.2.2 thorpej log(LOG_INFO, 224 1.2.2.2 thorpej "nd6_ns_input: lladdrlen mismatch for %s " 225 1.2.2.2 thorpej "(if %d, NS packet %d)\n", 226 1.2.2.2 thorpej ip6_sprintf(&taddr6), ifp->if_addrlen, lladdrlen - 2); 227 1.2.2.2 thorpej } 228 1.2.2.2 thorpej 229 1.2.2.2 thorpej if (IN6_ARE_ADDR_EQUAL(&myaddr6, &saddr6)) { 230 1.2.2.2 thorpej log(LOG_INFO, 231 1.2.2.2 thorpej "nd6_ns_input: duplicate IP6 address %s\n", 232 1.2.2.2 thorpej ip6_sprintf(&saddr6)); 233 1.2.2.2 thorpej return; 234 1.2.2.2 thorpej } 235 1.2.2.2 thorpej 236 1.2.2.2 thorpej /* 237 1.2.2.2 thorpej * We have neighbor solicitation packet, with target address equals to 238 1.2.2.2 thorpej * one of my tentative address. 239 1.2.2.2 thorpej * 240 1.2.2.2 thorpej * src addr how to process? 241 1.2.2.2 thorpej * --- --- 242 1.2.2.2 thorpej * multicast of course, invalid (rejected in ip6_input) 243 1.2.2.2 thorpej * unicast somebody is doing address resolution -> ignore 244 1.2.2.2 thorpej * unspec dup address detection 245 1.2.2.2 thorpej * 246 1.2.2.2 thorpej * The processing is defined in RFC 2462. 247 1.2.2.2 thorpej */ 248 1.2.2.2 thorpej if (tentative) { 249 1.2.2.2 thorpej /* 250 1.2.2.2 thorpej * If source address is unspecified address, it is for 251 1.2.2.2 thorpej * duplicated address detection. 252 1.2.2.2 thorpej * 253 1.2.2.2 thorpej * If not, the packet is for addess resolution; 254 1.2.2.2 thorpej * silently ignore it. 255 1.2.2.2 thorpej */ 256 1.2.2.2 thorpej if (IN6_IS_ADDR_UNSPECIFIED(&saddr6)) 257 1.2.2.2 thorpej nd6_dad_ns_input(ifa); 258 1.2.2.2 thorpej 259 1.2.2.2 thorpej return; 260 1.2.2.2 thorpej } 261 1.2.2.2 thorpej 262 1.2.2.2 thorpej /* 263 1.2.2.2 thorpej * If the source address is unspecified address, entries must not 264 1.2.2.2 thorpej * be created or updated. 265 1.2.2.2 thorpej * It looks that sender is performing DAD. Output NA toward 266 1.2.2.2 thorpej * all-node multicast address, to tell the sender that I'm using 267 1.2.2.2 thorpej * the address. 268 1.2.2.2 thorpej * S bit ("solicited") must be zero. 269 1.2.2.2 thorpej */ 270 1.2.2.2 thorpej if (IN6_IS_ADDR_UNSPECIFIED(&saddr6)) { 271 1.2.2.2 thorpej saddr6 = in6addr_linklocal_allnodes; 272 1.2.2.2 thorpej saddr6.s6_addr16[1] = htons(ifp->if_index); 273 1.2.2.2 thorpej nd6_na_output(ifp, &saddr6, &taddr6, 274 1.2.2.2 thorpej ((anycast || proxy || !tlladdr) 275 1.2.2.2 thorpej ? 0 : ND_NA_FLAG_OVERRIDE) 276 1.2.2.2 thorpej | (ip6_forwarding ? ND_NA_FLAG_ROUTER : 0), 277 1.2.2.2 thorpej tlladdr); 278 1.2.2.2 thorpej return; 279 1.2.2.2 thorpej } 280 1.2.2.2 thorpej 281 1.2.2.2 thorpej nd6_cache_lladdr(ifp, &saddr6, lladdr, lladdrlen, ND_NEIGHBOR_SOLICIT); 282 1.2.2.2 thorpej 283 1.2.2.2 thorpej nd6_na_output(ifp, &saddr6, &taddr6, 284 1.2.2.2 thorpej ((anycast || proxy || !tlladdr) ? 0 : ND_NA_FLAG_OVERRIDE) 285 1.2.2.2 thorpej | (ip6_forwarding ? ND_NA_FLAG_ROUTER : 0) 286 1.2.2.2 thorpej | ND_NA_FLAG_SOLICITED, 287 1.2.2.2 thorpej tlladdr); 288 1.2.2.2 thorpej return; 289 1.2.2.2 thorpej 290 1.2.2.2 thorpej bad: 291 1.2.2.2 thorpej log(LOG_ERR, "nd6_ns_input: src=%s\n", ip6_sprintf(&saddr6)); 292 1.2.2.2 thorpej log(LOG_ERR, "nd6_ns_input: dst=%s\n", ip6_sprintf(&daddr6)); 293 1.2.2.2 thorpej log(LOG_ERR, "nd6_ns_input: tgt=%s\n", ip6_sprintf(&taddr6)); 294 1.2.2.2 thorpej return; 295 1.2.2.2 thorpej } 296 1.2.2.2 thorpej 297 1.2.2.2 thorpej /* 298 1.2.2.2 thorpej * Output an Neighbor Solicitation Message. Caller specifies: 299 1.2.2.2 thorpej * - ICMP6 header source IP6 address 300 1.2.2.2 thorpej * - ND6 header target IP6 address 301 1.2.2.2 thorpej * - ND6 header source datalink address 302 1.2.2.2 thorpej * 303 1.2.2.2 thorpej * Based on RFC 2461 304 1.2.2.2 thorpej * Based on RFC 2462 (duplicated address detection) 305 1.2.2.2 thorpej */ 306 1.2.2.2 thorpej void 307 1.2.2.2 thorpej nd6_ns_output(ifp, daddr6, taddr6, ln, dad) 308 1.2.2.2 thorpej struct ifnet *ifp; 309 1.2.2.2 thorpej struct in6_addr *daddr6, *taddr6; 310 1.2.2.2 thorpej struct llinfo_nd6 *ln; /* for source address determination */ 311 1.2.2.2 thorpej int dad; /* duplicated address detection */ 312 1.2.2.2 thorpej { 313 1.2.2.2 thorpej struct mbuf *m; 314 1.2.2.2 thorpej struct ip6_hdr *ip6; 315 1.2.2.2 thorpej struct nd_neighbor_solicit *nd_ns; 316 1.2.2.2 thorpej struct in6_ifaddr *ia = NULL; 317 1.2.2.2 thorpej struct ip6_moptions im6o; 318 1.2.2.2 thorpej int icmp6len; 319 1.2.2.2 thorpej caddr_t mac; 320 1.2.2.2 thorpej 321 1.2.2.2 thorpej if (IN6_IS_ADDR_MULTICAST(taddr6)) 322 1.2.2.2 thorpej return; 323 1.2.2.2 thorpej 324 1.2.2.2 thorpej if ((m = m_gethdr(M_DONTWAIT, MT_DATA)) == NULL) 325 1.2.2.2 thorpej return; 326 1.2.2.2 thorpej 327 1.2.2.2 thorpej if (daddr6 == NULL || IN6_IS_ADDR_MULTICAST(daddr6)) { 328 1.2.2.2 thorpej m->m_flags |= M_MCAST; 329 1.2.2.2 thorpej im6o.im6o_multicast_ifp = ifp; 330 1.2.2.2 thorpej im6o.im6o_multicast_hlim = 255; 331 1.2.2.2 thorpej im6o.im6o_multicast_loop = 0; 332 1.2.2.2 thorpej } 333 1.2.2.2 thorpej 334 1.2.2.2 thorpej icmp6len = sizeof(*nd_ns); 335 1.2.2.2 thorpej m->m_pkthdr.len = m->m_len = sizeof(*ip6) + icmp6len; 336 1.2.2.2 thorpej MH_ALIGN(m, m->m_len + 16); /* 1+1+6 is enought. but just in case */ 337 1.2.2.2 thorpej 338 1.2.2.2 thorpej /* fill neighbor solicitation packet */ 339 1.2.2.2 thorpej ip6 = mtod(m, struct ip6_hdr *); 340 1.2.2.2 thorpej ip6->ip6_flow = 0; 341 1.2.2.2 thorpej ip6->ip6_vfc = IPV6_VERSION; 342 1.2.2.2 thorpej /* ip6->ip6_plen will be set later */ 343 1.2.2.2 thorpej ip6->ip6_nxt = IPPROTO_ICMPV6; 344 1.2.2.2 thorpej ip6->ip6_hlim = 255; 345 1.2.2.2 thorpej if (daddr6) 346 1.2.2.2 thorpej ip6->ip6_dst = *daddr6; 347 1.2.2.2 thorpej else { 348 1.2.2.2 thorpej ip6->ip6_dst.s6_addr16[0] = IPV6_ADDR_INT16_MLL; 349 1.2.2.2 thorpej ip6->ip6_dst.s6_addr16[1] = htons(ifp->if_index); 350 1.2.2.2 thorpej ip6->ip6_dst.s6_addr32[1] = 0; 351 1.2.2.2 thorpej ip6->ip6_dst.s6_addr32[2] = IPV6_ADDR_INT32_ONE; 352 1.2.2.2 thorpej ip6->ip6_dst.s6_addr32[3] = taddr6->s6_addr32[3]; 353 1.2.2.2 thorpej ip6->ip6_dst.s6_addr8[12] = 0xff; 354 1.2.2.2 thorpej } 355 1.2.2.2 thorpej if (!dad) { 356 1.2.2.2 thorpej #if 0 /* KAME way, exact address scope match */ 357 1.2.2.2 thorpej /* 358 1.2.2.2 thorpej * Select a source whose scope is the same as that of the dest. 359 1.2.2.2 thorpej * Typically, the dest is link-local solicitation multicast 360 1.2.2.2 thorpej * (i.e. neighbor discovery) or link-local/global unicast 361 1.2.2.2 thorpej * (i.e. neighbor un-reachability detection). 362 1.2.2.2 thorpej */ 363 1.2.2.2 thorpej ia = in6_ifawithifp(ifp, &ip6->ip6_dst); 364 1.2.2.2 thorpej if (ia == NULL) { 365 1.2.2.2 thorpej m_freem(m); 366 1.2.2.2 thorpej return; 367 1.2.2.2 thorpej } 368 1.2.2.2 thorpej ip6->ip6_src = ia->ia_addr.sin6_addr; 369 1.2.2.2 thorpej #else /* spec-wise correct */ 370 1.2.2.2 thorpej /* 371 1.2.2.2 thorpej * RFC2461 7.2.2: 372 1.2.2.2 thorpej * "If the source address of the packet prompting the 373 1.2.2.2 thorpej * solicitation is the same as one of the addresses assigned 374 1.2.2.2 thorpej * to the outgoing interface, that address SHOULD be placed 375 1.2.2.2 thorpej * in the IP Source Address of the outgoing solicitation. 376 1.2.2.2 thorpej * Otherwise, any one of the addresses assigned to the 377 1.2.2.2 thorpej * interface should be used." 378 1.2.2.2 thorpej * 379 1.2.2.2 thorpej * We use the source address for the prompting packet 380 1.2.2.2 thorpej * (saddr6), if: 381 1.2.2.2 thorpej * - saddr6 is given from the caller (by giving "ln"), and 382 1.2.2.2 thorpej * - saddr6 belongs to the outgoing interface. 383 1.2.2.2 thorpej * Otherwise, we perform a scope-wise match. 384 1.2.2.2 thorpej */ 385 1.2.2.2 thorpej struct ip6_hdr *hip6; /*hold ip6*/ 386 1.2.2.2 thorpej struct in6_addr *saddr6; 387 1.2.2.2 thorpej 388 1.2.2.2 thorpej if (ln && ln->ln_hold) { 389 1.2.2.2 thorpej hip6 = mtod(ln->ln_hold, struct ip6_hdr *); 390 1.2.2.2 thorpej /* XXX pullup? */ 391 1.2.2.2 thorpej if (sizeof(*hip6) < ln->ln_hold->m_len) 392 1.2.2.2 thorpej saddr6 = &hip6->ip6_src; 393 1.2.2.2 thorpej else 394 1.2.2.2 thorpej saddr6 = NULL; 395 1.2.2.2 thorpej } else 396 1.2.2.2 thorpej saddr6 = NULL; 397 1.2.2.2 thorpej if (saddr6 && in6ifa_ifpwithaddr(ifp, saddr6)) 398 1.2.2.2 thorpej bcopy(saddr6, &ip6->ip6_src, sizeof(*saddr6)); 399 1.2.2.2 thorpej else { 400 1.2.2.2 thorpej ia = in6_ifawithifp(ifp, &ip6->ip6_dst); 401 1.2.2.2 thorpej if (ia == NULL) { 402 1.2.2.2 thorpej m_freem(m); /*XXX*/ 403 1.2.2.2 thorpej return; 404 1.2.2.2 thorpej } 405 1.2.2.2 thorpej ip6->ip6_src = ia->ia_addr.sin6_addr; 406 1.2.2.2 thorpej } 407 1.2.2.2 thorpej #endif 408 1.2.2.2 thorpej } else { 409 1.2.2.2 thorpej /* 410 1.2.2.2 thorpej * Source address for DAD packet must always be IPv6 411 1.2.2.2 thorpej * unspecified address. (0::0) 412 1.2.2.2 thorpej */ 413 1.2.2.2 thorpej bzero(&ip6->ip6_src, sizeof(ip6->ip6_src)); 414 1.2.2.2 thorpej } 415 1.2.2.2 thorpej nd_ns = (struct nd_neighbor_solicit *)(ip6 + 1); 416 1.2.2.2 thorpej nd_ns->nd_ns_type = ND_NEIGHBOR_SOLICIT; 417 1.2.2.2 thorpej nd_ns->nd_ns_code = 0; 418 1.2.2.2 thorpej nd_ns->nd_ns_reserved = 0; 419 1.2.2.2 thorpej nd_ns->nd_ns_target = *taddr6; 420 1.2.2.2 thorpej 421 1.2.2.2 thorpej if (IN6_IS_SCOPE_LINKLOCAL(&nd_ns->nd_ns_target)) 422 1.2.2.2 thorpej nd_ns->nd_ns_target.s6_addr16[1] = 0; 423 1.2.2.2 thorpej 424 1.2.2.2 thorpej /* 425 1.2.2.2 thorpej * Add source link-layer address option. 426 1.2.2.2 thorpej * 427 1.2.2.2 thorpej * spec implementation 428 1.2.2.2 thorpej * --- --- 429 1.2.2.2 thorpej * DAD packet MUST NOT do not add the option 430 1.2.2.2 thorpej * there's no link layer address: 431 1.2.2.2 thorpej * impossible do not add the option 432 1.2.2.2 thorpej * there's link layer address: 433 1.2.2.2 thorpej * Multicast NS MUST add one add the option 434 1.2.2.2 thorpej * Unicast NS SHOULD add one add the option 435 1.2.2.2 thorpej */ 436 1.2.2.2 thorpej if (!dad && (mac = nd6_ifptomac(ifp))) { 437 1.2.2.2 thorpej int optlen = sizeof(struct nd_opt_hdr) + ifp->if_addrlen; 438 1.2.2.2 thorpej struct nd_opt_hdr *nd_opt = (struct nd_opt_hdr *)(nd_ns + 1); 439 1.2.2.2 thorpej 440 1.2.2.2 thorpej m->m_pkthdr.len += optlen; 441 1.2.2.2 thorpej m->m_len += optlen; 442 1.2.2.2 thorpej icmp6len += optlen; 443 1.2.2.2 thorpej nd_opt->nd_opt_type = ND_OPT_SOURCE_LINKADDR; 444 1.2.2.2 thorpej /* xxx 8 byte alignments? */ 445 1.2.2.2 thorpej nd_opt->nd_opt_len = optlen >> 3; 446 1.2.2.2 thorpej bcopy(mac, (caddr_t)(nd_opt + 1), ifp->if_addrlen); 447 1.2.2.2 thorpej } 448 1.2.2.2 thorpej 449 1.2.2.2 thorpej ip6->ip6_plen = htons((u_short)icmp6len); 450 1.2.2.2 thorpej nd_ns->nd_ns_cksum = 0; 451 1.2.2.2 thorpej nd_ns->nd_ns_cksum 452 1.2.2.2 thorpej = in6_cksum(m, IPPROTO_ICMPV6, sizeof(*ip6), icmp6len); 453 1.2.2.2 thorpej 454 1.2.2.2 thorpej #ifdef IPSEC 455 1.2.2.2 thorpej m->m_pkthdr.rcvif = NULL; 456 1.2.2.2 thorpej #endif /*IPSEC*/ 457 1.2.2.2 thorpej ip6_output(m, NULL, NULL, dad ? IPV6_DADOUTPUT : 0, &im6o); 458 1.2.2.2 thorpej icmp6stat.icp6s_outhist[ND_NEIGHBOR_SOLICIT]++; 459 1.2.2.2 thorpej } 460 1.2.2.2 thorpej 461 1.2.2.2 thorpej /* 462 1.2.2.2 thorpej * Neighbor advertisement input handling. 463 1.2.2.2 thorpej * 464 1.2.2.2 thorpej * Based on RFC 2461 465 1.2.2.2 thorpej * Based on RFC 2462 (duplicated address detection) 466 1.2.2.2 thorpej */ 467 1.2.2.2 thorpej void 468 1.2.2.2 thorpej nd6_na_input(m, off, icmp6len) 469 1.2.2.2 thorpej struct mbuf *m; 470 1.2.2.2 thorpej int off, icmp6len; 471 1.2.2.2 thorpej { 472 1.2.2.2 thorpej struct ifnet *ifp = m->m_pkthdr.rcvif; 473 1.2.2.2 thorpej struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *); 474 1.2.2.2 thorpej struct nd_neighbor_advert *nd_na 475 1.2.2.2 thorpej = (struct nd_neighbor_advert *)((caddr_t)ip6 + off); 476 1.2.2.2 thorpej #if 0 477 1.2.2.2 thorpej struct in6_addr saddr6 = ip6->ip6_src; 478 1.2.2.2 thorpej #endif 479 1.2.2.2 thorpej struct in6_addr daddr6 = ip6->ip6_dst; 480 1.2.2.2 thorpej struct in6_addr taddr6 = nd_na->nd_na_target; 481 1.2.2.2 thorpej int flags = nd_na->nd_na_flags_reserved; 482 1.2.2.2 thorpej int is_router = ((flags & ND_NA_FLAG_ROUTER) != 0); 483 1.2.2.2 thorpej int is_solicited = ((flags & ND_NA_FLAG_SOLICITED) != 0); 484 1.2.2.2 thorpej int is_override = ((flags & ND_NA_FLAG_OVERRIDE) != 0); 485 1.2.2.2 thorpej char *lladdr = NULL; 486 1.2.2.2 thorpej int lladdrlen = 0; 487 1.2.2.2 thorpej struct ifaddr *ifa; 488 1.2.2.2 thorpej struct llinfo_nd6 *ln; 489 1.2.2.2 thorpej struct rtentry *rt; 490 1.2.2.2 thorpej struct sockaddr_dl *sdl; 491 1.2.2.2 thorpej union nd_opts ndopts; 492 1.2.2.2 thorpej 493 1.2.2.2 thorpej if (ip6->ip6_hlim != 255) { 494 1.2.2.2 thorpej log(LOG_ERR, 495 1.2.2.2 thorpej "nd6_na_input: invalid hlim %d\n", ip6->ip6_hlim); 496 1.2.2.2 thorpej return; 497 1.2.2.2 thorpej } 498 1.2.2.2 thorpej 499 1.2.2.2 thorpej if (IN6_IS_SCOPE_LINKLOCAL(&taddr6)) 500 1.2.2.2 thorpej taddr6.s6_addr16[1] = htons(ifp->if_index); 501 1.2.2.2 thorpej 502 1.2.2.2 thorpej if (IN6_IS_ADDR_MULTICAST(&taddr6)) { 503 1.2.2.2 thorpej log(LOG_ERR, 504 1.2.2.2 thorpej "nd6_na_input: invalid target address %s\n", 505 1.2.2.2 thorpej ip6_sprintf(&taddr6)); 506 1.2.2.2 thorpej return; 507 1.2.2.2 thorpej } 508 1.2.2.2 thorpej if (IN6_IS_ADDR_MULTICAST(&daddr6)) 509 1.2.2.2 thorpej if (is_solicited) { 510 1.2.2.2 thorpej log(LOG_ERR, 511 1.2.2.2 thorpej "nd6_na_input: a solicited adv is multicasted\n"); 512 1.2.2.2 thorpej return; 513 1.2.2.2 thorpej } 514 1.2.2.2 thorpej 515 1.2.2.2 thorpej icmp6len -= sizeof(*nd_na); 516 1.2.2.2 thorpej nd6_option_init(nd_na + 1, icmp6len, &ndopts); 517 1.2.2.2 thorpej if (nd6_options(&ndopts) < 0) { 518 1.2.2.2 thorpej log(LOG_INFO, "nd6_na_input: invalid ND option, ignored\n"); 519 1.2.2.2 thorpej return; 520 1.2.2.2 thorpej } 521 1.2.2.2 thorpej 522 1.2.2.2 thorpej if (ndopts.nd_opts_tgt_lladdr) { 523 1.2.2.2 thorpej lladdr = (char *)(ndopts.nd_opts_tgt_lladdr + 1); 524 1.2.2.2 thorpej lladdrlen = ndopts.nd_opts_tgt_lladdr->nd_opt_len << 3; 525 1.2.2.2 thorpej } 526 1.2.2.2 thorpej 527 1.2.2.2 thorpej ifa = (struct ifaddr *)in6ifa_ifpwithaddr(ifp, &taddr6); 528 1.2.2.2 thorpej 529 1.2.2.2 thorpej /* 530 1.2.2.2 thorpej * Target address matches one of my interface address. 531 1.2.2.2 thorpej * 532 1.2.2.2 thorpej * If my address is tentative, this means that there's somebody 533 1.2.2.2 thorpej * already using the same address as mine. This indicates DAD failure. 534 1.2.2.2 thorpej * This is defined in RFC 2462. 535 1.2.2.2 thorpej * 536 1.2.2.2 thorpej * Otherwise, process as defined in RFC 2461. 537 1.2.2.2 thorpej */ 538 1.2.2.2 thorpej if (ifa 539 1.2.2.2 thorpej && (((struct in6_ifaddr *)ifa)->ia6_flags & IN6_IFF_TENTATIVE)) { 540 1.2.2.2 thorpej nd6_dad_na_input(ifa); 541 1.2.2.2 thorpej return; 542 1.2.2.2 thorpej } 543 1.2.2.2 thorpej 544 1.2.2.2 thorpej /* Just for safety, maybe unnecessery. */ 545 1.2.2.2 thorpej if (ifa) { 546 1.2.2.2 thorpej log(LOG_ERR, 547 1.2.2.2 thorpej "nd6_na_input: duplicate IP6 address %s\n", 548 1.2.2.2 thorpej ip6_sprintf(&taddr6)); 549 1.2.2.2 thorpej return; 550 1.2.2.2 thorpej } 551 1.2.2.2 thorpej 552 1.2.2.2 thorpej if (lladdr && ((ifp->if_addrlen + 2 + 7) & ~7) != lladdrlen) { 553 1.2.2.2 thorpej log(LOG_INFO, 554 1.2.2.2 thorpej "nd6_na_input: lladdrlen mismatch for %s " 555 1.2.2.2 thorpej "(if %d, NA packet %d)\n", 556 1.2.2.2 thorpej ip6_sprintf(&taddr6), ifp->if_addrlen, lladdrlen - 2); 557 1.2.2.2 thorpej } 558 1.2.2.2 thorpej 559 1.2.2.2 thorpej /* 560 1.2.2.2 thorpej * If no neighbor cache entry is found, NA SHOULD silently be discarded. 561 1.2.2.2 thorpej */ 562 1.2.2.2 thorpej rt = nd6_lookup(&taddr6, 0, ifp); 563 1.2.2.2 thorpej if ((rt == NULL) || 564 1.2.2.2 thorpej ((ln = (struct llinfo_nd6 *)rt->rt_llinfo) == NULL) || 565 1.2.2.2 thorpej ((sdl = SDL(rt->rt_gateway)) == NULL)) 566 1.2.2.2 thorpej return; 567 1.2.2.2 thorpej 568 1.2.2.2 thorpej if (ln->ln_state == ND6_LLINFO_INCOMPLETE) { 569 1.2.2.2 thorpej /* 570 1.2.2.2 thorpej * If the link-layer has address, and no lladdr option came, 571 1.2.2.2 thorpej * discard the packet. 572 1.2.2.2 thorpej */ 573 1.2.2.2 thorpej if (ifp->if_addrlen && !lladdr) 574 1.2.2.2 thorpej return; 575 1.2.2.2 thorpej 576 1.2.2.2 thorpej /* 577 1.2.2.2 thorpej * Record link-layer address, and update the state. 578 1.2.2.2 thorpej */ 579 1.2.2.2 thorpej sdl->sdl_alen = ifp->if_addrlen; 580 1.2.2.2 thorpej bcopy(lladdr, LLADDR(sdl), ifp->if_addrlen); 581 1.2.2.2 thorpej if (is_solicited) { 582 1.2.2.2 thorpej ln->ln_state = ND6_LLINFO_REACHABLE; 583 1.2.2.2 thorpej if (ln->ln_expire) 584 1.2.2.2 thorpej #if !defined(__FreeBSD__) || __FreeBSD__ < 3 585 1.2.2.2 thorpej ln->ln_expire = time.tv_sec + 586 1.2.2.2 thorpej #else 587 1.2.2.2 thorpej ln->ln_expire = time_second + 588 1.2.2.2 thorpej #endif 589 1.2.2.2 thorpej nd_ifinfo[rt->rt_ifp->if_index].reachable; 590 1.2.2.2 thorpej } else 591 1.2.2.2 thorpej ln->ln_state = ND6_LLINFO_STALE; 592 1.2.2.2 thorpej ln->ln_router = is_router; 593 1.2.2.2 thorpej } else { 594 1.2.2.2 thorpej int llchange; 595 1.2.2.2 thorpej 596 1.2.2.2 thorpej /* 597 1.2.2.2 thorpej * Check if the link-layer address has changed or not. 598 1.2.2.2 thorpej */ 599 1.2.2.2 thorpej if (!lladdr) 600 1.2.2.2 thorpej llchange = 0; 601 1.2.2.2 thorpej else { 602 1.2.2.2 thorpej if (sdl->sdl_alen) { 603 1.2.2.2 thorpej if (bcmp(lladdr, LLADDR(sdl), ifp->if_addrlen)) 604 1.2.2.2 thorpej llchange = 1; 605 1.2.2.2 thorpej else 606 1.2.2.2 thorpej llchange = 0; 607 1.2.2.2 thorpej } else 608 1.2.2.2 thorpej llchange = 1; 609 1.2.2.2 thorpej } 610 1.2.2.2 thorpej 611 1.2.2.2 thorpej /* 612 1.2.2.2 thorpej * This is VERY complex. Look at it with care. 613 1.2.2.2 thorpej * 614 1.2.2.2 thorpej * override solicit lladdr llchange action 615 1.2.2.2 thorpej * (L: record lladdr) 616 1.2.2.2 thorpej * 617 1.2.2.2 thorpej * 0 0 n -- (2c) 618 1.2.2.2 thorpej * 0 0 y n (2b) L 619 1.2.2.2 thorpej * 0 0 y y (1) REACHABLE->STALE 620 1.2.2.2 thorpej * 0 1 n -- (2c) *->REACHABLE 621 1.2.2.2 thorpej * 0 1 y n (2b) L *->REACHABLE 622 1.2.2.2 thorpej * 0 1 y y (1) REACHABLE->STALE 623 1.2.2.2 thorpej * 1 0 n -- (2a) 624 1.2.2.2 thorpej * 1 0 y n (2a) L 625 1.2.2.2 thorpej * 1 0 y y (2a) L *->STALE 626 1.2.2.2 thorpej * 1 1 n -- (2a) *->REACHABLE 627 1.2.2.2 thorpej * 1 1 y n (2a) L *->REACHABLE 628 1.2.2.2 thorpej * 1 1 y y (2a) L *->REACHABLE 629 1.2.2.2 thorpej */ 630 1.2.2.2 thorpej if (!is_override && (lladdr && llchange)) { /* (1) */ 631 1.2.2.2 thorpej /* 632 1.2.2.2 thorpej * If state is REACHABLE, make it STALE. 633 1.2.2.2 thorpej * no other updates should be done. 634 1.2.2.2 thorpej */ 635 1.2.2.2 thorpej if (ln->ln_state == ND6_LLINFO_REACHABLE) 636 1.2.2.2 thorpej ln->ln_state = ND6_LLINFO_STALE; 637 1.2.2.2 thorpej return; 638 1.2.2.2 thorpej } else if (is_override /* (2a) */ 639 1.2.2.2 thorpej || (!is_override && (lladdr && !llchange)) /* (2b) */ 640 1.2.2.2 thorpej || !lladdr) { /* (2c) */ 641 1.2.2.2 thorpej /* 642 1.2.2.2 thorpej * Update link-local address, if any. 643 1.2.2.2 thorpej */ 644 1.2.2.2 thorpej if (lladdr) { 645 1.2.2.2 thorpej sdl->sdl_alen = ifp->if_addrlen; 646 1.2.2.2 thorpej bcopy(lladdr, LLADDR(sdl), ifp->if_addrlen); 647 1.2.2.2 thorpej } 648 1.2.2.2 thorpej 649 1.2.2.2 thorpej /* 650 1.2.2.2 thorpej * If solicited, make the state REACHABLE. 651 1.2.2.2 thorpej * If not solicited and the link-layer address was 652 1.2.2.2 thorpej * changed, make it STALE. 653 1.2.2.2 thorpej */ 654 1.2.2.2 thorpej if (is_solicited) { 655 1.2.2.2 thorpej ln->ln_state = ND6_LLINFO_REACHABLE; 656 1.2.2.2 thorpej if (ln->ln_expire) { 657 1.2.2.2 thorpej #if !defined(__FreeBSD__) || __FreeBSD__ < 3 658 1.2.2.2 thorpej ln->ln_expire = time.tv_sec + 659 1.2.2.2 thorpej #else 660 1.2.2.2 thorpej ln->ln_expire = time_second + 661 1.2.2.2 thorpej #endif 662 1.2.2.2 thorpej nd_ifinfo[ifp->if_index].reachable; 663 1.2.2.2 thorpej } 664 1.2.2.2 thorpej } else { 665 1.2.2.2 thorpej if (lladdr && llchange) 666 1.2.2.2 thorpej ln->ln_state = ND6_LLINFO_STALE; 667 1.2.2.2 thorpej } 668 1.2.2.2 thorpej } 669 1.2.2.2 thorpej 670 1.2.2.2 thorpej if (ln->ln_router && !is_router) { 671 1.2.2.2 thorpej /* 672 1.2.2.2 thorpej * The peer dropped the router flag. 673 1.2.2.2 thorpej * Remove the sender from the Default Router List and 674 1.2.2.2 thorpej * update the Destination Cache entries. 675 1.2.2.2 thorpej */ 676 1.2.2.2 thorpej struct nd_defrouter *dr; 677 1.2.2.2 thorpej struct in6_addr *in6; 678 1.2.2.2 thorpej int s; 679 1.2.2.2 thorpej 680 1.2.2.2 thorpej in6 = &((struct sockaddr_in6 *)rt_key(rt))->sin6_addr; 681 1.2.2.2 thorpej s = splnet(); 682 1.2.2.2 thorpej dr = defrouter_lookup(in6, rt->rt_ifp); 683 1.2.2.2 thorpej if (dr) 684 1.2.2.2 thorpej defrtrlist_del(dr); 685 1.2.2.2 thorpej else if (!ip6_forwarding && ip6_accept_rtadv) { 686 1.2.2.2 thorpej /* 687 1.2.2.2 thorpej * Even if the neighbor is not in the default 688 1.2.2.2 thorpej * router list, the neighbor may be used 689 1.2.2.2 thorpej * as a next hop for some destinations 690 1.2.2.2 thorpej * (e.g. redirect case). So we must 691 1.2.2.2 thorpej * call rt6_flush explicitly. 692 1.2.2.2 thorpej */ 693 1.2.2.2 thorpej rt6_flush(&ip6->ip6_src, rt->rt_ifp); 694 1.2.2.2 thorpej } 695 1.2.2.2 thorpej splx(s); 696 1.2.2.2 thorpej } 697 1.2.2.2 thorpej ln->ln_router = is_router; 698 1.2.2.2 thorpej } 699 1.2.2.2 thorpej rt->rt_flags &= ~RTF_REJECT; 700 1.2.2.2 thorpej ln->ln_asked = 0; 701 1.2.2.2 thorpej if (ln->ln_hold) { 702 1.2.2.2 thorpej (*ifp->if_output)(ifp, ln->ln_hold, rt_key(rt), rt); 703 1.2.2.2 thorpej ln->ln_hold = 0; 704 1.2.2.2 thorpej } 705 1.2.2.2 thorpej } 706 1.2.2.2 thorpej 707 1.2.2.2 thorpej /* 708 1.2.2.2 thorpej * Neighbor advertisement output handling. 709 1.2.2.2 thorpej * 710 1.2.2.2 thorpej * Based on RFC 2461 711 1.2.2.2 thorpej * 712 1.2.2.2 thorpej * XXX NA delay for anycast address is not implemented yet 713 1.2.2.2 thorpej * (RFC 2461 7.2.7) 714 1.2.2.2 thorpej * XXX proxy advertisement? 715 1.2.2.2 thorpej */ 716 1.2.2.2 thorpej void 717 1.2.2.2 thorpej nd6_na_output(ifp, daddr6, taddr6, flags, tlladdr) 718 1.2.2.2 thorpej struct ifnet *ifp; 719 1.2.2.2 thorpej struct in6_addr *daddr6, *taddr6; 720 1.2.2.2 thorpej u_long flags; 721 1.2.2.2 thorpej int tlladdr; /* 1 if include target link-layer address */ 722 1.2.2.2 thorpej { 723 1.2.2.2 thorpej struct mbuf *m; 724 1.2.2.2 thorpej struct ip6_hdr *ip6; 725 1.2.2.2 thorpej struct nd_neighbor_advert *nd_na; 726 1.2.2.2 thorpej struct in6_ifaddr *ia = NULL; 727 1.2.2.2 thorpej struct ip6_moptions im6o; 728 1.2.2.2 thorpej int icmp6len; 729 1.2.2.2 thorpej caddr_t mac; 730 1.2.2.2 thorpej 731 1.2.2.2 thorpej if ((m = m_gethdr(M_DONTWAIT, MT_DATA)) == NULL) 732 1.2.2.2 thorpej return; 733 1.2.2.2 thorpej 734 1.2.2.2 thorpej if (IN6_IS_ADDR_MULTICAST(daddr6)) { 735 1.2.2.2 thorpej m->m_flags |= M_MCAST; 736 1.2.2.2 thorpej im6o.im6o_multicast_ifp = ifp; 737 1.2.2.2 thorpej im6o.im6o_multicast_hlim = 255; 738 1.2.2.2 thorpej im6o.im6o_multicast_loop = 0; 739 1.2.2.2 thorpej } 740 1.2.2.2 thorpej 741 1.2.2.2 thorpej icmp6len = sizeof(*nd_na); 742 1.2.2.2 thorpej m->m_pkthdr.len = m->m_len = sizeof(struct ip6_hdr) + icmp6len; 743 1.2.2.2 thorpej MH_ALIGN(m, m->m_len + 16); /* 1+1+6 is enough. but just in case */ 744 1.2.2.2 thorpej 745 1.2.2.2 thorpej /* fill neighbor advertisement packet */ 746 1.2.2.2 thorpej ip6 = mtod(m, struct ip6_hdr *); 747 1.2.2.2 thorpej ip6->ip6_flow = 0; 748 1.2.2.2 thorpej ip6->ip6_vfc = IPV6_VERSION; 749 1.2.2.2 thorpej ip6->ip6_nxt = IPPROTO_ICMPV6; 750 1.2.2.2 thorpej ip6->ip6_hlim = 255; 751 1.2.2.2 thorpej if (IN6_IS_ADDR_UNSPECIFIED(daddr6)) { 752 1.2.2.2 thorpej /* reply to DAD */ 753 1.2.2.2 thorpej ip6->ip6_dst.s6_addr16[0] = IPV6_ADDR_INT16_MLL; 754 1.2.2.2 thorpej ip6->ip6_dst.s6_addr16[1] = htons(ifp->if_index); 755 1.2.2.2 thorpej ip6->ip6_dst.s6_addr32[1] = 0; 756 1.2.2.2 thorpej ip6->ip6_dst.s6_addr32[2] = 0; 757 1.2.2.2 thorpej ip6->ip6_dst.s6_addr32[3] = IPV6_ADDR_INT32_ONE; 758 1.2.2.2 thorpej flags &= ~ND_NA_FLAG_SOLICITED; 759 1.2.2.2 thorpej } else 760 1.2.2.2 thorpej ip6->ip6_dst = *daddr6; 761 1.2.2.2 thorpej 762 1.2.2.2 thorpej /* 763 1.2.2.2 thorpej * Select a source whose scope is the same as that of the dest. 764 1.2.2.2 thorpej */ 765 1.2.2.2 thorpej ia = in6_ifawithifp(ifp, &ip6->ip6_dst); 766 1.2.2.2 thorpej if (ia == NULL) { 767 1.2.2.2 thorpej m_freem(m); 768 1.2.2.2 thorpej return; 769 1.2.2.2 thorpej } 770 1.2.2.2 thorpej ip6->ip6_src = ia->ia_addr.sin6_addr; 771 1.2.2.2 thorpej nd_na = (struct nd_neighbor_advert *)(ip6 + 1); 772 1.2.2.2 thorpej nd_na->nd_na_type = ND_NEIGHBOR_ADVERT; 773 1.2.2.2 thorpej nd_na->nd_na_code = 0; 774 1.2.2.2 thorpej nd_na->nd_na_target = *taddr6; 775 1.2.2.2 thorpej if (IN6_IS_SCOPE_LINKLOCAL(&nd_na->nd_na_target)) 776 1.2.2.2 thorpej nd_na->nd_na_target.s6_addr16[1] = 0; 777 1.2.2.2 thorpej 778 1.2.2.2 thorpej /* 779 1.2.2.2 thorpej * "tlladdr" indicates NS's condition for adding tlladdr or not. 780 1.2.2.2 thorpej * see nd6_ns_input() for details. 781 1.2.2.2 thorpej * Basically, if NS packet is sent to unicast/anycast addr, 782 1.2.2.2 thorpej * target lladdr option SHOULD NOT be included. 783 1.2.2.2 thorpej */ 784 1.2.2.2 thorpej if (tlladdr && (mac = nd6_ifptomac(ifp))) { 785 1.2.2.2 thorpej int optlen = sizeof(struct nd_opt_hdr) + ifp->if_addrlen; 786 1.2.2.2 thorpej struct nd_opt_hdr *nd_opt = (struct nd_opt_hdr *)(nd_na + 1); 787 1.2.2.2 thorpej 788 1.2.2.2 thorpej m->m_pkthdr.len += optlen; 789 1.2.2.2 thorpej m->m_len += optlen; 790 1.2.2.2 thorpej icmp6len += optlen; 791 1.2.2.2 thorpej nd_opt->nd_opt_type = ND_OPT_TARGET_LINKADDR; 792 1.2.2.2 thorpej /* xxx 8 bytes alignment? */ 793 1.2.2.2 thorpej nd_opt->nd_opt_len = optlen >> 3; 794 1.2.2.2 thorpej bcopy(mac, (caddr_t)(nd_opt + 1), ifp->if_addrlen); 795 1.2.2.2 thorpej } else 796 1.2.2.2 thorpej flags &= ~ND_NA_FLAG_OVERRIDE; 797 1.2.2.2 thorpej 798 1.2.2.2 thorpej ip6->ip6_plen = htons((u_short)icmp6len); 799 1.2.2.2 thorpej nd_na->nd_na_flags_reserved = flags; 800 1.2.2.2 thorpej nd_na->nd_na_cksum = 0; 801 1.2.2.2 thorpej nd_na->nd_na_cksum = 802 1.2.2.2 thorpej in6_cksum(m, IPPROTO_ICMPV6, sizeof(struct ip6_hdr), icmp6len); 803 1.2.2.2 thorpej 804 1.2.2.2 thorpej #ifdef IPSEC 805 1.2.2.2 thorpej m->m_pkthdr.rcvif = NULL; 806 1.2.2.2 thorpej #endif /*IPSEC*/ 807 1.2.2.2 thorpej ip6_output(m, NULL, NULL, 0, &im6o); 808 1.2.2.2 thorpej icmp6stat.icp6s_outhist[ND_NEIGHBOR_ADVERT]++; 809 1.2.2.2 thorpej } 810 1.2.2.2 thorpej 811 1.2.2.2 thorpej caddr_t 812 1.2.2.2 thorpej nd6_ifptomac(ifp) 813 1.2.2.2 thorpej struct ifnet *ifp; 814 1.2.2.2 thorpej { 815 1.2.2.2 thorpej switch (ifp->if_type) { 816 1.2.2.2 thorpej case IFT_ETHER: 817 1.2.2.2 thorpej case IFT_FDDI: 818 1.2.2.2 thorpej #ifdef __NetBSD__ 819 1.2.2.2 thorpej return LLADDR(ifp->if_sadl); 820 1.2.2.2 thorpej #else 821 1.2.2.2 thorpej return ((caddr_t)(ifp + 1)); 822 1.2.2.2 thorpej #endif 823 1.2.2.2 thorpej break; 824 1.2.2.2 thorpej default: 825 1.2.2.2 thorpej return NULL; 826 1.2.2.2 thorpej } 827 1.2.2.2 thorpej } 828 1.2.2.2 thorpej 829 1.2.2.2 thorpej TAILQ_HEAD(dadq_head, dadq); 830 1.2.2.2 thorpej struct dadq { 831 1.2.2.2 thorpej TAILQ_ENTRY(dadq) dad_list; 832 1.2.2.2 thorpej struct ifaddr *dad_ifa; 833 1.2.2.2 thorpej int dad_count; /* max NS to send */ 834 1.2.2.2 thorpej int dad_ns_ocount; /* NS sent so far */ 835 1.2.2.2 thorpej int dad_ns_icount; 836 1.2.2.2 thorpej int dad_na_icount; 837 1.2.2.2 thorpej #if defined(__FreeBSD__) && __FreeBSD__ >= 3 838 1.2.2.2 thorpej struct callout_handle dad_timer; 839 1.2.2.2 thorpej #endif 840 1.2.2.2 thorpej }; 841 1.2.2.2 thorpej 842 1.2.2.2 thorpej static struct dadq_head dadq; 843 1.2.2.2 thorpej 844 1.2.2.2 thorpej static struct dadq * 845 1.2.2.2 thorpej nd6_dad_find(ifa) 846 1.2.2.2 thorpej struct ifaddr *ifa; 847 1.2.2.2 thorpej { 848 1.2.2.2 thorpej struct dadq *dp; 849 1.2.2.2 thorpej 850 1.2.2.2 thorpej for (dp = dadq.tqh_first; dp; dp = dp->dad_list.tqe_next) { 851 1.2.2.2 thorpej if (dp->dad_ifa == ifa) 852 1.2.2.2 thorpej return dp; 853 1.2.2.2 thorpej } 854 1.2.2.2 thorpej return NULL; 855 1.2.2.2 thorpej } 856 1.2.2.2 thorpej 857 1.2.2.2 thorpej /* 858 1.2.2.2 thorpej * Start Duplicated Address Detection (DAD) for specified interface address. 859 1.2.2.2 thorpej */ 860 1.2.2.2 thorpej void 861 1.2.2.2 thorpej nd6_dad_start(ifa, tick) 862 1.2.2.2 thorpej struct ifaddr *ifa; 863 1.2.2.2 thorpej int *tick; /* minimum delay ticks for IFF_UP event */ 864 1.2.2.2 thorpej { 865 1.2.2.2 thorpej struct in6_ifaddr *ia = (struct in6_ifaddr *)ifa; 866 1.2.2.2 thorpej struct dadq *dp; 867 1.2.2.2 thorpej static int dad_init = 0; 868 1.2.2.2 thorpej 869 1.2.2.2 thorpej if (!dad_init) { 870 1.2.2.2 thorpej TAILQ_INIT(&dadq); 871 1.2.2.2 thorpej dad_init++; 872 1.2.2.2 thorpej } 873 1.2.2.2 thorpej 874 1.2.2.2 thorpej /* 875 1.2.2.2 thorpej * If we don't need DAD, don't do it. 876 1.2.2.2 thorpej * There are several cases: 877 1.2.2.2 thorpej * - DAD is disabled (ip6_dad_count == 0) 878 1.2.2.2 thorpej * - the interface address is anycast 879 1.2.2.2 thorpej */ 880 1.2.2.2 thorpej if (!(ia->ia6_flags & IN6_IFF_TENTATIVE)) { 881 1.2.2.2 thorpej printf("nd6_dad_start: called with non-tentative address " 882 1.2.2.2 thorpej "%s(%s)\n", 883 1.2.2.2 thorpej ip6_sprintf(&ia->ia_addr.sin6_addr), 884 1.2.2.2 thorpej ifa->ifa_ifp ? ifa->ifa_ifp->if_xname : "???"); 885 1.2.2.2 thorpej return; 886 1.2.2.2 thorpej } 887 1.2.2.2 thorpej if (ia->ia6_flags & IN6_IFF_ANYCAST) { 888 1.2.2.2 thorpej ia->ia6_flags &= ~IN6_IFF_TENTATIVE; 889 1.2.2.2 thorpej return; 890 1.2.2.2 thorpej } 891 1.2.2.2 thorpej if (!ip6_dad_count) { 892 1.2.2.2 thorpej ia->ia6_flags &= ~IN6_IFF_TENTATIVE; 893 1.2.2.2 thorpej return; 894 1.2.2.2 thorpej } 895 1.2.2.2 thorpej if (!ifa->ifa_ifp) 896 1.2.2.2 thorpej panic("nd6_dad_start: ifa->ifa_ifp == NULL"); 897 1.2.2.2 thorpej if (!(ifa->ifa_ifp->if_flags & IFF_UP)) 898 1.2.2.2 thorpej return; 899 1.2.2.2 thorpej if (nd6_dad_find(ifa) != NULL) { 900 1.2.2.2 thorpej /* DAD already in progress */ 901 1.2.2.2 thorpej return; 902 1.2.2.2 thorpej } 903 1.2.2.2 thorpej 904 1.2.2.2 thorpej dp = malloc(sizeof(*dp), M_IP6NDP, M_NOWAIT); 905 1.2.2.2 thorpej if (dp == NULL) { 906 1.2.2.2 thorpej printf("nd6_dad_start: memory allocation failed for " 907 1.2.2.2 thorpej "%s(%s)\n", 908 1.2.2.2 thorpej ip6_sprintf(&ia->ia_addr.sin6_addr), 909 1.2.2.2 thorpej ifa->ifa_ifp ? ifa->ifa_ifp->if_xname : "???"); 910 1.2.2.2 thorpej return; 911 1.2.2.2 thorpej } 912 1.2.2.2 thorpej bzero(dp, sizeof(*dp)); 913 1.2.2.2 thorpej TAILQ_INSERT_TAIL(&dadq, (struct dadq *)dp, dad_list); 914 1.2.2.2 thorpej 915 1.2.2.2 thorpej printf("performing DAD for %s(%s)\n", 916 1.2.2.2 thorpej ip6_sprintf(&ia->ia_addr.sin6_addr), ifa->ifa_ifp->if_xname); 917 1.2.2.2 thorpej 918 1.2.2.2 thorpej /* 919 1.2.2.2 thorpej * Send NS packet for DAD, ip6_dad_count times. 920 1.2.2.2 thorpej * Note that we must delay the first transmission, if this is the 921 1.2.2.2 thorpej * first packet to be sent from the interface after interface 922 1.2.2.2 thorpej * (re)initialization. 923 1.2.2.2 thorpej */ 924 1.2.2.2 thorpej dp->dad_ifa = ifa; 925 1.2.2.2 thorpej ifa->ifa_refcnt++; /*just for safety*/ 926 1.2.2.2 thorpej dp->dad_count = ip6_dad_count; 927 1.2.2.2 thorpej dp->dad_ns_icount = dp->dad_na_icount = 0; 928 1.2.2.2 thorpej dp->dad_ns_ocount = 0; 929 1.2.2.2 thorpej if (!tick) { 930 1.2.2.2 thorpej dp->dad_ns_ocount++; 931 1.2.2.2 thorpej nd6_ns_output(ifa->ifa_ifp, NULL, &ia->ia_addr.sin6_addr, 932 1.2.2.2 thorpej NULL, 1); 933 1.2.2.2 thorpej #if defined(__FreeBSD__) && __FreeBSD__ >= 3 934 1.2.2.2 thorpej dp->dad_timer = 935 1.2.2.2 thorpej #endif 936 1.2.2.2 thorpej timeout((void (*) __P((void *)))nd6_dad_timer, (void *)ifa, 937 1.2.2.2 thorpej nd_ifinfo[ifa->ifa_ifp->if_index].retrans * hz / 1000); 938 1.2.2.2 thorpej } else { 939 1.2.2.2 thorpej int ntick; 940 1.2.2.2 thorpej 941 1.2.2.2 thorpej if (*tick == 0) 942 1.2.2.2 thorpej ntick = random() % (MAX_RTR_SOLICITATION_DELAY * hz); 943 1.2.2.2 thorpej else 944 1.2.2.2 thorpej ntick = *tick + random() % (hz / 2); 945 1.2.2.2 thorpej *tick = ntick; 946 1.2.2.2 thorpej #if defined(__FreeBSD__) && __FreeBSD__ >= 3 947 1.2.2.2 thorpej dp->dad_timer = 948 1.2.2.2 thorpej #endif 949 1.2.2.2 thorpej timeout((void (*) __P((void *)))nd6_dad_timer, (void *)ifa, 950 1.2.2.2 thorpej ntick); 951 1.2.2.2 thorpej } 952 1.2.2.2 thorpej } 953 1.2.2.2 thorpej 954 1.2.2.2 thorpej static void 955 1.2.2.2 thorpej nd6_dad_timer(ifa) 956 1.2.2.2 thorpej struct ifaddr *ifa; 957 1.2.2.2 thorpej { 958 1.2.2.2 thorpej int s; 959 1.2.2.2 thorpej struct in6_ifaddr *ia = (struct in6_ifaddr *)ifa; 960 1.2.2.2 thorpej struct dadq *dp; 961 1.2.2.2 thorpej 962 1.2.2.2 thorpej s = splnet(); /*XXX*/ 963 1.2.2.2 thorpej 964 1.2.2.2 thorpej /* Sanity check */ 965 1.2.2.2 thorpej if (ia == NULL) { 966 1.2.2.2 thorpej printf("nd6_dad_timer: called with null parameter\n"); 967 1.2.2.2 thorpej goto done; 968 1.2.2.2 thorpej } 969 1.2.2.2 thorpej dp = nd6_dad_find(ifa); 970 1.2.2.2 thorpej if (dp == NULL) { 971 1.2.2.2 thorpej printf("nd6_dad_timer: DAD structure not found\n"); 972 1.2.2.2 thorpej goto done; 973 1.2.2.2 thorpej } 974 1.2.2.2 thorpej if (ia->ia6_flags & IN6_IFF_DUPLICATED) { 975 1.2.2.2 thorpej printf("nd6_dad_timer: called with duplicated address " 976 1.2.2.2 thorpej "%s(%s)\n", 977 1.2.2.2 thorpej ip6_sprintf(&ia->ia_addr.sin6_addr), 978 1.2.2.2 thorpej ifa->ifa_ifp ? ifa->ifa_ifp->if_xname : "???"); 979 1.2.2.2 thorpej goto done; 980 1.2.2.2 thorpej } 981 1.2.2.2 thorpej if ((ia->ia6_flags & IN6_IFF_TENTATIVE) == 0) { 982 1.2.2.2 thorpej printf("nd6_dad_timer: called with non-tentative address " 983 1.2.2.2 thorpej "%s(%s)\n", 984 1.2.2.2 thorpej ip6_sprintf(&ia->ia_addr.sin6_addr), 985 1.2.2.2 thorpej ifa->ifa_ifp ? ifa->ifa_ifp->if_xname : "???"); 986 1.2.2.2 thorpej goto done; 987 1.2.2.2 thorpej } 988 1.2.2.2 thorpej 989 1.2.2.2 thorpej /* Need more checks? */ 990 1.2.2.2 thorpej if (dp->dad_ns_ocount < dp->dad_count) { 991 1.2.2.2 thorpej /* 992 1.2.2.2 thorpej * We have more NS to go. Send NS packet for DAD. 993 1.2.2.2 thorpej */ 994 1.2.2.2 thorpej dp->dad_ns_ocount++; 995 1.2.2.2 thorpej nd6_ns_output(ifa->ifa_ifp, NULL, &ia->ia_addr.sin6_addr, 996 1.2.2.2 thorpej NULL, 1); 997 1.2.2.2 thorpej #if defined(__FreeBSD__) && __FreeBSD__ >= 3 998 1.2.2.2 thorpej dp->dad_timer = 999 1.2.2.2 thorpej #endif 1000 1.2.2.2 thorpej timeout((void (*) __P((void *)))nd6_dad_timer, (void *)ifa, 1001 1.2.2.2 thorpej nd_ifinfo[ifa->ifa_ifp->if_index].retrans * hz / 1000); 1002 1.2.2.2 thorpej } else { 1003 1.2.2.2 thorpej /* 1004 1.2.2.2 thorpej * We have transmitted sufficient number of DAD packets. 1005 1.2.2.2 thorpej * See what we've got. 1006 1.2.2.2 thorpej */ 1007 1.2.2.2 thorpej int duplicate; 1008 1.2.2.2 thorpej 1009 1.2.2.2 thorpej duplicate = 0; 1010 1.2.2.2 thorpej 1011 1.2.2.2 thorpej if (dp->dad_na_icount) { 1012 1.2.2.2 thorpej /* 1013 1.2.2.2 thorpej * the check is in nd6_dad_na_input(), 1014 1.2.2.2 thorpej * but just in case 1015 1.2.2.2 thorpej */ 1016 1.2.2.2 thorpej duplicate++; 1017 1.2.2.2 thorpej } 1018 1.2.2.2 thorpej 1019 1.2.2.2 thorpej if (dp->dad_ns_icount) { 1020 1.2.2.2 thorpej #if 0 /*heuristics*/ 1021 1.2.2.2 thorpej /* 1022 1.2.2.2 thorpej * if 1023 1.2.2.2 thorpej * - we have sent many(?) DAD NS, and 1024 1.2.2.2 thorpej * - the number of NS we sent equals to the 1025 1.2.2.2 thorpej * number of NS we've got, and 1026 1.2.2.2 thorpej * - we've got no NA 1027 1.2.2.2 thorpej * we may have a faulty network card/driver which 1028 1.2.2.2 thorpej * loops back multicasts to myself. 1029 1.2.2.2 thorpej */ 1030 1.2.2.2 thorpej if (3 < dp->dad_count 1031 1.2.2.2 thorpej && dp->dad_ns_icount == dp->dad_count 1032 1.2.2.2 thorpej && dp->dad_na_icount == 0) { 1033 1.2.2.2 thorpej log(LOG_INFO, "DAD questionable for %s(%s): " 1034 1.2.2.2 thorpej "network card loops back multicast?\n", 1035 1.2.2.2 thorpej ip6_sprintf(&ia->ia_addr.sin6_addr), 1036 1.2.2.2 thorpej ifa->ifa_ifp->if_xname); 1037 1.2.2.2 thorpej /* XXX consider it a duplicate or not? */ 1038 1.2.2.2 thorpej /* duplicate++; */ 1039 1.2.2.2 thorpej } else { 1040 1.2.2.2 thorpej /* We've seen NS, means DAD has failed. */ 1041 1.2.2.2 thorpej duplicate++; 1042 1.2.2.2 thorpej } 1043 1.2.2.2 thorpej #else 1044 1.2.2.2 thorpej /* We've seen NS, means DAD has failed. */ 1045 1.2.2.2 thorpej duplicate++; 1046 1.2.2.2 thorpej #endif 1047 1.2.2.2 thorpej } 1048 1.2.2.2 thorpej 1049 1.2.2.2 thorpej if (duplicate) { 1050 1.2.2.2 thorpej /* (*dp) will be freed in nd6_dad_duplicated() */ 1051 1.2.2.2 thorpej dp = NULL; 1052 1.2.2.2 thorpej nd6_dad_duplicated(ifa); 1053 1.2.2.2 thorpej } else { 1054 1.2.2.2 thorpej /* 1055 1.2.2.2 thorpej * We are done with DAD. No NA came, no NS came. 1056 1.2.2.2 thorpej * duplicated address found. 1057 1.2.2.2 thorpej */ 1058 1.2.2.2 thorpej ia->ia6_flags &= ~IN6_IFF_TENTATIVE; 1059 1.2.2.2 thorpej 1060 1.2.2.2 thorpej printf("DAD success for %s(%s)\n", 1061 1.2.2.2 thorpej ip6_sprintf(&ia->ia_addr.sin6_addr), 1062 1.2.2.2 thorpej ifa->ifa_ifp->if_xname); 1063 1.2.2.2 thorpej TAILQ_REMOVE(&dadq, (struct dadq *)dp, dad_list); 1064 1.2.2.2 thorpej free(dp, M_IP6NDP); 1065 1.2.2.2 thorpej dp = NULL; 1066 1.2.2.2 thorpej ifa->ifa_refcnt--; 1067 1.2.2.2 thorpej } 1068 1.2.2.2 thorpej } 1069 1.2.2.2 thorpej 1070 1.2.2.2 thorpej done: 1071 1.2.2.2 thorpej splx(s); 1072 1.2.2.2 thorpej } 1073 1.2.2.2 thorpej 1074 1.2.2.2 thorpej void 1075 1.2.2.2 thorpej nd6_dad_duplicated(ifa) 1076 1.2.2.2 thorpej struct ifaddr *ifa; 1077 1.2.2.2 thorpej { 1078 1.2.2.2 thorpej struct in6_ifaddr *ia = (struct in6_ifaddr *)ifa; 1079 1.2.2.2 thorpej struct dadq *dp; 1080 1.2.2.2 thorpej 1081 1.2.2.2 thorpej dp = nd6_dad_find(ifa); 1082 1.2.2.2 thorpej if (dp == NULL) { 1083 1.2.2.2 thorpej printf("nd6_dad_duplicated: DAD structure not found\n"); 1084 1.2.2.2 thorpej return; 1085 1.2.2.2 thorpej } 1086 1.2.2.2 thorpej 1087 1.2.2.2 thorpej log(LOG_ERR, "DAD detected duplicate IP6 address %s(%s): " 1088 1.2.2.2 thorpej "got %d NS and %d NA\n", ip6_sprintf(&ia->ia_addr.sin6_addr), 1089 1.2.2.2 thorpej ifa->ifa_ifp->if_xname, 1090 1.2.2.2 thorpej dp->dad_ns_icount, dp->dad_na_icount); 1091 1.2.2.2 thorpej 1092 1.2.2.2 thorpej ia->ia6_flags &= ~IN6_IFF_TENTATIVE; 1093 1.2.2.2 thorpej ia->ia6_flags |= IN6_IFF_DUPLICATED; 1094 1.2.2.2 thorpej 1095 1.2.2.2 thorpej /* We are done with DAD, with duplicated address found. (failure) */ 1096 1.2.2.2 thorpej untimeout((void (*) __P((void *)))nd6_dad_timer, (void *)ifa 1097 1.2.2.2 thorpej #if defined(__FreeBSD__) && __FreeBSD__ >= 3 1098 1.2.2.2 thorpej , dp->dad_timer 1099 1.2.2.2 thorpej #endif 1100 1.2.2.2 thorpej ); 1101 1.2.2.2 thorpej 1102 1.2.2.2 thorpej printf("DAD failed for %s(%s): manual operation required\n", 1103 1.2.2.2 thorpej ip6_sprintf(&ia->ia_addr.sin6_addr), 1104 1.2.2.2 thorpej ifa->ifa_ifp->if_xname); 1105 1.2.2.2 thorpej TAILQ_REMOVE(&dadq, (struct dadq *)dp, dad_list); 1106 1.2.2.2 thorpej free(dp, M_IP6NDP); 1107 1.2.2.2 thorpej dp = NULL; 1108 1.2.2.2 thorpej ifa->ifa_refcnt--; 1109 1.2.2.2 thorpej } 1110 1.2.2.2 thorpej 1111 1.2.2.2 thorpej void 1112 1.2.2.2 thorpej nd6_dad_ns_input(ifa) 1113 1.2.2.2 thorpej struct ifaddr *ifa; 1114 1.2.2.2 thorpej { 1115 1.2.2.2 thorpej struct in6_ifaddr *ia; 1116 1.2.2.2 thorpej struct ifnet *ifp; 1117 1.2.2.2 thorpej struct in6_addr *taddr6; 1118 1.2.2.2 thorpej struct dadq *dp; 1119 1.2.2.2 thorpej int duplicate; 1120 1.2.2.2 thorpej 1121 1.2.2.2 thorpej if (!ifa) 1122 1.2.2.2 thorpej panic("ifa == NULL in nd6_dad_ns_input"); 1123 1.2.2.2 thorpej 1124 1.2.2.2 thorpej ia = (struct in6_ifaddr *)ifa; 1125 1.2.2.2 thorpej ifp = ifa->ifa_ifp; 1126 1.2.2.2 thorpej taddr6 = &ia->ia_addr.sin6_addr; 1127 1.2.2.2 thorpej duplicate = 0; 1128 1.2.2.2 thorpej dp = nd6_dad_find(ifa); 1129 1.2.2.2 thorpej 1130 1.2.2.2 thorpej /* 1131 1.2.2.2 thorpej * If it is from myself, ignore this. 1132 1.2.2.2 thorpej */ 1133 1.2.2.2 thorpej if (ifp && (ifp->if_flags & IFF_LOOPBACK)) 1134 1.2.2.2 thorpej return; 1135 1.2.2.2 thorpej 1136 1.2.2.2 thorpej /* Quickhack - completely ignore DAD NS packets */ 1137 1.2.2.2 thorpej if (dad_ignore_ns) { 1138 1.2.2.2 thorpej log(LOG_INFO, "nd6_dad_ns_input: ignoring DAD NS packet for " 1139 1.2.2.2 thorpej "address %s(%s)\n", ip6_sprintf(taddr6), 1140 1.2.2.2 thorpej ifa->ifa_ifp->if_xname); 1141 1.2.2.2 thorpej return; 1142 1.2.2.2 thorpej } 1143 1.2.2.2 thorpej 1144 1.2.2.2 thorpej /* 1145 1.2.2.2 thorpej * if I'm yet to start DAD, someone else started using this address 1146 1.2.2.2 thorpej * first. I have a duplicate and you win. 1147 1.2.2.2 thorpej */ 1148 1.2.2.2 thorpej if (!dp || dp->dad_ns_ocount == 0) 1149 1.2.2.2 thorpej duplicate++; 1150 1.2.2.2 thorpej 1151 1.2.2.2 thorpej /* XXX more checks for loopback situation - see nd6_dad_timer too */ 1152 1.2.2.2 thorpej 1153 1.2.2.2 thorpej if (duplicate) { 1154 1.2.2.2 thorpej dp = NULL; /* will be freed in nd6_dad_duplicated() */ 1155 1.2.2.2 thorpej nd6_dad_duplicated(ifa); 1156 1.2.2.2 thorpej } else { 1157 1.2.2.2 thorpej /* 1158 1.2.2.2 thorpej * not sure if I got a duplicate. 1159 1.2.2.2 thorpej * increment ns count and see what happens. 1160 1.2.2.2 thorpej */ 1161 1.2.2.2 thorpej if (dp) 1162 1.2.2.2 thorpej dp->dad_ns_icount++; 1163 1.2.2.2 thorpej } 1164 1.2.2.2 thorpej } 1165 1.2.2.2 thorpej 1166 1.2.2.2 thorpej void 1167 1.2.2.2 thorpej nd6_dad_na_input(ifa) 1168 1.2.2.2 thorpej struct ifaddr *ifa; 1169 1.2.2.2 thorpej { 1170 1.2.2.2 thorpej struct dadq *dp; 1171 1.2.2.2 thorpej 1172 1.2.2.2 thorpej if (!ifa) 1173 1.2.2.2 thorpej panic("ifa == NULL in nd6_dad_na_input"); 1174 1.2.2.2 thorpej 1175 1.2.2.2 thorpej dp = nd6_dad_find(ifa); 1176 1.2.2.2 thorpej if (dp) 1177 1.2.2.2 thorpej dp->dad_na_icount++; 1178 1.2.2.2 thorpej 1179 1.2.2.2 thorpej /* remove the address. */ 1180 1.2.2.2 thorpej nd6_dad_duplicated(ifa); 1181 1.2.2.2 thorpej } 1182
Indexes created Tue Oct 28 12:10:06 GMT 2025