Home | History | Annotate | Line # | Download | only in netinet6
nd6_rtr.c revision 1.108
      1  1.108     ozaki /*	$NetBSD: nd6_rtr.c,v 1.108 2016/04/04 07:37:07 ozaki-r Exp $	*/
      2   1.20    itojun /*	$KAME: nd6_rtr.c,v 1.95 2001/02/07 08:09:47 itojun Exp $	*/
      3    1.3   thorpej 
      4    1.2    itojun /*
      5    1.2    itojun  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
      6    1.2    itojun  * All rights reserved.
      7   1.16    itojun  *
      8    1.2    itojun  * Redistribution and use in source and binary forms, with or without
      9    1.2    itojun  * modification, are permitted provided that the following conditions
     10    1.2    itojun  * are met:
     11    1.2    itojun  * 1. Redistributions of source code must retain the above copyright
     12    1.2    itojun  *    notice, this list of conditions and the following disclaimer.
     13    1.2    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     14    1.2    itojun  *    notice, this list of conditions and the following disclaimer in the
     15    1.2    itojun  *    documentation and/or other materials provided with the distribution.
     16    1.2    itojun  * 3. Neither the name of the project nor the names of its contributors
     17    1.2    itojun  *    may be used to endorse or promote products derived from this software
     18    1.2    itojun  *    without specific prior written permission.
     19   1.16    itojun  *
     20    1.2    itojun  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     21    1.2    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     22    1.2    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     23    1.2    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     24    1.2    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     25    1.2    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     26    1.2    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     27    1.2    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     28    1.2    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     29    1.2    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     30    1.2    itojun  * SUCH DAMAGE.
     31    1.2    itojun  */
     32   1.27     lukem 
     33   1.27     lukem #include <sys/cdefs.h>
     34  1.108     ozaki __KERNEL_RCSID(0, "$NetBSD: nd6_rtr.c,v 1.108 2016/04/04 07:37:07 ozaki-r Exp $");
     35    1.2    itojun 
     36    1.2    itojun #include <sys/param.h>
     37    1.2    itojun #include <sys/systm.h>
     38    1.2    itojun #include <sys/malloc.h>
     39    1.2    itojun #include <sys/mbuf.h>
     40    1.2    itojun #include <sys/socket.h>
     41    1.2    itojun #include <sys/sockio.h>
     42    1.2    itojun #include <sys/time.h>
     43    1.2    itojun #include <sys/kernel.h>
     44    1.2    itojun #include <sys/errno.h>
     45    1.2    itojun #include <sys/ioctl.h>
     46    1.2    itojun #include <sys/syslog.h>
     47   1.82       tls #include <sys/cprng.h>
     48    1.2    itojun 
     49    1.2    itojun #include <net/if.h>
     50    1.2    itojun #include <net/if_types.h>
     51    1.2    itojun #include <net/if_dl.h>
     52    1.2    itojun #include <net/route.h>
     53    1.2    itojun #include <net/radix.h>
     54    1.2    itojun 
     55    1.2    itojun #include <netinet/in.h>
     56    1.2    itojun #include <netinet6/in6_var.h>
     57   1.56    rpaulo #include <netinet6/in6_ifattach.h>
     58   1.11    itojun #include <netinet/ip6.h>
     59    1.2    itojun #include <netinet6/ip6_var.h>
     60    1.2    itojun #include <netinet6/nd6.h>
     61   1.11    itojun #include <netinet/icmp6.h>
     62   1.75   thorpej #include <netinet6/icmp6_private.h>
     63   1.54    rpaulo #include <netinet6/scope6_var.h>
     64    1.2    itojun 
     65    1.7    itojun #include <net/net_osdep.h>
     66    1.2    itojun 
     67   1.68    dyoung static int rtpref(struct nd_defrouter *);
     68   1.68    dyoung static struct nd_defrouter *defrtrlist_update(struct nd_defrouter *);
     69   1.68    dyoung static int prelist_update(struct nd_prefixctl *, struct nd_defrouter *,
     70   1.68    dyoung     struct mbuf *, int);
     71   1.68    dyoung static struct in6_ifaddr *in6_ifadd(struct nd_prefixctl *, int);
     72   1.68    dyoung static struct nd_pfxrouter *pfxrtr_lookup(struct nd_prefix *,
     73   1.68    dyoung 	struct nd_defrouter *);
     74   1.68    dyoung static void pfxrtr_add(struct nd_prefix *, struct nd_defrouter *);
     75   1.68    dyoung static void pfxrtr_del(struct nd_pfxrouter *);
     76   1.32    itojun static struct nd_pfxrouter *find_pfxlist_reachable_router
     77   1.68    dyoung 	(struct nd_prefix *);
     78   1.68    dyoung static void defrouter_delreq(struct nd_defrouter *);
     79   1.68    dyoung 
     80   1.68    dyoung static int in6_init_prefix_ltimes(struct nd_prefix *);
     81   1.83  christos static void in6_init_address_ltimes(struct nd_prefix *,
     82   1.83  christos 	struct in6_addrlifetime *);
     83   1.83  christos static void purge_detached(struct ifnet *);
     84    1.2    itojun 
     85   1.65    dyoung static int rt6_deleteroute(struct rtentry *, void *);
     86    1.2    itojun 
     87    1.2    itojun extern int nd6_recalc_reachtm_interval;
     88    1.2    itojun 
     89   1.28    itojun static struct ifnet *nd6_defifp;
     90    1.7    itojun int nd6_defifindex;
     91    1.7    itojun 
     92   1.56    rpaulo int ip6_use_tempaddr = 0;
     93   1.56    rpaulo 
     94   1.56    rpaulo int ip6_desync_factor;
     95   1.56    rpaulo u_int32_t ip6_temp_preferred_lifetime = DEF_TEMP_PREFERRED_LIFETIME;
     96   1.56    rpaulo u_int32_t ip6_temp_valid_lifetime = DEF_TEMP_VALID_LIFETIME;
     97   1.56    rpaulo int ip6_temp_regen_advance = TEMPADDR_REGEN_ADVANCE;
     98   1.56    rpaulo 
     99   1.81       spz int nd6_numroutes = 0;
    100   1.81       spz 
    101   1.56    rpaulo /* RTPREF_MEDIUM has to be 0! */
    102   1.56    rpaulo #define RTPREF_HIGH	1
    103   1.56    rpaulo #define RTPREF_MEDIUM	0
    104   1.56    rpaulo #define RTPREF_LOW	(-1)
    105   1.56    rpaulo #define RTPREF_RESERVED	(-2)
    106   1.56    rpaulo #define RTPREF_INVALID	(-3)	/* internal */
    107   1.56    rpaulo 
    108  1.101     ozaki static inline bool
    109  1.101     ozaki nd6_is_llinfo_probreach(struct nd_defrouter *dr)
    110  1.101     ozaki {
    111  1.105     ozaki 	struct llentry *ln = NULL;
    112  1.101     ozaki 
    113  1.108     ozaki 	ln = nd6_lookup(&dr->rtaddr, dr->ifp, false);
    114  1.108     ozaki 	if (ln == NULL)
    115  1.101     ozaki 		return false;
    116  1.108     ozaki 
    117  1.108     ozaki 	if (!ND6_IS_LLINFO_PROBREACH(ln)) {
    118  1.108     ozaki 		LLE_RUNLOCK(ln);
    119  1.101     ozaki 		return false;
    120  1.108     ozaki 	}
    121  1.101     ozaki 
    122  1.108     ozaki 	LLE_RUNLOCK(ln);
    123  1.101     ozaki 	return true;
    124  1.101     ozaki }
    125  1.101     ozaki 
    126    1.2    itojun /*
    127    1.2    itojun  * Receive Router Solicitation Message - just for routers.
    128   1.81       spz  * Router solicitation/advertisement is mostly managed by a userland program
    129    1.2    itojun  * (rtadvd) so here we have no function like nd6_ra_output().
    130    1.2    itojun  *
    131    1.2    itojun  * Based on RFC 2461
    132    1.2    itojun  */
    133    1.2    itojun void
    134   1.64  christos nd6_rs_input(struct mbuf *m, int off, int icmp6len)
    135    1.2    itojun {
    136    1.2    itojun 	struct ifnet *ifp = m->m_pkthdr.rcvif;
    137   1.79  tonnerre 	struct nd_ifinfo *ndi = ND_IFINFO(ifp);
    138    1.2    itojun 	struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
    139   1.12    itojun 	struct nd_router_solicit *nd_rs;
    140    1.2    itojun 	struct in6_addr saddr6 = ip6->ip6_src;
    141    1.2    itojun 	char *lladdr = NULL;
    142    1.2    itojun 	int lladdrlen = 0;
    143    1.2    itojun 	union nd_opts ndopts;
    144    1.2    itojun 
    145    1.2    itojun 	/* If I'm not a router, ignore it. */
    146   1.80    dyoung 	if (nd6_accepts_rtadv(ndi) || !ip6_forwarding)
    147   1.12    itojun 		goto freeit;
    148    1.2    itojun 
    149    1.2    itojun 	/* Sanity checks */
    150    1.2    itojun 	if (ip6->ip6_hlim != 255) {
    151  1.107     ozaki 		nd6log(LOG_ERR, "invalid hlim (%d) from %s to %s on %s\n",
    152   1.20    itojun 		    ip6->ip6_hlim, ip6_sprintf(&ip6->ip6_src),
    153  1.107     ozaki 		    ip6_sprintf(&ip6->ip6_dst), if_name(ifp));
    154   1.20    itojun 		goto bad;
    155    1.2    itojun 	}
    156    1.2    itojun 
    157    1.2    itojun 	/*
    158    1.2    itojun 	 * Don't update the neighbor cache, if src = ::.
    159    1.2    itojun 	 * This indicates that the src has no IP address assigned yet.
    160    1.2    itojun 	 */
    161    1.2    itojun 	if (IN6_IS_ADDR_UNSPECIFIED(&saddr6))
    162   1.12    itojun 		goto freeit;
    163   1.12    itojun 
    164   1.12    itojun 	IP6_EXTHDR_GET(nd_rs, struct nd_router_solicit *, m, off, icmp6len);
    165   1.12    itojun 	if (nd_rs == NULL) {
    166   1.75   thorpej 		ICMP6_STATINC(ICMP6_STAT_TOOSHORT);
    167    1.2    itojun 		return;
    168   1.12    itojun 	}
    169    1.2    itojun 
    170    1.2    itojun 	icmp6len -= sizeof(*nd_rs);
    171    1.2    itojun 	nd6_option_init(nd_rs + 1, icmp6len, &ndopts);
    172    1.2    itojun 	if (nd6_options(&ndopts) < 0) {
    173  1.107     ozaki 		nd6log(LOG_INFO, "invalid ND option, ignored\n");
    174   1.20    itojun 		/* nd6_options have incremented stats */
    175   1.12    itojun 		goto freeit;
    176    1.2    itojun 	}
    177    1.2    itojun 
    178    1.2    itojun 	if (ndopts.nd_opts_src_lladdr) {
    179    1.2    itojun 		lladdr = (char *)(ndopts.nd_opts_src_lladdr + 1);
    180    1.2    itojun 		lladdrlen = ndopts.nd_opts_src_lladdr->nd_opt_len << 3;
    181    1.2    itojun 	}
    182    1.2    itojun 
    183    1.2    itojun 	if (lladdr && ((ifp->if_addrlen + 2 + 7) & ~7) != lladdrlen) {
    184  1.107     ozaki 		nd6log(LOG_INFO, "lladdrlen mismatch for %s "
    185    1.2    itojun 		    "(if %d, RS packet %d)\n",
    186  1.107     ozaki 		    ip6_sprintf(&saddr6), ifp->if_addrlen, lladdrlen - 2);
    187   1.20    itojun 		goto bad;
    188    1.2    itojun 	}
    189    1.2    itojun 
    190    1.6    itojun 	nd6_cache_lladdr(ifp, &saddr6, lladdr, lladdrlen, ND_ROUTER_SOLICIT, 0);
    191   1.12    itojun 
    192   1.12    itojun  freeit:
    193   1.12    itojun 	m_freem(m);
    194   1.20    itojun 	return;
    195   1.20    itojun 
    196   1.20    itojun  bad:
    197   1.75   thorpej 	ICMP6_STATINC(ICMP6_STAT_BADRS);
    198   1.20    itojun 	m_freem(m);
    199    1.2    itojun }
    200    1.2    itojun 
    201    1.2    itojun /*
    202    1.2    itojun  * Receive Router Advertisement Message.
    203    1.2    itojun  *
    204    1.2    itojun  * Based on RFC 2461
    205    1.2    itojun  * TODO: on-link bit on prefix information
    206    1.2    itojun  * TODO: ND_RA_FLAG_{OTHER,MANAGED} processing
    207    1.2    itojun  */
    208    1.2    itojun void
    209   1.64  christos nd6_ra_input(struct mbuf *m, int off, int icmp6len)
    210    1.2    itojun {
    211    1.2    itojun 	struct ifnet *ifp = m->m_pkthdr.rcvif;
    212   1.29    itojun 	struct nd_ifinfo *ndi = ND_IFINFO(ifp);
    213    1.2    itojun 	struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
    214   1.12    itojun 	struct nd_router_advert *nd_ra;
    215    1.2    itojun 	struct in6_addr saddr6 = ip6->ip6_src;
    216    1.2    itojun #if 0
    217    1.2    itojun 	struct in6_addr daddr6 = ip6->ip6_dst;
    218   1.12    itojun 	int flags; /* = nd_ra->nd_ra_flags_reserved; */
    219    1.2    itojun 	int is_managed = ((flags & ND_RA_FLAG_MANAGED) != 0);
    220    1.2    itojun 	int is_other = ((flags & ND_RA_FLAG_OTHER) != 0);
    221    1.2    itojun #endif
    222   1.56    rpaulo 	int mcast = 0;
    223    1.2    itojun 	union nd_opts ndopts;
    224    1.2    itojun 	struct nd_defrouter *dr;
    225    1.2    itojun 
    226   1.32    itojun 	/*
    227   1.81       spz 	 * We only accept RAs when
    228   1.81       spz 	 * the system-wide variable allows the acceptance, and the
    229   1.33    itojun 	 * per-interface variable allows RAs on the receiving interface.
    230   1.32    itojun 	 */
    231   1.80    dyoung 	if (!nd6_accepts_rtadv(ndi))
    232   1.32    itojun 		goto freeit;
    233    1.2    itojun 
    234    1.2    itojun 	if (ip6->ip6_hlim != 255) {
    235  1.107     ozaki 		nd6log(LOG_ERR, "invalid hlim (%d) from %s to %s on %s\n",
    236   1.20    itojun 		    ip6->ip6_hlim, ip6_sprintf(&ip6->ip6_src),
    237  1.107     ozaki 		    ip6_sprintf(&ip6->ip6_dst), if_name(ifp));
    238   1.20    itojun 		goto bad;
    239    1.2    itojun 	}
    240    1.2    itojun 
    241    1.2    itojun 	if (!IN6_IS_ADDR_LINKLOCAL(&saddr6)) {
    242  1.107     ozaki 		nd6log(LOG_ERR, "src %s is not link-local\n",
    243  1.107     ozaki 		    ip6_sprintf(&saddr6));
    244   1.20    itojun 		goto bad;
    245   1.12    itojun 	}
    246   1.12    itojun 
    247   1.12    itojun 	IP6_EXTHDR_GET(nd_ra, struct nd_router_advert *, m, off, icmp6len);
    248   1.12    itojun 	if (nd_ra == NULL) {
    249   1.75   thorpej 		ICMP6_STATINC(ICMP6_STAT_TOOSHORT);
    250    1.2    itojun 		return;
    251    1.2    itojun 	}
    252    1.2    itojun 
    253    1.2    itojun 	icmp6len -= sizeof(*nd_ra);
    254    1.2    itojun 	nd6_option_init(nd_ra + 1, icmp6len, &ndopts);
    255    1.2    itojun 	if (nd6_options(&ndopts) < 0) {
    256  1.107     ozaki 		nd6log(LOG_INFO, "invalid ND option, ignored\n");
    257   1.20    itojun 		/* nd6_options have incremented stats */
    258   1.12    itojun 		goto freeit;
    259    1.2    itojun 	}
    260    1.2    itojun 
    261    1.2    itojun     {
    262   1.52  christos 	struct nd_defrouter drtr;
    263    1.2    itojun 	u_int32_t advreachable = nd_ra->nd_ra_reachable;
    264    1.2    itojun 
    265   1.56    rpaulo 	/* remember if this is a multicasted advertisement */
    266   1.56    rpaulo 	if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst))
    267   1.56    rpaulo 		mcast = 1;
    268   1.56    rpaulo 
    269   1.56    rpaulo 	memset(&drtr, 0, sizeof(drtr));
    270   1.52  christos 	drtr.rtaddr = saddr6;
    271   1.52  christos 	drtr.flags  = nd_ra->nd_ra_flags_reserved;
    272   1.58    rpaulo 	drtr.rtlifetime = ntohs(nd_ra->nd_ra_router_lifetime);
    273  1.102     ozaki 	drtr.expire = time_uptime + drtr.rtlifetime;
    274   1.52  christos 	drtr.ifp = ifp;
    275    1.2    itojun 	/* unspecified or not? (RFC 2461 6.3.4) */
    276    1.2    itojun 	if (advreachable) {
    277    1.2    itojun 		NTOHL(advreachable);
    278    1.2    itojun 		if (advreachable <= MAX_REACHABLE_TIME &&
    279    1.2    itojun 		    ndi->basereachable != advreachable) {
    280    1.2    itojun 			ndi->basereachable = advreachable;
    281    1.2    itojun 			ndi->reachable = ND_COMPUTE_RTIME(ndi->basereachable);
    282    1.2    itojun 			ndi->recalctm = nd6_recalc_reachtm_interval; /* reset */
    283    1.2    itojun 		}
    284    1.2    itojun 	}
    285    1.2    itojun 	if (nd_ra->nd_ra_retransmit)
    286    1.2    itojun 		ndi->retrans = ntohl(nd_ra->nd_ra_retransmit);
    287   1.99       roy 	if (nd_ra->nd_ra_curhoplimit) {
    288   1.99       roy 		if (ndi->chlim < nd_ra->nd_ra_curhoplimit)
    289   1.99       roy 			ndi->chlim = nd_ra->nd_ra_curhoplimit;
    290   1.99       roy 		else if (ndi->chlim != nd_ra->nd_ra_curhoplimit)
    291   1.99       roy 			log(LOG_ERR, "nd_ra_input: lower CurHopLimit sent from "
    292   1.99       roy 			   "%s on %s (current=%d, received=%d), ignored\n",
    293   1.99       roy 			   ip6_sprintf(&ip6->ip6_src),
    294   1.99       roy 			   if_name(ifp), ndi->chlim, nd_ra->nd_ra_curhoplimit);
    295   1.99       roy 	}
    296   1.52  christos 	dr = defrtrlist_update(&drtr);
    297    1.2    itojun     }
    298    1.2    itojun 
    299    1.2    itojun 	/*
    300    1.2    itojun 	 * prefix
    301    1.2    itojun 	 */
    302    1.2    itojun 	if (ndopts.nd_opts_pi) {
    303    1.2    itojun 		struct nd_opt_hdr *pt;
    304   1.32    itojun 		struct nd_opt_prefix_info *pi = NULL;
    305   1.94      matt 		struct nd_prefixctl prc;
    306    1.2    itojun 
    307    1.2    itojun 		for (pt = (struct nd_opt_hdr *)ndopts.nd_opts_pi;
    308    1.2    itojun 		     pt <= (struct nd_opt_hdr *)ndopts.nd_opts_pi_end;
    309   1.63  christos 		     pt = (struct nd_opt_hdr *)((char *)pt +
    310    1.2    itojun 						(pt->nd_opt_len << 3))) {
    311    1.2    itojun 			if (pt->nd_opt_type != ND_OPT_PREFIX_INFORMATION)
    312    1.2    itojun 				continue;
    313    1.2    itojun 			pi = (struct nd_opt_prefix_info *)pt;
    314    1.2    itojun 
    315    1.2    itojun 			if (pi->nd_opt_pi_len != 4) {
    316  1.107     ozaki 				nd6log(LOG_INFO, "invalid option "
    317   1.22    itojun 				    "len %d for prefix information option, "
    318  1.107     ozaki 				    "ignored\n", pi->nd_opt_pi_len);
    319    1.2    itojun 				continue;
    320    1.2    itojun 			}
    321    1.2    itojun 
    322    1.2    itojun 			if (128 < pi->nd_opt_pi_prefix_len) {
    323  1.107     ozaki 				nd6log(LOG_INFO, "invalid prefix "
    324   1.22    itojun 				    "len %d for prefix information option, "
    325  1.107     ozaki 				    "ignored\n", pi->nd_opt_pi_prefix_len);
    326    1.2    itojun 				continue;
    327    1.2    itojun 			}
    328    1.2    itojun 
    329    1.2    itojun 			if (IN6_IS_ADDR_MULTICAST(&pi->nd_opt_pi_prefix)
    330    1.2    itojun 			 || IN6_IS_ADDR_LINKLOCAL(&pi->nd_opt_pi_prefix)) {
    331  1.107     ozaki 				nd6log(LOG_INFO,
    332  1.107     ozaki 				    "invalid prefix %s, ignored\n",
    333  1.107     ozaki 				    ip6_sprintf(&pi->nd_opt_pi_prefix));
    334    1.2    itojun 				continue;
    335    1.2    itojun 			}
    336    1.2    itojun 
    337   1.94      matt 			memset(&prc, 0, sizeof(prc));
    338   1.94      matt 			sockaddr_in6_init(&prc.ndprc_prefix,
    339   1.69    dyoung 			    &pi->nd_opt_pi_prefix, 0, 0, 0);
    340   1.94      matt 			prc.ndprc_ifp = (struct ifnet *)m->m_pkthdr.rcvif;
    341    1.2    itojun 
    342   1.94      matt 			prc.ndprc_raf_onlink = (pi->nd_opt_pi_flags_reserved &
    343   1.56    rpaulo 			    ND_OPT_PI_FLAG_ONLINK) ? 1 : 0;
    344   1.94      matt 			prc.ndprc_raf_auto = (pi->nd_opt_pi_flags_reserved &
    345   1.56    rpaulo 			    ND_OPT_PI_FLAG_AUTO) ? 1 : 0;
    346   1.94      matt 			prc.ndprc_plen = pi->nd_opt_pi_prefix_len;
    347   1.94      matt 			prc.ndprc_vltime = ntohl(pi->nd_opt_pi_valid_time);
    348   1.94      matt 			prc.ndprc_pltime = ntohl(pi->nd_opt_pi_preferred_time);
    349    1.2    itojun 
    350   1.94      matt 			(void)prelist_update(&prc, dr, m, mcast);
    351    1.2    itojun 		}
    352    1.2    itojun 	}
    353    1.2    itojun 
    354    1.2    itojun 	/*
    355    1.2    itojun 	 * MTU
    356    1.2    itojun 	 */
    357    1.2    itojun 	if (ndopts.nd_opts_mtu && ndopts.nd_opts_mtu->nd_opt_mtu_len == 1) {
    358   1.32    itojun 		u_long mtu;
    359   1.30    itojun 		u_long maxmtu;
    360    1.2    itojun 
    361   1.32    itojun 		mtu = ntohl(ndopts.nd_opts_mtu->nd_opt_mtu_mtu);
    362   1.32    itojun 
    363    1.2    itojun 		/* lower bound */
    364    1.2    itojun 		if (mtu < IPV6_MMTU) {
    365  1.107     ozaki 			nd6log(LOG_INFO, "bogus mtu option "
    366   1.32    itojun 			    "mtu=%lu sent from %s, ignoring\n",
    367  1.107     ozaki 			    mtu, ip6_sprintf(&ip6->ip6_src));
    368    1.2    itojun 			goto skip;
    369    1.2    itojun 		}
    370    1.2    itojun 
    371    1.2    itojun 		/* upper bound */
    372   1.30    itojun 		maxmtu = (ndi->maxmtu && ndi->maxmtu < ifp->if_mtu)
    373   1.30    itojun 		    ? ndi->maxmtu : ifp->if_mtu;
    374   1.30    itojun 		if (mtu <= maxmtu) {
    375   1.30    itojun 			int change = (ndi->linkmtu != mtu);
    376   1.30    itojun 
    377   1.30    itojun 			ndi->linkmtu = mtu;
    378   1.30    itojun 			if (change) /* in6_maxmtu may change */
    379   1.30    itojun 				in6_setmaxmtu();
    380    1.2    itojun 		} else {
    381  1.107     ozaki 			nd6log(LOG_INFO,
    382  1.107     ozaki 			    "bogus mtu mtu=%lu sent from %s; "
    383   1.30    itojun 			    "exceeds maxmtu %lu, ignoring\n",
    384  1.107     ozaki 			    mtu, ip6_sprintf(&ip6->ip6_src), maxmtu);
    385    1.2    itojun 		}
    386    1.2    itojun 	}
    387    1.2    itojun 
    388    1.2    itojun  skip:
    389   1.33    itojun 
    390    1.2    itojun 	/*
    391   1.26    itojun 	 * Source link layer address
    392    1.2    itojun 	 */
    393    1.2    itojun     {
    394    1.2    itojun 	char *lladdr = NULL;
    395    1.2    itojun 	int lladdrlen = 0;
    396   1.33    itojun 
    397    1.2    itojun 	if (ndopts.nd_opts_src_lladdr) {
    398    1.2    itojun 		lladdr = (char *)(ndopts.nd_opts_src_lladdr + 1);
    399    1.2    itojun 		lladdrlen = ndopts.nd_opts_src_lladdr->nd_opt_len << 3;
    400    1.2    itojun 	}
    401    1.2    itojun 
    402    1.2    itojun 	if (lladdr && ((ifp->if_addrlen + 2 + 7) & ~7) != lladdrlen) {
    403  1.107     ozaki 		nd6log(LOG_INFO, "lladdrlen mismatch for %s "
    404   1.30    itojun 		    "(if %d, RA packet %d)\n", ip6_sprintf(&saddr6),
    405  1.107     ozaki 		    ifp->if_addrlen, lladdrlen - 2);
    406   1.20    itojun 		goto bad;
    407    1.2    itojun 	}
    408    1.2    itojun 
    409    1.6    itojun 	nd6_cache_lladdr(ifp, &saddr6, lladdr, lladdrlen, ND_ROUTER_ADVERT, 0);
    410    1.7    itojun 
    411    1.7    itojun 	/*
    412    1.7    itojun 	 * Installing a link-layer address might change the state of the
    413    1.7    itojun 	 * router's neighbor cache, which might also affect our on-link
    414    1.7    itojun 	 * detection of adveritsed prefixes.
    415    1.7    itojun 	 */
    416    1.7    itojun 	pfxlist_onlink_check();
    417    1.2    itojun     }
    418   1.12    itojun 
    419   1.20    itojun  freeit:
    420   1.20    itojun 	m_freem(m);
    421   1.20    itojun 	return;
    422   1.20    itojun 
    423   1.20    itojun  bad:
    424   1.75   thorpej 	ICMP6_STATINC(ICMP6_STAT_BADRA);
    425   1.12    itojun 	m_freem(m);
    426    1.2    itojun }
    427    1.2    itojun 
    428    1.2    itojun /*
    429   1.45       wiz  * default router list processing sub routines
    430    1.2    itojun  */
    431    1.2    itojun void
    432   1.94      matt defrouter_addreq(struct nd_defrouter *newdr)
    433    1.2    itojun {
    434   1.76    dyoung 	union {
    435   1.76    dyoung 		struct sockaddr_in6 sin6;
    436   1.76    dyoung 		struct sockaddr sa;
    437   1.76    dyoung 	} def, mask, gate;
    438    1.2    itojun 	int s;
    439   1.32    itojun 	int error;
    440    1.2    itojun 
    441   1.56    rpaulo 	memset(&def, 0, sizeof(def));
    442   1.56    rpaulo 	memset(&mask, 0, sizeof(mask));
    443   1.56    rpaulo 	memset(&gate, 0,sizeof(gate)); /* for safety */
    444    1.2    itojun 
    445   1.76    dyoung 	def.sin6.sin6_len = mask.sin6.sin6_len = gate.sin6.sin6_len =
    446   1.32    itojun 	    sizeof(struct sockaddr_in6);
    447   1.76    dyoung 	def.sin6.sin6_family = mask.sin6.sin6_family = gate.sin6.sin6_family = AF_INET6;
    448   1.94      matt 	gate.sin6.sin6_addr = newdr->rtaddr;
    449   1.32    itojun #ifndef SCOPEDROUTING
    450   1.76    dyoung 	gate.sin6.sin6_scope_id = 0;	/* XXX */
    451   1.32    itojun #endif
    452    1.2    itojun 
    453    1.4    itojun 	s = splsoftnet();
    454  1.101     ozaki 	error = rtrequest_newmsg(RTM_ADD, &def.sa, &gate.sa, &mask.sa,
    455  1.101     ozaki 	    RTF_GATEWAY);
    456  1.101     ozaki 	if (error == 0) {
    457   1.81       spz 		nd6_numroutes++;
    458  1.101     ozaki 		newdr->installed = 1;
    459   1.32    itojun 	}
    460    1.2    itojun 	splx(s);
    461    1.2    itojun 	return;
    462    1.2    itojun }
    463    1.2    itojun 
    464    1.2    itojun struct nd_defrouter *
    465   1.66    dyoung defrouter_lookup(const struct in6_addr *addr, struct ifnet *ifp)
    466    1.2    itojun {
    467    1.2    itojun 	struct nd_defrouter *dr;
    468    1.2    itojun 
    469   1.66    dyoung 	TAILQ_FOREACH(dr, &nd_defrouter, dr_entry) {
    470   1.66    dyoung 		if (dr->ifp == ifp && IN6_ARE_ADDR_EQUAL(addr, &dr->rtaddr))
    471   1.66    dyoung 			break;
    472    1.7    itojun 	}
    473    1.2    itojun 
    474   1.66    dyoung 	return dr;		/* search failed */
    475    1.2    itojun }
    476    1.2    itojun 
    477    1.2    itojun void
    478   1.96    martin defrtrlist_del(struct nd_defrouter *dr, struct in6_ifextra *ext)
    479    1.2    itojun {
    480    1.2    itojun 	struct nd_defrouter *deldr = NULL;
    481    1.2    itojun 	struct nd_prefix *pr;
    482   1.96    martin 	struct nd_ifinfo *ndi;
    483   1.96    martin 
    484   1.96    martin 	if (ext == NULL)
    485   1.96    martin 		ext = dr->ifp->if_afdata[AF_INET6];
    486   1.96    martin 
    487   1.96    martin 	/* detach already in progress, can not do anything */
    488   1.96    martin 	if (ext == NULL)
    489   1.96    martin 		return;
    490   1.96    martin 
    491   1.96    martin 	ndi = ext->nd_ifinfo;
    492    1.2    itojun 
    493    1.2    itojun 	/*
    494    1.2    itojun 	 * Flush all the routing table entries that use the router
    495    1.2    itojun 	 * as a next hop.
    496    1.2    itojun 	 */
    497   1.79  tonnerre 	/* XXX: better condition? */
    498   1.80    dyoung 	if (!ip6_forwarding && nd6_accepts_rtadv(ndi))
    499    1.2    itojun 		rt6_flush(&dr->rtaddr, dr->ifp);
    500   1.32    itojun 
    501   1.32    itojun 	if (dr->installed) {
    502   1.32    itojun 		deldr = dr;
    503   1.32    itojun 		defrouter_delreq(dr);
    504    1.2    itojun 	}
    505    1.7    itojun 	TAILQ_REMOVE(&nd_defrouter, dr, dr_entry);
    506    1.2    itojun 
    507    1.2    itojun 	/*
    508    1.2    itojun 	 * Also delete all the pointers to the router in each prefix lists.
    509    1.2    itojun 	 */
    510   1.62    dyoung 	LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
    511    1.2    itojun 		struct nd_pfxrouter *pfxrtr;
    512    1.2    itojun 		if ((pfxrtr = pfxrtr_lookup(pr, dr)) != NULL)
    513    1.2    itojun 			pfxrtr_del(pfxrtr);
    514    1.2    itojun 	}
    515    1.2    itojun 	pfxlist_onlink_check();
    516    1.2    itojun 
    517    1.2    itojun 	/*
    518    1.7    itojun 	 * If the router is the primary one, choose a new one.
    519    1.7    itojun 	 * Note that defrouter_select() will remove the current gateway
    520    1.7    itojun 	 * from the routing table.
    521    1.2    itojun 	 */
    522    1.2    itojun 	if (deldr)
    523    1.7    itojun 		defrouter_select();
    524    1.7    itojun 
    525   1.83  christos 	ext->ndefrouters--;
    526   1.83  christos 	if (ext->ndefrouters < 0) {
    527   1.83  christos 		log(LOG_WARNING, "defrtrlist_del: negative count on %s\n",
    528   1.83  christos 		    dr->ifp->if_xname);
    529   1.83  christos 	}
    530   1.83  christos 
    531    1.2    itojun 	free(dr, M_IP6NDP);
    532    1.2    itojun }
    533    1.2    itojun 
    534    1.7    itojun /*
    535   1.32    itojun  * Remove the default route for a given router.
    536   1.32    itojun  * This is just a subroutine function for defrouter_select(), and should
    537   1.32    itojun  * not be called from anywhere else.
    538   1.32    itojun  */
    539   1.32    itojun static void
    540   1.64  christos defrouter_delreq(struct nd_defrouter *dr)
    541   1.32    itojun {
    542   1.76    dyoung 	union {
    543   1.76    dyoung 		struct sockaddr_in6 sin6;
    544   1.76    dyoung 		struct sockaddr sa;
    545   1.76    dyoung 	} def, mask, gw;
    546  1.101     ozaki 	int error;
    547   1.32    itojun 
    548   1.35    itojun #ifdef DIAGNOSTIC
    549   1.56    rpaulo 	if (dr == NULL)
    550   1.35    itojun 		panic("dr == NULL in defrouter_delreq");
    551   1.35    itojun #endif
    552   1.35    itojun 
    553   1.76    dyoung 	memset(&def, 0, sizeof(def));
    554   1.76    dyoung 	memset(&mask, 0, sizeof(mask));
    555   1.76    dyoung 	memset(&gw, 0, sizeof(gw));	/* for safety */
    556   1.32    itojun 
    557   1.76    dyoung 	def.sin6.sin6_len = mask.sin6.sin6_len = gw.sin6.sin6_len =
    558   1.32    itojun 	    sizeof(struct sockaddr_in6);
    559   1.76    dyoung 	def.sin6.sin6_family = mask.sin6.sin6_family = gw.sin6.sin6_family = AF_INET6;
    560   1.76    dyoung 	gw.sin6.sin6_addr = dr->rtaddr;
    561   1.32    itojun #ifndef SCOPEDROUTING
    562   1.76    dyoung 	gw.sin6.sin6_scope_id = 0;	/* XXX */
    563   1.32    itojun #endif
    564   1.32    itojun 
    565  1.101     ozaki 	error = rtrequest_newmsg(RTM_DELETE, &def.sa, &gw.sa, &mask.sa,
    566  1.101     ozaki 	    RTF_GATEWAY);
    567  1.101     ozaki 	if (error == 0)
    568  1.100     ozaki 		nd6_numroutes--;
    569   1.32    itojun 
    570   1.35    itojun 	dr->installed = 0;
    571   1.32    itojun }
    572   1.32    itojun 
    573   1.32    itojun /*
    574   1.32    itojun  * remove all default routes from default router list
    575   1.32    itojun  */
    576   1.32    itojun void
    577   1.73      matt defrouter_reset(void)
    578   1.32    itojun {
    579   1.32    itojun 	struct nd_defrouter *dr;
    580   1.32    itojun 
    581   1.32    itojun 	for (dr = TAILQ_FIRST(&nd_defrouter); dr;
    582   1.32    itojun 	     dr = TAILQ_NEXT(dr, dr_entry))
    583   1.32    itojun 		defrouter_delreq(dr);
    584   1.32    itojun 
    585   1.32    itojun 	/*
    586   1.32    itojun 	 * XXX should we also nuke any default routers in the kernel, by
    587   1.32    itojun 	 * going through them by rtalloc1()?
    588   1.32    itojun 	 */
    589   1.32    itojun }
    590   1.32    itojun 
    591   1.32    itojun /*
    592   1.32    itojun  * Default Router Selection according to Section 6.3.6 of RFC 2461 and
    593   1.32    itojun  * draft-ietf-ipngwg-router-selection:
    594   1.32    itojun  * 1) Routers that are reachable or probably reachable should be preferred.
    595   1.32    itojun  *    If we have more than one (probably) reachable router, prefer ones
    596   1.32    itojun  *    with the highest router preference.
    597    1.7    itojun  * 2) When no routers on the list are known to be reachable or
    598    1.7    itojun  *    probably reachable, routers SHOULD be selected in a round-robin
    599   1.32    itojun  *    fashion, regardless of router preference values.
    600    1.7    itojun  * 3) If the Default Router List is empty, assume that all
    601    1.7    itojun  *    destinations are on-link.
    602   1.32    itojun  *
    603   1.32    itojun  * We assume nd_defrouter is sorted by router preference value.
    604   1.32    itojun  * Since the code below covers both with and without router preference cases,
    605   1.32    itojun  * we do not need to classify the cases by ifdef.
    606   1.32    itojun  *
    607   1.32    itojun  * At this moment, we do not try to install more than one default router,
    608   1.32    itojun  * even when the multipath routing is available, because we're not sure about
    609   1.32    itojun  * the benefits for stub hosts comparing to the risk of making the code
    610   1.32    itojun  * complicated and the possibility of introducing bugs.
    611    1.7    itojun  */
    612    1.7    itojun void
    613   1.73      matt defrouter_select(void)
    614    1.7    itojun {
    615   1.79  tonnerre 	struct nd_ifinfo *ndi;
    616    1.7    itojun 	int s = splsoftnet();
    617   1.32    itojun 	struct nd_defrouter *dr, *selected_dr = NULL, *installed_dr = NULL;
    618    1.7    itojun 
    619    1.7    itojun 	/*
    620   1.32    itojun 	 * This function should be called only when acting as an autoconfigured
    621   1.32    itojun 	 * host.  Although the remaining part of this function is not effective
    622   1.32    itojun 	 * if the node is not an autoconfigured host, we explicitly exclude
    623   1.32    itojun 	 * such cases here for safety.
    624    1.7    itojun 	 */
    625   1.79  tonnerre 	if (ip6_forwarding) {
    626  1.107     ozaki 		nd6log(LOG_WARNING, "called unexpectedly (forwarding=%d, "
    627  1.107     ozaki 		    "accept_rtadv=%d)\n", ip6_forwarding, ip6_accept_rtadv);
    628   1.32    itojun 		splx(s);
    629   1.32    itojun 		return;
    630    1.7    itojun 	}
    631    1.7    itojun 
    632   1.32    itojun 	/*
    633   1.32    itojun 	 * Let's handle easy case (3) first:
    634   1.49    itojun 	 * If default router list is empty, there's nothing to be done.
    635   1.32    itojun 	 */
    636   1.32    itojun 	if (!TAILQ_FIRST(&nd_defrouter)) {
    637   1.32    itojun 		splx(s);
    638   1.32    itojun 		return;
    639   1.32    itojun 	}
    640   1.32    itojun 
    641   1.32    itojun 	/*
    642   1.32    itojun 	 * Search for a (probably) reachable router from the list.
    643   1.32    itojun 	 * We just pick up the first reachable one (if any), assuming that
    644   1.32    itojun 	 * the ordering rule of the list described in defrtrlist_update().
    645   1.32    itojun 	 */
    646   1.32    itojun 	for (dr = TAILQ_FIRST(&nd_defrouter); dr;
    647   1.32    itojun 	     dr = TAILQ_NEXT(dr, dr_entry)) {
    648   1.79  tonnerre 		ndi = ND_IFINFO(dr->ifp);
    649   1.80    dyoung 		if (nd6_accepts_rtadv(ndi))
    650   1.79  tonnerre 			continue;
    651   1.79  tonnerre 
    652   1.56    rpaulo 		if (selected_dr == NULL &&
    653  1.101     ozaki 		    nd6_is_llinfo_probreach(dr))
    654   1.32    itojun 			selected_dr = dr;
    655   1.32    itojun 
    656   1.32    itojun 		if (dr->installed && !installed_dr)
    657   1.32    itojun 			installed_dr = dr;
    658   1.32    itojun 		else if (dr->installed && installed_dr) {
    659   1.32    itojun 			/* this should not happen.  warn for diagnosis. */
    660   1.32    itojun 			log(LOG_ERR, "defrouter_select: more than one router"
    661   1.32    itojun 			    " is installed\n");
    662   1.32    itojun 		}
    663   1.32    itojun 	}
    664   1.32    itojun 	/*
    665   1.32    itojun 	 * If none of the default routers was found to be reachable,
    666   1.32    itojun 	 * round-robin the list regardless of preference.
    667   1.32    itojun 	 * Otherwise, if we have an installed router, check if the selected
    668   1.32    itojun 	 * (reachable) router should really be preferred to the installed one.
    669   1.32    itojun 	 * We only prefer the new router when the old one is not reachable
    670   1.32    itojun 	 * or when the new one has a really higher preference value.
    671   1.32    itojun 	 */
    672   1.56    rpaulo 	if (selected_dr == NULL) {
    673   1.56    rpaulo 		if (installed_dr == NULL || !TAILQ_NEXT(installed_dr, dr_entry))
    674   1.32    itojun 			selected_dr = TAILQ_FIRST(&nd_defrouter);
    675   1.32    itojun 		else
    676   1.32    itojun 			selected_dr = TAILQ_NEXT(installed_dr, dr_entry);
    677   1.32    itojun 	} else if (installed_dr &&
    678  1.101     ozaki 	    nd6_is_llinfo_probreach(installed_dr) &&
    679   1.32    itojun 	    rtpref(selected_dr) <= rtpref(installed_dr)) {
    680   1.32    itojun 		selected_dr = installed_dr;
    681   1.32    itojun 	}
    682   1.32    itojun 
    683   1.32    itojun 	/*
    684   1.32    itojun 	 * If the selected router is different than the installed one,
    685   1.32    itojun 	 * remove the installed router and install the selected one.
    686   1.32    itojun 	 * Note that the selected router is never NULL here.
    687   1.32    itojun 	 */
    688   1.32    itojun 	if (installed_dr != selected_dr) {
    689   1.32    itojun 		if (installed_dr)
    690   1.32    itojun 			defrouter_delreq(installed_dr);
    691   1.32    itojun 		defrouter_addreq(selected_dr);
    692    1.7    itojun 	}
    693    1.7    itojun 
    694    1.7    itojun 	splx(s);
    695    1.7    itojun 	return;
    696    1.7    itojun }
    697    1.7    itojun 
    698   1.32    itojun /*
    699   1.32    itojun  * for default router selection
    700   1.32    itojun  * regards router-preference field as a 2-bit signed integer
    701   1.32    itojun  */
    702   1.32    itojun static int
    703   1.32    itojun rtpref(struct nd_defrouter *dr)
    704   1.32    itojun {
    705   1.32    itojun 	switch (dr->flags & ND_RA_FLAG_RTPREF_MASK) {
    706   1.32    itojun 	case ND_RA_FLAG_RTPREF_HIGH:
    707   1.56    rpaulo 		return (RTPREF_HIGH);
    708   1.32    itojun 	case ND_RA_FLAG_RTPREF_MEDIUM:
    709   1.58    rpaulo 	case ND_RA_FLAG_RTPREF_RSV:
    710   1.56    rpaulo 		return (RTPREF_MEDIUM);
    711   1.32    itojun 	case ND_RA_FLAG_RTPREF_LOW:
    712   1.56    rpaulo 		return (RTPREF_LOW);
    713   1.32    itojun 	default:
    714   1.32    itojun 		/*
    715   1.32    itojun 		 * This case should never happen.  If it did, it would mean a
    716   1.32    itojun 		 * serious bug of kernel internal.  We thus always bark here.
    717   1.32    itojun 		 * Or, can we even panic?
    718   1.32    itojun 		 */
    719   1.56    rpaulo 		log(LOG_ERR, "rtpref: impossible RA flag %x\n", dr->flags);
    720   1.56    rpaulo 		return (RTPREF_INVALID);
    721   1.32    itojun 	}
    722   1.32    itojun 	/* NOTREACHED */
    723   1.32    itojun }
    724   1.32    itojun 
    725    1.2    itojun static struct nd_defrouter *
    726   1.94      matt defrtrlist_update(struct nd_defrouter *newdr)
    727    1.2    itojun {
    728    1.2    itojun 	struct nd_defrouter *dr, *n;
    729   1.94      matt 	struct in6_ifextra *ext = newdr->ifp->if_afdata[AF_INET6];
    730    1.4    itojun 	int s = splsoftnet();
    731    1.2    itojun 
    732   1.94      matt 	if ((dr = defrouter_lookup(&newdr->rtaddr, newdr->ifp)) != NULL) {
    733    1.2    itojun 		/* entry exists */
    734   1.94      matt 		if (newdr->rtlifetime == 0) {
    735   1.96    martin 			defrtrlist_del(dr, ext);
    736    1.2    itojun 			dr = NULL;
    737    1.2    itojun 		} else {
    738   1.32    itojun 			int oldpref = rtpref(dr);
    739   1.32    itojun 
    740    1.2    itojun 			/* override */
    741   1.94      matt 			dr->flags = newdr->flags; /* xxx flag check */
    742   1.94      matt 			dr->rtlifetime = newdr->rtlifetime;
    743   1.94      matt 			dr->expire = newdr->expire;
    744   1.32    itojun 
    745   1.32    itojun 			/*
    746   1.32    itojun 			 * If the preference does not change, there's no need
    747   1.32    itojun 			 * to sort the entries.
    748   1.32    itojun 			 */
    749   1.94      matt 			if (rtpref(newdr) == oldpref) {
    750   1.32    itojun 				splx(s);
    751   1.36    itojun 				return (dr);
    752   1.32    itojun 			}
    753   1.32    itojun 
    754   1.32    itojun 			/*
    755   1.32    itojun 			 * preferred router may be changed, so relocate
    756   1.32    itojun 			 * this router.
    757   1.32    itojun 			 * XXX: calling TAILQ_REMOVE directly is a bad manner.
    758   1.32    itojun 			 * However, since defrtrlist_del() has many side
    759   1.32    itojun 			 * effects, we intentionally do so here.
    760   1.32    itojun 			 * defrouter_select() below will handle routing
    761   1.32    itojun 			 * changes later.
    762   1.32    itojun 			 */
    763   1.32    itojun 			TAILQ_REMOVE(&nd_defrouter, dr, dr_entry);
    764   1.32    itojun 			n = dr;
    765   1.32    itojun 			goto insert;
    766    1.2    itojun 		}
    767    1.2    itojun 		splx(s);
    768   1.36    itojun 		return (dr);
    769    1.2    itojun 	}
    770    1.2    itojun 
    771   1.83  christos 	if (ip6_maxifdefrouters >= 0 &&
    772   1.83  christos 	    ext->ndefrouters >= ip6_maxifdefrouters) {
    773   1.83  christos 		splx(s);
    774   1.83  christos 		return (NULL);
    775   1.83  christos 	}
    776   1.83  christos 
    777    1.2    itojun 	/* entry does not exist */
    778   1.94      matt 	if (newdr->rtlifetime == 0) {
    779    1.2    itojun 		splx(s);
    780   1.36    itojun 		return (NULL);
    781    1.2    itojun 	}
    782    1.2    itojun 
    783   1.81       spz 	if (ip6_rtadv_maxroutes <= nd6_numroutes) {
    784   1.81       spz 		ICMP6_STATINC(ICMP6_STAT_DROPPED_RAROUTE);
    785   1.81       spz 		splx(s);
    786   1.81       spz 		return (NULL);
    787   1.81       spz 	}
    788   1.81       spz 
    789    1.2    itojun 	n = (struct nd_defrouter *)malloc(sizeof(*n), M_IP6NDP, M_NOWAIT);
    790    1.2    itojun 	if (n == NULL) {
    791    1.2    itojun 		splx(s);
    792   1.36    itojun 		return (NULL);
    793    1.2    itojun 	}
    794   1.78    cegger 	memset(n, 0, sizeof(*n));
    795   1.94      matt 	*n = *newdr;
    796    1.7    itojun 
    797   1.32    itojun insert:
    798    1.7    itojun 	/*
    799   1.32    itojun 	 * Insert the new router in the Default Router List;
    800   1.32    itojun 	 * The Default Router List should be in the descending order
    801   1.32    itojun 	 * of router-preferece.  Routers with the same preference are
    802   1.32    itojun 	 * sorted in the arriving time order.
    803    1.7    itojun 	 */
    804   1.32    itojun 
    805   1.32    itojun 	/* insert at the end of the group */
    806   1.32    itojun 	for (dr = TAILQ_FIRST(&nd_defrouter); dr;
    807   1.32    itojun 	     dr = TAILQ_NEXT(dr, dr_entry)) {
    808   1.32    itojun 		if (rtpref(n) > rtpref(dr))
    809   1.32    itojun 			break;
    810   1.32    itojun 	}
    811   1.32    itojun 	if (dr)
    812   1.32    itojun 		TAILQ_INSERT_BEFORE(dr, n, dr_entry);
    813   1.32    itojun 	else
    814   1.32    itojun 		TAILQ_INSERT_TAIL(&nd_defrouter, n, dr_entry);
    815   1.32    itojun 
    816   1.32    itojun 	defrouter_select();
    817   1.32    itojun 
    818   1.83  christos 	ext->ndefrouters++;
    819   1.83  christos 
    820    1.2    itojun 	splx(s);
    821   1.33    itojun 
    822   1.36    itojun 	return (n);
    823    1.2    itojun }
    824    1.2    itojun 
    825    1.2    itojun static struct nd_pfxrouter *
    826   1.64  christos pfxrtr_lookup(struct nd_prefix *pr, struct nd_defrouter *dr)
    827    1.2    itojun {
    828    1.2    itojun 	struct nd_pfxrouter *search;
    829   1.33    itojun 
    830   1.62    dyoung 	LIST_FOREACH(search, &pr->ndpr_advrtrs, pfr_entry) {
    831    1.2    itojun 		if (search->router == dr)
    832    1.2    itojun 			break;
    833    1.2    itojun 	}
    834    1.2    itojun 
    835   1.36    itojun 	return (search);
    836    1.2    itojun }
    837    1.2    itojun 
    838    1.2    itojun static void
    839   1.64  christos pfxrtr_add(struct nd_prefix *pr, struct nd_defrouter *dr)
    840    1.2    itojun {
    841   1.94      matt 	struct nd_pfxrouter *newpfr;
    842    1.2    itojun 
    843   1.94      matt 	newpfr = malloc(sizeof(*newpfr), M_IP6NDP, M_NOWAIT|M_ZERO);
    844   1.94      matt 	if (newpfr == NULL)
    845    1.2    itojun 		return;
    846   1.94      matt 	newpfr->router = dr;
    847    1.2    itojun 
    848   1.94      matt 	LIST_INSERT_HEAD(&pr->ndpr_advrtrs, newpfr, pfr_entry);
    849    1.2    itojun 
    850    1.2    itojun 	pfxlist_onlink_check();
    851    1.2    itojun }
    852    1.2    itojun 
    853    1.2    itojun static void
    854   1.64  christos pfxrtr_del(struct nd_pfxrouter *pfr)
    855    1.2    itojun {
    856    1.2    itojun 	LIST_REMOVE(pfr, pfr_entry);
    857    1.2    itojun 	free(pfr, M_IP6NDP);
    858    1.2    itojun }
    859    1.2    itojun 
    860   1.32    itojun struct nd_prefix *
    861   1.64  christos nd6_prefix_lookup(struct nd_prefixctl *key)
    862    1.2    itojun {
    863    1.2    itojun 	struct nd_prefix *search;
    864    1.2    itojun 
    865   1.62    dyoung 	LIST_FOREACH(search, &nd_prefix, ndpr_entry) {
    866   1.94      matt 		if (key->ndprc_ifp == search->ndpr_ifp &&
    867   1.94      matt 		    key->ndprc_plen == search->ndpr_plen &&
    868   1.94      matt 		    in6_are_prefix_equal(&key->ndprc_prefix.sin6_addr,
    869   1.94      matt 		    &search->ndpr_prefix.sin6_addr, key->ndprc_plen)) {
    870    1.2    itojun 			break;
    871    1.2    itojun 		}
    872    1.2    itojun 	}
    873    1.2    itojun 
    874   1.36    itojun 	return (search);
    875    1.2    itojun }
    876    1.2    itojun 
    877   1.83  christos static void
    878   1.83  christos purge_detached(struct ifnet *ifp)
    879   1.83  christos {
    880   1.83  christos 	struct nd_prefix *pr, *pr_next;
    881   1.83  christos 	struct in6_ifaddr *ia;
    882   1.93     ozaki 	struct ifaddr *ifa, *ifa_next;
    883   1.83  christos 
    884   1.83  christos 	for (pr = nd_prefix.lh_first; pr; pr = pr_next) {
    885   1.83  christos 		pr_next = pr->ndpr_next;
    886   1.83  christos 
    887   1.83  christos 		/*
    888   1.83  christos 		 * This function is called when we need to make more room for
    889   1.83  christos 		 * new prefixes rather than keeping old, possibly stale ones.
    890   1.83  christos 		 * Detached prefixes would be a good candidate; if all routers
    891   1.83  christos 		 * that advertised the prefix expired, the prefix is also
    892   1.83  christos 		 * probably stale.
    893   1.83  christos 		 */
    894   1.83  christos 		if (pr->ndpr_ifp != ifp ||
    895   1.83  christos 		    IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr) ||
    896   1.83  christos 		    ((pr->ndpr_stateflags & NDPRF_DETACHED) == 0 &&
    897   1.83  christos 		    !LIST_EMPTY(&pr->ndpr_advrtrs)))
    898   1.83  christos 			continue;
    899   1.83  christos 
    900   1.93     ozaki 		IFADDR_FOREACH_SAFE(ifa, ifp, ifa_next) {
    901   1.83  christos 			if (ifa->ifa_addr->sa_family != AF_INET6)
    902   1.83  christos 				continue;
    903   1.83  christos 			ia = (struct in6_ifaddr *)ifa;
    904   1.83  christos 			if ((ia->ia6_flags & IN6_IFF_AUTOCONF) ==
    905   1.83  christos 			    IN6_IFF_AUTOCONF && ia->ia6_ndpr == pr) {
    906   1.83  christos 				in6_purgeaddr(ifa);
    907   1.83  christos 			}
    908   1.83  christos 		}
    909   1.83  christos 		if (pr->ndpr_refcnt == 0)
    910   1.83  christos 			prelist_remove(pr);
    911   1.83  christos 	}
    912   1.83  christos }
    913   1.32    itojun int
    914   1.94      matt nd6_prelist_add(struct nd_prefixctl *prc, struct nd_defrouter *dr,
    915   1.64  christos 	struct nd_prefix **newp)
    916    1.2    itojun {
    917   1.94      matt 	struct nd_prefix *newpr = NULL;
    918    1.2    itojun 	int i, s;
    919   1.56    rpaulo 	int error;
    920   1.94      matt 	struct in6_ifextra *ext = prc->ndprc_ifp->if_afdata[AF_INET6];
    921   1.83  christos 
    922   1.83  christos 	if (ip6_maxifprefixes >= 0) {
    923   1.83  christos 		if (ext->nprefixes >= ip6_maxifprefixes / 2)
    924   1.94      matt 			purge_detached(prc->ndprc_ifp);
    925   1.83  christos 		if (ext->nprefixes >= ip6_maxifprefixes)
    926   1.83  christos 			return ENOMEM;
    927   1.83  christos 	}
    928    1.2    itojun 
    929   1.56    rpaulo 	error = 0;
    930   1.94      matt 	newpr = malloc(sizeof(*newpr), M_IP6NDP, M_NOWAIT|M_ZERO);
    931   1.94      matt 	if (newpr == NULL)
    932    1.2    itojun 		return ENOMEM;
    933   1.94      matt 	newpr->ndpr_ifp = prc->ndprc_ifp;
    934   1.94      matt 	newpr->ndpr_prefix = prc->ndprc_prefix;
    935   1.94      matt 	newpr->ndpr_plen = prc->ndprc_plen;
    936   1.94      matt 	newpr->ndpr_vltime = prc->ndprc_vltime;
    937   1.94      matt 	newpr->ndpr_pltime = prc->ndprc_pltime;
    938   1.94      matt 	newpr->ndpr_flags = prc->ndprc_flags;
    939   1.94      matt 	if ((error = in6_init_prefix_ltimes(newpr)) != 0) {
    940   1.94      matt 		free(newpr, M_IP6NDP);
    941   1.56    rpaulo 		return(error);
    942   1.56    rpaulo 	}
    943  1.102     ozaki 	newpr->ndpr_lastupdate = time_uptime;
    944   1.32    itojun 	if (newp != NULL)
    945   1.94      matt 		*newp = newpr;
    946    1.2    itojun 
    947   1.55    rpaulo 	/* initialization */
    948   1.94      matt 	LIST_INIT(&newpr->ndpr_advrtrs);
    949   1.94      matt 	in6_prefixlen2mask(&newpr->ndpr_mask, newpr->ndpr_plen);
    950    1.2    itojun 	/* make prefix in the canonical form */
    951   1.94      matt 	for (i = 0; i < 4; i++) {
    952   1.94      matt 		newpr->ndpr_prefix.sin6_addr.s6_addr32[i] &=
    953   1.94      matt 		    newpr->ndpr_mask.s6_addr32[i];
    954   1.94      matt 	}
    955    1.2    itojun 
    956    1.4    itojun 	s = splsoftnet();
    957    1.2    itojun 	/* link ndpr_entry to nd_prefix list */
    958   1.94      matt 	LIST_INSERT_HEAD(&nd_prefix, newpr, ndpr_entry);
    959    1.2    itojun 	splx(s);
    960    1.2    itojun 
    961   1.32    itojun 	/* ND_OPT_PI_FLAG_ONLINK processing */
    962   1.94      matt 	if (newpr->ndpr_raf_onlink) {
    963   1.32    itojun 		int e;
    964   1.32    itojun 
    965   1.94      matt 		if ((e = nd6_prefix_onlink(newpr)) != 0) {
    966  1.107     ozaki 			nd6log(LOG_ERR, "failed to make "
    967   1.32    itojun 			    "the prefix %s/%d on-link on %s (errno=%d)\n",
    968   1.94      matt 			    ip6_sprintf(&prc->ndprc_prefix.sin6_addr),
    969  1.107     ozaki 			    prc->ndprc_plen, if_name(prc->ndprc_ifp), e);
    970   1.32    itojun 			/* proceed anyway. XXX: is it correct? */
    971   1.32    itojun 		}
    972   1.32    itojun 	}
    973   1.32    itojun 
    974    1.2    itojun 	if (dr)
    975   1.94      matt 		pfxrtr_add(newpr, dr);
    976    1.2    itojun 
    977   1.83  christos 	ext->nprefixes++;
    978   1.83  christos 
    979    1.2    itojun 	return 0;
    980    1.2    itojun }
    981    1.2    itojun 
    982    1.2    itojun void
    983   1.64  christos prelist_remove(struct nd_prefix *pr)
    984    1.2    itojun {
    985    1.2    itojun 	struct nd_pfxrouter *pfr, *next;
    986   1.32    itojun 	int e, s;
    987   1.83  christos 	struct in6_ifextra *ext = pr->ndpr_ifp->if_afdata[AF_INET6];
    988   1.32    itojun 
    989   1.32    itojun 	/* make sure to invalidate the prefix until it is really freed. */
    990   1.32    itojun 	pr->ndpr_vltime = 0;
    991   1.32    itojun 	pr->ndpr_pltime = 0;
    992   1.32    itojun #if 0
    993   1.32    itojun 	/*
    994   1.32    itojun 	 * Though these flags are now meaningless, we'd rather keep the value
    995   1.32    itojun 	 * not to confuse users when executing "ndp -p".
    996   1.32    itojun 	 */
    997   1.32    itojun 	pr->ndpr_raf_onlink = 0;
    998   1.32    itojun 	pr->ndpr_raf_auto = 0;
    999   1.32    itojun #endif
   1000   1.32    itojun 	if ((pr->ndpr_stateflags & NDPRF_ONLINK) != 0 &&
   1001   1.32    itojun 	    (e = nd6_prefix_offlink(pr)) != 0) {
   1002  1.107     ozaki 		nd6log(LOG_ERR,
   1003  1.107     ozaki 		    "failed to make %s/%d offlink on %s, errno=%d\n",
   1004   1.32    itojun 		    ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
   1005  1.107     ozaki 		    pr->ndpr_plen, if_name(pr->ndpr_ifp), e);
   1006   1.32    itojun 		/* what should we do? */
   1007   1.32    itojun 	}
   1008   1.32    itojun 
   1009   1.32    itojun 	if (pr->ndpr_refcnt > 0)
   1010   1.32    itojun 		return;		/* notice here? */
   1011    1.2    itojun 
   1012    1.4    itojun 	s = splsoftnet();
   1013    1.2    itojun 	/* unlink ndpr_entry from nd_prefix list */
   1014    1.2    itojun 	LIST_REMOVE(pr, ndpr_entry);
   1015    1.2    itojun 
   1016    1.2    itojun 	/* free list of routers that adversed the prefix */
   1017   1.62    dyoung 	for (pfr = LIST_FIRST(&pr->ndpr_advrtrs); pfr != NULL; pfr = next) {
   1018   1.62    dyoung 		next = LIST_NEXT(pfr, pfr_entry);
   1019    1.2    itojun 
   1020    1.2    itojun 		free(pfr, M_IP6NDP);
   1021    1.2    itojun 	}
   1022   1.83  christos 
   1023   1.86  christos 	if (ext) {
   1024   1.86  christos 		ext->nprefixes--;
   1025   1.86  christos 		if (ext->nprefixes < 0) {
   1026   1.86  christos 			log(LOG_WARNING, "prelist_remove: negative count on "
   1027   1.86  christos 			    "%s\n", pr->ndpr_ifp->if_xname);
   1028   1.86  christos 		}
   1029   1.83  christos 	}
   1030   1.21    itojun 	splx(s);
   1031   1.21    itojun 
   1032    1.2    itojun 	free(pr, M_IP6NDP);
   1033    1.2    itojun 
   1034    1.2    itojun 	pfxlist_onlink_check();
   1035    1.2    itojun }
   1036    1.2    itojun 
   1037   1.56    rpaulo static int
   1038   1.94      matt prelist_update(struct nd_prefixctl *newprc,
   1039   1.64  christos 	struct nd_defrouter *dr, /* may be NULL */
   1040   1.64  christos 	struct mbuf *m,
   1041   1.64  christos 	int mcast)
   1042    1.2    itojun {
   1043   1.32    itojun 	struct in6_ifaddr *ia6 = NULL, *ia6_match = NULL;
   1044   1.32    itojun 	struct ifaddr *ifa;
   1045   1.94      matt 	struct ifnet *ifp = newprc->ndprc_ifp;
   1046    1.2    itojun 	struct nd_prefix *pr;
   1047    1.4    itojun 	int s = splsoftnet();
   1048    1.2    itojun 	int error = 0;
   1049    1.2    itojun 	int auth;
   1050   1.32    itojun 	struct in6_addrlifetime lt6_tmp;
   1051    1.2    itojun 
   1052    1.7    itojun 	auth = 0;
   1053    1.2    itojun 	if (m) {
   1054    1.2    itojun 		/*
   1055    1.2    itojun 		 * Authenticity for NA consists authentication for
   1056    1.2    itojun 		 * both IP header and IP datagrams, doesn't it ?
   1057    1.2    itojun 		 */
   1058    1.7    itojun #if defined(M_AUTHIPHDR) && defined(M_AUTHIPDGM)
   1059    1.2    itojun 		auth = (m->m_flags & M_AUTHIPHDR
   1060    1.2    itojun 		     && m->m_flags & M_AUTHIPDGM) ? 1 : 0;
   1061    1.7    itojun #endif
   1062    1.7    itojun 	}
   1063    1.2    itojun 
   1064   1.94      matt 	if ((pr = nd6_prefix_lookup(newprc)) != NULL) {
   1065   1.32    itojun 		/*
   1066   1.94      matt 		 * nd6_prefix_lookup() ensures that pr and newprc have the same
   1067   1.32    itojun 		 * prefix on a same interface.
   1068   1.32    itojun 		 */
   1069   1.32    itojun 
   1070   1.32    itojun 		/*
   1071   1.32    itojun 		 * Update prefix information.  Note that the on-link (L) bit
   1072   1.32    itojun 		 * and the autonomous (A) bit should NOT be changed from 1
   1073   1.32    itojun 		 * to 0.
   1074   1.32    itojun 		 */
   1075   1.94      matt 		if (newprc->ndprc_raf_onlink == 1)
   1076   1.32    itojun 			pr->ndpr_raf_onlink = 1;
   1077   1.94      matt 		if (newprc->ndprc_raf_auto == 1)
   1078   1.32    itojun 			pr->ndpr_raf_auto = 1;
   1079   1.94      matt 		if (newprc->ndprc_raf_onlink) {
   1080   1.94      matt 			pr->ndpr_vltime = newprc->ndprc_vltime;
   1081   1.94      matt 			pr->ndpr_pltime = newprc->ndprc_pltime;
   1082   1.56    rpaulo 			(void)in6_init_prefix_ltimes(pr); /* XXX error case? */
   1083  1.102     ozaki 			pr->ndpr_lastupdate = time_uptime;
   1084   1.32    itojun 		}
   1085   1.32    itojun 
   1086   1.94      matt 		if (newprc->ndprc_raf_onlink &&
   1087   1.32    itojun 		    (pr->ndpr_stateflags & NDPRF_ONLINK) == 0) {
   1088   1.32    itojun 			int e;
   1089   1.32    itojun 
   1090   1.32    itojun 			if ((e = nd6_prefix_onlink(pr)) != 0) {
   1091  1.107     ozaki 				nd6log(LOG_ERR,
   1092  1.107     ozaki 				    "failed to make "
   1093   1.32    itojun 				    "the prefix %s/%d on-link on %s "
   1094  1.107     ozaki 				    "(errno=%d)\n",
   1095   1.32    itojun 				    ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
   1096  1.107     ozaki 				    pr->ndpr_plen, if_name(pr->ndpr_ifp), e);
   1097   1.32    itojun 				/* proceed anyway. XXX: is it correct? */
   1098   1.32    itojun 			}
   1099   1.32    itojun 		}
   1100   1.32    itojun 
   1101   1.32    itojun 		if (dr && pfxrtr_lookup(pr, dr) == NULL)
   1102   1.32    itojun 			pfxrtr_add(pr, dr);
   1103   1.32    itojun 	} else {
   1104   1.32    itojun 		struct nd_prefix *newpr = NULL;
   1105   1.32    itojun 
   1106   1.94      matt 		if (newprc->ndprc_vltime == 0)
   1107    1.2    itojun 			goto end;
   1108   1.94      matt 		if (newprc->ndprc_raf_onlink == 0 && newprc->ndprc_raf_auto == 0)
   1109   1.32    itojun 			goto end;
   1110   1.32    itojun 
   1111   1.81       spz 		if (ip6_rtadv_maxroutes <= nd6_numroutes) {
   1112   1.81       spz 			ICMP6_STATINC(ICMP6_STAT_DROPPED_RAROUTE);
   1113   1.81       spz 			goto end;
   1114   1.81       spz 		}
   1115   1.81       spz 
   1116   1.94      matt 		error = nd6_prelist_add(newprc, dr, &newpr);
   1117   1.32    itojun 		if (error != 0 || newpr == NULL) {
   1118  1.107     ozaki 			nd6log(LOG_NOTICE,
   1119  1.107     ozaki 			    "nd6_prelist_add failed for %s/%d on %s "
   1120  1.107     ozaki 			    "errno=%d, returnpr=%p\n",
   1121   1.94      matt 			    ip6_sprintf(&newprc->ndprc_prefix.sin6_addr),
   1122   1.94      matt 			    newprc->ndprc_plen, if_name(newprc->ndprc_ifp),
   1123  1.107     ozaki 			    error, newpr);
   1124   1.32    itojun 			goto end; /* we should just give up in this case. */
   1125    1.2    itojun 		}
   1126    1.2    itojun 
   1127    1.2    itojun 		/*
   1128   1.32    itojun 		 * XXX: from the ND point of view, we can ignore a prefix
   1129   1.32    itojun 		 * with the on-link bit being zero.  However, we need a
   1130   1.32    itojun 		 * prefix structure for references from autoconfigured
   1131   1.32    itojun 		 * addresses.  Thus, we explicitly make sure that the prefix
   1132   1.32    itojun 		 * itself expires now.
   1133    1.2    itojun 		 */
   1134   1.32    itojun 		if (newpr->ndpr_raf_onlink == 0) {
   1135   1.32    itojun 			newpr->ndpr_vltime = 0;
   1136   1.32    itojun 			newpr->ndpr_pltime = 0;
   1137   1.32    itojun 			in6_init_prefix_ltimes(newpr);
   1138   1.32    itojun 		}
   1139    1.2    itojun 
   1140   1.32    itojun 		pr = newpr;
   1141   1.32    itojun 	}
   1142   1.32    itojun 
   1143   1.32    itojun 	/*
   1144   1.32    itojun 	 * Address autoconfiguration based on Section 5.5.3 of RFC 2462.
   1145   1.32    itojun 	 * Note that pr must be non NULL at this point.
   1146   1.32    itojun 	 */
   1147   1.32    itojun 
   1148   1.32    itojun 	/* 5.5.3 (a). Ignore the prefix without the A bit set. */
   1149   1.94      matt 	if (!newprc->ndprc_raf_auto)
   1150   1.32    itojun 		goto end;
   1151    1.2    itojun 
   1152   1.32    itojun 	/*
   1153   1.32    itojun 	 * 5.5.3 (b). the link-local prefix should have been ignored in
   1154   1.32    itojun 	 * nd6_ra_input.
   1155   1.32    itojun 	 */
   1156    1.2    itojun 
   1157   1.56    rpaulo 	/* 5.5.3 (c). Consistency check on lifetimes: pltime <= vltime. */
   1158   1.94      matt 	if (newprc->ndprc_pltime > newprc->ndprc_vltime) {
   1159   1.56    rpaulo 		error = EINVAL;	/* XXX: won't be used */
   1160   1.56    rpaulo 		goto end;
   1161   1.56    rpaulo 	}
   1162    1.2    itojun 
   1163   1.32    itojun 	/*
   1164   1.56    rpaulo 	 * 5.5.3 (d).  If the prefix advertised is not equal to the prefix of
   1165   1.56    rpaulo 	 * an address configured by stateless autoconfiguration already in the
   1166   1.56    rpaulo 	 * list of addresses associated with the interface, and the Valid
   1167   1.56    rpaulo 	 * Lifetime is not 0, form an address.  We first check if we have
   1168   1.56    rpaulo 	 * a matching prefix.
   1169   1.56    rpaulo 	 * Note: we apply a clarification in rfc2462bis-02 here.  We only
   1170   1.56    rpaulo 	 * consider autoconfigured addresses while RFC2462 simply said
   1171   1.56    rpaulo 	 * "address".
   1172   1.32    itojun 	 */
   1173   1.70    dyoung 	IFADDR_FOREACH(ifa, ifp) {
   1174   1.32    itojun 		struct in6_ifaddr *ifa6;
   1175   1.56    rpaulo 		u_int32_t remaininglifetime;
   1176    1.2    itojun 
   1177   1.32    itojun 		if (ifa->ifa_addr->sa_family != AF_INET6)
   1178   1.32    itojun 			continue;
   1179    1.2    itojun 
   1180   1.32    itojun 		ifa6 = (struct in6_ifaddr *)ifa;
   1181    1.2    itojun 
   1182   1.32    itojun 		/*
   1183   1.56    rpaulo 		 * We only consider autoconfigured addresses as per rfc2462bis.
   1184   1.56    rpaulo 		 */
   1185   1.56    rpaulo 		if (!(ifa6->ia6_flags & IN6_IFF_AUTOCONF))
   1186   1.56    rpaulo 			continue;
   1187   1.56    rpaulo 
   1188   1.56    rpaulo 		/*
   1189   1.32    itojun 		 * Spec is not clear here, but I believe we should concentrate
   1190   1.32    itojun 		 * on unicast (i.e. not anycast) addresses.
   1191   1.32    itojun 		 * XXX: other ia6_flags? detached or duplicated?
   1192   1.32    itojun 		 */
   1193   1.32    itojun 		if ((ifa6->ia6_flags & IN6_IFF_ANYCAST) != 0)
   1194   1.32    itojun 			continue;
   1195   1.33    itojun 
   1196   1.56    rpaulo 		/*
   1197   1.56    rpaulo 		 * Ignore the address if it is not associated with a prefix
   1198   1.56    rpaulo 		 * or is associated with a prefix that is different from this
   1199   1.56    rpaulo 		 * one.  (pr is never NULL here)
   1200   1.56    rpaulo 		 */
   1201   1.56    rpaulo 		if (ifa6->ia6_ndpr != pr)
   1202   1.32    itojun 			continue;
   1203    1.7    itojun 
   1204   1.32    itojun 		if (ia6_match == NULL) /* remember the first one */
   1205   1.32    itojun 			ia6_match = ifa6;
   1206    1.2    itojun 
   1207   1.32    itojun 		/*
   1208   1.32    itojun 		 * An already autoconfigured address matched.  Now that we
   1209   1.32    itojun 		 * are sure there is at least one matched address, we can
   1210   1.32    itojun 		 * proceed to 5.5.3. (e): update the lifetimes according to the
   1211   1.32    itojun 		 * "two hours" rule and the privacy extension.
   1212   1.56    rpaulo 		 * We apply some clarifications in rfc2462bis:
   1213   1.56    rpaulo 		 * - use remaininglifetime instead of storedlifetime as a
   1214   1.56    rpaulo 		 *   variable name
   1215   1.56    rpaulo 		 * - remove the dead code in the "two-hour" rule
   1216   1.32    itojun 		 */
   1217   1.32    itojun #define TWOHOUR		(120*60)
   1218   1.32    itojun 		lt6_tmp = ifa6->ia6_lifetime;
   1219   1.32    itojun 		if (lt6_tmp.ia6t_vltime == ND6_INFINITE_LIFETIME)
   1220   1.56    rpaulo 			remaininglifetime = ND6_INFINITE_LIFETIME;
   1221  1.102     ozaki 		else if (time_uptime - ifa6->ia6_updatetime >
   1222   1.32    itojun 			 lt6_tmp.ia6t_vltime) {
   1223   1.32    itojun 			/*
   1224   1.32    itojun 			 * The case of "invalid" address.  We should usually
   1225   1.32    itojun 			 * not see this case.
   1226   1.32    itojun 			 */
   1227   1.56    rpaulo 			remaininglifetime = 0;
   1228   1.32    itojun 		} else
   1229   1.56    rpaulo 			remaininglifetime = lt6_tmp.ia6t_vltime -
   1230  1.102     ozaki 			    (time_uptime - ifa6->ia6_updatetime);
   1231   1.56    rpaulo 
   1232   1.56    rpaulo 		/* when not updating, keep the current stored lifetime. */
   1233   1.56    rpaulo 		lt6_tmp.ia6t_vltime = remaininglifetime;
   1234   1.56    rpaulo 
   1235   1.94      matt 		if (TWOHOUR < newprc->ndprc_vltime ||
   1236   1.94      matt 		    remaininglifetime < newprc->ndprc_vltime) {
   1237   1.94      matt 			lt6_tmp.ia6t_vltime = newprc->ndprc_vltime;
   1238   1.56    rpaulo 		} else if (remaininglifetime <= TWOHOUR) {
   1239   1.56    rpaulo 			if (auth)
   1240   1.94      matt 				lt6_tmp.ia6t_vltime = newprc->ndprc_vltime;
   1241   1.32    itojun 		} else {
   1242   1.32    itojun 			/*
   1243   1.94      matt 			 * newprc->ndprc_vltime <= TWOHOUR &&
   1244   1.56    rpaulo 			 * TWOHOUR < remaininglifetime
   1245   1.32    itojun 			 */
   1246   1.32    itojun 			lt6_tmp.ia6t_vltime = TWOHOUR;
   1247    1.2    itojun 		}
   1248    1.2    itojun 
   1249   1.32    itojun 		/* The 2 hour rule is not imposed for preferred lifetime. */
   1250   1.94      matt 		lt6_tmp.ia6t_pltime = newprc->ndprc_pltime;
   1251    1.2    itojun 
   1252   1.32    itojun 		in6_init_address_ltimes(pr, &lt6_tmp);
   1253    1.2    itojun 
   1254   1.56    rpaulo 		/*
   1255   1.56    rpaulo 		 * We need to treat lifetimes for temporary addresses
   1256   1.56    rpaulo 		 * differently, according to
   1257   1.56    rpaulo 		 * draft-ietf-ipv6-privacy-addrs-v2-01.txt 3.3 (1);
   1258   1.56    rpaulo 		 * we only update the lifetimes when they are in the maximum
   1259   1.56    rpaulo 		 * intervals.
   1260   1.56    rpaulo 		 */
   1261   1.56    rpaulo 		if ((ifa6->ia6_flags & IN6_IFF_TEMPORARY) != 0) {
   1262   1.56    rpaulo 			u_int32_t maxvltime, maxpltime;
   1263   1.56    rpaulo 
   1264   1.56    rpaulo 			if (ip6_temp_valid_lifetime >
   1265  1.102     ozaki 			    (u_int32_t)((time_uptime - ifa6->ia6_createtime) +
   1266   1.56    rpaulo 			    ip6_desync_factor)) {
   1267   1.56    rpaulo 				maxvltime = ip6_temp_valid_lifetime -
   1268  1.102     ozaki 				    (time_uptime - ifa6->ia6_createtime) -
   1269   1.56    rpaulo 				    ip6_desync_factor;
   1270   1.56    rpaulo 			} else
   1271   1.56    rpaulo 				maxvltime = 0;
   1272   1.56    rpaulo 			if (ip6_temp_preferred_lifetime >
   1273  1.102     ozaki 			    (u_int32_t)((time_uptime - ifa6->ia6_createtime) +
   1274   1.56    rpaulo 			    ip6_desync_factor)) {
   1275   1.56    rpaulo 				maxpltime = ip6_temp_preferred_lifetime -
   1276  1.102     ozaki 				    (time_uptime - ifa6->ia6_createtime) -
   1277   1.56    rpaulo 				    ip6_desync_factor;
   1278   1.56    rpaulo 			} else
   1279   1.56    rpaulo 				maxpltime = 0;
   1280   1.56    rpaulo 
   1281   1.56    rpaulo 			if (lt6_tmp.ia6t_vltime == ND6_INFINITE_LIFETIME ||
   1282   1.56    rpaulo 			    lt6_tmp.ia6t_vltime > maxvltime) {
   1283   1.56    rpaulo 				lt6_tmp.ia6t_vltime = maxvltime;
   1284   1.56    rpaulo 			}
   1285   1.56    rpaulo 			if (lt6_tmp.ia6t_pltime == ND6_INFINITE_LIFETIME ||
   1286   1.56    rpaulo 			    lt6_tmp.ia6t_pltime > maxpltime) {
   1287   1.56    rpaulo 				lt6_tmp.ia6t_pltime = maxpltime;
   1288   1.56    rpaulo 			}
   1289   1.56    rpaulo 		}
   1290   1.56    rpaulo 
   1291   1.32    itojun 		ifa6->ia6_lifetime = lt6_tmp;
   1292  1.102     ozaki 		ifa6->ia6_updatetime = time_uptime;
   1293   1.32    itojun 	}
   1294   1.94      matt 	if (ia6_match == NULL && newprc->ndprc_vltime) {
   1295   1.56    rpaulo 		int ifidlen;
   1296   1.56    rpaulo 
   1297    1.2    itojun 		/*
   1298   1.56    rpaulo 		 * 5.5.3 (d) (continued)
   1299   1.32    itojun 		 * No address matched and the valid lifetime is non-zero.
   1300   1.32    itojun 		 * Create a new address.
   1301    1.2    itojun 		 */
   1302   1.56    rpaulo 
   1303   1.56    rpaulo 		/*
   1304   1.56    rpaulo 		 * Prefix Length check:
   1305   1.56    rpaulo 		 * If the sum of the prefix length and interface identifier
   1306   1.56    rpaulo 		 * length does not equal 128 bits, the Prefix Information
   1307   1.56    rpaulo 		 * option MUST be ignored.  The length of the interface
   1308   1.56    rpaulo 		 * identifier is defined in a separate link-type specific
   1309   1.56    rpaulo 		 * document.
   1310   1.56    rpaulo 		 */
   1311   1.56    rpaulo 		ifidlen = in6_if2idlen(ifp);
   1312   1.56    rpaulo 		if (ifidlen < 0) {
   1313   1.56    rpaulo 			/* this should not happen, so we always log it. */
   1314  1.106     ozaki 			log(LOG_ERR, "%s: IFID undefined (%s)\n",
   1315  1.106     ozaki 			    __func__, if_name(ifp));
   1316   1.56    rpaulo 			goto end;
   1317   1.56    rpaulo 		}
   1318   1.56    rpaulo 		if (ifidlen + pr->ndpr_plen != 128) {
   1319  1.107     ozaki 			nd6log(LOG_INFO,
   1320  1.107     ozaki 			    "invalid prefixlen %d for %s, ignored\n",
   1321  1.107     ozaki 			    pr->ndpr_plen, if_name(ifp));
   1322   1.56    rpaulo 			goto end;
   1323   1.56    rpaulo 		}
   1324   1.56    rpaulo 
   1325   1.94      matt 		if ((ia6 = in6_ifadd(newprc, mcast)) != NULL) {
   1326   1.32    itojun 			/*
   1327   1.94      matt 			 * note that we should use pr (not newprc) for reference.
   1328   1.32    itojun 			 */
   1329   1.32    itojun 			pr->ndpr_refcnt++;
   1330   1.32    itojun 			ia6->ia6_ndpr = pr;
   1331    1.2    itojun 
   1332   1.32    itojun 			/*
   1333   1.56    rpaulo 			 * draft-ietf-ipngwg-temp-addresses-v2-00 3.3 (2).
   1334   1.56    rpaulo 			 * When a new public address is created as described
   1335   1.56    rpaulo 			 * in RFC2462, also create a new temporary address.
   1336   1.56    rpaulo 			 *
   1337   1.56    rpaulo 			 * draft-ietf-ipngwg-temp-addresses-v2-00 3.5.
   1338   1.56    rpaulo 			 * When an interface connects to a new link, a new
   1339   1.56    rpaulo 			 * randomized interface identifier should be generated
   1340   1.56    rpaulo 			 * immediately together with a new set of temporary
   1341   1.56    rpaulo 			 * addresses.  Thus, we specifiy 1 as the 2nd arg of
   1342   1.56    rpaulo 			 * in6_tmpifadd().
   1343   1.56    rpaulo 			 */
   1344   1.56    rpaulo 			if (ip6_use_tempaddr) {
   1345   1.56    rpaulo 				int e;
   1346   1.56    rpaulo 				if ((e = in6_tmpifadd(ia6, 1, 1)) != 0) {
   1347  1.107     ozaki 					nd6log(LOG_NOTICE,
   1348  1.107     ozaki 					    "failed to create a temporary "
   1349  1.107     ozaki 					    "address, errno=%d\n", e);
   1350   1.56    rpaulo 				}
   1351   1.56    rpaulo 			}
   1352   1.56    rpaulo 
   1353   1.56    rpaulo 			/*
   1354   1.32    itojun 			 * A newly added address might affect the status
   1355   1.32    itojun 			 * of other addresses, so we check and update it.
   1356   1.32    itojun 			 * XXX: what if address duplication happens?
   1357   1.32    itojun 			 */
   1358   1.32    itojun 			pfxlist_onlink_check();
   1359   1.32    itojun 		} else {
   1360   1.32    itojun 			/* just set an error. do not bark here. */
   1361   1.32    itojun 			error = EADDRNOTAVAIL; /* XXX: might be unused. */
   1362   1.32    itojun 		}
   1363    1.2    itojun 	}
   1364    1.2    itojun 
   1365    1.2    itojun  end:
   1366    1.2    itojun 	splx(s);
   1367    1.2    itojun 	return error;
   1368    1.2    itojun }
   1369    1.2    itojun 
   1370    1.2    itojun /*
   1371    1.7    itojun  * A supplement function used in the on-link detection below;
   1372    1.7    itojun  * detect if a given prefix has a (probably) reachable advertising router.
   1373    1.7    itojun  * XXX: lengthy function name...
   1374    1.7    itojun  */
   1375    1.7    itojun static struct nd_pfxrouter *
   1376   1.64  christos find_pfxlist_reachable_router(struct nd_prefix *pr)
   1377    1.7    itojun {
   1378    1.7    itojun 	struct nd_pfxrouter *pfxrtr;
   1379    1.7    itojun 
   1380    1.7    itojun 	for (pfxrtr = LIST_FIRST(&pr->ndpr_advrtrs); pfxrtr;
   1381    1.7    itojun 	     pfxrtr = LIST_NEXT(pfxrtr, pfr_entry)) {
   1382   1.89       roy 		if (pfxrtr->router->ifp->if_flags & IFF_UP &&
   1383   1.89       roy 		    pfxrtr->router->ifp->if_link_state != LINK_STATE_DOWN &&
   1384  1.101     ozaki 		    nd6_is_llinfo_probreach(pfxrtr->router))
   1385    1.7    itojun 			break;	/* found */
   1386    1.7    itojun 	}
   1387    1.7    itojun 
   1388   1.36    itojun 	return (pfxrtr);
   1389    1.7    itojun }
   1390    1.7    itojun 
   1391    1.7    itojun /*
   1392    1.2    itojun  * Check if each prefix in the prefix list has at least one available router
   1393   1.25    itojun  * that advertised the prefix (a router is "available" if its neighbor cache
   1394   1.25    itojun  * entry is reachable or probably reachable).
   1395    1.7    itojun  * If the check fails, the prefix may be off-link, because, for example,
   1396    1.2    itojun  * we have moved from the network but the lifetime of the prefix has not
   1397   1.25    itojun  * expired yet.  So we should not use the prefix if there is another prefix
   1398   1.25    itojun  * that has an available router.
   1399   1.25    itojun  * But, if there is no prefix that has an available router, we still regards
   1400   1.25    itojun  * all the prefixes as on-link.  This is because we can't tell if all the
   1401    1.2    itojun  * routers are simply dead or if we really moved from the network and there
   1402    1.2    itojun  * is no router around us.
   1403    1.2    itojun  */
   1404    1.7    itojun void
   1405   1.73      matt pfxlist_onlink_check(void)
   1406    1.2    itojun {
   1407    1.2    itojun 	struct nd_prefix *pr;
   1408   1.32    itojun 	struct in6_ifaddr *ifa;
   1409   1.56    rpaulo 	struct nd_defrouter *dr;
   1410   1.56    rpaulo 	struct nd_pfxrouter *pfxrtr = NULL;
   1411    1.2    itojun 
   1412    1.7    itojun 	/*
   1413    1.7    itojun 	 * Check if there is a prefix that has a reachable advertising
   1414    1.7    itojun 	 * router.
   1415    1.7    itojun 	 */
   1416   1.62    dyoung 	LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
   1417   1.32    itojun 		if (pr->ndpr_raf_onlink && find_pfxlist_reachable_router(pr))
   1418    1.2    itojun 			break;
   1419    1.7    itojun 	}
   1420   1.56    rpaulo 	/*
   1421   1.56    rpaulo 	 * If we have no such prefix, check whether we still have a router
   1422   1.56    rpaulo 	 * that does not advertise any prefixes.
   1423   1.56    rpaulo 	 */
   1424   1.56    rpaulo 	if (pr == NULL) {
   1425   1.62    dyoung 		TAILQ_FOREACH(dr, &nd_defrouter, dr_entry) {
   1426   1.56    rpaulo 			struct nd_prefix *pr0;
   1427   1.56    rpaulo 
   1428   1.62    dyoung 			LIST_FOREACH(pr0, &nd_prefix, ndpr_entry) {
   1429   1.56    rpaulo 				if ((pfxrtr = pfxrtr_lookup(pr0, dr)) != NULL)
   1430   1.56    rpaulo 					break;
   1431   1.56    rpaulo 			}
   1432   1.56    rpaulo 			if (pfxrtr)
   1433   1.56    rpaulo 				break;
   1434   1.56    rpaulo 		}
   1435   1.56    rpaulo 	}
   1436   1.56    rpaulo 	if (pr != NULL || (TAILQ_FIRST(&nd_defrouter) && !pfxrtr)) {
   1437    1.2    itojun 		/*
   1438   1.32    itojun 		 * There is at least one prefix that has a reachable router,
   1439   1.32    itojun 		 * or at least a router which probably does not advertise
   1440   1.32    itojun 		 * any prefixes.  The latter would be the case when we move
   1441   1.32    itojun 		 * to a new link where we have a router that does not provide
   1442   1.32    itojun 		 * prefixes and we configure an address by hand.
   1443   1.32    itojun 		 * Detach prefixes which have no reachable advertising
   1444   1.32    itojun 		 * router, and attach other prefixes.
   1445    1.2    itojun 		 */
   1446   1.62    dyoung 		LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
   1447   1.32    itojun 			/* XXX: a link-local prefix should never be detached */
   1448   1.32    itojun 			if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr))
   1449   1.32    itojun 				continue;
   1450   1.32    itojun 
   1451   1.32    itojun 			/*
   1452   1.32    itojun 			 * we aren't interested in prefixes without the L bit
   1453   1.32    itojun 			 * set.
   1454   1.32    itojun 			 */
   1455   1.32    itojun 			if (pr->ndpr_raf_onlink == 0)
   1456   1.32    itojun 				continue;
   1457   1.32    itojun 
   1458   1.32    itojun 			if ((pr->ndpr_stateflags & NDPRF_DETACHED) == 0 &&
   1459   1.32    itojun 			    find_pfxlist_reachable_router(pr) == NULL)
   1460   1.32    itojun 				pr->ndpr_stateflags |= NDPRF_DETACHED;
   1461   1.32    itojun 			if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0 &&
   1462   1.32    itojun 			    find_pfxlist_reachable_router(pr) != 0)
   1463   1.32    itojun 				pr->ndpr_stateflags &= ~NDPRF_DETACHED;
   1464   1.32    itojun 		}
   1465   1.32    itojun 	} else {
   1466   1.32    itojun 		/* there is no prefix that has a reachable router */
   1467   1.62    dyoung 		LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
   1468   1.32    itojun 			if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr))
   1469   1.32    itojun 				continue;
   1470   1.32    itojun 
   1471   1.32    itojun 			if (pr->ndpr_raf_onlink == 0)
   1472   1.32    itojun 				continue;
   1473   1.32    itojun 
   1474   1.32    itojun 			if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0)
   1475   1.32    itojun 				pr->ndpr_stateflags &= ~NDPRF_DETACHED;
   1476   1.32    itojun 		}
   1477   1.32    itojun 	}
   1478   1.32    itojun 
   1479   1.32    itojun 	/*
   1480   1.32    itojun 	 * Remove each interface route associated with a (just) detached
   1481   1.32    itojun 	 * prefix, and reinstall the interface route for a (just) attached
   1482   1.32    itojun 	 * prefix.  Note that all attempt of reinstallation does not
   1483   1.32    itojun 	 * necessarily success, when a same prefix is shared among multiple
   1484   1.32    itojun 	 * interfaces.  Such cases will be handled in nd6_prefix_onlink,
   1485   1.32    itojun 	 * so we don't have to care about them.
   1486   1.32    itojun 	 */
   1487   1.62    dyoung 	LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
   1488   1.32    itojun 		int e;
   1489   1.32    itojun 
   1490   1.32    itojun 		if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr))
   1491   1.32    itojun 			continue;
   1492   1.32    itojun 
   1493   1.32    itojun 		if (pr->ndpr_raf_onlink == 0)
   1494   1.32    itojun 			continue;
   1495   1.32    itojun 
   1496   1.32    itojun 		if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0 &&
   1497   1.32    itojun 		    (pr->ndpr_stateflags & NDPRF_ONLINK) != 0) {
   1498   1.32    itojun 			if ((e = nd6_prefix_offlink(pr)) != 0) {
   1499  1.107     ozaki 				nd6log(LOG_ERR,
   1500  1.107     ozaki 				    "failed to make %s/%d offlink, errno=%d\n",
   1501   1.32    itojun 				    ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
   1502  1.107     ozaki 				    pr->ndpr_plen, e);
   1503    1.2    itojun 			}
   1504    1.2    itojun 		}
   1505   1.32    itojun 		if ((pr->ndpr_stateflags & NDPRF_DETACHED) == 0 &&
   1506   1.32    itojun 		    (pr->ndpr_stateflags & NDPRF_ONLINK) == 0 &&
   1507   1.32    itojun 		    pr->ndpr_raf_onlink) {
   1508   1.32    itojun 			if ((e = nd6_prefix_onlink(pr)) != 0) {
   1509  1.107     ozaki 				nd6log(LOG_ERR,
   1510  1.107     ozaki 				    "failed to make %s/%d onlink, errno=%d\n",
   1511   1.32    itojun 				    ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
   1512  1.107     ozaki 				    pr->ndpr_plen, e);
   1513   1.32    itojun 			}
   1514   1.32    itojun 		}
   1515   1.32    itojun 	}
   1516   1.32    itojun 
   1517   1.32    itojun 	/*
   1518   1.32    itojun 	 * Changes on the prefix status might affect address status as well.
   1519   1.32    itojun 	 * Make sure that all addresses derived from an attached prefix are
   1520   1.32    itojun 	 * attached, and that all addresses derived from a detached prefix are
   1521   1.32    itojun 	 * detached.  Note, however, that a manually configured address should
   1522   1.32    itojun 	 * always be attached.
   1523   1.32    itojun 	 * The precise detection logic is same as the one for prefixes.
   1524   1.32    itojun 	 */
   1525   1.32    itojun 	for (ifa = in6_ifaddr; ifa; ifa = ifa->ia_next) {
   1526   1.32    itojun 		if (!(ifa->ia6_flags & IN6_IFF_AUTOCONF))
   1527   1.32    itojun 			continue;
   1528   1.32    itojun 
   1529   1.32    itojun 		if (ifa->ia6_ndpr == NULL) {
   1530   1.32    itojun 			/*
   1531   1.32    itojun 			 * This can happen when we first configure the address
   1532   1.32    itojun 			 * (i.e. the address exists, but the prefix does not).
   1533   1.32    itojun 			 * XXX: complicated relationships...
   1534   1.32    itojun 			 */
   1535   1.32    itojun 			continue;
   1536   1.32    itojun 		}
   1537   1.32    itojun 
   1538   1.32    itojun 		if (find_pfxlist_reachable_router(ifa->ia6_ndpr))
   1539   1.32    itojun 			break;
   1540   1.32    itojun 	}
   1541   1.32    itojun 	if (ifa) {
   1542   1.32    itojun 		for (ifa = in6_ifaddr; ifa; ifa = ifa->ia_next) {
   1543   1.32    itojun 			if ((ifa->ia6_flags & IN6_IFF_AUTOCONF) == 0)
   1544   1.32    itojun 				continue;
   1545   1.32    itojun 
   1546   1.32    itojun 			if (ifa->ia6_ndpr == NULL) /* XXX: see above. */
   1547   1.32    itojun 				continue;
   1548   1.32    itojun 
   1549   1.56    rpaulo 			if (find_pfxlist_reachable_router(ifa->ia6_ndpr)) {
   1550   1.56    rpaulo 				if (ifa->ia6_flags & IN6_IFF_DETACHED) {
   1551   1.56    rpaulo 					ifa->ia6_flags &= ~IN6_IFF_DETACHED;
   1552   1.56    rpaulo 					ifa->ia6_flags |= IN6_IFF_TENTATIVE;
   1553   1.56    rpaulo 					nd6_dad_start((struct ifaddr *)ifa,
   1554   1.56    rpaulo 					    0);
   1555   1.87       roy 					/* We will notify the routing socket
   1556   1.87       roy 					 * of the DAD result, so no need to
   1557   1.87       roy 					 * here */
   1558   1.56    rpaulo 				}
   1559   1.56    rpaulo 			} else {
   1560   1.56    rpaulo 				if ((ifa->ia6_flags & IN6_IFF_DETACHED) == 0) {
   1561   1.56    rpaulo 					ifa->ia6_flags |= IN6_IFF_DETACHED;
   1562   1.97       roy 					rt_newaddrmsg(RTM_NEWADDR,
   1563   1.97       roy 					    (struct ifaddr *)ifa, 0, NULL);
   1564   1.56    rpaulo 				}
   1565   1.56    rpaulo 			}
   1566    1.2    itojun 		}
   1567    1.2    itojun 	}
   1568    1.2    itojun 	else {
   1569   1.32    itojun 		for (ifa = in6_ifaddr; ifa; ifa = ifa->ia_next) {
   1570   1.32    itojun 			if ((ifa->ia6_flags & IN6_IFF_AUTOCONF) == 0)
   1571   1.32    itojun 				continue;
   1572   1.32    itojun 
   1573   1.56    rpaulo 			if (ifa->ia6_flags & IN6_IFF_DETACHED) {
   1574   1.56    rpaulo 				ifa->ia6_flags &= ~IN6_IFF_DETACHED;
   1575   1.56    rpaulo 				ifa->ia6_flags |= IN6_IFF_TENTATIVE;
   1576   1.56    rpaulo 				/* Do we need a delay in this case? */
   1577   1.56    rpaulo 				nd6_dad_start((struct ifaddr *)ifa, 0);
   1578   1.56    rpaulo 			}
   1579   1.32    itojun 		}
   1580    1.2    itojun 	}
   1581    1.2    itojun }
   1582    1.2    itojun 
   1583   1.32    itojun int
   1584   1.64  christos nd6_prefix_onlink(struct nd_prefix *pr)
   1585    1.2    itojun {
   1586   1.32    itojun 	struct ifaddr *ifa;
   1587   1.32    itojun 	struct ifnet *ifp = pr->ndpr_ifp;
   1588   1.32    itojun 	struct sockaddr_in6 mask6;
   1589   1.32    itojun 	struct nd_prefix *opr;
   1590   1.32    itojun 	u_long rtflags;
   1591   1.32    itojun 	int error = 0;
   1592   1.32    itojun 
   1593   1.32    itojun 	/* sanity check */
   1594   1.32    itojun 	if ((pr->ndpr_stateflags & NDPRF_ONLINK) != 0) {
   1595  1.107     ozaki 		nd6log(LOG_ERR, "%s/%d is already on-link\n",
   1596  1.107     ozaki 		    ip6_sprintf(&pr->ndpr_prefix.sin6_addr), pr->ndpr_plen);
   1597   1.51    itojun 		return (EEXIST);
   1598   1.32    itojun 	}
   1599   1.32    itojun 
   1600   1.32    itojun 	/*
   1601   1.32    itojun 	 * Add the interface route associated with the prefix.  Before
   1602   1.32    itojun 	 * installing the route, check if there's the same prefix on another
   1603   1.32    itojun 	 * interface, and the prefix has already installed the interface route.
   1604   1.32    itojun 	 * Although such a configuration is expected to be rare, we explicitly
   1605   1.32    itojun 	 * allow it.
   1606   1.32    itojun 	 */
   1607   1.62    dyoung 	LIST_FOREACH(opr, &nd_prefix, ndpr_entry) {
   1608   1.32    itojun 		if (opr == pr)
   1609   1.32    itojun 			continue;
   1610   1.32    itojun 
   1611   1.32    itojun 		if ((opr->ndpr_stateflags & NDPRF_ONLINK) == 0)
   1612   1.32    itojun 			continue;
   1613   1.32    itojun 
   1614   1.32    itojun 		if (opr->ndpr_plen == pr->ndpr_plen &&
   1615   1.32    itojun 		    in6_are_prefix_equal(&pr->ndpr_prefix.sin6_addr,
   1616   1.32    itojun 		    &opr->ndpr_prefix.sin6_addr, pr->ndpr_plen))
   1617   1.36    itojun 			return (0);
   1618   1.32    itojun 	}
   1619   1.32    itojun 
   1620   1.32    itojun 	/*
   1621   1.32    itojun 	 * We prefer link-local addresses as the associated interface address.
   1622   1.32    itojun 	 */
   1623   1.32    itojun 	/* search for a link-local addr */
   1624   1.32    itojun 	ifa = (struct ifaddr *)in6ifa_ifpforlinklocal(ifp,
   1625   1.32    itojun 	    IN6_IFF_NOTREADY | IN6_IFF_ANYCAST);
   1626   1.32    itojun 	if (ifa == NULL) {
   1627   1.32    itojun 		/* XXX: freebsd does not have ifa_ifwithaf */
   1628   1.70    dyoung 		IFADDR_FOREACH(ifa, ifp) {
   1629   1.32    itojun 			if (ifa->ifa_addr->sa_family == AF_INET6)
   1630   1.32    itojun 				break;
   1631   1.32    itojun 		}
   1632   1.32    itojun 		/* should we care about ia6_flags? */
   1633   1.32    itojun 	}
   1634   1.32    itojun 	if (ifa == NULL) {
   1635   1.32    itojun 		/*
   1636   1.32    itojun 		 * This can still happen, when, for example, we receive an RA
   1637   1.32    itojun 		 * containing a prefix with the L bit set and the A bit clear,
   1638   1.32    itojun 		 * after removing all IPv6 addresses on the receiving
   1639   1.32    itojun 		 * interface.  This should, of course, be rare though.
   1640   1.32    itojun 		 */
   1641  1.107     ozaki 		nd6log(LOG_NOTICE, "failed to find any ifaddr"
   1642   1.32    itojun 		    " to add route for a prefix(%s/%d) on %s\n",
   1643   1.32    itojun 		    ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
   1644  1.107     ozaki 		    pr->ndpr_plen, if_name(ifp));
   1645   1.36    itojun 		return (0);
   1646   1.32    itojun 	}
   1647    1.2    itojun 
   1648    1.2    itojun 	/*
   1649   1.32    itojun 	 * in6_ifinit() sets nd6_rtrequest to ifa_rtrequest for all ifaddrs.
   1650   1.32    itojun 	 * ifa->ifa_rtrequest = nd6_rtrequest;
   1651    1.2    itojun 	 */
   1652   1.78    cegger 	memset(&mask6, 0, sizeof(mask6));
   1653   1.85     joerg 	mask6.sin6_family = AF_INET6;
   1654   1.32    itojun 	mask6.sin6_len = sizeof(mask6);
   1655   1.32    itojun 	mask6.sin6_addr = pr->ndpr_mask;
   1656   1.32    itojun 	/* rtrequest() will probably set RTF_UP, but we're not sure. */
   1657   1.32    itojun 	rtflags = ifa->ifa_flags | RTF_UP;
   1658   1.32    itojun 	if (nd6_need_cache(ifp)) {
   1659   1.32    itojun 		/* explicitly set in case ifa_flags does not set the flag. */
   1660  1.108     ozaki 		rtflags |= RTF_CONNECTED;
   1661   1.32    itojun 	} else {
   1662   1.32    itojun 		/*
   1663   1.32    itojun 		 * explicitly clear the cloning bit in case ifa_flags sets it.
   1664   1.32    itojun 		 */
   1665  1.108     ozaki 		rtflags &= ~RTF_CONNECTED;
   1666   1.32    itojun 	}
   1667  1.101     ozaki 	error = rtrequest_newmsg(RTM_ADD, (struct sockaddr *)&pr->ndpr_prefix,
   1668  1.101     ozaki 	    ifa->ifa_addr, (struct sockaddr *)&mask6, rtflags);
   1669   1.32    itojun 	if (error == 0) {
   1670  1.101     ozaki 		nd6_numroutes++;
   1671   1.32    itojun 		pr->ndpr_stateflags |= NDPRF_ONLINK;
   1672   1.32    itojun 	} else {
   1673  1.107     ozaki 		nd6log(LOG_ERR, "failed to add route for a"
   1674   1.32    itojun 		    " prefix (%s/%d) on %s, gw=%s, mask=%s, flags=%lx "
   1675   1.32    itojun 		    "errno = %d\n",
   1676   1.32    itojun 		    ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
   1677   1.32    itojun 		    pr->ndpr_plen, if_name(ifp),
   1678   1.32    itojun 		    ip6_sprintf(&((struct sockaddr_in6 *)ifa->ifa_addr)->sin6_addr),
   1679  1.107     ozaki 		    ip6_sprintf(&mask6.sin6_addr), rtflags, error);
   1680   1.32    itojun 	}
   1681   1.32    itojun 
   1682   1.36    itojun 	return (error);
   1683   1.32    itojun }
   1684   1.32    itojun 
   1685   1.32    itojun int
   1686   1.64  christos nd6_prefix_offlink(struct nd_prefix *pr)
   1687   1.32    itojun {
   1688   1.32    itojun 	int error = 0;
   1689   1.32    itojun 	struct ifnet *ifp = pr->ndpr_ifp;
   1690   1.32    itojun 	struct nd_prefix *opr;
   1691   1.32    itojun 	struct sockaddr_in6 sa6, mask6;
   1692   1.32    itojun 
   1693   1.32    itojun 	/* sanity check */
   1694   1.32    itojun 	if ((pr->ndpr_stateflags & NDPRF_ONLINK) == 0) {
   1695  1.107     ozaki 		nd6log(LOG_ERR, "%s/%d is already off-link\n",
   1696  1.107     ozaki 		    ip6_sprintf(&pr->ndpr_prefix.sin6_addr), pr->ndpr_plen);
   1697   1.36    itojun 		return (EEXIST);
   1698   1.32    itojun 	}
   1699   1.32    itojun 
   1700   1.69    dyoung 	sockaddr_in6_init(&sa6, &pr->ndpr_prefix.sin6_addr, 0, 0, 0);
   1701   1.69    dyoung 	sockaddr_in6_init(&mask6, &pr->ndpr_mask, 0, 0, 0);
   1702  1.101     ozaki 	error = rtrequest_newmsg(RTM_DELETE, (struct sockaddr *)&sa6, NULL,
   1703  1.101     ozaki 	    (struct sockaddr *)&mask6, 0);
   1704   1.32    itojun 	if (error == 0) {
   1705   1.32    itojun 		pr->ndpr_stateflags &= ~NDPRF_ONLINK;
   1706  1.101     ozaki 		nd6_numroutes--;
   1707    1.2    itojun 
   1708   1.32    itojun 		/*
   1709   1.32    itojun 		 * There might be the same prefix on another interface,
   1710   1.32    itojun 		 * the prefix which could not be on-link just because we have
   1711   1.32    itojun 		 * the interface route (see comments in nd6_prefix_onlink).
   1712   1.32    itojun 		 * If there's one, try to make the prefix on-link on the
   1713   1.32    itojun 		 * interface.
   1714   1.32    itojun 		 */
   1715   1.62    dyoung 		LIST_FOREACH(opr, &nd_prefix, ndpr_entry) {
   1716   1.32    itojun 			if (opr == pr)
   1717   1.32    itojun 				continue;
   1718    1.2    itojun 
   1719   1.32    itojun 			if ((opr->ndpr_stateflags & NDPRF_ONLINK) != 0)
   1720   1.32    itojun 				continue;
   1721    1.2    itojun 
   1722   1.32    itojun 			/*
   1723   1.32    itojun 			 * KAME specific: detached prefixes should not be
   1724   1.32    itojun 			 * on-link.
   1725   1.32    itojun 			 */
   1726   1.32    itojun 			if ((opr->ndpr_stateflags & NDPRF_DETACHED) != 0)
   1727   1.32    itojun 				continue;
   1728    1.2    itojun 
   1729   1.32    itojun 			if (opr->ndpr_plen == pr->ndpr_plen &&
   1730   1.32    itojun 			    in6_are_prefix_equal(&pr->ndpr_prefix.sin6_addr,
   1731   1.32    itojun 			    &opr->ndpr_prefix.sin6_addr, pr->ndpr_plen)) {
   1732   1.32    itojun 				int e;
   1733   1.32    itojun 
   1734   1.32    itojun 				if ((e = nd6_prefix_onlink(opr)) != 0) {
   1735  1.107     ozaki 					nd6log(LOG_ERR, "failed to "
   1736   1.32    itojun 					    "recover a prefix %s/%d from %s "
   1737   1.32    itojun 					    "to %s (errno = %d)\n",
   1738   1.32    itojun 					    ip6_sprintf(&opr->ndpr_prefix.sin6_addr),
   1739   1.32    itojun 					    opr->ndpr_plen, if_name(ifp),
   1740  1.107     ozaki 					    if_name(opr->ndpr_ifp), e);
   1741   1.32    itojun 				}
   1742   1.32    itojun 			}
   1743   1.32    itojun 		}
   1744   1.32    itojun 	} else {
   1745   1.32    itojun 		/* XXX: can we still set the NDPRF_ONLINK flag? */
   1746  1.107     ozaki 		nd6log(LOG_ERR, "failed to delete route: "
   1747   1.32    itojun 		    "%s/%d on %s (errno = %d)\n",
   1748   1.32    itojun 		    ip6_sprintf(&sa6.sin6_addr), pr->ndpr_plen, if_name(ifp),
   1749  1.107     ozaki 		    error);
   1750    1.2    itojun 	}
   1751    1.2    itojun 
   1752  1.101     ozaki 	return error;
   1753    1.2    itojun }
   1754    1.2    itojun 
   1755    1.2    itojun static struct in6_ifaddr *
   1756   1.94      matt in6_ifadd(struct nd_prefixctl *prc, int mcast)
   1757    1.2    itojun {
   1758   1.94      matt 	struct ifnet *ifp = prc->ndprc_ifp;
   1759    1.2    itojun 	struct ifaddr *ifa;
   1760   1.32    itojun 	struct in6_aliasreq ifra;
   1761   1.32    itojun 	struct in6_ifaddr *ia, *ib;
   1762   1.32    itojun 	int error, plen0;
   1763    1.2    itojun 	struct in6_addr mask;
   1764   1.94      matt 	int prefixlen = prc->ndprc_plen;
   1765   1.56    rpaulo 	int updateflags;
   1766    1.2    itojun 
   1767   1.31    itojun 	in6_prefixlen2mask(&mask, prefixlen);
   1768    1.2    itojun 
   1769   1.32    itojun 	/*
   1770   1.32    itojun 	 * find a link-local address (will be interface ID).
   1771   1.32    itojun 	 * Is it really mandatory? Theoretically, a global or a site-local
   1772   1.32    itojun 	 * address can be configured without a link-local address, if we
   1773   1.32    itojun 	 * have a unique interface identifier...
   1774   1.32    itojun 	 *
   1775   1.32    itojun 	 * it is not mandatory to have a link-local address, we can generate
   1776   1.32    itojun 	 * interface identifier on the fly.  we do this because:
   1777   1.32    itojun 	 * (1) it should be the easiest way to find interface identifier.
   1778   1.32    itojun 	 * (2) RFC2462 5.4 suggesting the use of the same interface identifier
   1779   1.32    itojun 	 * for multiple addresses on a single interface, and possible shortcut
   1780   1.32    itojun 	 * of DAD.  we omitted DAD for this reason in the past.
   1781   1.32    itojun 	 * (3) a user can prevent autoconfiguration of global address
   1782   1.32    itojun 	 * by removing link-local address by hand (this is partly because we
   1783   1.55    rpaulo 	 * don't have other way to control the use of IPv6 on an interface.
   1784   1.32    itojun 	 * this has been our design choice - cf. NRL's "ifconfig auto").
   1785   1.32    itojun 	 * (4) it is easier to manage when an interface has addresses
   1786   1.32    itojun 	 * with the same interface identifier, than to have multiple addresses
   1787   1.32    itojun 	 * with different interface identifiers.
   1788   1.32    itojun 	 */
   1789   1.32    itojun 	ifa = (struct ifaddr *)in6ifa_ifpforlinklocal(ifp, 0); /* 0 is OK? */
   1790    1.2    itojun 	if (ifa)
   1791    1.2    itojun 		ib = (struct in6_ifaddr *)ifa;
   1792    1.2    itojun 	else
   1793    1.2    itojun 		return NULL;
   1794    1.2    itojun 
   1795    1.2    itojun #if 0 /* don't care link local addr state, and always do DAD */
   1796    1.2    itojun 	/* if link-local address is not eligible, do not autoconfigure. */
   1797    1.2    itojun 	if (((struct in6_ifaddr *)ifa)->ia6_flags & IN6_IFF_NOTREADY) {
   1798    1.2    itojun 		printf("in6_ifadd: link-local address not ready\n");
   1799    1.2    itojun 		return NULL;
   1800    1.2    itojun 	}
   1801    1.2    itojun #endif
   1802    1.2    itojun 
   1803    1.2    itojun 	/* prefixlen + ifidlen must be equal to 128 */
   1804   1.32    itojun 	plen0 = in6_mask2len(&ib->ia_prefixmask.sin6_addr, NULL);
   1805   1.32    itojun 	if (prefixlen != plen0) {
   1806  1.107     ozaki 		nd6log(LOG_INFO, "wrong prefixlen for %s "
   1807   1.32    itojun 		    "(prefix=%d ifid=%d)\n",
   1808  1.107     ozaki 		    if_name(ifp), prefixlen, 128 - plen0);
   1809    1.2    itojun 		return NULL;
   1810    1.2    itojun 	}
   1811    1.2    itojun 
   1812    1.2    itojun 	/* make ifaddr */
   1813    1.2    itojun 
   1814   1.56    rpaulo 	memset(&ifra, 0, sizeof(ifra));
   1815   1.32    itojun 	/*
   1816   1.32    itojun 	 * in6_update_ifa() does not use ifra_name, but we accurately set it
   1817   1.32    itojun 	 * for safety.
   1818   1.32    itojun 	 */
   1819   1.32    itojun 	strncpy(ifra.ifra_name, if_name(ifp), sizeof(ifra.ifra_name));
   1820   1.94      matt 	sockaddr_in6_init(&ifra.ifra_addr, &prc->ndprc_prefix.sin6_addr, 0, 0, 0);
   1821   1.32    itojun 	/* prefix */
   1822   1.32    itojun 	ifra.ifra_addr.sin6_addr.s6_addr32[0] &= mask.s6_addr32[0];
   1823   1.32    itojun 	ifra.ifra_addr.sin6_addr.s6_addr32[1] &= mask.s6_addr32[1];
   1824   1.32    itojun 	ifra.ifra_addr.sin6_addr.s6_addr32[2] &= mask.s6_addr32[2];
   1825   1.32    itojun 	ifra.ifra_addr.sin6_addr.s6_addr32[3] &= mask.s6_addr32[3];
   1826    1.2    itojun 
   1827    1.2    itojun 	/* interface ID */
   1828   1.32    itojun 	ifra.ifra_addr.sin6_addr.s6_addr32[0] |=
   1829   1.32    itojun 	    (ib->ia_addr.sin6_addr.s6_addr32[0] & ~mask.s6_addr32[0]);
   1830   1.32    itojun 	ifra.ifra_addr.sin6_addr.s6_addr32[1] |=
   1831   1.32    itojun 	    (ib->ia_addr.sin6_addr.s6_addr32[1] & ~mask.s6_addr32[1]);
   1832   1.32    itojun 	ifra.ifra_addr.sin6_addr.s6_addr32[2] |=
   1833   1.32    itojun 	    (ib->ia_addr.sin6_addr.s6_addr32[2] & ~mask.s6_addr32[2]);
   1834   1.32    itojun 	ifra.ifra_addr.sin6_addr.s6_addr32[3] |=
   1835   1.32    itojun 	    (ib->ia_addr.sin6_addr.s6_addr32[3] & ~mask.s6_addr32[3]);
   1836   1.33    itojun 
   1837   1.32    itojun 	/* new prefix mask. */
   1838   1.69    dyoung 	sockaddr_in6_init(&ifra.ifra_prefixmask, &mask, 0, 0, 0);
   1839    1.2    itojun 
   1840   1.56    rpaulo 	/* lifetimes */
   1841   1.94      matt 	ifra.ifra_lifetime.ia6t_vltime = prc->ndprc_vltime;
   1842   1.94      matt 	ifra.ifra_lifetime.ia6t_pltime = prc->ndprc_pltime;
   1843    1.2    itojun 
   1844   1.32    itojun 	/* XXX: scope zone ID? */
   1845    1.2    itojun 
   1846   1.32    itojun 	ifra.ifra_flags |= IN6_IFF_AUTOCONF; /* obey autoconf */
   1847    1.2    itojun 
   1848   1.56    rpaulo 	/*
   1849   1.56    rpaulo 	 * Make sure that we do not have this address already.  This should
   1850   1.56    rpaulo 	 * usually not happen, but we can still see this case, e.g., if we
   1851   1.56    rpaulo 	 * have manually configured the exact address to be configured.
   1852   1.56    rpaulo 	 */
   1853   1.56    rpaulo 	if (in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr) != NULL) {
   1854   1.56    rpaulo 		/* this should be rare enough to make an explicit log */
   1855   1.56    rpaulo 		log(LOG_INFO, "in6_ifadd: %s is already configured\n",
   1856   1.56    rpaulo 		    ip6_sprintf(&ifra.ifra_addr.sin6_addr));
   1857   1.56    rpaulo 		return (NULL);
   1858   1.56    rpaulo 	}
   1859   1.56    rpaulo 
   1860   1.56    rpaulo 	/*
   1861   1.56    rpaulo 	 * Allocate ifaddr structure, link into chain, etc.
   1862   1.56    rpaulo 	 * If we are going to create a new address upon receiving a multicasted
   1863   1.56    rpaulo 	 * RA, we need to impose a random delay before starting DAD.
   1864   1.56    rpaulo 	 * [draft-ietf-ipv6-rfc2462bis-02.txt, Section 5.4.2]
   1865   1.56    rpaulo 	 */
   1866   1.56    rpaulo 	updateflags = 0;
   1867   1.56    rpaulo 	if (mcast)
   1868   1.56    rpaulo 		updateflags |= IN6_IFAUPDATE_DADDELAY;
   1869   1.56    rpaulo 	if ((error = in6_update_ifa(ifp, &ifra, NULL, updateflags)) != 0) {
   1870  1.107     ozaki 		nd6log(LOG_ERR, "failed to make ifaddr %s on %s (errno=%d)\n",
   1871   1.32    itojun 		    ip6_sprintf(&ifra.ifra_addr.sin6_addr), if_name(ifp),
   1872  1.107     ozaki 		    error);
   1873   1.36    itojun 		return (NULL);	/* ifaddr must not have been allocated. */
   1874   1.32    itojun 	}
   1875    1.2    itojun 
   1876   1.32    itojun 	ia = in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr);
   1877    1.2    itojun 
   1878   1.36    itojun 	return (ia);		/* this is always non-NULL */
   1879    1.2    itojun }
   1880    1.2    itojun 
   1881    1.2    itojun int
   1882   1.64  christos in6_tmpifadd(
   1883   1.64  christos 	const struct in6_ifaddr *ia0, /* corresponding public address */
   1884   1.64  christos 	int forcegen,
   1885   1.64  christos 	int dad_delay)
   1886   1.56    rpaulo {
   1887   1.56    rpaulo 	struct ifnet *ifp = ia0->ia_ifa.ifa_ifp;
   1888   1.56    rpaulo 	struct in6_ifaddr *newia, *ia;
   1889   1.56    rpaulo 	struct in6_aliasreq ifra;
   1890   1.56    rpaulo 	int i, error;
   1891   1.56    rpaulo 	int trylimit = 3;	/* XXX: adhoc value */
   1892   1.56    rpaulo 	int updateflags;
   1893   1.56    rpaulo 	u_int32_t randid[2];
   1894   1.56    rpaulo 	u_int32_t vltime0, pltime0;
   1895   1.56    rpaulo 
   1896   1.56    rpaulo 	memset(&ifra, 0, sizeof(ifra));
   1897   1.56    rpaulo 	strncpy(ifra.ifra_name, if_name(ifp), sizeof(ifra.ifra_name));
   1898   1.56    rpaulo 	ifra.ifra_addr = ia0->ia_addr;
   1899   1.56    rpaulo 	/* copy prefix mask */
   1900   1.56    rpaulo 	ifra.ifra_prefixmask = ia0->ia_prefixmask;
   1901   1.56    rpaulo 	/* clear the old IFID */
   1902   1.56    rpaulo 	for (i = 0; i < 4; i++) {
   1903   1.56    rpaulo 		ifra.ifra_addr.sin6_addr.s6_addr32[i] &=
   1904   1.56    rpaulo 		    ifra.ifra_prefixmask.sin6_addr.s6_addr32[i];
   1905   1.56    rpaulo 	}
   1906   1.56    rpaulo 
   1907   1.56    rpaulo   again:
   1908   1.56    rpaulo 	if (in6_get_tmpifid(ifp, (u_int8_t *)randid,
   1909   1.56    rpaulo 	    (const u_int8_t *)&ia0->ia_addr.sin6_addr.s6_addr[8], forcegen)) {
   1910  1.107     ozaki 		nd6log(LOG_NOTICE, "failed to find a good random IFID\n");
   1911   1.56    rpaulo 		return (EINVAL);
   1912   1.56    rpaulo 	}
   1913   1.56    rpaulo 	ifra.ifra_addr.sin6_addr.s6_addr32[2] |=
   1914   1.56    rpaulo 	    (randid[0] & ~(ifra.ifra_prefixmask.sin6_addr.s6_addr32[2]));
   1915   1.56    rpaulo 	ifra.ifra_addr.sin6_addr.s6_addr32[3] |=
   1916   1.56    rpaulo 	    (randid[1] & ~(ifra.ifra_prefixmask.sin6_addr.s6_addr32[3]));
   1917   1.56    rpaulo 
   1918   1.56    rpaulo 	/*
   1919   1.56    rpaulo 	 * in6_get_tmpifid() quite likely provided a unique interface ID.
   1920   1.56    rpaulo 	 * However, we may still have a chance to see collision, because
   1921   1.56    rpaulo 	 * there may be a time lag between generation of the ID and generation
   1922   1.56    rpaulo 	 * of the address.  So, we'll do one more sanity check.
   1923   1.56    rpaulo 	 */
   1924   1.56    rpaulo 	for (ia = in6_ifaddr; ia; ia = ia->ia_next) {
   1925   1.56    rpaulo 		if (IN6_ARE_ADDR_EQUAL(&ia->ia_addr.sin6_addr,
   1926   1.56    rpaulo 		    &ifra.ifra_addr.sin6_addr)) {
   1927   1.56    rpaulo 			if (trylimit-- == 0) {
   1928   1.56    rpaulo 				/*
   1929   1.56    rpaulo 				 * Give up.  Something strange should have
   1930   1.56    rpaulo 				 * happened.
   1931   1.56    rpaulo 				 */
   1932  1.107     ozaki 				nd6log(LOG_NOTICE,
   1933  1.107     ozaki 				    "failed to find a unique random IFID\n");
   1934   1.56    rpaulo 				return (EEXIST);
   1935   1.56    rpaulo 			}
   1936   1.56    rpaulo 			forcegen = 1;
   1937   1.56    rpaulo 			goto again;
   1938   1.56    rpaulo 		}
   1939   1.56    rpaulo 	}
   1940   1.56    rpaulo 
   1941   1.56    rpaulo 	/*
   1942   1.56    rpaulo 	 * The Valid Lifetime is the lower of the Valid Lifetime of the
   1943   1.56    rpaulo          * public address or TEMP_VALID_LIFETIME.
   1944   1.56    rpaulo 	 * The Preferred Lifetime is the lower of the Preferred Lifetime
   1945   1.56    rpaulo          * of the public address or TEMP_PREFERRED_LIFETIME -
   1946   1.56    rpaulo          * DESYNC_FACTOR.
   1947   1.56    rpaulo 	 */
   1948   1.56    rpaulo 	if (ia0->ia6_lifetime.ia6t_vltime != ND6_INFINITE_LIFETIME) {
   1949   1.56    rpaulo 		vltime0 = IFA6_IS_INVALID(ia0) ? 0 :
   1950   1.56    rpaulo 		    (ia0->ia6_lifetime.ia6t_vltime -
   1951  1.102     ozaki 		    (time_uptime - ia0->ia6_updatetime));
   1952   1.56    rpaulo 		if (vltime0 > ip6_temp_valid_lifetime)
   1953   1.56    rpaulo 			vltime0 = ip6_temp_valid_lifetime;
   1954   1.56    rpaulo 	} else
   1955   1.56    rpaulo 		vltime0 = ip6_temp_valid_lifetime;
   1956   1.56    rpaulo 	if (ia0->ia6_lifetime.ia6t_pltime != ND6_INFINITE_LIFETIME) {
   1957   1.56    rpaulo 		pltime0 = IFA6_IS_DEPRECATED(ia0) ? 0 :
   1958   1.56    rpaulo 		    (ia0->ia6_lifetime.ia6t_pltime -
   1959  1.102     ozaki 		    (time_uptime - ia0->ia6_updatetime));
   1960   1.56    rpaulo 		if (pltime0 > ip6_temp_preferred_lifetime - ip6_desync_factor){
   1961   1.56    rpaulo 			pltime0 = ip6_temp_preferred_lifetime -
   1962   1.56    rpaulo 			    ip6_desync_factor;
   1963   1.56    rpaulo 		}
   1964   1.56    rpaulo 	} else
   1965   1.56    rpaulo 		pltime0 = ip6_temp_preferred_lifetime - ip6_desync_factor;
   1966   1.56    rpaulo 	ifra.ifra_lifetime.ia6t_vltime = vltime0;
   1967   1.56    rpaulo 	ifra.ifra_lifetime.ia6t_pltime = pltime0;
   1968   1.56    rpaulo 
   1969   1.56    rpaulo 	/*
   1970   1.56    rpaulo 	 * A temporary address is created only if this calculated Preferred
   1971   1.56    rpaulo 	 * Lifetime is greater than REGEN_ADVANCE time units.
   1972   1.56    rpaulo 	 */
   1973   1.56    rpaulo 	if (ifra.ifra_lifetime.ia6t_pltime <= ip6_temp_regen_advance)
   1974   1.56    rpaulo 		return (0);
   1975   1.56    rpaulo 
   1976   1.56    rpaulo 	/* XXX: scope zone ID? */
   1977   1.56    rpaulo 
   1978   1.56    rpaulo 	ifra.ifra_flags |= (IN6_IFF_AUTOCONF|IN6_IFF_TEMPORARY);
   1979   1.56    rpaulo 
   1980   1.56    rpaulo 	/* allocate ifaddr structure, link into chain, etc. */
   1981   1.56    rpaulo 	updateflags = 0;
   1982   1.57    rpaulo 	if (dad_delay)
   1983   1.56    rpaulo 		updateflags |= IN6_IFAUPDATE_DADDELAY;
   1984   1.56    rpaulo 	if ((error = in6_update_ifa(ifp, &ifra, NULL, updateflags)) != 0)
   1985   1.56    rpaulo 		return (error);
   1986   1.56    rpaulo 
   1987   1.56    rpaulo 	newia = in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr);
   1988   1.56    rpaulo 	if (newia == NULL) {	/* XXX: can it happen? */
   1989  1.107     ozaki 		nd6log(LOG_ERR,
   1990  1.107     ozaki 		    "ifa update succeeded, but we got no ifaddr\n");
   1991   1.56    rpaulo 		return (EINVAL); /* XXX */
   1992   1.56    rpaulo 	}
   1993   1.56    rpaulo 	newia->ia6_ndpr = ia0->ia6_ndpr;
   1994   1.56    rpaulo 	newia->ia6_ndpr->ndpr_refcnt++;
   1995   1.56    rpaulo 
   1996   1.56    rpaulo 	/*
   1997   1.56    rpaulo 	 * A newly added address might affect the status of other addresses.
   1998   1.56    rpaulo 	 * XXX: when the temporary address is generated with a new public
   1999   1.56    rpaulo 	 * address, the onlink check is redundant.  However, it would be safe
   2000   1.56    rpaulo 	 * to do the check explicitly everywhere a new address is generated,
   2001   1.56    rpaulo 	 * and, in fact, we surely need the check when we create a new
   2002   1.56    rpaulo 	 * temporary address due to deprecation of an old temporary address.
   2003   1.56    rpaulo 	 */
   2004   1.56    rpaulo 	pfxlist_onlink_check();
   2005   1.56    rpaulo 
   2006   1.56    rpaulo 	return (0);
   2007   1.56    rpaulo }
   2008   1.56    rpaulo 
   2009   1.56    rpaulo static int
   2010    1.2    itojun in6_init_prefix_ltimes(struct nd_prefix *ndpr)
   2011    1.2    itojun {
   2012    1.7    itojun 
   2013   1.26    itojun 	/* check if preferred lifetime > valid lifetime.  RFC2462 5.5.3 (c) */
   2014    1.2    itojun 	if (ndpr->ndpr_pltime > ndpr->ndpr_vltime) {
   2015  1.107     ozaki 		nd6log(LOG_INFO, "preferred lifetime"
   2016    1.2    itojun 		    "(%d) is greater than valid lifetime(%d)\n",
   2017  1.107     ozaki 		    (u_int)ndpr->ndpr_pltime, (u_int)ndpr->ndpr_vltime);
   2018    1.2    itojun 		return (EINVAL);
   2019    1.2    itojun 	}
   2020    1.7    itojun 	if (ndpr->ndpr_pltime == ND6_INFINITE_LIFETIME)
   2021    1.2    itojun 		ndpr->ndpr_preferred = 0;
   2022    1.2    itojun 	else
   2023  1.102     ozaki 		ndpr->ndpr_preferred = time_uptime + ndpr->ndpr_pltime;
   2024    1.7    itojun 	if (ndpr->ndpr_vltime == ND6_INFINITE_LIFETIME)
   2025    1.2    itojun 		ndpr->ndpr_expire = 0;
   2026    1.2    itojun 	else
   2027  1.102     ozaki 		ndpr->ndpr_expire = time_uptime + ndpr->ndpr_vltime;
   2028    1.2    itojun 
   2029    1.2    itojun 	return 0;
   2030    1.2    itojun }
   2031    1.2    itojun 
   2032    1.2    itojun static void
   2033   1.94      matt in6_init_address_ltimes(struct nd_prefix *newpr,
   2034   1.60  christos     struct in6_addrlifetime *lt6)
   2035    1.2    itojun {
   2036    1.7    itojun 
   2037    1.7    itojun 	/* Valid lifetime must not be updated unless explicitly specified. */
   2038   1.32    itojun 	/* init ia6t_expire */
   2039   1.32    itojun 	if (lt6->ia6t_vltime == ND6_INFINITE_LIFETIME)
   2040   1.32    itojun 		lt6->ia6t_expire = 0;
   2041   1.32    itojun 	else {
   2042  1.102     ozaki 		lt6->ia6t_expire = time_uptime;
   2043   1.32    itojun 		lt6->ia6t_expire += lt6->ia6t_vltime;
   2044    1.2    itojun 	}
   2045    1.7    itojun 
   2046    1.2    itojun 	/* init ia6t_preferred */
   2047    1.7    itojun 	if (lt6->ia6t_pltime == ND6_INFINITE_LIFETIME)
   2048    1.2    itojun 		lt6->ia6t_preferred = 0;
   2049    1.2    itojun 	else {
   2050  1.102     ozaki 		lt6->ia6t_preferred = time_uptime;
   2051    1.2    itojun 		lt6->ia6t_preferred += lt6->ia6t_pltime;
   2052    1.2    itojun 	}
   2053    1.2    itojun }
   2054    1.2    itojun 
   2055    1.2    itojun /*
   2056    1.2    itojun  * Delete all the routing table entries that use the specified gateway.
   2057    1.2    itojun  * XXX: this function causes search through all entries of routing table, so
   2058   1.16    itojun  * it shouldn't be called when acting as a router.
   2059    1.2    itojun  */
   2060    1.2    itojun void
   2061   1.61  christos rt6_flush(struct in6_addr *gateway, struct ifnet *ifp)
   2062    1.2    itojun {
   2063    1.4    itojun 	int s = splsoftnet();
   2064    1.2    itojun 
   2065    1.2    itojun 	/* We'll care only link-local addresses */
   2066    1.2    itojun 	if (!IN6_IS_ADDR_LINKLOCAL(gateway)) {
   2067    1.2    itojun 		splx(s);
   2068    1.2    itojun 		return;
   2069    1.2    itojun 	}
   2070    1.2    itojun 
   2071   1.65    dyoung 	rt_walktree(AF_INET6, rt6_deleteroute, (void *)gateway);
   2072    1.2    itojun 	splx(s);
   2073    1.2    itojun }
   2074    1.2    itojun 
   2075    1.2    itojun static int
   2076   1.65    dyoung rt6_deleteroute(struct rtentry *rt, void *arg)
   2077    1.2    itojun {
   2078    1.2    itojun 	struct in6_addr *gate = (struct in6_addr *)arg;
   2079    1.2    itojun 
   2080    1.2    itojun 	if (rt->rt_gateway == NULL || rt->rt_gateway->sa_family != AF_INET6)
   2081   1.36    itojun 		return (0);
   2082    1.2    itojun 
   2083  1.104     ozaki 	if (!IN6_ARE_ADDR_EQUAL(gate, &satosin6(rt->rt_gateway)->sin6_addr))
   2084   1.36    itojun 		return (0);
   2085   1.26    itojun 
   2086   1.26    itojun 	/*
   2087   1.32    itojun 	 * Do not delete a static route.
   2088   1.32    itojun 	 * XXX: this seems to be a bit ad-hoc. Should we consider the
   2089   1.32    itojun 	 * 'cloned' bit instead?
   2090   1.32    itojun 	 */
   2091   1.32    itojun 	if ((rt->rt_flags & RTF_STATIC) != 0)
   2092   1.36    itojun 		return (0);
   2093   1.32    itojun 
   2094   1.32    itojun 	/*
   2095    1.2    itojun 	 * We delete only host route. This means, in particular, we don't
   2096    1.2    itojun 	 * delete default route.
   2097    1.2    itojun 	 */
   2098    1.2    itojun 	if ((rt->rt_flags & RTF_HOST) == 0)
   2099   1.36    itojun 		return (0);
   2100    1.2    itojun 
   2101   1.66    dyoung 	return (rtrequest(RTM_DELETE, rt_getkey(rt), rt->rt_gateway,
   2102  1.103     ozaki 	    rt_mask(rt), rt->rt_flags, NULL));
   2103    1.2    itojun }
   2104    1.7    itojun 
   2105    1.7    itojun int
   2106   1.64  christos nd6_setdefaultiface(int ifindex)
   2107    1.7    itojun {
   2108   1.91     rmind 	ifnet_t *ifp;
   2109    1.7    itojun 	int error = 0;
   2110    1.7    itojun 
   2111   1.91     rmind 	if ((ifp = if_byindex(ifindex)) == NULL) {
   2112   1.91     rmind 		return EINVAL;
   2113   1.91     rmind 	}
   2114    1.7    itojun 	if (nd6_defifindex != ifindex) {
   2115    1.7    itojun 		nd6_defifindex = ifindex;
   2116   1.91     rmind 		nd6_defifp = nd6_defifindex > 0 ? ifp : NULL;
   2117   1.54    rpaulo 
   2118   1.54    rpaulo 		/*
   2119   1.54    rpaulo 		 * Our current implementation assumes one-to-one maping between
   2120   1.54    rpaulo 		 * interfaces and links, so it would be natural to use the
   2121   1.54    rpaulo 		 * default interface as the default link.
   2122   1.54    rpaulo 		 */
   2123   1.54    rpaulo 		scope6_setdefault(nd6_defifp);
   2124    1.7    itojun 	}
   2125    1.7    itojun 
   2126   1.36    itojun 	return (error);
   2127    1.7    itojun }
   2128