raw_ip6.c revision 1.20 1 1.20 itojun /* $NetBSD: raw_ip6.c,v 1.20 2000/02/26 09:09:18 itojun Exp $ */
2 1.20 itojun /* $KAME: raw_ip6.c,v 1.23 2000/02/22 14:04:34 itojun Exp $ */
3 1.3 thorpej
4 1.2 itojun /*
5 1.2 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6 1.2 itojun * All rights reserved.
7 1.2 itojun *
8 1.2 itojun * Redistribution and use in source and binary forms, with or without
9 1.2 itojun * modification, are permitted provided that the following conditions
10 1.2 itojun * are met:
11 1.2 itojun * 1. Redistributions of source code must retain the above copyright
12 1.2 itojun * notice, this list of conditions and the following disclaimer.
13 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
14 1.2 itojun * notice, this list of conditions and the following disclaimer in the
15 1.2 itojun * documentation and/or other materials provided with the distribution.
16 1.2 itojun * 3. Neither the name of the project nor the names of its contributors
17 1.2 itojun * may be used to endorse or promote products derived from this software
18 1.2 itojun * without specific prior written permission.
19 1.2 itojun *
20 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.2 itojun * SUCH DAMAGE.
31 1.2 itojun */
32 1.2 itojun
33 1.2 itojun /*
34 1.2 itojun * Copyright (c) 1982, 1986, 1988, 1993
35 1.2 itojun * The Regents of the University of California. All rights reserved.
36 1.2 itojun *
37 1.2 itojun * Redistribution and use in source and binary forms, with or without
38 1.2 itojun * modification, are permitted provided that the following conditions
39 1.2 itojun * are met:
40 1.2 itojun * 1. Redistributions of source code must retain the above copyright
41 1.2 itojun * notice, this list of conditions and the following disclaimer.
42 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
43 1.2 itojun * notice, this list of conditions and the following disclaimer in the
44 1.2 itojun * documentation and/or other materials provided with the distribution.
45 1.2 itojun * 3. All advertising materials mentioning features or use of this software
46 1.2 itojun * must display the following acknowledgement:
47 1.2 itojun * This product includes software developed by the University of
48 1.2 itojun * California, Berkeley and its contributors.
49 1.2 itojun * 4. Neither the name of the University nor the names of its contributors
50 1.2 itojun * may be used to endorse or promote products derived from this software
51 1.2 itojun * without specific prior written permission.
52 1.2 itojun *
53 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
54 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
55 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
56 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
57 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
58 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
59 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
60 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
61 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
62 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
63 1.2 itojun * SUCH DAMAGE.
64 1.2 itojun *
65 1.2 itojun * @(#)raw_ip.c 8.2 (Berkeley) 1/4/94
66 1.2 itojun */
67 1.6 thorpej
68 1.6 thorpej #include "opt_ipsec.h"
69 1.2 itojun
70 1.2 itojun #include <sys/param.h>
71 1.2 itojun #include <sys/malloc.h>
72 1.2 itojun #include <sys/mbuf.h>
73 1.2 itojun #include <sys/socket.h>
74 1.2 itojun #include <sys/protosw.h>
75 1.2 itojun #include <sys/socketvar.h>
76 1.2 itojun #include <sys/errno.h>
77 1.2 itojun #include <sys/systm.h>
78 1.2 itojun #include <sys/proc.h>
79 1.2 itojun
80 1.2 itojun #include <net/if.h>
81 1.2 itojun #include <net/route.h>
82 1.2 itojun #include <net/if_types.h>
83 1.2 itojun
84 1.2 itojun #include <netinet/in.h>
85 1.2 itojun #include <netinet/in_var.h>
86 1.19 itojun #include <netinet/ip6.h>
87 1.2 itojun #include <netinet6/ip6_var.h>
88 1.2 itojun #include <netinet6/ip6_mroute.h>
89 1.19 itojun #include <netinet/icmp6.h>
90 1.2 itojun #include <netinet6/in6_pcb.h>
91 1.2 itojun #include <netinet6/nd6.h>
92 1.20 itojun #include <netinet6/ip6protosw.h>
93 1.2 itojun
94 1.2 itojun #ifdef IPSEC
95 1.2 itojun #include <netinet6/ipsec.h>
96 1.2 itojun #endif /*IPSEC*/
97 1.2 itojun
98 1.2 itojun #include <machine/stdarg.h>
99 1.2 itojun
100 1.2 itojun #include "faith.h"
101 1.2 itojun
102 1.2 itojun struct in6pcb rawin6pcb;
103 1.2 itojun #define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa))
104 1.2 itojun
105 1.2 itojun /*
106 1.2 itojun * Raw interface to IP6 protocol.
107 1.2 itojun */
108 1.2 itojun
109 1.2 itojun /*
110 1.2 itojun * Initialize raw connection block queue.
111 1.2 itojun */
112 1.2 itojun void
113 1.2 itojun rip6_init()
114 1.2 itojun {
115 1.2 itojun rawin6pcb.in6p_next = rawin6pcb.in6p_prev = &rawin6pcb;
116 1.2 itojun }
117 1.2 itojun
118 1.2 itojun /*
119 1.2 itojun * Setup generic address and protocol structures
120 1.2 itojun * for raw_input routine, then pass them along with
121 1.2 itojun * mbuf chain.
122 1.2 itojun */
123 1.2 itojun int
124 1.2 itojun rip6_input(mp, offp, proto)
125 1.2 itojun struct mbuf **mp;
126 1.2 itojun int *offp, proto;
127 1.2 itojun {
128 1.2 itojun struct mbuf *m = *mp;
129 1.2 itojun register struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
130 1.2 itojun register struct in6pcb *in6p;
131 1.2 itojun struct in6pcb *last = NULL;
132 1.2 itojun struct sockaddr_in6 rip6src;
133 1.2 itojun struct mbuf *opts = NULL;
134 1.2 itojun
135 1.2 itojun #if defined(NFAITH) && 0 < NFAITH
136 1.2 itojun if (m->m_pkthdr.rcvif) {
137 1.2 itojun if (m->m_pkthdr.rcvif->if_type == IFT_FAITH) {
138 1.2 itojun /* send icmp6 host unreach? */
139 1.2 itojun m_freem(m);
140 1.2 itojun return IPPROTO_DONE;
141 1.2 itojun }
142 1.2 itojun }
143 1.2 itojun #endif
144 1.14 itojun
145 1.14 itojun /* Be proactive about malicious use of IPv4 mapped address */
146 1.14 itojun if (IN6_IS_ADDR_V4MAPPED(&ip6->ip6_src) ||
147 1.14 itojun IN6_IS_ADDR_V4MAPPED(&ip6->ip6_dst)) {
148 1.14 itojun /* XXX stat */
149 1.14 itojun m_freem(m);
150 1.14 itojun return IPPROTO_DONE;
151 1.14 itojun }
152 1.14 itojun
153 1.2 itojun bzero(&rip6src, sizeof(rip6src));
154 1.2 itojun rip6src.sin6_len = sizeof(struct sockaddr_in6);
155 1.2 itojun rip6src.sin6_family = AF_INET6;
156 1.2 itojun rip6src.sin6_addr = ip6->ip6_src;
157 1.2 itojun if (IN6_IS_SCOPE_LINKLOCAL(&rip6src.sin6_addr))
158 1.2 itojun rip6src.sin6_addr.s6_addr16[1] = 0;
159 1.2 itojun if (m->m_pkthdr.rcvif) {
160 1.2 itojun if (IN6_IS_SCOPE_LINKLOCAL(&rip6src.sin6_addr))
161 1.2 itojun rip6src.sin6_scope_id = m->m_pkthdr.rcvif->if_index;
162 1.2 itojun else
163 1.2 itojun rip6src.sin6_scope_id = 0;
164 1.2 itojun } else
165 1.2 itojun rip6src.sin6_scope_id = 0;
166 1.2 itojun
167 1.2 itojun for (in6p = rawin6pcb.in6p_next;
168 1.2 itojun in6p != &rawin6pcb; in6p = in6p->in6p_next) {
169 1.2 itojun if (in6p->in6p_ip6.ip6_nxt &&
170 1.2 itojun in6p->in6p_ip6.ip6_nxt != proto)
171 1.2 itojun continue;
172 1.12 itojun if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr) &&
173 1.2 itojun !IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr, &ip6->ip6_dst))
174 1.2 itojun continue;
175 1.12 itojun if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr) &&
176 1.2 itojun !IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr, &ip6->ip6_src))
177 1.2 itojun continue;
178 1.2 itojun if (in6p->in6p_cksum != -1
179 1.7 itojun && in6_cksum(m, ip6->ip6_nxt, *offp, m->m_pkthdr.len - *offp))
180 1.7 itojun {
181 1.2 itojun /* XXX bark something */
182 1.2 itojun continue;
183 1.2 itojun }
184 1.2 itojun if (last) {
185 1.2 itojun struct mbuf *n;
186 1.2 itojun if ((n = m_copy(m, 0, (int)M_COPYALL)) != NULL) {
187 1.2 itojun if (last->in6p_flags & IN6P_CONTROLOPTS)
188 1.2 itojun ip6_savecontrol(last, &opts, ip6, n);
189 1.2 itojun /* strip intermediate headers */
190 1.2 itojun m_adj(n, *offp);
191 1.2 itojun if (sbappendaddr(&last->in6p_socket->so_rcv,
192 1.2 itojun (struct sockaddr *)&rip6src,
193 1.2 itojun n, opts) == 0) {
194 1.2 itojun /* should notify about lost packet */
195 1.2 itojun m_freem(n);
196 1.2 itojun if (opts)
197 1.2 itojun m_freem(opts);
198 1.2 itojun } else
199 1.2 itojun sorwakeup(last->in6p_socket);
200 1.2 itojun opts = NULL;
201 1.2 itojun }
202 1.2 itojun }
203 1.2 itojun last = in6p;
204 1.2 itojun }
205 1.2 itojun if (last) {
206 1.2 itojun if (last->in6p_flags & IN6P_CONTROLOPTS)
207 1.2 itojun ip6_savecontrol(last, &opts, ip6, m);
208 1.2 itojun /* strip intermediate headers */
209 1.2 itojun m_adj(m, *offp);
210 1.2 itojun if (sbappendaddr(&last->in6p_socket->so_rcv,
211 1.2 itojun (struct sockaddr *)&rip6src, m, opts) == 0) {
212 1.2 itojun m_freem(m);
213 1.2 itojun if (opts)
214 1.2 itojun m_freem(opts);
215 1.2 itojun } else
216 1.2 itojun sorwakeup(last->in6p_socket);
217 1.2 itojun } else {
218 1.2 itojun if (proto == IPPROTO_NONE)
219 1.2 itojun m_freem(m);
220 1.2 itojun else {
221 1.2 itojun char *prvnxtp = ip6_get_prevhdr(m, *offp); /* XXX */
222 1.2 itojun icmp6_error(m, ICMP6_PARAM_PROB,
223 1.2 itojun ICMP6_PARAMPROB_NEXTHEADER,
224 1.2 itojun prvnxtp - mtod(m, char *));
225 1.2 itojun }
226 1.2 itojun ip6stat.ip6s_delivered--;
227 1.2 itojun }
228 1.2 itojun return IPPROTO_DONE;
229 1.2 itojun }
230 1.2 itojun
231 1.20 itojun void
232 1.20 itojun rip6_ctlinput(cmd, sa, d)
233 1.20 itojun int cmd;
234 1.20 itojun struct sockaddr *sa;
235 1.20 itojun void *d;
236 1.20 itojun {
237 1.20 itojun struct sockaddr_in6 sa6;
238 1.20 itojun register struct ip6_hdr *ip6;
239 1.20 itojun struct mbuf *m;
240 1.20 itojun int off;
241 1.20 itojun
242 1.20 itojun if (sa->sa_family != AF_INET6 ||
243 1.20 itojun sa->sa_len != sizeof(struct sockaddr_in6))
244 1.20 itojun return;
245 1.20 itojun
246 1.20 itojun if (!PRC_IS_REDIRECT(cmd) &&
247 1.20 itojun ((unsigned)cmd >= PRC_NCMDS || inet6ctlerrmap[cmd] == 0))
248 1.20 itojun return;
249 1.20 itojun
250 1.20 itojun /* if the parameter is from icmp6, decode it. */
251 1.20 itojun if (d != NULL) {
252 1.20 itojun struct ip6ctlparam *ip6cp = (struct ip6ctlparam *)d;
253 1.20 itojun m = ip6cp->ip6c_m;
254 1.20 itojun ip6 = ip6cp->ip6c_ip6;
255 1.20 itojun off = ip6cp->ip6c_off;
256 1.20 itojun } else {
257 1.20 itojun m = NULL;
258 1.20 itojun ip6 = NULL;
259 1.20 itojun }
260 1.20 itojun
261 1.20 itojun /* translate addresses into internal form */
262 1.20 itojun sa6 = *(struct sockaddr_in6 *)sa;
263 1.20 itojun if (IN6_IS_ADDR_LINKLOCAL(&sa6.sin6_addr) && m && m->m_pkthdr.rcvif)
264 1.20 itojun sa6.sin6_addr.s6_addr16[1] = htons(m->m_pkthdr.rcvif->if_index);
265 1.20 itojun
266 1.20 itojun if (ip6) {
267 1.20 itojun /*
268 1.20 itojun * XXX: We assume that when IPV6 is non NULL,
269 1.20 itojun * M and OFF are valid.
270 1.20 itojun */
271 1.20 itojun struct in6_addr s;
272 1.20 itojun
273 1.20 itojun /* translate addresses into internal form */
274 1.20 itojun memcpy(&s, &ip6->ip6_src, sizeof(s));
275 1.20 itojun if (IN6_IS_ADDR_LINKLOCAL(&s))
276 1.20 itojun s.s6_addr16[1] = htons(m->m_pkthdr.rcvif->if_index);
277 1.20 itojun
278 1.20 itojun (void) in6_pcbnotify(&rawin6pcb, (struct sockaddr *)&sa6,
279 1.20 itojun 0, &s, 0, cmd, in6_rtchange);
280 1.20 itojun } else {
281 1.20 itojun (void) in6_pcbnotify(&rawin6pcb, (struct sockaddr *)&sa6, 0,
282 1.20 itojun &zeroin6_addr, 0, cmd, in6_rtchange);
283 1.20 itojun }
284 1.20 itojun }
285 1.20 itojun
286 1.2 itojun /*
287 1.2 itojun * Generate IPv6 header and pass packet to ip6_output.
288 1.2 itojun * Tack on options user may have setup with control call.
289 1.2 itojun */
290 1.2 itojun int
291 1.2 itojun #if __STDC__
292 1.2 itojun rip6_output(struct mbuf *m, ...)
293 1.2 itojun #else
294 1.2 itojun rip6_output(m, va_alist)
295 1.2 itojun struct mbuf *m;
296 1.2 itojun va_dcl
297 1.2 itojun #endif
298 1.2 itojun {
299 1.2 itojun struct socket *so;
300 1.2 itojun struct sockaddr_in6 *dstsock;
301 1.2 itojun struct mbuf *control;
302 1.2 itojun struct in6_addr *dst;
303 1.2 itojun struct ip6_hdr *ip6;
304 1.2 itojun struct in6pcb *in6p;
305 1.2 itojun u_int plen = m->m_pkthdr.len;
306 1.2 itojun int error = 0;
307 1.2 itojun struct ip6_pktopts opt, *optp = NULL;
308 1.2 itojun struct ifnet *oifp = NULL;
309 1.12 itojun int type, code; /* for ICMPv6 output statistics only */
310 1.20 itojun int priv = 0;
311 1.2 itojun va_list ap;
312 1.2 itojun
313 1.2 itojun va_start(ap, m);
314 1.2 itojun so = va_arg(ap, struct socket *);
315 1.2 itojun dstsock = va_arg(ap, struct sockaddr_in6 *);
316 1.2 itojun control = va_arg(ap, struct mbuf *);
317 1.2 itojun va_end(ap);
318 1.2 itojun
319 1.2 itojun in6p = sotoin6pcb(so);
320 1.2 itojun
321 1.12 itojun priv = 0;
322 1.12 itojun {
323 1.12 itojun struct proc *p = curproc; /* XXX */
324 1.12 itojun
325 1.12 itojun if (p && !suser(p->p_ucred, &p->p_acflag))
326 1.12 itojun priv = 1;
327 1.12 itojun }
328 1.2 itojun dst = &dstsock->sin6_addr;
329 1.2 itojun if (control) {
330 1.2 itojun if ((error = ip6_setpktoptions(control, &opt, priv)) != 0)
331 1.2 itojun goto bad;
332 1.2 itojun optp = &opt;
333 1.2 itojun } else
334 1.2 itojun optp = in6p->in6p_outputopts;
335 1.2 itojun
336 1.12 itojun /*
337 1.12 itojun * For an ICMPv6 packet, we should know its type and code
338 1.12 itojun * to update statistics.
339 1.12 itojun */
340 1.12 itojun if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) {
341 1.12 itojun struct icmp6_hdr *icmp6;
342 1.12 itojun if (m->m_len < sizeof(struct icmp6_hdr) &&
343 1.12 itojun (m = m_pullup(m, sizeof(struct icmp6_hdr))) == NULL) {
344 1.12 itojun error = ENOBUFS;
345 1.12 itojun goto bad;
346 1.12 itojun }
347 1.12 itojun icmp6 = mtod(m, struct icmp6_hdr *);
348 1.12 itojun type = icmp6->icmp6_type;
349 1.12 itojun code = icmp6->icmp6_code;
350 1.12 itojun }
351 1.12 itojun
352 1.2 itojun M_PREPEND(m, sizeof(*ip6), M_WAIT);
353 1.2 itojun ip6 = mtod(m, struct ip6_hdr *);
354 1.2 itojun
355 1.2 itojun /*
356 1.2 itojun * Next header might not be ICMP6 but use its pseudo header anyway.
357 1.2 itojun */
358 1.2 itojun ip6->ip6_dst = *dst;
359 1.2 itojun
360 1.2 itojun /*
361 1.2 itojun * If the scope of the destination is link-local, embed the interface
362 1.2 itojun * index in the address.
363 1.2 itojun *
364 1.2 itojun * XXX advanced-api value overrides sin6_scope_id
365 1.2 itojun */
366 1.12 itojun if (IN6_IS_ADDR_LINKLOCAL(&ip6->ip6_dst) ||
367 1.12 itojun IN6_IS_ADDR_MC_LINKLOCAL(&ip6->ip6_dst)) {
368 1.2 itojun struct in6_pktinfo *pi;
369 1.2 itojun
370 1.2 itojun /*
371 1.2 itojun * XXX Boundary check is assumed to be already done in
372 1.12 itojun * ip6_setpktoptions().
373 1.2 itojun */
374 1.2 itojun if (optp && (pi = optp->ip6po_pktinfo) && pi->ipi6_ifindex) {
375 1.2 itojun ip6->ip6_dst.s6_addr16[1] = htons(pi->ipi6_ifindex);
376 1.2 itojun oifp = ifindex2ifnet[pi->ipi6_ifindex];
377 1.2 itojun }
378 1.2 itojun else if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) &&
379 1.2 itojun in6p->in6p_moptions &&
380 1.2 itojun in6p->in6p_moptions->im6o_multicast_ifp) {
381 1.12 itojun oifp = in6p->in6p_moptions->im6o_multicast_ifp;
382 1.12 itojun ip6->ip6_dst.s6_addr16[1] = htons(oifp->if_index);
383 1.2 itojun } else if (dstsock->sin6_scope_id) {
384 1.2 itojun /* boundary check */
385 1.2 itojun if (dstsock->sin6_scope_id < 0
386 1.2 itojun || if_index < dstsock->sin6_scope_id) {
387 1.2 itojun error = ENXIO; /* XXX EINVAL? */
388 1.2 itojun goto bad;
389 1.2 itojun }
390 1.2 itojun ip6->ip6_dst.s6_addr16[1]
391 1.2 itojun = htons(dstsock->sin6_scope_id & 0xffff);/*XXX*/
392 1.2 itojun }
393 1.2 itojun }
394 1.2 itojun
395 1.12 itojun /*
396 1.12 itojun * Source address selection.
397 1.12 itojun */
398 1.12 itojun {
399 1.2 itojun struct in6_addr *in6a;
400 1.2 itojun
401 1.2 itojun if ((in6a = in6_selectsrc(dstsock, optp,
402 1.2 itojun in6p->in6p_moptions,
403 1.2 itojun &in6p->in6p_route,
404 1.12 itojun &in6p->in6p_laddr,
405 1.2 itojun &error)) == 0) {
406 1.2 itojun if (error == 0)
407 1.2 itojun error = EADDRNOTAVAIL;
408 1.2 itojun goto bad;
409 1.2 itojun }
410 1.2 itojun ip6->ip6_src = *in6a;
411 1.2 itojun if (in6p->in6p_route.ro_rt)
412 1.2 itojun oifp = ifindex2ifnet[in6p->in6p_route.ro_rt->rt_ifp->if_index];
413 1.12 itojun }
414 1.2 itojun
415 1.2 itojun ip6->ip6_flow = in6p->in6p_flowinfo & IPV6_FLOWINFO_MASK;
416 1.20 itojun ip6->ip6_vfc &= ~IPV6_VERSION_MASK;
417 1.20 itojun ip6->ip6_vfc |= IPV6_VERSION;
418 1.2 itojun #if 0 /* ip6_plen will be filled in ip6_output. */
419 1.2 itojun ip6->ip6_plen = htons((u_short)plen);
420 1.2 itojun #endif
421 1.2 itojun ip6->ip6_nxt = in6p->in6p_ip6.ip6_nxt;
422 1.12 itojun ip6->ip6_hlim = in6_selecthlim(in6p, oifp);
423 1.2 itojun
424 1.2 itojun if (so->so_proto->pr_protocol == IPPROTO_ICMPV6 ||
425 1.2 itojun in6p->in6p_cksum != -1) {
426 1.2 itojun struct mbuf *n;
427 1.2 itojun int off;
428 1.2 itojun u_int16_t *p;
429 1.2 itojun
430 1.2 itojun #define offsetof(type, member) ((size_t)(&((type *)0)->member)) /* XXX */
431 1.2 itojun
432 1.2 itojun /* compute checksum */
433 1.2 itojun if (so->so_proto->pr_protocol == IPPROTO_ICMPV6)
434 1.2 itojun off = offsetof(struct icmp6_hdr, icmp6_cksum);
435 1.2 itojun else
436 1.2 itojun off = in6p->in6p_cksum;
437 1.2 itojun if (plen < off + 1) {
438 1.2 itojun error = EINVAL;
439 1.2 itojun goto bad;
440 1.2 itojun }
441 1.2 itojun off += sizeof(struct ip6_hdr);
442 1.2 itojun
443 1.2 itojun n = m;
444 1.2 itojun while (n && n->m_len <= off) {
445 1.2 itojun off -= n->m_len;
446 1.2 itojun n = n->m_next;
447 1.2 itojun }
448 1.2 itojun if (!n)
449 1.2 itojun goto bad;
450 1.2 itojun p = (u_int16_t *)(mtod(n, caddr_t) + off);
451 1.2 itojun *p = 0;
452 1.2 itojun *p = in6_cksum(m, ip6->ip6_nxt, sizeof(*ip6), plen);
453 1.2 itojun }
454 1.2 itojun
455 1.2 itojun #ifdef IPSEC
456 1.2 itojun m->m_pkthdr.rcvif = (struct ifnet *)so;
457 1.2 itojun #endif /*IPSEC*/
458 1.12 itojun
459 1.12 itojun error = ip6_output(m, optp, &in6p->in6p_route, 0, in6p->in6p_moptions,
460 1.12 itojun &oifp);
461 1.12 itojun if (so->so_proto->pr_protocol == IPPROTO_ICMPV6) {
462 1.12 itojun if (oifp)
463 1.12 itojun icmp6_ifoutstat_inc(oifp, type, code);
464 1.12 itojun icmp6stat.icp6s_outhist[type]++;
465 1.12 itojun }
466 1.2 itojun
467 1.2 itojun goto freectl;
468 1.2 itojun
469 1.2 itojun bad:
470 1.2 itojun if (m)
471 1.2 itojun m_freem(m);
472 1.2 itojun
473 1.2 itojun freectl:
474 1.2 itojun if (optp == &opt && optp->ip6po_rthdr && optp->ip6po_route.ro_rt)
475 1.2 itojun RTFREE(optp->ip6po_route.ro_rt);
476 1.2 itojun if (control)
477 1.2 itojun m_freem(control);
478 1.2 itojun return(error);
479 1.2 itojun }
480 1.2 itojun
481 1.2 itojun /*
482 1.2 itojun * Raw IPv6 socket option processing.
483 1.2 itojun */
484 1.2 itojun int
485 1.2 itojun rip6_ctloutput(op, so, level, optname, m)
486 1.2 itojun int op;
487 1.2 itojun struct socket *so;
488 1.2 itojun int level, optname;
489 1.2 itojun struct mbuf **m;
490 1.2 itojun {
491 1.2 itojun int error = 0;
492 1.2 itojun
493 1.2 itojun switch(level) {
494 1.2 itojun case IPPROTO_IPV6:
495 1.2 itojun switch(optname) {
496 1.2 itojun case MRT6_INIT:
497 1.2 itojun case MRT6_DONE:
498 1.2 itojun case MRT6_ADD_MIF:
499 1.2 itojun case MRT6_DEL_MIF:
500 1.2 itojun case MRT6_ADD_MFC:
501 1.2 itojun case MRT6_DEL_MFC:
502 1.2 itojun case MRT6_PIM:
503 1.2 itojun if (op == PRCO_SETOPT) {
504 1.2 itojun error = ip6_mrouter_set(optname, so, *m);
505 1.2 itojun if (*m)
506 1.2 itojun (void)m_free(*m);
507 1.2 itojun } else if (op == PRCO_GETOPT) {
508 1.2 itojun error = ip6_mrouter_get(optname, so, m);
509 1.2 itojun } else
510 1.2 itojun error = EINVAL;
511 1.2 itojun return (error);
512 1.2 itojun }
513 1.2 itojun return (ip6_ctloutput(op, so, level, optname, m));
514 1.2 itojun /* NOTREACHED */
515 1.2 itojun
516 1.2 itojun case IPPROTO_ICMPV6:
517 1.2 itojun /*
518 1.2 itojun * XXX: is it better to call icmp6_ctloutput() directly
519 1.2 itojun * from protosw?
520 1.2 itojun */
521 1.2 itojun return(icmp6_ctloutput(op, so, level, optname, m));
522 1.2 itojun
523 1.2 itojun default:
524 1.2 itojun if (op == PRCO_SETOPT && *m)
525 1.2 itojun (void)m_free(*m);
526 1.2 itojun return(EINVAL);
527 1.2 itojun }
528 1.2 itojun }
529 1.2 itojun
530 1.2 itojun extern u_long rip6_sendspace;
531 1.2 itojun extern u_long rip6_recvspace;
532 1.2 itojun
533 1.2 itojun int
534 1.2 itojun rip6_usrreq(so, req, m, nam, control, p)
535 1.2 itojun register struct socket *so;
536 1.2 itojun int req;
537 1.2 itojun struct mbuf *m, *nam, *control;
538 1.2 itojun struct proc *p;
539 1.2 itojun {
540 1.2 itojun register struct in6pcb *in6p = sotoin6pcb(so);
541 1.2 itojun int s;
542 1.2 itojun int error = 0;
543 1.2 itojun /* extern struct socket *ip6_mrouter; */ /* xxx */
544 1.12 itojun int priv;
545 1.12 itojun
546 1.12 itojun priv = 0;
547 1.12 itojun if (p && !suser(p->p_ucred, &p->p_acflag))
548 1.12 itojun priv++;
549 1.2 itojun
550 1.2 itojun if (req == PRU_CONTROL)
551 1.2 itojun return (in6_control(so, (u_long)m, (caddr_t)nam,
552 1.2 itojun (struct ifnet *)control, p));
553 1.17 thorpej
554 1.18 thorpej if (req == PRU_PURGEIF) {
555 1.18 thorpej in6_purgeif((struct ifnet *)control);
556 1.18 thorpej in6_pcbpurgeif(&rawin6pcb, (struct ifnet *)control);
557 1.17 thorpej return (0);
558 1.17 thorpej }
559 1.2 itojun
560 1.2 itojun switch (req) {
561 1.2 itojun case PRU_ATTACH:
562 1.2 itojun if (in6p)
563 1.2 itojun panic("rip6_attach");
564 1.12 itojun if (!priv) {
565 1.2 itojun error = EACCES;
566 1.2 itojun break;
567 1.2 itojun }
568 1.4 itojun s = splsoftnet();
569 1.2 itojun if ((error = soreserve(so, rip6_sendspace, rip6_recvspace)) ||
570 1.2 itojun (error = in6_pcballoc(so, &rawin6pcb))) {
571 1.2 itojun splx(s);
572 1.2 itojun break;
573 1.2 itojun }
574 1.2 itojun splx(s);
575 1.2 itojun in6p = sotoin6pcb(so);
576 1.5 itojun in6p->in6p_ip6.ip6_nxt = (long)nam;
577 1.2 itojun in6p->in6p_cksum = -1;
578 1.2 itojun #ifdef IPSEC
579 1.16 itojun error = ipsec_init_policy(so, &in6p->in6p_sp);
580 1.12 itojun if (error != 0) {
581 1.11 itojun in6_pcbdetach(in6p);
582 1.2 itojun break;
583 1.11 itojun }
584 1.2 itojun #endif /*IPSEC*/
585 1.2 itojun
586 1.2 itojun MALLOC(in6p->in6p_icmp6filt, struct icmp6_filter *,
587 1.2 itojun sizeof(struct icmp6_filter), M_PCB, M_NOWAIT);
588 1.12 itojun if (in6p->in6p_icmp6filt == NULL) {
589 1.12 itojun in6_pcbdetach(in6p);
590 1.12 itojun error = ENOMEM;
591 1.12 itojun break;
592 1.12 itojun }
593 1.2 itojun ICMP6_FILTER_SETPASSALL(in6p->in6p_icmp6filt);
594 1.2 itojun break;
595 1.2 itojun
596 1.2 itojun case PRU_DISCONNECT:
597 1.2 itojun if ((so->so_state & SS_ISCONNECTED) == 0) {
598 1.2 itojun error = ENOTCONN;
599 1.2 itojun break;
600 1.2 itojun }
601 1.2 itojun in6p->in6p_faddr = in6addr_any;
602 1.2 itojun so->so_state &= ~SS_ISCONNECTED; /* XXX */
603 1.2 itojun break;
604 1.2 itojun
605 1.2 itojun case PRU_ABORT:
606 1.2 itojun soisdisconnected(so);
607 1.2 itojun /* Fallthrough */
608 1.2 itojun case PRU_DETACH:
609 1.2 itojun if (in6p == 0)
610 1.2 itojun panic("rip6_detach");
611 1.2 itojun if (so == ip6_mrouter)
612 1.2 itojun ip6_mrouter_done();
613 1.2 itojun /* xxx: RSVP */
614 1.2 itojun if (in6p->in6p_icmp6filt) {
615 1.2 itojun FREE(in6p->in6p_icmp6filt, M_PCB);
616 1.2 itojun in6p->in6p_icmp6filt = NULL;
617 1.2 itojun }
618 1.2 itojun in6_pcbdetach(in6p);
619 1.2 itojun break;
620 1.2 itojun
621 1.2 itojun case PRU_BIND:
622 1.2 itojun {
623 1.2 itojun struct sockaddr_in6 *addr = mtod(nam, struct sockaddr_in6 *);
624 1.2 itojun struct ifaddr *ia = NULL;
625 1.2 itojun
626 1.2 itojun if (nam->m_len != sizeof(*addr)) {
627 1.2 itojun error = EINVAL;
628 1.2 itojun break;
629 1.2 itojun }
630 1.2 itojun if ((ifnet.tqh_first == 0) ||
631 1.2 itojun (addr->sin6_family != AF_INET6) ||
632 1.12 itojun (!IN6_IS_ADDR_UNSPECIFIED(&addr->sin6_addr) &&
633 1.2 itojun (ia = ifa_ifwithaddr((struct sockaddr *)addr)) == 0)) {
634 1.2 itojun error = EADDRNOTAVAIL;
635 1.2 itojun break;
636 1.2 itojun }
637 1.2 itojun if (ia &&
638 1.2 itojun ((struct in6_ifaddr *)ia)->ia6_flags &
639 1.2 itojun (IN6_IFF_ANYCAST|IN6_IFF_NOTREADY|
640 1.2 itojun IN6_IFF_DETACHED|IN6_IFF_DEPRECATED)) {
641 1.2 itojun error = EADDRNOTAVAIL;
642 1.2 itojun break;
643 1.2 itojun }
644 1.2 itojun in6p->in6p_laddr = addr->sin6_addr;
645 1.2 itojun break;
646 1.2 itojun }
647 1.2 itojun
648 1.2 itojun case PRU_CONNECT:
649 1.2 itojun {
650 1.2 itojun struct sockaddr_in6 *addr = mtod(nam, struct sockaddr_in6 *);
651 1.2 itojun struct in6_addr *in6a = NULL;
652 1.2 itojun
653 1.2 itojun if (nam->m_len != sizeof(*addr)) {
654 1.2 itojun error = EINVAL;
655 1.2 itojun break;
656 1.2 itojun }
657 1.2 itojun if (ifnet.tqh_first == 0) {
658 1.2 itojun error = EADDRNOTAVAIL;
659 1.2 itojun break;
660 1.2 itojun }
661 1.2 itojun if (addr->sin6_family != AF_INET6) {
662 1.2 itojun error = EAFNOSUPPORT;
663 1.2 itojun break;
664 1.2 itojun }
665 1.2 itojun
666 1.2 itojun /* Source address selection. XXX: need pcblookup? */
667 1.12 itojun in6a = in6_selectsrc(addr, in6p->in6p_outputopts,
668 1.12 itojun in6p->in6p_moptions,
669 1.12 itojun &in6p->in6p_route,
670 1.12 itojun &in6p->in6p_laddr,
671 1.12 itojun &error);
672 1.12 itojun if (in6a == NULL) {
673 1.2 itojun if (error == 0)
674 1.2 itojun error = EADDRNOTAVAIL;
675 1.2 itojun break;
676 1.2 itojun }
677 1.2 itojun in6p->in6p_laddr = *in6a;
678 1.2 itojun in6p->in6p_faddr = addr->sin6_addr;
679 1.2 itojun soisconnected(so);
680 1.2 itojun break;
681 1.2 itojun }
682 1.2 itojun
683 1.2 itojun case PRU_CONNECT2:
684 1.2 itojun error = EOPNOTSUPP;
685 1.2 itojun break;
686 1.2 itojun
687 1.2 itojun /*
688 1.2 itojun * Mark the connection as being incapable of futther input.
689 1.2 itojun */
690 1.2 itojun case PRU_SHUTDOWN:
691 1.2 itojun socantsendmore(so);
692 1.2 itojun break;
693 1.2 itojun /*
694 1.2 itojun * Ship a packet out. The appropriate raw output
695 1.2 itojun * routine handles any messaging necessary.
696 1.2 itojun */
697 1.2 itojun case PRU_SEND:
698 1.2 itojun {
699 1.2 itojun struct sockaddr_in6 tmp;
700 1.2 itojun struct sockaddr_in6 *dst;
701 1.2 itojun
702 1.2 itojun if (so->so_state & SS_ISCONNECTED) {
703 1.2 itojun if (nam) {
704 1.2 itojun error = EISCONN;
705 1.2 itojun break;
706 1.2 itojun }
707 1.2 itojun /* XXX */
708 1.2 itojun bzero(&tmp, sizeof(tmp));
709 1.2 itojun tmp.sin6_family = AF_INET6;
710 1.2 itojun tmp.sin6_len = sizeof(struct sockaddr_in6);
711 1.2 itojun bcopy(&in6p->in6p_faddr, &tmp.sin6_addr,
712 1.2 itojun sizeof(struct in6_addr));
713 1.2 itojun dst = &tmp;
714 1.2 itojun } else {
715 1.2 itojun if (nam == NULL) {
716 1.2 itojun error = ENOTCONN;
717 1.2 itojun break;
718 1.2 itojun }
719 1.2 itojun dst = mtod(nam, struct sockaddr_in6 *);
720 1.2 itojun }
721 1.2 itojun error = rip6_output(m, so, dst, control);
722 1.2 itojun m = NULL;
723 1.2 itojun break;
724 1.2 itojun }
725 1.2 itojun
726 1.2 itojun case PRU_SENSE:
727 1.2 itojun /*
728 1.2 itojun * stat: don't bother with a blocksize
729 1.2 itojun */
730 1.2 itojun return(0);
731 1.2 itojun /*
732 1.2 itojun * Not supported.
733 1.2 itojun */
734 1.2 itojun case PRU_RCVOOB:
735 1.2 itojun case PRU_RCVD:
736 1.2 itojun case PRU_LISTEN:
737 1.2 itojun case PRU_ACCEPT:
738 1.2 itojun case PRU_SENDOOB:
739 1.2 itojun error = EOPNOTSUPP;
740 1.2 itojun break;
741 1.2 itojun
742 1.2 itojun case PRU_SOCKADDR:
743 1.2 itojun in6_setsockaddr(in6p, nam);
744 1.2 itojun break;
745 1.2 itojun
746 1.2 itojun case PRU_PEERADDR:
747 1.2 itojun in6_setpeeraddr(in6p, nam);
748 1.2 itojun break;
749 1.2 itojun
750 1.2 itojun default:
751 1.2 itojun panic("rip6_usrreq");
752 1.2 itojun }
753 1.2 itojun if (m != NULL)
754 1.2 itojun m_freem(m);
755 1.2 itojun return(error);
756 1.2 itojun }
757