Home | History | Annotate | Line # | Download | only in netinet6
scope6.c revision 1.14
      1 /*	$NetBSD: scope6.c,v 1.14 2016/06/15 06:01:21 ozaki-r Exp $	*/
      2 /*	$KAME$	*/
      3 
      4 /*-
      5  * Copyright (C) 2000 WIDE Project.
      6  * All rights reserved.
      7  *
      8  * Redistribution and use in source and binary forms, with or without
      9  * modification, are permitted provided that the following conditions
     10  * are met:
     11  * 1. Redistributions of source code must retain the above copyright
     12  *    notice, this list of conditions and the following disclaimer.
     13  * 2. Redistributions in binary form must reproduce the above copyright
     14  *    notice, this list of conditions and the following disclaimer in the
     15  *    documentation and/or other materials provided with the distribution.
     16  * 3. Neither the name of the project nor the names of its contributors
     17  *    may be used to endorse or promote products derived from this software
     18  *    without specific prior written permission.
     19  *
     20  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     30  * SUCH DAMAGE.
     31  */
     32 
     33 #include <sys/cdefs.h>
     34 __KERNEL_RCSID(0, "$NetBSD: scope6.c,v 1.14 2016/06/15 06:01:21 ozaki-r Exp $");
     35 
     36 #include <sys/param.h>
     37 #include <sys/malloc.h>
     38 #include <sys/mbuf.h>
     39 #include <sys/socket.h>
     40 #include <sys/systm.h>
     41 #include <sys/queue.h>
     42 #include <sys/syslog.h>
     43 
     44 #include <net/if.h>
     45 
     46 #include <netinet/in.h>
     47 
     48 #include <netinet6/in6_var.h>
     49 #include <netinet6/scope6_var.h>
     50 
     51 #ifdef ENABLE_DEFAULT_SCOPE
     52 int ip6_use_defzone = 1;
     53 #else
     54 int ip6_use_defzone = 0;
     55 #endif
     56 
     57 static struct scope6_id sid_default;
     58 #define SID(ifp) \
     59 	(((struct in6_ifextra *)(ifp)->if_afdata[AF_INET6])->scope6_id)
     60 
     61 void
     62 scope6_init(void)
     63 {
     64 
     65 	memset(&sid_default, 0, sizeof(sid_default));
     66 }
     67 
     68 struct scope6_id *
     69 scope6_ifattach(struct ifnet *ifp)
     70 {
     71 	struct scope6_id *sid;
     72 
     73 	sid = (struct scope6_id *)malloc(sizeof(*sid), M_IFADDR, M_WAITOK);
     74 	memset(sid, 0, sizeof(*sid));
     75 
     76 	/*
     77 	 * XXX: IPV6_ADDR_SCOPE_xxx macros are not standard.
     78 	 * Should we rather hardcode here?
     79 	 */
     80 	sid->s6id_list[IPV6_ADDR_SCOPE_INTFACELOCAL] = ifp->if_index;
     81 	sid->s6id_list[IPV6_ADDR_SCOPE_LINKLOCAL] = ifp->if_index;
     82 #ifdef MULTI_SCOPE
     83 	/* by default, we don't care about scope boundary for these scopes. */
     84 	sid->s6id_list[IPV6_ADDR_SCOPE_SITELOCAL] = 1;
     85 	sid->s6id_list[IPV6_ADDR_SCOPE_ORGLOCAL] = 1;
     86 #endif
     87 
     88 	return sid;
     89 }
     90 
     91 void
     92 scope6_ifdetach(struct scope6_id *sid)
     93 {
     94 
     95 	free(sid, M_IFADDR);
     96 }
     97 
     98 int
     99 scope6_set(struct ifnet *ifp, const struct scope6_id *idlist)
    100 {
    101 	int i;
    102 	int error = 0;
    103 	struct scope6_id *sid = NULL;
    104 
    105 	sid = SID(ifp);
    106 
    107 	if (!sid)	/* paranoid? */
    108 		return (EINVAL);
    109 
    110 	/*
    111 	 * XXX: We need more consistency checks of the relationship among
    112 	 * scopes (e.g. an organization should be larger than a site).
    113 	 */
    114 
    115 	/*
    116 	 * TODO(XXX): after setting, we should reflect the changes to
    117 	 * interface addresses, routing table entries, PCB entries...
    118 	 */
    119 
    120 	for (i = 0; i < 16; i++) {
    121 		if (idlist->s6id_list[i] &&
    122 		    idlist->s6id_list[i] != sid->s6id_list[i]) {
    123 			int s;
    124 			/*
    125 			 * An interface zone ID must be the corresponding
    126 			 * interface index by definition.
    127 			 */
    128 			if (i == IPV6_ADDR_SCOPE_INTFACELOCAL &&
    129 			    idlist->s6id_list[i] != ifp->if_index)
    130 				return (EINVAL);
    131 
    132 			s = pserialize_read_enter();
    133 			if (i == IPV6_ADDR_SCOPE_LINKLOCAL &&
    134 			    !if_byindex(idlist->s6id_list[i])) {
    135 				/*
    136 				 * XXX: theoretically, there should be no
    137 				 * relationship between link IDs and interface
    138 				 * IDs, but we check the consistency for
    139 				 * safety in later use.
    140 				 */
    141 				pserialize_read_exit(s);
    142 				return (EINVAL);
    143 			}
    144 			pserialize_read_exit(s);
    145 
    146 			/*
    147 			 * XXX: we must need lots of work in this case,
    148 			 * but we simply set the new value in this initial
    149 			 * implementation.
    150 			 */
    151 			sid->s6id_list[i] = idlist->s6id_list[i];
    152 		}
    153 	}
    154 
    155 	return (error);
    156 }
    157 
    158 int
    159 scope6_get(const struct ifnet *ifp, struct scope6_id *idlist)
    160 {
    161 	/* We only need to lock the interface's afdata for SID() to work. */
    162 	const struct scope6_id *sid = SID(ifp);
    163 
    164 	if (sid == NULL)	/* paranoid? */
    165 		return EINVAL;
    166 
    167 	*idlist = *sid;
    168 
    169 	return 0;
    170 }
    171 
    172 /*
    173  * Get a scope of the address. Interface-local, link-local, site-local
    174  * or global.
    175  */
    176 int
    177 in6_addrscope(const struct in6_addr *addr)
    178 {
    179 	int scope;
    180 
    181 	if (addr->s6_addr[0] == 0xfe) {
    182 		scope = addr->s6_addr[1] & 0xc0;
    183 
    184 		switch (scope) {
    185 		case 0x80:
    186 			return IPV6_ADDR_SCOPE_LINKLOCAL;
    187 		case 0xc0:
    188 			return IPV6_ADDR_SCOPE_SITELOCAL;
    189 		default:
    190 			return IPV6_ADDR_SCOPE_GLOBAL; /* just in case */
    191 		}
    192 	}
    193 
    194 
    195 	if (addr->s6_addr[0] == 0xff) {
    196 		scope = addr->s6_addr[1] & 0x0f;
    197 
    198 		/*
    199 		 * due to other scope such as reserved,
    200 		 * return scope doesn't work.
    201 		 */
    202 		switch (scope) {
    203 		case IPV6_ADDR_SCOPE_INTFACELOCAL:
    204 			return IPV6_ADDR_SCOPE_INTFACELOCAL;
    205 		case IPV6_ADDR_SCOPE_LINKLOCAL:
    206 			return IPV6_ADDR_SCOPE_LINKLOCAL;
    207 		case IPV6_ADDR_SCOPE_SITELOCAL:
    208 			return IPV6_ADDR_SCOPE_SITELOCAL;
    209 		default:
    210 			return IPV6_ADDR_SCOPE_GLOBAL;
    211 		}
    212 	}
    213 
    214 	if (memcmp(&in6addr_loopback, addr, sizeof(*addr) - 1) == 0) {
    215 		if (addr->s6_addr[15] == 1) /* loopback */
    216 			return IPV6_ADDR_SCOPE_LINKLOCAL;
    217 		if (addr->s6_addr[15] == 0) {
    218 			/*
    219 			 * Regard the unspecified addresses as global,
    220 			 * since it has no ambiguity.
    221 			 * XXX: not sure if it's correct...
    222 			 */
    223 			return IPV6_ADDR_SCOPE_GLOBAL;
    224 		}
    225 	}
    226 
    227 	return IPV6_ADDR_SCOPE_GLOBAL;
    228 }
    229 
    230 /* note that ifp argument might be NULL */
    231 void
    232 scope6_setdefault(struct ifnet *ifp)
    233 {
    234 
    235 	/*
    236 	 * Currently, this function just sets the default "interfaces"
    237 	 * and "links" according to the given interface.
    238 	 * We might eventually have to separate the notion of "link" from
    239 	 * "interface" and provide a user interface to set the default.
    240 	 */
    241 	if (ifp) {
    242 		sid_default.s6id_list[IPV6_ADDR_SCOPE_INTFACELOCAL] =
    243 			ifp->if_index;
    244 		sid_default.s6id_list[IPV6_ADDR_SCOPE_LINKLOCAL] =
    245 			ifp->if_index;
    246 	} else {
    247 		sid_default.s6id_list[IPV6_ADDR_SCOPE_INTFACELOCAL] = 0;
    248 		sid_default.s6id_list[IPV6_ADDR_SCOPE_LINKLOCAL] = 0;
    249 	}
    250 }
    251 
    252 int
    253 scope6_get_default(struct scope6_id *idlist)
    254 {
    255 
    256 	*idlist = sid_default;
    257 
    258 	return (0);
    259 }
    260 
    261 uint32_t
    262 scope6_addr2default(const struct in6_addr *addr)
    263 {
    264 	uint32_t id;
    265 
    266 	/*
    267 	 * special case: The loopback address should be considered as
    268 	 * link-local, but there's no ambiguity in the syntax.
    269 	 */
    270 	if (IN6_IS_ADDR_LOOPBACK(addr))
    271 		return (0);
    272 
    273 	/*
    274 	 * XXX: 32-bit read is atomic on all our platforms, is it OK
    275 	 * not to lock here?
    276 	 */
    277 	id = sid_default.s6id_list[in6_addrscope(addr)];
    278 
    279 	return (id);
    280 }
    281 
    282 /*
    283  * Validate the specified scope zone ID in the sin6_scope_id field.  If the ID
    284  * is unspecified (=0), needs to be specified, and the default zone ID can be
    285  * used, the default value will be used.
    286  * This routine then generates the kernel-internal form: if the address scope
    287  * of is interface-local or link-local, embed the interface index in the
    288  * address.
    289  */
    290 int
    291 sa6_embedscope(struct sockaddr_in6 *sin6, int defaultok)
    292 {
    293 	struct ifnet *ifp;
    294 	uint32_t zoneid;
    295 
    296 	if ((zoneid = sin6->sin6_scope_id) == 0 && defaultok)
    297 		zoneid = scope6_addr2default(&sin6->sin6_addr);
    298 
    299 	if (zoneid != 0 &&
    300 	    (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr) ||
    301 	    IN6_IS_ADDR_MC_INTFACELOCAL(&sin6->sin6_addr))) {
    302 		int s;
    303 		/*
    304 		 * At this moment, we only check interface-local and
    305 		 * link-local scope IDs, and use interface indices as the
    306 		 * zone IDs assuming a one-to-one mapping between interfaces
    307 		 * and links.
    308 		 */
    309 		s = pserialize_read_enter();
    310 		ifp = if_byindex(zoneid);
    311 		if (ifp == NULL) {
    312 			pserialize_read_exit(s);
    313 			return (ENXIO);
    314 		}
    315 		pserialize_read_exit(s);
    316 
    317 		/* XXX assignment to 16bit from 32bit variable */
    318 		sin6->sin6_addr.s6_addr16[1] = htons(zoneid & 0xffff);
    319 
    320 		sin6->sin6_scope_id = 0;
    321 	}
    322 
    323 	return 0;
    324 }
    325 
    326 struct sockaddr *
    327 sockaddr_in6_externalize(struct sockaddr *dst, socklen_t socklen,
    328     const struct sockaddr *src)
    329 {
    330 	struct sockaddr_in6 *sin6;
    331 
    332 	sin6 = satosin6(sockaddr_copy(dst, socklen, src));
    333 
    334 	if (sin6 == NULL || sa6_recoverscope(sin6) != 0)
    335 		return NULL;
    336 
    337 	return dst;
    338 }
    339 
    340 /*
    341  * generate standard sockaddr_in6 from embedded form.
    342  */
    343 int
    344 sa6_recoverscope(struct sockaddr_in6 *sin6)
    345 {
    346 	uint32_t zoneid;
    347 
    348 	if (sin6->sin6_scope_id != 0) {
    349 		log(LOG_NOTICE,
    350 		    "sa6_recoverscope: assumption failure (non 0 ID): %s%%%d\n",
    351 		    ip6_sprintf(&sin6->sin6_addr), sin6->sin6_scope_id);
    352 		/* XXX: proceed anyway... */
    353 	}
    354 	if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr) ||
    355 	    IN6_IS_ADDR_MC_INTFACELOCAL(&sin6->sin6_addr)) {
    356 		/*
    357 		 * KAME assumption: link id == interface id
    358 		 */
    359 		zoneid = ntohs(sin6->sin6_addr.s6_addr16[1]);
    360 		if (zoneid) {
    361 			int s = pserialize_read_enter();
    362 			if (!if_byindex(zoneid)) {
    363 				pserialize_read_exit(s);
    364 				return (ENXIO);
    365 			}
    366 			pserialize_read_exit(s);
    367 			sin6->sin6_addr.s6_addr16[1] = 0;
    368 			sin6->sin6_scope_id = zoneid;
    369 		}
    370 	}
    371 
    372 	return 0;
    373 }
    374 
    375 int
    376 in6_setzoneid(struct in6_addr *in6, uint32_t zoneid)
    377 {
    378 	if (IN6_IS_SCOPE_EMBEDDABLE(in6))
    379 		in6->s6_addr16[1] = htons(zoneid & 0xffff); /* XXX */
    380 
    381 	return 0;
    382 }
    383 
    384 /*
    385  * Determine the appropriate scope zone ID for in6 and ifp.  If ret_id is
    386  * non NULL, it is set to the zone ID.  If the zone ID needs to be embedded
    387  * in the in6_addr structure, in6 will be modified.
    388  */
    389 int
    390 in6_setscope(struct in6_addr *in6, const struct ifnet *ifp, uint32_t *ret_id)
    391 {
    392 	int scope;
    393 	uint32_t zoneid = 0;
    394 	const struct scope6_id *sid = SID(ifp);
    395 
    396 	KASSERT(sid != NULL);
    397 
    398 	/*
    399 	 * special case: the loopback address can only belong to a loopback
    400 	 * interface.
    401 	 */
    402 	if (IN6_IS_ADDR_LOOPBACK(in6)) {
    403 		if (!(ifp->if_flags & IFF_LOOPBACK))
    404 			return (EINVAL);
    405 		else {
    406 			if (ret_id != NULL)
    407 				*ret_id = 0; /* there's no ambiguity */
    408 			return (0);
    409 		}
    410 	}
    411 
    412 	scope = in6_addrscope(in6);
    413 
    414 	switch (scope) {
    415 	case IPV6_ADDR_SCOPE_INTFACELOCAL: /* should be interface index */
    416 		zoneid = sid->s6id_list[IPV6_ADDR_SCOPE_INTFACELOCAL];
    417 		break;
    418 
    419 	case IPV6_ADDR_SCOPE_LINKLOCAL:
    420 		zoneid = sid->s6id_list[IPV6_ADDR_SCOPE_LINKLOCAL];
    421 		break;
    422 
    423 	case IPV6_ADDR_SCOPE_SITELOCAL:
    424 		zoneid = sid->s6id_list[IPV6_ADDR_SCOPE_SITELOCAL];
    425 		break;
    426 
    427 	case IPV6_ADDR_SCOPE_ORGLOCAL:
    428 		zoneid = sid->s6id_list[IPV6_ADDR_SCOPE_ORGLOCAL];
    429 		break;
    430 
    431 	default:
    432 		zoneid = 0;	/* XXX: treat as global. */
    433 		break;
    434 	}
    435 
    436 	if (ret_id != NULL)
    437 		*ret_id = zoneid;
    438 
    439 	return in6_setzoneid(in6, zoneid);
    440 }
    441 
    442 const char *
    443 in6_getscopename(const struct in6_addr *addr)
    444 {
    445 	switch (in6_addrscope(addr)) {
    446 	case IPV6_ADDR_SCOPE_INTFACELOCAL:	return "interface";
    447 #if IPV6_ADDR_SCOPE_INTFACELOCAL != IPV6_ADDR_SCOPE_NODELOCAL
    448 	case IPV6_ADDR_SCOPE_NODELOCAL:		return "node";
    449 #endif
    450 	case IPV6_ADDR_SCOPE_LINKLOCAL:		return "link";
    451 	case IPV6_ADDR_SCOPE_SITELOCAL:		return "site";
    452 	case IPV6_ADDR_SCOPE_ORGLOCAL:		return "organization";
    453 	case IPV6_ADDR_SCOPE_GLOBAL:		return "global";
    454 	default:				return "unknown";
    455 	}
    456 }
    457 
    458 /*
    459  * Just clear the embedded scope identifier.  Return 0 if the original address
    460  * is intact; return non 0 if the address is modified.
    461  */
    462 int
    463 in6_clearscope(struct in6_addr *in6)
    464 {
    465 	int modified = 0;
    466 
    467 	if (IN6_IS_SCOPE_LINKLOCAL(in6) || IN6_IS_ADDR_MC_INTFACELOCAL(in6)) {
    468 		if (in6->s6_addr16[1] != 0)
    469 			modified = 1;
    470 		in6->s6_addr16[1] = 0;
    471 	}
    472 
    473 	return (modified);
    474 }
    475