keysock.c revision 1.5.2.8
1 1.5.2.8 skrll /* $NetBSD: keysock.c,v 1.5.2.8 2005/11/10 14:11:35 skrll Exp $ */ 2 1.5.2.2 skrll /* $FreeBSD: src/sys/netipsec/keysock.c,v 1.3.2.1 2003/01/24 05:11:36 sam Exp $ */ 3 1.5.2.2 skrll /* $KAME: keysock.c,v 1.25 2001/08/13 20:07:41 itojun Exp $ */ 4 1.5.2.2 skrll 5 1.5.2.2 skrll /* 6 1.5.2.2 skrll * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 7 1.5.2.2 skrll * All rights reserved. 8 1.5.2.2 skrll * 9 1.5.2.2 skrll * Redistribution and use in source and binary forms, with or without 10 1.5.2.2 skrll * modification, are permitted provided that the following conditions 11 1.5.2.2 skrll * are met: 12 1.5.2.2 skrll * 1. Redistributions of source code must retain the above copyright 13 1.5.2.2 skrll * notice, this list of conditions and the following disclaimer. 14 1.5.2.2 skrll * 2. Redistributions in binary form must reproduce the above copyright 15 1.5.2.2 skrll * notice, this list of conditions and the following disclaimer in the 16 1.5.2.2 skrll * documentation and/or other materials provided with the distribution. 17 1.5.2.2 skrll * 3. Neither the name of the project nor the names of its contributors 18 1.5.2.2 skrll * may be used to endorse or promote products derived from this software 19 1.5.2.2 skrll * without specific prior written permission. 20 1.5.2.2 skrll * 21 1.5.2.2 skrll * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 22 1.5.2.2 skrll * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 1.5.2.2 skrll * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 1.5.2.2 skrll * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 25 1.5.2.2 skrll * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 1.5.2.2 skrll * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 1.5.2.2 skrll * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 1.5.2.2 skrll * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 1.5.2.2 skrll * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 1.5.2.2 skrll * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 1.5.2.2 skrll * SUCH DAMAGE. 32 1.5.2.2 skrll */ 33 1.5.2.2 skrll 34 1.5.2.2 skrll #include <sys/cdefs.h> 35 1.5.2.8 skrll __KERNEL_RCSID(0, "$NetBSD: keysock.c,v 1.5.2.8 2005/11/10 14:11:35 skrll Exp $"); 36 1.5.2.2 skrll 37 1.5.2.2 skrll #include "opt_ipsec.h" 38 1.5.2.2 skrll 39 1.5.2.2 skrll /* This code has derived from sys/net/rtsock.c on FreeBSD2.2.5 */ 40 1.5.2.2 skrll 41 1.5.2.2 skrll #include <sys/types.h> 42 1.5.2.2 skrll #include <sys/param.h> 43 1.5.2.2 skrll #include <sys/domain.h> 44 1.5.2.2 skrll #include <sys/errno.h> 45 1.5.2.2 skrll #include <sys/kernel.h> 46 1.5.2.2 skrll #include <sys/malloc.h> 47 1.5.2.2 skrll #include <sys/mbuf.h> 48 1.5.2.2 skrll #include <sys/protosw.h> 49 1.5.2.2 skrll #include <sys/signalvar.h> 50 1.5.2.2 skrll #include <sys/socket.h> 51 1.5.2.2 skrll #include <sys/socketvar.h> 52 1.5.2.2 skrll #include <sys/sysctl.h> 53 1.5.2.2 skrll #include <sys/systm.h> 54 1.5.2.2 skrll 55 1.5.2.2 skrll #include <net/raw_cb.h> 56 1.5.2.2 skrll #include <net/route.h> 57 1.5.2.2 skrll 58 1.5.2.2 skrll #include <net/pfkeyv2.h> 59 1.5.2.2 skrll #include <netipsec/key.h> 60 1.5.2.2 skrll #include <netipsec/keysock.h> 61 1.5.2.2 skrll #include <netipsec/key_debug.h> 62 1.5.2.2 skrll 63 1.5.2.2 skrll #include <netipsec/ipsec_osdep.h> 64 1.5.2.2 skrll 65 1.5.2.2 skrll #include <machine/stdarg.h> 66 1.5.2.2 skrll 67 1.5.2.2 skrll typedef int pr_output_t (struct mbuf *, struct socket *); 68 1.5.2.2 skrll 69 1.5.2.2 skrll struct key_cb { 70 1.5.2.2 skrll int key_count; 71 1.5.2.2 skrll int any_count; 72 1.5.2.2 skrll }; 73 1.5.2.2 skrll static struct key_cb key_cb; 74 1.5.2.2 skrll 75 1.5.2.2 skrll static struct sockaddr key_dst = { 2, PF_KEY, }; 76 1.5.2.2 skrll static struct sockaddr key_src = { 2, PF_KEY, }; 77 1.5.2.2 skrll 78 1.5.2.2 skrll 79 1.5.2.2 skrll static int key_sendup0 __P((struct rawcb *, struct mbuf *, int, int)); 80 1.5.2.2 skrll 81 1.5.2.2 skrll struct pfkeystat pfkeystat; 82 1.5.2.2 skrll 83 1.5.2.2 skrll int key_registered_sb_max = (NMBCLUSTERS * MHLEN); /* XXX arbitrary */ 84 1.5.2.2 skrll 85 1.5.2.2 skrll /* XXX sysctl */ 86 1.5.2.2 skrll #ifdef __FreeBSD__ 87 1.5.2.7 skrll SYSCTL_INT(_net_key, OID_AUTO, registered_sbmax, CTLFLAG_RD, 88 1.5.2.2 skrll &key_registered_sb_max , 0, "Maximum kernel-to-user PFKEY datagram size"); 89 1.5.2.2 skrll #endif 90 1.5.2.2 skrll 91 1.5.2.2 skrll /* 92 1.5.2.2 skrll * key_output() 93 1.5.2.2 skrll */ 94 1.5.2.2 skrll int 95 1.5.2.2 skrll key_output(struct mbuf *m, ...) 96 1.5.2.2 skrll { 97 1.5.2.2 skrll struct sadb_msg *msg; 98 1.5.2.2 skrll int len, error = 0; 99 1.5.2.2 skrll int s; 100 1.5.2.2 skrll struct socket *so; 101 1.5.2.2 skrll va_list ap; 102 1.5.2.2 skrll 103 1.5.2.2 skrll va_start(ap, m); 104 1.5.2.2 skrll so = va_arg(ap, struct socket *); 105 1.5.2.2 skrll va_end(ap); 106 1.5.2.2 skrll 107 1.5.2.2 skrll if (m == 0) 108 1.5.2.8 skrll panic("key_output: NULL pointer was passed"); 109 1.5.2.2 skrll 110 1.5.2.2 skrll pfkeystat.out_total++; 111 1.5.2.2 skrll pfkeystat.out_bytes += m->m_pkthdr.len; 112 1.5.2.2 skrll 113 1.5.2.2 skrll len = m->m_pkthdr.len; 114 1.5.2.2 skrll if (len < sizeof(struct sadb_msg)) { 115 1.5.2.2 skrll pfkeystat.out_tooshort++; 116 1.5.2.2 skrll error = EINVAL; 117 1.5.2.2 skrll goto end; 118 1.5.2.2 skrll } 119 1.5.2.2 skrll 120 1.5.2.2 skrll if (m->m_len < sizeof(struct sadb_msg)) { 121 1.5.2.2 skrll if ((m = m_pullup(m, sizeof(struct sadb_msg))) == 0) { 122 1.5.2.2 skrll pfkeystat.out_nomem++; 123 1.5.2.2 skrll error = ENOBUFS; 124 1.5.2.2 skrll goto end; 125 1.5.2.2 skrll } 126 1.5.2.2 skrll } 127 1.5.2.2 skrll 128 1.5.2.2 skrll if ((m->m_flags & M_PKTHDR) == 0) 129 1.5.2.2 skrll panic("key_output: not M_PKTHDR ??"); 130 1.5.2.2 skrll 131 1.5.2.2 skrll KEYDEBUG(KEYDEBUG_KEY_DUMP, kdebug_mbuf(m)); 132 1.5.2.2 skrll 133 1.5.2.2 skrll msg = mtod(m, struct sadb_msg *); 134 1.5.2.2 skrll pfkeystat.out_msgtype[msg->sadb_msg_type]++; 135 1.5.2.2 skrll if (len != PFKEY_UNUNIT64(msg->sadb_msg_len)) { 136 1.5.2.2 skrll pfkeystat.out_invlen++; 137 1.5.2.2 skrll error = EINVAL; 138 1.5.2.2 skrll goto end; 139 1.5.2.2 skrll } 140 1.5.2.2 skrll 141 1.5.2.2 skrll /*XXX giant lock*/ 142 1.5.2.2 skrll s = splsoftnet(); 143 1.5.2.2 skrll error = key_parse(m, so); 144 1.5.2.2 skrll m = NULL; 145 1.5.2.2 skrll splx(s); 146 1.5.2.2 skrll end: 147 1.5.2.2 skrll if (m) 148 1.5.2.2 skrll m_freem(m); 149 1.5.2.2 skrll return error; 150 1.5.2.2 skrll } 151 1.5.2.2 skrll 152 1.5.2.2 skrll /* 153 1.5.2.2 skrll * send message to the socket. 154 1.5.2.2 skrll */ 155 1.5.2.2 skrll static int 156 1.5.2.2 skrll key_sendup0(rp, m, promisc, sbprio) 157 1.5.2.2 skrll struct rawcb *rp; 158 1.5.2.2 skrll struct mbuf *m; 159 1.5.2.2 skrll int promisc; 160 1.5.2.2 skrll { 161 1.5.2.2 skrll int error; 162 1.5.2.2 skrll int ok; 163 1.5.2.2 skrll 164 1.5.2.2 skrll if (promisc) { 165 1.5.2.2 skrll struct sadb_msg *pmsg; 166 1.5.2.2 skrll 167 1.5.2.2 skrll M_PREPEND(m, sizeof(struct sadb_msg), M_DONTWAIT); 168 1.5.2.2 skrll if (m && m->m_len < sizeof(struct sadb_msg)) 169 1.5.2.2 skrll m = m_pullup(m, sizeof(struct sadb_msg)); 170 1.5.2.2 skrll if (!m) { 171 1.5.2.2 skrll pfkeystat.in_nomem++; 172 1.5.2.2 skrll m_freem(m); 173 1.5.2.2 skrll return ENOBUFS; 174 1.5.2.2 skrll } 175 1.5.2.2 skrll m->m_pkthdr.len += sizeof(*pmsg); 176 1.5.2.2 skrll 177 1.5.2.2 skrll pmsg = mtod(m, struct sadb_msg *); 178 1.5.2.2 skrll bzero(pmsg, sizeof(*pmsg)); 179 1.5.2.2 skrll pmsg->sadb_msg_version = PF_KEY_V2; 180 1.5.2.2 skrll pmsg->sadb_msg_type = SADB_X_PROMISC; 181 1.5.2.2 skrll pmsg->sadb_msg_len = PFKEY_UNIT64(m->m_pkthdr.len); 182 1.5.2.2 skrll /* pid and seq? */ 183 1.5.2.2 skrll 184 1.5.2.2 skrll pfkeystat.in_msgtype[pmsg->sadb_msg_type]++; 185 1.5.2.2 skrll } 186 1.5.2.2 skrll 187 1.5.2.2 skrll if (sbprio == 0) 188 1.5.2.2 skrll ok = sbappendaddr(&rp->rcb_socket->so_rcv, 189 1.5.2.2 skrll (struct sockaddr *)&key_src, m, NULL); 190 1.5.2.2 skrll else 191 1.5.2.2 skrll ok = sbappendaddrchain(&rp->rcb_socket->so_rcv, 192 1.5.2.2 skrll (struct sockaddr *)&key_src, m, sbprio); 193 1.5.2.2 skrll 194 1.5.2.2 skrll if (!ok) { 195 1.5.2.2 skrll pfkeystat.in_nomem++; 196 1.5.2.2 skrll m_freem(m); 197 1.5.2.2 skrll error = ENOBUFS; 198 1.5.2.2 skrll } else 199 1.5.2.2 skrll error = 0; 200 1.5.2.2 skrll sorwakeup(rp->rcb_socket); 201 1.5.2.2 skrll return error; 202 1.5.2.2 skrll } 203 1.5.2.2 skrll 204 1.5.2.2 skrll /* XXX this interface should be obsoleted. */ 205 1.5.2.2 skrll int 206 1.5.2.2 skrll key_sendup(so, msg, len, target) 207 1.5.2.2 skrll struct socket *so; 208 1.5.2.2 skrll struct sadb_msg *msg; 209 1.5.2.2 skrll u_int len; 210 1.5.2.2 skrll int target; /*target of the resulting message*/ 211 1.5.2.2 skrll { 212 1.5.2.2 skrll struct mbuf *m, *n, *mprev; 213 1.5.2.2 skrll int tlen; 214 1.5.2.2 skrll 215 1.5.2.2 skrll /* sanity check */ 216 1.5.2.2 skrll if (so == 0 || msg == 0) 217 1.5.2.8 skrll panic("key_sendup: NULL pointer was passed"); 218 1.5.2.2 skrll 219 1.5.2.2 skrll KEYDEBUG(KEYDEBUG_KEY_DUMP, 220 1.5.2.2 skrll printf("key_sendup: \n"); 221 1.5.2.2 skrll kdebug_sadb(msg)); 222 1.5.2.2 skrll 223 1.5.2.2 skrll /* 224 1.5.2.2 skrll * we increment statistics here, just in case we have ENOBUFS 225 1.5.2.2 skrll * in this function. 226 1.5.2.2 skrll */ 227 1.5.2.2 skrll pfkeystat.in_total++; 228 1.5.2.2 skrll pfkeystat.in_bytes += len; 229 1.5.2.2 skrll pfkeystat.in_msgtype[msg->sadb_msg_type]++; 230 1.5.2.2 skrll 231 1.5.2.2 skrll /* 232 1.5.2.2 skrll * Get mbuf chain whenever possible (not clusters), 233 1.5.2.2 skrll * to save socket buffer. We'll be generating many SADB_ACQUIRE 234 1.5.2.2 skrll * messages to listening key sockets. If we simply allocate clusters, 235 1.5.2.2 skrll * sbappendaddr() will raise ENOBUFS due to too little sbspace(). 236 1.5.2.2 skrll * sbspace() computes # of actual data bytes AND mbuf region. 237 1.5.2.2 skrll * 238 1.5.2.2 skrll * TODO: SADB_ACQUIRE filters should be implemented. 239 1.5.2.2 skrll */ 240 1.5.2.2 skrll tlen = len; 241 1.5.2.2 skrll m = mprev = NULL; 242 1.5.2.2 skrll while (tlen > 0) { 243 1.5.2.2 skrll if (tlen == len) { 244 1.5.2.2 skrll MGETHDR(n, M_DONTWAIT, MT_DATA); 245 1.5.2.2 skrll n->m_len = MHLEN; 246 1.5.2.2 skrll } else { 247 1.5.2.2 skrll MGET(n, M_DONTWAIT, MT_DATA); 248 1.5.2.2 skrll n->m_len = MLEN; 249 1.5.2.2 skrll } 250 1.5.2.2 skrll if (!n) { 251 1.5.2.2 skrll pfkeystat.in_nomem++; 252 1.5.2.2 skrll return ENOBUFS; 253 1.5.2.2 skrll } 254 1.5.2.2 skrll if (tlen >= MCLBYTES) { /*XXX better threshold? */ 255 1.5.2.2 skrll MCLGET(n, M_DONTWAIT); 256 1.5.2.2 skrll if ((n->m_flags & M_EXT) == 0) { 257 1.5.2.2 skrll m_free(n); 258 1.5.2.2 skrll m_freem(m); 259 1.5.2.2 skrll pfkeystat.in_nomem++; 260 1.5.2.2 skrll return ENOBUFS; 261 1.5.2.2 skrll } 262 1.5.2.2 skrll n->m_len = MCLBYTES; 263 1.5.2.2 skrll } 264 1.5.2.2 skrll 265 1.5.2.2 skrll if (tlen < n->m_len) 266 1.5.2.2 skrll n->m_len = tlen; 267 1.5.2.2 skrll n->m_next = NULL; 268 1.5.2.2 skrll if (m == NULL) 269 1.5.2.2 skrll m = mprev = n; 270 1.5.2.2 skrll else { 271 1.5.2.2 skrll mprev->m_next = n; 272 1.5.2.2 skrll mprev = n; 273 1.5.2.2 skrll } 274 1.5.2.2 skrll tlen -= n->m_len; 275 1.5.2.2 skrll n = NULL; 276 1.5.2.2 skrll } 277 1.5.2.2 skrll m->m_pkthdr.len = len; 278 1.5.2.2 skrll m->m_pkthdr.rcvif = NULL; 279 1.5.2.2 skrll m_copyback(m, 0, len, (caddr_t)msg); 280 1.5.2.2 skrll 281 1.5.2.2 skrll /* avoid duplicated statistics */ 282 1.5.2.2 skrll pfkeystat.in_total--; 283 1.5.2.2 skrll pfkeystat.in_bytes -= len; 284 1.5.2.2 skrll pfkeystat.in_msgtype[msg->sadb_msg_type]--; 285 1.5.2.2 skrll 286 1.5.2.2 skrll return key_sendup_mbuf(so, m, target); 287 1.5.2.2 skrll } 288 1.5.2.2 skrll 289 1.5.2.2 skrll /* so can be NULL if target != KEY_SENDUP_ONE */ 290 1.5.2.2 skrll int 291 1.5.2.2 skrll key_sendup_mbuf(so, m, target /*, sbprio */) 292 1.5.2.2 skrll struct socket *so; 293 1.5.2.2 skrll struct mbuf *m; 294 1.5.2.2 skrll int target; 295 1.5.2.2 skrll { 296 1.5.2.2 skrll struct mbuf *n; 297 1.5.2.2 skrll struct keycb *kp; 298 1.5.2.2 skrll int sendup; 299 1.5.2.2 skrll struct rawcb *rp; 300 1.5.2.2 skrll int error = 0; 301 1.5.2.2 skrll int sbprio = 0; /* XXX should be a parameter */ 302 1.5.2.2 skrll 303 1.5.2.2 skrll if (m == NULL) 304 1.5.2.8 skrll panic("key_sendup_mbuf: NULL pointer was passed"); 305 1.5.2.2 skrll if (so == NULL && target == KEY_SENDUP_ONE) 306 1.5.2.8 skrll panic("key_sendup_mbuf: NULL pointer was passed"); 307 1.5.2.7 skrll 308 1.5.2.2 skrll /* 309 1.5.2.2 skrll * RFC 2367 says ACQUIRE and other kernel-generated messages 310 1.5.2.2 skrll * are special. We treat all KEY_SENDUP_REGISTERED messages 311 1.5.2.2 skrll * as special, delivering them to all registered sockets 312 1.5.2.2 skrll * even if the socket is at or above its so->so_rcv.sb_max limits. 313 1.5.2.2 skrll * The only constraint is that the so_rcv data fall below 314 1.5.2.2 skrll * key_registered_sb_max. 315 1.5.2.2 skrll * Doing that check here avoids reworking every key_sendup_mbuf() 316 1.5.2.2 skrll * in the short term. . The rework will be done after a technical 317 1.5.2.2 skrll * conensus that this approach is appropriate. 318 1.5.2.2 skrll */ 319 1.5.2.2 skrll if (target == KEY_SENDUP_REGISTERED) { 320 1.5.2.2 skrll sbprio = SB_PRIO_BESTEFFORT; 321 1.5.2.2 skrll } 322 1.5.2.2 skrll 323 1.5.2.2 skrll pfkeystat.in_total++; 324 1.5.2.2 skrll pfkeystat.in_bytes += m->m_pkthdr.len; 325 1.5.2.2 skrll if (m->m_len < sizeof(struct sadb_msg)) { 326 1.5.2.2 skrll #if 1 327 1.5.2.2 skrll m = m_pullup(m, sizeof(struct sadb_msg)); 328 1.5.2.2 skrll if (m == NULL) { 329 1.5.2.2 skrll pfkeystat.in_nomem++; 330 1.5.2.2 skrll return ENOBUFS; 331 1.5.2.2 skrll } 332 1.5.2.2 skrll #else 333 1.5.2.2 skrll /* don't bother pulling it up just for stats */ 334 1.5.2.2 skrll #endif 335 1.5.2.2 skrll } 336 1.5.2.2 skrll if (m->m_len >= sizeof(struct sadb_msg)) { 337 1.5.2.2 skrll struct sadb_msg *msg; 338 1.5.2.2 skrll msg = mtod(m, struct sadb_msg *); 339 1.5.2.2 skrll pfkeystat.in_msgtype[msg->sadb_msg_type]++; 340 1.5.2.2 skrll } 341 1.5.2.2 skrll 342 1.5.2.2 skrll LIST_FOREACH(rp, &rawcb_list, rcb_list) 343 1.5.2.2 skrll { 344 1.5.2.2 skrll struct socket * kso = rp->rcb_socket; 345 1.5.2.2 skrll if (rp->rcb_proto.sp_family != PF_KEY) 346 1.5.2.2 skrll continue; 347 1.5.2.2 skrll if (rp->rcb_proto.sp_protocol 348 1.5.2.2 skrll && rp->rcb_proto.sp_protocol != PF_KEY_V2) { 349 1.5.2.2 skrll continue; 350 1.5.2.2 skrll } 351 1.5.2.2 skrll 352 1.5.2.2 skrll kp = (struct keycb *)rp; 353 1.5.2.2 skrll 354 1.5.2.2 skrll /* 355 1.5.2.2 skrll * If you are in promiscuous mode, and when you get broadcasted 356 1.5.2.2 skrll * reply, you'll get two PF_KEY messages. 357 1.5.2.2 skrll * (based on pf_key (at) inner.net message on 14 Oct 1998) 358 1.5.2.2 skrll */ 359 1.5.2.2 skrll if (((struct keycb *)rp)->kp_promisc) { 360 1.5.2.2 skrll if ((n = m_copy(m, 0, (int)M_COPYALL)) != NULL) { 361 1.5.2.2 skrll (void)key_sendup0(rp, n, 1, 0); 362 1.5.2.2 skrll n = NULL; 363 1.5.2.2 skrll } 364 1.5.2.2 skrll } 365 1.5.2.2 skrll 366 1.5.2.2 skrll /* the exact target will be processed later */ 367 1.5.2.2 skrll if (so && sotorawcb(so) == rp) 368 1.5.2.2 skrll continue; 369 1.5.2.2 skrll 370 1.5.2.2 skrll sendup = 0; 371 1.5.2.2 skrll switch (target) { 372 1.5.2.2 skrll case KEY_SENDUP_ONE: 373 1.5.2.2 skrll /* the statement has no effect */ 374 1.5.2.2 skrll if (so && sotorawcb(so) == rp) 375 1.5.2.2 skrll sendup++; 376 1.5.2.2 skrll break; 377 1.5.2.2 skrll case KEY_SENDUP_ALL: 378 1.5.2.2 skrll sendup++; 379 1.5.2.2 skrll break; 380 1.5.2.2 skrll case KEY_SENDUP_REGISTERED: 381 1.5.2.2 skrll if (kp->kp_registered) { 382 1.5.2.2 skrll if (kso->so_rcv.sb_cc <= key_registered_sb_max) 383 1.5.2.2 skrll sendup++; 384 1.5.2.2 skrll else 385 1.5.2.2 skrll printf("keysock: " 386 1.5.2.2 skrll "registered sendup dropped, " 387 1.5.2.2 skrll "sb_cc %ld max %d\n", 388 1.5.2.2 skrll kso->so_rcv.sb_cc, 389 1.5.2.2 skrll key_registered_sb_max); 390 1.5.2.2 skrll } 391 1.5.2.2 skrll break; 392 1.5.2.2 skrll } 393 1.5.2.2 skrll pfkeystat.in_msgtarget[target]++; 394 1.5.2.2 skrll 395 1.5.2.2 skrll if (!sendup) 396 1.5.2.2 skrll continue; 397 1.5.2.2 skrll 398 1.5.2.2 skrll if ((n = m_copy(m, 0, (int)M_COPYALL)) == NULL) { 399 1.5.2.2 skrll m_freem(m); 400 1.5.2.2 skrll pfkeystat.in_nomem++; 401 1.5.2.2 skrll return ENOBUFS; 402 1.5.2.2 skrll } 403 1.5.2.2 skrll 404 1.5.2.2 skrll if ((error = key_sendup0(rp, n, 0, 0)) != 0) { 405 1.5.2.2 skrll m_freem(m); 406 1.5.2.2 skrll return error; 407 1.5.2.2 skrll } 408 1.5.2.2 skrll 409 1.5.2.2 skrll n = NULL; 410 1.5.2.2 skrll } 411 1.5.2.2 skrll 412 1.5.2.2 skrll /* The 'later' time for processing the exact target has arrived */ 413 1.5.2.2 skrll if (so) { 414 1.5.2.2 skrll error = key_sendup0(sotorawcb(so), m, 0, sbprio); 415 1.5.2.2 skrll m = NULL; 416 1.5.2.2 skrll } else { 417 1.5.2.2 skrll error = 0; 418 1.5.2.2 skrll m_freem(m); 419 1.5.2.2 skrll } 420 1.5.2.2 skrll return error; 421 1.5.2.2 skrll } 422 1.5.2.2 skrll 423 1.5.2.2 skrll #ifdef __FreeBSD__ 424 1.5.2.2 skrll 425 1.5.2.2 skrll /* 426 1.5.2.2 skrll * key_abort() 427 1.5.2.2 skrll * derived from net/rtsock.c:rts_abort() 428 1.5.2.2 skrll */ 429 1.5.2.2 skrll static int 430 1.5.2.2 skrll key_abort(struct socket *so) 431 1.5.2.2 skrll { 432 1.5.2.2 skrll int s, error; 433 1.5.2.2 skrll s = splnet(); /* FreeBSD */ 434 1.5.2.2 skrll error = raw_usrreqs.pru_abort(so); 435 1.5.2.2 skrll splx(s); 436 1.5.2.2 skrll return error; 437 1.5.2.2 skrll } 438 1.5.2.2 skrll 439 1.5.2.2 skrll /* 440 1.5.2.2 skrll * key_attach() 441 1.5.2.2 skrll * derived from net/rtsock.c:rts_attach() 442 1.5.2.2 skrll */ 443 1.5.2.2 skrll static int 444 1.5.2.2 skrll key_attach(struct socket *so, int proto, struct proc *td) 445 1.5.2.2 skrll { 446 1.5.2.2 skrll struct keycb *kp; 447 1.5.2.2 skrll int s, error; 448 1.5.2.2 skrll 449 1.5.2.2 skrll if (sotorawcb(so) != 0) 450 1.5.2.2 skrll return EISCONN; /* XXX panic? */ 451 1.5.2.2 skrll kp = (struct keycb *)malloc(sizeof *kp, M_PCB, M_WAITOK|M_ZERO); /* XXX */ 452 1.5.2.2 skrll if (kp == 0) 453 1.5.2.2 skrll return ENOBUFS; 454 1.5.2.2 skrll 455 1.5.2.2 skrll /* 456 1.5.2.2 skrll * The spl[soft]net() is necessary to block protocols from sending 457 1.5.2.2 skrll * error notifications (like RTM_REDIRECT or RTM_LOSING) while 458 1.5.2.2 skrll * this PCB is extant but incompletely initialized. 459 1.5.2.2 skrll * Probably we should try to do more of this work beforehand and 460 1.5.2.2 skrll * eliminate the spl. 461 1.5.2.2 skrll */ 462 1.5.2.2 skrll s = splnet(); /* FreeBSD */ 463 1.5.2.2 skrll so->so_pcb = (caddr_t)kp; 464 1.5.2.2 skrll error = raw_usrreqs.pru_attach(so, proto, td); 465 1.5.2.2 skrll kp = (struct keycb *)sotorawcb(so); 466 1.5.2.2 skrll if (error) { 467 1.5.2.2 skrll free(kp, M_PCB); 468 1.5.2.2 skrll so->so_pcb = (caddr_t) 0; 469 1.5.2.2 skrll splx(s); 470 1.5.2.2 skrll return error; 471 1.5.2.2 skrll } 472 1.5.2.2 skrll 473 1.5.2.2 skrll kp->kp_promisc = kp->kp_registered = 0; 474 1.5.2.2 skrll 475 1.5.2.2 skrll if (kp->kp_raw.rcb_proto.sp_protocol == PF_KEY) /* XXX: AF_KEY */ 476 1.5.2.2 skrll key_cb.key_count++; 477 1.5.2.2 skrll key_cb.any_count++; 478 1.5.2.2 skrll kp->kp_raw.rcb_laddr = &key_src; 479 1.5.2.2 skrll kp->kp_raw.rcb_faddr = &key_dst; 480 1.5.2.2 skrll soisconnected(so); 481 1.5.2.2 skrll so->so_options |= SO_USELOOPBACK; 482 1.5.2.2 skrll 483 1.5.2.2 skrll splx(s); 484 1.5.2.2 skrll return 0; 485 1.5.2.2 skrll } 486 1.5.2.2 skrll 487 1.5.2.2 skrll /* 488 1.5.2.2 skrll * key_bind() 489 1.5.2.2 skrll * derived from net/rtsock.c:rts_bind() 490 1.5.2.2 skrll */ 491 1.5.2.2 skrll static int 492 1.5.2.2 skrll key_bind(struct socket *so, struct sockaddr *nam, struct proc *td) 493 1.5.2.2 skrll { 494 1.5.2.2 skrll int s, error; 495 1.5.2.2 skrll s = splnet(); /* FreeBSD */ 496 1.5.2.2 skrll error = raw_usrreqs.pru_bind(so, nam, td); /* xxx just EINVAL */ 497 1.5.2.2 skrll splx(s); 498 1.5.2.2 skrll return error; 499 1.5.2.2 skrll } 500 1.5.2.2 skrll 501 1.5.2.2 skrll /* 502 1.5.2.2 skrll * key_connect() 503 1.5.2.2 skrll * derived from net/rtsock.c:rts_connect() 504 1.5.2.2 skrll */ 505 1.5.2.2 skrll static int 506 1.5.2.2 skrll key_connect(struct socket *so, struct sockaddr *nam, struct proc *td) 507 1.5.2.2 skrll { 508 1.5.2.2 skrll int s, error; 509 1.5.2.2 skrll s = splnet(); /* FreeBSD */ 510 1.5.2.2 skrll error = raw_usrreqs.pru_connect(so, nam, td); /* XXX just EINVAL */ 511 1.5.2.2 skrll splx(s); 512 1.5.2.2 skrll return error; 513 1.5.2.2 skrll } 514 1.5.2.2 skrll 515 1.5.2.2 skrll /* 516 1.5.2.2 skrll * key_detach() 517 1.5.2.2 skrll * derived from net/rtsock.c:rts_detach() 518 1.5.2.2 skrll */ 519 1.5.2.2 skrll static int 520 1.5.2.2 skrll key_detach(struct socket *so) 521 1.5.2.2 skrll { 522 1.5.2.2 skrll struct keycb *kp = (struct keycb *)sotorawcb(so); 523 1.5.2.2 skrll int s, error; 524 1.5.2.2 skrll 525 1.5.2.2 skrll s = splnet(); /* FreeBSD */ 526 1.5.2.2 skrll if (kp != 0) { 527 1.5.2.2 skrll if (kp->kp_raw.rcb_proto.sp_protocol 528 1.5.2.2 skrll == PF_KEY) /* XXX: AF_KEY */ 529 1.5.2.2 skrll key_cb.key_count--; 530 1.5.2.2 skrll key_cb.any_count--; 531 1.5.2.2 skrll 532 1.5.2.2 skrll key_freereg(so); 533 1.5.2.2 skrll } 534 1.5.2.2 skrll error = raw_usrreqs.pru_detach(so); 535 1.5.2.2 skrll splx(s); 536 1.5.2.2 skrll return error; 537 1.5.2.2 skrll } 538 1.5.2.2 skrll 539 1.5.2.2 skrll /* 540 1.5.2.2 skrll * key_disconnect() 541 1.5.2.2 skrll * derived from net/rtsock.c:key_disconnect() 542 1.5.2.2 skrll */ 543 1.5.2.2 skrll static int 544 1.5.2.2 skrll key_disconnect(struct socket *so) 545 1.5.2.2 skrll { 546 1.5.2.2 skrll int s, error; 547 1.5.2.2 skrll s = splnet(); /* FreeBSD */ 548 1.5.2.2 skrll error = raw_usrreqs.pru_disconnect(so); 549 1.5.2.2 skrll splx(s); 550 1.5.2.2 skrll return error; 551 1.5.2.2 skrll } 552 1.5.2.2 skrll 553 1.5.2.2 skrll /* 554 1.5.2.2 skrll * key_peeraddr() 555 1.5.2.2 skrll * derived from net/rtsock.c:rts_peeraddr() 556 1.5.2.2 skrll */ 557 1.5.2.2 skrll static int 558 1.5.2.2 skrll key_peeraddr(struct socket *so, struct sockaddr **nam) 559 1.5.2.2 skrll { 560 1.5.2.2 skrll int s, error; 561 1.5.2.2 skrll s = splnet(); /* FreeBSD */ 562 1.5.2.2 skrll error = raw_usrreqs.pru_peeraddr(so, nam); 563 1.5.2.2 skrll splx(s); 564 1.5.2.2 skrll return error; 565 1.5.2.2 skrll } 566 1.5.2.2 skrll 567 1.5.2.2 skrll /* 568 1.5.2.2 skrll * key_send() 569 1.5.2.2 skrll * derived from net/rtsock.c:rts_send() 570 1.5.2.2 skrll */ 571 1.5.2.2 skrll static int 572 1.5.2.2 skrll key_send(struct socket *so, int flags, struct mbuf *m, struct sockaddr *nam, 573 1.5.2.2 skrll struct mbuf *control, struct proc *td) 574 1.5.2.2 skrll { 575 1.5.2.2 skrll int s, error; 576 1.5.2.2 skrll s = splnet(); /* FreeBSD */ 577 1.5.2.2 skrll error = raw_usrreqs.pru_send(so, flags, m, nam, control, td); 578 1.5.2.2 skrll splx(s); 579 1.5.2.2 skrll return error; 580 1.5.2.2 skrll } 581 1.5.2.2 skrll 582 1.5.2.2 skrll /* 583 1.5.2.2 skrll * key_shutdown() 584 1.5.2.2 skrll * derived from net/rtsock.c:rts_shutdown() 585 1.5.2.2 skrll */ 586 1.5.2.2 skrll static int 587 1.5.2.2 skrll key_shutdown(struct socket *so) 588 1.5.2.2 skrll { 589 1.5.2.2 skrll int s, error; 590 1.5.2.2 skrll s = splnet(); /* FreeBSD */ 591 1.5.2.2 skrll error = raw_usrreqs.pru_shutdown(so); 592 1.5.2.2 skrll splx(s); 593 1.5.2.2 skrll return error; 594 1.5.2.2 skrll } 595 1.5.2.2 skrll 596 1.5.2.2 skrll /* 597 1.5.2.2 skrll * key_sockaddr() 598 1.5.2.2 skrll * derived from net/rtsock.c:rts_sockaddr() 599 1.5.2.2 skrll */ 600 1.5.2.2 skrll static int 601 1.5.2.2 skrll key_sockaddr(struct socket *so, struct sockaddr **nam) 602 1.5.2.2 skrll { 603 1.5.2.2 skrll int s, error; 604 1.5.2.2 skrll s = splnet(); /* FreeBSD */ 605 1.5.2.2 skrll error = raw_usrreqs.pru_sockaddr(so, nam); 606 1.5.2.2 skrll splx(s); 607 1.5.2.2 skrll return error; 608 1.5.2.2 skrll } 609 1.5.2.2 skrll #else /*!__FreeBSD__ -- traditional proto_usrreq() switch */ 610 1.5.2.2 skrll 611 1.5.2.2 skrll /* 612 1.5.2.2 skrll * key_usrreq() 613 1.5.2.2 skrll * derived from net/rtsock.c:route_usrreq() 614 1.5.2.2 skrll */ 615 1.5.2.2 skrll int 616 1.5.2.6 skrll key_usrreq(so, req, m, nam, control, l) 617 1.5.2.2 skrll struct socket *so; 618 1.5.2.2 skrll int req; 619 1.5.2.2 skrll struct mbuf *m, *nam, *control; 620 1.5.2.6 skrll struct lwp *l; 621 1.5.2.2 skrll { 622 1.5.2.2 skrll int error = 0; 623 1.5.2.2 skrll struct keycb *kp = (struct keycb *)sotorawcb(so); 624 1.5.2.2 skrll int s; 625 1.5.2.2 skrll 626 1.5.2.2 skrll s = splsoftnet(); 627 1.5.2.2 skrll if (req == PRU_ATTACH) { 628 1.5.2.2 skrll kp = (struct keycb *)malloc(sizeof(*kp), M_PCB, M_WAITOK); 629 1.5.2.2 skrll so->so_pcb = (caddr_t)kp; 630 1.5.2.2 skrll if (so->so_pcb) 631 1.5.2.2 skrll bzero(so->so_pcb, sizeof(*kp)); 632 1.5.2.2 skrll } 633 1.5.2.2 skrll if (req == PRU_DETACH && kp) { 634 1.5.2.2 skrll int af = kp->kp_raw.rcb_proto.sp_protocol; 635 1.5.2.2 skrll if (af == PF_KEY) /* XXX: AF_KEY */ 636 1.5.2.2 skrll key_cb.key_count--; 637 1.5.2.2 skrll key_cb.any_count--; 638 1.5.2.2 skrll 639 1.5.2.2 skrll key_freereg(so); 640 1.5.2.2 skrll } 641 1.5.2.2 skrll 642 1.5.2.6 skrll error = raw_usrreq(so, req, m, nam, control, l); 643 1.5.2.2 skrll m = control = NULL; /* reclaimed in raw_usrreq */ 644 1.5.2.2 skrll kp = (struct keycb *)sotorawcb(so); 645 1.5.2.2 skrll if (req == PRU_ATTACH && kp) { 646 1.5.2.2 skrll int af = kp->kp_raw.rcb_proto.sp_protocol; 647 1.5.2.2 skrll if (error) { 648 1.5.2.2 skrll pfkeystat.sockerr++; 649 1.5.2.2 skrll free((caddr_t)kp, M_PCB); 650 1.5.2.2 skrll so->so_pcb = (caddr_t) 0; 651 1.5.2.2 skrll splx(s); 652 1.5.2.2 skrll return (error); 653 1.5.2.2 skrll } 654 1.5.2.2 skrll 655 1.5.2.2 skrll kp->kp_promisc = kp->kp_registered = 0; 656 1.5.2.2 skrll 657 1.5.2.2 skrll if (af == PF_KEY) /* XXX: AF_KEY */ 658 1.5.2.2 skrll key_cb.key_count++; 659 1.5.2.2 skrll key_cb.any_count++; 660 1.5.2.2 skrll kp->kp_raw.rcb_laddr = &key_src; 661 1.5.2.2 skrll kp->kp_raw.rcb_faddr = &key_dst; 662 1.5.2.2 skrll soisconnected(so); 663 1.5.2.2 skrll so->so_options |= SO_USELOOPBACK; 664 1.5.2.2 skrll } 665 1.5.2.2 skrll splx(s); 666 1.5.2.2 skrll return (error); 667 1.5.2.2 skrll } 668 1.5.2.2 skrll #endif /*!__FreeBSD__*/ 669 1.5.2.2 skrll 670 1.5.2.2 skrll /* sysctl */ 671 1.5.2.2 skrll #ifdef SYSCTL_NODE 672 1.5.2.2 skrll SYSCTL_NODE(_net, PF_KEY, key, CTLFLAG_RW, 0, "Key Family"); 673 1.5.2.2 skrll #endif /* SYSCTL_NODE */ 674 1.5.2.2 skrll 675 1.5.2.2 skrll /* 676 1.5.2.2 skrll * Definitions of protocols supported in the KEY domain. 677 1.5.2.2 skrll */ 678 1.5.2.2 skrll 679 1.5.2.5 skrll #ifdef __FreeBSD__ 680 1.5.2.2 skrll extern struct domain keydomain; 681 1.5.2.2 skrll 682 1.5.2.2 skrll struct pr_usrreqs key_usrreqs = { 683 1.5.2.2 skrll key_abort, pru_accept_notsupp, key_attach, key_bind, 684 1.5.2.2 skrll key_connect, 685 1.5.2.2 skrll pru_connect2_notsupp, pru_control_notsupp, key_detach, 686 1.5.2.2 skrll key_disconnect, pru_listen_notsupp, key_peeraddr, 687 1.5.2.2 skrll pru_rcvd_notsupp, 688 1.5.2.2 skrll pru_rcvoob_notsupp, key_send, pru_sense_null, key_shutdown, 689 1.5.2.2 skrll key_sockaddr, sosend, soreceive, sopoll 690 1.5.2.2 skrll }; 691 1.5.2.2 skrll 692 1.5.2.2 skrll struct protosw keysw[] = { 693 1.5.2.2 skrll { SOCK_RAW, &keydomain, PF_KEY_V2, PR_ATOMIC|PR_ADDR, 694 1.5.2.2 skrll 0, (pr_output_t *)key_output, raw_ctlinput, 0, 695 1.5.2.2 skrll 0, 696 1.5.2.2 skrll raw_init, 0, 0, 0, 697 1.5.2.2 skrll &key_usrreqs 698 1.5.2.2 skrll } 699 1.5.2.2 skrll }; 700 1.5.2.2 skrll 701 1.5.2.2 skrll static void 702 1.5.2.2 skrll key_init0(void) 703 1.5.2.2 skrll { 704 1.5.2.2 skrll bzero((caddr_t)&key_cb, sizeof(key_cb)); 705 1.5.2.2 skrll key_init(); 706 1.5.2.2 skrll } 707 1.5.2.2 skrll 708 1.5.2.2 skrll struct domain keydomain = 709 1.5.2.2 skrll { PF_KEY, "key", key_init0, 0, 0, 710 1.5.2.2 skrll keysw, &keysw[sizeof(keysw)/sizeof(keysw[0])] }; 711 1.5.2.2 skrll 712 1.5.2.2 skrll DOMAIN_SET(key); 713 1.5.2.2 skrll 714 1.5.2.2 skrll #else /* !__FreeBSD__ */ 715 1.5.2.2 skrll 716 1.5.2.5 skrll DOMAIN_DEFINE(keydomain); 717 1.5.2.2 skrll 718 1.5.2.2 skrll struct protosw keysw[] = { 719 1.5.2.2 skrll { SOCK_RAW, &keydomain, PF_KEY_V2, PR_ATOMIC|PR_ADDR, 720 1.5.2.2 skrll 0, key_output, raw_ctlinput, 0, 721 1.5.2.2 skrll key_usrreq, 722 1.5.2.2 skrll raw_init, 0, 0, 0, 723 1.5.2.2 skrll NULL, 724 1.5.2.2 skrll } 725 1.5.2.2 skrll }; 726 1.5.2.2 skrll 727 1.5.2.2 skrll struct domain keydomain = 728 1.5.2.2 skrll { PF_KEY, "key", key_init, 0, 0, 729 1.5.2.2 skrll keysw, &keysw[sizeof(keysw)/sizeof(keysw[0])] }; 730 1.5.2.2 skrll 731 1.5.2.2 skrll #endif 732
Indexes created Thu Oct 02 01:09:59 GMT 2025