Home | History | Annotate | Line # | Download | only in nfs
nfs_bootdhcp.c revision 1.7
      1  1.7  drochner /*	$NetBSD: nfs_bootdhcp.c,v 1.7 1998/04/24 18:38:30 drochner Exp $	*/
      2  1.1       gwr 
      3  1.1       gwr /*-
      4  1.1       gwr  * Copyright (c) 1995, 1997 The NetBSD Foundation, Inc.
      5  1.1       gwr  * All rights reserved.
      6  1.1       gwr  *
      7  1.1       gwr  * This code is derived from software contributed to The NetBSD Foundation
      8  1.1       gwr  * by Adam Glass and Gordon W. Ross.
      9  1.1       gwr  *
     10  1.1       gwr  * Redistribution and use in source and binary forms, with or without
     11  1.1       gwr  * modification, are permitted provided that the following conditions
     12  1.1       gwr  * are met:
     13  1.1       gwr  * 1. Redistributions of source code must retain the above copyright
     14  1.1       gwr  *    notice, this list of conditions and the following disclaimer.
     15  1.1       gwr  * 2. Redistributions in binary form must reproduce the above copyright
     16  1.1       gwr  *    notice, this list of conditions and the following disclaimer in the
     17  1.1       gwr  *    documentation and/or other materials provided with the distribution.
     18  1.1       gwr  * 3. All advertising materials mentioning features or use of this software
     19  1.1       gwr  *    must display the following acknowledgement:
     20  1.1       gwr  *        This product includes software developed by the NetBSD
     21  1.1       gwr  *        Foundation, Inc. and its contributors.
     22  1.1       gwr  * 4. Neither the name of The NetBSD Foundation nor the names of its
     23  1.1       gwr  *    contributors may be used to endorse or promote products derived
     24  1.1       gwr  *    from this software without specific prior written permission.
     25  1.1       gwr  *
     26  1.1       gwr  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     27  1.1       gwr  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     28  1.1       gwr  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     29  1.1       gwr  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     30  1.1       gwr  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     31  1.1       gwr  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     32  1.1       gwr  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     33  1.1       gwr  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     34  1.1       gwr  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     35  1.1       gwr  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     36  1.1       gwr  * POSSIBILITY OF SUCH DAMAGE.
     37  1.1       gwr  */
     38  1.1       gwr 
     39  1.1       gwr /*
     40  1.1       gwr  * Support for NFS diskless booting with BOOTP (RFC951, RFC1048)
     41  1.1       gwr  *
     42  1.1       gwr  * History:
     43  1.1       gwr  *
     44  1.1       gwr  * Tor Egge developed the initial version of this code based on
     45  1.1       gwr  * the Sun RPC/bootparam sources nfs_boot.c and krpc_subr.c and
     46  1.1       gwr  * submitted that work to NetBSD as bugreport "kern/2351" on
     47  1.1       gwr  * 29 Apr 1996.
     48  1.1       gwr  *
     49  1.1       gwr  * Gordon Ross reorganized Tor's version into this form and
     50  1.1       gwr  * integrated it into the NetBSD sources during Aug 1997.
     51  1.1       gwr  */
     52  1.1       gwr 
     53  1.5    scottr #include "opt_nfs_boot.h"
     54  1.5    scottr 
     55  1.1       gwr #include <sys/param.h>
     56  1.1       gwr #include <sys/systm.h>
     57  1.1       gwr #include <sys/kernel.h>
     58  1.1       gwr #include <sys/conf.h>
     59  1.1       gwr #include <sys/device.h>
     60  1.1       gwr #include <sys/ioctl.h>
     61  1.1       gwr #include <sys/proc.h>
     62  1.1       gwr #include <sys/mount.h>
     63  1.1       gwr #include <sys/mbuf.h>
     64  1.1       gwr #include <sys/reboot.h>
     65  1.1       gwr #include <sys/socket.h>
     66  1.1       gwr #include <sys/socketvar.h>
     67  1.1       gwr 
     68  1.1       gwr #include <net/if.h>
     69  1.3  drochner #include <net/if_types.h>
     70  1.1       gwr #include <net/if_arp.h> 	/* ARPHRD_ETHER, etc. */
     71  1.1       gwr #include <net/if_dl.h>
     72  1.1       gwr #include <net/if_ether.h>
     73  1.1       gwr #include <net/route.h>
     74  1.1       gwr 
     75  1.1       gwr #include <netinet/in.h>
     76  1.1       gwr #include <netinet/if_inarp.h>
     77  1.1       gwr 
     78  1.6      ross #include <nfs/rpcv2.h>
     79  1.6      ross 
     80  1.1       gwr #include <nfs/nfsproto.h>
     81  1.6      ross #include <nfs/nfs.h>
     82  1.6      ross #include <nfs/nfsmount.h>
     83  1.1       gwr #include <nfs/nfsdiskless.h>
     84  1.1       gwr 
     85  1.1       gwr /*
     86  1.1       gwr  * There are two implementations of NFS diskless boot.
     87  1.1       gwr  * This implementation uses BOOTP (RFC951, RFC1048), and
     88  1.1       gwr  * the other uses Sun RPC/bootparams (nfs_bootparam.c).
     89  1.1       gwr  *
     90  1.1       gwr  * This method gets everything it needs with one BOOTP
     91  1.1       gwr  * request and reply.  Note that this actually uses only
     92  1.1       gwr  * the old BOOTP functionality subset of DHCP.  It is not
     93  1.1       gwr  * clear that DHCP provides any advantage over BOOTP for
     94  1.1       gwr  * diskless boot.  DHCP allows the server to assign an IP
     95  1.1       gwr  * address without any a-priori knowledge of the client,
     96  1.1       gwr  * but we require that the server has a-priori knowledge
     97  1.1       gwr  * of the client so it can export our (unique) NFS root.
     98  1.1       gwr  * Given that the server needs a-priori knowledge about
     99  1.1       gwr  * the client anyway, it might as well assign a fixed IP
    100  1.1       gwr  * address for the client and support BOOTP.
    101  1.1       gwr  *
    102  1.1       gwr  * On the other hand, disk-FULL clients may use DHCP, but
    103  1.1       gwr  * in that case the DHCP client should be user-mode code,
    104  1.1       gwr  * and has no bearing on the code below. -gwr
    105  1.1       gwr  */
    106  1.1       gwr 
    107  1.1       gwr /* Begin stuff from bootp.h */
    108  1.1       gwr /* Definitions from RFC951 */
    109  1.1       gwr #define BP_CHADDR_LEN	 16
    110  1.1       gwr #define BP_SNAME_LEN	 64
    111  1.1       gwr #define BP_FILE_LEN	128
    112  1.1       gwr #define BP_VEND_LEN	 64
    113  1.1       gwr struct bootp {
    114  1.1       gwr 	u_int8_t	bp_op;		/* packet opcode type */
    115  1.1       gwr 	u_int8_t	bp_htype;	/* hardware addr type */
    116  1.1       gwr 	u_int8_t	bp_hlen;	/* hardware addr length */
    117  1.1       gwr 	u_int8_t	bp_hops;	/* gateway hops */
    118  1.1       gwr 	u_int32_t	bp_xid;		/* transaction ID */
    119  1.1       gwr 	u_int16_t	bp_secs;	/* seconds since boot began */
    120  1.1       gwr 	u_int16_t	bp_flags;	/* RFC1532 broadcast, etc. */
    121  1.1       gwr 	struct in_addr	bp_ciaddr;	/* client IP address */
    122  1.1       gwr 	struct in_addr	bp_yiaddr;	/* 'your' IP address */
    123  1.1       gwr 	struct in_addr	bp_siaddr;	/* server IP address */
    124  1.1       gwr 	struct in_addr	bp_giaddr;	/* gateway IP address */
    125  1.1       gwr 	u_int8_t bp_chaddr[BP_CHADDR_LEN]; /* client hardware address */
    126  1.1       gwr 	char	bp_sname[BP_SNAME_LEN]; /* server host name */
    127  1.1       gwr 	char	bp_file[BP_FILE_LEN];	/* boot file name */
    128  1.1       gwr 	u_int8_t bp_vend[BP_VEND_LEN];	/* RFC1048 options */
    129  1.1       gwr 	/*
    130  1.1       gwr 	 * Note that BOOTP packets are allowed to be longer
    131  1.1       gwr 	 * (see RFC 1532 sect. 2.1) and common practice is to
    132  1.1       gwr 	 * allow the option data in bp_vend to extend into the
    133  1.1       gwr 	 * additional space provided in longer packets.
    134  1.1       gwr 	 */
    135  1.1       gwr };
    136  1.1       gwr 
    137  1.1       gwr #define IPPORT_BOOTPS 67
    138  1.1       gwr #define IPPORT_BOOTPC 68
    139  1.1       gwr 
    140  1.1       gwr #define BOOTREQUEST		1
    141  1.1       gwr #define BOOTREPLY		2
    142  1.1       gwr 
    143  1.1       gwr /*
    144  1.1       gwr  * Is this available from the sockaddr_dl somehow?
    145  1.1       gwr  * Perhaps (struct arphdr)->ar_hrd = ARPHRD_ETHER?
    146  1.1       gwr  * The interface has ->if_type but not the ARP fmt.
    147  1.1       gwr  */
    148  1.1       gwr #define HTYPE_ETHERNET		  1
    149  1.1       gwr 
    150  1.1       gwr /*
    151  1.1       gwr  * Vendor magic cookie (v_magic) for RFC1048
    152  1.1       gwr  */
    153  1.1       gwr static const u_int8_t vm_rfc1048[4] = { 99, 130, 83, 99 };
    154  1.1       gwr 
    155  1.1       gwr /*
    156  1.1       gwr  * Tag values used to specify what information is being supplied in
    157  1.1       gwr  * the vendor (options) data area of the packet.
    158  1.1       gwr  */
    159  1.1       gwr /* RFC 1048 */
    160  1.1       gwr #define TAG_END			((unsigned char) 255)
    161  1.1       gwr #define TAG_PAD			((unsigned char)   0)
    162  1.1       gwr #define TAG_SUBNET_MASK		((unsigned char)   1)
    163  1.1       gwr #define TAG_TIME_OFFSET		((unsigned char)   2)
    164  1.1       gwr #define TAG_GATEWAY		((unsigned char)   3)
    165  1.1       gwr #define TAG_TIME_SERVER		((unsigned char)   4)
    166  1.1       gwr #define TAG_NAME_SERVER		((unsigned char)   5)
    167  1.1       gwr #define TAG_DOMAIN_SERVER	((unsigned char)   6)
    168  1.1       gwr #define TAG_LOG_SERVER		((unsigned char)   7)
    169  1.1       gwr #define TAG_COOKIE_SERVER	((unsigned char)   8)
    170  1.1       gwr #define TAG_LPR_SERVER		((unsigned char)   9)
    171  1.1       gwr #define TAG_IMPRESS_SERVER	((unsigned char)  10)
    172  1.1       gwr #define TAG_RLP_SERVER		((unsigned char)  11)
    173  1.1       gwr #define TAG_HOST_NAME		((unsigned char)  12)
    174  1.1       gwr #define TAG_BOOT_SIZE		((unsigned char)  13)
    175  1.1       gwr /* RFC 1395 */
    176  1.1       gwr #define TAG_DUMP_FILE		((unsigned char)  14)
    177  1.1       gwr #define TAG_DOMAIN_NAME		((unsigned char)  15)
    178  1.1       gwr #define TAG_SWAP_SERVER		((unsigned char)  16)
    179  1.1       gwr #define TAG_ROOT_PATH		((unsigned char)  17)
    180  1.1       gwr /* End of stuff from bootp.h */
    181  1.1       gwr 
    182  1.2  drochner #ifdef NFS_BOOT_DHCP
    183  1.2  drochner #define TAG_REQ_ADDR		((unsigned char)  50)
    184  1.2  drochner #define TAG_LEASETIME		((unsigned char)  51)
    185  1.2  drochner #define TAG_OVERLOAD		((unsigned char)  52)
    186  1.2  drochner #define TAG_DHCP_MSGTYPE	((unsigned char)  53)
    187  1.2  drochner #define TAG_SERVERID		((unsigned char)  54)
    188  1.2  drochner #define TAG_PARAM_REQ		((unsigned char)  55)
    189  1.2  drochner #define TAG_MSG			((unsigned char)  56)
    190  1.2  drochner #define TAG_MAXSIZE		((unsigned char)  57)
    191  1.2  drochner #define TAG_T1			((unsigned char)  58)
    192  1.2  drochner #define TAG_T2			((unsigned char)  59)
    193  1.2  drochner #define TAG_CLASSID		((unsigned char)  60)
    194  1.2  drochner #define TAG_CLIENTID		((unsigned char)  61)
    195  1.2  drochner #endif
    196  1.2  drochner 
    197  1.2  drochner #ifdef NFS_BOOT_DHCP
    198  1.2  drochner #define DHCPDISCOVER 1
    199  1.2  drochner #define DHCPOFFER 2
    200  1.2  drochner #define DHCPREQUEST 3
    201  1.2  drochner #define DHCPDECLINE 4
    202  1.2  drochner #define DHCPACK 5
    203  1.2  drochner #define DHCPNAK 6
    204  1.2  drochner #define DHCPRELEASE 7
    205  1.2  drochner #endif
    206  1.1       gwr 
    207  1.2  drochner #ifdef NFS_BOOT_DHCP
    208  1.2  drochner #define BOOTP_SIZE_MAX	(sizeof(struct bootp)+312-64)
    209  1.2  drochner #else
    210  1.1       gwr /*
    211  1.1       gwr  * The "extended" size is somewhat arbitrary, but is
    212  1.1       gwr  * constrained by the maximum message size specified
    213  1.1       gwr  * by RFC1533 (567 total).  This value increases the
    214  1.1       gwr  * space for options from 64 bytes to 256 bytes.
    215  1.1       gwr  */
    216  1.2  drochner #define BOOTP_SIZE_MAX	(sizeof(struct bootp)+256-64)
    217  1.2  drochner #endif
    218  1.1       gwr #define BOOTP_SIZE_MIN	(sizeof(struct bootp))
    219  1.1       gwr 
    220  1.1       gwr /* Convenience macro */
    221  1.1       gwr #define INTOHL(ina) ((u_int32_t)ntohl((ina).s_addr))
    222  1.1       gwr 
    223  1.1       gwr static int bootpc_call __P((struct socket *, struct ifnet *,
    224  1.1       gwr 			struct nfs_diskless *, struct proc *));
    225  1.2  drochner static void bootp_extract __P((struct bootp *, int, struct nfs_diskless *));
    226  1.1       gwr 
    227  1.1       gwr /* #define DEBUG	XXX */
    228  1.1       gwr 
    229  1.1       gwr #ifdef	DEBUG
    230  1.1       gwr #define DPRINT(s) printf("nfs_boot: %s\n", s)
    231  1.1       gwr #else
    232  1.1       gwr #define DPRINT(s) (void)0
    233  1.1       gwr #endif
    234  1.1       gwr 
    235  1.1       gwr 
    236  1.1       gwr /*
    237  1.1       gwr  * Get our boot parameters using BOOTP.
    238  1.1       gwr  */
    239  1.1       gwr int
    240  1.1       gwr nfs_bootdhcp(ifp, nd, procp)
    241  1.1       gwr 	struct ifnet *ifp;
    242  1.1       gwr 	struct nfs_diskless *nd;
    243  1.1       gwr 	struct proc *procp;
    244  1.1       gwr {
    245  1.1       gwr 	struct ifaliasreq iareq;
    246  1.1       gwr 	struct socket *so;
    247  1.1       gwr 	struct sockaddr_in *sin;
    248  1.1       gwr 	int error;
    249  1.1       gwr 
    250  1.1       gwr 	/*
    251  1.1       gwr 	 * Get a socket to use for various things in here.
    252  1.1       gwr 	 * After this, use "goto out" to cleanup and return.
    253  1.1       gwr 	 */
    254  1.1       gwr 	error = socreate(AF_INET, &so, SOCK_DGRAM, 0);
    255  1.1       gwr 	if (error) {
    256  1.1       gwr 		printf("nfs_boot: socreate, error=%d\n", error);
    257  1.1       gwr 		return (error);
    258  1.1       gwr 	}
    259  1.1       gwr 
    260  1.1       gwr 	/*
    261  1.1       gwr 	 * Do enough of ifconfig(8) so that the chosen interface
    262  1.1       gwr 	 * can talk to the servers.  Use address zero for now.
    263  1.1       gwr 	 */
    264  1.1       gwr 	bzero(&iareq, sizeof(iareq));
    265  1.1       gwr 	bcopy(ifp->if_xname, iareq.ifra_name, IFNAMSIZ);
    266  1.1       gwr 	/* Set the I/F address */
    267  1.1       gwr 	sin = (struct sockaddr_in *)&iareq.ifra_addr;
    268  1.1       gwr 	sin->sin_len = sizeof(*sin);
    269  1.1       gwr 	sin->sin_family = AF_INET;
    270  1.1       gwr 	sin->sin_addr.s_addr = INADDR_ANY;
    271  1.1       gwr 	/* Leave subnetmask unspecified (len=0) */
    272  1.1       gwr 	/* Set the broadcast addr. */
    273  1.1       gwr 	sin = (struct sockaddr_in *)&iareq.ifra_broadaddr;
    274  1.1       gwr 	sin->sin_len = sizeof(*sin);
    275  1.1       gwr 	sin->sin_family = AF_INET;
    276  1.1       gwr 	sin->sin_addr.s_addr = INADDR_BROADCAST;
    277  1.1       gwr 	error = ifioctl(so, SIOCAIFADDR, (caddr_t)&iareq, procp);
    278  1.1       gwr 	if (error) {
    279  1.1       gwr 		printf("nfs_boot: set ifaddr zero, error=%d\n", error);
    280  1.1       gwr 		goto out;
    281  1.1       gwr 	}
    282  1.1       gwr 
    283  1.1       gwr 	/* This function call does the real send/recv work. */
    284  1.1       gwr 	error = bootpc_call(so, ifp, nd, procp);
    285  1.1       gwr 	/* Get rid of the temporary (zero) IP address. */
    286  1.2  drochner 	/*
    287  1.2  drochner 	 * XXX SIOCDIFADDR takes a "struct ifreq", which is
    288  1.2  drochner 	 * an exact subset of "struct ifaliasreq".
    289  1.2  drochner 	 */
    290  1.1       gwr 	(void) ifioctl(so, SIOCDIFADDR, (caddr_t)&iareq, procp);
    291  1.1       gwr 	/* NOW we can test the error from bootpc_call. */
    292  1.1       gwr 	if (error)
    293  1.1       gwr 		goto out;
    294  1.1       gwr 
    295  1.1       gwr 	/*
    296  1.1       gwr 	 * Do ifconfig with our real IP address and mask.
    297  1.1       gwr 	 */
    298  1.1       gwr 	/* I/F address */
    299  1.1       gwr 	sin = (struct sockaddr_in *)&iareq.ifra_addr;
    300  1.1       gwr 	sin->sin_addr = nd->nd_myip;
    301  1.1       gwr 	/* subnetmask */
    302  1.1       gwr 	if (nd->nd_mask.s_addr) {
    303  1.1       gwr 		sin = (struct sockaddr_in *)&iareq.ifra_mask;
    304  1.1       gwr 		sin->sin_len = sizeof(*sin);
    305  1.1       gwr 		sin->sin_family = AF_INET;
    306  1.1       gwr 		sin->sin_addr = nd->nd_mask;
    307  1.1       gwr 	}
    308  1.1       gwr 	/* Let ifioctl() default the broadcast address. */
    309  1.1       gwr 	sin = (struct sockaddr_in *)&iareq.ifra_broadaddr;
    310  1.1       gwr 	sin->sin_len = 0;
    311  1.1       gwr 	sin->sin_family = 0;
    312  1.1       gwr 	sin->sin_addr.s_addr = 0;
    313  1.1       gwr 	error = ifioctl(so, SIOCAIFADDR, (caddr_t)&iareq, procp);
    314  1.1       gwr 	if (error) {
    315  1.1       gwr 		printf("nfs_boot: set ifaddr real, error=%d\n", error);
    316  1.1       gwr 		goto out;
    317  1.1       gwr 	}
    318  1.1       gwr 
    319  1.1       gwr out:
    320  1.1       gwr 	soclose(so);
    321  1.1       gwr 	return (error);
    322  1.1       gwr }
    323  1.1       gwr 
    324  1.2  drochner struct bootpcontext {
    325  1.2  drochner 	int xid;
    326  1.2  drochner 	u_char *haddr;
    327  1.2  drochner 	u_char halen;
    328  1.2  drochner 	struct bootp *replybuf;
    329  1.2  drochner 	int replylen;
    330  1.2  drochner #ifdef NFS_BOOT_DHCP
    331  1.2  drochner 	char expected_dhcpmsgtype, dhcp_ok;
    332  1.2  drochner 	struct in_addr dhcp_serverip;
    333  1.2  drochner #endif
    334  1.2  drochner };
    335  1.2  drochner 
    336  1.2  drochner static int bootpset __P((struct mbuf*, void*, int));
    337  1.2  drochner static int bootpcheck __P((struct mbuf*, void*));
    338  1.2  drochner 
    339  1.7  drochner static int
    340  1.7  drochner bootpset(m, context, waited)
    341  1.7  drochner 	struct mbuf *m;
    342  1.7  drochner 	void *context;
    343  1.7  drochner 	int waited;
    344  1.2  drochner {
    345  1.2  drochner 	struct bootp *bootp;
    346  1.2  drochner 
    347  1.2  drochner 	/* we know it's contigous (in 1 mbuf cluster) */
    348  1.2  drochner 	bootp = mtod(m, struct bootp*);
    349  1.2  drochner 
    350  1.2  drochner 	bootp->bp_secs = htons(waited);
    351  1.2  drochner 
    352  1.7  drochner 	return (0);
    353  1.2  drochner }
    354  1.2  drochner 
    355  1.7  drochner static int
    356  1.7  drochner bootpcheck(m, context)
    357  1.7  drochner 	struct mbuf *m;
    358  1.7  drochner 	void *context;
    359  1.2  drochner {
    360  1.2  drochner 	struct bootp *bootp;
    361  1.2  drochner 	struct bootpcontext *bpc = context;
    362  1.2  drochner 	u_int tag, len;
    363  1.2  drochner 	u_char *p, *limit;
    364  1.2  drochner 
    365  1.2  drochner 	/*
    366  1.2  drochner 	 * Is this a valid reply?
    367  1.2  drochner 	 */
    368  1.2  drochner 	if (m->m_pkthdr.len < BOOTP_SIZE_MIN) {
    369  1.2  drochner 		DPRINT("short packet");
    370  1.7  drochner 		return (-1);
    371  1.2  drochner 	}
    372  1.2  drochner 	if (m->m_pkthdr.len > BOOTP_SIZE_MAX) {
    373  1.2  drochner 		DPRINT("long packet");
    374  1.7  drochner 		return (-1);
    375  1.2  drochner 	}
    376  1.2  drochner 
    377  1.2  drochner 	/*
    378  1.2  drochner 	 * don't make first checks more expensive than necessary
    379  1.2  drochner 	 */
    380  1.2  drochner #define ofs(what, elem) ((int)&(((what *)0)->elem))
    381  1.2  drochner 	if (m->m_len < ofs(struct bootp, bp_secs)) {
    382  1.2  drochner 		m = m_pullup(m, ofs(struct bootp, bp_secs));
    383  1.2  drochner 		if (m == NULL)
    384  1.7  drochner 			return (-1);
    385  1.2  drochner 	}
    386  1.2  drochner #undef ofs
    387  1.2  drochner 	bootp = mtod(m, struct bootp*);
    388  1.2  drochner 
    389  1.2  drochner 	if (bootp->bp_op != BOOTREPLY) {
    390  1.2  drochner 		DPRINT("not reply");
    391  1.7  drochner 		return (-1);
    392  1.2  drochner 	}
    393  1.2  drochner 	if (bootp->bp_hlen != bpc->halen) {
    394  1.2  drochner 		DPRINT("bad hwa_len");
    395  1.7  drochner 		return (-1);
    396  1.2  drochner 	}
    397  1.2  drochner 	if (bcmp(bootp->bp_chaddr, bpc->haddr, bpc->halen)) {
    398  1.2  drochner 		DPRINT("wrong hwaddr");
    399  1.7  drochner 		return (-1);
    400  1.2  drochner 	}
    401  1.2  drochner 	if (bootp->bp_xid != bpc->xid) {
    402  1.2  drochner 		DPRINT("wrong xid");
    403  1.7  drochner 		return (-1);
    404  1.2  drochner 	}
    405  1.2  drochner 
    406  1.2  drochner 	/*
    407  1.2  drochner 	 * OK, it's worth to look deeper.
    408  1.2  drochner 	 * We copy the mbuf into a flat buffer here because
    409  1.2  drochner 	 * m_pullup() is a bit limited for this purpose
    410  1.2  drochner 	 * (doesn't allocate a cluster if necessary).
    411  1.2  drochner 	 */
    412  1.2  drochner 	bpc->replylen = m->m_pkthdr.len;
    413  1.2  drochner 	m_copydata(m, 0, bpc->replylen, (caddr_t)bpc->replybuf);
    414  1.2  drochner 	bootp = bpc->replybuf;
    415  1.2  drochner 
    416  1.2  drochner 	/*
    417  1.7  drochner 	 * Check if the IP address we get looks correct.
    418  1.7  drochner 	 * (DHCP servers can send junk to unknown clients.)
    419  1.7  drochner 	 * XXX more checks might be needed
    420  1.7  drochner 	 */
    421  1.7  drochner 	if (bootp->bp_yiaddr.s_addr == INADDR_ANY ||
    422  1.7  drochner 	    bootp->bp_yiaddr.s_addr == INADDR_BROADCAST) {
    423  1.7  drochner 		printf("nfs_boot: wrong IP addr 0x%x",
    424  1.7  drochner 		       INTOHL(bootp->bp_yiaddr));
    425  1.7  drochner 		goto warn;
    426  1.7  drochner 	}
    427  1.7  drochner 
    428  1.7  drochner 	/*
    429  1.2  drochner 	 * Check the vendor data.
    430  1.2  drochner 	 */
    431  1.2  drochner 	if (bcmp(bootp->bp_vend, vm_rfc1048, 4)) {
    432  1.7  drochner 		printf("nfs_boot: reply missing options");
    433  1.7  drochner 		goto warn;
    434  1.2  drochner 	}
    435  1.2  drochner 	p = &bootp->bp_vend[4];
    436  1.2  drochner 	limit = ((char*)bootp) + bpc->replylen;
    437  1.2  drochner 	while (p < limit) {
    438  1.2  drochner 		tag = *p++;
    439  1.2  drochner 		if (tag == TAG_END)
    440  1.2  drochner 			break;
    441  1.2  drochner 		if (tag == TAG_PAD)
    442  1.2  drochner 			continue;
    443  1.2  drochner 		len = *p++;
    444  1.2  drochner 		if ((p + len) > limit) {
    445  1.7  drochner 			printf("nfs_boot: option %d too long", tag);
    446  1.7  drochner 			goto warn;
    447  1.2  drochner 		}
    448  1.2  drochner 		switch (tag) {
    449  1.2  drochner #ifdef NFS_BOOT_DHCP
    450  1.2  drochner 		    case TAG_DHCP_MSGTYPE:
    451  1.2  drochner 			if (*p != bpc->expected_dhcpmsgtype)
    452  1.7  drochner 				return (-1);
    453  1.2  drochner 			bpc->dhcp_ok = 1;
    454  1.2  drochner 			break;
    455  1.2  drochner 		    case TAG_SERVERID:
    456  1.2  drochner 			bcopy(p, &bpc->dhcp_serverip.s_addr,
    457  1.2  drochner 			      sizeof(bpc->dhcp_serverip.s_addr));
    458  1.2  drochner 			break;
    459  1.2  drochner #endif
    460  1.2  drochner 		    default:
    461  1.2  drochner 			break;
    462  1.2  drochner 		}
    463  1.2  drochner 		p += len;
    464  1.2  drochner 	}
    465  1.7  drochner 	return (0);
    466  1.7  drochner 
    467  1.7  drochner warn:
    468  1.7  drochner 	printf(" (bad reply from 0x%x)\n", INTOHL(bootp->bp_siaddr));
    469  1.7  drochner 	return (-1);
    470  1.2  drochner }
    471  1.2  drochner 
    472  1.1       gwr static int
    473  1.1       gwr bootpc_call(so, ifp, nd, procp)
    474  1.1       gwr 	struct socket *so;
    475  1.1       gwr 	struct ifnet *ifp;
    476  1.1       gwr 	struct nfs_diskless *nd;
    477  1.1       gwr 	struct proc *procp;
    478  1.1       gwr {
    479  1.1       gwr 	static u_int32_t xid = ~0xFF;
    480  1.2  drochner 	struct bootp *bootp;	/* request */
    481  1.1       gwr 	struct mbuf *m, *nam;
    482  1.1       gwr 	struct sockaddr_in *sin;
    483  1.2  drochner 	int error;
    484  1.1       gwr 	u_char *haddr;
    485  1.1       gwr 	u_char hafmt, halen;
    486  1.2  drochner 	struct bootpcontext bpc;
    487  1.1       gwr 
    488  1.1       gwr 	/*
    489  1.1       gwr 	 * Initialize to NULL anything that will hold an allocation,
    490  1.1       gwr 	 * and free each at the end if not null.
    491  1.1       gwr 	 */
    492  1.2  drochner 	bpc.replybuf = NULL;
    493  1.1       gwr 	m = nam = NULL;
    494  1.1       gwr 
    495  1.1       gwr 	/* Record our H/W (Ethernet) address. */
    496  1.1       gwr 	{	struct sockaddr_dl *sdl = ifp->if_sadl;
    497  1.3  drochner 		switch (sdl->sdl_type) {
    498  1.3  drochner 		    case IFT_ETHER:
    499  1.3  drochner 		    case IFT_FDDI:
    500  1.3  drochner 			hafmt = HTYPE_ETHERNET;
    501  1.3  drochner 			break;
    502  1.3  drochner 		    default:
    503  1.3  drochner 			printf("bootp: unsupported interface type %d\n",
    504  1.3  drochner 			       sdl->sdl_type);
    505  1.3  drochner 			error = EINVAL;
    506  1.3  drochner 			goto out;
    507  1.3  drochner 		}
    508  1.1       gwr 		halen = sdl->sdl_alen;
    509  1.1       gwr 		haddr = (unsigned char *)LLADDR(sdl);
    510  1.1       gwr 	}
    511  1.1       gwr 
    512  1.1       gwr 	/*
    513  1.1       gwr 	 * Skip the route table when sending on this socket.
    514  1.1       gwr 	 * If this is not done, ip_output finds the loopback
    515  1.1       gwr 	 * interface (why?) and then fails because broadcast
    516  1.1       gwr 	 * is not supported on that interface...
    517  1.1       gwr 	 */
    518  1.1       gwr 	{	int32_t *opt;
    519  1.1       gwr 		m = m_get(M_WAIT, MT_SOOPTS);
    520  1.1       gwr 		opt = mtod(m, int32_t *);
    521  1.1       gwr 		m->m_len = sizeof(*opt);
    522  1.1       gwr 		*opt = 1;
    523  1.1       gwr 		error = sosetopt(so, SOL_SOCKET, SO_DONTROUTE, m);
    524  1.1       gwr 		m = NULL;	/* was consumed */
    525  1.1       gwr 	}
    526  1.1       gwr 	if (error) {
    527  1.1       gwr 		DPRINT("SO_DONTROUTE");
    528  1.1       gwr 		goto out;
    529  1.1       gwr 	}
    530  1.1       gwr 
    531  1.1       gwr 	/* Enable broadcast. */
    532  1.2  drochner 	if ((error = nfs_boot_enbroadcast(so))) {
    533  1.1       gwr 		DPRINT("SO_BROADCAST");
    534  1.1       gwr 		goto out;
    535  1.1       gwr 	}
    536  1.1       gwr 
    537  1.1       gwr 	/* Set the receive timeout for the socket. */
    538  1.2  drochner 	if ((error = nfs_boot_setrecvtimo(so))) {
    539  1.1       gwr 		DPRINT("SO_RCVTIMEO");
    540  1.1       gwr 		goto out;
    541  1.1       gwr 	}
    542  1.1       gwr 
    543  1.1       gwr 	/*
    544  1.1       gwr 	 * Bind the local endpoint to a bootp client port.
    545  1.1       gwr 	 */
    546  1.2  drochner 	if ((error = nfs_boot_sobind_ipport(so, IPPORT_BOOTPC))) {
    547  1.1       gwr 		DPRINT("bind failed\n");
    548  1.1       gwr 		goto out;
    549  1.1       gwr 	}
    550  1.1       gwr 
    551  1.1       gwr 	/*
    552  1.1       gwr 	 * Setup socket address for the server.
    553  1.1       gwr 	 */
    554  1.1       gwr 	nam = m_get(M_WAIT, MT_SONAME);
    555  1.1       gwr 	sin = mtod(nam, struct sockaddr_in *);
    556  1.1       gwr 	sin->sin_len = nam->m_len = sizeof(*sin);
    557  1.1       gwr 	sin->sin_family = AF_INET;
    558  1.1       gwr 	sin->sin_addr.s_addr = INADDR_BROADCAST;
    559  1.1       gwr 	sin->sin_port = htons(IPPORT_BOOTPS);
    560  1.1       gwr 
    561  1.1       gwr 	/*
    562  1.2  drochner 	 * Allocate buffer used for request
    563  1.1       gwr 	 */
    564  1.2  drochner 	m = m_gethdr(M_WAIT, MT_DATA);
    565  1.2  drochner 	MCLGET(m, M_WAIT);
    566  1.2  drochner 	bootp = mtod(m, struct bootp*);
    567  1.2  drochner 	m->m_pkthdr.len = m->m_len = BOOTP_SIZE_MAX;
    568  1.2  drochner 	m->m_pkthdr.rcvif = NULL;
    569  1.1       gwr 
    570  1.1       gwr 	/*
    571  1.2  drochner 	 * Build the BOOTP reqest message.
    572  1.1       gwr 	 * Note: xid is host order! (opaque to server)
    573  1.1       gwr 	 */
    574  1.1       gwr 	bzero((caddr_t)bootp, BOOTP_SIZE_MAX);
    575  1.1       gwr 	bootp->bp_op    = BOOTREQUEST;
    576  1.1       gwr 	bootp->bp_htype = hafmt;
    577  1.1       gwr 	bootp->bp_hlen  = halen;	/* Hardware address length */
    578  1.1       gwr 	bootp->bp_xid = ++xid;
    579  1.1       gwr 	bcopy(haddr, bootp->bp_chaddr, halen);
    580  1.1       gwr 	/* Fill-in the vendor data. */
    581  1.1       gwr 	bcopy(vm_rfc1048, bootp->bp_vend, 4);
    582  1.2  drochner #ifdef NFS_BOOT_DHCP
    583  1.2  drochner 	bootp->bp_vend[4] = TAG_DHCP_MSGTYPE;
    584  1.2  drochner 	bootp->bp_vend[5] = 1;
    585  1.2  drochner 	bootp->bp_vend[6] = DHCPDISCOVER;
    586  1.2  drochner 	bootp->bp_vend[7] = TAG_END;
    587  1.2  drochner #else
    588  1.1       gwr 	bootp->bp_vend[4] = TAG_END;
    589  1.2  drochner #endif
    590  1.2  drochner 
    591  1.2  drochner 	bpc.xid = xid;
    592  1.2  drochner 	bpc.haddr = haddr;
    593  1.2  drochner 	bpc.halen = halen;
    594  1.2  drochner 	bpc.replybuf = malloc(BOOTP_SIZE_MAX, M_DEVBUF, M_WAITOK);
    595  1.2  drochner 	if (bpc.replybuf == NULL)
    596  1.2  drochner 		panic("nfs_boot: malloc reply buf");
    597  1.2  drochner #ifdef NFS_BOOT_DHCP
    598  1.2  drochner 	bpc.expected_dhcpmsgtype = DHCPOFFER;
    599  1.2  drochner 	bpc.dhcp_ok = 0;
    600  1.2  drochner #endif
    601  1.1       gwr 
    602  1.2  drochner 	error = nfs_boot_sendrecv(so, nam, bootpset, m,
    603  1.2  drochner 				  bootpcheck, 0, 0, &bpc);
    604  1.2  drochner 	if (error)
    605  1.1       gwr 		goto out;
    606  1.2  drochner 
    607  1.2  drochner #ifdef NFS_BOOT_DHCP
    608  1.2  drochner 	if (bpc.dhcp_ok) {
    609  1.2  drochner 		u_int32_t leasetime;
    610  1.2  drochner 		bootp->bp_vend[6] = DHCPREQUEST;
    611  1.2  drochner 		bootp->bp_vend[7] = TAG_REQ_ADDR;
    612  1.2  drochner 		bootp->bp_vend[8] = 4;
    613  1.2  drochner 		bcopy(&bpc.replybuf->bp_yiaddr, &bootp->bp_vend[9], 4);
    614  1.2  drochner 		bootp->bp_vend[13] = TAG_SERVERID;
    615  1.2  drochner 		bootp->bp_vend[14] = 4;
    616  1.2  drochner 		bcopy(&bpc.dhcp_serverip.s_addr, &bootp->bp_vend[15], 4);
    617  1.2  drochner 		bootp->bp_vend[19] = TAG_LEASETIME;
    618  1.2  drochner 		bootp->bp_vend[20] = 4;
    619  1.2  drochner 		leasetime = htonl(300);
    620  1.2  drochner 		bcopy(&leasetime, &bootp->bp_vend[21], 4);
    621  1.2  drochner 		bootp->bp_vend[25] = TAG_END;
    622  1.2  drochner 
    623  1.2  drochner 		bpc.expected_dhcpmsgtype = DHCPACK;
    624  1.2  drochner 
    625  1.2  drochner 		error = nfs_boot_sendrecv(so, nam, bootpset, m,
    626  1.2  drochner 					  bootpcheck, 0, 0, &bpc);
    627  1.2  drochner 		if (error)
    628  1.2  drochner 			goto out;
    629  1.1       gwr 	}
    630  1.2  drochner #endif
    631  1.1       gwr 
    632  1.1       gwr 	/*
    633  1.2  drochner 	 * bootpcheck() has copied the receive mbuf into
    634  1.2  drochner 	 * the buffer at bpc.replybuf.
    635  1.1       gwr 	 */
    636  1.7  drochner #ifdef NFS_BOOT_DHCP
    637  1.7  drochner 	printf("nfs_boot: %s server: 0x%x\n",
    638  1.7  drochner 	       (bpc.dhcp_ok ? "DHCP" : "BOOTP"),
    639  1.7  drochner #else
    640  1.7  drochner 	printf("nfs_boot: BOOTP server: 0x%x\n",
    641  1.7  drochner #endif
    642  1.7  drochner 	       INTOHL(bpc.replybuf->bp_siaddr));
    643  1.7  drochner 
    644  1.2  drochner 	bootp_extract(bpc.replybuf, bpc.replylen, nd);
    645  1.2  drochner 
    646  1.2  drochner out:
    647  1.2  drochner 	if (bpc.replybuf)
    648  1.2  drochner 		free(bpc.replybuf, M_DEVBUF);
    649  1.2  drochner 	if (m)
    650  1.2  drochner 		m_freem(m);
    651  1.2  drochner 	if (nam)
    652  1.2  drochner 		m_freem(nam);
    653  1.2  drochner 	return (error);
    654  1.2  drochner }
    655  1.1       gwr 
    656  1.7  drochner static void
    657  1.7  drochner bootp_extract(bootp, replylen, nd)
    658  1.2  drochner 	struct bootp *bootp;
    659  1.2  drochner 	int replylen;
    660  1.2  drochner 	struct nfs_diskless *nd;
    661  1.2  drochner {
    662  1.2  drochner 	struct sockaddr_in *sin;
    663  1.2  drochner 	struct in_addr netmask;
    664  1.2  drochner 	struct in_addr gateway;
    665  1.2  drochner 	struct in_addr rootserver;
    666  1.2  drochner 	char *myname;	/* my hostname */
    667  1.2  drochner 	char *mydomain;	/* my domainname */
    668  1.2  drochner 	char *rootpath;
    669  1.2  drochner 	int mynamelen;
    670  1.2  drochner 	int mydomainlen;
    671  1.2  drochner 	int rootpathlen;
    672  1.2  drochner 	u_int tag, len;
    673  1.2  drochner 	u_char *p, *limit;
    674  1.1       gwr 
    675  1.2  drochner 	/* Default these to "unspecified". */
    676  1.2  drochner 	netmask.s_addr = 0;
    677  1.2  drochner 	gateway.s_addr = 0;
    678  1.2  drochner 	mydomain    = myname    = rootpath = NULL;
    679  1.2  drochner 	mydomainlen = mynamelen = rootpathlen = 0;
    680  1.2  drochner 	/* default root server to bootp next-server */
    681  1.2  drochner 	rootserver = bootp->bp_siaddr;
    682  1.2  drochner 
    683  1.2  drochner 	p = &bootp->bp_vend[4];
    684  1.2  drochner 	limit = ((char*)bootp) + replylen;
    685  1.2  drochner 	while (p < limit) {
    686  1.2  drochner 		tag = *p++;
    687  1.2  drochner 		if (tag == TAG_END)
    688  1.2  drochner 			break;
    689  1.2  drochner 		if (tag == TAG_PAD)
    690  1.1       gwr 			continue;
    691  1.2  drochner 		len = *p++;
    692  1.7  drochner #if 0 /* already done in bootpcheck() */
    693  1.2  drochner 		if ((p + len) > limit) {
    694  1.2  drochner 			printf("nfs_boot: option %d too long\n", tag);
    695  1.2  drochner 			break;
    696  1.2  drochner 		}
    697  1.7  drochner #endif
    698  1.2  drochner 		switch (tag) {
    699  1.2  drochner 		    case TAG_SUBNET_MASK:
    700  1.2  drochner 			bcopy(p, &netmask, 4);
    701  1.2  drochner 			break;
    702  1.2  drochner 		    case TAG_GATEWAY:
    703  1.2  drochner 			/* Routers */
    704  1.2  drochner 			bcopy(p, &gateway, 4);
    705  1.2  drochner 			break;
    706  1.2  drochner 		    case TAG_HOST_NAME:
    707  1.2  drochner 			if (len >= sizeof(hostname)) {
    708  1.2  drochner 				printf("nfs_boot: host name >=%d bytes",
    709  1.2  drochner 				       sizeof(hostname));
    710  1.1       gwr 				break;
    711  1.2  drochner 			}
    712  1.2  drochner 			myname = p;
    713  1.2  drochner 			mynamelen = len;
    714  1.2  drochner 			break;
    715  1.2  drochner 		    case TAG_DOMAIN_NAME:
    716  1.2  drochner 			if (len >= sizeof(domainname)) {
    717  1.2  drochner 				printf("nfs_boot: domain name >=%d bytes",
    718  1.2  drochner 				       sizeof(domainname));
    719  1.1       gwr 				break;
    720  1.1       gwr 			}
    721  1.2  drochner 			mydomain = p;
    722  1.2  drochner 			mydomainlen = len;
    723  1.2  drochner 			break;
    724  1.2  drochner 		    case TAG_ROOT_PATH:
    725  1.2  drochner 			/* Leave some room for the server name. */
    726  1.2  drochner 			if (len >= (MNAMELEN-10)) {
    727  1.2  drochner 				printf("nfs_boot: rootpath >=%d bytes",
    728  1.2  drochner 				       (MNAMELEN-10));
    729  1.1       gwr 				break;
    730  1.1       gwr 			}
    731  1.2  drochner 			rootpath = p;
    732  1.2  drochner 			rootpathlen = len;
    733  1.2  drochner 			break;
    734  1.2  drochner 		    case TAG_SWAP_SERVER:
    735  1.2  drochner 			/* override NFS server address */
    736  1.2  drochner 			bcopy(p, &rootserver, 4);
    737  1.2  drochner 			break;
    738  1.2  drochner 		    default:
    739  1.2  drochner 			break;
    740  1.1       gwr 		}
    741  1.2  drochner 		p += len;
    742  1.1       gwr 	}
    743  1.1       gwr 
    744  1.1       gwr 	/*
    745  1.1       gwr 	 * Store and print network config info.
    746  1.1       gwr 	 */
    747  1.1       gwr 	if (myname) {
    748  1.1       gwr 		myname[mynamelen] = '\0';
    749  1.1       gwr 		strncpy(hostname, myname, sizeof(hostname));
    750  1.1       gwr 		hostnamelen = mynamelen;
    751  1.1       gwr 		printf("nfs_boot: my_name=%s\n", hostname);
    752  1.1       gwr 	}
    753  1.1       gwr 	if (mydomain) {
    754  1.1       gwr 		mydomain[mydomainlen] = '\0';
    755  1.1       gwr 		strncpy(domainname, mydomain, sizeof(domainname));
    756  1.1       gwr 		domainnamelen = mydomainlen;
    757  1.1       gwr 		printf("nfs_boot: my_domain=%s\n", domainname);
    758  1.1       gwr 	}
    759  1.1       gwr 	nd->nd_myip = bootp->bp_yiaddr;
    760  1.1       gwr 	if (nd->nd_myip.s_addr)
    761  1.1       gwr 		printf("nfs_boot: my_addr=0x%x\n", INTOHL(nd->nd_myip));
    762  1.1       gwr 	nd->nd_mask = netmask;
    763  1.1       gwr 	if (nd->nd_mask.s_addr)
    764  1.1       gwr 		printf("nfs_boot: my_mask=0x%x\n", INTOHL(nd->nd_mask));
    765  1.1       gwr 	nd->nd_gwip = gateway;
    766  1.1       gwr 	if (nd->nd_gwip.s_addr)
    767  1.1       gwr 		printf("nfs_boot: gateway=0x%x\n", INTOHL(nd->nd_gwip));
    768  1.1       gwr 
    769  1.1       gwr 	/*
    770  1.1       gwr 	 * Store the information about our NFS root mount.
    771  1.1       gwr 	 * The caller will print it, so be silent here.
    772  1.1       gwr 	 */
    773  1.1       gwr 	{
    774  1.1       gwr 		struct nfs_dlmount *ndm = &nd->nd_root;
    775  1.1       gwr 
    776  1.1       gwr 		/* Server IP address. */
    777  1.1       gwr 		sin = (struct sockaddr_in *) &ndm->ndm_saddr;
    778  1.1       gwr 		bzero((caddr_t)sin, sizeof(*sin));
    779  1.1       gwr 		sin->sin_len = sizeof(*sin);
    780  1.1       gwr 		sin->sin_family = AF_INET;
    781  1.2  drochner 		sin->sin_addr = rootserver;
    782  1.1       gwr 		/* Server name. */
    783  1.2  drochner 		if (!bcmp(&rootserver, &bootp->bp_siaddr,
    784  1.2  drochner 			  sizeof(struct in_addr))) {
    785  1.2  drochner 			/* standard root server, we have the name */
    786  1.2  drochner 			strncpy(ndm->ndm_host, bootp->bp_sname, BP_SNAME_LEN-1);
    787  1.2  drochner 		} else {
    788  1.1       gwr 			/* Show the server IP address numerically. */
    789  1.1       gwr 			sprintf(ndm->ndm_host, "0x%8x",
    790  1.2  drochner 				INTOHL(rootserver));
    791  1.1       gwr 		}
    792  1.2  drochner 		len = strlen(ndm->ndm_host);
    793  1.2  drochner 		if (rootpath &&
    794  1.2  drochner 		    len + 1 + rootpathlen + 1 <= sizeof(ndm->ndm_host)) {
    795  1.2  drochner 			ndm->ndm_host[len++] = ':';
    796  1.2  drochner 			strncpy(ndm->ndm_host + len,
    797  1.2  drochner 				rootpath, rootpathlen);
    798  1.2  drochner 			ndm->ndm_host[len + rootpathlen] = '\0';
    799  1.2  drochner 		} /* else: upper layer will handle error */
    800  1.1       gwr 	}
    801  1.1       gwr }
    802