sys/netinet6/udp6_usrreq.c

   1 /*      $FreeBSD: src/sys/netinet6/udp6_usrreq.c,v 1.6.2.13 2003/01/24 05:11:35 sam Exp $       */
   2 /*      $DragonFly: src/sys/netinet6/udp6_usrreq.c,v 1.26 2007/04/22 01:13:14 dillon Exp $      */
   3 /*      $KAME: udp6_usrreq.c,v 1.27 2001/05/21 05:45:10 jinmei Exp $    */
   4
   5 /*
   6  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
   7  * All rights reserved.
   8  *
   9  * Redistribution and use in source and binary forms, with or without
  10  * modification, are permitted provided that the following conditions
  11  * are met:
  12  * 1. Redistributions of source code must retain the above copyright
  13  *    notice, this list of conditions and the following disclaimer.
  14  * 2. Redistributions in binary form must reproduce the above copyright
  15  *    notice, this list of conditions and the following disclaimer in the
  16  *    documentation and/or other materials provided with the distribution.
  17  * 3. Neither the name of the project nor the names of its contributors
  18  *    may be used to endorse or promote products derived from this software
  19  *    without specific prior written permission.
  20  *
  21  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
  22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
  25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  31  * SUCH DAMAGE.
  32  */
  33
  34 /*
  35  * Copyright (c) 1982, 1986, 1989, 1993
  36  *      The Regents of the University of California.  All rights reserved.
  37  *
  38  * Redistribution and use in source and binary forms, with or without
  39  * modification, are permitted provided that the following conditions
  40  * are met:
  41  * 1. Redistributions of source code must retain the above copyright
  42  *    notice, this list of conditions and the following disclaimer.
  43  * 2. Redistributions in binary form must reproduce the above copyright
  44  *    notice, this list of conditions and the following disclaimer in the
  45  *    documentation and/or other materials provided with the distribution.
  46  * 3. All advertising materials mentioning features or use of this software
  47  *    must display the following acknowledgement:
  48  *      This product includes software developed by the University of
  49  *      California, Berkeley and its contributors.
  50  * 4. Neither the name of the University nor the names of its contributors
  51  *    may be used to endorse or promote products derived from this software
  52  *    without specific prior written permission.
  53  *
  54  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
  55  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  56  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  57  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  58  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  59  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  60  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  61  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  62  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  63  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  64  * SUCH DAMAGE.
  65  *
  66  *      @(#)udp_var.h   8.1 (Berkeley) 6/10/93
  67  */
  68
  69 #include "opt_inet.h"
  70 #include "opt_inet6.h"
  71 #include "opt_ipsec.h"
  72
  73 #include <sys/param.h>
  74 #include <sys/kernel.h>
  75 #include <sys/mbuf.h>
  76 #include <sys/protosw.h>
  77 #include <sys/socket.h>
  78 #include <sys/socketvar.h>
  79 #include <sys/sysctl.h>
  80 #include <sys/errno.h>
  81 #include <sys/stat.h>
  82 #include <sys/systm.h>
  83 #include <sys/syslog.h>
  84 #include <sys/proc.h>
  85 #include <sys/thread2.h>
  86
  87 #include <net/if.h>
  88 #include <net/route.h>
  89 #include <net/if_types.h>
  90
  91 #include <netinet/in.h>
  92 #include <netinet/in_systm.h>
  93 #include <netinet/ip.h>
  94 #include <netinet/in_pcb.h>
  95 #include <netinet/in_var.h>
  96 #include <netinet/ip_var.h>
  97 #include <netinet/udp.h>
  98 #include <netinet/udp_var.h>
  99 #include <netinet/ip6.h>
 100 #include <netinet6/ip6_var.h>
 101 #include <netinet6/in6_pcb.h>
 102 #include <netinet/icmp6.h>
 103 #include <netinet6/udp6_var.h>
 104 #include <netinet6/ip6protosw.h>
 105
 106 #ifdef IPSEC
 107 #include <netinet6/ipsec.h>
 108 #include <netinet6/ipsec6.h>
 109 #endif /* IPSEC */
 110
 111 #ifdef FAST_IPSEC
 112 #include <netproto/ipsec/ipsec.h>
 113 #include <netproto/ipsec/ipsec6.h>
 114 #endif /* FAST_IPSEC */
 115
 116 /*
 117  * UDP protocol inplementation.
 118  * Per RFC 768, August, 1980.
 119  */
 120
 121 extern  struct protosw inetsw[];
 122 static  int in6_mcmatch (struct inpcb *, struct in6_addr *, struct ifnet *);
 123 static  int udp6_detach (struct socket *so);
 124
 125 static int
 126 in6_mcmatch(struct inpcb *in6p, struct in6_addr *ia6, struct ifnet *ifp)
 127 {
 128         struct ip6_moptions *im6o = in6p->in6p_moptions;
 129         struct in6_multi_mship *imm;
 130
 131         if (im6o == NULL)
 132                 return 0;
 133
 134         for (imm = im6o->im6o_memberships.lh_first; imm != NULL;
 135              imm = imm->i6mm_chain.le_next) {
 136                 if ((ifp == NULL ||
 137                      imm->i6mm_maddr->in6m_ifp == ifp) &&
 138                     IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr,
 139                                        ia6))
 140                         return 1;
 141         }
 142         return 0;
 143 }
 144
 145 int
 146 udp6_input(struct mbuf **mp, int *offp, int proto)
 147 {
 148         struct mbuf *m = *mp;
 149         struct ip6_hdr *ip6;
 150         struct udphdr *uh;
 151         struct inpcb *in6p;
 152         struct  mbuf *opts = NULL;
 153         int off = *offp;
 154         int plen, ulen;
 155         struct sockaddr_in6 udp_in6;
 156
 157         IP6_EXTHDR_CHECK(m, off, sizeof(struct udphdr), IPPROTO_DONE);
 158
 159         ip6 = mtod(m, struct ip6_hdr *);
 160
 161         if (faithprefix_p != NULL && (*faithprefix_p)(&ip6->ip6_dst)) {
 162                 /* XXX send icmp6 host/port unreach? */
 163                 m_freem(m);
 164                 return IPPROTO_DONE;
 165         }
 166
 167         udpstat.udps_ipackets++;
 168
 169         plen = ntohs(ip6->ip6_plen) - off + sizeof(*ip6);
 170         uh = (struct udphdr *)((caddr_t)ip6 + off);
 171         ulen = ntohs((u_short)uh->uh_ulen);
 172
 173         if (plen != ulen) {
 174                 udpstat.udps_badlen++;
 175                 goto bad;
 176         }
 177
 178         /*
 179          * Checksum extended UDP header and data.
 180          */
 181         if (uh->uh_sum == 0)
 182                 udpstat.udps_nosum++;
 183         else if (in6_cksum(m, IPPROTO_UDP, off, ulen) != 0) {
 184                 udpstat.udps_badsum++;
 185                 goto bad;
 186         }
 187
 188         if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
 189                 struct  inpcb *last;
 190
 191                 /*
 192                  * Deliver a multicast datagram to all sockets
 193                  * for which the local and remote addresses and ports match
 194                  * those of the incoming datagram.  This allows more than
 195                  * one process to receive multicasts on the same port.
 196                  * (This really ought to be done for unicast datagrams as
 197                  * well, but that would cause problems with existing
 198                  * applications that open both address-specific sockets and
 199                  * a wildcard socket listening to the same port -- they would
 200                  * end up receiving duplicates of every unicast datagram.
 201                  * Those applications open the multiple sockets to overcome an
 202                  * inadequacy of the UDP socket interface, but for backwards
 203                  * compatibility we avoid the problem here rather than
 204                  * fixing the interface.  Maybe 4.5BSD will remedy this?)
 205                  */
 206
 207                 /*
 208                  * In a case that laddr should be set to the link-local
 209                  * address (this happens in RIPng), the multicast address
 210                  * specified in the received packet does not match with
 211                  * laddr. To cure this situation, the matching is relaxed
 212                  * if the receiving interface is the same as one specified
 213                  * in the socket and if the destination multicast address
 214                  * matches one of the multicast groups specified in the socket.
 215                  */
 216
 217                 /*
 218                  * Construct sockaddr format source address.
 219                  */
 220                 init_sin6(&udp_in6, m); /* general init */
 221                 udp_in6.sin6_port = uh->uh_sport;
 222                 /*
 223                  * KAME note: traditionally we dropped udpiphdr from mbuf here.
 224                  * We need udphdr for IPsec processing so we do that later.
 225                  */
 226
 227                 /*
 228                  * Locate pcb(s) for datagram.
 229                  * (Algorithm copied from raw_intr().)
 230                  */
 231                 last = NULL;
 232                 LIST_FOREACH(in6p, &udbinfo.pcblisthead, inp_list) {
 233                         if (!(in6p->inp_flags & INP_PLACEMARKER))
 234                                 continue;
 235                         if (!(in6p->inp_vflag & INP_IPV6))
 236                                 continue;
 237                         if (in6p->in6p_lport != uh->uh_dport)
 238                                 continue;
 239                         if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) {
 240                                 if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr,
 241                                                         &ip6->ip6_dst) &&
 242                                     !in6_mcmatch(in6p, &ip6->ip6_dst,
 243                                                  m->m_pkthdr.rcvif))
 244                                         continue;
 245                         }
 246                         if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr)) {
 247                                 if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr,
 248                                                         &ip6->ip6_src) ||
 249                                    in6p->in6p_fport != uh->uh_sport)
 250                                         continue;
 251                         }
 252
 253                         if (last != NULL) {
 254                                 struct  mbuf *n;
 255
 256 #ifdef IPSEC
 257                                 /*
 258                                  * Check AH/ESP integrity.
 259                                  */
 260                                 if (ipsec6_in_reject_so(m, last->inp_socket))
 261                                         ipsec6stat.in_polvio++;
 262                                         /* do not inject data into pcb */
 263                                 else
 264 #endif /* IPSEC */
 265 #ifdef FAST_IPSEC
 266                                 /*
 267                                  * Check AH/ESP integrity.
 268                                  */
 269                                 if (ipsec6_in_reject(m, last))
 270                                         ;
 271                                 else
 272 #endif /* FAST_IPSEC */
 273                                 if ((n = m_copy(m, 0, M_COPYALL)) != NULL) {
 274                                         /*
 275                                          * KAME NOTE: do not
 276                                          * m_copy(m, offset, ...) above.
 277                                          * ssb_appendaddr() expects M_PKTHDR,
 278                                          * and m_copy() will copy M_PKTHDR
 279                                          * only if offset is 0.
 280                                          */
 281                                         if (last->in6p_flags & IN6P_CONTROLOPTS
 282                                             || last->in6p_socket->so_options & SO_TIMESTAMP)
 283                                                 ip6_savecontrol(last, &opts,
 284                                                                 ip6, n);
 285
 286                                         m_adj(n, off + sizeof(struct udphdr));
 287                                         if (ssb_appendaddr(&last->in6p_socket->so_rcv,
 288                                                         (struct sockaddr *)&udp_in6,
 289                                                         n, opts) == 0) {
 290                                                 m_freem(n);
 291                                                 if (opts)
 292                                                         m_freem(opts);
 293                                                 udpstat.udps_fullsock++;
 294                                         } else
 295                                                 sorwakeup(last->in6p_socket);
 296                                         opts = NULL;
 297                                 }
 298                         }
 299                         last = in6p;
 300                         /*
 301                          * Don't look for additional matches if this one does
 302                          * not have either the SO_REUSEPORT or SO_REUSEADDR
 303                          * socket options set.  This heuristic avoids searching
 304                          * through all pcbs in the common case of a non-shared
 305                          * port.  It assumes that an application will never
 306                          * clear these options after setting them.
 307                          */
 308                         if ((last->in6p_socket->so_options &
 309                              (SO_REUSEPORT | SO_REUSEADDR)) == 0)
 310                                 break;
 311                 }
 312
 313                 if (last == NULL) {
 314                         /*
 315                          * No matching pcb found; discard datagram.
 316                          * (No need to send an ICMP Port Unreachable
 317                          * for a broadcast or multicast datgram.)
 318                          */
 319                         udpstat.udps_noport++;
 320                         udpstat.udps_noportmcast++;
 321                         goto bad;
 322                 }
 323 #ifdef IPSEC
 324                 /*
 325                  * Check AH/ESP integrity.
 326                  */
 327                 if (ipsec6_in_reject_so(m, last->inp_socket)) {
 328                         ipsec6stat.in_polvio++;
 329                         goto bad;
 330                 }
 331 #endif /* IPSEC */
 332 #ifdef FAST_IPSEC
 333                 /*
 334                  * Check AH/ESP integrity.
 335                  */
 336                 if (ipsec6_in_reject(m, last)) {
 337                         goto bad;
 338                 }
 339 #endif /* FAST_IPSEC */
 340                 if (last->in6p_flags & IN6P_CONTROLOPTS
 341                     || last->in6p_socket->so_options & SO_TIMESTAMP)
 342                         ip6_savecontrol(last, &opts, ip6, m);
 343
 344                 m_adj(m, off + sizeof(struct udphdr));
 345                 if (ssb_appendaddr(&last->in6p_socket->so_rcv,
 346                                 (struct sockaddr *)&udp_in6,
 347                                 m, opts) == 0) {
 348                         udpstat.udps_fullsock++;
 349                         goto bad;
 350                 }
 351                 sorwakeup(last->in6p_socket);
 352                 return IPPROTO_DONE;
 353         }
 354         /*
 355          * Locate pcb for datagram.
 356          */
 357         in6p = in6_pcblookup_hash(&udbinfo, &ip6->ip6_src, uh->uh_sport,
 358                                   &ip6->ip6_dst, uh->uh_dport, 1,
 359                                   m->m_pkthdr.rcvif);
 360         if (in6p == NULL) {
 361                 if (log_in_vain) {
 362                         char buf[INET6_ADDRSTRLEN];
 363
 364                         strcpy(buf, ip6_sprintf(&ip6->ip6_dst));
 365                         log(LOG_INFO,
 366                             "Connection attempt to UDP [%s]:%d from [%s]:%d\n",
 367                             buf, ntohs(uh->uh_dport),
 368                             ip6_sprintf(&ip6->ip6_src), ntohs(uh->uh_sport));
 369                 }
 370                 udpstat.udps_noport++;
 371                 if (m->m_flags & M_MCAST) {
 372                         kprintf("UDP6: M_MCAST is set in a unicast packet.\n");
 373                         udpstat.udps_noportmcast++;
 374                         goto bad;
 375                 }
 376                 icmp6_error(m, ICMP6_DST_UNREACH, ICMP6_DST_UNREACH_NOPORT, 0);
 377                 return IPPROTO_DONE;
 378         }
 379 #ifdef IPSEC
 380         /*
 381          * Check AH/ESP integrity.
 382          */
 383         if (ipsec6_in_reject_so(m, in6p->in6p_socket)) {
 384                 ipsec6stat.in_polvio++;
 385                 goto bad;
 386         }
 387 #endif /* IPSEC */
 388 #ifdef FAST_IPSEC
 389         /*
 390          * Check AH/ESP integrity.
 391          */
 392         if (ipsec6_in_reject(m, in6p)) {
 393                 goto bad;
 394         }
 395 #endif /* FAST_IPSEC */
 396
 397         /*
 398          * Construct sockaddr format source address.
 399          * Stuff source address and datagram in user buffer.
 400          */
 401         init_sin6(&udp_in6, m); /* general init */
 402         udp_in6.sin6_port = uh->uh_sport;
 403         if (in6p->in6p_flags & IN6P_CONTROLOPTS
 404             || in6p->in6p_socket->so_options & SO_TIMESTAMP)
 405                 ip6_savecontrol(in6p, &opts, ip6, m);
 406         m_adj(m, off + sizeof(struct udphdr));
 407         if (ssb_appendaddr(&in6p->in6p_socket->so_rcv,
 408                         (struct sockaddr *)&udp_in6,
 409                         m, opts) == 0) {
 410                 udpstat.udps_fullsock++;
 411                 goto bad;
 412         }
 413         sorwakeup(in6p->in6p_socket);
 414         return IPPROTO_DONE;
 415 bad:
 416         if (m)
 417                 m_freem(m);
 418         if (opts)
 419                 m_freem(opts);
 420         return IPPROTO_DONE;
 421 }
 422
 423 void
 424 udp6_ctlinput(int cmd, struct sockaddr *sa, void *d)
 425 {
 426         struct udphdr uh;
 427         struct ip6_hdr *ip6;
 428         struct mbuf *m;
 429         int off = 0;
 430         struct ip6ctlparam *ip6cp = NULL;
 431         const struct sockaddr_in6 *sa6_src = NULL;
 432         void (*notify) (struct inpcb *, int) = udp_notify;
 433         struct udp_portonly {
 434                 u_int16_t uh_sport;
 435                 u_int16_t uh_dport;
 436         } *uhp;
 437
 438         if (sa->sa_family != AF_INET6 ||
 439             sa->sa_len != sizeof(struct sockaddr_in6))
 440                 return;
 441
 442         if ((unsigned)cmd >= PRC_NCMDS)
 443                 return;
 444         if (PRC_IS_REDIRECT(cmd))
 445                 notify = in6_rtchange, d = NULL;
 446         else if (cmd == PRC_HOSTDEAD)
 447                 d = NULL;
 448         else if (inet6ctlerrmap[cmd] == 0)
 449                 return;
 450
 451         /* if the parameter is from icmp6, decode it. */
 452         if (d != NULL) {
 453                 ip6cp = (struct ip6ctlparam *)d;
 454                 m = ip6cp->ip6c_m;
 455                 ip6 = ip6cp->ip6c_ip6;
 456                 off = ip6cp->ip6c_off;
 457                 sa6_src = ip6cp->ip6c_src;
 458         } else {
 459                 m = NULL;
 460                 ip6 = NULL;
 461                 sa6_src = &sa6_any;
 462         }
 463
 464         if (ip6) {
 465                 /*
 466                  * XXX: We assume that when IPV6 is non NULL,
 467                  * M and OFF are valid.
 468                  */
 469
 470                 /* check if we can safely examine src and dst ports */
 471                 if (m->m_pkthdr.len < off + sizeof(*uhp))
 472                         return;
 473
 474                 bzero(&uh, sizeof(uh));
 475                 m_copydata(m, off, sizeof(*uhp), (caddr_t)&uh);
 476
 477                 in6_pcbnotify(&udbinfo.pcblisthead, sa, uh.uh_dport,
 478                               (struct sockaddr *)ip6cp->ip6c_src, uh.uh_sport,
 479                               cmd, 0, notify);
 480         } else
 481                 in6_pcbnotify(&udbinfo.pcblisthead, sa, 0,
 482                               (const struct sockaddr *)sa6_src, 0,
 483                               cmd, 0, notify);
 484 }
 485
 486 static int
 487 udp6_getcred(SYSCTL_HANDLER_ARGS)
 488 {
 489         struct sockaddr_in6 addrs[2];
 490         struct inpcb *inp;
 491         int error;
 492
 493         error = suser(req->td);
 494         if (error)
 495                 return (error);
 496
 497         if (req->newlen != sizeof(addrs))
 498                 return (EINVAL);
 499         if (req->oldlen != sizeof(struct ucred))
 500                 return (EINVAL);
 501         error = SYSCTL_IN(req, addrs, sizeof(addrs));
 502         if (error)
 503                 return (error);
 504         crit_enter();
 505         inp = in6_pcblookup_hash(&udbinfo, &addrs[1].sin6_addr,
 506                                  addrs[1].sin6_port,
 507                                  &addrs[0].sin6_addr, addrs[0].sin6_port,
 508                                  1, NULL);
 509         if (!inp || !inp->inp_socket) {
 510                 error = ENOENT;
 511                 goto out;
 512         }
 513         error = SYSCTL_OUT(req, inp->inp_socket->so_cred,
 514                            sizeof(struct ucred));
 515
 516 out:
 517         crit_exit();
 518         return (error);
 519 }
 520
 521 SYSCTL_PROC(_net_inet6_udp6, OID_AUTO, getcred, CTLTYPE_OPAQUE|CTLFLAG_RW,
 522             0, 0,
 523             udp6_getcred, "S,ucred", "Get the ucred of a UDP6 connection");
 524
 525 static int
 526 udp6_abort(struct socket *so)
 527 {
 528         struct inpcb *inp;
 529
 530         inp = so->so_pcb;
 531         if (inp == NULL)
 532                 return EINVAL;  /* ??? possible? panic instead? */
 533         soisdisconnected(so);
 534         crit_enter();
 535         in6_pcbdetach(inp);
 536         crit_exit();
 537         return 0;
 538 }
 539
 540 static int
 541 udp6_attach(struct socket *so, int proto, struct pru_attach_info *ai)
 542 {
 543         struct inpcb *inp;
 544         int error;
 545
 546         inp = so->so_pcb;
 547         if (inp != NULL)
 548                 return EINVAL;
 549
 550         if (so->so_snd.ssb_hiwat == 0 || so->so_rcv.ssb_hiwat == 0) {
 551                 error = soreserve(so, udp_sendspace, udp_recvspace,
 552                     ai->sb_rlimit);
 553                 if (error)
 554                         return error;
 555         }
 556         crit_enter();
 557         error = in_pcballoc(so, &udbinfo);
 558         crit_exit();
 559         if (error)
 560                 return error;
 561         inp = (struct inpcb *)so->so_pcb;
 562         inp->inp_vflag |= INP_IPV6;
 563         if (!ip6_v6only)
 564                 inp->inp_vflag |= INP_IPV4;
 565         inp->in6p_hops = -1;    /* use kernel default */
 566         inp->in6p_cksum = -1;   /* just to be sure */
 567         /*
 568          * XXX: ugly!!
 569          * IPv4 TTL initialization is necessary for an IPv6 socket as well,
 570          * because the socket may be bound to an IPv6 wildcard address,
 571          * which may match an IPv4-mapped IPv6 address.
 572          */
 573         inp->inp_ip_ttl = ip_defttl;
 574         return 0;
 575 }
 576
 577 static int
 578 udp6_bind(struct socket *so, struct sockaddr *nam, struct thread *td)
 579 {
 580         struct sockaddr_in6 *sin6_p = (struct sockaddr_in6 *)nam;
 581         struct inpcb *inp;
 582         int error;
 583
 584         inp = so->so_pcb;
 585         if (inp == NULL)
 586                 return EINVAL;
 587
 588         inp->inp_vflag &= ~INP_IPV4;
 589         inp->inp_vflag |= INP_IPV6;
 590         if (!(inp->inp_flags & IN6P_IPV6_V6ONLY)) {
 591                 if (IN6_IS_ADDR_UNSPECIFIED(&sin6_p->sin6_addr))
 592                         inp->inp_vflag |= INP_IPV4;
 593                 else if (IN6_IS_ADDR_V4MAPPED(&sin6_p->sin6_addr)) {
 594                         struct sockaddr_in sin;
 595
 596                         in6_sin6_2_sin(&sin, sin6_p);
 597                         inp->inp_vflag |= INP_IPV4;
 598                         inp->inp_vflag &= ~INP_IPV6;
 599                         crit_enter();
 600                         error = in_pcbbind(inp, (struct sockaddr *)&sin, td);
 601                         crit_exit();
 602                         return error;
 603                 }
 604         }
 605
 606         crit_enter();
 607         error = in6_pcbbind(inp, nam, td);
 608         crit_exit();
 609         if (error == 0) {
 610                 if (IN6_IS_ADDR_UNSPECIFIED(&sin6_p->sin6_addr))
 611                         inp->inp_flags |= INP_WASBOUND_NOTANY;
 612                 in_pcbinswildcardhash(inp);
 613         }
 614         return error;
 615 }
 616
 617 static int
 618 udp6_connect(struct socket *so, struct sockaddr *nam, struct thread *td)
 619 {
 620         struct inpcb *inp;
 621         int error;
 622
 623         inp = so->so_pcb;
 624         if (inp == NULL)
 625                 return EINVAL;
 626
 627         if (!(inp->inp_flags & IN6P_IPV6_V6ONLY)) {
 628                 struct sockaddr_in6 *sin6_p;
 629
 630                 sin6_p = (struct sockaddr_in6 *)nam;
 631                 if (IN6_IS_ADDR_V4MAPPED(&sin6_p->sin6_addr)) {
 632                         struct sockaddr_in sin;
 633
 634                         if (inp->inp_faddr.s_addr != INADDR_ANY)
 635                                 return EISCONN;
 636                         in6_sin6_2_sin(&sin, sin6_p);
 637                         crit_enter();
 638                         error = in_pcbconnect(inp, (struct sockaddr *)&sin, td);
 639                         crit_exit();
 640                         if (error == 0) {
 641                                 inp->inp_vflag |= INP_IPV4;
 642                                 inp->inp_vflag &= ~INP_IPV6;
 643                                 soisconnected(so);
 644                         }
 645                         return error;
 646                 }
 647         }
 648         if (!IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_faddr))
 649                 return EISCONN;
 650         if (inp->inp_flags & INP_WILDCARD)
 651                 in_pcbremwildcardhash(inp);
 652         if (!prison_remote_ip(td, nam))
 653                 return(EAFNOSUPPORT); /* IPv4 only jail */
 654         crit_enter();
 655         error = in6_pcbconnect(inp, nam, td);
 656         crit_exit();
 657         if (error == 0) {
 658                 if (!ip6_v6only) { /* should be non mapped addr */
 659                         inp->inp_vflag &= ~INP_IPV4;
 660                         inp->inp_vflag |= INP_IPV6;
 661                 }
 662                 soisconnected(so);
 663         } else if (error == EAFNOSUPPORT) {     /* connection dissolved */
 664                 /*
 665                  * Follow traditional BSD behavior and retain
 666                  * the local port binding.  But, fix the old misbehavior
 667                  * of overwriting any previously bound local address.
 668                  */
 669                 if (!(inp->inp_flags & INP_WASBOUND_NOTANY))
 670                         inp->in6p_laddr = kin6addr_any;
 671                 in_pcbinswildcardhash(inp);
 672         }
 673         return error;
 674 }
 675
 676 static int
 677 udp6_detach(struct socket *so)
 678 {
 679         struct inpcb *inp;
 680
 681         inp = so->so_pcb;
 682         if (inp == NULL)
 683                 return EINVAL;
 684         crit_enter();
 685         in6_pcbdetach(inp);
 686         crit_exit();
 687         return 0;
 688 }
 689
 690 static int
 691 udp6_disconnect(struct socket *so)
 692 {
 693         struct inpcb *inp;
 694
 695         inp = so->so_pcb;
 696         if (inp == NULL)
 697                 return EINVAL;
 698
 699         if (inp->inp_vflag & INP_IPV4) {
 700                 const struct pr_usrreqs *pru;
 701
 702                 pru = inetsw[ip_protox[IPPROTO_UDP]].pr_usrreqs;
 703                 return ((*pru->pru_disconnect)(so));
 704         }
 705
 706         if (IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_faddr))
 707                 return ENOTCONN;
 708
 709         crit_enter();
 710         in6_pcbdisconnect(inp);
 711         crit_exit();
 712         so->so_state &= ~SS_ISCONNECTED;                /* XXX */
 713         return 0;
 714 }
 715
 716 static int
 717 udp6_send(struct socket *so, int flags, struct mbuf *m, struct sockaddr *addr,
 718           struct mbuf *control, struct thread *td)
 719 {
 720         struct inpcb *inp;
 721         int error = 0;
 722
 723         inp = so->so_pcb;
 724         if (inp == NULL) {
 725                 error = EINVAL;
 726                 goto bad;
 727         }
 728
 729         if (addr) {
 730                 if (addr->sa_len != sizeof(struct sockaddr_in6)) {
 731                         error = EINVAL;
 732                         goto bad;
 733                 }
 734                 if (addr->sa_family != AF_INET6) {
 735                         error = EAFNOSUPPORT;
 736                         goto bad;
 737                 }
 738         }
 739
 740         if (!ip6_v6only) {
 741                 int hasv4addr;
 742                 struct sockaddr_in6 *sin6 = 0;
 743
 744                 if (addr == NULL)
 745                         hasv4addr = (inp->inp_vflag & INP_IPV4);
 746                 else {
 747                         sin6 = (struct sockaddr_in6 *)addr;
 748                         hasv4addr = IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)
 749                                 ? 1 : 0;
 750                 }
 751                 if (hasv4addr) {
 752                         const struct pr_usrreqs *pru;
 753
 754                         if (sin6)
 755                                 in6_sin6_2_sin_in_sock(addr);
 756                         pru = inetsw[ip_protox[IPPROTO_UDP]].pr_usrreqs;
 757                         error = ((*pru->pru_send)(so, flags, m, addr,
 758                                     control, td));
 759                         /* addr will just be freed in sendit(). */
 760                         return error;
 761                 }
 762         }
 763
 764         return udp6_output(inp, m, addr, control, td);
 765
 766 bad:
 767         m_freem(m);
 768         return (error);
 769 }
 770
 771 struct pr_usrreqs udp6_usrreqs = {
 772         .pru_abort = udp6_abort,
 773         .pru_accept = pru_accept_notsupp,
 774         .pru_attach = udp6_attach,
 775         .pru_bind = udp6_bind,
 776         .pru_connect = udp6_connect,
 777         .pru_connect2 = pru_connect2_notsupp,
 778         .pru_control = in6_control,
 779         .pru_detach = udp6_detach,
 780         .pru_disconnect = udp6_disconnect,
 781         .pru_listen = pru_listen_notsupp,
 782         .pru_peeraddr = in6_mapped_peeraddr,
 783         .pru_rcvd = pru_rcvd_notsupp,
 784         .pru_rcvoob = pru_rcvoob_notsupp,
 785         .pru_send = udp6_send,
 786         .pru_sense = pru_sense_null,
 787         .pru_shutdown = udp_shutdown,
 788         .pru_sockaddr = in6_mapped_sockaddr,
 789         .pru_sosend = sosend,
 790         .pru_soreceive = soreceive,
 791         .pru_sopoll = sopoll
 792 };
 793