2 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 * $FreeBSD: src/sys/netinet6/raw_ip6.c,v 1.7.2.7 2003/01/24 05:11:35 sam Exp $
30 * $DragonFly: src/sys/netinet6/raw_ip6.c,v 1.18 2005/03/06 05:09:25 hsu Exp $
34 * Copyright (c) 1982, 1986, 1988, 1993
35 * The Regents of the University of California. All rights reserved.
37 * Redistribution and use in source and binary forms, with or without
38 * modification, are permitted provided that the following conditions
40 * 1. Redistributions of source code must retain the above copyright
41 * notice, this list of conditions and the following disclaimer.
42 * 2. Redistributions in binary form must reproduce the above copyright
43 * notice, this list of conditions and the following disclaimer in the
44 * documentation and/or other materials provided with the distribution.
45 * 3. All advertising materials mentioning features or use of this software
46 * must display the following acknowledgement:
47 * This product includes software developed by the University of
48 * California, Berkeley and its contributors.
49 * 4. Neither the name of the University nor the names of its contributors
50 * may be used to endorse or promote products derived from this software
51 * without specific prior written permission.
53 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
54 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
55 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
56 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
57 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
58 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
59 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
60 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
61 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
62 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
65 * @(#)raw_ip.c 8.2 (Berkeley) 1/4/94
68 #include "opt_ipsec.h"
69 #include "opt_inet6.h"
71 #include <sys/param.h>
72 #include <sys/malloc.h>
75 #include <sys/socket.h>
76 #include <sys/protosw.h>
77 #include <sys/socketvar.h>
78 #include <sys/errno.h>
79 #include <sys/systm.h>
82 #include <net/route.h>
83 #include <net/if_types.h>
85 #include <netinet/in.h>
86 #include <netinet/in_var.h>
87 #include <netinet/in_systm.h>
88 #include <netinet/ip6.h>
89 #include <netinet6/ip6_var.h>
90 #include <netinet6/ip6_mroute.h>
91 #include <netinet/icmp6.h>
92 #include <netinet/in_pcb.h>
93 #include <netinet6/in6_pcb.h>
94 #include <netinet6/nd6.h>
95 #include <netinet6/ip6protosw.h>
96 #ifdef ENABLE_DEFAULT_SCOPE
97 #include <netinet6/scope6_var.h>
99 #include <netinet6/raw_ip6.h>
102 #include <netinet6/ipsec.h>
103 #include <netinet6/ipsec6.h>
107 #include <netproto/ipsec/ipsec.h>
108 #include <netproto/ipsec/ipsec6.h>
109 #endif /* FAST_IPSEC */
111 #include <machine/stdarg.h>
113 #define satosin6(sa) ((struct sockaddr_in6 *)(sa))
114 #define ifatoia6(ifa) ((struct in6_ifaddr *)(ifa))
117 * Raw interface to IP6 protocol.
120 extern struct inpcbinfo ripcbinfo
;
121 extern u_long rip_sendspace
;
122 extern u_long rip_recvspace
;
124 struct rip6stat rip6stat
;
127 * Setup generic address and protocol structures
128 * for raw_input routine, then pass them along with
132 rip6_input(struct mbuf
**mp
, int *offp
, int proto
)
134 struct mbuf
*m
= *mp
;
135 struct ip6_hdr
*ip6
= mtod(m
, struct ip6_hdr
*);
137 struct inpcb
*last
= 0;
138 struct mbuf
*opts
= NULL
;
139 struct sockaddr_in6 rip6src
;
141 rip6stat
.rip6s_ipackets
++;
143 if (faithprefix_p
!= NULL
&& (*faithprefix_p
)(&ip6
->ip6_dst
)) {
144 /* XXX send icmp6 host/port unreach? */
149 init_sin6(&rip6src
, m
); /* general init */
151 LIST_FOREACH(in6p
, &ripcbinfo
.pcblisthead
, inp_list
) {
152 if (in6p
->in6p_flags
& INP_PLACEMARKER
)
154 if ((in6p
->in6p_vflag
& INP_IPV6
) == 0)
156 if (in6p
->in6p_ip6_nxt
&&
157 in6p
->in6p_ip6_nxt
!= proto
)
159 if (!IN6_IS_ADDR_UNSPECIFIED(&in6p
->in6p_laddr
) &&
160 !IN6_ARE_ADDR_EQUAL(&in6p
->in6p_laddr
, &ip6
->ip6_dst
))
162 if (!IN6_IS_ADDR_UNSPECIFIED(&in6p
->in6p_faddr
) &&
163 !IN6_ARE_ADDR_EQUAL(&in6p
->in6p_faddr
, &ip6
->ip6_src
))
165 if (in6p
->in6p_cksum
!= -1) {
166 rip6stat
.rip6s_isum
++;
167 if (in6_cksum(m
, ip6
->ip6_nxt
, *offp
,
168 m
->m_pkthdr
.len
- *offp
)) {
169 rip6stat
.rip6s_badsum
++;
174 struct mbuf
*n
= m_copy(m
, 0, (int)M_COPYALL
);
178 * Check AH/ESP integrity.
180 if (n
&& ipsec6_in_reject_so(n
, last
->inp_socket
)) {
182 ipsec6stat
.in_polvio
++;
183 /* do not inject data into pcb */
188 * Check AH/ESP integrity.
190 if (n
&& ipsec6_in_reject(n
, last
)) {
192 /* do not inject data into pcb */
194 #endif /*FAST_IPSEC*/
196 if (last
->in6p_flags
& IN6P_CONTROLOPTS
||
197 last
->in6p_socket
->so_options
& SO_TIMESTAMP
)
198 ip6_savecontrol(last
, &opts
, ip6
, n
);
199 /* strip intermediate headers */
201 if (sbappendaddr(&last
->in6p_socket
->so_rcv
,
202 (struct sockaddr
*)&rip6src
,
207 rip6stat
.rip6s_fullsock
++;
209 sorwakeup(last
->in6p_socket
);
217 * Check AH/ESP integrity.
219 if (last
&& ipsec6_in_reject_so(m
, last
->inp_socket
)) {
221 ipsec6stat
.in_polvio
++;
222 ip6stat
.ip6s_delivered
--;
223 /* do not inject data into pcb */
228 * Check AH/ESP integrity.
230 if (last
&& ipsec6_in_reject(m
, last
)) {
232 ip6stat
.ip6s_delivered
--;
233 /* do not inject data into pcb */
235 #endif /*FAST_IPSEC*/
237 if (last
->in6p_flags
& IN6P_CONTROLOPTS
||
238 last
->in6p_socket
->so_options
& SO_TIMESTAMP
)
239 ip6_savecontrol(last
, &opts
, ip6
, m
);
240 /* strip intermediate headers */
242 if (sbappendaddr(&last
->in6p_socket
->so_rcv
,
243 (struct sockaddr
*)&rip6src
, m
, opts
) == 0) {
247 rip6stat
.rip6s_fullsock
++;
249 sorwakeup(last
->in6p_socket
);
251 rip6stat
.rip6s_nosock
++;
252 if (m
->m_flags
& M_MCAST
)
253 rip6stat
.rip6s_nosockmcast
++;
254 if (proto
== IPPROTO_NONE
)
257 char *prvnxtp
= ip6_get_prevhdr(m
, *offp
); /* XXX */
258 icmp6_error(m
, ICMP6_PARAM_PROB
,
259 ICMP6_PARAMPROB_NEXTHEADER
,
260 prvnxtp
- mtod(m
, char *));
262 ip6stat
.ip6s_delivered
--;
268 rip6_ctlinput(int cmd
, struct sockaddr
*sa
, void *d
)
273 struct ip6ctlparam
*ip6cp
= NULL
;
274 const struct sockaddr_in6
*sa6_src
= NULL
;
275 void (*notify
) (struct inpcb
*, int) = in6_rtchange
;
277 if (sa
->sa_family
!= AF_INET6
||
278 sa
->sa_len
!= sizeof(struct sockaddr_in6
))
281 if ((unsigned)cmd
>= PRC_NCMDS
)
283 if (PRC_IS_REDIRECT(cmd
))
284 notify
= in6_rtchange
, d
= NULL
;
285 else if (cmd
== PRC_HOSTDEAD
)
287 else if (inet6ctlerrmap
[cmd
] == 0)
290 /* if the parameter is from icmp6, decode it. */
292 ip6cp
= (struct ip6ctlparam
*)d
;
294 ip6
= ip6cp
->ip6c_ip6
;
295 off
= ip6cp
->ip6c_off
;
296 sa6_src
= ip6cp
->ip6c_src
;
303 in6_pcbnotify(&ripcbinfo
.pcblisthead
, sa
, 0,
304 (const struct sockaddr
*)sa6_src
, 0, cmd
, 0, notify
);
308 * Generate IPv6 header and pass packet to ip6_output.
309 * Tack on options user may have setup with control call.
312 rip6_output(struct mbuf
*m
, struct socket
*so
, ...)
314 struct sockaddr_in6
*dstsock
;
315 struct mbuf
*control
;
316 struct in6_addr
*dst
;
319 u_int plen
= m
->m_pkthdr
.len
;
321 struct ip6_pktopts opt
, *optp
= 0;
322 struct ifnet
*oifp
= NULL
;
323 int type
= 0, code
= 0; /* for ICMPv6 output statistics only */
328 dstsock
= __va_arg(ap
, struct sockaddr_in6
*);
329 control
= __va_arg(ap
, struct mbuf
*);
335 if (so
->so_cred
->cr_uid
== 0)
337 dst
= &dstsock
->sin6_addr
;
339 if ((error
= ip6_setpktoptions(control
, &opt
, priv
, 0)) != 0)
343 optp
= in6p
->in6p_outputopts
;
346 * For an ICMPv6 packet, we should know its type and code
347 * to update statistics.
349 if (so
->so_proto
->pr_protocol
== IPPROTO_ICMPV6
) {
350 struct icmp6_hdr
*icmp6
;
351 if (m
->m_len
< sizeof(struct icmp6_hdr
) &&
352 (m
= m_pullup(m
, sizeof(struct icmp6_hdr
))) == NULL
) {
356 icmp6
= mtod(m
, struct icmp6_hdr
*);
357 type
= icmp6
->icmp6_type
;
358 code
= icmp6
->icmp6_code
;
361 M_PREPEND(m
, sizeof(*ip6
), MB_WAIT
);
362 ip6
= mtod(m
, struct ip6_hdr
*);
365 * Next header might not be ICMP6 but use its pseudo header anyway.
370 * If the scope of the destination is link-local, embed the interface
371 * index in the address.
373 * XXX advanced-api value overrides sin6_scope_id
375 if (IN6_IS_SCOPE_LINKLOCAL(&ip6
->ip6_dst
)) {
376 struct in6_pktinfo
*pi
;
379 * XXX Boundary check is assumed to be already done in
380 * ip6_setpktoptions().
382 if (optp
&& (pi
= optp
->ip6po_pktinfo
) && pi
->ipi6_ifindex
) {
383 ip6
->ip6_dst
.s6_addr16
[1] = htons(pi
->ipi6_ifindex
);
384 oifp
= ifindex2ifnet
[pi
->ipi6_ifindex
];
385 } else if (IN6_IS_ADDR_MULTICAST(&ip6
->ip6_dst
) &&
386 in6p
->in6p_moptions
&&
387 in6p
->in6p_moptions
->im6o_multicast_ifp
) {
388 oifp
= in6p
->in6p_moptions
->im6o_multicast_ifp
;
389 ip6
->ip6_dst
.s6_addr16
[1] = htons(oifp
->if_index
);
390 } else if (dstsock
->sin6_scope_id
) {
392 if (dstsock
->sin6_scope_id
< 0
393 || if_index
< dstsock
->sin6_scope_id
) {
394 error
= ENXIO
; /* XXX EINVAL? */
397 ip6
->ip6_dst
.s6_addr16
[1]
398 = htons(dstsock
->sin6_scope_id
& 0xffff);/*XXX*/
403 * Source address selection.
406 struct in6_addr
*in6a
;
408 if ((in6a
= in6_selectsrc(dstsock
, optp
,
414 error
= EADDRNOTAVAIL
;
417 ip6
->ip6_src
= *in6a
;
418 if (in6p
->in6p_route
.ro_rt
)
419 oifp
= ifindex2ifnet
[in6p
->in6p_route
.ro_rt
->rt_ifp
->if_index
];
421 ip6
->ip6_flow
= (ip6
->ip6_flow
& ~IPV6_FLOWINFO_MASK
) |
422 (in6p
->in6p_flowinfo
& IPV6_FLOWINFO_MASK
);
423 ip6
->ip6_vfc
= (ip6
->ip6_vfc
& ~IPV6_VERSION_MASK
) |
424 (IPV6_VERSION
& IPV6_VERSION_MASK
);
425 /* ip6_plen will be filled in ip6_output, so not fill it here. */
426 ip6
->ip6_nxt
= in6p
->in6p_ip6_nxt
;
427 ip6
->ip6_hlim
= in6_selecthlim(in6p
, oifp
);
429 if (so
->so_proto
->pr_protocol
== IPPROTO_ICMPV6
||
430 in6p
->in6p_cksum
!= -1) {
435 /* compute checksum */
436 if (so
->so_proto
->pr_protocol
== IPPROTO_ICMPV6
)
437 off
= offsetof(struct icmp6_hdr
, icmp6_cksum
);
439 off
= in6p
->in6p_cksum
;
440 if (plen
< off
+ 1) {
444 off
+= sizeof(struct ip6_hdr
);
447 while (n
&& n
->m_len
<= off
) {
453 p
= (u_int16_t
*)(mtod(n
, caddr_t
) + off
);
455 *p
= in6_cksum(m
, ip6
->ip6_nxt
, sizeof(*ip6
), plen
);
458 error
= ip6_output(m
, optp
, &in6p
->in6p_route
, 0,
459 in6p
->in6p_moptions
, &oifp
, in6p
);
460 if (so
->so_proto
->pr_protocol
== IPPROTO_ICMPV6
) {
462 icmp6_ifoutstat_inc(oifp
, type
, code
);
463 icmp6stat
.icp6s_outhist
[type
]++;
465 rip6stat
.rip6s_opackets
++;
474 if (optp
== &opt
&& optp
->ip6po_rthdr
&& optp
->ip6po_route
.ro_rt
)
475 RTFREE(optp
->ip6po_route
.ro_rt
);
478 ip6_clearpktopts(optp
, 0, -1);
485 * Raw IPv6 socket option processing.
488 rip6_ctloutput(struct socket
*so
, struct sockopt
*sopt
)
492 if (sopt
->sopt_level
== IPPROTO_ICMPV6
)
494 * XXX: is it better to call icmp6_ctloutput() directly
497 return(icmp6_ctloutput(so
, sopt
));
498 else if (sopt
->sopt_level
!= IPPROTO_IPV6
)
503 switch (sopt
->sopt_dir
) {
505 switch (sopt
->sopt_name
) {
513 error
= ip6_mrouter_get(so
, sopt
);
516 error
= ip6_ctloutput(so
, sopt
);
522 switch (sopt
->sopt_name
) {
530 error
= ip6_mrouter_set(so
, sopt
);
533 error
= ip6_ctloutput(so
, sopt
);
543 rip6_attach(struct socket
*so
, int proto
, struct pru_attach_info
*ai
)
550 panic("rip6_attach");
551 if ((error
= suser_cred(ai
->p_ucred
, NULL_CRED_OKAY
)) != 0)
554 error
= soreserve(so
, rip_sendspace
, rip_recvspace
, ai
->sb_rlimit
);
558 error
= in_pcballoc(so
, &ripcbinfo
);
562 inp
= (struct inpcb
*)so
->so_pcb
;
563 inp
->inp_vflag
|= INP_IPV6
;
564 inp
->in6p_ip6_nxt
= (long)proto
;
565 inp
->in6p_hops
= -1; /* use kernel default */
566 inp
->in6p_cksum
= -1;
567 MALLOC(inp
->in6p_icmp6filt
, struct icmp6_filter
*,
568 sizeof(struct icmp6_filter
), M_PCB
, M_NOWAIT
);
569 ICMP6_FILTER_SETPASSALL(inp
->in6p_icmp6filt
);
574 rip6_detach(struct socket
*so
)
580 panic("rip6_detach");
582 if (so
== ip6_mrouter
)
584 if (inp
->in6p_icmp6filt
) {
585 FREE(inp
->in6p_icmp6filt
, M_PCB
);
586 inp
->in6p_icmp6filt
= NULL
;
593 rip6_abort(struct socket
*so
)
595 soisdisconnected(so
);
596 return rip6_detach(so
);
600 rip6_disconnect(struct socket
*so
)
602 struct inpcb
*inp
= so
->so_pcb
;
604 if ((so
->so_state
& SS_ISCONNECTED
) == 0)
606 inp
->in6p_faddr
= in6addr_any
;
607 return rip6_abort(so
);
611 rip6_bind(struct socket
*so
, struct sockaddr
*nam
, struct thread
*td
)
613 struct inpcb
*inp
= so
->so_pcb
;
614 struct sockaddr_in6
*addr
= (struct sockaddr_in6
*)nam
;
615 struct ifaddr
*ia
= NULL
;
617 if (nam
->sa_len
!= sizeof(*addr
))
620 if (TAILQ_EMPTY(&ifnet
) || addr
->sin6_family
!= AF_INET6
)
621 return EADDRNOTAVAIL
;
622 #ifdef ENABLE_DEFAULT_SCOPE
623 if (addr
->sin6_scope_id
== 0) { /* not change if specified */
624 addr
->sin6_scope_id
= scope6_addr2default(&addr
->sin6_addr
);
627 if (!IN6_IS_ADDR_UNSPECIFIED(&addr
->sin6_addr
) &&
628 (ia
= ifa_ifwithaddr((struct sockaddr
*)addr
)) == 0)
629 return EADDRNOTAVAIL
;
631 ((struct in6_ifaddr
*)ia
)->ia6_flags
&
632 (IN6_IFF_ANYCAST
|IN6_IFF_NOTREADY
|
633 IN6_IFF_DETACHED
|IN6_IFF_DEPRECATED
)) {
634 return(EADDRNOTAVAIL
);
636 inp
->in6p_laddr
= addr
->sin6_addr
;
641 rip6_connect(struct socket
*so
, struct sockaddr
*nam
, struct thread
*td
)
643 struct inpcb
*inp
= so
->so_pcb
;
644 struct sockaddr_in6
*addr
= (struct sockaddr_in6
*)nam
;
645 struct in6_addr
*in6a
= NULL
;
647 #ifdef ENABLE_DEFAULT_SCOPE
648 struct sockaddr_in6 tmp
;
651 if (nam
->sa_len
!= sizeof(*addr
))
653 if (TAILQ_EMPTY(&ifnet
))
654 return EADDRNOTAVAIL
;
655 if (addr
->sin6_family
!= AF_INET6
)
657 #ifdef ENABLE_DEFAULT_SCOPE
658 if (addr
->sin6_scope_id
== 0) { /* not change if specified */
659 /* avoid overwrites */
662 addr
->sin6_scope_id
= scope6_addr2default(&addr
->sin6_addr
);
665 /* Source address selection. XXX: need pcblookup? */
666 in6a
= in6_selectsrc(addr
, inp
->in6p_outputopts
,
667 inp
->in6p_moptions
, &inp
->in6p_route
,
668 &inp
->in6p_laddr
, &error
);
670 return (error
? error
: EADDRNOTAVAIL
);
671 inp
->in6p_laddr
= *in6a
;
672 inp
->in6p_faddr
= addr
->sin6_addr
;
678 rip6_shutdown(struct socket
*so
)
685 rip6_send(struct socket
*so
, int flags
, struct mbuf
*m
, struct sockaddr
*nam
,
686 struct mbuf
*control
, struct thread
*td
)
688 struct inpcb
*inp
= so
->so_pcb
;
689 struct sockaddr_in6 tmp
;
690 struct sockaddr_in6
*dst
;
692 /* always copy sockaddr to avoid overwrites */
693 if (so
->so_state
& SS_ISCONNECTED
) {
699 bzero(&tmp
, sizeof(tmp
));
700 tmp
.sin6_family
= AF_INET6
;
701 tmp
.sin6_len
= sizeof(struct sockaddr_in6
);
702 bcopy(&inp
->in6p_faddr
, &tmp
.sin6_addr
,
703 sizeof(struct in6_addr
));
710 tmp
= *(struct sockaddr_in6
*)nam
;
713 #ifdef ENABLE_DEFAULT_SCOPE
714 if (dst
->sin6_scope_id
== 0) { /* not change if specified */
715 dst
->sin6_scope_id
= scope6_addr2default(&dst
->sin6_addr
);
718 return rip6_output(m
, so
, dst
, control
);
721 struct pr_usrreqs rip6_usrreqs
= {
722 rip6_abort
, pru_accept_notsupp
, rip6_attach
, rip6_bind
, rip6_connect
,
723 pru_connect2_notsupp
, in6_control
, rip6_detach
, rip6_disconnect
,
724 pru_listen_notsupp
, in6_setpeeraddr
, pru_rcvd_notsupp
,
725 pru_rcvoob_notsupp
, rip6_send
, pru_sense_null
, rip6_shutdown
,
726 in6_setsockaddr
, sosend
, soreceive
, sopoll