version 1.96.2.2, 2007/10/09 13:44:51 |
version 1.116.2.4, 2014/05/18 17:46:13 |
|
|
* @(#)raw_ip.c 8.7 (Berkeley) 5/15/95 |
* @(#)raw_ip.c 8.7 (Berkeley) 5/15/95 |
*/ |
*/ |
|
|
|
/* |
|
* Raw interface to IP protocol. |
|
*/ |
|
|
#include <sys/cdefs.h> |
#include <sys/cdefs.h> |
__KERNEL_RCSID(0, "$NetBSD$"); |
__KERNEL_RCSID(0, "$NetBSD$"); |
|
|
#include "opt_inet.h" |
#include "opt_inet.h" |
|
#include "opt_compat_netbsd.h" |
#include "opt_ipsec.h" |
#include "opt_ipsec.h" |
#include "opt_mrouting.h" |
#include "opt_mrouting.h" |
|
|
#include <sys/param.h> |
#include <sys/param.h> |
#include <sys/sysctl.h> |
#include <sys/sysctl.h> |
#include <sys/malloc.h> |
|
#include <sys/mbuf.h> |
#include <sys/mbuf.h> |
#include <sys/socket.h> |
#include <sys/socket.h> |
#include <sys/protosw.h> |
#include <sys/protosw.h> |
#include <sys/socketvar.h> |
#include <sys/socketvar.h> |
#include <sys/errno.h> |
|
#include <sys/systm.h> |
#include <sys/systm.h> |
#include <sys/proc.h> |
|
#include <sys/kauth.h> |
#include <sys/kauth.h> |
|
|
#include <net/if.h> |
#include <net/if.h> |
Line 86 __KERNEL_RCSID(0, "$NetBSD$"); |
|
Line 88 __KERNEL_RCSID(0, "$NetBSD$"); |
|
#include <netinet/in_systm.h> |
#include <netinet/in_systm.h> |
#include <netinet/ip.h> |
#include <netinet/ip.h> |
#include <netinet/ip_var.h> |
#include <netinet/ip_var.h> |
|
#include <netinet/ip_private.h> |
#include <netinet/ip_mroute.h> |
#include <netinet/ip_mroute.h> |
#include <netinet/ip_icmp.h> |
#include <netinet/ip_icmp.h> |
#include <netinet/in_pcb.h> |
#include <netinet/in_pcb.h> |
#include <netinet/in_proto.h> |
#include <netinet/in_proto.h> |
#include <netinet/in_var.h> |
#include <netinet/in_var.h> |
|
|
#include <machine/stdarg.h> |
|
|
|
#ifdef IPSEC |
#ifdef IPSEC |
#include <netinet6/ipsec.h> |
|
#endif /*IPSEC*/ |
|
|
|
#ifdef FAST_IPSEC |
|
#include <netipsec/ipsec.h> |
#include <netipsec/ipsec.h> |
#include <netipsec/ipsec_var.h> /* XXX ipsecstat namespace */ |
#include <netipsec/ipsec_var.h> |
#endif /* FAST_IPSEC*/ |
#include <netipsec/ipsec_private.h> |
|
#endif |
|
|
|
#ifdef COMPAT_50 |
|
#include <compat/sys/socket.h> |
|
#endif |
|
|
struct inpcbtable rawcbtable; |
static inpcbtable_t * rawcbtable __read_mostly; |
|
|
int rip_pcbnotify(struct inpcbtable *, struct in_addr, |
static void sysctl_net_inet_raw_setup(struct sysctllog **); |
struct in_addr, int, int, void (*)(struct inpcb *, int)); |
|
int rip_bind(struct inpcb *, struct mbuf *); |
|
int rip_connect(struct inpcb *, struct mbuf *); |
|
void rip_disconnect(struct inpcb *); |
|
|
|
/* |
/* |
* Nominal space allocated to a raw ip socket. |
* Nominal space allocated to a raw ip socket. |
Line 117 void rip_disconnect(struct inpcb *); |
|
Line 115 void rip_disconnect(struct inpcb *); |
|
#define RIPSNDQ 8192 |
#define RIPSNDQ 8192 |
#define RIPRCVQ 8192 |
#define RIPRCVQ 8192 |
|
|
/* |
static u_long rip_sendspace = RIPSNDQ; |
* Raw interface to IP protocol. |
static u_long rip_recvspace = RIPRCVQ; |
*/ |
|
|
struct rip_input_ctx { |
|
struct mbuf * mbuf; |
|
struct ip * ip; |
|
struct sockaddr_in src; |
|
unsigned hlen; |
|
unsigned nfound; |
|
}; |
|
|
|
struct rip_ctlinput_ctx { |
|
struct ip * ip; |
|
struct in_addr addr; |
|
int errno; |
|
}; |
|
|
/* |
|
* Initialize raw connection block q. |
|
*/ |
|
void |
void |
rip_init(void) |
rip_init(void) |
{ |
{ |
|
rawcbtable = inpcb_init(1, 1, 0); |
in_pcbinit(&rawcbtable, 1, 1); |
sysctl_net_inet_raw_setup(NULL); |
} |
} |
|
|
|
/* |
|
* rip_append: pass the received datagram to the process. |
|
*/ |
static void |
static void |
rip_sbappendaddr(struct inpcb *last, struct ip *ip, const struct sockaddr *sa, |
rip_append(inpcb_t *inp, struct rip_input_ctx *rctx) |
int hlen, struct mbuf *opts, struct mbuf *n) |
|
{ |
{ |
if (last->inp_flags & INP_NOHEADER) |
struct socket *so = inpcb_get_socket(inp); |
m_adj(n, hlen); |
int inpflags = inpcb_get_flags(inp); |
if (last->inp_flags & INP_CONTROLOPTS || |
struct mbuf *n, *opts = NULL; |
last->inp_socket->so_options & SO_TIMESTAMP) |
|
ip_savecontrol(last, &opts, ip, n); |
/* XXX: Might optimise this, but not with a silly loop! */ |
if (sbappendaddr(&last->inp_socket->so_rcv, sa, n, opts) == 0) { |
if ((n = m_copypacket(rctx->mbuf, M_DONTWAIT)) == NULL) { |
/* should notify about lost packet */ |
return; |
m_freem(n); |
} |
if (opts) |
|
|
if (inpflags & INP_NOHEADER) { |
|
m_adj(n, rctx->hlen); |
|
} |
|
|
|
if ((inpflags & INP_CONTROLOPTS) != 0 |
|
#ifdef SO_OTIMESTAMP |
|
|| (so->so_options & SO_OTIMESTAMP) != 0 |
|
#endif |
|
|| (so->so_options & SO_TIMESTAMP) != 0) { |
|
struct ip *ip = rctx->ip; |
|
ip_savecontrol(inp, &opts, ip, n); |
|
} |
|
|
|
if (sbappendaddr(&so->so_rcv, sintosa(&rctx->src), n, opts) == 0) { |
|
/* Should notify about lost packet. */ |
|
if (opts) { |
m_freem(opts); |
m_freem(opts); |
} else |
} |
sorwakeup(last->inp_socket); |
m_freem(n); |
|
} else { |
|
sorwakeup(so); |
|
} |
|
} |
|
|
|
static int |
|
rip_pcb_process(inpcb_t *inp, void *arg) |
|
{ |
|
struct rip_input_ctx *rctx = arg; |
|
const struct ip *ip = rctx->ip; |
|
struct ip *inp_ip = in_getiphdr(inp); |
|
struct in_addr laddr, faddr; |
|
|
|
if (inp_ip->ip_p && inp_ip->ip_p != ip->ip_p) { |
|
return 0; |
|
} |
|
inpcb_get_addrs(inp, &laddr, &faddr); |
|
|
|
if (!in_nullhost(laddr) && !in_hosteq(laddr, ip->ip_dst)) { |
|
return 0; |
|
} |
|
if (!in_nullhost(faddr) && !in_hosteq(faddr, ip->ip_src)) { |
|
return 0; |
|
} |
|
|
|
#if defined(IPSEC) |
|
/* Check AH/ESP integrity. */ |
|
if (ipsec4_in_reject_so(rctx->mbuf, inpcb_get_socket(inp))) { |
|
/* Do not inject data into PCB. */ |
|
IPSEC_STATINC(IPSEC_STAT_IN_POLVIO); |
|
return 0; |
|
} |
|
#endif |
|
rip_append(inp, rctx); |
|
rctx->nfound++; |
|
return 0; |
} |
} |
|
|
/* |
|
* Setup generic address and protocol structures |
|
* for raw_input routine, then pass them along with |
|
* mbuf chain. |
|
*/ |
|
void |
void |
rip_input(struct mbuf *m, ...) |
rip_input(struct mbuf *m, ...) |
{ |
{ |
int hlen, proto; |
|
struct ip *ip = mtod(m, struct ip *); |
struct ip *ip = mtod(m, struct ip *); |
struct inpcb_hdr *inph; |
int error, hlen, proto; |
struct inpcb *inp; |
|
struct inpcb *last = NULL; |
|
struct mbuf *n, *opts = NULL; |
|
struct sockaddr_in ripsrc; |
|
va_list ap; |
va_list ap; |
|
|
va_start(ap, m); |
va_start(ap, m); |
Line 171 rip_input(struct mbuf *m, ...) |
|
Line 223 rip_input(struct mbuf *m, ...) |
|
proto = va_arg(ap, int); |
proto = va_arg(ap, int); |
va_end(ap); |
va_end(ap); |
|
|
sockaddr_in_init(&ripsrc, &ip->ip_src, 0); |
KASSERTMSG((proto == ip->ip_p), "%s: protocol mismatch", __func__); |
|
|
/* |
/* |
* XXX Compatibility: programs using raw IP expect ip_len |
* Compatibility: programs using raw IP expect ip_len field to have |
* XXX to have the header length subtracted, and in host order. |
* the header length subtracted. Also, ip_len and ip_off fields are |
* XXX ip_off is also expected to be host order. |
* expected to be in host order. |
*/ |
*/ |
hlen = ip->ip_hl << 2; |
hlen = ip->ip_hl << 2; |
ip->ip_len = ntohs(ip->ip_len) - hlen; |
ip->ip_len = ntohs(ip->ip_len) - hlen; |
NTOHS(ip->ip_off); |
NTOHS(ip->ip_off); |
|
|
CIRCLEQ_FOREACH(inph, &rawcbtable.inpt_queue, inph_queue) { |
/* Save some context for the iterator. */ |
inp = (struct inpcb *)inph; |
struct rip_input_ctx rctx = { |
if (inp->inp_af != AF_INET) |
.mbuf = m, .ip = ip, .hlen = hlen, .nfound = 0 |
continue; |
}; |
if (inp->inp_ip.ip_p && inp->inp_ip.ip_p != proto) |
sockaddr_in_init(&rctx.src, &ip->ip_src, 0); |
continue; |
|
if (!in_nullhost(inp->inp_laddr) && |
/* Scan all raw IP PCBs for matching entries. */ |
!in_hosteq(inp->inp_laddr, ip->ip_dst)) |
error = inpcb_foreach(rawcbtable, AF_INET, rip_pcb_process, &rctx); |
continue; |
KASSERT(error == 0); |
if (!in_nullhost(inp->inp_faddr) && |
|
!in_hosteq(inp->inp_faddr, ip->ip_src)) |
/* Done, if found any. */ |
continue; |
if (rctx.nfound) { |
if (last == NULL) |
return; |
; |
} |
#if defined(IPSEC) || defined(FAST_IPSEC) |
|
/* check AH/ESP integrity. */ |
if (inetsw[ip_protox[ip->ip_p]].pr_input == rip_input) { |
else if (ipsec4_in_reject_so(m, last->inp_socket)) { |
uint64_t *ips; |
ipsecstat.in_polvio++; |
|
/* do not inject data to pcb */ |
icmp_error(m, ICMP_UNREACH, ICMP_UNREACH_PROTOCOL, 0, 0); |
} |
ips = IP_STAT_GETREF(); |
#endif /*IPSEC*/ |
ips[IP_STAT_NOPROTO]++; |
else if ((n = m_copypacket(m, M_DONTWAIT)) != NULL) { |
ips[IP_STAT_DELIVERED]--; |
rip_sbappendaddr(last, ip, sintosa(&ripsrc), hlen, opts, |
IP_STAT_PUTREF(); |
n); |
} else { |
opts = NULL; |
|
} |
|
last = inp; |
|
} |
|
#if defined(IPSEC) || defined(FAST_IPSEC) |
|
/* check AH/ESP integrity. */ |
|
if (last != NULL && ipsec4_in_reject_so(m, last->inp_socket)) { |
|
m_freem(m); |
|
ipsecstat.in_polvio++; |
|
ipstat.ips_delivered--; |
|
/* do not inject data to pcb */ |
|
} else |
|
#endif /*IPSEC*/ |
|
if (last != NULL) |
|
rip_sbappendaddr(last, ip, sintosa(&ripsrc), hlen, opts, m); |
|
else if (inetsw[ip_protox[ip->ip_p]].pr_input == rip_input) { |
|
icmp_error(m, ICMP_UNREACH, ICMP_UNREACH_PROTOCOL, |
|
0, 0); |
|
ipstat.ips_noproto++; |
|
ipstat.ips_delivered--; |
|
} else |
|
m_freem(m); |
m_freem(m); |
return; |
} |
} |
} |
|
|
int |
static int |
rip_pcbnotify(struct inpcbtable *table, |
rip_pcbnotify(inpcb_t *inp, void *arg) |
struct in_addr faddr, struct in_addr laddr, int proto, int errno, |
{ |
void (*notify)(struct inpcb *, int)) |
struct rip_ctlinput_ctx *rctx = arg; |
{ |
const struct ip *ip = rctx->ip; |
struct inpcb *inp, *ninp; |
struct ip *inp_ip = in_getiphdr(inp); |
int nmatch; |
struct in_addr laddr, faddr; |
|
|
nmatch = 0; |
if (inp_ip->ip_p && inp_ip->ip_p != ip->ip_p) { |
for (inp = (struct inpcb *)CIRCLEQ_FIRST(&table->inpt_queue); |
return 0; |
inp != (struct inpcb *)&table->inpt_queue; |
|
inp = ninp) { |
|
ninp = (struct inpcb *)inp->inp_queue.cqe_next; |
|
if (inp->inp_af != AF_INET) |
|
continue; |
|
if (inp->inp_ip.ip_p && inp->inp_ip.ip_p != proto) |
|
continue; |
|
if (in_hosteq(inp->inp_faddr, faddr) && |
|
in_hosteq(inp->inp_laddr, laddr)) { |
|
(*notify)(inp, errno); |
|
nmatch++; |
|
} |
|
} |
} |
|
inpcb_get_addrs(inp, &laddr, &faddr); |
|
|
return nmatch; |
if (in_hosteq(faddr, rctx->addr) && in_hosteq(laddr, ip->ip_src)) { |
|
inpcb_rtchange(inp, rctx->errno); |
|
} |
|
return 0; |
} |
} |
|
|
void * |
void * |
rip_ctlinput(int cmd, const struct sockaddr *sa, void *v) |
rip_ctlinput(int cmd, const struct sockaddr *sa, void *v) |
{ |
{ |
struct ip *ip = v; |
struct ip *ip = v; |
void (*notify)(struct inpcb *, int) = in_rtchange; |
|
int errno; |
int errno; |
|
|
if (sa->sa_family != AF_INET || |
if (sa->sa_family != AF_INET || |
Line 271 rip_ctlinput(int cmd, const struct socka |
|
Line 293 rip_ctlinput(int cmd, const struct socka |
|
if ((unsigned)cmd >= PRC_NCMDS) |
if ((unsigned)cmd >= PRC_NCMDS) |
return NULL; |
return NULL; |
errno = inetctlerrmap[cmd]; |
errno = inetctlerrmap[cmd]; |
if (PRC_IS_REDIRECT(cmd)) |
|
notify = in_rtchange, ip = 0; |
if (PRC_IS_REDIRECT(cmd) || cmd == PRC_HOSTDEAD || ip == NULL) { |
else if (cmd == PRC_HOSTDEAD) |
inpcb_notifyall(rawcbtable, satocsin(sa)->sin_addr, |
ip = 0; |
errno, inpcb_rtchange); |
else if (errno == 0) |
return NULL; |
|
} else if (errno == 0) { |
return NULL; |
return NULL; |
if (ip) { |
} |
rip_pcbnotify(&rawcbtable, satocsin(sa)->sin_addr, |
|
ip->ip_src, ip->ip_p, errno, notify); |
/* Note: mapped address case. */ |
|
struct rip_ctlinput_ctx rctx = { |
/* XXX mapped address case */ |
.ip = ip, .addr = satocsin(sa)->sin_addr, .errno = errno |
} else |
}; |
in_pcbnotifyall(&rawcbtable, satocsin(sa)->sin_addr, errno, |
(void)inpcb_foreach(rawcbtable, AF_INET, rip_pcbnotify, &rctx); |
notify); |
|
return NULL; |
return NULL; |
} |
} |
|
|
/* |
/* |
* Generate IP header and pass packet to ip_output. |
* Generate IP header and pass packet to the IP output routine. |
* Tack on options user may have setup with control call. |
* Tack on options user may have setup with control call. |
*/ |
*/ |
int |
int |
rip_output(struct mbuf *m, ...) |
rip_output(struct mbuf *m, ...) |
{ |
{ |
struct inpcb *inp; |
inpcb_t *inp; |
|
struct socket *so; |
struct ip *ip; |
struct ip *ip; |
struct mbuf *opts; |
struct mbuf *opts; |
int flags; |
int flags, inpflags; |
va_list ap; |
va_list ap; |
|
|
va_start(ap, m); |
va_start(ap, m); |
inp = va_arg(ap, struct inpcb *); |
inp = va_arg(ap, inpcb_t *); |
va_end(ap); |
va_end(ap); |
|
|
flags = |
so = inpcb_get_socket(inp); |
(inp->inp_socket->so_options & SO_DONTROUTE) | IP_ALLOWBROADCAST |
KASSERT(solocked(so)); |
| IP_RETURNMTU; |
|
|
flags = (so->so_options & SO_DONTROUTE) | |
|
IP_ALLOWBROADCAST | IP_RETURNMTU; |
|
inpflags = inpcb_get_flags(inp); |
|
|
/* |
/* |
* If the user handed us a complete IP packet, use it. |
* If the user handed us a complete IP packet, use it. |
* Otherwise, allocate an mbuf for a header and fill it in. |
* Otherwise, allocate an mbuf for a header and fill it in. |
*/ |
*/ |
if ((inp->inp_flags & INP_HDRINCL) == 0) { |
if ((inpflags & INP_HDRINCL) == 0) { |
|
struct ip *inp_ip = in_getiphdr(inp); |
|
|
if ((m->m_pkthdr.len + sizeof(struct ip)) > IP_MAXPACKET) { |
if ((m->m_pkthdr.len + sizeof(struct ip)) > IP_MAXPACKET) { |
m_freem(m); |
m_freem(m); |
return (EMSGSIZE); |
return EMSGSIZE; |
} |
} |
M_PREPEND(m, sizeof(struct ip), M_DONTWAIT); |
M_PREPEND(m, sizeof(struct ip), M_DONTWAIT); |
if (!m) |
if (m == NULL) { |
return (ENOBUFS); |
return ENOBUFS; |
|
} |
ip = mtod(m, struct ip *); |
ip = mtod(m, struct ip *); |
ip->ip_tos = 0; |
ip->ip_tos = 0; |
ip->ip_off = htons(0); |
ip->ip_off = htons(0); |
ip->ip_p = inp->inp_ip.ip_p; |
ip->ip_p = inp_ip->ip_p; |
ip->ip_len = htons(m->m_pkthdr.len); |
ip->ip_len = htons(m->m_pkthdr.len); |
ip->ip_src = inp->inp_laddr; |
inpcb_get_addrs(inp, &ip->ip_src, &ip->ip_dst); |
ip->ip_dst = inp->inp_faddr; |
|
ip->ip_ttl = MAXTTL; |
ip->ip_ttl = MAXTTL; |
opts = inp->inp_options; |
opts = inpcb_get_options(inp); |
} else { |
} else { |
if (m->m_pkthdr.len > IP_MAXPACKET) { |
if (m->m_pkthdr.len > IP_MAXPACKET) { |
m_freem(m); |
m_freem(m); |
return (EMSGSIZE); |
return EMSGSIZE; |
} |
} |
ip = mtod(m, struct ip *); |
ip = mtod(m, struct ip *); |
|
|
/* |
/* |
* If the mbuf is read-only, we need to allocate |
* If the mbuf is read-only, we need to allocate a new mbuf |
* a new mbuf for the header, since we need to |
* for the header, since we need to modify the header. |
* modify the header. |
|
*/ |
*/ |
if (M_READONLY(m)) { |
if (M_READONLY(m)) { |
int hlen = ip->ip_hl << 2; |
const int hlen = ip->ip_hl << 2; |
|
|
m = m_copyup(m, hlen, (max_linkhdr + 3) & ~3); |
m = m_copyup(m, hlen, (max_linkhdr + 3) & ~3); |
if (m == NULL) |
if (m == NULL) { |
return (ENOMEM); /* XXX */ |
return ENOMEM; /* XXX */ |
|
} |
ip = mtod(m, struct ip *); |
ip = mtod(m, struct ip *); |
} |
} |
|
|
/* XXX userland passes ip_len and ip_off in host order */ |
/* |
|
* Applications on raw sockets pass us packets |
|
* in host byte order. |
|
*/ |
if (m->m_pkthdr.len != ip->ip_len) { |
if (m->m_pkthdr.len != ip->ip_len) { |
m_freem(m); |
m_freem(m); |
return (EINVAL); |
return (EINVAL); |
} |
} |
HTONS(ip->ip_len); |
HTONS(ip->ip_len); |
HTONS(ip->ip_off); |
HTONS(ip->ip_off); |
if (ip->ip_id == 0) |
if (ip->ip_id || m->m_pkthdr.len < IP_MINFRAGSIZE) { |
ip->ip_id = ip_newid(); |
flags |= IP_NOIPNEWID; |
|
} |
opts = NULL; |
opts = NULL; |
/* XXX prevent ip_output from overwriting header fields */ |
|
|
/* |
|
* Note: prevent IP output from overwriting header fields. |
|
*/ |
flags |= IP_RAWOUTPUT; |
flags |= IP_RAWOUTPUT; |
ipstat.ips_rawout++; |
IP_STATINC(IP_STAT_RAWOUT); |
} |
} |
return (ip_output(m, opts, &inp->inp_route, flags, inp->inp_moptions, |
|
inp->inp_socket, &inp->inp_errormtu)); |
return ip_output(m, opts, inpcb_get_route(inp), flags, |
|
inpcb_get_moptions(inp), so); |
} |
} |
|
|
/* |
/* |
* Raw IP socket option processing. |
* Raw IP socket option processing. |
*/ |
*/ |
int |
int |
rip_ctloutput(int op, struct socket *so, int level, int optname, |
rip_ctloutput(int op, struct socket *so, struct sockopt *sopt) |
struct mbuf **m) |
|
{ |
{ |
struct inpcb *inp = sotoinpcb(so); |
inpcb_t *inp = sotoinpcb(so); |
int error = 0; |
int inpflags = inpcb_get_flags(inp); |
|
int error = 0, optval; |
|
|
if (level == SOL_SOCKET && optname == SO_NOHEADER) { |
KASSERT(solocked(so)); |
|
|
|
if (sopt->sopt_level == SOL_SOCKET && sopt->sopt_name == SO_NOHEADER) { |
if (op == PRCO_GETOPT) { |
if (op == PRCO_GETOPT) { |
*m = m_intopt(so, |
optval = (inpflags & INP_NOHEADER) ? 1 : 0; |
(inp->inp_flags & INP_NOHEADER) ? 1 : 0); |
error = sockopt_set(sopt, &optval, sizeof(optval)); |
return 0; |
} else if (op == PRCO_SETOPT) { |
} else if (*m == NULL || (*m)->m_len < sizeof(int)) |
error = sockopt_getint(sopt, &optval); |
error = EINVAL; |
if (error) |
else if (*mtod(*m, int *)) { |
goto out; |
inp->inp_flags &= ~INP_HDRINCL; |
if (optval) { |
inp->inp_flags |= INP_NOHEADER; |
inpflags &= ~INP_HDRINCL; |
} else |
inpflags |= INP_NOHEADER; |
inp->inp_flags &= ~INP_NOHEADER; |
} else |
goto free_m; |
inpflags &= ~INP_NOHEADER; |
} else if (level != IPPROTO_IP) |
} |
return ip_ctloutput(op, so, level, optname, m); |
goto out; |
|
} |
|
|
switch (op) { |
if (sopt->sopt_level != IPPROTO_IP) { |
|
return ip_ctloutput(op, so, sopt); |
|
} |
|
|
|
switch (op) { |
case PRCO_SETOPT: |
case PRCO_SETOPT: |
switch (optname) { |
switch (sopt->sopt_name) { |
case IP_HDRINCL: |
case IP_HDRINCL: |
if (*m == NULL || (*m)->m_len < sizeof(int)) |
error = sockopt_getint(sopt, &optval); |
error = EINVAL; |
if (error) |
else if (*mtod(*m, int *)) |
break; |
inp->inp_flags |= INP_HDRINCL; |
if (optval) |
|
inpflags |= INP_HDRINCL; |
else |
else |
inp->inp_flags &= ~INP_HDRINCL; |
inpflags &= ~INP_HDRINCL; |
goto free_m; |
break; |
|
|
#ifdef MROUTING |
#ifdef MROUTING |
case MRT_INIT: |
case MRT_INIT: |
Line 419 rip_ctloutput(int op, struct socket *so, |
|
Line 464 rip_ctloutput(int op, struct socket *so, |
|
case MRT_API_CONFIG: |
case MRT_API_CONFIG: |
case MRT_ADD_BW_UPCALL: |
case MRT_ADD_BW_UPCALL: |
case MRT_DEL_BW_UPCALL: |
case MRT_DEL_BW_UPCALL: |
error = ip_mrouter_set(so, optname, m); |
error = ip_mrouter_set(so, sopt); |
break; |
break; |
#endif |
#endif |
|
|
default: |
default: |
error = ip_ctloutput(op, so, level, optname, m); |
error = ip_ctloutput(op, so, sopt); |
break; |
break; |
} |
} |
break; |
break; |
|
|
case PRCO_GETOPT: |
case PRCO_GETOPT: |
switch (optname) { |
switch (sopt->sopt_name) { |
case IP_HDRINCL: |
case IP_HDRINCL: |
*m = m_intopt(so, inp->inp_flags & INP_HDRINCL ? 1 : 0); |
optval = inpflags & INP_HDRINCL; |
|
error = sockopt_set(sopt, &optval, sizeof(optval)); |
break; |
break; |
|
|
#ifdef MROUTING |
#ifdef MROUTING |
Line 440 rip_ctloutput(int op, struct socket *so, |
|
Line 486 rip_ctloutput(int op, struct socket *so, |
|
case MRT_ASSERT: |
case MRT_ASSERT: |
case MRT_API_SUPPORT: |
case MRT_API_SUPPORT: |
case MRT_API_CONFIG: |
case MRT_API_CONFIG: |
error = ip_mrouter_get(so, optname, m); |
error = ip_mrouter_get(so, sopt); |
break; |
break; |
#endif |
#endif |
|
|
default: |
default: |
error = ip_ctloutput(op, so, level, optname, m); |
error = ip_ctloutput(op, so, sopt); |
break; |
break; |
} |
} |
break; |
break; |
} |
} |
return error; |
out: |
free_m: |
if (!error) { |
if (op == PRCO_SETOPT && *m != NULL) |
inpcb_set_flags(inp, inpflags); |
(void)m_free(*m); |
} |
return error; |
return error; |
} |
} |
|
|
int |
static int |
rip_bind(struct inpcb *inp, struct mbuf *nam) |
rip_bind(inpcb_t *inp, struct mbuf *nam) |
{ |
{ |
struct sockaddr_in *addr = mtod(nam, struct sockaddr_in *); |
struct sockaddr_in *addr = mtod(nam, struct sockaddr_in *); |
|
|
if (nam->m_len != sizeof(*addr)) |
if (nam->m_len != sizeof(*addr)) |
return (EINVAL); |
return (EINVAL); |
if (TAILQ_FIRST(&ifnet) == 0) |
if (!IFNET_FIRST()) |
return (EADDRNOTAVAIL); |
|
if (addr->sin_family != AF_INET && |
|
addr->sin_family != AF_IMPLINK) |
|
return (EAFNOSUPPORT); |
|
if (!in_nullhost(addr->sin_addr) && |
|
ifa_ifwithaddr(sintosa(addr)) == 0) |
|
return (EADDRNOTAVAIL); |
return (EADDRNOTAVAIL); |
inp->inp_laddr = addr->sin_addr; |
if (addr->sin_family != AF_INET) |
return (0); |
return EAFNOSUPPORT; |
|
if (!in_nullhost(addr->sin_addr) && !ifa_ifwithaddr(sintosa(addr))) |
|
return EADDRNOTAVAIL; |
|
|
|
inpcb_set_addrs(inp, &addr->sin_addr, NULL); |
|
return 0; |
} |
} |
|
|
int |
static int |
rip_connect(struct inpcb *inp, struct mbuf *nam) |
rip_connect(inpcb_t *inp, struct mbuf *nam) |
{ |
{ |
struct sockaddr_in *addr = mtod(nam, struct sockaddr_in *); |
struct sockaddr_in *addr = mtod(nam, struct sockaddr_in *); |
|
|
if (nam->m_len != sizeof(*addr)) |
if (nam->m_len != sizeof(*addr)) |
return (EINVAL); |
return (EINVAL); |
if (TAILQ_FIRST(&ifnet) == 0) |
if (!IFNET_FIRST()) |
return (EADDRNOTAVAIL); |
return (EADDRNOTAVAIL); |
if (addr->sin_family != AF_INET && |
if (addr->sin_family != AF_INET) |
addr->sin_family != AF_IMPLINK) |
return EAFNOSUPPORT; |
return (EAFNOSUPPORT); |
|
inp->inp_faddr = addr->sin_addr; |
inpcb_set_addrs(inp, NULL, &addr->sin_addr); |
return (0); |
return 0; |
} |
} |
|
|
void |
static void |
rip_disconnect(struct inpcb *inp) |
rip_disconnect(inpcb_t *inp) |
{ |
{ |
|
inpcb_set_addrs(inp, NULL, &zeroin_addr); |
inp->inp_faddr = zeroin_addr; |
|
} |
} |
|
|
u_long rip_sendspace = RIPSNDQ; |
static int |
u_long rip_recvspace = RIPRCVQ; |
rip_attach(struct socket *so, int proto) |
|
{ |
|
inpcb_t *inp; |
|
struct ip *ip; |
|
int error; |
|
|
|
KASSERT(sotoinpcb(so) == NULL); |
|
sosetlock(so); |
|
|
/*ARGSUSED*/ |
if (so->so_snd.sb_hiwat == 0 || so->so_rcv.sb_hiwat == 0) { |
int |
error = soreserve(so, rip_sendspace, rip_recvspace); |
rip_usrreq(struct socket *so, int req, |
if (error) { |
struct mbuf *m, struct mbuf *nam, struct mbuf *control, struct lwp *l) |
return error; |
|
} |
|
} |
|
|
|
solock(so); |
|
error = inpcb_create(so, rawcbtable); |
|
if (error) { |
|
sounlock(so); |
|
return error; |
|
} |
|
inp = sotoinpcb(so); |
|
ip = in_getiphdr(inp); |
|
ip->ip_p = proto; |
|
sounlock(so); |
|
|
|
return 0; |
|
} |
|
|
|
static void |
|
rip_detach(struct socket *so) |
{ |
{ |
struct inpcb *inp; |
inpcb_t *inp; |
int s; |
|
int error = 0; |
KASSERT(solocked(so)); |
|
inp = sotoinpcb(so); |
|
KASSERT(inp != NULL); |
|
|
#ifdef MROUTING |
#ifdef MROUTING |
extern struct socket *ip_mrouter; |
extern struct socket *ip_mrouter; |
|
if (so == ip_mrouter) { |
|
ip_mrouter_done(); |
|
} |
#endif |
#endif |
|
inpcb_destroy(inp); |
|
} |
|
|
if (req == PRU_CONTROL) |
int |
return (in_control(so, (long)m, (void *)nam, |
rip_usrreq(struct socket *so, int req, struct mbuf *m, struct mbuf *nam, |
(struct ifnet *)control, l)); |
struct mbuf *control, struct lwp *l) |
|
{ |
|
inpcb_t *inp; |
|
int error = 0; |
|
|
s = splsoftnet(); |
KASSERT(req != PRU_ATTACH); |
|
KASSERT(req != PRU_DETACH); |
|
|
|
if (req == PRU_CONTROL) { |
|
return in_control(so, (long)m, nam, (ifnet_t *)control, l); |
|
} |
if (req == PRU_PURGEIF) { |
if (req == PRU_PURGEIF) { |
in_pcbpurgeif0(&rawcbtable, (struct ifnet *)control); |
int s = splsoftnet(); |
in_purgeif((struct ifnet *)control); |
mutex_enter(softnet_lock); |
in_pcbpurgeif(&rawcbtable, (struct ifnet *)control); |
inpcb_purgeif0(rawcbtable, (ifnet_t *)control); |
|
in_purgeif((ifnet_t *)control); |
|
inpcb_purgeif(rawcbtable, (ifnet_t *)control); |
|
mutex_exit(softnet_lock); |
splx(s); |
splx(s); |
return (0); |
return 0; |
} |
} |
|
|
|
KASSERT(solocked(so)); |
inp = sotoinpcb(so); |
inp = sotoinpcb(so); |
#ifdef DIAGNOSTIC |
|
if (req != PRU_SEND && req != PRU_SENDOOB && control) |
KASSERT(!control || (req == PRU_SEND || req == PRU_SENDOOB)); |
panic("rip_usrreq: unexpected control mbuf"); |
if (inp == NULL) { |
#endif |
return EINVAL; |
if (inp == 0 && req != PRU_ATTACH) { |
|
error = EINVAL; |
|
goto release; |
|
} |
} |
|
|
switch (req) { |
switch (req) { |
|
|
case PRU_ATTACH: |
|
if (inp != 0) { |
|
error = EISCONN; |
|
break; |
|
} |
|
|
|
if (l == NULL) { |
|
error = EACCES; |
|
break; |
|
} |
|
|
|
/* XXX: raw socket permissions are checked in socreate() */ |
|
|
|
if (so->so_snd.sb_hiwat == 0 || so->so_rcv.sb_hiwat == 0) { |
|
error = soreserve(so, rip_sendspace, rip_recvspace); |
|
if (error) |
|
break; |
|
} |
|
error = in_pcballoc(so, &rawcbtable); |
|
if (error) |
|
break; |
|
inp = sotoinpcb(so); |
|
inp->inp_ip.ip_p = (long)nam; |
|
break; |
|
|
|
case PRU_DETACH: |
|
#ifdef MROUTING |
|
if (so == ip_mrouter) |
|
ip_mrouter_done(); |
|
#endif |
|
in_pcbdetach(inp); |
|
break; |
|
|
|
case PRU_BIND: |
case PRU_BIND: |
error = rip_bind(inp, nam); |
error = rip_bind(inp, nam); |
break; |
break; |
Line 619 rip_usrreq(struct socket *so, int req, |
|
Line 671 rip_usrreq(struct socket *so, int req, |
|
error = EINVAL; |
error = EINVAL; |
break; |
break; |
} |
} |
{ |
if ((so->so_state & SS_ISCONNECTED) != 0) { |
if (nam) { |
error = nam ? EISCONN : ENOTCONN; |
if ((so->so_state & SS_ISCONNECTED) != 0) { |
m_freem(m); |
error = EISCONN; |
break; |
goto die; |
} |
} |
if (nam && (error = rip_connect(inp, nam)) != 0) { |
error = rip_connect(inp, nam); |
m_freem(m); |
if (error) { |
break; |
die: |
|
m_freem(m); |
|
break; |
|
} |
|
} else { |
|
if ((so->so_state & SS_ISCONNECTED) == 0) { |
|
error = ENOTCONN; |
|
goto die; |
|
} |
|
} |
} |
error = rip_output(m, inp); |
error = rip_output(m, inp); |
if (nam) |
if (nam) { |
rip_disconnect(inp); |
rip_disconnect(inp); |
} |
} |
break; |
break; |
|
|
case PRU_SENSE: |
case PRU_SENSE: |
/* |
/* |
* stat: don't bother with a blocksize. |
* Stat: do not bother with a blocksize. |
*/ |
*/ |
splx(s); |
return 0; |
return (0); |
|
|
|
case PRU_RCVOOB: |
case PRU_RCVOOB: |
error = EOPNOTSUPP; |
error = EOPNOTSUPP; |
Line 661 rip_usrreq(struct socket *so, int req, |
|
Line 703 rip_usrreq(struct socket *so, int req, |
|
break; |
break; |
|
|
case PRU_SOCKADDR: |
case PRU_SOCKADDR: |
in_setsockaddr(inp, nam); |
inpcb_fetch_sockaddr(inp, nam); |
break; |
break; |
|
|
case PRU_PEERADDR: |
case PRU_PEERADDR: |
in_setpeeraddr(inp, nam); |
inpcb_fetch_peeraddr(inp, nam); |
break; |
break; |
|
|
default: |
default: |
panic("rip_usrreq"); |
KASSERT(false); |
} |
} |
|
|
release: |
return error; |
splx(s); |
|
return (error); |
|
} |
} |
|
|
SYSCTL_SETUP(sysctl_net_inet_raw_setup, "sysctl net.inet.raw subtree setup") |
PR_WRAP_USRREQ(rip_usrreq) |
{ |
|
|
|
sysctl_createv(clog, 0, NULL, NULL, |
#define rip_usrreq rip_usrreq_wrapper |
CTLFLAG_PERMANENT, |
|
CTLTYPE_NODE, "net", NULL, |
const struct pr_usrreqs rip_usrreqs = { |
NULL, 0, NULL, 0, |
.pr_attach = rip_attach, |
CTL_NET, CTL_EOL); |
.pr_detach = rip_detach, |
|
.pr_generic = rip_usrreq, |
|
}; |
|
|
|
static void |
|
sysctl_net_inet_raw_setup(struct sysctllog **clog) |
|
{ |
sysctl_createv(clog, 0, NULL, NULL, |
sysctl_createv(clog, 0, NULL, NULL, |
CTLFLAG_PERMANENT, |
CTLFLAG_PERMANENT, |
CTLTYPE_NODE, "inet", NULL, |
CTLTYPE_NODE, "inet", NULL, |
Line 696 SYSCTL_SETUP(sysctl_net_inet_raw_setup, |
|
Line 741 SYSCTL_SETUP(sysctl_net_inet_raw_setup, |
|
SYSCTL_DESCR("Raw IPv4 settings"), |
SYSCTL_DESCR("Raw IPv4 settings"), |
NULL, 0, NULL, 0, |
NULL, 0, NULL, 0, |
CTL_NET, PF_INET, IPPROTO_RAW, CTL_EOL); |
CTL_NET, PF_INET, IPPROTO_RAW, CTL_EOL); |
|
|
sysctl_createv(clog, 0, NULL, NULL, |
sysctl_createv(clog, 0, NULL, NULL, |
CTLFLAG_PERMANENT, |
CTLFLAG_PERMANENT, |
CTLTYPE_STRUCT, "pcblist", |
CTLTYPE_STRUCT, "pcblist", |
SYSCTL_DESCR("Raw IPv4 control block list"), |
SYSCTL_DESCR("Raw IPv4 control block list"), |
sysctl_inpcblist, 0, &rawcbtable, 0, |
sysctl_inpcblist, 0, rawcbtable, 0, |
CTL_NET, PF_INET, IPPROTO_RAW, |
CTL_NET, PF_INET, IPPROTO_RAW, |
CTL_CREATE, CTL_EOL); |
CTL_CREATE, CTL_EOL); |
} |
} |