udp: pcb list/hashtable protection stage 2/2
[dragonfly.git] / sys / netinet6 / udp6_usrreq.c
1 /*      $FreeBSD: src/sys/netinet6/udp6_usrreq.c,v 1.6.2.13 2003/01/24 05:11:35 sam Exp $       */
2 /*      $DragonFly: src/sys/netinet6/udp6_usrreq.c,v 1.26 2007/04/22 01:13:14 dillon Exp $      */
3 /*      $KAME: udp6_usrreq.c,v 1.27 2001/05/21 05:45:10 jinmei Exp $    */
4
5 /*
6  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
7  * All rights reserved.
8  *
9  * Redistribution and use in source and binary forms, with or without
10  * modification, are permitted provided that the following conditions
11  * are met:
12  * 1. Redistributions of source code must retain the above copyright
13  *    notice, this list of conditions and the following disclaimer.
14  * 2. Redistributions in binary form must reproduce the above copyright
15  *    notice, this list of conditions and the following disclaimer in the
16  *    documentation and/or other materials provided with the distribution.
17  * 3. Neither the name of the project nor the names of its contributors
18  *    may be used to endorse or promote products derived from this software
19  *    without specific prior written permission.
20  *
21  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31  * SUCH DAMAGE.
32  */
33
34 /*
35  * Copyright (c) 1982, 1986, 1989, 1993
36  *      The Regents of the University of California.  All rights reserved.
37  *
38  * Redistribution and use in source and binary forms, with or without
39  * modification, are permitted provided that the following conditions
40  * are met:
41  * 1. Redistributions of source code must retain the above copyright
42  *    notice, this list of conditions and the following disclaimer.
43  * 2. Redistributions in binary form must reproduce the above copyright
44  *    notice, this list of conditions and the following disclaimer in the
45  *    documentation and/or other materials provided with the distribution.
46  * 3. All advertising materials mentioning features or use of this software
47  *    must display the following acknowledgement:
48  *      This product includes software developed by the University of
49  *      California, Berkeley and its contributors.
50  * 4. Neither the name of the University nor the names of its contributors
51  *    may be used to endorse or promote products derived from this software
52  *    without specific prior written permission.
53  *
54  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
55  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
56  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
57  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
58  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
59  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
60  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
61  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
62  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
63  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
64  * SUCH DAMAGE.
65  *
66  *      @(#)udp_var.h   8.1 (Berkeley) 6/10/93
67  */
68
69 #include "opt_inet.h"
70 #include "opt_inet6.h"
71 #include "opt_ipsec.h"
72
73 #include <sys/param.h>
74 #include <sys/kernel.h>
75 #include <sys/mbuf.h>
76 #include <sys/protosw.h>
77 #include <sys/socket.h>
78 #include <sys/socketvar.h>
79 #include <sys/sysctl.h>
80 #include <sys/errno.h>
81 #include <sys/stat.h>
82 #include <sys/systm.h>
83 #include <sys/syslog.h>
84 #include <sys/proc.h>
85 #include <sys/priv.h>
86
87 #include <sys/thread2.h>
88 #include <sys/socketvar2.h>
89 #include <sys/msgport2.h>
90
91 #include <net/if.h>
92 #include <net/route.h>
93 #include <net/if_types.h>
94
95 #include <netinet/in.h>
96 #include <netinet/in_systm.h>
97 #include <netinet/ip.h>
98 #include <netinet/in_pcb.h>
99 #include <netinet/in_var.h>
100 #include <netinet/ip_var.h>
101 #include <netinet/udp.h>
102 #include <netinet/udp_var.h>
103 #include <netinet/ip6.h>
104 #include <netinet6/ip6_var.h>
105 #include <netinet6/in6_pcb.h>
106 #include <netinet/icmp6.h>
107 #include <netinet6/udp6_var.h>
108 #include <netinet6/ip6protosw.h>
109
110 #ifdef IPSEC
111 #include <netinet6/ipsec.h>
112 #include <netinet6/ipsec6.h>
113 #endif /* IPSEC */
114
115 #ifdef FAST_IPSEC
116 #include <netproto/ipsec/ipsec.h>
117 #include <netproto/ipsec/ipsec6.h>
118 #endif /* FAST_IPSEC */
119
120 /*
121  * UDP protocol inplementation.
122  * Per RFC 768, August, 1980.
123  */
124
125 extern  struct protosw inetsw[];
126 static  int in6_mcmatch (struct inpcb *, struct in6_addr *, struct ifnet *);
127
128 static int
129 in6_mcmatch(struct inpcb *in6p, struct in6_addr *ia6, struct ifnet *ifp)
130 {
131         struct ip6_moptions *im6o = in6p->in6p_moptions;
132         struct in6_multi_mship *imm;
133
134         if (im6o == NULL)
135                 return 0;
136
137         for (imm = im6o->im6o_memberships.lh_first; imm != NULL;
138              imm = imm->i6mm_chain.le_next) {
139                 if ((ifp == NULL ||
140                      imm->i6mm_maddr->in6m_ifp == ifp) &&
141                     IN6_ARE_ADDR_EQUAL(&imm->i6mm_maddr->in6m_addr,
142                                        ia6))
143                         return 1;
144         }
145         return 0;
146 }
147
148 int
149 udp6_input(struct mbuf **mp, int *offp, int proto)
150 {
151         struct mbuf *m = *mp;
152         struct ip6_hdr *ip6;
153         struct udphdr *uh;
154         struct inpcb *in6p;
155         struct  mbuf *opts = NULL;
156         int off = *offp;
157         int plen, ulen;
158         struct sockaddr_in6 udp_in6;
159         struct socket *so;
160
161         IP6_EXTHDR_CHECK(m, off, sizeof(struct udphdr), IPPROTO_DONE);
162
163         ip6 = mtod(m, struct ip6_hdr *);
164
165         if (faithprefix_p != NULL && (*faithprefix_p)(&ip6->ip6_dst)) {
166                 /* XXX send icmp6 host/port unreach? */
167                 m_freem(m);
168                 return IPPROTO_DONE;
169         }
170
171         udpstat.udps_ipackets++;
172
173         plen = ntohs(ip6->ip6_plen) - off + sizeof(*ip6);
174         uh = (struct udphdr *)((caddr_t)ip6 + off);
175         ulen = ntohs((u_short)uh->uh_ulen);
176
177         if (plen != ulen) {
178                 udpstat.udps_badlen++;
179                 goto bad;
180         }
181
182         /*
183          * Checksum extended UDP header and data.
184          */
185         if (uh->uh_sum == 0)
186                 udpstat.udps_nosum++;
187         else if (in6_cksum(m, IPPROTO_UDP, off, ulen) != 0) {
188                 udpstat.udps_badsum++;
189                 goto bad;
190         }
191
192         if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) {
193                 struct  inpcb *last;
194
195                 /*
196                  * Deliver a multicast datagram to all sockets
197                  * for which the local and remote addresses and ports match
198                  * those of the incoming datagram.  This allows more than
199                  * one process to receive multicasts on the same port.
200                  * (This really ought to be done for unicast datagrams as
201                  * well, but that would cause problems with existing
202                  * applications that open both address-specific sockets and
203                  * a wildcard socket listening to the same port -- they would
204                  * end up receiving duplicates of every unicast datagram.
205                  * Those applications open the multiple sockets to overcome an
206                  * inadequacy of the UDP socket interface, but for backwards
207                  * compatibility we avoid the problem here rather than
208                  * fixing the interface.  Maybe 4.5BSD will remedy this?)
209                  */
210
211                 /*
212                  * In a case that laddr should be set to the link-local
213                  * address (this happens in RIPng), the multicast address
214                  * specified in the received packet does not match with
215                  * laddr. To cure this situation, the matching is relaxed
216                  * if the receiving interface is the same as one specified
217                  * in the socket and if the destination multicast address
218                  * matches one of the multicast groups specified in the socket.
219                  */
220
221                 /*
222                  * Construct sockaddr format source address.
223                  */
224                 init_sin6(&udp_in6, m); /* general init */
225                 udp_in6.sin6_port = uh->uh_sport;
226                 /*
227                  * KAME note: traditionally we dropped udpiphdr from mbuf here.
228                  * We need udphdr for IPsec processing so we do that later.
229                  */
230
231                 /*
232                  * Locate pcb(s) for datagram.
233                  * (Algorithm copied from raw_intr().)
234                  */
235                 last = NULL;
236                 LIST_FOREACH(in6p, &udbinfo.pcblisthead, inp_list) {
237                         KKASSERT((in6p->inp_flags & INP_PLACEMARKER) == 0);
238
239                         if (!(in6p->inp_vflag & INP_IPV6))
240                                 continue;
241                         if (in6p->in6p_lport != uh->uh_dport)
242                                 continue;
243                         if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr)) {
244                                 if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_laddr,
245                                                         &ip6->ip6_dst) &&
246                                     !in6_mcmatch(in6p, &ip6->ip6_dst,
247                                                  m->m_pkthdr.rcvif))
248                                         continue;
249                         }
250                         if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr)) {
251                                 if (!IN6_ARE_ADDR_EQUAL(&in6p->in6p_faddr,
252                                                         &ip6->ip6_src) ||
253                                    in6p->in6p_fport != uh->uh_sport)
254                                         continue;
255                         }
256
257                         if (last != NULL) {
258                                 struct mbuf *n;
259
260 #ifdef IPSEC
261                                 /*
262                                  * Check AH/ESP integrity.
263                                  */
264                                 if (ipsec6_in_reject_so(m, last->inp_socket))
265                                         ipsec6stat.in_polvio++;
266                                         /* do not inject data into pcb */
267                                 else
268 #endif /* IPSEC */
269 #ifdef FAST_IPSEC
270                                 /*
271                                  * Check AH/ESP integrity.
272                                  */
273                                 if (ipsec6_in_reject(m, last))
274                                         ;
275                                 else
276 #endif /* FAST_IPSEC */
277                                 if ((n = m_copy(m, 0, M_COPYALL)) != NULL) {
278                                         /*
279                                          * KAME NOTE: do not
280                                          * m_copy(m, offset, ...) above.
281                                          * ssb_appendaddr() expects M_PKTHDR,
282                                          * and m_copy() will copy M_PKTHDR
283                                          * only if offset is 0.
284                                          */
285                                         so = last->in6p_socket;
286                                         if ((last->in6p_flags & IN6P_CONTROLOPTS) ||
287                                             (so->so_options & SO_TIMESTAMP)) {
288                                                 ip6_savecontrol(last, &opts,
289                                                                 ip6, n);
290                                         }
291                                         m_adj(n, off + sizeof(struct udphdr));
292                                         lwkt_gettoken(&so->so_rcv.ssb_token);
293                                         if (ssb_appendaddr(&so->so_rcv,
294                                                     (struct sockaddr *)&udp_in6,
295                                                     n, opts) == 0) {
296                                                 m_freem(n);
297                                                 if (opts)
298                                                         m_freem(opts);
299                                                 udpstat.udps_fullsock++;
300                                         } else {
301                                                 sorwakeup(so);
302                                         }
303                                         lwkt_reltoken(&so->so_rcv.ssb_token);
304                                         opts = NULL;
305                                 }
306                         }
307                         last = in6p;
308                         /*
309                          * Don't look for additional matches if this one does
310                          * not have either the SO_REUSEPORT or SO_REUSEADDR
311                          * socket options set.  This heuristic avoids searching
312                          * through all pcbs in the common case of a non-shared
313                          * port.  It assumes that an application will never
314                          * clear these options after setting them.
315                          */
316                         if ((last->in6p_socket->so_options &
317                              (SO_REUSEPORT | SO_REUSEADDR)) == 0)
318                                 break;
319                 }
320
321                 if (last == NULL) {
322                         /*
323                          * No matching pcb found; discard datagram.
324                          * (No need to send an ICMP Port Unreachable
325                          * for a broadcast or multicast datgram.)
326                          */
327                         udpstat.udps_noport++;
328                         udpstat.udps_noportmcast++;
329                         goto bad;
330                 }
331 #ifdef IPSEC
332                 /*
333                  * Check AH/ESP integrity.
334                  */
335                 if (ipsec6_in_reject_so(m, last->inp_socket)) {
336                         ipsec6stat.in_polvio++;
337                         goto bad;
338                 }
339 #endif /* IPSEC */
340 #ifdef FAST_IPSEC
341                 /*
342                  * Check AH/ESP integrity.
343                  */
344                 if (ipsec6_in_reject(m, last)) {
345                         goto bad;
346                 }
347 #endif /* FAST_IPSEC */
348                 if (last->in6p_flags & IN6P_CONTROLOPTS
349                     || last->in6p_socket->so_options & SO_TIMESTAMP)
350                         ip6_savecontrol(last, &opts, ip6, m);
351
352                 m_adj(m, off + sizeof(struct udphdr));
353                 so = last->in6p_socket;
354                 lwkt_gettoken(&so->so_rcv.ssb_token);
355                 if (ssb_appendaddr(&so->so_rcv, (struct sockaddr *)&udp_in6,
356                                    m, opts) == 0) {
357                         udpstat.udps_fullsock++;
358                         lwkt_reltoken(&so->so_rcv.ssb_token);
359                         goto bad;
360                 }
361                 sorwakeup(so);
362                 lwkt_reltoken(&so->so_rcv.ssb_token);
363                 return IPPROTO_DONE;
364         }
365         /*
366          * Locate pcb for datagram.
367          */
368         in6p = in6_pcblookup_hash(&udbinfo, &ip6->ip6_src, uh->uh_sport,
369                                   &ip6->ip6_dst, uh->uh_dport, 1,
370                                   m->m_pkthdr.rcvif);
371         if (in6p == NULL) {
372                 if (log_in_vain) {
373                         char buf[INET6_ADDRSTRLEN];
374
375                         strcpy(buf, ip6_sprintf(&ip6->ip6_dst));
376                         log(LOG_INFO,
377                             "Connection attempt to UDP [%s]:%d from [%s]:%d\n",
378                             buf, ntohs(uh->uh_dport),
379                             ip6_sprintf(&ip6->ip6_src), ntohs(uh->uh_sport));
380                 }
381                 udpstat.udps_noport++;
382                 if (m->m_flags & M_MCAST) {
383                         kprintf("UDP6: M_MCAST is set in a unicast packet.\n");
384                         udpstat.udps_noportmcast++;
385                         goto bad;
386                 }
387                 icmp6_error(m, ICMP6_DST_UNREACH, ICMP6_DST_UNREACH_NOPORT, 0);
388                 return IPPROTO_DONE;
389         }
390 #ifdef IPSEC
391         /*
392          * Check AH/ESP integrity.
393          */
394         if (ipsec6_in_reject_so(m, in6p->in6p_socket)) {
395                 ipsec6stat.in_polvio++;
396                 goto bad;
397         }
398 #endif /* IPSEC */
399 #ifdef FAST_IPSEC
400         /*
401          * Check AH/ESP integrity.
402          */
403         if (ipsec6_in_reject(m, in6p)) {
404                 goto bad;
405         }
406 #endif /* FAST_IPSEC */
407
408         /*
409          * Construct sockaddr format source address.
410          * Stuff source address and datagram in user buffer.
411          */
412         init_sin6(&udp_in6, m); /* general init */
413         udp_in6.sin6_port = uh->uh_sport;
414         if (in6p->in6p_flags & IN6P_CONTROLOPTS
415             || in6p->in6p_socket->so_options & SO_TIMESTAMP)
416                 ip6_savecontrol(in6p, &opts, ip6, m);
417         m_adj(m, off + sizeof(struct udphdr));
418         so = in6p->in6p_socket;
419         lwkt_gettoken(&so->so_rcv.ssb_token);
420         if (ssb_appendaddr(&so->so_rcv, (struct sockaddr *)&udp_in6,
421                            m, opts) == 0) {
422                 udpstat.udps_fullsock++;
423                 lwkt_reltoken(&so->so_rcv.ssb_token);
424                 goto bad;
425         }
426         sorwakeup(so);
427         lwkt_reltoken(&so->so_rcv.ssb_token);
428         return IPPROTO_DONE;
429 bad:
430         if (m)
431                 m_freem(m);
432         if (opts)
433                 m_freem(opts);
434         return IPPROTO_DONE;
435 }
436
437 void
438 udp6_ctlinput(netmsg_t msg)
439 {
440         int cmd = msg->ctlinput.nm_cmd;
441         struct sockaddr *sa = msg->ctlinput.nm_arg;
442         void *d = msg->ctlinput.nm_extra;
443         struct udphdr uh;
444         struct ip6_hdr *ip6;
445         struct mbuf *m;
446         int off = 0;
447         struct ip6ctlparam *ip6cp = NULL;
448         const struct sockaddr_in6 *sa6_src = NULL;
449         void (*notify) (struct inpcb *, int) = udp_notify;
450         struct udp_portonly {
451                 u_int16_t uh_sport;
452                 u_int16_t uh_dport;
453         } *uhp;
454
455         if (sa->sa_family != AF_INET6 ||
456             sa->sa_len != sizeof(struct sockaddr_in6))
457                 goto out;
458
459         if ((unsigned)cmd >= PRC_NCMDS)
460                 goto out;
461         if (PRC_IS_REDIRECT(cmd))
462                 notify = in6_rtchange, d = NULL;
463         else if (cmd == PRC_HOSTDEAD)
464                 d = NULL;
465         else if (inet6ctlerrmap[cmd] == 0)
466                 goto out;
467
468         /* if the parameter is from icmp6, decode it. */
469         if (d != NULL) {
470                 ip6cp = (struct ip6ctlparam *)d;
471                 m = ip6cp->ip6c_m;
472                 ip6 = ip6cp->ip6c_ip6;
473                 off = ip6cp->ip6c_off;
474                 sa6_src = ip6cp->ip6c_src;
475         } else {
476                 m = NULL;
477                 ip6 = NULL;
478                 sa6_src = &sa6_any;
479         }
480
481         if (ip6) {
482                 /*
483                  * XXX: We assume that when IPV6 is non NULL,
484                  * M and OFF are valid.
485                  */
486
487                 /* check if we can safely examine src and dst ports */
488                 if (m->m_pkthdr.len < off + sizeof(*uhp))
489                         return;
490
491                 bzero(&uh, sizeof(uh));
492                 m_copydata(m, off, sizeof(*uhp), (caddr_t)&uh);
493
494                 in6_pcbnotify(&udbinfo.pcblisthead, sa, uh.uh_dport,
495                               (struct sockaddr *)ip6cp->ip6c_src, uh.uh_sport,
496                               cmd, 0, notify);
497         } else {
498                 in6_pcbnotify(&udbinfo.pcblisthead, sa, 0,
499                               (const struct sockaddr *)sa6_src, 0,
500                               cmd, 0, notify);
501         }
502 out:
503         lwkt_replymsg(&msg->ctlinput.base.lmsg, 0);
504 }
505
506 static int
507 udp6_getcred(SYSCTL_HANDLER_ARGS)
508 {
509         struct sockaddr_in6 addrs[2];
510         struct inpcb *inp;
511         int error;
512
513         error = priv_check(req->td, PRIV_ROOT);
514         if (error)
515                 return (error);
516
517         if (req->newlen != sizeof(addrs))
518                 return (EINVAL);
519         if (req->oldlen != sizeof(struct ucred))
520                 return (EINVAL);
521         error = SYSCTL_IN(req, addrs, sizeof(addrs));
522         if (error)
523                 return (error);
524         crit_enter();
525         inp = in6_pcblookup_hash(&udbinfo, &addrs[1].sin6_addr,
526                                  addrs[1].sin6_port,
527                                  &addrs[0].sin6_addr, addrs[0].sin6_port,
528                                  1, NULL);
529         if (!inp || !inp->inp_socket) {
530                 error = ENOENT;
531                 goto out;
532         }
533         error = SYSCTL_OUT(req, inp->inp_socket->so_cred,
534                            sizeof(struct ucred));
535
536 out:
537         crit_exit();
538         return (error);
539 }
540
541 SYSCTL_PROC(_net_inet6_udp6, OID_AUTO, getcred, CTLTYPE_OPAQUE|CTLFLAG_RW,
542             0, 0,
543             udp6_getcred, "S,ucred", "Get the ucred of a UDP6 connection");
544
545 /*
546  * NOTE: (so) is referenced from soabort*() and netmsg_pru_abort()
547  *       will sofree() it when we return.
548  */
549 static void
550 udp6_abort(netmsg_t msg)
551 {
552         struct socket *so = msg->abort.base.nm_so;
553         struct inpcb *inp;
554         int error;
555
556         inp = so->so_pcb;
557         if (inp) {
558                 soisdisconnected(so);
559                 in6_pcbdetach(inp);
560                 error = 0;
561         } else {
562                 error = EINVAL;
563         }
564         lwkt_replymsg(&msg->abort.base.lmsg, error);
565 }
566
567 static void
568 udp6_attach(netmsg_t msg)
569 {
570         struct socket *so = msg->attach.base.nm_so;
571         struct pru_attach_info *ai = msg->attach.nm_ai;
572         struct inpcb *inp;
573         int error;
574
575         inp = so->so_pcb;
576         if (inp != NULL) {
577                 error = EINVAL;
578                 goto out;
579         }
580
581         if (so->so_snd.ssb_hiwat == 0 || so->so_rcv.ssb_hiwat == 0) {
582                 error = soreserve(so, udp_sendspace, udp_recvspace,
583                     ai->sb_rlimit);
584                 if (error)
585                         goto out;
586         }
587         crit_enter();
588         error = in_pcballoc(so, &udbinfo);
589         crit_exit();
590         if (error)
591                 goto out;
592         sosetport(so, cpu_portfn(0));
593         inp = (struct inpcb *)so->so_pcb;
594         inp->inp_vflag |= INP_IPV6;
595         if (!ip6_v6only)
596                 inp->inp_vflag |= INP_IPV4;
597         inp->in6p_hops = -1;    /* use kernel default */
598         inp->in6p_cksum = -1;   /* just to be sure */
599         /*
600          * XXX: ugly!!
601          * IPv4 TTL initialization is necessary for an IPv6 socket as well,
602          * because the socket may be bound to an IPv6 wildcard address,
603          * which may match an IPv4-mapped IPv6 address.
604          */
605         inp->inp_ip_ttl = ip_defttl;
606         error = 0;
607 out:
608         lwkt_replymsg(&msg->attach.base.lmsg, error);
609 }
610
611 static void
612 udp6_bind(netmsg_t msg)
613 {
614         struct socket *so =msg->bind.base.nm_so;
615         struct sockaddr *nam = msg->bind.nm_nam;
616         struct thread *td = msg->bind.nm_td;
617         struct sockaddr_in6 *sin6_p = (struct sockaddr_in6 *)nam;
618         struct inpcb *inp;
619         int error;
620
621         inp = so->so_pcb;
622         if (inp == NULL) {
623                 error = EINVAL;
624                 goto out;
625         }
626
627         inp->inp_vflag &= ~INP_IPV4;
628         inp->inp_vflag |= INP_IPV6;
629         if (!(inp->inp_flags & IN6P_IPV6_V6ONLY)) {
630                 if (IN6_IS_ADDR_UNSPECIFIED(&sin6_p->sin6_addr))
631                         inp->inp_vflag |= INP_IPV4;
632                 else if (IN6_IS_ADDR_V4MAPPED(&sin6_p->sin6_addr)) {
633                         struct sockaddr_in sin;
634
635                         in6_sin6_2_sin(&sin, sin6_p);
636                         inp->inp_vflag |= INP_IPV4;
637                         inp->inp_vflag &= ~INP_IPV6;
638                         crit_enter();
639                         error = in_pcbbind(inp, (struct sockaddr *)&sin, td);
640                         crit_exit();
641                         goto out;
642                 }
643         }
644
645         crit_enter();
646         error = in6_pcbbind(inp, nam, td);
647         crit_exit();
648         if (error == 0) {
649                 if (IN6_IS_ADDR_UNSPECIFIED(&sin6_p->sin6_addr))
650                         inp->inp_flags |= INP_WASBOUND_NOTANY;
651                 in_pcbinswildcardhash(inp);
652         }
653 out:
654         lwkt_replymsg(&msg->bind.base.lmsg, error);
655 }
656
657 static void
658 udp6_connect(netmsg_t msg)
659 {
660         struct socket *so = msg->connect.base.nm_so;
661         struct sockaddr *nam = msg->connect.nm_nam;
662         struct thread *td = msg->connect.nm_td;
663         struct inpcb *inp;
664         int error;
665
666         inp = so->so_pcb;
667         if (inp == NULL) {
668                 error = EINVAL;
669                 goto out;
670         }
671
672         if (!(inp->inp_flags & IN6P_IPV6_V6ONLY)) {
673                 struct sockaddr_in6 *sin6_p;
674
675                 sin6_p = (struct sockaddr_in6 *)nam;
676                 if (IN6_IS_ADDR_V4MAPPED(&sin6_p->sin6_addr)) {
677                         struct sockaddr_in sin;
678
679                         if (inp->inp_faddr.s_addr != INADDR_ANY) {
680                                 error = EISCONN;
681                                 goto out;
682                         }
683                         in6_sin6_2_sin(&sin, sin6_p);
684                         crit_enter();
685                         error = in_pcbconnect(inp, (struct sockaddr *)&sin, td);
686                         crit_exit();
687                         if (error == 0) {
688                                 inp->inp_vflag |= INP_IPV4;
689                                 inp->inp_vflag &= ~INP_IPV6;
690                                 soisconnected(so);
691                         }
692                         goto out;
693                 }
694         }
695         if (!IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_faddr)) {
696                 error = EISCONN;
697                 goto out;
698         }
699         if (inp->inp_flags & INP_WILDCARD)
700                 in_pcbremwildcardhash(inp);
701         if (!prison_remote_ip(td, nam)) {
702                 error = EAFNOSUPPORT; /* IPv4 only jail */
703                 goto out;
704         }
705         crit_enter();
706         error = in6_pcbconnect(inp, nam, td);
707         crit_exit();
708         if (error == 0) {
709                 if (!ip6_v6only) { /* should be non mapped addr */
710                         inp->inp_vflag &= ~INP_IPV4;
711                         inp->inp_vflag |= INP_IPV6;
712                 }
713                 soisconnected(so);
714         } else if (error == EAFNOSUPPORT) {     /* connection dissolved */
715                 /*
716                  * Follow traditional BSD behavior and retain
717                  * the local port binding.  But, fix the old misbehavior
718                  * of overwriting any previously bound local address.
719                  */
720                 if (!(inp->inp_flags & INP_WASBOUND_NOTANY))
721                         inp->in6p_laddr = kin6addr_any;
722                 in_pcbinswildcardhash(inp);
723         }
724 out:
725         lwkt_replymsg(&msg->connect.base.lmsg, error);
726 }
727
728 static void
729 udp6_detach(netmsg_t msg)
730 {
731         struct socket *so = msg->detach.base.nm_so;
732         struct inpcb *inp;
733         int error;
734
735         inp = so->so_pcb;
736         if (inp) {
737                 crit_enter();
738                 in6_pcbdetach(inp);
739                 crit_exit();
740                 error = 0;
741         } else {
742                 error = EINVAL;
743         }
744         lwkt_replymsg(&msg->detach.base.lmsg, error);
745 }
746
747 static void
748 udp6_disconnect(netmsg_t msg)
749 {
750         struct socket *so = msg->disconnect.base.nm_so;
751         struct inpcb *inp;
752         int error;
753
754         inp = so->so_pcb;
755         if (inp == NULL) {
756                 error = EINVAL;
757                 goto out;
758         }
759
760         if (inp->inp_vflag & INP_IPV4) {
761                 const struct pr_usrreqs *pru;
762
763                 pru = inetsw[ip_protox[IPPROTO_UDP]].pr_usrreqs;
764                 pru->pru_disconnect(msg);       /* XXX on right port? */
765                 return;
766         }
767
768         if (IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_faddr)) {
769                 error = ENOTCONN;
770         } else {
771                 crit_enter();
772                 in6_pcbdisconnect(inp);
773                 crit_exit();
774                 soclrstate(so, SS_ISCONNECTED);         /* XXX */
775                 error = 0;
776         }
777 out:
778         lwkt_replymsg(&msg->disconnect.base.lmsg, error);
779 }
780
781 static void
782 udp6_send(netmsg_t msg)
783 {
784         struct socket *so = msg->send.base.nm_so;
785         struct mbuf *m = msg->send.nm_m;
786         struct sockaddr *addr = msg->send.nm_addr;
787         struct mbuf *control = msg->send.nm_control;
788         struct thread *td = msg->send.nm_td;
789         struct inpcb *inp;
790         int error = 0;
791
792         inp = so->so_pcb;
793         if (inp == NULL) {
794                 error = EINVAL;
795                 goto bad;
796         }
797
798         if (addr) {
799                 if (addr->sa_len != sizeof(struct sockaddr_in6)) {
800                         error = EINVAL;
801                         goto bad;
802                 }
803                 if (addr->sa_family != AF_INET6) {
804                         error = EAFNOSUPPORT;
805                         goto bad;
806                 }
807         }
808
809         if (!ip6_v6only) {
810                 int hasv4addr;
811                 struct sockaddr_in6 *sin6 = 0;
812
813                 if (addr == NULL)
814                         hasv4addr = (inp->inp_vflag & INP_IPV4);
815                 else {
816                         sin6 = (struct sockaddr_in6 *)addr;
817                         hasv4addr = IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)
818                                 ? 1 : 0;
819                 }
820                 if (hasv4addr) {
821                         const struct pr_usrreqs *pru;
822
823                         if (sin6)
824                                 in6_sin6_2_sin_in_sock(addr);
825                         pru = inetsw[ip_protox[IPPROTO_UDP]].pr_usrreqs;
826                         pru->pru_send(msg);
827                         /* msg invalid now */
828                         return;
829                 }
830         }
831
832         error = udp6_output(inp, m, addr, control, td);
833         lwkt_replymsg(&msg->send.base.lmsg, error);
834         return;
835 bad:
836         m_freem(m);
837         lwkt_replymsg(&msg->send.base.lmsg, error);
838 }
839
840 struct pr_usrreqs udp6_usrreqs = {
841         .pru_abort = udp6_abort,
842         .pru_accept = pr_generic_notsupp,
843         .pru_attach = udp6_attach,
844         .pru_bind = udp6_bind,
845         .pru_connect = udp6_connect,
846         .pru_connect2 = pr_generic_notsupp,
847         .pru_control = in6_control_dispatch,
848         .pru_detach = udp6_detach,
849         .pru_disconnect = udp6_disconnect,
850         .pru_listen = pr_generic_notsupp,
851         .pru_peeraddr = in6_mapped_peeraddr_dispatch,
852         .pru_rcvd = pr_generic_notsupp,
853         .pru_rcvoob = pr_generic_notsupp,
854         .pru_send = udp6_send,
855         .pru_sense = pru_sense_null,
856         .pru_shutdown = udp_shutdown,
857         .pru_sockaddr = in6_mapped_sockaddr_dispatch,
858         .pru_sosend = sosend,
859         .pru_soreceive = soreceive
860 };
861