sys/netinet/udp_usrreq.c

   1 /*
   2  * Copyright (c) 2004 Jeffrey M. Hsu.  All rights reserved.
   3  * Copyright (c) 2004 The DragonFly Project.  All rights reserved.
   4  *
   5  * This code is derived from software contributed to The DragonFly Project
   6  * by Jeffrey M. Hsu.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  * 1. Redistributions of source code must retain the above copyright
  12  *    notice, this list of conditions and the following disclaimer.
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  * 3. Neither the name of The DragonFly Project nor the names of its
  17  *    contributors may be used to endorse or promote products derived
  18  *    from this software without specific, prior written permission.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  21  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  22  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
  23  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE
  24  * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
  25  * INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING,
  26  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  27  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
  28  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
  29  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
  30  * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  31  * SUCH DAMAGE.
  32  */
  33
  34 /*
  35  * Copyright (c) 1982, 1986, 1988, 1990, 1993, 1995
  36  *      The Regents of the University of California.  All rights reserved.
  37  *
  38  * Redistribution and use in source and binary forms, with or without
  39  * modification, are permitted provided that the following conditions
  40  * are met:
  41  * 1. Redistributions of source code must retain the above copyright
  42  *    notice, this list of conditions and the following disclaimer.
  43  * 2. Redistributions in binary form must reproduce the above copyright
  44  *    notice, this list of conditions and the following disclaimer in the
  45  *    documentation and/or other materials provided with the distribution.
  46  * 3. Neither the name of the University nor the names of its contributors
  47  *    may be used to endorse or promote products derived from this software
  48  *    without specific prior written permission.
  49  *
  50  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
  51  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  52  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  53  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  54  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  55  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  56  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  57  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  58  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  59  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  60  * SUCH DAMAGE.
  61  *
  62  *      @(#)udp_usrreq.c        8.6 (Berkeley) 5/23/95
  63  * $FreeBSD: src/sys/netinet/udp_usrreq.c,v 1.64.2.18 2003/01/24 05:11:34 sam Exp $
  64  */
  65
  66 #include "opt_ipsec.h"
  67 #include "opt_inet6.h"
  68
  69 #include <sys/param.h>
  70 #include <sys/systm.h>
  71 #include <sys/kernel.h>
  72 #include <sys/malloc.h>
  73 #include <sys/mbuf.h>
  74 #include <sys/domain.h>
  75 #include <sys/proc.h>
  76 #include <sys/priv.h>
  77 #include <sys/protosw.h>
  78 #include <sys/socket.h>
  79 #include <sys/socketvar.h>
  80 #include <sys/sysctl.h>
  81 #include <sys/syslog.h>
  82 #include <sys/in_cksum.h>
  83 #include <sys/ktr.h>
  84
  85 #include <sys/thread2.h>
  86 #include <sys/socketvar2.h>
  87 #include <sys/serialize.h>
  88
  89 #include <machine/stdarg.h>
  90
  91 #include <net/if.h>
  92 #include <net/route.h>
  93 #include <net/netmsg2.h>
  94 #include <net/netisr2.h>
  95
  96 #include <netinet/in.h>
  97 #include <netinet/in_systm.h>
  98 #include <netinet/ip.h>
  99 #ifdef INET6
 100 #include <netinet/ip6.h>
 101 #endif
 102 #include <netinet/in_pcb.h>
 103 #include <netinet/in_var.h>
 104 #include <netinet/ip_var.h>
 105 #ifdef INET6
 106 #include <netinet6/ip6_var.h>
 107 #endif
 108 #include <netinet/ip_icmp.h>
 109 #include <netinet/icmp_var.h>
 110 #include <netinet/udp.h>
 111 #include <netinet/udp_var.h>
 112
 113 #ifdef FAST_IPSEC
 114 #include <netproto/ipsec/ipsec.h>
 115 #endif
 116
 117 #ifdef IPSEC
 118 #include <netinet6/ipsec.h>
 119 #endif
 120
 121 #define MSGF_UDP_SEND           MSGF_PROTO1
 122
 123 #define INP_DIRECT_DETACH       INP_FLAG_PROTO2
 124
 125 #define UDP_KTR_STRING          "inp=%p"
 126 #define UDP_KTR_ARGS            struct inpcb *inp
 127
 128 #ifndef KTR_UDP
 129 #define KTR_UDP                 KTR_ALL
 130 #endif
 131
 132 KTR_INFO_MASTER(udp);
 133 KTR_INFO(KTR_UDP, udp, send_beg, 0, UDP_KTR_STRING, UDP_KTR_ARGS);
 134 KTR_INFO(KTR_UDP, udp, send_end, 1, UDP_KTR_STRING, UDP_KTR_ARGS);
 135 KTR_INFO(KTR_UDP, udp, send_ipout, 2, UDP_KTR_STRING, UDP_KTR_ARGS);
 136 KTR_INFO(KTR_UDP, udp, redisp_ipout_beg, 3, UDP_KTR_STRING, UDP_KTR_ARGS);
 137 KTR_INFO(KTR_UDP, udp, redisp_ipout_end, 4, UDP_KTR_STRING, UDP_KTR_ARGS);
 138 KTR_INFO(KTR_UDP, udp, send_redisp, 5, UDP_KTR_STRING, UDP_KTR_ARGS);
 139 KTR_INFO(KTR_UDP, udp, send_inswildcard, 6, UDP_KTR_STRING, UDP_KTR_ARGS);
 140
 141 #define logudp(name, inp)       KTR_LOG(udp_##name, inp)
 142
 143 /*
 144  * UDP protocol implementation.
 145  * Per RFC 768, August, 1980.
 146  */
 147 #ifndef COMPAT_42
 148 static int      udpcksum = 1;
 149 #else
 150 static int      udpcksum = 0;           /* XXX */
 151 #endif
 152 SYSCTL_INT(_net_inet_udp, UDPCTL_CHECKSUM, checksum, CTLFLAG_RW,
 153     &udpcksum, 0, "Enable checksumming of UDP packets");
 154
 155 int     log_in_vain = 0;
 156 SYSCTL_INT(_net_inet_udp, OID_AUTO, log_in_vain, CTLFLAG_RW,
 157     &log_in_vain, 0, "Log all incoming UDP packets");
 158
 159 static int      blackhole = 0;
 160 SYSCTL_INT(_net_inet_udp, OID_AUTO, blackhole, CTLFLAG_RW,
 161         &blackhole, 0, "Do not send port unreachables for refused connects");
 162
 163 static int      strict_mcast_mship = 1;
 164 SYSCTL_INT(_net_inet_udp, OID_AUTO, strict_mcast_mship, CTLFLAG_RW,
 165         &strict_mcast_mship, 0, "Only send multicast to member sockets");
 166
 167 int     udp_sosend_async = 1;
 168 SYSCTL_INT(_net_inet_udp, OID_AUTO, sosend_async, CTLFLAG_RW,
 169         &udp_sosend_async, 0, "UDP asynchronized pru_send");
 170
 171 int     udp_sosend_prepend = 1;
 172 SYSCTL_INT(_net_inet_udp, OID_AUTO, sosend_prepend, CTLFLAG_RW,
 173         &udp_sosend_prepend, 0,
 174         "Prepend enough space for proto and link header in pru_send");
 175
 176 static int udp_reuseport_ext = 1;
 177 SYSCTL_INT(_net_inet_udp, OID_AUTO, reuseport_ext, CTLFLAG_RW,
 178         &udp_reuseport_ext, 0, "SO_REUSEPORT extension");
 179
 180 struct  inpcbinfo udbinfo[MAXCPU];
 181
 182 #ifndef UDBHASHSIZE
 183 #define UDBHASHSIZE 16
 184 #endif
 185
 186 struct  udpstat udpstat_percpu[MAXCPU] __cachealign;
 187
 188 static void udp_append(struct inpcb *last, struct ip *ip,
 189     struct mbuf *n, int off, struct sockaddr_in *udp_in);
 190
 191 static int udp_connect_oncpu(struct inpcb *inp, struct sockaddr_in *sin,
 192     struct sockaddr_in *if_sin, uint16_t hash);
 193
 194 static boolean_t udp_inswildcardhash(struct inpcb *inp,
 195     struct netmsg_base *msg, int error);
 196 static void udp_remwildcardhash(struct inpcb *inp);
 197
 198 static __inline int
 199 udp_lportcpu(short lport)
 200 {
 201         return (ntohs(lport) % netisr_ncpus);
 202 }
 203
 204 void
 205 udp_init(void)
 206 {
 207         struct inpcbportinfo *portinfo;
 208         int cpu;
 209
 210         portinfo = kmalloc_cachealign(sizeof(*portinfo) * netisr_ncpus, M_PCB,
 211             M_WAITOK);
 212
 213         for (cpu = 0; cpu < netisr_ncpus; cpu++) {
 214                 struct inpcbinfo *uicb = &udbinfo[cpu];
 215
 216                 /*
 217                  * NOTE:
 218                  * UDP pcb list, wildcard hash table and localgroup hash
 219                  * table are shared.
 220                  */
 221                 in_pcbinfo_init(uicb, cpu, TRUE);
 222                 uicb->hashbase = hashinit(UDBHASHSIZE, M_PCB, &uicb->hashmask);
 223
 224                 in_pcbportinfo_init(&portinfo[cpu], UDBHASHSIZE, cpu);
 225                 in_pcbportinfo_set(uicb, portinfo, netisr_ncpus);
 226
 227                 uicb->wildcardhashbase = hashinit(UDBHASHSIZE, M_PCB,
 228                     &uicb->wildcardhashmask);
 229                 uicb->localgrphashbase = hashinit(UDBHASHSIZE, M_PCB,
 230                     &uicb->localgrphashmask);
 231
 232                 uicb->ipi_size = sizeof(struct inpcb);
 233         }
 234
 235         /*
 236          * Initialize UDP statistics counters for each CPU.
 237          */
 238         for (cpu = 0; cpu < netisr_ncpus; ++cpu)
 239                 bzero(&udpstat_percpu[cpu], sizeof(struct udpstat));
 240 }
 241
 242 static int
 243 sysctl_udpstat(SYSCTL_HANDLER_ARGS)
 244 {
 245         int cpu, error = 0;
 246
 247         for (cpu = 0; cpu < netisr_ncpus; ++cpu) {
 248                 if ((error = SYSCTL_OUT(req, &udpstat_percpu[cpu],
 249                                         sizeof(struct udpstat))))
 250                         break;
 251                 if ((error = SYSCTL_IN(req, &udpstat_percpu[cpu],
 252                                        sizeof(struct udpstat))))
 253                         break;
 254         }
 255
 256         return (error);
 257 }
 258 SYSCTL_PROC(_net_inet_udp, UDPCTL_STATS, stats, (CTLTYPE_OPAQUE | CTLFLAG_RW),
 259     0, 0, sysctl_udpstat, "S,udpstat", "UDP statistics");
 260
 261 void
 262 udp_ctloutput(netmsg_t msg)
 263 {
 264         struct socket *so = msg->base.nm_so;
 265         struct sockopt *sopt = msg->ctloutput.nm_sopt;
 266         struct inpcb *inp = so->so_pcb;
 267
 268         if (inp == NULL) {
 269                 lwkt_replymsg(&msg->lmsg, EINVAL);
 270                 return;
 271         }
 272
 273         if (sopt->sopt_level == IPPROTO_IP && sopt->sopt_dir == SOPT_SET) {
 274                 switch (sopt->sopt_name) {
 275                 case IP_MULTICAST_IF:
 276                 case IP_MULTICAST_VIF:
 277                 case IP_MULTICAST_TTL:
 278                 case IP_MULTICAST_LOOP:
 279                 case IP_ADD_MEMBERSHIP:
 280                 case IP_DROP_MEMBERSHIP:
 281                         /*
 282                          * This pr_ctloutput msg will be forwarded
 283                          * to netisr0 to run; we can't do direct
 284                          * detaching anymore.
 285                          *
 286                          * NOTE:
 287                          * Don't optimize for the sockets whose
 288                          * current so_port is netisr0's msgport.
 289                          * These sockets could be connect(2)'ed
 290                          * later and the so_port will be changed.
 291                          */
 292                         inp->inp_flags &= ~INP_DIRECT_DETACH;
 293                         break;
 294                 }
 295         }
 296         return ip_ctloutput(msg);
 297 }
 298
 299 /*
 300  * Check multicast packets to make sure they are only sent to sockets with
 301  * multicast memberships for the packet's destination address and arrival
 302  * interface.  Multicast packets to multicast-unaware sockets are also
 303  * disallowed.
 304  *
 305  * Returns 0 if the packet is acceptable, -1 if it is not.
 306  */
 307 static __inline int
 308 check_multicast_membership(const struct ip *ip, const struct inpcb *inp,
 309     const struct mbuf *m)
 310 {
 311         const struct ip_moptions *mopt;
 312         int mshipno;
 313
 314         if (strict_mcast_mship == 0 ||
 315             !IN_MULTICAST(ntohl(ip->ip_dst.s_addr))) {
 316                 return (0);
 317         }
 318
 319         ASSERT_IN_NETISR(0);
 320
 321         mopt = inp->inp_moptions;
 322         if (mopt == NULL)
 323                 return (-1);
 324         for (mshipno = 0; mshipno < mopt->imo_num_memberships; ++mshipno) {
 325                 const struct in_multi *maddr = mopt->imo_membership[mshipno];
 326
 327                 if (ip->ip_dst.s_addr == maddr->inm_addr.s_addr &&
 328                     m->m_pkthdr.rcvif == maddr->inm_ifp) {
 329                         return (0);
 330                 }
 331         }
 332         return (-1);
 333 }
 334
 335 struct udp_mcast_arg {
 336         struct inpcb    *inp;
 337         struct inpcb    *last;
 338         struct ip       *ip;
 339         struct mbuf     *m;
 340         int             iphlen;
 341         struct sockaddr_in *udp_in;
 342 };
 343
 344 static int
 345 udp_mcast_input(struct udp_mcast_arg *arg)
 346 {
 347         struct inpcb *inp = arg->inp;
 348         struct inpcb *last = arg->last;
 349         struct ip *ip = arg->ip;
 350         struct mbuf *m = arg->m;
 351
 352         if (check_multicast_membership(ip, inp, m) < 0)
 353                 return ERESTART; /* caller continue */
 354
 355         if (last != NULL) {
 356                 struct mbuf *n;
 357
 358 #ifdef IPSEC
 359                 /* check AH/ESP integrity. */
 360                 if (ipsec4_in_reject_so(m, last->inp_socket))
 361                         ipsecstat.in_polvio++;
 362                         /* do not inject data to pcb */
 363                 else
 364 #endif /*IPSEC*/
 365 #ifdef FAST_IPSEC
 366                 /* check AH/ESP integrity. */
 367                 if (ipsec4_in_reject(m, last))
 368                         ;
 369                 else
 370 #endif /*FAST_IPSEC*/
 371                 if ((n = m_copypacket(m, M_NOWAIT)) != NULL)
 372                         udp_append(last, ip, n,
 373                             arg->iphlen + sizeof(struct udphdr),
 374                             arg->udp_in);
 375         }
 376         arg->last = last = inp;
 377
 378         /*
 379          * Don't look for additional matches if this one does
 380          * not have either the SO_REUSEPORT or SO_REUSEADDR
 381          * socket options set.  This heuristic avoids searching
 382          * through all pcbs in the common case of a non-shared
 383          * port.  It * assumes that an application will never
 384          * clear these options after setting them.
 385          */
 386         if (!(last->inp_socket->so_options &
 387             (SO_REUSEPORT | SO_REUSEADDR)))
 388                 return EJUSTRETURN; /* caller stop */
 389         return 0;
 390 }
 391
 392 int
 393 udp_input(struct mbuf **mp, int *offp, int proto)
 394 {
 395         struct sockaddr_in udp_in = { sizeof udp_in, AF_INET };
 396         int iphlen;
 397         struct ip *ip;
 398         struct udphdr *uh;
 399         struct inpcb *inp;
 400         struct mbuf *m;
 401         struct mbuf *opts = NULL;
 402         int len, off;
 403         struct ip save_ip;
 404         struct inpcbinfo *pcbinfo = &udbinfo[mycpuid];
 405
 406         off = *offp;
 407         m = *mp;
 408         *mp = NULL;
 409
 410         iphlen = off;
 411         udp_stat.udps_ipackets++;
 412
 413         /*
 414          * Strip IP options, if any; should skip this,
 415          * make available to user, and use on returned packets,
 416          * but we don't yet have a way to check the checksum
 417          * with options still present.
 418          */
 419         if (iphlen > sizeof(struct ip)) {
 420                 ip_stripoptions(m);
 421                 iphlen = sizeof(struct ip);
 422         }
 423
 424         /*
 425          * IP and UDP headers are together in first mbuf.
 426          * Already checked and pulled up in ip_demux().
 427          */
 428         KASSERT(m->m_len >= iphlen + sizeof(struct udphdr),
 429             ("UDP header not in one mbuf"));
 430
 431         ip = mtod(m, struct ip *);
 432         uh = (struct udphdr *)((caddr_t)ip + iphlen);
 433
 434         /* destination port of 0 is illegal, based on RFC768. */
 435         if (uh->uh_dport == 0)
 436                 goto bad;
 437
 438         /*
 439          * Make mbuf data length reflect UDP length.
 440          * If not enough data to reflect UDP length, drop.
 441          */
 442         len = ntohs((u_short)uh->uh_ulen);
 443         if (ip->ip_len != len) {
 444                 if (len > ip->ip_len || len < sizeof(struct udphdr)) {
 445                         udp_stat.udps_badlen++;
 446                         goto bad;
 447                 }
 448                 m_adj(m, len - ip->ip_len);
 449                 /* ip->ip_len = len; */
 450         }
 451         /*
 452          * Save a copy of the IP header in case we want restore it
 453          * for sending an ICMP error message in response.
 454          */
 455         save_ip = *ip;
 456
 457         /*
 458          * Checksum extended UDP header and data.
 459          */
 460         if (uh->uh_sum) {
 461                 if (m->m_pkthdr.csum_flags & CSUM_DATA_VALID) {
 462                         if (m->m_pkthdr.csum_flags & CSUM_PSEUDO_HDR)
 463                                 uh->uh_sum = m->m_pkthdr.csum_data;
 464                         else
 465                                 uh->uh_sum = in_pseudo(ip->ip_src.s_addr,
 466                                     ip->ip_dst.s_addr, htonl((u_short)len +
 467                                     m->m_pkthdr.csum_data + IPPROTO_UDP));
 468                         uh->uh_sum ^= 0xffff;
 469                 } else {
 470                         char b[9];
 471
 472                         bcopy(((struct ipovly *)ip)->ih_x1, b, 9);
 473                         bzero(((struct ipovly *)ip)->ih_x1, 9);
 474                         ((struct ipovly *)ip)->ih_len = uh->uh_ulen;
 475                         uh->uh_sum = in_cksum(m, len + sizeof(struct ip));
 476                         bcopy(b, ((struct ipovly *)ip)->ih_x1, 9);
 477                 }
 478                 if (uh->uh_sum) {
 479                         udp_stat.udps_badsum++;
 480                         m_freem(m);
 481                         return(IPPROTO_DONE);
 482                 }
 483         } else
 484                 udp_stat.udps_nosum++;
 485
 486         if (IN_MULTICAST(ntohl(ip->ip_dst.s_addr)) ||
 487             in_broadcast(ip->ip_dst, m->m_pkthdr.rcvif)) {
 488                 struct inpcbhead *connhead;
 489                 struct inpcontainer *ic, *ic_marker;
 490                 struct inpcontainerhead *ichead;
 491                 struct udp_mcast_arg arg;
 492                 struct inpcb *last;
 493                 int error;
 494
 495                 /*
 496                  * Deliver a multicast or broadcast datagram to *all* sockets
 497                  * for which the local and remote addresses and ports match
 498                  * those of the incoming datagram.  This allows more than
 499                  * one process to receive multi/broadcasts on the same port.
 500                  * (This really ought to be done for unicast datagrams as
 501                  * well, but that would cause problems with existing
 502                  * applications that open both address-specific sockets and
 503                  * a wildcard socket listening to the same port -- they would
 504                  * end up receiving duplicates of every unicast datagram.
 505                  * Those applications open the multiple sockets to overcome an
 506                  * inadequacy of the UDP socket interface, but for backwards
 507                  * compatibility we avoid the problem here rather than
 508                  * fixing the interface.  Maybe 4.5BSD will remedy this?)
 509                  */
 510
 511                 /*
 512                  * Construct sockaddr format source address.
 513                  */
 514                 udp_in.sin_port = uh->uh_sport;
 515                 udp_in.sin_addr = ip->ip_src;
 516                 arg.udp_in = &udp_in;
 517                 /*
 518                  * Locate pcb(s) for datagram.
 519                  * (Algorithm copied from raw_intr().)
 520                  */
 521                 last = NULL;
 522                 arg.iphlen = iphlen;
 523
 524                 connhead = &pcbinfo->hashbase[
 525                     INP_PCBCONNHASH(ip->ip_src.s_addr, uh->uh_sport,
 526                     ip->ip_dst.s_addr, uh->uh_dport, pcbinfo->hashmask)];
 527                 LIST_FOREACH(inp, connhead, inp_hash) {
 528 #ifdef INET6
 529                         if (!INP_ISIPV4(inp))
 530                                 continue;
 531 #endif
 532                         if (!in_hosteq(inp->inp_faddr, ip->ip_src) ||
 533                             !in_hosteq(inp->inp_laddr, ip->ip_dst) ||
 534                             inp->inp_fport != uh->uh_sport ||
 535                             inp->inp_lport != uh->uh_dport)
 536                                 continue;
 537
 538                         arg.inp = inp;
 539                         arg.last = last;
 540                         arg.ip = ip;
 541                         arg.m = m;
 542
 543                         error = udp_mcast_input(&arg);
 544                         if (error == ERESTART)
 545                                 continue;
 546                         last = arg.last;
 547
 548                         if (error == EJUSTRETURN)
 549                                 goto done;
 550                 }
 551
 552                 ichead = &pcbinfo->wildcardhashbase[
 553                     INP_PCBWILDCARDHASH(uh->uh_dport,
 554                     pcbinfo->wildcardhashmask)];
 555                 ic_marker = in_pcbcontainer_marker();
 556
 557                 GET_PCBINFO_TOKEN(pcbinfo);
 558                 LIST_INSERT_HEAD(ichead, ic_marker, ic_list);
 559                 while ((ic = LIST_NEXT(ic_marker, ic_list)) != NULL) {
 560                         LIST_REMOVE(ic_marker, ic_list);
 561                         LIST_INSERT_AFTER(ic, ic_marker, ic_list);
 562
 563                         inp = ic->ic_inp;
 564                         if (inp->inp_flags & INP_PLACEMARKER)
 565                                 continue;
 566 #ifdef INET6
 567                         if (!INP_ISIPV4(inp))
 568                                 continue;
 569 #endif
 570                         if (inp->inp_lport != uh->uh_dport)
 571                                 continue;
 572                         if (inp->inp_laddr.s_addr != INADDR_ANY &&
 573                             inp->inp_laddr.s_addr != ip->ip_dst.s_addr)
 574                                 continue;
 575
 576                         arg.inp = inp;
 577                         arg.last = last;
 578                         arg.ip = ip;
 579                         arg.m = m;
 580
 581                         error = udp_mcast_input(&arg);
 582                         if (error == ERESTART)
 583                                 continue;
 584                         last = arg.last;
 585
 586                         if (error == EJUSTRETURN)
 587                                 break;
 588                 }
 589                 LIST_REMOVE(ic_marker, ic_list);
 590                 REL_PCBINFO_TOKEN(pcbinfo);
 591 done:
 592                 if (last == NULL) {
 593                         /*
 594                          * No matching pcb found; discard datagram.
 595                          * (No need to send an ICMP Port Unreachable
 596                          * for a broadcast or multicast datgram.)
 597                          */
 598                         udp_stat.udps_noportbcast++;
 599                         goto bad;
 600                 }
 601 #ifdef IPSEC
 602                 /* check AH/ESP integrity. */
 603                 if (ipsec4_in_reject_so(m, last->inp_socket)) {
 604                         ipsecstat.in_polvio++;
 605                         goto bad;
 606                 }
 607 #endif /*IPSEC*/
 608 #ifdef FAST_IPSEC
 609                 /* check AH/ESP integrity. */
 610                 if (ipsec4_in_reject(m, last))
 611                         goto bad;
 612 #endif /*FAST_IPSEC*/
 613                 udp_append(last, ip, m, iphlen + sizeof(struct udphdr),
 614                     &udp_in);
 615                 return(IPPROTO_DONE);
 616         }
 617         /*
 618          * Locate pcb for datagram.
 619          */
 620         inp = in_pcblookup_pkthash(pcbinfo, ip->ip_src, uh->uh_sport,
 621             ip->ip_dst, uh->uh_dport, TRUE, m->m_pkthdr.rcvif,
 622             udp_reuseport_ext ? m : NULL);
 623         if (inp == NULL) {
 624                 if (log_in_vain) {
 625                         char src[INET_ADDRSTRLEN], dst[INET_ADDRSTRLEN];
 626
 627                         log(LOG_INFO,
 628                             "Connection attempt to UDP %s:%d from %s:%d\n",
 629                             kinet_ntoa(ip->ip_dst, dst), ntohs(uh->uh_dport),
 630                             kinet_ntoa(ip->ip_src, src), ntohs(uh->uh_sport));
 631                 }
 632                 udp_stat.udps_noport++;
 633                 if (m->m_flags & (M_BCAST | M_MCAST)) {
 634                         udp_stat.udps_noportbcast++;
 635                         goto bad;
 636                 }
 637                 if (blackhole)
 638                         goto bad;
 639 #ifdef ICMP_BANDLIM
 640                 if (badport_bandlim(BANDLIM_ICMP_UNREACH) < 0)
 641                         goto bad;
 642 #endif
 643                 *ip = save_ip;
 644                 ip->ip_len += iphlen;
 645                 icmp_error(m, ICMP_UNREACH, ICMP_UNREACH_PORT, 0, 0);
 646                 return(IPPROTO_DONE);
 647         }
 648         KASSERT(INP_ISIPV4(inp), ("not inet inpcb"));
 649 #ifdef IPSEC
 650         if (ipsec4_in_reject_so(m, inp->inp_socket)) {
 651                 ipsecstat.in_polvio++;
 652                 goto bad;
 653         }
 654 #endif /*IPSEC*/
 655 #ifdef FAST_IPSEC
 656         if (ipsec4_in_reject(m, inp))
 657                 goto bad;
 658 #endif /*FAST_IPSEC*/
 659         /*
 660          * Check the minimum TTL for socket.
 661          */
 662         if (ip->ip_ttl < inp->inp_ip_minttl)
 663                 goto bad;
 664
 665         /*
 666          * Construct sockaddr format source address.
 667          * Stuff source address and datagram in user buffer.
 668          */
 669         udp_in.sin_port = uh->uh_sport;
 670         udp_in.sin_addr = ip->ip_src;
 671         if ((inp->inp_flags & INP_CONTROLOPTS) ||
 672             (inp->inp_socket->so_options & SO_TIMESTAMP))
 673                 ip_savecontrol(inp, &opts, ip, m);
 674         m_adj(m, iphlen + sizeof(struct udphdr));
 675
 676         lwkt_gettoken(&inp->inp_socket->so_rcv.ssb_token);
 677         if (ssb_appendaddr(&inp->inp_socket->so_rcv,
 678             (struct sockaddr *)&udp_in, m, opts) == 0) {
 679                 lwkt_reltoken(&inp->inp_socket->so_rcv.ssb_token);
 680                 udp_stat.udps_fullsock++;
 681                 goto bad;
 682         }
 683         lwkt_reltoken(&inp->inp_socket->so_rcv.ssb_token);
 684         sorwakeup(inp->inp_socket);
 685         return(IPPROTO_DONE);
 686 bad:
 687         m_freem(m);
 688         if (opts)
 689                 m_freem(opts);
 690         return(IPPROTO_DONE);
 691 }
 692
 693 /*
 694  * subroutine of udp_input(), mainly for source code readability.
 695  * caller must properly init udp_ip6 and udp_in6 beforehand.
 696  */
 697 static void
 698 udp_append(struct inpcb *last, struct ip *ip, struct mbuf *n, int off,
 699     struct sockaddr_in *udp_in)
 700 {
 701         struct mbuf *opts = NULL;
 702         int ret;
 703
 704         KASSERT(INP_ISIPV4(last), ("not inet inpcb"));
 705
 706         if (last->inp_flags & INP_CONTROLOPTS ||
 707             last->inp_socket->so_options & SO_TIMESTAMP)
 708                 ip_savecontrol(last, &opts, ip, n);
 709         m_adj(n, off);
 710
 711         lwkt_gettoken(&last->inp_socket->so_rcv.ssb_token);
 712         ret = ssb_appendaddr(&last->inp_socket->so_rcv,
 713             (struct sockaddr *)udp_in, n, opts);
 714         lwkt_reltoken(&last->inp_socket->so_rcv.ssb_token);
 715         if (ret == 0) {
 716                 m_freem(n);
 717                 if (opts)
 718                         m_freem(opts);
 719                 udp_stat.udps_fullsock++;
 720         } else {
 721                 sorwakeup(last->inp_socket);
 722         }
 723 }
 724
 725 /*
 726  * Notify a udp user of an asynchronous error;
 727  * just wake up so that he can collect error status.
 728  */
 729 void
 730 udp_notify(struct inpcb *inp, int error)
 731 {
 732         inp->inp_socket->so_error = error;
 733         sorwakeup(inp->inp_socket);
 734         sowwakeup(inp->inp_socket);
 735 }
 736
 737 struct netmsg_udp_notify {
 738         struct netmsg_base base;
 739         inp_notify_t    nm_notify;
 740         struct in_addr  nm_faddr;
 741         int             nm_arg;
 742 };
 743
 744 static void
 745 udp_notifyall_oncpu(netmsg_t msg)
 746 {
 747         struct netmsg_udp_notify *nm = (struct netmsg_udp_notify *)msg;
 748         int nextcpu, cpu = mycpuid;
 749
 750         in_pcbnotifyall(&udbinfo[cpu], nm->nm_faddr, nm->nm_arg, nm->nm_notify);
 751
 752         nextcpu = cpu + 1;
 753         if (nextcpu < netisr_ncpus)
 754                 lwkt_forwardmsg(netisr_cpuport(nextcpu), &nm->base.lmsg);
 755         else
 756                 lwkt_replymsg(&nm->base.lmsg, 0);
 757 }
 758
 759 inp_notify_t
 760 udp_get_inpnotify(int cmd, const struct sockaddr *sa,
 761     struct ip **ip0, int *cpuid)
 762 {
 763         struct in_addr faddr;
 764         struct ip *ip = *ip0;
 765         inp_notify_t notify = udp_notify;
 766
 767         faddr = ((const struct sockaddr_in *)sa)->sin_addr;
 768         if (sa->sa_family != AF_INET || faddr.s_addr == INADDR_ANY)
 769                 return NULL;
 770
 771         if (PRC_IS_REDIRECT(cmd)) {
 772                 ip = NULL;
 773                 notify = in_rtchange;
 774         } else if (cmd == PRC_HOSTDEAD) {
 775                 ip = NULL;
 776         } else if ((unsigned)cmd >= PRC_NCMDS || inetctlerrmap[cmd] == 0) {
 777                 return NULL;
 778         }
 779
 780         if (cpuid != NULL) {
 781                 if (ip == NULL) {
 782                         /* Go through all CPUs */
 783                         *cpuid = ncpus;
 784                 } else {
 785                         const struct udphdr *uh;
 786
 787                         uh = (const struct udphdr *)
 788                             ((caddr_t)ip + (ip->ip_hl << 2));
 789                         *cpuid = udp_addrcpu(faddr.s_addr, uh->uh_dport,
 790                             ip->ip_src.s_addr, uh->uh_sport);
 791                 }
 792         }
 793
 794         *ip0 = ip;
 795         return notify;
 796 }
 797
 798 void
 799 udp_ctlinput(netmsg_t msg)
 800 {
 801         struct sockaddr *sa = msg->ctlinput.nm_arg;
 802         struct ip *ip = msg->ctlinput.nm_extra;
 803         int cmd = msg->ctlinput.nm_cmd, cpuid;
 804         inp_notify_t notify;
 805         struct in_addr faddr;
 806
 807         notify = udp_get_inpnotify(cmd, sa, &ip, &cpuid);
 808         if (notify == NULL)
 809                 goto done;
 810
 811         faddr = ((struct sockaddr_in *)sa)->sin_addr;
 812         if (ip) {
 813                 const struct udphdr *uh;
 814                 struct inpcb *inp;
 815
 816                 if (cpuid != mycpuid)
 817                         goto done;
 818
 819                 uh = (const struct udphdr *)((caddr_t)ip + (ip->ip_hl << 2));
 820                 inp = in_pcblookup_hash(&udbinfo[mycpuid], faddr, uh->uh_dport,
 821                                         ip->ip_src, uh->uh_sport, 0, NULL);
 822                 if (inp != NULL && inp->inp_socket != NULL)
 823                         notify(inp, inetctlerrmap[cmd]);
 824         } else if (msg->ctlinput.nm_direct) {
 825                 if (cpuid != ncpus && cpuid != mycpuid)
 826                         goto done;
 827                 if (mycpuid >= netisr_ncpus)
 828                         goto done;
 829
 830                 in_pcbnotifyall(&udbinfo[mycpuid], faddr, inetctlerrmap[cmd],
 831                     notify);
 832         } else {
 833                 struct netmsg_udp_notify *nm;
 834
 835                 ASSERT_IN_NETISR(0);
 836                 nm = kmalloc(sizeof(*nm), M_LWKTMSG, M_INTWAIT);
 837                 netmsg_init(&nm->base, NULL, &netisr_afree_rport,
 838                             0, udp_notifyall_oncpu);
 839                 nm->nm_faddr = faddr;
 840                 nm->nm_arg = inetctlerrmap[cmd];
 841                 nm->nm_notify = notify;
 842                 lwkt_sendmsg(netisr_cpuport(0), &nm->base.lmsg);
 843         }
 844 done:
 845         lwkt_replymsg(&msg->lmsg, 0);
 846 }
 847
 848 SYSCTL_PROC(_net_inet_udp, UDPCTL_PCBLIST, pcblist, CTLFLAG_RD, udbinfo, 0,
 849             in_pcblist_ncpus, "S,xinpcb", "List of active UDP sockets");
 850
 851 static int
 852 udp_getcred(SYSCTL_HANDLER_ARGS)
 853 {
 854         struct sockaddr_in addrs[2];
 855         struct ucred cred0, *cred = NULL;
 856         struct inpcb *inp;
 857         int error, cpu, origcpu;
 858
 859         error = priv_check(req->td, PRIV_ROOT);
 860         if (error)
 861                 return (error);
 862         error = SYSCTL_IN(req, addrs, sizeof addrs);
 863         if (error)
 864                 return (error);
 865
 866         origcpu = mycpuid;
 867         cpu = udp_addrcpu(addrs[1].sin_addr.s_addr, addrs[1].sin_port,
 868             addrs[0].sin_addr.s_addr, addrs[0].sin_port);
 869
 870         lwkt_migratecpu(cpu);
 871
 872         inp = in_pcblookup_hash(&udbinfo[cpu],
 873             addrs[1].sin_addr, addrs[1].sin_port,
 874             addrs[0].sin_addr, addrs[0].sin_port, TRUE, NULL);
 875         if (inp == NULL || inp->inp_socket == NULL) {
 876                 error = ENOENT;
 877         } else if (inp->inp_socket->so_cred != NULL) {
 878                 cred0 = *(inp->inp_socket->so_cred);
 879                 cred = &cred0;
 880         }
 881
 882         lwkt_migratecpu(origcpu);
 883
 884         if (error)
 885                 return error;
 886
 887         return SYSCTL_OUT(req, cred, sizeof(struct ucred));
 888 }
 889 SYSCTL_PROC(_net_inet_udp, OID_AUTO, getcred, CTLTYPE_OPAQUE|CTLFLAG_RW,
 890     0, 0, udp_getcred, "S,ucred", "Get the ucred of a UDP connection");
 891
 892 static void
 893 udp_send_redispatch(netmsg_t msg)
 894 {
 895         struct mbuf *m = msg->send.nm_m;
 896         int pru_flags = msg->send.nm_flags;
 897         struct inpcb *inp = msg->send.base.nm_so->so_pcb;
 898         struct mbuf *m_opt = msg->send.nm_control; /* XXX save ipopt */
 899         int flags = msg->send.nm_priv; /* ip_output flags */
 900         int error;
 901
 902         logudp(redisp_ipout_beg, inp);
 903
 904         /*
 905          * - Don't use inp route cache.  It should only be used in the
 906          *   inp owner netisr.
 907          * - Access to inp_moptions should be safe, since multicast UDP
 908          *   datagrams are redispatched to netisr0 and inp_moptions is
 909          *   changed only in netisr0.
 910          */
 911         error = ip_output(m, m_opt, NULL, flags, inp->inp_moptions, inp);
 912         if ((pru_flags & PRUS_NOREPLY) == 0)
 913                 lwkt_replymsg(&msg->send.base.lmsg, error);
 914
 915         if (m_opt != NULL) {
 916                 /* Free saved ip options, if any */
 917                 m_freem(m_opt);
 918         }
 919
 920         logudp(redisp_ipout_end, inp);
 921 }
 922
 923 static void
 924 udp_send(netmsg_t msg)
 925 {
 926         struct socket *so = msg->send.base.nm_so;
 927         struct mbuf *m = msg->send.nm_m;
 928         struct sockaddr *dstaddr = msg->send.nm_addr;
 929         int pru_flags = msg->send.nm_flags;
 930         struct inpcb *inp = so->so_pcb;
 931         struct thread *td = msg->send.nm_td;
 932         uint16_t hash;
 933         int flags;
 934
 935         struct udpiphdr *ui;
 936         int len = m->m_pkthdr.len;
 937         struct sockaddr_in *sin;        /* really is initialized before use */
 938         int error = 0, cpu;
 939
 940         KKASSERT(msg->send.nm_control == NULL);
 941
 942         logudp(send_beg, inp);
 943
 944         if (inp == NULL) {
 945                 error = EINVAL;
 946                 goto release;
 947         }
 948
 949         if (len + sizeof(struct udpiphdr) > IP_MAXPACKET) {
 950                 error = EMSGSIZE;
 951                 goto release;
 952         }
 953
 954         if (inp->inp_lport == 0) {      /* unbound socket */
 955                 boolean_t forwarded;
 956
 957                 error = in_pcbbind(inp, NULL, td);
 958                 if (error)
 959                         goto release;
 960
 961                 /*
 962                  * Need to call udp_send again, after this inpcb is
 963                  * inserted into wildcard hash table.
 964                  */
 965                 msg->send.base.lmsg.ms_flags |= MSGF_UDP_SEND;
 966                 forwarded = udp_inswildcardhash(inp, &msg->send.base, 0);
 967                 if (forwarded) {
 968                         /*
 969                          * The message is further forwarded, so we are
 970                          * done here.
 971                          */
 972                         logudp(send_inswildcard, inp);
 973                         return;
 974                 }
 975         }
 976
 977         if (dstaddr != NULL) {          /* destination address specified */
 978                 if (inp->inp_faddr.s_addr != INADDR_ANY) {
 979                         /* already connected */
 980                         error = EISCONN;
 981                         goto release;
 982                 }
 983                 sin = (struct sockaddr_in *)dstaddr;
 984                 if (!prison_remote_ip(td, (struct sockaddr *)&sin)) {
 985                         error = EAFNOSUPPORT; /* IPv6 only jail */
 986                         goto release;
 987                 }
 988         } else {
 989                 if (inp->inp_faddr.s_addr == INADDR_ANY) {
 990                         /* no destination specified and not already connected */
 991                         error = ENOTCONN;
 992                         goto release;
 993                 }
 994                 sin = NULL;
 995         }
 996
 997         /*
 998          * Calculate data length and get a mbuf
 999          * for UDP and IP headers.
1000          */
1001         M_PREPEND(m, sizeof(struct udpiphdr), M_NOWAIT);
1002         if (m == NULL) {
1003                 error = ENOBUFS;
1004                 goto release;
1005         }
1006
1007         /*
1008          * Fill in mbuf with extended UDP header
1009          * and addresses and length put into network format.
1010          */
1011         ui = mtod(m, struct udpiphdr *);
1012         bzero(ui->ui_x1, sizeof ui->ui_x1);     /* XXX still needed? */
1013         ui->ui_pr = IPPROTO_UDP;
1014
1015         /*
1016          * Set destination address.
1017          */
1018         if (dstaddr != NULL) {                  /* use specified destination */
1019                 ui->ui_dst = sin->sin_addr;
1020                 ui->ui_dport = sin->sin_port;
1021         } else {                                /* use connected destination */
1022                 ui->ui_dst = inp->inp_faddr;
1023                 ui->ui_dport = inp->inp_fport;
1024         }
1025
1026         /*
1027          * Set source address.
1028          */
1029         if (inp->inp_laddr.s_addr == INADDR_ANY ||
1030             IN_MULTICAST(ntohl(inp->inp_laddr.s_addr))) {
1031                 struct sockaddr_in *if_sin;
1032
1033                 if (dstaddr == NULL) {
1034                         /*
1035                          * connect() had (or should have) failed because
1036                          * the interface had no IP address, but the
1037                          * application proceeded to call send() anyways.
1038                          */
1039                         error = ENOTCONN;
1040                         goto release;
1041                 }
1042
1043                 /* Look up outgoing interface. */
1044                 error = in_pcbladdr_find(inp, dstaddr, &if_sin, td, 1);
1045                 if (error)
1046                         goto release;
1047                 ui->ui_src = if_sin->sin_addr;  /* use address of interface */
1048         } else {
1049                 ui->ui_src = inp->inp_laddr;    /* use non-null bound address */
1050         }
1051         ui->ui_sport = inp->inp_lport;
1052         KASSERT(inp->inp_lport != 0, ("inp lport should have been bound"));
1053
1054         /*
1055          * Release the original thread, since it is no longer used
1056          */
1057         if (pru_flags & PRUS_HELDTD) {
1058                 lwkt_rele(td);
1059                 pru_flags &= ~PRUS_HELDTD;
1060         }
1061         /*
1062          * Free the dest address, since it is no longer needed
1063          */
1064         if (pru_flags & PRUS_FREEADDR) {
1065                 kfree(dstaddr, M_SONAME);
1066                 pru_flags &= ~PRUS_FREEADDR;
1067         }
1068
1069         ui->ui_ulen = htons((u_short)len + sizeof(struct udphdr));
1070
1071         /*
1072          * Set up checksum and output datagram.
1073          */
1074         if (udpcksum) {
1075                 ui->ui_sum = in_pseudo(ui->ui_src.s_addr, ui->ui_dst.s_addr,
1076                     htons((u_short)len + sizeof(struct udphdr) + IPPROTO_UDP));
1077                 m->m_pkthdr.csum_flags = CSUM_UDP;
1078                 m->m_pkthdr.csum_data = offsetof(struct udphdr, uh_sum);
1079                 m->m_pkthdr.csum_thlen = sizeof(struct udphdr);
1080         } else {
1081                 ui->ui_sum = 0;
1082         }
1083         ((struct ip *)ui)->ip_len = sizeof(struct udpiphdr) + len;
1084         ((struct ip *)ui)->ip_ttl = inp->inp_ip_ttl;    /* XXX */
1085         ((struct ip *)ui)->ip_tos = inp->inp_ip_tos;    /* XXX */
1086         udp_stat.udps_opackets++;
1087
1088         flags = IP_DEBUGROUTE |
1089             (inp->inp_socket->so_options & (SO_DONTROUTE | SO_BROADCAST));
1090         if (pru_flags & PRUS_DONTROUTE)
1091                 flags |= SO_DONTROUTE;
1092
1093         if (inp->inp_flags & INP_CONNECTED) {
1094                 /*
1095                  * For connected socket, this datagram has already
1096                  * been in the correct netisr; no need to rehash.
1097                  */
1098                 KASSERT(inp->inp_flags & INP_HASH, ("inpcb has no hash"));
1099                 m_sethash(m, inp->inp_hashval);
1100                 goto sendit;
1101         }
1102
1103         hash = udp_addrhash(ui->ui_dst.s_addr, ui->ui_dport,
1104             ui->ui_src.s_addr, ui->ui_sport);
1105         m_sethash(m, hash);
1106
1107         cpu = netisr_hashcpu(hash);
1108         if (cpu != mycpuid) {
1109                 struct mbuf *m_opt = NULL;
1110                 struct netmsg_pru_send *smsg;
1111                 struct lwkt_port *port = netisr_cpuport(cpu);
1112
1113                 /*
1114                  * Not on the CPU that matches this UDP datagram hash;
1115                  * redispatch to the correct CPU to do the ip_output().
1116                  */
1117                 if (inp->inp_options != NULL) {
1118                         /*
1119                          * If there are ip options, then save a copy,
1120                          * since accessing inp_options on other CPUs'
1121                          * is not safe.
1122                          *
1123                          * XXX optimize this?
1124                          */
1125                         m_opt = m_copym(inp->inp_options, 0, M_COPYALL,
1126                             M_WAITOK);
1127                 }
1128                 if ((pru_flags & PRUS_NOREPLY) == 0) {
1129                         /*
1130                          * Change some parts of the original netmsg and
1131                          * forward it to the target netisr.
1132                          *
1133                          * NOTE: so_port MUST NOT be checked in the target
1134                          * netisr.
1135                          */
1136                         smsg = &msg->send;
1137                         smsg->nm_priv = flags; /* ip_output flags */
1138                         smsg->nm_m = m;
1139                         smsg->nm_control = m_opt; /* XXX save ipopt */
1140                         smsg->base.lmsg.ms_flags |= MSGF_IGNSOPORT;
1141                         smsg->base.nm_dispatch = udp_send_redispatch;
1142                         lwkt_forwardmsg(port, &smsg->base.lmsg);
1143                 } else {
1144                         /*
1145                          * Recreate the netmsg, since the original mbuf
1146                          * could have been changed.  And send it to the
1147                          * target netisr.
1148                          *
1149                          * NOTE: so_port MUST NOT be checked in the target
1150                          * netisr.
1151                          */
1152                         smsg = &m->m_hdr.mh_sndmsg;
1153                         netmsg_init(&smsg->base, so, &netisr_apanic_rport,
1154                             MSGF_IGNSOPORT, udp_send_redispatch);
1155                         smsg->nm_priv = flags; /* ip_output flags */
1156                         smsg->nm_flags = pru_flags;
1157                         smsg->nm_m = m;
1158                         smsg->nm_control = m_opt; /* XXX save ipopt */
1159                         lwkt_sendmsg(port, &smsg->base.lmsg);
1160                 }
1161
1162                 /* This UDP datagram is redispatched; done */
1163                 logudp(send_redisp, inp);
1164                 return;
1165         }
1166
1167 sendit:
1168         logudp(send_ipout, inp);
1169         error = ip_output(m, inp->inp_options, &inp->inp_route, flags,
1170             inp->inp_moptions, inp);
1171         m = NULL;
1172
1173 release:
1174         if (m != NULL)
1175                 m_freem(m);
1176
1177         if (pru_flags & PRUS_HELDTD)
1178                 lwkt_rele(td);
1179         if (pru_flags & PRUS_FREEADDR)
1180                 kfree(dstaddr, M_SONAME);
1181         if ((pru_flags & PRUS_NOREPLY) == 0)
1182                 lwkt_replymsg(&msg->send.base.lmsg, error);
1183
1184         logudp(send_end, inp);
1185 }
1186
1187 u_long  udp_sendspace = 9216;           /* really max datagram size */
1188                                         /* 40 1K datagrams */
1189 SYSCTL_INT(_net_inet_udp, UDPCTL_MAXDGRAM, maxdgram, CTLFLAG_RW,
1190     &udp_sendspace, 0, "Maximum outgoing UDP datagram size");
1191
1192 u_long  udp_recvspace = 40 * (1024 +
1193 #ifdef INET6
1194                                       sizeof(struct sockaddr_in6)
1195 #else
1196                                       sizeof(struct sockaddr_in)
1197 #endif
1198                                       );
1199 SYSCTL_INT(_net_inet_udp, UDPCTL_RECVSPACE, recvspace, CTLFLAG_RW,
1200     &udp_recvspace, 0, "Maximum incoming UDP datagram size");
1201
1202 /*
1203  * This should never happen, since UDP socket does not support
1204  * connection acception (SO_ACCEPTCONN, i.e. listen(2)).
1205  */
1206 static void
1207 udp_abort(netmsg_t msg __unused)
1208 {
1209         panic("udp_abort is called");
1210 }
1211
1212 static int
1213 udp_preattach(struct socket *so, int proto __unused, struct pru_attach_info *ai)
1214 {
1215         return soreserve(so, udp_sendspace, udp_recvspace, ai->sb_rlimit);
1216 }
1217
1218 static void
1219 udp_attach(netmsg_t msg)
1220 {
1221         struct socket *so = msg->attach.base.nm_so;
1222         struct pru_attach_info *ai = msg->attach.nm_ai;
1223         struct inpcb *inp;
1224         int error;
1225
1226         KASSERT(so->so_pcb == NULL, ("udp socket attached"));
1227
1228         if (ai != NULL) {
1229                 error = udp_preattach(so, 0 /* don't care */, ai);
1230                 if (error)
1231                         goto out;
1232         } else {
1233                 /* Post attach; do nothing */
1234         }
1235
1236         error = in_pcballoc(so, &udbinfo[mycpuid]);
1237         if (error)
1238                 goto out;
1239
1240         inp = so->so_pcb;
1241         inp->inp_flags |= INP_DIRECT_DETACH;
1242         inp->inp_ip_ttl = ip_defttl;
1243         error = 0;
1244 out:
1245         lwkt_replymsg(&msg->attach.base.lmsg, error);
1246 }
1247
1248 static void
1249 udp_inswildcard_replymsg(netmsg_t msg)
1250 {
1251         lwkt_msg_t lmsg = &msg->lmsg;
1252
1253         if (lmsg->ms_flags & MSGF_UDP_SEND) {
1254                 udp_send(msg);
1255                 /* msg is replied by udp_send() */
1256         } else {
1257                 lwkt_replymsg(lmsg, lmsg->ms_error);
1258         }
1259 }
1260
1261 static void
1262 udp_soreuseport_dispatch(netmsg_t msg)
1263 {
1264         /* This inpcb has already been in the wildcard hash. */
1265         in_pcblink_flags(msg->base.nm_so->so_pcb, &udbinfo[mycpuid], 0);
1266         udp_inswildcard_replymsg(msg);
1267 }
1268
1269 static void
1270 udp_sosetport(struct lwkt_msg *msg, lwkt_port_t port)
1271 {
1272         sosetport(((struct netmsg_base *)msg)->nm_so, port);
1273 }
1274
1275 static boolean_t
1276 udp_inswildcardhash_oncpu(struct inpcb *inp, struct netmsg_base *msg)
1277 {
1278         int cpu;
1279
1280         KASSERT(inp->inp_pcbinfo == &udbinfo[mycpuid],
1281             ("not on owner cpu"));
1282
1283         in_pcbinswildcardhash(inp);
1284         for (cpu = 0; cpu < netisr_ncpus; ++cpu) {
1285                 if (cpu == mycpuid) {
1286                         /*
1287                          * This inpcb has been inserted by the above
1288                          * in_pcbinswildcardhash().
1289                          */
1290                         continue;
1291                 }
1292                 in_pcbinswildcardhash_oncpu(inp, &udbinfo[cpu]);
1293         }
1294
1295         /* NOTE: inp_lgrpindex is _not_ assigned in jail. */
1296         if ((inp->inp_socket->so_options & SO_REUSEPORT) &&
1297             inp->inp_lgrpindex >= 0) {
1298                 /*
1299                  * For SO_REUSEPORT socket, redistribute it based on its
1300                  * local group index.
1301                  */
1302                 cpu = inp->inp_lgrpindex % netisr_ncpus;
1303                 if (cpu != mycpuid) {
1304                         struct lwkt_port *port = netisr_cpuport(cpu);
1305                         lwkt_msg_t lmsg = &msg->lmsg;
1306
1307                         /*
1308                          * We are moving the protocol processing port the
1309                          * socket is on, we have to unlink here and re-link
1310                          * on the target cpu (this inpcb is still left in
1311                          * the wildcard hash).
1312                          */
1313                         in_pcbunlink_flags(inp, &udbinfo[mycpuid], 0);
1314                         msg->nm_dispatch = udp_soreuseport_dispatch;
1315
1316                         /*
1317                          * See the related comment in tcp_usrreq.c
1318                          * tcp_connect()
1319                          */
1320                         lwkt_setmsg_receipt(lmsg, udp_sosetport);
1321                         lwkt_forwardmsg(port, lmsg);
1322                         return TRUE; /* forwarded */
1323                 }
1324         }
1325         return FALSE;
1326 }
1327
1328 static void
1329 udp_inswildcardhash_dispatch(netmsg_t msg)
1330 {
1331         struct inpcb *inp = msg->base.nm_so->so_pcb;
1332         boolean_t forwarded;
1333
1334         KASSERT(inp->inp_lport != 0, ("local port not set yet"));
1335         KASSERT(udp_lportcpu(inp->inp_lport) == mycpuid, ("not target cpu"));
1336
1337         in_pcblink(inp, &udbinfo[mycpuid]);
1338
1339         forwarded = udp_inswildcardhash_oncpu(inp, &msg->base);
1340         if (forwarded) {
1341                 /* The message is further forwarded, so we are done here. */
1342                 return;
1343         }
1344         udp_inswildcard_replymsg(msg);
1345 }
1346
1347 static boolean_t
1348 udp_inswildcardhash(struct inpcb *inp, struct netmsg_base *msg, int error)
1349 {
1350         lwkt_msg_t lmsg = &msg->lmsg;
1351         int cpu;
1352
1353         ASSERT_INP_NOTINHASH(inp);
1354
1355         /* This inpcb could no longer be directly detached */
1356         inp->inp_flags &= ~INP_DIRECT_DETACH;
1357
1358         /*
1359          * Always clear the route cache, so we don't need to
1360          * worry about any owner CPU changes later.
1361          */
1362         in_pcbresetroute(inp);
1363
1364         KASSERT(inp->inp_lport != 0, ("local port not set yet"));
1365         cpu = udp_lportcpu(inp->inp_lport);
1366
1367         lmsg->ms_error = error;
1368         if (cpu != mycpuid) {
1369                 struct lwkt_port *port = netisr_cpuport(cpu);
1370
1371                 /*
1372                  * We are moving the protocol processing port the socket
1373                  * is on, we have to unlink here and re-link on the
1374                  * target cpu.
1375                  */
1376                 in_pcbunlink(inp, &udbinfo[mycpuid]);
1377                 msg->nm_dispatch = udp_inswildcardhash_dispatch;
1378
1379                 /* See the related comment in tcp_usrreq.c tcp_connect() */
1380                 lwkt_setmsg_receipt(lmsg, udp_sosetport);
1381                 lwkt_forwardmsg(port, lmsg);
1382                 return TRUE; /* forwarded */
1383         }
1384
1385         return udp_inswildcardhash_oncpu(inp, msg);
1386 }
1387
1388 static void
1389 udp_bind(netmsg_t msg)
1390 {
1391         struct socket *so = msg->bind.base.nm_so;
1392         struct inpcb *inp;
1393         int error;
1394
1395         inp = so->so_pcb;
1396         if (inp) {
1397                 struct sockaddr *nam = msg->bind.nm_nam;
1398                 struct thread *td = msg->bind.nm_td;
1399                 struct sockaddr_in *sin;
1400                 lwkt_port_t port;
1401                 int cpu;
1402
1403                 /*
1404                  * Check "already bound" here (in_pcbbind() does the same
1405                  * check though), so we don't forward a connected/bound
1406                  * socket randomly which would panic in the following
1407                  * in_pcbunlink().
1408                  */
1409                 if (inp->inp_lport != 0 ||
1410                     inp->inp_laddr.s_addr != INADDR_ANY) {
1411                         error = EINVAL; /* already bound */
1412                         goto done;
1413                 }
1414
1415                 if (nam->sa_len != sizeof(*sin)) {
1416                         error = EINVAL;
1417                         goto done;
1418                 }
1419                 sin = (struct sockaddr_in *)nam;
1420
1421                 cpu = udp_lportcpu(sin->sin_port);
1422                 port = netisr_cpuport(cpu);
1423
1424                 /*
1425                  * See the related comment in tcp_usrreq.c tcp_usr_bind().
1426                  * The exception is that we use local port based netisr
1427                  * to serialize in_pcbbind().
1428                  */
1429                 if (&curthread->td_msgport != port) {
1430                         lwkt_msg_t lmsg = &msg->bind.base.lmsg;
1431
1432                         KASSERT((msg->bind.nm_flags & PRUB_RELINK) == 0,
1433                             ("already asked to relink"));
1434
1435                         in_pcbunlink(so->so_pcb, &udbinfo[mycpuid]);
1436                         msg->bind.nm_flags |= PRUB_RELINK;
1437
1438                         /*
1439                          * See the related comment in tcp_usrreq.c
1440                          * tcp_connect().
1441                          */
1442                         lwkt_setmsg_receipt(lmsg, udp_sosetport);
1443                         lwkt_forwardmsg(port, lmsg);
1444                         /* msg invalid now */
1445                         return;
1446                 }
1447                 KASSERT(so->so_port == port, ("so_port is not netisr%d", cpu));
1448
1449                 if (msg->bind.nm_flags & PRUB_RELINK) {
1450                         msg->bind.nm_flags &= ~PRUB_RELINK;
1451                         in_pcblink(so->so_pcb, &udbinfo[mycpuid]);
1452                 }
1453                 KASSERT(inp->inp_pcbinfo == &udbinfo[cpu],
1454                     ("pcbinfo is not udbinfo%d", cpu));
1455
1456                 error = in_pcbbind(inp, nam, td);
1457                 if (error == 0) {
1458                         boolean_t forwarded;
1459
1460                         if (sin->sin_addr.s_addr != INADDR_ANY)
1461                                 inp->inp_flags |= INP_WASBOUND_NOTANY;
1462
1463                         forwarded = udp_inswildcardhash(inp,
1464                             &msg->bind.base, 0);
1465                         if (forwarded) {
1466                                 /*
1467                                  * The message is further forwarded, so
1468                                  * we are done here.
1469                                  */
1470                                 return;
1471                         }
1472                 }
1473         } else {
1474                 error = EINVAL;
1475         }
1476 done:
1477         lwkt_replymsg(&msg->bind.base.lmsg, error);
1478 }
1479
1480 static int
1481 udp_preconnect(struct socket *so, const struct sockaddr *nam __unused,
1482     struct thread *td __unused)
1483 {
1484         sosetstate(so, SS_ISCONNECTED);         /* XXX */
1485         return 0;
1486 }
1487
1488 static void
1489 udp_connect(netmsg_t msg)
1490 {
1491         struct socket *so = msg->connect.base.nm_so;
1492         struct sockaddr *nam = msg->connect.nm_nam;
1493         struct thread *td = msg->connect.nm_td;
1494         struct inpcb *inp;
1495         struct sockaddr_in *sin = (struct sockaddr_in *)nam;
1496         struct sockaddr_in *if_sin;
1497         struct lwkt_port *port;
1498         uint16_t hash;
1499         int error;
1500
1501         KKASSERT(msg->connect.nm_m == NULL);
1502
1503         inp = so->so_pcb;
1504         if (inp == NULL) {
1505                 error = EINVAL;
1506                 goto out;
1507         }
1508
1509         if (msg->connect.nm_flags & PRUC_RECONNECT) {
1510                 msg->connect.nm_flags &= ~PRUC_RECONNECT;
1511                 in_pcblink(inp, &udbinfo[mycpuid]);
1512         }
1513
1514         if (inp->inp_faddr.s_addr != INADDR_ANY) {
1515                 error = EISCONN;
1516                 goto out;
1517         }
1518         error = 0;
1519
1520         /*
1521          * Bind if we have to
1522          */
1523         if (inp->inp_lport == 0) {
1524                 error = in_pcbbind(inp, NULL, td);
1525                 if (error)
1526                         goto out;
1527         }
1528
1529         /*
1530          * Calculate the correct protocol processing thread.  The connect
1531          * operation must run there.
1532          */
1533         error = in_pcbladdr(inp, nam, &if_sin, td);
1534         if (error)
1535                 goto out;
1536         if (!prison_remote_ip(td, nam)) {
1537                 error = EAFNOSUPPORT; /* IPv6 only jail */
1538                 goto out;
1539         }
1540
1541         hash = udp_addrhash(sin->sin_addr.s_addr, sin->sin_port,
1542             inp->inp_laddr.s_addr != INADDR_ANY ?
1543             inp->inp_laddr.s_addr : if_sin->sin_addr.s_addr, inp->inp_lport);
1544         port = netisr_hashport(hash);
1545         if (port != &curthread->td_msgport) {
1546                 lwkt_msg_t lmsg = &msg->connect.base.lmsg;
1547                 int nm_flags = PRUC_RECONNECT;
1548
1549                 /*
1550                  * in_pcbladdr() may have allocated a route entry for us
1551                  * on the current CPU, but we need a route entry on the
1552                  * inpcb's owner CPU, so free it here.
1553                  */
1554                 in_pcbresetroute(inp);
1555
1556                 if (inp->inp_flags & INP_WILDCARD) {
1557                         /*
1558                          * Remove this inpcb from the wildcard hash before
1559                          * the socket's msgport changes.
1560                          */
1561                         udp_remwildcardhash(inp);
1562                 }
1563
1564                 if (so->so_orig_port == NULL) {
1565                         /*
1566                          * First time change protocol processing port.
1567                          * Save the current port for synchronization upon
1568                          * udp_detach.
1569                          */
1570                         so->so_orig_port = &curthread->td_msgport;
1571                 } else {
1572                         /*
1573                          * We have changed protocol processing port more
1574                          * than once.  We could not do direct detach
1575                          * anymore, because we lose the track of the
1576                          * original protocol processing ports to perform
1577                          * synchronization upon udp_detach.  This should
1578                          * be rare though.
1579                          */
1580                         inp->inp_flags &= ~INP_DIRECT_DETACH;
1581                 }
1582
1583                 /*
1584                  * We are moving the protocol processing port the socket
1585                  * is on, we have to unlink here and re-link on the
1586                  * target cpu.
1587                  */
1588                 in_pcbunlink(inp, &udbinfo[mycpuid]);
1589                 msg->connect.nm_flags |= nm_flags;
1590
1591                 /* See the related comment in tcp_usrreq.c tcp_connect() */
1592                 lwkt_setmsg_receipt(lmsg, udp_sosetport);
1593                 lwkt_forwardmsg(port, lmsg);
1594                 /* msg invalid now */
1595                 return;
1596         }
1597         error = udp_connect_oncpu(inp, sin, if_sin, hash);
1598 out:
1599         if (msg->connect.nm_flags & PRUC_HELDTD)
1600                 lwkt_rele(td);
1601         if (error && (msg->connect.nm_flags & PRUC_ASYNC)) {
1602                 if (inp->inp_lport == 0) {
1603                         /*
1604                          * As long as we have the local port, it is fine
1605                          * for connect to fail, e.g. disconnect.
1606                          */
1607                         so->so_error = error;
1608                 }
1609                 soclrstate(so, SS_ISCONNECTED);
1610                 /*
1611                  * Wake up callers blocked on this socket to make sure
1612                  * that they can see this error.
1613                  *
1614                  * NOTE:
1615                  * sodisconnected() can't be used here, which bricks
1616                  * sending and receiving.
1617                  */
1618                 wakeup(&so->so_timeo);
1619                 sowwakeup(so);
1620                 sorwakeup(so);
1621         }
1622         if (error && inp != NULL && inp->inp_lport != 0 &&
1623             (inp->inp_flags & INP_WILDCARD) == 0) {
1624                 boolean_t forwarded;
1625
1626                 /* Connect failed; put it to wildcard hash. */
1627                 forwarded = udp_inswildcardhash(inp, &msg->connect.base,
1628                     error);
1629                 if (forwarded) {
1630                         /*
1631                          * The message is further forwarded, so we are done
1632                          * here.
1633                          */
1634                         return;
1635                 }
1636         }
1637         lwkt_replymsg(&msg->connect.base.lmsg, error);
1638 }
1639
1640 static void
1641 udp_remwildcardhash(struct inpcb *inp)
1642 {
1643         int cpu;
1644
1645         KASSERT(inp->inp_pcbinfo == &udbinfo[mycpuid],
1646             ("not on owner cpu"));
1647
1648         for (cpu = 0; cpu < netisr_ncpus; ++cpu) {
1649                 if (cpu == mycpuid) {
1650                         /*
1651                          * This inpcb will be removed by the later
1652                          * in_pcbremwildcardhash().
1653                          */
1654                         continue;
1655                 }
1656                 in_pcbremwildcardhash_oncpu(inp, &udbinfo[cpu]);
1657         }
1658         in_pcbremwildcardhash(inp);
1659 }
1660
1661 static int
1662 udp_connect_oncpu(struct inpcb *inp, struct sockaddr_in *sin,
1663     struct sockaddr_in *if_sin, uint16_t hash)
1664 {
1665         struct socket *so = inp->inp_socket;
1666         struct inpcb *oinp;
1667
1668         oinp = in_pcblookup_hash(inp->inp_pcbinfo,
1669             sin->sin_addr, sin->sin_port,
1670             inp->inp_laddr.s_addr != INADDR_ANY ?
1671             inp->inp_laddr : if_sin->sin_addr, inp->inp_lport, FALSE, NULL);
1672         if (oinp != NULL)
1673                 return EADDRINUSE;
1674
1675         /*
1676          * No more errors can occur, finish adjusting the socket
1677          * and change the processing port to reflect the connected
1678          * socket.  Once set we can no longer safely mess with the
1679          * socket.
1680          */
1681
1682         if (inp->inp_flags & INP_WILDCARD)
1683                 udp_remwildcardhash(inp);
1684
1685         if (inp->inp_laddr.s_addr == INADDR_ANY)
1686                 inp->inp_laddr = if_sin->sin_addr;
1687         inp->inp_faddr = sin->sin_addr;
1688         inp->inp_fport = sin->sin_port;
1689         in_pcbinsconnhash(inp);
1690
1691         inp->inp_flags |= INP_HASH;
1692         inp->inp_hashval = hash;
1693
1694         soisconnected(so);
1695
1696         return 0;
1697 }
1698
1699 static void
1700 udp_detach2(struct socket *so)
1701 {
1702         in_pcbdetach(so->so_pcb);
1703         sodiscard(so);
1704         sofree(so);
1705 }
1706
1707 static void
1708 udp_detach_final_dispatch(netmsg_t msg)
1709 {
1710         udp_detach2(msg->base.nm_so);
1711 }
1712
1713 static void
1714 udp_detach_oncpu_dispatch(netmsg_t msg)
1715 {
1716         struct netmsg_base *clomsg = &msg->base;
1717         struct socket *so = clomsg->nm_so;
1718         struct inpcb *inp = so->so_pcb;
1719         struct thread *td = curthread;
1720         int nextcpu, cpuid = mycpuid;
1721
1722         KASSERT(td->td_type == TD_TYPE_NETISR, ("not in netisr"));
1723
1724         if (inp->inp_flags & INP_WILDCARD) {
1725                 /*
1726                  * This inp will be removed on the inp's
1727                  * owner CPU later, so don't do it now.
1728                  */
1729                 if (&td->td_msgport != so->so_port)
1730                         in_pcbremwildcardhash_oncpu(inp, &udbinfo[cpuid]);
1731         }
1732
1733         if (cpuid == 0) {
1734                 /*
1735                  * Free and clear multicast socket option,
1736                  * which is only accessed in netisr0.
1737                  */
1738                 ip_freemoptions(inp->inp_moptions);
1739                 inp->inp_moptions = NULL;
1740         }
1741
1742         nextcpu = cpuid + 1;
1743         if (nextcpu < netisr_ncpus) {
1744                 lwkt_forwardmsg(netisr_cpuport(nextcpu), &clomsg->lmsg);
1745         } else {
1746                 /*
1747                  * No one could see this inpcb now; destroy this
1748                  * inpcb in its owner netisr.
1749                  */
1750                 netmsg_init(clomsg, so, &netisr_apanic_rport, 0,
1751                     udp_detach_final_dispatch);
1752                 lwkt_sendmsg(so->so_port, &clomsg->lmsg);
1753         }
1754 }
1755
1756 static void
1757 udp_detach_syncorig_dispatch(netmsg_t msg)
1758 {
1759         struct netmsg_base *clomsg = &msg->base;
1760         struct socket *so = clomsg->nm_so;
1761
1762         /*
1763          * Original protocol processing port is synchronized;
1764          * destroy this inpcb in its owner netisr.
1765          */
1766         netmsg_init(clomsg, so, &netisr_apanic_rport, 0,
1767             udp_detach_final_dispatch);
1768         lwkt_sendmsg(so->so_port, &clomsg->lmsg);
1769 }
1770
1771 static void
1772 udp_detach(netmsg_t msg)
1773 {
1774         struct socket *so = msg->detach.base.nm_so;
1775         struct netmsg_base *clomsg;
1776         struct inpcb *inp;
1777
1778         inp = so->so_pcb;
1779         if (inp == NULL) {
1780                 lwkt_replymsg(&msg->detach.base.lmsg, EINVAL);
1781                 return;
1782         }
1783
1784         /*
1785          * Reply EJUSTRETURN ASAP, we will call sodiscard() and
1786          * sofree() later.
1787          */
1788         lwkt_replymsg(&msg->detach.base.lmsg, EJUSTRETURN);
1789
1790         if (netisr_ncpus == 1) {
1791                 /* Only one CPU, detach the inpcb directly. */
1792                 udp_detach2(so);
1793                 return;
1794         }
1795
1796         /*
1797          * Remove this inpcb from the inpcb list first, so that
1798          * no one could find this inpcb from the inpcb list.
1799          */
1800         in_pcbofflist(inp);
1801
1802         /*
1803          * Remove this inpcb from the local port hash directly
1804          * here, so that its bound local port could be recycled
1805          * timely.
1806          */
1807         in_pcbremporthash(inp);
1808
1809         if (inp->inp_flags & INP_DIRECT_DETACH) {
1810                 /*
1811                  * Direct detaching is allowed
1812                  */
1813                 KASSERT((inp->inp_flags & INP_WILDCARD) == 0,
1814                     ("in the wildcardhash"));
1815                 KASSERT(inp->inp_moptions == NULL, ("has mcast options"));
1816                 if (so->so_orig_port == NULL) {
1817                         udp_detach2(so);
1818                 } else {
1819                         /*
1820                          * Protocol processing port changed once, so
1821                          * we need to make sure that there are nothing
1822                          * left on the original protocol processing
1823                          * port before we destroy this socket and inpcb.
1824                          * This is more lightweight than going through
1825                          * all UDP processing netisrs.
1826                          */
1827                         clomsg = &so->so_clomsg;
1828                         netmsg_init(clomsg, so, &netisr_apanic_rport,
1829                             MSGF_IGNSOPORT, udp_detach_syncorig_dispatch);
1830                         lwkt_sendmsg(so->so_orig_port, &clomsg->lmsg);
1831                 }
1832                 return;
1833         }
1834
1835         /*
1836          * Go through netisrs which process UDP to make sure
1837          * no one could find this inpcb anymore.
1838          */
1839         clomsg = &so->so_clomsg;
1840         netmsg_init(clomsg, so, &netisr_apanic_rport, MSGF_IGNSOPORT,
1841             udp_detach_oncpu_dispatch);
1842         lwkt_sendmsg(netisr_cpuport(0), &clomsg->lmsg);
1843 }
1844
1845 static void
1846 udp_disconnect(netmsg_t msg)
1847 {
1848         struct socket *so = msg->disconnect.base.nm_so;
1849         struct inpcb *inp;
1850         boolean_t forwarded;
1851         int error = 0;
1852
1853         inp = so->so_pcb;
1854         if (inp == NULL) {
1855                 error = EINVAL;
1856                 goto out;
1857         }
1858         if (inp->inp_faddr.s_addr == INADDR_ANY) {
1859                 error = ENOTCONN;
1860                 goto out;
1861         }
1862
1863         soclrstate(so, SS_ISCONNECTED);         /* XXX */
1864
1865         in_pcbdisconnect(inp);
1866         inp->inp_flags &= ~INP_HASH;
1867
1868         /*
1869          * Follow traditional BSD behavior and retain the local port
1870          * binding.  But, fix the old misbehavior of overwriting any
1871          * previously bound local address.
1872          */
1873         if (!(inp->inp_flags & INP_WASBOUND_NOTANY))
1874                 inp->inp_laddr.s_addr = INADDR_ANY;
1875
1876         if (so->so_state & SS_ISCLOSING) {
1877                 /*
1878                  * If this socket is being closed, there is no need
1879                  * to put this socket back into wildcard hash table.
1880                  */
1881                 error = 0;
1882                 goto out;
1883         }
1884
1885         forwarded = udp_inswildcardhash(inp, &msg->disconnect.base, 0);
1886         if (forwarded) {
1887                 /*
1888                  * The message is further forwarded, so we are done
1889                  * here.
1890                  */
1891                 return;
1892         }
1893 out:
1894         lwkt_replymsg(&msg->disconnect.base.lmsg, error);
1895 }
1896
1897 void
1898 udp_shutdown(netmsg_t msg)
1899 {
1900         struct socket *so = msg->shutdown.base.nm_so;
1901         struct inpcb *inp;
1902         int error;
1903
1904         inp = so->so_pcb;
1905         if (inp) {
1906                 socantsendmore(so);
1907                 error = 0;
1908         } else {
1909                 error = EINVAL;
1910         }
1911         lwkt_replymsg(&msg->shutdown.base.lmsg, error);
1912 }
1913
1914 struct pr_usrreqs udp_usrreqs = {
1915         .pru_abort = udp_abort,
1916         .pru_accept = pr_generic_notsupp,
1917         .pru_attach = udp_attach,
1918         .pru_bind = udp_bind,
1919         .pru_connect = udp_connect,
1920         .pru_connect2 = pr_generic_notsupp,
1921         .pru_control = in_control_dispatch,
1922         .pru_detach = udp_detach,
1923         .pru_disconnect = udp_disconnect,
1924         .pru_listen = pr_generic_notsupp,
1925         .pru_peeraddr = in_setpeeraddr_dispatch,
1926         .pru_rcvd = pr_generic_notsupp,
1927         .pru_rcvoob = pr_generic_notsupp,
1928         .pru_send = udp_send,
1929         .pru_sense = pru_sense_null,
1930         .pru_shutdown = udp_shutdown,
1931         .pru_sockaddr = in_setsockaddr_dispatch,
1932         .pru_sosend = sosendudp,
1933         .pru_soreceive = soreceive,
1934         .pru_preconnect = udp_preconnect,
1935         .pru_preattach = udp_preattach
1936 };