xref: /dragonfly/sys/net/rtsock.c (revision 7bc7e232)
1 /*
2  * Copyright (c) 2004, 2005 The DragonFly Project.  All rights reserved.
3  *
4  * This code is derived from software contributed to The DragonFly Project
5  * by Jeffrey M. Hsu.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  * 3. Neither the name of The DragonFly Project nor the names of its
16  *    contributors may be used to endorse or promote products derived
17  *    from this software without specific, prior written permission.
18  *
19  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
20  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
21  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
22  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE
23  * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
24  * INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING,
25  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
26  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
27  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
28  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
29  * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  */
32 
33 /*
34  * Copyright (c) 1988, 1991, 1993
35  *	The Regents of the University of California.  All rights reserved.
36  *
37  * Redistribution and use in source and binary forms, with or without
38  * modification, are permitted provided that the following conditions
39  * are met:
40  * 1. Redistributions of source code must retain the above copyright
41  *    notice, this list of conditions and the following disclaimer.
42  * 2. Redistributions in binary form must reproduce the above copyright
43  *    notice, this list of conditions and the following disclaimer in the
44  *    documentation and/or other materials provided with the distribution.
45  * 3. All advertising materials mentioning features or use of this software
46  *    must display the following acknowledgement:
47  *	This product includes software developed by the University of
48  *	California, Berkeley and its contributors.
49  * 4. Neither the name of the University nor the names of its contributors
50  *    may be used to endorse or promote products derived from this software
51  *    without specific prior written permission.
52  *
53  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
54  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
55  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
56  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
57  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
58  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
59  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
60  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
61  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
62  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
63  * SUCH DAMAGE.
64  *
65  *	@(#)rtsock.c	8.7 (Berkeley) 10/12/95
66  * $FreeBSD: src/sys/net/rtsock.c,v 1.44.2.11 2002/12/04 14:05:41 ru Exp $
67  * $DragonFly: src/sys/net/rtsock.c,v 1.40 2007/08/09 01:10:05 dillon Exp $
68  */
69 
70 #include "opt_sctp.h"
71 
72 #include <sys/param.h>
73 #include <sys/systm.h>
74 #include <sys/kernel.h>
75 #include <sys/sysctl.h>
76 #include <sys/proc.h>
77 #include <sys/malloc.h>
78 #include <sys/mbuf.h>
79 #include <sys/protosw.h>
80 #include <sys/socket.h>
81 #include <sys/socketvar.h>
82 #include <sys/domain.h>
83 #include <sys/thread2.h>
84 
85 #include <net/if.h>
86 #include <net/route.h>
87 #include <net/raw_cb.h>
88 #include <net/netmsg2.h>
89 
90 #ifdef SCTP
91 extern void sctp_add_ip_address(struct ifaddr *ifa);
92 extern void sctp_delete_ip_address(struct ifaddr *ifa);
93 #endif /* SCTP */
94 
95 MALLOC_DEFINE(M_RTABLE, "routetbl", "routing tables");
96 
97 static struct route_cb {
98 	int	ip_count;
99 	int	ip6_count;
100 	int	ipx_count;
101 	int	ns_count;
102 	int	any_count;
103 } route_cb;
104 
105 static const struct sockaddr route_src = { 2, PF_ROUTE, };
106 
107 struct walkarg {
108 	int	w_tmemsize;
109 	int	w_op, w_arg;
110 	void	*w_tmem;
111 	struct sysctl_req *w_req;
112 };
113 
114 static struct mbuf *
115 		rt_msg_mbuf (int, struct rt_addrinfo *);
116 static void	rt_msg_buffer (int, struct rt_addrinfo *, void *buf, int len);
117 static int	rt_msgsize (int type, struct rt_addrinfo *rtinfo);
118 static int	rt_xaddrs (char *, char *, struct rt_addrinfo *);
119 static int	sysctl_dumpentry (struct radix_node *rn, void *vw);
120 static int	sysctl_iflist (int af, struct walkarg *w);
121 static int	route_output(struct mbuf *, struct socket *, ...);
122 static void	rt_setmetrics (u_long, struct rt_metrics *,
123 			       struct rt_metrics *);
124 
125 /*
126  * It really doesn't make any sense at all for this code to share much
127  * with raw_usrreq.c, since its functionality is so restricted.  XXX
128  */
129 static int
130 rts_abort(struct socket *so)
131 {
132 	int error;
133 
134 	crit_enter();
135 	error = raw_usrreqs.pru_abort(so);
136 	crit_exit();
137 	return error;
138 }
139 
140 /* pru_accept is EOPNOTSUPP */
141 
142 static int
143 rts_attach(struct socket *so, int proto, struct pru_attach_info *ai)
144 {
145 	struct rawcb *rp;
146 	int error;
147 
148 	if (sotorawcb(so) != NULL)
149 		return EISCONN;	/* XXX panic? */
150 
151 	rp = kmalloc(sizeof *rp, M_PCB, M_WAITOK | M_ZERO);
152 	if (rp == NULL)
153 		return ENOBUFS;
154 
155 	/*
156 	 * The critical section is necessary to block protocols from sending
157 	 * error notifications (like RTM_REDIRECT or RTM_LOSING) while
158 	 * this PCB is extant but incompletely initialized.
159 	 * Probably we should try to do more of this work beforehand and
160 	 * eliminate the critical section.
161 	 */
162 	crit_enter();
163 	so->so_pcb = rp;
164 	error = raw_attach(so, proto, ai->sb_rlimit);
165 	rp = sotorawcb(so);
166 	if (error) {
167 		crit_exit();
168 		kfree(rp, M_PCB);
169 		return error;
170 	}
171 	switch(rp->rcb_proto.sp_protocol) {
172 	case AF_INET:
173 		route_cb.ip_count++;
174 		break;
175 	case AF_INET6:
176 		route_cb.ip6_count++;
177 		break;
178 	case AF_IPX:
179 		route_cb.ipx_count++;
180 		break;
181 	case AF_NS:
182 		route_cb.ns_count++;
183 		break;
184 	}
185 	rp->rcb_faddr = &route_src;
186 	route_cb.any_count++;
187 	soisconnected(so);
188 	so->so_options |= SO_USELOOPBACK;
189 	crit_exit();
190 	return 0;
191 }
192 
193 static int
194 rts_bind(struct socket *so, struct sockaddr *nam, struct thread *td)
195 {
196 	int error;
197 
198 	crit_enter();
199 	error = raw_usrreqs.pru_bind(so, nam, td); /* xxx just EINVAL */
200 	crit_exit();
201 	return error;
202 }
203 
204 static int
205 rts_connect(struct socket *so, struct sockaddr *nam, struct thread *td)
206 {
207 	int error;
208 
209 	crit_enter();
210 	error = raw_usrreqs.pru_connect(so, nam, td); /* XXX just EINVAL */
211 	crit_exit();
212 	return error;
213 }
214 
215 /* pru_connect2 is EOPNOTSUPP */
216 /* pru_control is EOPNOTSUPP */
217 
218 static int
219 rts_detach(struct socket *so)
220 {
221 	struct rawcb *rp = sotorawcb(so);
222 	int error;
223 
224 	crit_enter();
225 	if (rp != NULL) {
226 		switch(rp->rcb_proto.sp_protocol) {
227 		case AF_INET:
228 			route_cb.ip_count--;
229 			break;
230 		case AF_INET6:
231 			route_cb.ip6_count--;
232 			break;
233 		case AF_IPX:
234 			route_cb.ipx_count--;
235 			break;
236 		case AF_NS:
237 			route_cb.ns_count--;
238 			break;
239 		}
240 		route_cb.any_count--;
241 	}
242 	error = raw_usrreqs.pru_detach(so);
243 	crit_exit();
244 	return error;
245 }
246 
247 static int
248 rts_disconnect(struct socket *so)
249 {
250 	int error;
251 
252 	crit_enter();
253 	error = raw_usrreqs.pru_disconnect(so);
254 	crit_exit();
255 	return error;
256 }
257 
258 /* pru_listen is EOPNOTSUPP */
259 
260 static int
261 rts_peeraddr(struct socket *so, struct sockaddr **nam)
262 {
263 	int error;
264 
265 	crit_enter();
266 	error = raw_usrreqs.pru_peeraddr(so, nam);
267 	crit_exit();
268 	return error;
269 }
270 
271 /* pru_rcvd is EOPNOTSUPP */
272 /* pru_rcvoob is EOPNOTSUPP */
273 
274 static int
275 rts_send(struct socket *so, int flags, struct mbuf *m, struct sockaddr *nam,
276 	 struct mbuf *control, struct thread *td)
277 {
278 	int error;
279 
280 	crit_enter();
281 	error = raw_usrreqs.pru_send(so, flags, m, nam, control, td);
282 	crit_exit();
283 	return error;
284 }
285 
286 /* pru_sense is null */
287 
288 static int
289 rts_shutdown(struct socket *so)
290 {
291 	int error;
292 
293 	crit_enter();
294 	error = raw_usrreqs.pru_shutdown(so);
295 	crit_exit();
296 	return error;
297 }
298 
299 static int
300 rts_sockaddr(struct socket *so, struct sockaddr **nam)
301 {
302 	int error;
303 
304 	crit_enter();
305 	error = raw_usrreqs.pru_sockaddr(so, nam);
306 	crit_exit();
307 	return error;
308 }
309 
310 static struct pr_usrreqs route_usrreqs = {
311 	.pru_abort = rts_abort,
312 	.pru_accept = pru_accept_notsupp,
313 	.pru_attach = rts_attach,
314 	.pru_bind = rts_bind,
315 	.pru_connect = rts_connect,
316 	.pru_connect2 = pru_connect2_notsupp,
317 	.pru_control = pru_control_notsupp,
318 	.pru_detach = rts_detach,
319 	.pru_disconnect = rts_disconnect,
320 	.pru_listen = pru_listen_notsupp,
321 	.pru_peeraddr = rts_peeraddr,
322 	.pru_rcvd = pru_rcvd_notsupp,
323 	.pru_rcvoob = pru_rcvoob_notsupp,
324 	.pru_send = rts_send,
325 	.pru_sense = pru_sense_null,
326 	.pru_shutdown = rts_shutdown,
327 	.pru_sockaddr = rts_sockaddr,
328 	.pru_sosend = sosend,
329 	.pru_soreceive = soreceive,
330 	.pru_sopoll = sopoll
331 };
332 
333 static __inline sa_family_t
334 familyof(struct sockaddr *sa)
335 {
336 	return (sa != NULL ? sa->sa_family : 0);
337 }
338 
339 /*
340  * Routing socket input function.  The packet must be serialized onto cpu 0.
341  * We use the cpu0_soport() netisr processing loop to handle it.
342  *
343  * This looks messy but it means that anyone, including interrupt code,
344  * can send a message to the routing socket.
345  */
346 static void
347 rts_input_handler(struct netmsg *msg)
348 {
349 	static const struct sockaddr route_dst = { 2, PF_ROUTE, };
350 	struct sockproto route_proto;
351 	struct netmsg_packet *pmsg;
352 	struct mbuf *m;
353 	sa_family_t family;
354 
355 	pmsg = (void *)msg;
356 	m = pmsg->nm_packet;
357 	family = pmsg->nm_netmsg.nm_lmsg.u.ms_result;
358 	route_proto.sp_family = PF_ROUTE;
359 	route_proto.sp_protocol = family;
360 
361 	raw_input(m, &route_proto, &route_src, &route_dst);
362 }
363 
364 static void
365 rts_input(struct mbuf *m, sa_family_t family)
366 {
367 	struct netmsg_packet *pmsg;
368 	lwkt_port_t port;
369 
370 	port = cpu0_soport(NULL, NULL, 0);
371 	pmsg = &m->m_hdr.mh_netmsg;
372 	netmsg_init(&pmsg->nm_netmsg, &netisr_apanic_rport,
373 		    0, rts_input_handler);
374 	pmsg->nm_packet = m;
375 	pmsg->nm_netmsg.nm_lmsg.u.ms_result = family;
376 	lwkt_sendmsg(port, &pmsg->nm_netmsg.nm_lmsg);
377 }
378 
379 static void *
380 reallocbuf(void *ptr, size_t len, size_t olen)
381 {
382 	void *newptr;
383 
384 	newptr = kmalloc(len, M_RTABLE, M_INTWAIT | M_NULLOK);
385 	if (newptr == NULL)
386 		return NULL;
387 	bcopy(ptr, newptr, olen);
388 	kfree(ptr, M_RTABLE);
389 	return (newptr);
390 }
391 
392 /*
393  * Internal helper routine for route_output().
394  */
395 static int
396 fillrtmsg(struct rt_msghdr **prtm, struct rtentry *rt,
397 	  struct rt_addrinfo *rtinfo)
398 {
399 	int msglen;
400 	struct rt_msghdr *rtm = *prtm;
401 
402 	/* Fill in rt_addrinfo for call to rt_msg_buffer(). */
403 	rtinfo->rti_dst = rt_key(rt);
404 	rtinfo->rti_gateway = rt->rt_gateway;
405 	rtinfo->rti_netmask = rt_mask(rt);		/* might be NULL */
406 	rtinfo->rti_genmask = rt->rt_genmask;		/* might be NULL */
407 	if (rtm->rtm_addrs & (RTA_IFP | RTA_IFA)) {
408 		if (rt->rt_ifp != NULL) {
409 			rtinfo->rti_ifpaddr =
410 			    TAILQ_FIRST(&rt->rt_ifp->if_addrhead)->ifa_addr;
411 			rtinfo->rti_ifaaddr = rt->rt_ifa->ifa_addr;
412 			if (rt->rt_ifp->if_flags & IFF_POINTOPOINT)
413 				rtinfo->rti_bcastaddr = rt->rt_ifa->ifa_dstaddr;
414 			rtm->rtm_index = rt->rt_ifp->if_index;
415 		} else {
416 			rtinfo->rti_ifpaddr = NULL;
417 			rtinfo->rti_ifaaddr = NULL;
418 	    }
419 	}
420 
421 	msglen = rt_msgsize(rtm->rtm_type, rtinfo);
422 	if (rtm->rtm_msglen < msglen) {
423 		rtm = reallocbuf(rtm, msglen, rtm->rtm_msglen);
424 		if (rtm == NULL)
425 			return (ENOBUFS);
426 		*prtm = rtm;
427 	}
428 	rt_msg_buffer(rtm->rtm_type, rtinfo, rtm, msglen);
429 
430 	rtm->rtm_flags = rt->rt_flags;
431 	rtm->rtm_rmx = rt->rt_rmx;
432 	rtm->rtm_addrs = rtinfo->rti_addrs;
433 
434 	return (0);
435 }
436 
437 static void route_output_add_callback(int, int, struct rt_addrinfo *,
438 					struct rtentry *, void *);
439 static void route_output_delete_callback(int, int, struct rt_addrinfo *,
440 					struct rtentry *, void *);
441 static void route_output_change_callback(int, int, struct rt_addrinfo *,
442 					struct rtentry *, void *);
443 static void route_output_lock_callback(int, int, struct rt_addrinfo *,
444 					struct rtentry *, void *);
445 
446 /*ARGSUSED*/
447 static int
448 route_output(struct mbuf *m, struct socket *so, ...)
449 {
450 	struct rt_msghdr *rtm = NULL;
451 	struct rtentry *rt;
452 	struct radix_node_head *rnh;
453 	struct rawcb *rp = NULL;
454 	struct pr_output_info *oi;
455 	struct rt_addrinfo rtinfo;
456 	int len, error = 0;
457 	__va_list ap;
458 
459 	__va_start(ap, so);
460 	oi = __va_arg(ap, struct pr_output_info *);
461 	__va_end(ap);
462 
463 #define gotoerr(e) { error = e; goto flush;}
464 
465 	if (m == NULL ||
466 	    (m->m_len < sizeof(long) &&
467 	     (m = m_pullup(m, sizeof(long))) == NULL))
468 		return (ENOBUFS);
469 	if (!(m->m_flags & M_PKTHDR))
470 		panic("route_output");
471 	len = m->m_pkthdr.len;
472 	if (len < sizeof(struct rt_msghdr) ||
473 	    len != mtod(m, struct rt_msghdr *)->rtm_msglen) {
474 		rtinfo.rti_dst = NULL;
475 		gotoerr(EINVAL);
476 	}
477 	rtm = kmalloc(len, M_RTABLE, M_INTWAIT | M_NULLOK);
478 	if (rtm == NULL) {
479 		rtinfo.rti_dst = NULL;
480 		gotoerr(ENOBUFS);
481 	}
482 	m_copydata(m, 0, len, (caddr_t)rtm);
483 	if (rtm->rtm_version != RTM_VERSION) {
484 		rtinfo.rti_dst = NULL;
485 		gotoerr(EPROTONOSUPPORT);
486 	}
487 	rtm->rtm_pid = oi->p_pid;
488 	bzero(&rtinfo, sizeof(struct rt_addrinfo));
489 	rtinfo.rti_addrs = rtm->rtm_addrs;
490 	if (rt_xaddrs((char *)(rtm + 1), (char *)rtm + len, &rtinfo) != 0) {
491 		rtinfo.rti_dst = NULL;
492 		gotoerr(EINVAL);
493 	}
494 	rtinfo.rti_flags = rtm->rtm_flags;
495 	if (rtinfo.rti_dst == NULL || rtinfo.rti_dst->sa_family >= AF_MAX ||
496 	    (rtinfo.rti_gateway && rtinfo.rti_gateway->sa_family >= AF_MAX))
497 		gotoerr(EINVAL);
498 
499 	if (rtinfo.rti_genmask != NULL) {
500 		struct radix_node *n;
501 
502 #define	clen(s)	(*(u_char *)(s))
503 		n = rn_addmask((char *)rtinfo.rti_genmask, TRUE, 1);
504 		if (n != NULL &&
505 		    rtinfo.rti_genmask->sa_len >= clen(n->rn_key) &&
506 		    bcmp((char *)rtinfo.rti_genmask + 1,
507 		         (char *)n->rn_key + 1, clen(n->rn_key) - 1) == 0)
508 			rtinfo.rti_genmask = (struct sockaddr *)n->rn_key;
509 		else
510 			gotoerr(ENOBUFS);
511 	}
512 
513 	/*
514 	 * Verify that the caller has the appropriate privilege; RTM_GET
515 	 * is the only operation the non-superuser is allowed.
516 	 */
517 	if (rtm->rtm_type != RTM_GET && suser_cred(so->so_cred, 0) != 0)
518 		gotoerr(EPERM);
519 
520 	switch (rtm->rtm_type) {
521 	case RTM_ADD:
522 		if (rtinfo.rti_gateway == NULL) {
523 			error = EINVAL;
524 		} else {
525 			error = rtrequest1_global(RTM_ADD, &rtinfo,
526 					  route_output_add_callback, rtm);
527 		}
528 		break;
529 	case RTM_DELETE:
530 		/*
531 		 * note: &rtm passed as argument so 'rtm' can be replaced.
532 		 */
533 		error = rtrequest1_global(RTM_DELETE, &rtinfo,
534 					  route_output_delete_callback, &rtm);
535 		break;
536 	case RTM_GET:
537 		rnh = rt_tables[mycpuid][rtinfo.rti_dst->sa_family];
538 		if (rnh == NULL) {
539 			error = EAFNOSUPPORT;
540 			break;
541 		}
542 		rt = (struct rtentry *)
543 		    rnh->rnh_lookup((char *)rtinfo.rti_dst,
544 		    		    (char *)rtinfo.rti_netmask, rnh);
545 		if (rt == NULL) {
546 			error = ESRCH;
547 			break;
548 		}
549 		rt->rt_refcnt++;
550 		if (fillrtmsg(&rtm, rt, &rtinfo) != 0)
551 			gotoerr(ENOBUFS);
552 		--rt->rt_refcnt;
553 		break;
554 	case RTM_CHANGE:
555 		error = rtrequest1_global(RTM_GET, &rtinfo,
556 					  route_output_change_callback, rtm);
557 		break;
558 	case RTM_LOCK:
559 		error = rtrequest1_global(RTM_GET, &rtinfo,
560 					  route_output_lock_callback, rtm);
561 		break;
562 	default:
563 		error = EOPNOTSUPP;
564 		break;
565 	}
566 
567 flush:
568 	if (rtm != NULL) {
569 		if (error != 0)
570 			rtm->rtm_errno = error;
571 		else
572 			rtm->rtm_flags |= RTF_DONE;
573 	}
574 
575 	/*
576 	 * Check to see if we don't want our own messages.
577 	 */
578 	if (!(so->so_options & SO_USELOOPBACK)) {
579 		if (route_cb.any_count <= 1) {
580 			if (rtm != NULL)
581 				kfree(rtm, M_RTABLE);
582 			m_freem(m);
583 			return (error);
584 		}
585 		/* There is another listener, so construct message */
586 		rp = sotorawcb(so);
587 	}
588 	if (rtm != NULL) {
589 		m_copyback(m, 0, rtm->rtm_msglen, (caddr_t)rtm);
590 		if (m->m_pkthdr.len < rtm->rtm_msglen) {
591 			m_freem(m);
592 			m = NULL;
593 		} else if (m->m_pkthdr.len > rtm->rtm_msglen)
594 			m_adj(m, rtm->rtm_msglen - m->m_pkthdr.len);
595 		kfree(rtm, M_RTABLE);
596 	}
597 	if (rp != NULL)
598 		rp->rcb_proto.sp_family = 0; /* Avoid us */
599 	if (m != NULL)
600 		rts_input(m, familyof(rtinfo.rti_dst));
601 	if (rp != NULL)
602 		rp->rcb_proto.sp_family = PF_ROUTE;
603 	return (error);
604 }
605 
606 static void
607 route_output_add_callback(int cmd, int error, struct rt_addrinfo *rtinfo,
608 			  struct rtentry *rt, void *arg)
609 {
610 	struct rt_msghdr *rtm = arg;
611 
612 	if (error == 0 && rt != NULL) {
613 		rt_setmetrics(rtm->rtm_inits, &rtm->rtm_rmx,
614 		    &rt->rt_rmx);
615 		rt->rt_rmx.rmx_locks &= ~(rtm->rtm_inits);
616 		rt->rt_rmx.rmx_locks |=
617 		    (rtm->rtm_inits & rtm->rtm_rmx.rmx_locks);
618 		rt->rt_genmask = rtinfo->rti_genmask;
619 	}
620 }
621 
622 static void
623 route_output_delete_callback(int cmd, int error, struct rt_addrinfo *rtinfo,
624 			  struct rtentry *rt, void *arg)
625 {
626 	struct rt_msghdr **rtm = arg;
627 
628 	if (error == 0 && rt) {
629 		++rt->rt_refcnt;
630 		if (fillrtmsg(rtm, rt, rtinfo) != 0) {
631 			error = ENOBUFS;
632 			/* XXX no way to return the error */
633 		}
634 		--rt->rt_refcnt;
635 	}
636 }
637 
638 static void
639 route_output_change_callback(int cmd, int error, struct rt_addrinfo *rtinfo,
640 			  struct rtentry *rt, void *arg)
641 {
642 	struct rt_msghdr *rtm = arg;
643 	struct ifaddr *ifa;
644 
645 	if (error)
646 		goto done;
647 
648 	/*
649 	 * new gateway could require new ifaddr, ifp;
650 	 * flags may also be different; ifp may be specified
651 	 * by ll sockaddr when protocol address is ambiguous
652 	 */
653 	if (((rt->rt_flags & RTF_GATEWAY) && rtinfo->rti_gateway != NULL) ||
654 	    rtinfo->rti_ifpaddr != NULL || (rtinfo->rti_ifaaddr != NULL &&
655 	    sa_equal(rtinfo->rti_ifaaddr, rt->rt_ifa->ifa_addr))
656 	) {
657 		error = rt_getifa(rtinfo);
658 		if (error != 0)
659 			goto done;
660 	}
661 	if (rtinfo->rti_gateway != NULL) {
662 		error = rt_setgate(rt, rt_key(rt), rtinfo->rti_gateway);
663 		if (error != 0)
664 			goto done;
665 	}
666 	if ((ifa = rtinfo->rti_ifa) != NULL) {
667 		struct ifaddr *oifa = rt->rt_ifa;
668 
669 		if (oifa != ifa) {
670 			if (oifa && oifa->ifa_rtrequest)
671 				oifa->ifa_rtrequest(RTM_DELETE, rt, rtinfo);
672 			IFAFREE(rt->rt_ifa);
673 			IFAREF(ifa);
674 			rt->rt_ifa = ifa;
675 			rt->rt_ifp = rtinfo->rti_ifp;
676 		}
677 	}
678 	rt_setmetrics(rtm->rtm_inits, &rtm->rtm_rmx, &rt->rt_rmx);
679 	if (rt->rt_ifa && rt->rt_ifa->ifa_rtrequest)
680 	       rt->rt_ifa->ifa_rtrequest(RTM_ADD, rt, rtinfo);
681 	if (rtinfo->rti_genmask != NULL)
682 		rt->rt_genmask = rtinfo->rti_genmask;
683 done:
684 	/* XXX no way to return error */
685 	;
686 }
687 
688 static void
689 route_output_lock_callback(int cmd, int error, struct rt_addrinfo *rtinfo,
690 			   struct rtentry *rt, void *arg)
691 {
692 	struct rt_msghdr *rtm = arg;
693 
694 	rt->rt_rmx.rmx_locks &= ~(rtm->rtm_inits);
695 	rt->rt_rmx.rmx_locks |=
696 		(rtm->rtm_inits & rtm->rtm_rmx.rmx_locks);
697 }
698 
699 static void
700 rt_setmetrics(u_long which, struct rt_metrics *in, struct rt_metrics *out)
701 {
702 #define setmetric(flag, elt) if (which & (flag)) out->elt = in->elt;
703 	setmetric(RTV_RPIPE, rmx_recvpipe);
704 	setmetric(RTV_SPIPE, rmx_sendpipe);
705 	setmetric(RTV_SSTHRESH, rmx_ssthresh);
706 	setmetric(RTV_RTT, rmx_rtt);
707 	setmetric(RTV_RTTVAR, rmx_rttvar);
708 	setmetric(RTV_HOPCOUNT, rmx_hopcount);
709 	setmetric(RTV_MTU, rmx_mtu);
710 	setmetric(RTV_EXPIRE, rmx_expire);
711 #undef setmetric
712 }
713 
714 #define ROUNDUP(a) \
715 	((a) > 0 ? (1 + (((a) - 1) | (sizeof(long) - 1))) : sizeof(long))
716 
717 /*
718  * Extract the addresses of the passed sockaddrs.
719  * Do a little sanity checking so as to avoid bad memory references.
720  * This data is derived straight from userland.
721  */
722 static int
723 rt_xaddrs(char *cp, char *cplim, struct rt_addrinfo *rtinfo)
724 {
725 	struct sockaddr *sa;
726 	int i;
727 
728 	for (i = 0; (i < RTAX_MAX) && (cp < cplim); i++) {
729 		if ((rtinfo->rti_addrs & (1 << i)) == 0)
730 			continue;
731 		sa = (struct sockaddr *)cp;
732 		/*
733 		 * It won't fit.
734 		 */
735 		if ((cp + sa->sa_len) > cplim) {
736 			return (EINVAL);
737 		}
738 
739 		/*
740 		 * There are no more...  Quit now.
741 		 * If there are more bits, they are in error.
742 		 * I've seen this.  route(1) can evidently generate these.
743 		 * This causes kernel to core dump.
744 		 * For compatibility, if we see this, point to a safe address.
745 		 */
746 		if (sa->sa_len == 0) {
747 			static struct sockaddr sa_zero = {
748 				sizeof sa_zero, AF_INET,
749 			};
750 
751 			rtinfo->rti_info[i] = &sa_zero;
752 			return (0); /* should be EINVAL but for compat */
753 		}
754 
755 		/* Accept the sockaddr. */
756 		rtinfo->rti_info[i] = sa;
757 		cp += ROUNDUP(sa->sa_len);
758 	}
759 	return (0);
760 }
761 
762 static int
763 rt_msghdrsize(int type)
764 {
765 	switch (type) {
766 	case RTM_DELADDR:
767 	case RTM_NEWADDR:
768 		return sizeof(struct ifa_msghdr);
769 	case RTM_DELMADDR:
770 	case RTM_NEWMADDR:
771 		return sizeof(struct ifma_msghdr);
772 	case RTM_IFINFO:
773 		return sizeof(struct if_msghdr);
774 	case RTM_IFANNOUNCE:
775 	case RTM_IEEE80211:
776 		return sizeof(struct if_announcemsghdr);
777 	default:
778 		return sizeof(struct rt_msghdr);
779 	}
780 }
781 
782 static int
783 rt_msgsize(int type, struct rt_addrinfo *rtinfo)
784 {
785 	int len, i;
786 
787 	len = rt_msghdrsize(type);
788 	for (i = 0; i < RTAX_MAX; i++) {
789 		if (rtinfo->rti_info[i] != NULL)
790 			len += ROUNDUP(rtinfo->rti_info[i]->sa_len);
791 	}
792 	len = ALIGN(len);
793 	return len;
794 }
795 
796 /*
797  * Build a routing message in a buffer.
798  * Copy the addresses in the rtinfo->rti_info[] sockaddr array
799  * to the end of the buffer after the message header.
800  *
801  * Set the rtinfo->rti_addrs bitmask of addresses present in rtinfo->rti_info[].
802  * This side-effect can be avoided if we reorder the addrs bitmask field in all
803  * the route messages to line up so we can set it here instead of back in the
804  * calling routine.
805  */
806 static void
807 rt_msg_buffer(int type, struct rt_addrinfo *rtinfo, void *buf, int msglen)
808 {
809 	struct rt_msghdr *rtm;
810 	char *cp;
811 	int dlen, i;
812 
813 	rtm = (struct rt_msghdr *) buf;
814 	rtm->rtm_version = RTM_VERSION;
815 	rtm->rtm_type = type;
816 	rtm->rtm_msglen = msglen;
817 
818 	cp = (char *)buf + rt_msghdrsize(type);
819 	rtinfo->rti_addrs = 0;
820 	for (i = 0; i < RTAX_MAX; i++) {
821 		struct sockaddr *sa;
822 
823 		if ((sa = rtinfo->rti_info[i]) == NULL)
824 			continue;
825 		rtinfo->rti_addrs |= (1 << i);
826 		dlen = ROUNDUP(sa->sa_len);
827 		bcopy(sa, cp, dlen);
828 		cp += dlen;
829 	}
830 }
831 
832 /*
833  * Build a routing message in a mbuf chain.
834  * Copy the addresses in the rtinfo->rti_info[] sockaddr array
835  * to the end of the mbuf after the message header.
836  *
837  * Set the rtinfo->rti_addrs bitmask of addresses present in rtinfo->rti_info[].
838  * This side-effect can be avoided if we reorder the addrs bitmask field in all
839  * the route messages to line up so we can set it here instead of back in the
840  * calling routine.
841  */
842 static struct mbuf *
843 rt_msg_mbuf(int type, struct rt_addrinfo *rtinfo)
844 {
845 	struct mbuf *m;
846 	struct rt_msghdr *rtm;
847 	int hlen, len;
848 	int i;
849 
850 	hlen = rt_msghdrsize(type);
851 	KASSERT(hlen <= MCLBYTES, ("rt_msg_mbuf: hlen %d doesn't fit", hlen));
852 
853 	m = m_getl(hlen, MB_DONTWAIT, MT_DATA, M_PKTHDR, NULL);
854 	if (m == NULL)
855 		return (NULL);
856 	mbuftrackid(m, 32);
857 	m->m_pkthdr.len = m->m_len = hlen;
858 	m->m_pkthdr.rcvif = NULL;
859 	rtinfo->rti_addrs = 0;
860 	len = hlen;
861 	for (i = 0; i < RTAX_MAX; i++) {
862 		struct sockaddr *sa;
863 		int dlen;
864 
865 		if ((sa = rtinfo->rti_info[i]) == NULL)
866 			continue;
867 		rtinfo->rti_addrs |= (1 << i);
868 		dlen = ROUNDUP(sa->sa_len);
869 		m_copyback(m, len, dlen, (caddr_t)sa); /* can grow mbuf chain */
870 		len += dlen;
871 	}
872 	if (m->m_pkthdr.len != len) { /* one of the m_copyback() calls failed */
873 		m_freem(m);
874 		return (NULL);
875 	}
876 	rtm = mtod(m, struct rt_msghdr *);
877 	bzero(rtm, hlen);
878 	rtm->rtm_msglen = len;
879 	rtm->rtm_version = RTM_VERSION;
880 	rtm->rtm_type = type;
881 	return (m);
882 }
883 
884 /*
885  * This routine is called to generate a message from the routing
886  * socket indicating that a redirect has occurred, a routing lookup
887  * has failed, or that a protocol has detected timeouts to a particular
888  * destination.
889  */
890 void
891 rt_missmsg(int type, struct rt_addrinfo *rtinfo, int flags, int error)
892 {
893 	struct sockaddr *dst = rtinfo->rti_info[RTAX_DST];
894 	struct rt_msghdr *rtm;
895 	struct mbuf *m;
896 
897 	if (route_cb.any_count == 0)
898 		return;
899 	m = rt_msg_mbuf(type, rtinfo);
900 	if (m == NULL)
901 		return;
902 	rtm = mtod(m, struct rt_msghdr *);
903 	rtm->rtm_flags = RTF_DONE | flags;
904 	rtm->rtm_errno = error;
905 	rtm->rtm_addrs = rtinfo->rti_addrs;
906 	rts_input(m, familyof(dst));
907 }
908 
909 void
910 rt_dstmsg(int type, struct sockaddr *dst, int error)
911 {
912 	struct rt_msghdr *rtm;
913 	struct rt_addrinfo addrs;
914 	struct mbuf *m;
915 
916 	if (route_cb.any_count == 0)
917 		return;
918 	bzero(&addrs, sizeof(struct rt_addrinfo));
919 	addrs.rti_info[RTAX_DST] = dst;
920 	m = rt_msg_mbuf(type, &addrs);
921 	if (m == NULL)
922 		return;
923 	rtm = mtod(m, struct rt_msghdr *);
924 	rtm->rtm_flags = RTF_DONE;
925 	rtm->rtm_errno = error;
926 	rtm->rtm_addrs = addrs.rti_addrs;
927 	rts_input(m, familyof(dst));
928 }
929 
930 /*
931  * This routine is called to generate a message from the routing
932  * socket indicating that the status of a network interface has changed.
933  */
934 void
935 rt_ifmsg(struct ifnet *ifp)
936 {
937 	struct if_msghdr *ifm;
938 	struct mbuf *m;
939 	struct rt_addrinfo rtinfo;
940 
941 	if (route_cb.any_count == 0)
942 		return;
943 	bzero(&rtinfo, sizeof(struct rt_addrinfo));
944 	m = rt_msg_mbuf(RTM_IFINFO, &rtinfo);
945 	if (m == NULL)
946 		return;
947 	ifm = mtod(m, struct if_msghdr *);
948 	ifm->ifm_index = ifp->if_index;
949 	ifm->ifm_flags = ifp->if_flags;
950 	ifm->ifm_data = ifp->if_data;
951 	ifm->ifm_addrs = 0;
952 	rts_input(m, 0);
953 }
954 
955 static void
956 rt_ifamsg(int cmd, struct ifaddr *ifa)
957 {
958 	struct ifa_msghdr *ifam;
959 	struct rt_addrinfo rtinfo;
960 	struct mbuf *m;
961 	struct ifnet *ifp = ifa->ifa_ifp;
962 
963 	bzero(&rtinfo, sizeof(struct rt_addrinfo));
964 	rtinfo.rti_ifaaddr = ifa->ifa_addr;
965 	rtinfo.rti_ifpaddr = TAILQ_FIRST(&ifp->if_addrhead)->ifa_addr;
966 	rtinfo.rti_netmask = ifa->ifa_netmask;
967 	rtinfo.rti_bcastaddr = ifa->ifa_dstaddr;
968 
969 	m = rt_msg_mbuf(cmd, &rtinfo);
970 	if (m == NULL)
971 		return;
972 
973 	ifam = mtod(m, struct ifa_msghdr *);
974 	ifam->ifam_index = ifp->if_index;
975 	ifam->ifam_metric = ifa->ifa_metric;
976 	ifam->ifam_flags = ifa->ifa_flags;
977 	ifam->ifam_addrs = rtinfo.rti_addrs;
978 
979 	rts_input(m, familyof(ifa->ifa_addr));
980 }
981 
982 void
983 rt_rtmsg(int cmd, struct rtentry *rt, struct ifnet *ifp, int error)
984 {
985 	struct rt_msghdr *rtm;
986 	struct rt_addrinfo rtinfo;
987 	struct mbuf *m;
988 	struct sockaddr *dst;
989 
990 	if (rt == NULL)
991 		return;
992 
993 	bzero(&rtinfo, sizeof(struct rt_addrinfo));
994 	rtinfo.rti_dst = dst = rt_key(rt);
995 	rtinfo.rti_gateway = rt->rt_gateway;
996 	rtinfo.rti_netmask = rt_mask(rt);
997 	if (ifp != NULL)
998 		rtinfo.rti_ifpaddr = TAILQ_FIRST(&ifp->if_addrhead)->ifa_addr;
999 	rtinfo.rti_ifaaddr = rt->rt_ifa->ifa_addr;
1000 
1001 	m = rt_msg_mbuf(cmd, &rtinfo);
1002 	if (m == NULL)
1003 		return;
1004 
1005 	rtm = mtod(m, struct rt_msghdr *);
1006 	if (ifp != NULL)
1007 		rtm->rtm_index = ifp->if_index;
1008 	rtm->rtm_flags |= rt->rt_flags;
1009 	rtm->rtm_errno = error;
1010 	rtm->rtm_addrs = rtinfo.rti_addrs;
1011 
1012 	rts_input(m, familyof(dst));
1013 }
1014 
1015 /*
1016  * This is called to generate messages from the routing socket
1017  * indicating a network interface has had addresses associated with it.
1018  * if we ever reverse the logic and replace messages TO the routing
1019  * socket indicate a request to configure interfaces, then it will
1020  * be unnecessary as the routing socket will automatically generate
1021  * copies of it.
1022  */
1023 void
1024 rt_newaddrmsg(int cmd, struct ifaddr *ifa, int error, struct rtentry *rt)
1025 {
1026 #ifdef SCTP
1027 	/*
1028 	 * notify the SCTP stack
1029 	 * this will only get called when an address is added/deleted
1030 	 * XXX pass the ifaddr struct instead if ifa->ifa_addr...
1031 	 */
1032 	if (cmd == RTM_ADD)
1033 		sctp_add_ip_address(ifa);
1034 	else if (cmd == RTM_DELETE)
1035 		sctp_delete_ip_address(ifa);
1036 #endif /* SCTP */
1037 
1038 	if (route_cb.any_count == 0)
1039 		return;
1040 
1041 	if (cmd == RTM_ADD) {
1042 		rt_ifamsg(RTM_NEWADDR, ifa);
1043 		rt_rtmsg(RTM_ADD, rt, ifa->ifa_ifp, error);
1044 	} else {
1045 		KASSERT((cmd == RTM_DELETE), ("unknown cmd %d", cmd));
1046 		rt_rtmsg(RTM_DELETE, rt, ifa->ifa_ifp, error);
1047 		rt_ifamsg(RTM_DELADDR, ifa);
1048 	}
1049 }
1050 
1051 /*
1052  * This is the analogue to the rt_newaddrmsg which performs the same
1053  * function but for multicast group memberhips.  This is easier since
1054  * there is no route state to worry about.
1055  */
1056 void
1057 rt_newmaddrmsg(int cmd, struct ifmultiaddr *ifma)
1058 {
1059 	struct rt_addrinfo rtinfo;
1060 	struct mbuf *m = NULL;
1061 	struct ifnet *ifp = ifma->ifma_ifp;
1062 	struct ifma_msghdr *ifmam;
1063 
1064 	if (route_cb.any_count == 0)
1065 		return;
1066 
1067 	bzero(&rtinfo, sizeof(struct rt_addrinfo));
1068 	rtinfo.rti_ifaaddr = ifma->ifma_addr;
1069 	if (ifp != NULL && !TAILQ_EMPTY(&ifp->if_addrhead))
1070 		rtinfo.rti_ifpaddr = TAILQ_FIRST(&ifp->if_addrhead)->ifa_addr;
1071 	/*
1072 	 * If a link-layer address is present, present it as a ``gateway''
1073 	 * (similarly to how ARP entries, e.g., are presented).
1074 	 */
1075 	rtinfo.rti_gateway = ifma->ifma_lladdr;
1076 
1077 	m = rt_msg_mbuf(cmd, &rtinfo);
1078 	if (m == NULL)
1079 		return;
1080 
1081 	ifmam = mtod(m, struct ifma_msghdr *);
1082 	ifmam->ifmam_index = ifp->if_index;
1083 	ifmam->ifmam_addrs = rtinfo.rti_addrs;
1084 
1085 	rts_input(m, familyof(ifma->ifma_addr));
1086 }
1087 
1088 static struct mbuf *
1089 rt_makeifannouncemsg(struct ifnet *ifp, int type, int what,
1090 		     struct rt_addrinfo *info)
1091 {
1092 	struct if_announcemsghdr *ifan;
1093 	struct mbuf *m;
1094 
1095 	if (route_cb.any_count == 0)
1096 		return NULL;
1097 
1098 	bzero(info, sizeof(*info));
1099 	m = rt_msg_mbuf(type, info);
1100 	if (m == NULL)
1101 		return NULL;
1102 
1103 	ifan = mtod(m, struct if_announcemsghdr *);
1104 	ifan->ifan_index = ifp->if_index;
1105 	strlcpy(ifan->ifan_name, ifp->if_xname, sizeof ifan->ifan_name);
1106 	ifan->ifan_what = what;
1107 	return m;
1108 }
1109 
1110 /*
1111  * This is called to generate routing socket messages indicating
1112  * IEEE80211 wireless events.
1113  * XXX we piggyback on the RTM_IFANNOUNCE msg format in a clumsy way.
1114  */
1115 void
1116 rt_ieee80211msg(struct ifnet *ifp, int what, void *data, size_t data_len)
1117 {
1118 	struct rt_addrinfo info;
1119 	struct mbuf *m;
1120 
1121 	m = rt_makeifannouncemsg(ifp, RTM_IEEE80211, what, &info);
1122 	if (m == NULL)
1123 		return;
1124 
1125 	/*
1126 	 * Append the ieee80211 data.  Try to stick it in the
1127 	 * mbuf containing the ifannounce msg; otherwise allocate
1128 	 * a new mbuf and append.
1129 	 *
1130 	 * NB: we assume m is a single mbuf.
1131 	 */
1132 	if (data_len > M_TRAILINGSPACE(m)) {
1133 		struct mbuf *n = m_get(MB_DONTWAIT, MT_DATA);
1134 		if (n == NULL) {
1135 			m_freem(m);
1136 			return;
1137 		}
1138 		bcopy(data, mtod(n, void *), data_len);
1139 		n->m_len = data_len;
1140 		m->m_next = n;
1141 	} else if (data_len > 0) {
1142 		bcopy(data, mtod(m, u_int8_t *) + m->m_len, data_len);
1143 		m->m_len += data_len;
1144 	}
1145 	mbuftrackid(m, 33);
1146 	if (m->m_flags & M_PKTHDR)
1147 		m->m_pkthdr.len += data_len;
1148 	mtod(m, struct if_announcemsghdr *)->ifan_msglen += data_len;
1149 	rts_input(m, 0);
1150 }
1151 
1152 /*
1153  * This is called to generate routing socket messages indicating
1154  * network interface arrival and departure.
1155  */
1156 void
1157 rt_ifannouncemsg(struct ifnet *ifp, int what)
1158 {
1159 	struct rt_addrinfo addrinfo;
1160 	struct mbuf *m;
1161 
1162 	m = rt_makeifannouncemsg(ifp, RTM_IFANNOUNCE, what, &addrinfo);
1163 	if (m != NULL)
1164 		rts_input(m, 0);
1165 }
1166 
1167 static int
1168 resizewalkarg(struct walkarg *w, int len)
1169 {
1170 	void *newptr;
1171 
1172 	newptr = kmalloc(len, M_RTABLE, M_INTWAIT | M_NULLOK);
1173 	if (newptr == NULL)
1174 		return (ENOMEM);
1175 	if (w->w_tmem != NULL)
1176 		kfree(w->w_tmem, M_RTABLE);
1177 	w->w_tmem = newptr;
1178 	w->w_tmemsize = len;
1179 	return (0);
1180 }
1181 
1182 /*
1183  * This is used in dumping the kernel table via sysctl().
1184  */
1185 int
1186 sysctl_dumpentry(struct radix_node *rn, void *vw)
1187 {
1188 	struct walkarg *w = vw;
1189 	struct rtentry *rt = (struct rtentry *)rn;
1190 	struct rt_addrinfo rtinfo;
1191 	int error, msglen;
1192 
1193 	if (w->w_op == NET_RT_FLAGS && !(rt->rt_flags & w->w_arg))
1194 		return 0;
1195 
1196 	bzero(&rtinfo, sizeof(struct rt_addrinfo));
1197 	rtinfo.rti_dst = rt_key(rt);
1198 	rtinfo.rti_gateway = rt->rt_gateway;
1199 	rtinfo.rti_netmask = rt_mask(rt);
1200 	rtinfo.rti_genmask = rt->rt_genmask;
1201 	if (rt->rt_ifp != NULL) {
1202 		rtinfo.rti_ifpaddr =
1203 		    TAILQ_FIRST(&rt->rt_ifp->if_addrhead)->ifa_addr;
1204 		rtinfo.rti_ifaaddr = rt->rt_ifa->ifa_addr;
1205 		if (rt->rt_ifp->if_flags & IFF_POINTOPOINT)
1206 			rtinfo.rti_bcastaddr = rt->rt_ifa->ifa_dstaddr;
1207 	}
1208 	msglen = rt_msgsize(RTM_GET, &rtinfo);
1209 	if (w->w_tmemsize < msglen && resizewalkarg(w, msglen) != 0)
1210 		return (ENOMEM);
1211 	rt_msg_buffer(RTM_GET, &rtinfo, w->w_tmem, msglen);
1212 	if (w->w_req != NULL) {
1213 		struct rt_msghdr *rtm = w->w_tmem;
1214 
1215 		rtm->rtm_flags = rt->rt_flags;
1216 		rtm->rtm_use = rt->rt_use;
1217 		rtm->rtm_rmx = rt->rt_rmx;
1218 		rtm->rtm_index = rt->rt_ifp->if_index;
1219 		rtm->rtm_errno = rtm->rtm_pid = rtm->rtm_seq = 0;
1220 		rtm->rtm_addrs = rtinfo.rti_addrs;
1221 		error = SYSCTL_OUT(w->w_req, rtm, msglen);
1222 		return (error);
1223 	}
1224 	return (0);
1225 }
1226 
1227 static int
1228 sysctl_iflist(int af, struct walkarg *w)
1229 {
1230 	struct ifnet *ifp;
1231 	struct ifaddr *ifa;
1232 	struct rt_addrinfo rtinfo;
1233 	int msglen, error;
1234 
1235 	bzero(&rtinfo, sizeof(struct rt_addrinfo));
1236 	TAILQ_FOREACH(ifp, &ifnet, if_link) {
1237 		if (w->w_arg && w->w_arg != ifp->if_index)
1238 			continue;
1239 		ifa = TAILQ_FIRST(&ifp->if_addrhead);
1240 		rtinfo.rti_ifpaddr = ifa->ifa_addr;
1241 		msglen = rt_msgsize(RTM_IFINFO, &rtinfo);
1242 		if (w->w_tmemsize < msglen && resizewalkarg(w, msglen) != 0)
1243 			return (ENOMEM);
1244 		rt_msg_buffer(RTM_IFINFO, &rtinfo, w->w_tmem, msglen);
1245 		rtinfo.rti_ifpaddr = NULL;
1246 		if (w->w_req != NULL && w->w_tmem != NULL) {
1247 			struct if_msghdr *ifm = w->w_tmem;
1248 
1249 			ifm->ifm_index = ifp->if_index;
1250 			ifm->ifm_flags = ifp->if_flags;
1251 			ifm->ifm_data = ifp->if_data;
1252 			ifm->ifm_addrs = rtinfo.rti_addrs;
1253 			error = SYSCTL_OUT(w->w_req, ifm, msglen);
1254 			if (error)
1255 				return (error);
1256 		}
1257 		while ((ifa = TAILQ_NEXT(ifa, ifa_link)) != NULL) {
1258 			if (af && af != ifa->ifa_addr->sa_family)
1259 				continue;
1260 			if (curproc->p_ucred->cr_prison &&
1261 			    prison_if(curproc->p_ucred, ifa->ifa_addr))
1262 				continue;
1263 			rtinfo.rti_ifaaddr = ifa->ifa_addr;
1264 			rtinfo.rti_netmask = ifa->ifa_netmask;
1265 			rtinfo.rti_bcastaddr = ifa->ifa_dstaddr;
1266 			msglen = rt_msgsize(RTM_NEWADDR, &rtinfo);
1267 			if (w->w_tmemsize < msglen &&
1268 			    resizewalkarg(w, msglen) != 0)
1269 				return (ENOMEM);
1270 			rt_msg_buffer(RTM_NEWADDR, &rtinfo, w->w_tmem, msglen);
1271 			if (w->w_req != NULL) {
1272 				struct ifa_msghdr *ifam = w->w_tmem;
1273 
1274 				ifam->ifam_index = ifa->ifa_ifp->if_index;
1275 				ifam->ifam_flags = ifa->ifa_flags;
1276 				ifam->ifam_metric = ifa->ifa_metric;
1277 				ifam->ifam_addrs = rtinfo.rti_addrs;
1278 				error = SYSCTL_OUT(w->w_req, w->w_tmem, msglen);
1279 				if (error)
1280 					return (error);
1281 			}
1282 		}
1283 		rtinfo.rti_netmask = NULL;
1284 		rtinfo.rti_ifaaddr = NULL;
1285 		rtinfo.rti_bcastaddr = NULL;
1286 	}
1287 	return (0);
1288 }
1289 
1290 static int
1291 sysctl_rtsock(SYSCTL_HANDLER_ARGS)
1292 {
1293 	int	*name = (int *)arg1;
1294 	u_int	namelen = arg2;
1295 	struct radix_node_head *rnh;
1296 	int	i, error = EINVAL;
1297 	int	origcpu;
1298 	u_char  af;
1299 	struct	walkarg w;
1300 
1301 	name ++;
1302 	namelen--;
1303 	if (req->newptr)
1304 		return (EPERM);
1305 	if (namelen != 3 && namelen != 4)
1306 		return (EINVAL);
1307 	af = name[0];
1308 	bzero(&w, sizeof w);
1309 	w.w_op = name[1];
1310 	w.w_arg = name[2];
1311 	w.w_req = req;
1312 
1313 	/*
1314 	 * Optional third argument specifies cpu, used primarily for
1315 	 * debugging the route table.
1316 	 */
1317 	if (namelen == 4) {
1318 		if (name[3] < 0 || name[3] >= ncpus)
1319 			return (EINVAL);
1320 		origcpu = mycpuid;
1321 		lwkt_migratecpu(name[3]);
1322 	} else {
1323 		origcpu = -1;
1324 	}
1325 	crit_enter();
1326 	switch (w.w_op) {
1327 	case NET_RT_DUMP:
1328 	case NET_RT_FLAGS:
1329 		for (i = 1; i <= AF_MAX; i++)
1330 			if ((rnh = rt_tables[mycpuid][i]) &&
1331 			    (af == 0 || af == i) &&
1332 			    (error = rnh->rnh_walktree(rnh,
1333 						       sysctl_dumpentry, &w)))
1334 				break;
1335 		break;
1336 
1337 	case NET_RT_IFLIST:
1338 		error = sysctl_iflist(af, &w);
1339 	}
1340 	crit_exit();
1341 	if (w.w_tmem != NULL)
1342 		kfree(w.w_tmem, M_RTABLE);
1343 	if (origcpu >= 0)
1344 		lwkt_migratecpu(origcpu);
1345 	return (error);
1346 }
1347 
1348 SYSCTL_NODE(_net, PF_ROUTE, routetable, CTLFLAG_RD, sysctl_rtsock, "");
1349 
1350 /*
1351  * Definitions of protocols supported in the ROUTE domain.
1352  */
1353 
1354 static struct domain routedomain;		/* or at least forward */
1355 
1356 static struct protosw routesw[] = {
1357 { SOCK_RAW,	&routedomain,	0,		PR_ATOMIC|PR_ADDR,
1358   0,		route_output,	raw_ctlinput,	0,
1359   cpu0_soport,
1360   raw_init,	0,		0,		0,
1361   &route_usrreqs
1362 }
1363 };
1364 
1365 static struct domain routedomain = {
1366 	PF_ROUTE, "route", NULL, NULL, NULL,
1367 	routesw, &routesw[(sizeof routesw)/(sizeof routesw[0])],
1368 };
1369 
1370 DOMAIN_SET(route);
1371 
1372