xref: /dragonfly/sys/netinet/udp_usrreq.c (revision 52f9f0d9)
1 /*
2  * Copyright (c) 2004 Jeffrey M. Hsu.  All rights reserved.
3  * Copyright (c) 2004 The DragonFly Project.  All rights reserved.
4  *
5  * This code is derived from software contributed to The DragonFly Project
6  * by Jeffrey M. Hsu.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  * 1. Redistributions of source code must retain the above copyright
12  *    notice, this list of conditions and the following disclaimer.
13  * 2. Redistributions in binary form must reproduce the above copyright
14  *    notice, this list of conditions and the following disclaimer in the
15  *    documentation and/or other materials provided with the distribution.
16  * 3. Neither the name of The DragonFly Project nor the names of its
17  *    contributors may be used to endorse or promote products derived
18  *    from this software without specific, prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
23  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE
24  * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
25  * INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING,
26  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
27  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
28  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
29  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
30  * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31  * SUCH DAMAGE.
32  */
33 
34 /*
35  * Copyright (c) 1982, 1986, 1988, 1990, 1993, 1995
36  *	The Regents of the University of California.  All rights reserved.
37  *
38  * Redistribution and use in source and binary forms, with or without
39  * modification, are permitted provided that the following conditions
40  * are met:
41  * 1. Redistributions of source code must retain the above copyright
42  *    notice, this list of conditions and the following disclaimer.
43  * 2. Redistributions in binary form must reproduce the above copyright
44  *    notice, this list of conditions and the following disclaimer in the
45  *    documentation and/or other materials provided with the distribution.
46  * 3. All advertising materials mentioning features or use of this software
47  *    must display the following acknowledgement:
48  *	This product includes software developed by the University of
49  *	California, Berkeley and its contributors.
50  * 4. Neither the name of the University nor the names of its contributors
51  *    may be used to endorse or promote products derived from this software
52  *    without specific prior written permission.
53  *
54  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
55  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
56  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
57  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
58  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
59  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
60  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
61  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
62  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
63  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
64  * SUCH DAMAGE.
65  *
66  *	@(#)udp_usrreq.c	8.6 (Berkeley) 5/23/95
67  * $FreeBSD: src/sys/netinet/udp_usrreq.c,v 1.64.2.18 2003/01/24 05:11:34 sam Exp $
68  */
69 
70 #include "opt_ipsec.h"
71 #include "opt_inet6.h"
72 
73 #include <sys/param.h>
74 #include <sys/systm.h>
75 #include <sys/kernel.h>
76 #include <sys/malloc.h>
77 #include <sys/mbuf.h>
78 #include <sys/domain.h>
79 #include <sys/proc.h>
80 #include <sys/priv.h>
81 #include <sys/protosw.h>
82 #include <sys/socket.h>
83 #include <sys/socketvar.h>
84 #include <sys/sysctl.h>
85 #include <sys/syslog.h>
86 #include <sys/in_cksum.h>
87 
88 #include <sys/thread2.h>
89 #include <sys/socketvar2.h>
90 #include <sys/serialize.h>
91 
92 #include <machine/stdarg.h>
93 
94 #include <net/if.h>
95 #include <net/route.h>
96 #include <net/netmsg2.h>
97 
98 #include <netinet/in.h>
99 #include <netinet/in_systm.h>
100 #include <netinet/ip.h>
101 #ifdef INET6
102 #include <netinet/ip6.h>
103 #endif
104 #include <netinet/in_pcb.h>
105 #include <netinet/in_var.h>
106 #include <netinet/ip_var.h>
107 #ifdef INET6
108 #include <netinet6/ip6_var.h>
109 #endif
110 #include <netinet/ip_icmp.h>
111 #include <netinet/icmp_var.h>
112 #include <netinet/udp.h>
113 #include <netinet/udp_var.h>
114 
115 #ifdef FAST_IPSEC
116 #include <netproto/ipsec/ipsec.h>
117 #endif
118 
119 #ifdef IPSEC
120 #include <netinet6/ipsec.h>
121 #endif
122 
123 /*
124  * UDP protocol implementation.
125  * Per RFC 768, August, 1980.
126  */
127 #ifndef	COMPAT_42
128 static int	udpcksum = 1;
129 #else
130 static int	udpcksum = 0;		/* XXX */
131 #endif
132 SYSCTL_INT(_net_inet_udp, UDPCTL_CHECKSUM, checksum, CTLFLAG_RW,
133     &udpcksum, 0, "Enable checksumming of UDP packets");
134 
135 int	log_in_vain = 0;
136 SYSCTL_INT(_net_inet_udp, OID_AUTO, log_in_vain, CTLFLAG_RW,
137     &log_in_vain, 0, "Log all incoming UDP packets");
138 
139 static int	blackhole = 0;
140 SYSCTL_INT(_net_inet_udp, OID_AUTO, blackhole, CTLFLAG_RW,
141 	&blackhole, 0, "Do not send port unreachables for refused connects");
142 
143 static int	strict_mcast_mship = 1;
144 SYSCTL_INT(_net_inet_udp, OID_AUTO, strict_mcast_mship, CTLFLAG_RW,
145 	&strict_mcast_mship, 0, "Only send multicast to member sockets");
146 
147 int	udp_sosend_async = 1;
148 SYSCTL_INT(_net_inet_udp, OID_AUTO, sosend_async, CTLFLAG_RW,
149 	&udp_sosend_async, 0, "UDP asynchronized pru_send");
150 
151 struct	inpcbinfo udbinfo;
152 
153 static struct netisr_barrier *udbinfo_br;
154 static struct lwkt_serialize udbinfo_slize = LWKT_SERIALIZE_INITIALIZER;
155 
156 #ifndef UDBHASHSIZE
157 #define UDBHASHSIZE 16
158 #endif
159 
160 struct	udpstat udpstat;	/* from udp_var.h */
161 SYSCTL_STRUCT(_net_inet_udp, UDPCTL_STATS, stats, CTLFLAG_RW,
162     &udpstat, udpstat, "UDP statistics (struct udpstat, netinet/udp_var.h)");
163 
164 static struct	sockaddr_in udp_in = { sizeof udp_in, AF_INET };
165 #ifdef INET6
166 struct udp_in6 {
167 	struct sockaddr_in6	uin6_sin;
168 	u_char			uin6_init_done : 1;
169 } udp_in6 = {
170 	{ sizeof udp_in6.uin6_sin, AF_INET6 },
171 	0
172 };
173 struct udp_ip6 {
174 	struct ip6_hdr		uip6_ip6;
175 	u_char			uip6_init_done : 1;
176 } udp_ip6;
177 #endif /* INET6 */
178 
179 static void udp_append (struct inpcb *last, struct ip *ip,
180 			    struct mbuf *n, int off);
181 #ifdef INET6
182 static void ip_2_ip6_hdr (struct ip6_hdr *ip6, struct ip *ip);
183 #endif
184 
185 static int udp_connect_oncpu(struct socket *so, struct thread *td,
186 			struct sockaddr_in *sin, struct sockaddr_in *if_sin);
187 static int udp_output (struct inpcb *, struct mbuf *, struct sockaddr *,
188 			struct thread *, int);
189 
190 void
191 udp_init(void)
192 {
193 	in_pcbinfo_init(&udbinfo);
194 	udbinfo.hashbase = hashinit(UDBHASHSIZE, M_PCB, &udbinfo.hashmask);
195 	udbinfo.porthashbase = hashinit(UDBHASHSIZE, M_PCB,
196 					&udbinfo.porthashmask);
197 	udbinfo.wildcardhashbase = hashinit(UDBHASHSIZE, M_PCB,
198 					    &udbinfo.wildcardhashmask);
199 	udbinfo.ipi_size = sizeof(struct inpcb);
200 
201 	udbinfo_br = netisr_barrier_create();
202 }
203 
204 /*
205  * Check multicast packets to make sure they are only sent to sockets with
206  * multicast memberships for the packet's destination address and arrival
207  * interface.  Multicast packets to multicast-unaware sockets are also
208  * disallowed.
209  *
210  * Returns 0 if the packet is acceptable, -1 if it is not.
211  */
212 static __inline int
213 check_multicast_membership(struct ip *ip, struct inpcb *inp, struct mbuf *m)
214 {
215 	int mshipno;
216 	struct ip_moptions *mopt;
217 
218 	if (strict_mcast_mship == 0 ||
219 	    !IN_MULTICAST(ntohl(ip->ip_dst.s_addr))) {
220 		return (0);
221 	}
222 	mopt = inp->inp_moptions;
223 	if (mopt == NULL)
224 		return (-1);
225 	for (mshipno = 0; mshipno < mopt->imo_num_memberships; ++mshipno) {
226 		struct in_multi *maddr = mopt->imo_membership[mshipno];
227 
228 		if (ip->ip_dst.s_addr == maddr->inm_addr.s_addr &&
229 		    m->m_pkthdr.rcvif == maddr->inm_ifp) {
230 			return (0);
231 		}
232 	}
233 	return (-1);
234 }
235 
236 int
237 udp_input(struct mbuf **mp, int *offp, int proto)
238 {
239 	int iphlen;
240 	struct ip *ip;
241 	struct udphdr *uh;
242 	struct inpcb *inp;
243 	struct mbuf *m;
244 	struct mbuf *opts = NULL;
245 	int len, off;
246 	struct ip save_ip;
247 	struct sockaddr *append_sa;
248 
249 	off = *offp;
250 	m = *mp;
251 	*mp = NULL;
252 
253 	iphlen = off;
254 	udpstat.udps_ipackets++;
255 
256 	/*
257 	 * Strip IP options, if any; should skip this,
258 	 * make available to user, and use on returned packets,
259 	 * but we don't yet have a way to check the checksum
260 	 * with options still present.
261 	 */
262 	if (iphlen > sizeof(struct ip)) {
263 		ip_stripoptions(m);
264 		iphlen = sizeof(struct ip);
265 	}
266 
267 	/*
268 	 * IP and UDP headers are together in first mbuf.
269 	 * Already checked and pulled up in ip_demux().
270 	 */
271 	KASSERT(m->m_len >= iphlen + sizeof(struct udphdr),
272 	    ("UDP header not in one mbuf"));
273 
274 	ip = mtod(m, struct ip *);
275 	uh = (struct udphdr *)((caddr_t)ip + iphlen);
276 
277 	/* destination port of 0 is illegal, based on RFC768. */
278 	if (uh->uh_dport == 0)
279 		goto bad;
280 
281 	/*
282 	 * Make mbuf data length reflect UDP length.
283 	 * If not enough data to reflect UDP length, drop.
284 	 */
285 	len = ntohs((u_short)uh->uh_ulen);
286 	if (ip->ip_len != len) {
287 		if (len > ip->ip_len || len < sizeof(struct udphdr)) {
288 			udpstat.udps_badlen++;
289 			goto bad;
290 		}
291 		m_adj(m, len - ip->ip_len);
292 		/* ip->ip_len = len; */
293 	}
294 	/*
295 	 * Save a copy of the IP header in case we want restore it
296 	 * for sending an ICMP error message in response.
297 	 */
298 	save_ip = *ip;
299 
300 	/*
301 	 * Checksum extended UDP header and data.
302 	 */
303 	if (uh->uh_sum) {
304 		if (m->m_pkthdr.csum_flags & CSUM_DATA_VALID) {
305 			if (m->m_pkthdr.csum_flags & CSUM_PSEUDO_HDR)
306 				uh->uh_sum = m->m_pkthdr.csum_data;
307 			else
308 				uh->uh_sum = in_pseudo(ip->ip_src.s_addr,
309 				    ip->ip_dst.s_addr, htonl((u_short)len +
310 				    m->m_pkthdr.csum_data + IPPROTO_UDP));
311 			uh->uh_sum ^= 0xffff;
312 		} else {
313 			char b[9];
314 
315 			bcopy(((struct ipovly *)ip)->ih_x1, b, 9);
316 			bzero(((struct ipovly *)ip)->ih_x1, 9);
317 			((struct ipovly *)ip)->ih_len = uh->uh_ulen;
318 			uh->uh_sum = in_cksum(m, len + sizeof(struct ip));
319 			bcopy(b, ((struct ipovly *)ip)->ih_x1, 9);
320 		}
321 		if (uh->uh_sum) {
322 			udpstat.udps_badsum++;
323 			m_freem(m);
324 			return(IPPROTO_DONE);
325 		}
326 	} else
327 		udpstat.udps_nosum++;
328 
329 	if (IN_MULTICAST(ntohl(ip->ip_dst.s_addr)) ||
330 	    in_broadcast(ip->ip_dst, m->m_pkthdr.rcvif)) {
331 		struct inpcb *last;
332 
333 		/*
334 		 * Deliver a multicast or broadcast datagram to *all* sockets
335 		 * for which the local and remote addresses and ports match
336 		 * those of the incoming datagram.  This allows more than
337 		 * one process to receive multi/broadcasts on the same port.
338 		 * (This really ought to be done for unicast datagrams as
339 		 * well, but that would cause problems with existing
340 		 * applications that open both address-specific sockets and
341 		 * a wildcard socket listening to the same port -- they would
342 		 * end up receiving duplicates of every unicast datagram.
343 		 * Those applications open the multiple sockets to overcome an
344 		 * inadequacy of the UDP socket interface, but for backwards
345 		 * compatibility we avoid the problem here rather than
346 		 * fixing the interface.  Maybe 4.5BSD will remedy this?)
347 		 */
348 
349 		/*
350 		 * Construct sockaddr format source address.
351 		 */
352 		udp_in.sin_port = uh->uh_sport;
353 		udp_in.sin_addr = ip->ip_src;
354 		/*
355 		 * Locate pcb(s) for datagram.
356 		 * (Algorithm copied from raw_intr().)
357 		 */
358 		last = NULL;
359 #ifdef INET6
360 		udp_in6.uin6_init_done = udp_ip6.uip6_init_done = 0;
361 #endif
362 		LIST_FOREACH(inp, &udbinfo.pcblisthead, inp_list) {
363 			KKASSERT((inp->inp_flags & INP_PLACEMARKER) == 0);
364 #ifdef INET6
365 			if (!(inp->inp_vflag & INP_IPV4))
366 				continue;
367 #endif
368 			if (inp->inp_lport != uh->uh_dport)
369 				continue;
370 			if (inp->inp_laddr.s_addr != INADDR_ANY) {
371 				if (inp->inp_laddr.s_addr !=
372 				    ip->ip_dst.s_addr)
373 					continue;
374 			}
375 			if (inp->inp_faddr.s_addr != INADDR_ANY) {
376 				if (inp->inp_faddr.s_addr !=
377 				    ip->ip_src.s_addr ||
378 				    inp->inp_fport != uh->uh_sport)
379 					continue;
380 			}
381 
382 			if (check_multicast_membership(ip, inp, m) < 0)
383 				continue;
384 
385 			if (last != NULL) {
386 				struct mbuf *n;
387 
388 #ifdef IPSEC
389 				/* check AH/ESP integrity. */
390 				if (ipsec4_in_reject_so(m, last->inp_socket))
391 					ipsecstat.in_polvio++;
392 					/* do not inject data to pcb */
393 				else
394 #endif /*IPSEC*/
395 #ifdef FAST_IPSEC
396 				/* check AH/ESP integrity. */
397 				if (ipsec4_in_reject(m, last))
398 					;
399 				else
400 #endif /*FAST_IPSEC*/
401 				if ((n = m_copypacket(m, MB_DONTWAIT)) != NULL)
402 					udp_append(last, ip, n,
403 						   iphlen +
404 						   sizeof(struct udphdr));
405 			}
406 			last = inp;
407 			/*
408 			 * Don't look for additional matches if this one does
409 			 * not have either the SO_REUSEPORT or SO_REUSEADDR
410 			 * socket options set.  This heuristic avoids searching
411 			 * through all pcbs in the common case of a non-shared
412 			 * port.  It * assumes that an application will never
413 			 * clear these options after setting them.
414 			 */
415 			if (!(last->inp_socket->so_options &
416 			    (SO_REUSEPORT | SO_REUSEADDR)))
417 				break;
418 		}
419 
420 		if (last == NULL) {
421 			/*
422 			 * No matching pcb found; discard datagram.
423 			 * (No need to send an ICMP Port Unreachable
424 			 * for a broadcast or multicast datgram.)
425 			 */
426 			udpstat.udps_noportbcast++;
427 			goto bad;
428 		}
429 #ifdef IPSEC
430 		/* check AH/ESP integrity. */
431 		if (ipsec4_in_reject_so(m, last->inp_socket)) {
432 			ipsecstat.in_polvio++;
433 			goto bad;
434 		}
435 #endif /*IPSEC*/
436 #ifdef FAST_IPSEC
437 		/* check AH/ESP integrity. */
438 		if (ipsec4_in_reject(m, last))
439 			goto bad;
440 #endif /*FAST_IPSEC*/
441 		udp_append(last, ip, m, iphlen + sizeof(struct udphdr));
442 		return(IPPROTO_DONE);
443 	}
444 	/*
445 	 * Locate pcb for datagram.
446 	 */
447 	inp = in_pcblookup_hash(&udbinfo, ip->ip_src, uh->uh_sport,
448 	    ip->ip_dst, uh->uh_dport, 1, m->m_pkthdr.rcvif);
449 	if (inp == NULL) {
450 		if (log_in_vain) {
451 			char buf[sizeof "aaa.bbb.ccc.ddd"];
452 
453 			strcpy(buf, inet_ntoa(ip->ip_dst));
454 			log(LOG_INFO,
455 			    "Connection attempt to UDP %s:%d from %s:%d\n",
456 			    buf, ntohs(uh->uh_dport), inet_ntoa(ip->ip_src),
457 			    ntohs(uh->uh_sport));
458 		}
459 		udpstat.udps_noport++;
460 		if (m->m_flags & (M_BCAST | M_MCAST)) {
461 			udpstat.udps_noportbcast++;
462 			goto bad;
463 		}
464 		if (blackhole)
465 			goto bad;
466 #ifdef ICMP_BANDLIM
467 		if (badport_bandlim(BANDLIM_ICMP_UNREACH) < 0)
468 			goto bad;
469 #endif
470 		*ip = save_ip;
471 		ip->ip_len += iphlen;
472 		icmp_error(m, ICMP_UNREACH, ICMP_UNREACH_PORT, 0, 0);
473 		return(IPPROTO_DONE);
474 	}
475 #ifdef IPSEC
476 	if (ipsec4_in_reject_so(m, inp->inp_socket)) {
477 		ipsecstat.in_polvio++;
478 		goto bad;
479 	}
480 #endif /*IPSEC*/
481 #ifdef FAST_IPSEC
482 	if (ipsec4_in_reject(m, inp))
483 		goto bad;
484 #endif /*FAST_IPSEC*/
485 	/*
486 	 * Check the minimum TTL for socket.
487 	 */
488 	if (ip->ip_ttl < inp->inp_ip_minttl)
489 		goto bad;
490 
491 	/*
492 	 * Construct sockaddr format source address.
493 	 * Stuff source address and datagram in user buffer.
494 	 */
495 	udp_in.sin_port = uh->uh_sport;
496 	udp_in.sin_addr = ip->ip_src;
497 	if ((inp->inp_flags & INP_CONTROLOPTS) ||
498 	    (inp->inp_socket->so_options & SO_TIMESTAMP)) {
499 #ifdef INET6
500 		if (inp->inp_vflag & INP_IPV6) {
501 			int savedflags;
502 
503 			ip_2_ip6_hdr(&udp_ip6.uip6_ip6, ip);
504 			savedflags = inp->inp_flags;
505 			inp->inp_flags &= ~INP_UNMAPPABLEOPTS;
506 			ip6_savecontrol(inp, &opts, &udp_ip6.uip6_ip6, m);
507 			inp->inp_flags = savedflags;
508 		} else
509 #endif
510 		ip_savecontrol(inp, &opts, ip, m);
511 	}
512 	m_adj(m, iphlen + sizeof(struct udphdr));
513 #ifdef INET6
514 	if (inp->inp_vflag & INP_IPV6) {
515 		in6_sin_2_v4mapsin6(&udp_in, &udp_in6.uin6_sin);
516 		append_sa = (struct sockaddr *)&udp_in6;
517 	} else
518 #endif
519 		append_sa = (struct sockaddr *)&udp_in;
520 
521 	lwkt_gettoken(&inp->inp_socket->so_rcv.ssb_token);
522 	if (ssb_appendaddr(&inp->inp_socket->so_rcv, append_sa, m, opts) == 0) {
523 		udpstat.udps_fullsock++;
524 		lwkt_reltoken(&inp->inp_socket->so_rcv.ssb_token);
525 		goto bad;
526 	}
527 	lwkt_reltoken(&inp->inp_socket->so_rcv.ssb_token);
528 	sorwakeup(inp->inp_socket);
529 	return(IPPROTO_DONE);
530 bad:
531 	m_freem(m);
532 	if (opts)
533 		m_freem(opts);
534 	return(IPPROTO_DONE);
535 }
536 
537 #ifdef INET6
538 static void
539 ip_2_ip6_hdr(struct ip6_hdr *ip6, struct ip *ip)
540 {
541 	bzero(ip6, sizeof *ip6);
542 
543 	ip6->ip6_vfc = IPV6_VERSION;
544 	ip6->ip6_plen = ip->ip_len;
545 	ip6->ip6_nxt = ip->ip_p;
546 	ip6->ip6_hlim = ip->ip_ttl;
547 	ip6->ip6_src.s6_addr32[2] = ip6->ip6_dst.s6_addr32[2] =
548 		IPV6_ADDR_INT32_SMP;
549 	ip6->ip6_src.s6_addr32[3] = ip->ip_src.s_addr;
550 	ip6->ip6_dst.s6_addr32[3] = ip->ip_dst.s_addr;
551 }
552 #endif
553 
554 /*
555  * subroutine of udp_input(), mainly for source code readability.
556  * caller must properly init udp_ip6 and udp_in6 beforehand.
557  */
558 static void
559 udp_append(struct inpcb *last, struct ip *ip, struct mbuf *n, int off)
560 {
561 	struct sockaddr *append_sa;
562 	struct mbuf *opts = NULL;
563 
564 	if (last->inp_flags & INP_CONTROLOPTS ||
565 	    last->inp_socket->so_options & SO_TIMESTAMP) {
566 #ifdef INET6
567 		if (last->inp_vflag & INP_IPV6) {
568 			int savedflags;
569 
570 			if (udp_ip6.uip6_init_done == 0) {
571 				ip_2_ip6_hdr(&udp_ip6.uip6_ip6, ip);
572 				udp_ip6.uip6_init_done = 1;
573 			}
574 			savedflags = last->inp_flags;
575 			last->inp_flags &= ~INP_UNMAPPABLEOPTS;
576 			ip6_savecontrol(last, &opts, &udp_ip6.uip6_ip6, n);
577 			last->inp_flags = savedflags;
578 		} else
579 #endif
580 		ip_savecontrol(last, &opts, ip, n);
581 	}
582 #ifdef INET6
583 	if (last->inp_vflag & INP_IPV6) {
584 		if (udp_in6.uin6_init_done == 0) {
585 			in6_sin_2_v4mapsin6(&udp_in, &udp_in6.uin6_sin);
586 			udp_in6.uin6_init_done = 1;
587 		}
588 		append_sa = (struct sockaddr *)&udp_in6.uin6_sin;
589 	} else
590 #endif
591 		append_sa = (struct sockaddr *)&udp_in;
592 	m_adj(n, off);
593 	lwkt_gettoken(&last->inp_socket->so_rcv.ssb_token);
594 	if (ssb_appendaddr(&last->inp_socket->so_rcv, append_sa, n, opts) == 0) {
595 		m_freem(n);
596 		if (opts)
597 			m_freem(opts);
598 		udpstat.udps_fullsock++;
599 	} else {
600 		sorwakeup(last->inp_socket);
601 	}
602 	lwkt_reltoken(&last->inp_socket->so_rcv.ssb_token);
603 }
604 
605 /*
606  * Notify a udp user of an asynchronous error;
607  * just wake up so that he can collect error status.
608  */
609 void
610 udp_notify(struct inpcb *inp, int error)
611 {
612 	inp->inp_socket->so_error = error;
613 	sorwakeup(inp->inp_socket);
614 	sowwakeup(inp->inp_socket);
615 }
616 
617 struct netmsg_udp_notify {
618 	struct netmsg_base base;
619 	void		(*nm_notify)(struct inpcb *, int);
620 	struct in_addr	nm_faddr;
621 	int		nm_arg;
622 };
623 
624 static void
625 udp_notifyall_oncpu(netmsg_t msg)
626 {
627 	struct netmsg_udp_notify *nm = (struct netmsg_udp_notify *)msg;
628 #if 0
629 	int nextcpu;
630 #endif
631 
632 	in_pcbnotifyall(&udbinfo.pcblisthead, nm->nm_faddr,
633 			nm->nm_arg, nm->nm_notify);
634 	lwkt_replymsg(&nm->base.lmsg, 0);
635 
636 #if 0
637 	/* XXX currently udp only runs on cpu 0 */
638 	nextcpu = mycpuid + 1;
639 	if (nextcpu < ncpus2)
640 		lwkt_forwardmsg(cpu_portfn(nextcpu), &nm->base.lmsg);
641 	else
642 		lwkt_replymsg(&nmsg->base.lmsg, 0);
643 #endif
644 }
645 
646 static void
647 udp_rtchange(struct inpcb *inp, int err)
648 {
649 #ifdef SMP
650 	/* XXX Nuke this, once UDP inpcbs are CPU localized */
651 	if (inp->inp_route.ro_rt && inp->inp_route.ro_rt->rt_cpuid == mycpuid) {
652 		rtfree(inp->inp_route.ro_rt);
653 		inp->inp_route.ro_rt = NULL;
654 		/*
655 		 * A new route can be allocated the next time
656 		 * output is attempted.
657 		 */
658 	}
659 #else
660 	in_rtchange(inp, err);
661 #endif
662 }
663 
664 void
665 udp_ctlinput(netmsg_t msg)
666 {
667 	struct sockaddr *sa = msg->ctlinput.nm_arg;
668 	struct ip *ip = msg->ctlinput.nm_extra;
669 	int cmd = msg->ctlinput.nm_cmd;
670 	struct udphdr *uh;
671 	void (*notify) (struct inpcb *, int) = udp_notify;
672 	struct in_addr faddr;
673 	struct inpcb *inp;
674 
675 	KKASSERT(&curthread->td_msgport == cpu_portfn(0));
676 
677 	faddr = ((struct sockaddr_in *)sa)->sin_addr;
678 	if (sa->sa_family != AF_INET || faddr.s_addr == INADDR_ANY)
679 		goto done;
680 
681 	if (PRC_IS_REDIRECT(cmd)) {
682 		ip = NULL;
683 		notify = udp_rtchange;
684 	} else if (cmd == PRC_HOSTDEAD) {
685 		ip = NULL;
686 	} else if ((unsigned)cmd >= PRC_NCMDS || inetctlerrmap[cmd] == 0) {
687 		goto done;
688 	}
689 
690 	if (ip) {
691 		uh = (struct udphdr *)((caddr_t)ip + (ip->ip_hl << 2));
692 		inp = in_pcblookup_hash(&udbinfo, faddr, uh->uh_dport,
693 					ip->ip_src, uh->uh_sport, 0, NULL);
694 		if (inp != NULL && inp->inp_socket != NULL)
695 			(*notify)(inp, inetctlerrmap[cmd]);
696 	} else if (PRC_IS_REDIRECT(cmd)) {
697 		struct netmsg_udp_notify *nm;
698 
699 		KKASSERT(&curthread->td_msgport == cpu_portfn(0));
700 		nm = kmalloc(sizeof(*nm), M_LWKTMSG, M_INTWAIT);
701 		netmsg_init(&nm->base, NULL, &netisr_afree_rport,
702 			    0, udp_notifyall_oncpu);
703 		nm->nm_faddr = faddr;
704 		nm->nm_arg = inetctlerrmap[cmd];
705 		nm->nm_notify = notify;
706 		lwkt_sendmsg(cpu_portfn(0), &nm->base.lmsg);
707 	} else {
708 		/*
709 		 * XXX We should forward msg upon PRC_HOSTHEAD and ip == NULL,
710 		 * once UDP inpcbs are CPU localized
711 		 */
712 		KKASSERT(&curthread->td_msgport == cpu_portfn(0));
713 		in_pcbnotifyall(&udbinfo.pcblisthead, faddr, inetctlerrmap[cmd],
714 				notify);
715 	}
716 done:
717 	lwkt_replymsg(&msg->lmsg, 0);
718 }
719 
720 static int
721 udp_pcblist(SYSCTL_HANDLER_ARGS)
722 {
723 	struct xinpcb *xi;
724 	int error, nxi, i;
725 
726 	udbinfo_lock();
727 	error = in_pcblist_global_nomarker(oidp, arg1, arg2, req, &xi, &nxi);
728 	udbinfo_unlock();
729 
730 	if (error) {
731 		KKASSERT(xi == NULL);
732 		return error;
733 	}
734 	if (nxi == 0) {
735 		KKASSERT(xi == NULL);
736 		return 0;
737 	}
738 
739 	for (i = 0; i < nxi; ++i) {
740 		error = SYSCTL_OUT(req, &xi[i], sizeof(xi[i]));
741 		if (error)
742 			break;
743 	}
744 	kfree(xi, M_TEMP);
745 
746 	return error;
747 }
748 SYSCTL_PROC(_net_inet_udp, UDPCTL_PCBLIST, pcblist, CTLFLAG_RD, &udbinfo, 0,
749 	    udp_pcblist, "S,xinpcb", "List of active UDP sockets");
750 
751 static int
752 udp_getcred(SYSCTL_HANDLER_ARGS)
753 {
754 	struct sockaddr_in addrs[2];
755 	struct ucred cred0, *cred = NULL;
756 	struct inpcb *inp;
757 	int error;
758 
759 	error = priv_check(req->td, PRIV_ROOT);
760 	if (error)
761 		return (error);
762 	error = SYSCTL_IN(req, addrs, sizeof addrs);
763 	if (error)
764 		return (error);
765 
766 	udbinfo_lock();
767 	inp = in_pcblookup_hash(&udbinfo, addrs[1].sin_addr, addrs[1].sin_port,
768 				addrs[0].sin_addr, addrs[0].sin_port, 1, NULL);
769 	if (inp == NULL || inp->inp_socket == NULL) {
770 		error = ENOENT;
771 	} else {
772 		if (inp->inp_socket->so_cred != NULL) {
773 			cred0 = *(inp->inp_socket->so_cred);
774 			cred = &cred0;
775 		}
776 	}
777 	udbinfo_unlock();
778 
779 	if (error)
780 		return error;
781 
782 	return SYSCTL_OUT(req, cred, sizeof(struct ucred));
783 }
784 
785 SYSCTL_PROC(_net_inet_udp, OID_AUTO, getcred, CTLTYPE_OPAQUE|CTLFLAG_RW,
786     0, 0, udp_getcred, "S,ucred", "Get the ucred of a UDP connection");
787 
788 static int
789 udp_output(struct inpcb *inp, struct mbuf *m, struct sockaddr *dstaddr,
790 	   struct thread *td, int flags)
791 {
792 	struct udpiphdr *ui;
793 	int len = m->m_pkthdr.len;
794 	struct sockaddr_in *sin;	/* really is initialized before use */
795 	int error = 0, lport_any = 0;
796 
797 	if (len + sizeof(struct udpiphdr) > IP_MAXPACKET) {
798 		error = EMSGSIZE;
799 		goto release;
800 	}
801 
802 	if (inp->inp_lport == 0) {	/* unbound socket */
803 		error = in_pcbbind(inp, NULL, td);
804 		if (error)
805 			goto release;
806 
807 		udbinfo_barrier_set();
808 		in_pcbinswildcardhash(inp);
809 		udbinfo_barrier_rem();
810 		lport_any = 1;
811 	}
812 
813 	if (dstaddr != NULL) {		/* destination address specified */
814 		if (inp->inp_faddr.s_addr != INADDR_ANY) {
815 			/* already connected */
816 			error = EISCONN;
817 			goto release;
818 		}
819 		sin = (struct sockaddr_in *)dstaddr;
820 		if (!prison_remote_ip(td, (struct sockaddr *)&sin)) {
821 			error = EAFNOSUPPORT; /* IPv6 only jail */
822 			goto release;
823 		}
824 	} else {
825 		if (inp->inp_faddr.s_addr == INADDR_ANY) {
826 			/* no destination specified and not already connected */
827 			error = ENOTCONN;
828 			goto release;
829 		}
830 		sin = NULL;
831 	}
832 
833 	/*
834 	 * Calculate data length and get a mbuf
835 	 * for UDP and IP headers.
836 	 */
837 	M_PREPEND(m, sizeof(struct udpiphdr), MB_DONTWAIT);
838 	if (m == NULL) {
839 		error = ENOBUFS;
840 		goto release;
841 	}
842 
843 	/*
844 	 * Fill in mbuf with extended UDP header
845 	 * and addresses and length put into network format.
846 	 */
847 	ui = mtod(m, struct udpiphdr *);
848 	bzero(ui->ui_x1, sizeof ui->ui_x1);	/* XXX still needed? */
849 	ui->ui_pr = IPPROTO_UDP;
850 
851 	/*
852 	 * Set destination address.
853 	 */
854 	if (dstaddr != NULL) {			/* use specified destination */
855 		ui->ui_dst = sin->sin_addr;
856 		ui->ui_dport = sin->sin_port;
857 	} else {				/* use connected destination */
858 		ui->ui_dst = inp->inp_faddr;
859 		ui->ui_dport = inp->inp_fport;
860 	}
861 
862 	/*
863 	 * Set source address.
864 	 */
865 	if (inp->inp_laddr.s_addr == INADDR_ANY) {
866 		struct sockaddr_in *if_sin;
867 
868 		if (dstaddr == NULL) {
869 			/*
870 			 * connect() had (or should have) failed because
871 			 * the interface had no IP address, but the
872 			 * application proceeded to call send() anyways.
873 			 */
874 			error = ENOTCONN;
875 			goto release;
876 		}
877 
878 		/* Look up outgoing interface. */
879 		if ((error = in_pcbladdr(inp, dstaddr, &if_sin, td)))
880 			goto release;
881 		ui->ui_src = if_sin->sin_addr;	/* use address of interface */
882 	} else {
883 		ui->ui_src = inp->inp_laddr;	/* use non-null bound address */
884 	}
885 	ui->ui_sport = inp->inp_lport;
886 	KASSERT(inp->inp_lport != 0, ("inp lport should have been bound"));
887 
888 	ui->ui_ulen = htons((u_short)len + sizeof(struct udphdr));
889 
890 	/*
891 	 * Set up checksum and output datagram.
892 	 */
893 	if (udpcksum) {
894 		ui->ui_sum = in_pseudo(ui->ui_src.s_addr, ui->ui_dst.s_addr,
895 		    htons((u_short)len + sizeof(struct udphdr) + IPPROTO_UDP));
896 		m->m_pkthdr.csum_flags = CSUM_UDP;
897 		m->m_pkthdr.csum_data = offsetof(struct udphdr, uh_sum);
898 	} else {
899 		ui->ui_sum = 0;
900 	}
901 	((struct ip *)ui)->ip_len = sizeof(struct udpiphdr) + len;
902 	((struct ip *)ui)->ip_ttl = inp->inp_ip_ttl;	/* XXX */
903 	((struct ip *)ui)->ip_tos = inp->inp_ip_tos;	/* XXX */
904 	udpstat.udps_opackets++;
905 
906 	error = ip_output(m, inp->inp_options, &inp->inp_route,
907 	    (inp->inp_socket->so_options & (SO_DONTROUTE | SO_BROADCAST)) |
908 	    flags | IP_DEBUGROUTE,
909 	    inp->inp_moptions, inp);
910 
911 	/*
912 	 * If this is the first data gram sent on an unbound and unconnected
913 	 * UDP socket, lport will be changed in this function.  If target
914 	 * CPU after this lport changing is no longer the current CPU, then
915 	 * free the route entry allocated on the current CPU.
916 	 */
917 	if (lport_any) {
918 		if (udp_addrcpu(inp->inp_faddr.s_addr, inp->inp_fport,
919 		    inp->inp_laddr.s_addr, inp->inp_lport) != mycpuid) {
920 #ifdef notyet
921 			struct route *ro = &inp->inp_route;
922 
923 			if (ro->ro_rt != NULL)
924 				RTFREE(ro->ro_rt);
925 			bzero(ro, sizeof(*ro));
926 #else
927 			panic("UDP activity should only be in netisr0");
928 #endif
929 		}
930 	}
931 	return (error);
932 
933 release:
934 	m_freem(m);
935 	return (error);
936 }
937 
938 u_long	udp_sendspace = 9216;		/* really max datagram size */
939 					/* 40 1K datagrams */
940 SYSCTL_INT(_net_inet_udp, UDPCTL_MAXDGRAM, maxdgram, CTLFLAG_RW,
941     &udp_sendspace, 0, "Maximum outgoing UDP datagram size");
942 
943 u_long	udp_recvspace = 40 * (1024 +
944 #ifdef INET6
945 				      sizeof(struct sockaddr_in6)
946 #else
947 				      sizeof(struct sockaddr_in)
948 #endif
949 				      );
950 SYSCTL_INT(_net_inet_udp, UDPCTL_RECVSPACE, recvspace, CTLFLAG_RW,
951     &udp_recvspace, 0, "Maximum incoming UDP datagram size");
952 
953 /*
954  * NOTE: (so) is referenced from soabort*() and netmsg_pru_abort()
955  *	 will sofree() it when we return.
956  */
957 static void
958 udp_abort(netmsg_t msg)
959 {
960 	struct socket *so = msg->abort.base.nm_so;
961 	struct inpcb *inp;
962 	int error;
963 
964 	KKASSERT(&curthread->td_msgport == cpu_portfn(0));
965 
966 	inp = so->so_pcb;
967 	if (inp) {
968 		soisdisconnected(so);
969 
970 		udbinfo_barrier_set();
971 		in_pcbdetach(inp);
972 		udbinfo_barrier_rem();
973 		error = 0;
974 	} else {
975 		error = EINVAL;
976 	}
977 	lwkt_replymsg(&msg->abort.base.lmsg, error);
978 }
979 
980 static void
981 udp_attach(netmsg_t msg)
982 {
983 	struct socket *so = msg->attach.base.nm_so;
984 	struct pru_attach_info *ai = msg->attach.nm_ai;
985 	struct inpcb *inp;
986 	int error;
987 
988 	KKASSERT(&curthread->td_msgport == cpu_portfn(0));
989 
990 	inp = so->so_pcb;
991 	if (inp != NULL) {
992 		error = EINVAL;
993 		goto out;
994 	}
995 	error = soreserve(so, udp_sendspace, udp_recvspace, ai->sb_rlimit);
996 	if (error)
997 		goto out;
998 
999 	udbinfo_barrier_set();
1000 	error = in_pcballoc(so, &udbinfo);
1001 	udbinfo_barrier_rem();
1002 
1003 	if (error)
1004 		goto out;
1005 
1006 	/*
1007 	 * Set default port for protocol processing prior to bind/connect.
1008 	 */
1009 	sosetport(so, cpu_portfn(0));
1010 
1011 	inp = (struct inpcb *)so->so_pcb;
1012 	inp->inp_vflag |= INP_IPV4;
1013 	inp->inp_ip_ttl = ip_defttl;
1014 	error = 0;
1015 out:
1016 	lwkt_replymsg(&msg->attach.base.lmsg, error);
1017 }
1018 
1019 static void
1020 udp_bind(netmsg_t msg)
1021 {
1022 	struct socket *so = msg->bind.base.nm_so;
1023 	struct sockaddr *nam = msg->bind.nm_nam;
1024 	struct thread *td = msg->bind.nm_td;
1025 	struct sockaddr_in *sin = (struct sockaddr_in *)nam;
1026 	struct inpcb *inp;
1027 	int error;
1028 
1029 	inp = so->so_pcb;
1030 	if (inp) {
1031 		error = in_pcbbind(inp, nam, td);
1032 		if (error == 0) {
1033 			if (sin->sin_addr.s_addr != INADDR_ANY)
1034 				inp->inp_flags |= INP_WASBOUND_NOTANY;
1035 
1036 			udbinfo_barrier_set();
1037 			in_pcbinswildcardhash(inp);
1038 			udbinfo_barrier_rem();
1039 		}
1040 	} else {
1041 		error = EINVAL;
1042 	}
1043 	lwkt_replymsg(&msg->bind.base.lmsg, error);
1044 }
1045 
1046 static void
1047 udp_connect(netmsg_t msg)
1048 {
1049 	struct socket *so = msg->connect.base.nm_so;
1050 	struct sockaddr *nam = msg->connect.nm_nam;
1051 	struct thread *td = msg->connect.nm_td;
1052 	struct inpcb *inp;
1053 	struct sockaddr_in *sin = (struct sockaddr_in *)nam;
1054 	struct sockaddr_in *if_sin;
1055 	lwkt_port_t port;
1056 	int error;
1057 
1058 	KKASSERT(&curthread->td_msgport == cpu_portfn(0));
1059 
1060 	inp = so->so_pcb;
1061 	if (inp == NULL) {
1062 		error = EINVAL;
1063 		goto out;
1064 	}
1065 
1066 	if (msg->connect.nm_reconnect & NMSG_RECONNECT_RECONNECT) {
1067 		panic("UDP does not support RECONNECT");
1068 #ifdef notyet
1069 		msg->connect.nm_reconnect &= ~NMSG_RECONNECT_RECONNECT;
1070 		in_pcblink(inp, &udbinfo);
1071 #endif
1072 	}
1073 
1074 	if (inp->inp_faddr.s_addr != INADDR_ANY) {
1075 		error = EISCONN;
1076 		goto out;
1077 	}
1078 	error = 0;
1079 
1080 	/*
1081 	 * Bind if we have to
1082 	 */
1083 	if (td->td_proc && td->td_proc->p_ucred->cr_prison != NULL &&
1084 	    inp->inp_laddr.s_addr == INADDR_ANY) {
1085 		error = in_pcbbind(inp, NULL, td);
1086 		if (error)
1087 			goto out;
1088 	}
1089 
1090 	/*
1091 	 * Calculate the correct protocol processing thread.  The connect
1092 	 * operation must run there.
1093 	 */
1094 	error = in_pcbladdr(inp, nam, &if_sin, td);
1095 	if (error)
1096 		goto out;
1097 	if (!prison_remote_ip(td, nam)) {
1098 		error = EAFNOSUPPORT; /* IPv6 only jail */
1099 		goto out;
1100 	}
1101 
1102 	port = udp_addrport(sin->sin_addr.s_addr, sin->sin_port,
1103 			    inp->inp_laddr.s_addr, inp->inp_lport);
1104 #ifdef SMP
1105 	if (port != &curthread->td_msgport) {
1106 #ifdef notyet
1107 		struct route *ro = &inp->inp_route;
1108 
1109 		/*
1110 		 * in_pcbladdr() may have allocated a route entry for us
1111 		 * on the current CPU, but we need a route entry on the
1112 		 * inpcb's owner CPU, so free it here.
1113 		 */
1114 		if (ro->ro_rt != NULL)
1115 			RTFREE(ro->ro_rt);
1116 		bzero(ro, sizeof(*ro));
1117 
1118 		/*
1119 		 * We are moving the protocol processing port the socket
1120 		 * is on, we have to unlink here and re-link on the
1121 		 * target cpu.
1122 		 */
1123 		in_pcbunlink(so->so_pcb, &udbinfo);
1124 		/* in_pcbunlink(so->so_pcb, &udbinfo[mycpu->gd_cpuid]); */
1125 		sosetport(so, port);
1126 		msg->connect.nm_reconnect |= NMSG_RECONNECT_RECONNECT;
1127 		msg->connect.base.nm_dispatch = udp_connect;
1128 
1129 		lwkt_forwardmsg(port, &msg->connect.base.lmsg);
1130 		/* msg invalid now */
1131 		return;
1132 #else
1133 		panic("UDP activity should only be in netisr0");
1134 #endif
1135 	}
1136 #endif
1137 	KKASSERT(port == &curthread->td_msgport);
1138 	error = udp_connect_oncpu(so, td, sin, if_sin);
1139 out:
1140 	KKASSERT(msg->connect.nm_m == NULL);
1141 	lwkt_replymsg(&msg->connect.base.lmsg, error);
1142 }
1143 
1144 static int
1145 udp_connect_oncpu(struct socket *so, struct thread *td,
1146 		  struct sockaddr_in *sin, struct sockaddr_in *if_sin)
1147 {
1148 	struct inpcb *inp;
1149 	int error;
1150 
1151 	udbinfo_barrier_set();
1152 
1153 	inp = so->so_pcb;
1154 	if (inp->inp_flags & INP_WILDCARD)
1155 		in_pcbremwildcardhash(inp);
1156 	error = in_pcbconnect(inp, (struct sockaddr *)sin, td);
1157 
1158 	if (error == 0) {
1159 		/*
1160 		 * No more errors can occur, finish adjusting the socket
1161 		 * and change the processing port to reflect the connected
1162 		 * socket.  Once set we can no longer safely mess with the
1163 		 * socket.
1164 		 */
1165 		soisconnected(so);
1166 	} else if (error == EAFNOSUPPORT) {	/* connection dissolved */
1167 		/*
1168 		 * Follow traditional BSD behavior and retain
1169 		 * the local port binding.  But, fix the old misbehavior
1170 		 * of overwriting any previously bound local address.
1171 		 */
1172 		if (!(inp->inp_flags & INP_WASBOUND_NOTANY))
1173 			inp->inp_laddr.s_addr = INADDR_ANY;
1174 		in_pcbinswildcardhash(inp);
1175 	}
1176 
1177 	udbinfo_barrier_rem();
1178 	return error;
1179 }
1180 
1181 static void
1182 udp_detach(netmsg_t msg)
1183 {
1184 	struct socket *so = msg->detach.base.nm_so;
1185 	struct inpcb *inp;
1186 	int error;
1187 
1188 	KKASSERT(&curthread->td_msgport == cpu_portfn(0));
1189 
1190 	inp = so->so_pcb;
1191 	if (inp) {
1192 		udbinfo_barrier_set();
1193 		in_pcbdetach(inp);
1194 		udbinfo_barrier_rem();
1195 		error = 0;
1196 	} else {
1197 		error = EINVAL;
1198 	}
1199 	lwkt_replymsg(&msg->detach.base.lmsg, error);
1200 }
1201 
1202 static void
1203 udp_disconnect(netmsg_t msg)
1204 {
1205 	struct socket *so = msg->disconnect.base.nm_so;
1206 	struct route *ro;
1207 	struct inpcb *inp;
1208 	int error;
1209 
1210 	KKASSERT(&curthread->td_msgport == cpu_portfn(0));
1211 
1212 	inp = so->so_pcb;
1213 	if (inp == NULL) {
1214 		error = EINVAL;
1215 		goto out;
1216 	}
1217 	if (inp->inp_faddr.s_addr == INADDR_ANY) {
1218 		error = ENOTCONN;
1219 		goto out;
1220 	}
1221 
1222 	soreference(so);
1223 
1224 	udbinfo_barrier_set();
1225 	in_pcbdisconnect(inp);
1226 	udbinfo_barrier_rem();
1227 
1228 	soclrstate(so, SS_ISCONNECTED);		/* XXX */
1229 	sofree(so);
1230 
1231 	ro = &inp->inp_route;
1232 	if (ro->ro_rt != NULL)
1233 		RTFREE(ro->ro_rt);
1234 	bzero(ro, sizeof(*ro));
1235 	error = 0;
1236 out:
1237 	lwkt_replymsg(&msg->disconnect.base.lmsg, error);
1238 }
1239 
1240 static void
1241 udp_send(netmsg_t msg)
1242 {
1243 	struct socket *so = msg->send.base.nm_so;
1244 	struct mbuf *m = msg->send.nm_m;
1245 	struct sockaddr *addr = msg->send.nm_addr;
1246 	int pru_flags = msg->send.nm_flags;
1247 	struct inpcb *inp;
1248 	int error;
1249 
1250 	KKASSERT(&curthread->td_msgport == cpu_portfn(0));
1251 	KKASSERT(msg->send.nm_control == NULL);
1252 
1253 	inp = so->so_pcb;
1254 	if (inp) {
1255 		struct thread *td = msg->send.nm_td;
1256 		int flags = 0;
1257 
1258 		if (pru_flags & PRUS_DONTROUTE)
1259 			flags |= SO_DONTROUTE;
1260 		error = udp_output(inp, m, addr, td, flags);
1261 	} else {
1262 		m_freem(m);
1263 		error = EINVAL;
1264 	}
1265 
1266 	if (pru_flags & PRUS_FREEADDR)
1267 		kfree(addr, M_SONAME);
1268 
1269 	if ((pru_flags & PRUS_NOREPLY) == 0)
1270 		lwkt_replymsg(&msg->send.base.lmsg, error);
1271 }
1272 
1273 void
1274 udp_shutdown(netmsg_t msg)
1275 {
1276 	struct socket *so = msg->shutdown.base.nm_so;
1277 	struct inpcb *inp;
1278 	int error;
1279 
1280 	KKASSERT(&curthread->td_msgport == cpu_portfn(0));
1281 
1282 	inp = so->so_pcb;
1283 	if (inp) {
1284 		socantsendmore(so);
1285 		error = 0;
1286 	} else {
1287 		error = EINVAL;
1288 	}
1289 	lwkt_replymsg(&msg->shutdown.base.lmsg, error);
1290 }
1291 
1292 void
1293 udbinfo_lock(void)
1294 {
1295 	lwkt_serialize_enter(&udbinfo_slize);
1296 }
1297 
1298 void
1299 udbinfo_unlock(void)
1300 {
1301 	lwkt_serialize_exit(&udbinfo_slize);
1302 }
1303 
1304 void
1305 udbinfo_barrier_set(void)
1306 {
1307 	netisr_barrier_set(udbinfo_br);
1308 	udbinfo_lock();
1309 }
1310 
1311 void
1312 udbinfo_barrier_rem(void)
1313 {
1314 	udbinfo_unlock();
1315 	netisr_barrier_rem(udbinfo_br);
1316 }
1317 
1318 struct pr_usrreqs udp_usrreqs = {
1319 	.pru_abort = udp_abort,
1320 	.pru_accept = pr_generic_notsupp,
1321 	.pru_attach = udp_attach,
1322 	.pru_bind = udp_bind,
1323 	.pru_connect = udp_connect,
1324 	.pru_connect2 = pr_generic_notsupp,
1325 	.pru_control = in_control_dispatch,
1326 	.pru_detach = udp_detach,
1327 	.pru_disconnect = udp_disconnect,
1328 	.pru_listen = pr_generic_notsupp,
1329 	.pru_peeraddr = in_setpeeraddr_dispatch,
1330 	.pru_rcvd = pr_generic_notsupp,
1331 	.pru_rcvoob = pr_generic_notsupp,
1332 	.pru_send = udp_send,
1333 	.pru_sense = pru_sense_null,
1334 	.pru_shutdown = udp_shutdown,
1335 	.pru_sockaddr = in_setsockaddr_dispatch,
1336 	.pru_sosend = sosendudp,
1337 	.pru_soreceive = soreceive
1338 };
1339 
1340