18f002c6cSBruce M Simpson /* 28f002c6cSBruce M Simpson * Copyright (c) 2009 Bruce Simpson. 38f002c6cSBruce M Simpson * All rights reserved. 48f002c6cSBruce M Simpson * 58f002c6cSBruce M Simpson * Redistribution and use in source and binary forms, with or without 68f002c6cSBruce M Simpson * modification, are permitted provided that the following conditions 78f002c6cSBruce M Simpson * are met: 88f002c6cSBruce M Simpson * 1. Redistributions of source code must retain the above copyright 98f002c6cSBruce M Simpson * notice, this list of conditions and the following disclaimer. 108f002c6cSBruce M Simpson * 2. Redistributions in binary form must reproduce the above copyright 118f002c6cSBruce M Simpson * notice, this list of conditions and the following disclaimer in the 128f002c6cSBruce M Simpson * documentation and/or other materials provided with the distribution. 138f002c6cSBruce M Simpson * 3. The name of the author may not be used to endorse or promote 148f002c6cSBruce M Simpson * products derived from this software without specific prior written 158f002c6cSBruce M Simpson * permission. 168f002c6cSBruce M Simpson * 178f002c6cSBruce M Simpson * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 188f002c6cSBruce M Simpson * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 198f002c6cSBruce M Simpson * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 208f002c6cSBruce M Simpson * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 218f002c6cSBruce M Simpson * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 228f002c6cSBruce M Simpson * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 238f002c6cSBruce M Simpson * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 248f002c6cSBruce M Simpson * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 258f002c6cSBruce M Simpson * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 268f002c6cSBruce M Simpson * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 278f002c6cSBruce M Simpson * SUCH DAMAGE. 288f002c6cSBruce M Simpson */ 298f002c6cSBruce M Simpson 308f002c6cSBruce M Simpson /* 318f002c6cSBruce M Simpson * IPv6 multicast socket, group, and socket option processing module. 3233cde130SBruce M Simpson * Normative references: RFC 2292, RFC 3492, RFC 3542, RFC 3678, RFC 3810. 338f002c6cSBruce M Simpson */ 348f002c6cSBruce M Simpson 358f002c6cSBruce M Simpson #include <sys/cdefs.h> 368f002c6cSBruce M Simpson __FBSDID("$FreeBSD$"); 378f002c6cSBruce M Simpson 388f002c6cSBruce M Simpson #include "opt_inet6.h" 398f002c6cSBruce M Simpson #include "opt_route.h" 408f002c6cSBruce M Simpson 418f002c6cSBruce M Simpson #include <sys/param.h> 428f002c6cSBruce M Simpson #include <sys/systm.h> 438f002c6cSBruce M Simpson #include <sys/kernel.h> 448f002c6cSBruce M Simpson #include <sys/malloc.h> 458f002c6cSBruce M Simpson #include <sys/mbuf.h> 468f002c6cSBruce M Simpson #include <sys/protosw.h> 478f002c6cSBruce M Simpson #include <sys/socket.h> 488f002c6cSBruce M Simpson #include <sys/socketvar.h> 498f002c6cSBruce M Simpson #include <sys/protosw.h> 508f002c6cSBruce M Simpson #include <sys/sysctl.h> 518f002c6cSBruce M Simpson #include <sys/priv.h> 528f002c6cSBruce M Simpson #include <sys/ktr.h> 538f002c6cSBruce M Simpson #include <sys/tree.h> 548f002c6cSBruce M Simpson #include <sys/vimage.h> 558f002c6cSBruce M Simpson 568f002c6cSBruce M Simpson #include <net/if.h> 578f002c6cSBruce M Simpson #include <net/if_dl.h> 588f002c6cSBruce M Simpson #include <net/route.h> 598f002c6cSBruce M Simpson #include <net/vnet.h> 608f002c6cSBruce M Simpson 618f002c6cSBruce M Simpson #include <netinet/in.h> 628f002c6cSBruce M Simpson #include <netinet/in_var.h> 638f002c6cSBruce M Simpson #include <netinet6/in6_var.h> 648f002c6cSBruce M Simpson #include <netinet/ip6.h> 658f002c6cSBruce M Simpson #include <netinet/icmp6.h> 668f002c6cSBruce M Simpson #include <netinet6/ip6_var.h> 678f002c6cSBruce M Simpson #include <netinet/in_pcb.h> 688f002c6cSBruce M Simpson #include <netinet/tcp_var.h> 698f002c6cSBruce M Simpson #include <netinet6/nd6.h> 708f002c6cSBruce M Simpson #include <netinet/vinet.h> 718f002c6cSBruce M Simpson #include <netinet6/vinet6.h> 728f002c6cSBruce M Simpson #include <netinet6/mld6_var.h> 738f002c6cSBruce M Simpson 748f002c6cSBruce M Simpson #ifndef KTR_MLD 758f002c6cSBruce M Simpson #define KTR_MLD KTR_INET6 768f002c6cSBruce M Simpson #endif 778f002c6cSBruce M Simpson 788f002c6cSBruce M Simpson #ifndef __SOCKUNION_DECLARED 798f002c6cSBruce M Simpson union sockunion { 808f002c6cSBruce M Simpson struct sockaddr_storage ss; 818f002c6cSBruce M Simpson struct sockaddr sa; 828f002c6cSBruce M Simpson struct sockaddr_dl sdl; 838f002c6cSBruce M Simpson struct sockaddr_in6 sin6; 848f002c6cSBruce M Simpson }; 858f002c6cSBruce M Simpson typedef union sockunion sockunion_t; 868f002c6cSBruce M Simpson #define __SOCKUNION_DECLARED 878f002c6cSBruce M Simpson #endif /* __SOCKUNION_DECLARED */ 888f002c6cSBruce M Simpson 898f002c6cSBruce M Simpson static MALLOC_DEFINE(M_IN6MFILTER, "in6_mfilter", 908f002c6cSBruce M Simpson "IPv6 multicast PCB-layer source filter"); 918f002c6cSBruce M Simpson static MALLOC_DEFINE(M_IP6MADDR, "in6_multi", "IPv6 multicast group"); 928f002c6cSBruce M Simpson static MALLOC_DEFINE(M_IP6MOPTS, "ip6_moptions", "IPv6 multicast options"); 938f002c6cSBruce M Simpson static MALLOC_DEFINE(M_IP6MSOURCE, "ip6_msource", 948f002c6cSBruce M Simpson "IPv6 multicast MLD-layer source filter"); 958f002c6cSBruce M Simpson 968f002c6cSBruce M Simpson RB_GENERATE(ip6_msource_tree, ip6_msource, im6s_link, ip6_msource_cmp); 978f002c6cSBruce M Simpson 988f002c6cSBruce M Simpson /* 998f002c6cSBruce M Simpson * Locking: 1008f002c6cSBruce M Simpson * - Lock order is: Giant, INP_WLOCK, IN6_MULTI_LOCK, MLD_LOCK, IF_ADDR_LOCK. 1018f002c6cSBruce M Simpson * - The IF_ADDR_LOCK is implicitly taken by in6m_lookup() earlier, however 1028f002c6cSBruce M Simpson * it can be taken by code in net/if.c also. 1038f002c6cSBruce M Simpson * - ip6_moptions and in6_mfilter are covered by the INP_WLOCK. 1048f002c6cSBruce M Simpson * 1058f002c6cSBruce M Simpson * struct in6_multi is covered by IN6_MULTI_LOCK. There isn't strictly 1068f002c6cSBruce M Simpson * any need for in6_multi itself to be virtualized -- it is bound to an ifp 1078f002c6cSBruce M Simpson * anyway no matter what happens. 1088f002c6cSBruce M Simpson */ 1098f002c6cSBruce M Simpson struct mtx in6_multi_mtx; 1108f002c6cSBruce M Simpson MTX_SYSINIT(in6_multi_mtx, &in6_multi_mtx, "in6_multi_mtx", MTX_DEF); 1118f002c6cSBruce M Simpson 1128f002c6cSBruce M Simpson static void im6f_commit(struct in6_mfilter *); 1138f002c6cSBruce M Simpson static int im6f_get_source(struct in6_mfilter *imf, 1148f002c6cSBruce M Simpson const struct sockaddr_in6 *psin, 1158f002c6cSBruce M Simpson struct in6_msource **); 1168f002c6cSBruce M Simpson static struct in6_msource * 1178f002c6cSBruce M Simpson im6f_graft(struct in6_mfilter *, const uint8_t, 1188f002c6cSBruce M Simpson const struct sockaddr_in6 *); 1198f002c6cSBruce M Simpson static void im6f_leave(struct in6_mfilter *); 1208f002c6cSBruce M Simpson static int im6f_prune(struct in6_mfilter *, const struct sockaddr_in6 *); 1218f002c6cSBruce M Simpson static void im6f_purge(struct in6_mfilter *); 1228f002c6cSBruce M Simpson static void im6f_rollback(struct in6_mfilter *); 1238f002c6cSBruce M Simpson static void im6f_reap(struct in6_mfilter *); 1248f002c6cSBruce M Simpson static int im6o_grow(struct ip6_moptions *); 1258f002c6cSBruce M Simpson static size_t im6o_match_group(const struct ip6_moptions *, 1268f002c6cSBruce M Simpson const struct ifnet *, const struct sockaddr *); 1278f002c6cSBruce M Simpson static struct in6_msource * 1288f002c6cSBruce M Simpson im6o_match_source(const struct ip6_moptions *, const size_t, 1298f002c6cSBruce M Simpson const struct sockaddr *); 1308f002c6cSBruce M Simpson static void im6s_merge(struct ip6_msource *ims, 1318f002c6cSBruce M Simpson const struct in6_msource *lims, const int rollback); 1328f002c6cSBruce M Simpson static int in6_mc_get(struct ifnet *, const struct in6_addr *, 1338f002c6cSBruce M Simpson struct in6_multi **); 1348f002c6cSBruce M Simpson static int in6m_get_source(struct in6_multi *inm, 1358f002c6cSBruce M Simpson const struct in6_addr *addr, const int noalloc, 1368f002c6cSBruce M Simpson struct ip6_msource **pims); 1378f002c6cSBruce M Simpson static int in6m_is_ifp_detached(const struct in6_multi *); 1388f002c6cSBruce M Simpson static int in6m_merge(struct in6_multi *, /*const*/ struct in6_mfilter *); 1398f002c6cSBruce M Simpson static void in6m_purge(struct in6_multi *); 1408f002c6cSBruce M Simpson static void in6m_reap(struct in6_multi *); 1418f002c6cSBruce M Simpson static struct ip6_moptions * 1428f002c6cSBruce M Simpson in6p_findmoptions(struct inpcb *); 1438f002c6cSBruce M Simpson static int in6p_get_source_filters(struct inpcb *, struct sockopt *); 1448f002c6cSBruce M Simpson static int in6p_join_group(struct inpcb *, struct sockopt *); 1458f002c6cSBruce M Simpson static int in6p_leave_group(struct inpcb *, struct sockopt *); 14633cde130SBruce M Simpson static struct ifnet * 14733cde130SBruce M Simpson in6p_lookup_mcast_ifp(const struct inpcb *, 14833cde130SBruce M Simpson const struct sockaddr_in6 *); 1498f002c6cSBruce M Simpson static int in6p_block_unblock_source(struct inpcb *, struct sockopt *); 1508f002c6cSBruce M Simpson static int in6p_set_multicast_if(struct inpcb *, struct sockopt *); 1518f002c6cSBruce M Simpson static int in6p_set_source_filters(struct inpcb *, struct sockopt *); 1528f002c6cSBruce M Simpson static int sysctl_ip6_mcast_filters(SYSCTL_HANDLER_ARGS); 1538f002c6cSBruce M Simpson 1548f002c6cSBruce M Simpson SYSCTL_DECL(_net_inet6_ip6); /* XXX Not in any common header. */ 1558f002c6cSBruce M Simpson 1568f002c6cSBruce M Simpson SYSCTL_NODE(_net_inet6_ip6, OID_AUTO, mcast, CTLFLAG_RW, 0, "IPv6 multicast"); 1578f002c6cSBruce M Simpson 1588f002c6cSBruce M Simpson static u_long in6_mcast_maxgrpsrc = IPV6_MAX_GROUP_SRC_FILTER; 1598f002c6cSBruce M Simpson SYSCTL_ULONG(_net_inet6_ip6_mcast, OID_AUTO, maxgrpsrc, 1608f002c6cSBruce M Simpson CTLFLAG_RW | CTLFLAG_TUN, &in6_mcast_maxgrpsrc, 0, 1618f002c6cSBruce M Simpson "Max source filters per group"); 1628f002c6cSBruce M Simpson TUNABLE_ULONG("net.inet6.ip6.mcast.maxgrpsrc", &in6_mcast_maxgrpsrc); 1638f002c6cSBruce M Simpson 1648f002c6cSBruce M Simpson static u_long in6_mcast_maxsocksrc = IPV6_MAX_SOCK_SRC_FILTER; 1658f002c6cSBruce M Simpson SYSCTL_ULONG(_net_inet6_ip6_mcast, OID_AUTO, maxsocksrc, 1668f002c6cSBruce M Simpson CTLFLAG_RW | CTLFLAG_TUN, &in6_mcast_maxsocksrc, 0, 1678f002c6cSBruce M Simpson "Max source filters per socket"); 1688f002c6cSBruce M Simpson TUNABLE_ULONG("net.inet6.ip6.mcast.maxsocksrc", &in6_mcast_maxsocksrc); 1698f002c6cSBruce M Simpson 1708f002c6cSBruce M Simpson /* TODO Virtualize this switch. */ 1718f002c6cSBruce M Simpson int in6_mcast_loop = IPV6_DEFAULT_MULTICAST_LOOP; 1728f002c6cSBruce M Simpson SYSCTL_INT(_net_inet6_ip6_mcast, OID_AUTO, loop, CTLFLAG_RW | CTLFLAG_TUN, 1738f002c6cSBruce M Simpson &in6_mcast_loop, 0, "Loopback multicast datagrams by default"); 1748f002c6cSBruce M Simpson TUNABLE_INT("net.inet6.ip6.mcast.loop", &in6_mcast_loop); 1758f002c6cSBruce M Simpson 1768f002c6cSBruce M Simpson SYSCTL_NODE(_net_inet6_ip6_mcast, OID_AUTO, filters, 1778f002c6cSBruce M Simpson CTLFLAG_RD | CTLFLAG_MPSAFE, sysctl_ip6_mcast_filters, 1788f002c6cSBruce M Simpson "Per-interface stack-wide source filters"); 1798f002c6cSBruce M Simpson 1808f002c6cSBruce M Simpson /* 1818f002c6cSBruce M Simpson * Inline function which wraps assertions for a valid ifp. 1828f002c6cSBruce M Simpson * The ifnet layer will set the ifma's ifp pointer to NULL if the ifp 1838f002c6cSBruce M Simpson * is detached. 1848f002c6cSBruce M Simpson */ 1858f002c6cSBruce M Simpson static int __inline 1868f002c6cSBruce M Simpson in6m_is_ifp_detached(const struct in6_multi *inm) 1878f002c6cSBruce M Simpson { 1888f002c6cSBruce M Simpson struct ifnet *ifp; 1898f002c6cSBruce M Simpson 1908f002c6cSBruce M Simpson KASSERT(inm->in6m_ifma != NULL, ("%s: no ifma", __func__)); 1918f002c6cSBruce M Simpson ifp = inm->in6m_ifma->ifma_ifp; 1928f002c6cSBruce M Simpson if (ifp != NULL) { 1938f002c6cSBruce M Simpson /* 1948f002c6cSBruce M Simpson * Sanity check that network-layer notion of ifp is the 1958f002c6cSBruce M Simpson * same as that of link-layer. 1968f002c6cSBruce M Simpson */ 1978f002c6cSBruce M Simpson KASSERT(inm->in6m_ifp == ifp, ("%s: bad ifp", __func__)); 1988f002c6cSBruce M Simpson } 1998f002c6cSBruce M Simpson 2008f002c6cSBruce M Simpson return (ifp == NULL); 2018f002c6cSBruce M Simpson } 2028f002c6cSBruce M Simpson 2038f002c6cSBruce M Simpson /* 2048f002c6cSBruce M Simpson * Initialize an in6_mfilter structure to a known state at t0, t1 2058f002c6cSBruce M Simpson * with an empty source filter list. 2068f002c6cSBruce M Simpson */ 2078f002c6cSBruce M Simpson static __inline void 2088f002c6cSBruce M Simpson im6f_init(struct in6_mfilter *imf, const int st0, const int st1) 2098f002c6cSBruce M Simpson { 2108f002c6cSBruce M Simpson memset(imf, 0, sizeof(struct in6_mfilter)); 2118f002c6cSBruce M Simpson RB_INIT(&imf->im6f_sources); 2128f002c6cSBruce M Simpson imf->im6f_st[0] = st0; 2138f002c6cSBruce M Simpson imf->im6f_st[1] = st1; 2148f002c6cSBruce M Simpson } 2158f002c6cSBruce M Simpson 2168f002c6cSBruce M Simpson /* 2178f002c6cSBruce M Simpson * Resize the ip6_moptions vector to the next power-of-two minus 1. 2188f002c6cSBruce M Simpson * May be called with locks held; do not sleep. 2198f002c6cSBruce M Simpson */ 2208f002c6cSBruce M Simpson static int 2218f002c6cSBruce M Simpson im6o_grow(struct ip6_moptions *imo) 2228f002c6cSBruce M Simpson { 2238f002c6cSBruce M Simpson struct in6_multi **nmships; 2248f002c6cSBruce M Simpson struct in6_multi **omships; 2258f002c6cSBruce M Simpson struct in6_mfilter *nmfilters; 2268f002c6cSBruce M Simpson struct in6_mfilter *omfilters; 2278f002c6cSBruce M Simpson size_t idx; 2288f002c6cSBruce M Simpson size_t newmax; 2298f002c6cSBruce M Simpson size_t oldmax; 2308f002c6cSBruce M Simpson 2318f002c6cSBruce M Simpson nmships = NULL; 2328f002c6cSBruce M Simpson nmfilters = NULL; 2338f002c6cSBruce M Simpson omships = imo->im6o_membership; 2348f002c6cSBruce M Simpson omfilters = imo->im6o_mfilters; 2358f002c6cSBruce M Simpson oldmax = imo->im6o_max_memberships; 2368f002c6cSBruce M Simpson newmax = ((oldmax + 1) * 2) - 1; 2378f002c6cSBruce M Simpson 2388f002c6cSBruce M Simpson if (newmax <= IPV6_MAX_MEMBERSHIPS) { 2398f002c6cSBruce M Simpson nmships = (struct in6_multi **)realloc(omships, 2408f002c6cSBruce M Simpson sizeof(struct in6_multi *) * newmax, M_IP6MOPTS, M_NOWAIT); 2418f002c6cSBruce M Simpson nmfilters = (struct in6_mfilter *)realloc(omfilters, 2428f002c6cSBruce M Simpson sizeof(struct in6_mfilter) * newmax, M_IN6MFILTER, 2438f002c6cSBruce M Simpson M_NOWAIT); 2448f002c6cSBruce M Simpson if (nmships != NULL && nmfilters != NULL) { 2458f002c6cSBruce M Simpson /* Initialize newly allocated source filter heads. */ 2468f002c6cSBruce M Simpson for (idx = oldmax; idx < newmax; idx++) { 2478f002c6cSBruce M Simpson im6f_init(&nmfilters[idx], MCAST_UNDEFINED, 2488f002c6cSBruce M Simpson MCAST_EXCLUDE); 2498f002c6cSBruce M Simpson } 2508f002c6cSBruce M Simpson imo->im6o_max_memberships = newmax; 2518f002c6cSBruce M Simpson imo->im6o_membership = nmships; 2528f002c6cSBruce M Simpson imo->im6o_mfilters = nmfilters; 2538f002c6cSBruce M Simpson } 2548f002c6cSBruce M Simpson } 2558f002c6cSBruce M Simpson 2568f002c6cSBruce M Simpson if (nmships == NULL || nmfilters == NULL) { 2578f002c6cSBruce M Simpson if (nmships != NULL) 2588f002c6cSBruce M Simpson free(nmships, M_IP6MOPTS); 2598f002c6cSBruce M Simpson if (nmfilters != NULL) 2608f002c6cSBruce M Simpson free(nmfilters, M_IN6MFILTER); 2618f002c6cSBruce M Simpson return (ETOOMANYREFS); 2628f002c6cSBruce M Simpson } 2638f002c6cSBruce M Simpson 2648f002c6cSBruce M Simpson return (0); 2658f002c6cSBruce M Simpson } 2668f002c6cSBruce M Simpson 2678f002c6cSBruce M Simpson /* 2688f002c6cSBruce M Simpson * Find an IPv6 multicast group entry for this ip6_moptions instance 2698f002c6cSBruce M Simpson * which matches the specified group, and optionally an interface. 2708f002c6cSBruce M Simpson * Return its index into the array, or -1 if not found. 2718f002c6cSBruce M Simpson */ 2728f002c6cSBruce M Simpson static size_t 2738f002c6cSBruce M Simpson im6o_match_group(const struct ip6_moptions *imo, const struct ifnet *ifp, 2748f002c6cSBruce M Simpson const struct sockaddr *group) 2758f002c6cSBruce M Simpson { 2768f002c6cSBruce M Simpson const struct sockaddr_in6 *gsin6; 2778f002c6cSBruce M Simpson struct in6_multi **pinm; 2788f002c6cSBruce M Simpson int idx; 2798f002c6cSBruce M Simpson int nmships; 2808f002c6cSBruce M Simpson 2818f002c6cSBruce M Simpson gsin6 = (const struct sockaddr_in6 *)group; 2828f002c6cSBruce M Simpson 2838f002c6cSBruce M Simpson /* The im6o_membership array may be lazy allocated. */ 2848f002c6cSBruce M Simpson if (imo->im6o_membership == NULL || imo->im6o_num_memberships == 0) 2858f002c6cSBruce M Simpson return (-1); 2868f002c6cSBruce M Simpson 2878f002c6cSBruce M Simpson nmships = imo->im6o_num_memberships; 2888f002c6cSBruce M Simpson pinm = &imo->im6o_membership[0]; 2898f002c6cSBruce M Simpson for (idx = 0; idx < nmships; idx++, pinm++) { 2908f002c6cSBruce M Simpson if (*pinm == NULL) 2918f002c6cSBruce M Simpson continue; 2928f002c6cSBruce M Simpson if ((ifp == NULL || ((*pinm)->in6m_ifp == ifp)) && 2938f002c6cSBruce M Simpson IN6_ARE_ADDR_EQUAL(&(*pinm)->in6m_addr, 2948f002c6cSBruce M Simpson &gsin6->sin6_addr)) { 2958f002c6cSBruce M Simpson break; 2968f002c6cSBruce M Simpson } 2978f002c6cSBruce M Simpson } 2988f002c6cSBruce M Simpson if (idx >= nmships) 2998f002c6cSBruce M Simpson idx = -1; 3008f002c6cSBruce M Simpson 3018f002c6cSBruce M Simpson return (idx); 3028f002c6cSBruce M Simpson } 3038f002c6cSBruce M Simpson 3048f002c6cSBruce M Simpson /* 3058f002c6cSBruce M Simpson * Find an IPv6 multicast source entry for this imo which matches 3068f002c6cSBruce M Simpson * the given group index for this socket, and source address. 3078f002c6cSBruce M Simpson * 3088f002c6cSBruce M Simpson * NOTE: This does not check if the entry is in-mode, merely if 3098f002c6cSBruce M Simpson * it exists, which may not be the desired behaviour. 3108f002c6cSBruce M Simpson */ 3118f002c6cSBruce M Simpson static struct in6_msource * 3128f002c6cSBruce M Simpson im6o_match_source(const struct ip6_moptions *imo, const size_t gidx, 3138f002c6cSBruce M Simpson const struct sockaddr *src) 3148f002c6cSBruce M Simpson { 3158f002c6cSBruce M Simpson struct ip6_msource find; 3168f002c6cSBruce M Simpson struct in6_mfilter *imf; 3178f002c6cSBruce M Simpson struct ip6_msource *ims; 3188f002c6cSBruce M Simpson const sockunion_t *psa; 3198f002c6cSBruce M Simpson 3208f002c6cSBruce M Simpson KASSERT(src->sa_family == AF_INET6, ("%s: !AF_INET6", __func__)); 3218f002c6cSBruce M Simpson KASSERT(gidx != -1 && gidx < imo->im6o_num_memberships, 3228f002c6cSBruce M Simpson ("%s: invalid index %d\n", __func__, (int)gidx)); 3238f002c6cSBruce M Simpson 3248f002c6cSBruce M Simpson /* The im6o_mfilters array may be lazy allocated. */ 3258f002c6cSBruce M Simpson if (imo->im6o_mfilters == NULL) 3268f002c6cSBruce M Simpson return (NULL); 3278f002c6cSBruce M Simpson imf = &imo->im6o_mfilters[gidx]; 3288f002c6cSBruce M Simpson 3298f002c6cSBruce M Simpson psa = (const sockunion_t *)src; 3308f002c6cSBruce M Simpson find.im6s_addr = psa->sin6.sin6_addr; 3318f002c6cSBruce M Simpson ims = RB_FIND(ip6_msource_tree, &imf->im6f_sources, &find); 3328f002c6cSBruce M Simpson 3338f002c6cSBruce M Simpson return ((struct in6_msource *)ims); 3348f002c6cSBruce M Simpson } 3358f002c6cSBruce M Simpson 3368f002c6cSBruce M Simpson /* 3378f002c6cSBruce M Simpson * Perform filtering for multicast datagrams on a socket by group and source. 3388f002c6cSBruce M Simpson * 3398f002c6cSBruce M Simpson * Returns 0 if a datagram should be allowed through, or various error codes 3408f002c6cSBruce M Simpson * if the socket was not a member of the group, or the source was muted, etc. 3418f002c6cSBruce M Simpson */ 3428f002c6cSBruce M Simpson int 3438f002c6cSBruce M Simpson im6o_mc_filter(const struct ip6_moptions *imo, const struct ifnet *ifp, 3448f002c6cSBruce M Simpson const struct sockaddr *group, const struct sockaddr *src) 3458f002c6cSBruce M Simpson { 3468f002c6cSBruce M Simpson size_t gidx; 3478f002c6cSBruce M Simpson struct in6_msource *ims; 3488f002c6cSBruce M Simpson int mode; 3498f002c6cSBruce M Simpson 3508f002c6cSBruce M Simpson KASSERT(ifp != NULL, ("%s: null ifp", __func__)); 3518f002c6cSBruce M Simpson 3528f002c6cSBruce M Simpson gidx = im6o_match_group(imo, ifp, group); 3538f002c6cSBruce M Simpson if (gidx == -1) 3548f002c6cSBruce M Simpson return (MCAST_NOTGMEMBER); 3558f002c6cSBruce M Simpson 3568f002c6cSBruce M Simpson /* 3578f002c6cSBruce M Simpson * Check if the source was included in an (S,G) join. 3588f002c6cSBruce M Simpson * Allow reception on exclusive memberships by default, 3598f002c6cSBruce M Simpson * reject reception on inclusive memberships by default. 3608f002c6cSBruce M Simpson * Exclude source only if an in-mode exclude filter exists. 3618f002c6cSBruce M Simpson * Include source only if an in-mode include filter exists. 3628f002c6cSBruce M Simpson * NOTE: We are comparing group state here at MLD t1 (now) 3638f002c6cSBruce M Simpson * with socket-layer t0 (since last downcall). 3648f002c6cSBruce M Simpson */ 3658f002c6cSBruce M Simpson mode = imo->im6o_mfilters[gidx].im6f_st[1]; 3668f002c6cSBruce M Simpson ims = im6o_match_source(imo, gidx, src); 3678f002c6cSBruce M Simpson 3688f002c6cSBruce M Simpson if ((ims == NULL && mode == MCAST_INCLUDE) || 3698f002c6cSBruce M Simpson (ims != NULL && ims->im6sl_st[0] != mode)) 3708f002c6cSBruce M Simpson return (MCAST_NOTSMEMBER); 3718f002c6cSBruce M Simpson 3728f002c6cSBruce M Simpson return (MCAST_PASS); 3738f002c6cSBruce M Simpson } 3748f002c6cSBruce M Simpson 3758f002c6cSBruce M Simpson /* 3768f002c6cSBruce M Simpson * Find and return a reference to an in6_multi record for (ifp, group), 3778f002c6cSBruce M Simpson * and bump its reference count. 3788f002c6cSBruce M Simpson * If one does not exist, try to allocate it, and update link-layer multicast 3798f002c6cSBruce M Simpson * filters on ifp to listen for group. 3808f002c6cSBruce M Simpson * Assumes the IN6_MULTI lock is held across the call. 3818f002c6cSBruce M Simpson * Return 0 if successful, otherwise return an appropriate error code. 3828f002c6cSBruce M Simpson */ 3838f002c6cSBruce M Simpson static int 3848f002c6cSBruce M Simpson in6_mc_get(struct ifnet *ifp, const struct in6_addr *group, 3858f002c6cSBruce M Simpson struct in6_multi **pinm) 3868f002c6cSBruce M Simpson { 3878f002c6cSBruce M Simpson struct sockaddr_in6 gsin6; 3888f002c6cSBruce M Simpson struct ifmultiaddr *ifma; 3898f002c6cSBruce M Simpson struct in6_multi *inm; 3908f002c6cSBruce M Simpson int error; 3918f002c6cSBruce M Simpson 3928f002c6cSBruce M Simpson error = 0; 3938f002c6cSBruce M Simpson 3948f002c6cSBruce M Simpson /* 3958f002c6cSBruce M Simpson * XXX: Accesses to ifma_protospec must be covered by IF_ADDR_LOCK; 3968f002c6cSBruce M Simpson * if_addmulti() takes this mutex itself, so we must drop and 3978f002c6cSBruce M Simpson * re-acquire around the call. 3988f002c6cSBruce M Simpson */ 3998f002c6cSBruce M Simpson IN6_MULTI_LOCK_ASSERT(); 4008f002c6cSBruce M Simpson IF_ADDR_LOCK(ifp); 4018f002c6cSBruce M Simpson 4028f002c6cSBruce M Simpson inm = in6m_lookup_locked(ifp, group); 4038f002c6cSBruce M Simpson if (inm != NULL) { 4048f002c6cSBruce M Simpson /* 4058f002c6cSBruce M Simpson * If we already joined this group, just bump the 4068f002c6cSBruce M Simpson * refcount and return it. 4078f002c6cSBruce M Simpson */ 4088f002c6cSBruce M Simpson KASSERT(inm->in6m_refcount >= 1, 4098f002c6cSBruce M Simpson ("%s: bad refcount %d", __func__, inm->in6m_refcount)); 4108f002c6cSBruce M Simpson ++inm->in6m_refcount; 4118f002c6cSBruce M Simpson *pinm = inm; 4128f002c6cSBruce M Simpson goto out_locked; 4138f002c6cSBruce M Simpson } 4148f002c6cSBruce M Simpson 4158f002c6cSBruce M Simpson memset(&gsin6, 0, sizeof(gsin6)); 4168f002c6cSBruce M Simpson gsin6.sin6_family = AF_INET6; 4178f002c6cSBruce M Simpson gsin6.sin6_len = sizeof(struct sockaddr_in6); 4188f002c6cSBruce M Simpson gsin6.sin6_addr = *group; 4198f002c6cSBruce M Simpson 4208f002c6cSBruce M Simpson /* 4218f002c6cSBruce M Simpson * Check if a link-layer group is already associated 4228f002c6cSBruce M Simpson * with this network-layer group on the given ifnet. 4238f002c6cSBruce M Simpson */ 4248f002c6cSBruce M Simpson IF_ADDR_UNLOCK(ifp); 4258f002c6cSBruce M Simpson error = if_addmulti(ifp, (struct sockaddr *)&gsin6, &ifma); 4268f002c6cSBruce M Simpson if (error != 0) 4278f002c6cSBruce M Simpson return (error); 4288f002c6cSBruce M Simpson IF_ADDR_LOCK(ifp); 4298f002c6cSBruce M Simpson 4308f002c6cSBruce M Simpson /* 4318f002c6cSBruce M Simpson * If something other than netinet6 is occupying the link-layer 4328f002c6cSBruce M Simpson * group, print a meaningful error message and back out of 4338f002c6cSBruce M Simpson * the allocation. 4348f002c6cSBruce M Simpson * Otherwise, bump the refcount on the existing network-layer 4358f002c6cSBruce M Simpson * group association and return it. 4368f002c6cSBruce M Simpson */ 4378f002c6cSBruce M Simpson if (ifma->ifma_protospec != NULL) { 4388f002c6cSBruce M Simpson inm = (struct in6_multi *)ifma->ifma_protospec; 4398f002c6cSBruce M Simpson #ifdef INVARIANTS 4408f002c6cSBruce M Simpson KASSERT(ifma->ifma_addr != NULL, ("%s: no ifma_addr", 4418f002c6cSBruce M Simpson __func__)); 4428f002c6cSBruce M Simpson KASSERT(ifma->ifma_addr->sa_family == AF_INET6, 4438f002c6cSBruce M Simpson ("%s: ifma not AF_INET6", __func__)); 4448f002c6cSBruce M Simpson KASSERT(inm != NULL, ("%s: no ifma_protospec", __func__)); 4458f002c6cSBruce M Simpson if (inm->in6m_ifma != ifma || inm->in6m_ifp != ifp || 4468f002c6cSBruce M Simpson !IN6_ARE_ADDR_EQUAL(&inm->in6m_addr, group)) 4478f002c6cSBruce M Simpson panic("%s: ifma %p is inconsistent with %p (%p)", 4488f002c6cSBruce M Simpson __func__, ifma, inm, group); 4498f002c6cSBruce M Simpson #endif 4508f002c6cSBruce M Simpson ++inm->in6m_refcount; 4518f002c6cSBruce M Simpson *pinm = inm; 4528f002c6cSBruce M Simpson goto out_locked; 4538f002c6cSBruce M Simpson } 4548f002c6cSBruce M Simpson 4558f002c6cSBruce M Simpson IF_ADDR_LOCK_ASSERT(ifp); 4568f002c6cSBruce M Simpson 4578f002c6cSBruce M Simpson /* 4588f002c6cSBruce M Simpson * A new in6_multi record is needed; allocate and initialize it. 4598f002c6cSBruce M Simpson * We DO NOT perform an MLD join as the in6_ layer may need to 4608f002c6cSBruce M Simpson * push an initial source list down to MLD to support SSM. 4618f002c6cSBruce M Simpson * 4628f002c6cSBruce M Simpson * The initial source filter state is INCLUDE, {} as per the RFC. 4638f002c6cSBruce M Simpson * Pending state-changes per group are subject to a bounds check. 4648f002c6cSBruce M Simpson */ 4658f002c6cSBruce M Simpson inm = malloc(sizeof(*inm), M_IP6MADDR, M_NOWAIT | M_ZERO); 4668f002c6cSBruce M Simpson if (inm == NULL) { 4678f002c6cSBruce M Simpson if_delmulti_ifma(ifma); 4688f002c6cSBruce M Simpson error = ENOMEM; 4698f002c6cSBruce M Simpson goto out_locked; 4708f002c6cSBruce M Simpson } 4718f002c6cSBruce M Simpson inm->in6m_addr = *group; 4728f002c6cSBruce M Simpson inm->in6m_ifp = ifp; 4738f002c6cSBruce M Simpson inm->in6m_mli = MLD_IFINFO(ifp); 4748f002c6cSBruce M Simpson inm->in6m_ifma = ifma; 4758f002c6cSBruce M Simpson inm->in6m_refcount = 1; 4768f002c6cSBruce M Simpson inm->in6m_state = MLD_NOT_MEMBER; 4778f002c6cSBruce M Simpson IFQ_SET_MAXLEN(&inm->in6m_scq, MLD_MAX_STATE_CHANGES); 4788f002c6cSBruce M Simpson 4798f002c6cSBruce M Simpson inm->in6m_st[0].iss_fmode = MCAST_UNDEFINED; 4808f002c6cSBruce M Simpson inm->in6m_st[1].iss_fmode = MCAST_UNDEFINED; 4818f002c6cSBruce M Simpson RB_INIT(&inm->in6m_srcs); 4828f002c6cSBruce M Simpson 4838f002c6cSBruce M Simpson ifma->ifma_protospec = inm; 4848f002c6cSBruce M Simpson *pinm = inm; 4858f002c6cSBruce M Simpson 4868f002c6cSBruce M Simpson out_locked: 4878f002c6cSBruce M Simpson IF_ADDR_UNLOCK(ifp); 4888f002c6cSBruce M Simpson return (error); 4898f002c6cSBruce M Simpson } 4908f002c6cSBruce M Simpson 4918f002c6cSBruce M Simpson /* 4928f002c6cSBruce M Simpson * Drop a reference to an in6_multi record. 4938f002c6cSBruce M Simpson * 4948f002c6cSBruce M Simpson * If the refcount drops to 0, free the in6_multi record and 4958f002c6cSBruce M Simpson * delete the underlying link-layer membership. 4968f002c6cSBruce M Simpson */ 4978f002c6cSBruce M Simpson void 4988f002c6cSBruce M Simpson in6m_release_locked(struct in6_multi *inm) 4998f002c6cSBruce M Simpson { 5008f002c6cSBruce M Simpson struct ifmultiaddr *ifma; 5018f002c6cSBruce M Simpson 5028f002c6cSBruce M Simpson IN6_MULTI_LOCK_ASSERT(); 5038f002c6cSBruce M Simpson 5048f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: refcount is %d", __func__, inm->in6m_refcount); 5058f002c6cSBruce M Simpson 5068f002c6cSBruce M Simpson if (--inm->in6m_refcount > 0) { 5078f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: refcount is now %d", __func__, 5088f002c6cSBruce M Simpson inm->in6m_refcount); 5098f002c6cSBruce M Simpson return; 5108f002c6cSBruce M Simpson } 5118f002c6cSBruce M Simpson 5128f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: freeing inm %p", __func__, inm); 5138f002c6cSBruce M Simpson 5148f002c6cSBruce M Simpson ifma = inm->in6m_ifma; 5158f002c6cSBruce M Simpson 5168f002c6cSBruce M Simpson /* XXX this access is not covered by IF_ADDR_LOCK */ 5178f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: purging ifma %p", __func__, ifma); 5188f002c6cSBruce M Simpson KASSERT(ifma->ifma_protospec == inm, 5198f002c6cSBruce M Simpson ("%s: ifma_protospec != inm", __func__)); 5208f002c6cSBruce M Simpson ifma->ifma_protospec = NULL; 5218f002c6cSBruce M Simpson 5228f002c6cSBruce M Simpson in6m_purge(inm); 5238f002c6cSBruce M Simpson 5248f002c6cSBruce M Simpson free(inm, M_IP6MADDR); 5258f002c6cSBruce M Simpson 5268f002c6cSBruce M Simpson if_delmulti_ifma(ifma); 5278f002c6cSBruce M Simpson } 5288f002c6cSBruce M Simpson 5298f002c6cSBruce M Simpson /* 5308f002c6cSBruce M Simpson * Clear recorded source entries for a group. 5318f002c6cSBruce M Simpson * Used by the MLD code. Caller must hold the IN6_MULTI lock. 5328f002c6cSBruce M Simpson * FIXME: Should reap. 5338f002c6cSBruce M Simpson */ 5348f002c6cSBruce M Simpson void 5358f002c6cSBruce M Simpson in6m_clear_recorded(struct in6_multi *inm) 5368f002c6cSBruce M Simpson { 5378f002c6cSBruce M Simpson struct ip6_msource *ims; 5388f002c6cSBruce M Simpson 5398f002c6cSBruce M Simpson IN6_MULTI_LOCK_ASSERT(); 5408f002c6cSBruce M Simpson 5418f002c6cSBruce M Simpson RB_FOREACH(ims, ip6_msource_tree, &inm->in6m_srcs) { 5428f002c6cSBruce M Simpson if (ims->im6s_stp) { 5438f002c6cSBruce M Simpson ims->im6s_stp = 0; 5448f002c6cSBruce M Simpson --inm->in6m_st[1].iss_rec; 5458f002c6cSBruce M Simpson } 5468f002c6cSBruce M Simpson } 5478f002c6cSBruce M Simpson KASSERT(inm->in6m_st[1].iss_rec == 0, 5488f002c6cSBruce M Simpson ("%s: iss_rec %d not 0", __func__, inm->in6m_st[1].iss_rec)); 5498f002c6cSBruce M Simpson } 5508f002c6cSBruce M Simpson 5518f002c6cSBruce M Simpson /* 5528f002c6cSBruce M Simpson * Record a source as pending for a Source-Group MLDv2 query. 5538f002c6cSBruce M Simpson * This lives here as it modifies the shared tree. 5548f002c6cSBruce M Simpson * 5558f002c6cSBruce M Simpson * inm is the group descriptor. 5568f002c6cSBruce M Simpson * naddr is the address of the source to record in network-byte order. 5578f002c6cSBruce M Simpson * 5588f002c6cSBruce M Simpson * If the net.inet6.mld.sgalloc sysctl is non-zero, we will 5598f002c6cSBruce M Simpson * lazy-allocate a source node in response to an SG query. 5608f002c6cSBruce M Simpson * Otherwise, no allocation is performed. This saves some memory 5618f002c6cSBruce M Simpson * with the trade-off that the source will not be reported to the 5628f002c6cSBruce M Simpson * router if joined in the window between the query response and 5638f002c6cSBruce M Simpson * the group actually being joined on the local host. 5648f002c6cSBruce M Simpson * 5658f002c6cSBruce M Simpson * VIMAGE: XXX: Currently the mld_sgalloc feature has been removed. 5668f002c6cSBruce M Simpson * This turns off the allocation of a recorded source entry if 5678f002c6cSBruce M Simpson * the group has not been joined. 5688f002c6cSBruce M Simpson * 5698f002c6cSBruce M Simpson * Return 0 if the source didn't exist or was already marked as recorded. 5708f002c6cSBruce M Simpson * Return 1 if the source was marked as recorded by this function. 5718f002c6cSBruce M Simpson * Return <0 if any error occured (negated errno code). 5728f002c6cSBruce M Simpson */ 5738f002c6cSBruce M Simpson int 5748f002c6cSBruce M Simpson in6m_record_source(struct in6_multi *inm, const struct in6_addr *addr) 5758f002c6cSBruce M Simpson { 5768f002c6cSBruce M Simpson struct ip6_msource find; 5778f002c6cSBruce M Simpson struct ip6_msource *ims, *nims; 5788f002c6cSBruce M Simpson 5798f002c6cSBruce M Simpson IN6_MULTI_LOCK_ASSERT(); 5808f002c6cSBruce M Simpson 5818f002c6cSBruce M Simpson find.im6s_addr = *addr; 5828f002c6cSBruce M Simpson ims = RB_FIND(ip6_msource_tree, &inm->in6m_srcs, &find); 5838f002c6cSBruce M Simpson if (ims && ims->im6s_stp) 5848f002c6cSBruce M Simpson return (0); 5858f002c6cSBruce M Simpson if (ims == NULL) { 5868f002c6cSBruce M Simpson if (inm->in6m_nsrc == in6_mcast_maxgrpsrc) 5878f002c6cSBruce M Simpson return (-ENOSPC); 5888f002c6cSBruce M Simpson nims = malloc(sizeof(struct ip6_msource), M_IP6MSOURCE, 5898f002c6cSBruce M Simpson M_NOWAIT | M_ZERO); 5908f002c6cSBruce M Simpson if (nims == NULL) 5918f002c6cSBruce M Simpson return (-ENOMEM); 5928f002c6cSBruce M Simpson nims->im6s_addr = find.im6s_addr; 5938f002c6cSBruce M Simpson RB_INSERT(ip6_msource_tree, &inm->in6m_srcs, nims); 5948f002c6cSBruce M Simpson ++inm->in6m_nsrc; 5958f002c6cSBruce M Simpson ims = nims; 5968f002c6cSBruce M Simpson } 5978f002c6cSBruce M Simpson 5988f002c6cSBruce M Simpson /* 5998f002c6cSBruce M Simpson * Mark the source as recorded and update the recorded 6008f002c6cSBruce M Simpson * source count. 6018f002c6cSBruce M Simpson */ 6028f002c6cSBruce M Simpson ++ims->im6s_stp; 6038f002c6cSBruce M Simpson ++inm->in6m_st[1].iss_rec; 6048f002c6cSBruce M Simpson 6058f002c6cSBruce M Simpson return (1); 6068f002c6cSBruce M Simpson } 6078f002c6cSBruce M Simpson 6088f002c6cSBruce M Simpson /* 6098f002c6cSBruce M Simpson * Return a pointer to an in6_msource owned by an in6_mfilter, 6108f002c6cSBruce M Simpson * given its source address. 6118f002c6cSBruce M Simpson * Lazy-allocate if needed. If this is a new entry its filter state is 6128f002c6cSBruce M Simpson * undefined at t0. 6138f002c6cSBruce M Simpson * 6148f002c6cSBruce M Simpson * imf is the filter set being modified. 6158f002c6cSBruce M Simpson * addr is the source address. 6168f002c6cSBruce M Simpson * 6178f002c6cSBruce M Simpson * SMPng: May be called with locks held; malloc must not block. 6188f002c6cSBruce M Simpson */ 6198f002c6cSBruce M Simpson static int 6208f002c6cSBruce M Simpson im6f_get_source(struct in6_mfilter *imf, const struct sockaddr_in6 *psin, 6218f002c6cSBruce M Simpson struct in6_msource **plims) 6228f002c6cSBruce M Simpson { 6238f002c6cSBruce M Simpson struct ip6_msource find; 6248f002c6cSBruce M Simpson struct ip6_msource *ims, *nims; 6258f002c6cSBruce M Simpson struct in6_msource *lims; 6268f002c6cSBruce M Simpson int error; 6278f002c6cSBruce M Simpson 6288f002c6cSBruce M Simpson error = 0; 6298f002c6cSBruce M Simpson ims = NULL; 6308f002c6cSBruce M Simpson lims = NULL; 6318f002c6cSBruce M Simpson 6328f002c6cSBruce M Simpson find.im6s_addr = psin->sin6_addr; 6338f002c6cSBruce M Simpson ims = RB_FIND(ip6_msource_tree, &imf->im6f_sources, &find); 6348f002c6cSBruce M Simpson lims = (struct in6_msource *)ims; 6358f002c6cSBruce M Simpson if (lims == NULL) { 6368f002c6cSBruce M Simpson if (imf->im6f_nsrc == in6_mcast_maxsocksrc) 6378f002c6cSBruce M Simpson return (ENOSPC); 6388f002c6cSBruce M Simpson nims = malloc(sizeof(struct in6_msource), M_IN6MFILTER, 6398f002c6cSBruce M Simpson M_NOWAIT | M_ZERO); 6408f002c6cSBruce M Simpson if (nims == NULL) 6418f002c6cSBruce M Simpson return (ENOMEM); 6428f002c6cSBruce M Simpson lims = (struct in6_msource *)nims; 6438f002c6cSBruce M Simpson lims->im6s_addr = find.im6s_addr; 6448f002c6cSBruce M Simpson lims->im6sl_st[0] = MCAST_UNDEFINED; 6458f002c6cSBruce M Simpson RB_INSERT(ip6_msource_tree, &imf->im6f_sources, nims); 6468f002c6cSBruce M Simpson ++imf->im6f_nsrc; 6478f002c6cSBruce M Simpson } 6488f002c6cSBruce M Simpson 6498f002c6cSBruce M Simpson *plims = lims; 6508f002c6cSBruce M Simpson 6518f002c6cSBruce M Simpson return (error); 6528f002c6cSBruce M Simpson } 6538f002c6cSBruce M Simpson 6548f002c6cSBruce M Simpson /* 6558f002c6cSBruce M Simpson * Graft a source entry into an existing socket-layer filter set, 6568f002c6cSBruce M Simpson * maintaining any required invariants and checking allocations. 6578f002c6cSBruce M Simpson * 6588f002c6cSBruce M Simpson * The source is marked as being in the new filter mode at t1. 6598f002c6cSBruce M Simpson * 6608f002c6cSBruce M Simpson * Return the pointer to the new node, otherwise return NULL. 6618f002c6cSBruce M Simpson */ 6628f002c6cSBruce M Simpson static struct in6_msource * 6638f002c6cSBruce M Simpson im6f_graft(struct in6_mfilter *imf, const uint8_t st1, 6648f002c6cSBruce M Simpson const struct sockaddr_in6 *psin) 6658f002c6cSBruce M Simpson { 6668f002c6cSBruce M Simpson struct ip6_msource *nims; 6678f002c6cSBruce M Simpson struct in6_msource *lims; 6688f002c6cSBruce M Simpson 6698f002c6cSBruce M Simpson nims = malloc(sizeof(struct in6_msource), M_IN6MFILTER, 6708f002c6cSBruce M Simpson M_NOWAIT | M_ZERO); 6718f002c6cSBruce M Simpson if (nims == NULL) 6728f002c6cSBruce M Simpson return (NULL); 6738f002c6cSBruce M Simpson lims = (struct in6_msource *)nims; 6748f002c6cSBruce M Simpson lims->im6s_addr = psin->sin6_addr; 6758f002c6cSBruce M Simpson lims->im6sl_st[0] = MCAST_UNDEFINED; 6768f002c6cSBruce M Simpson lims->im6sl_st[1] = st1; 6778f002c6cSBruce M Simpson RB_INSERT(ip6_msource_tree, &imf->im6f_sources, nims); 6788f002c6cSBruce M Simpson ++imf->im6f_nsrc; 6798f002c6cSBruce M Simpson 6808f002c6cSBruce M Simpson return (lims); 6818f002c6cSBruce M Simpson } 6828f002c6cSBruce M Simpson 6838f002c6cSBruce M Simpson /* 6848f002c6cSBruce M Simpson * Prune a source entry from an existing socket-layer filter set, 6858f002c6cSBruce M Simpson * maintaining any required invariants and checking allocations. 6868f002c6cSBruce M Simpson * 6878f002c6cSBruce M Simpson * The source is marked as being left at t1, it is not freed. 6888f002c6cSBruce M Simpson * 6898f002c6cSBruce M Simpson * Return 0 if no error occurred, otherwise return an errno value. 6908f002c6cSBruce M Simpson */ 6918f002c6cSBruce M Simpson static int 6928f002c6cSBruce M Simpson im6f_prune(struct in6_mfilter *imf, const struct sockaddr_in6 *psin) 6938f002c6cSBruce M Simpson { 6948f002c6cSBruce M Simpson struct ip6_msource find; 6958f002c6cSBruce M Simpson struct ip6_msource *ims; 6968f002c6cSBruce M Simpson struct in6_msource *lims; 6978f002c6cSBruce M Simpson 6988f002c6cSBruce M Simpson find.im6s_addr = psin->sin6_addr; 6998f002c6cSBruce M Simpson ims = RB_FIND(ip6_msource_tree, &imf->im6f_sources, &find); 7008f002c6cSBruce M Simpson if (ims == NULL) 7018f002c6cSBruce M Simpson return (ENOENT); 7028f002c6cSBruce M Simpson lims = (struct in6_msource *)ims; 7038f002c6cSBruce M Simpson lims->im6sl_st[1] = MCAST_UNDEFINED; 7048f002c6cSBruce M Simpson return (0); 7058f002c6cSBruce M Simpson } 7068f002c6cSBruce M Simpson 7078f002c6cSBruce M Simpson /* 7088f002c6cSBruce M Simpson * Revert socket-layer filter set deltas at t1 to t0 state. 7098f002c6cSBruce M Simpson */ 7108f002c6cSBruce M Simpson static void 7118f002c6cSBruce M Simpson im6f_rollback(struct in6_mfilter *imf) 7128f002c6cSBruce M Simpson { 7138f002c6cSBruce M Simpson struct ip6_msource *ims, *tims; 7148f002c6cSBruce M Simpson struct in6_msource *lims; 7158f002c6cSBruce M Simpson 7168f002c6cSBruce M Simpson RB_FOREACH_SAFE(ims, ip6_msource_tree, &imf->im6f_sources, tims) { 7178f002c6cSBruce M Simpson lims = (struct in6_msource *)ims; 7188f002c6cSBruce M Simpson if (lims->im6sl_st[0] == lims->im6sl_st[1]) { 7198f002c6cSBruce M Simpson /* no change at t1 */ 7208f002c6cSBruce M Simpson continue; 7218f002c6cSBruce M Simpson } else if (lims->im6sl_st[0] != MCAST_UNDEFINED) { 7228f002c6cSBruce M Simpson /* revert change to existing source at t1 */ 7238f002c6cSBruce M Simpson lims->im6sl_st[1] = lims->im6sl_st[0]; 7248f002c6cSBruce M Simpson } else { 7258f002c6cSBruce M Simpson /* revert source added t1 */ 7268f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: free ims %p", __func__, ims); 7278f002c6cSBruce M Simpson RB_REMOVE(ip6_msource_tree, &imf->im6f_sources, ims); 7288f002c6cSBruce M Simpson free(ims, M_IN6MFILTER); 7298f002c6cSBruce M Simpson imf->im6f_nsrc--; 7308f002c6cSBruce M Simpson } 7318f002c6cSBruce M Simpson } 7328f002c6cSBruce M Simpson imf->im6f_st[1] = imf->im6f_st[0]; 7338f002c6cSBruce M Simpson } 7348f002c6cSBruce M Simpson 7358f002c6cSBruce M Simpson /* 7368f002c6cSBruce M Simpson * Mark socket-layer filter set as INCLUDE {} at t1. 7378f002c6cSBruce M Simpson */ 7388f002c6cSBruce M Simpson static void 7398f002c6cSBruce M Simpson im6f_leave(struct in6_mfilter *imf) 7408f002c6cSBruce M Simpson { 7418f002c6cSBruce M Simpson struct ip6_msource *ims; 7428f002c6cSBruce M Simpson struct in6_msource *lims; 7438f002c6cSBruce M Simpson 7448f002c6cSBruce M Simpson RB_FOREACH(ims, ip6_msource_tree, &imf->im6f_sources) { 7458f002c6cSBruce M Simpson lims = (struct in6_msource *)ims; 7468f002c6cSBruce M Simpson lims->im6sl_st[1] = MCAST_UNDEFINED; 7478f002c6cSBruce M Simpson } 7488f002c6cSBruce M Simpson imf->im6f_st[1] = MCAST_INCLUDE; 7498f002c6cSBruce M Simpson } 7508f002c6cSBruce M Simpson 7518f002c6cSBruce M Simpson /* 7528f002c6cSBruce M Simpson * Mark socket-layer filter set deltas as committed. 7538f002c6cSBruce M Simpson */ 7548f002c6cSBruce M Simpson static void 7558f002c6cSBruce M Simpson im6f_commit(struct in6_mfilter *imf) 7568f002c6cSBruce M Simpson { 7578f002c6cSBruce M Simpson struct ip6_msource *ims; 7588f002c6cSBruce M Simpson struct in6_msource *lims; 7598f002c6cSBruce M Simpson 7608f002c6cSBruce M Simpson RB_FOREACH(ims, ip6_msource_tree, &imf->im6f_sources) { 7618f002c6cSBruce M Simpson lims = (struct in6_msource *)ims; 7628f002c6cSBruce M Simpson lims->im6sl_st[0] = lims->im6sl_st[1]; 7638f002c6cSBruce M Simpson } 7648f002c6cSBruce M Simpson imf->im6f_st[0] = imf->im6f_st[1]; 7658f002c6cSBruce M Simpson } 7668f002c6cSBruce M Simpson 7678f002c6cSBruce M Simpson /* 7688f002c6cSBruce M Simpson * Reap unreferenced sources from socket-layer filter set. 7698f002c6cSBruce M Simpson */ 7708f002c6cSBruce M Simpson static void 7718f002c6cSBruce M Simpson im6f_reap(struct in6_mfilter *imf) 7728f002c6cSBruce M Simpson { 7738f002c6cSBruce M Simpson struct ip6_msource *ims, *tims; 7748f002c6cSBruce M Simpson struct in6_msource *lims; 7758f002c6cSBruce M Simpson 7768f002c6cSBruce M Simpson RB_FOREACH_SAFE(ims, ip6_msource_tree, &imf->im6f_sources, tims) { 7778f002c6cSBruce M Simpson lims = (struct in6_msource *)ims; 7788f002c6cSBruce M Simpson if ((lims->im6sl_st[0] == MCAST_UNDEFINED) && 7798f002c6cSBruce M Simpson (lims->im6sl_st[1] == MCAST_UNDEFINED)) { 7808f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: free lims %p", __func__, ims); 7818f002c6cSBruce M Simpson RB_REMOVE(ip6_msource_tree, &imf->im6f_sources, ims); 7828f002c6cSBruce M Simpson free(ims, M_IN6MFILTER); 7838f002c6cSBruce M Simpson imf->im6f_nsrc--; 7848f002c6cSBruce M Simpson } 7858f002c6cSBruce M Simpson } 7868f002c6cSBruce M Simpson } 7878f002c6cSBruce M Simpson 7888f002c6cSBruce M Simpson /* 7898f002c6cSBruce M Simpson * Purge socket-layer filter set. 7908f002c6cSBruce M Simpson */ 7918f002c6cSBruce M Simpson static void 7928f002c6cSBruce M Simpson im6f_purge(struct in6_mfilter *imf) 7938f002c6cSBruce M Simpson { 7948f002c6cSBruce M Simpson struct ip6_msource *ims, *tims; 7958f002c6cSBruce M Simpson 7968f002c6cSBruce M Simpson RB_FOREACH_SAFE(ims, ip6_msource_tree, &imf->im6f_sources, tims) { 7978f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: free ims %p", __func__, ims); 7988f002c6cSBruce M Simpson RB_REMOVE(ip6_msource_tree, &imf->im6f_sources, ims); 7998f002c6cSBruce M Simpson free(ims, M_IN6MFILTER); 8008f002c6cSBruce M Simpson imf->im6f_nsrc--; 8018f002c6cSBruce M Simpson } 8028f002c6cSBruce M Simpson imf->im6f_st[0] = imf->im6f_st[1] = MCAST_UNDEFINED; 8038f002c6cSBruce M Simpson KASSERT(RB_EMPTY(&imf->im6f_sources), 8048f002c6cSBruce M Simpson ("%s: im6f_sources not empty", __func__)); 8058f002c6cSBruce M Simpson } 8068f002c6cSBruce M Simpson 8078f002c6cSBruce M Simpson /* 8088f002c6cSBruce M Simpson * Look up a source filter entry for a multicast group. 8098f002c6cSBruce M Simpson * 8108f002c6cSBruce M Simpson * inm is the group descriptor to work with. 8118f002c6cSBruce M Simpson * addr is the IPv6 address to look up. 8128f002c6cSBruce M Simpson * noalloc may be non-zero to suppress allocation of sources. 8138f002c6cSBruce M Simpson * *pims will be set to the address of the retrieved or allocated source. 8148f002c6cSBruce M Simpson * 8158f002c6cSBruce M Simpson * SMPng: NOTE: may be called with locks held. 8168f002c6cSBruce M Simpson * Return 0 if successful, otherwise return a non-zero error code. 8178f002c6cSBruce M Simpson */ 8188f002c6cSBruce M Simpson static int 8198f002c6cSBruce M Simpson in6m_get_source(struct in6_multi *inm, const struct in6_addr *addr, 8208f002c6cSBruce M Simpson const int noalloc, struct ip6_msource **pims) 8218f002c6cSBruce M Simpson { 8228f002c6cSBruce M Simpson struct ip6_msource find; 8238f002c6cSBruce M Simpson struct ip6_msource *ims, *nims; 8248f002c6cSBruce M Simpson #ifdef KTR 8258f002c6cSBruce M Simpson char ip6tbuf[INET6_ADDRSTRLEN]; 8268f002c6cSBruce M Simpson #endif 8278f002c6cSBruce M Simpson 8288f002c6cSBruce M Simpson find.im6s_addr = *addr; 8298f002c6cSBruce M Simpson ims = RB_FIND(ip6_msource_tree, &inm->in6m_srcs, &find); 8308f002c6cSBruce M Simpson if (ims == NULL && !noalloc) { 8318f002c6cSBruce M Simpson if (inm->in6m_nsrc == in6_mcast_maxgrpsrc) 8328f002c6cSBruce M Simpson return (ENOSPC); 8338f002c6cSBruce M Simpson nims = malloc(sizeof(struct ip6_msource), M_IP6MSOURCE, 8348f002c6cSBruce M Simpson M_NOWAIT | M_ZERO); 8358f002c6cSBruce M Simpson if (nims == NULL) 8368f002c6cSBruce M Simpson return (ENOMEM); 8378f002c6cSBruce M Simpson nims->im6s_addr = *addr; 8388f002c6cSBruce M Simpson RB_INSERT(ip6_msource_tree, &inm->in6m_srcs, nims); 8398f002c6cSBruce M Simpson ++inm->in6m_nsrc; 8408f002c6cSBruce M Simpson ims = nims; 8418f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: allocated %s as %p", __func__, 8428f002c6cSBruce M Simpson ip6_sprintf(ip6tbuf, addr), ims); 8438f002c6cSBruce M Simpson } 8448f002c6cSBruce M Simpson 8458f002c6cSBruce M Simpson *pims = ims; 8468f002c6cSBruce M Simpson return (0); 8478f002c6cSBruce M Simpson } 8488f002c6cSBruce M Simpson 8498f002c6cSBruce M Simpson /* 8508f002c6cSBruce M Simpson * Merge socket-layer source into MLD-layer source. 8518f002c6cSBruce M Simpson * If rollback is non-zero, perform the inverse of the merge. 8528f002c6cSBruce M Simpson */ 8538f002c6cSBruce M Simpson static void 8548f002c6cSBruce M Simpson im6s_merge(struct ip6_msource *ims, const struct in6_msource *lims, 8558f002c6cSBruce M Simpson const int rollback) 8568f002c6cSBruce M Simpson { 8578f002c6cSBruce M Simpson int n = rollback ? -1 : 1; 8588f002c6cSBruce M Simpson #ifdef KTR 8598f002c6cSBruce M Simpson char ip6tbuf[INET6_ADDRSTRLEN]; 8608f002c6cSBruce M Simpson 8618f002c6cSBruce M Simpson ip6_sprintf(ip6tbuf, &lims->im6s_addr); 8628f002c6cSBruce M Simpson #endif 8638f002c6cSBruce M Simpson 8648f002c6cSBruce M Simpson if (lims->im6sl_st[0] == MCAST_EXCLUDE) { 8658f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: t1 ex -= %d on %s", __func__, n, ip6tbuf); 8668f002c6cSBruce M Simpson ims->im6s_st[1].ex -= n; 8678f002c6cSBruce M Simpson } else if (lims->im6sl_st[0] == MCAST_INCLUDE) { 8688f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: t1 in -= %d on %s", __func__, n, ip6tbuf); 8698f002c6cSBruce M Simpson ims->im6s_st[1].in -= n; 8708f002c6cSBruce M Simpson } 8718f002c6cSBruce M Simpson 8728f002c6cSBruce M Simpson if (lims->im6sl_st[1] == MCAST_EXCLUDE) { 8738f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: t1 ex += %d on %s", __func__, n, ip6tbuf); 8748f002c6cSBruce M Simpson ims->im6s_st[1].ex += n; 8758f002c6cSBruce M Simpson } else if (lims->im6sl_st[1] == MCAST_INCLUDE) { 8768f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: t1 in += %d on %s", __func__, n, ip6tbuf); 8778f002c6cSBruce M Simpson ims->im6s_st[1].in += n; 8788f002c6cSBruce M Simpson } 8798f002c6cSBruce M Simpson } 8808f002c6cSBruce M Simpson 8818f002c6cSBruce M Simpson /* 8828f002c6cSBruce M Simpson * Atomically update the global in6_multi state, when a membership's 8838f002c6cSBruce M Simpson * filter list is being updated in any way. 8848f002c6cSBruce M Simpson * 8858f002c6cSBruce M Simpson * imf is the per-inpcb-membership group filter pointer. 8868f002c6cSBruce M Simpson * A fake imf may be passed for in-kernel consumers. 8878f002c6cSBruce M Simpson * 8888f002c6cSBruce M Simpson * XXX This is a candidate for a set-symmetric-difference style loop 8898f002c6cSBruce M Simpson * which would eliminate the repeated lookup from root of ims nodes, 8908f002c6cSBruce M Simpson * as they share the same key space. 8918f002c6cSBruce M Simpson * 8928f002c6cSBruce M Simpson * If any error occurred this function will back out of refcounts 8938f002c6cSBruce M Simpson * and return a non-zero value. 8948f002c6cSBruce M Simpson */ 8958f002c6cSBruce M Simpson static int 8968f002c6cSBruce M Simpson in6m_merge(struct in6_multi *inm, /*const*/ struct in6_mfilter *imf) 8978f002c6cSBruce M Simpson { 8988f002c6cSBruce M Simpson struct ip6_msource *ims, *nims; 8998f002c6cSBruce M Simpson struct in6_msource *lims; 9008f002c6cSBruce M Simpson int schanged, error; 9018f002c6cSBruce M Simpson int nsrc0, nsrc1; 9028f002c6cSBruce M Simpson 9038f002c6cSBruce M Simpson schanged = 0; 9048f002c6cSBruce M Simpson error = 0; 9058f002c6cSBruce M Simpson nsrc1 = nsrc0 = 0; 9068f002c6cSBruce M Simpson 9078f002c6cSBruce M Simpson /* 9088f002c6cSBruce M Simpson * Update the source filters first, as this may fail. 9098f002c6cSBruce M Simpson * Maintain count of in-mode filters at t0, t1. These are 9108f002c6cSBruce M Simpson * used to work out if we transition into ASM mode or not. 9118f002c6cSBruce M Simpson * Maintain a count of source filters whose state was 9128f002c6cSBruce M Simpson * actually modified by this operation. 9138f002c6cSBruce M Simpson */ 9148f002c6cSBruce M Simpson RB_FOREACH(ims, ip6_msource_tree, &imf->im6f_sources) { 9158f002c6cSBruce M Simpson lims = (struct in6_msource *)ims; 9168f002c6cSBruce M Simpson if (lims->im6sl_st[0] == imf->im6f_st[0]) nsrc0++; 9178f002c6cSBruce M Simpson if (lims->im6sl_st[1] == imf->im6f_st[1]) nsrc1++; 9188f002c6cSBruce M Simpson if (lims->im6sl_st[0] == lims->im6sl_st[1]) continue; 9198f002c6cSBruce M Simpson error = in6m_get_source(inm, &lims->im6s_addr, 0, &nims); 9208f002c6cSBruce M Simpson ++schanged; 9218f002c6cSBruce M Simpson if (error) 9228f002c6cSBruce M Simpson break; 9238f002c6cSBruce M Simpson im6s_merge(nims, lims, 0); 9248f002c6cSBruce M Simpson } 9258f002c6cSBruce M Simpson if (error) { 9268f002c6cSBruce M Simpson struct ip6_msource *bims; 9278f002c6cSBruce M Simpson 9288f002c6cSBruce M Simpson RB_FOREACH_REVERSE_FROM(ims, ip6_msource_tree, nims) { 9298f002c6cSBruce M Simpson lims = (struct in6_msource *)ims; 9308f002c6cSBruce M Simpson if (lims->im6sl_st[0] == lims->im6sl_st[1]) 9318f002c6cSBruce M Simpson continue; 9328f002c6cSBruce M Simpson (void)in6m_get_source(inm, &lims->im6s_addr, 1, &bims); 9338f002c6cSBruce M Simpson if (bims == NULL) 9348f002c6cSBruce M Simpson continue; 9358f002c6cSBruce M Simpson im6s_merge(bims, lims, 1); 9368f002c6cSBruce M Simpson } 9378f002c6cSBruce M Simpson goto out_reap; 9388f002c6cSBruce M Simpson } 9398f002c6cSBruce M Simpson 9408f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: imf filters in-mode: %d at t0, %d at t1", 9418f002c6cSBruce M Simpson __func__, nsrc0, nsrc1); 9428f002c6cSBruce M Simpson 9438f002c6cSBruce M Simpson /* Handle transition between INCLUDE {n} and INCLUDE {} on socket. */ 9448f002c6cSBruce M Simpson if (imf->im6f_st[0] == imf->im6f_st[1] && 9458f002c6cSBruce M Simpson imf->im6f_st[1] == MCAST_INCLUDE) { 9468f002c6cSBruce M Simpson if (nsrc1 == 0) { 9478f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: --in on inm at t1", __func__); 9488f002c6cSBruce M Simpson --inm->in6m_st[1].iss_in; 9498f002c6cSBruce M Simpson } 9508f002c6cSBruce M Simpson } 9518f002c6cSBruce M Simpson 9528f002c6cSBruce M Simpson /* Handle filter mode transition on socket. */ 9538f002c6cSBruce M Simpson if (imf->im6f_st[0] != imf->im6f_st[1]) { 9548f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: imf transition %d to %d", 9558f002c6cSBruce M Simpson __func__, imf->im6f_st[0], imf->im6f_st[1]); 9568f002c6cSBruce M Simpson 9578f002c6cSBruce M Simpson if (imf->im6f_st[0] == MCAST_EXCLUDE) { 9588f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: --ex on inm at t1", __func__); 9598f002c6cSBruce M Simpson --inm->in6m_st[1].iss_ex; 9608f002c6cSBruce M Simpson } else if (imf->im6f_st[0] == MCAST_INCLUDE) { 9618f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: --in on inm at t1", __func__); 9628f002c6cSBruce M Simpson --inm->in6m_st[1].iss_in; 9638f002c6cSBruce M Simpson } 9648f002c6cSBruce M Simpson 9658f002c6cSBruce M Simpson if (imf->im6f_st[1] == MCAST_EXCLUDE) { 9668f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: ex++ on inm at t1", __func__); 9678f002c6cSBruce M Simpson inm->in6m_st[1].iss_ex++; 9688f002c6cSBruce M Simpson } else if (imf->im6f_st[1] == MCAST_INCLUDE && nsrc1 > 0) { 9698f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: in++ on inm at t1", __func__); 9708f002c6cSBruce M Simpson inm->in6m_st[1].iss_in++; 9718f002c6cSBruce M Simpson } 9728f002c6cSBruce M Simpson } 9738f002c6cSBruce M Simpson 9748f002c6cSBruce M Simpson /* 9758f002c6cSBruce M Simpson * Track inm filter state in terms of listener counts. 9768f002c6cSBruce M Simpson * If there are any exclusive listeners, stack-wide 9778f002c6cSBruce M Simpson * membership is exclusive. 9788f002c6cSBruce M Simpson * Otherwise, if only inclusive listeners, stack-wide is inclusive. 9798f002c6cSBruce M Simpson * If no listeners remain, state is undefined at t1, 9808f002c6cSBruce M Simpson * and the MLD lifecycle for this group should finish. 9818f002c6cSBruce M Simpson */ 9828f002c6cSBruce M Simpson if (inm->in6m_st[1].iss_ex > 0) { 9838f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: transition to EX", __func__); 9848f002c6cSBruce M Simpson inm->in6m_st[1].iss_fmode = MCAST_EXCLUDE; 9858f002c6cSBruce M Simpson } else if (inm->in6m_st[1].iss_in > 0) { 9868f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: transition to IN", __func__); 9878f002c6cSBruce M Simpson inm->in6m_st[1].iss_fmode = MCAST_INCLUDE; 9888f002c6cSBruce M Simpson } else { 9898f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: transition to UNDEF", __func__); 9908f002c6cSBruce M Simpson inm->in6m_st[1].iss_fmode = MCAST_UNDEFINED; 9918f002c6cSBruce M Simpson } 9928f002c6cSBruce M Simpson 9938f002c6cSBruce M Simpson /* Decrement ASM listener count on transition out of ASM mode. */ 9948f002c6cSBruce M Simpson if (imf->im6f_st[0] == MCAST_EXCLUDE && nsrc0 == 0) { 9958f002c6cSBruce M Simpson if ((imf->im6f_st[1] != MCAST_EXCLUDE) || 9968f002c6cSBruce M Simpson (imf->im6f_st[1] == MCAST_EXCLUDE && nsrc1 > 0)) 9978f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: --asm on inm at t1", __func__); 9988f002c6cSBruce M Simpson --inm->in6m_st[1].iss_asm; 9998f002c6cSBruce M Simpson } 10008f002c6cSBruce M Simpson 10018f002c6cSBruce M Simpson /* Increment ASM listener count on transition to ASM mode. */ 10028f002c6cSBruce M Simpson if (imf->im6f_st[1] == MCAST_EXCLUDE && nsrc1 == 0) { 10038f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: asm++ on inm at t1", __func__); 10048f002c6cSBruce M Simpson inm->in6m_st[1].iss_asm++; 10058f002c6cSBruce M Simpson } 10068f002c6cSBruce M Simpson 10078f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: merged imf %p to inm %p", __func__, imf, inm); 10088f002c6cSBruce M Simpson in6m_print(inm); 10098f002c6cSBruce M Simpson 10108f002c6cSBruce M Simpson out_reap: 10118f002c6cSBruce M Simpson if (schanged > 0) { 10128f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: sources changed; reaping", __func__); 10138f002c6cSBruce M Simpson in6m_reap(inm); 10148f002c6cSBruce M Simpson } 10158f002c6cSBruce M Simpson return (error); 10168f002c6cSBruce M Simpson } 10178f002c6cSBruce M Simpson 10188f002c6cSBruce M Simpson /* 10198f002c6cSBruce M Simpson * Mark an in6_multi's filter set deltas as committed. 10208f002c6cSBruce M Simpson * Called by MLD after a state change has been enqueued. 10218f002c6cSBruce M Simpson */ 10228f002c6cSBruce M Simpson void 10238f002c6cSBruce M Simpson in6m_commit(struct in6_multi *inm) 10248f002c6cSBruce M Simpson { 10258f002c6cSBruce M Simpson struct ip6_msource *ims; 10268f002c6cSBruce M Simpson 10278f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: commit inm %p", __func__, inm); 10288f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: pre commit:", __func__); 10298f002c6cSBruce M Simpson in6m_print(inm); 10308f002c6cSBruce M Simpson 10318f002c6cSBruce M Simpson RB_FOREACH(ims, ip6_msource_tree, &inm->in6m_srcs) { 10328f002c6cSBruce M Simpson ims->im6s_st[0] = ims->im6s_st[1]; 10338f002c6cSBruce M Simpson } 10348f002c6cSBruce M Simpson inm->in6m_st[0] = inm->in6m_st[1]; 10358f002c6cSBruce M Simpson } 10368f002c6cSBruce M Simpson 10378f002c6cSBruce M Simpson /* 10388f002c6cSBruce M Simpson * Reap unreferenced nodes from an in6_multi's filter set. 10398f002c6cSBruce M Simpson */ 10408f002c6cSBruce M Simpson static void 10418f002c6cSBruce M Simpson in6m_reap(struct in6_multi *inm) 10428f002c6cSBruce M Simpson { 10438f002c6cSBruce M Simpson struct ip6_msource *ims, *tims; 10448f002c6cSBruce M Simpson 10458f002c6cSBruce M Simpson RB_FOREACH_SAFE(ims, ip6_msource_tree, &inm->in6m_srcs, tims) { 10468f002c6cSBruce M Simpson if (ims->im6s_st[0].ex > 0 || ims->im6s_st[0].in > 0 || 10478f002c6cSBruce M Simpson ims->im6s_st[1].ex > 0 || ims->im6s_st[1].in > 0 || 10488f002c6cSBruce M Simpson ims->im6s_stp != 0) 10498f002c6cSBruce M Simpson continue; 10508f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: free ims %p", __func__, ims); 10518f002c6cSBruce M Simpson RB_REMOVE(ip6_msource_tree, &inm->in6m_srcs, ims); 10528f002c6cSBruce M Simpson free(ims, M_IP6MSOURCE); 10538f002c6cSBruce M Simpson inm->in6m_nsrc--; 10548f002c6cSBruce M Simpson } 10558f002c6cSBruce M Simpson } 10568f002c6cSBruce M Simpson 10578f002c6cSBruce M Simpson /* 10588f002c6cSBruce M Simpson * Purge all source nodes from an in6_multi's filter set. 10598f002c6cSBruce M Simpson */ 10608f002c6cSBruce M Simpson static void 10618f002c6cSBruce M Simpson in6m_purge(struct in6_multi *inm) 10628f002c6cSBruce M Simpson { 10638f002c6cSBruce M Simpson struct ip6_msource *ims, *tims; 10648f002c6cSBruce M Simpson 10658f002c6cSBruce M Simpson RB_FOREACH_SAFE(ims, ip6_msource_tree, &inm->in6m_srcs, tims) { 10668f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: free ims %p", __func__, ims); 10678f002c6cSBruce M Simpson RB_REMOVE(ip6_msource_tree, &inm->in6m_srcs, ims); 10688f002c6cSBruce M Simpson free(ims, M_IP6MSOURCE); 10698f002c6cSBruce M Simpson inm->in6m_nsrc--; 10708f002c6cSBruce M Simpson } 10718f002c6cSBruce M Simpson } 10728f002c6cSBruce M Simpson 10738f002c6cSBruce M Simpson /* 10748f002c6cSBruce M Simpson * Join a multicast address w/o sources. 10758f002c6cSBruce M Simpson * KAME compatibility entry point. 10768f002c6cSBruce M Simpson * 10778f002c6cSBruce M Simpson * SMPng: Assume no mc locks held by caller. 10788f002c6cSBruce M Simpson */ 10798f002c6cSBruce M Simpson struct in6_multi_mship * 10808f002c6cSBruce M Simpson in6_joingroup(struct ifnet *ifp, struct in6_addr *mcaddr, 10818f002c6cSBruce M Simpson int *errorp, int delay) 10828f002c6cSBruce M Simpson { 10838f002c6cSBruce M Simpson struct in6_multi_mship *imm; 10848f002c6cSBruce M Simpson int error; 10858f002c6cSBruce M Simpson 10868f002c6cSBruce M Simpson imm = malloc(sizeof(*imm), M_IP6MADDR, M_NOWAIT); 10878f002c6cSBruce M Simpson if (imm == NULL) { 10888f002c6cSBruce M Simpson *errorp = ENOBUFS; 10898f002c6cSBruce M Simpson return (NULL); 10908f002c6cSBruce M Simpson } 10918f002c6cSBruce M Simpson 10928f002c6cSBruce M Simpson delay = (delay * PR_FASTHZ) / hz; 10938f002c6cSBruce M Simpson 10948f002c6cSBruce M Simpson error = in6_mc_join(ifp, mcaddr, NULL, &imm->i6mm_maddr, delay); 10958f002c6cSBruce M Simpson if (error) { 10968f002c6cSBruce M Simpson *errorp = error; 10978f002c6cSBruce M Simpson free(imm, M_IP6MADDR); 10988f002c6cSBruce M Simpson return (NULL); 10998f002c6cSBruce M Simpson } 11008f002c6cSBruce M Simpson 11018f002c6cSBruce M Simpson return (imm); 11028f002c6cSBruce M Simpson } 11038f002c6cSBruce M Simpson 11048f002c6cSBruce M Simpson /* 11058f002c6cSBruce M Simpson * Leave a multicast address w/o sources. 11068f002c6cSBruce M Simpson * KAME compatibility entry point. 11078f002c6cSBruce M Simpson * 11088f002c6cSBruce M Simpson * SMPng: Assume no mc locks held by caller. 11098f002c6cSBruce M Simpson */ 11108f002c6cSBruce M Simpson int 11118f002c6cSBruce M Simpson in6_leavegroup(struct in6_multi_mship *imm) 11128f002c6cSBruce M Simpson { 11138f002c6cSBruce M Simpson 11148f002c6cSBruce M Simpson if (imm->i6mm_maddr != NULL) 11158f002c6cSBruce M Simpson in6_mc_leave(imm->i6mm_maddr, NULL); 11168f002c6cSBruce M Simpson free(imm, M_IP6MADDR); 11178f002c6cSBruce M Simpson return 0; 11188f002c6cSBruce M Simpson } 11198f002c6cSBruce M Simpson 11208f002c6cSBruce M Simpson /* 11218f002c6cSBruce M Simpson * Join a multicast group; unlocked entry point. 11228f002c6cSBruce M Simpson * 11238f002c6cSBruce M Simpson * SMPng: XXX: in6_mc_join() is called from in6_control() when upper 11248f002c6cSBruce M Simpson * locks are not held. Fortunately, ifp is unlikely to have been detached 11258f002c6cSBruce M Simpson * at this point, so we assume it's OK to recurse. 11268f002c6cSBruce M Simpson */ 11278f002c6cSBruce M Simpson int 11288f002c6cSBruce M Simpson in6_mc_join(struct ifnet *ifp, const struct in6_addr *mcaddr, 11298f002c6cSBruce M Simpson /*const*/ struct in6_mfilter *imf, struct in6_multi **pinm, 11308f002c6cSBruce M Simpson const int delay) 11318f002c6cSBruce M Simpson { 11328f002c6cSBruce M Simpson int error; 11338f002c6cSBruce M Simpson 11348f002c6cSBruce M Simpson IN6_MULTI_LOCK(); 11358f002c6cSBruce M Simpson error = in6_mc_join_locked(ifp, mcaddr, imf, pinm, delay); 11368f002c6cSBruce M Simpson IN6_MULTI_UNLOCK(); 11378f002c6cSBruce M Simpson 11388f002c6cSBruce M Simpson return (error); 11398f002c6cSBruce M Simpson } 11408f002c6cSBruce M Simpson 11418f002c6cSBruce M Simpson /* 11428f002c6cSBruce M Simpson * Join a multicast group; real entry point. 11438f002c6cSBruce M Simpson * 11448f002c6cSBruce M Simpson * Only preserves atomicity at inm level. 11458f002c6cSBruce M Simpson * NOTE: imf argument cannot be const due to sys/tree.h limitations. 11468f002c6cSBruce M Simpson * 11478f002c6cSBruce M Simpson * If the MLD downcall fails, the group is not joined, and an error 11488f002c6cSBruce M Simpson * code is returned. 11498f002c6cSBruce M Simpson */ 11508f002c6cSBruce M Simpson int 11518f002c6cSBruce M Simpson in6_mc_join_locked(struct ifnet *ifp, const struct in6_addr *mcaddr, 11528f002c6cSBruce M Simpson /*const*/ struct in6_mfilter *imf, struct in6_multi **pinm, 11538f002c6cSBruce M Simpson const int delay) 11548f002c6cSBruce M Simpson { 11558f002c6cSBruce M Simpson struct in6_mfilter timf; 11568f002c6cSBruce M Simpson struct in6_multi *inm; 11578f002c6cSBruce M Simpson int error; 11588f002c6cSBruce M Simpson #ifdef KTR 11598f002c6cSBruce M Simpson char ip6tbuf[INET6_ADDRSTRLEN]; 11608f002c6cSBruce M Simpson #endif 11618f002c6cSBruce M Simpson 11628f002c6cSBruce M Simpson IN6_MULTI_LOCK_ASSERT(); 11638f002c6cSBruce M Simpson 11648f002c6cSBruce M Simpson CTR4(KTR_MLD, "%s: join %s on %p(%s))", __func__, 11658f002c6cSBruce M Simpson ip6_sprintf(ip6tbuf, mcaddr), ifp, ifp->if_xname); 11668f002c6cSBruce M Simpson 11678f002c6cSBruce M Simpson error = 0; 11688f002c6cSBruce M Simpson inm = NULL; 11698f002c6cSBruce M Simpson 11708f002c6cSBruce M Simpson /* 11718f002c6cSBruce M Simpson * If no imf was specified (i.e. kernel consumer), 11728f002c6cSBruce M Simpson * fake one up and assume it is an ASM join. 11738f002c6cSBruce M Simpson */ 11748f002c6cSBruce M Simpson if (imf == NULL) { 11758f002c6cSBruce M Simpson im6f_init(&timf, MCAST_UNDEFINED, MCAST_EXCLUDE); 11768f002c6cSBruce M Simpson imf = &timf; 11778f002c6cSBruce M Simpson } 11788f002c6cSBruce M Simpson 11798f002c6cSBruce M Simpson error = in6_mc_get(ifp, mcaddr, &inm); 11808f002c6cSBruce M Simpson if (error) { 11818f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: in6_mc_get() failure", __func__); 11828f002c6cSBruce M Simpson return (error); 11838f002c6cSBruce M Simpson } 11848f002c6cSBruce M Simpson 11858f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: merge inm state", __func__); 11868f002c6cSBruce M Simpson error = in6m_merge(inm, imf); 11878f002c6cSBruce M Simpson if (error) { 11888f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed to merge inm state", __func__); 11898f002c6cSBruce M Simpson goto out_in6m_release; 11908f002c6cSBruce M Simpson } 11918f002c6cSBruce M Simpson 11928f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: doing mld downcall", __func__); 11938f002c6cSBruce M Simpson error = mld_change_state(inm, delay); 11948f002c6cSBruce M Simpson if (error) { 11958f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed to update source", __func__); 11968f002c6cSBruce M Simpson goto out_in6m_release; 11978f002c6cSBruce M Simpson } 11988f002c6cSBruce M Simpson 11998f002c6cSBruce M Simpson out_in6m_release: 12008f002c6cSBruce M Simpson if (error) { 12018f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: dropping ref on %p", __func__, inm); 12028f002c6cSBruce M Simpson in6m_release_locked(inm); 12038f002c6cSBruce M Simpson } else { 12048f002c6cSBruce M Simpson *pinm = inm; 12058f002c6cSBruce M Simpson } 12068f002c6cSBruce M Simpson 12078f002c6cSBruce M Simpson return (error); 12088f002c6cSBruce M Simpson } 12098f002c6cSBruce M Simpson 12108f002c6cSBruce M Simpson /* 12118f002c6cSBruce M Simpson * Leave a multicast group; unlocked entry point. 12128f002c6cSBruce M Simpson */ 12138f002c6cSBruce M Simpson int 12148f002c6cSBruce M Simpson in6_mc_leave(struct in6_multi *inm, /*const*/ struct in6_mfilter *imf) 12158f002c6cSBruce M Simpson { 12168f002c6cSBruce M Simpson struct ifnet *ifp; 12178f002c6cSBruce M Simpson int error; 12188f002c6cSBruce M Simpson 12198f002c6cSBruce M Simpson ifp = inm->in6m_ifp; 12208f002c6cSBruce M Simpson 12218f002c6cSBruce M Simpson IN6_MULTI_LOCK(); 12228f002c6cSBruce M Simpson error = in6_mc_leave_locked(inm, imf); 12238f002c6cSBruce M Simpson IN6_MULTI_UNLOCK(); 12248f002c6cSBruce M Simpson 12258f002c6cSBruce M Simpson return (error); 12268f002c6cSBruce M Simpson } 12278f002c6cSBruce M Simpson 12288f002c6cSBruce M Simpson /* 12298f002c6cSBruce M Simpson * Leave a multicast group; real entry point. 12308f002c6cSBruce M Simpson * All source filters will be expunged. 12318f002c6cSBruce M Simpson * 12328f002c6cSBruce M Simpson * Only preserves atomicity at inm level. 12338f002c6cSBruce M Simpson * 12348f002c6cSBruce M Simpson * Holding the write lock for the INP which contains imf 12358f002c6cSBruce M Simpson * is highly advisable. We can't assert for it as imf does not 12368f002c6cSBruce M Simpson * contain a back-pointer to the owning inp. 12378f002c6cSBruce M Simpson * 12388f002c6cSBruce M Simpson * Note: This is not the same as in6m_release(*) as this function also 12398f002c6cSBruce M Simpson * makes a state change downcall into MLD. 12408f002c6cSBruce M Simpson */ 12418f002c6cSBruce M Simpson int 12428f002c6cSBruce M Simpson in6_mc_leave_locked(struct in6_multi *inm, /*const*/ struct in6_mfilter *imf) 12438f002c6cSBruce M Simpson { 12448f002c6cSBruce M Simpson struct in6_mfilter timf; 12458f002c6cSBruce M Simpson int error; 12468f002c6cSBruce M Simpson #ifdef KTR 12478f002c6cSBruce M Simpson char ip6tbuf[INET6_ADDRSTRLEN]; 12488f002c6cSBruce M Simpson #endif 12498f002c6cSBruce M Simpson 12508f002c6cSBruce M Simpson error = 0; 12518f002c6cSBruce M Simpson 12528f002c6cSBruce M Simpson IN6_MULTI_LOCK_ASSERT(); 12538f002c6cSBruce M Simpson 12548f002c6cSBruce M Simpson CTR5(KTR_MLD, "%s: leave inm %p, %s/%s, imf %p", __func__, 12558f002c6cSBruce M Simpson inm, ip6_sprintf(ip6tbuf, &inm->in6m_addr), 12568f002c6cSBruce M Simpson (in6m_is_ifp_detached(inm) ? "null" : inm->in6m_ifp->if_xname), 12578f002c6cSBruce M Simpson imf); 12588f002c6cSBruce M Simpson 12598f002c6cSBruce M Simpson /* 12608f002c6cSBruce M Simpson * If no imf was specified (i.e. kernel consumer), 12618f002c6cSBruce M Simpson * fake one up and assume it is an ASM join. 12628f002c6cSBruce M Simpson */ 12638f002c6cSBruce M Simpson if (imf == NULL) { 12648f002c6cSBruce M Simpson im6f_init(&timf, MCAST_EXCLUDE, MCAST_UNDEFINED); 12658f002c6cSBruce M Simpson imf = &timf; 12668f002c6cSBruce M Simpson } 12678f002c6cSBruce M Simpson 12688f002c6cSBruce M Simpson /* 12698f002c6cSBruce M Simpson * Begin state merge transaction at MLD layer. 12708f002c6cSBruce M Simpson * 12718f002c6cSBruce M Simpson * As this particular invocation should not cause any memory 12728f002c6cSBruce M Simpson * to be allocated, and there is no opportunity to roll back 12738f002c6cSBruce M Simpson * the transaction, it MUST NOT fail. 12748f002c6cSBruce M Simpson */ 12758f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: merge inm state", __func__); 12768f002c6cSBruce M Simpson error = in6m_merge(inm, imf); 12778f002c6cSBruce M Simpson KASSERT(error == 0, ("%s: failed to merge inm state", __func__)); 12788f002c6cSBruce M Simpson 12798f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: doing mld downcall", __func__); 12808f002c6cSBruce M Simpson error = mld_change_state(inm, 0); 12818f002c6cSBruce M Simpson if (error) 12828f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed mld downcall", __func__); 12838f002c6cSBruce M Simpson 12848f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: dropping ref on %p", __func__, inm); 12858f002c6cSBruce M Simpson in6m_release_locked(inm); 12868f002c6cSBruce M Simpson 12878f002c6cSBruce M Simpson return (error); 12888f002c6cSBruce M Simpson } 12898f002c6cSBruce M Simpson 12908f002c6cSBruce M Simpson /* 12918f002c6cSBruce M Simpson * Block or unblock an ASM multicast source on an inpcb. 12928f002c6cSBruce M Simpson * This implements the delta-based API described in RFC 3678. 12938f002c6cSBruce M Simpson * 12948f002c6cSBruce M Simpson * The delta-based API applies only to exclusive-mode memberships. 12958f002c6cSBruce M Simpson * An MLD downcall will be performed. 12968f002c6cSBruce M Simpson * 12978f002c6cSBruce M Simpson * SMPng: NOTE: Must take Giant as a join may create a new ifma. 12988f002c6cSBruce M Simpson * 12998f002c6cSBruce M Simpson * Return 0 if successful, otherwise return an appropriate error code. 13008f002c6cSBruce M Simpson */ 13018f002c6cSBruce M Simpson static int 13028f002c6cSBruce M Simpson in6p_block_unblock_source(struct inpcb *inp, struct sockopt *sopt) 13038f002c6cSBruce M Simpson { 13048f002c6cSBruce M Simpson INIT_VNET_NET(curvnet); 13058f002c6cSBruce M Simpson INIT_VNET_INET6(curvnet); 13068f002c6cSBruce M Simpson struct group_source_req gsr; 13078f002c6cSBruce M Simpson sockunion_t *gsa, *ssa; 13088f002c6cSBruce M Simpson struct ifnet *ifp; 13098f002c6cSBruce M Simpson struct in6_mfilter *imf; 13108f002c6cSBruce M Simpson struct ip6_moptions *imo; 13118f002c6cSBruce M Simpson struct in6_msource *ims; 13128f002c6cSBruce M Simpson struct in6_multi *inm; 13138f002c6cSBruce M Simpson size_t idx; 13148f002c6cSBruce M Simpson uint16_t fmode; 13158f002c6cSBruce M Simpson int error, doblock; 13168f002c6cSBruce M Simpson #ifdef KTR 13178f002c6cSBruce M Simpson char ip6tbuf[INET6_ADDRSTRLEN]; 13188f002c6cSBruce M Simpson #endif 13198f002c6cSBruce M Simpson 13208f002c6cSBruce M Simpson ifp = NULL; 13218f002c6cSBruce M Simpson error = 0; 13228f002c6cSBruce M Simpson doblock = 0; 13238f002c6cSBruce M Simpson 13248f002c6cSBruce M Simpson memset(&gsr, 0, sizeof(struct group_source_req)); 13258f002c6cSBruce M Simpson gsa = (sockunion_t *)&gsr.gsr_group; 13268f002c6cSBruce M Simpson ssa = (sockunion_t *)&gsr.gsr_source; 13278f002c6cSBruce M Simpson 13288f002c6cSBruce M Simpson switch (sopt->sopt_name) { 13298f002c6cSBruce M Simpson case MCAST_BLOCK_SOURCE: 13308f002c6cSBruce M Simpson case MCAST_UNBLOCK_SOURCE: 13318f002c6cSBruce M Simpson error = sooptcopyin(sopt, &gsr, 13328f002c6cSBruce M Simpson sizeof(struct group_source_req), 13338f002c6cSBruce M Simpson sizeof(struct group_source_req)); 13348f002c6cSBruce M Simpson if (error) 13358f002c6cSBruce M Simpson return (error); 13368f002c6cSBruce M Simpson 13378f002c6cSBruce M Simpson if (gsa->sin6.sin6_family != AF_INET6 || 13388f002c6cSBruce M Simpson gsa->sin6.sin6_len != sizeof(struct sockaddr_in6)) 13398f002c6cSBruce M Simpson return (EINVAL); 13408f002c6cSBruce M Simpson 13418f002c6cSBruce M Simpson if (ssa->sin6.sin6_family != AF_INET6 || 13428f002c6cSBruce M Simpson ssa->sin6.sin6_len != sizeof(struct sockaddr_in6)) 13438f002c6cSBruce M Simpson return (EINVAL); 13448f002c6cSBruce M Simpson 13458f002c6cSBruce M Simpson if (gsr.gsr_interface == 0 || V_if_index < gsr.gsr_interface) 13468f002c6cSBruce M Simpson return (EADDRNOTAVAIL); 13478f002c6cSBruce M Simpson 13488f002c6cSBruce M Simpson ifp = ifnet_byindex(gsr.gsr_interface); 13498f002c6cSBruce M Simpson 13508f002c6cSBruce M Simpson if (sopt->sopt_name == MCAST_BLOCK_SOURCE) 13518f002c6cSBruce M Simpson doblock = 1; 13528f002c6cSBruce M Simpson break; 13538f002c6cSBruce M Simpson 13548f002c6cSBruce M Simpson default: 13558f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: unknown sopt_name %d", 13568f002c6cSBruce M Simpson __func__, sopt->sopt_name); 13578f002c6cSBruce M Simpson return (EOPNOTSUPP); 13588f002c6cSBruce M Simpson break; 13598f002c6cSBruce M Simpson } 13608f002c6cSBruce M Simpson 13618f002c6cSBruce M Simpson if (!IN6_IS_ADDR_MULTICAST(&gsa->sin6.sin6_addr)) 13628f002c6cSBruce M Simpson return (EINVAL); 13638f002c6cSBruce M Simpson 13648f002c6cSBruce M Simpson /* 13658f002c6cSBruce M Simpson * Check if we are actually a member of this group. 13668f002c6cSBruce M Simpson */ 13678f002c6cSBruce M Simpson imo = in6p_findmoptions(inp); 13688f002c6cSBruce M Simpson idx = im6o_match_group(imo, ifp, &gsa->sa); 13698f002c6cSBruce M Simpson if (idx == -1 || imo->im6o_mfilters == NULL) { 13708f002c6cSBruce M Simpson error = EADDRNOTAVAIL; 13718f002c6cSBruce M Simpson goto out_in6p_locked; 13728f002c6cSBruce M Simpson } 13738f002c6cSBruce M Simpson 13748f002c6cSBruce M Simpson KASSERT(imo->im6o_mfilters != NULL, 13758f002c6cSBruce M Simpson ("%s: im6o_mfilters not allocated", __func__)); 13768f002c6cSBruce M Simpson imf = &imo->im6o_mfilters[idx]; 13778f002c6cSBruce M Simpson inm = imo->im6o_membership[idx]; 13788f002c6cSBruce M Simpson 13798f002c6cSBruce M Simpson /* 13808f002c6cSBruce M Simpson * Attempting to use the delta-based API on an 13818f002c6cSBruce M Simpson * non exclusive-mode membership is an error. 13828f002c6cSBruce M Simpson */ 13838f002c6cSBruce M Simpson fmode = imf->im6f_st[0]; 13848f002c6cSBruce M Simpson if (fmode != MCAST_EXCLUDE) { 13858f002c6cSBruce M Simpson error = EINVAL; 13868f002c6cSBruce M Simpson goto out_in6p_locked; 13878f002c6cSBruce M Simpson } 13888f002c6cSBruce M Simpson 13898f002c6cSBruce M Simpson /* 13908f002c6cSBruce M Simpson * Deal with error cases up-front: 13918f002c6cSBruce M Simpson * Asked to block, but already blocked; or 13928f002c6cSBruce M Simpson * Asked to unblock, but nothing to unblock. 13938f002c6cSBruce M Simpson * If adding a new block entry, allocate it. 13948f002c6cSBruce M Simpson */ 13958f002c6cSBruce M Simpson ims = im6o_match_source(imo, idx, &ssa->sa); 13968f002c6cSBruce M Simpson if ((ims != NULL && doblock) || (ims == NULL && !doblock)) { 13978f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: source %s %spresent", __func__, 13988f002c6cSBruce M Simpson ip6_sprintf(ip6tbuf, &ssa->sin6.sin6_addr), 13998f002c6cSBruce M Simpson doblock ? "" : "not "); 14008f002c6cSBruce M Simpson error = EADDRNOTAVAIL; 14018f002c6cSBruce M Simpson goto out_in6p_locked; 14028f002c6cSBruce M Simpson } 14038f002c6cSBruce M Simpson 14048f002c6cSBruce M Simpson INP_WLOCK_ASSERT(inp); 14058f002c6cSBruce M Simpson 14068f002c6cSBruce M Simpson /* 14078f002c6cSBruce M Simpson * Begin state merge transaction at socket layer. 14088f002c6cSBruce M Simpson */ 14098f002c6cSBruce M Simpson if (doblock) { 14108f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: %s source", __func__, "block"); 14118f002c6cSBruce M Simpson ims = im6f_graft(imf, fmode, &ssa->sin6); 14128f002c6cSBruce M Simpson if (ims == NULL) 14138f002c6cSBruce M Simpson error = ENOMEM; 14148f002c6cSBruce M Simpson } else { 14158f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: %s source", __func__, "allow"); 14168f002c6cSBruce M Simpson error = im6f_prune(imf, &ssa->sin6); 14178f002c6cSBruce M Simpson } 14188f002c6cSBruce M Simpson 14198f002c6cSBruce M Simpson if (error) { 14208f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: merge imf state failed", __func__); 14218f002c6cSBruce M Simpson goto out_im6f_rollback; 14228f002c6cSBruce M Simpson } 14238f002c6cSBruce M Simpson 14248f002c6cSBruce M Simpson /* 14258f002c6cSBruce M Simpson * Begin state merge transaction at MLD layer. 14268f002c6cSBruce M Simpson */ 14278f002c6cSBruce M Simpson IN6_MULTI_LOCK(); 14288f002c6cSBruce M Simpson 14298f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: merge inm state", __func__); 14308f002c6cSBruce M Simpson error = in6m_merge(inm, imf); 14318f002c6cSBruce M Simpson if (error) { 14328f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed to merge inm state", __func__); 14338f002c6cSBruce M Simpson goto out_im6f_rollback; 14348f002c6cSBruce M Simpson } 14358f002c6cSBruce M Simpson 14368f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: doing mld downcall", __func__); 14378f002c6cSBruce M Simpson error = mld_change_state(inm, 0); 14388f002c6cSBruce M Simpson if (error) 14398f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed mld downcall", __func__); 14408f002c6cSBruce M Simpson 14418f002c6cSBruce M Simpson IN6_MULTI_UNLOCK(); 14428f002c6cSBruce M Simpson 14438f002c6cSBruce M Simpson out_im6f_rollback: 14448f002c6cSBruce M Simpson if (error) 14458f002c6cSBruce M Simpson im6f_rollback(imf); 14468f002c6cSBruce M Simpson else 14478f002c6cSBruce M Simpson im6f_commit(imf); 14488f002c6cSBruce M Simpson 14498f002c6cSBruce M Simpson im6f_reap(imf); 14508f002c6cSBruce M Simpson 14518f002c6cSBruce M Simpson out_in6p_locked: 14528f002c6cSBruce M Simpson INP_WUNLOCK(inp); 14538f002c6cSBruce M Simpson return (error); 14548f002c6cSBruce M Simpson } 14558f002c6cSBruce M Simpson 14568f002c6cSBruce M Simpson /* 14578f002c6cSBruce M Simpson * Given an inpcb, return its multicast options structure pointer. Accepts 14588f002c6cSBruce M Simpson * an unlocked inpcb pointer, but will return it locked. May sleep. 14598f002c6cSBruce M Simpson * 14608f002c6cSBruce M Simpson * SMPng: NOTE: Potentially calls malloc(M_WAITOK) with Giant held. 14618f002c6cSBruce M Simpson * SMPng: NOTE: Returns with the INP write lock held. 14628f002c6cSBruce M Simpson */ 14638f002c6cSBruce M Simpson static struct ip6_moptions * 14648f002c6cSBruce M Simpson in6p_findmoptions(struct inpcb *inp) 14658f002c6cSBruce M Simpson { 14668f002c6cSBruce M Simpson struct ip6_moptions *imo; 14678f002c6cSBruce M Simpson struct in6_multi **immp; 14688f002c6cSBruce M Simpson struct in6_mfilter *imfp; 14698f002c6cSBruce M Simpson size_t idx; 14708f002c6cSBruce M Simpson 14718f002c6cSBruce M Simpson INP_WLOCK(inp); 14728f002c6cSBruce M Simpson if (inp->in6p_moptions != NULL) 14738f002c6cSBruce M Simpson return (inp->in6p_moptions); 14748f002c6cSBruce M Simpson 14758f002c6cSBruce M Simpson INP_WUNLOCK(inp); 14768f002c6cSBruce M Simpson 14778f002c6cSBruce M Simpson imo = malloc(sizeof(*imo), M_IP6MOPTS, M_WAITOK); 14788f002c6cSBruce M Simpson immp = malloc(sizeof(*immp) * IPV6_MIN_MEMBERSHIPS, M_IP6MOPTS, 14798f002c6cSBruce M Simpson M_WAITOK | M_ZERO); 14808f002c6cSBruce M Simpson imfp = malloc(sizeof(struct in6_mfilter) * IPV6_MIN_MEMBERSHIPS, 14818f002c6cSBruce M Simpson M_IN6MFILTER, M_WAITOK); 14828f002c6cSBruce M Simpson 14838f002c6cSBruce M Simpson imo->im6o_multicast_ifp = NULL; 14848f002c6cSBruce M Simpson imo->im6o_multicast_hlim = V_ip6_defmcasthlim; 14858f002c6cSBruce M Simpson imo->im6o_multicast_loop = in6_mcast_loop; 14868f002c6cSBruce M Simpson imo->im6o_num_memberships = 0; 14878f002c6cSBruce M Simpson imo->im6o_max_memberships = IPV6_MIN_MEMBERSHIPS; 14888f002c6cSBruce M Simpson imo->im6o_membership = immp; 14898f002c6cSBruce M Simpson 14908f002c6cSBruce M Simpson /* Initialize per-group source filters. */ 14918f002c6cSBruce M Simpson for (idx = 0; idx < IPV6_MIN_MEMBERSHIPS; idx++) 14928f002c6cSBruce M Simpson im6f_init(&imfp[idx], MCAST_UNDEFINED, MCAST_EXCLUDE); 14938f002c6cSBruce M Simpson imo->im6o_mfilters = imfp; 14948f002c6cSBruce M Simpson 14958f002c6cSBruce M Simpson INP_WLOCK(inp); 14968f002c6cSBruce M Simpson if (inp->in6p_moptions != NULL) { 14978f002c6cSBruce M Simpson free(imfp, M_IN6MFILTER); 14988f002c6cSBruce M Simpson free(immp, M_IP6MOPTS); 14998f002c6cSBruce M Simpson free(imo, M_IP6MOPTS); 15008f002c6cSBruce M Simpson return (inp->in6p_moptions); 15018f002c6cSBruce M Simpson } 15028f002c6cSBruce M Simpson inp->in6p_moptions = imo; 15038f002c6cSBruce M Simpson return (imo); 15048f002c6cSBruce M Simpson } 15058f002c6cSBruce M Simpson 15068f002c6cSBruce M Simpson /* 15078f002c6cSBruce M Simpson * Discard the IPv6 multicast options (and source filters). 15088f002c6cSBruce M Simpson * 15098f002c6cSBruce M Simpson * SMPng: NOTE: assumes INP write lock is held. 15108f002c6cSBruce M Simpson */ 15118f002c6cSBruce M Simpson void 15128f002c6cSBruce M Simpson ip6_freemoptions(struct ip6_moptions *imo) 15138f002c6cSBruce M Simpson { 15148f002c6cSBruce M Simpson struct in6_mfilter *imf; 15158f002c6cSBruce M Simpson size_t idx, nmships; 15168f002c6cSBruce M Simpson 15178f002c6cSBruce M Simpson KASSERT(imo != NULL, ("%s: ip6_moptions is NULL", __func__)); 15188f002c6cSBruce M Simpson 15198f002c6cSBruce M Simpson nmships = imo->im6o_num_memberships; 15208f002c6cSBruce M Simpson for (idx = 0; idx < nmships; ++idx) { 15218f002c6cSBruce M Simpson imf = imo->im6o_mfilters ? &imo->im6o_mfilters[idx] : NULL; 15228f002c6cSBruce M Simpson if (imf) 15238f002c6cSBruce M Simpson im6f_leave(imf); 15248f002c6cSBruce M Simpson /* XXX this will thrash the lock(s) */ 15258f002c6cSBruce M Simpson (void)in6_mc_leave(imo->im6o_membership[idx], imf); 15268f002c6cSBruce M Simpson if (imf) 15278f002c6cSBruce M Simpson im6f_purge(imf); 15288f002c6cSBruce M Simpson } 15298f002c6cSBruce M Simpson 15308f002c6cSBruce M Simpson if (imo->im6o_mfilters) 15318f002c6cSBruce M Simpson free(imo->im6o_mfilters, M_IN6MFILTER); 15328f002c6cSBruce M Simpson free(imo->im6o_membership, M_IP6MOPTS); 15338f002c6cSBruce M Simpson free(imo, M_IP6MOPTS); 15348f002c6cSBruce M Simpson } 15358f002c6cSBruce M Simpson 15368f002c6cSBruce M Simpson /* 15378f002c6cSBruce M Simpson * Atomically get source filters on a socket for an IPv6 multicast group. 15388f002c6cSBruce M Simpson * Called with INP lock held; returns with lock released. 15398f002c6cSBruce M Simpson */ 15408f002c6cSBruce M Simpson static int 15418f002c6cSBruce M Simpson in6p_get_source_filters(struct inpcb *inp, struct sockopt *sopt) 15428f002c6cSBruce M Simpson { 15438f002c6cSBruce M Simpson INIT_VNET_NET(curvnet); 15448f002c6cSBruce M Simpson struct __msfilterreq msfr; 15458f002c6cSBruce M Simpson sockunion_t *gsa; 15468f002c6cSBruce M Simpson struct ifnet *ifp; 15478f002c6cSBruce M Simpson struct ip6_moptions *imo; 15488f002c6cSBruce M Simpson struct in6_mfilter *imf; 15498f002c6cSBruce M Simpson struct ip6_msource *ims; 15508f002c6cSBruce M Simpson struct in6_msource *lims; 15518f002c6cSBruce M Simpson struct sockaddr_in6 *psin; 15528f002c6cSBruce M Simpson struct sockaddr_storage *ptss; 15538f002c6cSBruce M Simpson struct sockaddr_storage *tss; 15548f002c6cSBruce M Simpson int error; 15558f002c6cSBruce M Simpson size_t idx, nsrcs, ncsrcs; 15568f002c6cSBruce M Simpson 15578f002c6cSBruce M Simpson INP_WLOCK_ASSERT(inp); 15588f002c6cSBruce M Simpson 15598f002c6cSBruce M Simpson imo = inp->in6p_moptions; 15608f002c6cSBruce M Simpson KASSERT(imo != NULL, ("%s: null ip6_moptions", __func__)); 15618f002c6cSBruce M Simpson 15628f002c6cSBruce M Simpson INP_WUNLOCK(inp); 15638f002c6cSBruce M Simpson 15648f002c6cSBruce M Simpson error = sooptcopyin(sopt, &msfr, sizeof(struct __msfilterreq), 15658f002c6cSBruce M Simpson sizeof(struct __msfilterreq)); 15668f002c6cSBruce M Simpson if (error) 15678f002c6cSBruce M Simpson return (error); 15688f002c6cSBruce M Simpson 15698f002c6cSBruce M Simpson if (msfr.msfr_ifindex == 0 || V_if_index < msfr.msfr_ifindex) 15708f002c6cSBruce M Simpson return (EINVAL); 15718f002c6cSBruce M Simpson 15728f002c6cSBruce M Simpson ifp = ifnet_byindex(msfr.msfr_ifindex); 15738f002c6cSBruce M Simpson if (ifp == NULL) 15748f002c6cSBruce M Simpson return (EINVAL); 15758f002c6cSBruce M Simpson 15768f002c6cSBruce M Simpson INP_WLOCK(inp); 15778f002c6cSBruce M Simpson 15788f002c6cSBruce M Simpson /* 15798f002c6cSBruce M Simpson * Lookup group on the socket. 15808f002c6cSBruce M Simpson */ 15818f002c6cSBruce M Simpson gsa = (sockunion_t *)&msfr.msfr_group; 15828f002c6cSBruce M Simpson idx = im6o_match_group(imo, ifp, &gsa->sa); 15838f002c6cSBruce M Simpson if (idx == -1 || imo->im6o_mfilters == NULL) { 15848f002c6cSBruce M Simpson INP_WUNLOCK(inp); 15858f002c6cSBruce M Simpson return (EADDRNOTAVAIL); 15868f002c6cSBruce M Simpson } 15878f002c6cSBruce M Simpson imf = &imo->im6o_mfilters[idx]; 15888f002c6cSBruce M Simpson 15898f002c6cSBruce M Simpson /* 15908f002c6cSBruce M Simpson * Ignore memberships which are in limbo. 15918f002c6cSBruce M Simpson */ 15928f002c6cSBruce M Simpson if (imf->im6f_st[1] == MCAST_UNDEFINED) { 15938f002c6cSBruce M Simpson INP_WUNLOCK(inp); 15948f002c6cSBruce M Simpson return (EAGAIN); 15958f002c6cSBruce M Simpson } 15968f002c6cSBruce M Simpson msfr.msfr_fmode = imf->im6f_st[1]; 15978f002c6cSBruce M Simpson 15988f002c6cSBruce M Simpson /* 15998f002c6cSBruce M Simpson * If the user specified a buffer, copy out the source filter 16008f002c6cSBruce M Simpson * entries to userland gracefully. 16018f002c6cSBruce M Simpson * We only copy out the number of entries which userland 16028f002c6cSBruce M Simpson * has asked for, but we always tell userland how big the 16038f002c6cSBruce M Simpson * buffer really needs to be. 16048f002c6cSBruce M Simpson */ 16058f002c6cSBruce M Simpson tss = NULL; 16068f002c6cSBruce M Simpson if (msfr.msfr_srcs != NULL && msfr.msfr_nsrcs > 0) { 16078f002c6cSBruce M Simpson tss = malloc(sizeof(struct sockaddr_storage) * msfr.msfr_nsrcs, 16088f002c6cSBruce M Simpson M_TEMP, M_NOWAIT | M_ZERO); 16098f002c6cSBruce M Simpson if (tss == NULL) { 16108f002c6cSBruce M Simpson INP_WUNLOCK(inp); 16118f002c6cSBruce M Simpson return (ENOBUFS); 16128f002c6cSBruce M Simpson } 16138f002c6cSBruce M Simpson } 16148f002c6cSBruce M Simpson 16158f002c6cSBruce M Simpson /* 16168f002c6cSBruce M Simpson * Count number of sources in-mode at t0. 16178f002c6cSBruce M Simpson * If buffer space exists and remains, copy out source entries. 16188f002c6cSBruce M Simpson */ 16198f002c6cSBruce M Simpson nsrcs = msfr.msfr_nsrcs; 16208f002c6cSBruce M Simpson ncsrcs = 0; 16218f002c6cSBruce M Simpson ptss = tss; 16228f002c6cSBruce M Simpson RB_FOREACH(ims, ip6_msource_tree, &imf->im6f_sources) { 16238f002c6cSBruce M Simpson lims = (struct in6_msource *)ims; 16248f002c6cSBruce M Simpson if (lims->im6sl_st[0] == MCAST_UNDEFINED || 16258f002c6cSBruce M Simpson lims->im6sl_st[0] != imf->im6f_st[0]) 16268f002c6cSBruce M Simpson continue; 16278f002c6cSBruce M Simpson ++ncsrcs; 16288f002c6cSBruce M Simpson if (tss != NULL && nsrcs > 0) { 16298f002c6cSBruce M Simpson psin = (struct sockaddr_in6 *)ptss; 16308f002c6cSBruce M Simpson psin->sin6_family = AF_INET6; 16318f002c6cSBruce M Simpson psin->sin6_len = sizeof(struct sockaddr_in6); 16328f002c6cSBruce M Simpson psin->sin6_addr = lims->im6s_addr; 16338f002c6cSBruce M Simpson psin->sin6_port = 0; 16348f002c6cSBruce M Simpson --nsrcs; 16358f002c6cSBruce M Simpson ++ptss; 16368f002c6cSBruce M Simpson } 16378f002c6cSBruce M Simpson } 16388f002c6cSBruce M Simpson 16398f002c6cSBruce M Simpson INP_WUNLOCK(inp); 16408f002c6cSBruce M Simpson 16418f002c6cSBruce M Simpson if (tss != NULL) { 16428f002c6cSBruce M Simpson error = copyout(tss, msfr.msfr_srcs, 16438f002c6cSBruce M Simpson sizeof(struct sockaddr_storage) * msfr.msfr_nsrcs); 16448f002c6cSBruce M Simpson free(tss, M_TEMP); 16458f002c6cSBruce M Simpson if (error) 16468f002c6cSBruce M Simpson return (error); 16478f002c6cSBruce M Simpson } 16488f002c6cSBruce M Simpson 16498f002c6cSBruce M Simpson msfr.msfr_nsrcs = ncsrcs; 16508f002c6cSBruce M Simpson error = sooptcopyout(sopt, &msfr, sizeof(struct __msfilterreq)); 16518f002c6cSBruce M Simpson 16528f002c6cSBruce M Simpson return (error); 16538f002c6cSBruce M Simpson } 16548f002c6cSBruce M Simpson 16558f002c6cSBruce M Simpson /* 16568f002c6cSBruce M Simpson * Return the IP multicast options in response to user getsockopt(). 16578f002c6cSBruce M Simpson */ 16588f002c6cSBruce M Simpson int 16598f002c6cSBruce M Simpson ip6_getmoptions(struct inpcb *inp, struct sockopt *sopt) 16608f002c6cSBruce M Simpson { 16618f002c6cSBruce M Simpson INIT_VNET_INET6(curvnet); 166233cde130SBruce M Simpson struct ip6_moptions *im6o; 166333cde130SBruce M Simpson int error; 166433cde130SBruce M Simpson u_int optval; 16658f002c6cSBruce M Simpson 16668f002c6cSBruce M Simpson INP_WLOCK(inp); 166733cde130SBruce M Simpson im6o = inp->in6p_moptions; 16688f002c6cSBruce M Simpson /* 16698f002c6cSBruce M Simpson * If socket is neither of type SOCK_RAW or SOCK_DGRAM, 16708f002c6cSBruce M Simpson * or is a divert socket, reject it. 16718f002c6cSBruce M Simpson */ 16728f002c6cSBruce M Simpson if (inp->inp_socket->so_proto->pr_protocol == IPPROTO_DIVERT || 16738f002c6cSBruce M Simpson (inp->inp_socket->so_proto->pr_type != SOCK_RAW && 16748f002c6cSBruce M Simpson inp->inp_socket->so_proto->pr_type != SOCK_DGRAM)) { 16758f002c6cSBruce M Simpson INP_WUNLOCK(inp); 16768f002c6cSBruce M Simpson return (EOPNOTSUPP); 16778f002c6cSBruce M Simpson } 16788f002c6cSBruce M Simpson 16798f002c6cSBruce M Simpson error = 0; 16808f002c6cSBruce M Simpson switch (sopt->sopt_name) { 16818f002c6cSBruce M Simpson case IPV6_MULTICAST_IF: 168233cde130SBruce M Simpson if (im6o == NULL || im6o->im6o_multicast_ifp == NULL) { 16838f002c6cSBruce M Simpson optval = 0; 16848f002c6cSBruce M Simpson } else { 168533cde130SBruce M Simpson optval = im6o->im6o_multicast_ifp->if_index; 16868f002c6cSBruce M Simpson } 16878f002c6cSBruce M Simpson INP_WUNLOCK(inp); 168833cde130SBruce M Simpson error = sooptcopyout(sopt, &optval, sizeof(u_int)); 16898f002c6cSBruce M Simpson break; 16908f002c6cSBruce M Simpson 16918f002c6cSBruce M Simpson case IPV6_MULTICAST_HOPS: 169233cde130SBruce M Simpson if (im6o == NULL) 169333cde130SBruce M Simpson optval = V_ip6_defmcasthlim; 16948f002c6cSBruce M Simpson else 169533cde130SBruce M Simpson optval = im6o->im6o_multicast_loop; 16968f002c6cSBruce M Simpson INP_WUNLOCK(inp); 16978f002c6cSBruce M Simpson error = sooptcopyout(sopt, &optval, sizeof(u_int)); 16988f002c6cSBruce M Simpson break; 16998f002c6cSBruce M Simpson 17008f002c6cSBruce M Simpson case IPV6_MULTICAST_LOOP: 170133cde130SBruce M Simpson if (im6o == NULL) 170233cde130SBruce M Simpson optval = in6_mcast_loop; /* XXX VIMAGE */ 17038f002c6cSBruce M Simpson else 170433cde130SBruce M Simpson optval = im6o->im6o_multicast_loop; 17058f002c6cSBruce M Simpson INP_WUNLOCK(inp); 17068f002c6cSBruce M Simpson error = sooptcopyout(sopt, &optval, sizeof(u_int)); 17078f002c6cSBruce M Simpson break; 17088f002c6cSBruce M Simpson 17098f002c6cSBruce M Simpson case IPV6_MSFILTER: 171033cde130SBruce M Simpson if (im6o == NULL) { 17118f002c6cSBruce M Simpson error = EADDRNOTAVAIL; 17128f002c6cSBruce M Simpson INP_WUNLOCK(inp); 17138f002c6cSBruce M Simpson } else { 17148f002c6cSBruce M Simpson error = in6p_get_source_filters(inp, sopt); 17158f002c6cSBruce M Simpson } 17168f002c6cSBruce M Simpson break; 17178f002c6cSBruce M Simpson 17188f002c6cSBruce M Simpson default: 17198f002c6cSBruce M Simpson INP_WUNLOCK(inp); 17208f002c6cSBruce M Simpson error = ENOPROTOOPT; 17218f002c6cSBruce M Simpson break; 17228f002c6cSBruce M Simpson } 17238f002c6cSBruce M Simpson 17248f002c6cSBruce M Simpson INP_UNLOCK_ASSERT(inp); 17258f002c6cSBruce M Simpson 17268f002c6cSBruce M Simpson return (error); 17278f002c6cSBruce M Simpson } 17288f002c6cSBruce M Simpson 17298f002c6cSBruce M Simpson /* 173033cde130SBruce M Simpson * Look up the ifnet to use for a multicast group membership, 173133cde130SBruce M Simpson * given the address of an IPv6 group. 173233cde130SBruce M Simpson * 173333cde130SBruce M Simpson * This routine exists to support legacy IPv6 multicast applications. 173433cde130SBruce M Simpson * 173533cde130SBruce M Simpson * If inp is non-NULL, use this socket's current FIB number for any 173633cde130SBruce M Simpson * required FIB lookup. Look up the group address in the unicast FIB, 173733cde130SBruce M Simpson * and use its ifp; usually, this points to the default next-hop. 173833cde130SBruce M Simpson * If the FIB lookup fails, return NULL. 173933cde130SBruce M Simpson * 174033cde130SBruce M Simpson * FUTURE: Support multiple forwarding tables for IPv6. 174133cde130SBruce M Simpson * 174233cde130SBruce M Simpson * Returns NULL if no ifp could be found. 174333cde130SBruce M Simpson */ 174433cde130SBruce M Simpson static struct ifnet * 174533cde130SBruce M Simpson in6p_lookup_mcast_ifp(const struct inpcb *in6p __unused, 174633cde130SBruce M Simpson const struct sockaddr_in6 *gsin6) 174733cde130SBruce M Simpson { 174833cde130SBruce M Simpson INIT_VNET_INET6(curvnet); 174933cde130SBruce M Simpson struct route_in6 ro6; 175033cde130SBruce M Simpson struct ifnet *ifp; 175133cde130SBruce M Simpson 175233cde130SBruce M Simpson KASSERT(in6p->inp_vflag & INP_IPV6, 175333cde130SBruce M Simpson ("%s: not INP_IPV6 inpcb", __func__)); 175433cde130SBruce M Simpson KASSERT(gsin6->sin6_family == AF_INET6, 175533cde130SBruce M Simpson ("%s: not AF_INET6 group", __func__)); 175633cde130SBruce M Simpson KASSERT(IN6_IS_ADDR_MULTICAST(&gsin6->sin6_addr), 175733cde130SBruce M Simpson ("%s: not multicast", __func__)); 175833cde130SBruce M Simpson 175933cde130SBruce M Simpson ifp = NULL; 176033cde130SBruce M Simpson memset(&ro6, 0, sizeof(struct route_in6)); 176133cde130SBruce M Simpson memcpy(&ro6.ro_dst, gsin6, sizeof(struct sockaddr_in6)); 176233cde130SBruce M Simpson #ifdef notyet 176333cde130SBruce M Simpson rtalloc_ign_fib(&ro6, 0, inp ? inp->inp_inc.inc_fibnum : 0); 176433cde130SBruce M Simpson #else 176533cde130SBruce M Simpson rtalloc_ign((struct route *)&ro6, 0); 176633cde130SBruce M Simpson #endif 176733cde130SBruce M Simpson if (ro6.ro_rt != NULL) { 176833cde130SBruce M Simpson ifp = ro6.ro_rt->rt_ifp; 176933cde130SBruce M Simpson KASSERT(ifp != NULL, ("%s: null ifp", __func__)); 177033cde130SBruce M Simpson RTFREE(ro6.ro_rt); 177133cde130SBruce M Simpson } 177233cde130SBruce M Simpson 177333cde130SBruce M Simpson return (ifp); 177433cde130SBruce M Simpson } 177533cde130SBruce M Simpson 177633cde130SBruce M Simpson /* 17778f002c6cSBruce M Simpson * Join an IPv6 multicast group, possibly with a source. 177833cde130SBruce M Simpson * 177933cde130SBruce M Simpson * FIXME: The KAME use of the unspecified address (::) 178033cde130SBruce M Simpson * to join *all* multicast groups is currently unsupported. 17818f002c6cSBruce M Simpson */ 17828f002c6cSBruce M Simpson static int 17838f002c6cSBruce M Simpson in6p_join_group(struct inpcb *inp, struct sockopt *sopt) 17848f002c6cSBruce M Simpson { 17858f002c6cSBruce M Simpson INIT_VNET_NET(curvnet); 17868f002c6cSBruce M Simpson struct group_source_req gsr; 17878f002c6cSBruce M Simpson sockunion_t *gsa, *ssa; 17888f002c6cSBruce M Simpson struct ifnet *ifp; 17898f002c6cSBruce M Simpson struct in6_mfilter *imf; 17908f002c6cSBruce M Simpson struct ip6_moptions *imo; 17918f002c6cSBruce M Simpson struct in6_multi *inm; 17928f002c6cSBruce M Simpson struct in6_msource *lims; 17938f002c6cSBruce M Simpson size_t idx; 17948f002c6cSBruce M Simpson int error, is_new; 17958f002c6cSBruce M Simpson 17968f002c6cSBruce M Simpson ifp = NULL; 17978f002c6cSBruce M Simpson imf = NULL; 17988f002c6cSBruce M Simpson error = 0; 17998f002c6cSBruce M Simpson is_new = 0; 18008f002c6cSBruce M Simpson 18018f002c6cSBruce M Simpson memset(&gsr, 0, sizeof(struct group_source_req)); 18028f002c6cSBruce M Simpson gsa = (sockunion_t *)&gsr.gsr_group; 18038f002c6cSBruce M Simpson gsa->ss.ss_family = AF_UNSPEC; 18048f002c6cSBruce M Simpson ssa = (sockunion_t *)&gsr.gsr_source; 18058f002c6cSBruce M Simpson ssa->ss.ss_family = AF_UNSPEC; 18068f002c6cSBruce M Simpson 18078f002c6cSBruce M Simpson switch (sopt->sopt_name) { 18088f002c6cSBruce M Simpson case IPV6_JOIN_GROUP: { 18098f002c6cSBruce M Simpson struct ipv6_mreq mreq; 18108f002c6cSBruce M Simpson 18118f002c6cSBruce M Simpson error = sooptcopyin(sopt, &mreq, sizeof(struct ipv6_mreq), 18128f002c6cSBruce M Simpson sizeof(struct ipv6_mreq)); 18138f002c6cSBruce M Simpson if (error) 18148f002c6cSBruce M Simpson return (error); 18158f002c6cSBruce M Simpson 18168f002c6cSBruce M Simpson gsa->sin6.sin6_family = AF_INET6; 18178f002c6cSBruce M Simpson gsa->sin6.sin6_len = sizeof(struct sockaddr_in6); 18188f002c6cSBruce M Simpson gsa->sin6.sin6_addr = mreq.ipv6mr_multiaddr; 18198f002c6cSBruce M Simpson 182033cde130SBruce M Simpson if (mreq.ipv6mr_interface == 0) { 182133cde130SBruce M Simpson ifp = in6p_lookup_mcast_ifp(inp, &gsa->sin6); 182233cde130SBruce M Simpson } else { 182333cde130SBruce M Simpson if (mreq.ipv6mr_interface < 0 || 182433cde130SBruce M Simpson V_if_index < mreq.ipv6mr_interface) 182533cde130SBruce M Simpson return (EADDRNOTAVAIL); 18268f002c6cSBruce M Simpson ifp = ifnet_byindex(mreq.ipv6mr_interface); 182733cde130SBruce M Simpson } 18288f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: ipv6mr_interface = %d, ifp = %p", 18298f002c6cSBruce M Simpson __func__, mreq.ipv6mr_interface, ifp); 18308f002c6cSBruce M Simpson } break; 18318f002c6cSBruce M Simpson 18328f002c6cSBruce M Simpson case MCAST_JOIN_GROUP: 18338f002c6cSBruce M Simpson case MCAST_JOIN_SOURCE_GROUP: 18348f002c6cSBruce M Simpson if (sopt->sopt_name == MCAST_JOIN_GROUP) { 18358f002c6cSBruce M Simpson error = sooptcopyin(sopt, &gsr, 18368f002c6cSBruce M Simpson sizeof(struct group_req), 18378f002c6cSBruce M Simpson sizeof(struct group_req)); 18388f002c6cSBruce M Simpson } else if (sopt->sopt_name == MCAST_JOIN_SOURCE_GROUP) { 18398f002c6cSBruce M Simpson error = sooptcopyin(sopt, &gsr, 18408f002c6cSBruce M Simpson sizeof(struct group_source_req), 18418f002c6cSBruce M Simpson sizeof(struct group_source_req)); 18428f002c6cSBruce M Simpson } 18438f002c6cSBruce M Simpson if (error) 18448f002c6cSBruce M Simpson return (error); 18458f002c6cSBruce M Simpson 18468f002c6cSBruce M Simpson if (gsa->sin6.sin6_family != AF_INET6 || 18478f002c6cSBruce M Simpson gsa->sin6.sin6_len != sizeof(struct sockaddr_in6)) 18488f002c6cSBruce M Simpson return (EINVAL); 18498f002c6cSBruce M Simpson 18508f002c6cSBruce M Simpson /* 18518f002c6cSBruce M Simpson * Overwrite the port field if present, as the sockaddr 18528f002c6cSBruce M Simpson * being copied in may be matched with a binary comparison. 18538f002c6cSBruce M Simpson */ 18548f002c6cSBruce M Simpson gsa->sin6.sin6_port = 0; 18558f002c6cSBruce M Simpson if (sopt->sopt_name == MCAST_JOIN_SOURCE_GROUP) { 18568f002c6cSBruce M Simpson if (ssa->sin6.sin6_family != AF_INET6 || 18578f002c6cSBruce M Simpson ssa->sin6.sin6_len != sizeof(struct sockaddr_in6)) 18588f002c6cSBruce M Simpson return (EINVAL); 18598f002c6cSBruce M Simpson ssa->sin6.sin6_port = 0; 18608f002c6cSBruce M Simpson } 18618f002c6cSBruce M Simpson 18628f002c6cSBruce M Simpson if (gsr.gsr_interface == 0 || V_if_index < gsr.gsr_interface) 18638f002c6cSBruce M Simpson return (EADDRNOTAVAIL); 18648f002c6cSBruce M Simpson ifp = ifnet_byindex(gsr.gsr_interface); 18658f002c6cSBruce M Simpson break; 18668f002c6cSBruce M Simpson 18678f002c6cSBruce M Simpson default: 18688f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: unknown sopt_name %d", 18698f002c6cSBruce M Simpson __func__, sopt->sopt_name); 18708f002c6cSBruce M Simpson return (EOPNOTSUPP); 18718f002c6cSBruce M Simpson break; 18728f002c6cSBruce M Simpson } 18738f002c6cSBruce M Simpson 187433cde130SBruce M Simpson #ifdef notyet 187533cde130SBruce M Simpson /* 187633cde130SBruce M Simpson * FIXME: Check for unspecified address (all groups). 187733cde130SBruce M Simpson * Do we have a normative reference for this 'feature'? 187833cde130SBruce M Simpson * 187933cde130SBruce M Simpson * We use the unspecified address to specify to accept 188033cde130SBruce M Simpson * all multicast addresses. Only super user is allowed 188133cde130SBruce M Simpson * to do this. 188233cde130SBruce M Simpson * XXX-BZ might need a better PRIV_NETINET_x for this 188333cde130SBruce M Simpson */ 188433cde130SBruce M Simpson if (IN6_IS_ADDR_UNSPECIFIED(&gsa->sin6.sin6_addr)) { 188533cde130SBruce M Simpson error = priv_check(curthread, PRIV_NETINET_MROUTE); 188633cde130SBruce M Simpson if (error) 188733cde130SBruce M Simpson break; 188833cde130SBruce M Simpson } else 188933cde130SBruce M Simpson #endif 18908f002c6cSBruce M Simpson if (!IN6_IS_ADDR_MULTICAST(&gsa->sin6.sin6_addr)) 18918f002c6cSBruce M Simpson return (EINVAL); 18928f002c6cSBruce M Simpson 18938f002c6cSBruce M Simpson if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) 18948f002c6cSBruce M Simpson return (EADDRNOTAVAIL); 18958f002c6cSBruce M Simpson 189633cde130SBruce M Simpson #ifdef notyet 189733cde130SBruce M Simpson /* 189833cde130SBruce M Simpson * FIXME: Set interface scope in group address. 189933cde130SBruce M Simpson */ 190033cde130SBruce M Simpson (void)in6_setscope(&gsa->sin6.sin_addr, ifp, NULL); 190133cde130SBruce M Simpson #endif 190233cde130SBruce M Simpson 19038f002c6cSBruce M Simpson /* 19048f002c6cSBruce M Simpson * MCAST_JOIN_SOURCE on an exclusive membership is an error. 19058f002c6cSBruce M Simpson * On an existing inclusive membership, it just adds the 19068f002c6cSBruce M Simpson * source to the filter list. 19078f002c6cSBruce M Simpson */ 19088f002c6cSBruce M Simpson imo = in6p_findmoptions(inp); 19098f002c6cSBruce M Simpson idx = im6o_match_group(imo, ifp, &gsa->sa); 19108f002c6cSBruce M Simpson if (idx == -1) { 19118f002c6cSBruce M Simpson is_new = 1; 19128f002c6cSBruce M Simpson } else { 19138f002c6cSBruce M Simpson inm = imo->im6o_membership[idx]; 19148f002c6cSBruce M Simpson imf = &imo->im6o_mfilters[idx]; 19158f002c6cSBruce M Simpson if (ssa->ss.ss_family != AF_UNSPEC && 19168f002c6cSBruce M Simpson imf->im6f_st[1] != MCAST_INCLUDE) { 19178f002c6cSBruce M Simpson error = EINVAL; 19188f002c6cSBruce M Simpson goto out_in6p_locked; 19198f002c6cSBruce M Simpson } 19208f002c6cSBruce M Simpson lims = im6o_match_source(imo, idx, &ssa->sa); 19218f002c6cSBruce M Simpson if (lims != NULL) { 19228f002c6cSBruce M Simpson error = EADDRNOTAVAIL; 19238f002c6cSBruce M Simpson goto out_in6p_locked; 19248f002c6cSBruce M Simpson } 19258f002c6cSBruce M Simpson } 19268f002c6cSBruce M Simpson 19278f002c6cSBruce M Simpson /* 19288f002c6cSBruce M Simpson * Begin state merge transaction at socket layer. 19298f002c6cSBruce M Simpson */ 19308f002c6cSBruce M Simpson INP_WLOCK_ASSERT(inp); 19318f002c6cSBruce M Simpson 19328f002c6cSBruce M Simpson if (is_new) { 19338f002c6cSBruce M Simpson if (imo->im6o_num_memberships == imo->im6o_max_memberships) { 19348f002c6cSBruce M Simpson error = im6o_grow(imo); 19358f002c6cSBruce M Simpson if (error) 19368f002c6cSBruce M Simpson goto out_in6p_locked; 19378f002c6cSBruce M Simpson } 19388f002c6cSBruce M Simpson /* 19398f002c6cSBruce M Simpson * Allocate the new slot upfront so we can deal with 19408f002c6cSBruce M Simpson * grafting the new source filter in same code path 19418f002c6cSBruce M Simpson * as for join-source on existing membership. 19428f002c6cSBruce M Simpson */ 19438f002c6cSBruce M Simpson idx = imo->im6o_num_memberships; 19448f002c6cSBruce M Simpson imo->im6o_membership[idx] = NULL; 19458f002c6cSBruce M Simpson imo->im6o_num_memberships++; 19468f002c6cSBruce M Simpson KASSERT(imo->im6o_mfilters != NULL, 19478f002c6cSBruce M Simpson ("%s: im6f_mfilters vector was not allocated", __func__)); 19488f002c6cSBruce M Simpson imf = &imo->im6o_mfilters[idx]; 19498f002c6cSBruce M Simpson KASSERT(RB_EMPTY(&imf->im6f_sources), 19508f002c6cSBruce M Simpson ("%s: im6f_sources not empty", __func__)); 19518f002c6cSBruce M Simpson } 19528f002c6cSBruce M Simpson 19538f002c6cSBruce M Simpson /* 19548f002c6cSBruce M Simpson * Graft new source into filter list for this inpcb's 19558f002c6cSBruce M Simpson * membership of the group. The in6_multi may not have 19568f002c6cSBruce M Simpson * been allocated yet if this is a new membership. 19578f002c6cSBruce M Simpson */ 19588f002c6cSBruce M Simpson if (ssa->ss.ss_family != AF_UNSPEC) { 19598f002c6cSBruce M Simpson /* Membership starts in IN mode */ 19608f002c6cSBruce M Simpson if (is_new) { 19618f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: new join w/source", __func__); 19628f002c6cSBruce M Simpson im6f_init(imf, MCAST_UNDEFINED, MCAST_INCLUDE); 19638f002c6cSBruce M Simpson } else { 19648f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: %s source", __func__, "allow"); 19658f002c6cSBruce M Simpson } 19668f002c6cSBruce M Simpson lims = im6f_graft(imf, MCAST_INCLUDE, &ssa->sin6); 19678f002c6cSBruce M Simpson if (lims == NULL) { 19688f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: merge imf state failed", 19698f002c6cSBruce M Simpson __func__); 19708f002c6cSBruce M Simpson error = ENOMEM; 19718f002c6cSBruce M Simpson goto out_im6o_free; 19728f002c6cSBruce M Simpson } 19738f002c6cSBruce M Simpson } 19748f002c6cSBruce M Simpson 19758f002c6cSBruce M Simpson /* 19768f002c6cSBruce M Simpson * Begin state merge transaction at MLD layer. 19778f002c6cSBruce M Simpson */ 19788f002c6cSBruce M Simpson IN6_MULTI_LOCK(); 19798f002c6cSBruce M Simpson 19808f002c6cSBruce M Simpson if (is_new) { 19818f002c6cSBruce M Simpson error = in6_mc_join_locked(ifp, &gsa->sin6.sin6_addr, imf, 19828f002c6cSBruce M Simpson &inm, 0); 19838f002c6cSBruce M Simpson if (error) 19848f002c6cSBruce M Simpson goto out_im6o_free; 19858f002c6cSBruce M Simpson imo->im6o_membership[idx] = inm; 19868f002c6cSBruce M Simpson } else { 19878f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: merge inm state", __func__); 19888f002c6cSBruce M Simpson error = in6m_merge(inm, imf); 19898f002c6cSBruce M Simpson if (error) { 19908f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed to merge inm state", 19918f002c6cSBruce M Simpson __func__); 19928f002c6cSBruce M Simpson goto out_im6f_rollback; 19938f002c6cSBruce M Simpson } 19948f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: doing mld downcall", __func__); 19958f002c6cSBruce M Simpson error = mld_change_state(inm, 0); 19968f002c6cSBruce M Simpson if (error) { 19978f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed mld downcall", 19988f002c6cSBruce M Simpson __func__); 19998f002c6cSBruce M Simpson goto out_im6f_rollback; 20008f002c6cSBruce M Simpson } 20018f002c6cSBruce M Simpson } 20028f002c6cSBruce M Simpson 20038f002c6cSBruce M Simpson IN6_MULTI_UNLOCK(); 20048f002c6cSBruce M Simpson 20058f002c6cSBruce M Simpson out_im6f_rollback: 20068f002c6cSBruce M Simpson INP_WLOCK_ASSERT(inp); 20078f002c6cSBruce M Simpson if (error) { 20088f002c6cSBruce M Simpson im6f_rollback(imf); 20098f002c6cSBruce M Simpson if (is_new) 20108f002c6cSBruce M Simpson im6f_purge(imf); 20118f002c6cSBruce M Simpson else 20128f002c6cSBruce M Simpson im6f_reap(imf); 20138f002c6cSBruce M Simpson } else { 20148f002c6cSBruce M Simpson im6f_commit(imf); 20158f002c6cSBruce M Simpson } 20168f002c6cSBruce M Simpson 20178f002c6cSBruce M Simpson out_im6o_free: 20188f002c6cSBruce M Simpson if (error && is_new) { 20198f002c6cSBruce M Simpson imo->im6o_membership[idx] = NULL; 20208f002c6cSBruce M Simpson --imo->im6o_num_memberships; 20218f002c6cSBruce M Simpson } 20228f002c6cSBruce M Simpson 20238f002c6cSBruce M Simpson out_in6p_locked: 20248f002c6cSBruce M Simpson INP_WUNLOCK(inp); 20258f002c6cSBruce M Simpson return (error); 20268f002c6cSBruce M Simpson } 20278f002c6cSBruce M Simpson 20288f002c6cSBruce M Simpson /* 20298f002c6cSBruce M Simpson * Leave an IPv6 multicast group on an inpcb, possibly with a source. 20308f002c6cSBruce M Simpson */ 20318f002c6cSBruce M Simpson static int 20328f002c6cSBruce M Simpson in6p_leave_group(struct inpcb *inp, struct sockopt *sopt) 20338f002c6cSBruce M Simpson { 20348f002c6cSBruce M Simpson INIT_VNET_NET(curvnet); 20358f002c6cSBruce M Simpson INIT_VNET_INET(curvnet); 20368f002c6cSBruce M Simpson struct group_source_req gsr; 20378f002c6cSBruce M Simpson sockunion_t *gsa, *ssa; 20388f002c6cSBruce M Simpson struct ifnet *ifp; 20398f002c6cSBruce M Simpson struct in6_mfilter *imf; 20408f002c6cSBruce M Simpson struct ip6_moptions *imo; 20418f002c6cSBruce M Simpson struct in6_msource *ims; 20428f002c6cSBruce M Simpson struct in6_multi *inm; 20438f002c6cSBruce M Simpson size_t idx; 20448f002c6cSBruce M Simpson int error, is_final; 20458f002c6cSBruce M Simpson #ifdef KTR 20468f002c6cSBruce M Simpson char ip6tbuf[INET6_ADDRSTRLEN]; 20478f002c6cSBruce M Simpson #endif 20488f002c6cSBruce M Simpson 20498f002c6cSBruce M Simpson ifp = NULL; 20508f002c6cSBruce M Simpson error = 0; 20518f002c6cSBruce M Simpson is_final = 1; 20528f002c6cSBruce M Simpson 20538f002c6cSBruce M Simpson memset(&gsr, 0, sizeof(struct group_source_req)); 20548f002c6cSBruce M Simpson gsa = (sockunion_t *)&gsr.gsr_group; 20558f002c6cSBruce M Simpson gsa->ss.ss_family = AF_UNSPEC; 20568f002c6cSBruce M Simpson ssa = (sockunion_t *)&gsr.gsr_source; 20578f002c6cSBruce M Simpson ssa->ss.ss_family = AF_UNSPEC; 20588f002c6cSBruce M Simpson 20598f002c6cSBruce M Simpson switch (sopt->sopt_name) { 20608f002c6cSBruce M Simpson case IPV6_LEAVE_GROUP: { 20618f002c6cSBruce M Simpson struct ipv6_mreq mreq; 20628f002c6cSBruce M Simpson 20638f002c6cSBruce M Simpson error = sooptcopyin(sopt, &mreq, sizeof(struct ipv6_mreq), 20648f002c6cSBruce M Simpson sizeof(struct ipv6_mreq)); 20658f002c6cSBruce M Simpson if (error) 20668f002c6cSBruce M Simpson return (error); 20678f002c6cSBruce M Simpson 20688f002c6cSBruce M Simpson gsa->sin6.sin6_family = AF_INET6; 20698f002c6cSBruce M Simpson gsa->sin6.sin6_len = sizeof(struct sockaddr_in6); 20708f002c6cSBruce M Simpson gsa->sin6.sin6_addr = mreq.ipv6mr_multiaddr; 207133cde130SBruce M Simpson 207233cde130SBruce M Simpson if (mreq.ipv6mr_interface == 0) { 207333cde130SBruce M Simpson #ifdef notyet 207433cde130SBruce M Simpson /* 207533cde130SBruce M Simpson * FIXME: Resolve scope ambiguity when interface 207633cde130SBruce M Simpson * index is unspecified. 207733cde130SBruce M Simpson */ 207833cde130SBruce M Simpson ifp = in6p_lookup_mcast_ifp(inp, &gsa->sin6); 207933cde130SBruce M Simpson #else 208033cde130SBruce M Simpson return (EADDRNOTAVAIL); 208133cde130SBruce M Simpson #endif 208233cde130SBruce M Simpson } else { 208333cde130SBruce M Simpson if (mreq.ipv6mr_interface < 0 || 208433cde130SBruce M Simpson V_if_index < mreq.ipv6mr_interface) 208533cde130SBruce M Simpson return (EADDRNOTAVAIL); 20868f002c6cSBruce M Simpson ifp = ifnet_byindex(mreq.ipv6mr_interface); 208733cde130SBruce M Simpson } 20888f002c6cSBruce M Simpson 20898f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: ipv6mr_interface = %d, ifp = %p", 20908f002c6cSBruce M Simpson __func__, mreq.ipv6mr_interface, ifp); 20918f002c6cSBruce M Simpson } break; 20928f002c6cSBruce M Simpson 20938f002c6cSBruce M Simpson case MCAST_LEAVE_GROUP: 20948f002c6cSBruce M Simpson case MCAST_LEAVE_SOURCE_GROUP: 20958f002c6cSBruce M Simpson if (sopt->sopt_name == MCAST_LEAVE_GROUP) { 20968f002c6cSBruce M Simpson error = sooptcopyin(sopt, &gsr, 20978f002c6cSBruce M Simpson sizeof(struct group_req), 20988f002c6cSBruce M Simpson sizeof(struct group_req)); 20998f002c6cSBruce M Simpson } else if (sopt->sopt_name == MCAST_LEAVE_SOURCE_GROUP) { 21008f002c6cSBruce M Simpson error = sooptcopyin(sopt, &gsr, 21018f002c6cSBruce M Simpson sizeof(struct group_source_req), 21028f002c6cSBruce M Simpson sizeof(struct group_source_req)); 21038f002c6cSBruce M Simpson } 21048f002c6cSBruce M Simpson if (error) 21058f002c6cSBruce M Simpson return (error); 21068f002c6cSBruce M Simpson 21078f002c6cSBruce M Simpson if (gsa->sin6.sin6_family != AF_INET6 || 21088f002c6cSBruce M Simpson gsa->sin6.sin6_len != sizeof(struct sockaddr_in6)) 21098f002c6cSBruce M Simpson return (EINVAL); 21108f002c6cSBruce M Simpson 21118f002c6cSBruce M Simpson if (sopt->sopt_name == MCAST_LEAVE_SOURCE_GROUP) { 21128f002c6cSBruce M Simpson if (ssa->sin6.sin6_family != AF_INET6 || 21138f002c6cSBruce M Simpson ssa->sin6.sin6_len != sizeof(struct sockaddr_in6)) 21148f002c6cSBruce M Simpson return (EINVAL); 21158f002c6cSBruce M Simpson } 21168f002c6cSBruce M Simpson 21178f002c6cSBruce M Simpson if (gsr.gsr_interface == 0 || V_if_index < gsr.gsr_interface) 21188f002c6cSBruce M Simpson return (EADDRNOTAVAIL); 21198f002c6cSBruce M Simpson 21208f002c6cSBruce M Simpson ifp = ifnet_byindex(gsr.gsr_interface); 21218f002c6cSBruce M Simpson break; 21228f002c6cSBruce M Simpson 21238f002c6cSBruce M Simpson default: 21248f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: unknown sopt_name %d", 21258f002c6cSBruce M Simpson __func__, sopt->sopt_name); 21268f002c6cSBruce M Simpson return (EOPNOTSUPP); 21278f002c6cSBruce M Simpson break; 21288f002c6cSBruce M Simpson } 21298f002c6cSBruce M Simpson 21308f002c6cSBruce M Simpson if (!IN6_IS_ADDR_MULTICAST(&gsa->sin6.sin6_addr)) 21318f002c6cSBruce M Simpson return (EINVAL); 21328f002c6cSBruce M Simpson 213333cde130SBruce M Simpson #ifdef notyet 213433cde130SBruce M Simpson /* 213533cde130SBruce M Simpson * FIXME: Need to embed ifp's scope ID in the address 213633cde130SBruce M Simpson * handed down to MLD. 213733cde130SBruce M Simpson * See KAME IPV6_LEAVE_GROUP implementation. 213833cde130SBruce M Simpson */ 213933cde130SBruce M Simpson (void)in6_setscope(&mreq->ipv6mr_multiaddr, ifp, NULL); 214033cde130SBruce M Simpson #endif 214133cde130SBruce M Simpson 21428f002c6cSBruce M Simpson /* 21438f002c6cSBruce M Simpson * Find the membership in the membership array. 21448f002c6cSBruce M Simpson */ 21458f002c6cSBruce M Simpson imo = in6p_findmoptions(inp); 21468f002c6cSBruce M Simpson idx = im6o_match_group(imo, ifp, &gsa->sa); 21478f002c6cSBruce M Simpson if (idx == -1) { 21488f002c6cSBruce M Simpson error = EADDRNOTAVAIL; 21498f002c6cSBruce M Simpson goto out_in6p_locked; 21508f002c6cSBruce M Simpson } 21518f002c6cSBruce M Simpson inm = imo->im6o_membership[idx]; 21528f002c6cSBruce M Simpson imf = &imo->im6o_mfilters[idx]; 21538f002c6cSBruce M Simpson 21548f002c6cSBruce M Simpson if (ssa->ss.ss_family != AF_UNSPEC) 21558f002c6cSBruce M Simpson is_final = 0; 21568f002c6cSBruce M Simpson 21578f002c6cSBruce M Simpson /* 21588f002c6cSBruce M Simpson * Begin state merge transaction at socket layer. 21598f002c6cSBruce M Simpson */ 21608f002c6cSBruce M Simpson INP_WLOCK_ASSERT(inp); 21618f002c6cSBruce M Simpson 21628f002c6cSBruce M Simpson /* 21638f002c6cSBruce M Simpson * If we were instructed only to leave a given source, do so. 21648f002c6cSBruce M Simpson * MCAST_LEAVE_SOURCE_GROUP is only valid for inclusive memberships. 21658f002c6cSBruce M Simpson */ 21668f002c6cSBruce M Simpson if (is_final) { 21678f002c6cSBruce M Simpson im6f_leave(imf); 21688f002c6cSBruce M Simpson } else { 21698f002c6cSBruce M Simpson if (imf->im6f_st[0] == MCAST_EXCLUDE) { 21708f002c6cSBruce M Simpson error = EADDRNOTAVAIL; 21718f002c6cSBruce M Simpson goto out_in6p_locked; 21728f002c6cSBruce M Simpson } 21738f002c6cSBruce M Simpson ims = im6o_match_source(imo, idx, &ssa->sa); 21748f002c6cSBruce M Simpson if (ims == NULL) { 21758f002c6cSBruce M Simpson CTR3(KTR_MLD, "%s: source %p %spresent", __func__, 21768f002c6cSBruce M Simpson ip6_sprintf(ip6tbuf, &ssa->sin6.sin6_addr), 21778f002c6cSBruce M Simpson "not "); 21788f002c6cSBruce M Simpson error = EADDRNOTAVAIL; 21798f002c6cSBruce M Simpson goto out_in6p_locked; 21808f002c6cSBruce M Simpson } 21818f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: %s source", __func__, "block"); 21828f002c6cSBruce M Simpson error = im6f_prune(imf, &ssa->sin6); 21838f002c6cSBruce M Simpson if (error) { 21848f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: merge imf state failed", 21858f002c6cSBruce M Simpson __func__); 21868f002c6cSBruce M Simpson goto out_in6p_locked; 21878f002c6cSBruce M Simpson } 21888f002c6cSBruce M Simpson } 21898f002c6cSBruce M Simpson 21908f002c6cSBruce M Simpson /* 21918f002c6cSBruce M Simpson * Begin state merge transaction at MLD layer. 21928f002c6cSBruce M Simpson */ 21938f002c6cSBruce M Simpson IN6_MULTI_LOCK(); 21948f002c6cSBruce M Simpson 21958f002c6cSBruce M Simpson if (is_final) { 21968f002c6cSBruce M Simpson /* 21978f002c6cSBruce M Simpson * Give up the multicast address record to which 21988f002c6cSBruce M Simpson * the membership points. 21998f002c6cSBruce M Simpson */ 22008f002c6cSBruce M Simpson (void)in6_mc_leave_locked(inm, imf); 22018f002c6cSBruce M Simpson } else { 22028f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: merge inm state", __func__); 22038f002c6cSBruce M Simpson error = in6m_merge(inm, imf); 22048f002c6cSBruce M Simpson if (error) { 22058f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed to merge inm state", 22068f002c6cSBruce M Simpson __func__); 22078f002c6cSBruce M Simpson goto out_im6f_rollback; 22088f002c6cSBruce M Simpson } 22098f002c6cSBruce M Simpson 22108f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: doing mld downcall", __func__); 22118f002c6cSBruce M Simpson error = mld_change_state(inm, 0); 22128f002c6cSBruce M Simpson if (error) { 22138f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed mld downcall", 22148f002c6cSBruce M Simpson __func__); 22158f002c6cSBruce M Simpson } 22168f002c6cSBruce M Simpson } 22178f002c6cSBruce M Simpson 22188f002c6cSBruce M Simpson IN6_MULTI_UNLOCK(); 22198f002c6cSBruce M Simpson 22208f002c6cSBruce M Simpson out_im6f_rollback: 22218f002c6cSBruce M Simpson if (error) 22228f002c6cSBruce M Simpson im6f_rollback(imf); 22238f002c6cSBruce M Simpson else 22248f002c6cSBruce M Simpson im6f_commit(imf); 22258f002c6cSBruce M Simpson 22268f002c6cSBruce M Simpson im6f_reap(imf); 22278f002c6cSBruce M Simpson 22288f002c6cSBruce M Simpson if (is_final) { 22298f002c6cSBruce M Simpson /* Remove the gap in the membership array. */ 22308f002c6cSBruce M Simpson for (++idx; idx < imo->im6o_num_memberships; ++idx) 22318f002c6cSBruce M Simpson imo->im6o_membership[idx-1] = imo->im6o_membership[idx]; 22328f002c6cSBruce M Simpson imo->im6o_num_memberships--; 22338f002c6cSBruce M Simpson } 22348f002c6cSBruce M Simpson 22358f002c6cSBruce M Simpson out_in6p_locked: 22368f002c6cSBruce M Simpson INP_WUNLOCK(inp); 22378f002c6cSBruce M Simpson return (error); 22388f002c6cSBruce M Simpson } 22398f002c6cSBruce M Simpson 22408f002c6cSBruce M Simpson /* 22418f002c6cSBruce M Simpson * Select the interface for transmitting IPv6 multicast datagrams. 22428f002c6cSBruce M Simpson * 22438f002c6cSBruce M Simpson * Either an instance of struct in6_addr or an instance of struct ipv6_mreqn 22448f002c6cSBruce M Simpson * may be passed to this socket option. An address of in6addr_any or an 22458f002c6cSBruce M Simpson * interface index of 0 is used to remove a previous selection. 22468f002c6cSBruce M Simpson * When no interface is selected, one is chosen for every send. 22478f002c6cSBruce M Simpson */ 22488f002c6cSBruce M Simpson static int 22498f002c6cSBruce M Simpson in6p_set_multicast_if(struct inpcb *inp, struct sockopt *sopt) 22508f002c6cSBruce M Simpson { 22518f002c6cSBruce M Simpson INIT_VNET_NET(curvnet); 22528f002c6cSBruce M Simpson INIT_VNET_INET6(curvnet); 22538f002c6cSBruce M Simpson struct ifnet *ifp; 22548f002c6cSBruce M Simpson struct ip6_moptions *imo; 22558f002c6cSBruce M Simpson u_int ifindex; 22568f002c6cSBruce M Simpson int error; 22578f002c6cSBruce M Simpson 22588f002c6cSBruce M Simpson if (sopt->sopt_valsize != sizeof(u_int)) 22598f002c6cSBruce M Simpson return (EINVAL); 22608f002c6cSBruce M Simpson 22618f002c6cSBruce M Simpson error = sooptcopyin(sopt, &ifindex, sizeof(u_int), sizeof(u_int)); 22628f002c6cSBruce M Simpson if (error) 22638f002c6cSBruce M Simpson return (error); 22648f002c6cSBruce M Simpson if (ifindex < 0 || V_if_index < ifindex) 22658f002c6cSBruce M Simpson return (EINVAL); 22668f002c6cSBruce M Simpson 22678f002c6cSBruce M Simpson ifp = ifnet_byindex(ifindex); 22688f002c6cSBruce M Simpson if (ifp == NULL || (ifp->if_flags & IFF_MULTICAST) == 0) 22698f002c6cSBruce M Simpson return (EADDRNOTAVAIL); 22708f002c6cSBruce M Simpson 22718f002c6cSBruce M Simpson imo = in6p_findmoptions(inp); 22728f002c6cSBruce M Simpson imo->im6o_multicast_ifp = ifp; 22738f002c6cSBruce M Simpson INP_WUNLOCK(inp); 22748f002c6cSBruce M Simpson 22758f002c6cSBruce M Simpson return (0); 22768f002c6cSBruce M Simpson } 22778f002c6cSBruce M Simpson 22788f002c6cSBruce M Simpson /* 22798f002c6cSBruce M Simpson * Atomically set source filters on a socket for an IPv6 multicast group. 22808f002c6cSBruce M Simpson * 22818f002c6cSBruce M Simpson * SMPng: NOTE: Potentially calls malloc(M_WAITOK) with Giant held. 22828f002c6cSBruce M Simpson */ 22838f002c6cSBruce M Simpson static int 22848f002c6cSBruce M Simpson in6p_set_source_filters(struct inpcb *inp, struct sockopt *sopt) 22858f002c6cSBruce M Simpson { 22868f002c6cSBruce M Simpson INIT_VNET_NET(curvnet); 22878f002c6cSBruce M Simpson struct __msfilterreq msfr; 22888f002c6cSBruce M Simpson sockunion_t *gsa; 22898f002c6cSBruce M Simpson struct ifnet *ifp; 22908f002c6cSBruce M Simpson struct in6_mfilter *imf; 22918f002c6cSBruce M Simpson struct ip6_moptions *imo; 22928f002c6cSBruce M Simpson struct in6_multi *inm; 22938f002c6cSBruce M Simpson size_t idx; 22948f002c6cSBruce M Simpson int error; 22958f002c6cSBruce M Simpson 22968f002c6cSBruce M Simpson error = sooptcopyin(sopt, &msfr, sizeof(struct __msfilterreq), 22978f002c6cSBruce M Simpson sizeof(struct __msfilterreq)); 22988f002c6cSBruce M Simpson if (error) 22998f002c6cSBruce M Simpson return (error); 23008f002c6cSBruce M Simpson 23018f002c6cSBruce M Simpson if (msfr.msfr_nsrcs > in6_mcast_maxsocksrc || 23028f002c6cSBruce M Simpson (msfr.msfr_fmode != MCAST_EXCLUDE && 23038f002c6cSBruce M Simpson msfr.msfr_fmode != MCAST_INCLUDE)) 23048f002c6cSBruce M Simpson return (EINVAL); 23058f002c6cSBruce M Simpson 23068f002c6cSBruce M Simpson if (msfr.msfr_group.ss_family != AF_INET6 || 23078f002c6cSBruce M Simpson msfr.msfr_group.ss_len != sizeof(struct sockaddr_in6)) 23088f002c6cSBruce M Simpson return (EINVAL); 23098f002c6cSBruce M Simpson 23108f002c6cSBruce M Simpson gsa = (sockunion_t *)&msfr.msfr_group; 23118f002c6cSBruce M Simpson if (!IN6_IS_ADDR_MULTICAST(&gsa->sin6.sin6_addr)) 23128f002c6cSBruce M Simpson return (EINVAL); 23138f002c6cSBruce M Simpson 23148f002c6cSBruce M Simpson gsa->sin6.sin6_port = 0; /* ignore port */ 23158f002c6cSBruce M Simpson 23168f002c6cSBruce M Simpson if (msfr.msfr_ifindex == 0 || V_if_index < msfr.msfr_ifindex) 23178f002c6cSBruce M Simpson return (EADDRNOTAVAIL); 23188f002c6cSBruce M Simpson 23198f002c6cSBruce M Simpson ifp = ifnet_byindex(msfr.msfr_ifindex); 23208f002c6cSBruce M Simpson if (ifp == NULL) 23218f002c6cSBruce M Simpson return (EADDRNOTAVAIL); 23228f002c6cSBruce M Simpson 23238f002c6cSBruce M Simpson /* 23248f002c6cSBruce M Simpson * Take the INP write lock. 23258f002c6cSBruce M Simpson * Check if this socket is a member of this group. 23268f002c6cSBruce M Simpson */ 23278f002c6cSBruce M Simpson imo = in6p_findmoptions(inp); 23288f002c6cSBruce M Simpson idx = im6o_match_group(imo, ifp, &gsa->sa); 23298f002c6cSBruce M Simpson if (idx == -1 || imo->im6o_mfilters == NULL) { 23308f002c6cSBruce M Simpson error = EADDRNOTAVAIL; 23318f002c6cSBruce M Simpson goto out_in6p_locked; 23328f002c6cSBruce M Simpson } 23338f002c6cSBruce M Simpson inm = imo->im6o_membership[idx]; 23348f002c6cSBruce M Simpson imf = &imo->im6o_mfilters[idx]; 23358f002c6cSBruce M Simpson 23368f002c6cSBruce M Simpson /* 23378f002c6cSBruce M Simpson * Begin state merge transaction at socket layer. 23388f002c6cSBruce M Simpson */ 23398f002c6cSBruce M Simpson INP_WLOCK_ASSERT(inp); 23408f002c6cSBruce M Simpson 23418f002c6cSBruce M Simpson imf->im6f_st[1] = msfr.msfr_fmode; 23428f002c6cSBruce M Simpson 23438f002c6cSBruce M Simpson /* 23448f002c6cSBruce M Simpson * Apply any new source filters, if present. 23458f002c6cSBruce M Simpson * Make a copy of the user-space source vector so 23468f002c6cSBruce M Simpson * that we may copy them with a single copyin. This 23478f002c6cSBruce M Simpson * allows us to deal with page faults up-front. 23488f002c6cSBruce M Simpson */ 23498f002c6cSBruce M Simpson if (msfr.msfr_nsrcs > 0) { 23508f002c6cSBruce M Simpson struct in6_msource *lims; 23518f002c6cSBruce M Simpson struct sockaddr_in6 *psin; 23528f002c6cSBruce M Simpson struct sockaddr_storage *kss, *pkss; 23538f002c6cSBruce M Simpson int i; 23548f002c6cSBruce M Simpson 23558f002c6cSBruce M Simpson INP_WUNLOCK(inp); 23568f002c6cSBruce M Simpson 23578f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: loading %lu source list entries", 23588f002c6cSBruce M Simpson __func__, (unsigned long)msfr.msfr_nsrcs); 23598f002c6cSBruce M Simpson kss = malloc(sizeof(struct sockaddr_storage) * msfr.msfr_nsrcs, 23608f002c6cSBruce M Simpson M_TEMP, M_WAITOK); 23618f002c6cSBruce M Simpson error = copyin(msfr.msfr_srcs, kss, 23628f002c6cSBruce M Simpson sizeof(struct sockaddr_storage) * msfr.msfr_nsrcs); 23638f002c6cSBruce M Simpson if (error) { 23648f002c6cSBruce M Simpson free(kss, M_TEMP); 23658f002c6cSBruce M Simpson return (error); 23668f002c6cSBruce M Simpson } 23678f002c6cSBruce M Simpson 23688f002c6cSBruce M Simpson INP_WLOCK(inp); 23698f002c6cSBruce M Simpson 23708f002c6cSBruce M Simpson /* 23718f002c6cSBruce M Simpson * Mark all source filters as UNDEFINED at t1. 23728f002c6cSBruce M Simpson * Restore new group filter mode, as im6f_leave() 23738f002c6cSBruce M Simpson * will set it to INCLUDE. 23748f002c6cSBruce M Simpson */ 23758f002c6cSBruce M Simpson im6f_leave(imf); 23768f002c6cSBruce M Simpson imf->im6f_st[1] = msfr.msfr_fmode; 23778f002c6cSBruce M Simpson 23788f002c6cSBruce M Simpson /* 23798f002c6cSBruce M Simpson * Update socket layer filters at t1, lazy-allocating 23808f002c6cSBruce M Simpson * new entries. This saves a bunch of memory at the 23818f002c6cSBruce M Simpson * cost of one RB_FIND() per source entry; duplicate 23828f002c6cSBruce M Simpson * entries in the msfr_nsrcs vector are ignored. 23838f002c6cSBruce M Simpson * If we encounter an error, rollback transaction. 23848f002c6cSBruce M Simpson * 23858f002c6cSBruce M Simpson * XXX This too could be replaced with a set-symmetric 23868f002c6cSBruce M Simpson * difference like loop to avoid walking from root 23878f002c6cSBruce M Simpson * every time, as the key space is common. 23888f002c6cSBruce M Simpson */ 23898f002c6cSBruce M Simpson for (i = 0, pkss = kss; i < msfr.msfr_nsrcs; i++, pkss++) { 23908f002c6cSBruce M Simpson psin = (struct sockaddr_in6 *)pkss; 23918f002c6cSBruce M Simpson if (psin->sin6_family != AF_INET6) { 23928f002c6cSBruce M Simpson error = EAFNOSUPPORT; 23938f002c6cSBruce M Simpson break; 23948f002c6cSBruce M Simpson } 23958f002c6cSBruce M Simpson if (psin->sin6_len != sizeof(struct sockaddr_in6)) { 23968f002c6cSBruce M Simpson error = EINVAL; 23978f002c6cSBruce M Simpson break; 23988f002c6cSBruce M Simpson } 23998f002c6cSBruce M Simpson error = im6f_get_source(imf, psin, &lims); 24008f002c6cSBruce M Simpson if (error) 24018f002c6cSBruce M Simpson break; 24028f002c6cSBruce M Simpson lims->im6sl_st[1] = imf->im6f_st[1]; 24038f002c6cSBruce M Simpson } 24048f002c6cSBruce M Simpson free(kss, M_TEMP); 24058f002c6cSBruce M Simpson } 24068f002c6cSBruce M Simpson 24078f002c6cSBruce M Simpson if (error) 24088f002c6cSBruce M Simpson goto out_im6f_rollback; 24098f002c6cSBruce M Simpson 24108f002c6cSBruce M Simpson INP_WLOCK_ASSERT(inp); 24118f002c6cSBruce M Simpson IN6_MULTI_LOCK(); 24128f002c6cSBruce M Simpson 24138f002c6cSBruce M Simpson /* 24148f002c6cSBruce M Simpson * Begin state merge transaction at MLD layer. 24158f002c6cSBruce M Simpson */ 24168f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: merge inm state", __func__); 24178f002c6cSBruce M Simpson error = in6m_merge(inm, imf); 24188f002c6cSBruce M Simpson if (error) { 24198f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed to merge inm state", __func__); 24208f002c6cSBruce M Simpson goto out_im6f_rollback; 24218f002c6cSBruce M Simpson } 24228f002c6cSBruce M Simpson 24238f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: doing mld downcall", __func__); 24248f002c6cSBruce M Simpson error = mld_change_state(inm, 0); 24258f002c6cSBruce M Simpson if (error) 24268f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: failed mld downcall", __func__); 24278f002c6cSBruce M Simpson 24288f002c6cSBruce M Simpson IN6_MULTI_UNLOCK(); 24298f002c6cSBruce M Simpson 24308f002c6cSBruce M Simpson out_im6f_rollback: 24318f002c6cSBruce M Simpson if (error) 24328f002c6cSBruce M Simpson im6f_rollback(imf); 24338f002c6cSBruce M Simpson else 24348f002c6cSBruce M Simpson im6f_commit(imf); 24358f002c6cSBruce M Simpson 24368f002c6cSBruce M Simpson im6f_reap(imf); 24378f002c6cSBruce M Simpson 24388f002c6cSBruce M Simpson out_in6p_locked: 24398f002c6cSBruce M Simpson INP_WUNLOCK(inp); 24408f002c6cSBruce M Simpson return (error); 24418f002c6cSBruce M Simpson } 24428f002c6cSBruce M Simpson 24438f002c6cSBruce M Simpson /* 24448f002c6cSBruce M Simpson * Set the IP multicast options in response to user setsockopt(). 24458f002c6cSBruce M Simpson * 24468f002c6cSBruce M Simpson * Many of the socket options handled in this function duplicate the 24478f002c6cSBruce M Simpson * functionality of socket options in the regular unicast API. However, 24488f002c6cSBruce M Simpson * it is not possible to merge the duplicate code, because the idempotence 24498f002c6cSBruce M Simpson * of the IPv6 multicast part of the BSD Sockets API must be preserved; 24508f002c6cSBruce M Simpson * the effects of these options must be treated as separate and distinct. 24518f002c6cSBruce M Simpson * 24528f002c6cSBruce M Simpson * SMPng: XXX: Unlocked read of inp_socket believed OK. 24538f002c6cSBruce M Simpson */ 24548f002c6cSBruce M Simpson int 24558f002c6cSBruce M Simpson ip6_setmoptions(struct inpcb *inp, struct sockopt *sopt) 24568f002c6cSBruce M Simpson { 245733cde130SBruce M Simpson struct ip6_moptions *im6o; 24588f002c6cSBruce M Simpson int error; 24598f002c6cSBruce M Simpson 24608f002c6cSBruce M Simpson error = 0; 24618f002c6cSBruce M Simpson 24628f002c6cSBruce M Simpson /* 24638f002c6cSBruce M Simpson * If socket is neither of type SOCK_RAW or SOCK_DGRAM, 24648f002c6cSBruce M Simpson * or is a divert socket, reject it. 24658f002c6cSBruce M Simpson */ 24668f002c6cSBruce M Simpson if (inp->inp_socket->so_proto->pr_protocol == IPPROTO_DIVERT || 24678f002c6cSBruce M Simpson (inp->inp_socket->so_proto->pr_type != SOCK_RAW && 24688f002c6cSBruce M Simpson inp->inp_socket->so_proto->pr_type != SOCK_DGRAM)) 24698f002c6cSBruce M Simpson return (EOPNOTSUPP); 24708f002c6cSBruce M Simpson 24718f002c6cSBruce M Simpson switch (sopt->sopt_name) { 24728f002c6cSBruce M Simpson case IPV6_MULTICAST_IF: 24738f002c6cSBruce M Simpson error = in6p_set_multicast_if(inp, sopt); 24748f002c6cSBruce M Simpson break; 24758f002c6cSBruce M Simpson 24768f002c6cSBruce M Simpson case IPV6_MULTICAST_HOPS: { 24778f002c6cSBruce M Simpson int hlim; 24788f002c6cSBruce M Simpson 24798f002c6cSBruce M Simpson if (sopt->sopt_valsize != sizeof(int)) { 24808f002c6cSBruce M Simpson error = EINVAL; 24818f002c6cSBruce M Simpson break; 24828f002c6cSBruce M Simpson } 24838f002c6cSBruce M Simpson error = sooptcopyin(sopt, &hlim, sizeof(hlim), sizeof(int)); 24848f002c6cSBruce M Simpson if (error) 24858f002c6cSBruce M Simpson break; 24868f002c6cSBruce M Simpson if (hlim < -1 || hlim > 255) { 24878f002c6cSBruce M Simpson error = EINVAL; 24888f002c6cSBruce M Simpson break; 248933cde130SBruce M Simpson } else if (hlim == -1) { 249033cde130SBruce M Simpson hlim = V_ip6_defmcasthlim; 24918f002c6cSBruce M Simpson } 249233cde130SBruce M Simpson im6o = in6p_findmoptions(inp); 249333cde130SBruce M Simpson im6o->im6o_multicast_hlim = hlim; 24948f002c6cSBruce M Simpson INP_WUNLOCK(inp); 24958f002c6cSBruce M Simpson break; 24968f002c6cSBruce M Simpson } 24978f002c6cSBruce M Simpson 24988f002c6cSBruce M Simpson case IPV6_MULTICAST_LOOP: { 24998f002c6cSBruce M Simpson u_int loop; 25008f002c6cSBruce M Simpson 25018f002c6cSBruce M Simpson /* 25028f002c6cSBruce M Simpson * Set the loopback flag for outgoing multicast packets. 250333cde130SBruce M Simpson * Must be zero or one. 25048f002c6cSBruce M Simpson */ 25058f002c6cSBruce M Simpson if (sopt->sopt_valsize != sizeof(u_int)) { 25068f002c6cSBruce M Simpson error = EINVAL; 25078f002c6cSBruce M Simpson break; 25088f002c6cSBruce M Simpson } 25098f002c6cSBruce M Simpson error = sooptcopyin(sopt, &loop, sizeof(u_int), sizeof(u_int)); 25108f002c6cSBruce M Simpson if (error) 25118f002c6cSBruce M Simpson break; 251233cde130SBruce M Simpson if (loop > 1) { 251333cde130SBruce M Simpson error = EINVAL; 251433cde130SBruce M Simpson break; 251533cde130SBruce M Simpson } 251633cde130SBruce M Simpson im6o = in6p_findmoptions(inp); 251733cde130SBruce M Simpson im6o->im6o_multicast_loop = loop; 25188f002c6cSBruce M Simpson INP_WUNLOCK(inp); 25198f002c6cSBruce M Simpson break; 25208f002c6cSBruce M Simpson } 25218f002c6cSBruce M Simpson 25228f002c6cSBruce M Simpson case IPV6_JOIN_GROUP: 25238f002c6cSBruce M Simpson case MCAST_JOIN_GROUP: 25248f002c6cSBruce M Simpson case MCAST_JOIN_SOURCE_GROUP: 25258f002c6cSBruce M Simpson error = in6p_join_group(inp, sopt); 25268f002c6cSBruce M Simpson break; 25278f002c6cSBruce M Simpson 25288f002c6cSBruce M Simpson case IPV6_LEAVE_GROUP: 25298f002c6cSBruce M Simpson case MCAST_LEAVE_GROUP: 25308f002c6cSBruce M Simpson case MCAST_LEAVE_SOURCE_GROUP: 25318f002c6cSBruce M Simpson error = in6p_leave_group(inp, sopt); 25328f002c6cSBruce M Simpson break; 25338f002c6cSBruce M Simpson 25348f002c6cSBruce M Simpson case MCAST_BLOCK_SOURCE: 25358f002c6cSBruce M Simpson case MCAST_UNBLOCK_SOURCE: 25368f002c6cSBruce M Simpson error = in6p_block_unblock_source(inp, sopt); 25378f002c6cSBruce M Simpson break; 25388f002c6cSBruce M Simpson 25398f002c6cSBruce M Simpson case IPV6_MSFILTER: 25408f002c6cSBruce M Simpson error = in6p_set_source_filters(inp, sopt); 25418f002c6cSBruce M Simpson break; 25428f002c6cSBruce M Simpson 25438f002c6cSBruce M Simpson default: 25448f002c6cSBruce M Simpson error = EOPNOTSUPP; 25458f002c6cSBruce M Simpson break; 25468f002c6cSBruce M Simpson } 25478f002c6cSBruce M Simpson 25488f002c6cSBruce M Simpson INP_UNLOCK_ASSERT(inp); 25498f002c6cSBruce M Simpson 25508f002c6cSBruce M Simpson return (error); 25518f002c6cSBruce M Simpson } 25528f002c6cSBruce M Simpson 25538f002c6cSBruce M Simpson /* 25548f002c6cSBruce M Simpson * Expose MLD's multicast filter mode and source list(s) to userland, 25558f002c6cSBruce M Simpson * keyed by (ifindex, group). 25568f002c6cSBruce M Simpson * The filter mode is written out as a uint32_t, followed by 25578f002c6cSBruce M Simpson * 0..n of struct in6_addr. 25588f002c6cSBruce M Simpson * For use by ifmcstat(8). 25598f002c6cSBruce M Simpson * SMPng: NOTE: unlocked read of ifindex space. 25608f002c6cSBruce M Simpson */ 25618f002c6cSBruce M Simpson static int 25628f002c6cSBruce M Simpson sysctl_ip6_mcast_filters(SYSCTL_HANDLER_ARGS) 25638f002c6cSBruce M Simpson { 25648f002c6cSBruce M Simpson INIT_VNET_NET(curvnet); 25658f002c6cSBruce M Simpson struct in6_addr *pgina; 25668f002c6cSBruce M Simpson struct in6_addr src; 25678f002c6cSBruce M Simpson struct ifnet *ifp; 25688f002c6cSBruce M Simpson struct ifmultiaddr *ifma; 25698f002c6cSBruce M Simpson struct in6_multi *inm; 25708f002c6cSBruce M Simpson struct ip6_msource *ims; 25718f002c6cSBruce M Simpson int *name; 25728f002c6cSBruce M Simpson int retval; 25738f002c6cSBruce M Simpson u_int namelen; 25748f002c6cSBruce M Simpson uint32_t fmode, ifindex; 25758f002c6cSBruce M Simpson #ifdef KTR 25768f002c6cSBruce M Simpson char ip6tbuf[INET6_ADDRSTRLEN]; 25778f002c6cSBruce M Simpson #endif 25788f002c6cSBruce M Simpson 25798f002c6cSBruce M Simpson name = (int *)arg1; 25808f002c6cSBruce M Simpson namelen = arg2; 25818f002c6cSBruce M Simpson 25828f002c6cSBruce M Simpson if (req->newptr != NULL) 25838f002c6cSBruce M Simpson return (EPERM); 25848f002c6cSBruce M Simpson 25858f002c6cSBruce M Simpson /* int: ifindex + 4 * 32 bits of IPv6 address */ 25868f002c6cSBruce M Simpson if (namelen != 5) 25878f002c6cSBruce M Simpson return (EINVAL); 25888f002c6cSBruce M Simpson 25898f002c6cSBruce M Simpson ifindex = name[0]; 25908f002c6cSBruce M Simpson if (ifindex <= 0 || ifindex > V_if_index) { 25918f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: ifindex %u out of range", 25928f002c6cSBruce M Simpson __func__, ifindex); 25938f002c6cSBruce M Simpson return (ENOENT); 25948f002c6cSBruce M Simpson } 25958f002c6cSBruce M Simpson 25968f002c6cSBruce M Simpson pgina = (struct in6_addr *)&name[1]; 25978f002c6cSBruce M Simpson if (!IN6_IS_ADDR_MULTICAST(pgina)) { 25988f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: group %s is not multicast", 25998f002c6cSBruce M Simpson __func__, ip6_sprintf(ip6tbuf, pgina)); 26008f002c6cSBruce M Simpson return (EINVAL); 26018f002c6cSBruce M Simpson } 26028f002c6cSBruce M Simpson 26038f002c6cSBruce M Simpson ifp = ifnet_byindex(ifindex); 26048f002c6cSBruce M Simpson if (ifp == NULL) { 26058f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: no ifp for ifindex %u", 26068f002c6cSBruce M Simpson __func__, ifindex); 26078f002c6cSBruce M Simpson return (ENOENT); 26088f002c6cSBruce M Simpson } 26098f002c6cSBruce M Simpson 26108f002c6cSBruce M Simpson retval = sysctl_wire_old_buffer(req, 26118f002c6cSBruce M Simpson sizeof(uint32_t) + (in6_mcast_maxgrpsrc * sizeof(struct in6_addr))); 26128f002c6cSBruce M Simpson if (retval) 26138f002c6cSBruce M Simpson return (retval); 26148f002c6cSBruce M Simpson 26158f002c6cSBruce M Simpson IN6_MULTI_LOCK(); 26168f002c6cSBruce M Simpson 26178f002c6cSBruce M Simpson IF_ADDR_LOCK(ifp); 26188f002c6cSBruce M Simpson TAILQ_FOREACH(ifma, &ifp->if_multiaddrs, ifma_link) { 26198f002c6cSBruce M Simpson if (ifma->ifma_addr->sa_family != AF_INET6 || 26208f002c6cSBruce M Simpson ifma->ifma_protospec == NULL) 26218f002c6cSBruce M Simpson continue; 26228f002c6cSBruce M Simpson inm = (struct in6_multi *)ifma->ifma_protospec; 26238f002c6cSBruce M Simpson if (!IN6_ARE_ADDR_EQUAL(&inm->in6m_addr, pgina)) 26248f002c6cSBruce M Simpson continue; 26258f002c6cSBruce M Simpson fmode = inm->in6m_st[1].iss_fmode; 26268f002c6cSBruce M Simpson retval = SYSCTL_OUT(req, &fmode, sizeof(uint32_t)); 26278f002c6cSBruce M Simpson if (retval != 0) 26288f002c6cSBruce M Simpson break; 26298f002c6cSBruce M Simpson RB_FOREACH(ims, ip6_msource_tree, &inm->in6m_srcs) { 26308f002c6cSBruce M Simpson CTR2(KTR_MLD, "%s: visit node %p", __func__, ims); 26318f002c6cSBruce M Simpson /* 26328f002c6cSBruce M Simpson * Only copy-out sources which are in-mode. 26338f002c6cSBruce M Simpson */ 26348f002c6cSBruce M Simpson if (fmode != im6s_get_mode(inm, ims, 1)) { 26358f002c6cSBruce M Simpson CTR1(KTR_MLD, "%s: skip non-in-mode", 26368f002c6cSBruce M Simpson __func__); 26378f002c6cSBruce M Simpson continue; 26388f002c6cSBruce M Simpson } 26398f002c6cSBruce M Simpson src = ims->im6s_addr; 26408f002c6cSBruce M Simpson retval = SYSCTL_OUT(req, &src, 26418f002c6cSBruce M Simpson sizeof(struct in6_addr)); 26428f002c6cSBruce M Simpson if (retval != 0) 26438f002c6cSBruce M Simpson break; 26448f002c6cSBruce M Simpson } 26458f002c6cSBruce M Simpson } 26468f002c6cSBruce M Simpson IF_ADDR_UNLOCK(ifp); 26478f002c6cSBruce M Simpson 26488f002c6cSBruce M Simpson IN6_MULTI_UNLOCK(); 26498f002c6cSBruce M Simpson 26508f002c6cSBruce M Simpson return (retval); 26518f002c6cSBruce M Simpson } 26528f002c6cSBruce M Simpson 26538f002c6cSBruce M Simpson #ifdef KTR 26548f002c6cSBruce M Simpson 26558f002c6cSBruce M Simpson static const char *in6m_modestrs[] = { "un", "in", "ex" }; 26568f002c6cSBruce M Simpson 26578f002c6cSBruce M Simpson static const char * 26588f002c6cSBruce M Simpson in6m_mode_str(const int mode) 26598f002c6cSBruce M Simpson { 26608f002c6cSBruce M Simpson 26618f002c6cSBruce M Simpson if (mode >= MCAST_UNDEFINED && mode <= MCAST_EXCLUDE) 26628f002c6cSBruce M Simpson return (in6m_modestrs[mode]); 26638f002c6cSBruce M Simpson return ("??"); 26648f002c6cSBruce M Simpson } 26658f002c6cSBruce M Simpson 26668f002c6cSBruce M Simpson static const char *in6m_statestrs[] = { 26678f002c6cSBruce M Simpson "not-member", 26688f002c6cSBruce M Simpson "silent", 26698f002c6cSBruce M Simpson "idle", 26708f002c6cSBruce M Simpson "lazy", 26718f002c6cSBruce M Simpson "sleeping", 26728f002c6cSBruce M Simpson "awakening", 26738f002c6cSBruce M Simpson "query-pending", 26748f002c6cSBruce M Simpson "sg-query-pending", 26758f002c6cSBruce M Simpson "leaving" 26768f002c6cSBruce M Simpson }; 26778f002c6cSBruce M Simpson 26788f002c6cSBruce M Simpson static const char * 26798f002c6cSBruce M Simpson in6m_state_str(const int state) 26808f002c6cSBruce M Simpson { 26818f002c6cSBruce M Simpson 26828f002c6cSBruce M Simpson if (state >= MLD_NOT_MEMBER && state <= MLD_LEAVING_MEMBER) 26838f002c6cSBruce M Simpson return (in6m_statestrs[state]); 26848f002c6cSBruce M Simpson return ("??"); 26858f002c6cSBruce M Simpson } 26868f002c6cSBruce M Simpson 26878f002c6cSBruce M Simpson /* 26888f002c6cSBruce M Simpson * Dump an in6_multi structure to the console. 26898f002c6cSBruce M Simpson */ 26908f002c6cSBruce M Simpson void 26918f002c6cSBruce M Simpson in6m_print(const struct in6_multi *inm) 26928f002c6cSBruce M Simpson { 26938f002c6cSBruce M Simpson int t; 26948f002c6cSBruce M Simpson char ip6tbuf[INET6_ADDRSTRLEN]; 26958f002c6cSBruce M Simpson 26968f002c6cSBruce M Simpson if ((KTR_COMPILE & KTR_MLD) == 0) 26978f002c6cSBruce M Simpson return; 26988f002c6cSBruce M Simpson 26998f002c6cSBruce M Simpson printf("%s: --- begin in6m %p ---\n", __func__, inm); 27008f002c6cSBruce M Simpson printf("addr %s ifp %p(%s) ifma %p\n", 27018f002c6cSBruce M Simpson ip6_sprintf(ip6tbuf, &inm->in6m_addr), 27028f002c6cSBruce M Simpson inm->in6m_ifp, 27038f002c6cSBruce M Simpson inm->in6m_ifp->if_xname, 27048f002c6cSBruce M Simpson inm->in6m_ifma); 27058f002c6cSBruce M Simpson printf("timer %u state %s refcount %u scq.len %u\n", 27068f002c6cSBruce M Simpson inm->in6m_timer, 27078f002c6cSBruce M Simpson in6m_state_str(inm->in6m_state), 27088f002c6cSBruce M Simpson inm->in6m_refcount, 27098f002c6cSBruce M Simpson inm->in6m_scq.ifq_len); 27108f002c6cSBruce M Simpson printf("mli %p nsrc %lu sctimer %u scrv %u\n", 27118f002c6cSBruce M Simpson inm->in6m_mli, 27128f002c6cSBruce M Simpson inm->in6m_nsrc, 27138f002c6cSBruce M Simpson inm->in6m_sctimer, 27148f002c6cSBruce M Simpson inm->in6m_scrv); 27158f002c6cSBruce M Simpson for (t = 0; t < 2; t++) { 27168f002c6cSBruce M Simpson printf("t%d: fmode %s asm %u ex %u in %u rec %u\n", t, 27178f002c6cSBruce M Simpson in6m_mode_str(inm->in6m_st[t].iss_fmode), 27188f002c6cSBruce M Simpson inm->in6m_st[t].iss_asm, 27198f002c6cSBruce M Simpson inm->in6m_st[t].iss_ex, 27208f002c6cSBruce M Simpson inm->in6m_st[t].iss_in, 27218f002c6cSBruce M Simpson inm->in6m_st[t].iss_rec); 27228f002c6cSBruce M Simpson } 27238f002c6cSBruce M Simpson printf("%s: --- end in6m %p ---\n", __func__, inm); 27248f002c6cSBruce M Simpson } 27258f002c6cSBruce M Simpson 27268f002c6cSBruce M Simpson #else /* !KTR */ 27278f002c6cSBruce M Simpson 27288f002c6cSBruce M Simpson void 27298f002c6cSBruce M Simpson in6m_print(const struct in6_multi *inm) 27308f002c6cSBruce M Simpson { 27318f002c6cSBruce M Simpson 27328f002c6cSBruce M Simpson } 27338f002c6cSBruce M Simpson 27348f002c6cSBruce M Simpson #endif /* KTR */ 2735