1 /*
2  * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
3  * Use is subject to license terms.
4  */
5 
6 /* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T	*/
7 /* All Rights Reserved	*/
8 
9 /* Copyright (c) 1990  Mentat Inc. */
10 
11 /*
12  *
13  * Copyright (c) 1983, 1989, 1991, 1993
14  *	The Regents of the University of California.  All rights reserved.
15  *
16  * Redistribution and use in source and binary forms, with or without
17  * modification, are permitted provided that the following conditions
18  * are met:
19  * 1. Redistributions of source code must retain the above copyright
20  *    notice, this list of conditions and the following disclaimer.
21  * 2. Redistributions in binary form must reproduce the above copyright
22  *    notice, this list of conditions and the following disclaimer in the
23  *    documentation and/or other materials provided with the distribution.
24  * 3. All advertising materials mentioning features or use of this software
25  *    must display the following acknowledgement:
26  *	This product includes software developed by the University of
27  *	California, Berkeley and its contributors.
28  * 4. Neither the name of the University nor the names of its contributors
29  *    may be used to endorse or promote products derived from this software
30  *    without specific prior written permission.
31  *
32  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
33  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
34  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
35  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
36  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
37  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
38  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
39  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
40  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
41  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
42  * SUCH DAMAGE.
43  *
44  *	@(#)route.c	8.6 (Berkeley) 4/28/95
45  *	@(#)linkaddr.c	8.1 (Berkeley) 6/4/93
46  */
47 
48 #pragma ident	"%Z%%M%	%I%	%E% SMI"
49 
50 #include <sys/param.h>
51 #include <sys/file.h>
52 #include <sys/socket.h>
53 #include <sys/ioctl.h>
54 #include <sys/stat.h>
55 #include <sys/stream.h>
56 #include <sys/sysmacros.h>
57 #include <sys/tihdr.h>
58 #include <sys/types.h>
59 #include <sys/ccompile.h>
60 
61 #include <net/if.h>
62 #include <net/route.h>
63 #include <net/if_dl.h>
64 #include <netinet/in.h>
65 #include <arpa/inet.h>
66 #include <netdb.h>
67 #include <inet/mib2.h>
68 #include <inet/ip.h>
69 
70 #include <limits.h>
71 #include <locale.h>
72 
73 #include <errno.h>
74 #include <unistd.h>
75 #include <stdio.h>
76 #include <stdlib.h>
77 #include <stddef.h>
78 #include <string.h>
79 #include <stropts.h>
80 #include <fcntl.h>
81 #include <stdarg.h>
82 #include <assert.h>
83 #include <strings.h>
84 
85 #include <libtsnet.h>
86 #include <tsol/label.h>
87 
88 static struct keytab {
89 	char	*kt_cp;
90 	int	kt_i;
91 } keywords[] = {
92 #define	K_ADD		1
93 	{"add",		K_ADD},
94 #define	K_BLACKHOLE	2
95 	{"blackhole",	K_BLACKHOLE},
96 #define	K_CHANGE	3
97 	{"change",	K_CHANGE},
98 #define	K_CLONING	4
99 	{"cloning",	K_CLONING},
100 #define	K_DELETE	5
101 	{"delete",	K_DELETE},
102 #define	K_DST		6
103 	{"dst",		K_DST},
104 #define	K_EXPIRE	7
105 	{"expire",	K_EXPIRE},
106 #define	K_FLUSH		8
107 	{"flush",	K_FLUSH},
108 #define	K_GATEWAY	9
109 	{"gateway",	K_GATEWAY},
110 #define	K_GET		11
111 	{"get",		K_GET},
112 #define	K_HOPCOUNT	12
113 	{"hopcount",	K_HOPCOUNT},
114 #define	K_HOST		13
115 	{"host",	K_HOST},
116 #define	K_IFA		14
117 	{"ifa",		K_IFA},
118 #define	K_IFACE		15
119 	{"iface",	K_IFACE},
120 #define	K_IFP		16
121 	{"ifp",		K_IFP},
122 #define	K_INET		17
123 	{"inet",	K_INET},
124 #define	K_INET6		18
125 	{"inet6",	K_INET6},
126 #define	K_INTERFACE	19
127 	{"interface",	K_INTERFACE},
128 #define	K_LINK		20
129 	{"link",	K_LINK},
130 #define	K_LOCK		21
131 	{"lock",	K_LOCK},
132 #define	K_LOCKREST	22
133 	{"lockrest",	K_LOCKREST},
134 #define	K_MASK		23
135 	{"mask",	K_MASK},
136 #define	K_MONITOR	24
137 	{"monitor",	K_MONITOR},
138 #define	K_MTU		25
139 	{"mtu",		K_MTU},
140 #define	K_NET		26
141 	{"net",		K_NET},
142 #define	K_NETMASK	27
143 	{"netmask",	K_NETMASK},
144 #define	K_NOSTATIC	28
145 	{"nostatic",	K_NOSTATIC},
146 #define	K_PRIVATE	29
147 	{"private",	K_PRIVATE},
148 #define	K_PROTO1	30
149 	{"proto1",	K_PROTO1},
150 #define	K_PROTO2	31
151 	{"proto2",	K_PROTO2},
152 #define	K_RECVPIPE	32
153 	{"recvpipe",	K_RECVPIPE},
154 #define	K_REJECT	33
155 	{"reject",	K_REJECT},
156 #define	K_RTT		34
157 	{"rtt",		K_RTT},
158 #define	K_RTTVAR	35
159 	{"rttvar",	K_RTTVAR},
160 #define	K_SA		36
161 	{"sa",		K_SA},
162 #define	K_SENDPIPE	37
163 	{"sendpipe",	K_SENDPIPE},
164 #define	K_SSTHRESH	38
165 	{"ssthresh",	K_SSTHRESH},
166 #define	K_STATIC	39
167 	{"static",	K_STATIC},
168 #define	K_XRESOLVE	40
169 	{"xresolve",	K_XRESOLVE},
170 #define	K_MULTIRT	41
171 	{"multirt",	K_MULTIRT},
172 #define	K_SETSRC	42
173 	{"setsrc",	K_SETSRC},
174 #define	K_SHOW		43
175 	{"show",	K_SHOW},
176 #define	K_SECATTR	43
177 	{"secattr",	K_SECATTR},
178 	{0, 0}
179 };
180 
181 /*
182  * Size of buffers used to hold command lines from the saved route file as
183  * well as error strings.
184  */
185 #define	BUF_SIZE 2048
186 
187 typedef union sockunion {
188 	struct	sockaddr sa;
189 	struct	sockaddr_in sin;
190 	struct	sockaddr_dl sdl;
191 	struct	sockaddr_in6 sin6;
192 } su_t;
193 
194 /*
195  * This structure represents the digested information from parsing arguments
196  * to route add, change, delete, and get.
197  *
198  */
199 typedef struct rtcmd_irep {
200 	int ri_cmd;
201 	int ri_flags;
202 	int ri_af;
203 	ulong_t	ri_inits;
204 	struct rt_metrics ri_metrics;
205 	int ri_addrs;
206 	su_t ri_dst;
207 	char *ri_dest_str;
208 	su_t ri_src;
209 	su_t ri_gate;
210 	struct hostent *ri_gate_hp;
211 	char *ri_gate_str;
212 	su_t ri_mask;
213 	su_t ri_ifa;
214 	su_t ri_ifp;
215 	char *ri_ifp_str;
216 	int ri_rtsa_cnt;	/* number of gateway security attributes */
217 	struct rtsa_s ri_rtsa;	/* enough space for one attribute */
218 } rtcmd_irep_t;
219 
220 typedef struct	mib_item_s {
221 	struct mib_item_s *next_item;
222 	long group;
223 	long mib_id;
224 	long length;
225 	intmax_t *valp;
226 } mib_item_t;
227 
228 typedef enum {
229 	ADDR_TYPE_ANY,
230 	ADDR_TYPE_HOST,
231 	ADDR_TYPE_NET
232 } addr_type_t;
233 
234 typedef enum {
235 	SEARCH_MODE_NULL,
236 	SEARCH_MODE_PRINT,
237 	SEARCH_MODE_DEL
238 } search_mode_t;
239 
240 static boolean_t	args_to_rtcmd(rtcmd_irep_t *rcip, char **argv,
241     char *cmd_string);
242 static void		bprintf(FILE *fp, int b, char *s);
243 static boolean_t	compare_rtcmd(rtcmd_irep_t *srch_rt,
244     rtcmd_irep_t *file_rt);
245 static void		delRouteEntry(mib2_ipRouteEntry_t *rp,
246     mib2_ipv6RouteEntry_t *rp6, int seqno);
247 static void		del_rtcmd_irep(rtcmd_irep_t *rcip);
248 static void		flushroutes(int argc, char *argv[]);
249 static boolean_t	getaddr(rtcmd_irep_t *rcip, int which, char *s,
250     addr_type_t atype);
251 static boolean_t	in6_getaddr(char *s, struct sockaddr_in6 *sin6,
252     int *plenp, struct hostent **hpp);
253 static boolean_t	in_getaddr(char *s, struct sockaddr_in *sin,
254     int *plenp, int which, struct hostent **hpp, addr_type_t atype,
255     rtcmd_irep_t *rcip);
256 static int		in_getprefixlen(char *addr, int max_plen);
257 static boolean_t	in_prefixlentomask(int prefixlen, int maxlen,
258     uchar_t *mask);
259 static void		inet_makenetandmask(rtcmd_irep_t *rcip, in_addr_t net,
260     struct sockaddr_in *sin);
261 static in_addr_t	inet_makesubnetmask(in_addr_t addr, in_addr_t mask);
262 static int		keyword(const char *cp);
263 static void		link_addr(const char *addr, struct sockaddr_dl *sdl);
264 static char		*link_ntoa(const struct sockaddr_dl *sdl);
265 static mib_item_t	*mibget(int sd);
266 static char		*netname(struct sockaddr *sa);
267 static int		newroute(char **argv);
268 static rtcmd_irep_t	*new_rtcmd_irep(void);
269 static void		pmsg_addrs(const char *cp, size_t len, uint_t addrs);
270 static void		pmsg_common(const struct rt_msghdr *rtm, size_t len);
271 static void		print_getmsg(rtcmd_irep_t *req_rt,
272     struct rt_msghdr *rtm, int msglen);
273 static void		print_rtcmd_short(FILE *to, rtcmd_irep_t *rcip,
274     boolean_t gw_good, boolean_t to_saved);
275 static void		print_rtmsg(struct rt_msghdr *rtm, int msglen);
276 static void		quit(char *s, int err) __NORETURN;
277 static char		*routename(const struct sockaddr *sa);
278 static void		rtmonitor(int argc, char *argv[]);
279 static int		rtmsg(rtcmd_irep_t *rcip);
280 static int		salen(const struct sockaddr *sa);
281 static void		save_route(int argc, char **argv, int do_flush);
282 static void		save_string(char **dst, char *src);
283 static int		search_rtfile(FILE *fp, FILE *temp_fp, rtcmd_irep_t *rt,
284     search_mode_t mode);
285 static void		set_metric(rtcmd_irep_t *rcip, char *value, int key,
286     boolean_t lock);
287 static int		show_saved_routes(int argc);
288 static void		sockaddr(char *addr, struct sockaddr *sa);
289 static void		sodump(su_t *su, char *which);
290 static void		syntax_arg_missing(char *keyword);
291 static void		syntax_bad_keyword(char *keyword);
292 static void		syntax_error(char *err, ...);
293 static void		usage(char *cp);
294 static void		write_to_rtfile(FILE *fp, int argc, char **argv);
295 static void		pmsg_secattr(const char *, size_t, const char *);
296 
297 static pid_t		pid;
298 static int		s;
299 static boolean_t	nflag;
300 static int		af = AF_INET;
301 static boolean_t	qflag, tflag;
302 static boolean_t	verbose;
303 static boolean_t	debugonly;
304 static boolean_t	fflag;
305 static boolean_t	update_table;
306 static boolean_t	perm_flag;
307 static boolean_t	early_v6_keyword;
308 static char		perm_file_sfx[] = "/etc/inet/static_routes";
309 static char		*perm_file;
310 static char		temp_file_sfx[] = "/etc/inet/static_routes.tmp";
311 static char		*temp_file;
312 static struct in6_addr	in6_host_mask = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
313     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
314 /*
315  * WARNING:
316  * This next variable indicates whether certain functions exit when an error
317  * is detected in the user input.  Currently, exit_on_error is only set false
318  * in search_rtfile(), when argument are being parsed.  Only those functions
319  * used by search_rtfile() to parse its arguments are designed to work in
320  * both modes.  Take particular care in setting this false to ensure that any
321  * functions you call that might act on this flag properly return errors when
322  * exit_on_error is false.
323  */
324 static int		exit_on_error = B_TRUE;
325 
326 static struct {
327 	struct	rt_msghdr m_rtm;
328 	char	m_space[BUF_SIZE];
329 } m_rtmsg;
330 
331 /*
332  * Sizes of data structures extracted from the base mib.
333  * This allows the size of the tables entries to grow while preserving
334  * binary compatibility.
335  */
336 static int ipRouteEntrySize;
337 static int ipv6RouteEntrySize;
338 
339 #define	ROUNDUP_LONG(a) \
340 	((a) > 0 ? (1 + (((a) - 1) | (sizeof (long) - 1))) : sizeof (long))
341 #define	ADVANCE(x, n) ((x) += ROUNDUP_LONG(salen(n)))
342 #define	C(x)	((x) & 0xff)
343 
344 /*
345  * return values from in_getprefixlen()
346  */
347 #define	BAD_ADDR	-1	/* prefix is invalid */
348 #define	NO_PREFIX	-2	/* no prefix was found */
349 
350 void
351 usage(char *cp)
352 {
353 	if (cp != NULL) {
354 		(void) fprintf(stderr, gettext("route: botched keyword: %s\n"),
355 		    cp);
356 	}
357 	(void) fprintf(stderr, gettext("usage: route [ -fnpqv ] "
358 	    "[ -R <root-dir> ] cmd [[ -<qualifers> ] args ]\n"));
359 	exit(1);
360 	/* NOTREACHED */
361 }
362 
363 /*PRINTFLIKE1*/
364 void
365 syntax_error(char *err, ...)
366 {
367 	va_list args;
368 
369 	if (exit_on_error) {
370 		va_start(args, err);
371 		(void) vfprintf(stderr, err, args);
372 		va_end(args);
373 		exit(1);
374 	}
375 	/* NOTREACHED */
376 }
377 
378 void
379 syntax_bad_keyword(char *keyword)
380 {
381 	syntax_error(gettext("route: botched keyword: %s\n"), keyword);
382 }
383 
384 void
385 syntax_arg_missing(char *keyword)
386 {
387 	syntax_error(gettext("route: argument required following keyword %s\n"),
388 	    keyword);
389 }
390 
391 void
392 quit(char *s, int sverrno)
393 {
394 	(void) fprintf(stderr, "route: ");
395 	if (s != NULL)
396 		(void) fprintf(stderr, "%s: ", s);
397 	(void) fprintf(stderr, "%s\n", strerror(sverrno));
398 	exit(sverrno);
399 	/* NOTREACHED */
400 }
401 
402 int
403 main(int argc, char **argv)
404 {
405 	extern int optind;
406 	extern char *optarg;
407 	int ch;
408 	int rval;
409 	size_t size;
410 	const char *root_dir = NULL;
411 
412 	(void) setlocale(LC_ALL, "");
413 
414 #if !defined(TEXT_DOMAIN)
415 #define	TEXT_DOMAIN "SYS_TEST"
416 #endif
417 	(void) textdomain(TEXT_DOMAIN);
418 
419 	if (argc < 2)
420 		usage(NULL);
421 
422 	while ((ch = getopt(argc, argv, "R:nqdtvfp")) != EOF) {
423 		switch (ch) {
424 		case 'n':
425 			nflag = B_TRUE;
426 			break;
427 		case 'q':
428 			qflag = B_TRUE;
429 			break;
430 		case 'v':
431 			verbose = B_TRUE;
432 			break;
433 		case 't':
434 			tflag = B_TRUE;
435 			break;
436 		case 'd':
437 			debugonly = B_TRUE;
438 			break;
439 		case 'f':
440 			fflag = B_TRUE;
441 			break;
442 		case 'p':
443 			perm_flag = B_TRUE;
444 			break;
445 		case 'R':
446 			root_dir = optarg;
447 			break;
448 		case '?':
449 		default:
450 			usage(NULL);
451 			/* NOTREACHED */
452 		}
453 	}
454 	argc -= optind;
455 	argv += optind;
456 
457 	pid = getpid();
458 	if (tflag)
459 		s = open("/dev/null", O_WRONLY);
460 	else
461 		s = socket(PF_ROUTE, SOCK_RAW, 0);
462 	if (s < 0)
463 		quit("socket", errno);
464 
465 	/*
466 	 * Handle the -p and -R flags.  The -R flag only applies
467 	 * when the -p flag is set.
468 	 */
469 	if (root_dir == NULL) {
470 		perm_file = perm_file_sfx;
471 		temp_file = temp_file_sfx;
472 	} else {
473 		size = strlen(root_dir) + sizeof (perm_file_sfx);
474 		perm_file = malloc(size);
475 		if (perm_file == NULL)
476 			quit("malloc", errno);
477 		(void) snprintf(perm_file, size, "%s%s", root_dir,
478 		    perm_file_sfx);
479 		size = strlen(root_dir) + sizeof (temp_file_sfx);
480 		temp_file = malloc(size);
481 		if (temp_file == NULL)
482 			quit("malloc", errno);
483 		(void) snprintf(temp_file, size, "%s%s", root_dir,
484 		    temp_file_sfx);
485 	}
486 	/*
487 	 * Whether or not to act on the routing table.  The only time the
488 	 * routing table is not modified is when both -p and -R are present.
489 	 */
490 	update_table = (!perm_flag || root_dir == NULL);
491 	if (tflag)
492 		perm_flag = 0;
493 
494 	if (fflag) {
495 		/*
496 		 * Accept an address family keyword after the -f.  Since the
497 		 * default address family is AF_INET, reassign af only for the
498 		 * other valid address families.
499 		 */
500 		if (*argv != NULL) {
501 			switch (keyword(*argv)) {
502 			case K_INET6:
503 				af = AF_INET6;
504 				early_v6_keyword = B_TRUE;
505 				/* fallthrough */
506 			case K_INET:
507 				/* Skip over the address family parameter. */
508 				argc--;
509 				argv++;
510 				break;
511 			}
512 		}
513 		flushroutes(0, NULL);
514 	}
515 
516 	if (*argv != NULL) {
517 		switch (keyword(*argv)) {
518 		case K_GET:
519 		case K_CHANGE:
520 		case K_ADD:
521 		case K_DELETE:
522 			rval = 0;
523 			if (update_table) {
524 				rval = newroute(argv);
525 			}
526 			if (perm_flag && (rval == 0 || rval == EEXIST ||
527 			    rval == ESRCH)) {
528 				save_route(argc, argv, B_FALSE);
529 				return (0);
530 			}
531 			return (rval);
532 		case K_SHOW:
533 			if (perm_flag) {
534 				return (show_saved_routes(argc));
535 			} else {
536 				syntax_error(gettext(
537 				    "route: show command requires -p\n"));
538 			}
539 			/* NOTREACHED */
540 		case K_MONITOR:
541 			rtmonitor(argc, argv);
542 			/* NOTREACHED */
543 
544 		case K_FLUSH:
545 			flushroutes(argc, argv);
546 			return (0);
547 		}
548 	}
549 	if (!fflag)
550 		usage(*argv);
551 	return (0);
552 }
553 
554 /*
555  * Purge all entries in the routing tables not
556  * associated with network interfaces.
557  */
558 void
559 flushroutes(int argc, char *argv[])
560 {
561 	int seqno;
562 	int sd;	/* mib stream */
563 	mib_item_t	*item;
564 	mib2_ipRouteEntry_t *rp;
565 	mib2_ipv6RouteEntry_t *rp6;
566 	int oerrno;
567 	int off = 0;
568 	int on = 1;
569 
570 	if (argc > 1) {
571 		argv++;
572 		if (argc == 2 && **argv == '-') {
573 			/*
574 			 * The address family (preceded by a dash) may be used
575 			 * to flush the routes of that particular family.
576 			 */
577 			switch (keyword(*argv + 1)) {
578 			case K_INET:
579 				af = AF_INET;
580 				break;
581 			case K_LINK:
582 				af = AF_LINK;
583 				break;
584 			case K_INET6:
585 				af = AF_INET6;
586 				break;
587 			default:
588 				usage(*argv);
589 				/* NOTREACHED */
590 			}
591 		} else {
592 			usage(*argv);
593 		}
594 	}
595 	if (perm_flag) {
596 		/* This flushes the persistent route file */
597 		save_route(0, NULL, B_TRUE);
598 	}
599 	if (!update_table) {
600 		return;
601 	}
602 
603 	if (setsockopt(s, SOL_SOCKET, SO_USELOOPBACK, (char *)&off,
604 	    sizeof (off)) < 0)
605 		quit("setsockopt", errno);
606 
607 	sd = open("/dev/ip", O_RDWR);
608 	oerrno = errno;
609 	if (sd < 0) {
610 		switch (errno) {
611 		case EACCES:
612 			(void) fprintf(stderr,
613 			    gettext("route: flush: insufficient privileges\n"));
614 			exit(oerrno);
615 			/* NOTREACHED */
616 		default:
617 			quit(gettext("can't open mib stream"), oerrno);
618 			/* NOTREACHED */
619 		}
620 	}
621 	if ((item = mibget(sd)) == NULL)
622 		quit("mibget", errno);
623 	if (verbose) {
624 		(void) printf("Examining routing table from "
625 		    "T_SVR4_OPTMGMT_REQ\n");
626 	}
627 	seqno = 0;		/* ??? */
628 	switch (af) {
629 	case AF_INET:
630 		/* Extract ipRouteEntrySize */
631 		for (; item != NULL; item = item->next_item) {
632 			if (item->mib_id != 0)
633 				continue;
634 			if (item->group == MIB2_IP) {
635 				ipRouteEntrySize =
636 				    ((mib2_ip_t *)item->valp)->ipRouteEntrySize;
637 				assert(IS_P2ALIGNED(ipRouteEntrySize,
638 				    sizeof (mib2_ipRouteEntry_t *)));
639 				break;
640 			}
641 		}
642 		if (ipRouteEntrySize == 0) {
643 			(void) fprintf(stderr,
644 			    gettext("ipRouteEntrySize can't be determined.\n"));
645 			exit(1);
646 		}
647 		for (; item != NULL; item = item->next_item) {
648 			/*
649 			 * skip all the other trash that comes up the mib stream
650 			 */
651 			if (item->group != MIB2_IP ||
652 			    item->mib_id != MIB2_IP_ROUTE)
653 				continue;
654 			for (rp = (mib2_ipRouteEntry_t *)item->valp;
655 			    (char *)rp < (char *)item->valp + item->length;
656 			    /* LINTED */
657 			    rp = (mib2_ipRouteEntry_t *)
658 				((char *)rp + ipRouteEntrySize)) {
659 				delRouteEntry(rp, NULL, seqno);
660 				seqno++;
661 			}
662 			break;
663 		}
664 		break;
665 	case AF_INET6:
666 		/* Extract ipv6RouteEntrySize */
667 		for (; item != NULL; item = item->next_item) {
668 			if (item->mib_id != 0)
669 				continue;
670 			if (item->group == MIB2_IP6) {
671 				ipv6RouteEntrySize =
672 				    ((mib2_ipv6IfStatsEntry_t *)item->valp)->
673 					ipv6RouteEntrySize;
674 				assert(IS_P2ALIGNED(ipv6RouteEntrySize,
675 				    sizeof (mib2_ipv6RouteEntry_t *)));
676 				break;
677 			}
678 		}
679 		if (ipv6RouteEntrySize == 0) {
680 			(void) fprintf(stderr, gettext(
681 			    "ipv6RouteEntrySize cannot be determined.\n"));
682 			exit(1);
683 		}
684 		for (; item != NULL; item = item->next_item) {
685 			/*
686 			 * skip all the other trash that comes up the mib stream
687 			 */
688 			if (item->group != MIB2_IP6 ||
689 			    item->mib_id != MIB2_IP6_ROUTE)
690 				continue;
691 			for (rp6 = (mib2_ipv6RouteEntry_t *)item->valp;
692 			    (char *)rp6 < (char *)item->valp + item->length;
693 			    /* LINTED */
694 			    rp6 = (mib2_ipv6RouteEntry_t *)
695 				((char *)rp6 + ipv6RouteEntrySize)) {
696 				delRouteEntry(NULL, rp6, seqno);
697 				seqno++;
698 			}
699 			break;
700 		}
701 		break;
702 	}
703 
704 	if (setsockopt(s, SOL_SOCKET, SO_USELOOPBACK, (char *)&on,
705 	    sizeof (on)) < 0)
706 		quit("setsockopt", errno);
707 }
708 
709 /*
710  * Given the contents of a mib_item_t of id type MIB2_IP_ROUTE or
711  * MIB2_IP6_ROUTE, construct and send an RTM_DELETE routing socket message in
712  * order to facilitate the flushing of RTF_GATEWAY routes.
713  */
714 static void
715 delRouteEntry(mib2_ipRouteEntry_t *rp, mib2_ipv6RouteEntry_t *rp6, int seqno)
716 {
717 	char *cp;
718 	int ire_type;
719 	int rlen;
720 	struct rt_msghdr *rtm;
721 	struct sockaddr_in sin;
722 	struct sockaddr_in6 sin6;
723 	int slen;
724 
725 	if (rp != NULL)
726 		ire_type = rp->ipRouteInfo.re_ire_type;
727 	else
728 		ire_type = rp6->ipv6RouteInfo.re_ire_type;
729 	if (ire_type != IRE_DEFAULT &&
730 	    ire_type != IRE_PREFIX &&
731 	    ire_type != IRE_HOST &&
732 	    ire_type != IRE_HOST_REDIRECT)
733 		return;
734 
735 	rtm = &m_rtmsg.m_rtm;
736 	(void) memset(rtm, 0, sizeof (m_rtmsg));
737 	rtm->rtm_type = RTM_DELETE;
738 	rtm->rtm_seq = seqno;
739 	rtm->rtm_flags |= RTF_GATEWAY;
740 	rtm->rtm_version = RTM_VERSION;
741 	rtm->rtm_addrs = RTA_DST | RTA_GATEWAY | RTA_NETMASK;
742 	cp = m_rtmsg.m_space;
743 	if (rp != NULL) {
744 		slen = sizeof (struct sockaddr_in);
745 		if (rp->ipRouteMask == IP_HOST_MASK)
746 			rtm->rtm_flags |= RTF_HOST;
747 		(void) memset(&sin, 0, slen);
748 		sin.sin_family = AF_INET;
749 		sin.sin_addr.s_addr = rp->ipRouteDest;
750 		(void) memmove(cp, &sin, slen);
751 		cp += slen;
752 		sin.sin_addr.s_addr = rp->ipRouteNextHop;
753 		(void) memmove(cp, &sin, slen);
754 		cp += slen;
755 		sin.sin_addr.s_addr = rp->ipRouteMask;
756 		(void) memmove(cp, &sin, slen);
757 		cp += slen;
758 	} else {
759 		slen = sizeof (struct sockaddr_in6);
760 		if (rp6->ipv6RoutePfxLength == IPV6_ABITS)
761 			rtm->rtm_flags |= RTF_HOST;
762 		(void) memset(&sin6, 0, slen);
763 		sin6.sin6_family = AF_INET6;
764 		sin6.sin6_addr = rp6->ipv6RouteDest;
765 		(void) memmove(cp, &sin6, slen);
766 		cp += slen;
767 		sin6.sin6_addr = rp6->ipv6RouteNextHop;
768 		(void) memmove(cp, &sin6, slen);
769 		cp += slen;
770 		(void) memset(&sin6.sin6_addr, 0, sizeof (sin6.sin6_addr));
771 		(void) in_prefixlentomask(rp6->ipv6RoutePfxLength, IPV6_ABITS,
772 		    (uchar_t *)&sin6.sin6_addr.s6_addr);
773 		(void) memmove(cp, &sin6, slen);
774 		cp += slen;
775 	}
776 	rtm->rtm_msglen = cp - (char *)&m_rtmsg;
777 	if (debugonly) {
778 		/*
779 		 * In debugonly mode, the routing socket message to delete the
780 		 * current entry is not actually sent.  However if verbose is
781 		 * also set, the routing socket message that would have been
782 		 * is printed.
783 		 */
784 		if (verbose)
785 			print_rtmsg(rtm, rtm->rtm_msglen);
786 		return;
787 	}
788 
789 	rlen = write(s, (char *)&m_rtmsg, rtm->rtm_msglen);
790 	if (rlen < (int)rtm->rtm_msglen) {
791 		if (rlen < 0) {
792 			(void) fprintf(stderr,
793 			    gettext("route: write to routing socket: %s\n"),
794 			    strerror(errno));
795 		} else {
796 			(void) fprintf(stderr, gettext("route: write to "
797 			    "routing socket got only %d for rlen\n"), rlen);
798 		}
799 		return;
800 	}
801 	if (qflag) {
802 		/*
803 		 * In quiet mode, nothing is printed at all (unless the write()
804 		 * itself failed.
805 		 */
806 		return;
807 	}
808 	if (verbose) {
809 		print_rtmsg(rtm, rlen);
810 	} else {
811 		struct sockaddr *sa = (struct sockaddr *)(rtm + 1);
812 
813 		(void) printf("%-20.20s ",
814 		    rtm->rtm_flags & RTF_HOST ? routename(sa) :
815 			netname(sa));
816 		/* LINTED */
817 		sa = (struct sockaddr *)(salen(sa) + (char *)sa);
818 		(void) printf("%-20.20s ", routename(sa));
819 		(void) printf("done\n");
820 	}
821 }
822 
823 /*
824  * Return the name of the host whose address is given.
825  */
826 char *
827 routename(const struct sockaddr *sa)
828 {
829 	char *cp;
830 	static char line[MAXHOSTNAMELEN + 1];
831 	struct hostent *hp = NULL;
832 	static char domain[MAXHOSTNAMELEN + 1];
833 	static boolean_t first = B_TRUE;
834 	struct in_addr in;
835 	struct in6_addr in6;
836 	int error_num;
837 	ushort_t *s;
838 	ushort_t *slim;
839 
840 	if (first) {
841 		first = B_FALSE;
842 		if (gethostname(domain, MAXHOSTNAMELEN) == 0 &&
843 		    (cp = strchr(domain, '.')))
844 			(void) strcpy(domain, cp + 1);
845 		else
846 			domain[0] = 0;
847 	}
848 
849 	if (salen(sa) == 0) {
850 		(void) strcpy(line, "default");
851 		return (line);
852 	}
853 	switch (sa->sa_family) {
854 
855 	case AF_INET:
856 		/* LINTED */
857 		in = ((struct sockaddr_in *)sa)->sin_addr;
858 
859 		cp = NULL;
860 		if (in.s_addr == INADDR_ANY)
861 			cp = "default";
862 		if (cp == NULL && !nflag) {
863 			hp = gethostbyaddr((char *)&in, sizeof (struct in_addr),
864 				AF_INET);
865 			if (hp != NULL) {
866 				if (((cp = strchr(hp->h_name, '.')) != NULL) &&
867 				    (strcmp(cp + 1, domain) == 0))
868 					*cp = 0;
869 				cp = hp->h_name;
870 			}
871 		}
872 		if (cp != NULL) {
873 			(void) strncpy(line, cp, MAXHOSTNAMELEN);
874 			line[MAXHOSTNAMELEN] = '\0';
875 		} else {
876 			in.s_addr = ntohl(in.s_addr);
877 			(void) sprintf(line, "%u.%u.%u.%u", C(in.s_addr >> 24),
878 			    C(in.s_addr >> 16), C(in.s_addr >> 8),
879 			    C(in.s_addr));
880 		}
881 		break;
882 
883 	case AF_LINK:
884 		return (link_ntoa((struct sockaddr_dl *)sa));
885 
886 	case AF_INET6:
887 		/* LINTED */
888 		in6 = ((struct sockaddr_in6 *)sa)->sin6_addr;
889 
890 		cp = NULL;
891 		if (IN6_IS_ADDR_UNSPECIFIED(&in6))
892 			cp = "default";
893 		if (cp == NULL && !nflag) {
894 			hp = getipnodebyaddr((char *)&in6,
895 				sizeof (struct in6_addr), AF_INET6, &error_num);
896 			if (hp != NULL) {
897 				if (((cp = strchr(hp->h_name, '.')) != NULL) &&
898 				    (strcmp(cp + 1, domain) == 0))
899 					*cp = 0;
900 				cp = hp->h_name;
901 			}
902 		}
903 		if (cp != NULL) {
904 			(void) strncpy(line, cp, MAXHOSTNAMELEN);
905 			line[MAXHOSTNAMELEN] = '\0';
906 		} else {
907 			(void) inet_ntop(AF_INET6, (void *)&in6, line,
908 			    INET6_ADDRSTRLEN);
909 		}
910 		if (hp != NULL)
911 			freehostent(hp);
912 
913 		break;
914 
915 	default:
916 		s = (ushort_t *)sa;
917 
918 		slim = s + ((salen(sa) + 1) >> 1);
919 		cp = line + sprintf(line, "(%d)", sa->sa_family);
920 
921 		while (++s < slim) /* start with sa->sa_data */
922 			cp += sprintf(cp, " %x", *s);
923 		break;
924 	}
925 	return (line);
926 }
927 
928 /*
929  * Return the name of the network whose address is given.
930  * The address is assumed to be that of a net or subnet, not a host.
931  */
932 static char *
933 netname(struct sockaddr *sa)
934 {
935 	char *cp = NULL;
936 	static char line[MAXHOSTNAMELEN + 1];
937 	struct netent *np;
938 	in_addr_t net, mask;
939 	int subnetshift;
940 	struct in_addr in;
941 	ushort_t *s;
942 	ushort_t *slim;
943 
944 	switch (sa->sa_family) {
945 
946 	case AF_INET:
947 		/* LINTED */
948 		in = ((struct sockaddr_in *)sa)->sin_addr;
949 
950 		in.s_addr = ntohl(in.s_addr);
951 		if (in.s_addr == INADDR_ANY) {
952 			cp = "default";
953 		} else if (!nflag) {
954 			if (IN_CLASSA(in.s_addr)) {
955 				mask = IN_CLASSA_NET;
956 				subnetshift = 8;
957 			} else if (IN_CLASSB(in.s_addr)) {
958 				mask = IN_CLASSB_NET;
959 				subnetshift = 8;
960 			} else {
961 				mask = IN_CLASSC_NET;
962 				subnetshift = 4;
963 			}
964 			/*
965 			 * If there are more bits than the standard mask
966 			 * would suggest, subnets must be in use.
967 			 * Guess at the subnet mask, assuming reasonable
968 			 * width subnet fields.
969 			 */
970 			while (in.s_addr &~ mask)
971 				mask = (long)mask >> subnetshift;
972 			net = in.s_addr & mask;
973 			while ((mask & 1) == 0)
974 				mask >>= 1, net >>= 1;
975 			np = getnetbyaddr(net, AF_INET);
976 			if (np != NULL)
977 				cp = np->n_name;
978 		}
979 		if (cp != NULL) {
980 			(void) strncpy(line, cp, MAXHOSTNAMELEN);
981 			line[MAXHOSTNAMELEN] = '\0';
982 		} else if ((in.s_addr & 0xffffff) == 0) {
983 			(void) sprintf(line, "%u", C(in.s_addr >> 24));
984 		} else if ((in.s_addr & 0xffff) == 0) {
985 			(void) sprintf(line, "%u.%u", C(in.s_addr >> 24),
986 			    C(in.s_addr >> 16));
987 		} else if ((in.s_addr & 0xff) == 0) {
988 			(void) sprintf(line, "%u.%u.%u", C(in.s_addr >> 24),
989 			    C(in.s_addr >> 16), C(in.s_addr >> 8));
990 		} else {
991 			(void) sprintf(line, "%u.%u.%u.%u", C(in.s_addr >> 24),
992 			    C(in.s_addr >> 16), C(in.s_addr >> 8),
993 			    C(in.s_addr));
994 		}
995 		break;
996 
997 	case AF_LINK:
998 		return (link_ntoa((struct sockaddr_dl *)sa));
999 
1000 	case AF_INET6:
1001 		return (routename(sa));
1002 
1003 	default:
1004 		/* LINTED */
1005 		s = (ushort_t *)sa->sa_data;
1006 
1007 		slim = s + ((salen(sa) + 1) >> 1);
1008 		cp = line + sprintf(line, "af %d:", sa->sa_family);
1009 
1010 		while (s < slim)
1011 			cp += sprintf(cp, " %x", *s++);
1012 		break;
1013 	}
1014 	return (line);
1015 }
1016 
1017 /*
1018  * Initialize a new structure.  Keep in mind that ri_dst_str, ri_gate_str and
1019  * ri_ifp_str will be freed by det_rtcmd_irep, so they should either be NULL
1020  * or point to dynamically allocated memory.
1021  */
1022 rtcmd_irep_t *
1023 new_rtcmd_irep(void)
1024 {
1025 	rtcmd_irep_t *rcip;
1026 
1027 	rcip = calloc(1, sizeof (rtcmd_irep_t));
1028 	if (rcip == NULL) {
1029 		quit("calloc", errno);
1030 	}
1031 	rcip->ri_af = af;
1032 	rcip->ri_flags = RTF_STATIC;
1033 	return (rcip);
1034 }
1035 
1036 void
1037 del_rtcmd_irep(rtcmd_irep_t *rcip)
1038 {
1039 	free(rcip->ri_dest_str);
1040 	free(rcip->ri_gate_str);
1041 	free(rcip->ri_ifp_str);
1042 	/*
1043 	 * IPv6 host entries come from getipnodebyname, which dynamically
1044 	 * allocates memory.  IPv4 host entries come from gethostbyname, which
1045 	 * returns static memory and cannot be freed with freehostent.
1046 	 */
1047 	if (rcip->ri_gate_hp != NULL &&
1048 	    rcip->ri_gate_hp->h_addrtype == AF_INET6)
1049 		freehostent(rcip->ri_gate_hp);
1050 	free(rcip);
1051 }
1052 
1053 void
1054 save_string(char **dst, char *src)
1055 {
1056 	free(*dst);
1057 	*dst = strdup(src);
1058 	if (*dst == NULL) {
1059 		quit("malloc", errno);
1060 	}
1061 }
1062 
1063 /*
1064  * Print the short form summary of a route command.
1065  * Eg. "add net default: gateway 10.0.0.1"
1066  * The final newline is not added, allowing the caller to append additional
1067  * information.
1068  */
1069 void
1070 print_rtcmd_short(FILE *to, rtcmd_irep_t *rcip, boolean_t gw_good,
1071     boolean_t to_saved)
1072 {
1073 	char *cmd;
1074 	char obuf[INET6_ADDRSTRLEN];
1075 
1076 	switch (rcip->ri_cmd) {
1077 	case RTM_ADD:
1078 		cmd = "add";
1079 		break;
1080 	case RTM_CHANGE:
1081 		cmd = "change";
1082 		break;
1083 	case RTM_DELETE:
1084 		cmd = "delete";
1085 		break;
1086 	case RTM_GET:
1087 		cmd = "get";
1088 		break;
1089 	default:
1090 		assert(0);
1091 	}
1092 
1093 	(void) fprintf(to, "%s%s %s %s", cmd,
1094 	    (to_saved) ? " persistent" : "",
1095 	    (rcip->ri_flags & RTF_HOST) ? "host" : "net",
1096 	    (rcip->ri_dest_str == NULL) ? "NULL" : rcip->ri_dest_str);
1097 
1098 	if (rcip->ri_gate_str != NULL) {
1099 		switch (rcip->ri_af) {
1100 		case AF_INET:
1101 			if (nflag) {
1102 				(void) fprintf(to, ": gateway %s",
1103 				    inet_ntoa(rcip->ri_gate.sin.sin_addr));
1104 			} else if (gw_good &&
1105 			    rcip->ri_gate_hp != NULL &&
1106 			    rcip->ri_gate_hp->h_addr_list[1] != NULL) {
1107 				/*
1108 				 * Print the actual address used in the case
1109 				 * where there was more than one address
1110 				 * available for the name, and one was used
1111 				 * successfully.
1112 				 */
1113 				(void) fprintf(to, ": gateway %s (%s)",
1114 				    rcip->ri_gate_str,
1115 				    inet_ntoa(rcip->ri_gate.sin.sin_addr));
1116 			} else {
1117 				(void) fprintf(to, ": gateway %s",
1118 				    rcip->ri_gate_str);
1119 			}
1120 			break;
1121 		case AF_INET6:
1122 			if (inet_ntop(AF_INET6,
1123 				&rcip->ri_gate.sin6.sin6_addr, obuf,
1124 				INET6_ADDRSTRLEN) != NULL) {
1125 				if (nflag) {
1126 					(void) fprintf(to, ": gateway %s",
1127 					    obuf);
1128 					break;
1129 				}
1130 				if (gw_good &&
1131 				    rcip->ri_gate_hp->h_addr_list[1] != NULL) {
1132 					(void) fprintf(to, ": gateway %s (%s)",
1133 					    rcip->ri_gate_str, obuf);
1134 					break;
1135 				}
1136 			}
1137 			/* FALLTHROUGH */
1138 		default:
1139 			(void) fprintf(to, ": gateway %s",
1140 			    rcip->ri_gate_str);
1141 			break;
1142 		}
1143 	}
1144 }
1145 
1146 void
1147 set_metric(rtcmd_irep_t *rcip, char *value, int key, boolean_t lock)
1148 {
1149 	int flag = 0;
1150 	uint_t noval, *valp = &noval;
1151 
1152 	switch (key) {
1153 #define	caseof(x, y, z)	\
1154 	case (x): valp = &(rcip->ri_metrics.z); flag = (y); break
1155 
1156 	caseof(K_MTU, RTV_MTU, rmx_mtu);
1157 	caseof(K_HOPCOUNT, RTV_HOPCOUNT, rmx_hopcount);
1158 	caseof(K_EXPIRE, RTV_EXPIRE, rmx_expire);
1159 	caseof(K_RECVPIPE, RTV_RPIPE, rmx_recvpipe);
1160 	caseof(K_SENDPIPE, RTV_SPIPE, rmx_sendpipe);
1161 	caseof(K_SSTHRESH, RTV_SSTHRESH, rmx_ssthresh);
1162 	caseof(K_RTT, RTV_RTT, rmx_rtt);
1163 	caseof(K_RTTVAR, RTV_RTTVAR, rmx_rttvar);
1164 #undef	caseof
1165 	}
1166 	rcip->ri_inits |= flag;
1167 	if (lock)
1168 		rcip->ri_metrics.rmx_locks |= flag;
1169 	*valp = atoi(value);
1170 }
1171 
1172 /*
1173  * Parse the options give in argv[], filling in rcip with the results.
1174  * If cmd_string is non-null, argc and argv are ignored, and cmd_string is
1175  * tokenized to produce the command line.  Cmd_string is tokenized using
1176  * strtok, which will overwrite whitespace in the string with nulls.
1177  *
1178  * Returns B_TRUE on success and B_FALSE on failure.
1179  */
1180 boolean_t
1181 args_to_rtcmd(rtcmd_irep_t *rcip, char **argv, char *cmd_string)
1182 {
1183 	const char *ws = "\f\n\r\t\v ";
1184 	char *tok = cmd_string;
1185 	char *keyword_str;
1186 	addr_type_t atype = ADDR_TYPE_ANY;
1187 	boolean_t iflag = B_FALSE;
1188 	boolean_t locknext = B_FALSE;
1189 	boolean_t lockrest = B_FALSE;
1190 	boolean_t dash_keyword;
1191 	int key;
1192 	char *err;
1193 
1194 	if (cmd_string == NULL) {
1195 		tok = argv[0];
1196 	} else {
1197 		tok = strtok(cmd_string, ws);
1198 	}
1199 
1200 	/*
1201 	 * The command keywords are already fully checked by main() or
1202 	 * search_rtfile().
1203 	 */
1204 	switch (*tok) {
1205 	case 'a':
1206 		rcip->ri_cmd = RTM_ADD;
1207 		break;
1208 	case 'c':
1209 		rcip->ri_cmd = RTM_CHANGE;
1210 		break;
1211 	case 'd':
1212 		rcip->ri_cmd = RTM_DELETE;
1213 		break;
1214 	case 'g':
1215 		rcip->ri_cmd = RTM_GET;
1216 		break;
1217 	default:
1218 		/* NOTREACHED */
1219 		quit(gettext("Internal Error"), EINVAL);
1220 		/* NOTREACHED */
1221 	}
1222 
1223 #define	NEXTTOKEN \
1224 	((tok = (cmd_string == NULL ? *++argv : strtok(NULL, ws))) != NULL)
1225 
1226 	while (NEXTTOKEN) {
1227 		keyword_str = tok;
1228 		if (*tok == '-') {
1229 			dash_keyword = B_TRUE;
1230 			key = keyword(tok + 1);
1231 		} else {
1232 			dash_keyword = B_FALSE;
1233 			key = keyword(tok);
1234 			if (key != K_HOST && key != K_NET) {
1235 				/* All others must be preceded by '-' */
1236 				key = 0;
1237 			}
1238 		}
1239 		switch (key) {
1240 		case K_HOST:
1241 			if (atype == ADDR_TYPE_NET) {
1242 				syntax_error(gettext("route: -host and -net "
1243 				    "are mutually exclusive\n"));
1244 				return (B_FALSE);
1245 			}
1246 			atype = ADDR_TYPE_HOST;
1247 			break;
1248 		case K_NET:
1249 			if (atype == ADDR_TYPE_HOST) {
1250 				syntax_error(gettext("route: -host and -net "
1251 				    "are mutually exclusive\n"));
1252 				return (B_FALSE);
1253 			}
1254 			atype = ADDR_TYPE_NET;
1255 			break;
1256 		case K_LINK:
1257 			rcip->ri_af = AF_LINK;
1258 			break;
1259 		case K_INET:
1260 			rcip->ri_af = AF_INET;
1261 			break;
1262 		case K_SA:
1263 			rcip->ri_af = PF_ROUTE;
1264 			break;
1265 		case K_INET6:
1266 			rcip->ri_af = AF_INET6;
1267 			break;
1268 		case K_IFACE:
1269 		case K_INTERFACE:
1270 			iflag = B_TRUE;
1271 			/* fallthrough */
1272 		case K_NOSTATIC:
1273 			rcip->ri_flags &= ~RTF_STATIC;
1274 			break;
1275 		case K_LOCK:
1276 			locknext = B_TRUE;
1277 			break;
1278 		case K_LOCKREST:
1279 			lockrest = B_TRUE;
1280 			break;
1281 		case K_REJECT:
1282 			rcip->ri_flags |= RTF_REJECT;
1283 			break;
1284 		case K_BLACKHOLE:
1285 			rcip->ri_flags |= RTF_BLACKHOLE;
1286 			break;
1287 		case K_PROTO1:
1288 			rcip->ri_flags |= RTF_PROTO1;
1289 			break;
1290 		case K_PROTO2:
1291 			rcip->ri_flags |= RTF_PROTO2;
1292 			break;
1293 		case K_CLONING:
1294 			rcip->ri_flags |= RTF_CLONING;
1295 			break;
1296 		case K_XRESOLVE:
1297 			rcip->ri_flags |= RTF_XRESOLVE;
1298 			break;
1299 		case K_STATIC:
1300 			rcip->ri_flags |= RTF_STATIC;
1301 			break;
1302 		case K_IFA:
1303 			if (!NEXTTOKEN) {
1304 				syntax_arg_missing(keyword_str);
1305 				return (B_FALSE);
1306 			}
1307 			if (!getaddr(rcip, RTA_IFA, tok, atype)) {
1308 				return (B_FALSE);
1309 			}
1310 			break;
1311 		case K_IFP:
1312 			if (!NEXTTOKEN) {
1313 				syntax_arg_missing(keyword_str);
1314 				return (B_FALSE);
1315 			}
1316 			if (!getaddr(rcip, RTA_IFP, tok, atype)) {
1317 				return (B_FALSE);
1318 			}
1319 			break;
1320 		case K_GATEWAY:
1321 			if (!NEXTTOKEN) {
1322 				syntax_arg_missing(keyword_str);
1323 				return (B_FALSE);
1324 			}
1325 			if (!getaddr(rcip, RTA_GATEWAY, tok, atype)) {
1326 				return (B_FALSE);
1327 			}
1328 			break;
1329 		case K_DST:
1330 			if (!NEXTTOKEN) {
1331 				syntax_arg_missing(keyword_str);
1332 				return (B_FALSE);
1333 			}
1334 			if (!getaddr(rcip, RTA_DST, tok, atype)) {
1335 				return (B_FALSE);
1336 			}
1337 			break;
1338 		case K_NETMASK:
1339 			if (!NEXTTOKEN) {
1340 				syntax_arg_missing(keyword_str);
1341 				return (B_FALSE);
1342 			}
1343 			if (!getaddr(rcip, RTA_NETMASK, tok, atype)) {
1344 				return (B_FALSE);
1345 			}
1346 			atype = ADDR_TYPE_NET;
1347 			break;
1348 		case K_MTU:
1349 		case K_HOPCOUNT:
1350 		case K_EXPIRE:
1351 		case K_RECVPIPE:
1352 		case K_SENDPIPE:
1353 		case K_SSTHRESH:
1354 		case K_RTT:
1355 		case K_RTTVAR:
1356 			if (!NEXTTOKEN) {
1357 				syntax_arg_missing(keyword_str);
1358 				return (B_FALSE);
1359 			}
1360 			set_metric(rcip, tok, key, locknext || lockrest);
1361 			locknext = B_FALSE;
1362 			break;
1363 		case K_PRIVATE:
1364 			rcip->ri_flags |= RTF_PRIVATE;
1365 			break;
1366 		case K_MULTIRT:
1367 			rcip->ri_flags |= RTF_MULTIRT;
1368 			break;
1369 		case K_SETSRC:
1370 			if (!NEXTTOKEN) {
1371 				syntax_arg_missing(keyword_str);
1372 				return (B_FALSE);
1373 			}
1374 			if (!getaddr(rcip, RTA_SRC, tok, atype)) {
1375 				return (B_FALSE);
1376 			}
1377 			rcip->ri_flags |= RTF_SETSRC;
1378 			break;
1379 		case K_SECATTR:
1380 			if (!NEXTTOKEN) {
1381 				syntax_arg_missing(keyword_str);
1382 				return (B_FALSE);
1383 			}
1384 			if (is_system_labeled()) {
1385 				int err;
1386 
1387 				if (rcip->ri_rtsa_cnt >= 1) {
1388 					syntax_error(gettext("route: can't "
1389 					    "specify more than one security "
1390 					    "attribute\n"));
1391 					return (B_FALSE);
1392 				}
1393 				if (!rtsa_keyword(tok, &rcip->ri_rtsa, &err,
1394 				    NULL)) {
1395 					syntax_error(gettext("route: "
1396 					    "bad security attribute: %s\n"),
1397 					    tsol_strerror(err, errno));
1398 					return (B_FALSE);
1399 				}
1400 				rcip->ri_rtsa_cnt++;
1401 			} else {
1402 				syntax_error(gettext("route: "
1403 				    "system is not labeled; cannot specify "
1404 				    "security attributes.\n"));
1405 				return (B_FALSE);
1406 			}
1407 			break;
1408 		default:
1409 			if (dash_keyword) {
1410 				syntax_bad_keyword(tok + 1);
1411 				return (B_FALSE);
1412 			}
1413 			if ((rcip->ri_addrs & RTA_DST) == 0) {
1414 				if (!getaddr(rcip, RTA_DST, tok, atype)) {
1415 					return (B_FALSE);
1416 				}
1417 			} else if ((rcip->ri_addrs & RTA_GATEWAY) == 0) {
1418 				/*
1419 				 * For the gateway parameter, retrieve the
1420 				 * pointer to the struct hostent so that all
1421 				 * possible addresses can be tried until one
1422 				 * is successful.
1423 				 */
1424 				if (!getaddr(rcip, RTA_GATEWAY, tok, atype)) {
1425 					return (B_FALSE);
1426 				}
1427 			} else {
1428 				ulong_t metric;
1429 				/*
1430 				 * Assume that a regular number is a metric.
1431 				 * Needed for compatibility with old route
1432 				 * command syntax.
1433 				 */
1434 				errno = 0;
1435 				metric = strtoul(tok, &err, 10);
1436 				if (errno == 0 && *err == '\0' &&
1437 				    metric < 0x80000000ul) {
1438 					iflag = (metric == 0);
1439 					if (verbose) {
1440 						(void) printf("old usage of "
1441 						    "trailing number, assuming "
1442 						    "route %s\n", iflag ?
1443 						    "to if" : "via gateway");
1444 					}
1445 					continue;
1446 				}
1447 				if (!getaddr(rcip, RTA_NETMASK, tok, atype)) {
1448 					return (B_FALSE);
1449 				}
1450 			}
1451 		}
1452 	}
1453 #undef NEXTTOKEN
1454 
1455 	if ((rcip->ri_addrs & RTA_DST) == 0) {
1456 		syntax_error(gettext("route: destination required\n"));
1457 		return (B_FALSE);
1458 	} else if ((rcip->ri_cmd == RTM_ADD || rcip->ri_cmd == RTM_DELETE) &&
1459 	    (rcip->ri_addrs & RTA_GATEWAY) == 0) {
1460 		syntax_error(gettext(
1461 		    "route: gateway required for add or delete command\n"));
1462 		return (B_FALSE);
1463 	}
1464 
1465 	if (!iflag) {
1466 		rcip->ri_flags |= RTF_GATEWAY;
1467 	}
1468 
1469 	if (atype != ADDR_TYPE_NET) {
1470 		if (rcip->ri_addrs & RTA_NETMASK) {
1471 			/*
1472 			 * We know the netmask, so we can set the host flag
1473 			 * based on whether the netmask is the host netmask.
1474 			 */
1475 			if (rcip->ri_af == AF_INET &&
1476 			    rcip->ri_mask.sin.sin_addr.s_addr ==
1477 			    IP_HOST_MASK) {
1478 				rcip->ri_flags |= RTF_HOST;
1479 			}
1480 			if (rcip->ri_af == AF_INET6 &&
1481 			    memcmp(&rcip->ri_mask.sin6.sin6_addr,
1482 				&in6_host_mask,
1483 				sizeof (struct in6_addr)) == 0) {
1484 				rcip->ri_flags |= RTF_HOST;
1485 			}
1486 		} else {
1487 			/*
1488 			 * If no prefix mask has been saved at this point, it
1489 			 * only makes sense to treat the destination address
1490 			 * as a host address.
1491 			 */
1492 			rcip->ri_flags |= RTF_HOST;
1493 		}
1494 	}
1495 	return (B_TRUE);
1496 }
1497 
1498 /*
1499  * This command always seeks to the end of the file prior to writing.
1500  */
1501 void
1502 write_to_rtfile(FILE *fp, int argc, char **argv)
1503 {
1504 	char file_line[BUF_SIZE];
1505 	int len;
1506 	int i;
1507 
1508 	len = 0;
1509 	if (early_v6_keyword) {
1510 		/*
1511 		 * This flag is set when "inet6" was seen as an
1512 		 * argument to the -f flag.  Normally, when writing
1513 		 * routes to the persistent route file, everything on
1514 		 * the command line after "add" is saved verbatim.
1515 		 * In this case, the arguments after "add" may not be
1516 		 * sufficient, as the ipv6 keyword came before "add",
1517 		 * yet must be present in the persistent route file.
1518 		 */
1519 		len += snprintf(file_line, BUF_SIZE, "-inet6 ");
1520 	}
1521 	for (i = 0; argc > 0 && len < BUF_SIZE; i++, argc--) {
1522 		len += snprintf(&file_line[len], BUF_SIZE - len, "%s ",
1523 		    argv[i]);
1524 	}
1525 	if (len >= BUF_SIZE)
1526 		quit(gettext("Internal Error"), EINVAL);
1527 	file_line[len - 1] = '\n';
1528 	if (fseek(fp, 0, SEEK_END) != 0 ||
1529 	    fputs(file_line, fp) == EOF) {
1530 		quit(gettext("failed to write to route file"),
1531 		    errno);
1532 	}
1533 }
1534 
1535 boolean_t
1536 compare_rtcmd(rtcmd_irep_t *srch_rt, rtcmd_irep_t *file_rt)
1537 {
1538 	if (strcmp(srch_rt->ri_dest_str, file_rt->ri_dest_str) != 0 ||
1539 	    memcmp(&srch_rt->ri_mask, &file_rt->ri_mask, sizeof (su_t)) != 0) {
1540 		return (B_FALSE);
1541 	}
1542 	return (srch_rt->ri_gate_str == NULL ||
1543 	    strcmp(srch_rt->ri_gate_str, file_rt->ri_gate_str) == 0);
1544 }
1545 
1546 /*
1547  * Search the route file for routes matching the supplied route.  There are 3
1548  * modes of operation:
1549  *    SEARCH_MODE_RET - no side effects.
1550  *    SEARCH_MODE_PRINT - prints each matching line.
1551  *    SEARCH_MODE_DEL - copies all valid, non-matching lines to tmp_fp.
1552  *
1553  * In all cases, the number of matches is returned.  If rt is NULL, all routes
1554  * matching the global af value are considered matching.
1555  */
1556 int
1557 search_rtfile(FILE *fp, FILE *temp_fp, rtcmd_irep_t *rt, search_mode_t mode)
1558 {
1559 	char *tmp_buf;
1560 	int match_cnt;
1561 	boolean_t match;
1562 	char file_line[BUF_SIZE + 4] = "add ";
1563 	rtcmd_irep_t *thisrt;
1564 
1565 	match_cnt = 0;
1566 
1567 	/*
1568 	 * Leave space at the beginning of file_line for "add ".
1569 	 */
1570 	while (fgets(file_line + 4, BUF_SIZE, fp) != NULL) {
1571 
1572 		if (file_line[4] == '#' || file_line[4] == '\n') {
1573 			/* Handle comments and blank lines */
1574 			if (mode == SEARCH_MODE_DEL &&
1575 			    fputs(file_line + 4, temp_fp) == EOF) {
1576 				quit(gettext(
1577 				    "route: failed to write to temp file"),
1578 				    errno);
1579 			}
1580 			continue;
1581 		}
1582 		thisrt = new_rtcmd_irep();
1583 		/*
1584 		 * thisrt->ri_af defaults to whatever address family happens
1585 		 * to be set in the global af, but routes in the persistent
1586 		 * route file must be treated as AF_INET by default.
1587 		 */
1588 		thisrt->ri_af = AF_INET;
1589 
1590 		exit_on_error = B_FALSE;
1591 		tmp_buf = strdup(file_line);
1592 		/* args_to_rtcmd() will mangle the string passed. */
1593 		if (!args_to_rtcmd(thisrt, NULL, tmp_buf)) {
1594 			/* There was an error in args_to_rtcmd() or helpers */
1595 			del_rtcmd_irep(thisrt);
1596 			free(tmp_buf);
1597 			continue;
1598 		}
1599 		exit_on_error = B_TRUE;
1600 		free(tmp_buf);
1601 
1602 		if (thisrt->ri_gate_str == NULL) {
1603 			del_rtcmd_irep(thisrt);
1604 			continue;
1605 		}
1606 		match = (rt == NULL) ? (thisrt->ri_af == af) :
1607 		    compare_rtcmd(rt, thisrt);
1608 
1609 		if (match) match_cnt++;
1610 		if (match && mode == SEARCH_MODE_PRINT) {
1611 			(void) printf("persistent: route %s", file_line);
1612 		}
1613 		if (match && mode == SEARCH_MODE_DEL) {
1614 			thisrt->ri_cmd = RTM_DELETE;
1615 			print_rtcmd_short(stdout, thisrt, B_FALSE, B_TRUE);
1616 			(void) printf("\n");
1617 		}
1618 		del_rtcmd_irep(thisrt);
1619 
1620 		if (!match && mode == SEARCH_MODE_DEL &&
1621 		    fputs(file_line + 4, temp_fp) == EOF) {
1622 			quit(gettext("failed to write to temp file"),
1623 			    errno);
1624 		}
1625 	}
1626 	return (match_cnt);
1627 }
1628 
1629 /*
1630  * Perform the route operation given in argv on the persistent route file.
1631  * If do_flush is set, the persistent route file is flushed of all routes
1632  * matching the global family, and the arguments are ignored.
1633  */
1634 void
1635 save_route(int argc, char **argv, int do_flush)
1636 {
1637 	rtcmd_irep_t *rt;
1638 	int perm_fd;
1639 	FILE *perm_fp;
1640 	FILE *temp_fp;
1641 	mode_t fmode = S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH;
1642 	struct flock lock;
1643 	struct stat st;
1644 	const char commentstr[] =
1645 	    "# File generated by route(1M) - do not edit.\n";
1646 
1647 	perm_fd = open(perm_file, O_RDWR | O_CREAT, fmode);
1648 	if (perm_fd == -1 || fstat(perm_fd, &st) == -1)
1649 		quit("failed to open route file", errno);
1650 
1651 	lock.l_type = F_WRLCK;
1652 	lock.l_whence = SEEK_SET;
1653 	lock.l_start = 0;
1654 	lock.l_len = 0;
1655 	if (fcntl(perm_fd, F_SETLK, &lock) != 0) {
1656 		quit(gettext("failed to lock route file"), errno);
1657 		/* NOTREACHED */
1658 	}
1659 	if (st.st_size == 0 &&
1660 	    write(perm_fd, commentstr, sizeof (commentstr) - 1) !=
1661 	    sizeof (commentstr) - 1)
1662 		quit(gettext("failed to open route file"), errno);
1663 
1664 	if ((perm_fp = fdopen(perm_fd, "r+")) == NULL) {
1665 		quit(gettext("failed to open route file"), errno);
1666 		/* NOTREACHED */
1667 	}
1668 
1669 	if (!do_flush) {
1670 		rt = new_rtcmd_irep();
1671 		(void) args_to_rtcmd(rt, argv, NULL);
1672 	}
1673 	if (do_flush || rt->ri_cmd == RTM_DELETE) {
1674 		if ((temp_fp = fopen(temp_file, "w")) == NULL) {
1675 			quit(gettext("failed to open temp file"), errno);
1676 			/* NOTREACHED */
1677 		}
1678 	}
1679 	if (do_flush) {
1680 		(void) search_rtfile(perm_fp, temp_fp, NULL, SEARCH_MODE_DEL);
1681 		if (fclose(temp_fp) != 0 || rename(temp_file, perm_file) != 0) {
1682 			quit(gettext("failed to update route file"), errno);
1683 			/* NOTREACHED */
1684 		}
1685 		(void) fclose(perm_fp);
1686 		return;
1687 	}
1688 
1689 	switch (rt->ri_cmd) {
1690 	case RTM_ADD:
1691 		if (search_rtfile(perm_fp, NULL, rt, SEARCH_MODE_NULL) > 0) {
1692 			/* Route is already in the file */
1693 			print_rtcmd_short(stderr, rt, B_FALSE, B_TRUE);
1694 			(void) fprintf(stderr, ": entry exists\n");
1695 			exit(1);
1696 		}
1697 		write_to_rtfile(perm_fp, argc - 1, argv + 1);
1698 		print_rtcmd_short(stdout, rt, B_FALSE, B_TRUE);
1699 		(void) printf("\n");
1700 		break;
1701 
1702 	case RTM_CHANGE:
1703 		syntax_error(
1704 		    gettext("route: change command not supported with -p\n"));
1705 		/* NOTREACHED */
1706 
1707 	case RTM_DELETE:
1708 		if (search_rtfile(perm_fp, temp_fp, rt, SEARCH_MODE_DEL) <= 0) {
1709 			/* Route not found */
1710 			print_rtcmd_short(stderr, rt, B_FALSE, B_TRUE);
1711 			(void) fprintf(stderr, gettext(": not in file\n"));
1712 			exit(1);
1713 		}
1714 		if (fclose(temp_fp) != 0 || rename(temp_file, perm_file) != 0) {
1715 			quit(gettext("failed to update route file"), errno);
1716 			/* NOTREACHED */
1717 		}
1718 		break;
1719 
1720 	case RTM_GET:
1721 		if (search_rtfile(perm_fp, temp_fp, rt, SEARCH_MODE_PRINT) <=
1722 		    0) {
1723 			print_rtcmd_short(stdout, rt, B_FALSE, B_TRUE);
1724 			(void) printf(gettext(": not in file\n"));
1725 		}
1726 		break;
1727 
1728 	default:
1729 		quit(gettext("Internal Error"), EINVAL);
1730 		/* NOTREACHED */
1731 	}
1732 
1733 	/*
1734 	 * Closing the file unlocks it.
1735 	 */
1736 	(void) fclose(perm_fp);
1737 }
1738 
1739 int
1740 show_saved_routes(int argc)
1741 {
1742 	int perm_fd;
1743 	FILE *perm_fp;
1744 	struct flock lock;
1745 	int count = 0;
1746 
1747 	if (argc != 1) {
1748 		syntax_error(gettext("route: invalid arguments for show\n"));
1749 	}
1750 
1751 	perm_fd = open(perm_file, O_RDONLY, 0);
1752 
1753 	if (perm_fd == -1) {
1754 		if (errno == ENOENT) {
1755 			(void) printf("No persistent routes are defined\n");
1756 			return (0);
1757 		} else {
1758 			quit(gettext("failed to open route file"), errno);
1759 		}
1760 	}
1761 	lock.l_type = F_RDLCK;
1762 	lock.l_whence = SEEK_SET;
1763 	lock.l_start = 0;
1764 	lock.l_len = 0;
1765 	if (fcntl(perm_fd, F_SETLK, &lock) != 0) {
1766 		quit(gettext("failed to lock route file"),
1767 		    errno);
1768 		/* NOTREACHED */
1769 	}
1770 	if ((perm_fp = fdopen(perm_fd, "r")) == NULL) {
1771 		quit(gettext("failed to open route file"), errno);
1772 		/* NOTREACHED */
1773 	}
1774 	count += search_rtfile(perm_fp, NULL, NULL, SEARCH_MODE_PRINT);
1775 	(void) fseek(perm_fp, 0, SEEK_SET);
1776 	af = AF_INET6;
1777 	count += search_rtfile(perm_fp, NULL, NULL, SEARCH_MODE_PRINT);
1778 
1779 	if (count == 0)
1780 		(void) printf("No persistent routes are defined\n");
1781 
1782 	(void) fclose(perm_fp);
1783 	return (0);
1784 }
1785 
1786 int
1787 newroute(char **argv)
1788 {
1789 	rtcmd_irep_t *newrt;
1790 	int ret, attempts, oerrno;
1791 	char *err;
1792 	char obuf[INET6_ADDRSTRLEN];
1793 #define	hp (newrt->ri_gate_hp)
1794 
1795 	newrt = new_rtcmd_irep();
1796 	(void) args_to_rtcmd(newrt, argv, NULL);
1797 
1798 	if (newrt->ri_cmd != RTM_GET && !tflag) {
1799 		/* Don't want to read back our messages */
1800 		(void) shutdown(s, 0);
1801 	}
1802 	if (newrt->ri_addrs & RTA_IFP) {
1803 		newrt->ri_ifp.sdl.sdl_index = if_nametoindex(newrt->ri_ifp_str);
1804 		if (newrt->ri_ifp.sdl.sdl_index == 0) {
1805 			if (errno != ENXIO) {
1806 				quit("if_nametoindex", errno);
1807 			} else {
1808 				(void) fprintf(stderr,
1809 				    gettext("route: %s: no such interface\n"),
1810 				    newrt->ri_ifp_str);
1811 				exit(1);
1812 			}
1813 		}
1814 		newrt->ri_ifp.sdl.sdl_family = AF_LINK;
1815 	}
1816 	for (attempts = 1; ; attempts++) {
1817 		errno = 0;
1818 		if ((ret = rtmsg(newrt)) == 0)
1819 			break;
1820 		if (errno != ENETUNREACH && errno != ESRCH)
1821 			break;
1822 		if ((newrt->ri_addrs & RTA_GATEWAY) && hp != NULL &&
1823 		    hp->h_addr_list[attempts] != NULL) {
1824 			switch (af) {
1825 			case AF_INET:
1826 				(void) memmove(&newrt->ri_gate.sin.sin_addr,
1827 				    hp->h_addr_list[attempts], hp->h_length);
1828 				continue;
1829 			case AF_INET6:
1830 				(void) memmove(&newrt->ri_gate.sin6.sin6_addr,
1831 				    hp->h_addr_list[attempts], hp->h_length);
1832 				continue;
1833 			}
1834 		}
1835 		break;
1836 	}
1837 	oerrno = errno;
1838 
1839 	if (newrt->ri_cmd != RTM_GET) {
1840 		print_rtcmd_short(stdout, newrt, (ret == 0), B_FALSE);
1841 		if (ret == 0)
1842 			(void) printf("\n");
1843 	} else if (ret != 0) {
1844 		/*
1845 		 * Note: there is nothing additional to print for get
1846 		 * if ret == 0.
1847 		 */
1848 		if (nflag) {
1849 			switch (newrt->ri_af) {
1850 			case AF_INET:
1851 				(void) printf(" %s",
1852 				    inet_ntoa(newrt->ri_dst.sin.sin_addr));
1853 				break;
1854 			case AF_INET6:
1855 				if (inet_ntop(AF_INET6,
1856 					(void *)&newrt->ri_dst.sin6.sin6_addr,
1857 					obuf, INET6_ADDRSTRLEN) != NULL) {
1858 					(void) printf(" %s", obuf);
1859 					break;
1860 				}
1861 				/* FALLTHROUGH */
1862 			default:
1863 				(void) printf("%s", newrt->ri_dest_str);
1864 				break;
1865 			}
1866 		} else {
1867 			(void) printf("%s", newrt->ri_dest_str);
1868 		}
1869 	}
1870 
1871 	if (ret != 0) {
1872 		switch (oerrno) {
1873 		case ESRCH:
1874 			err = "not in table";
1875 			break;
1876 		case EBUSY:
1877 			err = "entry in use";
1878 			break;
1879 		case ENOBUFS:
1880 			err = "routing table overflow";
1881 			break;
1882 		case EEXIST:
1883 			err = "entry exists";
1884 			break;
1885 		case EPERM:
1886 			err = "insufficient privileges";
1887 			break;
1888 		default:
1889 			err = strerror(oerrno);
1890 			break;
1891 		}
1892 		(void) printf(": %s\n", err);
1893 	}
1894 
1895 	del_rtcmd_irep(newrt);
1896 
1897 	return (oerrno);
1898 #undef hp
1899 }
1900 
1901 
1902 /*
1903  * Convert a network number to the corresponding IP address.
1904  * If the RTA_NETMASK hasn't been specified yet set it based
1905  * on the class of address.
1906  */
1907 static void
1908 inet_makenetandmask(rtcmd_irep_t *rcip, in_addr_t net, struct sockaddr_in *sin)
1909 {
1910 	in_addr_t addr, mask;
1911 
1912 	if (net == 0) {
1913 		mask = addr = 0;
1914 	} else if (net < 128) {
1915 		addr = net << IN_CLASSA_NSHIFT;
1916 		mask = IN_CLASSA_NET;
1917 	} else if (net < 65536) {
1918 		addr = net << IN_CLASSB_NSHIFT;
1919 		mask = IN_CLASSB_NET;
1920 	} else if (net < 16777216L) {
1921 		addr = net << IN_CLASSC_NSHIFT;
1922 		mask = IN_CLASSC_NET;
1923 	} else {
1924 		addr = net;
1925 		if ((addr & IN_CLASSA_HOST) == 0)
1926 			mask =  IN_CLASSA_NET;
1927 		else if ((addr & IN_CLASSB_HOST) == 0)
1928 			mask =  IN_CLASSB_NET;
1929 		else if ((addr & IN_CLASSC_HOST) == 0)
1930 			mask =  IN_CLASSC_NET;
1931 		else {
1932 			if (IN_CLASSA(addr))
1933 				mask =  IN_CLASSA_NET;
1934 			else if (IN_CLASSB(addr))
1935 				mask =  IN_CLASSB_NET;
1936 			else if (IN_CLASSC(addr))
1937 				mask =  IN_CLASSC_NET;
1938 			else
1939 				mask = IP_HOST_MASK;
1940 			mask = inet_makesubnetmask(addr, mask);
1941 		}
1942 	}
1943 	sin->sin_addr.s_addr = htonl(addr);
1944 
1945 	if (!(rcip->ri_addrs & RTA_NETMASK)) {
1946 		rcip->ri_addrs |= RTA_NETMASK;
1947 		sin = &rcip->ri_mask.sin;
1948 		sin->sin_addr.s_addr = htonl(mask);
1949 		sin->sin_family = AF_INET;
1950 	}
1951 }
1952 
1953 static in_addr_t
1954 inet_makesubnetmask(in_addr_t addr, in_addr_t mask)
1955 {
1956 	int n;
1957 	struct ifconf ifc;
1958 	struct ifreq ifreq;
1959 	struct ifreq *ifr;
1960 	struct sockaddr_in *sin;
1961 	char *buf;
1962 	int numifs;
1963 	size_t bufsize;
1964 	int iosoc;
1965 	in_addr_t if_addr, if_mask;
1966 	in_addr_t if_subnetmask = 0;
1967 	short if_flags;
1968 
1969 	if (mask == 0)
1970 		return (0);
1971 	if ((iosoc = socket(AF_INET, SOCK_DGRAM, 0)) < 0)
1972 		quit("socket", errno);
1973 	if (ioctl(iosoc, SIOCGIFNUM, (char *)&numifs) < 0)
1974 		quit("ioctl", errno);
1975 	bufsize = numifs * sizeof (struct ifreq);
1976 	buf = malloc(bufsize);
1977 	if (buf == NULL)
1978 		quit("malloc", errno);
1979 	(void) memset(&ifc, 0, sizeof (ifc));
1980 	ifc.ifc_len = bufsize;
1981 	ifc.ifc_buf = buf;
1982 	if (ioctl(iosoc, SIOCGIFCONF, (char *)&ifc) < 0)
1983 		quit("ioctl (get interface configuration)", errno);
1984 	/* Let's check to see if this is maybe a local subnet route. */
1985 	ifr = ifc.ifc_req;
1986 	for (n = ifc.ifc_len / sizeof (struct ifreq); n > 0; n--, ifr++) {
1987 		ifreq = *ifr;
1988 		/* LINTED */
1989 		sin = (struct sockaddr_in *)&ifr->ifr_addr;
1990 		if_addr = ntohl(sin->sin_addr.s_addr);
1991 
1992 		if (ioctl(iosoc, SIOCGIFFLAGS, (char *)&ifreq) < 0)
1993 			quit("ioctl (get interface flags)", errno);
1994 		if ((ifreq.ifr_flags & IFF_UP) == 0)
1995 			continue;
1996 		if_flags = ifreq.ifr_flags;
1997 
1998 		if (ioctl(iosoc, SIOCGIFNETMASK, (char *)&ifreq) < 0)
1999 			quit("ioctl (get netmask)", errno);
2000 		/* LINTED */
2001 		sin = (struct sockaddr_in *)&ifreq.ifr_addr;
2002 		if_mask = ntohl(sin->sin_addr.s_addr);
2003 		if ((if_addr & mask) == (addr & mask)) {
2004 			/*
2005 			 * Don't trust pt-pt interfaces if there are
2006 			 * other interfaces.
2007 			 */
2008 			if (if_flags & IFF_POINTOPOINT) {
2009 				if_subnetmask = if_mask;
2010 				continue;
2011 			}
2012 			/*
2013 			 * Fine.  Just assume the same net mask as the
2014 			 * directly attached subnet interface is using.
2015 			 */
2016 			return (if_mask);
2017 		}
2018 	}
2019 	if (if_subnetmask != 0)
2020 		return (if_subnetmask);
2021 	return (mask);
2022 }
2023 
2024 /*
2025  * Interpret an argument as a network address of some kind.
2026  *
2027  * If the address family is one looked up in getaddr() using one of the
2028  * getipnodebyX() functions (currently only AF_INET6), then callers should
2029  * freehostent() the returned "struct hostent" pointer if one was passed in.
2030  *
2031  * If exit_on_error is true, this function will cause route to exit on error by
2032  * calling syntax_error().  Otherwise, it returns B_TRUE on success or B_FALSE
2033  * on failure.
2034  */
2035 static boolean_t
2036 getaddr(rtcmd_irep_t *rcip, int which, char *s, addr_type_t atype)
2037 {
2038 	su_t *su;
2039 	struct hostent **hpp;
2040 	struct hostent *hp;
2041 	int masklen;
2042 
2043 	if (which == RTA_GATEWAY) {
2044 		hpp = &(rcip->ri_gate_hp);
2045 	} else {
2046 		hpp = &hp;
2047 	}
2048 	*hpp = NULL;
2049 
2050 	rcip->ri_addrs |= which;
2051 	switch (which) {
2052 	case RTA_DST:
2053 		save_string(&rcip->ri_dest_str, s);
2054 		su = &rcip->ri_dst;
2055 		su->sa.sa_family = rcip->ri_af;
2056 		break;
2057 	case RTA_GATEWAY:
2058 		save_string(&rcip->ri_gate_str, s);
2059 		su = &rcip->ri_gate;
2060 		su->sa.sa_family = rcip->ri_af;
2061 		break;
2062 	case RTA_NETMASK:
2063 		su = &rcip->ri_mask;
2064 		su->sa.sa_family = rcip->ri_af;
2065 		break;
2066 	case RTA_IFP:
2067 		save_string(&rcip->ri_ifp_str, s);
2068 		return (B_TRUE);
2069 		/*
2070 		 * RTA_SRC has overloaded meaning. It can represent the
2071 		 * src address of incoming or outgoing packets.
2072 		 */
2073 	case RTA_IFA:
2074 		su = &rcip->ri_ifa;
2075 		su->sa.sa_family = rcip->ri_af;
2076 		break;
2077 	case RTA_SRC:
2078 		su = &rcip->ri_src;
2079 		su->sa.sa_family = rcip->ri_af;
2080 		break;
2081 	default:
2082 		/* NOTREACHED */
2083 		quit(gettext("Internal Error"), EINVAL);
2084 		/* NOTREACHED */
2085 	}
2086 	if (strcmp(s, "default") == 0) {
2087 		if (which == RTA_DST) {
2088 			return (getaddr(rcip, RTA_NETMASK, s, ADDR_TYPE_NET));
2089 		}
2090 		if (which == RTA_SRC) {
2091 			return (B_TRUE);
2092 		}
2093 		return (B_TRUE);
2094 	}
2095 	switch (rcip->ri_af) {
2096 	case AF_LINK:
2097 		link_addr(s, &su->sdl);
2098 		return (B_TRUE);
2099 	case PF_ROUTE:
2100 		sockaddr(s, &su->sa);
2101 		return (B_TRUE);
2102 	case AF_INET6:
2103 		switch (which) {
2104 		case RTA_DST:
2105 			if (!in6_getaddr(s, &su->sin6, &masklen, hpp)) {
2106 				return (B_FALSE);
2107 			}
2108 			if (masklen != NO_PREFIX) {
2109 				(void) memset(&rcip->ri_mask.sin6.sin6_addr, 0,
2110 				    sizeof (rcip->ri_mask.sin6.sin6_addr));
2111 				if (!in_prefixlentomask(masklen, IPV6_ABITS,
2112 				    (uchar_t *)&rcip->ri_mask.sin6.sin6_addr)) {
2113 					syntax_error(gettext(
2114 					    "route: bad prefix length: %d\n"),
2115 					    masklen);
2116 					return (B_FALSE);
2117 				}
2118 				rcip->ri_mask.sin6.sin6_family = rcip->ri_af;
2119 				rcip->ri_addrs |= RTA_NETMASK;
2120 			}
2121 			return (B_TRUE);
2122 		case RTA_GATEWAY:
2123 		case RTA_IFA:
2124 		case RTA_SRC:
2125 			return (in6_getaddr(s, &su->sin6, NULL, hpp));
2126 		case RTA_NETMASK:
2127 			syntax_error(
2128 			    gettext("route: -netmask not supported for IPv6: "
2129 			    "use <prefix>/<prefix-length> instead\n"));
2130 			return (B_FALSE);
2131 		default:
2132 			quit(gettext("Internal Error"), EINVAL);
2133 			/* NOTREACHED */
2134 		}
2135 	case AF_INET:
2136 		switch (which) {
2137 		case RTA_DST:
2138 			if (!in_getaddr(s, &su->sin, &masklen, which, hpp,
2139 			    atype, rcip)) {
2140 				return (B_FALSE);
2141 			}
2142 			if (masklen != NO_PREFIX) {
2143 				(void) memset(&rcip->ri_mask.sin.sin_addr, 0,
2144 				    sizeof (rcip->ri_mask.sin.sin_addr));
2145 				if (!in_prefixlentomask(masklen, IP_ABITS,
2146 				    (uchar_t *)&rcip->ri_mask.sin.sin_addr)) {
2147 					syntax_error(gettext(
2148 					    "route: bad prefix length: %d\n"),
2149 					    masklen);
2150 					return (B_FALSE);
2151 				}
2152 				rcip->ri_mask.sin.sin_family = rcip->ri_af;
2153 				rcip->ri_addrs |= RTA_NETMASK;
2154 			}
2155 			return (B_TRUE);
2156 		case RTA_GATEWAY:
2157 		case RTA_IFA:
2158 		case RTA_NETMASK:
2159 		case RTA_SRC:
2160 			return (in_getaddr(s, &su->sin, NULL, which, hpp, atype,
2161 			    rcip));
2162 		default:
2163 			quit(gettext("Internal Error"), EINVAL);
2164 			/* NOTREACHED */
2165 		}
2166 	default:
2167 		quit(gettext("Internal Error"), EINVAL);
2168 		/* NOTREACHED */
2169 	}
2170 	return (B_TRUE);
2171 }
2172 
2173 /*
2174  * Interpret an argument as an IPv4 network address of some kind,
2175  * returning B_TRUE on success or B_FALSE on failure.
2176  * This function will cause an exit() on failure if exit_on_failure is set.
2177  *
2178  * Note that this tries host interpretation before network interpretation,
2179  * except when -net has been given and the destination address is being parsed.
2180  *
2181  * If the plenp argument is non-NULL, allow <addr>/<n> syntax and
2182  * pass out <n> in *plenp.
2183  * If <n> doesn't parse return BAD_ADDR as *plenp.
2184  * If no /<n> is present return NO_PREFIX as *plenp.
2185  */
2186 static boolean_t
2187 in_getaddr(char *s, struct sockaddr_in *sin, int *plenp, int which,
2188     struct hostent **hpp, addr_type_t atype, rtcmd_irep_t *rcip)
2189 {
2190 	struct hostent *hp;
2191 	struct netent *np;
2192 	in_addr_t val;
2193 	char str[BUFSIZ];
2194 
2195 	(void) strlcpy(str, s, sizeof (str));
2196 
2197 	/*
2198 	 * If plenp is non-NULL, /<n> syntax for netmask is allowed.
2199 	 */
2200 	if (plenp != NULL) {
2201 		char *cp;
2202 
2203 		*plenp = in_getprefixlen(str, IP_ABITS);
2204 		if (*plenp == BAD_ADDR)
2205 			return (B_FALSE);
2206 		cp = strchr(str, '/');
2207 		if (cp != NULL)
2208 			*cp = '\0';
2209 	} else if (strchr(str, '/') != NULL) {
2210 		syntax_error(gettext("route: %s: unexpected '/'\n"), str);
2211 		return (B_FALSE);
2212 	}
2213 
2214 	(void) memset(sin, 0, sizeof (*sin));
2215 	sin->sin_family = AF_INET;
2216 
2217 	/*
2218 	 * Handle 255.255.255.255 as a special case first.
2219 	 */
2220 	if (strcmp(str, "255.255.255.255") == 0) {
2221 		sin->sin_addr.s_addr = INADDR_BROADCAST;
2222 		return (B_TRUE);
2223 	}
2224 
2225 	val = inet_addr(str);
2226 	if (val != (in_addr_t)-1) {
2227 		/* Numeric address */
2228 		sin->sin_addr.s_addr = val;
2229 		if (which == RTA_DST) {
2230 			if (atype == ADDR_TYPE_NET ||
2231 			    (atype == ADDR_TYPE_ANY &&
2232 			    inet_lnaof(sin->sin_addr) == INADDR_ANY)) {
2233 				/* This looks like a network address. */
2234 				inet_makenetandmask(rcip, ntohl(val),
2235 					    sin);
2236 			}
2237 		}
2238 		return (B_TRUE);
2239 	}
2240 	/* Host or net name */
2241 	if (which != RTA_DST || atype != ADDR_TYPE_NET) {
2242 		/* A host name is allowed. */
2243 		if ((hp = gethostbyname(str)) != NULL) {
2244 			*hpp = hp;
2245 			(void) memmove(&sin->sin_addr, hp->h_addr,
2246 			    hp->h_length);
2247 			return (B_TRUE);
2248 		}
2249 	}
2250 	if (atype != ADDR_TYPE_HOST) {
2251 		/* A network name is allowed */
2252 		if ((np = getnetbyname(str)) != NULL &&
2253 		    (val = np->n_net) != 0) {
2254 			if (which == RTA_DST) {
2255 				inet_makenetandmask(rcip, val, sin);
2256 			}
2257 			return (B_TRUE);
2258 		}
2259 	}
2260 	syntax_error(gettext("%s: bad value\n"), s);
2261 	return (B_FALSE);
2262 }
2263 
2264 /*
2265  * Interpret an argument as an IPv6 network address of some kind,
2266  * returning B_TRUE on success or B_FALSE on failure.
2267  * This function will cause an exit() on failure if exit_on_failure is set.
2268  *
2269  * If the last argument is non-NULL allow a <addr>/<n> syntax and
2270  * pass out <n> in *plenp.
2271  * If <n> doesn't parse return BAD_ADDR as *plenp.
2272  * If no /<n> is present return NO_PREFIX as *plenp.
2273  */
2274 static boolean_t
2275 in6_getaddr(char *s, struct sockaddr_in6 *sin6, int *plenp,
2276     struct hostent **hpp)
2277 {
2278 	struct hostent *hp;
2279 	char str[BUFSIZ];
2280 	int error_num;
2281 
2282 	(void) strlcpy(str, s, sizeof (str));
2283 
2284 	/*
2285 	 * If plenp is non-NULL, /<n> syntax for netmask is allowed.
2286 	 */
2287 	if (plenp != NULL) {
2288 		char *cp;
2289 
2290 		*plenp = in_getprefixlen(str, IPV6_ABITS);
2291 		if (*plenp == BAD_ADDR)
2292 			return (B_FALSE);
2293 		cp = strchr(str, '/');
2294 		if (cp != NULL)
2295 			*cp = '\0';
2296 	} else if (strchr(str, '/') != NULL) {
2297 		syntax_error(gettext("route: %s: unexpected '/'\n"), str);
2298 		return (B_FALSE);
2299 	}
2300 
2301 	(void) memset(sin6, 0, sizeof (struct sockaddr_in6));
2302 	sin6->sin6_family = AF_INET6;
2303 
2304 	hp = getipnodebyname(str, AF_INET6, 0, &error_num);
2305 	if (hp != NULL) {
2306 		*hpp = hp;
2307 		(void) memmove(&sin6->sin6_addr, hp->h_addr, hp->h_length);
2308 		return (B_TRUE);
2309 	}
2310 	if (error_num == TRY_AGAIN) {
2311 		/*
2312 		 * This isn't a problem if we aren't going to use the address
2313 		 * right away.
2314 		 */
2315 		if (!exit_on_error) {
2316 			return (B_TRUE);
2317 		}
2318 		syntax_error(gettext("route: %s: bad address (try "
2319 		    "again later)\n"), s);
2320 		return (B_FALSE);
2321 	}
2322 	syntax_error(gettext("route: %s: bad address\n"), s);
2323 	return (B_FALSE);
2324 }
2325 
2326 /*
2327  * Parse <addr>/<n> syntax and return the integer n.
2328  * If <addr> is missing or <n> is not a valid integer, this function calls
2329  * syntax_error() and returns BAD_ADDR.
2330  * if n is not between 0 and max_plen inclusive, this functions calls
2331  * syntax_error() and returns BAD_ADDR.
2332  * If /<n> is not present, this function returns NO_PREFIX.
2333  * The string addr is not modified.
2334  */
2335 int
2336 in_getprefixlen(char *addr, int max_plen)
2337 {
2338 	int prefixlen;
2339 	char *str, *end;
2340 
2341 	str = strchr(addr, '/');
2342 	if (str == addr) {
2343 		syntax_error(gettext("route: %s: unexpected '/'\n"), addr);
2344 		return (BAD_ADDR);
2345 	}
2346 	if (str == NULL)
2347 		return (NO_PREFIX);
2348 	str++;
2349 
2350 	errno = 0;
2351 	prefixlen = strtoul(str, &end, 10);
2352 	if (errno != 0 || str == end) {
2353 		syntax_error(gettext("route: bad prefix length %s\n"), str);
2354 		return (BAD_ADDR);
2355 	}
2356 	if (prefixlen > max_plen) {
2357 		syntax_error(gettext("route: prefix length %s out of range\n"),
2358 		    str);
2359 		return (BAD_ADDR);
2360 	}
2361 	return (prefixlen);
2362 }
2363 
2364 /*
2365  * Convert a prefix length to a mask.
2366  * Returns B_TRUE if ok. B_FALSE otherwise.
2367  * Assumes the mask array is zeroed by the caller.
2368  */
2369 boolean_t
2370 in_prefixlentomask(int prefixlen, int maxlen, uchar_t *mask)
2371 {
2372 	if (prefixlen < 0 || prefixlen > maxlen)
2373 		return (B_FALSE);
2374 
2375 	while (prefixlen > 0) {
2376 		if (prefixlen >= 8) {
2377 			*mask++ = 0xFF;
2378 			prefixlen -= 8;
2379 			continue;
2380 		}
2381 		*mask |= 1 << (8 - prefixlen);
2382 		prefixlen--;
2383 	}
2384 	return (B_TRUE);
2385 }
2386 
2387 void
2388 rtmonitor(int argc, char *argv[])
2389 {
2390 	int n;
2391 	intmax_t msg[2048 / sizeof (intmax_t)];
2392 
2393 	if (tflag)
2394 		exit(0);
2395 	verbose = B_TRUE;
2396 	if (argc > 1) {
2397 		argv++;
2398 		if (argc == 2 && **argv == '-') {
2399 			switch (keyword(*argv + 1)) {
2400 			case K_INET:
2401 				af = AF_INET;
2402 				break;
2403 			case K_LINK:
2404 				af = AF_LINK;
2405 				break;
2406 			case K_INET6:
2407 				af = AF_INET6;
2408 				break;
2409 			default:
2410 				usage(*argv);
2411 				/* NOTREACHED */
2412 			}
2413 		} else {
2414 			usage(*argv);
2415 		}
2416 		(void) close(s);
2417 		s = socket(PF_ROUTE, SOCK_RAW, af);
2418 		if (s < 0)
2419 			quit("socket", errno);
2420 	}
2421 	for (;;) {
2422 		n = read(s, msg, sizeof (msg));
2423 		if (n <= 0)
2424 			quit("read", errno);
2425 		(void) printf("got message of size %d\n", n);
2426 		print_rtmsg((struct rt_msghdr *)msg, n);
2427 	}
2428 }
2429 
2430 int
2431 rtmsg(rtcmd_irep_t *newrt)
2432 {
2433 	static int seq;
2434 	int rlen;
2435 	char *cp = m_rtmsg.m_space;
2436 	int l;
2437 
2438 	errno = 0;
2439 	(void) memset(&m_rtmsg, 0, sizeof (m_rtmsg));
2440 
2441 	if (newrt->ri_cmd == RTM_GET) {
2442 		newrt->ri_ifp.sa.sa_family = AF_LINK;
2443 		newrt->ri_addrs |= RTA_IFP;
2444 	}
2445 
2446 #define	rtm m_rtmsg.m_rtm
2447 	rtm.rtm_type = newrt->ri_cmd;
2448 	rtm.rtm_flags = newrt->ri_flags;
2449 	rtm.rtm_version = RTM_VERSION;
2450 	rtm.rtm_seq = ++seq;
2451 	rtm.rtm_addrs = newrt->ri_addrs;
2452 	rtm.rtm_rmx = newrt->ri_metrics;
2453 	rtm.rtm_inits = newrt->ri_inits;
2454 
2455 #define	NEXTADDR(w, u) \
2456 	if (newrt->ri_addrs & (w)) { \
2457 		l = ROUNDUP_LONG(salen(&u.sa)); \
2458 		(void) memmove(cp, &(u), l); \
2459 		cp += l; \
2460 		if (verbose) \
2461 			sodump(&(u), #u); \
2462 	}
2463 	NEXTADDR(RTA_DST, newrt->ri_dst);
2464 	NEXTADDR(RTA_GATEWAY, newrt->ri_gate);
2465 	NEXTADDR(RTA_NETMASK, newrt->ri_mask);
2466 	NEXTADDR(RTA_IFP, newrt->ri_ifp);
2467 	NEXTADDR(RTA_IFA, newrt->ri_ifa);
2468 	/*
2469 	 * RTA_SRC has overloaded meaning. It can represent the
2470 	 * src address of incoming or outgoing packets.
2471 	 */
2472 	NEXTADDR(RTA_SRC, newrt->ri_src);
2473 #undef	NEXTADDR
2474 
2475 	if (newrt->ri_rtsa_cnt > 0) {
2476 		/* LINTED: aligned */
2477 		rtm_ext_t *rtm_ext = (rtm_ext_t *)cp;
2478 		tsol_rtsecattr_t *rtsecattr;
2479 
2480 		rtm_ext->rtmex_type = RTMEX_GATEWAY_SECATTR;
2481 		rtm_ext->rtmex_len = TSOL_RTSECATTR_SIZE(1);
2482 
2483 		rtsecattr = (tsol_rtsecattr_t *)(rtm_ext + 1);
2484 		rtsecattr->rtsa_cnt = 1;
2485 
2486 		bcopy(&newrt->ri_rtsa, rtsecattr->rtsa_attr,
2487 		    sizeof (newrt->ri_rtsa));
2488 		cp = (char *)(rtsecattr->rtsa_attr + 1);
2489 	}
2490 
2491 	rtm.rtm_msglen = l = cp - (char *)&m_rtmsg;
2492 
2493 	if (verbose)
2494 		print_rtmsg(&rtm, l);
2495 	if (debugonly)
2496 		return (0);
2497 	if ((rlen = write(s, (char *)&m_rtmsg, l)) < 0) {
2498 		switch (errno) {
2499 		case ESRCH:
2500 		case EBUSY:
2501 		case ENOBUFS:
2502 		case EEXIST:
2503 		case ENETUNREACH:
2504 		case EHOSTUNREACH:
2505 		case EPERM:
2506 			break;
2507 		default:
2508 			perror(gettext("writing to routing socket"));
2509 			break;
2510 		}
2511 		return (-1);
2512 	} else if (rlen < (int)rtm.rtm_msglen) {
2513 		(void) fprintf(stderr,
2514 		    gettext("route: write to routing socket got only %d for "
2515 		    "len\n"), rlen);
2516 		return (-1);
2517 	}
2518 	if (newrt->ri_cmd == RTM_GET) {
2519 		do {
2520 			l = read(s, (char *)&m_rtmsg, sizeof (m_rtmsg));
2521 		} while (l > 0 && (rtm.rtm_seq != seq || rtm.rtm_pid != pid));
2522 		if (l < 0) {
2523 			(void) fprintf(stderr,
2524 			    gettext("route: read from routing socket: %s\n"),
2525 			    strerror(errno));
2526 		} else {
2527 			print_getmsg(newrt, &rtm, l);
2528 		}
2529 	}
2530 #undef rtm
2531 	return (0);
2532 }
2533 
2534 static char *msgtypes[] = {
2535 	"",
2536 	"RTM_ADD: Add Route",
2537 	"RTM_DELETE: Delete Route",
2538 	"RTM_CHANGE: Change Metrics or flags",
2539 	"RTM_GET: Report Metrics",
2540 	"RTM_LOSING: Kernel Suspects Partitioning",
2541 	"RTM_REDIRECT: Told to use different route",
2542 	"RTM_MISS: Lookup failed on this address",
2543 	"RTM_LOCK: fix specified metrics",
2544 	"RTM_OLDADD: caused by SIOCADDRT",
2545 	"RTM_OLDDEL: caused by SIOCDELRT",
2546 	"RTM_RESOLVE: Route created by cloning",
2547 	"RTM_NEWADDR: address being added to iface",
2548 	"RTM_DELADDR: address being removed from iface",
2549 	"RTM_IFINFO: iface status change",
2550 	0,
2551 };
2552 
2553 #define	NMSGTYPES (sizeof (msgtypes) / sizeof (msgtypes[0]))
2554 
2555 static char metricnames[] =
2556 "\011pksent\010rttvar\7rtt\6ssthresh\5sendpipe\4recvpipe\3expire\2hopcount"
2557 	"\1mtu";
2558 static char routeflags[] =
2559 "\1UP\2GATEWAY\3HOST\4REJECT\5DYNAMIC\6MODIFIED\7DONE\010MASK_PRESENT"
2560 	"\011CLONING\012XRESOLVE\013LLINFO\014STATIC\015BLACKHOLE"
2561 	"\016PRIVATE\017PROTO2\020PROTO1\021MULTIRT\022SETSRC";
2562 static char ifnetflags[] =
2563 "\1UP\2BROADCAST\3DEBUG\4LOOPBACK\5PTP\6NOTRAILERS\7RUNNING\010NOARP"
2564 	"\011PPROMISC\012ALLMULTI\013INTELLIGENT\014MULTICAST"
2565 	"\015MULTI_BCAST\016UNNUMBERED\017DHCP\020PRIVATE"
2566 	"\021NOXMIT\022NOLOCAL\023DEPRECATED\024ADDRCONF"
2567 	"\025ROUTER\026NONUD\027ANYCAST\030NORTEXCH\031IPv4\032IPv6"
2568 	"\033MIP\034NOFAILOVER\035FAILED\036STANDBY\037INACTIVE\040OFFLINE"
2569 	"\041XRESOLV\042COS\043PREFERRED\044TEMPORARY";
2570 static char addrnames[] =
2571 "\1DST\2GATEWAY\3NETMASK\4GENMASK\5IFP\6IFA\7AUTHOR\010BRD\011SRC";
2572 
2573 void
2574 print_rtmsg(struct rt_msghdr *rtm, int msglen)
2575 {
2576 	struct if_msghdr *ifm;
2577 	struct ifa_msghdr *ifam;
2578 
2579 	if (!verbose)
2580 		return;
2581 	if (rtm->rtm_version != RTM_VERSION) {
2582 		(void) printf("routing message version %d not understood\n",
2583 		    rtm->rtm_version);
2584 		return;
2585 	}
2586 	if (rtm->rtm_msglen != msglen) {
2587 		(void) printf("message length mismatch, in packet %d, "
2588 		    "returned %d\n",
2589 		    rtm->rtm_msglen, msglen);
2590 		if (msglen > rtm->rtm_msglen)
2591 			msglen = rtm->rtm_msglen;
2592 	}
2593 	/*
2594 	 * Since rtm->rtm_type is unsigned, we'll just check the case of zero
2595 	 * and the upper-bound of (NMSGTYPES - 1).
2596 	 */
2597 	if (rtm->rtm_type == 0 || rtm->rtm_type >= (NMSGTYPES - 1)) {
2598 		(void) printf("routing message type %d not understood\n",
2599 		    rtm->rtm_type);
2600 		return;
2601 	}
2602 	(void) printf("%s: len %d, ", msgtypes[rtm->rtm_type], msglen);
2603 	switch (rtm->rtm_type) {
2604 	case RTM_IFINFO:
2605 		ifm = (struct if_msghdr *)rtm;
2606 		(void) printf("if# %d, flags:", ifm->ifm_index);
2607 		bprintf(stdout, ifm->ifm_flags, ifnetflags);
2608 		pmsg_addrs((const char *)(ifm + 1), msglen - sizeof (*ifm),
2609 		    ifm->ifm_addrs);
2610 		break;
2611 	case RTM_NEWADDR:
2612 	case RTM_DELADDR:
2613 		ifam = (struct ifa_msghdr *)rtm;
2614 		(void) printf("metric %d, flags:", ifam->ifam_metric);
2615 		bprintf(stdout, ifam->ifam_flags, routeflags);
2616 		pmsg_addrs((const char *)(ifam + 1), msglen - sizeof (*ifam),
2617 		    ifam->ifam_addrs);
2618 		break;
2619 	default:
2620 		(void) printf("pid: %ld, seq %d, errno %d, flags:",
2621 			rtm->rtm_pid, rtm->rtm_seq, rtm->rtm_errno);
2622 		bprintf(stdout, rtm->rtm_flags, routeflags);
2623 		pmsg_common(rtm, msglen);
2624 		break;
2625 	}
2626 }
2627 
2628 void
2629 print_getmsg(rtcmd_irep_t *req_rt, struct rt_msghdr *rtm, int msglen)
2630 {
2631 	struct sockaddr *dst = NULL, *gate = NULL, *mask = NULL, *src = NULL;
2632 	struct sockaddr_dl *ifp = NULL;
2633 	struct sockaddr *sa;
2634 	char *cp;
2635 	int i;
2636 
2637 	(void) printf("   route to: %s\n", routename(&req_rt->ri_dst.sa));
2638 	if (rtm->rtm_version != RTM_VERSION) {
2639 		(void) fprintf(stderr,
2640 		    gettext("routing message version %d not understood\n"),
2641 		    rtm->rtm_version);
2642 		return;
2643 	}
2644 	if (rtm->rtm_msglen > (ushort_t)msglen) {
2645 		(void) fprintf(stderr,
2646 		    gettext("message length mismatch, in packet %d, "
2647 			"returned %d\n"), rtm->rtm_msglen, msglen);
2648 	}
2649 	if (rtm->rtm_errno)  {
2650 		(void) fprintf(stderr, "RTM_GET: %s (errno %d)\n",
2651 		    strerror(rtm->rtm_errno), rtm->rtm_errno);
2652 		return;
2653 	}
2654 	cp = ((char *)(rtm + 1));
2655 	if (rtm->rtm_addrs != 0) {
2656 		for (i = 1; i != 0; i <<= 1) {
2657 			if (i & rtm->rtm_addrs) {
2658 				/* LINTED */
2659 				sa = (struct sockaddr *)cp;
2660 				switch (i) {
2661 				case RTA_DST:
2662 					dst = sa;
2663 					break;
2664 				case RTA_GATEWAY:
2665 					gate = sa;
2666 					break;
2667 				case RTA_NETMASK:
2668 					mask = sa;
2669 					break;
2670 				case RTA_IFP:
2671 					if (sa->sa_family == AF_LINK &&
2672 					    ((struct sockaddr_dl *)sa)->
2673 						sdl_nlen != 0)
2674 						ifp = (struct sockaddr_dl *)sa;
2675 					break;
2676 				case RTA_SRC:
2677 					src = sa;
2678 					break;
2679 				}
2680 				ADVANCE(cp, sa);
2681 			}
2682 		}
2683 	}
2684 	if (dst != NULL && mask != NULL)
2685 		mask->sa_family = dst->sa_family;	/* XXX */
2686 	if (dst != NULL)
2687 		(void) printf("destination: %s\n", routename(dst));
2688 	if (mask != NULL) {
2689 		boolean_t savenflag = nflag;
2690 
2691 		nflag = B_TRUE;
2692 		(void) printf("       mask: %s\n", routename(mask));
2693 		nflag = savenflag;
2694 	}
2695 	if (gate != NULL && rtm->rtm_flags & RTF_GATEWAY)
2696 		(void) printf("    gateway: %s\n", routename(gate));
2697 	if (src != NULL && rtm->rtm_flags & RTF_SETSRC)
2698 		(void) printf("     setsrc: %s\n", routename(src));
2699 	if (ifp != NULL) {
2700 		if (verbose) {
2701 			int i;
2702 
2703 			(void) printf("  interface: %.*s index %d address ",
2704 			    ifp->sdl_nlen, ifp->sdl_data, ifp->sdl_index);
2705 			for (i = ifp->sdl_nlen;
2706 			    i < ifp->sdl_nlen + ifp->sdl_alen;
2707 			    i++) {
2708 				(void) printf("%02x ",
2709 				    ifp->sdl_data[i] & 0xFF);
2710 			}
2711 			(void) printf("\n");
2712 		} else {
2713 			(void) printf("  interface: %.*s\n",
2714 			    ifp->sdl_nlen, ifp->sdl_data);
2715 		}
2716 	}
2717 	(void) printf("      flags: ");
2718 	bprintf(stdout, rtm->rtm_flags, routeflags);
2719 
2720 #define	lock(f)	((rtm->rtm_rmx.rmx_locks & RTV_ ## f) ? 'L' : ' ')
2721 #define	msec(u)	(((u) + 500) / 1000)		/* usec to msec */
2722 
2723 	(void) printf("\n%s\n", " recvpipe  sendpipe  ssthresh    rtt,ms "
2724 	    "rttvar,ms  hopcount      mtu     expire");
2725 	(void) printf("%8d%c ", rtm->rtm_rmx.rmx_recvpipe, lock(RPIPE));
2726 	(void) printf("%8d%c ", rtm->rtm_rmx.rmx_sendpipe, lock(SPIPE));
2727 	(void) printf("%8d%c ", rtm->rtm_rmx.rmx_ssthresh, lock(SSTHRESH));
2728 	(void) printf("%8d%c ", msec(rtm->rtm_rmx.rmx_rtt), lock(RTT));
2729 	(void) printf("%8d%c ", msec(rtm->rtm_rmx.rmx_rttvar), lock(RTTVAR));
2730 	(void) printf("%8d%c ", rtm->rtm_rmx.rmx_hopcount, lock(HOPCOUNT));
2731 	(void) printf("%8d%c ", rtm->rtm_rmx.rmx_mtu, lock(MTU));
2732 	if (rtm->rtm_rmx.rmx_expire)
2733 		rtm->rtm_rmx.rmx_expire -= time(0);
2734 	(void) printf("%8d%c", rtm->rtm_rmx.rmx_expire, lock(EXPIRE));
2735 #undef lock
2736 #undef msec
2737 #define	RTA_IGN	\
2738 	(RTA_DST|RTA_GATEWAY|RTA_NETMASK|RTA_IFP|RTA_IFA|RTA_BRD|RTA_SRC)
2739 	if (verbose) {
2740 		pmsg_common(rtm, msglen);
2741 	} else {
2742 		const char *sptr, *endptr;
2743 		const struct sockaddr *sa;
2744 		uint_t addrs;
2745 
2746 		/* Not verbose; just print out the exceptional cases */
2747 		if (rtm->rtm_addrs &~ RTA_IGN) {
2748 			(void) printf("\nsockaddrs: ");
2749 			bprintf(stdout, rtm->rtm_addrs, addrnames);
2750 		}
2751 		sptr = (const char *)(rtm + 1);
2752 		endptr = (const char *)rtm + msglen;
2753 		addrs = rtm->rtm_addrs;
2754 		while (addrs != 0 && sptr + sizeof (*sa) <= endptr) {
2755 			addrs &= addrs - 1;
2756 			/* LINTED */
2757 			sa = (const struct sockaddr *)sptr;
2758 			ADVANCE(sptr, sa);
2759 		}
2760 		if (addrs == 0)
2761 			pmsg_secattr(sptr, endptr - sptr, "    secattr: ");
2762 		(void) putchar('\n');
2763 	}
2764 #undef	RTA_IGN
2765 }
2766 
2767 static void
2768 pmsg_common(const struct rt_msghdr *rtm, size_t msglen)
2769 {
2770 	(void) printf("\nlocks: ");
2771 	bprintf(stdout, (int)rtm->rtm_rmx.rmx_locks, metricnames);
2772 	(void) printf(" inits: ");
2773 	bprintf(stdout, (int)rtm->rtm_inits, metricnames);
2774 	pmsg_addrs((const char *)(rtm + 1), msglen - sizeof (*rtm),
2775 	    rtm->rtm_addrs);
2776 }
2777 
2778 static void
2779 pmsg_addrs(const char *cp, size_t msglen, uint_t addrs)
2780 {
2781 	const struct sockaddr *sa;
2782 	const char *maxptr;
2783 	int i;
2784 
2785 	if (addrs != 0) {
2786 		(void) printf("\nsockaddrs: ");
2787 		bprintf(stdout, addrs, addrnames);
2788 		(void) putchar('\n');
2789 		maxptr = cp + msglen;
2790 		for (i = 1; i != 0 && cp + sizeof (*sa) <= maxptr; i <<= 1) {
2791 			if (i & addrs) {
2792 				/* LINTED */
2793 				sa = (const struct sockaddr *)cp;
2794 				(void) printf(" %s", routename(sa));
2795 				ADVANCE(cp, sa);
2796 			}
2797 		}
2798 		if (i != 0)
2799 			msglen = 0;
2800 		else
2801 			msglen = maxptr - cp;
2802 	}
2803 	pmsg_secattr(cp, msglen, "secattr: ");
2804 	(void) putchar('\n');
2805 	(void) fflush(stdout);
2806 }
2807 
2808 void
2809 bprintf(FILE *fp, int b, char *s)
2810 {
2811 	int i;
2812 	boolean_t gotsome = B_FALSE;
2813 
2814 	if (b == 0)
2815 		return;
2816 	while ((i = *s++) != 0) {
2817 		if (b & (1 << (i - 1))) {
2818 			if (!gotsome)
2819 				i = '<';
2820 			else
2821 				i = ',';
2822 			(void) putc(i, fp);
2823 			gotsome = B_TRUE;
2824 			for (; (i = *s) > ' '; s++)
2825 				(void) putc(i, fp);
2826 		} else {
2827 			while (*s > ' ')
2828 				s++;
2829 		}
2830 	}
2831 	if (gotsome)
2832 		(void) putc('>', fp);
2833 }
2834 
2835 int
2836 keyword(const char *cp)
2837 {
2838 	struct keytab *kt = keywords;
2839 
2840 	while (kt->kt_cp && strcmp(kt->kt_cp, cp))
2841 		kt++;
2842 	return (kt->kt_i);
2843 }
2844 
2845 void
2846 sodump(su_t *su, char *which)
2847 {
2848 	static char obuf[INET6_ADDRSTRLEN];
2849 
2850 	switch (su->sa.sa_family) {
2851 	case AF_LINK:
2852 		(void) printf("%s: link %s; ",
2853 		    which, link_ntoa(&su->sdl));
2854 		break;
2855 	case AF_INET:
2856 		(void) printf("%s: inet %s; ",
2857 		    which, inet_ntoa(su->sin.sin_addr));
2858 		break;
2859 	case AF_INET6:
2860 		if (inet_ntop(AF_INET6, (void *)&su->sin6.sin6_addr, obuf,
2861 		    INET6_ADDRSTRLEN) != NULL) {
2862 			(void) printf("%s: inet6 %s; ", which, obuf);
2863 			break;
2864 		}
2865 		/* FALLTHROUGH */
2866 	default:
2867 		quit(gettext("Internal Error"), EINVAL);
2868 		/* NOTREACHED */
2869 	}
2870 	(void) fflush(stdout);
2871 }
2872 
2873 /* States */
2874 #define	VIRGIN	0
2875 #define	GOTONE	1
2876 #define	GOTTWO	2
2877 #define	RESET	3
2878 /* Inputs */
2879 #define	DIGIT	(4*0)
2880 #define	END	(4*1)
2881 #define	DELIM	(4*2)
2882 #define	LETTER	(4*3)
2883 
2884 void
2885 sockaddr(char *addr, struct sockaddr *sa)
2886 {
2887 	char *cp = (char *)sa;
2888 	int size = salen(sa);
2889 	char *cplim = cp + size;
2890 	int byte = 0, state = VIRGIN, new;
2891 
2892 	(void) memset(cp, 0, size);
2893 	cp++;
2894 	do {
2895 		if ((*addr >= '0') && (*addr <= '9')) {
2896 			new = *addr - '0';
2897 		} else if ((*addr >= 'a') && (*addr <= 'f')) {
2898 			new = *addr - 'a' + 10;
2899 		} else if ((*addr >= 'A') && (*addr <= 'F')) {
2900 			new = *addr - 'A' + 10;
2901 		} else if (*addr == 0) {
2902 			state |= END;
2903 		} else {
2904 			state |= DELIM;
2905 		}
2906 		addr++;
2907 		switch (state /* | INPUT */) {
2908 		case GOTTWO | DIGIT:
2909 			*cp++ = byte;
2910 			/* FALLTHROUGH */
2911 		case VIRGIN | DIGIT:
2912 			state = GOTONE; byte = new; continue;
2913 		case GOTONE | DIGIT:
2914 			state = GOTTWO; byte = new + (byte << 4); continue;
2915 		default: /* | DELIM */
2916 			state = VIRGIN; *cp++ = byte; byte = 0; continue;
2917 		case GOTONE | END:
2918 		case GOTTWO | END:
2919 			*cp++ = byte;
2920 			/* FALLTHROUGH */
2921 		case VIRGIN | END:
2922 			break;
2923 		}
2924 		break;
2925 	} while (cp < cplim);
2926 }
2927 
2928 int
2929 salen(const struct sockaddr *sa)
2930 {
2931 	switch (sa->sa_family) {
2932 	case AF_INET:
2933 		return (sizeof (struct sockaddr_in));
2934 	case AF_LINK:
2935 		return (sizeof (struct sockaddr_dl));
2936 	case AF_INET6:
2937 		return (sizeof (struct sockaddr_in6));
2938 	default:
2939 		return (sizeof (struct sockaddr));
2940 	}
2941 }
2942 
2943 void
2944 link_addr(const char *addr, struct sockaddr_dl *sdl)
2945 {
2946 	char *cp = sdl->sdl_data;
2947 	char *cplim = sizeof (struct sockaddr_dl) + (char *)sdl;
2948 	int byte = 0, state = VIRGIN, new;
2949 
2950 	(void) memset(sdl, 0, sizeof (struct sockaddr_dl));
2951 	sdl->sdl_family = AF_LINK;
2952 	do {
2953 		state &= ~LETTER;
2954 		if ((*addr >= '0') && (*addr <= '9')) {
2955 			new = *addr - '0';
2956 		} else if ((*addr >= 'a') && (*addr <= 'f')) {
2957 			new = *addr - 'a' + 10;
2958 		} else if ((*addr >= 'A') && (*addr <= 'F')) {
2959 			new = *addr - 'A' + 10;
2960 		} else if (*addr == 0) {
2961 			state |= END;
2962 		} else if (state == VIRGIN &&
2963 		    (((*addr >= 'A') && (*addr <= 'Z')) ||
2964 		    ((*addr >= 'a') && (*addr <= 'z')))) {
2965 			state |= LETTER;
2966 		} else {
2967 			state |= DELIM;
2968 		}
2969 		addr++;
2970 		switch (state /* | INPUT */) {
2971 		case VIRGIN | DIGIT:
2972 		case VIRGIN | LETTER:
2973 			*cp++ = addr[-1];
2974 			continue;
2975 		case VIRGIN | DELIM:
2976 			state = RESET;
2977 			sdl->sdl_nlen = cp - sdl->sdl_data;
2978 			continue;
2979 		case GOTTWO | DIGIT:
2980 			*cp++ = byte;
2981 			/* FALLTHROUGH */
2982 		case RESET | DIGIT:
2983 			state = GOTONE;
2984 			byte = new;
2985 			continue;
2986 		case GOTONE | DIGIT:
2987 			state = GOTTWO;
2988 			byte = new + (byte << 4);
2989 			continue;
2990 		default: /* | DELIM */
2991 			state = RESET;
2992 			*cp++ = byte;
2993 			byte = 0;
2994 			continue;
2995 		case GOTONE | END:
2996 		case GOTTWO | END:
2997 			*cp++ = byte;
2998 			/* FALLTHROUGH */
2999 		case RESET | END:
3000 			break;
3001 		}
3002 		break;
3003 	} while (cp < cplim);
3004 	sdl->sdl_alen = cp - LLADDR(sdl);
3005 }
3006 
3007 static char hexlist[] = "0123456789abcdef";
3008 
3009 char *
3010 link_ntoa(const struct sockaddr_dl *sdl)
3011 {
3012 	static char obuf[64];
3013 	char *out = obuf;
3014 	int i;
3015 	uchar_t *in = (uchar_t *)LLADDR(sdl);
3016 	uchar_t *inlim = in + sdl->sdl_alen;
3017 	boolean_t firsttime = B_TRUE;
3018 
3019 	if (sdl->sdl_nlen) {
3020 		(void) memcpy(obuf, sdl->sdl_data, sdl->sdl_nlen);
3021 		out += sdl->sdl_nlen;
3022 		if (sdl->sdl_alen)
3023 			*out++ = ':';
3024 	}
3025 	while (in < inlim) {
3026 		if (firsttime)
3027 			firsttime = B_FALSE;
3028 		else
3029 			*out++ = '.';
3030 		i = *in++;
3031 		if (i > 0xf) {
3032 			out[1] = hexlist[i & 0xf];
3033 			i >>= 4;
3034 			out[0] = hexlist[i];
3035 			out += 2;
3036 		} else {
3037 			*out++ = hexlist[i];
3038 		}
3039 	}
3040 	*out = 0;
3041 	return (obuf);
3042 }
3043 
3044 static mib_item_t *
3045 mibget(int sd)
3046 {
3047 	intmax_t		buf[512 / sizeof (intmax_t)];
3048 	int			flags;
3049 	int			i, j, getcode;
3050 	struct strbuf		ctlbuf, databuf;
3051 	struct T_optmgmt_req	*tor = (struct T_optmgmt_req *)buf;
3052 	struct T_optmgmt_ack	*toa = (struct T_optmgmt_ack *)buf;
3053 	struct T_error_ack	*tea = (struct T_error_ack *)buf;
3054 	struct opthdr		*req;
3055 	mib_item_t		*first_item = NULL;
3056 	mib_item_t		*last_item  = NULL;
3057 	mib_item_t		*temp;
3058 
3059 	tor->PRIM_type = T_SVR4_OPTMGMT_REQ;
3060 	tor->OPT_offset = sizeof (struct T_optmgmt_req);
3061 	tor->OPT_length = sizeof (struct opthdr);
3062 	tor->MGMT_flags = T_CURRENT;
3063 	req = (struct opthdr *)&tor[1];
3064 	req->level = MIB2_IP;		/* any MIB2_xxx value ok here */
3065 	req->name  = 0;
3066 	req->len   = 0;
3067 
3068 	ctlbuf.buf = (char *)buf;
3069 	ctlbuf.len = tor->OPT_length + tor->OPT_offset;
3070 	flags = 0;
3071 	if (putmsg(sd, &ctlbuf, NULL, flags) < 0) {
3072 		perror("mibget: putmsg (ctl)");
3073 		return (NULL);
3074 	}
3075 	/*
3076 	 * each reply consists of a ctl part for one fixed structure
3077 	 * or table, as defined in mib2.h.  The format is a T_OPTMGMT_ACK,
3078 	 * containing an opthdr structure.  level/name identify the entry,
3079 	 * len is the size of the data part of the message.
3080 	 */
3081 	req = (struct opthdr *)&toa[1];
3082 	ctlbuf.maxlen = sizeof (buf);
3083 	for (j = 1; ; j++) {
3084 		flags = 0;
3085 		getcode = getmsg(sd, &ctlbuf, NULL, &flags);
3086 		if (getcode < 0) {
3087 			perror("mibget: getmsg (ctl)");
3088 			if (verbose) {
3089 				(void) fprintf(stderr,
3090 				    "#   level   name    len\n");
3091 				i = 0;
3092 				for (last_item = first_item; last_item != NULL;
3093 				    last_item = last_item->next_item) {
3094 					(void) printf("%d  %4ld   %5ld   %ld\n",
3095 					    ++i, last_item->group,
3096 					    last_item->mib_id,
3097 					    last_item->length);
3098 				}
3099 			}
3100 			break;
3101 		}
3102 		if (getcode == 0 &&
3103 		    ctlbuf.len >= sizeof (struct T_optmgmt_ack) &&
3104 		    toa->PRIM_type == T_OPTMGMT_ACK &&
3105 		    toa->MGMT_flags == T_SUCCESS &&
3106 		    req->len == 0) {
3107 			if (verbose) {
3108 				(void) printf("mibget getmsg() %d returned EOD "
3109 				    "(level %lu, name %lu)\n", j, req->level,
3110 				    req->name);
3111 			}
3112 			return (first_item);		/* this is EOD msg */
3113 		}
3114 
3115 		if (ctlbuf.len >= sizeof (struct T_error_ack) &&
3116 		    tea->PRIM_type == T_ERROR_ACK) {
3117 			(void) fprintf(stderr, gettext("mibget %d gives "
3118 			    "T_ERROR_ACK: TLI_error = 0x%lx, UNIX_error = "
3119 			    "0x%lx\n"), j, tea->TLI_error, tea->UNIX_error);
3120 			errno = (tea->TLI_error == TSYSERR)
3121 				? tea->UNIX_error : EPROTO;
3122 			break;
3123 		}
3124 
3125 		if (getcode != MOREDATA ||
3126 		    ctlbuf.len < sizeof (struct T_optmgmt_ack) ||
3127 		    toa->PRIM_type != T_OPTMGMT_ACK ||
3128 		    toa->MGMT_flags != T_SUCCESS) {
3129 			(void) printf("mibget getmsg(ctl) %d returned %d, "
3130 			    "ctlbuf.len = %d, PRIM_type = %ld\n",
3131 			    j, getcode, ctlbuf.len, toa->PRIM_type);
3132 			if (toa->PRIM_type == T_OPTMGMT_ACK) {
3133 				(void) printf("T_OPTMGMT_ACK: "
3134 				    "MGMT_flags = 0x%lx, req->len = %ld\n",
3135 				    toa->MGMT_flags, req->len);
3136 			}
3137 			errno = ENOMSG;
3138 			break;
3139 		}
3140 
3141 		temp = malloc(sizeof (mib_item_t));
3142 		if (temp == NULL) {
3143 			perror("mibget: malloc");
3144 			break;
3145 		}
3146 		if (last_item != NULL)
3147 			last_item->next_item = temp;
3148 		else
3149 			first_item = temp;
3150 		last_item = temp;
3151 		last_item->next_item = NULL;
3152 		last_item->group = req->level;
3153 		last_item->mib_id = req->name;
3154 		last_item->length = req->len;
3155 		last_item->valp = malloc(req->len);
3156 		if (verbose) {
3157 			(void) printf("msg %d:  group = %4ld   mib_id = %5ld   "
3158 			    "length = %ld\n",
3159 			    j, last_item->group, last_item->mib_id,
3160 			    last_item->length);
3161 		}
3162 
3163 		databuf.maxlen = last_item->length;
3164 		databuf.buf    = (char *)last_item->valp;
3165 		databuf.len    = 0;
3166 		flags = 0;
3167 		getcode = getmsg(sd, NULL, &databuf, &flags);
3168 		if (getcode < 0) {
3169 			perror("mibget: getmsg (data)");
3170 			break;
3171 		} else if (getcode != 0) {
3172 			(void) printf("mibget getmsg(data) returned %d, "
3173 			    "databuf.maxlen = %d, databuf.len = %d\n",
3174 			    getcode, databuf.maxlen, databuf.len);
3175 			break;
3176 		}
3177 	}
3178 
3179 	/*
3180 	 * On error, free all the allocated mib_item_t objects.
3181 	 */
3182 	while (first_item != NULL) {
3183 		last_item = first_item;
3184 		first_item = first_item->next_item;
3185 		free(last_item);
3186 	}
3187 	return (NULL);
3188 }
3189 
3190 /*
3191  * print label security attributes for gateways.
3192  */
3193 static void
3194 pmsg_secattr(const char *sptr, size_t msglen, const char *labelstr)
3195 {
3196 	rtm_ext_t rtm_ext;
3197 	tsol_rtsecattr_t sp;
3198 	struct rtsa_s *rtsa = &sp.rtsa_attr[0];
3199 	const char *endptr;
3200 	char buf[256];
3201 	int i;
3202 
3203 	if (!is_system_labeled())
3204 		return;
3205 
3206 	endptr = sptr + msglen;
3207 
3208 	for (;;) {
3209 		if (sptr + sizeof (rtm_ext_t) + sizeof (sp) > endptr)
3210 			return;
3211 
3212 		bcopy(sptr, &rtm_ext, sizeof (rtm_ext));
3213 		sptr += sizeof (rtm_ext);
3214 		if (rtm_ext.rtmex_type == RTMEX_GATEWAY_SECATTR)
3215 			break;
3216 		sptr += rtm_ext.rtmex_len;
3217 	}
3218 
3219 	/* bail if this entry is corrupt or overruns buffer length */
3220 	if (rtm_ext.rtmex_len < sizeof (sp) ||
3221 	    sptr + rtm_ext.rtmex_len > endptr)
3222 		return;
3223 
3224 	/* run up just to the end of this extension */
3225 	endptr = sptr + rtm_ext.rtmex_len;
3226 
3227 	bcopy(sptr, &sp, sizeof (sp));
3228 	sptr += sizeof (sp);
3229 
3230 	if (sptr + (sp.rtsa_cnt - 1) * sizeof (*rtsa) != endptr)
3231 		return;
3232 
3233 	for (i = 0; i < sp.rtsa_cnt; i++) {
3234 		if (i > 0) {
3235 			/* first element is part of sp initalized above */
3236 			bcopy(sptr, rtsa, sizeof (*rtsa));
3237 			sptr += sizeof (*rtsa);
3238 		}
3239 		(void) printf("\n%s%s", labelstr, rtsa_to_str(rtsa, buf,
3240 		    sizeof (buf)));
3241 	}
3242 }
3243