#include <sys/param.h>
#include <sys/malloc.h>
#include <sys/mbuf.h>
#include <sys/protosw.h>
#include <sys/socket.h>
#include <sys/socketvar.h>
#include <sys/sysctl.h>
#include <sys/errno.h>
#include <sys/stat.h>
#include <sys/systm.h>
#include <sys/proc.h>
#include <sys/syslog.h>
#include <machine/endian.h>
#include <net/if.h>
#include <net/route.h>
#include <net/if_types.h>
#include <net/ntstat.h>
#include <netinet/in.h>
#include <netinet/in_var.h>
#include <netinet/in_systm.h>
#include <netinet/ip.h>
#include <netinet/ip_var.h>
#include <netinet/in_pcb.h>
#include <netinet/udp.h>
#include <netinet/udp_var.h>
#include <netinet/ip6.h>
#include <netinet6/ip6_var.h>
#include <netinet6/in6_pcb.h>
#include <netinet6/udp6_var.h>
#include <netinet/icmp6.h>
#include <netinet6/ip6protosw.h>
#if NECP
#include <net/necp.h>
#endif
#include <net/net_osdep.h>
extern int soreserveheadroom;
int
udp6_output(struct in6pcb *in6p, struct mbuf *m, struct sockaddr *addr6,
struct mbuf *control, struct proc *p)
{
u_int32_t ulen = m->m_pkthdr.len;
u_int32_t plen = sizeof (struct udphdr) + ulen;
struct ip6_hdr *ip6;
struct udphdr *udp6;
struct in6_addr *laddr, *faddr;
u_short fport;
int error = 0;
struct ip6_pktopts opt, *optp = NULL;
struct ip6_moptions *im6o;
int af = AF_INET6, hlen = sizeof (struct ip6_hdr);
int flags;
struct sockaddr_in6 tmp;
struct in6_addr storage;
mbuf_svc_class_t msc = MBUF_SC_UNSPEC;
struct ip6_out_args ip6oa =
{ IFSCOPE_NONE, { 0 }, IP6OAF_SELECT_SRCIF, 0 };
struct flowadv *adv = &ip6oa.ip6oa_flowadv;
struct socket *so = in6p->in6p_socket;
struct route_in6 ro;
int flowadv = 0;
flowadv = (so->so_state & SS_ISCONNECTED) ? 1 : 0;
if (flowadv && INP_WAIT_FOR_IF_FEEDBACK(in6p)) {
error = ENOBUFS;
goto release;
}
if (in6p->inp_flags & INP_BOUND_IF) {
ip6oa.ip6oa_boundif = in6p->inp_boundifp->if_index;
ip6oa.ip6oa_flags |= IP6OAF_BOUND_IF;
}
if (INP_NO_CELLULAR(in6p))
ip6oa.ip6oa_flags |= IP6OAF_NO_CELLULAR;
if (INP_NO_EXPENSIVE(in6p))
ip6oa.ip6oa_flags |= IP6OAF_NO_EXPENSIVE;
if (INP_AWDL_UNRESTRICTED(in6p))
ip6oa.ip6oa_flags |= IP6OAF_AWDL_UNRESTRICTED;
if (control) {
msc = mbuf_service_class_from_control(control);
if ((error = ip6_setpktopts(control, &opt,
NULL, IPPROTO_UDP)) != 0)
goto release;
optp = &opt;
} else
optp = in6p->in6p_outputopts;
if (addr6) {
struct sockaddr_in6 *sin6 =
(struct sockaddr_in6 *)(void *)addr6;
if (sin6->sin6_port == 0) {
error = EADDRNOTAVAIL;
goto release;
}
if (!IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr)) {
error = EISCONN;
goto release;
}
tmp = *sin6;
sin6 = &tmp;
faddr = &sin6->sin6_addr;
fport = sin6->sin6_port;
if (IN6_IS_ADDR_V4MAPPED(faddr)) {
if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY)) {
error = EINVAL;
goto release;
} else {
af = AF_INET;
}
}
if (in6_embedscope(&sin6->sin6_addr, sin6, in6p, NULL,
optp) != 0) {
error = EINVAL;
goto release;
}
if (!IN6_IS_ADDR_V4MAPPED(faddr)) {
laddr = in6_selectsrc(sin6, optp,
in6p, &in6p->in6p_route, NULL, &storage,
ip6oa.ip6oa_boundif, &error);
} else
laddr = &in6p->in6p_laddr;
if (laddr == NULL) {
if (error == 0)
error = EADDRNOTAVAIL;
goto release;
}
if (in6p->in6p_lport == 0 &&
(error = in6_pcbsetport(laddr, in6p, p, 0)) != 0)
goto release;
} else {
if (IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr)) {
error = ENOTCONN;
goto release;
}
if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_faddr)) {
if ((in6p->in6p_flags & IN6P_IPV6_V6ONLY)) {
log(LOG_INFO, "udp6_output: IPV6_V6ONLY "
"option was set for a connected socket\n");
error = EINVAL;
goto release;
} else
af = AF_INET;
}
laddr = &in6p->in6p_laddr;
faddr = &in6p->in6p_faddr;
fport = in6p->in6p_fport;
}
if (in6p->inp_flowhash == 0)
in6p->inp_flowhash = inp_calc_flowhash(in6p);
if (in6p->inp_flow == 0 && in6p->in6p_flags & IN6P_AUTOFLOWLABEL) {
in6p->inp_flow &= ~IPV6_FLOWLABEL_MASK;
in6p->inp_flow |=
(htonl(in6p->inp_flowhash) & IPV6_FLOWLABEL_MASK);
}
if (af == AF_INET)
hlen = sizeof (struct ip);
M_PREPEND(m, hlen + sizeof (struct udphdr), M_DONTWAIT, 1);
if (m == 0) {
error = ENOBUFS;
goto release;
}
udp6 = (struct udphdr *)(void *)(mtod(m, caddr_t) + hlen);
udp6->uh_sport = in6p->in6p_lport;
udp6->uh_dport = fport;
if (plen <= 0xffff)
udp6->uh_ulen = htons((u_short)plen);
else
udp6->uh_ulen = 0;
udp6->uh_sum = 0;
switch (af) {
case AF_INET6:
ip6 = mtod(m, struct ip6_hdr *);
ip6->ip6_flow = in6p->inp_flow & IPV6_FLOWINFO_MASK;
ip6->ip6_vfc &= ~IPV6_VERSION_MASK;
ip6->ip6_vfc |= IPV6_VERSION;
#if 0
ip6->ip6_plen = htons((u_short)plen);
#endif
ip6->ip6_nxt = IPPROTO_UDP;
ip6->ip6_hlim = in6_selecthlim(in6p, in6p->in6p_route.ro_rt ?
in6p->in6p_route.ro_rt->rt_ifp : NULL);
ip6->ip6_src = *laddr;
ip6->ip6_dst = *faddr;
udp6->uh_sum = in6_pseudo(laddr, faddr,
htonl(plen + IPPROTO_UDP));
m->m_pkthdr.csum_flags = CSUM_UDPIPV6;
m->m_pkthdr.csum_data = offsetof(struct udphdr, uh_sum);
if (!IN6_IS_ADDR_UNSPECIFIED(laddr))
ip6oa.ip6oa_flags |= IP6OAF_BOUND_SRCADDR;
flags = IPV6_OUTARGS;
udp6stat.udp6s_opackets++;
#if NECP
{
necp_kernel_policy_id policy_id;
u_int32_t route_rule_id;
if (!necp_socket_is_allowed_to_send_recv_v6(in6p, in6p->in6p_lport, fport, laddr, faddr, NULL, &policy_id, &route_rule_id)) {
error = EHOSTUNREACH;
goto release;
}
necp_mark_packet_from_socket(m, in6p, policy_id, route_rule_id);
}
#endif
#if IPSEC
if (in6p->in6p_sp != NULL && ipsec_setsocket(m, so) != 0) {
error = ENOBUFS;
goto release;
}
#endif
if (ROUTE_UNUSABLE(&in6p->in6p_route) ||
rt_key(in6p->in6p_route.ro_rt)->sa_family != AF_INET6)
ROUTE_RELEASE(&in6p->in6p_route);
in6p_route_copyout(in6p, &ro);
set_packet_service_class(m, so, msc, PKT_SCF_IPV6);
m->m_pkthdr.pkt_flowsrc = FLOWSRC_INPCB;
m->m_pkthdr.pkt_flowid = in6p->inp_flowhash;
m->m_pkthdr.pkt_proto = IPPROTO_UDP;
m->m_pkthdr.pkt_flags |= (PKTF_FLOW_ID | PKTF_FLOW_LOCALSRC);
if (flowadv)
m->m_pkthdr.pkt_flags |= PKTF_FLOW_ADV;
im6o = in6p->in6p_moptions;
if (im6o != NULL) {
IM6O_LOCK(im6o);
IM6O_ADDREF_LOCKED(im6o);
if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst) &&
im6o->im6o_multicast_ifp != NULL) {
in6p->in6p_last_outifp =
im6o->im6o_multicast_ifp;
}
IM6O_UNLOCK(im6o);
}
in6p->inp_sndinprog_cnt++;
socket_unlock(so, 0);
error = ip6_output(m, optp, &ro, flags, im6o, NULL, &ip6oa);
m = NULL;
socket_lock(so, 0);
if (im6o != NULL)
IM6O_REMREF(im6o);
if (error == 0 && nstat_collect) {
boolean_t cell, wifi, wired;
if (in6p->in6p_route.ro_rt != NULL) {
cell = IFNET_IS_CELLULAR(in6p->in6p_route.
ro_rt->rt_ifp);
wifi = (!cell && IFNET_IS_WIFI(in6p->in6p_route.
ro_rt->rt_ifp));
wired = (!wifi && IFNET_IS_WIRED(in6p->in6p_route.
ro_rt->rt_ifp));
} else {
cell = wifi = wired = FALSE;
}
INP_ADD_STAT(in6p, cell, wifi, wired, txpackets, 1);
INP_ADD_STAT(in6p, cell, wifi, wired, txbytes, ulen);
}
if (flowadv && (adv->code == FADV_FLOW_CONTROLLED ||
adv->code == FADV_SUSPENDED)) {
error = ENOBUFS;
inp_set_fc_state(in6p, adv->code);
}
VERIFY(in6p->inp_sndinprog_cnt > 0);
if ( --in6p->inp_sndinprog_cnt == 0)
in6p->inp_flags &= ~(INP_FC_FEEDBACK);
if (ro.ro_rt != NULL) {
struct ifnet *outif = ro.ro_rt->rt_ifp;
so->so_pktheadroom = P2ROUNDUP(
sizeof(struct udphdr) +
hlen +
ifnet_hdrlen(outif) +
ifnet_packetpreamblelen(outif),
sizeof(u_int32_t));
}
in6p_route_copyin(in6p, &ro);
if (in6p->in6p_route.ro_rt != NULL) {
struct rtentry *rt = in6p->in6p_route.ro_rt;
struct ifnet *outif;
if (rt->rt_flags & RTF_MULTICAST)
rt = NULL;
if (rt == NULL)
ROUTE_RELEASE(&in6p->in6p_route);
if (rt != NULL &&
(outif = rt->rt_ifp) != in6p->in6p_last_outifp) {
in6p->in6p_last_outifp = outif;
so->so_pktheadroom = P2ROUNDUP(
sizeof(struct udphdr) +
hlen +
ifnet_hdrlen(outif) +
ifnet_packetpreamblelen(outif),
sizeof(u_int32_t));
}
} else {
ROUTE_RELEASE(&in6p->in6p_route);
}
if (error != 0 && (ip6oa.ip6oa_retflags & IP6OARF_IFDENIED) &&
(INP_NO_CELLULAR(in6p) || INP_NO_EXPENSIVE(in6p)))
soevent(in6p->inp_socket, (SO_FILT_HINT_LOCKED|
SO_FILT_HINT_IFDENIED));
break;
case AF_INET:
error = EAFNOSUPPORT;
goto release;
}
goto releaseopt;
release:
if (m != NULL)
m_freem(m);
releaseopt:
if (control != NULL) {
if (optp == &opt)
ip6_clearpktopts(optp, -1);
m_freem(control);
}
return (error);
}