1 | /* |
2 | * Copyright (c) 2003-2018 Apple Inc. All rights reserved. |
3 | * |
4 | * @APPLE_OSREFERENCE_LICENSE_HEADER_START@ |
5 | * |
6 | * This file contains Original Code and/or Modifications of Original Code |
7 | * as defined in and that are subject to the Apple Public Source License |
8 | * Version 2.0 (the 'License'). You may not use this file except in |
9 | * compliance with the License. The rights granted to you under the License |
10 | * may not be used to create, or enable the creation or redistribution of, |
11 | * unlawful or unlicensed copies of an Apple operating system, or to |
12 | * circumvent, violate, or enable the circumvention or violation of, any |
13 | * terms of an Apple operating system software license agreement. |
14 | * |
15 | * Please obtain a copy of the License at |
16 | * http://www.opensource.apple.com/apsl/ and read it before using this file. |
17 | * |
18 | * The Original Code and all software distributed under the License are |
19 | * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER |
20 | * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, |
21 | * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, |
22 | * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. |
23 | * Please see the License for the specific language governing rights and |
24 | * limitations under the License. |
25 | * |
26 | * @APPLE_OSREFERENCE_LICENSE_HEADER_END@ |
27 | */ |
28 | |
29 | /* |
30 | * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. |
31 | * All rights reserved. |
32 | * |
33 | * Redistribution and use in source and binary forms, with or without |
34 | * modification, are permitted provided that the following conditions |
35 | * are met: |
36 | * 1. Redistributions of source code must retain the above copyright |
37 | * notice, this list of conditions and the following disclaimer. |
38 | * 2. Redistributions in binary form must reproduce the above copyright |
39 | * notice, this list of conditions and the following disclaimer in the |
40 | * documentation and/or other materials provided with the distribution. |
41 | * 3. Neither the name of the project nor the names of its contributors |
42 | * may be used to endorse or promote products derived from this software |
43 | * without specific prior written permission. |
44 | * |
45 | * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND |
46 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
47 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
48 | * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE |
49 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
50 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS |
51 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
52 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT |
53 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY |
54 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
55 | * SUCH DAMAGE. |
56 | */ |
57 | |
58 | #include <sys/param.h> |
59 | #include <sys/systm.h> |
60 | #include <sys/malloc.h> |
61 | #include <sys/socket.h> |
62 | #include <sys/socketvar.h> |
63 | #include <sys/sockio.h> |
64 | #include <sys/kernel.h> |
65 | #include <sys/syslog.h> |
66 | #include <libkern/crypto/sha1.h> |
67 | #include <libkern/OSAtomic.h> |
68 | #include <kern/locks.h> |
69 | |
70 | #include <net/if.h> |
71 | #include <net/if_dl.h> |
72 | #include <net/if_types.h> |
73 | #include <net/route.h> |
74 | #include <net/kpi_protocol.h> |
75 | #include <net/if_llatbl.h> |
76 | |
77 | #include <netinet/in.h> |
78 | #include <netinet/in_var.h> |
79 | #include <netinet/if_ether.h> |
80 | #include <netinet/in_pcb.h> |
81 | #include <netinet/icmp6.h> |
82 | |
83 | #include <netinet/ip6.h> |
84 | #include <netinet6/ip6_var.h> |
85 | #include <netinet6/in6_var.h> |
86 | #include <netinet6/in6_pcb.h> |
87 | #include <netinet6/in6_ifattach.h> |
88 | #include <netinet6/ip6_var.h> |
89 | #include <netinet6/nd6.h> |
90 | #include <netinet6/scope6_var.h> |
91 | |
92 | #include <net/net_osdep.h> |
93 | #include <dev/random/randomdev.h> |
94 | |
95 | u_int32_t in6_maxmtu = 0; |
96 | extern lck_mtx_t *nd6_mutex; |
97 | |
98 | #if IP6_AUTO_LINKLOCAL |
99 | int ip6_auto_linklocal = IP6_AUTO_LINKLOCAL; |
100 | #else |
101 | int ip6_auto_linklocal = 1; /* enable by default */ |
102 | #endif |
103 | |
104 | extern struct inpcbinfo udbinfo; |
105 | extern struct inpcbinfo ripcbinfo; |
106 | |
107 | static const unsigned int = sizeof(struct in6_ifextra); |
108 | static const unsigned int = in6_extra_size + |
109 | sizeof(void *) + sizeof(uint64_t); |
110 | |
111 | static int get_rand_iid(struct ifnet *, struct in6_addr *); |
112 | static int in6_generate_tmp_iid(u_int8_t *, const u_int8_t *, u_int8_t *); |
113 | static int in6_select_iid_from_all_hw(struct ifnet *, struct ifnet *, |
114 | struct in6_addr *); |
115 | static int in6_ifattach_linklocal(struct ifnet *, struct in6_aliasreq *); |
116 | static int in6_ifattach_loopback(struct ifnet *); |
117 | |
118 | /* |
119 | * Generate a last-resort interface identifier, when the machine has no |
120 | * IEEE802/EUI64 address sources. |
121 | * The goal here is to get an interface identifier that is |
122 | * (1) random enough and (2) does not change across reboot. |
123 | * We currently use SHA1(hostname) for it. |
124 | * |
125 | * in6 - upper 64bits are preserved |
126 | */ |
127 | static int |
128 | get_rand_iid( |
129 | __unused struct ifnet *ifp, |
130 | struct in6_addr *in6) /* upper 64bits are preserved */ |
131 | { |
132 | SHA1_CTX ctxt; |
133 | u_int8_t digest[SHA1_RESULTLEN]; |
134 | int hostnlen = strlen(hostname); |
135 | |
136 | /* generate 8 bytes of pseudo-random value. */ |
137 | bzero(&ctxt, sizeof (ctxt)); |
138 | SHA1Init(&ctxt); |
139 | SHA1Update(&ctxt, hostname, hostnlen); |
140 | SHA1Final(digest, &ctxt); |
141 | |
142 | /* assumes sizeof (digest) > sizeof (iid) */ |
143 | bcopy(digest, &in6->s6_addr[8], 8); |
144 | |
145 | /* make sure to set "u" bit to local, and "g" bit to individual. */ |
146 | in6->s6_addr[8] &= ~ND6_EUI64_GBIT; /* g bit to "individual" */ |
147 | in6->s6_addr[8] |= ND6_EUI64_UBIT; /* u bit to "local" */ |
148 | |
149 | /* convert EUI64 into IPv6 interface identifier */ |
150 | ND6_EUI64_TO_IFID(in6); |
151 | |
152 | return (0); |
153 | } |
154 | |
155 | static int |
156 | in6_generate_tmp_iid( |
157 | u_int8_t *seed0, |
158 | const u_int8_t *seed1, |
159 | u_int8_t *ret) |
160 | { |
161 | SHA1_CTX ctxt; |
162 | u_int8_t seed[16], nullbuf[8], digest[SHA1_RESULTLEN]; |
163 | u_int32_t val32; |
164 | struct timeval tv; |
165 | |
166 | /* If there's no history, start with a random seed. */ |
167 | bzero(nullbuf, sizeof (nullbuf)); |
168 | if (bcmp(nullbuf, seed0, sizeof (nullbuf)) == 0) { |
169 | int i; |
170 | |
171 | for (i = 0; i < 2; i++) { |
172 | getmicrotime(&tv); |
173 | val32 = RandomULong() ^ tv.tv_usec; |
174 | bcopy(&val32, seed + sizeof (val32) * i, |
175 | sizeof (val32)); |
176 | } |
177 | } else { |
178 | bcopy(seed0, seed, 8); |
179 | } |
180 | |
181 | /* copy the right-most 64-bits of the given address */ |
182 | /* XXX assumption on the size of IFID */ |
183 | bcopy(seed1, &seed[8], 8); |
184 | |
185 | if ((0)) { /* for debugging purposes only */ |
186 | int i; |
187 | |
188 | printf("%s: new randomized ID from: " , __func__); |
189 | for (i = 0; i < 16; i++) |
190 | printf("%02x" , seed[i]); |
191 | printf(" " ); |
192 | } |
193 | |
194 | /* generate 16 bytes of pseudo-random value. */ |
195 | bzero(&ctxt, sizeof (ctxt)); |
196 | SHA1Init(&ctxt); |
197 | SHA1Update(&ctxt, seed, sizeof (seed)); |
198 | SHA1Final(digest, &ctxt); |
199 | |
200 | /* |
201 | * RFC 4941 3.2.1. (3) |
202 | * Take the left-most 64-bits of the SHA1 digest and set bit 6 (the |
203 | * left-most bit is numbered 0) to zero. |
204 | */ |
205 | bcopy(digest, ret, 8); |
206 | ret[0] &= ~ND6_EUI64_UBIT; |
207 | |
208 | /* |
209 | * XXX: we'd like to ensure that the generated value is not zero |
210 | * for simplicity. If the caclculated digest happens to be zero, |
211 | * use a random non-zero value as the last resort. |
212 | */ |
213 | if (bcmp(nullbuf, ret, sizeof (nullbuf)) == 0) { |
214 | nd6log((LOG_INFO, |
215 | "%s: computed SHA1 value is zero.\n" , __func__)); |
216 | |
217 | getmicrotime(&tv); |
218 | val32 = random() ^ tv.tv_usec; |
219 | val32 = 1 + (val32 % (0xffffffff - 1)); |
220 | } |
221 | |
222 | /* |
223 | * RFC 4941 3.2.1. (4) |
224 | * Take the next 64-bits of the SHA1 digest and save them in |
225 | * stable storage as the history value to be used in the next |
226 | * iteration of the algorithm. |
227 | */ |
228 | bcopy(&digest[8], seed0, 8); |
229 | |
230 | if ((0)) { /* for debugging purposes only */ |
231 | int i; |
232 | |
233 | printf("to: " ); |
234 | for (i = 0; i < 16; i++) |
235 | printf("%02x" , digest[i]); |
236 | printf("\n" ); |
237 | } |
238 | |
239 | return (0); |
240 | } |
241 | |
242 | /* |
243 | * Get interface identifier for the specified interface using the method in |
244 | * Appendix A of RFC 4291. |
245 | * |
246 | * XXX assumes single sockaddr_dl (AF_LINK address) per an interface |
247 | * |
248 | * in6 - upper 64bits are preserved |
249 | */ |
250 | int |
251 | in6_iid_from_hw(struct ifnet *ifp, struct in6_addr *in6) |
252 | { |
253 | struct ifaddr *ifa = NULL; |
254 | struct sockaddr_dl *sdl; |
255 | u_int8_t *addr; |
256 | size_t addrlen; |
257 | static u_int8_t allzero[8] = { 0, 0, 0, 0, 0, 0, 0, 0 }; |
258 | static u_int8_t allone[8] = |
259 | { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff }; |
260 | int err = -1; |
261 | |
262 | /* Why doesn't this code use ifnet_addrs? */ |
263 | ifnet_lock_shared(ifp); |
264 | ifa = ifp->if_lladdr; |
265 | sdl = (struct sockaddr_dl *)(void *)ifa->ifa_addr; |
266 | if (sdl->sdl_alen == 0) { |
267 | ifnet_lock_done(ifp); |
268 | return (-1); |
269 | } |
270 | IFA_ADDREF(ifa); /* for this routine */ |
271 | ifnet_lock_done(ifp); |
272 | |
273 | IFA_LOCK(ifa); |
274 | addr = (u_int8_t *) LLADDR(sdl); |
275 | addrlen = sdl->sdl_alen; |
276 | |
277 | /* get EUI64 */ |
278 | switch (ifp->if_type) { |
279 | case IFT_ETHER: |
280 | case IFT_FDDI: |
281 | case IFT_ISO88025: |
282 | case IFT_ATM: |
283 | case IFT_IEEE1394: |
284 | case IFT_L2VLAN: |
285 | case IFT_IEEE8023ADLAG: |
286 | #if IFT_IEEE80211 |
287 | case IFT_IEEE80211: |
288 | #endif |
289 | case IFT_BRIDGE: |
290 | /* IEEE802/EUI64 cases - what others? */ |
291 | /* IEEE1394 uses 16byte length address starting with EUI64 */ |
292 | if (addrlen > 8) |
293 | addrlen = 8; |
294 | |
295 | /* look at IEEE802/EUI64 only */ |
296 | if (addrlen != 8 && addrlen != 6) |
297 | goto done; |
298 | |
299 | /* |
300 | * check for invalid MAC address - on bsdi, we see it a lot |
301 | * since wildboar configures all-zero MAC on pccard before |
302 | * card insertion. |
303 | */ |
304 | if (bcmp(addr, allzero, addrlen) == 0) |
305 | goto done; |
306 | if (bcmp(addr, allone, addrlen) == 0) |
307 | goto done; |
308 | |
309 | /* make EUI64 address */ |
310 | if (addrlen == 8) |
311 | bcopy(addr, &in6->s6_addr[8], 8); |
312 | else if (addrlen == 6) { |
313 | in6->s6_addr[8] = addr[0]; |
314 | in6->s6_addr[9] = addr[1]; |
315 | in6->s6_addr[10] = addr[2]; |
316 | in6->s6_addr[11] = 0xff; |
317 | in6->s6_addr[12] = 0xfe; |
318 | in6->s6_addr[13] = addr[3]; |
319 | in6->s6_addr[14] = addr[4]; |
320 | in6->s6_addr[15] = addr[5]; |
321 | } |
322 | break; |
323 | |
324 | case IFT_ARCNET: |
325 | if (addrlen != 1) |
326 | goto done; |
327 | if (!addr[0]) |
328 | goto done; |
329 | |
330 | bzero(&in6->s6_addr[8], 8); |
331 | in6->s6_addr[15] = addr[0]; |
332 | |
333 | /* |
334 | * due to insufficient bitwidth, we mark it local. |
335 | */ |
336 | in6->s6_addr[8] &= ~ND6_EUI64_GBIT; /* g to "individual" */ |
337 | in6->s6_addr[8] |= ND6_EUI64_UBIT; /* u to "local" */ |
338 | break; |
339 | |
340 | case IFT_GIF: |
341 | #if IFT_STF |
342 | case IFT_STF: |
343 | #endif |
344 | /* |
345 | * RFC2893 says: "SHOULD use IPv4 address as IID source". |
346 | * however, IPv4 address is not very suitable as unique |
347 | * identifier source (can be renumbered). |
348 | * we don't do this. |
349 | */ |
350 | goto done; |
351 | |
352 | case IFT_CELLULAR: |
353 | goto done; |
354 | |
355 | default: |
356 | goto done; |
357 | } |
358 | |
359 | /* sanity check: g bit must not indicate "group" */ |
360 | if (ND6_EUI64_GROUP(in6)) |
361 | goto done; |
362 | |
363 | /* convert EUI64 into IPv6 interface identifier */ |
364 | ND6_EUI64_TO_IFID(in6); |
365 | |
366 | /* |
367 | * sanity check: iid must not be all zero, avoid conflict with |
368 | * subnet router anycast |
369 | */ |
370 | if ((in6->s6_addr[8] & ~(ND6_EUI64_GBIT | ND6_EUI64_UBIT)) == 0x00 && |
371 | bcmp(&in6->s6_addr[9], allzero, 7) == 0) { |
372 | goto done; |
373 | } |
374 | |
375 | err = 0; /* found */ |
376 | |
377 | done: |
378 | /* This must not be the last reference to the lladdr */ |
379 | if (IFA_REMREF_LOCKED(ifa) == NULL) { |
380 | panic("%s: unexpected (missing) refcnt ifa=%p" , __func__, ifa); |
381 | /* NOTREACHED */ |
382 | } |
383 | IFA_UNLOCK(ifa); |
384 | return (err); |
385 | } |
386 | |
387 | /* |
388 | * Get interface identifier for the specified interface using the method in |
389 | * Appendix A of RFC 4291. If it is not available on ifp0, borrow interface |
390 | * identifier from other information sources. |
391 | * |
392 | * ifp - primary EUI64 source |
393 | * altifp - secondary EUI64 source |
394 | * in6 - IPv6 address to output IID |
395 | */ |
396 | static int |
397 | in6_select_iid_from_all_hw( |
398 | struct ifnet *ifp0, |
399 | struct ifnet *altifp, /* secondary EUI64 source */ |
400 | struct in6_addr *in6) |
401 | { |
402 | struct ifnet *ifp; |
403 | |
404 | /* first, try to get it from the interface itself */ |
405 | if (in6_iid_from_hw(ifp0, in6) == 0) { |
406 | nd6log((LOG_DEBUG, "%s: IID derived from HW interface.\n" , |
407 | if_name(ifp0))); |
408 | goto success; |
409 | } |
410 | |
411 | /* try secondary EUI64 source. this basically is for ATM PVC */ |
412 | if (altifp && in6_iid_from_hw(altifp, in6) == 0) { |
413 | nd6log((LOG_DEBUG, "%s: IID from alterate HW interface %s.\n" , |
414 | if_name(ifp0), if_name(altifp))); |
415 | goto success; |
416 | } |
417 | |
418 | /* next, try to get it from some other hardware interface */ |
419 | ifnet_head_lock_shared(); |
420 | TAILQ_FOREACH(ifp, &ifnet_head, if_list) { |
421 | if (ifp == ifp0) |
422 | continue; |
423 | if (in6_iid_from_hw(ifp, in6) != 0) |
424 | continue; |
425 | |
426 | /* |
427 | * to borrow IID from other interface, IID needs to be |
428 | * globally unique |
429 | */ |
430 | if (ND6_IFID_UNIVERSAL(in6)) { |
431 | nd6log((LOG_DEBUG, "%s: borrowed IID from %s\n" , |
432 | if_name(ifp0), if_name(ifp))); |
433 | ifnet_head_done(); |
434 | goto success; |
435 | } |
436 | } |
437 | ifnet_head_done(); |
438 | |
439 | /* last resort: get from random number source */ |
440 | if (get_rand_iid(ifp, in6) == 0) { |
441 | nd6log((LOG_DEBUG, "%s: IID from PRNG.\n" , if_name(ifp0))); |
442 | goto success; |
443 | } |
444 | |
445 | printf("%s: failed to get interface identifier\n" , if_name(ifp0)); |
446 | return (-1); |
447 | |
448 | success: |
449 | nd6log((LOG_INFO, "%s: IID: " |
450 | "%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x\n" , |
451 | if_name(ifp0), |
452 | in6->s6_addr[8], in6->s6_addr[9], |
453 | in6->s6_addr[10], in6->s6_addr[11], |
454 | in6->s6_addr[12], in6->s6_addr[13], |
455 | in6->s6_addr[14], in6->s6_addr[15])); |
456 | return (0); |
457 | } |
458 | |
459 | static int |
460 | in6_ifattach_linklocal(struct ifnet *ifp, struct in6_aliasreq *ifra) |
461 | { |
462 | struct in6_ifaddr *ia; |
463 | struct nd_prefix pr0, *pr; |
464 | int i, error; |
465 | |
466 | VERIFY(ifra != NULL); |
467 | |
468 | proto_plumb(PF_INET6, ifp); |
469 | |
470 | error = in6_update_ifa(ifp, ifra, IN6_IFAUPDATE_DADDELAY, &ia); |
471 | if (error != 0) { |
472 | /* |
473 | * XXX: When the interface does not support IPv6, this call |
474 | * would fail in the SIOCSIFADDR ioctl. I believe the |
475 | * notification is rather confusing in this case, so just |
476 | * suppress it. (jinmei@kame.net 20010130) |
477 | */ |
478 | if (error != EAFNOSUPPORT) |
479 | nd6log((LOG_NOTICE, "%s: failed to " |
480 | "configure a link-local address on %s " |
481 | "(errno=%d)\n" , |
482 | __func__, if_name(ifp), error)); |
483 | return (EADDRNOTAVAIL); |
484 | } |
485 | VERIFY(ia != NULL); |
486 | |
487 | /* |
488 | * Make the link-local prefix (fe80::%link/64) as on-link. |
489 | * Since we'd like to manage prefixes separately from addresses, |
490 | * we make an ND6 prefix structure for the link-local prefix, |
491 | * and add it to the prefix list as a never-expire prefix. |
492 | * XXX: this change might affect some existing code base... |
493 | */ |
494 | bzero(&pr0, sizeof (pr0)); |
495 | lck_mtx_init(&pr0.ndpr_lock, ifa_mtx_grp, ifa_mtx_attr); |
496 | pr0.ndpr_ifp = ifp; |
497 | /* this should be 64 at this moment. */ |
498 | pr0.ndpr_plen = in6_mask2len(&ifra->ifra_prefixmask.sin6_addr, NULL); |
499 | pr0.ndpr_mask = ifra->ifra_prefixmask.sin6_addr; |
500 | pr0.ndpr_prefix = ifra->ifra_addr; |
501 | /* apply the mask for safety. (nd6_prelist_add will apply it again) */ |
502 | for (i = 0; i < 4; i++) { |
503 | pr0.ndpr_prefix.sin6_addr.s6_addr32[i] &= |
504 | in6mask64.s6_addr32[i]; |
505 | } |
506 | /* |
507 | * Initialize parameters. The link-local prefix must always be |
508 | * on-link, and its lifetimes never expire. |
509 | */ |
510 | pr0.ndpr_raf_onlink = 1; |
511 | pr0.ndpr_raf_auto = 1; /* probably meaningless */ |
512 | pr0.ndpr_vltime = ND6_INFINITE_LIFETIME; |
513 | pr0.ndpr_pltime = ND6_INFINITE_LIFETIME; |
514 | pr0.ndpr_stateflags |= NDPRF_STATIC; |
515 | /* |
516 | * Since there is no other link-local addresses, nd6_prefix_lookup() |
517 | * probably returns NULL. However, we cannot always expect the result. |
518 | * For example, if we first remove the (only) existing link-local |
519 | * address, and then reconfigure another one, the prefix is still |
520 | * valid with referring to the old link-local address. |
521 | */ |
522 | if ((pr = nd6_prefix_lookup(&pr0, ND6_PREFIX_EXPIRY_UNSPEC)) == NULL) { |
523 | if ((error = nd6_prelist_add(&pr0, NULL, &pr, TRUE)) != 0) { |
524 | IFA_REMREF(&ia->ia_ifa); |
525 | lck_mtx_destroy(&pr0.ndpr_lock, ifa_mtx_grp); |
526 | return (error); |
527 | } |
528 | } |
529 | |
530 | in6_post_msg(ifp, KEV_INET6_NEW_LL_ADDR, ia, NULL); |
531 | IFA_REMREF(&ia->ia_ifa); |
532 | |
533 | /* Drop use count held above during lookup/add */ |
534 | if (pr != NULL) |
535 | NDPR_REMREF(pr); |
536 | |
537 | lck_mtx_destroy(&pr0.ndpr_lock, ifa_mtx_grp); |
538 | return (0); |
539 | } |
540 | |
541 | static int |
542 | in6_ifattach_loopback( |
543 | struct ifnet *ifp) /* must be IFT_LOOP */ |
544 | { |
545 | struct in6_aliasreq ifra; |
546 | struct in6_ifaddr *ia; |
547 | int error; |
548 | |
549 | bzero(&ifra, sizeof (ifra)); |
550 | |
551 | /* |
552 | * in6_update_ifa() does not use ifra_name, but we accurately set it |
553 | * for safety. |
554 | */ |
555 | strlcpy(ifra.ifra_name, if_name(ifp), sizeof (ifra.ifra_name)); |
556 | |
557 | ifra.ifra_prefixmask.sin6_len = sizeof (struct sockaddr_in6); |
558 | ifra.ifra_prefixmask.sin6_family = AF_INET6; |
559 | ifra.ifra_prefixmask.sin6_addr = in6mask128; |
560 | |
561 | /* |
562 | * Always initialize ia_dstaddr (= broadcast address) to loopback |
563 | * address. Follows IPv4 practice - see in_ifinit(). |
564 | */ |
565 | ifra.ifra_dstaddr.sin6_len = sizeof (struct sockaddr_in6); |
566 | ifra.ifra_dstaddr.sin6_family = AF_INET6; |
567 | ifra.ifra_dstaddr.sin6_addr = in6addr_loopback; |
568 | |
569 | ifra.ifra_addr.sin6_len = sizeof (struct sockaddr_in6); |
570 | ifra.ifra_addr.sin6_family = AF_INET6; |
571 | ifra.ifra_addr.sin6_addr = in6addr_loopback; |
572 | |
573 | /* the loopback address should NEVER expire. */ |
574 | ifra.ifra_lifetime.ia6t_vltime = ND6_INFINITE_LIFETIME; |
575 | ifra.ifra_lifetime.ia6t_pltime = ND6_INFINITE_LIFETIME; |
576 | |
577 | /* we don't need to perform DAD on loopback interfaces. */ |
578 | ifra.ifra_flags |= IN6_IFF_NODAD; |
579 | |
580 | /* add the new interface address */ |
581 | error = in6_update_ifa(ifp, &ifra, 0, &ia); |
582 | if (error != 0) { |
583 | nd6log((LOG_ERR, |
584 | "%s: failed to configure loopback address %s (error=%d)\n" , |
585 | __func__, if_name(ifp), error)); |
586 | VERIFY(ia == NULL); |
587 | return (EADDRNOTAVAIL); |
588 | } |
589 | |
590 | VERIFY(ia != NULL); |
591 | IFA_REMREF(&ia->ia_ifa); |
592 | return (0); |
593 | } |
594 | |
595 | /* |
596 | * compute NI group address, based on the current hostname setting. |
597 | * see RFC 4620. |
598 | * |
599 | * when ifp == NULL, the caller is responsible for filling scopeid. |
600 | */ |
601 | int |
602 | in6_nigroup( |
603 | struct ifnet *ifp, |
604 | const char *name, |
605 | int namelen, |
606 | struct in6_addr *in6) |
607 | { |
608 | const char *p; |
609 | u_char *q; |
610 | SHA1_CTX ctxt; |
611 | u_int8_t digest[SHA1_RESULTLEN]; |
612 | char l; |
613 | char n[64]; /* a single label must not exceed 63 chars */ |
614 | |
615 | if (!namelen || !name) |
616 | return (-1); |
617 | |
618 | p = name; |
619 | while (p && *p && *p != '.' && p - name < namelen) |
620 | p++; |
621 | if (p - name > sizeof (n) - 1) |
622 | return (-1); /* label too long */ |
623 | l = p - name; |
624 | strlcpy(n, name, l); |
625 | n[(int)l] = '\0'; |
626 | for (q = (u_char *) n; *q; q++) { |
627 | if ('A' <= *q && *q <= 'Z') |
628 | *q = *q - 'A' + 'a'; |
629 | } |
630 | |
631 | /* generate 16 bytes of pseudo-random value. */ |
632 | bzero(&ctxt, sizeof (ctxt)); |
633 | SHA1Init(&ctxt); |
634 | SHA1Update(&ctxt, &l, sizeof (l)); |
635 | SHA1Update(&ctxt, n, l); |
636 | SHA1Final(digest, &ctxt); |
637 | |
638 | bzero(in6, sizeof (*in6)); |
639 | in6->s6_addr16[0] = IPV6_ADDR_INT16_MLL; |
640 | in6->s6_addr8[11] = 2; |
641 | in6->s6_addr8[12] = 0xff; |
642 | /* copy first 3 bytes of prefix into address */ |
643 | bcopy(digest, &in6->s6_addr8[13], 3); |
644 | if (in6_setscope(in6, ifp, NULL)) |
645 | return (-1); /* XXX: should not fail */ |
646 | |
647 | return (0); |
648 | } |
649 | |
650 | int |
651 | in6_domifattach(struct ifnet *ifp) |
652 | { |
653 | int error; |
654 | |
655 | VERIFY(ifp != NULL); |
656 | |
657 | error = proto_plumb(PF_INET6, ifp); |
658 | if (error != 0) { |
659 | if (error != EEXIST) |
660 | log(LOG_ERR, "%s: proto_plumb returned %d if=%s\n" , |
661 | __func__, error, if_name(ifp)); |
662 | } else { |
663 | error = in6_ifattach_prelim(ifp); |
664 | if (error != 0) { |
665 | int errorx; |
666 | |
667 | log(LOG_ERR, |
668 | "%s: in6_ifattach_prelim returned %d if=%s%d\n" , |
669 | __func__, error, ifp->if_name, ifp->if_unit); |
670 | |
671 | errorx = proto_unplumb(PF_INET6, ifp); |
672 | if (errorx != 0) /* XXX should not fail */ |
673 | log(LOG_ERR, |
674 | "%s: proto_unplumb returned %d if=%s%d\n" , |
675 | __func__, errorx, ifp->if_name, |
676 | ifp->if_unit); |
677 | } |
678 | } |
679 | |
680 | return (error); |
681 | } |
682 | |
683 | int |
684 | in6_ifattach_prelim(struct ifnet *ifp) |
685 | { |
686 | struct in6_ifextra *ext; |
687 | void **pbuf, *base; |
688 | int error = 0; |
689 | struct in6_ifaddr *ia6 = NULL; |
690 | |
691 | VERIFY(ifp != NULL); |
692 | |
693 | /* quirks based on interface type */ |
694 | switch (ifp->if_type) { |
695 | #if IFT_STF |
696 | case IFT_STF: |
697 | /* |
698 | * 6to4 interface is a very special kind of beast. |
699 | * no multicast, no linklocal. RFC2529 specifies how to make |
700 | * linklocals for 6to4 interface, but there's no use and |
701 | * it is rather harmful to have one. |
702 | */ |
703 | goto skipmcast; |
704 | #endif |
705 | default: |
706 | break; |
707 | } |
708 | |
709 | /* |
710 | * IPv6 requires multicast capability at the interface. |
711 | * (previously, this was a silent error.) |
712 | */ |
713 | if ((ifp->if_flags & IFF_MULTICAST) == 0) { |
714 | nd6log0((LOG_INFO, "in6_ifattach: " , |
715 | "%s is not multicast capable, IPv6 not enabled\n" , |
716 | if_name(ifp))); |
717 | return (EINVAL); |
718 | } |
719 | |
720 | #if IFT_STF |
721 | skipmcast: |
722 | #endif |
723 | |
724 | if (ifp->if_inet6data == NULL) { |
725 | ext = (struct in6_ifextra *)_MALLOC(in6_extra_bufsize, M_IFADDR, |
726 | M_WAITOK|M_ZERO); |
727 | if (!ext) |
728 | return (ENOMEM); |
729 | base = (void *)P2ROUNDUP((intptr_t)ext + sizeof(uint64_t), |
730 | sizeof(uint64_t)); |
731 | VERIFY(((intptr_t)base + in6_extra_size) <= |
732 | ((intptr_t)ext + in6_extra_bufsize)); |
733 | pbuf = (void **)((intptr_t)base - sizeof(void *)); |
734 | *pbuf = ext; |
735 | ifp->if_inet6data = base; |
736 | IN6_IFEXTRA(ifp)->ii_llt = in6_lltattach(ifp); |
737 | VERIFY(IS_P2ALIGNED(ifp->if_inet6data, sizeof(uint64_t))); |
738 | } else { |
739 | /* |
740 | * Since the structure is never freed, we need to zero out |
741 | * some of its members. We avoid zeroing out the scope6 |
742 | * structure on purpose because other threads might be |
743 | * using its contents. |
744 | */ |
745 | bzero(&IN6_IFEXTRA(ifp)->icmp6_ifstat, |
746 | sizeof(IN6_IFEXTRA(ifp)->icmp6_ifstat)); |
747 | bzero(&IN6_IFEXTRA(ifp)->in6_ifstat, |
748 | sizeof(IN6_IFEXTRA(ifp)->in6_ifstat)); |
749 | /* XXX TBD Purge the layer two table */ |
750 | /* |
751 | * XXX When recycling, nd_ifinfo gets initialized, other |
752 | * than the lock, inside nd6_ifattach |
753 | */ |
754 | } |
755 | |
756 | /* |
757 | * XXX Only initialize IPv6 configuration for the interface |
758 | * if interface has not yet been configured with |
759 | * link local IPv6 address. |
760 | * Could possibly be optimized with an interface flag if need |
761 | * be. For now using in6ifa_ifpforlinklocal. |
762 | */ |
763 | ia6 = in6ifa_ifpforlinklocal(ifp, 0); |
764 | if (ia6 == NULL) { |
765 | IN6_IFEXTRA(ifp)->netsig_len = 0; |
766 | bzero(&IN6_IFEXTRA(ifp)->netsig, |
767 | sizeof(IN6_IFEXTRA(ifp)->netsig)); |
768 | bzero(IN6_IFEXTRA(ifp)->nat64_prefixes, |
769 | sizeof(IN6_IFEXTRA(ifp)->nat64_prefixes)); |
770 | /* initialize NDP variables */ |
771 | nd6_ifattach(ifp); |
772 | } else { |
773 | VERIFY(ND_IFINFO(ifp)->initialized); |
774 | IFA_REMREF(&ia6->ia_ifa); |
775 | ia6 = NULL; |
776 | } |
777 | scope6_ifattach(ifp); |
778 | |
779 | /* initialize loopback interface address */ |
780 | if ((ifp->if_flags & IFF_LOOPBACK) != 0) { |
781 | error = in6_ifattach_loopback(ifp); |
782 | if (error != 0) { |
783 | log(LOG_ERR, "%s: in6_ifattach_loopback returned %d\n" , |
784 | __func__, error, ifp->if_name, |
785 | ifp->if_unit); |
786 | return (error); |
787 | } |
788 | } |
789 | |
790 | /* update dynamically. */ |
791 | if (in6_maxmtu < ifp->if_mtu) |
792 | in6_maxmtu = ifp->if_mtu; |
793 | |
794 | VERIFY(error == 0); |
795 | return (0); |
796 | } |
797 | |
798 | /* |
799 | * This routine is only meant to configure IPv6 Link Local |
800 | * addresses. |
801 | */ |
802 | int |
803 | in6_ifattach_aliasreq(struct ifnet *ifp, struct ifnet *altifp, |
804 | struct in6_aliasreq *ifra0) |
805 | { |
806 | int error; |
807 | struct in6_ifaddr *ia6; |
808 | struct in6_aliasreq ifra; |
809 | |
810 | error = in6_ifattach_prelim(ifp); |
811 | if (error != 0) |
812 | return (error); |
813 | |
814 | if (!ip6_auto_linklocal) |
815 | return (0); |
816 | |
817 | /* |
818 | * Assign a link-local address, only if there isn't one here already. |
819 | * XXX If we ever allow more than one LLA on the interface |
820 | * make sure that the corresponding prefix on the prefixlist |
821 | * is reference counted and the address's prefix pointer |
822 | * points to the prefix. |
823 | */ |
824 | ia6 = in6ifa_ifpforlinklocal(ifp, 0); |
825 | if (ia6 != NULL) { |
826 | IFA_REMREF(&ia6->ia_ifa); |
827 | return (0); |
828 | } |
829 | |
830 | bzero(&ifra, sizeof (ifra)); |
831 | |
832 | /* |
833 | * in6_update_ifa() does not use ifra_name, but we accurately set it |
834 | * for safety. |
835 | */ |
836 | strlcpy(ifra.ifra_name, if_name(ifp), sizeof (ifra.ifra_name)); |
837 | |
838 | /* Initialize the IPv6 interface address in our in6_aliasreq block */ |
839 | if (ifra0 != NULL) { |
840 | /* interface provided both addresses for us */ |
841 | struct sockaddr_in6 *sin6 = &ifra.ifra_addr; |
842 | struct in6_addr *in6 = &sin6->sin6_addr; |
843 | boolean_t ok = TRUE; |
844 | |
845 | bcopy(&ifra0->ifra_addr, sin6, sizeof (struct sockaddr_in6)); |
846 | |
847 | if (sin6->sin6_family != AF_INET6 || sin6->sin6_port != 0) |
848 | ok = FALSE; |
849 | if (ok && (in6->s6_addr16[0] != htons(0xfe80))) |
850 | ok = FALSE; |
851 | if (ok) { |
852 | if (sin6->sin6_scope_id == 0 && in6->s6_addr16[1] == 0) |
853 | in6->s6_addr16[1] = htons(ifp->if_index); |
854 | else if (sin6->sin6_scope_id != 0 && |
855 | sin6->sin6_scope_id != ifp->if_index) |
856 | ok = FALSE; |
857 | else if (in6->s6_addr16[1] != 0 && |
858 | ntohs(in6->s6_addr16[1]) != ifp->if_index) |
859 | ok = FALSE; |
860 | } |
861 | if (ok && (in6->s6_addr32[1] != 0)) |
862 | ok = FALSE; |
863 | if (!ok) |
864 | return (EINVAL); |
865 | } else { |
866 | ifra.ifra_addr.sin6_family = AF_INET6; |
867 | ifra.ifra_addr.sin6_len = sizeof (struct sockaddr_in6); |
868 | ifra.ifra_addr.sin6_addr.s6_addr16[0] = htons(0xfe80); |
869 | ifra.ifra_addr.sin6_addr.s6_addr16[1] = htons(ifp->if_index); |
870 | ifra.ifra_addr.sin6_addr.s6_addr32[1] = 0; |
871 | if ((ifp->if_flags & IFF_LOOPBACK) != 0) { |
872 | ifra.ifra_addr.sin6_addr.s6_addr32[2] = 0; |
873 | ifra.ifra_addr.sin6_addr.s6_addr32[3] = htonl(1); |
874 | } else { |
875 | if (in6_select_iid_from_all_hw(ifp, altifp, |
876 | &ifra.ifra_addr.sin6_addr) != 0) { |
877 | nd6log((LOG_ERR, "%s: no IID available\n" , |
878 | if_name(ifp))); |
879 | return (EADDRNOTAVAIL); |
880 | } |
881 | } |
882 | } |
883 | |
884 | if (in6_setscope(&ifra.ifra_addr.sin6_addr, ifp, NULL)) |
885 | return (EADDRNOTAVAIL); |
886 | |
887 | /* Set the prefix mask */ |
888 | ifra.ifra_prefixmask.sin6_len = sizeof (struct sockaddr_in6); |
889 | ifra.ifra_prefixmask.sin6_family = AF_INET6; |
890 | ifra.ifra_prefixmask.sin6_addr = in6mask64; |
891 | |
892 | /* link-local addresses should NEVER expire. */ |
893 | ifra.ifra_lifetime.ia6t_vltime = ND6_INFINITE_LIFETIME; |
894 | ifra.ifra_lifetime.ia6t_pltime = ND6_INFINITE_LIFETIME; |
895 | |
896 | /* Attach the link-local address */ |
897 | if (in6_ifattach_linklocal(ifp, &ifra) != 0) { |
898 | nd6log((LOG_INFO, |
899 | "%s: %s could not attach link-local address.\n" , |
900 | __func__, if_name(ifp))); |
901 | /* NB: not an error */ |
902 | } |
903 | |
904 | return (0); |
905 | } |
906 | |
907 | int |
908 | in6_ifattach_llcgareq(struct ifnet *ifp, struct in6_cgareq *llcgasr) |
909 | { |
910 | struct in6_aliasreq ifra; |
911 | struct in6_ifaddr *ia6 = NULL; |
912 | struct nd_ifinfo *ndi = NULL; |
913 | int error; |
914 | |
915 | VERIFY(llcgasr != NULL); |
916 | |
917 | error = in6_ifattach_prelim(ifp); |
918 | if (error != 0) |
919 | return (error); |
920 | |
921 | if (!ip6_auto_linklocal) |
922 | return (0); |
923 | |
924 | if (nd6_send_opstate == ND6_SEND_OPMODE_DISABLED) |
925 | return (ENXIO); |
926 | |
927 | ndi = ND_IFINFO(ifp); |
928 | VERIFY(ndi != NULL && ndi->initialized); |
929 | if ((ndi->flags & ND6_IFF_INSECURE) != 0) { |
930 | return (ENXIO); |
931 | } |
932 | |
933 | /* |
934 | * Assign a link-local address, only if there isn't one here already. |
935 | * XXX If we ever allow more than one LLA on the interface |
936 | * make sure that the corresponding prefix on the prefixlist |
937 | * is reference counted and the address's prefix pointer |
938 | * points to the prefix. |
939 | */ |
940 | ia6 = in6ifa_ifpforlinklocal(ifp, 0); |
941 | if (ia6 != NULL) { |
942 | IFA_REMREF(&ia6->ia_ifa); |
943 | return (0); |
944 | } |
945 | |
946 | bzero(&ifra, sizeof (ifra)); |
947 | strlcpy(ifra.ifra_name, if_name(ifp), sizeof (ifra.ifra_name)); |
948 | |
949 | ifra.ifra_addr.sin6_family = AF_INET6; |
950 | ifra.ifra_addr.sin6_len = sizeof (struct sockaddr_in6); |
951 | ifra.ifra_addr.sin6_addr.s6_addr16[0] = htons(0xfe80); |
952 | ifra.ifra_addr.sin6_addr.s6_addr16[1] = htons(ifp->if_index); |
953 | ifra.ifra_addr.sin6_addr.s6_addr32[1] = 0; |
954 | ifra.ifra_flags = IN6_IFF_SECURED; |
955 | |
956 | in6_cga_node_lock(); |
957 | if (in6_cga_generate(&llcgasr->cgar_cgaprep, 0, |
958 | &ifra.ifra_addr.sin6_addr)) { |
959 | in6_cga_node_unlock(); |
960 | return (EADDRNOTAVAIL); |
961 | } |
962 | in6_cga_node_unlock(); |
963 | |
964 | if (in6_setscope(&ifra.ifra_addr.sin6_addr, ifp, NULL)) |
965 | return (EADDRNOTAVAIL); |
966 | |
967 | /* Set the prefix mask */ |
968 | ifra.ifra_prefixmask.sin6_len = sizeof (struct sockaddr_in6); |
969 | ifra.ifra_prefixmask.sin6_family = AF_INET6; |
970 | ifra.ifra_prefixmask.sin6_addr = in6mask64; |
971 | |
972 | /* |
973 | * link-local addresses should NEVER expire, but cryptographic |
974 | * ones may have finite preferred lifetime [if it's important to |
975 | * keep them from being used by applications as persistent device |
976 | * identifiers]. |
977 | */ |
978 | ifra.ifra_lifetime.ia6t_vltime = ND6_INFINITE_LIFETIME; |
979 | ifra.ifra_lifetime.ia6t_pltime = llcgasr->cgar_lifetime.ia6t_pltime; |
980 | |
981 | /* Attach the link-local address */ |
982 | if (in6_ifattach_linklocal(ifp, &ifra) != 0) { |
983 | /* NB: not an error */ |
984 | nd6log((LOG_INFO, |
985 | "%s: %s could not attach link-local address.\n" , |
986 | __func__, if_name(ifp))); |
987 | } |
988 | |
989 | VERIFY(error == 0); |
990 | return (error); |
991 | } |
992 | |
993 | /* |
994 | * NOTE: in6_ifdetach() does not support loopback if at this moment. |
995 | */ |
996 | void |
997 | in6_ifdetach(struct ifnet *ifp) |
998 | { |
999 | struct in6_ifaddr *ia, *oia; |
1000 | struct ifaddr *ifa; |
1001 | struct rtentry *rt; |
1002 | struct sockaddr_in6 sin6; |
1003 | struct in6_multi_mship *imm; |
1004 | int unlinked; |
1005 | |
1006 | LCK_MTX_ASSERT(nd6_mutex, LCK_MTX_ASSERT_NOTOWNED); |
1007 | |
1008 | /* remove neighbor management table */ |
1009 | nd6_purge(ifp); |
1010 | |
1011 | if (LLTABLE6(ifp)) |
1012 | lltable_free(LLTABLE6(ifp)); |
1013 | |
1014 | /* nuke any of IPv6 addresses we have */ |
1015 | lck_rw_lock_exclusive(&in6_ifaddr_rwlock); |
1016 | ia = in6_ifaddrs; |
1017 | while (ia != NULL) { |
1018 | if (ia->ia_ifa.ifa_ifp != ifp) { |
1019 | ia = ia->ia_next; |
1020 | continue; |
1021 | } |
1022 | IFA_ADDREF(&ia->ia_ifa); /* for us */ |
1023 | lck_rw_done(&in6_ifaddr_rwlock); |
1024 | in6_purgeaddr(&ia->ia_ifa); |
1025 | IFA_REMREF(&ia->ia_ifa); /* for us */ |
1026 | lck_rw_lock_exclusive(&in6_ifaddr_rwlock); |
1027 | /* |
1028 | * Purging the address caused in6_ifaddr_rwlock |
1029 | * to be dropped and reacquired; |
1030 | * therefore search again from the beginning |
1031 | * of in6_ifaddrs list. |
1032 | */ |
1033 | ia = in6_ifaddrs; |
1034 | } |
1035 | lck_rw_done(&in6_ifaddr_rwlock); |
1036 | |
1037 | ifnet_lock_exclusive(ifp); |
1038 | |
1039 | /* undo everything done by in6_ifattach(), just in case */ |
1040 | ifa = TAILQ_FIRST(&ifp->if_addrlist); |
1041 | while (ifa != NULL) { |
1042 | IFA_LOCK(ifa); |
1043 | if (ifa->ifa_addr->sa_family != AF_INET6 || |
1044 | !IN6_IS_ADDR_LINKLOCAL(&satosin6(&ifa->ifa_addr)-> |
1045 | sin6_addr)) { |
1046 | IFA_UNLOCK(ifa); |
1047 | ifa = TAILQ_NEXT(ifa, ifa_list); |
1048 | continue; |
1049 | } |
1050 | |
1051 | ia = (struct in6_ifaddr *)ifa; |
1052 | |
1053 | /* hold a reference for this routine */ |
1054 | IFA_ADDREF_LOCKED(ifa); |
1055 | /* remove from the linked list */ |
1056 | if_detach_ifa(ifp, ifa); |
1057 | IFA_UNLOCK(ifa); |
1058 | |
1059 | /* |
1060 | * Leaving the multicast group(s) may involve freeing the |
1061 | * link address multicast structure(s) for the interface, |
1062 | * which is protected by ifnet lock. To avoid violating |
1063 | * lock ordering, we must drop ifnet lock before doing so. |
1064 | * The ifa won't go away since we held a refcnt above. |
1065 | */ |
1066 | ifnet_lock_done(ifp); |
1067 | |
1068 | /* |
1069 | * We have to do this work manually here instead of calling |
1070 | * in6_purgeaddr() since in6_purgeaddr() uses the RTM_HOST flag. |
1071 | */ |
1072 | |
1073 | /* |
1074 | * leave from multicast groups we have joined for the interface |
1075 | */ |
1076 | IFA_LOCK(ifa); |
1077 | while ((imm = ia->ia6_memberships.lh_first) != NULL) { |
1078 | LIST_REMOVE(imm, i6mm_chain); |
1079 | IFA_UNLOCK(ifa); |
1080 | in6_leavegroup(imm); |
1081 | IFA_LOCK(ifa); |
1082 | } |
1083 | |
1084 | /* remove from the routing table */ |
1085 | if (ia->ia_flags & IFA_ROUTE) { |
1086 | IFA_UNLOCK(ifa); |
1087 | rt = rtalloc1((struct sockaddr *)&ia->ia_addr, 0, 0); |
1088 | if (rt != NULL) { |
1089 | (void) rtrequest(RTM_DELETE, |
1090 | (struct sockaddr *)&ia->ia_addr, |
1091 | (struct sockaddr *)&ia->ia_addr, |
1092 | (struct sockaddr *)&ia->ia_prefixmask, |
1093 | rt->rt_flags, (struct rtentry **)0); |
1094 | rtfree(rt); |
1095 | } |
1096 | } else { |
1097 | IFA_UNLOCK(ifa); |
1098 | } |
1099 | |
1100 | /* also remove from the IPv6 address chain(itojun&jinmei) */ |
1101 | unlinked = 1; |
1102 | oia = ia; |
1103 | lck_rw_lock_exclusive(&in6_ifaddr_rwlock); |
1104 | if (oia == (ia = in6_ifaddrs)) { |
1105 | in6_ifaddrs = ia->ia_next; |
1106 | } else { |
1107 | while (ia->ia_next && (ia->ia_next != oia)) |
1108 | ia = ia->ia_next; |
1109 | if (ia->ia_next) { |
1110 | ia->ia_next = oia->ia_next; |
1111 | } else { |
1112 | nd6log((LOG_ERR, |
1113 | "%s: didn't unlink in6ifaddr from " |
1114 | "list\n" , if_name(ifp))); |
1115 | unlinked = 0; |
1116 | } |
1117 | } |
1118 | lck_rw_done(&in6_ifaddr_rwlock); |
1119 | |
1120 | ifa = &oia->ia_ifa; |
1121 | /* |
1122 | * release another refcnt for the link from in6_ifaddrs. |
1123 | * Do this only if it's not already unlinked in the event |
1124 | * that we lost the race, since in6_ifaddr_rwlock was |
1125 | * momentarily dropped above. |
1126 | */ |
1127 | if (unlinked) |
1128 | IFA_REMREF(ifa); |
1129 | /* release reference held for this routine */ |
1130 | IFA_REMREF(ifa); |
1131 | |
1132 | /* |
1133 | * This is suboptimal, but since we dropped ifnet lock above |
1134 | * the list might have changed. Repeat the search from the |
1135 | * beginning until we find the first eligible IPv6 address. |
1136 | */ |
1137 | ifnet_lock_exclusive(ifp); |
1138 | ifa = TAILQ_FIRST(&ifp->if_addrlist); |
1139 | } |
1140 | ifnet_lock_done(ifp); |
1141 | |
1142 | /* invalidate route caches */ |
1143 | routegenid_inet6_update(); |
1144 | |
1145 | /* |
1146 | * remove neighbor management table. we call it twice just to make |
1147 | * sure we nuke everything. maybe we need just one call. |
1148 | * XXX: since the first call did not release addresses, some prefixes |
1149 | * might remain. We should call nd6_purge() again to release the |
1150 | * prefixes after removing all addresses above. |
1151 | * (Or can we just delay calling nd6_purge until at this point?) |
1152 | */ |
1153 | nd6_purge(ifp); |
1154 | |
1155 | /* remove route to link-local allnodes multicast (ff02::1) */ |
1156 | bzero(&sin6, sizeof (sin6)); |
1157 | sin6.sin6_len = sizeof (struct sockaddr_in6); |
1158 | sin6.sin6_family = AF_INET6; |
1159 | sin6.sin6_addr = in6addr_linklocal_allnodes; |
1160 | sin6.sin6_addr.s6_addr16[1] = htons(ifp->if_index); |
1161 | rt = rtalloc1((struct sockaddr *)&sin6, 0, 0); |
1162 | if (rt != NULL) { |
1163 | RT_LOCK(rt); |
1164 | if (rt->rt_ifp == ifp) { |
1165 | /* |
1166 | * Prevent another thread from modifying rt_key, |
1167 | * rt_gateway via rt_setgate() after the rt_lock |
1168 | * is dropped by marking the route as defunct. |
1169 | */ |
1170 | rt->rt_flags |= RTF_CONDEMNED; |
1171 | RT_UNLOCK(rt); |
1172 | (void) rtrequest(RTM_DELETE, rt_key(rt), rt->rt_gateway, |
1173 | rt_mask(rt), rt->rt_flags, 0); |
1174 | } else { |
1175 | RT_UNLOCK(rt); |
1176 | } |
1177 | rtfree(rt); |
1178 | } |
1179 | } |
1180 | |
1181 | void |
1182 | in6_iid_mktmp(struct ifnet *ifp, u_int8_t *retbuf, const u_int8_t *baseid, |
1183 | int generate) |
1184 | { |
1185 | u_int8_t nullbuf[8]; |
1186 | struct nd_ifinfo *ndi = ND_IFINFO(ifp); |
1187 | |
1188 | VERIFY(ndi != NULL && ndi->initialized); |
1189 | lck_mtx_lock(&ndi->lock); |
1190 | bzero(nullbuf, sizeof (nullbuf)); |
1191 | if (bcmp(ndi->randomid, nullbuf, sizeof (nullbuf)) == 0) { |
1192 | /* we've never created a random ID. Create a new one. */ |
1193 | generate = 1; |
1194 | } |
1195 | |
1196 | if (generate) { |
1197 | bcopy(baseid, ndi->randomseed1, sizeof (ndi->randomseed1)); |
1198 | |
1199 | /* in6_generate_tmp_iid will update seedn and buf */ |
1200 | (void) in6_generate_tmp_iid(ndi->randomseed0, ndi->randomseed1, |
1201 | ndi->randomid); |
1202 | } |
1203 | |
1204 | bcopy(ndi->randomid, retbuf, 8); |
1205 | lck_mtx_unlock(&ndi->lock); |
1206 | } |
1207 | |
1208 | void |
1209 | in6_tmpaddrtimer(void *arg) |
1210 | { |
1211 | #pragma unused(arg) |
1212 | struct ifnet *ifp = NULL; |
1213 | struct nd_ifinfo *ndi = NULL; |
1214 | u_int8_t nullbuf[8]; |
1215 | |
1216 | timeout(in6_tmpaddrtimer, (caddr_t)0, (ip6_temp_preferred_lifetime - |
1217 | ip6_desync_factor - ip6_temp_regen_advance) * hz); |
1218 | |
1219 | bzero(nullbuf, sizeof (nullbuf)); |
1220 | ifnet_head_lock_shared(); |
1221 | for (ifp = ifnet_head.tqh_first; ifp; |
1222 | ifp = ifp->if_link.tqe_next) { |
1223 | ndi = ND_IFINFO(ifp); |
1224 | if ((NULL == ndi) || (FALSE == ndi->initialized)) { |
1225 | continue; |
1226 | } |
1227 | lck_mtx_lock(&ndi->lock); |
1228 | if (bcmp(ndi->randomid, nullbuf, sizeof (nullbuf)) != 0) { |
1229 | /* |
1230 | * We've been generating a random ID on this interface. |
1231 | * Create a new one. |
1232 | */ |
1233 | (void) in6_generate_tmp_iid(ndi->randomseed0, |
1234 | ndi->randomseed1, ndi->randomid); |
1235 | } |
1236 | lck_mtx_unlock(&ndi->lock); |
1237 | } |
1238 | ifnet_head_done(); |
1239 | } |
1240 | |