Page MenuHomeFreeBSD
Differential D45567

wall(1): cappsicumizing wall
Needs ReviewPublic
Actions

Authored by hanslu952_gmail.com on Jun 12 2024, 7:53 AM.
Tags
None
Referenced Files
F114861912: D45567.id139980.diff
Thu, Apr 17, 8:00 PM
Unknown Object (File)
Wed, Apr 16, 8:35 PM
Unknown Object (File)
Tue, Apr 15, 12:28 PM
Unknown Object (File)
Wed, Mar 19, 12:03 PM
Unknown Object (File)
Mar 4 2025, 1:53 PM
Unknown Object (File)
Feb 23 2025, 12:53 PM
Unknown Object (File)
Feb 23 2025, 12:44 PM
Unknown Object (File)
Feb 13 2025, 5:58 PM
View All Files
Subscribers
imp
jonathan

Details

Reviewers
oshogbo
lwhsu
Summary

The first problem is to use pdfork.
because fork() is disallowed in capability mode,
we use pdfork() to replace ,the semantic is same as rwhod
The second problem is to limit the file descriptor used by open.
it sets up a specific right (write) for a file descriptor and then
attempts to enforce the limitation. If the operation fails,
the program will terminate with a specific error message

Sponsored by: Google, Inc. (GSoC 2024)

Test Plan

Nonblocking test

setup a c program to fill up the pipe of /dev/pts/$any num
the program code is as follows
https://hackmd.io/@black13524/ryClhYgnA

$ cc -o nonblocking nonblocking.c
$ ./nonblocking
$ make 
$ ktrace ./wall-test msg
$ kdump -f ktrace.out

normal test

$ make 
$ ktrace ./wall-test msg
$ kdump -f ktrace.out

Set up enotcapable to get coredump

$ sysctl kern.trap_enotcap=1
$ sysctl kern.corefile= /tmp/coredumps/%N.core
$ gdb executable corefile

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 59172
Build 56059: arc lint + arc unit

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes
Herald added a subscriber: jonathan. · View Herald TranscriptJun 12 2024, 7:53 AM
hanslu952_gmail.com requested review of this revision.Jun 12 2024, 7:53 AM
Harbormaster completed remote builds in B58150: Diff 139743.Jun 12 2024, 7:53 AM
oshogbo requested changes to this revision.Jun 13 2024, 4:30 PM

In the "Test plan" please provide an example of testing blocking (forked version) and unblocked version.

usr.bin/wall/ttymsg.c
58

Why this has to be global?

66–67

I guess we don't need foked and fdp.

132

Does this code complies? I think you have a typo in variable name.

usr.bin/wall/wall.c
123

No need for extra line.

187

I think we have to enter capability mode a little bit earlier then before exit.
The cap_enter/caph_enter function is a barrier which says here starts a "untrusted part", know you are protecting nothing.

This revision now requires changes to proceed.Jun 13 2024, 4:30 PM
hanslu952_gmail.com updated this revision to Diff 139972.Jun 19 2024, 8:27 AM
  • Fix pdfork and take off unneccessary code
  • remove line break
Harbormaster completed remote builds in B58230: Diff 139972.Jun 19 2024, 8:27 AM
hanslu952_gmail.com edited the test plan for this revision. (Show Details)Jun 19 2024, 8:29 AM
hanslu952_gmail.com updated this revision to Diff 139973.Jun 19 2024, 8:38 AM
  • fix format of ttymsg
Harbormaster completed remote builds in B58231: Diff 139973.Jun 19 2024, 8:38 AM
oshogbo added a comment.Jun 19 2024, 11:41 AM

Hym I don't think this is complete patch.
Can you try to regenerate git diff -U99999 first_commit^ (the ^ is important)

hanslu952_gmail.com updated this revision to Diff 139980.Jun 19 2024, 1:53 PM

Reupload the patch

Harbormaster completed remote builds in B58233: Diff 139980.Jun 19 2024, 1:53 PM
oshogbo added a comment.Jun 19 2024, 2:05 PM

It still doesn't seem right.

hanslu952_gmail.com updated this revision to Diff 139981.Jun 19 2024, 2:17 PM

Trying on more earlier version

Harbormaster completed remote builds in B58234: Diff 139981.Jun 19 2024, 2:18 PM
hanslu952_gmail.com updated this revision to Diff 139982.Jun 19 2024, 2:23 PM

Sorry I found it

Harbormaster completed remote builds in B58235: Diff 139982.Jun 19 2024, 2:23 PM
lwhsu added a comment.Jun 19 2024, 3:37 PM

There are many whitespace changes, if possible, please don't change the original ones (even they are wrong) in a feature addition change, or it would cause unnecessary review complexity.

oshogbo added inline comments.Jun 19 2024, 3:43 PM
usr.bin/wall/ttymsg.c
126

Why we are entering capability mode here?

132

How can this work?
You are reassigning fd (which was the open file) to a process descriptor.

hanslu952_gmail.com updated this revision to Diff 140509.Jul 3 2024, 2:21 PM
This comment was removed by hanslu952_gmail.com.
Harbormaster completed remote builds in B58476: Diff 140509.Jul 3 2024, 2:21 PM
hanslu952_gmail.com updated this revision to Diff 140510.Jul 3 2024, 2:30 PM

path sandboxing and enter capability mode earlier

  • Reupload due to including wrong commit
Harbormaster completed remote builds in B58477: Diff 140510.Jul 3 2024, 2:30 PM
hanslu952_gmail.com updated this revision to Diff 140726.Jul 9 2024, 2:47 PM
  • rearrangement and timecache
Harbormaster completed remote builds in B58587: Diff 140726.Jul 9 2024, 2:47 PM
oshogbo added inline comments.Jul 10 2024, 6:06 AM
usr.bin/wall/ttymsg.c
59
67

We can combine 3 int variables to a single line.

69

Why we need ./ ?

96

So WRONLY or RDONLY or maybe O_RDWR?

100
127–131

How removed forked change the process menagment?
How many child process will have this process before and after this change.

usr.bin/wall/wall.c
74
83

Why?

87–88
159
221
hanslu952_gmail.com added inline comments.Jul 12 2024, 10:38 AM
usr.bin/wall/ttymsg.c
127–131

each parent still creates one child,but the number of parent process grows exponentially when pdfork is called more than once.
like:
once is the same
when pdfork is called twice
we will have five parent ,each parent create one child

oshogbo added inline comments.Jul 12 2024, 11:41 AM
usr.bin/wall/ttymsg.c
127–131

I don't think this what we want, no?

hanslu952_gmail.com added inline comments.Jul 12 2024, 1:09 PM
usr.bin/wall/ttymsg.c
69

to get the needed file without using absolute path

oshogbo added inline comments.Jul 12 2024, 1:17 PM
usr.bin/wall/ttymsg.c
69

But file and ./file are both relative.

hanslu952_gmail.com updated this revision to Diff 140858.Jul 13 2024, 7:52 AM
  • add back forked and fix format
Harbormaster completed remote builds in B58630: Diff 140858.Jul 13 2024, 7:52 AM
hanslu952_gmail.com retitled this revision from Capsicumizing wall to wall(1): cappsicumizing wall.Jul 17 2024, 3:53 PM
hanslu952_gmail.com edited the test plan for this revision. (Show Details)Aug 5 2024, 5:53 PM
hanslu952_gmail.com edited the summary of this revision. (Show Details)Aug 15 2024, 5:31 PM
hanslu952_gmail.com edited the test plan for this revision. (Show Details)
oshogbo added inline comments.Aug 20 2024, 12:49 PM
usr.bin/wall/ttymsg.c
66–67

Why fd2? Where is fd1?

132

Why close dfd?

136

Why dfd?
Where do we clean fd2?

149

Why dfd?

160

Why dfd?

usr.bin/wall/wall.c
78

Why fd2? Where is fd1?

86

Why we need these transformations?

186

Wasn't devfd was closed in ttymsg?

hanslu952_gmail.com updated this revision to Diff 142272.Aug 20 2024, 3:55 PM
hanslu952_gmail.com edited the test plan for this revision. (Show Details)
  • fix fd problem
Harbormaster completed remote builds in B59111: Diff 142272.Aug 20 2024, 3:55 PM
hanslu952_gmail.com edited the test plan for this revision. (Show Details)Aug 20 2024, 3:56 PM
oshogbo added inline comments.Aug 22 2024, 7:30 PM
usr.bin/wall/ttymsg.c
86

With got we cannot get these errors?

86

sorry...

With "openat" we cannot get these errors?

97

Why have we changed the way we return errors?

133

Why we removed this?

134

Why have you changed identation?

135

Where are we closing the process descriptor?

159

Why we remove this part?

usr.bin/wall/wall.c
119

I guess /dev/pts?

hanslu952_gmail.com added inline comments.Aug 23 2024, 11:52 AM
usr.bin/wall/ttymsg.c
135

I think _exit() will close the process?

oshogbo added inline comments.Aug 23 2024, 12:35 PM
usr.bin/wall/ttymsg.c
135

Which one?
Which one has a process descriptor?

hanslu952_gmail.com added inline comments.Aug 23 2024, 1:55 PM
usr.bin/wall/ttymsg.c
135

It seems not in tty,in main after closing devfd?

hanslu952_gmail.com added inline comments.Aug 24 2024, 6:00 PM
usr.bin/wall/ttymsg.c
135

Oh sorry,I used gdb wrong ,It wont exit.I found that it should exit at 160 - 161,so I will add back it

hanslu952_gmail.com updated this revision to Diff 142410.Aug 24 2024, 6:26 PM
  • add back forked and fix returned errors
Harbormaster completed remote builds in B59172: Diff 142410.Aug 24 2024, 6:26 PM
hanslu952_gmail.com edited the test plan for this revision. (Show Details)Aug 31 2024, 12:34 PM

Revision Contents
Changeset List

PathSize
usr.bin/
wall/
2 lines
25 lines
56 lines

Diff 142410

View Options

usr.bin/wall/ttymsg.h

Show First 20 Lines • Show All 949 Lines • ▼ Show 20 Lines
} }
/* /*
* IP socket option processing. * IP socket option processing.
*/ */
int int
ip_ctloutput(struct socket *so, struct sockopt *sopt) ip_ctloutput(struct socket *so, struct sockopt *sopt)
{ {
struct inpcb *inp = sotoinpcb(so); struct inpcb *inp;
struct mbuf *options;
int error, optval; int error, optval;
bool rlock = false;
bool wlock = false;
#ifdef RSS #ifdef RSS
uint32_t rss_bucket; uint32_t rss_bucket;
int retval; int retval;
#endif #endif
SOCK_LOCK(so);
inp = sotoinpcb(so);
if (inp == NULL) {
SOCK_UNLOCK(so);
return ENOTCONN;
}
in_pcbref(inp);
SOCK_UNLOCK(so);
error = optval = 0; error = optval = 0;
if (sopt->sopt_level != IPPROTO_IP) { if (sopt->sopt_level != IPPROTO_IP) {
error = EINVAL; error = EINVAL;
if (sopt->sopt_level == SOL_SOCKET && if (sopt->sopt_level == SOL_SOCKET &&
sopt->sopt_dir == SOPT_SET) { sopt->sopt_dir == SOPT_SET) {
switch (sopt->sopt_name) { switch (sopt->sopt_name) {
case SO_REUSEADDR: case SO_REUSEADDR:
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
if ((so->so_options & SO_REUSEADDR) != 0) if ((so->so_options & SO_REUSEADDR) != 0)
inp->inp_flags2 |= INP_REUSEADDR; inp->inp_flags2 |= INP_REUSEADDR;
else else
inp->inp_flags2 &= ~INP_REUSEADDR; inp->inp_flags2 &= ~INP_REUSEADDR;
INP_WUNLOCK(inp);
error = 0; error = 0;
break; break;
case SO_REUSEPORT: case SO_REUSEPORT:
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
if ((so->so_options & SO_REUSEPORT) != 0) if ((so->so_options & SO_REUSEPORT) != 0)
inp->inp_flags2 |= INP_REUSEPORT; inp->inp_flags2 |= INP_REUSEPORT;
else else
inp->inp_flags2 &= ~INP_REUSEPORT; inp->inp_flags2 &= ~INP_REUSEPORT;
INP_WUNLOCK(inp);
error = 0; error = 0;
break; break;
case SO_SETFIB: case SO_SETFIB:
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
inp->inp_inc.inc_fibnum = so->so_fibnum; inp->inp_inc.inc_fibnum = so->so_fibnum;
INP_WUNLOCK(inp);
error = 0; error = 0;
break; break;
case SO_MAX_PACING_RATE: case SO_MAX_PACING_RATE:
#ifdef RATELIMIT #ifdef RATELIMIT
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
inp->inp_flags2 |= INP_RATE_LIMIT_CHANGED; inp->inp_flags2 |= INP_RATE_LIMIT_CHANGED;
INP_WUNLOCK(inp);
error = 0; error = 0;
#else #else
error = EOPNOTSUPP; error = EOPNOTSUPP;
#endif #endif
break; break;
default: default:
break; break;
} }
} }
if (!wlock)
INP_WLOCK(inp);
if (!in_pcbrele_wlocked(inp))
INP_WUNLOCK(inp);
return (error); return (error);
} }
switch (sopt->sopt_dir) { switch (sopt->sopt_dir) {
case SOPT_SET: case SOPT_SET:
switch (sopt->sopt_name) { switch (sopt->sopt_name) {
case IP_OPTIONS: case IP_OPTIONS:
#ifdef notyet #ifdef notyet
Show All 13 Lines#endif
m->m_len = sopt->sopt_valsize; m->m_len = sopt->sopt_valsize;
error = sooptcopyin(sopt, mtod(m, char *), m->m_len, error = sooptcopyin(sopt, mtod(m, char *), m->m_len,
m->m_len); m->m_len);
if (error) { if (error) {
m_free(m); m_free(m);
break; break;
} }
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
error = ip_pcbopts(inp, sopt->sopt_name, m); error = ip_pcbopts(inp, sopt->sopt_name, m);
INP_WUNLOCK(inp); break;
return (error);
} }
case IP_BINDANY: case IP_BINDANY:
if (sopt->sopt_td != NULL) { if (sopt->sopt_td != NULL) {
error = priv_check(sopt->sopt_td, error = priv_check(sopt->sopt_td,
PRIV_NETINET_BINDANY); PRIV_NETINET_BINDANY);
if (error) if (error)
break; break;
Show All 37 Lines#endif
if (optval >= 0 && optval <= MAXTTL) if (optval >= 0 && optval <= MAXTTL)
inp->inp_ip_minttl = optval; inp->inp_ip_minttl = optval;
else else
error = EINVAL; error = EINVAL;
break; break;
#define OPTSET(bit) do { \ #define OPTSET(bit) do { \
INP_WLOCK(inp); \ INP_WLOCK(inp); \
wlock = true; \
if (optval) \ if (optval) \
inp->inp_flags |= bit; \ inp->inp_flags |= bit; \
else \ else \
inp->inp_flags &= ~bit; \ inp->inp_flags &= ~bit; \
INP_WUNLOCK(inp); \
} while (0) } while (0)
#define OPTSET2(bit, val) do { \ #define OPTSET2(bit, val) do { \
INP_WLOCK(inp); \ INP_WLOCK(inp); \
wlock = true; \
if (val) \ if (val) \
inp->inp_flags2 |= bit; \ inp->inp_flags2 |= bit; \
else \ else \
inp->inp_flags2 &= ~bit; \ inp->inp_flags2 &= ~bit; \
INP_WUNLOCK(inp); \
} while (0) } while (0)
case IP_RECVOPTS: case IP_RECVOPTS:
OPTSET(INP_RECVOPTS); OPTSET(INP_RECVOPTS);
break; break;
case IP_RECVRETOPTS: case IP_RECVRETOPTS:
OPTSET(INP_RECVRETOPTS); OPTSET(INP_RECVRETOPTS);
▲ Show 20 Lines • Show All 78 Lines • ▼ Show 20 Lines#undef OPTSET2
case IP_PORTRANGE: case IP_PORTRANGE:
error = sooptcopyin(sopt, &optval, sizeof optval, error = sooptcopyin(sopt, &optval, sizeof optval,
sizeof optval); sizeof optval);
if (error) if (error)
break; break;
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
switch (optval) { switch (optval) {
case IP_PORTRANGE_DEFAULT: case IP_PORTRANGE_DEFAULT:
inp->inp_flags &= ~(INP_LOWPORT); inp->inp_flags &= ~(INP_LOWPORT);
inp->inp_flags &= ~(INP_HIGHPORT); inp->inp_flags &= ~(INP_HIGHPORT);
break; break;
case IP_PORTRANGE_HIGH: case IP_PORTRANGE_HIGH:
inp->inp_flags &= ~(INP_LOWPORT); inp->inp_flags &= ~(INP_LOWPORT);
inp->inp_flags |= INP_HIGHPORT; inp->inp_flags |= INP_HIGHPORT;
break; break;
case IP_PORTRANGE_LOW: case IP_PORTRANGE_LOW:
inp->inp_flags &= ~(INP_HIGHPORT); inp->inp_flags &= ~(INP_HIGHPORT);
inp->inp_flags |= INP_LOWPORT; inp->inp_flags |= INP_LOWPORT;
break; break;
default: default:
error = EINVAL; error = EINVAL;
break; break;
} }
INP_WUNLOCK(inp);
break; break;
#if defined(IPSEC) || defined(IPSEC_SUPPORT) #if defined(IPSEC) || defined(IPSEC_SUPPORT)
case IP_IPSEC_POLICY: case IP_IPSEC_POLICY:
if (IPSEC_ENABLED(ipv4)) { if (IPSEC_ENABLED(ipv4)) {
INP_WLOCK(inp);
wlock = true;
error = IPSEC_PCBCTL(ipv4, inp, sopt); error = IPSEC_PCBCTL(ipv4, inp, sopt);
if (error)
wlock = false;
break; break;
} }
/* FALLTHROUGH */ /* FALLTHROUGH */
#endif /* IPSEC */ #endif /* IPSEC */
default: default:
error = ENOPROTOOPT; error = ENOPROTOOPT;
break; break;
} }
break; break;
case SOPT_GET: case SOPT_GET:
switch (sopt->sopt_name) { switch (sopt->sopt_name) {
case IP_OPTIONS: case IP_OPTIONS:
case IP_RETOPTS: case IP_RETOPTS:
if (inp->inp_options) if (inp->inp_options) {
aeUnsubmitted
Not Done
Inline Actions

Is it necessary to acquire wlock for getsockopt?

ae: Is it necessary to acquire wlock for getsockopt?
jason_eggnet.comAuthorUnsubmitted
Not Done
Inline Actions

For some but not all. I'll take a second pass at getsockopt.

jason_eggnet.com: For some but not all. I'll take a second pass at getsockopt.
options = malloc(sopt->sopt_valsize, M_TEMP, M_WAITOK|M_ZERO);
INP_RLOCK(inp);
bcopy(inp->inp_options, options, min(inp->inp_options->m_len, sopt->sopt_valsize));
if (!in_pcbrele_rlocked(inp))
INP_RUNLOCK(inp);
error = sooptcopyout(sopt, error = sooptcopyout(sopt,
mtod(inp->inp_options, mtod(options,
char *), char *),
inp->inp_options->m_len); options->m_len);
else return (error);
} else
sopt->sopt_valsize = 0; sopt->sopt_valsize = 0;
break; break;
case IP_TOS: case IP_TOS:
case IP_TTL: case IP_TTL:
case IP_MINTTL: case IP_MINTTL:
case IP_RECVOPTS: case IP_RECVOPTS:
case IP_RECVRETOPTS: case IP_RECVRETOPTS:
▲ Show 20 Lines • Show All 51 Lines • ▼ Show 20 Lines#define OPTBIT2(bit) (inp->inp_flags2 & bit ? 1 : 0)
optval = OPTBIT(INP_RECVTTL); optval = OPTBIT(INP_RECVTTL);
break; break;
case IP_RECVIF: case IP_RECVIF:
optval = OPTBIT(INP_RECVIF); optval = OPTBIT(INP_RECVIF);
break; break;
case IP_PORTRANGE: case IP_PORTRANGE:
INP_RLOCK(inp);
rlock = true;
if (inp->inp_flags & INP_HIGHPORT) if (inp->inp_flags & INP_HIGHPORT)
optval = IP_PORTRANGE_HIGH; optval = IP_PORTRANGE_HIGH;
else if (inp->inp_flags & INP_LOWPORT) else if (inp->inp_flags & INP_LOWPORT)
optval = IP_PORTRANGE_LOW; optval = IP_PORTRANGE_LOW;
else else
optval = 0; optval = 0;
break; break;
Show All 15 Lines#define OPTBIT2(bit) (inp->inp_flags2 & bit ? 1 : 0)
case IP_FLOWTYPE: case IP_FLOWTYPE:
optval = inp->inp_flowtype; optval = inp->inp_flowtype;
break; break;
case IP_RECVFLOWID: case IP_RECVFLOWID:
optval = OPTBIT2(INP_RECVFLOWID); optval = OPTBIT2(INP_RECVFLOWID);
break; break;
#ifdef RSS #ifdef RSS
case IP_RSSBUCKETID: case IP_RSSBUCKETID:
INP_RLOCK(inp);
rlock = true;
retval = rss_hash2bucket(inp->inp_flowid, retval = rss_hash2bucket(inp->inp_flowid,
inp->inp_flowtype, inp->inp_flowtype,
&rss_bucket); &rss_bucket);
if (retval == 0) if (retval == 0)
optval = rss_bucket; optval = rss_bucket;
else else
error = EINVAL; error = EINVAL;
break; break;
case IP_RECVRSSBUCKETID: case IP_RECVRSSBUCKETID:
optval = OPTBIT2(INP_RECVRSSBUCKETID); optval = OPTBIT2(INP_RECVRSSBUCKETID);
break; break;
#endif #endif
case IP_BINDMULTI: case IP_BINDMULTI:
optval = OPTBIT2(INP_BINDMULTI); optval = OPTBIT2(INP_BINDMULTI);
break; break;
} }
if (!rlock)
INP_RLOCK(inp);
if (!in_pcbrele_rlocked(inp))
INP_RUNLOCK(inp);
error = sooptcopyout(sopt, &optval, sizeof optval); error = sooptcopyout(sopt, &optval, sizeof optval);
break; return (error);
/* /*
* Multicast socket options are processed by the in_mcast * Multicast socket options are processed by the in_mcast
* module. * module.
*/ */
case IP_MULTICAST_IF: case IP_MULTICAST_IF:
case IP_MULTICAST_VIF: case IP_MULTICAST_VIF:
case IP_MULTICAST_TTL: case IP_MULTICAST_TTL:
case IP_MULTICAST_LOOP: case IP_MULTICAST_LOOP:
case IP_MSFILTER: case IP_MSFILTER:
error = inp_getmoptions(inp, sopt); error = inp_getmoptions(inp, sopt);
break; break;
#if defined(IPSEC) || defined(IPSEC_SUPPORT) #if defined(IPSEC) || defined(IPSEC_SUPPORT)
case IP_IPSEC_POLICY: case IP_IPSEC_POLICY:
if (IPSEC_ENABLED(ipv4)) { if (IPSEC_ENABLED(ipv4)) {
INP_WLOCK(inp);
error = IPSEC_PCBCTL(ipv4, inp, sopt); error = IPSEC_PCBCTL(ipv4, inp, sopt);
INP_WUNLOCK(inp);
break; break;
} }
/* FALLTHROUGH */ /* FALLTHROUGH */
#endif /* IPSEC */ #endif /* IPSEC */
default: default:
error = ENOPROTOOPT; error = ENOPROTOOPT;
break; break;
} }
break; break;
}
if (wlock && !in_pcbrele_wlocked(inp))
INP_WUNLOCK(inp);
else {
if (!rlock)
INP_RLOCK(inp);
if (!in_pcbrele_rlocked(inp))
INP_RUNLOCK(inp);
} }
return (error); return (error);
} }
/* /*
* Routine called from ip_output() to loop back a copy of an IP multicast * Routine called from ip_output() to loop back a copy of an IP multicast
* packet to the input queue of a specified interface. Note that this * packet to the input queue of a specified interface. Note that this
* calls the output routine of the loopback "driver", but with an interface * calls the output routine of the loopback "driver", but with an interface
Show All 35 Lines
View Options

usr.bin/wall/ttymsg.c

Show First 20 Lines • Show All 949 Lines • ▼ Show 20 Lines
} }
/* /*
* IP socket option processing. * IP socket option processing.
*/ */
int int
ip_ctloutput(struct socket *so, struct sockopt *sopt) ip_ctloutput(struct socket *so, struct sockopt *sopt)
{ {
struct inpcb *inp = sotoinpcb(so); struct inpcb *inp;
struct mbuf *options;
int error, optval; int error, optval;
bool rlock = false;
bool wlock = false;
#ifdef RSS #ifdef RSS
uint32_t rss_bucket; uint32_t rss_bucket;
int retval; int retval;
#endif #endif
SOCK_LOCK(so);
inp = sotoinpcb(so);
if (inp == NULL) {
SOCK_UNLOCK(so);
return ENOTCONN;
}
in_pcbref(inp);
SOCK_UNLOCK(so);
error = optval = 0; error = optval = 0;
if (sopt->sopt_level != IPPROTO_IP) { if (sopt->sopt_level != IPPROTO_IP) {
error = EINVAL; error = EINVAL;
if (sopt->sopt_level == SOL_SOCKET && if (sopt->sopt_level == SOL_SOCKET &&
sopt->sopt_dir == SOPT_SET) { sopt->sopt_dir == SOPT_SET) {
switch (sopt->sopt_name) { switch (sopt->sopt_name) {
case SO_REUSEADDR: case SO_REUSEADDR:
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
if ((so->so_options & SO_REUSEADDR) != 0) if ((so->so_options & SO_REUSEADDR) != 0)
inp->inp_flags2 |= INP_REUSEADDR; inp->inp_flags2 |= INP_REUSEADDR;
else else
inp->inp_flags2 &= ~INP_REUSEADDR; inp->inp_flags2 &= ~INP_REUSEADDR;
INP_WUNLOCK(inp);
error = 0; error = 0;
break; break;
case SO_REUSEPORT: case SO_REUSEPORT:
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
if ((so->so_options & SO_REUSEPORT) != 0) if ((so->so_options & SO_REUSEPORT) != 0)
inp->inp_flags2 |= INP_REUSEPORT; inp->inp_flags2 |= INP_REUSEPORT;
else else
inp->inp_flags2 &= ~INP_REUSEPORT; inp->inp_flags2 &= ~INP_REUSEPORT;
INP_WUNLOCK(inp);
error = 0; error = 0;
break; break;
case SO_SETFIB: case SO_SETFIB:
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
inp->inp_inc.inc_fibnum = so->so_fibnum; inp->inp_inc.inc_fibnum = so->so_fibnum;
INP_WUNLOCK(inp);
error = 0; error = 0;
break; break;
case SO_MAX_PACING_RATE: case SO_MAX_PACING_RATE:
#ifdef RATELIMIT #ifdef RATELIMIT
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
inp->inp_flags2 |= INP_RATE_LIMIT_CHANGED; inp->inp_flags2 |= INP_RATE_LIMIT_CHANGED;
INP_WUNLOCK(inp);
error = 0; error = 0;
#else #else
error = EOPNOTSUPP; error = EOPNOTSUPP;
#endif #endif
break; break;
default: default:
break; break;
} }
} }
if (!wlock)
INP_WLOCK(inp);
if (!in_pcbrele_wlocked(inp))
INP_WUNLOCK(inp);
return (error); return (error);
} }
switch (sopt->sopt_dir) { switch (sopt->sopt_dir) {
case SOPT_SET: case SOPT_SET:
switch (sopt->sopt_name) { switch (sopt->sopt_name) {
case IP_OPTIONS: case IP_OPTIONS:
#ifdef notyet #ifdef notyet
Show All 13 Lines#endif
m->m_len = sopt->sopt_valsize; m->m_len = sopt->sopt_valsize;
error = sooptcopyin(sopt, mtod(m, char *), m->m_len, error = sooptcopyin(sopt, mtod(m, char *), m->m_len,
m->m_len); m->m_len);
if (error) { if (error) {
m_free(m); m_free(m);
break; break;
} }
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
error = ip_pcbopts(inp, sopt->sopt_name, m); error = ip_pcbopts(inp, sopt->sopt_name, m);
INP_WUNLOCK(inp); break;
return (error);
} }
case IP_BINDANY: case IP_BINDANY:
if (sopt->sopt_td != NULL) { if (sopt->sopt_td != NULL) {
error = priv_check(sopt->sopt_td, error = priv_check(sopt->sopt_td,
PRIV_NETINET_BINDANY); PRIV_NETINET_BINDANY);
if (error) if (error)
break; break;
Show All 37 Lines#endif
if (optval >= 0 && optval <= MAXTTL) if (optval >= 0 && optval <= MAXTTL)
inp->inp_ip_minttl = optval; inp->inp_ip_minttl = optval;
else else
error = EINVAL; error = EINVAL;
break; break;
#define OPTSET(bit) do { \ #define OPTSET(bit) do { \
INP_WLOCK(inp); \ INP_WLOCK(inp); \
wlock = true; \
if (optval) \ if (optval) \
inp->inp_flags |= bit; \ inp->inp_flags |= bit; \
else \ else \
inp->inp_flags &= ~bit; \ inp->inp_flags &= ~bit; \
INP_WUNLOCK(inp); \
} while (0) } while (0)
#define OPTSET2(bit, val) do { \ #define OPTSET2(bit, val) do { \
INP_WLOCK(inp); \ INP_WLOCK(inp); \
wlock = true; \
if (val) \ if (val) \
inp->inp_flags2 |= bit; \ inp->inp_flags2 |= bit; \
else \ else \
inp->inp_flags2 &= ~bit; \ inp->inp_flags2 &= ~bit; \
INP_WUNLOCK(inp); \
} while (0) } while (0)
case IP_RECVOPTS: case IP_RECVOPTS:
OPTSET(INP_RECVOPTS); OPTSET(INP_RECVOPTS);
break; break;
case IP_RECVRETOPTS: case IP_RECVRETOPTS:
OPTSET(INP_RECVRETOPTS); OPTSET(INP_RECVRETOPTS);
▲ Show 20 Lines • Show All 78 Lines • ▼ Show 20 Lines#undef OPTSET2
case IP_PORTRANGE: case IP_PORTRANGE:
error = sooptcopyin(sopt, &optval, sizeof optval, error = sooptcopyin(sopt, &optval, sizeof optval,
sizeof optval); sizeof optval);
if (error) if (error)
break; break;
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
switch (optval) { switch (optval) {
case IP_PORTRANGE_DEFAULT: case IP_PORTRANGE_DEFAULT:
inp->inp_flags &= ~(INP_LOWPORT); inp->inp_flags &= ~(INP_LOWPORT);
inp->inp_flags &= ~(INP_HIGHPORT); inp->inp_flags &= ~(INP_HIGHPORT);
break; break;
case IP_PORTRANGE_HIGH: case IP_PORTRANGE_HIGH:
inp->inp_flags &= ~(INP_LOWPORT); inp->inp_flags &= ~(INP_LOWPORT);
inp->inp_flags |= INP_HIGHPORT; inp->inp_flags |= INP_HIGHPORT;
break; break;
case IP_PORTRANGE_LOW: case IP_PORTRANGE_LOW:
inp->inp_flags &= ~(INP_HIGHPORT); inp->inp_flags &= ~(INP_HIGHPORT);
inp->inp_flags |= INP_LOWPORT; inp->inp_flags |= INP_LOWPORT;
break; break;
default: default:
error = EINVAL; error = EINVAL;
break; break;
} }
INP_WUNLOCK(inp);
break; break;
#if defined(IPSEC) || defined(IPSEC_SUPPORT) #if defined(IPSEC) || defined(IPSEC_SUPPORT)
case IP_IPSEC_POLICY: case IP_IPSEC_POLICY:
if (IPSEC_ENABLED(ipv4)) { if (IPSEC_ENABLED(ipv4)) {
INP_WLOCK(inp);
wlock = true;
error = IPSEC_PCBCTL(ipv4, inp, sopt); error = IPSEC_PCBCTL(ipv4, inp, sopt);
if (error)
wlock = false;
break; break;
} }
/* FALLTHROUGH */ /* FALLTHROUGH */
#endif /* IPSEC */ #endif /* IPSEC */
default: default:
error = ENOPROTOOPT; error = ENOPROTOOPT;
break; break;
} }
break; break;
case SOPT_GET: case SOPT_GET:
switch (sopt->sopt_name) { switch (sopt->sopt_name) {
case IP_OPTIONS: case IP_OPTIONS:
case IP_RETOPTS: case IP_RETOPTS:
if (inp->inp_options) if (inp->inp_options) {
aeUnsubmitted
Not Done
Inline Actions

Is it necessary to acquire wlock for getsockopt?

ae: Is it necessary to acquire wlock for getsockopt?
jason_eggnet.comAuthorUnsubmitted
Not Done
Inline Actions

For some but not all. I'll take a second pass at getsockopt.

jason_eggnet.com: For some but not all. I'll take a second pass at getsockopt.
options = malloc(sopt->sopt_valsize, M_TEMP, M_WAITOK|M_ZERO);
INP_RLOCK(inp);
bcopy(inp->inp_options, options, min(inp->inp_options->m_len, sopt->sopt_valsize));
if (!in_pcbrele_rlocked(inp))
INP_RUNLOCK(inp);
error = sooptcopyout(sopt, error = sooptcopyout(sopt,
mtod(inp->inp_options, mtod(options,
char *), char *),
inp->inp_options->m_len); options->m_len);
else return (error);
} else
sopt->sopt_valsize = 0; sopt->sopt_valsize = 0;
break; break;
case IP_TOS: case IP_TOS:
case IP_TTL: case IP_TTL:
case IP_MINTTL: case IP_MINTTL:
case IP_RECVOPTS: case IP_RECVOPTS:
case IP_RECVRETOPTS: case IP_RECVRETOPTS:
▲ Show 20 Lines • Show All 51 Lines • ▼ Show 20 Lines#define OPTBIT2(bit) (inp->inp_flags2 & bit ? 1 : 0)
optval = OPTBIT(INP_RECVTTL); optval = OPTBIT(INP_RECVTTL);
break; break;
case IP_RECVIF: case IP_RECVIF:
optval = OPTBIT(INP_RECVIF); optval = OPTBIT(INP_RECVIF);
break; break;
case IP_PORTRANGE: case IP_PORTRANGE:
INP_RLOCK(inp);
rlock = true;
if (inp->inp_flags & INP_HIGHPORT) if (inp->inp_flags & INP_HIGHPORT)
optval = IP_PORTRANGE_HIGH; optval = IP_PORTRANGE_HIGH;
else if (inp->inp_flags & INP_LOWPORT) else if (inp->inp_flags & INP_LOWPORT)
optval = IP_PORTRANGE_LOW; optval = IP_PORTRANGE_LOW;
else else
optval = 0; optval = 0;
break; break;
Show All 15 Lines#define OPTBIT2(bit) (inp->inp_flags2 & bit ? 1 : 0)
case IP_FLOWTYPE: case IP_FLOWTYPE:
optval = inp->inp_flowtype; optval = inp->inp_flowtype;
break; break;
case IP_RECVFLOWID: case IP_RECVFLOWID:
optval = OPTBIT2(INP_RECVFLOWID); optval = OPTBIT2(INP_RECVFLOWID);
break; break;
#ifdef RSS #ifdef RSS
case IP_RSSBUCKETID: case IP_RSSBUCKETID:
INP_RLOCK(inp);
rlock = true;
retval = rss_hash2bucket(inp->inp_flowid, retval = rss_hash2bucket(inp->inp_flowid,
inp->inp_flowtype, inp->inp_flowtype,
&rss_bucket); &rss_bucket);
if (retval == 0) if (retval == 0)
optval = rss_bucket; optval = rss_bucket;
else else
error = EINVAL; error = EINVAL;
break; break;
case IP_RECVRSSBUCKETID: case IP_RECVRSSBUCKETID:
optval = OPTBIT2(INP_RECVRSSBUCKETID); optval = OPTBIT2(INP_RECVRSSBUCKETID);
break; break;
#endif #endif
case IP_BINDMULTI: case IP_BINDMULTI:
optval = OPTBIT2(INP_BINDMULTI); optval = OPTBIT2(INP_BINDMULTI);
break; break;
} }
if (!rlock)
INP_RLOCK(inp);
if (!in_pcbrele_rlocked(inp))
INP_RUNLOCK(inp);
error = sooptcopyout(sopt, &optval, sizeof optval); error = sooptcopyout(sopt, &optval, sizeof optval);
break; return (error);
/* /*
* Multicast socket options are processed by the in_mcast * Multicast socket options are processed by the in_mcast
* module. * module.
*/ */
case IP_MULTICAST_IF: case IP_MULTICAST_IF:
case IP_MULTICAST_VIF: case IP_MULTICAST_VIF:
case IP_MULTICAST_TTL: case IP_MULTICAST_TTL:
case IP_MULTICAST_LOOP: case IP_MULTICAST_LOOP:
case IP_MSFILTER: case IP_MSFILTER:
error = inp_getmoptions(inp, sopt); error = inp_getmoptions(inp, sopt);
break; break;
#if defined(IPSEC) || defined(IPSEC_SUPPORT) #if defined(IPSEC) || defined(IPSEC_SUPPORT)
case IP_IPSEC_POLICY: case IP_IPSEC_POLICY:
if (IPSEC_ENABLED(ipv4)) { if (IPSEC_ENABLED(ipv4)) {
INP_WLOCK(inp);
error = IPSEC_PCBCTL(ipv4, inp, sopt); error = IPSEC_PCBCTL(ipv4, inp, sopt);
INP_WUNLOCK(inp);
break; break;
} }
/* FALLTHROUGH */ /* FALLTHROUGH */
#endif /* IPSEC */ #endif /* IPSEC */
default: default:
error = ENOPROTOOPT; error = ENOPROTOOPT;
break; break;
} }
break; break;
}
if (wlock && !in_pcbrele_wlocked(inp))
INP_WUNLOCK(inp);
else {
if (!rlock)
INP_RLOCK(inp);
if (!in_pcbrele_rlocked(inp))
INP_RUNLOCK(inp);
} }
return (error); return (error);
} }
/* /*
* Routine called from ip_output() to loop back a copy of an IP multicast * Routine called from ip_output() to loop back a copy of an IP multicast
* packet to the input queue of a specified interface. Note that this * packet to the input queue of a specified interface. Note that this
* calls the output routine of the loopback "driver", but with an interface * calls the output routine of the loopback "driver", but with an interface
Show All 35 Lines
View Options

usr.bin/wall/wall.c

Show First 20 Lines • Show All 949 Lines • ▼ Show 20 Lines
} }
/* /*
* IP socket option processing. * IP socket option processing.
*/ */
int int
ip_ctloutput(struct socket *so, struct sockopt *sopt) ip_ctloutput(struct socket *so, struct sockopt *sopt)
{ {
struct inpcb *inp = sotoinpcb(so); struct inpcb *inp;
struct mbuf *options;
int error, optval; int error, optval;
bool rlock = false;
bool wlock = false;
#ifdef RSS #ifdef RSS
uint32_t rss_bucket; uint32_t rss_bucket;
int retval; int retval;
#endif #endif
SOCK_LOCK(so);
inp = sotoinpcb(so);
if (inp == NULL) {
SOCK_UNLOCK(so);
return ENOTCONN;
}
in_pcbref(inp);
SOCK_UNLOCK(so);
error = optval = 0; error = optval = 0;
if (sopt->sopt_level != IPPROTO_IP) { if (sopt->sopt_level != IPPROTO_IP) {
error = EINVAL; error = EINVAL;
if (sopt->sopt_level == SOL_SOCKET && if (sopt->sopt_level == SOL_SOCKET &&
sopt->sopt_dir == SOPT_SET) { sopt->sopt_dir == SOPT_SET) {
switch (sopt->sopt_name) { switch (sopt->sopt_name) {
case SO_REUSEADDR: case SO_REUSEADDR:
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
if ((so->so_options & SO_REUSEADDR) != 0) if ((so->so_options & SO_REUSEADDR) != 0)
inp->inp_flags2 |= INP_REUSEADDR; inp->inp_flags2 |= INP_REUSEADDR;
else else
inp->inp_flags2 &= ~INP_REUSEADDR; inp->inp_flags2 &= ~INP_REUSEADDR;
INP_WUNLOCK(inp);
error = 0; error = 0;
break; break;
case SO_REUSEPORT: case SO_REUSEPORT:
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
if ((so->so_options & SO_REUSEPORT) != 0) if ((so->so_options & SO_REUSEPORT) != 0)
inp->inp_flags2 |= INP_REUSEPORT; inp->inp_flags2 |= INP_REUSEPORT;
else else
inp->inp_flags2 &= ~INP_REUSEPORT; inp->inp_flags2 &= ~INP_REUSEPORT;
INP_WUNLOCK(inp);
error = 0; error = 0;
break; break;
case SO_SETFIB: case SO_SETFIB:
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
inp->inp_inc.inc_fibnum = so->so_fibnum; inp->inp_inc.inc_fibnum = so->so_fibnum;
INP_WUNLOCK(inp);
error = 0; error = 0;
break; break;
case SO_MAX_PACING_RATE: case SO_MAX_PACING_RATE:
#ifdef RATELIMIT #ifdef RATELIMIT
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
inp->inp_flags2 |= INP_RATE_LIMIT_CHANGED; inp->inp_flags2 |= INP_RATE_LIMIT_CHANGED;
INP_WUNLOCK(inp);
error = 0; error = 0;
#else #else
error = EOPNOTSUPP; error = EOPNOTSUPP;
#endif #endif
break; break;
default: default:
break; break;
} }
} }
if (!wlock)
INP_WLOCK(inp);
if (!in_pcbrele_wlocked(inp))
INP_WUNLOCK(inp);
return (error); return (error);
} }
switch (sopt->sopt_dir) { switch (sopt->sopt_dir) {
case SOPT_SET: case SOPT_SET:
switch (sopt->sopt_name) { switch (sopt->sopt_name) {
case IP_OPTIONS: case IP_OPTIONS:
#ifdef notyet #ifdef notyet
Show All 13 Lines#endif
m->m_len = sopt->sopt_valsize; m->m_len = sopt->sopt_valsize;
error = sooptcopyin(sopt, mtod(m, char *), m->m_len, error = sooptcopyin(sopt, mtod(m, char *), m->m_len,
m->m_len); m->m_len);
if (error) { if (error) {
m_free(m); m_free(m);
break; break;
} }
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
error = ip_pcbopts(inp, sopt->sopt_name, m); error = ip_pcbopts(inp, sopt->sopt_name, m);
INP_WUNLOCK(inp); break;
return (error);
} }
case IP_BINDANY: case IP_BINDANY:
if (sopt->sopt_td != NULL) { if (sopt->sopt_td != NULL) {
error = priv_check(sopt->sopt_td, error = priv_check(sopt->sopt_td,
PRIV_NETINET_BINDANY); PRIV_NETINET_BINDANY);
if (error) if (error)
break; break;
Show All 37 Lines#endif
if (optval >= 0 && optval <= MAXTTL) if (optval >= 0 && optval <= MAXTTL)
inp->inp_ip_minttl = optval; inp->inp_ip_minttl = optval;
else else
error = EINVAL; error = EINVAL;
break; break;
#define OPTSET(bit) do { \ #define OPTSET(bit) do { \
INP_WLOCK(inp); \ INP_WLOCK(inp); \
wlock = true; \
if (optval) \ if (optval) \
inp->inp_flags |= bit; \ inp->inp_flags |= bit; \
else \ else \
inp->inp_flags &= ~bit; \ inp->inp_flags &= ~bit; \
INP_WUNLOCK(inp); \
} while (0) } while (0)
#define OPTSET2(bit, val) do { \ #define OPTSET2(bit, val) do { \
INP_WLOCK(inp); \ INP_WLOCK(inp); \
wlock = true; \
if (val) \ if (val) \
inp->inp_flags2 |= bit; \ inp->inp_flags2 |= bit; \
else \ else \
inp->inp_flags2 &= ~bit; \ inp->inp_flags2 &= ~bit; \
INP_WUNLOCK(inp); \
} while (0) } while (0)
case IP_RECVOPTS: case IP_RECVOPTS:
OPTSET(INP_RECVOPTS); OPTSET(INP_RECVOPTS);
break; break;
case IP_RECVRETOPTS: case IP_RECVRETOPTS:
OPTSET(INP_RECVRETOPTS); OPTSET(INP_RECVRETOPTS);
▲ Show 20 Lines • Show All 78 Lines • ▼ Show 20 Lines#undef OPTSET2
case IP_PORTRANGE: case IP_PORTRANGE:
error = sooptcopyin(sopt, &optval, sizeof optval, error = sooptcopyin(sopt, &optval, sizeof optval,
sizeof optval); sizeof optval);
if (error) if (error)
break; break;
INP_WLOCK(inp); INP_WLOCK(inp);
wlock = true;
switch (optval) { switch (optval) {
case IP_PORTRANGE_DEFAULT: case IP_PORTRANGE_DEFAULT:
inp->inp_flags &= ~(INP_LOWPORT); inp->inp_flags &= ~(INP_LOWPORT);
inp->inp_flags &= ~(INP_HIGHPORT); inp->inp_flags &= ~(INP_HIGHPORT);
break; break;
case IP_PORTRANGE_HIGH: case IP_PORTRANGE_HIGH:
inp->inp_flags &= ~(INP_LOWPORT); inp->inp_flags &= ~(INP_LOWPORT);
inp->inp_flags |= INP_HIGHPORT; inp->inp_flags |= INP_HIGHPORT;
break; break;
case IP_PORTRANGE_LOW: case IP_PORTRANGE_LOW:
inp->inp_flags &= ~(INP_HIGHPORT); inp->inp_flags &= ~(INP_HIGHPORT);
inp->inp_flags |= INP_LOWPORT; inp->inp_flags |= INP_LOWPORT;
break; break;
default: default:
error = EINVAL; error = EINVAL;
break; break;
} }
INP_WUNLOCK(inp);
break; break;
#if defined(IPSEC) || defined(IPSEC_SUPPORT) #if defined(IPSEC) || defined(IPSEC_SUPPORT)
case IP_IPSEC_POLICY: case IP_IPSEC_POLICY:
if (IPSEC_ENABLED(ipv4)) { if (IPSEC_ENABLED(ipv4)) {
INP_WLOCK(inp);
wlock = true;
error = IPSEC_PCBCTL(ipv4, inp, sopt); error = IPSEC_PCBCTL(ipv4, inp, sopt);
if (error)
wlock = false;
break; break;
} }
/* FALLTHROUGH */ /* FALLTHROUGH */
#endif /* IPSEC */ #endif /* IPSEC */
default: default:
error = ENOPROTOOPT; error = ENOPROTOOPT;
break; break;
} }
break; break;
case SOPT_GET: case SOPT_GET:
switch (sopt->sopt_name) { switch (sopt->sopt_name) {
case IP_OPTIONS: case IP_OPTIONS:
case IP_RETOPTS: case IP_RETOPTS:
if (inp->inp_options) if (inp->inp_options) {
aeUnsubmitted
Not Done
Inline Actions

Is it necessary to acquire wlock for getsockopt?

ae: Is it necessary to acquire wlock for getsockopt?
jason_eggnet.comAuthorUnsubmitted
Not Done
Inline Actions

For some but not all. I'll take a second pass at getsockopt.

jason_eggnet.com: For some but not all. I'll take a second pass at getsockopt.
options = malloc(sopt->sopt_valsize, M_TEMP, M_WAITOK|M_ZERO);
INP_RLOCK(inp);
bcopy(inp->inp_options, options, min(inp->inp_options->m_len, sopt->sopt_valsize));
if (!in_pcbrele_rlocked(inp))
INP_RUNLOCK(inp);
error = sooptcopyout(sopt, error = sooptcopyout(sopt,
mtod(inp->inp_options, mtod(options,
char *), char *),
inp->inp_options->m_len); options->m_len);
else return (error);
} else
sopt->sopt_valsize = 0; sopt->sopt_valsize = 0;
break; break;
case IP_TOS: case IP_TOS:
case IP_TTL: case IP_TTL:
case IP_MINTTL: case IP_MINTTL:
case IP_RECVOPTS: case IP_RECVOPTS:
case IP_RECVRETOPTS: case IP_RECVRETOPTS:
▲ Show 20 Lines • Show All 51 Lines • ▼ Show 20 Lines#define OPTBIT2(bit) (inp->inp_flags2 & bit ? 1 : 0)
optval = OPTBIT(INP_RECVTTL); optval = OPTBIT(INP_RECVTTL);
break; break;
case IP_RECVIF: case IP_RECVIF:
optval = OPTBIT(INP_RECVIF); optval = OPTBIT(INP_RECVIF);
break; break;
case IP_PORTRANGE: case IP_PORTRANGE:
INP_RLOCK(inp);
rlock = true;
if (inp->inp_flags & INP_HIGHPORT) if (inp->inp_flags & INP_HIGHPORT)
optval = IP_PORTRANGE_HIGH; optval = IP_PORTRANGE_HIGH;
else if (inp->inp_flags & INP_LOWPORT) else if (inp->inp_flags & INP_LOWPORT)
optval = IP_PORTRANGE_LOW; optval = IP_PORTRANGE_LOW;
else else
optval = 0; optval = 0;
break; break;
Show All 15 Lines#define OPTBIT2(bit) (inp->inp_flags2 & bit ? 1 : 0)
case IP_FLOWTYPE: case IP_FLOWTYPE:
optval = inp->inp_flowtype; optval = inp->inp_flowtype;
break; break;
case IP_RECVFLOWID: case IP_RECVFLOWID:
optval = OPTBIT2(INP_RECVFLOWID); optval = OPTBIT2(INP_RECVFLOWID);
break; break;
#ifdef RSS #ifdef RSS
case IP_RSSBUCKETID: case IP_RSSBUCKETID:
INP_RLOCK(inp);
rlock = true;
retval = rss_hash2bucket(inp->inp_flowid, retval = rss_hash2bucket(inp->inp_flowid,
inp->inp_flowtype, inp->inp_flowtype,
&rss_bucket); &rss_bucket);
if (retval == 0) if (retval == 0)
optval = rss_bucket; optval = rss_bucket;
else else
error = EINVAL; error = EINVAL;
break; break;
case IP_RECVRSSBUCKETID: case IP_RECVRSSBUCKETID:
optval = OPTBIT2(INP_RECVRSSBUCKETID); optval = OPTBIT2(INP_RECVRSSBUCKETID);
break; break;
#endif #endif
case IP_BINDMULTI: case IP_BINDMULTI:
optval = OPTBIT2(INP_BINDMULTI); optval = OPTBIT2(INP_BINDMULTI);
break; break;
} }
if (!rlock)
INP_RLOCK(inp);
if (!in_pcbrele_rlocked(inp))
INP_RUNLOCK(inp);
error = sooptcopyout(sopt, &optval, sizeof optval); error = sooptcopyout(sopt, &optval, sizeof optval);
break; return (error);
/* /*
* Multicast socket options are processed by the in_mcast * Multicast socket options are processed by the in_mcast
* module. * module.
*/ */
case IP_MULTICAST_IF: case IP_MULTICAST_IF:
case IP_MULTICAST_VIF: case IP_MULTICAST_VIF:
case IP_MULTICAST_TTL: case IP_MULTICAST_TTL:
case IP_MULTICAST_LOOP: case IP_MULTICAST_LOOP:
case IP_MSFILTER: case IP_MSFILTER:
error = inp_getmoptions(inp, sopt); error = inp_getmoptions(inp, sopt);
break; break;
#if defined(IPSEC) || defined(IPSEC_SUPPORT) #if defined(IPSEC) || defined(IPSEC_SUPPORT)
case IP_IPSEC_POLICY: case IP_IPSEC_POLICY:
if (IPSEC_ENABLED(ipv4)) { if (IPSEC_ENABLED(ipv4)) {
INP_WLOCK(inp);
error = IPSEC_PCBCTL(ipv4, inp, sopt); error = IPSEC_PCBCTL(ipv4, inp, sopt);
INP_WUNLOCK(inp);
break; break;
} }
/* FALLTHROUGH */ /* FALLTHROUGH */
#endif /* IPSEC */ #endif /* IPSEC */
default: default:
error = ENOPROTOOPT; error = ENOPROTOOPT;
break; break;
} }
break; break;
}
if (wlock && !in_pcbrele_wlocked(inp))
INP_WUNLOCK(inp);
else {
if (!rlock)
INP_RLOCK(inp);
if (!in_pcbrele_rlocked(inp))
INP_RUNLOCK(inp);
} }
return (error); return (error);
} }
/* /*
* Routine called from ip_output() to loop back a copy of an IP multicast * Routine called from ip_output() to loop back a copy of an IP multicast
* packet to the input queue of a specified interface. Note that this * packet to the input queue of a specified interface. Note that this
* calls the output routine of the loopback "driver", but with an interface * calls the output routine of the loopback "driver", but with an interface
Show All 35 Lines