[BACK]Return to if_pppoe.c CVS log [TXT][DIR] Up to [local] / sys / net

Annotation of sys/net/if_pppoe.c, Revision 1.1.1.1

1.1       nbrk        1: /* $OpenBSD: if_pppoe.c,v 1.12 2007/05/28 06:31:01 mcbride Exp $ */
                      2: /* $NetBSD: if_pppoe.c,v 1.51 2003/11/28 08:56:48 keihan Exp $ */
                      3:
                      4: /*
                      5:  * Copyright (c) 2002 The NetBSD Foundation, Inc.
                      6:  * All rights reserved.
                      7:  *
                      8:  * This code is derived from software contributed to The NetBSD Foundation
                      9:  * by Martin Husemann <martin@NetBSD.org>.
                     10:  *
                     11:  * Redistribution and use in source and binary forms, with or without
                     12:  * modification, are permitted provided that the following conditions
                     13:  * are met:
                     14:  * 1. Redistributions of source code must retain the above copyright
                     15:  *    notice, this list of conditions and the following disclaimer.
                     16:  * 2. Redistributions in binary form must reproduce the above copyright
                     17:  *    notice, this list of conditions and the following disclaimer in the
                     18:  *    documentation and/or other materials provided with the distribution.
                     19:  * 3. All advertising materials mentioning features or use of this software
                     20:  *    must display the following acknowledgement:
                     21:  *        This product includes software developed by the NetBSD
                     22:  *        Foundation, Inc. and its contributors.
                     23:  * 4. Neither the name of The NetBSD Foundation nor the names of its
                     24:  *    contributors may be used to endorse or promote products derived
                     25:  *    from this software without specific prior written permission.
                     26:  *
                     27:  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
                     28:  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
                     29:  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
                     30:  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
                     31:  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
                     32:  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
                     33:  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
                     34:  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
                     35:  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
                     36:  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
                     37:  * POSSIBILITY OF SUCH DAMAGE.
                     38:  */
                     39:
                     40: #include <sys/cdefs.h>
                     41: /*
                     42: __KERNEL_RCSID(0, "$NetBSD: if_pppoe.c,v 1.51 2003/11/28 08:56:48 keihan Exp $");
                     43: */
                     44:
                     45: #include "pppoe.h"
                     46: #include "bpfilter.h"
                     47:
                     48: #include <sys/param.h>
                     49: #include <sys/systm.h>
                     50: #include <sys/kernel.h>
                     51: #include <sys/types.h>
                     52: #include <sys/timeout.h>
                     53: #include <sys/malloc.h>
                     54: #include <sys/mbuf.h>
                     55: #include <sys/socket.h>
                     56: #include <sys/syslog.h>
                     57: #include <sys/proc.h>
                     58: #include <sys/ioctl.h>
                     59: #include <net/if.h>
                     60: #include <net/if_types.h>
                     61: #include <net/if_sppp.h>
                     62: #include <net/if_pppoe.h>
                     63: #include <net/netisr.h>
                     64: #include <netinet/in.h>
                     65: #include <netinet/if_ether.h>
                     66:
                     67: /* for arc4random() */
                     68: #include <dev/rndvar.h>
                     69:
                     70: #if NBPFILTER > 0
                     71: #include <net/bpf.h>
                     72: #endif
                     73:
                     74: #undef PPPOE_DEBUG     /* XXX - remove this or make it an option */
                     75:
                     76: #define PPPOEDEBUG(a)  ((sc->sc_sppp.pp_if.if_flags & IFF_DEBUG) ? printf a : 0)
                     77:
                     78: struct pppoehdr {
                     79:        u_int8_t vertype;
                     80:        u_int8_t code;
                     81:        u_int16_t session;
                     82:        u_int16_t plen;
                     83: } __packed;
                     84:
                     85: struct pppoetag {
                     86:        u_int16_t tag;
                     87:        u_int16_t len;
                     88: } __packed;
                     89:
                     90: #define PPPOE_HEADERLEN                sizeof(struct pppoehdr)
                     91: #define        PPPOE_VERTYPE           0x11            /* VER=1, TYPE = 1 */
                     92:
                     93: #define        PPPOE_TAG_EOL           0x0000          /* end of list */
                     94: #define        PPPOE_TAG_SNAME         0x0101          /* service name */
                     95: #define        PPPOE_TAG_ACNAME        0x0102          /* access concentrator name */
                     96: #define        PPPOE_TAG_HUNIQUE       0x0103          /* host unique */
                     97: #define        PPPOE_TAG_ACCOOKIE      0x0104          /* AC cookie */
                     98: #define        PPPOE_TAG_VENDOR        0x0105          /* vendor specific */
                     99: #define        PPPOE_TAG_RELAYSID      0x0110          /* relay session id */
                    100: #define        PPPOE_TAG_SNAME_ERR     0x0201          /* service name error */
                    101: #define        PPPOE_TAG_ACSYS_ERR     0x0202          /* AC system error */
                    102: #define        PPPOE_TAG_GENERIC_ERR   0x0203          /* gerneric error */
                    103:
                    104: #define PPPOE_CODE_PADI                0x09            /* Active Discovery Initiation */
                    105: #define        PPPOE_CODE_PADO         0x07            /* Active Discovery Offer */
                    106: #define        PPPOE_CODE_PADR         0x19            /* Active Discovery Request */
                    107: #define        PPPOE_CODE_PADS         0x65            /* Active Discovery Session confirmation */
                    108: #define        PPPOE_CODE_PADT         0xA7            /* Active Discovery Terminate */
                    109:
                    110: /* two byte PPP protocol discriminator, then IP data */
                    111: #define        PPPOE_MAXMTU    (ETHERMTU - PPPOE_HEADERLEN - 2)
                    112:
                    113: /* Add a 16 bit unsigned value to a buffer pointed to by PTR */
                    114: #define        PPPOE_ADD_16(PTR, VAL)                  \
                    115:                *(PTR)++ = (VAL) / 256;         \
                    116:                *(PTR)++ = (VAL) % 256
                    117:
                    118: /* Add a complete PPPoE header to the buffer pointed to by PTR */
                    119: #define PPPOE_ADD_HEADER(PTR, CODE, SESS, LEN) \
                    120:                *(PTR)++ = PPPOE_VERTYPE;       \
                    121:                *(PTR)++ = (CODE);              \
                    122:                PPPOE_ADD_16(PTR, SESS);        \
                    123:                PPPOE_ADD_16(PTR, LEN)
                    124:
                    125: #define        PPPOE_DISC_TIMEOUT      (hz*5)  /* base for quick timeout calculation */
                    126: #define        PPPOE_SLOW_RETRY        (hz*60) /* persistent retry interval */
                    127: #define PPPOE_DISC_MAXPADI     4       /* retry PADI four times (quickly) */
                    128: #define        PPPOE_DISC_MAXPADR      2       /* retry PADR twice */
                    129:
                    130: #ifdef PPPOE_SERVER
                    131: #define IFF_PASSIVE    IFF_LINK0       /* wait passively for connection */
                    132: #endif
                    133:
                    134: struct pppoe_softc {
                    135:        struct sppp sc_sppp;            /* contains a struct ifnet as first element */
                    136:        LIST_ENTRY(pppoe_softc) sc_list;
                    137:        struct ifnet *sc_eth_if;        /* ethernet interface we are using */
                    138:
                    139:        int sc_state;                   /* discovery phase or session connected */
                    140:        struct ether_addr sc_dest;      /* hardware address of concentrator */
                    141:        u_int16_t sc_session;           /* PPPoE session id */
                    142:
                    143:        char *sc_service_name;          /* if != NULL: requested name of service */
                    144:        char *sc_concentrator_name;     /* if != NULL: requested concentrator id */
                    145:        u_int8_t *sc_ac_cookie;         /* content of AC cookie we must echo back */
                    146:        size_t sc_ac_cookie_len;        /* length of cookie data */
                    147: #ifdef PPPOE_SERVER
                    148:        u_int8_t *sc_hunique;           /* content of host unique we must echo back */
                    149:        size_t sc_hunique_len;          /* length of host unique */
                    150: #endif
                    151:        u_int32_t sc_unique;            /* our unique id */
                    152:        struct timeout sc_timeout;      /* timeout while not in session state */
                    153:        int sc_padi_retried;            /* number of PADI retries already done */
                    154:        int sc_padr_retried;            /* number of PADR retries already done */
                    155:
                    156:        struct timeval sc_session_time; /* time the session was established */
                    157: };
                    158:
                    159: /* incoming traffic will be queued here */
                    160: struct ifqueue ppoediscinq = { NULL };
                    161: struct ifqueue ppoeinq = { NULL };
                    162:
                    163: extern int sppp_ioctl(struct ifnet *, unsigned long, void *);
                    164:
                    165: /* input routines */
                    166: static void pppoe_disc_input(struct mbuf *);
                    167: static void pppoe_dispatch_disc_pkt(struct mbuf *, int);
                    168: static void pppoe_data_input(struct mbuf *);
                    169:
                    170: /* management routines */
                    171: void pppoeattach(int);
                    172: static int  pppoe_connect(struct pppoe_softc *);
                    173: static int  pppoe_disconnect(struct pppoe_softc *);
                    174: static void pppoe_abort_connect(struct pppoe_softc *);
                    175: static int  pppoe_ioctl(struct ifnet *, unsigned long, caddr_t);
                    176: static void pppoe_tls(struct sppp *);
                    177: static void pppoe_tlf(struct sppp *);
                    178: static void pppoe_start(struct ifnet *);
                    179:
                    180: /* internal timeout handling */
                    181: static void pppoe_timeout(void *);
                    182:
                    183: /* sending actual protocol controll packets */
                    184: static int pppoe_send_padi(struct pppoe_softc *);
                    185: static int pppoe_send_padr(struct pppoe_softc *);
                    186: #ifdef PPPOE_SERVER
                    187: static int pppoe_send_pado(struct pppoe_softc *);
                    188: static int pppoe_send_pads(struct pppoe_softc *);
                    189: #endif
                    190: static int pppoe_send_padt(struct ifnet *, u_int, const u_int8_t *);
                    191:
                    192: /* raw output */
                    193: static int pppoe_output(struct pppoe_softc *, struct mbuf *);
                    194:
                    195: /* internal helper functions */
                    196: static struct pppoe_softc *pppoe_find_softc_by_session(u_int, struct ifnet *);
                    197: static struct pppoe_softc *pppoe_find_softc_by_hunique(u_int8_t *, size_t, struct ifnet *);
                    198: static struct mbuf       *pppoe_get_mbuf(size_t len);
                    199:
                    200: LIST_HEAD(pppoe_softc_head, pppoe_softc) pppoe_softc_list;
                    201:
                    202: /* interface cloning */
                    203: int pppoe_clone_create(struct if_clone *, int);
                    204: int pppoe_clone_destroy(struct ifnet *);
                    205:
                    206: struct if_clone pppoe_cloner =
                    207:     IF_CLONE_INITIALIZER("pppoe", pppoe_clone_create, pppoe_clone_destroy);
                    208:
                    209:
                    210: /* ARGSUSED */
                    211: void
                    212: pppoeattach(int count)
                    213: {
                    214:        LIST_INIT(&pppoe_softc_list);
                    215:        if_clone_attach(&pppoe_cloner);
                    216:
                    217:        ppoediscinq.ifq_maxlen = IFQ_MAXLEN;
                    218:        ppoeinq.ifq_maxlen = IFQ_MAXLEN;
                    219: }
                    220:
                    221: /* Create a new interface. */
                    222: int
                    223: pppoe_clone_create(struct if_clone *ifc, int unit)
                    224: {
                    225:        struct pppoe_softc *sc;
                    226:        int s;
                    227:
                    228:         MALLOC(sc, struct pppoe_softc *, sizeof(*sc), M_DEVBUF, M_WAITOK);
                    229:         if (sc == NULL)
                    230:                 return (ENOMEM);
                    231:         bzero(sc, sizeof(struct pppoe_softc));
                    232:
                    233:        sc->sc_unique = arc4random();
                    234:
                    235:        snprintf(sc->sc_sppp.pp_if.if_xname,
                    236:                 sizeof(sc->sc_sppp.pp_if.if_xname),
                    237:                 "pppoe%d", unit);
                    238:        sc->sc_sppp.pp_if.if_softc = sc;
                    239:        sc->sc_sppp.pp_if.if_mtu = PPPOE_MAXMTU;
                    240:        sc->sc_sppp.pp_if.if_flags = IFF_SIMPLEX | IFF_POINTOPOINT | IFF_MULTICAST;
                    241:        sc->sc_sppp.pp_if.if_type = IFT_PPP;
                    242:        sc->sc_sppp.pp_if.if_hdrlen = sizeof(struct ether_header) + PPPOE_HEADERLEN;
                    243:        sc->sc_sppp.pp_flags |= PP_KEEPALIVE |          /* use LCP keepalive */
                    244:                                PP_NOFRAMING;           /* no serial encapsulation */
                    245:        sc->sc_sppp.pp_framebytes = PPPOE_HEADERLEN;    /* framing added to ppp packets */
                    246:        sc->sc_sppp.pp_if.if_ioctl = pppoe_ioctl;
                    247:        sc->sc_sppp.pp_if.if_start = pppoe_start;
                    248:        sc->sc_sppp.pp_tls = pppoe_tls;
                    249:        sc->sc_sppp.pp_tlf = pppoe_tlf;
                    250:        IFQ_SET_MAXLEN(&sc->sc_sppp.pp_if.if_snd, IFQ_MAXLEN);
                    251:        IFQ_SET_READY(&sc->sc_sppp.pp_if.if_snd);
                    252:
                    253:        /* changed to real address later */
                    254:        memcpy(&sc->sc_dest, etherbroadcastaddr, sizeof(sc->sc_dest));
                    255:
                    256:        /* init timer for interface watchdog */
                    257:        timeout_set(&sc->sc_timeout, pppoe_timeout, sc);
                    258:
                    259:        if_attach(&sc->sc_sppp.pp_if);
                    260:        if_alloc_sadl(&sc->sc_sppp.pp_if);
                    261:        sppp_attach(&sc->sc_sppp.pp_if);
                    262: #if NBPFILTER > 0
                    263:        bpfattach(&sc->sc_sppp.pp_if.if_bpf, &sc->sc_sppp.pp_if, DLT_PPP_ETHER, 0);
                    264: #endif
                    265:
                    266:        s = splnet();
                    267:        LIST_INSERT_HEAD(&pppoe_softc_list, sc, sc_list);
                    268:        splx(s);
                    269:
                    270:        return (0);
                    271: }
                    272:
                    273: /* Destroy a given interface. */
                    274: int
                    275: pppoe_clone_destroy(struct ifnet *ifp)
                    276: {
                    277:        struct pppoe_softc *sc = ifp->if_softc;
                    278:        int s;
                    279:
                    280:        s = splnet();
                    281:        LIST_REMOVE(sc, sc_list);
                    282:        timeout_del(&sc->sc_timeout);
                    283:        splx(s);
                    284:
                    285:        sppp_detach(&sc->sc_sppp.pp_if);
                    286:        if_detach(ifp);
                    287:
                    288:        if (sc->sc_concentrator_name)
                    289:                free(sc->sc_concentrator_name, M_DEVBUF);
                    290:        if (sc->sc_service_name)
                    291:                free(sc->sc_service_name, M_DEVBUF);
                    292:        if (sc->sc_ac_cookie)
                    293:                free(sc->sc_ac_cookie, M_DEVBUF);
                    294:
                    295:        free(sc, M_DEVBUF);
                    296:
                    297:        return (0);
                    298: }
                    299:
                    300: /*
                    301:  * Find the interface handling the specified session.
                    302:  * Note: O(number of sessions open), this is a client-side only, mean
                    303:  * and lean implementation, so number of open sessions typically should
                    304:  * be 1.
                    305:  */
                    306: static struct pppoe_softc *
                    307: pppoe_find_softc_by_session(u_int session, struct ifnet *rcvif)
                    308: {
                    309:        struct pppoe_softc *sc;
                    310:
                    311:        if (session == 0)
                    312:                return (NULL);
                    313:
                    314:        LIST_FOREACH(sc, &pppoe_softc_list, sc_list) {
                    315:                if (sc->sc_state == PPPOE_STATE_SESSION
                    316:                    && sc->sc_session == session) {
                    317:                        if (sc->sc_eth_if == rcvif)
                    318:                                return (sc);
                    319:                        else
                    320:                                return (NULL);
                    321:                }
                    322:        }
                    323:        return (NULL);
                    324: }
                    325:
                    326: /*
                    327:  * Check host unique token passed and return appropriate softc pointer,
                    328:  * or NULL if token is bogus.
                    329:  */
                    330: static struct pppoe_softc *
                    331: pppoe_find_softc_by_hunique(u_int8_t *token, size_t len, struct ifnet *rcvif)
                    332: {
                    333:        struct pppoe_softc *sc;
                    334:        u_int32_t hunique;
                    335:
                    336:        if (LIST_EMPTY(&pppoe_softc_list))
                    337:                return (NULL);
                    338:
                    339:        if (len != sizeof(hunique))
                    340:                return (NULL);
                    341:        memcpy(&hunique, token, len);
                    342:
                    343:        LIST_FOREACH(sc, &pppoe_softc_list, sc_list)
                    344:                if (sc->sc_unique == hunique)
                    345:                        break;
                    346:
                    347:        if (sc == NULL) {
                    348:                printf("pppoe: alien host unique tag, no session found\n");
                    349:                return (NULL);
                    350:        }
                    351:
                    352:        /* should be safe to access *sc now */
                    353:        if (sc->sc_state < PPPOE_STATE_PADI_SENT || sc->sc_state >= PPPOE_STATE_SESSION) {
                    354:                printf("%s: host unique tag found, but it belongs to a connection in state %d\n",
                    355:                        sc->sc_sppp.pp_if.if_xname, sc->sc_state);
                    356:                return (NULL);
                    357:        }
                    358:        if (sc->sc_eth_if != rcvif) {
                    359:                printf("%s: wrong interface, not accepting host unique\n",
                    360:                        sc->sc_sppp.pp_if.if_xname);
                    361:                return (NULL);
                    362:        }
                    363:        return (sc);
                    364: }
                    365:
                    366: /* Interface interrupt handler routine. */
                    367: void
                    368: pppoeintr(void)
                    369: {
                    370:        struct pppoe_softc *sc;
                    371:        struct mbuf *m;
                    372:
                    373:        splassert(IPL_SOFTNET);
                    374:
                    375:        LIST_FOREACH(sc, &pppoe_softc_list, sc_list) {
                    376:                while (ppoediscinq.ifq_head) {
                    377:                        MBUFLOCK(IF_DEQUEUE(&ppoediscinq, m););
                    378:                        if (m == NULL)
                    379:                                break;
                    380:                        pppoe_disc_input(m);
                    381:                }
                    382:
                    383:                while (ppoeinq.ifq_head) {
                    384:                        MBUFLOCK(IF_DEQUEUE(&ppoeinq, m););
                    385:                        if (m == NULL)
                    386:                                break;
                    387:                        pppoe_data_input(m);
                    388:                }
                    389:        }
                    390: }
                    391:
                    392: /* Analyze and handle a single received packet while not in session state. */
                    393: static void pppoe_dispatch_disc_pkt(struct mbuf *m, int off)
                    394: {
                    395:        struct pppoe_softc *sc;
                    396:        struct pppoehdr *ph;
                    397:        struct pppoetag *pt;
                    398:        struct mbuf *n;
                    399:        struct ether_header *eh;
                    400:        const char *err_msg, *devname;
                    401:        size_t ac_cookie_len;
                    402:        int noff, err, errortag;
                    403:        u_int16_t tag, len;
                    404:        u_int16_t session, plen;
                    405:        u_int8_t *ac_cookie;
                    406: #ifdef PPPOE_SERVER
                    407:        u_int8_t *hunique;
                    408:        size_t hunique_len;
                    409: #endif
                    410:
                    411:        err_msg = NULL;
                    412:        devname = "pppoe";
                    413:        errortag = 0;
                    414:
                    415:        if (m->m_len < sizeof(*eh)) {
                    416:                m = m_pullup(m, sizeof(*eh));
                    417:                if (m == NULL)
                    418:                        goto done;
                    419:        }
                    420:        eh = mtod(m, struct ether_header *);
                    421:        off += sizeof(*eh);
                    422:
                    423:        ac_cookie = NULL;
                    424:        ac_cookie_len = 0;
                    425: #ifdef PPPOE_SERVER
                    426:        hunique = NULL;
                    427:        hunique_len = 0;
                    428: #endif
                    429:
                    430:        session = 0;
                    431:        if (m->m_pkthdr.len - off <= PPPOE_HEADERLEN) {
                    432:                printf("pppoe: packet too short: %d\n", m->m_pkthdr.len);
                    433:                goto done;
                    434:        }
                    435:
                    436:        n = m_pulldown(m, off, sizeof(*ph), &noff);
                    437:        if (n == NULL) {
                    438:                printf("pppoe: could not get PPPoE header\n");
                    439:                m = NULL;
                    440:                goto done;
                    441:        }
                    442:        ph = (struct pppoehdr *)(mtod(n, caddr_t) + noff);
                    443:        if (ph->vertype != PPPOE_VERTYPE) {
                    444:                printf("pppoe: unknown version/type packet: 0x%x\n",
                    445:                    ph->vertype);
                    446:                goto done;
                    447:        }
                    448:
                    449:        session = ntohs(ph->session);
                    450:        plen = ntohs(ph->plen);
                    451:        off += sizeof(*ph);
                    452:        if (plen + off > m->m_pkthdr.len) {
                    453:                printf("pppoe: packet content does not fit: data available = %d, packet size = %u\n",
                    454:                    m->m_pkthdr.len - off, plen);
                    455:                goto done;
                    456:        }
                    457:
                    458:        /* ignore trailing garbage */
                    459:        m_adj(m, off + plen - m->m_pkthdr.len);
                    460:
                    461:        tag = 0;
                    462:        len = 0;
                    463:        sc = NULL;
                    464:        while (off + sizeof(*pt) <= m->m_pkthdr.len) {
                    465:                n = m_pulldown(m, off, sizeof(*pt), &noff);
                    466:                if (n == NULL) {
                    467:                        printf("%s: parse error\n", devname);
                    468:                        m = NULL;
                    469:                        goto done;
                    470:                }
                    471:                pt = (struct pppoetag *)(mtod(n, caddr_t) + noff);
                    472:                tag = ntohs(pt->tag);
                    473:                len = ntohs(pt->len);
                    474:                if (off + len > m->m_pkthdr.len) {
                    475:                        printf("%s: tag 0x%x len 0x%x is too long\n",
                    476:                            devname, tag, len);
                    477:                        goto done;
                    478:                }
                    479:                switch (tag) {
                    480:                case PPPOE_TAG_EOL:
                    481:                        goto breakbreak;
                    482:                case PPPOE_TAG_SNAME:
                    483:                        break;  /* ignored */
                    484:                case PPPOE_TAG_ACNAME:
                    485:                        break;  /* ignored */
                    486:                case PPPOE_TAG_HUNIQUE:
                    487:                        if (sc != NULL)
                    488:                                break;
                    489:                        n = m_pulldown(m, off + sizeof(*pt), len, &noff);
                    490:                        if (n == NULL) {
                    491:                                m = NULL;
                    492:                                err_msg = "TAG HUNIQUE ERROR";
                    493:                                break;
                    494:                        }
                    495: #ifdef PPPOE_SERVER
                    496:                        hunique = mtod(n, caddr_t) + noff;
                    497:                        hunique_len = len;
                    498: #endif
                    499:                        sc = pppoe_find_softc_by_hunique(mtod(n, caddr_t) + noff,
                    500:                            len, m->m_pkthdr.rcvif);
                    501:                        if (sc != NULL)
                    502:                                devname = sc->sc_sppp.pp_if.if_xname;
                    503:                        break;
                    504:                case PPPOE_TAG_ACCOOKIE:
                    505:                        if (ac_cookie == NULL) {
                    506:                                n = m_pulldown(m, off + sizeof(*pt), len,
                    507:                                    &noff);
                    508:                                if (n == NULL) {
                    509:                                        err_msg = "TAG ACCOOKIE ERROR";
                    510:                                        m = NULL;
                    511:                                        break;
                    512:                                }
                    513:                                ac_cookie = mtod(n, caddr_t) + noff;
                    514:                                ac_cookie_len = len;
                    515:                        }
                    516:                        break;
                    517:                case PPPOE_TAG_SNAME_ERR:
                    518:                        err_msg = "SERVICE NAME ERROR";
                    519:                        errortag = 1;
                    520:                        break;
                    521:                case PPPOE_TAG_ACSYS_ERR:
                    522:                        err_msg = "AC SYSTEM ERROR";
                    523:                        errortag = 1;
                    524:                        break;
                    525:                case PPPOE_TAG_GENERIC_ERR:
                    526:                        err_msg = "GENERIC ERROR";
                    527:                        errortag = 1;
                    528:                        break;
                    529:                }
                    530:                if (err_msg) {
                    531:                        log(LOG_INFO, "%s: %s: ", devname, err_msg);
                    532:                        if (errortag && len) {
                    533:                                n = m_pulldown(m, off + sizeof(*pt), len,
                    534:                                    &noff);
                    535:                                if (n) {
                    536:                                        u_int8_t *et = mtod(n, caddr_t) + noff;
                    537:                                        while (len--)
                    538:                                                addlog("%c", *et++);
                    539:                                }
                    540:                        }
                    541:                        addlog("\n");
                    542:                        goto done;
                    543:                }
                    544:                off += sizeof(*pt) + len;
                    545:        }
                    546: breakbreak:
                    547:        switch (ph->code) {
                    548:        case PPPOE_CODE_PADI:
                    549: #ifdef PPPOE_SERVER
                    550:                /*
                    551:                 * Got service name, concentrator name, and/or host unique.
                    552:                 * Ignore if we have no interfaces with IFF_PASSIVE|IFF_UP.
                    553:                 */
                    554:                if (LIST_EMPTY(&pppoe_softc_list))
                    555:                        goto done;
                    556:
                    557:                LIST_FOREACH(sc, &pppoe_softc_list, sc_list) {
                    558:                        if (!(sc->sc_sppp.pp_if.if_flags & IFF_UP))
                    559:                                continue;
                    560:                        if (!(sc->sc_sppp.pp_if.if_flags & IFF_PASSIVE))
                    561:                                continue;
                    562:                        if (sc->sc_state == PPPOE_STATE_INITIAL)
                    563:                                break;
                    564:                }
                    565:                if (sc == NULL) {
                    566: #ifdef PPPOE_DEBUG
                    567:                        printf("pppoe: free passive interface is not found\n");
                    568: #endif
                    569:                        goto done;
                    570:                }
                    571:                if (hunique) {
                    572:                        if (sc->sc_hunique)
                    573:                                free(sc->sc_hunique, M_DEVBUF);
                    574:                        sc->sc_hunique = malloc(hunique_len, M_DEVBUF,
                    575:                            M_DONTWAIT);
                    576:                        if (sc->sc_hunique == NULL)
                    577:                                goto done;
                    578:                        sc->sc_hunique_len = hunique_len;
                    579:                        memcpy(sc->sc_hunique, hunique, hunique_len);
                    580:                }
                    581:
                    582:                memcpy(&sc->sc_dest, eh->ether_shost, sizeof(sc->sc_dest));
                    583:                sc->sc_state = PPPOE_STATE_PADO_SENT;
                    584:                pppoe_send_pado(sc);
                    585:
                    586:                break;
                    587: #endif /* PPPOE_SERVER */
                    588:        case PPPOE_CODE_PADR:
                    589: #ifdef PPPOE_SERVER
                    590:                /*
                    591:                 * Get sc from ac_cookie if IFF_PASSIVE.
                    592:                 */
                    593:                if (ac_cookie == NULL) {
                    594:                        /* be quiet if there is not a single pppoe instance */
                    595:                        printf("pppoe: received PADR but not includes ac_cookie\n");
                    596:                        goto done;
                    597:                }
                    598:
                    599:                sc = pppoe_find_softc_by_hunique(ac_cookie,
                    600:                                                 ac_cookie_len,
                    601:                                                 m->m_pkthdr.rcvif);
                    602:                if (sc == NULL) {
                    603:                        /* be quiet if there is not a single pppoe instance */
                    604:                        if (!LIST_EMPTY(&pppoe_softc_list))
                    605:                                printf("pppoe: received PADR but could not find request for it\n");
                    606:                        goto done;
                    607:                }
                    608:                if (sc->sc_state != PPPOE_STATE_PADO_SENT) {
                    609:                        printf("%s: received unexpected PADR\n",
                    610:                            sc->sc_sppp.pp_if.if_xname);
                    611:                        goto done;
                    612:                }
                    613:                if (hunique) {
                    614:                        if (sc->sc_hunique)
                    615:                                free(sc->sc_hunique, M_DEVBUF);
                    616:                        sc->sc_hunique = malloc(hunique_len, M_DEVBUF,
                    617:                            M_DONTWAIT);
                    618:                        if (sc->sc_hunique == NULL)
                    619:                                goto done;
                    620:                        sc->sc_hunique_len = hunique_len;
                    621:                        memcpy(sc->sc_hunique, hunique, hunique_len);
                    622:                }
                    623:
                    624:                pppoe_send_pads(sc);
                    625:                sc->sc_state = PPPOE_STATE_SESSION;
                    626:                sc->sc_sppp.pp_up(&sc->sc_sppp);
                    627:
                    628:                break;
                    629: #else
                    630:                /* ignore, we are no access concentrator */
                    631:                goto done;
                    632: #endif /* PPPOE_SERVER */
                    633:        case PPPOE_CODE_PADO:
                    634:                if (sc == NULL) {
                    635:                        /* be quiet if there is not a single pppoe instance */
                    636:                        if (!LIST_EMPTY(&pppoe_softc_list))
                    637:                                printf("pppoe: received PADO but could not find request for it\n");
                    638:                        goto done;
                    639:                }
                    640:                if (sc->sc_state != PPPOE_STATE_PADI_SENT) {
                    641:                        printf("%s: received unexpected PADO\n",
                    642:                            sc->sc_sppp.pp_if.if_xname);
                    643:                        goto done;
                    644:                }
                    645:                if (ac_cookie) {
                    646:                        if (sc->sc_ac_cookie)
                    647:                                free(sc->sc_ac_cookie, M_DEVBUF);
                    648:                        sc->sc_ac_cookie = malloc(ac_cookie_len, M_DEVBUF,
                    649:                            M_DONTWAIT);
                    650:                        if (sc->sc_ac_cookie == NULL)
                    651:                                goto done;
                    652:                        sc->sc_ac_cookie_len = ac_cookie_len;
                    653:                        memcpy(sc->sc_ac_cookie, ac_cookie, ac_cookie_len);
                    654:                }
                    655:
                    656:                memcpy(&sc->sc_dest, eh->ether_shost, sizeof(sc->sc_dest));
                    657:                timeout_del(&sc->sc_timeout);
                    658:                sc->sc_padr_retried = 0;
                    659:                sc->sc_state = PPPOE_STATE_PADR_SENT;
                    660:                if ((err = pppoe_send_padr(sc)) != 0) {
                    661:                        PPPOEDEBUG(("%s: failed to send PADR, error=%d\n",
                    662:                            sc->sc_sppp.pp_if.if_xname, err));
                    663:                }
                    664:                timeout_add(&sc->sc_timeout,
                    665:                    PPPOE_DISC_TIMEOUT * (1 + sc->sc_padr_retried));
                    666:
                    667:                break;
                    668:        case PPPOE_CODE_PADS:
                    669:                if (sc == NULL)
                    670:                        goto done;
                    671:
                    672:                sc->sc_session = session;
                    673:                timeout_del(&sc->sc_timeout);
                    674:                PPPOEDEBUG(("%s: session 0x%x connected\n",
                    675:                    sc->sc_sppp.pp_if.if_xname, session));
                    676:                sc->sc_state = PPPOE_STATE_SESSION;
                    677:                microtime(&sc->sc_session_time);
                    678:                sc->sc_sppp.pp_up(&sc->sc_sppp);        /* notify upper layers */
                    679:
                    680:                break;
                    681:        case PPPOE_CODE_PADT:
                    682:                if (sc == NULL)
                    683:                        goto done;
                    684:
                    685:                /* stop timer (we might be about to transmit a PADT ourself) */
                    686:                timeout_del(&sc->sc_timeout);
                    687:                PPPOEDEBUG(("%s: session 0x%x terminated, received PADT\n",
                    688:                    sc->sc_sppp.pp_if.if_xname, session));
                    689:
                    690:                /* clean up softc */
                    691:                sc->sc_state = PPPOE_STATE_INITIAL;
                    692:                memcpy(&sc->sc_dest, etherbroadcastaddr, sizeof(sc->sc_dest));
                    693:                if (sc->sc_ac_cookie) {
                    694:                        free(sc->sc_ac_cookie, M_DEVBUF);
                    695:                        sc->sc_ac_cookie = NULL;
                    696:                }
                    697:                sc->sc_ac_cookie_len = 0;
                    698:                sc->sc_session = 0;
                    699:                sc->sc_session_time.tv_sec = 0;
                    700:                sc->sc_session_time.tv_usec = 0;
                    701:                sc->sc_sppp.pp_down(&sc->sc_sppp);      /* signal upper layer */
                    702:
                    703:                break;
                    704:        default:
                    705:                printf("%s: unknown code (0x%04x) session = 0x%04x\n",
                    706:                    sc ? sc->sc_sppp.pp_if.if_xname : "pppoe",
                    707:                    ph->code, session);
                    708:                break;
                    709:        }
                    710:
                    711: done:
                    712:        m_freem(m);
                    713: }
                    714:
                    715: /* Input function for discovery packets. */
                    716: static void
                    717: pppoe_disc_input(struct mbuf *m)
                    718: {
                    719:        /* avoid error messages if there is not a single pppoe instance */
                    720:        if (!LIST_EMPTY(&pppoe_softc_list)) {
                    721:                KASSERT(m->m_flags & M_PKTHDR);
                    722:                pppoe_dispatch_disc_pkt(m, 0);
                    723:        } else
                    724:                m_freem(m);
                    725: }
                    726:
                    727: /* Input function for data packets */
                    728: static void
                    729: pppoe_data_input(struct mbuf *m)
                    730: {
                    731:        struct pppoe_softc *sc;
                    732:        struct pppoehdr *ph;
                    733:        u_int16_t session, plen;
                    734: #ifdef PPPOE_TERM_UNKNOWN_SESSIONS
                    735:        u_int8_t shost[ETHER_ADDR_LEN];
                    736: #endif
                    737:
                    738:        KASSERT(m->m_flags & M_PKTHDR);
                    739:
                    740: #ifdef PPPOE_TERM_UNKNOWN_SESSIONS
                    741:        memcpy(shost, mtod(m, struct ether_header*)->ether_shost, ETHER_ADDR_LEN);
                    742: #endif
                    743:        m_adj(m, sizeof(struct ether_header));
                    744:        if (m->m_pkthdr.len <= PPPOE_HEADERLEN) {
                    745:                printf("pppoe (data): dropping too short packet: %d bytes\n",
                    746:                    m->m_pkthdr.len);
                    747:                goto drop;
                    748:        }
                    749:        if (m->m_len < sizeof(*ph)) {
                    750:                m = m_pullup(m, sizeof(*ph));
                    751:                if (m == NULL) {
                    752:                        printf("pppoe (data): could not get PPPoE header\n");
                    753:                        return;
                    754:                }
                    755:        }
                    756:        ph = mtod(m, struct pppoehdr *);
                    757:        if (ph->vertype != PPPOE_VERTYPE) {
                    758:                printf("pppoe (data): unknown version/type packet: 0x%x\n",
                    759:                    ph->vertype);
                    760:                goto drop;
                    761:        }
                    762:        if (ph->code != 0)
                    763:                goto drop;
                    764:
                    765:        session = ntohs(ph->session);
                    766:        sc = pppoe_find_softc_by_session(session, m->m_pkthdr.rcvif);
                    767:        if (sc == NULL) {
                    768: #ifdef PPPOE_TERM_UNKNOWN_SESSIONS
                    769:                printf("pppoe (data): input for unknown session 0x%x, sending PADT\n",
                    770:                    session);
                    771:                pppoe_send_padt(m->m_pkthdr.rcvif, session, shost);
                    772: #endif
                    773:                goto drop;
                    774:        }
                    775:
                    776:        plen = ntohs(ph->plen);
                    777:
                    778: #if NBPFILTER > 0
                    779:        if(sc->sc_sppp.pp_if.if_bpf)
                    780:                bpf_mtap(sc->sc_sppp.pp_if.if_bpf, m, BPF_DIRECTION_IN);
                    781: #endif
                    782:
                    783:        m_adj(m, PPPOE_HEADERLEN);
                    784:
                    785: #ifdef PPPOE_DEBUG
                    786:        {
                    787:                struct mbuf *p;
                    788:
                    789:                printf("%s: pkthdr.len=%d, pppoe.len=%d",
                    790:                        sc->sc_sppp.pp_if.if_xname,
                    791:                        m->m_pkthdr.len, plen);
                    792:                p = m;
                    793:                while (p) {
                    794:                        printf(" l=%d", p->m_len);
                    795:                        p = p->m_next;
                    796:                }
                    797:                printf("\n");
                    798:        }
                    799: #endif
                    800:
                    801:        if (m->m_pkthdr.len < plen)
                    802:                goto drop;
                    803:
                    804:        /* fix incoming interface pointer (not the raw ethernet interface anymore) */
                    805:        m->m_pkthdr.rcvif = &sc->sc_sppp.pp_if;
                    806:
                    807:        /* pass packet up and account for it */
                    808:        sc->sc_sppp.pp_if.if_ipackets++;
                    809:        sppp_input(&sc->sc_sppp.pp_if, m);
                    810:        return;
                    811:
                    812: drop:
                    813:        m_freem(m);
                    814: }
                    815:
                    816: static int
                    817: pppoe_output(struct pppoe_softc *sc, struct mbuf *m)
                    818: {
                    819:        struct sockaddr dst;
                    820:        struct ether_header *eh;
                    821:        u_int16_t etype;
                    822:
                    823:        if (sc->sc_eth_if == NULL) {
                    824:                m_freem(m);
                    825:                return (EIO);
                    826:        }
                    827:
                    828:        if ((sc->sc_eth_if->if_flags & (IFF_UP|IFF_RUNNING))
                    829:            != (IFF_UP|IFF_RUNNING)) {
                    830:                m_freem(m);
                    831:                return (ENETDOWN);
                    832:        }
                    833:
                    834:        memset(&dst, 0, sizeof dst);
                    835:        dst.sa_family = AF_UNSPEC;
                    836:        eh = (struct ether_header*)&dst.sa_data;
                    837:        etype = sc->sc_state == PPPOE_STATE_SESSION ? ETHERTYPE_PPPOE : ETHERTYPE_PPPOEDISC;
                    838:        eh->ether_type = htons(etype);
                    839:        memcpy(&eh->ether_dhost, &sc->sc_dest, sizeof sc->sc_dest);
                    840:
                    841:        PPPOEDEBUG(("%s (%x) state=%d, session=0x%x output -> %s, len=%d\n",
                    842:            sc->sc_sppp.pp_if.if_xname, etype,
                    843:            sc->sc_state, sc->sc_session,
                    844:            ether_sprintf((unsigned char *)&sc->sc_dest), m->m_pkthdr.len));
                    845:
                    846:        m->m_flags &= ~(M_BCAST|M_MCAST);
                    847:        sc->sc_sppp.pp_if.if_opackets++;
                    848:        return (sc->sc_eth_if->if_output(sc->sc_eth_if, m, &dst, NULL));
                    849: }
                    850:
                    851: /* The ioctl routine. */
                    852: static int
                    853: pppoe_ioctl(struct ifnet *ifp, unsigned long cmd, caddr_t data)
                    854: {
                    855:        struct proc *p = curproc;       /* XXX */
                    856:        struct pppoe_softc *sc = (struct pppoe_softc *)ifp;
                    857:        int error = 0;
                    858:
                    859:        switch (cmd) {
                    860:        case PPPOESETPARMS:
                    861:        {
                    862:                struct pppoediscparms *parms = (struct pppoediscparms *)data;
                    863:                int len;
                    864:
                    865:                if ((error = suser(p, p->p_acflag)) != 0)
                    866:                        return (error);
                    867:                if (parms->eth_ifname[0] != '\0') {
                    868:                        sc->sc_eth_if = ifunit(parms->eth_ifname);
                    869:                        if (sc->sc_eth_if == NULL)
                    870:                                return (ENXIO);
                    871:                }
                    872:
                    873:                if (sc->sc_concentrator_name)
                    874:                        free(sc->sc_concentrator_name, M_DEVBUF);
                    875:                sc->sc_concentrator_name = NULL;
                    876:
                    877:                len = strlen(parms->ac_name);
                    878:                if (len > 0 && len < sizeof(parms->ac_name)) {
                    879:                        char *p = malloc(len + 1, M_DEVBUF, M_WAITOK);
                    880:                        if (p == NULL)
                    881:                                return (ENOMEM);
                    882:                        strlcpy(p, parms->ac_name, len + 1);
                    883:                        sc->sc_concentrator_name = p;
                    884:                }
                    885:
                    886:                if (sc->sc_service_name)
                    887:                        free(sc->sc_service_name, M_DEVBUF);
                    888:                sc->sc_service_name = NULL;
                    889:
                    890:                len = strlen(parms->service_name);
                    891:                if (len > 0 && len < sizeof(parms->service_name)) {
                    892:                        char *p = malloc(len + 1, M_DEVBUF, M_WAITOK);
                    893:                        if (p == NULL)
                    894:                                return (ENOMEM);
                    895:                        strlcpy(p, parms->service_name, len + 1);
                    896:                        sc->sc_service_name = p;
                    897:                }
                    898:                return (0);
                    899:        }
                    900:        break;
                    901:        case PPPOEGETPARMS:
                    902:        {
                    903:                struct pppoediscparms *parms = (struct pppoediscparms *)data;
                    904:
                    905:                if (sc->sc_eth_if)
                    906:                        strlcpy(parms->eth_ifname, sc->sc_eth_if->if_xname,
                    907:                            IFNAMSIZ);
                    908:                else
                    909:                        parms->eth_ifname[0] = '\0';
                    910:
                    911:                if (sc->sc_concentrator_name)
                    912:                        strlcpy(parms->ac_name, sc->sc_concentrator_name,
                    913:                            sizeof(parms->ac_name));
                    914:                else
                    915:                        parms->ac_name[0] = '\0';
                    916:
                    917:                if (sc->sc_service_name)
                    918:                        strlcpy(parms->service_name, sc->sc_service_name,
                    919:                            sizeof(parms->service_name));
                    920:                else
                    921:                        parms->service_name[0] = '\0';
                    922:
                    923:                return (0);
                    924:        }
                    925:        break;
                    926:        case PPPOEGETSESSION:
                    927:        {
                    928:                struct pppoeconnectionstate *state =
                    929:                    (struct pppoeconnectionstate *)data;
                    930:                state->state = sc->sc_state;
                    931:                state->session_id = sc->sc_session;
                    932:                state->padi_retry_no = sc->sc_padi_retried;
                    933:                state->padr_retry_no = sc->sc_padr_retried;
                    934:                state->session_time.tv_sec = sc->sc_session_time.tv_sec;
                    935:                state->session_time.tv_usec = sc->sc_session_time.tv_usec;
                    936:                return (0);
                    937:        }
                    938:        break;
                    939:        case SIOCSIFFLAGS:
                    940:        {
                    941:                struct ifreq *ifr = (struct ifreq *)data;
                    942:                /*
                    943:                 * Prevent running re-establishment timers overriding
                    944:                 * administrators choice.
                    945:                 */
                    946:                if ((ifr->ifr_flags & IFF_UP) == 0
                    947:                     && sc->sc_state >= PPPOE_STATE_PADI_SENT
                    948:                     && sc->sc_state < PPPOE_STATE_SESSION) {
                    949:                        timeout_del(&sc->sc_timeout);
                    950:                        sc->sc_state = PPPOE_STATE_INITIAL;
                    951:                        sc->sc_padi_retried = 0;
                    952:                        sc->sc_padr_retried = 0;
                    953:                        memcpy(&sc->sc_dest, etherbroadcastaddr,
                    954:                            sizeof(sc->sc_dest));
                    955:                }
                    956:                return (sppp_ioctl(ifp, cmd, data));
                    957:        }
                    958:        case SIOCSIFMTU:
                    959:        {
                    960:                struct ifreq *ifr = (struct ifreq *)data;
                    961:
                    962:                if (ifr->ifr_mtu > PPPOE_MAXMTU)
                    963:                        return (EINVAL);
                    964:                return (sppp_ioctl(ifp, cmd, data));
                    965:        }
                    966:        default:
                    967:                return (sppp_ioctl(ifp, cmd, data));
                    968:        }
                    969:        return (0);
                    970: }
                    971:
                    972: /*
                    973:  * Allocate a mbuf/cluster with space to store the given data length
                    974:  * of payload, leaving space for prepending an ethernet header
                    975:  * in front.
                    976:  */
                    977: static struct mbuf *
                    978: pppoe_get_mbuf(size_t len)
                    979: {
                    980:        struct mbuf *m;
                    981:
                    982:        MGETHDR(m, M_DONTWAIT, MT_DATA);
                    983:        if (m == NULL)
                    984:                return (NULL);
                    985:        if (len + sizeof(struct ether_header) > MHLEN) {
                    986:                MCLGET(m, M_DONTWAIT);
                    987:                if ((m->m_flags & M_EXT) == 0) {
                    988:                        struct mbuf *n;
                    989:
                    990:                        MFREE(m, n);
                    991:                        return (NULL);
                    992:                }
                    993:        }
                    994:        m->m_data += sizeof(struct ether_header);
                    995:        m->m_len = len;
                    996:        m->m_pkthdr.len = len;
                    997:        m->m_pkthdr.rcvif = NULL;
                    998:
                    999:        return (m);
                   1000: }
                   1001:
                   1002: /* Send PADI. */
                   1003: static int
                   1004: pppoe_send_padi(struct pppoe_softc *sc)
                   1005: {
                   1006:        struct mbuf *m0;
                   1007:        int len, l1 = 0, l2 = 0; /* XXX: gcc */
                   1008:        u_int8_t *p;
                   1009:
                   1010:        if (sc->sc_state > PPPOE_STATE_PADI_SENT)
                   1011:                panic("pppoe_send_padi in state %d", sc->sc_state);
                   1012:
                   1013:        /* calculate length of frame (excluding ethernet header + pppoe header) */
                   1014:        len = 2 + 2 + 2 + 2 + sizeof(sc->sc_unique); /* service name tag is required, host unique is send too */
                   1015:        if (sc->sc_service_name != NULL) {
                   1016:                l1 = strlen(sc->sc_service_name);
                   1017:                len += l1;
                   1018:        }
                   1019:        if (sc->sc_concentrator_name != NULL) {
                   1020:                l2 = strlen(sc->sc_concentrator_name);
                   1021:                len += 2 + 2 + l2;
                   1022:        }
                   1023:
                   1024:        /* allocate a buffer */
                   1025:        m0 = pppoe_get_mbuf(len + PPPOE_HEADERLEN);     /* header len + payload len */
                   1026:        if (m0 == NULL)
                   1027:                return (ENOBUFS);
                   1028:
                   1029:        /* fill in pkt */
                   1030:        p = mtod(m0, u_int8_t *);
                   1031:        PPPOE_ADD_HEADER(p, PPPOE_CODE_PADI, 0, len);
                   1032:        PPPOE_ADD_16(p, PPPOE_TAG_SNAME);
                   1033:        if (sc->sc_service_name != NULL) {
                   1034:                PPPOE_ADD_16(p, l1);
                   1035:                memcpy(p, sc->sc_service_name, l1);
                   1036:                p += l1;
                   1037:        } else {
                   1038:                PPPOE_ADD_16(p, 0);
                   1039:        }
                   1040:        if (sc->sc_concentrator_name != NULL) {
                   1041:                PPPOE_ADD_16(p, PPPOE_TAG_ACNAME);
                   1042:                PPPOE_ADD_16(p, l2);
                   1043:                memcpy(p, sc->sc_concentrator_name, l2);
                   1044:                p += l2;
                   1045:        }
                   1046:        PPPOE_ADD_16(p, PPPOE_TAG_HUNIQUE);
                   1047:        PPPOE_ADD_16(p, sizeof(sc->sc_unique));
                   1048:        memcpy(p, &sc->sc_unique, sizeof(sc->sc_unique));
                   1049:
                   1050: #ifdef PPPOE_DEBUG
                   1051:        p += sizeof(sc->sc_unique);
                   1052:        if (p - mtod(m0, u_int8_t *) != len + PPPOE_HEADERLEN)
                   1053:                panic("pppoe_send_padi: garbled output len, should be %ld, is %ld",
                   1054:                    (long)(len + PPPOE_HEADERLEN), (long)(p - mtod(m0, u_int8_t *)));
                   1055: #endif
                   1056:
                   1057:        /* send pkt */
                   1058:        return (pppoe_output(sc, m0));
                   1059: }
                   1060:
                   1061: /* Watchdog function. */
                   1062: static void
                   1063: pppoe_timeout(void *arg)
                   1064: {
                   1065:        struct pppoe_softc *sc = (struct pppoe_softc *)arg;
                   1066:        int x, retry_wait, err;
                   1067:
                   1068:        PPPOEDEBUG(("%s: timeout\n", sc->sc_sppp.pp_if.if_xname));
                   1069:
                   1070:        switch (sc->sc_state) {
                   1071:        case PPPOE_STATE_PADI_SENT:
                   1072:                /*
                   1073:                 * We have two basic ways of retrying:
                   1074:                 *  - Quick retry mode: try a few times in short sequence
                   1075:                 *  - Slow retry mode: we already had a connection successfully
                   1076:                 *    established and will try infinitely (without user
                   1077:                 *    intervention)
                   1078:                 * We only enter slow retry mode if IFF_LINK1 (aka autodial)
                   1079:                 * is not set.
                   1080:                 */
                   1081:
                   1082:                /* initialize for quick retry mode */
                   1083:                retry_wait = PPPOE_DISC_TIMEOUT * (1 + sc->sc_padi_retried);
                   1084:
                   1085:                x = splnet();
                   1086:                sc->sc_padi_retried++;
                   1087:                if (sc->sc_padi_retried >= PPPOE_DISC_MAXPADI) {
                   1088:                        if ((sc->sc_sppp.pp_if.if_flags & IFF_LINK1) == 0) {
                   1089:                                /* slow retry mode */
                   1090:                                retry_wait = PPPOE_SLOW_RETRY;
                   1091:                        } else {
                   1092:                                pppoe_abort_connect(sc);
                   1093:                                splx(x);
                   1094:                                return;
                   1095:                        }
                   1096:                }
                   1097:                if ((err = pppoe_send_padi(sc)) != 0) {
                   1098:                        sc->sc_padi_retried--;
                   1099:                        PPPOEDEBUG(("%s: failed to transmit PADI, error=%d\n",
                   1100:                            sc->sc_sppp.pp_if.if_xname, err));
                   1101:                }
                   1102:                timeout_add(&sc->sc_timeout, retry_wait);
                   1103:                splx(x);
                   1104:
                   1105:                break;
                   1106:        case PPPOE_STATE_PADR_SENT:
                   1107:                x = splnet();
                   1108:                sc->sc_padr_retried++;
                   1109:                if (sc->sc_padr_retried >= PPPOE_DISC_MAXPADR) {
                   1110:                        memcpy(&sc->sc_dest, etherbroadcastaddr,
                   1111:                            sizeof(sc->sc_dest));
                   1112:                        sc->sc_state = PPPOE_STATE_PADI_SENT;
                   1113:                        sc->sc_padr_retried = 0;
                   1114:                        if ((err = pppoe_send_padi(sc)) != 0) {
                   1115:                                PPPOEDEBUG(("%s: failed to send PADI, error=%d\n",
                   1116:                                    sc->sc_sppp.pp_if.if_xname, err));
                   1117:                        }
                   1118:                        timeout_add(&sc->sc_timeout,
                   1119:                            PPPOE_DISC_TIMEOUT * (1 + sc->sc_padi_retried));
                   1120:                        splx(x);
                   1121:                        return;
                   1122:                }
                   1123:                if ((err = pppoe_send_padr(sc)) != 0) {
                   1124:                        sc->sc_padr_retried--;
                   1125:                        PPPOEDEBUG(("%s: failed to send PADR, error=%d\n",
                   1126:                            sc->sc_sppp.pp_if.if_xname, err));
                   1127:                }
                   1128:                timeout_add(&sc->sc_timeout,
                   1129:                    PPPOE_DISC_TIMEOUT * (1 + sc->sc_padr_retried));
                   1130:                splx(x);
                   1131:
                   1132:                break;
                   1133:        case PPPOE_STATE_CLOSING:
                   1134:                pppoe_disconnect(sc);
                   1135:                break;
                   1136:        default:
                   1137:                return; /* all done, work in peace */
                   1138:        }
                   1139: }
                   1140:
                   1141: /* Start a connection (i.e. initiate discovery phase). */
                   1142: static int
                   1143: pppoe_connect(struct pppoe_softc *sc)
                   1144: {
                   1145:        int x, err;
                   1146:
                   1147:        if (sc->sc_state != PPPOE_STATE_INITIAL)
                   1148:                return (EBUSY);
                   1149:
                   1150: #ifdef PPPOE_SERVER
                   1151:        /* wait for PADI if IFF_PASSIVE */
                   1152:        if ((sc->sc_sppp.pp_if.if_flags & IFF_PASSIVE))
                   1153:                return (0);
                   1154: #endif
                   1155:        x = splnet();
                   1156:
                   1157:        /* save state, in case we fail to send PADI */
                   1158:        sc->sc_state = PPPOE_STATE_PADI_SENT;
                   1159:        sc->sc_padr_retried = 0;
                   1160:        err = pppoe_send_padi(sc);
                   1161:        if (err != 0)
                   1162:                PPPOEDEBUG(("%s: failed to send PADI, error=%d\n",
                   1163:                    sc->sc_sppp.pp_if.if_xname, err));
                   1164:
                   1165:        timeout_add(&sc->sc_timeout, PPPOE_DISC_TIMEOUT);
                   1166:        splx(x);
                   1167:
                   1168:        return (err);
                   1169: }
                   1170:
                   1171: /* disconnect */
                   1172: static int
                   1173: pppoe_disconnect(struct pppoe_softc *sc)
                   1174: {
                   1175:        int err, x;
                   1176:
                   1177:        x = splnet();
                   1178:
                   1179:        if (sc->sc_state < PPPOE_STATE_SESSION)
                   1180:                err = EBUSY;
                   1181:        else {
                   1182:                PPPOEDEBUG(("%s: disconnecting\n",
                   1183:                    sc->sc_sppp.pp_if.if_xname));
                   1184:                err = pppoe_send_padt(sc->sc_eth_if, sc->sc_session, (const u_int8_t *)&sc->sc_dest);
                   1185:        }
                   1186:
                   1187:        /* cleanup softc */
                   1188:        sc->sc_state = PPPOE_STATE_INITIAL;
                   1189:        memcpy(&sc->sc_dest, etherbroadcastaddr, sizeof(sc->sc_dest));
                   1190:        if (sc->sc_ac_cookie) {
                   1191:                free(sc->sc_ac_cookie, M_DEVBUF);
                   1192:                sc->sc_ac_cookie = NULL;
                   1193:        }
                   1194:        sc->sc_ac_cookie_len = 0;
                   1195: #ifdef PPPOE_SERVER
                   1196:        if (sc->sc_hunique) {
                   1197:                free(sc->sc_hunique, M_DEVBUF);
                   1198:                sc->sc_hunique = NULL;
                   1199:        }
                   1200:        sc->sc_hunique_len = 0;
                   1201: #endif
                   1202:        sc->sc_session = 0;
                   1203:
                   1204:        /* notify upper layer */
                   1205:        sc->sc_sppp.pp_down(&sc->sc_sppp);
                   1206:
                   1207:        splx(x);
                   1208:
                   1209:        return (err);
                   1210: }
                   1211:
                   1212: /* Connection attempt aborted. */
                   1213: static void
                   1214: pppoe_abort_connect(struct pppoe_softc *sc)
                   1215: {
                   1216:        printf("%s: could not establish connection\n",
                   1217:                sc->sc_sppp.pp_if.if_xname);
                   1218:        sc->sc_state = PPPOE_STATE_CLOSING;
                   1219:
                   1220:        /* notify upper layer */
                   1221:        sc->sc_sppp.pp_down(&sc->sc_sppp);
                   1222:
                   1223:        /* clear connection state */
                   1224:        memcpy(&sc->sc_dest, etherbroadcastaddr, sizeof(sc->sc_dest));
                   1225:        sc->sc_state = PPPOE_STATE_INITIAL;
                   1226: }
                   1227:
                   1228: /* Send a PADR packet */
                   1229: static int
                   1230: pppoe_send_padr(struct pppoe_softc *sc)
                   1231: {
                   1232:        struct mbuf *m0;
                   1233:        u_int8_t *p;
                   1234:        size_t len, l1 = 0; /* XXX: gcc */
                   1235:
                   1236:        if (sc->sc_state != PPPOE_STATE_PADR_SENT)
                   1237:                return (EIO);
                   1238:
                   1239:        len = 2 + 2 + 2 + 2 + sizeof(sc->sc_unique);    /* service name, host unique */
                   1240:        if (sc->sc_service_name != NULL) {              /* service name tag maybe empty */
                   1241:                l1 = strlen(sc->sc_service_name);
                   1242:                len += l1;
                   1243:        }
                   1244:        if (sc->sc_ac_cookie_len > 0)
                   1245:                len += 2 + 2 + sc->sc_ac_cookie_len;    /* AC cookie */
                   1246:
                   1247:        m0 = pppoe_get_mbuf(len + PPPOE_HEADERLEN);
                   1248:        if (m0 == NULL)
                   1249:                return (ENOBUFS);
                   1250:
                   1251:        p = mtod(m0, u_int8_t *);
                   1252:        PPPOE_ADD_HEADER(p, PPPOE_CODE_PADR, 0, len);
                   1253:        PPPOE_ADD_16(p, PPPOE_TAG_SNAME);
                   1254:
                   1255:        if (sc->sc_service_name != NULL) {
                   1256:                PPPOE_ADD_16(p, l1);
                   1257:                memcpy(p, sc->sc_service_name, l1);
                   1258:                p += l1;
                   1259:        } else {
                   1260:                PPPOE_ADD_16(p, 0);
                   1261:        }
                   1262:        if (sc->sc_ac_cookie_len > 0) {
                   1263:                PPPOE_ADD_16(p, PPPOE_TAG_ACCOOKIE);
                   1264:                PPPOE_ADD_16(p, sc->sc_ac_cookie_len);
                   1265:                memcpy(p, sc->sc_ac_cookie, sc->sc_ac_cookie_len);
                   1266:                p += sc->sc_ac_cookie_len;
                   1267:        }
                   1268:        PPPOE_ADD_16(p, PPPOE_TAG_HUNIQUE);
                   1269:        PPPOE_ADD_16(p, sizeof(sc->sc_unique));
                   1270:        memcpy(p, &sc->sc_unique, sizeof(sc->sc_unique));
                   1271:
                   1272: #ifdef PPPOE_DEBUG
                   1273:        p += sizeof(sc->sc_unique);
                   1274:        if (p - mtod(m0, u_int8_t *) != len + PPPOE_HEADERLEN)
                   1275:                panic("pppoe_send_padr: garbled output len, should be %ld, is %ld",
                   1276:                        (long)(len + PPPOE_HEADERLEN), (long)(p - mtod(m0, u_int8_t *)));
                   1277: #endif
                   1278:
                   1279:        return (pppoe_output(sc, m0));
                   1280: }
                   1281:
                   1282: /* Send a PADT packet. */
                   1283: static int
                   1284: pppoe_send_padt(struct ifnet *outgoing_if, u_int session, const u_int8_t *dest)
                   1285: {
                   1286:        struct ether_header *eh;
                   1287:        struct sockaddr dst;
                   1288:        struct mbuf *m0;
                   1289:        u_int8_t *p;
                   1290:
                   1291:        m0 = pppoe_get_mbuf(PPPOE_HEADERLEN);
                   1292:        if (m0 == NULL)
                   1293:                return (ENOBUFS);
                   1294:
                   1295:        p = mtod(m0, u_int8_t *);
                   1296:        PPPOE_ADD_HEADER(p, PPPOE_CODE_PADT, session, 0);
                   1297:
                   1298:        memset(&dst, 0, sizeof(dst));
                   1299:        dst.sa_family = AF_UNSPEC;
                   1300:        eh = (struct ether_header *)&dst.sa_data;
                   1301:        eh->ether_type = htons(ETHERTYPE_PPPOEDISC);
                   1302:        memcpy(&eh->ether_dhost, dest, ETHER_ADDR_LEN);
                   1303:
                   1304:        m0->m_flags &= ~(M_BCAST|M_MCAST);
                   1305:        return (outgoing_if->if_output(outgoing_if, m0, &dst, NULL));
                   1306: }
                   1307:
                   1308: #ifdef PPPOE_SERVER
                   1309: /* Send a PADO packet. */
                   1310: static int
                   1311: pppoe_send_pado(struct pppoe_softc *sc)
                   1312: {
                   1313:        struct mbuf *m0;
                   1314:        size_t len;
                   1315:        u_int8_t *p;
                   1316:
                   1317:        if (sc->sc_state != PPPOE_STATE_PADO_SENT)
                   1318:                return (EIO);
                   1319:
                   1320:        /* calc length */
                   1321:        len = 0;
                   1322:        /* include ac_cookie */
                   1323:        len += 2 + 2 + sizeof(sc->sc_unique);
                   1324:        /* include hunique */
                   1325:        len += 2 + 2 + sc->sc_hunique_len;
                   1326:
                   1327:        m0 = pppoe_get_mbuf(len + PPPOE_HEADERLEN);
                   1328:        if (m0 == NULL)
                   1329:                return (ENOBUFS);
                   1330:
                   1331:        p = mtod(m0, u_int8_t *);
                   1332:        PPPOE_ADD_HEADER(p, PPPOE_CODE_PADO, 0, len);
                   1333:        PPPOE_ADD_16(p, PPPOE_TAG_ACCOOKIE);
                   1334:        PPPOE_ADD_16(p, sizeof(sc->sc_unique));
                   1335:        memcpy(p, &sc, sizeof(sc->sc_unique));
                   1336:        p += sizeof(sc->sc_unique);
                   1337:        PPPOE_ADD_16(p, PPPOE_TAG_HUNIQUE);
                   1338:        PPPOE_ADD_16(p, sc->sc_hunique_len);
                   1339:        memcpy(p, sc->sc_hunique, sc->sc_hunique_len);
                   1340:
                   1341:        return (pppoe_output(sc, m0));
                   1342: }
                   1343:
                   1344: /* Send a PADS packet. */
                   1345: static int
                   1346: pppoe_send_pads(struct pppoe_softc *sc)
                   1347: {
                   1348:        struct mbuf *m0;
                   1349:        size_t len, l1;
                   1350:        u_int8_t *p;
                   1351:
                   1352:        if (sc->sc_state != PPPOE_STATE_PADO_SENT)
                   1353:                return (EIO);
                   1354:
                   1355:        sc->sc_session = mono_time.tv_sec % 0xff + 1;
                   1356:
                   1357:        /* calc length */
                   1358:        len = 0;
                   1359:        /* include hunique */
                   1360:        len += 2 + 2 + 2 + 2 + sc->sc_hunique_len;      /* service name, host unique */
                   1361:        if (sc->sc_service_name != NULL) {              /* service name tag maybe empty */
                   1362:                l1 = strlen(sc->sc_service_name);
                   1363:                len += l1;
                   1364:        }
                   1365:
                   1366:        m0 = pppoe_get_mbuf(len + PPPOE_HEADERLEN);
                   1367:        if (m0 == NULL)
                   1368:                return (ENOBUFS);
                   1369:
                   1370:        p = mtod(m0, u_int8_t *);
                   1371:        PPPOE_ADD_HEADER(p, PPPOE_CODE_PADS, sc->sc_session, len);
                   1372:        PPPOE_ADD_16(p, PPPOE_TAG_SNAME);
                   1373:        if (sc->sc_service_name != NULL) {
                   1374:                PPPOE_ADD_16(p, l1);
                   1375:                memcpy(p, sc->sc_service_name, l1);
                   1376:                p += l1;
                   1377:        } else {
                   1378:                PPPOE_ADD_16(p, 0);
                   1379:        }
                   1380:        PPPOE_ADD_16(p, PPPOE_TAG_HUNIQUE);
                   1381:        PPPOE_ADD_16(p, sc->sc_hunique_len);
                   1382:        memcpy(p, sc->sc_hunique, sc->sc_hunique_len);
                   1383:
                   1384:        return (pppoe_output(sc, m0));
                   1385: }
                   1386: #endif
                   1387:
                   1388: /* this-layer-start function */
                   1389: static void
                   1390: pppoe_tls(struct sppp *sp)
                   1391: {
                   1392:        struct pppoe_softc *sc = (void *)sp;
                   1393:
                   1394:        if (sc->sc_state != PPPOE_STATE_INITIAL)
                   1395:                return;
                   1396:        pppoe_connect(sc);
                   1397: }
                   1398:
                   1399: /* this-layer-finish function */
                   1400: static void
                   1401: pppoe_tlf(struct sppp *sp)
                   1402: {
                   1403:        struct pppoe_softc *sc = (void *)sp;
                   1404:
                   1405:        if (sc->sc_state < PPPOE_STATE_SESSION)
                   1406:                return;
                   1407:        /*
                   1408:         * Do not call pppoe_disconnect here, the upper layer state
                   1409:         * machine gets confused by this. We must return from this
                   1410:         * function and defer disconnecting to the timeout handler.
                   1411:         */
                   1412:        sc->sc_state = PPPOE_STATE_CLOSING;
                   1413:        timeout_add(&sc->sc_timeout, hz / 50);
                   1414: }
                   1415:
                   1416: static void
                   1417: pppoe_start(struct ifnet *ifp)
                   1418: {
                   1419:        struct pppoe_softc *sc = (void *)ifp;
                   1420:        struct mbuf *m;
                   1421:        size_t len;
                   1422:        u_int8_t *p;
                   1423:
                   1424:        if (sppp_isempty(ifp))
                   1425:                return;
                   1426:
                   1427:        /* are we ready to process data yet? */
                   1428:        if (sc->sc_state < PPPOE_STATE_SESSION) {
                   1429:                sppp_flush(&sc->sc_sppp.pp_if);
                   1430:                return;
                   1431:        }
                   1432:
                   1433:        while ((m = sppp_dequeue(ifp)) != NULL) {
                   1434:                len = m->m_pkthdr.len;
                   1435:                M_PREPEND(m, PPPOE_HEADERLEN, M_DONTWAIT);
                   1436:                if (m == NULL) {
                   1437:                        ifp->if_oerrors++;
                   1438:                        continue;
                   1439:                }
                   1440:                p = mtod(m, u_int8_t *);
                   1441:                PPPOE_ADD_HEADER(p, 0, sc->sc_session, len);
                   1442:
                   1443: #if NBPFILTER > 0
                   1444:                if(sc->sc_sppp.pp_if.if_bpf)
                   1445:                        bpf_mtap(sc->sc_sppp.pp_if.if_bpf, m,
                   1446:                            BPF_DIRECTION_OUT);
                   1447: #endif
                   1448:
                   1449:                pppoe_output(sc, m);
                   1450:        }
                   1451: }

CVSweb