Merge branch 'virtex-for-2.6.25' of git://git.secretlab.ca/git/linux-2.6-virtex into...
[linux-2.6] / net / ipv6 / route.c
1 /*
2  *      Linux INET6 implementation
3  *      FIB front-end.
4  *
5  *      Authors:
6  *      Pedro Roque             <roque@di.fc.ul.pt>
7  *
8  *      $Id: route.c,v 1.56 2001/10/31 21:55:55 davem Exp $
9  *
10  *      This program is free software; you can redistribute it and/or
11  *      modify it under the terms of the GNU General Public License
12  *      as published by the Free Software Foundation; either version
13  *      2 of the License, or (at your option) any later version.
14  */
15
16 /*      Changes:
17  *
18  *      YOSHIFUJI Hideaki @USAGI
19  *              reworked default router selection.
20  *              - respect outgoing interface
21  *              - select from (probably) reachable routers (i.e.
22  *              routers in REACHABLE, STALE, DELAY or PROBE states).
23  *              - always select the same router if it is (probably)
24  *              reachable.  otherwise, round-robin the list.
25  *      Ville Nuorvala
26  *              Fixed routing subtrees.
27  */
28
29 #include <linux/capability.h>
30 #include <linux/errno.h>
31 #include <linux/types.h>
32 #include <linux/times.h>
33 #include <linux/socket.h>
34 #include <linux/sockios.h>
35 #include <linux/net.h>
36 #include <linux/route.h>
37 #include <linux/netdevice.h>
38 #include <linux/in6.h>
39 #include <linux/init.h>
40 #include <linux/if_arp.h>
41 #include <linux/proc_fs.h>
42 #include <linux/seq_file.h>
43 #include <net/net_namespace.h>
44 #include <net/snmp.h>
45 #include <net/ipv6.h>
46 #include <net/ip6_fib.h>
47 #include <net/ip6_route.h>
48 #include <net/ndisc.h>
49 #include <net/addrconf.h>
50 #include <net/tcp.h>
51 #include <linux/rtnetlink.h>
52 #include <net/dst.h>
53 #include <net/xfrm.h>
54 #include <net/netevent.h>
55 #include <net/netlink.h>
56
57 #include <asm/uaccess.h>
58
59 #ifdef CONFIG_SYSCTL
60 #include <linux/sysctl.h>
61 #endif
62
63 /* Set to 3 to get tracing. */
64 #define RT6_DEBUG 2
65
66 #if RT6_DEBUG >= 3
67 #define RDBG(x) printk x
68 #define RT6_TRACE(x...) printk(KERN_DEBUG x)
69 #else
70 #define RDBG(x)
71 #define RT6_TRACE(x...) do { ; } while (0)
72 #endif
73
74 #define CLONE_OFFLINK_ROUTE 0
75
76 static struct rt6_info * ip6_rt_copy(struct rt6_info *ort);
77 static struct dst_entry *ip6_dst_check(struct dst_entry *dst, u32 cookie);
78 static struct dst_entry *ip6_negative_advice(struct dst_entry *);
79 static void             ip6_dst_destroy(struct dst_entry *);
80 static void             ip6_dst_ifdown(struct dst_entry *,
81                                        struct net_device *dev, int how);
82 static int               ip6_dst_gc(struct dst_ops *ops);
83
84 static int              ip6_pkt_discard(struct sk_buff *skb);
85 static int              ip6_pkt_discard_out(struct sk_buff *skb);
86 static void             ip6_link_failure(struct sk_buff *skb);
87 static void             ip6_rt_update_pmtu(struct dst_entry *dst, u32 mtu);
88
89 #ifdef CONFIG_IPV6_ROUTE_INFO
90 static struct rt6_info *rt6_add_route_info(struct in6_addr *prefix, int prefixlen,
91                                            struct in6_addr *gwaddr, int ifindex,
92                                            unsigned pref);
93 static struct rt6_info *rt6_get_route_info(struct in6_addr *prefix, int prefixlen,
94                                            struct in6_addr *gwaddr, int ifindex);
95 #endif
96
97 static struct dst_ops ip6_dst_ops = {
98         .family                 =       AF_INET6,
99         .protocol               =       __constant_htons(ETH_P_IPV6),
100         .gc                     =       ip6_dst_gc,
101         .gc_thresh              =       1024,
102         .check                  =       ip6_dst_check,
103         .destroy                =       ip6_dst_destroy,
104         .ifdown                 =       ip6_dst_ifdown,
105         .negative_advice        =       ip6_negative_advice,
106         .link_failure           =       ip6_link_failure,
107         .update_pmtu            =       ip6_rt_update_pmtu,
108         .local_out              =       ip6_local_out,
109         .entry_size             =       sizeof(struct rt6_info),
110         .entries                =       ATOMIC_INIT(0),
111 };
112
113 static void ip6_rt_blackhole_update_pmtu(struct dst_entry *dst, u32 mtu)
114 {
115 }
116
117 static struct dst_ops ip6_dst_blackhole_ops = {
118         .family                 =       AF_INET6,
119         .protocol               =       __constant_htons(ETH_P_IPV6),
120         .destroy                =       ip6_dst_destroy,
121         .check                  =       ip6_dst_check,
122         .update_pmtu            =       ip6_rt_blackhole_update_pmtu,
123         .entry_size             =       sizeof(struct rt6_info),
124         .entries                =       ATOMIC_INIT(0),
125 };
126
127 struct rt6_info ip6_null_entry = {
128         .u = {
129                 .dst = {
130                         .__refcnt       = ATOMIC_INIT(1),
131                         .__use          = 1,
132                         .obsolete       = -1,
133                         .error          = -ENETUNREACH,
134                         .metrics        = { [RTAX_HOPLIMIT - 1] = 255, },
135                         .input          = ip6_pkt_discard,
136                         .output         = ip6_pkt_discard_out,
137                         .ops            = &ip6_dst_ops,
138                         .path           = (struct dst_entry*)&ip6_null_entry,
139                 }
140         },
141         .rt6i_flags     = (RTF_REJECT | RTF_NONEXTHOP),
142         .rt6i_metric    = ~(u32) 0,
143         .rt6i_ref       = ATOMIC_INIT(1),
144 };
145
146 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
147
148 static int ip6_pkt_prohibit(struct sk_buff *skb);
149 static int ip6_pkt_prohibit_out(struct sk_buff *skb);
150
151 struct rt6_info ip6_prohibit_entry = {
152         .u = {
153                 .dst = {
154                         .__refcnt       = ATOMIC_INIT(1),
155                         .__use          = 1,
156                         .obsolete       = -1,
157                         .error          = -EACCES,
158                         .metrics        = { [RTAX_HOPLIMIT - 1] = 255, },
159                         .input          = ip6_pkt_prohibit,
160                         .output         = ip6_pkt_prohibit_out,
161                         .ops            = &ip6_dst_ops,
162                         .path           = (struct dst_entry*)&ip6_prohibit_entry,
163                 }
164         },
165         .rt6i_flags     = (RTF_REJECT | RTF_NONEXTHOP),
166         .rt6i_metric    = ~(u32) 0,
167         .rt6i_ref       = ATOMIC_INIT(1),
168 };
169
170 struct rt6_info ip6_blk_hole_entry = {
171         .u = {
172                 .dst = {
173                         .__refcnt       = ATOMIC_INIT(1),
174                         .__use          = 1,
175                         .obsolete       = -1,
176                         .error          = -EINVAL,
177                         .metrics        = { [RTAX_HOPLIMIT - 1] = 255, },
178                         .input          = dst_discard,
179                         .output         = dst_discard,
180                         .ops            = &ip6_dst_ops,
181                         .path           = (struct dst_entry*)&ip6_blk_hole_entry,
182                 }
183         },
184         .rt6i_flags     = (RTF_REJECT | RTF_NONEXTHOP),
185         .rt6i_metric    = ~(u32) 0,
186         .rt6i_ref       = ATOMIC_INIT(1),
187 };
188
189 #endif
190
191 /* allocate dst with ip6_dst_ops */
192 static __inline__ struct rt6_info *ip6_dst_alloc(void)
193 {
194         return (struct rt6_info *)dst_alloc(&ip6_dst_ops);
195 }
196
197 static void ip6_dst_destroy(struct dst_entry *dst)
198 {
199         struct rt6_info *rt = (struct rt6_info *)dst;
200         struct inet6_dev *idev = rt->rt6i_idev;
201
202         if (idev != NULL) {
203                 rt->rt6i_idev = NULL;
204                 in6_dev_put(idev);
205         }
206 }
207
208 static void ip6_dst_ifdown(struct dst_entry *dst, struct net_device *dev,
209                            int how)
210 {
211         struct rt6_info *rt = (struct rt6_info *)dst;
212         struct inet6_dev *idev = rt->rt6i_idev;
213         struct net_device *loopback_dev =
214                 dev->nd_net->loopback_dev;
215
216         if (dev != loopback_dev && idev != NULL && idev->dev == dev) {
217                 struct inet6_dev *loopback_idev =
218                         in6_dev_get(loopback_dev);
219                 if (loopback_idev != NULL) {
220                         rt->rt6i_idev = loopback_idev;
221                         in6_dev_put(idev);
222                 }
223         }
224 }
225
226 static __inline__ int rt6_check_expired(const struct rt6_info *rt)
227 {
228         return (rt->rt6i_flags & RTF_EXPIRES &&
229                 time_after(jiffies, rt->rt6i_expires));
230 }
231
232 static inline int rt6_need_strict(struct in6_addr *daddr)
233 {
234         return (ipv6_addr_type(daddr) &
235                 (IPV6_ADDR_MULTICAST | IPV6_ADDR_LINKLOCAL));
236 }
237
238 /*
239  *      Route lookup. Any table->tb6_lock is implied.
240  */
241
242 static __inline__ struct rt6_info *rt6_device_match(struct rt6_info *rt,
243                                                     int oif,
244                                                     int strict)
245 {
246         struct rt6_info *local = NULL;
247         struct rt6_info *sprt;
248
249         if (oif) {
250                 for (sprt = rt; sprt; sprt = sprt->u.dst.rt6_next) {
251                         struct net_device *dev = sprt->rt6i_dev;
252                         if (dev->ifindex == oif)
253                                 return sprt;
254                         if (dev->flags & IFF_LOOPBACK) {
255                                 if (sprt->rt6i_idev == NULL ||
256                                     sprt->rt6i_idev->dev->ifindex != oif) {
257                                         if (strict && oif)
258                                                 continue;
259                                         if (local && (!oif ||
260                                                       local->rt6i_idev->dev->ifindex == oif))
261                                                 continue;
262                                 }
263                                 local = sprt;
264                         }
265                 }
266
267                 if (local)
268                         return local;
269
270                 if (strict)
271                         return &ip6_null_entry;
272         }
273         return rt;
274 }
275
276 #ifdef CONFIG_IPV6_ROUTER_PREF
277 static void rt6_probe(struct rt6_info *rt)
278 {
279         struct neighbour *neigh = rt ? rt->rt6i_nexthop : NULL;
280         /*
281          * Okay, this does not seem to be appropriate
282          * for now, however, we need to check if it
283          * is really so; aka Router Reachability Probing.
284          *
285          * Router Reachability Probe MUST be rate-limited
286          * to no more than one per minute.
287          */
288         if (!neigh || (neigh->nud_state & NUD_VALID))
289                 return;
290         read_lock_bh(&neigh->lock);
291         if (!(neigh->nud_state & NUD_VALID) &&
292             time_after(jiffies, neigh->updated + rt->rt6i_idev->cnf.rtr_probe_interval)) {
293                 struct in6_addr mcaddr;
294                 struct in6_addr *target;
295
296                 neigh->updated = jiffies;
297                 read_unlock_bh(&neigh->lock);
298
299                 target = (struct in6_addr *)&neigh->primary_key;
300                 addrconf_addr_solict_mult(target, &mcaddr);
301                 ndisc_send_ns(rt->rt6i_dev, NULL, target, &mcaddr, NULL);
302         } else
303                 read_unlock_bh(&neigh->lock);
304 }
305 #else
306 static inline void rt6_probe(struct rt6_info *rt)
307 {
308         return;
309 }
310 #endif
311
312 /*
313  * Default Router Selection (RFC 2461 6.3.6)
314  */
315 static inline int rt6_check_dev(struct rt6_info *rt, int oif)
316 {
317         struct net_device *dev = rt->rt6i_dev;
318         if (!oif || dev->ifindex == oif)
319                 return 2;
320         if ((dev->flags & IFF_LOOPBACK) &&
321             rt->rt6i_idev && rt->rt6i_idev->dev->ifindex == oif)
322                 return 1;
323         return 0;
324 }
325
326 static inline int rt6_check_neigh(struct rt6_info *rt)
327 {
328         struct neighbour *neigh = rt->rt6i_nexthop;
329         int m;
330         if (rt->rt6i_flags & RTF_NONEXTHOP ||
331             !(rt->rt6i_flags & RTF_GATEWAY))
332                 m = 1;
333         else if (neigh) {
334                 read_lock_bh(&neigh->lock);
335                 if (neigh->nud_state & NUD_VALID)
336                         m = 2;
337 #ifdef CONFIG_IPV6_ROUTER_PREF
338                 else if (neigh->nud_state & NUD_FAILED)
339                         m = 0;
340 #endif
341                 else
342                         m = 1;
343                 read_unlock_bh(&neigh->lock);
344         } else
345                 m = 0;
346         return m;
347 }
348
349 static int rt6_score_route(struct rt6_info *rt, int oif,
350                            int strict)
351 {
352         int m, n;
353
354         m = rt6_check_dev(rt, oif);
355         if (!m && (strict & RT6_LOOKUP_F_IFACE))
356                 return -1;
357 #ifdef CONFIG_IPV6_ROUTER_PREF
358         m |= IPV6_DECODE_PREF(IPV6_EXTRACT_PREF(rt->rt6i_flags)) << 2;
359 #endif
360         n = rt6_check_neigh(rt);
361         if (!n && (strict & RT6_LOOKUP_F_REACHABLE))
362                 return -1;
363         return m;
364 }
365
366 static struct rt6_info *find_match(struct rt6_info *rt, int oif, int strict,
367                                    int *mpri, struct rt6_info *match)
368 {
369         int m;
370
371         if (rt6_check_expired(rt))
372                 goto out;
373
374         m = rt6_score_route(rt, oif, strict);
375         if (m < 0)
376                 goto out;
377
378         if (m > *mpri) {
379                 if (strict & RT6_LOOKUP_F_REACHABLE)
380                         rt6_probe(match);
381                 *mpri = m;
382                 match = rt;
383         } else if (strict & RT6_LOOKUP_F_REACHABLE) {
384                 rt6_probe(rt);
385         }
386
387 out:
388         return match;
389 }
390
391 static struct rt6_info *find_rr_leaf(struct fib6_node *fn,
392                                      struct rt6_info *rr_head,
393                                      u32 metric, int oif, int strict)
394 {
395         struct rt6_info *rt, *match;
396         int mpri = -1;
397
398         match = NULL;
399         for (rt = rr_head; rt && rt->rt6i_metric == metric;
400              rt = rt->u.dst.rt6_next)
401                 match = find_match(rt, oif, strict, &mpri, match);
402         for (rt = fn->leaf; rt && rt != rr_head && rt->rt6i_metric == metric;
403              rt = rt->u.dst.rt6_next)
404                 match = find_match(rt, oif, strict, &mpri, match);
405
406         return match;
407 }
408
409 static struct rt6_info *rt6_select(struct fib6_node *fn, int oif, int strict)
410 {
411         struct rt6_info *match, *rt0;
412
413         RT6_TRACE("%s(fn->leaf=%p, oif=%d)\n",
414                   __FUNCTION__, fn->leaf, oif);
415
416         rt0 = fn->rr_ptr;
417         if (!rt0)
418                 fn->rr_ptr = rt0 = fn->leaf;
419
420         match = find_rr_leaf(fn, rt0, rt0->rt6i_metric, oif, strict);
421
422         if (!match &&
423             (strict & RT6_LOOKUP_F_REACHABLE)) {
424                 struct rt6_info *next = rt0->u.dst.rt6_next;
425
426                 /* no entries matched; do round-robin */
427                 if (!next || next->rt6i_metric != rt0->rt6i_metric)
428                         next = fn->leaf;
429
430                 if (next != rt0)
431                         fn->rr_ptr = next;
432         }
433
434         RT6_TRACE("%s() => %p\n",
435                   __FUNCTION__, match);
436
437         return (match ? match : &ip6_null_entry);
438 }
439
440 #ifdef CONFIG_IPV6_ROUTE_INFO
441 int rt6_route_rcv(struct net_device *dev, u8 *opt, int len,
442                   struct in6_addr *gwaddr)
443 {
444         struct route_info *rinfo = (struct route_info *) opt;
445         struct in6_addr prefix_buf, *prefix;
446         unsigned int pref;
447         u32 lifetime;
448         struct rt6_info *rt;
449
450         if (len < sizeof(struct route_info)) {
451                 return -EINVAL;
452         }
453
454         /* Sanity check for prefix_len and length */
455         if (rinfo->length > 3) {
456                 return -EINVAL;
457         } else if (rinfo->prefix_len > 128) {
458                 return -EINVAL;
459         } else if (rinfo->prefix_len > 64) {
460                 if (rinfo->length < 2) {
461                         return -EINVAL;
462                 }
463         } else if (rinfo->prefix_len > 0) {
464                 if (rinfo->length < 1) {
465                         return -EINVAL;
466                 }
467         }
468
469         pref = rinfo->route_pref;
470         if (pref == ICMPV6_ROUTER_PREF_INVALID)
471                 pref = ICMPV6_ROUTER_PREF_MEDIUM;
472
473         lifetime = ntohl(rinfo->lifetime);
474         if (lifetime == 0xffffffff) {
475                 /* infinity */
476         } else if (lifetime > 0x7fffffff/HZ) {
477                 /* Avoid arithmetic overflow */
478                 lifetime = 0x7fffffff/HZ - 1;
479         }
480
481         if (rinfo->length == 3)
482                 prefix = (struct in6_addr *)rinfo->prefix;
483         else {
484                 /* this function is safe */
485                 ipv6_addr_prefix(&prefix_buf,
486                                  (struct in6_addr *)rinfo->prefix,
487                                  rinfo->prefix_len);
488                 prefix = &prefix_buf;
489         }
490
491         rt = rt6_get_route_info(prefix, rinfo->prefix_len, gwaddr, dev->ifindex);
492
493         if (rt && !lifetime) {
494                 ip6_del_rt(rt);
495                 rt = NULL;
496         }
497
498         if (!rt && lifetime)
499                 rt = rt6_add_route_info(prefix, rinfo->prefix_len, gwaddr, dev->ifindex,
500                                         pref);
501         else if (rt)
502                 rt->rt6i_flags = RTF_ROUTEINFO |
503                                  (rt->rt6i_flags & ~RTF_PREF_MASK) | RTF_PREF(pref);
504
505         if (rt) {
506                 if (lifetime == 0xffffffff) {
507                         rt->rt6i_flags &= ~RTF_EXPIRES;
508                 } else {
509                         rt->rt6i_expires = jiffies + HZ * lifetime;
510                         rt->rt6i_flags |= RTF_EXPIRES;
511                 }
512                 dst_release(&rt->u.dst);
513         }
514         return 0;
515 }
516 #endif
517
518 #define BACKTRACK(saddr) \
519 do { \
520         if (rt == &ip6_null_entry) { \
521                 struct fib6_node *pn; \
522                 while (1) { \
523                         if (fn->fn_flags & RTN_TL_ROOT) \
524                                 goto out; \
525                         pn = fn->parent; \
526                         if (FIB6_SUBTREE(pn) && FIB6_SUBTREE(pn) != fn) \
527                                 fn = fib6_lookup(FIB6_SUBTREE(pn), NULL, saddr); \
528                         else \
529                                 fn = pn; \
530                         if (fn->fn_flags & RTN_RTINFO) \
531                                 goto restart; \
532                 } \
533         } \
534 } while(0)
535
536 static struct rt6_info *ip6_pol_route_lookup(struct fib6_table *table,
537                                              struct flowi *fl, int flags)
538 {
539         struct fib6_node *fn;
540         struct rt6_info *rt;
541
542         read_lock_bh(&table->tb6_lock);
543         fn = fib6_lookup(&table->tb6_root, &fl->fl6_dst, &fl->fl6_src);
544 restart:
545         rt = fn->leaf;
546         rt = rt6_device_match(rt, fl->oif, flags);
547         BACKTRACK(&fl->fl6_src);
548 out:
549         dst_use(&rt->u.dst, jiffies);
550         read_unlock_bh(&table->tb6_lock);
551         return rt;
552
553 }
554
555 struct rt6_info *rt6_lookup(struct in6_addr *daddr, struct in6_addr *saddr,
556                             int oif, int strict)
557 {
558         struct flowi fl = {
559                 .oif = oif,
560                 .nl_u = {
561                         .ip6_u = {
562                                 .daddr = *daddr,
563                         },
564                 },
565         };
566         struct dst_entry *dst;
567         int flags = strict ? RT6_LOOKUP_F_IFACE : 0;
568
569         if (saddr) {
570                 memcpy(&fl.fl6_src, saddr, sizeof(*saddr));
571                 flags |= RT6_LOOKUP_F_HAS_SADDR;
572         }
573
574         dst = fib6_rule_lookup(&fl, flags, ip6_pol_route_lookup);
575         if (dst->error == 0)
576                 return (struct rt6_info *) dst;
577
578         dst_release(dst);
579
580         return NULL;
581 }
582
583 EXPORT_SYMBOL(rt6_lookup);
584
585 /* ip6_ins_rt is called with FREE table->tb6_lock.
586    It takes new route entry, the addition fails by any reason the
587    route is freed. In any case, if caller does not hold it, it may
588    be destroyed.
589  */
590
591 static int __ip6_ins_rt(struct rt6_info *rt, struct nl_info *info)
592 {
593         int err;
594         struct fib6_table *table;
595
596         table = rt->rt6i_table;
597         write_lock_bh(&table->tb6_lock);
598         err = fib6_add(&table->tb6_root, rt, info);
599         write_unlock_bh(&table->tb6_lock);
600
601         return err;
602 }
603
604 int ip6_ins_rt(struct rt6_info *rt)
605 {
606         struct nl_info info = {
607                 .nl_net = &init_net,
608         };
609         return __ip6_ins_rt(rt, &info);
610 }
611
612 static struct rt6_info *rt6_alloc_cow(struct rt6_info *ort, struct in6_addr *daddr,
613                                       struct in6_addr *saddr)
614 {
615         struct rt6_info *rt;
616
617         /*
618          *      Clone the route.
619          */
620
621         rt = ip6_rt_copy(ort);
622
623         if (rt) {
624                 if (!(rt->rt6i_flags&RTF_GATEWAY)) {
625                         if (rt->rt6i_dst.plen != 128 &&
626                             ipv6_addr_equal(&rt->rt6i_dst.addr, daddr))
627                                 rt->rt6i_flags |= RTF_ANYCAST;
628                         ipv6_addr_copy(&rt->rt6i_gateway, daddr);
629                 }
630
631                 ipv6_addr_copy(&rt->rt6i_dst.addr, daddr);
632                 rt->rt6i_dst.plen = 128;
633                 rt->rt6i_flags |= RTF_CACHE;
634                 rt->u.dst.flags |= DST_HOST;
635
636 #ifdef CONFIG_IPV6_SUBTREES
637                 if (rt->rt6i_src.plen && saddr) {
638                         ipv6_addr_copy(&rt->rt6i_src.addr, saddr);
639                         rt->rt6i_src.plen = 128;
640                 }
641 #endif
642
643                 rt->rt6i_nexthop = ndisc_get_neigh(rt->rt6i_dev, &rt->rt6i_gateway);
644
645         }
646
647         return rt;
648 }
649
650 static struct rt6_info *rt6_alloc_clone(struct rt6_info *ort, struct in6_addr *daddr)
651 {
652         struct rt6_info *rt = ip6_rt_copy(ort);
653         if (rt) {
654                 ipv6_addr_copy(&rt->rt6i_dst.addr, daddr);
655                 rt->rt6i_dst.plen = 128;
656                 rt->rt6i_flags |= RTF_CACHE;
657                 rt->u.dst.flags |= DST_HOST;
658                 rt->rt6i_nexthop = neigh_clone(ort->rt6i_nexthop);
659         }
660         return rt;
661 }
662
663 static struct rt6_info *ip6_pol_route(struct fib6_table *table, int oif,
664                                             struct flowi *fl, int flags)
665 {
666         struct fib6_node *fn;
667         struct rt6_info *rt, *nrt;
668         int strict = 0;
669         int attempts = 3;
670         int err;
671         int reachable = ipv6_devconf.forwarding ? 0 : RT6_LOOKUP_F_REACHABLE;
672
673         strict |= flags & RT6_LOOKUP_F_IFACE;
674
675 relookup:
676         read_lock_bh(&table->tb6_lock);
677
678 restart_2:
679         fn = fib6_lookup(&table->tb6_root, &fl->fl6_dst, &fl->fl6_src);
680
681 restart:
682         rt = rt6_select(fn, oif, strict | reachable);
683         BACKTRACK(&fl->fl6_src);
684         if (rt == &ip6_null_entry ||
685             rt->rt6i_flags & RTF_CACHE)
686                 goto out;
687
688         dst_hold(&rt->u.dst);
689         read_unlock_bh(&table->tb6_lock);
690
691         if (!rt->rt6i_nexthop && !(rt->rt6i_flags & RTF_NONEXTHOP))
692                 nrt = rt6_alloc_cow(rt, &fl->fl6_dst, &fl->fl6_src);
693         else {
694 #if CLONE_OFFLINK_ROUTE
695                 nrt = rt6_alloc_clone(rt, &fl->fl6_dst);
696 #else
697                 goto out2;
698 #endif
699         }
700
701         dst_release(&rt->u.dst);
702         rt = nrt ? : &ip6_null_entry;
703
704         dst_hold(&rt->u.dst);
705         if (nrt) {
706                 err = ip6_ins_rt(nrt);
707                 if (!err)
708                         goto out2;
709         }
710
711         if (--attempts <= 0)
712                 goto out2;
713
714         /*
715          * Race condition! In the gap, when table->tb6_lock was
716          * released someone could insert this route.  Relookup.
717          */
718         dst_release(&rt->u.dst);
719         goto relookup;
720
721 out:
722         if (reachable) {
723                 reachable = 0;
724                 goto restart_2;
725         }
726         dst_hold(&rt->u.dst);
727         read_unlock_bh(&table->tb6_lock);
728 out2:
729         rt->u.dst.lastuse = jiffies;
730         rt->u.dst.__use++;
731
732         return rt;
733 }
734
735 static struct rt6_info *ip6_pol_route_input(struct fib6_table *table,
736                                             struct flowi *fl, int flags)
737 {
738         return ip6_pol_route(table, fl->iif, fl, flags);
739 }
740
741 void ip6_route_input(struct sk_buff *skb)
742 {
743         struct ipv6hdr *iph = ipv6_hdr(skb);
744         int flags = RT6_LOOKUP_F_HAS_SADDR;
745         struct flowi fl = {
746                 .iif = skb->dev->ifindex,
747                 .nl_u = {
748                         .ip6_u = {
749                                 .daddr = iph->daddr,
750                                 .saddr = iph->saddr,
751                                 .flowlabel = (* (__be32 *) iph)&IPV6_FLOWINFO_MASK,
752                         },
753                 },
754                 .mark = skb->mark,
755                 .proto = iph->nexthdr,
756         };
757
758         if (rt6_need_strict(&iph->daddr))
759                 flags |= RT6_LOOKUP_F_IFACE;
760
761         skb->dst = fib6_rule_lookup(&fl, flags, ip6_pol_route_input);
762 }
763
764 static struct rt6_info *ip6_pol_route_output(struct fib6_table *table,
765                                              struct flowi *fl, int flags)
766 {
767         return ip6_pol_route(table, fl->oif, fl, flags);
768 }
769
770 struct dst_entry * ip6_route_output(struct sock *sk, struct flowi *fl)
771 {
772         int flags = 0;
773
774         if (rt6_need_strict(&fl->fl6_dst))
775                 flags |= RT6_LOOKUP_F_IFACE;
776
777         if (!ipv6_addr_any(&fl->fl6_src))
778                 flags |= RT6_LOOKUP_F_HAS_SADDR;
779
780         return fib6_rule_lookup(fl, flags, ip6_pol_route_output);
781 }
782
783 EXPORT_SYMBOL(ip6_route_output);
784
785 int ip6_dst_blackhole(struct sock *sk, struct dst_entry **dstp, struct flowi *fl)
786 {
787         struct rt6_info *ort = (struct rt6_info *) *dstp;
788         struct rt6_info *rt = (struct rt6_info *)
789                 dst_alloc(&ip6_dst_blackhole_ops);
790         struct dst_entry *new = NULL;
791
792         if (rt) {
793                 new = &rt->u.dst;
794
795                 atomic_set(&new->__refcnt, 1);
796                 new->__use = 1;
797                 new->input = dst_discard;
798                 new->output = dst_discard;
799
800                 memcpy(new->metrics, ort->u.dst.metrics, RTAX_MAX*sizeof(u32));
801                 new->dev = ort->u.dst.dev;
802                 if (new->dev)
803                         dev_hold(new->dev);
804                 rt->rt6i_idev = ort->rt6i_idev;
805                 if (rt->rt6i_idev)
806                         in6_dev_hold(rt->rt6i_idev);
807                 rt->rt6i_expires = 0;
808
809                 ipv6_addr_copy(&rt->rt6i_gateway, &ort->rt6i_gateway);
810                 rt->rt6i_flags = ort->rt6i_flags & ~RTF_EXPIRES;
811                 rt->rt6i_metric = 0;
812
813                 memcpy(&rt->rt6i_dst, &ort->rt6i_dst, sizeof(struct rt6key));
814 #ifdef CONFIG_IPV6_SUBTREES
815                 memcpy(&rt->rt6i_src, &ort->rt6i_src, sizeof(struct rt6key));
816 #endif
817
818                 dst_free(new);
819         }
820
821         dst_release(*dstp);
822         *dstp = new;
823         return (new ? 0 : -ENOMEM);
824 }
825 EXPORT_SYMBOL_GPL(ip6_dst_blackhole);
826
827 /*
828  *      Destination cache support functions
829  */
830
831 static struct dst_entry *ip6_dst_check(struct dst_entry *dst, u32 cookie)
832 {
833         struct rt6_info *rt;
834
835         rt = (struct rt6_info *) dst;
836
837         if (rt && rt->rt6i_node && (rt->rt6i_node->fn_sernum == cookie))
838                 return dst;
839
840         return NULL;
841 }
842
843 static struct dst_entry *ip6_negative_advice(struct dst_entry *dst)
844 {
845         struct rt6_info *rt = (struct rt6_info *) dst;
846
847         if (rt) {
848                 if (rt->rt6i_flags & RTF_CACHE)
849                         ip6_del_rt(rt);
850                 else
851                         dst_release(dst);
852         }
853         return NULL;
854 }
855
856 static void ip6_link_failure(struct sk_buff *skb)
857 {
858         struct rt6_info *rt;
859
860         icmpv6_send(skb, ICMPV6_DEST_UNREACH, ICMPV6_ADDR_UNREACH, 0, skb->dev);
861
862         rt = (struct rt6_info *) skb->dst;
863         if (rt) {
864                 if (rt->rt6i_flags&RTF_CACHE) {
865                         dst_set_expires(&rt->u.dst, 0);
866                         rt->rt6i_flags |= RTF_EXPIRES;
867                 } else if (rt->rt6i_node && (rt->rt6i_flags & RTF_DEFAULT))
868                         rt->rt6i_node->fn_sernum = -1;
869         }
870 }
871
872 static void ip6_rt_update_pmtu(struct dst_entry *dst, u32 mtu)
873 {
874         struct rt6_info *rt6 = (struct rt6_info*)dst;
875
876         if (mtu < dst_mtu(dst) && rt6->rt6i_dst.plen == 128) {
877                 rt6->rt6i_flags |= RTF_MODIFIED;
878                 if (mtu < IPV6_MIN_MTU) {
879                         mtu = IPV6_MIN_MTU;
880                         dst->metrics[RTAX_FEATURES-1] |= RTAX_FEATURE_ALLFRAG;
881                 }
882                 dst->metrics[RTAX_MTU-1] = mtu;
883                 call_netevent_notifiers(NETEVENT_PMTU_UPDATE, dst);
884         }
885 }
886
887 static int ipv6_get_mtu(struct net_device *dev);
888
889 static inline unsigned int ipv6_advmss(unsigned int mtu)
890 {
891         mtu -= sizeof(struct ipv6hdr) + sizeof(struct tcphdr);
892
893         if (mtu < init_net.ipv6.sysctl.ip6_rt_min_advmss)
894                 mtu = init_net.ipv6.sysctl.ip6_rt_min_advmss;
895
896         /*
897          * Maximal non-jumbo IPv6 payload is IPV6_MAXPLEN and
898          * corresponding MSS is IPV6_MAXPLEN - tcp_header_size.
899          * IPV6_MAXPLEN is also valid and means: "any MSS,
900          * rely only on pmtu discovery"
901          */
902         if (mtu > IPV6_MAXPLEN - sizeof(struct tcphdr))
903                 mtu = IPV6_MAXPLEN;
904         return mtu;
905 }
906
907 static struct dst_entry *ndisc_dst_gc_list;
908 static DEFINE_SPINLOCK(ndisc_lock);
909
910 struct dst_entry *ndisc_dst_alloc(struct net_device *dev,
911                                   struct neighbour *neigh,
912                                   struct in6_addr *addr,
913                                   int (*output)(struct sk_buff *))
914 {
915         struct rt6_info *rt;
916         struct inet6_dev *idev = in6_dev_get(dev);
917
918         if (unlikely(idev == NULL))
919                 return NULL;
920
921         rt = ip6_dst_alloc();
922         if (unlikely(rt == NULL)) {
923                 in6_dev_put(idev);
924                 goto out;
925         }
926
927         dev_hold(dev);
928         if (neigh)
929                 neigh_hold(neigh);
930         else
931                 neigh = ndisc_get_neigh(dev, addr);
932
933         rt->rt6i_dev      = dev;
934         rt->rt6i_idev     = idev;
935         rt->rt6i_nexthop  = neigh;
936         atomic_set(&rt->u.dst.__refcnt, 1);
937         rt->u.dst.metrics[RTAX_HOPLIMIT-1] = 255;
938         rt->u.dst.metrics[RTAX_MTU-1] = ipv6_get_mtu(rt->rt6i_dev);
939         rt->u.dst.metrics[RTAX_ADVMSS-1] = ipv6_advmss(dst_mtu(&rt->u.dst));
940         rt->u.dst.output  = output;
941
942 #if 0   /* there's no chance to use these for ndisc */
943         rt->u.dst.flags   = ipv6_addr_type(addr) & IPV6_ADDR_UNICAST
944                                 ? DST_HOST
945                                 : 0;
946         ipv6_addr_copy(&rt->rt6i_dst.addr, addr);
947         rt->rt6i_dst.plen = 128;
948 #endif
949
950         spin_lock_bh(&ndisc_lock);
951         rt->u.dst.next = ndisc_dst_gc_list;
952         ndisc_dst_gc_list = &rt->u.dst;
953         spin_unlock_bh(&ndisc_lock);
954
955         fib6_force_start_gc();
956
957 out:
958         return &rt->u.dst;
959 }
960
961 int ndisc_dst_gc(int *more)
962 {
963         struct dst_entry *dst, *next, **pprev;
964         int freed;
965
966         next = NULL;
967         freed = 0;
968
969         spin_lock_bh(&ndisc_lock);
970         pprev = &ndisc_dst_gc_list;
971
972         while ((dst = *pprev) != NULL) {
973                 if (!atomic_read(&dst->__refcnt)) {
974                         *pprev = dst->next;
975                         dst_free(dst);
976                         freed++;
977                 } else {
978                         pprev = &dst->next;
979                         (*more)++;
980                 }
981         }
982
983         spin_unlock_bh(&ndisc_lock);
984
985         return freed;
986 }
987
988 static int ip6_dst_gc(struct dst_ops *ops)
989 {
990         static unsigned expire = 30*HZ;
991         static unsigned long last_gc;
992         unsigned long now = jiffies;
993
994         if (time_after(last_gc + init_net.ipv6.sysctl.ip6_rt_gc_min_interval, now) &&
995             atomic_read(&ip6_dst_ops.entries) <= init_net.ipv6.sysctl.ip6_rt_max_size)
996                 goto out;
997
998         expire++;
999         fib6_run_gc(expire);
1000         last_gc = now;
1001         if (atomic_read(&ip6_dst_ops.entries) < ip6_dst_ops.gc_thresh)
1002                 expire = init_net.ipv6.sysctl.ip6_rt_gc_timeout>>1;
1003
1004 out:
1005         expire -= expire>>init_net.ipv6.sysctl.ip6_rt_gc_elasticity;
1006         return (atomic_read(&ip6_dst_ops.entries) > init_net.ipv6.sysctl.ip6_rt_max_size);
1007 }
1008
1009 /* Clean host part of a prefix. Not necessary in radix tree,
1010    but results in cleaner routing tables.
1011
1012    Remove it only when all the things will work!
1013  */
1014
1015 static int ipv6_get_mtu(struct net_device *dev)
1016 {
1017         int mtu = IPV6_MIN_MTU;
1018         struct inet6_dev *idev;
1019
1020         idev = in6_dev_get(dev);
1021         if (idev) {
1022                 mtu = idev->cnf.mtu6;
1023                 in6_dev_put(idev);
1024         }
1025         return mtu;
1026 }
1027
1028 int ipv6_get_hoplimit(struct net_device *dev)
1029 {
1030         int hoplimit = ipv6_devconf.hop_limit;
1031         struct inet6_dev *idev;
1032
1033         idev = in6_dev_get(dev);
1034         if (idev) {
1035                 hoplimit = idev->cnf.hop_limit;
1036                 in6_dev_put(idev);
1037         }
1038         return hoplimit;
1039 }
1040
1041 /*
1042  *
1043  */
1044
1045 int ip6_route_add(struct fib6_config *cfg)
1046 {
1047         int err;
1048         struct rt6_info *rt = NULL;
1049         struct net_device *dev = NULL;
1050         struct inet6_dev *idev = NULL;
1051         struct fib6_table *table;
1052         int addr_type;
1053
1054         if (cfg->fc_dst_len > 128 || cfg->fc_src_len > 128)
1055                 return -EINVAL;
1056 #ifndef CONFIG_IPV6_SUBTREES
1057         if (cfg->fc_src_len)
1058                 return -EINVAL;
1059 #endif
1060         if (cfg->fc_ifindex) {
1061                 err = -ENODEV;
1062                 dev = dev_get_by_index(&init_net, cfg->fc_ifindex);
1063                 if (!dev)
1064                         goto out;
1065                 idev = in6_dev_get(dev);
1066                 if (!idev)
1067                         goto out;
1068         }
1069
1070         if (cfg->fc_metric == 0)
1071                 cfg->fc_metric = IP6_RT_PRIO_USER;
1072
1073         table = fib6_new_table(cfg->fc_table);
1074         if (table == NULL) {
1075                 err = -ENOBUFS;
1076                 goto out;
1077         }
1078
1079         rt = ip6_dst_alloc();
1080
1081         if (rt == NULL) {
1082                 err = -ENOMEM;
1083                 goto out;
1084         }
1085
1086         rt->u.dst.obsolete = -1;
1087         rt->rt6i_expires = jiffies + clock_t_to_jiffies(cfg->fc_expires);
1088
1089         if (cfg->fc_protocol == RTPROT_UNSPEC)
1090                 cfg->fc_protocol = RTPROT_BOOT;
1091         rt->rt6i_protocol = cfg->fc_protocol;
1092
1093         addr_type = ipv6_addr_type(&cfg->fc_dst);
1094
1095         if (addr_type & IPV6_ADDR_MULTICAST)
1096                 rt->u.dst.input = ip6_mc_input;
1097         else
1098                 rt->u.dst.input = ip6_forward;
1099
1100         rt->u.dst.output = ip6_output;
1101
1102         ipv6_addr_prefix(&rt->rt6i_dst.addr, &cfg->fc_dst, cfg->fc_dst_len);
1103         rt->rt6i_dst.plen = cfg->fc_dst_len;
1104         if (rt->rt6i_dst.plen == 128)
1105                rt->u.dst.flags = DST_HOST;
1106
1107 #ifdef CONFIG_IPV6_SUBTREES
1108         ipv6_addr_prefix(&rt->rt6i_src.addr, &cfg->fc_src, cfg->fc_src_len);
1109         rt->rt6i_src.plen = cfg->fc_src_len;
1110 #endif
1111
1112         rt->rt6i_metric = cfg->fc_metric;
1113
1114         /* We cannot add true routes via loopback here,
1115            they would result in kernel looping; promote them to reject routes
1116          */
1117         if ((cfg->fc_flags & RTF_REJECT) ||
1118             (dev && (dev->flags&IFF_LOOPBACK) && !(addr_type&IPV6_ADDR_LOOPBACK))) {
1119                 /* hold loopback dev/idev if we haven't done so. */
1120                 if (dev != init_net.loopback_dev) {
1121                         if (dev) {
1122                                 dev_put(dev);
1123                                 in6_dev_put(idev);
1124                         }
1125                         dev = init_net.loopback_dev;
1126                         dev_hold(dev);
1127                         idev = in6_dev_get(dev);
1128                         if (!idev) {
1129                                 err = -ENODEV;
1130                                 goto out;
1131                         }
1132                 }
1133                 rt->u.dst.output = ip6_pkt_discard_out;
1134                 rt->u.dst.input = ip6_pkt_discard;
1135                 rt->u.dst.error = -ENETUNREACH;
1136                 rt->rt6i_flags = RTF_REJECT|RTF_NONEXTHOP;
1137                 goto install_route;
1138         }
1139
1140         if (cfg->fc_flags & RTF_GATEWAY) {
1141                 struct in6_addr *gw_addr;
1142                 int gwa_type;
1143
1144                 gw_addr = &cfg->fc_gateway;
1145                 ipv6_addr_copy(&rt->rt6i_gateway, gw_addr);
1146                 gwa_type = ipv6_addr_type(gw_addr);
1147
1148                 if (gwa_type != (IPV6_ADDR_LINKLOCAL|IPV6_ADDR_UNICAST)) {
1149                         struct rt6_info *grt;
1150
1151                         /* IPv6 strictly inhibits using not link-local
1152                            addresses as nexthop address.
1153                            Otherwise, router will not able to send redirects.
1154                            It is very good, but in some (rare!) circumstances
1155                            (SIT, PtP, NBMA NOARP links) it is handy to allow
1156                            some exceptions. --ANK
1157                          */
1158                         err = -EINVAL;
1159                         if (!(gwa_type&IPV6_ADDR_UNICAST))
1160                                 goto out;
1161
1162                         grt = rt6_lookup(gw_addr, NULL, cfg->fc_ifindex, 1);
1163
1164                         err = -EHOSTUNREACH;
1165                         if (grt == NULL)
1166                                 goto out;
1167                         if (dev) {
1168                                 if (dev != grt->rt6i_dev) {
1169                                         dst_release(&grt->u.dst);
1170                                         goto out;
1171                                 }
1172                         } else {
1173                                 dev = grt->rt6i_dev;
1174                                 idev = grt->rt6i_idev;
1175                                 dev_hold(dev);
1176                                 in6_dev_hold(grt->rt6i_idev);
1177                         }
1178                         if (!(grt->rt6i_flags&RTF_GATEWAY))
1179                                 err = 0;
1180                         dst_release(&grt->u.dst);
1181
1182                         if (err)
1183                                 goto out;
1184                 }
1185                 err = -EINVAL;
1186                 if (dev == NULL || (dev->flags&IFF_LOOPBACK))
1187                         goto out;
1188         }
1189
1190         err = -ENODEV;
1191         if (dev == NULL)
1192                 goto out;
1193
1194         if (cfg->fc_flags & (RTF_GATEWAY | RTF_NONEXTHOP)) {
1195                 rt->rt6i_nexthop = __neigh_lookup_errno(&nd_tbl, &rt->rt6i_gateway, dev);
1196                 if (IS_ERR(rt->rt6i_nexthop)) {
1197                         err = PTR_ERR(rt->rt6i_nexthop);
1198                         rt->rt6i_nexthop = NULL;
1199                         goto out;
1200                 }
1201         }
1202
1203         rt->rt6i_flags = cfg->fc_flags;
1204
1205 install_route:
1206         if (cfg->fc_mx) {
1207                 struct nlattr *nla;
1208                 int remaining;
1209
1210                 nla_for_each_attr(nla, cfg->fc_mx, cfg->fc_mx_len, remaining) {
1211                         int type = nla_type(nla);
1212
1213                         if (type) {
1214                                 if (type > RTAX_MAX) {
1215                                         err = -EINVAL;
1216                                         goto out;
1217                                 }
1218
1219                                 rt->u.dst.metrics[type - 1] = nla_get_u32(nla);
1220                         }
1221                 }
1222         }
1223
1224         if (rt->u.dst.metrics[RTAX_HOPLIMIT-1] == 0)
1225                 rt->u.dst.metrics[RTAX_HOPLIMIT-1] = -1;
1226         if (!rt->u.dst.metrics[RTAX_MTU-1])
1227                 rt->u.dst.metrics[RTAX_MTU-1] = ipv6_get_mtu(dev);
1228         if (!rt->u.dst.metrics[RTAX_ADVMSS-1])
1229                 rt->u.dst.metrics[RTAX_ADVMSS-1] = ipv6_advmss(dst_mtu(&rt->u.dst));
1230         rt->u.dst.dev = dev;
1231         rt->rt6i_idev = idev;
1232         rt->rt6i_table = table;
1233         return __ip6_ins_rt(rt, &cfg->fc_nlinfo);
1234
1235 out:
1236         if (dev)
1237                 dev_put(dev);
1238         if (idev)
1239                 in6_dev_put(idev);
1240         if (rt)
1241                 dst_free(&rt->u.dst);
1242         return err;
1243 }
1244
1245 static int __ip6_del_rt(struct rt6_info *rt, struct nl_info *info)
1246 {
1247         int err;
1248         struct fib6_table *table;
1249
1250         if (rt == &ip6_null_entry)
1251                 return -ENOENT;
1252
1253         table = rt->rt6i_table;
1254         write_lock_bh(&table->tb6_lock);
1255
1256         err = fib6_del(rt, info);
1257         dst_release(&rt->u.dst);
1258
1259         write_unlock_bh(&table->tb6_lock);
1260
1261         return err;
1262 }
1263
1264 int ip6_del_rt(struct rt6_info *rt)
1265 {
1266         struct nl_info info = {
1267                 .nl_net = &init_net,
1268         };
1269         return __ip6_del_rt(rt, &info);
1270 }
1271
1272 static int ip6_route_del(struct fib6_config *cfg)
1273 {
1274         struct fib6_table *table;
1275         struct fib6_node *fn;
1276         struct rt6_info *rt;
1277         int err = -ESRCH;
1278
1279         table = fib6_get_table(cfg->fc_table);
1280         if (table == NULL)
1281                 return err;
1282
1283         read_lock_bh(&table->tb6_lock);
1284
1285         fn = fib6_locate(&table->tb6_root,
1286                          &cfg->fc_dst, cfg->fc_dst_len,
1287                          &cfg->fc_src, cfg->fc_src_len);
1288
1289         if (fn) {
1290                 for (rt = fn->leaf; rt; rt = rt->u.dst.rt6_next) {
1291                         if (cfg->fc_ifindex &&
1292                             (rt->rt6i_dev == NULL ||
1293                              rt->rt6i_dev->ifindex != cfg->fc_ifindex))
1294                                 continue;
1295                         if (cfg->fc_flags & RTF_GATEWAY &&
1296                             !ipv6_addr_equal(&cfg->fc_gateway, &rt->rt6i_gateway))
1297                                 continue;
1298                         if (cfg->fc_metric && cfg->fc_metric != rt->rt6i_metric)
1299                                 continue;
1300                         dst_hold(&rt->u.dst);
1301                         read_unlock_bh(&table->tb6_lock);
1302
1303                         return __ip6_del_rt(rt, &cfg->fc_nlinfo);
1304                 }
1305         }
1306         read_unlock_bh(&table->tb6_lock);
1307
1308         return err;
1309 }
1310
1311 /*
1312  *      Handle redirects
1313  */
1314 struct ip6rd_flowi {
1315         struct flowi fl;
1316         struct in6_addr gateway;
1317 };
1318
1319 static struct rt6_info *__ip6_route_redirect(struct fib6_table *table,
1320                                              struct flowi *fl,
1321                                              int flags)
1322 {
1323         struct ip6rd_flowi *rdfl = (struct ip6rd_flowi *)fl;
1324         struct rt6_info *rt;
1325         struct fib6_node *fn;
1326
1327         /*
1328          * Get the "current" route for this destination and
1329          * check if the redirect has come from approriate router.
1330          *
1331          * RFC 2461 specifies that redirects should only be
1332          * accepted if they come from the nexthop to the target.
1333          * Due to the way the routes are chosen, this notion
1334          * is a bit fuzzy and one might need to check all possible
1335          * routes.
1336          */
1337
1338         read_lock_bh(&table->tb6_lock);
1339         fn = fib6_lookup(&table->tb6_root, &fl->fl6_dst, &fl->fl6_src);
1340 restart:
1341         for (rt = fn->leaf; rt; rt = rt->u.dst.rt6_next) {
1342                 /*
1343                  * Current route is on-link; redirect is always invalid.
1344                  *
1345                  * Seems, previous statement is not true. It could
1346                  * be node, which looks for us as on-link (f.e. proxy ndisc)
1347                  * But then router serving it might decide, that we should
1348                  * know truth 8)8) --ANK (980726).
1349                  */
1350                 if (rt6_check_expired(rt))
1351                         continue;
1352                 if (!(rt->rt6i_flags & RTF_GATEWAY))
1353                         continue;
1354                 if (fl->oif != rt->rt6i_dev->ifindex)
1355                         continue;
1356                 if (!ipv6_addr_equal(&rdfl->gateway, &rt->rt6i_gateway))
1357                         continue;
1358                 break;
1359         }
1360
1361         if (!rt)
1362                 rt = &ip6_null_entry;
1363         BACKTRACK(&fl->fl6_src);
1364 out:
1365         dst_hold(&rt->u.dst);
1366
1367         read_unlock_bh(&table->tb6_lock);
1368
1369         return rt;
1370 };
1371
1372 static struct rt6_info *ip6_route_redirect(struct in6_addr *dest,
1373                                            struct in6_addr *src,
1374                                            struct in6_addr *gateway,
1375                                            struct net_device *dev)
1376 {
1377         int flags = RT6_LOOKUP_F_HAS_SADDR;
1378         struct ip6rd_flowi rdfl = {
1379                 .fl = {
1380                         .oif = dev->ifindex,
1381                         .nl_u = {
1382                                 .ip6_u = {
1383                                         .daddr = *dest,
1384                                         .saddr = *src,
1385                                 },
1386                         },
1387                 },
1388                 .gateway = *gateway,
1389         };
1390
1391         if (rt6_need_strict(dest))
1392                 flags |= RT6_LOOKUP_F_IFACE;
1393
1394         return (struct rt6_info *)fib6_rule_lookup((struct flowi *)&rdfl, flags, __ip6_route_redirect);
1395 }
1396
1397 void rt6_redirect(struct in6_addr *dest, struct in6_addr *src,
1398                   struct in6_addr *saddr,
1399                   struct neighbour *neigh, u8 *lladdr, int on_link)
1400 {
1401         struct rt6_info *rt, *nrt = NULL;
1402         struct netevent_redirect netevent;
1403
1404         rt = ip6_route_redirect(dest, src, saddr, neigh->dev);
1405
1406         if (rt == &ip6_null_entry) {
1407                 if (net_ratelimit())
1408                         printk(KERN_DEBUG "rt6_redirect: source isn't a valid nexthop "
1409                                "for redirect target\n");
1410                 goto out;
1411         }
1412
1413         /*
1414          *      We have finally decided to accept it.
1415          */
1416
1417         neigh_update(neigh, lladdr, NUD_STALE,
1418                      NEIGH_UPDATE_F_WEAK_OVERRIDE|
1419                      NEIGH_UPDATE_F_OVERRIDE|
1420                      (on_link ? 0 : (NEIGH_UPDATE_F_OVERRIDE_ISROUTER|
1421                                      NEIGH_UPDATE_F_ISROUTER))
1422                      );
1423
1424         /*
1425          * Redirect received -> path was valid.
1426          * Look, redirects are sent only in response to data packets,
1427          * so that this nexthop apparently is reachable. --ANK
1428          */
1429         dst_confirm(&rt->u.dst);
1430
1431         /* Duplicate redirect: silently ignore. */
1432         if (neigh == rt->u.dst.neighbour)
1433                 goto out;
1434
1435         nrt = ip6_rt_copy(rt);
1436         if (nrt == NULL)
1437                 goto out;
1438
1439         nrt->rt6i_flags = RTF_GATEWAY|RTF_UP|RTF_DYNAMIC|RTF_CACHE;
1440         if (on_link)
1441                 nrt->rt6i_flags &= ~RTF_GATEWAY;
1442
1443         ipv6_addr_copy(&nrt->rt6i_dst.addr, dest);
1444         nrt->rt6i_dst.plen = 128;
1445         nrt->u.dst.flags |= DST_HOST;
1446
1447         ipv6_addr_copy(&nrt->rt6i_gateway, (struct in6_addr*)neigh->primary_key);
1448         nrt->rt6i_nexthop = neigh_clone(neigh);
1449         /* Reset pmtu, it may be better */
1450         nrt->u.dst.metrics[RTAX_MTU-1] = ipv6_get_mtu(neigh->dev);
1451         nrt->u.dst.metrics[RTAX_ADVMSS-1] = ipv6_advmss(dst_mtu(&nrt->u.dst));
1452
1453         if (ip6_ins_rt(nrt))
1454                 goto out;
1455
1456         netevent.old = &rt->u.dst;
1457         netevent.new = &nrt->u.dst;
1458         call_netevent_notifiers(NETEVENT_REDIRECT, &netevent);
1459
1460         if (rt->rt6i_flags&RTF_CACHE) {
1461                 ip6_del_rt(rt);
1462                 return;
1463         }
1464
1465 out:
1466         dst_release(&rt->u.dst);
1467         return;
1468 }
1469
1470 /*
1471  *      Handle ICMP "packet too big" messages
1472  *      i.e. Path MTU discovery
1473  */
1474
1475 void rt6_pmtu_discovery(struct in6_addr *daddr, struct in6_addr *saddr,
1476                         struct net_device *dev, u32 pmtu)
1477 {
1478         struct rt6_info *rt, *nrt;
1479         int allfrag = 0;
1480
1481         rt = rt6_lookup(daddr, saddr, dev->ifindex, 0);
1482         if (rt == NULL)
1483                 return;
1484
1485         if (pmtu >= dst_mtu(&rt->u.dst))
1486                 goto out;
1487
1488         if (pmtu < IPV6_MIN_MTU) {
1489                 /*
1490                  * According to RFC2460, PMTU is set to the IPv6 Minimum Link
1491                  * MTU (1280) and a fragment header should always be included
1492                  * after a node receiving Too Big message reporting PMTU is
1493                  * less than the IPv6 Minimum Link MTU.
1494                  */
1495                 pmtu = IPV6_MIN_MTU;
1496                 allfrag = 1;
1497         }
1498
1499         /* New mtu received -> path was valid.
1500            They are sent only in response to data packets,
1501            so that this nexthop apparently is reachable. --ANK
1502          */
1503         dst_confirm(&rt->u.dst);
1504
1505         /* Host route. If it is static, it would be better
1506            not to override it, but add new one, so that
1507            when cache entry will expire old pmtu
1508            would return automatically.
1509          */
1510         if (rt->rt6i_flags & RTF_CACHE) {
1511                 rt->u.dst.metrics[RTAX_MTU-1] = pmtu;
1512                 if (allfrag)
1513                         rt->u.dst.metrics[RTAX_FEATURES-1] |= RTAX_FEATURE_ALLFRAG;
1514                 dst_set_expires(&rt->u.dst, init_net.ipv6.sysctl.ip6_rt_mtu_expires);
1515                 rt->rt6i_flags |= RTF_MODIFIED|RTF_EXPIRES;
1516                 goto out;
1517         }
1518
1519         /* Network route.
1520            Two cases are possible:
1521            1. It is connected route. Action: COW
1522            2. It is gatewayed route or NONEXTHOP route. Action: clone it.
1523          */
1524         if (!rt->rt6i_nexthop && !(rt->rt6i_flags & RTF_NONEXTHOP))
1525                 nrt = rt6_alloc_cow(rt, daddr, saddr);
1526         else
1527                 nrt = rt6_alloc_clone(rt, daddr);
1528
1529         if (nrt) {
1530                 nrt->u.dst.metrics[RTAX_MTU-1] = pmtu;
1531                 if (allfrag)
1532                         nrt->u.dst.metrics[RTAX_FEATURES-1] |= RTAX_FEATURE_ALLFRAG;
1533
1534                 /* According to RFC 1981, detecting PMTU increase shouldn't be
1535                  * happened within 5 mins, the recommended timer is 10 mins.
1536                  * Here this route expiration time is set to ip6_rt_mtu_expires
1537                  * which is 10 mins. After 10 mins the decreased pmtu is expired
1538                  * and detecting PMTU increase will be automatically happened.
1539                  */
1540                 dst_set_expires(&nrt->u.dst, init_net.ipv6.sysctl.ip6_rt_mtu_expires);
1541                 nrt->rt6i_flags |= RTF_DYNAMIC|RTF_EXPIRES;
1542
1543                 ip6_ins_rt(nrt);
1544         }
1545 out:
1546         dst_release(&rt->u.dst);
1547 }
1548
1549 /*
1550  *      Misc support functions
1551  */
1552
1553 static struct rt6_info * ip6_rt_copy(struct rt6_info *ort)
1554 {
1555         struct rt6_info *rt = ip6_dst_alloc();
1556
1557         if (rt) {
1558                 rt->u.dst.input = ort->u.dst.input;
1559                 rt->u.dst.output = ort->u.dst.output;
1560
1561                 memcpy(rt->u.dst.metrics, ort->u.dst.metrics, RTAX_MAX*sizeof(u32));
1562                 rt->u.dst.error = ort->u.dst.error;
1563                 rt->u.dst.dev = ort->u.dst.dev;
1564                 if (rt->u.dst.dev)
1565                         dev_hold(rt->u.dst.dev);
1566                 rt->rt6i_idev = ort->rt6i_idev;
1567                 if (rt->rt6i_idev)
1568                         in6_dev_hold(rt->rt6i_idev);
1569                 rt->u.dst.lastuse = jiffies;
1570                 rt->rt6i_expires = 0;
1571
1572                 ipv6_addr_copy(&rt->rt6i_gateway, &ort->rt6i_gateway);
1573                 rt->rt6i_flags = ort->rt6i_flags & ~RTF_EXPIRES;
1574                 rt->rt6i_metric = 0;
1575
1576                 memcpy(&rt->rt6i_dst, &ort->rt6i_dst, sizeof(struct rt6key));
1577 #ifdef CONFIG_IPV6_SUBTREES
1578                 memcpy(&rt->rt6i_src, &ort->rt6i_src, sizeof(struct rt6key));
1579 #endif
1580                 rt->rt6i_table = ort->rt6i_table;
1581         }
1582         return rt;
1583 }
1584
1585 #ifdef CONFIG_IPV6_ROUTE_INFO
1586 static struct rt6_info *rt6_get_route_info(struct in6_addr *prefix, int prefixlen,
1587                                            struct in6_addr *gwaddr, int ifindex)
1588 {
1589         struct fib6_node *fn;
1590         struct rt6_info *rt = NULL;
1591         struct fib6_table *table;
1592
1593         table = fib6_get_table(RT6_TABLE_INFO);
1594         if (table == NULL)
1595                 return NULL;
1596
1597         write_lock_bh(&table->tb6_lock);
1598         fn = fib6_locate(&table->tb6_root, prefix ,prefixlen, NULL, 0);
1599         if (!fn)
1600                 goto out;
1601
1602         for (rt = fn->leaf; rt; rt = rt->u.dst.rt6_next) {
1603                 if (rt->rt6i_dev->ifindex != ifindex)
1604                         continue;
1605                 if ((rt->rt6i_flags & (RTF_ROUTEINFO|RTF_GATEWAY)) != (RTF_ROUTEINFO|RTF_GATEWAY))
1606                         continue;
1607                 if (!ipv6_addr_equal(&rt->rt6i_gateway, gwaddr))
1608                         continue;
1609                 dst_hold(&rt->u.dst);
1610                 break;
1611         }
1612 out:
1613         write_unlock_bh(&table->tb6_lock);
1614         return rt;
1615 }
1616
1617 static struct rt6_info *rt6_add_route_info(struct in6_addr *prefix, int prefixlen,
1618                                            struct in6_addr *gwaddr, int ifindex,
1619                                            unsigned pref)
1620 {
1621         struct fib6_config cfg = {
1622                 .fc_table       = RT6_TABLE_INFO,
1623                 .fc_metric      = 1024,
1624                 .fc_ifindex     = ifindex,
1625                 .fc_dst_len     = prefixlen,
1626                 .fc_flags       = RTF_GATEWAY | RTF_ADDRCONF | RTF_ROUTEINFO |
1627                                   RTF_UP | RTF_PREF(pref),
1628         };
1629
1630         ipv6_addr_copy(&cfg.fc_dst, prefix);
1631         ipv6_addr_copy(&cfg.fc_gateway, gwaddr);
1632
1633         /* We should treat it as a default route if prefix length is 0. */
1634         if (!prefixlen)
1635                 cfg.fc_flags |= RTF_DEFAULT;
1636
1637         ip6_route_add(&cfg);
1638
1639         return rt6_get_route_info(prefix, prefixlen, gwaddr, ifindex);
1640 }
1641 #endif
1642
1643 struct rt6_info *rt6_get_dflt_router(struct in6_addr *addr, struct net_device *dev)
1644 {
1645         struct rt6_info *rt;
1646         struct fib6_table *table;
1647
1648         table = fib6_get_table(RT6_TABLE_DFLT);
1649         if (table == NULL)
1650                 return NULL;
1651
1652         write_lock_bh(&table->tb6_lock);
1653         for (rt = table->tb6_root.leaf; rt; rt=rt->u.dst.rt6_next) {
1654                 if (dev == rt->rt6i_dev &&
1655                     ((rt->rt6i_flags & (RTF_ADDRCONF | RTF_DEFAULT)) == (RTF_ADDRCONF | RTF_DEFAULT)) &&
1656                     ipv6_addr_equal(&rt->rt6i_gateway, addr))
1657                         break;
1658         }
1659         if (rt)
1660                 dst_hold(&rt->u.dst);
1661         write_unlock_bh(&table->tb6_lock);
1662         return rt;
1663 }
1664
1665 EXPORT_SYMBOL(rt6_get_dflt_router);
1666
1667 struct rt6_info *rt6_add_dflt_router(struct in6_addr *gwaddr,
1668                                      struct net_device *dev,
1669                                      unsigned int pref)
1670 {
1671         struct fib6_config cfg = {
1672                 .fc_table       = RT6_TABLE_DFLT,
1673                 .fc_metric      = 1024,
1674                 .fc_ifindex     = dev->ifindex,
1675                 .fc_flags       = RTF_GATEWAY | RTF_ADDRCONF | RTF_DEFAULT |
1676                                   RTF_UP | RTF_EXPIRES | RTF_PREF(pref),
1677         };
1678
1679         ipv6_addr_copy(&cfg.fc_gateway, gwaddr);
1680
1681         ip6_route_add(&cfg);
1682
1683         return rt6_get_dflt_router(gwaddr, dev);
1684 }
1685
1686 void rt6_purge_dflt_routers(void)
1687 {
1688         struct rt6_info *rt;
1689         struct fib6_table *table;
1690
1691         /* NOTE: Keep consistent with rt6_get_dflt_router */
1692         table = fib6_get_table(RT6_TABLE_DFLT);
1693         if (table == NULL)
1694                 return;
1695
1696 restart:
1697         read_lock_bh(&table->tb6_lock);
1698         for (rt = table->tb6_root.leaf; rt; rt = rt->u.dst.rt6_next) {
1699                 if (rt->rt6i_flags & (RTF_DEFAULT | RTF_ADDRCONF)) {
1700                         dst_hold(&rt->u.dst);
1701                         read_unlock_bh(&table->tb6_lock);
1702                         ip6_del_rt(rt);
1703                         goto restart;
1704                 }
1705         }
1706         read_unlock_bh(&table->tb6_lock);
1707 }
1708
1709 static void rtmsg_to_fib6_config(struct in6_rtmsg *rtmsg,
1710                                  struct fib6_config *cfg)
1711 {
1712         memset(cfg, 0, sizeof(*cfg));
1713
1714         cfg->fc_table = RT6_TABLE_MAIN;
1715         cfg->fc_ifindex = rtmsg->rtmsg_ifindex;
1716         cfg->fc_metric = rtmsg->rtmsg_metric;
1717         cfg->fc_expires = rtmsg->rtmsg_info;
1718         cfg->fc_dst_len = rtmsg->rtmsg_dst_len;
1719         cfg->fc_src_len = rtmsg->rtmsg_src_len;
1720         cfg->fc_flags = rtmsg->rtmsg_flags;
1721
1722         ipv6_addr_copy(&cfg->fc_dst, &rtmsg->rtmsg_dst);
1723         ipv6_addr_copy(&cfg->fc_src, &rtmsg->rtmsg_src);
1724         ipv6_addr_copy(&cfg->fc_gateway, &rtmsg->rtmsg_gateway);
1725 }
1726
1727 int ipv6_route_ioctl(unsigned int cmd, void __user *arg)
1728 {
1729         struct fib6_config cfg;
1730         struct in6_rtmsg rtmsg;
1731         int err;
1732
1733         switch(cmd) {
1734         case SIOCADDRT:         /* Add a route */
1735         case SIOCDELRT:         /* Delete a route */
1736                 if (!capable(CAP_NET_ADMIN))
1737                         return -EPERM;
1738                 err = copy_from_user(&rtmsg, arg,
1739                                      sizeof(struct in6_rtmsg));
1740                 if (err)
1741                         return -EFAULT;
1742
1743                 rtmsg_to_fib6_config(&rtmsg, &cfg);
1744
1745                 rtnl_lock();
1746                 switch (cmd) {
1747                 case SIOCADDRT:
1748                         err = ip6_route_add(&cfg);
1749                         break;
1750                 case SIOCDELRT:
1751                         err = ip6_route_del(&cfg);
1752                         break;
1753                 default:
1754                         err = -EINVAL;
1755                 }
1756                 rtnl_unlock();
1757
1758                 return err;
1759         }
1760
1761         return -EINVAL;
1762 }
1763
1764 /*
1765  *      Drop the packet on the floor
1766  */
1767
1768 static int ip6_pkt_drop(struct sk_buff *skb, int code, int ipstats_mib_noroutes)
1769 {
1770         int type;
1771         switch (ipstats_mib_noroutes) {
1772         case IPSTATS_MIB_INNOROUTES:
1773                 type = ipv6_addr_type(&ipv6_hdr(skb)->daddr);
1774                 if (type == IPV6_ADDR_ANY || type == IPV6_ADDR_RESERVED) {
1775                         IP6_INC_STATS(ip6_dst_idev(skb->dst), IPSTATS_MIB_INADDRERRORS);
1776                         break;
1777                 }
1778                 /* FALLTHROUGH */
1779         case IPSTATS_MIB_OUTNOROUTES:
1780                 IP6_INC_STATS(ip6_dst_idev(skb->dst), ipstats_mib_noroutes);
1781                 break;
1782         }
1783         icmpv6_send(skb, ICMPV6_DEST_UNREACH, code, 0, skb->dev);
1784         kfree_skb(skb);
1785         return 0;
1786 }
1787
1788 static int ip6_pkt_discard(struct sk_buff *skb)
1789 {
1790         return ip6_pkt_drop(skb, ICMPV6_NOROUTE, IPSTATS_MIB_INNOROUTES);
1791 }
1792
1793 static int ip6_pkt_discard_out(struct sk_buff *skb)
1794 {
1795         skb->dev = skb->dst->dev;
1796         return ip6_pkt_drop(skb, ICMPV6_NOROUTE, IPSTATS_MIB_OUTNOROUTES);
1797 }
1798
1799 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
1800
1801 static int ip6_pkt_prohibit(struct sk_buff *skb)
1802 {
1803         return ip6_pkt_drop(skb, ICMPV6_ADM_PROHIBITED, IPSTATS_MIB_INNOROUTES);
1804 }
1805
1806 static int ip6_pkt_prohibit_out(struct sk_buff *skb)
1807 {
1808         skb->dev = skb->dst->dev;
1809         return ip6_pkt_drop(skb, ICMPV6_ADM_PROHIBITED, IPSTATS_MIB_OUTNOROUTES);
1810 }
1811
1812 #endif
1813
1814 /*
1815  *      Allocate a dst for local (unicast / anycast) address.
1816  */
1817
1818 struct rt6_info *addrconf_dst_alloc(struct inet6_dev *idev,
1819                                     const struct in6_addr *addr,
1820                                     int anycast)
1821 {
1822         struct rt6_info *rt = ip6_dst_alloc();
1823
1824         if (rt == NULL)
1825                 return ERR_PTR(-ENOMEM);
1826
1827         dev_hold(init_net.loopback_dev);
1828         in6_dev_hold(idev);
1829
1830         rt->u.dst.flags = DST_HOST;
1831         rt->u.dst.input = ip6_input;
1832         rt->u.dst.output = ip6_output;
1833         rt->rt6i_dev = init_net.loopback_dev;
1834         rt->rt6i_idev = idev;
1835         rt->u.dst.metrics[RTAX_MTU-1] = ipv6_get_mtu(rt->rt6i_dev);
1836         rt->u.dst.metrics[RTAX_ADVMSS-1] = ipv6_advmss(dst_mtu(&rt->u.dst));
1837         rt->u.dst.metrics[RTAX_HOPLIMIT-1] = -1;
1838         rt->u.dst.obsolete = -1;
1839
1840         rt->rt6i_flags = RTF_UP | RTF_NONEXTHOP;
1841         if (anycast)
1842                 rt->rt6i_flags |= RTF_ANYCAST;
1843         else
1844                 rt->rt6i_flags |= RTF_LOCAL;
1845         rt->rt6i_nexthop = ndisc_get_neigh(rt->rt6i_dev, &rt->rt6i_gateway);
1846         if (rt->rt6i_nexthop == NULL) {
1847                 dst_free(&rt->u.dst);
1848                 return ERR_PTR(-ENOMEM);
1849         }
1850
1851         ipv6_addr_copy(&rt->rt6i_dst.addr, addr);
1852         rt->rt6i_dst.plen = 128;
1853         rt->rt6i_table = fib6_get_table(RT6_TABLE_LOCAL);
1854
1855         atomic_set(&rt->u.dst.__refcnt, 1);
1856
1857         return rt;
1858 }
1859
1860 static int fib6_ifdown(struct rt6_info *rt, void *arg)
1861 {
1862         if (((void*)rt->rt6i_dev == arg || arg == NULL) &&
1863             rt != &ip6_null_entry) {
1864                 RT6_TRACE("deleted by ifdown %p\n", rt);
1865                 return -1;
1866         }
1867         return 0;
1868 }
1869
1870 void rt6_ifdown(struct net_device *dev)
1871 {
1872         fib6_clean_all(fib6_ifdown, 0, dev);
1873 }
1874
1875 struct rt6_mtu_change_arg
1876 {
1877         struct net_device *dev;
1878         unsigned mtu;
1879 };
1880
1881 static int rt6_mtu_change_route(struct rt6_info *rt, void *p_arg)
1882 {
1883         struct rt6_mtu_change_arg *arg = (struct rt6_mtu_change_arg *) p_arg;
1884         struct inet6_dev *idev;
1885
1886         /* In IPv6 pmtu discovery is not optional,
1887            so that RTAX_MTU lock cannot disable it.
1888            We still use this lock to block changes
1889            caused by addrconf/ndisc.
1890         */
1891
1892         idev = __in6_dev_get(arg->dev);
1893         if (idev == NULL)
1894                 return 0;
1895
1896         /* For administrative MTU increase, there is no way to discover
1897            IPv6 PMTU increase, so PMTU increase should be updated here.
1898            Since RFC 1981 doesn't include administrative MTU increase
1899            update PMTU increase is a MUST. (i.e. jumbo frame)
1900          */
1901         /*
1902            If new MTU is less than route PMTU, this new MTU will be the
1903            lowest MTU in the path, update the route PMTU to reflect PMTU
1904            decreases; if new MTU is greater than route PMTU, and the
1905            old MTU is the lowest MTU in the path, update the route PMTU
1906            to reflect the increase. In this case if the other nodes' MTU
1907            also have the lowest MTU, TOO BIG MESSAGE will be lead to
1908            PMTU discouvery.
1909          */
1910         if (rt->rt6i_dev == arg->dev &&
1911             !dst_metric_locked(&rt->u.dst, RTAX_MTU) &&
1912             (dst_mtu(&rt->u.dst) >= arg->mtu ||
1913              (dst_mtu(&rt->u.dst) < arg->mtu &&
1914               dst_mtu(&rt->u.dst) == idev->cnf.mtu6))) {
1915                 rt->u.dst.metrics[RTAX_MTU-1] = arg->mtu;
1916                 rt->u.dst.metrics[RTAX_ADVMSS-1] = ipv6_advmss(arg->mtu);
1917         }
1918         return 0;
1919 }
1920
1921 void rt6_mtu_change(struct net_device *dev, unsigned mtu)
1922 {
1923         struct rt6_mtu_change_arg arg = {
1924                 .dev = dev,
1925                 .mtu = mtu,
1926         };
1927
1928         fib6_clean_all(rt6_mtu_change_route, 0, &arg);
1929 }
1930
1931 static const struct nla_policy rtm_ipv6_policy[RTA_MAX+1] = {
1932         [RTA_GATEWAY]           = { .len = sizeof(struct in6_addr) },
1933         [RTA_OIF]               = { .type = NLA_U32 },
1934         [RTA_IIF]               = { .type = NLA_U32 },
1935         [RTA_PRIORITY]          = { .type = NLA_U32 },
1936         [RTA_METRICS]           = { .type = NLA_NESTED },
1937 };
1938
1939 static int rtm_to_fib6_config(struct sk_buff *skb, struct nlmsghdr *nlh,
1940                               struct fib6_config *cfg)
1941 {
1942         struct rtmsg *rtm;
1943         struct nlattr *tb[RTA_MAX+1];
1944         int err;
1945
1946         err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_ipv6_policy);
1947         if (err < 0)
1948                 goto errout;
1949
1950         err = -EINVAL;
1951         rtm = nlmsg_data(nlh);
1952         memset(cfg, 0, sizeof(*cfg));
1953
1954         cfg->fc_table = rtm->rtm_table;
1955         cfg->fc_dst_len = rtm->rtm_dst_len;
1956         cfg->fc_src_len = rtm->rtm_src_len;
1957         cfg->fc_flags = RTF_UP;
1958         cfg->fc_protocol = rtm->rtm_protocol;
1959
1960         if (rtm->rtm_type == RTN_UNREACHABLE)
1961                 cfg->fc_flags |= RTF_REJECT;
1962
1963         cfg->fc_nlinfo.pid = NETLINK_CB(skb).pid;
1964         cfg->fc_nlinfo.nlh = nlh;
1965         cfg->fc_nlinfo.nl_net = skb->sk->sk_net;
1966
1967         if (tb[RTA_GATEWAY]) {
1968                 nla_memcpy(&cfg->fc_gateway, tb[RTA_GATEWAY], 16);
1969                 cfg->fc_flags |= RTF_GATEWAY;
1970         }
1971
1972         if (tb[RTA_DST]) {
1973                 int plen = (rtm->rtm_dst_len + 7) >> 3;
1974
1975                 if (nla_len(tb[RTA_DST]) < plen)
1976                         goto errout;
1977
1978                 nla_memcpy(&cfg->fc_dst, tb[RTA_DST], plen);
1979         }
1980
1981         if (tb[RTA_SRC]) {
1982                 int plen = (rtm->rtm_src_len + 7) >> 3;
1983
1984                 if (nla_len(tb[RTA_SRC]) < plen)
1985                         goto errout;
1986
1987                 nla_memcpy(&cfg->fc_src, tb[RTA_SRC], plen);
1988         }
1989
1990         if (tb[RTA_OIF])
1991                 cfg->fc_ifindex = nla_get_u32(tb[RTA_OIF]);
1992
1993         if (tb[RTA_PRIORITY])
1994                 cfg->fc_metric = nla_get_u32(tb[RTA_PRIORITY]);
1995
1996         if (tb[RTA_METRICS]) {
1997                 cfg->fc_mx = nla_data(tb[RTA_METRICS]);
1998                 cfg->fc_mx_len = nla_len(tb[RTA_METRICS]);
1999         }
2000
2001         if (tb[RTA_TABLE])
2002                 cfg->fc_table = nla_get_u32(tb[RTA_TABLE]);
2003
2004         err = 0;
2005 errout:
2006         return err;
2007 }
2008
2009 static int inet6_rtm_delroute(struct sk_buff *skb, struct nlmsghdr* nlh, void *arg)
2010 {
2011         struct net *net = skb->sk->sk_net;
2012         struct fib6_config cfg;
2013         int err;
2014
2015         if (net != &init_net)
2016                 return -EINVAL;
2017
2018         err = rtm_to_fib6_config(skb, nlh, &cfg);
2019         if (err < 0)
2020                 return err;
2021
2022         return ip6_route_del(&cfg);
2023 }
2024
2025 static int inet6_rtm_newroute(struct sk_buff *skb, struct nlmsghdr* nlh, void *arg)
2026 {
2027         struct net *net = skb->sk->sk_net;
2028         struct fib6_config cfg;
2029         int err;
2030
2031         if (net != &init_net)
2032                 return -EINVAL;
2033
2034         err = rtm_to_fib6_config(skb, nlh, &cfg);
2035         if (err < 0)
2036                 return err;
2037
2038         return ip6_route_add(&cfg);
2039 }
2040
2041 static inline size_t rt6_nlmsg_size(void)
2042 {
2043         return NLMSG_ALIGN(sizeof(struct rtmsg))
2044                + nla_total_size(16) /* RTA_SRC */
2045                + nla_total_size(16) /* RTA_DST */
2046                + nla_total_size(16) /* RTA_GATEWAY */
2047                + nla_total_size(16) /* RTA_PREFSRC */
2048                + nla_total_size(4) /* RTA_TABLE */
2049                + nla_total_size(4) /* RTA_IIF */
2050                + nla_total_size(4) /* RTA_OIF */
2051                + nla_total_size(4) /* RTA_PRIORITY */
2052                + RTAX_MAX * nla_total_size(4) /* RTA_METRICS */
2053                + nla_total_size(sizeof(struct rta_cacheinfo));
2054 }
2055
2056 static int rt6_fill_node(struct sk_buff *skb, struct rt6_info *rt,
2057                          struct in6_addr *dst, struct in6_addr *src,
2058                          int iif, int type, u32 pid, u32 seq,
2059                          int prefix, unsigned int flags)
2060 {
2061         struct rtmsg *rtm;
2062         struct nlmsghdr *nlh;
2063         long expires;
2064         u32 table;
2065
2066         if (prefix) {   /* user wants prefix routes only */
2067                 if (!(rt->rt6i_flags & RTF_PREFIX_RT)) {
2068                         /* success since this is not a prefix route */
2069                         return 1;
2070                 }
2071         }
2072
2073         nlh = nlmsg_put(skb, pid, seq, type, sizeof(*rtm), flags);
2074         if (nlh == NULL)
2075                 return -EMSGSIZE;
2076
2077         rtm = nlmsg_data(nlh);
2078         rtm->rtm_family = AF_INET6;
2079         rtm->rtm_dst_len = rt->rt6i_dst.plen;
2080         rtm->rtm_src_len = rt->rt6i_src.plen;
2081         rtm->rtm_tos = 0;
2082         if (rt->rt6i_table)
2083                 table = rt->rt6i_table->tb6_id;
2084         else
2085                 table = RT6_TABLE_UNSPEC;
2086         rtm->rtm_table = table;
2087         NLA_PUT_U32(skb, RTA_TABLE, table);
2088         if (rt->rt6i_flags&RTF_REJECT)
2089                 rtm->rtm_type = RTN_UNREACHABLE;
2090         else if (rt->rt6i_dev && (rt->rt6i_dev->flags&IFF_LOOPBACK))
2091                 rtm->rtm_type = RTN_LOCAL;
2092         else
2093                 rtm->rtm_type = RTN_UNICAST;
2094         rtm->rtm_flags = 0;
2095         rtm->rtm_scope = RT_SCOPE_UNIVERSE;
2096         rtm->rtm_protocol = rt->rt6i_protocol;
2097         if (rt->rt6i_flags&RTF_DYNAMIC)
2098                 rtm->rtm_protocol = RTPROT_REDIRECT;
2099         else if (rt->rt6i_flags & RTF_ADDRCONF)
2100                 rtm->rtm_protocol = RTPROT_KERNEL;
2101         else if (rt->rt6i_flags&RTF_DEFAULT)
2102                 rtm->rtm_protocol = RTPROT_RA;
2103
2104         if (rt->rt6i_flags&RTF_CACHE)
2105                 rtm->rtm_flags |= RTM_F_CLONED;
2106
2107         if (dst) {
2108                 NLA_PUT(skb, RTA_DST, 16, dst);
2109                 rtm->rtm_dst_len = 128;
2110         } else if (rtm->rtm_dst_len)
2111                 NLA_PUT(skb, RTA_DST, 16, &rt->rt6i_dst.addr);
2112 #ifdef CONFIG_IPV6_SUBTREES
2113         if (src) {
2114                 NLA_PUT(skb, RTA_SRC, 16, src);
2115                 rtm->rtm_src_len = 128;
2116         } else if (rtm->rtm_src_len)
2117                 NLA_PUT(skb, RTA_SRC, 16, &rt->rt6i_src.addr);
2118 #endif
2119         if (iif)
2120                 NLA_PUT_U32(skb, RTA_IIF, iif);
2121         else if (dst) {
2122                 struct in6_addr saddr_buf;
2123                 if (ipv6_get_saddr(&rt->u.dst, dst, &saddr_buf) == 0)
2124                         NLA_PUT(skb, RTA_PREFSRC, 16, &saddr_buf);
2125         }
2126
2127         if (rtnetlink_put_metrics(skb, rt->u.dst.metrics) < 0)
2128                 goto nla_put_failure;
2129
2130         if (rt->u.dst.neighbour)
2131                 NLA_PUT(skb, RTA_GATEWAY, 16, &rt->u.dst.neighbour->primary_key);
2132
2133         if (rt->u.dst.dev)
2134                 NLA_PUT_U32(skb, RTA_OIF, rt->rt6i_dev->ifindex);
2135
2136         NLA_PUT_U32(skb, RTA_PRIORITY, rt->rt6i_metric);
2137
2138         expires = rt->rt6i_expires ? rt->rt6i_expires - jiffies : 0;
2139         if (rtnl_put_cacheinfo(skb, &rt->u.dst, 0, 0, 0,
2140                                expires, rt->u.dst.error) < 0)
2141                 goto nla_put_failure;
2142
2143         return nlmsg_end(skb, nlh);
2144
2145 nla_put_failure:
2146         nlmsg_cancel(skb, nlh);
2147         return -EMSGSIZE;
2148 }
2149
2150 int rt6_dump_route(struct rt6_info *rt, void *p_arg)
2151 {
2152         struct rt6_rtnl_dump_arg *arg = (struct rt6_rtnl_dump_arg *) p_arg;
2153         int prefix;
2154
2155         if (nlmsg_len(arg->cb->nlh) >= sizeof(struct rtmsg)) {
2156                 struct rtmsg *rtm = nlmsg_data(arg->cb->nlh);
2157                 prefix = (rtm->rtm_flags & RTM_F_PREFIX) != 0;
2158         } else
2159                 prefix = 0;
2160
2161         return rt6_fill_node(arg->skb, rt, NULL, NULL, 0, RTM_NEWROUTE,
2162                      NETLINK_CB(arg->cb->skb).pid, arg->cb->nlh->nlmsg_seq,
2163                      prefix, NLM_F_MULTI);
2164 }
2165
2166 static int inet6_rtm_getroute(struct sk_buff *in_skb, struct nlmsghdr* nlh, void *arg)
2167 {
2168         struct net *net = in_skb->sk->sk_net;
2169         struct nlattr *tb[RTA_MAX+1];
2170         struct rt6_info *rt;
2171         struct sk_buff *skb;
2172         struct rtmsg *rtm;
2173         struct flowi fl;
2174         int err, iif = 0;
2175
2176         if (net != &init_net)
2177                 return -EINVAL;
2178
2179         err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_ipv6_policy);
2180         if (err < 0)
2181                 goto errout;
2182
2183         err = -EINVAL;
2184         memset(&fl, 0, sizeof(fl));
2185
2186         if (tb[RTA_SRC]) {
2187                 if (nla_len(tb[RTA_SRC]) < sizeof(struct in6_addr))
2188                         goto errout;
2189
2190                 ipv6_addr_copy(&fl.fl6_src, nla_data(tb[RTA_SRC]));
2191         }
2192
2193         if (tb[RTA_DST]) {
2194                 if (nla_len(tb[RTA_DST]) < sizeof(struct in6_addr))
2195                         goto errout;
2196
2197                 ipv6_addr_copy(&fl.fl6_dst, nla_data(tb[RTA_DST]));
2198         }
2199
2200         if (tb[RTA_IIF])
2201                 iif = nla_get_u32(tb[RTA_IIF]);
2202
2203         if (tb[RTA_OIF])
2204                 fl.oif = nla_get_u32(tb[RTA_OIF]);
2205
2206         if (iif) {
2207                 struct net_device *dev;
2208                 dev = __dev_get_by_index(&init_net, iif);
2209                 if (!dev) {
2210                         err = -ENODEV;
2211                         goto errout;
2212                 }
2213         }
2214
2215         skb = alloc_skb(NLMSG_GOODSIZE, GFP_KERNEL);
2216         if (skb == NULL) {
2217                 err = -ENOBUFS;
2218                 goto errout;
2219         }
2220
2221         /* Reserve room for dummy headers, this skb can pass
2222            through good chunk of routing engine.
2223          */
2224         skb_reset_mac_header(skb);
2225         skb_reserve(skb, MAX_HEADER + sizeof(struct ipv6hdr));
2226
2227         rt = (struct rt6_info*) ip6_route_output(NULL, &fl);
2228         skb->dst = &rt->u.dst;
2229
2230         err = rt6_fill_node(skb, rt, &fl.fl6_dst, &fl.fl6_src, iif,
2231                             RTM_NEWROUTE, NETLINK_CB(in_skb).pid,
2232                             nlh->nlmsg_seq, 0, 0);
2233         if (err < 0) {
2234                 kfree_skb(skb);
2235                 goto errout;
2236         }
2237
2238         err = rtnl_unicast(skb, &init_net, NETLINK_CB(in_skb).pid);
2239 errout:
2240         return err;
2241 }
2242
2243 void inet6_rt_notify(int event, struct rt6_info *rt, struct nl_info *info)
2244 {
2245         struct sk_buff *skb;
2246         u32 seq;
2247         int err;
2248
2249         err = -ENOBUFS;
2250         seq = info->nlh != NULL ? info->nlh->nlmsg_seq : 0;
2251
2252         skb = nlmsg_new(rt6_nlmsg_size(), gfp_any());
2253         if (skb == NULL)
2254                 goto errout;
2255
2256         err = rt6_fill_node(skb, rt, NULL, NULL, 0,
2257                                 event, info->pid, seq, 0, 0);
2258         if (err < 0) {
2259                 /* -EMSGSIZE implies BUG in rt6_nlmsg_size() */
2260                 WARN_ON(err == -EMSGSIZE);
2261                 kfree_skb(skb);
2262                 goto errout;
2263         }
2264         err = rtnl_notify(skb, &init_net, info->pid,
2265                                 RTNLGRP_IPV6_ROUTE, info->nlh, gfp_any());
2266 errout:
2267         if (err < 0)
2268                 rtnl_set_sk_err(&init_net, RTNLGRP_IPV6_ROUTE, err);
2269 }
2270
2271 /*
2272  *      /proc
2273  */
2274
2275 #ifdef CONFIG_PROC_FS
2276
2277 #define RT6_INFO_LEN (32 + 4 + 32 + 4 + 32 + 40 + 5 + 1)
2278
2279 struct rt6_proc_arg
2280 {
2281         char *buffer;
2282         int offset;
2283         int length;
2284         int skip;
2285         int len;
2286 };
2287
2288 static int rt6_info_route(struct rt6_info *rt, void *p_arg)
2289 {
2290         struct seq_file *m = p_arg;
2291
2292         seq_printf(m, NIP6_SEQFMT " %02x ", NIP6(rt->rt6i_dst.addr),
2293                    rt->rt6i_dst.plen);
2294
2295 #ifdef CONFIG_IPV6_SUBTREES
2296         seq_printf(m, NIP6_SEQFMT " %02x ", NIP6(rt->rt6i_src.addr),
2297                    rt->rt6i_src.plen);
2298 #else
2299         seq_puts(m, "00000000000000000000000000000000 00 ");
2300 #endif
2301
2302         if (rt->rt6i_nexthop) {
2303                 seq_printf(m, NIP6_SEQFMT,
2304                            NIP6(*((struct in6_addr *)rt->rt6i_nexthop->primary_key)));
2305         } else {
2306                 seq_puts(m, "00000000000000000000000000000000");
2307         }
2308         seq_printf(m, " %08x %08x %08x %08x %8s\n",
2309                    rt->rt6i_metric, atomic_read(&rt->u.dst.__refcnt),
2310                    rt->u.dst.__use, rt->rt6i_flags,
2311                    rt->rt6i_dev ? rt->rt6i_dev->name : "");
2312         return 0;
2313 }
2314
2315 static int ipv6_route_show(struct seq_file *m, void *v)
2316 {
2317         fib6_clean_all(rt6_info_route, 0, m);
2318         return 0;
2319 }
2320
2321 static int ipv6_route_open(struct inode *inode, struct file *file)
2322 {
2323         return single_open(file, ipv6_route_show, NULL);
2324 }
2325
2326 static const struct file_operations ipv6_route_proc_fops = {
2327         .owner          = THIS_MODULE,
2328         .open           = ipv6_route_open,
2329         .read           = seq_read,
2330         .llseek         = seq_lseek,
2331         .release        = single_release,
2332 };
2333
2334 static int rt6_stats_seq_show(struct seq_file *seq, void *v)
2335 {
2336         seq_printf(seq, "%04x %04x %04x %04x %04x %04x %04x\n",
2337                       rt6_stats.fib_nodes, rt6_stats.fib_route_nodes,
2338                       rt6_stats.fib_rt_alloc, rt6_stats.fib_rt_entries,
2339                       rt6_stats.fib_rt_cache,
2340                       atomic_read(&ip6_dst_ops.entries),
2341                       rt6_stats.fib_discarded_routes);
2342
2343         return 0;
2344 }
2345
2346 static int rt6_stats_seq_open(struct inode *inode, struct file *file)
2347 {
2348         return single_open(file, rt6_stats_seq_show, NULL);
2349 }
2350
2351 static const struct file_operations rt6_stats_seq_fops = {
2352         .owner   = THIS_MODULE,
2353         .open    = rt6_stats_seq_open,
2354         .read    = seq_read,
2355         .llseek  = seq_lseek,
2356         .release = single_release,
2357 };
2358
2359 static int ipv6_route_proc_init(struct net *net)
2360 {
2361         int ret = -ENOMEM;
2362         if (!proc_net_fops_create(net, "ipv6_route",
2363                                   0, &ipv6_route_proc_fops))
2364                 goto out;
2365
2366         if (!proc_net_fops_create(net, "rt6_stats",
2367                                   S_IRUGO, &rt6_stats_seq_fops))
2368                 goto out_ipv6_route;
2369
2370         ret = 0;
2371 out:
2372         return ret;
2373 out_ipv6_route:
2374         proc_net_remove(net, "ipv6_route");
2375         goto out;
2376 }
2377
2378 static void ipv6_route_proc_fini(struct net *net)
2379 {
2380         proc_net_remove(net, "ipv6_route");
2381         proc_net_remove(net, "rt6_stats");
2382 }
2383 #else
2384 static inline int ipv6_route_proc_init(struct net *net)
2385 {
2386         return 0;
2387 }
2388 static inline void ipv6_route_proc_fini(struct net *net)
2389 {
2390         return ;
2391 }
2392 #endif  /* CONFIG_PROC_FS */
2393
2394 #ifdef CONFIG_SYSCTL
2395
2396 static
2397 int ipv6_sysctl_rtcache_flush(ctl_table *ctl, int write, struct file * filp,
2398                               void __user *buffer, size_t *lenp, loff_t *ppos)
2399 {
2400         int delay = init_net.ipv6.sysctl.flush_delay;
2401         if (write) {
2402                 proc_dointvec(ctl, write, filp, buffer, lenp, ppos);
2403                 fib6_run_gc(delay <= 0 ? ~0UL : (unsigned long)delay);
2404                 return 0;
2405         } else
2406                 return -EINVAL;
2407 }
2408
2409 ctl_table ipv6_route_table_template[] = {
2410         {
2411                 .procname       =       "flush",
2412                 .data           =       &init_net.ipv6.sysctl.flush_delay,
2413                 .maxlen         =       sizeof(int),
2414                 .mode           =       0200,
2415                 .proc_handler   =       &ipv6_sysctl_rtcache_flush
2416         },
2417         {
2418                 .ctl_name       =       NET_IPV6_ROUTE_GC_THRESH,
2419                 .procname       =       "gc_thresh",
2420                 .data           =       &ip6_dst_ops.gc_thresh,
2421                 .maxlen         =       sizeof(int),
2422                 .mode           =       0644,
2423                 .proc_handler   =       &proc_dointvec,
2424         },
2425         {
2426                 .ctl_name       =       NET_IPV6_ROUTE_MAX_SIZE,
2427                 .procname       =       "max_size",
2428                 .data           =       &init_net.ipv6.sysctl.ip6_rt_max_size,
2429                 .maxlen         =       sizeof(int),
2430                 .mode           =       0644,
2431                 .proc_handler   =       &proc_dointvec,
2432         },
2433         {
2434                 .ctl_name       =       NET_IPV6_ROUTE_GC_MIN_INTERVAL,
2435                 .procname       =       "gc_min_interval",
2436                 .data           =       &init_net.ipv6.sysctl.ip6_rt_gc_min_interval,
2437                 .maxlen         =       sizeof(int),
2438                 .mode           =       0644,
2439                 .proc_handler   =       &proc_dointvec_jiffies,
2440                 .strategy       =       &sysctl_jiffies,
2441         },
2442         {
2443                 .ctl_name       =       NET_IPV6_ROUTE_GC_TIMEOUT,
2444                 .procname       =       "gc_timeout",
2445                 .data           =       &init_net.ipv6.sysctl.ip6_rt_gc_timeout,
2446                 .maxlen         =       sizeof(int),
2447                 .mode           =       0644,
2448                 .proc_handler   =       &proc_dointvec_jiffies,
2449                 .strategy       =       &sysctl_jiffies,
2450         },
2451         {
2452                 .ctl_name       =       NET_IPV6_ROUTE_GC_INTERVAL,
2453                 .procname       =       "gc_interval",
2454                 .data           =       &init_net.ipv6.sysctl.ip6_rt_gc_interval,
2455                 .maxlen         =       sizeof(int),
2456                 .mode           =       0644,
2457                 .proc_handler   =       &proc_dointvec_jiffies,
2458                 .strategy       =       &sysctl_jiffies,
2459         },
2460         {
2461                 .ctl_name       =       NET_IPV6_ROUTE_GC_ELASTICITY,
2462                 .procname       =       "gc_elasticity",
2463                 .data           =       &init_net.ipv6.sysctl.ip6_rt_gc_elasticity,
2464                 .maxlen         =       sizeof(int),
2465                 .mode           =       0644,
2466                 .proc_handler   =       &proc_dointvec_jiffies,
2467                 .strategy       =       &sysctl_jiffies,
2468         },
2469         {
2470                 .ctl_name       =       NET_IPV6_ROUTE_MTU_EXPIRES,
2471                 .procname       =       "mtu_expires",
2472                 .data           =       &init_net.ipv6.sysctl.ip6_rt_mtu_expires,
2473                 .maxlen         =       sizeof(int),
2474                 .mode           =       0644,
2475                 .proc_handler   =       &proc_dointvec_jiffies,
2476                 .strategy       =       &sysctl_jiffies,
2477         },
2478         {
2479                 .ctl_name       =       NET_IPV6_ROUTE_MIN_ADVMSS,
2480                 .procname       =       "min_adv_mss",
2481                 .data           =       &init_net.ipv6.sysctl.ip6_rt_min_advmss,
2482                 .maxlen         =       sizeof(int),
2483                 .mode           =       0644,
2484                 .proc_handler   =       &proc_dointvec_jiffies,
2485                 .strategy       =       &sysctl_jiffies,
2486         },
2487         {
2488                 .ctl_name       =       NET_IPV6_ROUTE_GC_MIN_INTERVAL_MS,
2489                 .procname       =       "gc_min_interval_ms",
2490                 .data           =       &init_net.ipv6.sysctl.ip6_rt_gc_min_interval,
2491                 .maxlen         =       sizeof(int),
2492                 .mode           =       0644,
2493                 .proc_handler   =       &proc_dointvec_ms_jiffies,
2494                 .strategy       =       &sysctl_ms_jiffies,
2495         },
2496         { .ctl_name = 0 }
2497 };
2498
2499 struct ctl_table *ipv6_route_sysctl_init(struct net *net)
2500 {
2501         struct ctl_table *table;
2502
2503         table = kmemdup(ipv6_route_table_template,
2504                         sizeof(ipv6_route_table_template),
2505                         GFP_KERNEL);
2506         return table;
2507 }
2508 #endif
2509
2510 int __init ip6_route_init(void)
2511 {
2512         int ret;
2513
2514         ip6_dst_ops.kmem_cachep =
2515                 kmem_cache_create("ip6_dst_cache", sizeof(struct rt6_info), 0,
2516                                   SLAB_HWCACHE_ALIGN, NULL);
2517         if (!ip6_dst_ops.kmem_cachep)
2518                 return -ENOMEM;
2519
2520         ip6_dst_blackhole_ops.kmem_cachep = ip6_dst_ops.kmem_cachep;
2521
2522         ret = fib6_init();
2523         if (ret)
2524                 goto out_kmem_cache;
2525
2526         ret = ipv6_route_proc_init(&init_net);
2527         if (ret)
2528                 goto out_fib6_init;
2529
2530         ret = xfrm6_init();
2531         if (ret)
2532                 goto out_proc_init;
2533
2534         ret = fib6_rules_init();
2535         if (ret)
2536                 goto xfrm6_init;
2537
2538         ret = -ENOBUFS;
2539         if (__rtnl_register(PF_INET6, RTM_NEWROUTE, inet6_rtm_newroute, NULL) ||
2540             __rtnl_register(PF_INET6, RTM_DELROUTE, inet6_rtm_delroute, NULL) ||
2541             __rtnl_register(PF_INET6, RTM_GETROUTE, inet6_rtm_getroute, NULL))
2542                 goto fib6_rules_init;
2543
2544         ret = 0;
2545 out:
2546         return ret;
2547
2548 fib6_rules_init:
2549         fib6_rules_cleanup();
2550 xfrm6_init:
2551         xfrm6_fini();
2552 out_proc_init:
2553         ipv6_route_proc_fini(&init_net);
2554 out_fib6_init:
2555         rt6_ifdown(NULL);
2556         fib6_gc_cleanup();
2557 out_kmem_cache:
2558         kmem_cache_destroy(ip6_dst_ops.kmem_cachep);
2559         goto out;
2560 }
2561
2562 void ip6_route_cleanup(void)
2563 {
2564         fib6_rules_cleanup();
2565         ipv6_route_proc_fini(&init_net);
2566         xfrm6_fini();
2567         rt6_ifdown(NULL);
2568         fib6_gc_cleanup();
2569         kmem_cache_destroy(ip6_dst_ops.kmem_cachep);
2570 }