[thirdparty/systemd.git] / src / libsystemd-network / sd-radv.c

/* SPDX-License-Identifier: LGPL-2.1+ */
/***
  This file is part of systemd.

  Copyright (C) 2017 Intel Corporation. All rights reserved.
***/

#include <netinet/icmp6.h>
#include <netinet/in.h>
#include <arpa/inet.h>

#include "sd-radv.h"

#include "macro.h"
#include "alloc-util.h"
#include "dns-domain.h"
#include "fd-util.h"
#include "icmp6-util.h"
#include "in-addr-util.h"
#include "radv-internal.h"
#include "socket-util.h"
#include "string-util.h"
#include "strv.h"
#include "util.h"
#include "random-util.h"

_public_ int sd_radv_new(sd_radv **ret) {
        _cleanup_(sd_radv_unrefp) sd_radv *ra = NULL;

        assert_return(ret, -EINVAL);

        ra = new0(sd_radv, 1);
        if (!ra)
                return -ENOMEM;

        ra->n_ref = 1;
        ra->fd = -1;

        LIST_HEAD_INIT(ra->prefixes);

        *ret = TAKE_PTR(ra);

        return 0;
}

_public_ int sd_radv_attach_event(sd_radv *ra, sd_event *event, int64_t priority) {
        int r;

        assert_return(ra, -EINVAL);
        assert_return(!ra->event, -EBUSY);

        if (event)
                ra->event = sd_event_ref(event);
        else {
                r = sd_event_default(&ra->event);
                if (r < 0)
                        return 0;
        }

        ra->event_priority = priority;

        return 0;
}

_public_ int sd_radv_detach_event(sd_radv *ra) {

        assert_return(ra, -EINVAL);

        ra->event = sd_event_unref(ra->event);
        return 0;
}

_public_ sd_event *sd_radv_get_event(sd_radv *ra) {
        assert_return(ra, NULL);

        return ra->event;
}

static void radv_reset(sd_radv *ra) {

        ra->timeout_event_source =
                sd_event_source_unref(ra->timeout_event_source);

        ra->recv_event_source =
                sd_event_source_unref(ra->recv_event_source);

        ra->ra_sent = 0;
}

_public_ sd_radv *sd_radv_ref(sd_radv *ra) {
        if (!ra)
                return NULL;

        assert(ra->n_ref > 0);
        ra->n_ref++;

        return ra;
}

_public_ sd_radv *sd_radv_unref(sd_radv *ra) {
        if (!ra)
                return NULL;

        assert(ra->n_ref > 0);
        ra->n_ref--;

        if (ra->n_ref > 0)
                return NULL;

        while (ra->prefixes) {
                sd_radv_prefix *p = ra->prefixes;

                LIST_REMOVE(prefix, ra->prefixes, p);
                sd_radv_prefix_unref(p);
        }

        free(ra->rdnss);
        free(ra->dnssl);

        radv_reset(ra);

        sd_radv_detach_event(ra);
        return mfree(ra);
}

static int radv_send(sd_radv *ra, const struct in6_addr *dst,
                     const uint32_t router_lifetime) {
        static const struct ether_addr mac_zero = {};
        sd_radv_prefix *p;
        struct sockaddr_in6 dst_addr = {
                .sin6_family = AF_INET6,
                .sin6_addr = IN6ADDR_ALL_NODES_MULTICAST_INIT,
        };
        struct nd_router_advert adv = {};
        struct {
                struct nd_opt_hdr opthdr;
                struct ether_addr slladdr;
        } _packed_ opt_mac = {
                .opthdr = {
                        .nd_opt_type = ND_OPT_SOURCE_LINKADDR,
                        .nd_opt_len = (sizeof(struct nd_opt_hdr) +
                                       sizeof(struct ether_addr) - 1) /8 + 1,
                },
        };
        struct nd_opt_mtu opt_mtu =  {
                .nd_opt_mtu_type = ND_OPT_MTU,
                .nd_opt_mtu_len = 1,
        };
        /* Reserve iov space for RA header, linkaddr, MTU, N prefixes, RDNSS
           and DNSSL */
        struct iovec iov[5 + ra->n_prefixes];
        struct msghdr msg = {
                .msg_name = &dst_addr,
                .msg_namelen = sizeof(dst_addr),
                .msg_iov = iov,
        };
        usec_t time_now;
        int r;

        r = sd_event_now(ra->event, clock_boottime_or_monotonic(), &time_now);
        if (r < 0)
                return r;

        if (dst && !in_addr_is_null(AF_INET6, (union in_addr_union*) dst))
                dst_addr.sin6_addr = *dst;

        adv.nd_ra_type = ND_ROUTER_ADVERT;
        adv.nd_ra_curhoplimit = ra->hop_limit;
        adv.nd_ra_flags_reserved = ra->flags;
        adv.nd_ra_router_lifetime = htobe16(router_lifetime);
        iov[msg.msg_iovlen].iov_base = &adv;
        iov[msg.msg_iovlen].iov_len = sizeof(adv);
        msg.msg_iovlen++;

        /* MAC address is optional, either because the link does not use L2
           addresses or load sharing is desired. See RFC 4861, Section 4.2 */
        if (memcmp(&mac_zero, &ra->mac_addr, sizeof(mac_zero))) {
                opt_mac.slladdr = ra->mac_addr;
                iov[msg.msg_iovlen].iov_base = &opt_mac;
                iov[msg.msg_iovlen].iov_len = sizeof(opt_mac);
                msg.msg_iovlen++;
        }

        if (ra->mtu) {
                opt_mtu.nd_opt_mtu_mtu = htobe32(ra->mtu);
                iov[msg.msg_iovlen].iov_base = &opt_mtu;
                iov[msg.msg_iovlen].iov_len = sizeof(opt_mtu);
                msg.msg_iovlen++;
        }

        LIST_FOREACH(prefix, p, ra->prefixes) {
                if (p->valid_until) {

                        if (time_now > p->valid_until)
                                p->opt.valid_lifetime = 0;
                        else
                                p->opt.valid_lifetime = htobe32((p->valid_until - time_now) / USEC_PER_SEC);

                        if (time_now > p->preferred_until)
                                p->opt.preferred_lifetime = 0;
                        else
                                p->opt.preferred_lifetime = htobe32((p->preferred_until - time_now) / USEC_PER_SEC);
                }
                iov[msg.msg_iovlen].iov_base = &p->opt;
                iov[msg.msg_iovlen].iov_len = sizeof(p->opt);
                msg.msg_iovlen++;
        }

        if (ra->rdnss) {
                iov[msg.msg_iovlen].iov_base = ra->rdnss;
                iov[msg.msg_iovlen].iov_len = ra->rdnss->length * 8;
                msg.msg_iovlen++;
        }

        if (ra->dnssl) {
                iov[msg.msg_iovlen].iov_base = ra->dnssl;
                iov[msg.msg_iovlen].iov_len = ra->dnssl->length * 8;
                msg.msg_iovlen++;
        }

        if (sendmsg(ra->fd, &msg, 0) < 0)
                return -errno;

        return 0;
}

static int radv_recv(sd_event_source *s, int fd, uint32_t revents, void *userdata) {
        sd_radv *ra = userdata;
        _cleanup_free_ char *addr = NULL;
        struct in6_addr src;
        triple_timestamp timestamp;
        int r;
        ssize_t buflen;
        _cleanup_free_ char *buf = NULL;

        assert(s);
        assert(ra);
        assert(ra->event);

        buflen = next_datagram_size_fd(fd);

        if ((unsigned) buflen < sizeof(struct nd_router_solicit))
                return log_radv("Too short packet received");

        buf = new0(char, buflen);
        if (!buf)
                return 0;

        r = icmp6_receive(fd, buf, buflen, &src, &timestamp);
        if (r < 0) {
                switch (r) {
                case -EADDRNOTAVAIL:
                        (void) in_addr_to_string(AF_INET6, (union in_addr_union*) &src, &addr);
                        log_radv("Received RS from non-link-local address %s. Ignoring", addr);
                        break;

                case -EMULTIHOP:
                        log_radv("Received RS with invalid hop limit. Ignoring.");
                        break;

                case -EPFNOSUPPORT:
                        log_radv("Received invalid source address from ICMPv6 socket. Ignoring.");
                        break;

                default:
                        log_radv_warning_errno(r, "Error receiving from ICMPv6 socket: %m");
                        break;
                }

                return 0;
        }

        (void) in_addr_to_string(AF_INET6, (union in_addr_union*) &src, &addr);

        r = radv_send(ra, &src, ra->lifetime);
        if (r < 0)
                log_radv_warning_errno(r, "Unable to send solicited Router Advertisment to %s: %m", addr);
        else
                log_radv("Sent solicited Router Advertisement to %s", addr);

        return 0;
}

static usec_t radv_compute_timeout(usec_t min, usec_t max) {
        assert_return(min <= max, SD_RADV_DEFAULT_MIN_TIMEOUT_USEC);

        return min + (random_u32() % (max - min));
}

static int radv_timeout(sd_event_source *s, uint64_t usec, void *userdata) {
        int r;
        sd_radv *ra = userdata;
        usec_t min_timeout = SD_RADV_DEFAULT_MIN_TIMEOUT_USEC;
        usec_t max_timeout = SD_RADV_DEFAULT_MAX_TIMEOUT_USEC;
        usec_t time_now, timeout;
        char time_string[FORMAT_TIMESPAN_MAX];

        assert(s);
        assert(ra);
        assert(ra->event);

        ra->timeout_event_source = sd_event_source_unref(ra->timeout_event_source);

        r = sd_event_now(ra->event, clock_boottime_or_monotonic(), &time_now);
        if (r < 0)
                goto fail;

        r = radv_send(ra, NULL, ra->lifetime);
        if (r < 0)
                log_radv_warning_errno(r, "Unable to send Router Advertisement: %m");

        /* RFC 4861, Section 6.2.4, sending initial Router Advertisements */
        if (ra->ra_sent < SD_RADV_MAX_INITIAL_RTR_ADVERTISEMENTS) {
                max_timeout = SD_RADV_MAX_INITIAL_RTR_ADVERT_INTERVAL_USEC;
                min_timeout = SD_RADV_MAX_INITIAL_RTR_ADVERT_INTERVAL_USEC / 3;
        }

        timeout = radv_compute_timeout(min_timeout, max_timeout);

        log_radv("Next Router Advertisement in %s",
                 format_timespan(time_string, FORMAT_TIMESPAN_MAX,
                                 timeout, USEC_PER_SEC));

        r = sd_event_add_time(ra->event, &ra->timeout_event_source,
                              clock_boottime_or_monotonic(),
                              time_now + timeout, MSEC_PER_SEC,
                              radv_timeout, ra);
        if (r < 0)
                goto fail;

        r = sd_event_source_set_priority(ra->timeout_event_source,
                                         ra->event_priority);
        if (r < 0)
                goto fail;

        r = sd_event_source_set_description(ra->timeout_event_source,
                                            "radv-timeout");
        if (r < 0)
                goto fail;

        ra->ra_sent++;

fail:
        if (r < 0)
                sd_radv_stop(ra);

        return 0;
}

_public_ int sd_radv_stop(sd_radv *ra) {
        int r;

        assert_return(ra, -EINVAL);

        if (ra->state == SD_RADV_STATE_IDLE)
                return 0;

        log_radv("Stopping IPv6 Router Advertisement daemon");

        /* RFC 4861, Section 6.2.5, send at least one Router Advertisement
           with zero lifetime  */
        r = radv_send(ra, NULL, 0);
        if (r < 0)
                log_radv_warning_errno(r, "Unable to send last Router Advertisement with router lifetime set to zero: %m");

        radv_reset(ra);
        ra->fd = safe_close(ra->fd);
        ra->state = SD_RADV_STATE_IDLE;

        return 0;
}

_public_ int sd_radv_start(sd_radv *ra) {
        int r = 0;

        assert_return(ra, -EINVAL);
        assert_return(ra->event, -EINVAL);
        assert_return(ra->ifindex > 0, -EINVAL);

        if (ra->state != SD_RADV_STATE_IDLE)
                return 0;

        r = sd_event_add_time(ra->event, &ra->timeout_event_source,
                              clock_boottime_or_monotonic(), 0, 0,
                              radv_timeout, ra);
        if (r < 0)
                goto fail;

        r = sd_event_source_set_priority(ra->timeout_event_source,
                                         ra->event_priority);
        if (r < 0)
                goto fail;

        (void) sd_event_source_set_description(ra->timeout_event_source,
                                               "radv-timeout");

        r = icmp6_bind_router_advertisement(ra->ifindex);
        if (r < 0)
                goto fail;

        ra->fd = r;

        r = sd_event_add_io(ra->event, &ra->recv_event_source, ra->fd, EPOLLIN, radv_recv, ra);
        if (r < 0)
                goto fail;

        r = sd_event_source_set_priority(ra->recv_event_source, ra->event_priority);
        if (r < 0)
                goto fail;

        (void) sd_event_source_set_description(ra->recv_event_source, "radv-receive-message");

        ra->state = SD_RADV_STATE_ADVERTISING;

        log_radv("Started IPv6 Router Advertisement daemon");

        return 0;

 fail:
        radv_reset(ra);

        return r;
}

_public_ int sd_radv_set_ifindex(sd_radv *ra, int ifindex) {
        assert_return(ra, -EINVAL);
        assert_return(ifindex >= -1, -EINVAL);

        if (ra->state != SD_RADV_STATE_IDLE)
                return -EBUSY;

        ra->ifindex = ifindex;

        return 0;
}

_public_ int sd_radv_set_mac(sd_radv *ra, const struct ether_addr *mac_addr) {
        assert_return(ra, -EINVAL);

        if (ra->state != SD_RADV_STATE_IDLE)
                return -EBUSY;

        if (mac_addr)
                ra->mac_addr = *mac_addr;
        else
                zero(ra->mac_addr);

        return 0;
}

_public_ int sd_radv_set_mtu(sd_radv *ra, uint32_t mtu) {
        assert_return(ra, -EINVAL);
        assert_return(mtu >= 1280, -EINVAL);

        ra->mtu = mtu;

        return 0;
}

_public_ int sd_radv_set_hop_limit(sd_radv *ra, uint8_t hop_limit) {
        assert_return(ra, -EINVAL);

        if (ra->state != SD_RADV_STATE_IDLE)
                return -EBUSY;

        ra->hop_limit = hop_limit;

        return 0;
}

_public_ int sd_radv_set_router_lifetime(sd_radv *ra, uint32_t router_lifetime) {
        assert_return(ra, -EINVAL);

        if (ra->state != SD_RADV_STATE_IDLE)
                return -EBUSY;

        /* RFC 4191, Section 2.2, "...If the Router Lifetime is zero, the
           preference value MUST be set to (00) by the sender..." */
        if (router_lifetime == 0 &&
            (ra->flags & (0x3 << 3)) != (SD_NDISC_PREFERENCE_MEDIUM << 3))
                return -ETIME;

        ra->lifetime = router_lifetime;

        return 0;
}

_public_ int sd_radv_set_managed_information(sd_radv *ra, int managed) {
        assert_return(ra, -EINVAL);

        if (ra->state != SD_RADV_STATE_IDLE)
                return -EBUSY;

        SET_FLAG(ra->flags, ND_RA_FLAG_MANAGED, managed);

        return 0;
}

_public_ int sd_radv_set_other_information(sd_radv *ra, int other) {
        assert_return(ra, -EINVAL);

        if (ra->state != SD_RADV_STATE_IDLE)
                return -EBUSY;

        SET_FLAG(ra->flags, ND_RA_FLAG_OTHER, other);

        return 0;
}

_public_ int sd_radv_set_preference(sd_radv *ra, unsigned preference) {
        int r = 0;

        assert_return(ra, -EINVAL);
        assert_return(IN_SET(preference,
                             SD_NDISC_PREFERENCE_LOW,
                             SD_NDISC_PREFERENCE_MEDIUM,
                             SD_NDISC_PREFERENCE_HIGH), -EINVAL);

        ra->flags = (ra->flags & ~(0x3 << 3)) | (preference << 3);

        return r;
}

_public_ int sd_radv_add_prefix(sd_radv *ra, sd_radv_prefix *p, bool dynamic) {
        sd_radv_prefix *cur;
        int r;
        _cleanup_free_ char *addr_p = NULL;
        char time_string_preferred[FORMAT_TIMESPAN_MAX];
        char time_string_valid[FORMAT_TIMESPAN_MAX];
        usec_t time_now, valid, preferred, valid_until, preferred_until;

        assert_return(ra, -EINVAL);

        if (!p)
                return -EINVAL;

        LIST_FOREACH(prefix, cur, ra->prefixes) {

                r = in_addr_prefix_intersect(AF_INET6,
                                             (union in_addr_union*) &cur->opt.in6_addr,
                                             cur->opt.prefixlen,
                                             (union in_addr_union*) &p->opt.in6_addr,
                                             p->opt.prefixlen);
                if (r > 0) {
                        _cleanup_free_ char *addr_cur = NULL;

                        (void) in_addr_to_string(AF_INET6,
                                                 (union in_addr_union*) &p->opt.in6_addr,
                                                 &addr_p);

                        if (dynamic && cur->opt.prefixlen == p->opt.prefixlen)
                                goto update;

                        (void) in_addr_to_string(AF_INET6,
                                                 (union in_addr_union*) &cur->opt.in6_addr,
                                                 &addr_cur);
                        log_radv("IPv6 prefix %s/%u already configured, ignoring %s/%u",
                                 addr_cur, cur->opt.prefixlen,
                                 addr_p, p->opt.prefixlen);

                        return -EEXIST;
                }
        }

        p = sd_radv_prefix_ref(p);

        LIST_APPEND(prefix, ra->prefixes, p);

        ra->n_prefixes++;

        (void) in_addr_to_string(AF_INET6, (union in_addr_union*) &p->opt.in6_addr, &addr_p);

        if (!dynamic) {
                log_radv("Added prefix %s/%d", addr_p, p->opt.prefixlen);
                return 0;
        }

        cur = p;

 update:
        r = sd_event_now(ra->event, clock_boottime_or_monotonic(), &time_now);
        if (r < 0)
                return r;

        valid = be32toh(p->opt.valid_lifetime) * USEC_PER_SEC;
        valid_until = usec_add(valid, time_now);
        if (valid_until == USEC_INFINITY)
                return -EOVERFLOW;

        preferred = be32toh(p->opt.preferred_lifetime) * USEC_PER_SEC;
        preferred_until = usec_add(preferred, time_now);
        if (preferred_until == USEC_INFINITY)
                return -EOVERFLOW;

        cur->valid_until = valid_until;
        cur->preferred_until = preferred_until;

        log_radv("%s prefix %s/%u preferred %s valid %s",
                 cur? "Updated": "Added",
                 addr_p, p->opt.prefixlen,
                 format_timespan(time_string_preferred, FORMAT_TIMESPAN_MAX,
                                 preferred, USEC_PER_SEC),
                 format_timespan(time_string_valid, FORMAT_TIMESPAN_MAX,
                                 valid, USEC_PER_SEC));

        return 0;
}

_public_ sd_radv_prefix *sd_radv_remove_prefix(sd_radv *ra,
                                               struct in6_addr *prefix,
                                               uint8_t prefixlen) {
        sd_radv_prefix *cur, *next;

        assert_return(ra, NULL);
        assert_return(prefix, NULL);

        LIST_FOREACH_SAFE(prefix, cur, next, ra->prefixes) {
                if (prefixlen != cur->opt.prefixlen)
                        continue;

                if (!in_addr_equal(AF_INET6,
                                   (union in_addr_union *)prefix,
                                   (union in_addr_union *)&cur->opt.in6_addr))
                        continue;

                LIST_REMOVE(prefix, ra->prefixes, cur);
                ra->n_prefixes--;

                break;
        }

        return cur;
}

_public_ int sd_radv_set_rdnss(sd_radv *ra, uint32_t lifetime,
                               const struct in6_addr *dns, size_t n_dns) {
        _cleanup_free_ struct sd_radv_opt_dns *opt_rdnss = NULL;
        size_t len;

        assert_return(ra, -EINVAL);
        assert_return(n_dns < 128, -EINVAL);

        if (!dns || n_dns == 0) {
                ra->rdnss = mfree(ra->rdnss);
                ra->n_rdnss = 0;

                return 0;
        }

        len = sizeof(struct sd_radv_opt_dns) + sizeof(struct in6_addr) * n_dns;

        opt_rdnss = malloc0(len);
        if (!opt_rdnss)
                return -ENOMEM;

        opt_rdnss->type = SD_RADV_OPT_RDNSS;
        opt_rdnss->length = len / 8;
        opt_rdnss->lifetime = htobe32(lifetime);

        memcpy(opt_rdnss + 1, dns, n_dns * sizeof(struct in6_addr));

        free_and_replace(ra->rdnss, opt_rdnss);

        ra->n_rdnss = n_dns;

        return 0;
}

_public_ int sd_radv_set_dnssl(sd_radv *ra, uint32_t lifetime,
                               char **search_list) {
        _cleanup_free_ struct sd_radv_opt_dns *opt_dnssl = NULL;
        size_t len = 0;
        char **s;
        uint8_t *p;

        assert_return(ra, -EINVAL);

        if (!search_list || *search_list == NULL) {
                ra->dnssl = mfree(ra->dnssl);

                return 0;
        }

        STRV_FOREACH(s, search_list)
                len += strlen(*s) + 2;

        len = (sizeof(struct sd_radv_opt_dns) + len + 7) & ~0x7;

        opt_dnssl = malloc0(len);
        if (!opt_dnssl)
                return -ENOMEM;

        opt_dnssl->type = SD_RADV_OPT_DNSSL;
        opt_dnssl->length = len / 8;
        opt_dnssl->lifetime = htobe32(lifetime);

        p = (uint8_t *)(opt_dnssl + 1);
        len -= sizeof(struct sd_radv_opt_dns);

        STRV_FOREACH(s, search_list) {
                int r;

                r = dns_name_to_wire_format(*s, p, len, false);
                if (r < 0)
                        return r;

                if (len < (size_t)r)
                        return -ENOBUFS;

                p += r;
                len -= r;
        }

        free_and_replace(ra->dnssl, opt_dnssl);

        return 0;
}

_public_ int sd_radv_prefix_new(sd_radv_prefix **ret) {
        _cleanup_(sd_radv_prefix_unrefp) sd_radv_prefix *p = NULL;

        assert_return(ret, -EINVAL);

        p = new0(sd_radv_prefix, 1);
        if (!p)
                return -ENOMEM;

        p->n_ref = 1;

        p->opt.type = ND_OPT_PREFIX_INFORMATION;
        p->opt.length = (sizeof(p->opt) - 1) /8 + 1;

        p->opt.prefixlen = 64;

        /* RFC 4861, Section 6.2.1 */
        SET_FLAG(p->opt.flags, ND_OPT_PI_FLAG_ONLINK, true);
        SET_FLAG(p->opt.flags, ND_OPT_PI_FLAG_AUTO, true);
        p->opt.preferred_lifetime = htobe32(604800);
        p->opt.valid_lifetime = htobe32(2592000);

        LIST_INIT(prefix, p);

        *ret = TAKE_PTR(p);

        return 0;
}

_public_ sd_radv_prefix *sd_radv_prefix_ref(sd_radv_prefix *p) {
        if (!p)
                return NULL;

        assert(p->n_ref > 0);
        p->n_ref++;

        return p;
}

_public_ sd_radv_prefix *sd_radv_prefix_unref(sd_radv_prefix *p) {
        if (!p)
                return NULL;

        assert(p->n_ref > 0);
        p->n_ref--;

        if (p->n_ref > 0)
                return NULL;

        return mfree(p);
}

_public_ int sd_radv_prefix_set_prefix(sd_radv_prefix *p, struct in6_addr *in6_addr,
                                       unsigned char prefixlen) {
        assert_return(p, -EINVAL);
        assert_return(in6_addr, -EINVAL);

        if (prefixlen < 3 || prefixlen > 128)
                return -EINVAL;

        if (prefixlen > 64)
                /* unusual but allowed, log it */
                log_radv("Unusual prefix length %d greater than 64", prefixlen);

        p->opt.in6_addr = *in6_addr;
        p->opt.prefixlen = prefixlen;

        return 0;
}

_public_ int sd_radv_prefix_set_onlink(sd_radv_prefix *p, int onlink) {
        assert_return(p, -EINVAL);

        SET_FLAG(p->opt.flags, ND_OPT_PI_FLAG_ONLINK, onlink);

        return 0;
}

_public_ int sd_radv_prefix_set_address_autoconfiguration(sd_radv_prefix *p,
                                                          int address_autoconfiguration) {
        assert_return(p, -EINVAL);

        SET_FLAG(p->opt.flags, ND_OPT_PI_FLAG_AUTO, address_autoconfiguration);

        return 0;
}

_public_ int sd_radv_prefix_set_valid_lifetime(sd_radv_prefix *p,
                                               uint32_t valid_lifetime) {
        assert_return(p, -EINVAL);

        p->opt.valid_lifetime = htobe32(valid_lifetime);

        return 0;
}

_public_ int sd_radv_prefix_set_preferred_lifetime(sd_radv_prefix *p,
                                                   uint32_t preferred_lifetime) {
        assert_return(p, -EINVAL);

        p->opt.preferred_lifetime = htobe32(preferred_lifetime);

        return 0;
}
Commit	Line	Data
53e1b683	1	/* SPDX-License-Identifier: LGPL-2.1+ */
04473969 PF	2	/***
	3	This file is part of systemd.
	4
	5	Copyright (C) 2017 Intel Corporation. All rights reserved.
04473969 PF	6	***/
	7
	8	#include <netinet/icmp6.h>
	9	#include <netinet/in.h>
204f99d2	10	#include <arpa/inet.h>
04473969 PF	11
	12	#include "sd-radv.h"
	13
204f99d2	14	#include "macro.h"
04473969	15	#include "alloc-util.h"
e965d6ab	16	#include "dns-domain.h"
04473969 PF	17	#include "fd-util.h"
	18	#include "icmp6-util.h"
	19	#include "in-addr-util.h"
	20	#include "radv-internal.h"
	21	#include "socket-util.h"
	22	#include "string-util.h"
e965d6ab	23	#include "strv.h"
04473969	24	#include "util.h"
204fb681	25	#include "random-util.h"
04473969	26
204f99d2 PF	27	_public_ int sd_radv_new(sd_radv **ret) {
	28	_cleanup_(sd_radv_unrefp) sd_radv *ra = NULL;
	29
	30	assert_return(ret, -EINVAL);
	31
	32	ra = new0(sd_radv, 1);
	33	if (!ra)
	34	return -ENOMEM;
	35
	36	ra->n_ref = 1;
77baf5ae	37	ra->fd = -1;
204f99d2 PF	38
	39	LIST_HEAD_INIT(ra->prefixes);
	40
1cc6c93a	41	*ret = TAKE_PTR(ra);
204f99d2 PF	42
	43	return 0;
	44	}
	45
	46	_public_ int sd_radv_attach_event(sd_radv ra, sd_event event, int64_t priority) {
	47	int r;
	48
	49	assert_return(ra, -EINVAL);
	50	assert_return(!ra->event, -EBUSY);
	51
	52	if (event)
	53	ra->event = sd_event_ref(event);
	54	else {
	55	r = sd_event_default(&ra->event);
	56	if (r < 0)
	57	return 0;
	58	}
	59
	60	ra->event_priority = priority;
	61
	62	return 0;
	63	}
	64
	65	_public_ int sd_radv_detach_event(sd_radv *ra) {
	66
	67	assert_return(ra, -EINVAL);
	68
	69	ra->event = sd_event_unref(ra->event);
	70	return 0;
	71	}
	72
	73	_public_ sd_event sd_radv_get_event(sd_radv ra) {
	74	assert_return(ra, NULL);
	75
	76	return ra->event;
	77	}
	78
204fb681 PF	79	static void radv_reset(sd_radv *ra) {
	80
	81	ra->timeout_event_source =
	82	sd_event_source_unref(ra->timeout_event_source);
	83
88d5a3db PF	84	ra->recv_event_source =
	85	sd_event_source_unref(ra->recv_event_source);
	86
204fb681 PF	87	ra->ra_sent = 0;
	88	}
	89
204f99d2 PF	90	_public_ sd_radv sd_radv_ref(sd_radv ra) {
	91	if (!ra)
	92	return NULL;
	93
	94	assert(ra->n_ref > 0);
	95	ra->n_ref++;
	96
	97	return ra;
	98	}
	99
	100	_public_ sd_radv sd_radv_unref(sd_radv ra) {
	101	if (!ra)
	102	return NULL;
	103
	104	assert(ra->n_ref > 0);
	105	ra->n_ref--;
	106
	107	if (ra->n_ref > 0)
	108	return NULL;
	109
	110	while (ra->prefixes) {
	111	sd_radv_prefix *p = ra->prefixes;
	112
	113	LIST_REMOVE(prefix, ra->prefixes, p);
	114	sd_radv_prefix_unref(p);
	115	}
	116
e9c6da38	117	free(ra->rdnss);
f9aa5417	118	free(ra->dnssl);
e9c6da38	119
204fb681 PF	120	radv_reset(ra);
204fb681 PF	121
204f99d2 PF	122	sd_radv_detach_event(ra);
	123	return mfree(ra);
	124	}
	125
204fb681 PF	126	static int radv_send(sd_radv ra, const struct in6_addr dst,
204fb681 PF	127	const uint32_t router_lifetime) {
77baf5ae PF	128	static const struct ether_addr mac_zero = {};
	129	sd_radv_prefix *p;
	130	struct sockaddr_in6 dst_addr = {
	131	.sin6_family = AF_INET6,
	132	.sin6_addr = IN6ADDR_ALL_NODES_MULTICAST_INIT,
	133	};
	134	struct nd_router_advert adv = {};
	135	struct {
	136	struct nd_opt_hdr opthdr;
	137	struct ether_addr slladdr;
	138	} _packed_ opt_mac = {
	139	.opthdr = {
	140	.nd_opt_type = ND_OPT_SOURCE_LINKADDR,
	141	.nd_opt_len = (sizeof(struct nd_opt_hdr) +
	142	sizeof(struct ether_addr) - 1) /8 + 1,
	143	},
	144	};
	145	struct nd_opt_mtu opt_mtu = {
	146	.nd_opt_mtu_type = ND_OPT_MTU,
	147	.nd_opt_mtu_len = 1,
	148	};
6852c0f6 PF	149	/* Reserve iov space for RA header, linkaddr, MTU, N prefixes, RDNSS
	150	and DNSSL */
	151	struct iovec iov[5 + ra->n_prefixes];
77baf5ae PF	152	struct msghdr msg = {
	153	.msg_name = &dst_addr,
	154	.msg_namelen = sizeof(dst_addr),
	155	.msg_iov = iov,
	156	};
d601b566 PF	157	usec_t time_now;
	158	int r;
	159
	160	r = sd_event_now(ra->event, clock_boottime_or_monotonic(), &time_now);
	161	if (r < 0)
	162	return r;
77baf5ae	163
88d5a3db	164	if (dst && !in_addr_is_null(AF_INET6, (union in_addr_union*) dst))
77baf5ae	165	dst_addr.sin6_addr = *dst;
88d5a3db	166
77baf5ae PF	167	adv.nd_ra_type = ND_ROUTER_ADVERT;
	168	adv.nd_ra_curhoplimit = ra->hop_limit;
	169	adv.nd_ra_flags_reserved = ra->flags;
	170	adv.nd_ra_router_lifetime = htobe16(router_lifetime);
	171	iov[msg.msg_iovlen].iov_base = &adv;
	172	iov[msg.msg_iovlen].iov_len = sizeof(adv);
	173	msg.msg_iovlen++;
	174
	175	/* MAC address is optional, either because the link does not use L2
	176	addresses or load sharing is desired. See RFC 4861, Section 4.2 */
	177	if (memcmp(&mac_zero, &ra->mac_addr, sizeof(mac_zero))) {
	178	opt_mac.slladdr = ra->mac_addr;
	179	iov[msg.msg_iovlen].iov_base = &opt_mac;
	180	iov[msg.msg_iovlen].iov_len = sizeof(opt_mac);
	181	msg.msg_iovlen++;
	182	}
	183
	184	if (ra->mtu) {
	185	opt_mtu.nd_opt_mtu_mtu = htobe32(ra->mtu);
	186	iov[msg.msg_iovlen].iov_base = &opt_mtu;
	187	iov[msg.msg_iovlen].iov_len = sizeof(opt_mtu);
	188	msg.msg_iovlen++;
	189	}
	190
	191	LIST_FOREACH(prefix, p, ra->prefixes) {
d601b566 PF	192	if (p->valid_until) {
	193
	194	if (time_now > p->valid_until)
	195	p->opt.valid_lifetime = 0;
	196	else
	197	p->opt.valid_lifetime = htobe32((p->valid_until - time_now) / USEC_PER_SEC);
	198
	199	if (time_now > p->preferred_until)
	200	p->opt.preferred_lifetime = 0;
	201	else
	202	p->opt.preferred_lifetime = htobe32((p->preferred_until - time_now) / USEC_PER_SEC);
	203	}
77baf5ae PF	204	iov[msg.msg_iovlen].iov_base = &p->opt;
	205	iov[msg.msg_iovlen].iov_len = sizeof(p->opt);
	206	msg.msg_iovlen++;
	207	}
	208
e9c6da38 PF	209	if (ra->rdnss) {
	210	iov[msg.msg_iovlen].iov_base = ra->rdnss;
	211	iov[msg.msg_iovlen].iov_len = ra->rdnss->length * 8;
	212	msg.msg_iovlen++;
	213	}
	214
e965d6ab PF	215	if (ra->dnssl) {
	216	iov[msg.msg_iovlen].iov_base = ra->dnssl;
	217	iov[msg.msg_iovlen].iov_len = ra->dnssl->length * 8;
	218	msg.msg_iovlen++;
	219	}
	220
77baf5ae PF	221	if (sendmsg(ra->fd, &msg, 0) < 0)
77baf5ae PF	222	return -errno;
204fb681	223
77baf5ae	224	return 0;
204fb681 PF	225	}
204fb681 PF	226
88d5a3db PF	227	static int radv_recv(sd_event_source s, int fd, uint32_t revents, void userdata) {
	228	sd_radv *ra = userdata;
	229	_cleanup_free_ char *addr = NULL;
	230	struct in6_addr src;
	231	triple_timestamp timestamp;
	232	int r;
	233	ssize_t buflen;
	234	_cleanup_free_ char *buf = NULL;
	235
	236	assert(s);
	237	assert(ra);
	238	assert(ra->event);
	239
	240	buflen = next_datagram_size_fd(fd);
	241
	242	if ((unsigned) buflen < sizeof(struct nd_router_solicit))
	243	return log_radv("Too short packet received");
	244
	245	buf = new0(char, buflen);
	246	if (!buf)
	247	return 0;
	248
	249	r = icmp6_receive(fd, buf, buflen, &src, &timestamp);
	250	if (r < 0) {
	251	switch (r) {
	252	case -EADDRNOTAVAIL:
	253	(void) in_addr_to_string(AF_INET6, (union in_addr_union*) &src, &addr);
	254	log_radv("Received RS from non-link-local address %s. Ignoring", addr);
	255	break;
	256
	257	case -EMULTIHOP:
	258	log_radv("Received RS with invalid hop limit. Ignoring.");
	259	break;
	260
	261	case -EPFNOSUPPORT:
	262	log_radv("Received invalid source address from ICMPv6 socket. Ignoring.");
	263	break;
	264
	265	default:
	266	log_radv_warning_errno(r, "Error receiving from ICMPv6 socket: %m");
	267	break;
	268	}
	269
	270	return 0;
	271	}
	272
	273	(void) in_addr_to_string(AF_INET6, (union in_addr_union*) &src, &addr);
	274
	275	r = radv_send(ra, &src, ra->lifetime);
	276	if (r < 0)
	277	log_radv_warning_errno(r, "Unable to send solicited Router Advertisment to %s: %m", addr);
	278	else
	279	log_radv("Sent solicited Router Advertisement to %s", addr);
	280
	281	return 0;
	282	}
	283
204fb681 PF	284	static usec_t radv_compute_timeout(usec_t min, usec_t max) {
	285	assert_return(min <= max, SD_RADV_DEFAULT_MIN_TIMEOUT_USEC);
	286
	287	return min + (random_u32() % (max - min));
	288	}
	289
	290	static int radv_timeout(sd_event_source s, uint64_t usec, void userdata) {
	291	int r;
	292	sd_radv *ra = userdata;
	293	usec_t min_timeout = SD_RADV_DEFAULT_MIN_TIMEOUT_USEC;
	294	usec_t max_timeout = SD_RADV_DEFAULT_MAX_TIMEOUT_USEC;
	295	usec_t time_now, timeout;
	296	char time_string[FORMAT_TIMESPAN_MAX];
	297
	298	assert(s);
	299	assert(ra);
	300	assert(ra->event);
	301
	302	ra->timeout_event_source = sd_event_source_unref(ra->timeout_event_source);
	303
	304	r = sd_event_now(ra->event, clock_boottime_or_monotonic(), &time_now);
	305	if (r < 0)
	306	goto fail;
	307
	308	r = radv_send(ra, NULL, ra->lifetime);
	309	if (r < 0)
	310	log_radv_warning_errno(r, "Unable to send Router Advertisement: %m");
	311
	312	/* RFC 4861, Section 6.2.4, sending initial Router Advertisements */
	313	if (ra->ra_sent < SD_RADV_MAX_INITIAL_RTR_ADVERTISEMENTS) {
	314	max_timeout = SD_RADV_MAX_INITIAL_RTR_ADVERT_INTERVAL_USEC;
	315	min_timeout = SD_RADV_MAX_INITIAL_RTR_ADVERT_INTERVAL_USEC / 3;
	316	}
	317
	318	timeout = radv_compute_timeout(min_timeout, max_timeout);
	319
	320	log_radv("Next Router Advertisement in %s",
	321	format_timespan(time_string, FORMAT_TIMESPAN_MAX,
	322	timeout, USEC_PER_SEC));
	323
	324	r = sd_event_add_time(ra->event, &ra->timeout_event_source,
	325	clock_boottime_or_monotonic(),
	326	time_now + timeout, MSEC_PER_SEC,
	327	radv_timeout, ra);
	328	if (r < 0)
	329	goto fail;
	330
	331	r = sd_event_source_set_priority(ra->timeout_event_source,
	332	ra->event_priority);
	333	if (r < 0)
	334	goto fail;
	335
	336	r = sd_event_source_set_description(ra->timeout_event_source,
	337	"radv-timeout");
	338	if (r < 0)
	339	goto fail;
	340
	341	ra->ra_sent++;
	342
	343	fail:
	344	if (r < 0)
	345	sd_radv_stop(ra);
	346
	347	return 0;
348	}
349
204f99d2	350	_public_ int sd_radv_stop(sd_radv *ra) {
204fb681 PF	351	int r;
204fb681 PF	352
204f99d2 PF	353	assert_return(ra, -EINVAL);
204f99d2 PF	354
6f8a8b84 SS	355	if (ra->state == SD_RADV_STATE_IDLE)
	356	return 0;
	357
204f99d2 PF	358	log_radv("Stopping IPv6 Router Advertisement daemon");
204f99d2 PF	359
204fb681 PF	360	/* RFC 4861, Section 6.2.5, send at least one Router Advertisement
	361	with zero lifetime */
	362	r = radv_send(ra, NULL, 0);
	363	if (r < 0)
	364	log_radv_warning_errno(r, "Unable to send last Router Advertisement with router lifetime set to zero: %m");
	365
	366	radv_reset(ra);
77baf5ae	367	ra->fd = safe_close(ra->fd);
204f99d2 PF	368	ra->state = SD_RADV_STATE_IDLE;
	369
	370	return 0;
	371	}
	372
	373	_public_ int sd_radv_start(sd_radv *ra) {
204fb681 PF	374	int r = 0;
204fb681 PF	375
204f99d2 PF	376	assert_return(ra, -EINVAL);
	377	assert_return(ra->event, -EINVAL);
	378	assert_return(ra->ifindex > 0, -EINVAL);
	379
	380	if (ra->state != SD_RADV_STATE_IDLE)
	381	return 0;
	382
204fb681 PF	383	r = sd_event_add_time(ra->event, &ra->timeout_event_source,
	384	clock_boottime_or_monotonic(), 0, 0,
	385	radv_timeout, ra);
	386	if (r < 0)
	387	goto fail;
	388
	389	r = sd_event_source_set_priority(ra->timeout_event_source,
	390	ra->event_priority);
	391	if (r < 0)
	392	goto fail;
	393
	394	(void) sd_event_source_set_description(ra->timeout_event_source,
	395	"radv-timeout");
	396
77baf5ae PF	397	r = icmp6_bind_router_advertisement(ra->ifindex);
	398	if (r < 0)
	399	goto fail;
	400
	401	ra->fd = r;
88d5a3db PF	402
	403	r = sd_event_add_io(ra->event, &ra->recv_event_source, ra->fd, EPOLLIN, radv_recv, ra);
	404	if (r < 0)
	405	goto fail;
	406
	407	r = sd_event_source_set_priority(ra->recv_event_source, ra->event_priority);
	408	if (r < 0)
	409	goto fail;
	410
	411	(void) sd_event_source_set_description(ra->recv_event_source, "radv-receive-message");
77baf5ae	412
204f99d2 PF	413	ra->state = SD_RADV_STATE_ADVERTISING;
	414
	415	log_radv("Started IPv6 Router Advertisement daemon");
	416
	417	return 0;
204fb681 PF	418
	419	fail:
	420	radv_reset(ra);
	421
	422	return r;
204f99d2 PF	423	}
	424
	425	_public_ int sd_radv_set_ifindex(sd_radv *ra, int ifindex) {
	426	assert_return(ra, -EINVAL);
	427	assert_return(ifindex >= -1, -EINVAL);
	428
	429	if (ra->state != SD_RADV_STATE_IDLE)
	430	return -EBUSY;
	431
	432	ra->ifindex = ifindex;
	433
	434	return 0;
	435	}
	436
	437	_public_ int sd_radv_set_mac(sd_radv ra, const struct ether_addr mac_addr) {
	438	assert_return(ra, -EINVAL);
	439
	440	if (ra->state != SD_RADV_STATE_IDLE)
	441	return -EBUSY;
	442
	443	if (mac_addr)
	444	ra->mac_addr = *mac_addr;
	445	else
	446	zero(ra->mac_addr);
	447
	448	return 0;
	449	}
	450
	451	_public_ int sd_radv_set_mtu(sd_radv *ra, uint32_t mtu) {
	452	assert_return(ra, -EINVAL);
	453	assert_return(mtu >= 1280, -EINVAL);
	454
204f99d2 PF	455	ra->mtu = mtu;
	456
	457	return 0;
	458	}
	459
	460	_public_ int sd_radv_set_hop_limit(sd_radv *ra, uint8_t hop_limit) {
	461	assert_return(ra, -EINVAL);
	462
	463	if (ra->state != SD_RADV_STATE_IDLE)
	464	return -EBUSY;
	465
	466	ra->hop_limit = hop_limit;
	467
	468	return 0;
	469	}
	470
	471	_public_ int sd_radv_set_router_lifetime(sd_radv *ra, uint32_t router_lifetime) {
	472	assert_return(ra, -EINVAL);
	473
	474	if (ra->state != SD_RADV_STATE_IDLE)
	475	return -EBUSY;
	476
	477	/* RFC 4191, Section 2.2, "...If the Router Lifetime is zero, the
	478	preference value MUST be set to (00) by the sender..." */
	479	if (router_lifetime == 0 &&
	480	(ra->flags & (0x3 << 3)) != (SD_NDISC_PREFERENCE_MEDIUM << 3))
	481	return -ETIME;
	482
	483	ra->lifetime = router_lifetime;
	484
	485	return 0;
	486	}
	487
	488	_public_ int sd_radv_set_managed_information(sd_radv *ra, int managed) {
	489	assert_return(ra, -EINVAL);
	490
	491	if (ra->state != SD_RADV_STATE_IDLE)
	492	return -EBUSY;
	493
	494	SET_FLAG(ra->flags, ND_RA_FLAG_MANAGED, managed);
	495
	496	return 0;
	497	}
	498
	499	_public_ int sd_radv_set_other_information(sd_radv *ra, int other) {
	500	assert_return(ra, -EINVAL);
	501
	502	if (ra->state != SD_RADV_STATE_IDLE)
	503	return -EBUSY;
	504
	505	SET_FLAG(ra->flags, ND_RA_FLAG_OTHER, other);
	506
	507	return 0;
	508	}
	509
	510	_public_ int sd_radv_set_preference(sd_radv *ra, unsigned preference) {
	511	int r = 0;
	512
	513	assert_return(ra, -EINVAL);
	514	assert_return(IN_SET(preference,
	515	SD_NDISC_PREFERENCE_LOW,
	516	SD_NDISC_PREFERENCE_MEDIUM,
	517	SD_NDISC_PREFERENCE_HIGH), -EINVAL);
	518
519	ra->flags = (ra->flags & ~(0x3 << 3)) \| (preference << 3);
520
521	return r;
522	}
523
d601b566	524	_public_ int sd_radv_add_prefix(sd_radv ra, sd_radv_prefix p, bool dynamic) {
204f99d2	525	sd_radv_prefix *cur;
d601b566	526	int r;
204f99d2	527	_cleanup_free_ char *addr_p = NULL;
d601b566 PF	528	char time_string_preferred[FORMAT_TIMESPAN_MAX];
	529	char time_string_valid[FORMAT_TIMESPAN_MAX];
	530	usec_t time_now, valid, preferred, valid_until, preferred_until;
204f99d2 PF	531
	532	assert_return(ra, -EINVAL);
	533
	534	if (!p)
	535	return -EINVAL;
	536
	537	LIST_FOREACH(prefix, cur, ra->prefixes) {
204f99d2 PF	538
	539	r = in_addr_prefix_intersect(AF_INET6,
	540	(union in_addr_union*) &cur->opt.in6_addr,
	541	cur->opt.prefixlen,
	542	(union in_addr_union*) &p->opt.in6_addr,
	543	p->opt.prefixlen);
	544	if (r > 0) {
	545	_cleanup_free_ char *addr_cur = NULL;
	546
204f99d2 PF	547	(void) in_addr_to_string(AF_INET6,
	548	(union in_addr_union*) &p->opt.in6_addr,
	549	&addr_p);
	550
d601b566 PF	551	if (dynamic && cur->opt.prefixlen == p->opt.prefixlen)
	552	goto update;
	553
	554	(void) in_addr_to_string(AF_INET6,
	555	(union in_addr_union*) &cur->opt.in6_addr,
	556	&addr_cur);
204f99d2 PF	557	log_radv("IPv6 prefix %s/%u already configured, ignoring %s/%u",
	558	addr_cur, cur->opt.prefixlen,
	559	addr_p, p->opt.prefixlen);
	560
	561	return -EEXIST;
	562	}
	563	}
	564
	565	p = sd_radv_prefix_ref(p);
	566
	567	LIST_APPEND(prefix, ra->prefixes, p);
	568
	569	ra->n_prefixes++;
	570
	571	(void) in_addr_to_string(AF_INET6, (union in_addr_union*) &p->opt.in6_addr, &addr_p);
d601b566 PF	572
	573	if (!dynamic) {
	574	log_radv("Added prefix %s/%d", addr_p, p->opt.prefixlen);
	575	return 0;
	576	}
	577
	578	cur = p;
	579
	580	update:
	581	r = sd_event_now(ra->event, clock_boottime_or_monotonic(), &time_now);
	582	if (r < 0)
	583	return r;
	584
	585	valid = be32toh(p->opt.valid_lifetime) * USEC_PER_SEC;
	586	valid_until = usec_add(valid, time_now);
	587	if (valid_until == USEC_INFINITY)
	588	return -EOVERFLOW;
	589
	590	preferred = be32toh(p->opt.preferred_lifetime) * USEC_PER_SEC;
	591	preferred_until = usec_add(preferred, time_now);
	592	if (preferred_until == USEC_INFINITY)
	593	return -EOVERFLOW;
	594
	595	cur->valid_until = valid_until;
	596	cur->preferred_until = preferred_until;
	597
	598	log_radv("%s prefix %s/%u preferred %s valid %s",
	599	cur? "Updated": "Added",
	600	addr_p, p->opt.prefixlen,
	601	format_timespan(time_string_preferred, FORMAT_TIMESPAN_MAX,
	602	preferred, USEC_PER_SEC),
	603	format_timespan(time_string_valid, FORMAT_TIMESPAN_MAX,
	604	valid, USEC_PER_SEC));
204f99d2 PF	605
	606	return 0;
	607	}
	608
34c169c4 PF	609	_public_ sd_radv_prefix sd_radv_remove_prefix(sd_radv ra,
	610	struct in6_addr *prefix,
	611	uint8_t prefixlen) {
	612	sd_radv_prefix cur, next;
	613
	614	assert_return(ra, NULL);
	615	assert_return(prefix, NULL);
	616
	617	LIST_FOREACH_SAFE(prefix, cur, next, ra->prefixes) {
	618	if (prefixlen != cur->opt.prefixlen)
	619	continue;
	620
	621	if (!in_addr_equal(AF_INET6,
	622	(union in_addr_union *)prefix,
	623	(union in_addr_union *)&cur->opt.in6_addr))
	624	continue;
	625
	626	LIST_REMOVE(prefix, ra->prefixes, cur);
	627	ra->n_prefixes--;
	628
	629	break;
	630	}
	631
	632	return cur;
	633	}
	634
e9c6da38 PF	635	_public_ int sd_radv_set_rdnss(sd_radv *ra, uint32_t lifetime,
	636	const struct in6_addr *dns, size_t n_dns) {
	637	_cleanup_free_ struct sd_radv_opt_dns *opt_rdnss = NULL;
	638	size_t len;
	639
	640	assert_return(ra, -EINVAL);
	641	assert_return(n_dns < 128, -EINVAL);
	642
	643	if (!dns \|\| n_dns == 0) {
	644	ra->rdnss = mfree(ra->rdnss);
	645	ra->n_rdnss = 0;
	646
	647	return 0;
	648	}
	649
	650	len = sizeof(struct sd_radv_opt_dns) + sizeof(struct in6_addr) * n_dns;
	651
	652	opt_rdnss = malloc0(len);
	653	if (!opt_rdnss)
	654	return -ENOMEM;
	655
	656	opt_rdnss->type = SD_RADV_OPT_RDNSS;
	657	opt_rdnss->length = len / 8;
	658	opt_rdnss->lifetime = htobe32(lifetime);
	659
	660	memcpy(opt_rdnss + 1, dns, n_dns * sizeof(struct in6_addr));
	661
1cc6c93a	662	free_and_replace(ra->rdnss, opt_rdnss);
e9c6da38 PF	663
	664	ra->n_rdnss = n_dns;
	665
	666	return 0;
	667	}
	668
e965d6ab PF	669	_public_ int sd_radv_set_dnssl(sd_radv *ra, uint32_t lifetime,
	670	char **search_list) {
	671	_cleanup_free_ struct sd_radv_opt_dns *opt_dnssl = NULL;
	672	size_t len = 0;
	673	char **s;
	674	uint8_t *p;
	675
	676	assert_return(ra, -EINVAL);
	677
	678	if (!search_list \|\| *search_list == NULL) {
	679	ra->dnssl = mfree(ra->dnssl);
	680
	681	return 0;
	682	}
	683
	684	STRV_FOREACH(s, search_list)
	685	len += strlen(*s) + 2;
	686
	687	len = (sizeof(struct sd_radv_opt_dns) + len + 7) & ~0x7;
	688
	689	opt_dnssl = malloc0(len);
	690	if (!opt_dnssl)
	691	return -ENOMEM;
	692
	693	opt_dnssl->type = SD_RADV_OPT_DNSSL;
	694	opt_dnssl->length = len / 8;
	695	opt_dnssl->lifetime = htobe32(lifetime);
	696
	697	p = (uint8_t *)(opt_dnssl + 1);
	698	len -= sizeof(struct sd_radv_opt_dns);
	699
	700	STRV_FOREACH(s, search_list) {
	701	int r;
	702
	703	r = dns_name_to_wire_format(*s, p, len, false);
	704	if (r < 0)
	705	return r;
	706
	707	if (len < (size_t)r)
	708	return -ENOBUFS;
	709
	710	p += r;
	711	len -= r;
	712	}
	713
1cc6c93a	714	free_and_replace(ra->dnssl, opt_dnssl);
e965d6ab PF	715
	716	return 0;
	717	}
	718
04473969 PF	719	_public_ int sd_radv_prefix_new(sd_radv_prefix **ret) {
	720	_cleanup_(sd_radv_prefix_unrefp) sd_radv_prefix *p = NULL;
	721
	722	assert_return(ret, -EINVAL);
	723
	724	p = new0(sd_radv_prefix, 1);
	725	if (!p)
	726	return -ENOMEM;
	727
	728	p->n_ref = 1;
	729
	730	p->opt.type = ND_OPT_PREFIX_INFORMATION;
	731	p->opt.length = (sizeof(p->opt) - 1) /8 + 1;
	732
	733	p->opt.prefixlen = 64;
	734
	735	/* RFC 4861, Section 6.2.1 */
	736	SET_FLAG(p->opt.flags, ND_OPT_PI_FLAG_ONLINK, true);
	737	SET_FLAG(p->opt.flags, ND_OPT_PI_FLAG_AUTO, true);
	738	p->opt.preferred_lifetime = htobe32(604800);
	739	p->opt.valid_lifetime = htobe32(2592000);
	740
204f99d2 PF	741	LIST_INIT(prefix, p);
204f99d2 PF	742
1cc6c93a	743	*ret = TAKE_PTR(p);
04473969 PF	744
	745	return 0;
	746	}
	747
	748	_public_ sd_radv_prefix sd_radv_prefix_ref(sd_radv_prefix p) {
	749	if (!p)
	750	return NULL;
	751
	752	assert(p->n_ref > 0);
	753	p->n_ref++;
	754
	755	return p;
	756	}
	757
	758	_public_ sd_radv_prefix sd_radv_prefix_unref(sd_radv_prefix p) {
	759	if (!p)
	760	return NULL;
	761
	762	assert(p->n_ref > 0);
	763	p->n_ref--;
	764
	765	if (p->n_ref > 0)
	766	return NULL;
	767
	768	return mfree(p);
	769	}
	770
	771	_public_ int sd_radv_prefix_set_prefix(sd_radv_prefix p, struct in6_addr in6_addr,
	772	unsigned char prefixlen) {
	773	assert_return(p, -EINVAL);
	774	assert_return(in6_addr, -EINVAL);
	775
	776	if (prefixlen < 3 \|\| prefixlen > 128)
	777	return -EINVAL;
	778
	779	if (prefixlen > 64)
	780	/* unusual but allowed, log it */
	781	log_radv("Unusual prefix length %d greater than 64", prefixlen);
	782
	783	p->opt.in6_addr = *in6_addr;
	784	p->opt.prefixlen = prefixlen;
	785
	786	return 0;
	787	}
	788
	789	_public_ int sd_radv_prefix_set_onlink(sd_radv_prefix *p, int onlink) {
	790	assert_return(p, -EINVAL);
	791
	792	SET_FLAG(p->opt.flags, ND_OPT_PI_FLAG_ONLINK, onlink);
	793
	794	return 0;
	795	}
	796
	797	_public_ int sd_radv_prefix_set_address_autoconfiguration(sd_radv_prefix *p,
	798	int address_autoconfiguration) {
	799	assert_return(p, -EINVAL);
	800
	801	SET_FLAG(p->opt.flags, ND_OPT_PI_FLAG_AUTO, address_autoconfiguration);
	802
	803	return 0;
	804	}
	805
	806	_public_ int sd_radv_prefix_set_valid_lifetime(sd_radv_prefix *p,
	807	uint32_t valid_lifetime) {
808	assert_return(p, -EINVAL);
809
810	p->opt.valid_lifetime = htobe32(valid_lifetime);
811
812	return 0;
813	}
814
815	_public_ int sd_radv_prefix_set_preferred_lifetime(sd_radv_prefix *p,
816	uint32_t preferred_lifetime) {
817	assert_return(p, -EINVAL);
818
819	p->opt.preferred_lifetime = htobe32(preferred_lifetime);
820
821	return 0;
822	}