1 /*	$KAME: ping6.c,v 1.169 2003/07/25 06:01:47 itojun Exp $	*/
2 
3 /*
4  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  * 3. Neither the name of the project nor the names of its contributors
16  *    may be used to endorse or promote products derived from this software
17  *    without specific prior written permission.
18  *
19  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
20  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
23  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29  * SUCH DAMAGE.
30  */
31 
32 /*	BSDI	ping.c,v 2.3 1996/01/21 17:56:50 jch Exp	*/
33 
34 /*
35  * Copyright (c) 1989, 1993
36  *	The Regents of the University of California.  All rights reserved.
37  *
38  * This code is derived from software contributed to Berkeley by
39  * Mike Muuss.
40  *
41  * Redistribution and use in source and binary forms, with or without
42  * modification, are permitted provided that the following conditions
43  * are met:
44  * 1. Redistributions of source code must retain the above copyright
45  *    notice, this list of conditions and the following disclaimer.
46  * 2. Redistributions in binary form must reproduce the above copyright
47  *    notice, this list of conditions and the following disclaimer in the
48  *    documentation and/or other materials provided with the distribution.
49  * 4. Neither the name of the University nor the names of its contributors
50  *    may be used to endorse or promote products derived from this software
51  *    without specific prior written permission.
52  *
53  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
54  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
55  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
56  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
57  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
58  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
59  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
60  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
61  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
62  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
63  * SUCH DAMAGE.
64  */
65 
66 #ifndef lint
67 static const char copyright[] =
68 "@(#) Copyright (c) 1989, 1993\n\
69 	The Regents of the University of California.  All rights reserved.\n";
70 #endif /* not lint */
71 
72 #ifndef lint
73 #if 0
74 static char sccsid[] = "@(#)ping.c	8.1 (Berkeley) 6/5/93";
75 #endif
76 #endif /* not lint */
77 
78 #include <sys/cdefs.h>
79 __FBSDID("$FreeBSD: stable/9/sbin/ping6/ping6.c 298843 2016-04-30 09:43:01Z ngie $");
80 
81 /*
82  * Using the InterNet Control Message Protocol (ICMP) "ECHO" facility,
83  * measure round-trip-delays and packet loss across network paths.
84  *
85  * Author -
86  *	Mike Muuss
87  *	U. S. Army Ballistic Research Laboratory
88  *	December, 1983
89  *
90  * Status -
91  *	Public Domain.  Distribution Unlimited.
92  * Bugs -
93  *	More statistics could always be gathered.
94  *	This program has to run SUID to ROOT to access the ICMP socket.
95  */
96 /*
97  * NOTE:
98  * USE_SIN6_SCOPE_ID assumes that sin6_scope_id has the same semantics
99  * as IPV6_PKTINFO.  Some people object it (sin6_scope_id specifies *link*
100  * while IPV6_PKTINFO specifies *interface*.  Link is defined as collection of
101  * network attached to 1 or more interfaces)
102  */
103 
104 #include <sys/param.h>
105 #include <sys/uio.h>
106 #include <sys/socket.h>
107 #include <sys/time.h>
108 
109 #include <net/if.h>
110 #include <net/route.h>
111 
112 #include <netinet/in.h>
113 #include <netinet/ip6.h>
114 #include <netinet/icmp6.h>
115 #include <arpa/inet.h>
116 #include <arpa/nameser.h>
117 #include <netdb.h>
118 
119 #include <ctype.h>
120 #include <err.h>
121 #include <errno.h>
122 #include <fcntl.h>
123 #include <math.h>
124 #include <signal.h>
125 #include <stdio.h>
126 #include <stdlib.h>
127 #include <string.h>
128 #include <unistd.h>
129 #ifdef HAVE_POLL_H
130 #include <poll.h>
131 #endif
132 
133 #ifdef IPSEC
134 #include <netipsec/ah.h>
135 #include <netipsec/ipsec.h>
136 #endif
137 
138 #include <md5.h>
139 
140 struct tv32 {
141 	u_int32_t tv32_sec;
142 	u_int32_t tv32_usec;
143 };
144 
145 #define MAXPACKETLEN	131072
146 #define	IP6LEN		40
147 #define ICMP6ECHOLEN	8	/* icmp echo header len excluding time */
148 #define ICMP6ECHOTMLEN sizeof(struct tv32)
149 #define ICMP6_NIQLEN	(ICMP6ECHOLEN + 8)
150 # define CONTROLLEN	10240	/* ancillary data buffer size RFC3542 20.1 */
151 /* FQDN case, 64 bits of nonce + 32 bits ttl */
152 #define ICMP6_NIRLEN	(ICMP6ECHOLEN + 12)
153 #define	EXTRA		256	/* for AH and various other headers. weird. */
154 #define	DEFDATALEN	ICMP6ECHOTMLEN
155 #define MAXDATALEN	MAXPACKETLEN - IP6LEN - ICMP6ECHOLEN
156 #define	NROUTES		9		/* number of record route slots */
157 
158 #define	A(bit)		rcvd_tbl[(bit)>>3]	/* identify byte in array */
159 #define	B(bit)		(1 << ((bit) & 0x07))	/* identify bit in byte */
160 #define	SET(bit)	(A(bit) |= B(bit))
161 #define	CLR(bit)	(A(bit) &= (~B(bit)))
162 #define	TST(bit)	(A(bit) & B(bit))
163 
164 #define	F_FLOOD		0x0001
165 #define	F_INTERVAL	0x0002
166 #define	F_PINGFILLED	0x0008
167 #define	F_QUIET		0x0010
168 #define	F_RROUTE	0x0020
169 #define	F_SO_DEBUG	0x0040
170 #define	F_VERBOSE	0x0100
171 #ifdef IPSEC
172 #ifdef IPSEC_POLICY_IPSEC
173 #define	F_POLICY	0x0400
174 #else
175 #define F_AUTHHDR	0x0200
176 #define F_ENCRYPT	0x0400
177 #endif /*IPSEC_POLICY_IPSEC*/
178 #endif /*IPSEC*/
179 #define F_NODEADDR	0x0800
180 #define F_FQDN		0x1000
181 #define F_INTERFACE	0x2000
182 #define F_SRCADDR	0x4000
183 #define F_HOSTNAME	0x10000
184 #define F_FQDNOLD	0x20000
185 #define F_NIGROUP	0x40000
186 #define F_SUPTYPES	0x80000
187 #define F_NOMINMTU	0x100000
188 #define F_ONCE		0x200000
189 #define F_AUDIBLE	0x400000
190 #define F_MISSED	0x800000
191 #define F_DONTFRAG	0x1000000
192 #define F_NOUSERDATA	(F_NODEADDR | F_FQDN | F_FQDNOLD | F_SUPTYPES)
193 u_int options;
194 
195 #define IN6LEN		sizeof(struct in6_addr)
196 #define SA6LEN		sizeof(struct sockaddr_in6)
197 #define DUMMY_PORT	10101
198 
199 #define SIN6(s)	((struct sockaddr_in6 *)(s))
200 
201 /*
202  * MAX_DUP_CHK is the number of bits in received table, i.e. the maximum
203  * number of received sequence numbers we can keep track of.  Change 128
204  * to 8192 for complete accuracy...
205  */
206 #define	MAX_DUP_CHK	(8 * 8192)
207 int mx_dup_ck = MAX_DUP_CHK;
208 char rcvd_tbl[MAX_DUP_CHK / 8];
209 
210 struct addrinfo *res = NULL;
211 struct sockaddr_in6 dst;	/* who to ping6 */
212 struct sockaddr_in6 src;	/* src addr of this packet */
213 socklen_t srclen;
214 int datalen = DEFDATALEN;
215 int s;				/* socket file descriptor */
216 u_char outpack[MAXPACKETLEN];
217 char BSPACE = '\b';		/* characters written for flood */
218 char BBELL = '\a';		/* characters written for AUDIBLE */
219 char DOT = '.';
220 char *hostname;
221 int ident;			/* process id to identify our packets */
222 u_int8_t nonce[8];		/* nonce field for node information */
223 int hoplimit = -1;		/* hoplimit */
224 int pathmtu = 0;		/* path MTU for the destination.  0 = unspec. */
225 u_char *packet = NULL;
226 #ifdef HAVE_POLL_H
227 struct pollfd fdmaskp[1];
228 #else
229 fd_set *fdmaskp = NULL;
230 int fdmasks;
231 #endif
232 
233 /* counters */
234 long nmissedmax;		/* max value of ntransmitted - nreceived - 1 */
235 long npackets;			/* max packets to transmit */
236 long nreceived;			/* # of packets we got back */
237 long nrepeats;			/* number of duplicates */
238 long ntransmitted;		/* sequence # for outbound packets = #sent */
239 struct timeval interval = {1, 0}; /* interval between packets */
240 
241 /* timing */
242 int timing;			/* flag to do timing */
243 double tmin = 999999999.0;	/* minimum round trip time */
244 double tmax = 0.0;		/* maximum round trip time */
245 double tsum = 0.0;		/* sum of all times, for doing average */
246 double tsumsq = 0.0;		/* sum of all times squared, for std. dev. */
247 
248 /* for node addresses */
249 u_short naflags;
250 
251 /* for ancillary data(advanced API) */
252 struct msghdr smsghdr;
253 struct iovec smsgiov;
254 char *scmsg = 0;
255 
256 volatile sig_atomic_t seenalrm;
257 volatile sig_atomic_t seenint;
258 #ifdef SIGINFO
259 volatile sig_atomic_t seeninfo;
260 #endif
261 
262 int	 main(int, char *[]);
263 void	 fill(char *, char *);
264 int	 get_hoplim(struct msghdr *);
265 int	 get_pathmtu(struct msghdr *);
266 struct in6_pktinfo *get_rcvpktinfo(struct msghdr *);
267 void	 onsignal(int);
268 void	 retransmit(void);
269 void	 onint(int);
270 size_t	 pingerlen(void);
271 int	 pinger(void);
272 const char *pr_addr(struct sockaddr *, int);
273 void	 pr_icmph(struct icmp6_hdr *, u_char *);
274 void	 pr_iph(struct ip6_hdr *);
275 void	 pr_suptypes(struct icmp6_nodeinfo *, size_t);
276 void	 pr_nodeaddr(struct icmp6_nodeinfo *, int);
277 int	 myechoreply(const struct icmp6_hdr *);
278 int	 mynireply(const struct icmp6_nodeinfo *);
279 char *dnsdecode(const u_char **, const u_char *, const u_char *,
280 	char *, size_t);
281 void	 pr_pack(u_char *, int, struct msghdr *);
282 void	 pr_exthdrs(struct msghdr *);
283 void	 pr_ip6opt(void *, size_t);
284 void	 pr_rthdr(void *, size_t);
285 int	 pr_bitrange(u_int32_t, int, int);
286 void	 pr_retip(struct ip6_hdr *, u_char *);
287 void	 summary(void);
288 void	 tvsub(struct timeval *, struct timeval *);
289 int	 setpolicy(int, char *);
290 char	*nigroup(char *, int);
291 void	 usage(void);
292 
293 int
main(int argc,char * argv[])294 main(int argc, char *argv[])
295 {
296 	struct itimerval itimer;
297 	struct sockaddr_in6 from;
298 #ifndef HAVE_ARC4RANDOM
299 	struct timeval seed;
300 #endif
301 #ifdef HAVE_POLL_H
302 	int timeout;
303 #else
304 	struct timeval timeout, *tv;
305 #endif
306 	struct addrinfo hints;
307 	int cc, i;
308 	int ch, hold, packlen, preload, optval, ret_ga;
309 	int nig_oldmcprefix = -1;
310 	u_char *datap;
311 	char *e, *target, *ifname = NULL, *gateway = NULL;
312 	int ip6optlen = 0;
313 	struct cmsghdr *scmsgp = NULL;
314 	/* For control (ancillary) data received from recvmsg() */
315 	struct cmsghdr cm[CONTROLLEN];
316 #if defined(SO_SNDBUF) && defined(SO_RCVBUF)
317 	u_long lsockbufsize;
318 	int sockbufsize = 0;
319 #endif
320 	int usepktinfo = 0;
321 	struct in6_pktinfo *pktinfo = NULL;
322 #ifdef USE_RFC2292BIS
323 	struct ip6_rthdr *rthdr = NULL;
324 #endif
325 #ifdef IPSEC_POLICY_IPSEC
326 	char *policy_in = NULL;
327 	char *policy_out = NULL;
328 #endif
329 	double intval;
330 	size_t rthlen;
331 #ifdef IPV6_USE_MIN_MTU
332 	int mflag = 0;
333 #endif
334 
335 	/* just to be sure */
336 	memset(&smsghdr, 0, sizeof(smsghdr));
337 	memset(&smsgiov, 0, sizeof(smsgiov));
338 
339 	preload = 0;
340 	datap = &outpack[ICMP6ECHOLEN + ICMP6ECHOTMLEN];
341 #ifndef IPSEC
342 #define ADDOPTS
343 #else
344 #ifdef IPSEC_POLICY_IPSEC
345 #define ADDOPTS	"P:"
346 #else
347 #define ADDOPTS	"AE"
348 #endif /*IPSEC_POLICY_IPSEC*/
349 #endif
350 	while ((ch = getopt(argc, argv,
351 	    "a:b:c:DdfHg:h:I:i:l:mnNop:qrRS:s:tvwW" ADDOPTS)) != -1) {
352 #undef ADDOPTS
353 		switch (ch) {
354 		case 'a':
355 		{
356 			char *cp;
357 
358 			options &= ~F_NOUSERDATA;
359 			options |= F_NODEADDR;
360 			for (cp = optarg; *cp != '\0'; cp++) {
361 				switch (*cp) {
362 				case 'a':
363 					naflags |= NI_NODEADDR_FLAG_ALL;
364 					break;
365 				case 'c':
366 				case 'C':
367 					naflags |= NI_NODEADDR_FLAG_COMPAT;
368 					break;
369 				case 'l':
370 				case 'L':
371 					naflags |= NI_NODEADDR_FLAG_LINKLOCAL;
372 					break;
373 				case 's':
374 				case 'S':
375 					naflags |= NI_NODEADDR_FLAG_SITELOCAL;
376 					break;
377 				case 'g':
378 				case 'G':
379 					naflags |= NI_NODEADDR_FLAG_GLOBAL;
380 					break;
381 				case 'A': /* experimental. not in the spec */
382 #ifdef NI_NODEADDR_FLAG_ANYCAST
383 					naflags |= NI_NODEADDR_FLAG_ANYCAST;
384 					break;
385 #else
386 					errx(1,
387 "-a A is not supported on the platform");
388 					/*NOTREACHED*/
389 #endif
390 				default:
391 					usage();
392 					/*NOTREACHED*/
393 				}
394 			}
395 			break;
396 		}
397 		case 'b':
398 #if defined(SO_SNDBUF) && defined(SO_RCVBUF)
399 			errno = 0;
400 			e = NULL;
401 			lsockbufsize = strtoul(optarg, &e, 10);
402 			sockbufsize = lsockbufsize;
403 			if (errno || !*optarg || *e ||
404 			    sockbufsize != lsockbufsize)
405 				errx(1, "invalid socket buffer size");
406 #else
407 			errx(1,
408 "-b option ignored: SO_SNDBUF/SO_RCVBUF socket options not supported");
409 #endif
410 			break;
411 		case 'c':
412 			npackets = strtol(optarg, &e, 10);
413 			if (npackets <= 0 || *optarg == '\0' || *e != '\0')
414 				errx(1,
415 				    "illegal number of packets -- %s", optarg);
416 			break;
417 		case 'D':
418 			options |= F_DONTFRAG;
419 			break;
420 		case 'd':
421 			options |= F_SO_DEBUG;
422 			break;
423 		case 'f':
424 			if (getuid()) {
425 				errno = EPERM;
426 				errx(1, "Must be superuser to flood ping");
427 			}
428 			options |= F_FLOOD;
429 			setbuf(stdout, (char *)NULL);
430 			break;
431 		case 'g':
432 			gateway = optarg;
433 			break;
434 		case 'H':
435 			options |= F_HOSTNAME;
436 			break;
437 		case 'h':		/* hoplimit */
438 			hoplimit = strtol(optarg, &e, 10);
439 			if (*optarg == '\0' || *e != '\0')
440 				errx(1, "illegal hoplimit %s", optarg);
441 			if (255 < hoplimit || hoplimit < -1)
442 				errx(1,
443 				    "illegal hoplimit -- %s", optarg);
444 			break;
445 		case 'I':
446 			ifname = optarg;
447 			options |= F_INTERFACE;
448 #ifndef USE_SIN6_SCOPE_ID
449 			usepktinfo++;
450 #endif
451 			break;
452 		case 'i':		/* wait between sending packets */
453 			intval = strtod(optarg, &e);
454 			if (*optarg == '\0' || *e != '\0')
455 				errx(1, "illegal timing interval %s", optarg);
456 			if (intval < 1 && getuid()) {
457 				errx(1, "%s: only root may use interval < 1s",
458 				    strerror(EPERM));
459 			}
460 			interval.tv_sec = (long)intval;
461 			interval.tv_usec =
462 			    (long)((intval - interval.tv_sec) * 1000000);
463 			if (interval.tv_sec < 0)
464 				errx(1, "illegal timing interval %s", optarg);
465 			/* less than 1/hz does not make sense */
466 			if (interval.tv_sec == 0 && interval.tv_usec < 1) {
467 				warnx("too small interval, raised to .000001");
468 				interval.tv_usec = 1;
469 			}
470 			options |= F_INTERVAL;
471 			break;
472 		case 'l':
473 			if (getuid()) {
474 				errno = EPERM;
475 				errx(1, "Must be superuser to preload");
476 			}
477 			preload = strtol(optarg, &e, 10);
478 			if (preload < 0 || *optarg == '\0' || *e != '\0')
479 				errx(1, "illegal preload value -- %s", optarg);
480 			break;
481 		case 'm':
482 #ifdef IPV6_USE_MIN_MTU
483 			mflag++;
484 			break;
485 #else
486 			errx(1, "-%c is not supported on this platform", ch);
487 			/*NOTREACHED*/
488 #endif
489 		case 'n':
490 			options &= ~F_HOSTNAME;
491 			break;
492 		case 'N':
493 			options |= F_NIGROUP;
494 			nig_oldmcprefix++;
495 			break;
496 		case 'o':
497 			options |= F_ONCE;
498 			break;
499 		case 'p':		/* fill buffer with user pattern */
500 			options |= F_PINGFILLED;
501 			fill((char *)datap, optarg);
502 				break;
503 		case 'q':
504 			options |= F_QUIET;
505 			break;
506 		case 'r':
507 			options |= F_AUDIBLE;
508 			break;
509 		case 'R':
510 			options |= F_MISSED;
511 			break;
512 		case 'S':
513 			memset(&hints, 0, sizeof(struct addrinfo));
514 			hints.ai_flags = AI_NUMERICHOST; /* allow hostname? */
515 			hints.ai_family = AF_INET6;
516 			hints.ai_socktype = SOCK_RAW;
517 			hints.ai_protocol = IPPROTO_ICMPV6;
518 
519 			ret_ga = getaddrinfo(optarg, NULL, &hints, &res);
520 			if (ret_ga) {
521 				errx(1, "invalid source address: %s",
522 				     gai_strerror(ret_ga));
523 			}
524 			/*
525 			 * res->ai_family must be AF_INET6 and res->ai_addrlen
526 			 * must be sizeof(src).
527 			 */
528 			memcpy(&src, res->ai_addr, res->ai_addrlen);
529 			srclen = res->ai_addrlen;
530 			freeaddrinfo(res);
531 			res = NULL;
532 			options |= F_SRCADDR;
533 			break;
534 		case 's':		/* size of packet to send */
535 			datalen = strtol(optarg, &e, 10);
536 			if (datalen <= 0 || *optarg == '\0' || *e != '\0')
537 				errx(1, "illegal datalen value -- %s", optarg);
538 			if (datalen > MAXDATALEN) {
539 				errx(1,
540 				    "datalen value too large, maximum is %d",
541 				    MAXDATALEN);
542 			}
543 			break;
544 		case 't':
545 			options &= ~F_NOUSERDATA;
546 			options |= F_SUPTYPES;
547 			break;
548 		case 'v':
549 			options |= F_VERBOSE;
550 			break;
551 		case 'w':
552 			options &= ~F_NOUSERDATA;
553 			options |= F_FQDN;
554 			break;
555 		case 'W':
556 			options &= ~F_NOUSERDATA;
557 			options |= F_FQDNOLD;
558 			break;
559 #ifdef IPSEC
560 #ifdef IPSEC_POLICY_IPSEC
561 		case 'P':
562 			options |= F_POLICY;
563 			if (!strncmp("in", optarg, 2)) {
564 				if ((policy_in = strdup(optarg)) == NULL)
565 					errx(1, "strdup");
566 			} else if (!strncmp("out", optarg, 3)) {
567 				if ((policy_out = strdup(optarg)) == NULL)
568 					errx(1, "strdup");
569 			} else
570 				errx(1, "invalid security policy");
571 			break;
572 #else
573 		case 'A':
574 			options |= F_AUTHHDR;
575 			break;
576 		case 'E':
577 			options |= F_ENCRYPT;
578 			break;
579 #endif /*IPSEC_POLICY_IPSEC*/
580 #endif /*IPSEC*/
581 		default:
582 			usage();
583 			/*NOTREACHED*/
584 		}
585 	}
586 
587 	argc -= optind;
588 	argv += optind;
589 
590 	if (argc < 1) {
591 		usage();
592 		/*NOTREACHED*/
593 	}
594 
595 	if (argc > 1) {
596 #ifdef IPV6_RECVRTHDR	/* 2292bis */
597 		rthlen = CMSG_SPACE(inet6_rth_space(IPV6_RTHDR_TYPE_0,
598 		    argc - 1));
599 #else  /* RFC2292 */
600 		rthlen = inet6_rthdr_space(IPV6_RTHDR_TYPE_0, argc - 1);
601 #endif
602 		if (rthlen == 0) {
603 			errx(1, "too many intermediate hops");
604 			/*NOTREACHED*/
605 		}
606 		ip6optlen += rthlen;
607 	}
608 
609 	if (options & F_NIGROUP) {
610 		target = nigroup(argv[argc - 1], nig_oldmcprefix);
611 		if (target == NULL) {
612 			usage();
613 			/*NOTREACHED*/
614 		}
615 	} else
616 		target = argv[argc - 1];
617 
618 	/* getaddrinfo */
619 	memset(&hints, 0, sizeof(struct addrinfo));
620 	hints.ai_flags = AI_CANONNAME;
621 	hints.ai_family = AF_INET6;
622 	hints.ai_socktype = SOCK_RAW;
623 	hints.ai_protocol = IPPROTO_ICMPV6;
624 
625 	ret_ga = getaddrinfo(target, NULL, &hints, &res);
626 	if (ret_ga)
627 		errx(1, "%s", gai_strerror(ret_ga));
628 	if (res->ai_canonname)
629 		hostname = res->ai_canonname;
630 	else
631 		hostname = target;
632 
633 	if (!res->ai_addr)
634 		errx(1, "getaddrinfo failed");
635 
636 	(void)memcpy(&dst, res->ai_addr, res->ai_addrlen);
637 
638 	if ((s = socket(res->ai_family, res->ai_socktype,
639 	    res->ai_protocol)) < 0)
640 		err(1, "socket");
641 
642 	/* set the source address if specified. */
643 	if ((options & F_SRCADDR) &&
644 	    bind(s, (struct sockaddr *)&src, srclen) != 0) {
645 		err(1, "bind");
646 	}
647 
648 	/* set the gateway (next hop) if specified */
649 	if (gateway) {
650 		struct addrinfo ghints, *gres;
651 		int error;
652 
653 		memset(&ghints, 0, sizeof(ghints));
654 		ghints.ai_family = AF_INET6;
655 		ghints.ai_socktype = SOCK_RAW;
656 		ghints.ai_protocol = IPPROTO_ICMPV6;
657 
658 		error = getaddrinfo(gateway, NULL, &hints, &gres);
659 		if (error) {
660 			errx(1, "getaddrinfo for the gateway %s: %s",
661 			     gateway, gai_strerror(error));
662 		}
663 		if (gres->ai_next && (options & F_VERBOSE))
664 			warnx("gateway resolves to multiple addresses");
665 
666 		if (setsockopt(s, IPPROTO_IPV6, IPV6_NEXTHOP,
667 			       gres->ai_addr, gres->ai_addrlen)) {
668 			err(1, "setsockopt(IPV6_NEXTHOP)");
669 		}
670 
671 		freeaddrinfo(gres);
672 	}
673 
674 	/*
675 	 * let the kerel pass extension headers of incoming packets,
676 	 * for privileged socket options
677 	 */
678 	if ((options & F_VERBOSE) != 0) {
679 		int opton = 1;
680 
681 #ifdef IPV6_RECVHOPOPTS
682 		if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVHOPOPTS, &opton,
683 		    sizeof(opton)))
684 			err(1, "setsockopt(IPV6_RECVHOPOPTS)");
685 #else  /* old adv. API */
686 		if (setsockopt(s, IPPROTO_IPV6, IPV6_HOPOPTS, &opton,
687 		    sizeof(opton)))
688 			err(1, "setsockopt(IPV6_HOPOPTS)");
689 #endif
690 #ifdef IPV6_RECVDSTOPTS
691 		if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVDSTOPTS, &opton,
692 		    sizeof(opton)))
693 			err(1, "setsockopt(IPV6_RECVDSTOPTS)");
694 #else  /* old adv. API */
695 		if (setsockopt(s, IPPROTO_IPV6, IPV6_DSTOPTS, &opton,
696 		    sizeof(opton)))
697 			err(1, "setsockopt(IPV6_DSTOPTS)");
698 #endif
699 #ifdef IPV6_RECVRTHDRDSTOPTS
700 		if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVRTHDRDSTOPTS, &opton,
701 		    sizeof(opton)))
702 			err(1, "setsockopt(IPV6_RECVRTHDRDSTOPTS)");
703 #endif
704 	}
705 
706 	/* revoke root privilege */
707 	seteuid(getuid());
708 	setuid(getuid());
709 
710 	if ((options & F_FLOOD) && (options & F_INTERVAL))
711 		errx(1, "-f and -i incompatible options");
712 
713 	if ((options & F_NOUSERDATA) == 0) {
714 		if (datalen >= sizeof(struct tv32)) {
715 			/* we can time transfer */
716 			timing = 1;
717 		} else
718 			timing = 0;
719 		/* in F_VERBOSE case, we may get non-echoreply packets*/
720 		if (options & F_VERBOSE)
721 			packlen = 2048 + IP6LEN + ICMP6ECHOLEN + EXTRA;
722 		else
723 			packlen = datalen + IP6LEN + ICMP6ECHOLEN + EXTRA;
724 	} else {
725 		/* suppress timing for node information query */
726 		timing = 0;
727 		datalen = 2048;
728 		packlen = 2048 + IP6LEN + ICMP6ECHOLEN + EXTRA;
729 	}
730 
731 	if (!(packet = (u_char *)malloc((u_int)packlen)))
732 		err(1, "Unable to allocate packet");
733 	if (!(options & F_PINGFILLED))
734 		for (i = ICMP6ECHOLEN; i < packlen; ++i)
735 			*datap++ = i;
736 
737 	ident = getpid() & 0xFFFF;
738 #ifndef HAVE_ARC4RANDOM
739 	gettimeofday(&seed, NULL);
740 	srand((unsigned int)(seed.tv_sec ^ seed.tv_usec ^ (long)ident));
741 	memset(nonce, 0, sizeof(nonce));
742 	for (i = 0; i < sizeof(nonce); i += sizeof(int))
743 		*((int *)&nonce[i]) = rand();
744 #else
745 	memset(nonce, 0, sizeof(nonce));
746 	for (i = 0; i < sizeof(nonce); i += sizeof(u_int32_t))
747 		*((u_int32_t *)&nonce[i]) = arc4random();
748 #endif
749 	optval = 1;
750 	if (options & F_DONTFRAG)
751 		if (setsockopt(s, IPPROTO_IPV6, IPV6_DONTFRAG,
752 		    &optval, sizeof(optval)) == -1)
753 			err(1, "IPV6_DONTFRAG");
754 	hold = 1;
755 
756 	if (options & F_SO_DEBUG)
757 		(void)setsockopt(s, SOL_SOCKET, SO_DEBUG, (char *)&hold,
758 		    sizeof(hold));
759 	optval = IPV6_DEFHLIM;
760 	if (IN6_IS_ADDR_MULTICAST(&dst.sin6_addr))
761 		if (setsockopt(s, IPPROTO_IPV6, IPV6_MULTICAST_HOPS,
762 		    &optval, sizeof(optval)) == -1)
763 			err(1, "IPV6_MULTICAST_HOPS");
764 #ifdef IPV6_USE_MIN_MTU
765 	if (mflag != 1) {
766 		optval = mflag > 1 ? 0 : 1;
767 
768 		if (setsockopt(s, IPPROTO_IPV6, IPV6_USE_MIN_MTU,
769 		    &optval, sizeof(optval)) == -1)
770 			err(1, "setsockopt(IPV6_USE_MIN_MTU)");
771 	}
772 #ifdef IPV6_RECVPATHMTU
773 	else {
774 		optval = 1;
775 		if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVPATHMTU,
776 		    &optval, sizeof(optval)) == -1)
777 			err(1, "setsockopt(IPV6_RECVPATHMTU)");
778 	}
779 #endif /* IPV6_RECVPATHMTU */
780 #endif /* IPV6_USE_MIN_MTU */
781 
782 #ifdef IPSEC
783 #ifdef IPSEC_POLICY_IPSEC
784 	if (options & F_POLICY) {
785 		if (setpolicy(s, policy_in) < 0)
786 			errx(1, "%s", ipsec_strerror());
787 		if (setpolicy(s, policy_out) < 0)
788 			errx(1, "%s", ipsec_strerror());
789 	}
790 #else
791 	if (options & F_AUTHHDR) {
792 		optval = IPSEC_LEVEL_REQUIRE;
793 #ifdef IPV6_AUTH_TRANS_LEVEL
794 		if (setsockopt(s, IPPROTO_IPV6, IPV6_AUTH_TRANS_LEVEL,
795 		    &optval, sizeof(optval)) == -1)
796 			err(1, "setsockopt(IPV6_AUTH_TRANS_LEVEL)");
797 #else /* old def */
798 		if (setsockopt(s, IPPROTO_IPV6, IPV6_AUTH_LEVEL,
799 		    &optval, sizeof(optval)) == -1)
800 			err(1, "setsockopt(IPV6_AUTH_LEVEL)");
801 #endif
802 	}
803 	if (options & F_ENCRYPT) {
804 		optval = IPSEC_LEVEL_REQUIRE;
805 		if (setsockopt(s, IPPROTO_IPV6, IPV6_ESP_TRANS_LEVEL,
806 		    &optval, sizeof(optval)) == -1)
807 			err(1, "setsockopt(IPV6_ESP_TRANS_LEVEL)");
808 	}
809 #endif /*IPSEC_POLICY_IPSEC*/
810 #endif
811 
812 #ifdef ICMP6_FILTER
813     {
814 	struct icmp6_filter filt;
815 	if (!(options & F_VERBOSE)) {
816 		ICMP6_FILTER_SETBLOCKALL(&filt);
817 		if ((options & F_FQDN) || (options & F_FQDNOLD) ||
818 		    (options & F_NODEADDR) || (options & F_SUPTYPES))
819 			ICMP6_FILTER_SETPASS(ICMP6_NI_REPLY, &filt);
820 		else
821 			ICMP6_FILTER_SETPASS(ICMP6_ECHO_REPLY, &filt);
822 	} else {
823 		ICMP6_FILTER_SETPASSALL(&filt);
824 	}
825 	if (setsockopt(s, IPPROTO_ICMPV6, ICMP6_FILTER, &filt,
826 	    sizeof(filt)) < 0)
827 		err(1, "setsockopt(ICMP6_FILTER)");
828     }
829 #endif /*ICMP6_FILTER*/
830 
831 	/* let the kerel pass extension headers of incoming packets */
832 	if ((options & F_VERBOSE) != 0) {
833 		int opton = 1;
834 
835 #ifdef IPV6_RECVRTHDR
836 		if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVRTHDR, &opton,
837 		    sizeof(opton)))
838 			err(1, "setsockopt(IPV6_RECVRTHDR)");
839 #else  /* old adv. API */
840 		if (setsockopt(s, IPPROTO_IPV6, IPV6_RTHDR, &opton,
841 		    sizeof(opton)))
842 			err(1, "setsockopt(IPV6_RTHDR)");
843 #endif
844 	}
845 
846 /*
847 	optval = 1;
848 	if (IN6_IS_ADDR_MULTICAST(&dst.sin6_addr))
849 		if (setsockopt(s, IPPROTO_IPV6, IPV6_MULTICAST_LOOP,
850 		    &optval, sizeof(optval)) == -1)
851 			err(1, "IPV6_MULTICAST_LOOP");
852 */
853 
854 	/* Specify the outgoing interface and/or the source address */
855 	if (usepktinfo)
856 		ip6optlen += CMSG_SPACE(sizeof(struct in6_pktinfo));
857 
858 	if (hoplimit != -1)
859 		ip6optlen += CMSG_SPACE(sizeof(int));
860 
861 	/* set IP6 packet options */
862 	if (ip6optlen) {
863 		if ((scmsg = (char *)malloc(ip6optlen)) == 0)
864 			errx(1, "can't allocate enough memory");
865 		smsghdr.msg_control = (caddr_t)scmsg;
866 		smsghdr.msg_controllen = ip6optlen;
867 		scmsgp = (struct cmsghdr *)scmsg;
868 	}
869 	if (usepktinfo) {
870 		pktinfo = (struct in6_pktinfo *)(CMSG_DATA(scmsgp));
871 		memset(pktinfo, 0, sizeof(*pktinfo));
872 		scmsgp->cmsg_len = CMSG_LEN(sizeof(struct in6_pktinfo));
873 		scmsgp->cmsg_level = IPPROTO_IPV6;
874 		scmsgp->cmsg_type = IPV6_PKTINFO;
875 		scmsgp = CMSG_NXTHDR(&smsghdr, scmsgp);
876 	}
877 
878 	/* set the outgoing interface */
879 	if (ifname) {
880 #ifndef USE_SIN6_SCOPE_ID
881 		/* pktinfo must have already been allocated */
882 		if ((pktinfo->ipi6_ifindex = if_nametoindex(ifname)) == 0)
883 			errx(1, "%s: invalid interface name", ifname);
884 #else
885 		if ((dst.sin6_scope_id = if_nametoindex(ifname)) == 0)
886 			errx(1, "%s: invalid interface name", ifname);
887 #endif
888 	}
889 	if (hoplimit != -1) {
890 		scmsgp->cmsg_len = CMSG_LEN(sizeof(int));
891 		scmsgp->cmsg_level = IPPROTO_IPV6;
892 		scmsgp->cmsg_type = IPV6_HOPLIMIT;
893 		*(int *)(CMSG_DATA(scmsgp)) = hoplimit;
894 
895 		scmsgp = CMSG_NXTHDR(&smsghdr, scmsgp);
896 	}
897 
898 	if (argc > 1) {	/* some intermediate addrs are specified */
899 		int hops, error;
900 #ifdef USE_RFC2292BIS
901 		int rthdrlen;
902 #endif
903 
904 #ifdef USE_RFC2292BIS
905 		rthdrlen = inet6_rth_space(IPV6_RTHDR_TYPE_0, argc - 1);
906 		scmsgp->cmsg_len = CMSG_LEN(rthdrlen);
907 		scmsgp->cmsg_level = IPPROTO_IPV6;
908 		scmsgp->cmsg_type = IPV6_RTHDR;
909 		rthdr = (struct ip6_rthdr *)CMSG_DATA(scmsgp);
910 		rthdr = inet6_rth_init((void *)rthdr, rthdrlen,
911 		    IPV6_RTHDR_TYPE_0, argc - 1);
912 		if (rthdr == NULL)
913 			errx(1, "can't initialize rthdr");
914 #else  /* old advanced API */
915 		if ((scmsgp = (struct cmsghdr *)inet6_rthdr_init(scmsgp,
916 		    IPV6_RTHDR_TYPE_0)) == 0)
917 			errx(1, "can't initialize rthdr");
918 #endif /* USE_RFC2292BIS */
919 
920 		for (hops = 0; hops < argc - 1; hops++) {
921 			struct addrinfo *iaip;
922 
923 			if ((error = getaddrinfo(argv[hops], NULL, &hints,
924 			    &iaip)))
925 				errx(1, "%s", gai_strerror(error));
926 			if (SIN6(iaip->ai_addr)->sin6_family != AF_INET6)
927 				errx(1,
928 				    "bad addr family of an intermediate addr");
929 
930 #ifdef USE_RFC2292BIS
931 			if (inet6_rth_add(rthdr,
932 			    &(SIN6(iaip->ai_addr))->sin6_addr))
933 				errx(1, "can't add an intermediate node");
934 #else  /* old advanced API */
935 			if (inet6_rthdr_add(scmsgp,
936 			    &(SIN6(iaip->ai_addr))->sin6_addr,
937 			    IPV6_RTHDR_LOOSE))
938 				errx(1, "can't add an intermediate node");
939 #endif /* USE_RFC2292BIS */
940 			freeaddrinfo(iaip);
941 		}
942 
943 #ifndef USE_RFC2292BIS
944 		if (inet6_rthdr_lasthop(scmsgp, IPV6_RTHDR_LOOSE))
945 			errx(1, "can't set the last flag");
946 #endif
947 
948 		scmsgp = CMSG_NXTHDR(&smsghdr, scmsgp);
949 	}
950 
951 	if (!(options & F_SRCADDR)) {
952 		/*
953 		 * get the source address. XXX since we revoked the root
954 		 * privilege, we cannot use a raw socket for this.
955 		 */
956 		int dummy;
957 		socklen_t len = sizeof(src);
958 
959 		if ((dummy = socket(AF_INET6, SOCK_DGRAM, 0)) < 0)
960 			err(1, "UDP socket");
961 
962 		src.sin6_family = AF_INET6;
963 		src.sin6_addr = dst.sin6_addr;
964 		src.sin6_port = ntohs(DUMMY_PORT);
965 		src.sin6_scope_id = dst.sin6_scope_id;
966 
967 #ifdef USE_RFC2292BIS
968 		if (pktinfo &&
969 		    setsockopt(dummy, IPPROTO_IPV6, IPV6_PKTINFO,
970 		    (void *)pktinfo, sizeof(*pktinfo)))
971 			err(1, "UDP setsockopt(IPV6_PKTINFO)");
972 
973 		if (hoplimit != -1 &&
974 		    setsockopt(dummy, IPPROTO_IPV6, IPV6_UNICAST_HOPS,
975 		    (void *)&hoplimit, sizeof(hoplimit)))
976 			err(1, "UDP setsockopt(IPV6_UNICAST_HOPS)");
977 
978 		if (hoplimit != -1 &&
979 		    setsockopt(dummy, IPPROTO_IPV6, IPV6_MULTICAST_HOPS,
980 		    (void *)&hoplimit, sizeof(hoplimit)))
981 			err(1, "UDP setsockopt(IPV6_MULTICAST_HOPS)");
982 
983 		if (rthdr &&
984 		    setsockopt(dummy, IPPROTO_IPV6, IPV6_RTHDR,
985 		    (void *)rthdr, (rthdr->ip6r_len + 1) << 3))
986 			err(1, "UDP setsockopt(IPV6_RTHDR)");
987 #else  /* old advanced API */
988 		if (smsghdr.msg_control &&
989 		    setsockopt(dummy, IPPROTO_IPV6, IPV6_PKTOPTIONS,
990 		    (void *)smsghdr.msg_control, smsghdr.msg_controllen))
991 			err(1, "UDP setsockopt(IPV6_PKTOPTIONS)");
992 #endif
993 
994 		if (connect(dummy, (struct sockaddr *)&src, len) < 0)
995 			err(1, "UDP connect");
996 
997 		if (getsockname(dummy, (struct sockaddr *)&src, &len) < 0)
998 			err(1, "getsockname");
999 
1000 		close(dummy);
1001 	}
1002 
1003 #if defined(SO_SNDBUF) && defined(SO_RCVBUF)
1004 	if (sockbufsize) {
1005 		if (datalen > sockbufsize)
1006 			warnx("you need -b to increase socket buffer size");
1007 		if (setsockopt(s, SOL_SOCKET, SO_SNDBUF, &sockbufsize,
1008 		    sizeof(sockbufsize)) < 0)
1009 			err(1, "setsockopt(SO_SNDBUF)");
1010 		if (setsockopt(s, SOL_SOCKET, SO_RCVBUF, &sockbufsize,
1011 		    sizeof(sockbufsize)) < 0)
1012 			err(1, "setsockopt(SO_RCVBUF)");
1013 	}
1014 	else {
1015 		if (datalen > 8 * 1024)	/*XXX*/
1016 			warnx("you need -b to increase socket buffer size");
1017 		/*
1018 		 * When pinging the broadcast address, you can get a lot of
1019 		 * answers. Doing something so evil is useful if you are trying
1020 		 * to stress the ethernet, or just want to fill the arp cache
1021 		 * to get some stuff for /etc/ethers.
1022 		 */
1023 		hold = 48 * 1024;
1024 		setsockopt(s, SOL_SOCKET, SO_RCVBUF, (char *)&hold,
1025 		    sizeof(hold));
1026 	}
1027 #endif
1028 
1029 	optval = 1;
1030 #ifndef USE_SIN6_SCOPE_ID
1031 #ifdef IPV6_RECVPKTINFO
1032 	if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVPKTINFO, &optval,
1033 	    sizeof(optval)) < 0)
1034 		warn("setsockopt(IPV6_RECVPKTINFO)"); /* XXX err? */
1035 #else  /* old adv. API */
1036 	if (setsockopt(s, IPPROTO_IPV6, IPV6_PKTINFO, &optval,
1037 	    sizeof(optval)) < 0)
1038 		warn("setsockopt(IPV6_PKTINFO)"); /* XXX err? */
1039 #endif
1040 #endif /* USE_SIN6_SCOPE_ID */
1041 #ifdef IPV6_RECVHOPLIMIT
1042 	if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &optval,
1043 	    sizeof(optval)) < 0)
1044 		warn("setsockopt(IPV6_RECVHOPLIMIT)"); /* XXX err? */
1045 #else  /* old adv. API */
1046 	if (setsockopt(s, IPPROTO_IPV6, IPV6_HOPLIMIT, &optval,
1047 	    sizeof(optval)) < 0)
1048 		warn("setsockopt(IPV6_HOPLIMIT)"); /* XXX err? */
1049 #endif
1050 
1051 	printf("PING6(%lu=40+8+%lu bytes) ", (unsigned long)(40 + pingerlen()),
1052 	    (unsigned long)(pingerlen() - 8));
1053 	printf("%s --> ", pr_addr((struct sockaddr *)&src, sizeof(src)));
1054 	printf("%s\n", pr_addr((struct sockaddr *)&dst, sizeof(dst)));
1055 
1056 	while (preload--)		/* Fire off them quickies. */
1057 		(void)pinger();
1058 
1059 	(void)signal(SIGINT, onsignal);
1060 #ifdef SIGINFO
1061 	(void)signal(SIGINFO, onsignal);
1062 #endif
1063 
1064 	if ((options & F_FLOOD) == 0) {
1065 		(void)signal(SIGALRM, onsignal);
1066 		itimer.it_interval = interval;
1067 		itimer.it_value = interval;
1068 		(void)setitimer(ITIMER_REAL, &itimer, NULL);
1069 		if (ntransmitted == 0)
1070 			retransmit();
1071 	}
1072 
1073 #ifndef HAVE_POLL_H
1074 	fdmasks = howmany(s + 1, NFDBITS) * sizeof(fd_mask);
1075 	if ((fdmaskp = malloc(fdmasks)) == NULL)
1076 		err(1, "malloc");
1077 #endif
1078 
1079 	seenalrm = seenint = 0;
1080 #ifdef SIGINFO
1081 	seeninfo = 0;
1082 #endif
1083 
1084 	for (;;) {
1085 		struct msghdr m;
1086 		struct iovec iov[2];
1087 
1088 		/* signal handling */
1089 		if (seenalrm) {
1090 			/* last packet sent, timeout reached? */
1091 			if (npackets && ntransmitted >= npackets)
1092 				break;
1093 			retransmit();
1094 			seenalrm = 0;
1095 			continue;
1096 		}
1097 		if (seenint) {
1098 			onint(SIGINT);
1099 			seenint = 0;
1100 			continue;
1101 		}
1102 #ifdef SIGINFO
1103 		if (seeninfo) {
1104 			summary();
1105 			seeninfo = 0;
1106 			continue;
1107 		}
1108 #endif
1109 
1110 		if (options & F_FLOOD) {
1111 			(void)pinger();
1112 #ifdef HAVE_POLL_H
1113 			timeout = 10;
1114 #else
1115 			timeout.tv_sec = 0;
1116 			timeout.tv_usec = 10000;
1117 			tv = &timeout;
1118 #endif
1119 		} else {
1120 #ifdef HAVE_POLL_H
1121 			timeout = INFTIM;
1122 #else
1123 			tv = NULL;
1124 #endif
1125 		}
1126 #ifdef HAVE_POLL_H
1127 		fdmaskp[0].fd = s;
1128 		fdmaskp[0].events = POLLIN;
1129 		cc = poll(fdmaskp, 1, timeout);
1130 #else
1131 		memset(fdmaskp, 0, fdmasks);
1132 		FD_SET(s, fdmaskp);
1133 		cc = select(s + 1, fdmaskp, NULL, NULL, tv);
1134 #endif
1135 		if (cc < 0) {
1136 			if (errno != EINTR) {
1137 #ifdef HAVE_POLL_H
1138 				warn("poll");
1139 #else
1140 				warn("select");
1141 #endif
1142 				sleep(1);
1143 			}
1144 			continue;
1145 		} else if (cc == 0)
1146 			continue;
1147 
1148 		m.msg_name = (caddr_t)&from;
1149 		m.msg_namelen = sizeof(from);
1150 		memset(&iov, 0, sizeof(iov));
1151 		iov[0].iov_base = (caddr_t)packet;
1152 		iov[0].iov_len = packlen;
1153 		m.msg_iov = iov;
1154 		m.msg_iovlen = 1;
1155 		memset(cm, 0, CONTROLLEN);
1156 		m.msg_control = (void *)cm;
1157 		m.msg_controllen = CONTROLLEN;
1158 
1159 		cc = recvmsg(s, &m, 0);
1160 		if (cc < 0) {
1161 			if (errno != EINTR) {
1162 				warn("recvmsg");
1163 				sleep(1);
1164 			}
1165 			continue;
1166 		} else if (cc == 0) {
1167 			int mtu;
1168 
1169 			/*
1170 			 * receive control messages only. Process the
1171 			 * exceptions (currently the only possiblity is
1172 			 * a path MTU notification.)
1173 			 */
1174 			if ((mtu = get_pathmtu(&m)) > 0) {
1175 				if ((options & F_VERBOSE) != 0) {
1176 					printf("new path MTU (%d) is "
1177 					    "notified\n", mtu);
1178 				}
1179 			}
1180 			continue;
1181 		} else {
1182 			/*
1183 			 * an ICMPv6 message (probably an echoreply) arrived.
1184 			 */
1185 			pr_pack(packet, cc, &m);
1186 		}
1187 		if (((options & F_ONCE) != 0 && nreceived > 0) ||
1188 		    (npackets > 0 && nreceived >= npackets))
1189 			break;
1190 		if (ntransmitted - nreceived - 1 > nmissedmax) {
1191 			nmissedmax = ntransmitted - nreceived - 1;
1192 			if (options & F_MISSED)
1193 				(void)write(STDOUT_FILENO, &BBELL, 1);
1194 		}
1195 	}
1196 	summary();
1197 
1198 	if (res != NULL)
1199 		freeaddrinfo(res);
1200 
1201         if(packet != NULL)
1202                 free(packet);
1203 
1204 #ifndef HAVE_POLL_H
1205         if(fdmaskp != NULL)
1206                 free(fdmaskp);
1207 #endif
1208 
1209 	exit(nreceived == 0 ? 2 : 0);
1210 }
1211 
1212 void
onsignal(int sig)1213 onsignal(int sig)
1214 {
1215 
1216 	switch (sig) {
1217 	case SIGALRM:
1218 		seenalrm++;
1219 		break;
1220 	case SIGINT:
1221 		seenint++;
1222 		break;
1223 #ifdef SIGINFO
1224 	case SIGINFO:
1225 		seeninfo++;
1226 		break;
1227 #endif
1228 	}
1229 }
1230 
1231 /*
1232  * retransmit --
1233  *	This routine transmits another ping6.
1234  */
1235 void
retransmit(void)1236 retransmit(void)
1237 {
1238 	struct itimerval itimer;
1239 
1240 	if (pinger() == 0)
1241 		return;
1242 
1243 	/*
1244 	 * If we're not transmitting any more packets, change the timer
1245 	 * to wait two round-trip times if we've received any packets or
1246 	 * ten seconds if we haven't.
1247 	 */
1248 #define	MAXWAIT		10
1249 	if (nreceived) {
1250 		itimer.it_value.tv_sec =  2 * tmax / 1000;
1251 		if (itimer.it_value.tv_sec == 0)
1252 			itimer.it_value.tv_sec = 1;
1253 	} else
1254 		itimer.it_value.tv_sec = MAXWAIT;
1255 	itimer.it_interval.tv_sec = 0;
1256 	itimer.it_interval.tv_usec = 0;
1257 	itimer.it_value.tv_usec = 0;
1258 
1259 	(void)signal(SIGALRM, onsignal);
1260 	(void)setitimer(ITIMER_REAL, &itimer, NULL);
1261 }
1262 
1263 /*
1264  * pinger --
1265  *	Compose and transmit an ICMP ECHO REQUEST packet.  The IP packet
1266  * will be added on by the kernel.  The ID field is our UNIX process ID,
1267  * and the sequence number is an ascending integer.  The first 8 bytes
1268  * of the data portion are used to hold a UNIX "timeval" struct in VAX
1269  * byte-order, to compute the round-trip time.
1270  */
1271 size_t
pingerlen(void)1272 pingerlen(void)
1273 {
1274 	size_t l;
1275 
1276 	if (options & F_FQDN)
1277 		l = ICMP6_NIQLEN + sizeof(dst.sin6_addr);
1278 	else if (options & F_FQDNOLD)
1279 		l = ICMP6_NIQLEN;
1280 	else if (options & F_NODEADDR)
1281 		l = ICMP6_NIQLEN + sizeof(dst.sin6_addr);
1282 	else if (options & F_SUPTYPES)
1283 		l = ICMP6_NIQLEN;
1284 	else
1285 		l = ICMP6ECHOLEN + datalen;
1286 
1287 	return l;
1288 }
1289 
1290 int
pinger(void)1291 pinger(void)
1292 {
1293 	struct icmp6_hdr *icp;
1294 	struct iovec iov[2];
1295 	int i, cc;
1296 	struct icmp6_nodeinfo *nip;
1297 	int seq;
1298 
1299 	if (npackets && ntransmitted >= npackets)
1300 		return(-1);	/* no more transmission */
1301 
1302 	icp = (struct icmp6_hdr *)outpack;
1303 	nip = (struct icmp6_nodeinfo *)outpack;
1304 	memset(icp, 0, sizeof(*icp));
1305 	icp->icmp6_cksum = 0;
1306 	seq = ntransmitted++;
1307 	CLR(seq % mx_dup_ck);
1308 
1309 	if (options & F_FQDN) {
1310 		icp->icmp6_type = ICMP6_NI_QUERY;
1311 		icp->icmp6_code = ICMP6_NI_SUBJ_IPV6;
1312 		nip->ni_qtype = htons(NI_QTYPE_FQDN);
1313 		nip->ni_flags = htons(0);
1314 
1315 		memcpy(nip->icmp6_ni_nonce, nonce,
1316 		    sizeof(nip->icmp6_ni_nonce));
1317 		*(u_int16_t *)nip->icmp6_ni_nonce = ntohs(seq);
1318 
1319 		memcpy(&outpack[ICMP6_NIQLEN], &dst.sin6_addr,
1320 		    sizeof(dst.sin6_addr));
1321 		cc = ICMP6_NIQLEN + sizeof(dst.sin6_addr);
1322 		datalen = 0;
1323 	} else if (options & F_FQDNOLD) {
1324 		/* packet format in 03 draft - no Subject data on queries */
1325 		icp->icmp6_type = ICMP6_NI_QUERY;
1326 		icp->icmp6_code = 0;	/* code field is always 0 */
1327 		nip->ni_qtype = htons(NI_QTYPE_FQDN);
1328 		nip->ni_flags = htons(0);
1329 
1330 		memcpy(nip->icmp6_ni_nonce, nonce,
1331 		    sizeof(nip->icmp6_ni_nonce));
1332 		*(u_int16_t *)nip->icmp6_ni_nonce = ntohs(seq);
1333 
1334 		cc = ICMP6_NIQLEN;
1335 		datalen = 0;
1336 	} else if (options & F_NODEADDR) {
1337 		icp->icmp6_type = ICMP6_NI_QUERY;
1338 		icp->icmp6_code = ICMP6_NI_SUBJ_IPV6;
1339 		nip->ni_qtype = htons(NI_QTYPE_NODEADDR);
1340 		nip->ni_flags = naflags;
1341 
1342 		memcpy(nip->icmp6_ni_nonce, nonce,
1343 		    sizeof(nip->icmp6_ni_nonce));
1344 		*(u_int16_t *)nip->icmp6_ni_nonce = ntohs(seq);
1345 
1346 		memcpy(&outpack[ICMP6_NIQLEN], &dst.sin6_addr,
1347 		    sizeof(dst.sin6_addr));
1348 		cc = ICMP6_NIQLEN + sizeof(dst.sin6_addr);
1349 		datalen = 0;
1350 	} else if (options & F_SUPTYPES) {
1351 		icp->icmp6_type = ICMP6_NI_QUERY;
1352 		icp->icmp6_code = ICMP6_NI_SUBJ_FQDN;	/*empty*/
1353 		nip->ni_qtype = htons(NI_QTYPE_SUPTYPES);
1354 		/* we support compressed bitmap */
1355 		nip->ni_flags = NI_SUPTYPE_FLAG_COMPRESS;
1356 
1357 		memcpy(nip->icmp6_ni_nonce, nonce,
1358 		    sizeof(nip->icmp6_ni_nonce));
1359 		*(u_int16_t *)nip->icmp6_ni_nonce = ntohs(seq);
1360 		cc = ICMP6_NIQLEN;
1361 		datalen = 0;
1362 	} else {
1363 		icp->icmp6_type = ICMP6_ECHO_REQUEST;
1364 		icp->icmp6_code = 0;
1365 		icp->icmp6_id = htons(ident);
1366 		icp->icmp6_seq = ntohs(seq);
1367 		if (timing) {
1368 			struct timeval tv;
1369 			struct tv32 *tv32;
1370 			(void)gettimeofday(&tv, NULL);
1371 			tv32 = (struct tv32 *)&outpack[ICMP6ECHOLEN];
1372 			tv32->tv32_sec = htonl(tv.tv_sec);
1373 			tv32->tv32_usec = htonl(tv.tv_usec);
1374 		}
1375 		cc = ICMP6ECHOLEN + datalen;
1376 	}
1377 
1378 #ifdef DIAGNOSTIC
1379 	if (pingerlen() != cc)
1380 		errx(1, "internal error; length mismatch");
1381 #endif
1382 
1383 	smsghdr.msg_name = (caddr_t)&dst;
1384 	smsghdr.msg_namelen = sizeof(dst);
1385 	memset(&iov, 0, sizeof(iov));
1386 	iov[0].iov_base = (caddr_t)outpack;
1387 	iov[0].iov_len = cc;
1388 	smsghdr.msg_iov = iov;
1389 	smsghdr.msg_iovlen = 1;
1390 
1391 	i = sendmsg(s, &smsghdr, 0);
1392 
1393 	if (i < 0 || i != cc)  {
1394 		if (i < 0)
1395 			warn("sendmsg");
1396 		(void)printf("ping6: wrote %s %d chars, ret=%d\n",
1397 		    hostname, cc, i);
1398 	}
1399 	if (!(options & F_QUIET) && options & F_FLOOD)
1400 		(void)write(STDOUT_FILENO, &DOT, 1);
1401 
1402 	return(0);
1403 }
1404 
1405 int
myechoreply(const struct icmp6_hdr * icp)1406 myechoreply(const struct icmp6_hdr *icp)
1407 {
1408 	if (ntohs(icp->icmp6_id) == ident)
1409 		return 1;
1410 	else
1411 		return 0;
1412 }
1413 
1414 int
mynireply(const struct icmp6_nodeinfo * nip)1415 mynireply(const struct icmp6_nodeinfo *nip)
1416 {
1417 	if (memcmp(nip->icmp6_ni_nonce + sizeof(u_int16_t),
1418 	    nonce + sizeof(u_int16_t),
1419 	    sizeof(nonce) - sizeof(u_int16_t)) == 0)
1420 		return 1;
1421 	else
1422 		return 0;
1423 }
1424 
1425 char *
dnsdecode(const u_char ** sp,const u_char * ep,const u_char * base,char * buf,size_t bufsiz)1426 dnsdecode(const u_char **sp, const u_char *ep, const u_char *base, char *buf,
1427 	size_t bufsiz)
1428 	/*base for compressed name*/
1429 {
1430 	int i;
1431 	const u_char *cp;
1432 	char cresult[MAXDNAME + 1];
1433 	const u_char *comp;
1434 	int l;
1435 
1436 	cp = *sp;
1437 	*buf = '\0';
1438 
1439 	if (cp >= ep)
1440 		return NULL;
1441 	while (cp < ep) {
1442 		i = *cp;
1443 		if (i == 0 || cp != *sp) {
1444 			if (strlcat((char *)buf, ".", bufsiz) >= bufsiz)
1445 				return NULL;	/*result overrun*/
1446 		}
1447 		if (i == 0)
1448 			break;
1449 		cp++;
1450 
1451 		if ((i & 0xc0) == 0xc0 && cp - base > (i & 0x3f)) {
1452 			/* DNS compression */
1453 			if (!base)
1454 				return NULL;
1455 
1456 			comp = base + (i & 0x3f);
1457 			if (dnsdecode(&comp, cp, base, cresult,
1458 			    sizeof(cresult)) == NULL)
1459 				return NULL;
1460 			if (strlcat(buf, cresult, bufsiz) >= bufsiz)
1461 				return NULL;	/*result overrun*/
1462 			break;
1463 		} else if ((i & 0x3f) == i) {
1464 			if (i > ep - cp)
1465 				return NULL;	/*source overrun*/
1466 			while (i-- > 0 && cp < ep) {
1467 				l = snprintf(cresult, sizeof(cresult),
1468 				    isprint(*cp) ? "%c" : "\\%03o", *cp & 0xff);
1469 				if (l >= sizeof(cresult) || l < 0)
1470 					return NULL;
1471 				if (strlcat(buf, cresult, bufsiz) >= bufsiz)
1472 					return NULL;	/*result overrun*/
1473 				cp++;
1474 			}
1475 		} else
1476 			return NULL;	/*invalid label*/
1477 	}
1478 	if (i != 0)
1479 		return NULL;	/*not terminated*/
1480 	cp++;
1481 	*sp = cp;
1482 	return buf;
1483 }
1484 
1485 /*
1486  * pr_pack --
1487  *	Print out the packet, if it came from us.  This logic is necessary
1488  * because ALL readers of the ICMP socket get a copy of ALL ICMP packets
1489  * which arrive ('tis only fair).  This permits multiple copies of this
1490  * program to be run without having intermingled output (or statistics!).
1491  */
1492 void
pr_pack(u_char * buf,int cc,struct msghdr * mhdr)1493 pr_pack(u_char *buf, int cc, struct msghdr *mhdr)
1494 {
1495 #define safeputc(c)	printf((isprint((c)) ? "%c" : "\\%03o"), c)
1496 	struct icmp6_hdr *icp;
1497 	struct icmp6_nodeinfo *ni;
1498 	int i;
1499 	int hoplim;
1500 	struct sockaddr *from;
1501 	int fromlen;
1502 	u_char *cp = NULL, *dp, *end = buf + cc;
1503 	struct in6_pktinfo *pktinfo = NULL;
1504 	struct timeval tv, tp;
1505 	struct tv32 *tpp;
1506 	double triptime = 0;
1507 	int dupflag;
1508 	size_t off;
1509 	int oldfqdn;
1510 	u_int16_t seq;
1511 	char dnsname[MAXDNAME + 1];
1512 
1513 	(void)gettimeofday(&tv, NULL);
1514 
1515 	if (!mhdr || !mhdr->msg_name ||
1516 	    mhdr->msg_namelen != sizeof(struct sockaddr_in6) ||
1517 	    ((struct sockaddr *)mhdr->msg_name)->sa_family != AF_INET6) {
1518 		if (options & F_VERBOSE)
1519 			warnx("invalid peername");
1520 		return;
1521 	}
1522 	from = (struct sockaddr *)mhdr->msg_name;
1523 	fromlen = mhdr->msg_namelen;
1524 	if (cc < sizeof(struct icmp6_hdr)) {
1525 		if (options & F_VERBOSE)
1526 			warnx("packet too short (%d bytes) from %s", cc,
1527 			    pr_addr(from, fromlen));
1528 		return;
1529 	}
1530 	if (((mhdr->msg_flags & MSG_CTRUNC) != 0) &&
1531 	    (options & F_VERBOSE) != 0)
1532 		warnx("some control data discarded, insufficient buffer size");
1533 	icp = (struct icmp6_hdr *)buf;
1534 	ni = (struct icmp6_nodeinfo *)buf;
1535 	off = 0;
1536 
1537 	if ((hoplim = get_hoplim(mhdr)) == -1) {
1538 		warnx("failed to get receiving hop limit");
1539 		return;
1540 	}
1541 	if ((pktinfo = get_rcvpktinfo(mhdr)) == NULL) {
1542 		warnx("failed to get receiving packet information");
1543 		return;
1544 	}
1545 
1546 	if (icp->icmp6_type == ICMP6_ECHO_REPLY && myechoreply(icp)) {
1547 		seq = ntohs(icp->icmp6_seq);
1548 		++nreceived;
1549 		if (timing) {
1550 			tpp = (struct tv32 *)(icp + 1);
1551 			tp.tv_sec = ntohl(tpp->tv32_sec);
1552 			tp.tv_usec = ntohl(tpp->tv32_usec);
1553 			tvsub(&tv, &tp);
1554 			triptime = ((double)tv.tv_sec) * 1000.0 +
1555 			    ((double)tv.tv_usec) / 1000.0;
1556 			tsum += triptime;
1557 			tsumsq += triptime * triptime;
1558 			if (triptime < tmin)
1559 				tmin = triptime;
1560 			if (triptime > tmax)
1561 				tmax = triptime;
1562 		}
1563 
1564 		if (TST(seq % mx_dup_ck)) {
1565 			++nrepeats;
1566 			--nreceived;
1567 			dupflag = 1;
1568 		} else {
1569 			SET(seq % mx_dup_ck);
1570 			dupflag = 0;
1571 		}
1572 
1573 		if (options & F_QUIET)
1574 			return;
1575 
1576 		if (options & F_FLOOD)
1577 			(void)write(STDOUT_FILENO, &BSPACE, 1);
1578 		else {
1579 			if (options & F_AUDIBLE)
1580 				(void)write(STDOUT_FILENO, &BBELL, 1);
1581 			(void)printf("%d bytes from %s, icmp_seq=%u", cc,
1582 			    pr_addr(from, fromlen), seq);
1583 			(void)printf(" hlim=%d", hoplim);
1584 			if ((options & F_VERBOSE) != 0) {
1585 				struct sockaddr_in6 dstsa;
1586 
1587 				memset(&dstsa, 0, sizeof(dstsa));
1588 				dstsa.sin6_family = AF_INET6;
1589 				dstsa.sin6_len = sizeof(dstsa);
1590 				dstsa.sin6_scope_id = pktinfo->ipi6_ifindex;
1591 				dstsa.sin6_addr = pktinfo->ipi6_addr;
1592 				(void)printf(" dst=%s",
1593 				    pr_addr((struct sockaddr *)&dstsa,
1594 				    sizeof(dstsa)));
1595 			}
1596 			if (timing)
1597 				(void)printf(" time=%.3f ms", triptime);
1598 			if (dupflag)
1599 				(void)printf("(DUP!)");
1600 			/* check the data */
1601 			cp = buf + off + ICMP6ECHOLEN + ICMP6ECHOTMLEN;
1602 			dp = outpack + ICMP6ECHOLEN + ICMP6ECHOTMLEN;
1603 			for (i = 8; cp < end; ++i, ++cp, ++dp) {
1604 				if (*cp != *dp) {
1605 					(void)printf("\nwrong data byte #%d should be 0x%x but was 0x%x", i, *dp, *cp);
1606 					break;
1607 				}
1608 			}
1609 		}
1610 	} else if (icp->icmp6_type == ICMP6_NI_REPLY && mynireply(ni)) {
1611 		seq = ntohs(*(u_int16_t *)ni->icmp6_ni_nonce);
1612 		++nreceived;
1613 		if (TST(seq % mx_dup_ck)) {
1614 			++nrepeats;
1615 			--nreceived;
1616 			dupflag = 1;
1617 		} else {
1618 			SET(seq % mx_dup_ck);
1619 			dupflag = 0;
1620 		}
1621 
1622 		if (options & F_QUIET)
1623 			return;
1624 
1625 		(void)printf("%d bytes from %s: ", cc, pr_addr(from, fromlen));
1626 
1627 		switch (ntohs(ni->ni_code)) {
1628 		case ICMP6_NI_SUCCESS:
1629 			break;
1630 		case ICMP6_NI_REFUSED:
1631 			printf("refused, type 0x%x", ntohs(ni->ni_type));
1632 			goto fqdnend;
1633 		case ICMP6_NI_UNKNOWN:
1634 			printf("unknown, type 0x%x", ntohs(ni->ni_type));
1635 			goto fqdnend;
1636 		default:
1637 			printf("unknown code 0x%x, type 0x%x",
1638 			    ntohs(ni->ni_code), ntohs(ni->ni_type));
1639 			goto fqdnend;
1640 		}
1641 
1642 		switch (ntohs(ni->ni_qtype)) {
1643 		case NI_QTYPE_NOOP:
1644 			printf("NodeInfo NOOP");
1645 			break;
1646 		case NI_QTYPE_SUPTYPES:
1647 			pr_suptypes(ni, end - (u_char *)ni);
1648 			break;
1649 		case NI_QTYPE_NODEADDR:
1650 			pr_nodeaddr(ni, end - (u_char *)ni);
1651 			break;
1652 		case NI_QTYPE_FQDN:
1653 		default:	/* XXX: for backward compatibility */
1654 			cp = (u_char *)ni + ICMP6_NIRLEN;
1655 			if (buf[off + ICMP6_NIRLEN] ==
1656 			    cc - off - ICMP6_NIRLEN - 1)
1657 				oldfqdn = 1;
1658 			else
1659 				oldfqdn = 0;
1660 			if (oldfqdn) {
1661 				cp++;	/* skip length */
1662 				while (cp < end) {
1663 					safeputc(*cp & 0xff);
1664 					cp++;
1665 				}
1666 			} else {
1667 				i = 0;
1668 				while (cp < end) {
1669 					if (dnsdecode((const u_char **)&cp, end,
1670 					    (const u_char *)(ni + 1), dnsname,
1671 					    sizeof(dnsname)) == NULL) {
1672 						printf("???");
1673 						break;
1674 					}
1675 					/*
1676 					 * name-lookup special handling for
1677 					 * truncated name
1678 					 */
1679 					if (cp + 1 <= end && !*cp &&
1680 					    strlen(dnsname) > 0) {
1681 						dnsname[strlen(dnsname) - 1] = '\0';
1682 						cp++;
1683 					}
1684 					printf("%s%s", i > 0 ? "," : "",
1685 					    dnsname);
1686 				}
1687 			}
1688 			if (options & F_VERBOSE) {
1689 				int32_t ttl;
1690 				int comma = 0;
1691 
1692 				(void)printf(" (");	/*)*/
1693 
1694 				switch (ni->ni_code) {
1695 				case ICMP6_NI_REFUSED:
1696 					(void)printf("refused");
1697 					comma++;
1698 					break;
1699 				case ICMP6_NI_UNKNOWN:
1700 					(void)printf("unknown qtype");
1701 					comma++;
1702 					break;
1703 				}
1704 
1705 				if ((end - (u_char *)ni) < ICMP6_NIRLEN) {
1706 					/* case of refusion, unknown */
1707 					/*(*/
1708 					putchar(')');
1709 					goto fqdnend;
1710 				}
1711 				ttl = (int32_t)ntohl(*(u_long *)&buf[off+ICMP6ECHOLEN+8]);
1712 				if (comma)
1713 					printf(",");
1714 				if (!(ni->ni_flags & NI_FQDN_FLAG_VALIDTTL)) {
1715 					(void)printf("TTL=%d:meaningless",
1716 					    (int)ttl);
1717 				} else {
1718 					if (ttl < 0) {
1719 						(void)printf("TTL=%d:invalid",
1720 						   ttl);
1721 					} else
1722 						(void)printf("TTL=%d", ttl);
1723 				}
1724 				comma++;
1725 
1726 				if (oldfqdn) {
1727 					if (comma)
1728 						printf(",");
1729 					printf("03 draft");
1730 					comma++;
1731 				} else {
1732 					cp = (u_char *)ni + ICMP6_NIRLEN;
1733 					if (cp == end) {
1734 						if (comma)
1735 							printf(",");
1736 						printf("no name");
1737 						comma++;
1738 					}
1739 				}
1740 
1741 				if (buf[off + ICMP6_NIRLEN] !=
1742 				    cc - off - ICMP6_NIRLEN - 1 && oldfqdn) {
1743 					if (comma)
1744 						printf(",");
1745 					(void)printf("invalid namelen:%d/%lu",
1746 					    buf[off + ICMP6_NIRLEN],
1747 					    (u_long)cc - off - ICMP6_NIRLEN - 1);
1748 					comma++;
1749 				}
1750 				/*(*/
1751 				putchar(')');
1752 			}
1753 		fqdnend:
1754 			;
1755 		}
1756 	} else {
1757 		/* We've got something other than an ECHOREPLY */
1758 		if (!(options & F_VERBOSE))
1759 			return;
1760 		(void)printf("%d bytes from %s: ", cc, pr_addr(from, fromlen));
1761 		pr_icmph(icp, end);
1762 	}
1763 
1764 	if (!(options & F_FLOOD)) {
1765 		(void)putchar('\n');
1766 		if (options & F_VERBOSE)
1767 			pr_exthdrs(mhdr);
1768 		(void)fflush(stdout);
1769 	}
1770 #undef safeputc
1771 }
1772 
1773 void
pr_exthdrs(struct msghdr * mhdr)1774 pr_exthdrs(struct msghdr *mhdr)
1775 {
1776 	ssize_t	bufsize;
1777 	void	*bufp;
1778 	struct cmsghdr *cm;
1779 
1780 	bufsize = 0;
1781 	bufp = mhdr->msg_control;
1782 	for (cm = (struct cmsghdr *)CMSG_FIRSTHDR(mhdr); cm;
1783 	     cm = (struct cmsghdr *)CMSG_NXTHDR(mhdr, cm)) {
1784 		if (cm->cmsg_level != IPPROTO_IPV6)
1785 			continue;
1786 
1787 		bufsize = CONTROLLEN - ((caddr_t)CMSG_DATA(cm) - (caddr_t)bufp);
1788 		if (bufsize <= 0)
1789 			continue;
1790 		switch (cm->cmsg_type) {
1791 		case IPV6_HOPOPTS:
1792 			printf("  HbH Options: ");
1793 			pr_ip6opt(CMSG_DATA(cm), (size_t)bufsize);
1794 			break;
1795 		case IPV6_DSTOPTS:
1796 #ifdef IPV6_RTHDRDSTOPTS
1797 		case IPV6_RTHDRDSTOPTS:
1798 #endif
1799 			printf("  Dst Options: ");
1800 			pr_ip6opt(CMSG_DATA(cm), (size_t)bufsize);
1801 			break;
1802 		case IPV6_RTHDR:
1803 			printf("  Routing: ");
1804 			pr_rthdr(CMSG_DATA(cm), (size_t)bufsize);
1805 			break;
1806 		}
1807 	}
1808 }
1809 
1810 #ifdef USE_RFC2292BIS
1811 void
pr_ip6opt(void * extbuf,size_t bufsize)1812 pr_ip6opt(void *extbuf, size_t bufsize)
1813 {
1814 	struct ip6_hbh *ext;
1815 	int currentlen;
1816 	u_int8_t type;
1817 	socklen_t extlen, len;
1818 	void *databuf;
1819 	size_t offset;
1820 	u_int16_t value2;
1821 	u_int32_t value4;
1822 
1823 	ext = (struct ip6_hbh *)extbuf;
1824 	extlen = (ext->ip6h_len + 1) * 8;
1825 	printf("nxt %u, len %u (%lu bytes)\n", ext->ip6h_nxt,
1826 	    (unsigned int)ext->ip6h_len, (unsigned long)extlen);
1827 
1828 	/*
1829 	 * Bounds checking on the ancillary data buffer:
1830 	 *     subtract the size of a cmsg structure from the buffer size.
1831 	 */
1832 	if (bufsize < (extlen  + CMSG_SPACE(0))) {
1833 		extlen = bufsize - CMSG_SPACE(0);
1834 		warnx("options truncated, showing only %u (total=%u)",
1835 		    (unsigned int)(extlen / 8 - 1),
1836 		    (unsigned int)(ext->ip6h_len));
1837 	}
1838 
1839 	currentlen = 0;
1840 	while (1) {
1841 		currentlen = inet6_opt_next(extbuf, extlen, currentlen,
1842 		    &type, &len, &databuf);
1843 		if (currentlen == -1)
1844 			break;
1845 		switch (type) {
1846 		/*
1847 		 * Note that inet6_opt_next automatically skips any padding
1848 		 * optins.
1849 		 */
1850 		case IP6OPT_JUMBO:
1851 			offset = 0;
1852 			offset = inet6_opt_get_val(databuf, offset,
1853 			    &value4, sizeof(value4));
1854 			printf("    Jumbo Payload Opt: Length %u\n",
1855 			    (u_int32_t)ntohl(value4));
1856 			break;
1857 		case IP6OPT_ROUTER_ALERT:
1858 			offset = 0;
1859 			offset = inet6_opt_get_val(databuf, offset,
1860 						   &value2, sizeof(value2));
1861 			printf("    Router Alert Opt: Type %u\n",
1862 			    ntohs(value2));
1863 			break;
1864 		default:
1865 			printf("    Received Opt %u len %lu\n",
1866 			    type, (unsigned long)len);
1867 			break;
1868 		}
1869 	}
1870 	return;
1871 }
1872 #else  /* !USE_RFC2292BIS */
1873 /* ARGSUSED */
1874 void
pr_ip6opt(void * extbuf,size_t bufsize __unused)1875 pr_ip6opt(void *extbuf, size_t bufsize __unused)
1876 {
1877 	putchar('\n');
1878 	return;
1879 }
1880 #endif /* USE_RFC2292BIS */
1881 
1882 #ifdef USE_RFC2292BIS
1883 void
pr_rthdr(void * extbuf,size_t bufsize)1884 pr_rthdr(void *extbuf, size_t bufsize)
1885 {
1886 	struct in6_addr *in6;
1887 	char ntopbuf[INET6_ADDRSTRLEN];
1888 	struct ip6_rthdr *rh = (struct ip6_rthdr *)extbuf;
1889 	int i, segments, origsegs, rthsize, size0, size1;
1890 
1891 	/* print fixed part of the header */
1892 	printf("nxt %u, len %u (%d bytes), type %u, ", rh->ip6r_nxt,
1893 	    rh->ip6r_len, (rh->ip6r_len + 1) << 3, rh->ip6r_type);
1894 	if ((segments = inet6_rth_segments(extbuf)) >= 0) {
1895 		printf("%d segments, ", segments);
1896 		printf("%d left\n", rh->ip6r_segleft);
1897 	} else {
1898 		printf("segments unknown, ");
1899 		printf("%d left\n", rh->ip6r_segleft);
1900 		return;
1901 	}
1902 
1903 	/*
1904 	 * Bounds checking on the ancillary data buffer. When calculating
1905 	 * the number of items to show keep in mind:
1906 	 *	- The size of the cmsg structure
1907 	 *	- The size of one segment (the size of a Type 0 routing header)
1908 	 *	- When dividing add a fudge factor of one in case the
1909 	 *	  dividend is not evenly divisible by the divisor
1910 	 */
1911 	rthsize = (rh->ip6r_len + 1) * 8;
1912 	if (bufsize < (rthsize + CMSG_SPACE(0))) {
1913 		origsegs = segments;
1914 		size0 = inet6_rth_space(IPV6_RTHDR_TYPE_0, 0);
1915 		size1 = inet6_rth_space(IPV6_RTHDR_TYPE_0, 1);
1916 		segments -= (rthsize - (bufsize - CMSG_SPACE(0))) /
1917 		    (size1 - size0) + 1;
1918 		warnx("segments truncated, showing only %d (total=%d)",
1919 		    segments, origsegs);
1920 	}
1921 
1922 	for (i = 0; i < segments; i++) {
1923 		in6 = inet6_rth_getaddr(extbuf, i);
1924 		if (in6 == NULL)
1925 			printf("   [%d]<NULL>\n", i);
1926 		else {
1927 			if (!inet_ntop(AF_INET6, in6, ntopbuf,
1928 			    sizeof(ntopbuf)))
1929 				strlcpy(ntopbuf, "?", sizeof(ntopbuf));
1930 			printf("   [%d]%s\n", i, ntopbuf);
1931 		}
1932 	}
1933 
1934 	return;
1935 
1936 }
1937 
1938 #else  /* !USE_RFC2292BIS */
1939 /* ARGSUSED */
1940 void
pr_rthdr(void * extbuf,size_t bufsize __unused)1941 pr_rthdr(void *extbuf, size_t bufsize __unused)
1942 {
1943 	putchar('\n');
1944 	return;
1945 }
1946 #endif /* USE_RFC2292BIS */
1947 
1948 int
pr_bitrange(u_int32_t v,int soff,int ii)1949 pr_bitrange(u_int32_t v, int soff, int ii)
1950 {
1951 	int off;
1952 	int i;
1953 
1954 	off = 0;
1955 	while (off < 32) {
1956 		/* shift till we have 0x01 */
1957 		if ((v & 0x01) == 0) {
1958 			if (ii > 1)
1959 				printf("-%u", soff + off - 1);
1960 			ii = 0;
1961 			switch (v & 0x0f) {
1962 			case 0x00:
1963 				v >>= 4;
1964 				off += 4;
1965 				continue;
1966 			case 0x08:
1967 				v >>= 3;
1968 				off += 3;
1969 				continue;
1970 			case 0x04: case 0x0c:
1971 				v >>= 2;
1972 				off += 2;
1973 				continue;
1974 			default:
1975 				v >>= 1;
1976 				off += 1;
1977 				continue;
1978 			}
1979 		}
1980 
1981 		/* we have 0x01 with us */
1982 		for (i = 0; i < 32 - off; i++) {
1983 			if ((v & (0x01 << i)) == 0)
1984 				break;
1985 		}
1986 		if (!ii)
1987 			printf(" %u", soff + off);
1988 		ii += i;
1989 		v >>= i; off += i;
1990 	}
1991 	return ii;
1992 }
1993 
1994 void
pr_suptypes(struct icmp6_nodeinfo * ni,size_t nilen)1995 pr_suptypes(struct icmp6_nodeinfo *ni, size_t nilen)
1996 	/* ni->qtype must be SUPTYPES */
1997 {
1998 	size_t clen;
1999 	u_int32_t v;
2000 	const u_char *cp, *end;
2001 	u_int16_t cur;
2002 	struct cbit {
2003 		u_int16_t words;	/*32bit count*/
2004 		u_int16_t skip;
2005 	} cbit;
2006 #define MAXQTYPES	(1 << 16)
2007 	size_t off;
2008 	int b;
2009 
2010 	cp = (u_char *)(ni + 1);
2011 	end = ((u_char *)ni) + nilen;
2012 	cur = 0;
2013 	b = 0;
2014 
2015 	printf("NodeInfo Supported Qtypes");
2016 	if (options & F_VERBOSE) {
2017 		if (ni->ni_flags & NI_SUPTYPE_FLAG_COMPRESS)
2018 			printf(", compressed bitmap");
2019 		else
2020 			printf(", raw bitmap");
2021 	}
2022 
2023 	while (cp < end) {
2024 		clen = (size_t)(end - cp);
2025 		if ((ni->ni_flags & NI_SUPTYPE_FLAG_COMPRESS) == 0) {
2026 			if (clen == 0 || clen > MAXQTYPES / 8 ||
2027 			    clen % sizeof(v)) {
2028 				printf("???");
2029 				return;
2030 			}
2031 		} else {
2032 			if (clen < sizeof(cbit) || clen % sizeof(v))
2033 				return;
2034 			memcpy(&cbit, cp, sizeof(cbit));
2035 			if (sizeof(cbit) + ntohs(cbit.words) * sizeof(v) >
2036 			    clen)
2037 				return;
2038 			cp += sizeof(cbit);
2039 			clen = ntohs(cbit.words) * sizeof(v);
2040 			if (cur + clen * 8 + (u_long)ntohs(cbit.skip) * 32 >
2041 			    MAXQTYPES)
2042 				return;
2043 		}
2044 
2045 		for (off = 0; off < clen; off += sizeof(v)) {
2046 			memcpy(&v, cp + off, sizeof(v));
2047 			v = (u_int32_t)ntohl(v);
2048 			b = pr_bitrange(v, (int)(cur + off * 8), b);
2049 		}
2050 		/* flush the remaining bits */
2051 		b = pr_bitrange(0, (int)(cur + off * 8), b);
2052 
2053 		cp += clen;
2054 		cur += clen * 8;
2055 		if ((ni->ni_flags & NI_SUPTYPE_FLAG_COMPRESS) != 0)
2056 			cur += ntohs(cbit.skip) * 32;
2057 	}
2058 }
2059 
2060 void
pr_nodeaddr(struct icmp6_nodeinfo * ni,int nilen)2061 pr_nodeaddr(struct icmp6_nodeinfo *ni, int nilen)
2062 	/* ni->qtype must be NODEADDR */
2063 {
2064 	u_char *cp = (u_char *)(ni + 1);
2065 	char ntop_buf[INET6_ADDRSTRLEN];
2066 	int withttl = 0;
2067 
2068 	nilen -= sizeof(struct icmp6_nodeinfo);
2069 
2070 	if (options & F_VERBOSE) {
2071 		switch (ni->ni_code) {
2072 		case ICMP6_NI_REFUSED:
2073 			(void)printf("refused");
2074 			break;
2075 		case ICMP6_NI_UNKNOWN:
2076 			(void)printf("unknown qtype");
2077 			break;
2078 		}
2079 		if (ni->ni_flags & NI_NODEADDR_FLAG_TRUNCATE)
2080 			(void)printf(" truncated");
2081 	}
2082 	putchar('\n');
2083 	if (nilen <= 0)
2084 		printf("  no address\n");
2085 
2086 	/*
2087 	 * In icmp-name-lookups 05 and later, TTL of each returned address
2088 	 * is contained in the resposne. We try to detect the version
2089 	 * by the length of the data, but note that the detection algorithm
2090 	 * is incomplete. We assume the latest draft by default.
2091 	 */
2092 	if (nilen % (sizeof(u_int32_t) + sizeof(struct in6_addr)) == 0)
2093 		withttl = 1;
2094 	while (nilen > 0) {
2095 		u_int32_t ttl;
2096 
2097 		if (withttl) {
2098 			/* XXX: alignment? */
2099 			ttl = (u_int32_t)ntohl(*(u_int32_t *)cp);
2100 			cp += sizeof(u_int32_t);
2101 			nilen -= sizeof(u_int32_t);
2102 		}
2103 
2104 		if (inet_ntop(AF_INET6, cp, ntop_buf, sizeof(ntop_buf)) ==
2105 		    NULL)
2106 			strlcpy(ntop_buf, "?", sizeof(ntop_buf));
2107 		printf("  %s", ntop_buf);
2108 		if (withttl) {
2109 			if (ttl == 0xffffffff) {
2110 				/*
2111 				 * XXX: can this convention be applied to all
2112 				 * type of TTL (i.e. non-ND TTL)?
2113 				 */
2114 				printf("(TTL=infty)");
2115 			}
2116 			else
2117 				printf("(TTL=%u)", ttl);
2118 		}
2119 		putchar('\n');
2120 
2121 		nilen -= sizeof(struct in6_addr);
2122 		cp += sizeof(struct in6_addr);
2123 	}
2124 }
2125 
2126 int
get_hoplim(struct msghdr * mhdr)2127 get_hoplim(struct msghdr *mhdr)
2128 {
2129 	struct cmsghdr *cm;
2130 
2131 	for (cm = (struct cmsghdr *)CMSG_FIRSTHDR(mhdr); cm;
2132 	     cm = (struct cmsghdr *)CMSG_NXTHDR(mhdr, cm)) {
2133 		if (cm->cmsg_len == 0)
2134 			return(-1);
2135 
2136 		if (cm->cmsg_level == IPPROTO_IPV6 &&
2137 		    cm->cmsg_type == IPV6_HOPLIMIT &&
2138 		    cm->cmsg_len == CMSG_LEN(sizeof(int)))
2139 			return(*(int *)CMSG_DATA(cm));
2140 	}
2141 
2142 	return(-1);
2143 }
2144 
2145 struct in6_pktinfo *
get_rcvpktinfo(struct msghdr * mhdr)2146 get_rcvpktinfo(struct msghdr *mhdr)
2147 {
2148 	struct cmsghdr *cm;
2149 
2150 	for (cm = (struct cmsghdr *)CMSG_FIRSTHDR(mhdr); cm;
2151 	     cm = (struct cmsghdr *)CMSG_NXTHDR(mhdr, cm)) {
2152 		if (cm->cmsg_len == 0)
2153 			return(NULL);
2154 
2155 		if (cm->cmsg_level == IPPROTO_IPV6 &&
2156 		    cm->cmsg_type == IPV6_PKTINFO &&
2157 		    cm->cmsg_len == CMSG_LEN(sizeof(struct in6_pktinfo)))
2158 			return((struct in6_pktinfo *)CMSG_DATA(cm));
2159 	}
2160 
2161 	return(NULL);
2162 }
2163 
2164 int
get_pathmtu(struct msghdr * mhdr)2165 get_pathmtu(struct msghdr *mhdr)
2166 {
2167 #ifdef IPV6_RECVPATHMTU
2168 	struct cmsghdr *cm;
2169 	struct ip6_mtuinfo *mtuctl = NULL;
2170 
2171 	for (cm = (struct cmsghdr *)CMSG_FIRSTHDR(mhdr); cm;
2172 	     cm = (struct cmsghdr *)CMSG_NXTHDR(mhdr, cm)) {
2173 		if (cm->cmsg_len == 0)
2174 			return(0);
2175 
2176 		if (cm->cmsg_level == IPPROTO_IPV6 &&
2177 		    cm->cmsg_type == IPV6_PATHMTU &&
2178 		    cm->cmsg_len == CMSG_LEN(sizeof(struct ip6_mtuinfo))) {
2179 			mtuctl = (struct ip6_mtuinfo *)CMSG_DATA(cm);
2180 
2181 			/*
2182 			 * If the notified destination is different from
2183 			 * the one we are pinging, just ignore the info.
2184 			 * We check the scope ID only when both notified value
2185 			 * and our own value have non-0 values, because we may
2186 			 * have used the default scope zone ID for sending,
2187 			 * in which case the scope ID value is 0.
2188 			 */
2189 			if (!IN6_ARE_ADDR_EQUAL(&mtuctl->ip6m_addr.sin6_addr,
2190 						&dst.sin6_addr) ||
2191 			    (mtuctl->ip6m_addr.sin6_scope_id &&
2192 			     dst.sin6_scope_id &&
2193 			     mtuctl->ip6m_addr.sin6_scope_id !=
2194 			     dst.sin6_scope_id)) {
2195 				if ((options & F_VERBOSE) != 0) {
2196 					printf("path MTU for %s is notified. "
2197 					       "(ignored)\n",
2198 					   pr_addr((struct sockaddr *)&mtuctl->ip6m_addr,
2199 					   sizeof(mtuctl->ip6m_addr)));
2200 				}
2201 				return(0);
2202 			}
2203 
2204 			/*
2205 			 * Ignore an invalid MTU. XXX: can we just believe
2206 			 * the kernel check?
2207 			 */
2208 			if (mtuctl->ip6m_mtu < IPV6_MMTU)
2209 				return(0);
2210 
2211 			/* notification for our destination. return the MTU. */
2212 			return((int)mtuctl->ip6m_mtu);
2213 		}
2214 	}
2215 #endif
2216 	return(0);
2217 }
2218 
2219 /*
2220  * tvsub --
2221  *	Subtract 2 timeval structs:  out = out - in.  Out is assumed to
2222  * be >= in.
2223  */
2224 void
tvsub(struct timeval * out,struct timeval * in)2225 tvsub(struct timeval *out, struct timeval *in)
2226 {
2227 	if ((out->tv_usec -= in->tv_usec) < 0) {
2228 		--out->tv_sec;
2229 		out->tv_usec += 1000000;
2230 	}
2231 	out->tv_sec -= in->tv_sec;
2232 }
2233 
2234 /*
2235  * onint --
2236  *	SIGINT handler.
2237  */
2238 /* ARGSUSED */
2239 void
onint(int notused __unused)2240 onint(int notused __unused)
2241 {
2242 	summary();
2243 
2244 	if (res != NULL)
2245 		freeaddrinfo(res);
2246 
2247         if(packet != NULL)
2248                 free(packet);
2249 
2250 #ifndef HAVE_POLL_H
2251         if(fdmaskp != NULL)
2252                 free(fdmaskp);
2253 #endif
2254 
2255 	(void)signal(SIGINT, SIG_DFL);
2256 	(void)kill(getpid(), SIGINT);
2257 
2258 	/* NOTREACHED */
2259 	exit(1);
2260 }
2261 
2262 /*
2263  * summary --
2264  *	Print out statistics.
2265  */
2266 void
summary(void)2267 summary(void)
2268 {
2269 
2270 	(void)printf("\n--- %s ping6 statistics ---\n", hostname);
2271 	(void)printf("%ld packets transmitted, ", ntransmitted);
2272 	(void)printf("%ld packets received, ", nreceived);
2273 	if (nrepeats)
2274 		(void)printf("+%ld duplicates, ", nrepeats);
2275 	if (ntransmitted) {
2276 		if (nreceived > ntransmitted)
2277 			(void)printf("-- somebody's duplicating packets!");
2278 		else
2279 			(void)printf("%.1f%% packet loss",
2280 			    ((((double)ntransmitted - nreceived) * 100.0) /
2281 			    ntransmitted));
2282 	}
2283 	(void)putchar('\n');
2284 	if (nreceived && timing) {
2285 		/* Only display average to microseconds */
2286 		double num = nreceived + nrepeats;
2287 		double avg = tsum / num;
2288 		double dev = sqrt(tsumsq / num - avg * avg);
2289 		(void)printf(
2290 		    "round-trip min/avg/max/std-dev = %.3f/%.3f/%.3f/%.3f ms\n",
2291 		    tmin, avg, tmax, dev);
2292 		(void)fflush(stdout);
2293 	}
2294 	(void)fflush(stdout);
2295 }
2296 
2297 /*subject type*/
2298 static const char *niqcode[] = {
2299 	"IPv6 address",
2300 	"DNS label",	/*or empty*/
2301 	"IPv4 address",
2302 };
2303 
2304 /*result code*/
2305 static const char *nircode[] = {
2306 	"Success", "Refused", "Unknown",
2307 };
2308 
2309 
2310 /*
2311  * pr_icmph --
2312  *	Print a descriptive string about an ICMP header.
2313  */
2314 void
pr_icmph(struct icmp6_hdr * icp,u_char * end)2315 pr_icmph(struct icmp6_hdr *icp, u_char *end)
2316 {
2317 	char ntop_buf[INET6_ADDRSTRLEN];
2318 	struct nd_redirect *red;
2319 	struct icmp6_nodeinfo *ni;
2320 	char dnsname[MAXDNAME + 1];
2321 	const u_char *cp;
2322 	size_t l;
2323 
2324 	switch (icp->icmp6_type) {
2325 	case ICMP6_DST_UNREACH:
2326 		switch (icp->icmp6_code) {
2327 		case ICMP6_DST_UNREACH_NOROUTE:
2328 			(void)printf("No Route to Destination\n");
2329 			break;
2330 		case ICMP6_DST_UNREACH_ADMIN:
2331 			(void)printf("Destination Administratively "
2332 			    "Unreachable\n");
2333 			break;
2334 		case ICMP6_DST_UNREACH_BEYONDSCOPE:
2335 			(void)printf("Destination Unreachable Beyond Scope\n");
2336 			break;
2337 		case ICMP6_DST_UNREACH_ADDR:
2338 			(void)printf("Destination Host Unreachable\n");
2339 			break;
2340 		case ICMP6_DST_UNREACH_NOPORT:
2341 			(void)printf("Destination Port Unreachable\n");
2342 			break;
2343 		default:
2344 			(void)printf("Destination Unreachable, Bad Code: %d\n",
2345 			    icp->icmp6_code);
2346 			break;
2347 		}
2348 		/* Print returned IP header information */
2349 		pr_retip((struct ip6_hdr *)(icp + 1), end);
2350 		break;
2351 	case ICMP6_PACKET_TOO_BIG:
2352 		(void)printf("Packet too big mtu = %d\n",
2353 		    (int)ntohl(icp->icmp6_mtu));
2354 		pr_retip((struct ip6_hdr *)(icp + 1), end);
2355 		break;
2356 	case ICMP6_TIME_EXCEEDED:
2357 		switch (icp->icmp6_code) {
2358 		case ICMP6_TIME_EXCEED_TRANSIT:
2359 			(void)printf("Time to live exceeded\n");
2360 			break;
2361 		case ICMP6_TIME_EXCEED_REASSEMBLY:
2362 			(void)printf("Frag reassembly time exceeded\n");
2363 			break;
2364 		default:
2365 			(void)printf("Time exceeded, Bad Code: %d\n",
2366 			    icp->icmp6_code);
2367 			break;
2368 		}
2369 		pr_retip((struct ip6_hdr *)(icp + 1), end);
2370 		break;
2371 	case ICMP6_PARAM_PROB:
2372 		(void)printf("Parameter problem: ");
2373 		switch (icp->icmp6_code) {
2374 		case ICMP6_PARAMPROB_HEADER:
2375 			(void)printf("Erroneous Header ");
2376 			break;
2377 		case ICMP6_PARAMPROB_NEXTHEADER:
2378 			(void)printf("Unknown Nextheader ");
2379 			break;
2380 		case ICMP6_PARAMPROB_OPTION:
2381 			(void)printf("Unrecognized Option ");
2382 			break;
2383 		default:
2384 			(void)printf("Bad code(%d) ", icp->icmp6_code);
2385 			break;
2386 		}
2387 		(void)printf("pointer = 0x%02x\n",
2388 		    (u_int32_t)ntohl(icp->icmp6_pptr));
2389 		pr_retip((struct ip6_hdr *)(icp + 1), end);
2390 		break;
2391 	case ICMP6_ECHO_REQUEST:
2392 		(void)printf("Echo Request");
2393 		/* XXX ID + Seq + Data */
2394 		break;
2395 	case ICMP6_ECHO_REPLY:
2396 		(void)printf("Echo Reply");
2397 		/* XXX ID + Seq + Data */
2398 		break;
2399 	case ICMP6_MEMBERSHIP_QUERY:
2400 		(void)printf("Listener Query");
2401 		break;
2402 	case ICMP6_MEMBERSHIP_REPORT:
2403 		(void)printf("Listener Report");
2404 		break;
2405 	case ICMP6_MEMBERSHIP_REDUCTION:
2406 		(void)printf("Listener Done");
2407 		break;
2408 	case ND_ROUTER_SOLICIT:
2409 		(void)printf("Router Solicitation");
2410 		break;
2411 	case ND_ROUTER_ADVERT:
2412 		(void)printf("Router Advertisement");
2413 		break;
2414 	case ND_NEIGHBOR_SOLICIT:
2415 		(void)printf("Neighbor Solicitation");
2416 		break;
2417 	case ND_NEIGHBOR_ADVERT:
2418 		(void)printf("Neighbor Advertisement");
2419 		break;
2420 	case ND_REDIRECT:
2421 		red = (struct nd_redirect *)icp;
2422 		(void)printf("Redirect\n");
2423 		if (!inet_ntop(AF_INET6, &red->nd_rd_dst, ntop_buf,
2424 		    sizeof(ntop_buf)))
2425 			strlcpy(ntop_buf, "?", sizeof(ntop_buf));
2426 		(void)printf("Destination: %s", ntop_buf);
2427 		if (!inet_ntop(AF_INET6, &red->nd_rd_target, ntop_buf,
2428 		    sizeof(ntop_buf)))
2429 			strlcpy(ntop_buf, "?", sizeof(ntop_buf));
2430 		(void)printf(" New Target: %s", ntop_buf);
2431 		break;
2432 	case ICMP6_NI_QUERY:
2433 		(void)printf("Node Information Query");
2434 		/* XXX ID + Seq + Data */
2435 		ni = (struct icmp6_nodeinfo *)icp;
2436 		l = end - (u_char *)(ni + 1);
2437 		printf(", ");
2438 		switch (ntohs(ni->ni_qtype)) {
2439 		case NI_QTYPE_NOOP:
2440 			(void)printf("NOOP");
2441 			break;
2442 		case NI_QTYPE_SUPTYPES:
2443 			(void)printf("Supported qtypes");
2444 			break;
2445 		case NI_QTYPE_FQDN:
2446 			(void)printf("DNS name");
2447 			break;
2448 		case NI_QTYPE_NODEADDR:
2449 			(void)printf("nodeaddr");
2450 			break;
2451 		case NI_QTYPE_IPV4ADDR:
2452 			(void)printf("IPv4 nodeaddr");
2453 			break;
2454 		default:
2455 			(void)printf("unknown qtype");
2456 			break;
2457 		}
2458 		if (options & F_VERBOSE) {
2459 			switch (ni->ni_code) {
2460 			case ICMP6_NI_SUBJ_IPV6:
2461 				if (l == sizeof(struct in6_addr) &&
2462 				    inet_ntop(AF_INET6, ni + 1, ntop_buf,
2463 				    sizeof(ntop_buf)) != NULL) {
2464 					(void)printf(", subject=%s(%s)",
2465 					    niqcode[ni->ni_code], ntop_buf);
2466 				} else {
2467 #if 1
2468 					/* backward compat to -W */
2469 					(void)printf(", oldfqdn");
2470 #else
2471 					(void)printf(", invalid");
2472 #endif
2473 				}
2474 				break;
2475 			case ICMP6_NI_SUBJ_FQDN:
2476 				if (end == (u_char *)(ni + 1)) {
2477 					(void)printf(", no subject");
2478 					break;
2479 				}
2480 				printf(", subject=%s", niqcode[ni->ni_code]);
2481 				cp = (const u_char *)(ni + 1);
2482 				if (dnsdecode(&cp, end, NULL, dnsname,
2483 				    sizeof(dnsname)) != NULL)
2484 					printf("(%s)", dnsname);
2485 				else
2486 					printf("(invalid)");
2487 				break;
2488 			case ICMP6_NI_SUBJ_IPV4:
2489 				if (l == sizeof(struct in_addr) &&
2490 				    inet_ntop(AF_INET, ni + 1, ntop_buf,
2491 				    sizeof(ntop_buf)) != NULL) {
2492 					(void)printf(", subject=%s(%s)",
2493 					    niqcode[ni->ni_code], ntop_buf);
2494 				} else
2495 					(void)printf(", invalid");
2496 				break;
2497 			default:
2498 				(void)printf(", invalid");
2499 				break;
2500 			}
2501 		}
2502 		break;
2503 	case ICMP6_NI_REPLY:
2504 		(void)printf("Node Information Reply");
2505 		/* XXX ID + Seq + Data */
2506 		ni = (struct icmp6_nodeinfo *)icp;
2507 		printf(", ");
2508 		switch (ntohs(ni->ni_qtype)) {
2509 		case NI_QTYPE_NOOP:
2510 			(void)printf("NOOP");
2511 			break;
2512 		case NI_QTYPE_SUPTYPES:
2513 			(void)printf("Supported qtypes");
2514 			break;
2515 		case NI_QTYPE_FQDN:
2516 			(void)printf("DNS name");
2517 			break;
2518 		case NI_QTYPE_NODEADDR:
2519 			(void)printf("nodeaddr");
2520 			break;
2521 		case NI_QTYPE_IPV4ADDR:
2522 			(void)printf("IPv4 nodeaddr");
2523 			break;
2524 		default:
2525 			(void)printf("unknown qtype");
2526 			break;
2527 		}
2528 		if (options & F_VERBOSE) {
2529 			if (ni->ni_code > sizeof(nircode) / sizeof(nircode[0]))
2530 				printf(", invalid");
2531 			else
2532 				printf(", %s", nircode[ni->ni_code]);
2533 		}
2534 		break;
2535 	default:
2536 		(void)printf("Bad ICMP type: %d", icp->icmp6_type);
2537 	}
2538 }
2539 
2540 /*
2541  * pr_iph --
2542  *	Print an IP6 header.
2543  */
2544 void
pr_iph(struct ip6_hdr * ip6)2545 pr_iph(struct ip6_hdr *ip6)
2546 {
2547 	u_int32_t flow = ip6->ip6_flow & IPV6_FLOWLABEL_MASK;
2548 	u_int8_t tc;
2549 	char ntop_buf[INET6_ADDRSTRLEN];
2550 
2551 	tc = *(&ip6->ip6_vfc + 1); /* XXX */
2552 	tc = (tc >> 4) & 0x0f;
2553 	tc |= (ip6->ip6_vfc << 4);
2554 
2555 	printf("Vr TC  Flow Plen Nxt Hlim\n");
2556 	printf(" %1x %02x %05x %04x  %02x   %02x\n",
2557 	    (ip6->ip6_vfc & IPV6_VERSION_MASK) >> 4, tc, (u_int32_t)ntohl(flow),
2558 	    ntohs(ip6->ip6_plen), ip6->ip6_nxt, ip6->ip6_hlim);
2559 	if (!inet_ntop(AF_INET6, &ip6->ip6_src, ntop_buf, sizeof(ntop_buf)))
2560 		strlcpy(ntop_buf, "?", sizeof(ntop_buf));
2561 	printf("%s->", ntop_buf);
2562 	if (!inet_ntop(AF_INET6, &ip6->ip6_dst, ntop_buf, sizeof(ntop_buf)))
2563 		strlcpy(ntop_buf, "?", sizeof(ntop_buf));
2564 	printf("%s\n", ntop_buf);
2565 }
2566 
2567 /*
2568  * pr_addr --
2569  *	Return an ascii host address as a dotted quad and optionally with
2570  * a hostname.
2571  */
2572 const char *
pr_addr(struct sockaddr * addr,int addrlen)2573 pr_addr(struct sockaddr *addr, int addrlen)
2574 {
2575 	static char buf[NI_MAXHOST];
2576 	int flag = 0;
2577 
2578 	if ((options & F_HOSTNAME) == 0)
2579 		flag |= NI_NUMERICHOST;
2580 
2581 	if (getnameinfo(addr, addrlen, buf, sizeof(buf), NULL, 0, flag) == 0)
2582 		return (buf);
2583 	else
2584 		return "?";
2585 }
2586 
2587 /*
2588  * pr_retip --
2589  *	Dump some info on a returned (via ICMPv6) IPv6 packet.
2590  */
2591 void
pr_retip(struct ip6_hdr * ip6,u_char * end)2592 pr_retip(struct ip6_hdr *ip6, u_char *end)
2593 {
2594 	u_char *cp = (u_char *)ip6, nh;
2595 	int hlen;
2596 
2597 	if (end - (u_char *)ip6 < sizeof(*ip6)) {
2598 		printf("IP6");
2599 		goto trunc;
2600 	}
2601 	pr_iph(ip6);
2602 	hlen = sizeof(*ip6);
2603 
2604 	nh = ip6->ip6_nxt;
2605 	cp += hlen;
2606 	while (end - cp >= 8) {
2607 		switch (nh) {
2608 		case IPPROTO_HOPOPTS:
2609 			printf("HBH ");
2610 			hlen = (((struct ip6_hbh *)cp)->ip6h_len+1) << 3;
2611 			nh = ((struct ip6_hbh *)cp)->ip6h_nxt;
2612 			break;
2613 		case IPPROTO_DSTOPTS:
2614 			printf("DSTOPT ");
2615 			hlen = (((struct ip6_dest *)cp)->ip6d_len+1) << 3;
2616 			nh = ((struct ip6_dest *)cp)->ip6d_nxt;
2617 			break;
2618 		case IPPROTO_FRAGMENT:
2619 			printf("FRAG ");
2620 			hlen = sizeof(struct ip6_frag);
2621 			nh = ((struct ip6_frag *)cp)->ip6f_nxt;
2622 			break;
2623 		case IPPROTO_ROUTING:
2624 			printf("RTHDR ");
2625 			hlen = (((struct ip6_rthdr *)cp)->ip6r_len+1) << 3;
2626 			nh = ((struct ip6_rthdr *)cp)->ip6r_nxt;
2627 			break;
2628 #ifdef IPSEC
2629 		case IPPROTO_AH:
2630 			printf("AH ");
2631 			hlen = (((struct ah *)cp)->ah_len+2) << 2;
2632 			nh = ((struct ah *)cp)->ah_nxt;
2633 			break;
2634 #endif
2635 		case IPPROTO_ICMPV6:
2636 			printf("ICMP6: type = %d, code = %d\n",
2637 			    *cp, *(cp + 1));
2638 			return;
2639 		case IPPROTO_ESP:
2640 			printf("ESP\n");
2641 			return;
2642 		case IPPROTO_TCP:
2643 			printf("TCP: from port %u, to port %u (decimal)\n",
2644 			    (*cp * 256 + *(cp + 1)),
2645 			    (*(cp + 2) * 256 + *(cp + 3)));
2646 			return;
2647 		case IPPROTO_UDP:
2648 			printf("UDP: from port %u, to port %u (decimal)\n",
2649 			    (*cp * 256 + *(cp + 1)),
2650 			    (*(cp + 2) * 256 + *(cp + 3)));
2651 			return;
2652 		default:
2653 			printf("Unknown Header(%d)\n", nh);
2654 			return;
2655 		}
2656 
2657 		if ((cp += hlen) >= end)
2658 			goto trunc;
2659 	}
2660 	if (end - cp < 8)
2661 		goto trunc;
2662 
2663 	putchar('\n');
2664 	return;
2665 
2666   trunc:
2667 	printf("...\n");
2668 	return;
2669 }
2670 
2671 void
fill(char * bp,char * patp)2672 fill(char *bp, char *patp)
2673 {
2674 	int ii, jj, kk;
2675 	int pat[16];
2676 	char *cp;
2677 
2678 	for (cp = patp; *cp; cp++)
2679 		if (!isxdigit(*cp))
2680 			errx(1, "patterns must be specified as hex digits");
2681 	ii = sscanf(patp,
2682 	    "%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x%2x",
2683 	    &pat[0], &pat[1], &pat[2], &pat[3], &pat[4], &pat[5], &pat[6],
2684 	    &pat[7], &pat[8], &pat[9], &pat[10], &pat[11], &pat[12],
2685 	    &pat[13], &pat[14], &pat[15]);
2686 
2687 /* xxx */
2688 	if (ii > 0)
2689 		for (kk = 0;
2690 		    kk <= MAXDATALEN - (8 + sizeof(struct tv32) + ii);
2691 		    kk += ii)
2692 			for (jj = 0; jj < ii; ++jj)
2693 				bp[jj + kk] = pat[jj];
2694 	if (!(options & F_QUIET)) {
2695 		(void)printf("PATTERN: 0x");
2696 		for (jj = 0; jj < ii; ++jj)
2697 			(void)printf("%02x", bp[jj] & 0xFF);
2698 		(void)printf("\n");
2699 	}
2700 }
2701 
2702 #ifdef IPSEC
2703 #ifdef IPSEC_POLICY_IPSEC
2704 int
setpolicy(int so __unused,char * policy)2705 setpolicy(int so __unused, char *policy)
2706 {
2707 	char *buf;
2708 
2709 	if (policy == NULL)
2710 		return 0;	/* ignore */
2711 
2712 	buf = ipsec_set_policy(policy, strlen(policy));
2713 	if (buf == NULL)
2714 		errx(1, "%s", ipsec_strerror());
2715 	if (setsockopt(s, IPPROTO_IPV6, IPV6_IPSEC_POLICY, buf,
2716 	    ipsec_get_policylen(buf)) < 0)
2717 		warnx("Unable to set IPsec policy");
2718 	free(buf);
2719 
2720 	return 0;
2721 }
2722 #endif
2723 #endif
2724 
2725 char *
nigroup(char * name,int nig_oldmcprefix)2726 nigroup(char *name, int nig_oldmcprefix)
2727 {
2728 	char *p;
2729 	char *q;
2730 	MD5_CTX ctxt;
2731 	u_int8_t digest[16];
2732 	u_int8_t c;
2733 	size_t l;
2734 	char hbuf[NI_MAXHOST];
2735 	struct in6_addr in6;
2736 	int valid;
2737 
2738 	p = strchr(name, '.');
2739 	if (!p)
2740 		p = name + strlen(name);
2741 	l = p - name;
2742 	if (l > 63 || l > sizeof(hbuf) - 1)
2743 		return NULL;	/*label too long*/
2744 	strncpy(hbuf, name, l);
2745 	hbuf[(int)l] = '\0';
2746 
2747 	for (q = name; *q; q++) {
2748 		if (isupper(*(unsigned char *)q))
2749 			*q = tolower(*(unsigned char *)q);
2750 	}
2751 
2752 	/* generate 16 bytes of pseudo-random value. */
2753 	memset(&ctxt, 0, sizeof(ctxt));
2754 	MD5Init(&ctxt);
2755 	c = l & 0xff;
2756 	MD5Update(&ctxt, &c, sizeof(c));
2757 	MD5Update(&ctxt, (unsigned char *)name, l);
2758 	MD5Final(digest, &ctxt);
2759 
2760 	if (nig_oldmcprefix) {
2761 		/* draft-ietf-ipngwg-icmp-name-lookup */
2762 		valid = inet_pton(AF_INET6, "ff02::2:0000:0000", &in6);
2763 	} else {
2764 		/* RFC 4620 */
2765 		valid = inet_pton(AF_INET6, "ff02::2:ff00:0000", &in6);
2766 	}
2767 	if (valid != 1)
2768 		return NULL;	/*XXX*/
2769 
2770 	if (nig_oldmcprefix) {
2771 		/* draft-ietf-ipngwg-icmp-name-lookup */
2772 		bcopy(digest, &in6.s6_addr[12], 4);
2773 	} else {
2774 		/* RFC 4620 */
2775 		bcopy(digest, &in6.s6_addr[13], 3);
2776 	}
2777 
2778 	if (inet_ntop(AF_INET6, &in6, hbuf, sizeof(hbuf)) == NULL)
2779 		return NULL;
2780 
2781 	return strdup(hbuf);
2782 }
2783 
2784 void
usage(void)2785 usage(void)
2786 {
2787 	(void)fprintf(stderr,
2788 #if defined(IPSEC) && !defined(IPSEC_POLICY_IPSEC)
2789 	    "A"
2790 #endif
2791 	    "usage: ping6 [-"
2792 	    "Dd"
2793 #if defined(IPSEC) && !defined(IPSEC_POLICY_IPSEC)
2794 	    "E"
2795 #endif
2796 	    "fH"
2797 #ifdef IPV6_USE_MIN_MTU
2798 	    "m"
2799 #endif
2800 	    "nNoqrRtvwW] "
2801 	    "[-a addrtype] [-b bufsiz] [-c count] [-g gateway]\n"
2802 	    "             [-h hoplimit] [-I interface] [-i wait] [-l preload]"
2803 #if defined(IPSEC) && defined(IPSEC_POLICY_IPSEC)
2804 	    " [-P policy]"
2805 #endif
2806 	    "\n"
2807 	    "             [-p pattern] [-S sourceaddr] [-s packetsize] "
2808 	    "[hops ...] host\n");
2809 	exit(1);
2810 }
2811