/* LWIP service - addr.c - socket address verification and conversion */

#include "lwip.h"

/*
 * Return TRUE if the given socket address is of type AF_UNSPEC, or FALSE
 * otherwise.
 */
int
addr_is_unspec(const struct sockaddr * addr, socklen_t addr_len)
{

	return (addr_len >= offsetof(struct sockaddr, sa_data) &&
	    addr->sa_family == AF_UNSPEC);
}

/*
 * Check whether the given multicast address is generally valid.  This check
 * should not be moved into addr_get_inet(), as we do not want to forbid
 * creating routes for such addresses, for example.  We do however apply the
 * restrictions here to all provided source and destination addresses.  Return
 * TRUE if the address is an acceptable multicast address, or FALSE otherwise.
 */
int
addr_is_valid_multicast(const ip_addr_t * ipaddr)
{
	uint8_t scope;

	assert(ip_addr_ismulticast(ipaddr));

	/* We apply restrictions to IPv6 multicast addresses only. */
	if (IP_IS_V6(ipaddr)) {
		scope = ip6_addr_multicast_scope(ip_2_ip6(ipaddr));

		if (scope == IP6_MULTICAST_SCOPE_RESERVED0 ||
		    scope == IP6_MULTICAST_SCOPE_RESERVEDF)
			return FALSE;

		/*
		 * We do not impose restrictions on the three defined embedded
		 * flags, even though we put no effort into supporting them,
		 * especially in terms of automatically creating routes for
		 * all cases.  We do force the fourth flag to be zero.
		 * Unfortunately there is no lwIP macro to check for this flag.
		 */
		if (ip_2_ip6(ipaddr)->addr[0] & PP_HTONL(0x00800000UL))
			return FALSE;

		/* Prevent KAME-embedded zone IDs from entering the system. */
		if (ip6_addr_has_scope(ip_2_ip6(ipaddr), IP6_UNKNOWN) &&
		    (ip_2_ip6(ipaddr)->addr[0] & PP_HTONL(0x0000ffffUL)))
			return FALSE;
	}

	return TRUE;
}

/*
 * Load a sockaddr structure, as copied from userland, as a lwIP-style IP
 * address and (optionally) a port number.  The expected type of IP address is
 * given as 'type', which must be one of IPADDR_TYPE_{V4,ANY,V6}.  If it is
 * IPADDR_TYPE_V4, 'addr' is expected to point to a sockaddr_in structure.  If
 * it is IPADDR_TYPE_{ANY,V6}, 'addr' is expected to point to a sockaddr_in6
 * structure.  For the _ANY case, the result will be an _ANY address only if it
 * is the unspecified (all-zeroes) address and a _V6 address in all other
 * cases.  For the _V6 case, the result will always be a _V6 address.  The
 * length of the structure pointed to by 'addr' is given as 'addr_len'.  If the
 * boolean 'kame' flag is set, addresses will be interpreted to be KAME style,
 * meaning that for scoped IPv6 addresses, the zone is embedded in the address
 * rather than given in sin6_scope_id.  On success, store the resulting IP
 * address in 'ipaddr'.  If 'port' is not NULL, store the port number in it;
 * otherwise, ignore the port number.  On any parsing failure, return an
 * appropriate negative error code.
 */
int
addr_get_inet(const struct sockaddr * addr, socklen_t addr_len, uint8_t type,
	ip_addr_t * ipaddr, int kame, uint16_t * port)
{
	struct sockaddr_in sin;
	struct sockaddr_in6 sin6;
	ip6_addr_t *ip6addr;
	uint32_t ifindex;

	switch (type) {
	case IPADDR_TYPE_V4:
		if (addr_len != sizeof(sin))
			return EINVAL;

		/*
		 * Getting around strict aliasing problems.  Oh, the irony of
		 * doing an extra memcpy so that the compiler can do a better
		 * job at optimizing..
		 */
		memcpy(&sin, addr, sizeof(sin));

		if (sin.sin_family != AF_INET)
			return EAFNOSUPPORT;

		ip_addr_set_ip4_u32(ipaddr, sin.sin_addr.s_addr);

		if (port != NULL)
			*port = ntohs(sin.sin_port);

		return OK;

	case IPADDR_TYPE_ANY:
	case IPADDR_TYPE_V6:
		if (addr_len != sizeof(sin6))
			return EINVAL;

		/* Again, strict aliasing.. */
		memcpy(&sin6, addr, sizeof(sin6));

		if (sin6.sin6_family != AF_INET6)
			return EAFNOSUPPORT;

		memset(ipaddr, 0, sizeof(*ipaddr));

		/*
		 * This is a bit ugly, but NetBSD does not expose s6_addr32 and
		 * s6_addr is a series of bytes, which is a mismatch for lwIP.
		 * The alternative would be another memcpy..
		 */
		ip6addr = ip_2_ip6(ipaddr);
		assert(sizeof(ip6addr->addr) == sizeof(sin6.sin6_addr));
		memcpy(ip6addr->addr, &sin6.sin6_addr, sizeof(ip6addr->addr));

		/*
		 * If the address may have a scope, extract the zone ID.
		 * Where the zone ID is depends on the 'kame' parameter: KAME-
		 * style addresses have it embedded within the address, whereas
		 * non-KAME addresses use the (misnamed) sin6_scope_id field.
		 */
		if (ip6_addr_has_scope(ip6addr, IP6_UNKNOWN)) {
			if (kame) {
				ifindex =
				    ntohl(ip6addr->addr[0]) & 0x0000ffffUL;

				ip6addr->addr[0] &= PP_HTONL(0xffff0000UL);
			} else {
				/*
				 * Reject KAME-style addresses for normal
				 * socket calls, to save ourselves the trouble
				 * of mixed address styles elsewhere.
				 */
				if (ip6addr->addr[0] & PP_HTONL(0x0000ffffUL))
					return EINVAL;

				ifindex = sin6.sin6_scope_id;
			}

			/*
			 * Reject invalid zone IDs.  This also enforces that
			 * no zone IDs wider than eight bits enter the system.
			 * As a side effect, it is not possible to add routes
			 * for invalid zones, but that should be no problem.
			 */
			if (ifindex != 0 &&
			    ifdev_get_by_index(ifindex) == NULL)
				return ENXIO;

			ip6_addr_set_zone(ip6addr, ifindex);
		} else
			ip6_addr_clear_zone(ip6addr);

		/*
		 * Set the type to ANY if it was ANY and the address itself is
		 * ANY as well.  Otherwise, we are binding to a specific IPv6
		 * address, so IPV6_V6ONLY stops being relevant and we should
		 * leave the address set to V6.  Destination addresses for ANY
		 * are set to V6 elsewhere.
		 */
		if (type == IPADDR_TYPE_ANY && ip6_addr_isany(ip6addr))
			IP_SET_TYPE(ipaddr, type);
		else
			IP_SET_TYPE(ipaddr, IPADDR_TYPE_V6);

		if (port != NULL)
			*port = ntohs(sin6.sin6_port);

		return OK;

	default:
		return EAFNOSUPPORT;
	}
}

/*
 * Store an lwIP-style IP address and port number as a sockaddr structure
 * (sockaddr_in or sockaddr_in6, depending on the given IP address) to be
 * copied to userland.  The result is stored in the buffer pointed to by
 * 'addr'.  Before the call, 'addr_len' must be set to the size of this buffer.
 * This is an internal check to prevent buffer overflows, and must not be used
 * to validate input, since a mismatch will trigger a panic.  After the call,
 * 'addr_len' will be set to the size of the resulting structure.  The lwIP-
 * style address is given as 'ipaddr'.  If the boolean 'kame' flag is set, the
 * address will be stored KAME-style, meaning that for scoped IPv6 addresses,
 * the address zone will be stored embedded in the address rather than in
 * sin6_scope_id.  If relevant, 'port' contains the port number in host-byte
 * order; otherwise it should be set to zone.
 */
void
addr_put_inet(struct sockaddr * addr, socklen_t * addr_len,
	const ip_addr_t * ipaddr, int kame, uint16_t port)
{
	struct sockaddr_in sin;
	struct sockaddr_in6 sin6;
	const ip6_addr_t *ip6addr;
	uint32_t zone;

	switch (IP_GET_TYPE(ipaddr)) {
	case IPADDR_TYPE_V4:
		if (*addr_len < sizeof(sin))
			panic("provided address buffer too small");

		memset(&sin, 0, sizeof(sin));

		sin.sin_len = sizeof(sin);
		sin.sin_family = AF_INET;
		sin.sin_port = htons(port);
		sin.sin_addr.s_addr = ip_addr_get_ip4_u32(ipaddr);

		memcpy(addr, &sin, sizeof(sin));
		*addr_len = sizeof(sin);

		break;

	case IPADDR_TYPE_ANY:
	case IPADDR_TYPE_V6:
		if (*addr_len < sizeof(sin6))
			panic("provided address buffer too small");

		ip6addr = ip_2_ip6(ipaddr);

		memset(&sin6, 0, sizeof(sin6));

		sin6.sin6_len = sizeof(sin6);
		sin6.sin6_family = AF_INET6;
		sin6.sin6_port = htons(port);
		memcpy(&sin6.sin6_addr, ip6addr->addr, sizeof(sin6.sin6_addr));

		/*
		 * If the IPv6 address has a zone set, it must be scoped, and
		 * we put the zone in the result.  It may occur that a scoped
		 * IPv6 address does not have a zone here though, for example
		 * if packet routing fails for sendto() with a zoneless address
		 * on an unbound socket, resulting in an RTM_MISS message.  In
		 * such cases, simply leave the zone index blank in the result.
		 */
		if (ip6_addr_has_zone(ip6addr)) {
			assert(ip6_addr_has_scope(ip6addr, IP6_UNKNOWN));

			zone = ip6_addr_zone(ip6addr);
			assert(zone <= UINT8_MAX);

			if (kame)
				sin6.sin6_addr.s6_addr[3] = zone;
			else
				sin6.sin6_scope_id = zone;
		}

		memcpy(addr, &sin6, sizeof(sin6));
		*addr_len = sizeof(sin6);

		break;

	default:
		panic("unknown IP address type: %u", IP_GET_TYPE(ipaddr));
	}
}

/*
 * Load a link-layer sockaddr structure (sockaddr_dl), as copied from userland,
 * and return the contained name and/or hardware address.  The address is
 * provided as 'addr', with length 'addr_len'.  On success, return OK.  If
 * 'name' is not NULL, it must be of size 'name_max', and will be used to store
 * the (null-terminated) interface name in the given structure if present, or
 * the empty string if not.  If 'hwaddr' is not NULL, it will be used to store
 * the hardware address in the given structure, which must in that case be
 * present and exactly 'hwaddr_len' bytes long.  On any parsing failure, return
 * an appropriate negative error code.
 */
int
addr_get_link(const struct sockaddr * addr, socklen_t addr_len, char * name,
	size_t name_max, uint8_t * hwaddr, size_t hwaddr_len)
{
	struct sockaddr_dlx sdlx;
	size_t nlen, alen;

	if (addr_len < offsetof(struct sockaddr_dlx, sdlx_data))
		return EINVAL;

	/*
	 * We cannot prevent callers from passing in massively oversized
	 * sockaddr_dl structure.  However, we insist that all the actual data
	 * be contained within the size of our sockaddr_dlx version.
	 */
	if (addr_len > sizeof(sdlx))
		addr_len = sizeof(sdlx);

	memcpy(&sdlx, addr, addr_len);

	if (sdlx.sdlx_family != AF_LINK)
		return EAFNOSUPPORT;

	/* Address selectors are not currently supported. */
	if (sdlx.sdlx_slen != 0)
		return EINVAL;

	nlen = (size_t)sdlx.sdlx_nlen;
	alen = (size_t)sdlx.sdlx_alen;

	/* The nlen and alen fields are 8-bit, so no risks of overflow here. */
	if (addr_len < offsetof(struct sockaddr_dlx, sdlx_data) + nlen + alen)
		return EINVAL;

	/*
	 * Copy out the name, truncating it if needed.  The name in the
	 * sockaddr is not null terminated, so we have to do that.  If the
	 * sockaddr has no name, copy out an empty name.
	 */
	if (name != NULL) {
		assert(name_max > 0);

		if (name_max > nlen + 1)
			name_max = nlen + 1;

		memcpy(name, sdlx.sdlx_data, name_max - 1);
		name[name_max - 1] = '\0';
	}

	/*
	 * Copy over the hardware address.  For simplicity, we require that the
	 * caller specify the exact hardware address length.
	 */
	if (hwaddr != NULL) {
		if (alen != hwaddr_len)
			return EINVAL;

		memcpy(hwaddr, sdlx.sdlx_data + nlen, hwaddr_len);
	}

	return OK;
}

/*
 * Store a link-layer sockaddr structure (sockaddr_dl), to be copied to
 * userland.  The result is stored in the buffer pointed to by 'addr'.  Before
 * the call, 'addr_len' must be set to the size of this buffer.  This is an
 * internal check to prevent buffer overflows, and must not be used to validate
 * input, since a mismatch will trigger a panic.  After the call, 'addr_len'
 * will be set to the size of the resulting structure.  The given interface
 * index 'ifindex' and (IFT_) interface type 'type' will always be stored in
 * the resulting structure.  If 'name' is not NULL, it must be a null-
 * terminated interface name string which will be included in the structure.
 * If 'hwaddr' is not NULL, it must be a hardware address of length
 * 'hwaddr_len', which will also be included in the structure.
 */
void
addr_put_link(struct sockaddr * addr, socklen_t * addr_len, uint32_t ifindex,
	uint32_t type, const char * name, const uint8_t * hwaddr,
	size_t hwaddr_len)
{
	struct sockaddr_dlx sdlx;
	size_t name_len;
	socklen_t len;

	name_len = (name != NULL) ? strlen(name) : 0;

	if (hwaddr == NULL)
		hwaddr_len = 0;

	assert(name_len < IFNAMSIZ);
	assert(hwaddr_len <= NETIF_MAX_HWADDR_LEN);

	len = offsetof(struct sockaddr_dlx, sdlx_data) + name_len + hwaddr_len;

	if (*addr_len < len)
		panic("provided address buffer too small");

	memset(&sdlx, 0, sizeof(sdlx));
	sdlx.sdlx_len = len;
	sdlx.sdlx_family = AF_LINK;
	sdlx.sdlx_index = ifindex;
	sdlx.sdlx_type = type;
	sdlx.sdlx_nlen = name_len;
	sdlx.sdlx_alen = hwaddr_len;
	if (name_len > 0)
		memcpy(sdlx.sdlx_data, name, name_len);
	if (hwaddr_len > 0)
		memcpy(sdlx.sdlx_data + name_len, hwaddr, hwaddr_len);

	memcpy(addr, &sdlx, len);
	*addr_len = len;
}

/*
 * Convert an IPv4 or IPv6 netmask, given as sockaddr structure 'addr', to a
 * prefix length.  The length of the sockaddr structure is given as 'addr_len'.
 * For consistency with addr_get_inet(), the expected address type is given as
 * 'type', and must be either IPADDR_TYPE_V4 or IPADDR_TYPE_V6.  On success,
 * return OK with the number of set prefix bits returned in 'prefix', and
 * optionally with a lwIP representation of the netmask stored in 'ipaddr' (if
 * not NULL).  On failure, return an appropriate negative error code.  Note
 * that this function does not support compressed IPv4 network masks; such
 * addresses must be expanded before a call to this function.
 */
int
addr_get_netmask(const struct sockaddr * addr, socklen_t addr_len,
	uint8_t type, unsigned int * prefix, ip_addr_t * ipaddr)
{
	struct sockaddr_in sin;
	struct sockaddr_in6 sin6;
	unsigned int byte, bit;
	uint32_t val;

	switch (type) {
	case IPADDR_TYPE_V4:
		if (addr_len != sizeof(sin))
			return EINVAL;

		memcpy(&sin, addr, sizeof(sin));

		if (sin.sin_family != AF_INET)
			return EAFNOSUPPORT;

		val = ntohl(sin.sin_addr.s_addr);

		/* Find the first zero bit. */
		for (bit = 0; bit < IP4_BITS; bit++)
			if (!(val & (1 << (IP4_BITS - bit - 1))))
				break;

		*prefix = bit;

		/* All bits after the first zero bit must also be zero. */
		if (bit < IP4_BITS &&
		    (val & ((1 << (IP4_BITS - bit - 1)) - 1)))
			return EINVAL;

		if (ipaddr != NULL)
			ip_addr_set_ip4_u32(ipaddr, sin.sin_addr.s_addr);

		return OK;

	case IPADDR_TYPE_V6:
		if (addr_len != sizeof(sin6))
			return EINVAL;

		memcpy(&sin6, addr, sizeof(sin6));

		if (sin6.sin6_family != AF_INET6)
			return EAFNOSUPPORT;

		/* Find the first zero bit. */
		for (byte = 0; byte < __arraycount(sin6.sin6_addr.s6_addr);
		    byte++)
			if (sin6.sin6_addr.s6_addr[byte] != 0xff)
				break;

		/* If all bits are set, there is nothing more to do. */
		if (byte == __arraycount(sin6.sin6_addr.s6_addr)) {
			*prefix = __arraycount(sin6.sin6_addr.s6_addr) * NBBY;

			return OK;
		}

		for (bit = 0; bit < NBBY; bit++)
			if (!(sin6.sin6_addr.s6_addr[byte] &
			    (1 << (NBBY - bit - 1))))
				break;

		*prefix = byte * NBBY + bit;

		/* All bits after the first zero bit must also be zero. */
		if (bit < NBBY && (sin6.sin6_addr.s6_addr[byte] &
		    ((1 << (NBBY - bit - 1)) - 1)))
			return EINVAL;

		for (byte++; byte < __arraycount(sin6.sin6_addr.s6_addr);
		    byte++)
			if (sin6.sin6_addr.s6_addr[byte] != 0)
				return EINVAL;

		if (ipaddr != NULL) {
			ip_addr_set_zero_ip6(ipaddr);

			memcpy(ip_2_ip6(ipaddr)->addr, &sin6.sin6_addr,
			    sizeof(ip_2_ip6(ipaddr)->addr));
		}

		return OK;

	default:
		panic("unknown IP address type: %u", type);
	}
}

/*
 * Generate a raw network mask based on the given prefix length.
 */
void
addr_make_netmask(uint8_t * addr, socklen_t addr_len, unsigned int prefix)
{
	unsigned int byte, bit;

	byte = prefix / NBBY;
	bit = prefix % NBBY;

	assert(byte + !!bit <= addr_len);

	if (byte > 0)
		memset(addr, 0xff, byte);
	if (bit != 0)
		addr[byte++] = (uint8_t)(0xff << (NBBY - bit));
	if (byte < addr_len)
		memset(&addr[byte], 0, addr_len - byte);
}

/*
 * Store a network mask as a sockaddr structure, in 'addr'.  Before the call,
 * 'addr_len' must be set to the memory size of 'addr'.  The address type is
 * given as 'type', and must be either IPADDR_TYPE_V4 or IPADDR_TYPE_V6.  The
 * prefix length from which to generate the network mask is given as 'prefix'.
 * Upon return, 'addr_len' is set to the size of the resulting sockaddr
 * structure.
 */
void
addr_put_netmask(struct sockaddr * addr, socklen_t * addr_len, uint8_t type,
	unsigned int prefix)
{
	struct sockaddr_in sin;
	struct sockaddr_in6 sin6;

	switch (type) {
	case IPADDR_TYPE_V4:
		if (*addr_len < sizeof(sin))
			panic("provided address buffer too small");

		assert(prefix <= IP4_BITS);

		memset(&sin, 0, sizeof(sin));
		sin.sin_len = sizeof(sin);
		sin.sin_family = AF_INET;

		addr_make_netmask((uint8_t *)&sin.sin_addr.s_addr,
		    sizeof(sin.sin_addr.s_addr), prefix);

		memcpy(addr, &sin, sizeof(sin));
		*addr_len = sizeof(sin);

		break;

	case IPADDR_TYPE_V6:
		if (*addr_len < sizeof(sin6))
			panic("provided address buffer too small");

		assert(prefix <= IP6_BITS);

		memset(&sin6, 0, sizeof(sin6));
		sin6.sin6_len = sizeof(sin6);
		sin6.sin6_family = AF_INET6;

		addr_make_netmask(sin6.sin6_addr.s6_addr,
		    sizeof(sin6.sin6_addr.s6_addr), prefix);

		memcpy(addr, &sin6, sizeof(sin6));
		*addr_len = sizeof(sin6);

		break;

	default:
		panic("unknown IP address type: %u", type);
	}
}

/*
 * Normalize the given address in 'src' to the given number of prefix bits,
 * setting all other bits to zero.  Return the result in 'dst'.
 */
void
addr_normalize(ip_addr_t * dst, const ip_addr_t * src, unsigned int prefix)
{
#if !defined(NDEBUG)
	unsigned int addr_len;
#endif /* !defined(NDEBUG) */
	unsigned int byte, bit;
	const uint8_t *srcaddr;
	uint8_t type, *dstaddr;

	type = IP_GET_TYPE(src);

	memset(dst, 0, sizeof(*dst));
	IP_SET_TYPE(dst, type);

	switch (type) {
	case IPADDR_TYPE_V4:
		srcaddr = (const uint8_t *)&ip_2_ip4(src)->addr;
		dstaddr = (uint8_t *)&ip_2_ip4(dst)->addr;
#if !defined(NDEBUG)
		addr_len = sizeof(ip_2_ip4(src)->addr);
#endif /* !defined(NDEBUG) */

		break;

	case IPADDR_TYPE_V6:
		ip6_addr_set_zone(ip_2_ip6(dst), ip6_addr_zone(ip_2_ip6(src)));

		srcaddr = (const uint8_t *)&ip_2_ip6(src)->addr;
		dstaddr = (uint8_t *)&ip_2_ip6(dst)->addr;
#if !defined(NDEBUG)
		addr_len = sizeof(ip_2_ip6(src)->addr);
#endif /* !defined(NDEBUG) */

		break;

	default:
		panic("unknown IP address type: %u", type);
	}

	byte = prefix / NBBY;
	bit = prefix % NBBY;

	assert(byte + !!bit <= addr_len);

	if (byte > 0)
		memcpy(dstaddr, srcaddr, byte);
	if (bit != 0) {
		dstaddr[byte] =
		    srcaddr[byte] & (uint8_t)(0xff << (NBBY - bit));
		byte++;
	}
}

/*
 * Return the number of common bits between the given two addresses, up to the
 * given maximum.  Thus, return a value between 0 and 'max' inclusive.
 */
unsigned int
addr_get_common_bits(const ip_addr_t * ipaddr1, const ip_addr_t * ipaddr2,
	unsigned int max)
{
	unsigned int addr_len, prefix, bit;
	const uint8_t *addr1, *addr2;
	uint8_t byte;

	switch (IP_GET_TYPE(ipaddr1)) {
	case IPADDR_TYPE_V4:
		assert(IP_IS_V4(ipaddr2));

		addr1 = (const uint8_t *)&ip_2_ip4(ipaddr1)->addr;
		addr2 = (const uint8_t *)&ip_2_ip4(ipaddr2)->addr;
		addr_len = sizeof(ip_2_ip4(ipaddr1)->addr);

		break;

	case IPADDR_TYPE_V6:
		assert(IP_IS_V6(ipaddr2));

		addr1 = (const uint8_t *)&ip_2_ip6(ipaddr1)->addr;
		addr2 = (const uint8_t *)&ip_2_ip6(ipaddr2)->addr;
		addr_len = sizeof(ip_2_ip6(ipaddr1)->addr);

		break;

	default:
		panic("unknown IP address type: %u", IP_GET_TYPE(ipaddr1));
	}

	if (addr_len > max * NBBY)
		addr_len = max * NBBY;

	prefix = 0;

	for (prefix = 0; addr_len > 0; addr1++, addr2++, prefix += NBBY) {
		if ((byte = (*addr1 ^ *addr2)) != 0) {
			/* TODO: see if we want a lookup table for this. */
			for (bit = 0; bit < NBBY; bit++, prefix++)
				if (byte & (1 << (NBBY - bit - 1)))
					break;
			break;
		}
	}

	if (prefix > max)
		prefix = max;

	return prefix;
}

/*
 * Convert the given IPv4 address to an IPv4-mapped IPv6 address.
 */
void
addr_make_v4mapped_v6(ip_addr_t * dst, const ip4_addr_t * src)
{

	IP_ADDR6(dst, 0, 0, PP_HTONL(0x0000ffffUL), ip4_addr_get_u32(src));
}