/* LWIP service - rtsock.c - routing sockets and route sysctl support */
/*
 * In a nutshell, the intended abstraction is that only this module deals with
 * route messages, message headers, and RTA arrays, whereas other modules
 * (ifaddr, route) are responsible for parsing and providing sockaddr_* type
 * addresses, with the exception of compression and expansion which is
 * particular to routing sockets.  Concretely, there should be no reference to
 * (e.g.) rt_msghdr outside this module, and no mention of ip_addr_t inside it.
 */

#include "lwip.h"
#include "ifaddr.h"
#include "rtsock.h"
#include "route.h"
#include "lldata.h"

/* The number of routing sockets. */
#define NR_RTSOCK		8

/*
 * The send buffer maximum determines the maximum size of requests.  The
 * maximum possible request size is the size of the routing message header plus
 * RTAX_MAX times the maximum socket address size, including alignment.  That
 * currently works out to a number in the low 400s, so 512 should be fine for
 * now.  At this time we do not support changing the send buffer size, because
 * there really is no point in doing so.  Hence also no RT_SNDBUF_{MIN,DEF}.
 */
#define RT_SNDBUF_MAX		512	/* maximum RT send buffer size */

#define RT_RCVBUF_MIN		0	/* minimum RT receive buffer size */
#define RT_RCVBUF_DEF		16384	/* default RT receive buffer size */
#define RT_RCVBUF_MAX		65536	/* maximum RT receive buffer size */

/* Address length of routing socket address structures; two bytes only. */
#define RTSOCK_ADDR_LEN		offsetof(struct sockaddr, sa_data)

struct rtsock_rta {
	const void *rta_ptr[RTAX_MAX];
	socklen_t rta_len[RTAX_MAX];
};

static const char rtsock_padbuf[RT_ROUNDUP(0)];

static struct rtsock {
	struct sock rt_sock;		/* socket object, MUST be first */
	int rt_family;			/* address family filter if not zero */
	unsigned int rt_flags;		/* routing socket flags (RTF_) */
	struct pbuf *rt_rcvhead;	/* receive buffer, first packet */
	struct pbuf **rt_rcvtailp;	/* receive buffer, last ptr-ptr */
	size_t rt_rcvlen;		/* receive buffer, length in bytes */
	size_t rt_rcvbuf;		/* receive buffer, maximum size */
	TAILQ_ENTRY(rtsock) rt_next;	/* next in active or free list */
} rt_array[NR_RTSOCK];

#define RTF_NOLOOPBACK		0x1	/* suppress reply messages */

static TAILQ_HEAD(, rtsock) rt_freelist;	/* free routing sockets */
static TAILQ_HEAD(, rtsock) rt_activelist;	/* active routing sockets */

struct rtsock_request {
	struct rtsock *rtr_src;		/* source socket of the request */
	pid_t rtr_pid;			/* process ID of requesting process */
	int rtr_seq;			/* sequence number from the request */
	int rtr_getif;			/* RTM_GET only: get interface info */
};

static const struct sockevent_ops rtsock_ops;

static ssize_t rtsock_info(struct rmib_call *, struct rmib_node *,
	struct rmib_oldp *, struct rmib_newp *);

/* The CTL_NET PF_ROUTE subtree. */
static struct rmib_node net_route_table[] = {
	[0]	= RMIB_FUNC(RMIB_RO | CTLTYPE_NODE, 0, rtsock_info,
		    "rtable", "Routing table information"),
};

/* The CTL_NET PF_ROUTE node. */
static struct rmib_node net_route_node =
    RMIB_NODE(RMIB_RO, net_route_table, "route", "PF_ROUTE information");

/*
 * Initialize the routing sockets module.
 */
void
rtsock_init(void)
{
	const int mib[] = { CTL_NET, PF_ROUTE };
	unsigned int slot;
	int r;

	/* Initialize the list of free routing sockets. */
	TAILQ_INIT(&rt_freelist);

	for (slot = 0; slot < __arraycount(rt_array); slot++)
		TAILQ_INSERT_TAIL(&rt_freelist, &rt_array[slot], rt_next);

	/* Initialize the list of acive routing sockets. */
	TAILQ_INIT(&rt_activelist);

	/* Register the "net.route" subtree with the MIB service. */
	if ((r = rmib_register(mib, __arraycount(mib), &net_route_node)) != OK)
		panic("unable to register net.route RMIB tree: %d", r);
}

/*
 * Allocate a pbuf suitable for storing a routing message of 'size' bytes.
 * Return the allocated pbuf on success, or NULL on memory allocation failure.
 */
static struct pbuf *
rtsock_alloc(size_t size)
{
	struct pbuf *pbuf;

	/*
	 * The data will currently always fit in a single pool buffer.  Just in
	 * case this changes in the future, warn and fail cleanly.  The rest of
	 * the code is not able to deal with buffer chains as it is, although
	 * that can be changed if necessary.
	 */
	if (size > MEMPOOL_BUFSIZE) {
		printf("LWIP: routing socket packet too large (%zu)\n", size);

		return NULL;
	}

	pbuf = pbuf_alloc(PBUF_RAW, size, PBUF_RAM);

	assert(pbuf == NULL || pbuf->tot_len == pbuf->len);

	return pbuf;
}

/*
 * Initialize a routing addresses map.
 */
static void
rtsock_rta_init(struct rtsock_rta * rta)
{

	memset(rta, 0, sizeof(*rta));
}

/*
 * Set an entry in a routing addresses map.  When computing sizes, 'ptr' may be
 * NULL.
 */
static void
rtsock_rta_set(struct rtsock_rta * rta, unsigned int rtax, const void * ptr,
	socklen_t len)
{

	assert(rtax < RTAX_MAX);

	rta->rta_ptr[rtax] = ptr;
	rta->rta_len[rtax] = len;
}

/*
 * Copy out a message with a header and any entries in a routing addresses map,
 * either into a pbuf allocated for this purpose, or to a RMIB (sysctl) caller,
 * at the given offset.  If no destination is given ('pbuf ' and 'oldp' are
 * both NULL), compute just the size of the resulting data.  Otherwise, set the
 * length and address mask fields in the header as a side effect.  Return the
 * number of bytes copied on success, and if 'pbuf' is not NULL, it is filled
 * with a pointer to the newly allocated pbuf.  Return a negative error code on
 * failure.  Note that when computing the size only, any actual data pointers
 * ('hdr', 'msglen', 'addrs', and the pointers in 'rta') may be NULL or even
 * invalid, even though the corresponding sizes should still be supplied.
 */
static ssize_t
rtsock_rta_finalize(void * hdr, size_t hdrlen, u_short * msglen, int * addrs,
	const struct rtsock_rta * rta, struct pbuf ** pbuf,
	struct rmib_oldp * oldp, ssize_t off)
{
	iovec_t iov[1 + RTAX_MAX * 2];
	size_t len, padlen, totallen;
	unsigned int i, iovcnt;
	int mask;

	assert(pbuf == NULL || oldp == NULL);
	assert(pbuf == NULL || off == 0);
	assert(RT_ROUNDUP(hdrlen) == hdrlen);

	iov[0].iov_addr = (vir_bytes)hdr;
	iov[0].iov_size = hdrlen;
	iovcnt = 1;

	totallen = hdrlen;
	mask = 0;

	/*
	 * The addresses in the given RTA map, as present, should be stored in
	 * the numbering order of the map.
	 */
	for (i = 0; i < RTAX_MAX; i++) {
		if (rta->rta_ptr[i] == NULL)
			continue;

		if ((len = rta->rta_len[i]) > 0) {
			assert(iovcnt < __arraycount(iov));
			iov[iovcnt].iov_addr = (vir_bytes)rta->rta_ptr[i];
			iov[iovcnt++].iov_size = len;
		}

		/* Note that RT_ROUNDUP(0) is not 0.. */
		if ((padlen = RT_ROUNDUP(len) - len) > 0) {
			assert(iovcnt < __arraycount(iov));
			iov[iovcnt].iov_addr = (vir_bytes)rtsock_padbuf;
			iov[iovcnt++].iov_size = padlen;
		}

		totallen += len + padlen;
		mask |= (1 << i);	/* convert RTAX_ to RTA_ */
	}

	/* If only the length was requested, return it now. */
	if (pbuf == NULL && oldp == NULL)
		return totallen;

	/*
	 * Casting 'hdr' would violate C99 strict aliasing rules, but the
	 * address mask is not always at the same location anyway.
	 */
	*msglen = totallen;
	*addrs = mask;

	if (pbuf != NULL) {
		if ((*pbuf = rtsock_alloc(totallen)) == NULL)
			return ENOMEM;

		return util_coalesce((char *)(*pbuf)->payload, totallen, iov,
		    iovcnt);
	} else
		return rmib_vcopyout(oldp, off, iov, iovcnt);
}

/*
 * Reduce the size of a network mask to the bytes actually used.  It is highly
 * doubtful that this extra complexity pays off in any form, but it is what the
 * BSDs historically do.  We currently implement compression for IPv4 only.
 */
static void
rtsock_compress_netmask(struct sockaddr * sa)
{
	struct sockaddr_in sin;
	uint32_t addr;

	if (sa->sa_family != AF_INET)
		return; /* nothing to do */

	memcpy(&sin, sa, sizeof(sin));	/* no type punning.. (sigh) */

	addr = htonl(sin.sin_addr.s_addr);

	if (addr & 0x000000ff)
		sa->sa_len = 8;
	else if (addr & 0x0000ffff)
		sa->sa_len = 7;
	else if (addr & 0x00ffffff)
		sa->sa_len = 6;
	else if (addr != 0)
		sa->sa_len = 5;
	else
		sa->sa_len = 0;
}

/*
 * Expand a possibly compressed IPv4 or IPv6 network mask, given as 'sa', into
 * 'mask'.  Return TRUE if expansion succeeded.  In that case, the resulting
 * mask must have sa.sa_len and sa.sa_family filled in correctly, and have the
 * appropriate size for its address family.  Return FALSE if expansion failed
 * and an error should be returned to the caller.
 */
static int
rtsock_expand_netmask(union sockaddr_any * mask, const struct sockaddr * sa)
{

	if (sa->sa_len > sizeof(*mask))
		return FALSE;

	memset(mask, 0, sizeof(*mask));
	memcpy(mask, sa, sa->sa_len);

	/*
	 * Amazingly, even the address family may be chopped off, in which case
	 * an IPv4 address is implied.
	 */
	if (sa->sa_len >= offsetof(struct sockaddr, sa_data) &&
	    sa->sa_family == AF_INET6) {
		if (sa->sa_len > sizeof(struct sockaddr_in6))
			return FALSE;

		mask->sa.sa_len = sizeof(struct sockaddr_in6);
		mask->sa.sa_family = AF_INET6;
	} else {
		if (sa->sa_len > sizeof(struct sockaddr_in))
			return FALSE;

		mask->sa.sa_len = sizeof(struct sockaddr_in);
		mask->sa.sa_family = AF_INET;
	}

	return TRUE;
}

/*
 * Create a routing socket.
 */
sockid_t
rtsock_socket(int type, int protocol, struct sock ** sockp,
	const struct sockevent_ops ** ops)
{
	struct rtsock *rt;

	/*
	 * There is no superuser check here: regular users are allowed to issue
	 * (only) RTM_GET requests on routing sockets.
	 */
	if (type != SOCK_RAW)
		return EPROTOTYPE;

	/* We could accept only the protocols we know, but this is fine too. */
	if (protocol < 0 || protocol >= AF_MAX)
		return EPROTONOSUPPORT;

	if (TAILQ_EMPTY(&rt_freelist))
		return ENOBUFS;

	rt = TAILQ_FIRST(&rt_freelist);
	TAILQ_REMOVE(&rt_freelist, rt, rt_next);

	rt->rt_flags = 0;
	rt->rt_family = protocol;
	rt->rt_rcvhead = NULL;
	rt->rt_rcvtailp = &rt->rt_rcvhead;
	rt->rt_rcvlen = 0;
	rt->rt_rcvbuf = RT_RCVBUF_DEF;

	TAILQ_INSERT_HEAD(&rt_activelist, rt, rt_next);

	*sockp = &rt->rt_sock;
	*ops = &rtsock_ops;
	return SOCKID_RT | (sockid_t)(rt - rt_array);
}

/*
 * Enqueue data on the receive queue of a routing socket.  The caller must have
 * checked whether the receive buffer size allows for the receipt of the data.
 */
static void
rtsock_enqueue(struct rtsock * rt, struct pbuf * pbuf)
{

	*rt->rt_rcvtailp = pbuf;
	rt->rt_rcvtailp = pchain_end(pbuf);
	rt->rt_rcvlen += pchain_size(pbuf);

	sockevent_raise(&rt->rt_sock, SEV_RECV);
}

/*
 * Determine whether a routing message for address family 'family', originated
 * from routing socket 'rtsrc' if not NULL, should be sent to routing socket
 * 'rt'.  Return TRUE if the message should be sent to this socket, or FALSE
 * if it should not.
 */
static int
rtsock_can_send(struct rtsock *rt, struct rtsock *rtsrc, int family)
{

	/* Do not send anything on sockets shut down for reading. */
	if (sockevent_is_shutdown(&rt->rt_sock, SFL_SHUT_RD))
		return FALSE;

	/*
	 * Do not send a reply message to the source of the request if the
	 * source is not interested in replies to its own requests.
	 */
	if (rt == rtsrc && (rt->rt_flags & RTF_NOLOOPBACK))
		return FALSE;

	/*
	 * For address family specific messages, make sure the routing socket
	 * is interested in that family.  Make an exception if the socket was
	 * the source of the request, though: we currently do not prevent user
	 * processes from issuing commands for the "wrong" family.
	 */
	if (rt->rt_family != AF_UNSPEC && family != AF_UNSPEC &&
	    rt->rt_family != family && rt != rtsrc)
		return FALSE;

	/*
	 * See whether the receive queue of the socket is already full.  We do
	 * not consider the size of the current request, in order to not drop
	 * larger messages and then enqueue smaller ones.
	 */
	if (rt->rt_rcvlen >= rt->rt_rcvbuf)
		return FALSE;

	/* All is well: go on and deliver the message. */
	return TRUE;
}

/*
 * Send the routing message in 'pbuf' to the given routing socket if possible,
 * or check whether such a message could be sent to that socket if 'pbuf' is
 * NULL.  In the former case, the function takes ownership of 'pbuf'.  The
 * given routing socket is assumed to be the source of the routing request that
 * generated this message.  In the latter case, the function returns TRUE if
 * the socket would take the message or FALSE if not.  If 'family' is not
 * AF_UNSPEC, it is to be the address family of the message.
 */
static int
rtsock_msg_one(struct rtsock * rt, int family, struct pbuf * pbuf)
{

	if (rtsock_can_send(rt, rt, family)) {
		if (pbuf != NULL)
			rtsock_enqueue(rt, pbuf);

		return TRUE;
	} else {
		if (pbuf != NULL)
			pbuf_free(pbuf);

		return FALSE;
	}
}

/*
 * Send the routing message in 'pbuf' to all matching routing sockets, or check
 * whether there are any such matching routing sockets if 'pbuf' is NULL.  In
 * the former case, the function takes ownership of 'pbuf'.  In the latter
 * case, the function returns TRUE if there are any matching sockets or FALSE
 * if there are none.  If 'rtsrc' is not NULL, it is to be the routing socket
 * that is the source of the message.  If 'family' is not AF_UNSPEC, it is to
 * be the address family of the message.
 */
static int
rtsock_msg_match(struct rtsock * rtsrc, int family, struct pbuf * pbuf)
{
	struct rtsock *rt, *rtprev;
	struct pbuf *pcopy;

	rtprev = NULL;

	TAILQ_FOREACH(rt, &rt_activelist, rt_next) {
		if (!rtsock_can_send(rt, rtsrc, family))
			continue;

		/*
		 * There is at least one routing socket that is interested in
		 * receiving this message, and able to receive it.
		 */
		if (pbuf == NULL)
			return TRUE;

		/*
		 * We need to make copies of the generated message for all but
		 * the last matching socket, which gets the original.  If we're
		 * out of memory, free the original and stop: there are more
		 * important things to spend memory on than routing sockets.
		 */
		if (rtprev != NULL) {
			if ((pcopy = rtsock_alloc(pbuf->tot_len)) == NULL) {
				pbuf_free(pbuf);

				return TRUE;
			}

			if (pbuf_copy(pcopy, pbuf) != ERR_OK)
				panic("unexpected pbuf copy failure");

			rtsock_enqueue(rtprev, pcopy);
		}

		rtprev = rt;
	}

	if (rtprev != NULL)
		rtsock_enqueue(rtprev, pbuf);
	else if (pbuf != NULL)
		pbuf_free(pbuf);

	return (rtprev != NULL);
}

/*
 * Dequeue and free the head of the receive queue of a routing socket.
 */
static void
rtsock_dequeue(struct rtsock * rt)
{
	struct pbuf *pbuf, **pnext;
	size_t size;

	pbuf = rt->rt_rcvhead;
	assert(pbuf != NULL);

	pnext = pchain_end(pbuf);
	size = pchain_size(pbuf);

	if ((rt->rt_rcvhead = *pnext) == NULL)
		rt->rt_rcvtailp = &rt->rt_rcvhead;

	assert(rt->rt_rcvlen >= size);
	rt->rt_rcvlen -= size;

	*pnext = NULL;
	pbuf_free(pbuf);
}

/*
 * Process a routing message sent on a socket.  Return OK on success, in which
 * case the caller assumes that the processing routine has sent a reply to the
 * user and possibly other routing sockets.  Return a negative error code on
 * failure, in which case the caller will send the reply to the user instead.
 */
static int
rtsock_process(struct rtsock *rt, struct rt_msghdr * rtm, char * buf,
	size_t len, int is_root)
{
	struct rtsock_request rtr;
	struct rtsock_rta rta;
	const struct sockaddr *netmask;
	struct sockaddr sa;
	union sockaddr_any mask;
	size_t off;
	int i;

	if (rtm->rtm_msglen != len)
		return EINVAL;

	if (rtm->rtm_version != RTM_VERSION) {
		printf("LWIP: PID %d uses routing sockets version %u\n",
			rtm->rtm_pid, rtm->rtm_version);

		return EPROTONOSUPPORT;
	}

	/*
	 * Make sure that we won't misinterpret the rest of the message.  While
	 * looking at the message type, also make sure non-root users can only
	 * ever issue RTM_GET requests.
	 */
	switch (rtm->rtm_type) {
	case RTM_ADD:
	case RTM_DELETE:
	case RTM_CHANGE:
	case RTM_LOCK:
		if (!is_root)
			return EPERM;

		/* FALLTHROUGH */
	case RTM_GET:
		break;

	default:
		return EOPNOTSUPP;
	}

	/*
	 * Extract all given addresses.  We do not actually support all types
	 * of entries, but we cannot skip the ones we do not need either.
	 */
	rtsock_rta_init(&rta);

	off = sizeof(*rtm);
	assert(off == RT_ROUNDUP(off));

	for (i = 0; i < RTAX_MAX; i++) {
		if (!(rtm->rtm_addrs & (1 << i)))
			continue;

		if (off + offsetof(struct sockaddr, sa_data) > len)
			return EINVAL;

		/*
		 * It is safe to access sa_len and even sa_family in all cases,
		 * in particular even when the structure is of size zero.
		 */
		assert(offsetof(struct sockaddr, sa_data) <= RT_ROUNDUP(0));

		memcpy(&sa, &buf[off], offsetof(struct sockaddr, sa_data));

		if (off + sa.sa_len > len)
			return EINVAL;

		rtsock_rta_set(&rta, i, &buf[off], sa.sa_len);

		off += RT_ROUNDUP((size_t)sa.sa_len);
	}

	/*
	 * Expand the given netmask if it is in compressed IPv4 form.  We do
	 * this here because it is particular to routing sockets; we also do
	 * the compression in this module.  Note how the compression may even
	 * strip off the address family; really, who came up with this ****?
	 */
	netmask = (const struct sockaddr *)rta.rta_ptr[RTAX_NETMASK];

	if (netmask != NULL) {
		if (!rtsock_expand_netmask(&mask, netmask))
			return EINVAL;

		rtsock_rta_set(&rta, RTAX_NETMASK, &mask, mask.sa.sa_len);
	}

	/*
	 * Actually process the command.  Pass on enough information so that a
	 * reply can be generated on success.  The abstraction as sketched at
	 * the top of the file imposes that we pass quite a few parameters.
	 */
	rtr.rtr_src = rt;
	rtr.rtr_pid = rtm->rtm_pid;
	rtr.rtr_seq = rtm->rtm_seq;
	rtr.rtr_getif = (rtm->rtm_type == RTM_GET &&
	    (rta.rta_ptr[RTAX_IFP] != NULL || rta.rta_ptr[RTAX_IFA] != NULL));

	return route_process(rtm->rtm_type,
	    (const struct sockaddr *)rta.rta_ptr[RTAX_DST],
	    (const struct sockaddr *)rta.rta_ptr[RTAX_NETMASK],
	    (const struct sockaddr *)rta.rta_ptr[RTAX_GATEWAY],
	    (const struct sockaddr *)rta.rta_ptr[RTAX_IFP],
	    (const struct sockaddr *)rta.rta_ptr[RTAX_IFA],
	    rtm->rtm_flags, rtm->rtm_inits, &rtm->rtm_rmx, &rtr);
}

/*
 * Perform preliminary checks on a send request.
 */
static int
rtsock_pre_send(struct sock * sock __unused, size_t len,
	socklen_t ctl_len __unused, const struct sockaddr * addr,
	socklen_t addr_len __unused, endpoint_t user_endpt __unused, int flags)
{

	if (flags != 0)
		return EOPNOTSUPP;

	if (addr != NULL)
		return EISCONN;

	/*
	 * For the most basic failures - that is, we cannot even manage to
	 * receive the request - we do not generate a reply message.
	 */
	if (len < sizeof(struct rt_msghdr))
		return ENOBUFS;
	if (len > RT_SNDBUF_MAX)
		return EMSGSIZE;

	return OK;
}

/*
 * Send data on a routing socket.
 */
static int
rtsock_send(struct sock * sock, const struct sockdriver_data * data,
	size_t len, size_t * offp, const struct sockdriver_data * ctl __unused,
	socklen_t ctl_len __unused, socklen_t * ctl_off __unused,
	const struct sockaddr * addr __unused, socklen_t addr_len __unused,
	endpoint_t user_endpt, int flags __unused, size_t min __unused)
{
	struct rtsock *rt = (struct rtsock *)sock;
	char buf[RT_SNDBUF_MAX] __aligned(4);
	struct rt_msghdr rtm;
	struct pbuf *pbuf;
	uid_t euid;
	int r, is_root;

	/* Copy in the request, and adjust some fields right away. */
	assert(len >= sizeof(rtm));
	assert(len <= sizeof(buf));

	if ((r = sockdriver_copyin(data, 0, buf, len)) != OK)
		return r;

	memcpy(&rtm, buf, sizeof(rtm));
	rtm.rtm_errno = 0;
	rtm.rtm_flags &= ~RTF_DONE;
	rtm.rtm_pid = getepinfo(user_endpt, &euid, NULL /*gid*/);

	is_root = (euid == ROOT_EUID);

	/* Process the request. */
	r = rtsock_process(rt, &rtm, buf, len, is_root);

	/*
	 * If the request has been processed successfully, a reply has been
	 * sent already, possibly also to other routing sockets.  Here, we
	 * handle the case that the request has resulted in failure, in which
	 * case we send a reply to the caller only.  This behavior is different
	 * from the traditional BSD behavior, which also sends failure replies
	 * to other sockets.  Our motivation is that while other parties are
	 * never going to be interested in failures anyway, it is in fact easy
	 * for an unprivileged user process to abuse the failure-reply system
	 * in order to fake other types of routing messages (e.g., RTM_IFINFO)
	 * to other parties.  By sending failure replies only to the requestor,
	 * we eliminate the need for security-sensitive request validation.
	 */
	if (r != OK && rtsock_can_send(rt, rt, AF_UNSPEC)) {
		rtm.rtm_errno = -r;

		if ((pbuf = rtsock_alloc(len)) == NULL)
			return ENOMEM;

		/* For the reply, reuse the request message largely as is. */
		memcpy(pbuf->payload, &rtm, sizeof(rtm));
		if (len > sizeof(rtm))
			memcpy((uint8_t *)pbuf->payload + sizeof(rtm),
			    buf + sizeof(rtm), len - sizeof(rtm));

		rtsock_enqueue(rt, pbuf);
	} else if (r == OK)
		*offp = len;

	return r;
}

/*
 * Perform preliminary checks on a receive request.
 */
static int
rtsock_pre_recv(struct sock * sock __unused, endpoint_t user_endpt __unused,
	int flags)
{

	/*
	 * We accept the same flags across all socket types in LWIP, and then
	 * simply ignore the ones we do not support for routing sockets.
	 */
	if ((flags & ~(MSG_PEEK | MSG_WAITALL)) != 0)
		return EOPNOTSUPP;

	return OK;
}

/*
 * Receive data on a routing socket.
 */
static int
rtsock_recv(struct sock * sock, const struct sockdriver_data * data,
	size_t len, size_t * off, const struct sockdriver_data * ctl __unused,
	socklen_t ctl_len __unused, socklen_t * ctl_off __unused,
	struct sockaddr * addr, socklen_t * addr_len,
	endpoint_t user_endpt __unused, int flags, size_t min __unused,
	int * rflags)
{
	struct rtsock *rt = (struct rtsock *)sock;
	struct pbuf *pbuf;
	int r;

	if ((pbuf = rt->rt_rcvhead) == NULL)
		return SUSPEND;

	/* Copy out the data to the calling user process. */
	if (len >= pbuf->tot_len)
		len = pbuf->tot_len;
	else
		*rflags |= MSG_TRUNC;

	r = util_copy_data(data, len, 0, pbuf, 0, FALSE /*copy_in*/);

	if (r != OK)
		return r;

	/* Generate a dummy source address. */
	addr->sa_len = RTSOCK_ADDR_LEN;
	addr->sa_family = AF_ROUTE;
	*addr_len = RTSOCK_ADDR_LEN;

	/* Discard the data now, unless we were instructed to peek only. */
	if (!(flags & MSG_PEEK))
		rtsock_dequeue(rt);

	/* Return the received part of the data length. */
	*off = len;
	return OK;
}

/*
 * Test whether data can be received on a routing socket, and if so, how many
 * bytes of data.
 */
static int
rtsock_test_recv(struct sock * sock, size_t min __unused, size_t * size)
{
	struct rtsock *rt = (struct rtsock *)sock;

	if (rt->rt_rcvhead == NULL)
		return SUSPEND;

	if (size != NULL)
		*size = rt->rt_rcvhead->tot_len;
	return OK;
}

/*
 * Set socket options on a routing socket.
 */
static int
rtsock_setsockopt(struct sock * sock, int level, int name,
	const struct sockdriver_data * data, socklen_t len)
{
	struct rtsock *rt = (struct rtsock *)sock;
	int r, val;

	if (level == SOL_SOCKET) {
		switch (name) {
		case SO_USELOOPBACK:
			if ((r = sockdriver_copyin_opt(data, &val, sizeof(val),
			    len)) != OK)
				return r;

			if (!val)
				rt->rt_flags |= RTF_NOLOOPBACK;
			else
				rt->rt_flags &= ~RTF_NOLOOPBACK;

			return OK;

		case SO_RCVBUF:
			if ((r = sockdriver_copyin_opt(data, &val, sizeof(val),
			    len)) != OK)
				return r;

			if (val < RT_RCVBUF_MIN || val > RT_RCVBUF_MAX)
				return EINVAL;

			rt->rt_rcvbuf = (size_t)val;

			return OK;
		}
	}

	return ENOPROTOOPT;
}

/*
 * Retrieve socket options on a routing socket.
 */
static int
rtsock_getsockopt(struct sock * sock, int level, int name,
	const struct sockdriver_data * data, socklen_t * len)
{
	struct rtsock *rt = (struct rtsock *)sock;
	int val;

	if (level == SOL_SOCKET) {
		switch (name) {
		case SO_USELOOPBACK:
			val = !(rt->rt_flags & RTF_NOLOOPBACK);

			return sockdriver_copyout_opt(data, &val, sizeof(val),
			    len);

		case SO_RCVBUF:
			val = rt->rt_rcvbuf;

			return sockdriver_copyout_opt(data, &val, sizeof(val),
			    len);
		}
	}

	return ENOPROTOOPT;
}

/*
 * Retrieve the local or remote socket address of a routing socket.
 */
static int
rtsock_getname(struct sock * sock __unused, struct sockaddr * addr,
	socklen_t * addr_len)
{

	/* This is entirely useless but apparently common between OSes. */
	addr->sa_len = RTSOCK_ADDR_LEN;
	addr->sa_family = AF_ROUTE;
	*addr_len = RTSOCK_ADDR_LEN;

	return OK;
}

/*
 * Drain the receive queue of a routing socket.
 */
static void
rtsock_drain(struct rtsock * rt)
{

	while (rt->rt_rcvhead != NULL)
		rtsock_dequeue(rt);
}

/*
 * Shut down a routing socket for reading and/or writing.
 */
static int
rtsock_shutdown(struct sock * sock, unsigned int mask)
{
	struct rtsock *rt = (struct rtsock *)sock;

	if (mask & SFL_SHUT_RD)
		rtsock_drain(rt);

	return OK;
}

/*
 * Close a routing socket.
 */
static int
rtsock_close(struct sock * sock, int force __unused)
{
	struct rtsock *rt = (struct rtsock *)sock;

	rtsock_drain(rt);

	return OK;
}

/*
 * Free up a closed routing socket.
 */
static void
rtsock_free(struct sock * sock)
{
	struct rtsock *rt = (struct rtsock *)sock;

	TAILQ_REMOVE(&rt_activelist, rt, rt_next);

	TAILQ_INSERT_HEAD(&rt_freelist, rt, rt_next);
}

static const struct sockevent_ops rtsock_ops = {
	.sop_pre_send		= rtsock_pre_send,
	.sop_send		= rtsock_send,
	.sop_pre_recv		= rtsock_pre_recv,
	.sop_recv		= rtsock_recv,
	.sop_test_recv		= rtsock_test_recv,
	.sop_setsockopt		= rtsock_setsockopt,
	.sop_getsockopt		= rtsock_getsockopt,
	.sop_getsockname	= rtsock_getname,
	.sop_getpeername	= rtsock_getname,
	.sop_shutdown		= rtsock_shutdown,
	.sop_close		= rtsock_close,
	.sop_free		= rtsock_free
};

/*
 * Send an interface announcement message about the given interface.  If
 * 'arrival' is set, the interface has just been created; otherwise, the
 * interface is about to be destroyed.
 */
void
rtsock_msg_ifannounce(struct ifdev * ifdev, int arrival)
{
	struct if_announcemsghdr ifan;
	struct pbuf *pbuf;

	if (!rtsock_msg_match(NULL /*rtsrc*/, AF_UNSPEC, NULL /*pbuf*/))
		return;

	memset(&ifan, 0, sizeof(ifan));
	ifan.ifan_msglen = sizeof(ifan);
	ifan.ifan_version = RTM_VERSION;
	ifan.ifan_type = RTM_IFANNOUNCE;
	ifan.ifan_index = ifdev_get_index(ifdev);
	strlcpy(ifan.ifan_name, ifdev_get_name(ifdev), sizeof(ifan.ifan_name));
	ifan.ifan_what = (arrival) ? IFAN_ARRIVAL : IFAN_DEPARTURE;

	if ((pbuf = rtsock_alloc(sizeof(ifan))) == NULL)
		return;
	memcpy(pbuf->payload, &ifan, sizeof(ifan));

	rtsock_msg_match(NULL /*rtsrc*/, AF_UNSPEC, pbuf);
}

/*
 * Send an interface information routing message.
 */
void
rtsock_msg_ifinfo(struct ifdev * ifdev)
{
	struct if_msghdr ifm;
	struct pbuf *pbuf;

	if (!rtsock_msg_match(NULL /*rtsrc*/, AF_UNSPEC, NULL /*pbuf*/))
		return;

	memset(&ifm, 0, sizeof(ifm));
	ifm.ifm_msglen = sizeof(ifm);
	ifm.ifm_version = RTM_VERSION;
	ifm.ifm_type = RTM_IFINFO;
	ifm.ifm_addrs = 0;
	ifm.ifm_flags = ifdev_get_ifflags(ifdev);
	ifm.ifm_index = ifdev_get_index(ifdev);
	memcpy(&ifm.ifm_data, ifdev_get_ifdata(ifdev), sizeof(ifm.ifm_data));

	if ((pbuf = rtsock_alloc(sizeof(ifm))) == NULL)
		return;
	memcpy(pbuf->payload, &ifm, sizeof(ifm));

	rtsock_msg_match(NULL /*rtsrc*/, AF_UNSPEC, pbuf);
}

/*
 * Set up a RTA map and an interface address structure for use in a RTM_xxxADDR
 * routing message.
 */
static void
rtsock_rta_init_ifam(struct rtsock_rta * rta, struct ifa_msghdr * ifam,
	struct ifdev * ifdev, unsigned int type, struct sockaddr_dlx * sdlx)
{

	memset(ifam, 0, sizeof(*ifam));
	ifam->ifam_version = RTM_VERSION;
	ifam->ifam_type = type;
	ifam->ifam_flags = 0;
	ifam->ifam_index = ifdev_get_index(ifdev);
	ifam->ifam_metric = ifdev_get_metric(ifdev);

	rtsock_rta_init(rta);

	ifaddr_dl_get(ifdev, (ifaddr_dl_num_t)0, sdlx);

	rtsock_rta_set(rta, RTAX_IFP, sdlx, sdlx->sdlx_len);
}

/*
 * Add a specific link-layer address for an interface to the given RTA map.
 */
static void
rtsock_rta_add_dl(struct rtsock_rta * rta, struct ifdev * ifdev,
	ifaddr_dl_num_t num, struct sockaddr_dlx * sdlx)
{

	/* Obtain the address data. */
	ifaddr_dl_get(ifdev, num, sdlx);

	/* Add the interface address. */
	rtsock_rta_set(rta, RTAX_IFA, sdlx, sdlx->sdlx_len);

	/*
	 * NetBSD also adds a RTAX_NETMASK entry here.  At this moment it is
	 * not clear to me why, and it is a pain to make, so for now we do not.
	 */
}

/*
 * Send a routing message about a new, changed, or deleted datalink address for
 * the given interface.
 */
void
rtsock_msg_addr_dl(struct ifdev * ifdev, unsigned int type,
	ifaddr_dl_num_t num)
{
	struct rtsock_rta rta;
	struct ifa_msghdr ifam;
	struct sockaddr_dlx name, addr;
	struct pbuf *pbuf;

	if (!rtsock_msg_match(NULL /*rtsrc*/, AF_LINK, NULL /*pbuf*/))
		return;

	rtsock_rta_init_ifam(&rta, &ifam, ifdev, type, &name);

	rtsock_rta_add_dl(&rta, ifdev, num, &addr);

	if (rtsock_rta_finalize(&ifam, sizeof(ifam), &ifam.ifam_msglen,
	    &ifam.ifam_addrs, &rta, &pbuf, NULL, 0) > 0)
		rtsock_msg_match(NULL /*rtsrc*/, AF_LINK, pbuf);
}

/*
 * Add a specific IPv4 address for an interface to the given RTA map.
 */
static void
rtsock_rta_add_v4(struct rtsock_rta * rta, struct ifdev * ifdev,
	ifaddr_v4_num_t num, struct sockaddr_in sin[4])
{

	/* Obtain the address data. */
	(void)ifaddr_v4_get(ifdev, num, &sin[0], &sin[1], &sin[2], &sin[3]);

	/* Add the interface address. */
	rtsock_rta_set(rta, RTAX_IFA, &sin[0], sin[0].sin_len);

	/* Add the netmask, after compressing it. */
	rtsock_compress_netmask((struct sockaddr *)&sin[1]);

	rtsock_rta_set(rta, RTAX_NETMASK, &sin[1], sin[1].sin_len);

	/* Possibly add a broadcast or destination address. */
	if (sin[2].sin_len != 0)
		rtsock_rta_set(rta, RTAX_BRD, &sin[2], sin[2].sin_len);
	else if (sin[3].sin_len != 0)
		rtsock_rta_set(rta, RTAX_DST, &sin[3], sin[3].sin_len);
}

/*
 * Send a routing message about a new or deleted IPv4 address for the given
 * interface.
 */
void
rtsock_msg_addr_v4(struct ifdev * ifdev, unsigned int type,
	ifaddr_v4_num_t num)
{
	struct rtsock_rta rta;
	struct ifa_msghdr ifam;
	struct sockaddr_dlx name;
	struct sockaddr_in sin[4];
	struct pbuf *pbuf;

	if (!rtsock_msg_match(NULL /*rtsrc*/, AF_INET, NULL /*pbuf*/))
		return;

	rtsock_rta_init_ifam(&rta, &ifam, ifdev, type, &name);

	rtsock_rta_add_v4(&rta, ifdev, num, sin);

	if (rtsock_rta_finalize(&ifam, sizeof(ifam), &ifam.ifam_msglen,
	    &ifam.ifam_addrs, &rta, &pbuf, NULL, 0) > 0)
		rtsock_msg_match(NULL /*rtsrc*/, AF_INET, pbuf);
}

/*
 * Add a specific IPv6 address for an interface to the given RTA map.
 */
static void
rtsock_rta_add_v6(struct rtsock_rta * rta, struct ifdev * ifdev,
	ifaddr_v6_num_t num, struct sockaddr_in6 sin6[3])
{

	/* Obtain the address data. */
	ifaddr_v6_get(ifdev, num, &sin6[0], &sin6[1], &sin6[2]);

	/* Add the interface address. */
	rtsock_rta_set(rta, RTAX_IFA, &sin6[0], sin6[0].sin6_len);

	/* Add the netmask, after compressing it (a no-op at the moment). */
	rtsock_compress_netmask((struct sockaddr *)&sin6[1]);

	rtsock_rta_set(rta, RTAX_NETMASK, &sin6[1], sin6[1].sin6_len);

	/* Possibly add a destination address. */
	if (sin6[2].sin6_len != 0)
		rtsock_rta_set(rta, RTAX_DST, &sin6[2], sin6[2].sin6_len);
}

/*
 * Send a routing message about a new or deleted IPv6 address for the given
 * interface.
 */
void
rtsock_msg_addr_v6(struct ifdev * ifdev, unsigned int type,
	ifaddr_v6_num_t num)
{
	struct rtsock_rta rta;
	struct ifa_msghdr ifam;
	struct sockaddr_dlx name;
	struct sockaddr_in6 sin6[3];
	struct pbuf *pbuf;

	if (!rtsock_msg_match(NULL /*rtsrc*/, AF_INET6, NULL /*pbuf*/))
		return;

	rtsock_rta_init_ifam(&rta, &ifam, ifdev, type, &name);

	rtsock_rta_add_v6(&rta, ifdev, num, sin6);

	if (rtsock_rta_finalize(&ifam, sizeof(ifam), &ifam.ifam_msglen,
	    &ifam.ifam_addrs, &rta, &pbuf, NULL, 0) > 0)
		rtsock_msg_match(NULL /*rtsrc*/, AF_INET6, pbuf);
}

/*
 * Send an RTM_MISS routing message about an address for which no route was
 * found.  The caller must provide the address in the appropriate form and
 * perform any per-address rate limiting.
 */
void
rtsock_msg_miss(const struct sockaddr * addr)
{
	struct rt_msghdr rtm;
	struct rtsock_rta rta;
	struct pbuf *pbuf;

	/*
	 * Unfortunately the destination address has already been generated (as
	 * 'addr'), which is a big part of the work.  Still, skip the rest if
	 * there is no routing socket to deliver the message to.
	 */
	if (!rtsock_msg_match(NULL /*rtsrc*/, addr->sa_family, NULL /*pbuf*/))
		return;

	memset(&rtm, 0, sizeof(rtm));
	rtm.rtm_version = RTM_VERSION;
	rtm.rtm_type = RTM_MISS;

	rtsock_rta_init(&rta);

	rtsock_rta_set(&rta, RTAX_DST, addr, addr->sa_len);

	if (rtsock_rta_finalize(&rtm, sizeof(rtm), &rtm.rtm_msglen,
	    &rtm.rtm_addrs, &rta, &pbuf, NULL, 0) > 0)
		rtsock_msg_match(NULL /*rtsrc*/, addr->sa_family, pbuf);
}

/*
 * Generate routing socket data for a route, for either routing socket
 * broadcasting or a sysctl(7) request.  The route is given as 'route'.  The
 * type of the message (RTM_) is given as 'type'.  The resulting routing
 * message header is stored in 'rtm' and an address vector is stored in 'rta'.
 * The latter may point to addresses generated in 'addr', 'mask', 'gateway',
 * and optionally (if not NULL) 'ifp' and 'ifa'.  The caller is responsible for
 * combining the results into an appropriate routing message.
 */
static void
rtsock_get_route(struct rt_msghdr * rtm, struct rtsock_rta * rta,
	union sockaddr_any * addr, union sockaddr_any * mask,
	union sockaddr_any * gateway, union sockaddr_any * ifp,
	union sockaddr_any * ifa, const struct route_entry * route,
	unsigned int type)
{
	struct ifdev *ifdev;
	unsigned int flags, use;

	route_get(route, addr, mask, gateway, ifp, ifa, &ifdev, &flags, &use);

	memset(rtm, 0, sizeof(*rtm));
	rtm->rtm_version = RTM_VERSION;
	rtm->rtm_type = type;
	rtm->rtm_flags = flags;
	rtm->rtm_index = ifdev_get_index(ifdev);
	rtm->rtm_use = use;

	rtsock_rta_init(rta);

	rtsock_rta_set(rta, RTAX_DST, addr, addr->sa.sa_len);

	if (!(flags & RTF_HOST)) {
		rtsock_compress_netmask(&mask->sa);

		rtsock_rta_set(rta, RTAX_NETMASK, mask, mask->sa.sa_len);
	}

	rtsock_rta_set(rta, RTAX_GATEWAY, gateway, gateway->sa.sa_len);

	if (ifp != NULL)
		rtsock_rta_set(rta, RTAX_IFP, ifp, ifp->sa.sa_len);

	if (ifa != NULL)
		rtsock_rta_set(rta, RTAX_IFA, ifa, ifa->sa.sa_len);
}

/*
 * Send a routing message about a route, with the given type which may be one
 * of RTM_ADD, RTM_CHANGE, RTM_DELETE, RTM_LOCK, and RTM_GET.  The routing
 * socket request information 'rtr', if not NULL, provides additional
 * information about the routing socket that was the source of the request (if
 * any), various fields that should be echoed, and (for RTM_GET) whether to
 * add interface information to the output.
 */
void
rtsock_msg_route(const struct route_entry * route, unsigned int type,
	const struct rtsock_request * rtr)
{
	union sockaddr_any addr, mask, gateway, ifp, ifa;
	struct rt_msghdr rtm;
	struct rtsock_rta rta;
	struct rtsock *rtsrc;
	struct pbuf *pbuf;
	int family, getif;

	rtsrc = (rtr != NULL) ? rtr->rtr_src : NULL;
	family = (route_is_ipv6(route)) ? AF_INET6 : AF_INET;

	if (!rtsock_msg_match(rtsrc, family, NULL /*pbuf*/))
		return;

	getif = (rtr != NULL && rtr->rtr_getif);

	rtsock_get_route(&rtm, &rta, &addr, &mask, &gateway,
	    (getif) ? &ifp : NULL, (getif) ? &ifa : NULL, route, type);

	if (rtr != NULL) {
		rtm.rtm_flags |= RTF_DONE;
		rtm.rtm_pid = rtr->rtr_pid;
		rtm.rtm_seq = rtr->rtr_seq;
	}

	if (rtsock_rta_finalize(&rtm, sizeof(rtm), &rtm.rtm_msglen,
	    &rtm.rtm_addrs, &rta, &pbuf, NULL, 0) > 0)
		rtsock_msg_match(rtsrc, family, pbuf);
}

/*
 * Generate sysctl(7) output or length for the given routing table entry
 * 'route', provided that the route passes the flags filter 'filter'.  The
 * address length 'addr_len' is used to compute a cheap length estimate.  On
 * success, return the byte size of the output.  If the route was not a match
 * for the filter, return zero.  On failure, return a negative error code.
 */
static ssize_t
rtsock_info_rtable_entry(const struct route_entry * route, unsigned int filter,
	socklen_t addr_len, struct rmib_oldp * oldp, size_t off)
{
	union sockaddr_any addr, mask, gateway;
	struct rt_msghdr rtm;
	struct rtsock_rta rta;
	unsigned int flags;
	ssize_t len;

	flags = route_get_flags(route);

	/* Apparently, matching any of the flags (if given) is sufficient. */
	if (filter != 0 && (filter & flags) != 0)
		return 0;

	/* Size (over)estimation shortcut. */
	if (oldp == NULL) {
		len = sizeof(rtm) + RT_ROUNDUP(addr_len) +
		    RT_ROUNDUP(sizeof(gateway));

		if (!(flags & RTF_HOST))
			len += RT_ROUNDUP(addr_len);

		return len;
	}

	rtsock_get_route(&rtm, &rta, &addr, &mask, &gateway, NULL /*ifp*/,
	    NULL /*ifa*/, route, RTM_GET);

	return rtsock_rta_finalize(&rtm, sizeof(rtm), &rtm.rtm_msglen,
	    &rtm.rtm_addrs, &rta, NULL /*pbuf*/, oldp, off);
}

/*
 * Obtain routing table entries.
 */
static ssize_t
rtsock_info_rtable(struct rmib_oldp * oldp, int family, int filter)
{
	struct route_entry *route;
	ssize_t r, off;

	off = 0;

	if (family == AF_UNSPEC || family == AF_INET) {
		for (route = NULL; (route = route_enum_v4(route)) != NULL; ) {
			if ((r = rtsock_info_rtable_entry(route,
			    (unsigned int)filter, sizeof(struct sockaddr_in),
			    oldp, off)) < 0)
				return r;
			off += r;
		}
	}

	if (family == AF_UNSPEC || family == AF_INET6) {
		for (route = NULL; (route = route_enum_v6(route)) != NULL; ) {
			if ((r = rtsock_info_rtable_entry(route,
			    (unsigned int)filter, sizeof(struct sockaddr_in6),
			    oldp, off)) < 0)
				return r;
			off += r;
		}
	}

	/* TODO: should we add slack here? */
	return off;
}

/*
 * Generate routing socket data for an ARP table entry, for either routing
 * socket broadcasting or a sysctl(7) request.  The ARP table entry number is
 * given as 'num'.  The type of the message (RTM_) is given as 'type'.  The
 * resulting routing message header is stored in 'rtm' and an address vector is
 * stored in 'rta'.  The latter may point to addresses generated in 'addr' and
 * 'gateway'.  The caller is responsible for combining the results into an
 * appropriate routing message.
 */
static void
rtsock_get_arp(struct rt_msghdr * rtm, struct rtsock_rta * rta,
	struct sockaddr_in * addr, struct sockaddr_dlx * gateway,
	lldata_arp_num_t num, unsigned int type)
{
	struct ifdev *ifdev;
	unsigned int flags;

	lldata_arp_get(num, addr, gateway, &ifdev, &flags);

	memset(rtm, 0, sizeof(*rtm));
	rtm->rtm_version = RTM_VERSION;
	rtm->rtm_type = type;
	rtm->rtm_flags = flags;
	rtm->rtm_index = ifdev_get_index(ifdev);

	/* TODO: obtaining and reporting the proper expiry time, if any. */
	if (!(flags & RTF_STATIC))
		rtm->rtm_rmx.rmx_expire = (time_t)-1;

	rtsock_rta_init(rta);

	rtsock_rta_set(rta, RTAX_DST, addr, addr->sin_len);

	rtsock_rta_set(rta, RTAX_GATEWAY, gateway, gateway->sdlx_len);
}

/*
 * Send a routing message about an ARP table entry, with the given type which
 * may be one of RTM_ADD, RTM_CHANGE, RTM_DELETE, RTM_LOCK, and RTM_GET.  The
 * routing socket request information 'rtr', if not NULL, provides additional
 * information about the routing socket that was the source of the request (if
 * any) and various fields that should be echoed.
 */
void
rtsock_msg_arp(lldata_arp_num_t num, unsigned int type,
	const struct rtsock_request * rtr)
{
	struct sockaddr_in addr;
	struct sockaddr_dlx gateway;
	struct rt_msghdr rtm;
	struct rtsock_rta rta;
	struct pbuf *pbuf;

	assert(rtr != NULL);

	/*
	 * We do not maintain the link-local tables ourselves, and thus, we do
	 * not have a complete view of modifications to them.  In order not to
	 * confuse userland with inconsistent updates (e.g., deletion of
	 * previously unreported entries), send these routing messages to the
	 * source of the routing request only.
	 */
	if (!rtsock_msg_one(rtr->rtr_src, AF_INET, NULL /*pbuf*/))
		return;

	rtsock_get_arp(&rtm, &rta, &addr, &gateway, num, type);

	if (rtr != NULL) {
		rtm.rtm_flags |= RTF_DONE;
		rtm.rtm_pid = rtr->rtr_pid;
		rtm.rtm_seq = rtr->rtr_seq;
	}

	if (rtsock_rta_finalize(&rtm, sizeof(rtm), &rtm.rtm_msglen,
	    &rtm.rtm_addrs, &rta, &pbuf, NULL, 0) > 0)
		rtsock_msg_one(rtr->rtr_src, AF_INET, pbuf);
}

/*
 * Obtain ARP table entries.
 */
static ssize_t
rtsock_info_lltable_arp(struct rmib_oldp * oldp)
{
	struct sockaddr_in addr;
	struct sockaddr_dlx gateway;
	struct rt_msghdr rtm;
	struct rtsock_rta rta;
	lldata_arp_num_t num;
	ssize_t r, off;

	off = 0;

	for (num = 0; lldata_arp_enum(&num); num++) {
		/* Size (over)estimation shortcut. */
		if (oldp == NULL) {
			off += sizeof(struct rt_msghdr) +
			    RT_ROUNDUP(sizeof(addr)) +
			    RT_ROUNDUP(sizeof(gateway));

			continue;
		}

		rtsock_get_arp(&rtm, &rta, &addr, &gateway, num, RTM_GET);

		if ((r = rtsock_rta_finalize(&rtm, sizeof(rtm),
		    &rtm.rtm_msglen, &rtm.rtm_addrs, &rta, NULL /*pbuf*/, oldp,
		    off)) < 0)
			return r;
		off += r;
	}

	/* TODO: should we add slack here? */
	return off;
}

/*
 * Generate routing socket data for an NDP table entry, for either routing
 * socket broadcasting or a sysctl(7) request.  The NDP table entry number is
 * given as 'num'.  The type of the message (RTM_) is given as 'type'.  The
 * resulting routing message header is stored in 'rtm' and an address vector is
 * stored in 'rta'.  The latter may point to addresses generated in 'addr' and
 * 'gateway'.  The caller is responsible for combining the results into an
 * appropriate routing message.
 */
static void
rtsock_get_ndp(struct rt_msghdr * rtm, struct rtsock_rta * rta,
	struct sockaddr_in6 * addr, struct sockaddr_dlx * gateway,
	lldata_ndp_num_t num, unsigned int type)
{
	struct ifdev *ifdev;
	unsigned int flags;

	lldata_ndp_get(num, addr, gateway, &ifdev, &flags);

	memset(rtm, 0, sizeof(*rtm));
	rtm->rtm_version = RTM_VERSION;
	rtm->rtm_type = type;
	rtm->rtm_flags = flags;
	rtm->rtm_index = ifdev_get_index(ifdev);

	rtsock_rta_init(rta);

	rtsock_rta_set(rta, RTAX_DST, addr, addr->sin6_len);

	rtsock_rta_set(rta, RTAX_GATEWAY, gateway, gateway->sdlx_len);
}

/*
 * Send a routing message about an NDP table entry, with the given type which
 * may be one of RTM_ADD, RTM_CHANGE, RTM_DELETE, RTM_LOCK, and RTM_GET.  The
 * routing socket request information 'rtr', if not NULL, provides additional
 * information about the routing socket that was the source of the request (if
 * any) and various fields that should be echoed.
 */
void
rtsock_msg_ndp(lldata_ndp_num_t num, unsigned int type,
	const struct rtsock_request * rtr)
{
	struct sockaddr_in6 addr;
	struct sockaddr_dlx gateway;
	struct rt_msghdr rtm;
	struct rtsock_rta rta;
	struct pbuf *pbuf;

	assert(rtr != NULL);

	/*
	 * We do not maintain the link-local tables ourselves, and thus, we do
	 * not have a complete view of modifications to them.  In order not to
	 * confuse userland with inconsistent updates (e.g., deletion of
	 * previously unreported entries), send these routing messages to the
	 * source of the routing request only.
	 */
	if (!rtsock_msg_one(rtr->rtr_src, AF_INET6, NULL /*pbuf*/))
		return;

	rtsock_get_ndp(&rtm, &rta, &addr, &gateway, num, type);

	if (rtr != NULL) {
		rtm.rtm_flags |= RTF_DONE;
		rtm.rtm_pid = rtr->rtr_pid;
		rtm.rtm_seq = rtr->rtr_seq;
	}

	if (rtsock_rta_finalize(&rtm, sizeof(rtm), &rtm.rtm_msglen,
	    &rtm.rtm_addrs, &rta, &pbuf, NULL, 0) > 0)
		rtsock_msg_one(rtr->rtr_src, AF_INET6, pbuf);
}

/*
 * Obtain NDP table entries.
 */
static ssize_t
rtsock_info_lltable_ndp(struct rmib_oldp * oldp)
{
	struct rt_msghdr rtm;
	struct rtsock_rta rta;
	struct sockaddr_in6 addr;
	struct sockaddr_dlx gateway;
	lldata_ndp_num_t num;
	ssize_t r, off;

	off = 0;

	for (num = 0; lldata_ndp_enum(&num); num++) {
		/* Size (over)estimation shortcut. */
		if (oldp == NULL) {
			off += sizeof(struct rt_msghdr) +
			    RT_ROUNDUP(sizeof(addr)) +
			    RT_ROUNDUP(sizeof(gateway));

			continue;
		}

		rtsock_get_ndp(&rtm, &rta, &addr, &gateway, num, RTM_GET);

		if ((r = rtsock_rta_finalize(&rtm, sizeof(rtm),
		    &rtm.rtm_msglen, &rtm.rtm_addrs, &rta, NULL /*pbuf*/, oldp,
		    off)) < 0)
			return r;
		off += r;
	}

	/* TODO: should we add slack here? */
	return off;
}

/*
 * Obtain link-layer (ARP, NDP) table entries.
 */
static ssize_t
rtsock_info_lltable(struct rmib_oldp * oldp, int family)
{

	switch (family) {
	case AF_INET:
		return rtsock_info_lltable_arp(oldp);

	case AF_INET6:
		return rtsock_info_lltable_ndp(oldp);

	default:
		return 0;
	}
}

/*
 * Obtain link-layer address information for one specific interface.
 */
static ssize_t
rtsock_info_if_dl(struct ifdev * ifdev, struct ifa_msghdr * ifam,
	struct rmib_oldp * oldp, ssize_t off)
{
	struct rtsock_rta rta;
	struct sockaddr_dlx sdlx;
	ifaddr_dl_num_t num;
	ssize_t r, len;

	len = 0;

	for (num = 0; ifaddr_dl_enum(ifdev, &num); num++) {
		if (oldp == NULL) {
			len += sizeof(*ifam) + RT_ROUNDUP(sizeof(sdlx));

			continue;
		}

		rtsock_rta_init(&rta);

		rtsock_rta_add_dl(&rta, ifdev, num, &sdlx);

		if ((r = rtsock_rta_finalize(ifam, sizeof(*ifam),
		    &ifam->ifam_msglen, &ifam->ifam_addrs, &rta, NULL /*pbuf*/,
		    oldp, off + len)) < 0)
			return r;
		len += r;
	}

	return len;
}

/*
 * Obtain IPv4 address information for one specific interface.
 */
static ssize_t
rtsock_info_if_v4(struct ifdev * ifdev, struct ifa_msghdr * ifam,
	struct rmib_oldp * oldp, ssize_t off)
{
	struct sockaddr_in sin[4];
	struct rtsock_rta rta;
	ifaddr_v4_num_t num;
	ssize_t r, len;

	len = 0;

	/*
	 * Mostly for future compatibility, we support multiple IPv4 interface
	 * addresses here.  Every interface has an interface address and a
	 * netmask.  In addition, an interface may have either a broadcast or a
	 * destination address.
	 */
	for (num = 0; ifaddr_v4_enum(ifdev, &num); num++) {
		/* Size (over)estimation shortcut. */
		if (oldp == NULL) {
			len += sizeof(*ifam) + RT_ROUNDUP(sizeof(sin[0])) * 3;

			continue;
		}

		rtsock_rta_init(&rta);

		rtsock_rta_add_v4(&rta, ifdev, num, sin);

		if ((r = rtsock_rta_finalize(ifam, sizeof(*ifam),
		    &ifam->ifam_msglen, &ifam->ifam_addrs, &rta, NULL /*pbuf*/,
		    oldp, off + len)) < 0)
			return r;
		len += r;
	}

	return len;
}

/*
 * Obtain IPv6 address information for one specific interface.
 */
static ssize_t
rtsock_info_if_v6(struct ifdev * ifdev, struct ifa_msghdr * ifam,
	struct rmib_oldp * oldp, ssize_t off)
{
	struct sockaddr_in6 sin6[3];
	struct rtsock_rta rta;
	ifaddr_v6_num_t num;
	ssize_t r, len;

	len = 0;

	/* As with IPv4, except that IPv6 has no broadcast addresses. */
	for (num = 0; ifaddr_v6_enum(ifdev, &num); num++) {
		/* Size (over)estimation shortcut. */
		if (oldp == NULL) {
			len += sizeof(*ifam) + RT_ROUNDUP(sizeof(sin6[0])) * 3;

			continue;
		}

		rtsock_rta_init(&rta);

		rtsock_rta_add_v6(&rta, ifdev, num, sin6);

		if ((r = rtsock_rta_finalize(ifam, sizeof(*ifam),
		    &ifam->ifam_msglen, &ifam->ifam_addrs, &rta, NULL /*pbuf*/,
		    oldp, off + len)) < 0)
			return r;
		len += r;
	}

	return len;
}

/*
 * Obtain information for one specific interface.
 */
static ssize_t
rtsock_info_if(struct ifdev * ifdev, struct rmib_oldp * oldp, ssize_t off,
	int family)
{
	struct rtsock_rta rta;
	struct sockaddr_dlx sdlx;
	struct if_msghdr ifm;
	struct ifa_msghdr ifam;
	unsigned int ifflags;
	ssize_t r, len, sdlxsize;

	len = 0;

	ifflags = ifdev_get_ifflags(ifdev);

	/* Create an interface information entry. */
	rtsock_rta_init(&rta);

	if (oldp != NULL) {
		memset(&ifm, 0, sizeof(ifm));
		ifm.ifm_version = RTM_VERSION;
		ifm.ifm_type = RTM_IFINFO;
		ifm.ifm_flags = ifflags;
		ifm.ifm_index = ifdev_get_index(ifdev);
		memcpy(&ifm.ifm_data, ifdev_get_ifdata(ifdev),
		    sizeof(ifm.ifm_data));
	}

	/*
	 * Generate a datalink socket address structure.  TODO: see if it is
	 * worth obtaining just the length for the (oldp == NULL) case here.
	 */
	memset(&sdlx, 0, sizeof(sdlx));

	ifaddr_dl_get(ifdev, 0, &sdlx);

	sdlxsize = RT_ROUNDUP(sdlx.sdlx_len);

	rtsock_rta_set(&rta, RTAX_IFP, &sdlx, sdlxsize);

	if ((r = rtsock_rta_finalize(&ifm, sizeof(ifm), &ifm.ifm_msglen,
	    &ifm.ifm_addrs, &rta, NULL /*pbuf*/, oldp, off + len)) < 0)
		return r;
	len += r;

	/* Generate a header for all addresses once. */
	if (oldp != NULL) {
		memset(&ifam, 0, sizeof(ifam));
		ifam.ifam_version = RTM_VERSION;
		ifam.ifam_type = RTM_NEWADDR;
		ifam.ifam_flags = 0;
		ifam.ifam_index = ifdev_get_index(ifdev);
		ifam.ifam_metric = ifdev_get_metric(ifdev);
	}

	/* If requested and applicable, add any datalink addresses. */
	if (family == AF_UNSPEC || family == AF_LINK) {
		if ((r = rtsock_info_if_dl(ifdev, &ifam, oldp, off + len)) < 0)
			return r;
		len += r;
	}

	/* If requested and applicable, add any IPv4 addresses. */
	if (family == AF_UNSPEC || family == AF_INET) {
		if ((r = rtsock_info_if_v4(ifdev, &ifam, oldp, off + len)) < 0)
			return r;
		len += r;
	}

	/* If requested and applicable, add any IPv6 addresses. */
	if (family == AF_UNSPEC || family == AF_INET6) {
		if ((r = rtsock_info_if_v6(ifdev, &ifam, oldp, off + len)) < 0)
			return r;
		len += r;
	}

	return len;
}

/*
 * Obtain interface information.
 */
static ssize_t
rtsock_info_iflist(struct rmib_oldp * oldp, int family, uint32_t ifindex)
{
	struct ifdev *ifdev;
	ssize_t r, off;

	/*
	 * If information about a specific interface index is requested, then
	 * return information for just that interface.
	 */
	if (ifindex != 0) {
		if ((ifdev = ifdev_get_by_index(ifindex)) != NULL)
			return rtsock_info_if(ifdev, oldp, 0, family);
		else
			return 0;
	}

	/* Otherwise, iterate through the list of all interfaces. */
	off = 0;

	for (ifdev = ifdev_enum(NULL); ifdev != NULL;
	    ifdev = ifdev_enum(ifdev)) {

		/* Avoid generating results that are never copied out. */
		if (oldp != NULL && !rmib_inrange(oldp, off))
			oldp = NULL;

		if ((r = rtsock_info_if(ifdev, oldp, off, family)) < 0)
			return r;

		off += r;
	}

	/* TODO: should we add slack here? */
	return off;
}

/*
 * Obtain routing table, ARP cache, and interface information through
 * sysctl(7).  Return the (produced, or if oldp is NULL, estimated) byte size
 * of the output on success, or a negative error code on failure.
 */
static ssize_t
rtsock_info(struct rmib_call * call, struct rmib_node * node __unused,
	struct rmib_oldp * oldp, struct rmib_newp * newp __unused)
{
	int family, filter;

	if (call->call_namelen != 3)
		return EINVAL;

	family = call->call_name[0];
	filter = call->call_name[2];

	switch (call->call_name[1]) {
	case NET_RT_FLAGS:
		/*
		 * Preliminary support for changes as of NetBSD 8, where by
		 * default, the use of this subcall implies an ARP/NDP-only
		 * request.
		 */
		if (filter == 0)
			filter |= RTF_LLDATA;

		if (filter & RTF_LLDATA) {
			if (family == AF_UNSPEC)
				return EINVAL;

			/*
			 * Split off ARP/NDP handling from the normal routing
			 * table listing, as done since NetBSD 8.  We generate
			 * the ARP/NDP listing from here, and keep those
			 * entries out of the routing table dump below.  Since
			 * the filter is of a match-any type, and we have just
			 * matched a flag, no further filtering is needed here.
			 */
			return rtsock_info_lltable(oldp, family);
		}

		/* FALLTHROUGH */
	case NET_RT_DUMP:
		return rtsock_info_rtable(oldp, family, filter);

	case NET_RT_IFLIST:
		return rtsock_info_iflist(oldp, family, filter);

	default:
		return EINVAL;
	}
}