xref: /netbsd-src/sys/kern/uipc_syscalls.c (revision 5e4c038a45edbc7d63b7c2daa76e29f88b64a4e3)
1 /*	$NetBSD: uipc_syscalls.c,v 1.69 2002/05/31 20:33:11 itojun Exp $	*/
2 
3 /*
4  * Copyright (c) 1982, 1986, 1989, 1990, 1993
5  *	The Regents of the University of California.  All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  * 3. All advertising materials mentioning features or use of this software
16  *    must display the following acknowledgement:
17  *	This product includes software developed by the University of
18  *	California, Berkeley and its contributors.
19  * 4. Neither the name of the University nor the names of its contributors
20  *    may be used to endorse or promote products derived from this software
21  *    without specific prior written permission.
22  *
23  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
24  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33  * SUCH DAMAGE.
34  *
35  *	@(#)uipc_syscalls.c	8.6 (Berkeley) 2/14/95
36  */
37 
38 #include <sys/cdefs.h>
39 __KERNEL_RCSID(0, "$NetBSD: uipc_syscalls.c,v 1.69 2002/05/31 20:33:11 itojun Exp $");
40 
41 #include "opt_ktrace.h"
42 #include "opt_pipe.h"
43 
44 #include <sys/param.h>
45 #include <sys/systm.h>
46 #include <sys/filedesc.h>
47 #include <sys/proc.h>
48 #include <sys/file.h>
49 #include <sys/buf.h>
50 #include <sys/malloc.h>
51 #include <sys/mbuf.h>
52 #include <sys/protosw.h>
53 #include <sys/socket.h>
54 #include <sys/socketvar.h>
55 #include <sys/signalvar.h>
56 #include <sys/un.h>
57 #ifdef KTRACE
58 #include <sys/ktrace.h>
59 #endif
60 
61 #include <sys/mount.h>
62 #include <sys/syscallargs.h>
63 
64 #include <uvm/uvm_extern.h>
65 
66 /*
67  * System call interface to the socket abstraction.
68  */
69 extern	struct fileops socketops;
70 
71 int
72 sys_socket(struct proc *p, void *v, register_t *retval)
73 {
74 	struct sys_socket_args /* {
75 		syscallarg(int)	domain;
76 		syscallarg(int)	type;
77 		syscallarg(int)	protocol;
78 	} */ *uap = v;
79 	struct filedesc	*fdp;
80 	struct socket	*so;
81 	struct file	*fp;
82 	int		fd, error;
83 
84 	fdp = p->p_fd;
85 	/* falloc() will use the desciptor for us */
86 	if ((error = falloc(p, &fp, &fd)) != 0)
87 		return (error);
88 	fp->f_flag = FREAD|FWRITE;
89 	fp->f_type = DTYPE_SOCKET;
90 	fp->f_ops = &socketops;
91 	error = socreate(SCARG(uap, domain), &so, SCARG(uap, type),
92 			 SCARG(uap, protocol));
93 	if (error) {
94 		FILE_UNUSE(fp, p);
95 		fdremove(fdp, fd);
96 		ffree(fp);
97 	} else {
98 		fp->f_data = (caddr_t)so;
99 		FILE_SET_MATURE(fp);
100 		FILE_UNUSE(fp, p);
101 		*retval = fd;
102 	}
103 	return (error);
104 }
105 
106 /* ARGSUSED */
107 int
108 sys_bind(struct proc *p, void *v, register_t *retval)
109 {
110 	struct sys_bind_args /* {
111 		syscallarg(int)				s;
112 		syscallarg(const struct sockaddr *)	name;
113 		syscallarg(unsigned int)		namelen;
114 	} */ *uap = v;
115 	struct file	*fp;
116 	struct mbuf	*nam;
117 	int		error;
118 
119 	/* getsock() will use the descriptor for us */
120 	if ((error = getsock(p->p_fd, SCARG(uap, s), &fp)) != 0)
121 		return (error);
122 	error = sockargs(&nam, SCARG(uap, name), SCARG(uap, namelen),
123 	    MT_SONAME);
124 	if (error) {
125 		FILE_UNUSE(fp, p);
126 		return (error);
127 	}
128 	error = sobind((struct socket *)fp->f_data, nam, p);
129 	m_freem(nam);
130 	FILE_UNUSE(fp, p);
131 	return (error);
132 }
133 
134 /* ARGSUSED */
135 int
136 sys_listen(struct proc *p, void *v, register_t *retval)
137 {
138 	struct sys_listen_args /* {
139 		syscallarg(int)	s;
140 		syscallarg(int)	backlog;
141 	} */ *uap = v;
142 	struct file	*fp;
143 	int		error;
144 
145 	/* getsock() will use the descriptor for us */
146 	if ((error = getsock(p->p_fd, SCARG(uap, s), &fp)) != 0)
147 		return (error);
148 	error = solisten((struct socket *)fp->f_data, SCARG(uap, backlog));
149 	FILE_UNUSE(fp, p);
150 	return (error);
151 }
152 
153 int
154 sys_accept(struct proc *p, void *v, register_t *retval)
155 {
156 	struct sys_accept_args /* {
157 		syscallarg(int)			s;
158 		syscallarg(struct sockaddr *)	name;
159 		syscallarg(unsigned int *)	anamelen;
160 	} */ *uap = v;
161 	struct filedesc	*fdp;
162 	struct file	*fp;
163 	struct mbuf	*nam;
164 	unsigned int	namelen;
165 	int		error, s, fd;
166 	struct socket	*so;
167 
168 	fdp = p->p_fd;
169 	if (SCARG(uap, name) && (error = copyin((caddr_t)SCARG(uap, anamelen),
170 	    (caddr_t)&namelen, sizeof(namelen))))
171 		return (error);
172 	if (SCARG(uap, name) != NULL &&
173 	    uvm_useracc((caddr_t)SCARG(uap, name), sizeof(struct sockaddr),
174 	     B_WRITE) == FALSE)
175 		return (EFAULT);
176 
177 	/* getsock() will use the descriptor for us */
178 	if ((error = getsock(fdp, SCARG(uap, s), &fp)) != 0)
179 		return (error);
180 	s = splsoftnet();
181 	so = (struct socket *)fp->f_data;
182 	FILE_UNUSE(fp, p);
183 	if (!(so->so_proto->pr_flags & PR_LISTEN)) {
184 		splx(s);
185 		return (EOPNOTSUPP);
186 	}
187 	if ((so->so_options & SO_ACCEPTCONN) == 0) {
188 		splx(s);
189 		return (EINVAL);
190 	}
191 	if ((so->so_state & SS_NBIO) && so->so_qlen == 0) {
192 		splx(s);
193 		return (EWOULDBLOCK);
194 	}
195 	while (so->so_qlen == 0 && so->so_error == 0) {
196 		if (so->so_state & SS_CANTRCVMORE) {
197 			so->so_error = ECONNABORTED;
198 			break;
199 		}
200 		error = tsleep((caddr_t)&so->so_timeo, PSOCK | PCATCH,
201 			       netcon, 0);
202 		if (error) {
203 			splx(s);
204 			return (error);
205 		}
206 	}
207 	if (so->so_error) {
208 		error = so->so_error;
209 		so->so_error = 0;
210 		splx(s);
211 		return (error);
212 	}
213 	/* falloc() will use the descriptor for us */
214 	if ((error = falloc(p, &fp, &fd)) != 0) {
215 		splx(s);
216 		return (error);
217 	}
218 	*retval = fd;
219 	{ struct socket *aso = so->so_q.tqh_first;
220 	  if (soqremque(aso, 1) == 0)
221 		panic("accept");
222 	  so = aso;
223 	}
224 	fp->f_type = DTYPE_SOCKET;
225 	fp->f_flag = FREAD|FWRITE;
226 	fp->f_ops = &socketops;
227 	fp->f_data = (caddr_t)so;
228 	FILE_UNUSE(fp, p);
229 	nam = m_get(M_WAIT, MT_SONAME);
230 	if ((error = soaccept(so, nam)) == 0 && SCARG(uap, name)) {
231 		if (namelen > nam->m_len)
232 			namelen = nam->m_len;
233 		/* SHOULD COPY OUT A CHAIN HERE */
234 		if ((error = copyout(mtod(nam, caddr_t),
235 		    (caddr_t)SCARG(uap, name), namelen)) == 0)
236 			error = copyout((caddr_t)&namelen,
237 			    (caddr_t)SCARG(uap, anamelen),
238 			    sizeof(*SCARG(uap, anamelen)));
239 	}
240 	/* if an error occurred, free the file descriptor */
241 	if (error) {
242 		fdremove(fdp, fd);
243 		ffree(fp);
244 	}
245 	m_freem(nam);
246 	splx(s);
247 	FILE_SET_MATURE(fp);
248 	return (error);
249 }
250 
251 /* ARGSUSED */
252 int
253 sys_connect(struct proc *p, void *v, register_t *retval)
254 {
255 	struct sys_connect_args /* {
256 		syscallarg(int)				s;
257 		syscallarg(const struct sockaddr *)	name;
258 		syscallarg(unsigned int)		namelen;
259 	} */ *uap = v;
260 	struct file	*fp;
261 	struct socket	*so;
262 	struct mbuf	*nam;
263 	int		error, s;
264 
265 	/* getsock() will use the descriptor for us */
266 	if ((error = getsock(p->p_fd, SCARG(uap, s), &fp)) != 0)
267 		return (error);
268 	so = (struct socket *)fp->f_data;
269 	if ((so->so_state & SS_NBIO) && (so->so_state & SS_ISCONNECTING)) {
270 		error = EALREADY;
271 		goto out;
272 	}
273 	error = sockargs(&nam, SCARG(uap, name), SCARG(uap, namelen),
274 	    MT_SONAME);
275 	if (error)
276 		goto out;
277 	error = soconnect(so, nam);
278 	if (error)
279 		goto bad;
280 	if ((so->so_state & SS_NBIO) && (so->so_state & SS_ISCONNECTING)) {
281 		m_freem(nam);
282 		error = EINPROGRESS;
283 		goto out;
284 	}
285 	s = splsoftnet();
286 	while ((so->so_state & SS_ISCONNECTING) && so->so_error == 0) {
287 		error = tsleep((caddr_t)&so->so_timeo, PSOCK | PCATCH,
288 			       netcon, 0);
289 		if (error)
290 			break;
291 	}
292 	if (error == 0) {
293 		error = so->so_error;
294 		so->so_error = 0;
295 	}
296 	splx(s);
297  bad:
298 	so->so_state &= ~SS_ISCONNECTING;
299 	m_freem(nam);
300 	if (error == ERESTART)
301 		error = EINTR;
302  out:
303 	FILE_UNUSE(fp, p);
304 	return (error);
305 }
306 
307 int
308 sys_socketpair(struct proc *p, void *v, register_t *retval)
309 {
310 	struct sys_socketpair_args /* {
311 		syscallarg(int)		domain;
312 		syscallarg(int)		type;
313 		syscallarg(int)		protocol;
314 		syscallarg(int *)	rsv;
315 	} */ *uap = v;
316 	struct filedesc	*fdp;
317 	struct file	*fp1, *fp2;
318 	struct socket	*so1, *so2;
319 	int		fd, error, sv[2];
320 
321 	fdp = p->p_fd;
322 	error = socreate(SCARG(uap, domain), &so1, SCARG(uap, type),
323 			 SCARG(uap, protocol));
324 	if (error)
325 		return (error);
326 	error = socreate(SCARG(uap, domain), &so2, SCARG(uap, type),
327 			 SCARG(uap, protocol));
328 	if (error)
329 		goto free1;
330 	/* falloc() will use the descriptor for us */
331 	if ((error = falloc(p, &fp1, &fd)) != 0)
332 		goto free2;
333 	sv[0] = fd;
334 	fp1->f_flag = FREAD|FWRITE;
335 	fp1->f_type = DTYPE_SOCKET;
336 	fp1->f_ops = &socketops;
337 	fp1->f_data = (caddr_t)so1;
338 	if ((error = falloc(p, &fp2, &fd)) != 0)
339 		goto free3;
340 	fp2->f_flag = FREAD|FWRITE;
341 	fp2->f_type = DTYPE_SOCKET;
342 	fp2->f_ops = &socketops;
343 	fp2->f_data = (caddr_t)so2;
344 	sv[1] = fd;
345 	if ((error = soconnect2(so1, so2)) != 0)
346 		goto free4;
347 	if (SCARG(uap, type) == SOCK_DGRAM) {
348 		/*
349 		 * Datagram socket connection is asymmetric.
350 		 */
351 		 if ((error = soconnect2(so2, so1)) != 0)
352 			goto free4;
353 	}
354 	error = copyout((caddr_t)sv, (caddr_t)SCARG(uap, rsv),
355 	    2 * sizeof(int));
356 	FILE_SET_MATURE(fp1);
357 	FILE_SET_MATURE(fp2);
358 	FILE_UNUSE(fp1, p);
359 	FILE_UNUSE(fp2, p);
360 	return (error);
361  free4:
362 	FILE_UNUSE(fp2, p);
363 	ffree(fp2);
364 	fdremove(fdp, sv[1]);
365  free3:
366 	FILE_UNUSE(fp1, p);
367 	ffree(fp1);
368 	fdremove(fdp, sv[0]);
369  free2:
370 	(void)soclose(so2);
371  free1:
372 	(void)soclose(so1);
373 	return (error);
374 }
375 
376 int
377 sys_sendto(struct proc *p, void *v, register_t *retval)
378 {
379 	struct sys_sendto_args /* {
380 		syscallarg(int)				s;
381 		syscallarg(const void *)		buf;
382 		syscallarg(size_t)			len;
383 		syscallarg(int)				flags;
384 		syscallarg(const struct sockaddr *)	to;
385 		syscallarg(unsigned int)		tolen;
386 	} */ *uap = v;
387 	struct msghdr	msg;
388 	struct iovec	aiov;
389 
390 	msg.msg_name = (caddr_t)SCARG(uap, to);		/* XXX kills const */
391 	msg.msg_namelen = SCARG(uap, tolen);
392 	msg.msg_iov = &aiov;
393 	msg.msg_iovlen = 1;
394 	msg.msg_control = 0;
395 	msg.msg_flags = 0;
396 	aiov.iov_base = (char *)SCARG(uap, buf);	/* XXX kills const */
397 	aiov.iov_len = SCARG(uap, len);
398 	return (sendit(p, SCARG(uap, s), &msg, SCARG(uap, flags), retval));
399 }
400 
401 int
402 sys_sendmsg(struct proc *p, void *v, register_t *retval)
403 {
404 	struct sys_sendmsg_args /* {
405 		syscallarg(int)				s;
406 		syscallarg(const struct msghdr *)	msg;
407 		syscallarg(int)				flags;
408 	} */ *uap = v;
409 	struct msghdr	msg;
410 	struct iovec	aiov[UIO_SMALLIOV], *iov;
411 	int		error;
412 
413 	error = copyin(SCARG(uap, msg), (caddr_t)&msg, sizeof(msg));
414 	if (error)
415 		return (error);
416 	if ((unsigned int)msg.msg_iovlen > UIO_SMALLIOV) {
417 		if ((unsigned int)msg.msg_iovlen > IOV_MAX)
418 			return (EMSGSIZE);
419 		iov = malloc(sizeof(struct iovec) * msg.msg_iovlen,
420 		    M_IOV, M_WAITOK);
421 	} else
422 		iov = aiov;
423 	if ((unsigned int)msg.msg_iovlen > 0) {
424 		error = copyin((caddr_t)msg.msg_iov, (caddr_t)iov,
425 		    (size_t)(msg.msg_iovlen * sizeof(struct iovec)));
426 		if (error)
427 			goto done;
428 	}
429 	msg.msg_iov = iov;
430 	msg.msg_flags = 0;
431 	error = sendit(p, SCARG(uap, s), &msg, SCARG(uap, flags), retval);
432 done:
433 	if (iov != aiov)
434 		free(iov, M_IOV);
435 	return (error);
436 }
437 
438 int
439 sendit(struct proc *p, int s, struct msghdr *mp, int flags, register_t *retsize)
440 {
441 	struct file	*fp;
442 	struct uio	auio;
443 	struct iovec	*iov;
444 	int		i, len, error;
445 	struct mbuf	*to, *control;
446 	struct socket	*so;
447 #ifdef KTRACE
448 	struct iovec	*ktriov;
449 #endif
450 
451 #ifdef KTRACE
452 	ktriov = NULL;
453 #endif
454 	/* getsock() will use the descriptor for us */
455 	if ((error = getsock(p->p_fd, s, &fp)) != 0)
456 		return (error);
457 	auio.uio_iov = mp->msg_iov;
458 	auio.uio_iovcnt = mp->msg_iovlen;
459 	auio.uio_segflg = UIO_USERSPACE;
460 	auio.uio_rw = UIO_WRITE;
461 	auio.uio_procp = p;
462 	auio.uio_offset = 0;			/* XXX */
463 	auio.uio_resid = 0;
464 	iov = mp->msg_iov;
465 	for (i = 0; i < mp->msg_iovlen; i++, iov++) {
466 #if 0
467 		/* cannot happen; iov_len is unsigned */
468 		if (iov->iov_len < 0) {
469 			error = EINVAL;
470 			goto out;
471 		}
472 #endif
473 		/*
474 		 * Writes return ssize_t because -1 is returned on error.
475 		 * Therefore, we must restrict the length to SSIZE_MAX to
476 		 * avoid garbage return values.
477 		 */
478 		auio.uio_resid += iov->iov_len;
479 		if (iov->iov_len > SSIZE_MAX || auio.uio_resid > SSIZE_MAX) {
480 			error = EINVAL;
481 			goto out;
482 		}
483 	}
484 	if (mp->msg_name) {
485 		error = sockargs(&to, mp->msg_name, mp->msg_namelen,
486 				 MT_SONAME);
487 		if (error)
488 			goto out;
489 	} else
490 		to = 0;
491 	if (mp->msg_control) {
492 		if (mp->msg_controllen < sizeof(struct cmsghdr)) {
493 			error = EINVAL;
494 			goto bad;
495 		}
496 		error = sockargs(&control, mp->msg_control,
497 				 mp->msg_controllen, MT_CONTROL);
498 		if (error)
499 			goto bad;
500 	} else
501 		control = 0;
502 #ifdef KTRACE
503 	if (KTRPOINT(p, KTR_GENIO)) {
504 		int iovlen = auio.uio_iovcnt * sizeof(struct iovec);
505 
506 		ktriov = malloc(iovlen, M_TEMP, M_WAITOK);
507 		memcpy((caddr_t)ktriov, (caddr_t)auio.uio_iov, iovlen);
508 	}
509 #endif
510 	len = auio.uio_resid;
511 	so = (struct socket *)fp->f_data;
512 	error = (*so->so_send)(so, to, &auio, NULL, control, flags);
513 	if (error) {
514 		if (auio.uio_resid != len && (error == ERESTART ||
515 		    error == EINTR || error == EWOULDBLOCK))
516 			error = 0;
517 		if (error == EPIPE)
518 			psignal(p, SIGPIPE);
519 	}
520 	if (error == 0)
521 		*retsize = len - auio.uio_resid;
522 #ifdef KTRACE
523 	if (ktriov != NULL) {
524 		if (error == 0)
525 			ktrgenio(p, s, UIO_WRITE, ktriov, *retsize, error);
526 		free(ktriov, M_TEMP);
527 	}
528 #endif
529  bad:
530 	if (to)
531 		m_freem(to);
532  out:
533 	FILE_UNUSE(fp, p);
534 	return (error);
535 }
536 
537 int
538 sys_recvfrom(struct proc *p, void *v, register_t *retval)
539 {
540 	struct sys_recvfrom_args /* {
541 		syscallarg(int)			s;
542 		syscallarg(void *)		buf;
543 		syscallarg(size_t)		len;
544 		syscallarg(int)			flags;
545 		syscallarg(struct sockaddr *)	from;
546 		syscallarg(unsigned int *)	fromlenaddr;
547 	} */ *uap = v;
548 	struct msghdr	msg;
549 	struct iovec	aiov;
550 	int		error;
551 
552 	if (SCARG(uap, fromlenaddr)) {
553 		error = copyin((caddr_t)SCARG(uap, fromlenaddr),
554 			       (caddr_t)&msg.msg_namelen,
555 			       sizeof(msg.msg_namelen));
556 		if (error)
557 			return (error);
558 	} else
559 		msg.msg_namelen = 0;
560 	msg.msg_name = (caddr_t)SCARG(uap, from);
561 	msg.msg_iov = &aiov;
562 	msg.msg_iovlen = 1;
563 	aiov.iov_base = SCARG(uap, buf);
564 	aiov.iov_len = SCARG(uap, len);
565 	msg.msg_control = 0;
566 	msg.msg_flags = SCARG(uap, flags);
567 	return (recvit(p, SCARG(uap, s), &msg,
568 		       (caddr_t)SCARG(uap, fromlenaddr), retval));
569 }
570 
571 int
572 sys_recvmsg(struct proc *p, void *v, register_t *retval)
573 {
574 	struct sys_recvmsg_args /* {
575 		syscallarg(int)			s;
576 		syscallarg(struct msghdr *)	msg;
577 		syscallarg(int)			flags;
578 	} */ *uap = v;
579 	struct msghdr	msg;
580 	struct iovec	aiov[UIO_SMALLIOV], *uiov, *iov;
581 	int		error;
582 
583 	error = copyin((caddr_t)SCARG(uap, msg), (caddr_t)&msg,
584 		       sizeof(msg));
585 	if (error)
586 		return (error);
587 	if ((unsigned int)msg.msg_iovlen > UIO_SMALLIOV) {
588 		if ((unsigned int)msg.msg_iovlen > IOV_MAX)
589 			return (EMSGSIZE);
590 		iov = malloc(sizeof(struct iovec) * msg.msg_iovlen,
591 		    M_IOV, M_WAITOK);
592 	} else
593 		iov = aiov;
594 	if ((unsigned int)msg.msg_iovlen > 0) {
595 		error = copyin((caddr_t)msg.msg_iov, (caddr_t)iov,
596 		    (size_t)(msg.msg_iovlen * sizeof(struct iovec)));
597 		if (error)
598 			goto done;
599 	}
600 	uiov = msg.msg_iov;
601 	msg.msg_iov = iov;
602 	msg.msg_flags = SCARG(uap, flags);
603 	if ((error = recvit(p, SCARG(uap, s), &msg, (caddr_t)0, retval)) == 0) {
604 		msg.msg_iov = uiov;
605 		error = copyout((caddr_t)&msg, (caddr_t)SCARG(uap, msg),
606 		    sizeof(msg));
607 	}
608 done:
609 	if (iov != aiov)
610 		free(iov, M_IOV);
611 	return (error);
612 }
613 
614 int
615 recvit(struct proc *p, int s, struct msghdr *mp, caddr_t namelenp,
616 	register_t *retsize)
617 {
618 	struct file	*fp;
619 	struct uio	auio;
620 	struct iovec	*iov;
621 	int		i, len, error;
622 	struct mbuf	*from, *control;
623 	struct socket	*so;
624 #ifdef KTRACE
625 	struct iovec	*ktriov;
626 #endif
627 
628 	from = 0;
629 	control = 0;
630 #ifdef KTRACE
631 	ktriov = NULL;
632 #endif
633 
634 	/* getsock() will use the descriptor for us */
635 	if ((error = getsock(p->p_fd, s, &fp)) != 0)
636 		return (error);
637 	auio.uio_iov = mp->msg_iov;
638 	auio.uio_iovcnt = mp->msg_iovlen;
639 	auio.uio_segflg = UIO_USERSPACE;
640 	auio.uio_rw = UIO_READ;
641 	auio.uio_procp = p;
642 	auio.uio_offset = 0;			/* XXX */
643 	auio.uio_resid = 0;
644 	iov = mp->msg_iov;
645 	for (i = 0; i < mp->msg_iovlen; i++, iov++) {
646 #if 0
647 		/* cannot happen iov_len is unsigned */
648 		if (iov->iov_len < 0) {
649 			error = EINVAL;
650 			goto out1;
651 		}
652 #endif
653 		/*
654 		 * Reads return ssize_t because -1 is returned on error.
655 		 * Therefore we must restrict the length to SSIZE_MAX to
656 		 * avoid garbage return values.
657 		 */
658 		auio.uio_resid += iov->iov_len;
659 		if (iov->iov_len > SSIZE_MAX || auio.uio_resid > SSIZE_MAX) {
660 			error = EINVAL;
661 			goto out1;
662 		}
663 	}
664 #ifdef KTRACE
665 	if (KTRPOINT(p, KTR_GENIO)) {
666 		int iovlen = auio.uio_iovcnt * sizeof(struct iovec);
667 
668 		ktriov = malloc(iovlen, M_TEMP, M_WAITOK);
669 		memcpy((caddr_t)ktriov, (caddr_t)auio.uio_iov, iovlen);
670 	}
671 #endif
672 	len = auio.uio_resid;
673 	so = (struct socket *)fp->f_data;
674 	error = (*so->so_receive)(so, &from, &auio, NULL,
675 			  mp->msg_control ? &control : NULL, &mp->msg_flags);
676 	if (error) {
677 		if (auio.uio_resid != len && (error == ERESTART ||
678 		    error == EINTR || error == EWOULDBLOCK))
679 			error = 0;
680 	}
681 #ifdef KTRACE
682 	if (ktriov != NULL) {
683 		if (error == 0)
684 			ktrgenio(p, s, UIO_READ, ktriov,
685 			    len - auio.uio_resid, error);
686 		free(ktriov, M_TEMP);
687 	}
688 #endif
689 	if (error)
690 		goto out;
691 	*retsize = len - auio.uio_resid;
692 	if (mp->msg_name) {
693 		len = mp->msg_namelen;
694 		if (len <= 0 || from == 0)
695 			len = 0;
696 		else {
697 			if (len > from->m_len)
698 				len = from->m_len;
699 			/* else if len < from->m_len ??? */
700 			error = copyout(mtod(from, caddr_t),
701 					(caddr_t)mp->msg_name, (unsigned)len);
702 			if (error)
703 				goto out;
704 		}
705 		mp->msg_namelen = len;
706 		if (namelenp &&
707 		    (error = copyout((caddr_t)&len, namelenp, sizeof(int))))
708 			goto out;
709 	}
710 	if (mp->msg_control) {
711 		len = mp->msg_controllen;
712 		if (len <= 0 || control == 0)
713 			len = 0;
714 		else {
715 			struct mbuf *m = control;
716 			caddr_t p = (caddr_t)mp->msg_control;
717 
718 			do {
719 				i = m->m_len;
720 				if (len < i) {
721 					mp->msg_flags |= MSG_CTRUNC;
722 					i = len;
723 				}
724 				error = copyout(mtod(m, caddr_t), p,
725 				    (unsigned)i);
726 				if (m->m_next)
727 					i = ALIGN(i);
728 				p += i;
729 				len -= i;
730 				if (error != 0 || len <= 0)
731 					break;
732 			} while ((m = m->m_next) != NULL);
733 			len = p - (caddr_t)mp->msg_control;
734 		}
735 		mp->msg_controllen = len;
736 	}
737  out:
738 	if (from)
739 		m_freem(from);
740 	if (control)
741 		m_freem(control);
742  out1:
743 	FILE_UNUSE(fp, p);
744 	return (error);
745 }
746 
747 /* ARGSUSED */
748 int
749 sys_shutdown(struct proc *p, void *v, register_t *retval)
750 {
751 	struct sys_shutdown_args /* {
752 		syscallarg(int)	s;
753 		syscallarg(int)	how;
754 	} */ *uap = v;
755 	struct file	*fp;
756 	int		error;
757 
758 	/* getsock() will use the descriptor for us */
759 	if ((error = getsock(p->p_fd, SCARG(uap, s), &fp)) != 0)
760 		return (error);
761 	error = soshutdown((struct socket *)fp->f_data, SCARG(uap, how));
762 	FILE_UNUSE(fp, p);
763 	return (error);
764 }
765 
766 /* ARGSUSED */
767 int
768 sys_setsockopt(struct proc *p, void *v, register_t *retval)
769 {
770 	struct sys_setsockopt_args /* {
771 		syscallarg(int)			s;
772 		syscallarg(int)			level;
773 		syscallarg(int)			name;
774 		syscallarg(const void *)	val;
775 		syscallarg(unsigned int)	valsize;
776 	} */ *uap = v;
777 	struct file	*fp;
778 	struct mbuf	*m;
779 	int		error;
780 	unsigned int	l;
781 
782 	m = NULL;
783 	/* getsock() will use the descriptor for us */
784 	if ((error = getsock(p->p_fd, SCARG(uap, s), &fp)) != 0)
785 		return (error);
786 	l = SCARG(uap, valsize);
787 	if (l > MCLBYTES) {
788 		error = EINVAL;
789 		goto out;
790 	}
791 	if (SCARG(uap, val)) {
792 		m = m_get(M_WAIT, MT_SOOPTS);
793 		if (l > MLEN)
794 			MCLGET(m, M_WAIT);
795 		error = copyin(SCARG(uap, val), mtod(m, caddr_t), l);
796 		if (error) {
797 			(void) m_free(m);
798 			goto out;
799 		}
800 		m->m_len = SCARG(uap, valsize);
801 	}
802 	error = sosetopt((struct socket *)fp->f_data, SCARG(uap, level),
803 			 SCARG(uap, name), m);
804  out:
805 	FILE_UNUSE(fp, p);
806 	return (error);
807 }
808 
809 /* ARGSUSED */
810 int
811 sys_getsockopt(struct proc *p, void *v, register_t *retval)
812 {
813 	struct sys_getsockopt_args /* {
814 		syscallarg(int)			s;
815 		syscallarg(int)			level;
816 		syscallarg(int)			name;
817 		syscallarg(void *)		val;
818 		syscallarg(unsigned int *)	avalsize;
819 	} */ *uap = v;
820 	struct file	*fp;
821 	struct mbuf	*m, *m0;
822 	unsigned int	op, i, valsize;
823 	int		error;
824 
825 	m = NULL;
826 	/* getsock() will use the descriptor for us */
827 	if ((error = getsock(p->p_fd, SCARG(uap, s), &fp)) != 0)
828 		return (error);
829 	if (SCARG(uap, val)) {
830 		error = copyin((caddr_t)SCARG(uap, avalsize),
831 			       (caddr_t)&valsize, sizeof(valsize));
832 		if (error)
833 			goto out;
834 	} else
835 		valsize = 0;
836 	if ((error = sogetopt((struct socket *)fp->f_data, SCARG(uap, level),
837 	    SCARG(uap, name), &m)) == 0 && SCARG(uap, val) && valsize &&
838 	    m != NULL) {
839 		op = 0;
840 		while (m && !error && op < valsize) {
841 			i = min(m->m_len, (valsize - op));
842 			error = copyout(mtod(m, caddr_t), SCARG(uap, val), i);
843 			op += i;
844 			SCARG(uap, val) = ((u_int8_t *)SCARG(uap, val)) + i;
845 			m0 = m;
846 			MFREE(m0, m);
847 		}
848 		valsize = op;
849 		if (error == 0)
850 			error = copyout(&valsize,
851 					SCARG(uap, avalsize), sizeof(valsize));
852 	}
853 	if (m != NULL)
854 		(void) m_free(m);
855  out:
856 	FILE_UNUSE(fp, p);
857 	return (error);
858 }
859 
860 #ifdef PIPE_SOCKETPAIR
861 /* ARGSUSED */
862 int
863 sys_pipe(struct proc *p, void *v, register_t *retval)
864 {
865 	struct filedesc	*fdp;
866 	struct file	*rf, *wf;
867 	struct socket	*rso, *wso;
868 	int		fd, error;
869 
870 	fdp = p->p_fd;
871 	if ((error = socreate(AF_LOCAL, &rso, SOCK_STREAM, 0)) != 0)
872 		return (error);
873 	if ((error = socreate(AF_LOCAL, &wso, SOCK_STREAM, 0)) != 0)
874 		goto free1;
875 	/* remember this socket pair implements a pipe */
876 	wso->so_state |= SS_ISAPIPE;
877 	rso->so_state |= SS_ISAPIPE;
878 	/* falloc() will use the descriptor for us */
879 	if ((error = falloc(p, &rf, &fd)) != 0)
880 		goto free2;
881 	retval[0] = fd;
882 	rf->f_flag = FREAD;
883 	rf->f_type = DTYPE_SOCKET;
884 	rf->f_ops = &socketops;
885 	rf->f_data = (caddr_t)rso;
886 	if ((error = falloc(p, &wf, &fd)) != 0)
887 		goto free3;
888 	wf->f_flag = FWRITE;
889 	wf->f_type = DTYPE_SOCKET;
890 	wf->f_ops = &socketops;
891 	wf->f_data = (caddr_t)wso;
892 	retval[1] = fd;
893 	if ((error = unp_connect2(wso, rso)) != 0)
894 		goto free4;
895 	FILE_SET_MATURE(rf);
896 	FILE_SET_MATURE(wf);
897 	FILE_UNUSE(rf, p);
898 	FILE_UNUSE(wf, p);
899 	return (0);
900  free4:
901 	FILE_UNUSE(wf, p);
902 	ffree(wf);
903 	fdremove(fdp, retval[1]);
904  free3:
905 	FILE_UNUSE(rf, p);
906 	ffree(rf);
907 	fdremove(fdp, retval[0]);
908  free2:
909 	(void)soclose(wso);
910  free1:
911 	(void)soclose(rso);
912 	return (error);
913 }
914 #endif /* PIPE_SOCKETPAIR */
915 
916 /*
917  * Get socket name.
918  */
919 /* ARGSUSED */
920 int
921 sys_getsockname(struct proc *p, void *v, register_t *retval)
922 {
923 	struct sys_getsockname_args /* {
924 		syscallarg(int)			fdes;
925 		syscallarg(struct sockaddr *)	asa;
926 		syscallarg(unsigned int *)	alen;
927 	} */ *uap = v;
928 	struct file	*fp;
929 	struct socket	*so;
930 	struct mbuf	*m;
931 	unsigned int	len;
932 	int		error;
933 
934 	/* getsock() will use the descriptor for us */
935 	if ((error = getsock(p->p_fd, SCARG(uap, fdes), &fp)) != 0)
936 		return (error);
937 	error = copyin((caddr_t)SCARG(uap, alen), (caddr_t)&len, sizeof(len));
938 	if (error)
939 		goto out;
940 	so = (struct socket *)fp->f_data;
941 	m = m_getclr(M_WAIT, MT_SONAME);
942 	error = (*so->so_proto->pr_usrreq)(so, PRU_SOCKADDR, (struct mbuf *)0,
943 	    m, (struct mbuf *)0, (struct proc *)0);
944 	if (error)
945 		goto bad;
946 	if (len > m->m_len)
947 		len = m->m_len;
948 	error = copyout(mtod(m, caddr_t), (caddr_t)SCARG(uap, asa), len);
949 	if (error == 0)
950 		error = copyout((caddr_t)&len, (caddr_t)SCARG(uap, alen),
951 		    sizeof(len));
952  bad:
953 	m_freem(m);
954  out:
955 	FILE_UNUSE(fp, p);
956 	return (error);
957 }
958 
959 /*
960  * Get name of peer for connected socket.
961  */
962 /* ARGSUSED */
963 int
964 sys_getpeername(struct proc *p, void *v, register_t *retval)
965 {
966 	struct sys_getpeername_args /* {
967 		syscallarg(int)			fdes;
968 		syscallarg(struct sockaddr *)	asa;
969 		syscallarg(unsigned int *)	alen;
970 	} */ *uap = v;
971 	struct file	*fp;
972 	struct socket	*so;
973 	struct mbuf	*m;
974 	unsigned int	len;
975 	int		error;
976 
977 	/* getsock() will use the descriptor for us */
978 	if ((error = getsock(p->p_fd, SCARG(uap, fdes), &fp)) != 0)
979 		return (error);
980 	so = (struct socket *)fp->f_data;
981 	if ((so->so_state & (SS_ISCONNECTED|SS_ISCONFIRMING)) == 0) {
982 		error = ENOTCONN;
983 		goto out;
984 	}
985 	error = copyin((caddr_t)SCARG(uap, alen), (caddr_t)&len, sizeof(len));
986 	if (error)
987 		goto out;
988 	m = m_getclr(M_WAIT, MT_SONAME);
989 	error = (*so->so_proto->pr_usrreq)(so, PRU_PEERADDR, (struct mbuf *)0,
990 	    m, (struct mbuf *)0, (struct proc *)0);
991 	if (error)
992 		goto bad;
993 	if (len > m->m_len)
994 		len = m->m_len;
995 	error = copyout(mtod(m, caddr_t), (caddr_t)SCARG(uap, asa), len);
996 	if (error)
997 		goto bad;
998 	error = copyout((caddr_t)&len, (caddr_t)SCARG(uap, alen), sizeof(len));
999  bad:
1000 	m_freem(m);
1001  out:
1002 	FILE_UNUSE(fp, p);
1003 	return (error);
1004 }
1005 
1006 /*
1007  * XXX In a perfect world, we wouldn't pass around socket control
1008  * XXX arguments in mbufs, and this could go away.
1009  */
1010 int
1011 sockargs(struct mbuf **mp, const void *buf, size_t buflen, int type)
1012 {
1013 	struct sockaddr	*sa;
1014 	struct mbuf	*m;
1015 	int		error;
1016 
1017 	/*
1018 	 * We can't allow socket names > UCHAR_MAX in length, since that
1019 	 * will overflow sa_len.  Control data more than a page size in
1020 	 * length is just too much.
1021 	 */
1022 	if (buflen > (type == MT_SONAME ? UCHAR_MAX : PAGE_SIZE))
1023 		return (EINVAL);
1024 
1025 	/* Allocate an mbuf to hold the arguments. */
1026 	m = m_get(M_WAIT, type);
1027 	if (buflen > MLEN) {
1028 		/*
1029 		 * Won't fit into a regular mbuf, so we allocate just
1030 		 * enough external storage to hold the argument.
1031 		 */
1032 		MEXTMALLOC(m, buflen, M_WAITOK);
1033 	}
1034 	m->m_len = buflen;
1035 	error = copyin(buf, mtod(m, caddr_t), buflen);
1036 	if (error) {
1037 		(void) m_free(m);
1038 		return (error);
1039 	}
1040 	*mp = m;
1041 	if (type == MT_SONAME) {
1042 		sa = mtod(m, struct sockaddr *);
1043 #if BYTE_ORDER != BIG_ENDIAN
1044 		/*
1045 		 * 4.3BSD compat thing - need to stay, since bind(2),
1046 		 * connect(2), sendto(2) were not versioned for COMPAT_43.
1047 		 */
1048 		if (sa->sa_family == 0 && sa->sa_len < AF_MAX)
1049 			sa->sa_family = sa->sa_len;
1050 #endif
1051 		sa->sa_len = buflen;
1052 	}
1053 	return (0);
1054 }
1055 
1056 int
1057 getsock(struct filedesc *fdp, int fdes, struct file **fpp)
1058 {
1059 	struct file	*fp;
1060 
1061 	if ((fp = fd_getfile(fdp, fdes)) == NULL)
1062 		return (EBADF);
1063 
1064 	FILE_USE(fp);
1065 
1066 	if (fp->f_type != DTYPE_SOCKET) {
1067 		FILE_UNUSE(fp, NULL);
1068 		return (ENOTSOCK);
1069 	}
1070 	*fpp = fp;
1071 	return (0);
1072 }
1073