/usr/src/usr.sbin/ospfd/ospfe.c

Bug Summary

File:	src/usr.sbin/ospfd/ospfe.c
Warning:	line 441, column 9 Access to field 'flags' results in a dereference of a null pointer (loaded from variable 'noeconf')
Annotated Source Code

Press '?' to see keyboard shortcuts
Show analyzer invocation
clang -cc1 -cc1 -triple amd64-unknown-openbsd7.0 -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name ospfe.c -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 1 -pic-is-pie -mframe-pointer=all -relaxed-aliasing -fno-rounding-math -mconstructor-aliases -munwind-tables -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/usr.sbin/ospfd/obj -resource-dir /usr/local/lib/clang/13.0.0 -I /usr/src/usr.sbin/ospfd -internal-isystem /usr/local/lib/clang/13.0.0/include -internal-externc-isystem /usr/include -O2 -fdebug-compilation-dir=/usr/src/usr.sbin/ospfd/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /home/ben/Projects/vmm/scan-build/2022-01-12-194120-40624-1 -x c /usr/src/usr.sbin/ospfd/ospfe.c
1/*	$OpenBSD: ospfe.c,v 1.110 2021/01/19 09:37:53 claudio Exp $ */

3/*
* Copyright (c) 2005 Claudio Jeker <claudio@openbsd.org>
* Copyright (c) 2004 Esben Norby <norby@openbsd.org>
* Copyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org>
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/

21#include <sys/types.h>
22#include <sys/socket.h>
23#include <sys/queue.h>
24#include <netinet/in.h>
25#include <arpa/inet.h>
26#include <net/if_types.h>
27#include <stdlib.h>
28#include <signal.h>
29#include <string.h>
30#include <fcntl.h>
31#include <pwd.h>
32#include <unistd.h>
33#include <event.h>
34#include <err.h>
35#include <errno(*__errno()).h>
36#include <stdio.h>

38#include "ospf.h"
39#include "ospfd.h"
40#include "ospfe.h"
41#include "rde.h"
42#include "control.h"
43#include "log.h"

45void		 ospfe_sig_handler(int, short, void *);
46__dead__attribute__((__noreturn__)) void	 ospfe_shutdown(void);
47void		 orig_rtr_lsa_all(struct area *);
48struct iface	*find_vlink(struct abr_rtr *);

50struct ospfd_conf	*oeconf = NULL((void*)0), *noeconf;
51static struct imsgev	*iev_main;
52static struct imsgev	*iev_rde;
53int			 oe_nofib;

55/* ARGSUSED */
56void
57ospfe_sig_handler(int sig, short event, void *bula)
58{
switch (sig) {
case SIGINT2:
case SIGTERM15:
ospfe_shutdown();
/* NOTREACHED */
default:
fatalx("unexpected signal");
}
67}

69/* ospf engine */
70pid_t
71ospfe(struct ospfd_conf *xconf, int pipe_parent2ospfe[2], int pipe_ospfe2rde[2],
  int pipe_parent2rde[2])
73{
struct area	*area;
struct iface	*iface;
struct redistribute *r;
struct passwd	*pw;
struct event	 ev_sigint, ev_sigterm;
pid_t		 pid;

switch (pid = fork()) {
case -1:
fatal("cannot fork");
case 0:
break;
default:
return (pid);
}

/* cleanup a bit */
kif_clear();

/* create the raw ip socket */
if ((xconf->ospf_socket = socket(AF_INET2,
   SOCK_RAW3 | SOCK_CLOEXEC0x8000 | SOCK_NONBLOCK0x4000,
   IPPROTO_OSPF89)) == -1)
fatal("error creating raw socket");

/* set some defaults */
if (if_set_mcast_loop(xconf->ospf_socket) == -1)
fatal("if_set_mcast_loop");
if (if_set_ip_hdrincl(xconf->ospf_socket) == -1)
fatal("if_set_ip_hdrincl");
if (if_set_recvif(xconf->ospf_socket, 1) == -1)
fatal("if_set_recvif");
if_set_sockbuf(xconf->ospf_socket);

oeconf = xconf;
if (oeconf->flags & OSPFD_FLAG_NO_FIB_UPDATE0x0001)
oe_nofib = 1;

if ((pw = getpwnam(OSPFD_USER"_ospfd")) == NULL((void*)0))
fatal("getpwnam");

if (chroot(pw->pw_dir) == -1)
fatal("chroot");
if (chdir("/") == -1)
fatal("chdir(\"/\")");

setproctitle("ospf engine");
/*
* XXX needed with fork+exec
* log_init(debug, LOG_DAEMON);
* log_setverbose(verbose);
*/

ospfd_process = PROC_OSPF_ENGINE;
log_procinit(log_procnames[ospfd_process]);

if (setgroups(1, &pw->pw_gid) ||
   setresgid(pw->pw_gid, pw->pw_gid, pw->pw_gid) ||
   setresuid(pw->pw_uid, pw->pw_uid, pw->pw_uid))
fatal("can't drop privileges");

if (pledge("stdio inet mcast recvfd", NULL((void*)0)) == -1)
fatal("pledge");

event_init();
nbr_init(NBR_HASHSIZE128);
lsa_cache_init(LSA_HASHSIZE512);

/* setup signal handler */
signal_set(&ev_sigint, SIGINT, ospfe_sig_handler, NULL)event_set(&ev_sigint, 2, 0x08|0x10, ospfe_sig_handler, ((
void*)0));
signal_set(&ev_sigterm, SIGTERM, ospfe_sig_handler, NULL)event_set(&ev_sigterm, 15, 0x08|0x10, ospfe_sig_handler, (
(void*)0));
signal_add(&ev_sigint, NULL)event_add(&ev_sigint, ((void*)0));
signal_add(&ev_sigterm, NULL)event_add(&ev_sigterm, ((void*)0));
signal(SIGPIPE13, SIG_IGN(void (*)(int))1);
signal(SIGHUP1, SIG_IGN(void (*)(int))1);

/* setup pipes */
close(pipe_parent2ospfe[0]);
close(pipe_ospfe2rde[1]);
close(pipe_parent2rde[0]);
close(pipe_parent2rde[1]);

if ((iev_rde = malloc(sizeof(struct imsgev))) == NULL((void*)0) ||
   (iev_main = malloc(sizeof(struct imsgev))) == NULL((void*)0))
fatal(NULL((void*)0));
imsg_init(&iev_rde->ibuf, pipe_ospfe2rde[0]);
iev_rde->handler = ospfe_dispatch_rde;
imsg_init(&iev_main->ibuf, pipe_parent2ospfe[1]);
iev_main->handler = ospfe_dispatch_main;

/* setup event handler */
iev_rde->events = EV_READ0x02;
event_set(&iev_rde->ev, iev_rde->ibuf.fd, iev_rde->events,
   iev_rde->handler, iev_rde);
event_add(&iev_rde->ev, NULL((void*)0));

iev_main->events = EV_READ0x02;
event_set(&iev_main->ev, iev_main->ibuf.fd, iev_main->events,
   iev_main->handler, iev_main);
event_add(&iev_main->ev, NULL((void*)0));

event_set(&oeconf->ev, oeconf->ospf_socket, EV_READ0x02|EV_PERSIST0x10,
   recv_packet, oeconf);
event_add(&oeconf->ev, NULL((void*)0));

/* remove unneeded config stuff */
conf_clear_redist_list(&oeconf->redist_list);
LIST_FOREACH(area, &oeconf->area_list, entry)for((area) = ((&oeconf->area_list)->lh_first); (area
)!= ((void*)0); (area) = ((area)->entry.le_next)) {
while ((r = SIMPLEQ_FIRST(&area->redist_list)((&area->redist_list)->sqh_first)) != NULL((void*)0)) {
	SIMPLEQ_REMOVE_HEAD(&area->redist_list, entry)do { if (((&area->redist_list)->sqh_first = (&area
->redist_list)->sqh_first->entry.sqe_next) == ((void
*)0)) (&area->redist_list)->sqh_last = &(&area
->redist_list)->sqh_first; } while (0);
	free(r);
}
}

/* start interfaces */
LIST_FOREACH(area, &oeconf->area_list, entry)for((area) = ((&oeconf->area_list)->lh_first); (area
)!= ((void*)0); (area) = ((area)->entry.le_next)) {
ospfe_demote_area(area, 0);
LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
	if_init(xconf, iface);
	if (if_fsm(iface, IF_EVT_UP)) {
		log_debug("error starting interface %s",
		    iface->name);
	}
}
}

event_dispatch();

ospfe_shutdown();
/* NOTREACHED */
return (0);
205}

207__dead__attribute__((__noreturn__)) void
208ospfe_shutdown(void)
209{
struct area	*area;
struct iface	*iface;

/* close pipes */
msgbuf_write(&iev_rde->ibuf.w);
msgbuf_clear(&iev_rde->ibuf.w);
close(iev_rde->ibuf.fd);
msgbuf_write(&iev_main->ibuf.w);
msgbuf_clear(&iev_main->ibuf.w);
close(iev_main->ibuf.fd);

/* stop all interfaces and remove all areas */
while ((area = LIST_FIRST(&oeconf->area_list)((&oeconf->area_list)->lh_first)) != NULL((void*)0)) {
LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
	if (if_fsm(iface, IF_EVT_DOWN)) {
		log_debug("error stopping interface %s",
		    iface->name);
	}
}
LIST_REMOVE(area, entry)do { if ((area)->entry.le_next != ((void*)0)) (area)->entry
.le_next->entry.le_prev = (area)->entry.le_prev; *(area
)->entry.le_prev = (area)->entry.le_next; ; ; } while (
0);
area_del(area);
}

nbr_del(nbr_find_peerid(NBR_IDSELF1));
close(oeconf->ospf_socket);

/* clean up */
free(iev_rde);
free(iev_main);
free(oeconf);

log_info("ospf engine exiting");
_exit(0);
243}

245/* imesg */
246int
247ospfe_imsg_compose_parent(int type, pid_t pid, void *data, u_int16_t datalen)
248{
return (imsg_compose_event(iev_main, type, 0, pid, -1, data, datalen));
250}

252int
253ospfe_imsg_compose_rde(int type, u_int32_t peerid, pid_t pid,
  void *data, u_int16_t datalen)
255{
return (imsg_compose_event(iev_rde, type, peerid, pid, -1,
   data, datalen));
258}

260/* ARGSUSED */
261void
262ospfe_dispatch_main(int fd, short event, void *bula)
263{
static struct area	*narea;
static struct iface	*niface;
struct ifaddrchange	*ifc;
struct imsg	 imsg;
struct imsgev	*iev = bula;
struct imsgbuf	*ibuf = &iev->ibuf;
struct area	*area = NULL((void*)0);
struct iface	*iface = NULL((void*)0);
struct kif	*kif;
struct auth_md	 md;
int		 n, link_ok, stub_changed, shut = 0;

if (event & EV_READ0x02) {
1
Assuming the condition is false→
2
←
Taking false branch→
if ((n = imsg_read(ibuf)) == -1 && errno(*__errno()) != EAGAIN35)
	fatal("imsg_read error");
if (n == 0)	/* connection closed */
	shut = 1;
}
if (event & EV_WRITE0x04) {
3
←
Assuming the condition is false→
4
←
Taking false branch→
if ((n = msgbuf_write(&ibuf->w)) == -1 && errno(*__errno()) != EAGAIN35)
	fatal("msgbuf_write");
if (n == 0)	/* connection closed */
	shut = 1;
}

for (;;) {
5
←
Loop condition is true.  Entering loop body→
16
←
Loop condition is true.  Entering loop body→
if ((n = imsg_get(ibuf, &imsg)) == -1)
6
←
Assuming the condition is false→
7
←
Taking false branch→
17
←
Assuming the condition is false→
18
←
Taking false branch→
	fatal("ospfe_dispatch_main: imsg_get error");
if (n == 0)
8
←
Assuming 'n' is not equal to 0→
9
←
Taking false branch→
19
←
Assuming 'n' is not equal to 0→
20
←
Taking false branch→
	break;

switch (imsg.hdr.type) {
10
←
Control jumps to 'case IMSG_RECONF_END:'  at line 439→
21
←
Control jumps to 'case IMSG_RECONF_END:'  at line 439→
case IMSG_IFINFO:
	if (imsg.hdr.len != IMSG_HEADER_SIZEsizeof(struct imsg_hdr) +
	    sizeof(struct kif))
		fatalx("IFINFO imsg with wrong len");
	kif = imsg.data;
	link_ok = (kif->flags & IFF_UP0x1) &&
	    LINK_STATE_IS_UP(kif->link_state)((kif->link_state) >= 4 || (kif->link_state) == 0);

	LIST_FOREACH(area, &oeconf->area_list, entry)for((area) = ((&oeconf->area_list)->lh_first); (area
)!= ((void*)0); (area) = ((area)->entry.le_next)) {
		LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
			if (kif->ifindex == iface->ifindex &&
			    iface->type !=
			    IF_TYPE_VIRTUALLINK) {
				int prev_link_state =
				    (iface->flags & IFF_UP0x1) &&
				    LINK_STATE_IS_UP(iface->linkstate)((iface->linkstate) >= 4 || (iface->linkstate) == 0);

				iface->flags = kif->flags;
				iface->linkstate =
				    kif->link_state;
				iface->mtu = kif->mtu;

				if (link_ok == prev_link_state)
					break;

				if (link_ok) {
					if_fsm(iface,
					    IF_EVT_UP);
					log_warnx("interface %s"
					    " up", iface->name);
				} else {
					if_fsm(iface,
					    IF_EVT_DOWN);
					log_warnx("interface %s"
					    " down",
					    iface->name);
				}
			}
			if (strcmp(kif->ifname,
			    iface->dependon) == 0) {
				log_warnx("interface %s"
				    " changed state, %s"
				    " depends on it",
				    kif->ifname,
				    iface->name);
				iface->depend_ok =
				    ifstate_is_up(kif);

				if ((iface->flags &
				    IFF_UP0x1) &&
				    LINK_STATE_IS_UP(iface->linkstate)((iface->linkstate) >= 4 || (iface->linkstate) == 0))
					orig_rtr_lsa(iface->area);
			}
		}
	}
	break;
case IMSG_IFADDRADD:
	if (imsg.hdr.len != IMSG_HEADER_SIZEsizeof(struct imsg_hdr) +
	    sizeof(struct ifaddrchange))
		fatalx("IFADDRADD imsg with wrong len");
	ifc = imsg.data;

	LIST_FOREACH(area, &oeconf->area_list, entry)for((area) = ((&oeconf->area_list)->lh_first); (area
)!= ((void*)0); (area) = ((area)->entry.le_next)) {
		LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
			if (ifc->ifindex == iface->ifindex &&
			    ifc->addr.s_addr ==
			    iface->addr.s_addr) {
				iface->mask = ifc->mask;
				iface->dst = ifc->dst;
				/*
				 * Previous down event might
				 * have failed if the address
				 * was not present at that
				 * time.
				 */
				if_fsm(iface, IF_EVT_DOWN);
				if_fsm(iface, IF_EVT_UP);
				log_warnx("interface %s:%s "
				    "returned", iface->name,
				    inet_ntoa(iface->addr));
				break;
			}
		}
	}
	break;
case IMSG_IFADDRDEL:
	if (imsg.hdr.len != IMSG_HEADER_SIZEsizeof(struct imsg_hdr) +
	    sizeof(struct ifaddrchange))
		fatalx("IFADDRDEL imsg with wrong len");
	ifc = imsg.data;

	LIST_FOREACH(area, &oeconf->area_list, entry)for((area) = ((&oeconf->area_list)->lh_first); (area
)!= ((void*)0); (area) = ((area)->entry.le_next)) {
		LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
			if (ifc->ifindex == iface->ifindex &&
			    ifc->addr.s_addr ==
			    iface->addr.s_addr) {
				if_fsm(iface, IF_EVT_DOWN);
				log_warnx("interface %s:%s "
				    "gone", iface->name,
				    inet_ntoa(iface->addr));
				break;
			}
		}
	}
	break;
case IMSG_RECONF_CONF:
	if ((noeconf = malloc(sizeof(struct ospfd_conf))) ==
	    NULL((void*)0))
		fatal(NULL((void*)0));
	memcpy(noeconf, imsg.data, sizeof(struct ospfd_conf));

	LIST_INIT(&noeconf->area_list)do { ((&noeconf->area_list)->lh_first) = ((void*)0)
; } while (0);
	LIST_INIT(&noeconf->cand_list)do { ((&noeconf->cand_list)->lh_first) = ((void*)0)
; } while (0);
	break;
case IMSG_RECONF_AREA:
	if ((narea = area_new()) == NULL((void*)0))
		fatal(NULL((void*)0));
	memcpy(narea, imsg.data, sizeof(struct area));

	LIST_INIT(&narea->iface_list)do { ((&narea->iface_list)->lh_first) = ((void*)0);
 } while (0);
	LIST_INIT(&narea->nbr_list)do { ((&narea->nbr_list)->lh_first) = ((void*)0); }
 while (0);
	RB_INIT(&narea->lsa_tree)do { (&narea->lsa_tree)->rbh_root = ((void*)0); } while
 (0);
	SIMPLEQ_INIT(&narea->redist_list)do { (&narea->redist_list)->sqh_first = ((void*)0);
 (&narea->redist_list)->sqh_last = &(&narea
->redist_list)->sqh_first; } while (0);

	LIST_INSERT_HEAD(&noeconf->area_list, narea, entry)do { if (((narea)->entry.le_next = (&noeconf->area_list
)->lh_first) != ((void*)0)) (&noeconf->area_list)->
lh_first->entry.le_prev = &(narea)->entry.le_next; (
&noeconf->area_list)->lh_first = (narea); (narea)->
entry.le_prev = &(&noeconf->area_list)->lh_first
; } while (0);
	break;
case IMSG_RECONF_IFACE:
	if ((niface = malloc(sizeof(struct iface))) == NULL((void*)0))
		fatal(NULL((void*)0));
	memcpy(niface, imsg.data, sizeof(struct iface));

	LIST_INIT(&niface->nbr_list)do { ((&niface->nbr_list)->lh_first) = ((void*)0); }
 while (0);
	TAILQ_INIT(&niface->ls_ack_list)do { (&niface->ls_ack_list)->tqh_first = ((void*)0)
; (&niface->ls_ack_list)->tqh_last = &(&niface
->ls_ack_list)->tqh_first; } while (0);
	TAILQ_INIT(&niface->auth_md_list)do { (&niface->auth_md_list)->tqh_first = ((void*)0
); (&niface->auth_md_list)->tqh_last = &(&niface
->auth_md_list)->tqh_first; } while (0);
	RB_INIT(&niface->lsa_tree)do { (&niface->lsa_tree)->rbh_root = ((void*)0); } while
 (0);

	niface->area = narea;
	LIST_INSERT_HEAD(&narea->iface_list, niface, entry)do { if (((niface)->entry.le_next = (&narea->iface_list
)->lh_first) != ((void*)0)) (&narea->iface_list)->
lh_first->entry.le_prev = &(niface)->entry.le_next;
 (&narea->iface_list)->lh_first = (niface); (niface
)->entry.le_prev = &(&narea->iface_list)->lh_first
; } while (0);
	break;
case IMSG_RECONF_AUTHMD:
	memcpy(&md, imsg.data, sizeof(struct auth_md));
	md_list_add(&niface->auth_md_list, md.keyid, md.key);
	break;
case IMSG_RECONF_END:
	if ((oeconf->flags & OSPFD_FLAG_STUB_ROUTER0x0002) !=
11
←
Assuming the condition is false→
12
←
Taking false branch→
	    (noeconf->flags & OSPFD_FLAG_STUB_ROUTER0x0002))
22
←
Access to field 'flags' results in a dereference of a null pointer (loaded from variable 'noeconf')
		stub_changed = 1;
	else
		stub_changed = 0;
	merge_config(oeconf, noeconf);
	noeconf = NULL((void*)0);
13
←
Null pointer value stored to 'noeconf'→
	if (stub_changed13.1
'stub_changed' is 0
)
14
←
Taking false branch→
		orig_rtr_lsa_all(NULL((void*)0));
	break;
15
←
 Execution continues on line 470→
case IMSG_CTL_KROUTE:
case IMSG_CTL_KROUTE_ADDR:
case IMSG_CTL_IFINFO:
case IMSG_CTL_END:
	control_imsg_relay(&imsg);
	break;
case IMSG_CONTROLFD:
	if ((fd = imsg.fd) == -1)
		fatalx("%s: expected to receive imsg control"
		    "fd but didn't receive any", __func__);
	/* Listen on control socket. */
	control_listen(fd);
	if (pledge("stdio inet mcast", NULL((void*)0)) == -1)
		fatal("pledge");
	break;
default:
	log_debug("ospfe_dispatch_main: error handling imsg %d",
	    imsg.hdr.type);
	break;
}
imsg_free(&imsg);
}
if (!shut)
imsg_event_add(iev);
else {
/* this pipe is dead, so remove the event handler */
event_del(&iev->ev);
event_loopexit(NULL((void*)0));
}
479}

481/* ARGSUSED */
482void
483ospfe_dispatch_rde(int fd, short event, void *bula)
484{
struct lsa_hdr		 lsa_hdr;
struct imsgev		*iev = bula;
struct imsgbuf		*ibuf = &iev->ibuf;
struct nbr		*nbr;
struct lsa_hdr		*lhp;
struct lsa_ref		*ref;
struct area		*area;
struct iface		*iface;
struct lsa_entry	*le;
struct imsg		 imsg;
struct abr_rtr		 ar;
int			 n, noack = 0, shut = 0;
u_int16_t		 l, age;

if (event & EV_READ0x02) {
if ((n = imsg_read(ibuf)) == -1 && errno(*__errno()) != EAGAIN35)
	fatal("imsg_read error");
if (n == 0)	/* connection closed */
	shut = 1;
}
if (event & EV_WRITE0x04) {
if ((n = msgbuf_write(&ibuf->w)) == -1 && errno(*__errno()) != EAGAIN35)
	fatal("msgbuf_write");
if (n == 0)	/* connection closed */
	shut = 1;
}

for (;;) {
if ((n = imsg_get(ibuf, &imsg)) == -1)
	fatal("ospfe_dispatch_rde: imsg_get error");
if (n == 0)
	break;

switch (imsg.hdr.type) {
case IMSG_DD:
	nbr = nbr_find_peerid(imsg.hdr.peerid);
	if (nbr == NULL((void*)0))
		break;

	/*
	 * Ignore imsg when in the wrong state because a
	 * NBR_EVT_SEQ_NUM_MIS may have been issued in between.
	 * Luckily regetting the DB snapshot acts as a barrier
	 * for both state and process synchronisation.
	 */
	if ((nbr->state & NBR_STA_FLOOD(0x0040 | 0x0080 | 0x0100)) == 0)
		break;

	/* put these on my ls_req_list for retrieval */
	lhp = lsa_hdr_new();
	memcpy(lhp, imsg.data, sizeof(*lhp));
	ls_req_list_add(nbr, lhp);
	break;
case IMSG_DD_END:
	nbr = nbr_find_peerid(imsg.hdr.peerid);
	if (nbr == NULL((void*)0))
		break;

	/* see above */
	if ((nbr->state & NBR_STA_FLOOD(0x0040 | 0x0080 | 0x0100)) == 0)
		break;

	nbr->dd_pending--;
	if (nbr->dd_pending == 0 && nbr->state & NBR_STA_LOAD0x0080) {
		if (ls_req_list_empty(nbr))
			nbr_fsm(nbr, NBR_EVT_LOAD_DONE);
		else
			start_ls_req_tx_timer(nbr);
	}
	break;
case IMSG_DD_BADLSA:
	nbr = nbr_find_peerid(imsg.hdr.peerid);
	if (nbr == NULL((void*)0))
		break;

	if (nbr->iface->self == nbr)
		fatalx("ospfe_dispatch_rde: "
		    "dummy neighbor got BADREQ");

	nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
	break;
case IMSG_DB_SNAPSHOT:
	nbr = nbr_find_peerid(imsg.hdr.peerid);
	if (nbr == NULL((void*)0))
		break;
	if (nbr->state != NBR_STA_SNAP0x0020)	/* discard */
		break;

	/* add LSA header to the neighbor db_sum_list */
	lhp = lsa_hdr_new();
	memcpy(lhp, imsg.data, sizeof(*lhp));
	db_sum_list_add(nbr, lhp);
	break;
case IMSG_DB_END:
	nbr = nbr_find_peerid(imsg.hdr.peerid);
	if (nbr == NULL((void*)0))
		break;

	nbr->dd_snapshot = 0;
	if (nbr->state != NBR_STA_SNAP0x0020)
		break;

	/* snapshot done, start tx of dd packets */
	nbr_fsm(nbr, NBR_EVT_SNAP_DONE);
	break;
case IMSG_LS_FLOOD:
	nbr = nbr_find_peerid(imsg.hdr.peerid);
	if (nbr == NULL((void*)0))
		break;

	l = imsg.hdr.len - IMSG_HEADER_SIZEsizeof(struct imsg_hdr);
	if (l < sizeof(lsa_hdr))
		fatalx("ospfe_dispatch_rde: "
		    "bad imsg size");
	memcpy(&lsa_hdr, imsg.data, sizeof(lsa_hdr));

	ref = lsa_cache_add(imsg.data, l);

	if (lsa_hdr.type == LSA_TYPE_EXTERNAL5) {
		/*
		 * flood on all areas but stub areas and
		 * virtual links
		 */
		LIST_FOREACH(area, &oeconf->area_list, entry)for((area) = ((&oeconf->area_list)->lh_first); (area
)!= ((void*)0); (area) = ((area)->entry.le_next)) {
		    if (area->stub)
			    continue;
		    LIST_FOREACH(iface, &area->iface_list,for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next))
			entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
			    noack += lsa_flood(iface, nbr,
				&lsa_hdr, imsg.data);
		    }
		}
	} else if (lsa_hdr.type == LSA_TYPE_LINK_OPAQ9) {
		/*
		 * Flood on interface only
		 */
		noack += lsa_flood(nbr->iface, nbr,
		    &lsa_hdr, imsg.data);
	} else {
		/*
		 * Flood on all area interfaces. For
		 * area 0.0.0.0 include the virtual links.
		 */
		area = nbr->iface->area;
		LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
			noack += lsa_flood(iface, nbr,
			    &lsa_hdr, imsg.data);
		}
		/* XXX virtual links */
	}

	/* remove from ls_req_list */
	le = ls_req_list_get(nbr, &lsa_hdr);
	if (!(nbr->state & NBR_STA_FULL0x0100) && le != NULL((void*)0)) {
		ls_req_list_free(nbr, le);
		/*
		 * XXX no need to ack requested lsa
		 * the problem is that the RFC is very
		 * unclear about this.
		 */
		noack = 1;
	}

	if (!noack && nbr->iface != NULL((void*)0) &&
	    nbr->iface->self != nbr) {
		if (!(nbr->iface->state & IF_STA_BACKUP0x20) ||
		    nbr->iface->dr == nbr) {
			/* delayed ack */
			lhp = lsa_hdr_new();
			memcpy(lhp, &lsa_hdr, sizeof(*lhp));
			ls_ack_list_add(nbr->iface, lhp);
		}
	}

	lsa_cache_put(ref, nbr);
	break;
case IMSG_LS_UPD:
case IMSG_LS_SNAP:
	/*
	 * IMSG_LS_UPD is used in two cases:
	 * 1. as response to ls requests
	 * 2. as response to ls updates where the DB
	 *    is newer then the sent LSA
	 * IMSG_LS_SNAP is used in one case:
	 *    in EXSTART when the LSA has age MaxAge
	 */
	l = imsg.hdr.len - IMSG_HEADER_SIZEsizeof(struct imsg_hdr);
	if (l < sizeof(lsa_hdr))
		fatalx("ospfe_dispatch_rde: "
		    "bad imsg size");

	nbr = nbr_find_peerid(imsg.hdr.peerid);
	if (nbr == NULL((void*)0))
		break;

	if (nbr->iface->self == nbr)
		break;

	if (imsg.hdr.type == IMSG_LS_SNAP &&
	    nbr->state != NBR_STA_SNAP0x0020)
		break;

	memcpy(&age, imsg.data, sizeof(age));
	ref = lsa_cache_add(imsg.data, l);
	if (ntohs(age)(__uint16_t)(__builtin_constant_p(age) ? (__uint16_t)(((__uint16_t
)(age) & 0xffU) << 8 | ((__uint16_t)(age) & 0xff00U
) >> 8) : __swap16md(age)) >= MAX_AGE3600)
		/* add to retransmit list */
		ls_retrans_list_add(nbr, imsg.data, 0, 0);
	else
		ls_retrans_list_add(nbr, imsg.data, 0, 1);

	lsa_cache_put(ref, nbr);
	break;
case IMSG_LS_ACK:
	/*
	 * IMSG_LS_ACK is used in two cases:
	 * 1. LSA was a duplicate
	 * 2. LS age is MaxAge and there is no current
	 *    instance in the DB plus no neighbor in state
	 *    Exchange or Loading
	 */
	nbr = nbr_find_peerid(imsg.hdr.peerid);
	if (nbr == NULL((void*)0))
		break;

	if (nbr->iface->self == nbr)
		break;

	if (imsg.hdr.len - IMSG_HEADER_SIZEsizeof(struct imsg_hdr) != sizeof(lsa_hdr))
		fatalx("ospfe_dispatch_rde: bad imsg size");
	memcpy(&lsa_hdr, imsg.data, sizeof(lsa_hdr));

	/* for case one check for implied acks */
	if (nbr->iface->state & IF_STA_DROTHER0x10)
		if (ls_retrans_list_del(nbr->iface->self,
		    &lsa_hdr) == 0)
			break;
	if (ls_retrans_list_del(nbr, &lsa_hdr) == 0)
		break;

	/* send a direct acknowledgement */
	send_direct_ack(nbr->iface, nbr->addr, imsg.data,
	    imsg.hdr.len - IMSG_HEADER_SIZEsizeof(struct imsg_hdr));

	break;
case IMSG_LS_BADREQ:
	nbr = nbr_find_peerid(imsg.hdr.peerid);
	if (nbr == NULL((void*)0))
		break;

	if (nbr->iface->self == nbr)
		fatalx("ospfe_dispatch_rde: "
		    "dummy neighbor got BADREQ");

	nbr_fsm(nbr, NBR_EVT_BAD_LS_REQ);
	break;
case IMSG_ABR_UP:
	memcpy(&ar, imsg.data, sizeof(ar));

	if ((iface = find_vlink(&ar)) != NULL((void*)0) &&
	    iface->state == IF_STA_DOWN0x01)
		if (if_fsm(iface, IF_EVT_UP)) {
			log_debug("error starting interface %s",
			    iface->name);
		}
	break;
case IMSG_ABR_DOWN:
	memcpy(&ar, imsg.data, sizeof(ar));

	if ((iface = find_vlink(&ar)) != NULL((void*)0) &&
	    iface->state == IF_STA_POINTTOPOINT0x08)
		if (if_fsm(iface, IF_EVT_DOWN)) {
			log_debug("error stopping interface %s",
			    iface->name);
		}
	break;
case IMSG_CTL_AREA:
case IMSG_CTL_IFACE:
case IMSG_CTL_END:
case IMSG_CTL_SHOW_DATABASE:
case IMSG_CTL_SHOW_DB_EXT:
case IMSG_CTL_SHOW_DB_NET:
case IMSG_CTL_SHOW_DB_RTR:
case IMSG_CTL_SHOW_DB_SELF:
case IMSG_CTL_SHOW_DB_SUM:
case IMSG_CTL_SHOW_DB_ASBR:
case IMSG_CTL_SHOW_DB_OPAQ:
case IMSG_CTL_SHOW_RIB:
case IMSG_CTL_SHOW_SUM:
case IMSG_CTL_SHOW_SUM_AREA:
	control_imsg_relay(&imsg);
	break;
default:
	log_debug("ospfe_dispatch_rde: error handling imsg %d",
	    imsg.hdr.type);
	break;
}
imsg_free(&imsg);
}
if (!shut)
imsg_event_add(iev);
else {
/* this pipe is dead, so remove the event handler */
event_del(&iev->ev);
event_loopexit(NULL((void*)0));
}
790}

792struct iface *
793find_vlink(struct abr_rtr *ar)
794{
struct area	*area;
struct iface	*iface = NULL((void*)0);

LIST_FOREACH(area, &oeconf->area_list, entry)for((area) = ((&oeconf->area_list)->lh_first); (area
)!= ((void*)0); (area) = ((area)->entry.le_next))
LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next))
	if (iface->abr_id.s_addr == ar->abr_id.s_addr &&
	    iface->type == IF_TYPE_VIRTUALLINK &&
	    iface->area->id.s_addr == ar->area.s_addr) {
		iface->dst.s_addr = ar->dst_ip.s_addr;
		iface->addr.s_addr = ar->addr.s_addr;
		iface->metric = ar->metric;

		return (iface);
	}

return (iface);
811}

813void
814orig_rtr_lsa_all(struct area *area)
815{
struct area	*a;

/*
* update all router LSA in all areas except area itself,
* as this update is already running.
*/
LIST_FOREACH(a, &oeconf->area_list, entry)for((a) = ((&oeconf->area_list)->lh_first); (a)!= (
(void*)0); (a) = ((a)->entry.le_next))
if (a != area)
	orig_rtr_lsa(a);
825}

827void
828orig_rtr_lsa(struct area *area)
829{
struct lsa_hdr		 lsa_hdr;
struct lsa_rtr		 lsa_rtr;
struct lsa_rtr_link	 rtr_link;
struct iface		*iface;
struct ibuf		*buf;
struct nbr		*nbr, *self = NULL((void*)0);
u_int16_t		 num_links = 0;
u_int16_t		 chksum;
u_int8_t		 border, virtual = 0;

log_debug("orig_rtr_lsa: area %s", inet_ntoa(area->id));

if ((buf = ibuf_dynamic(sizeof(lsa_hdr),
   IP_MAXPACKET65535 - sizeof(struct ip) - sizeof(struct ospf_hdr) -
   sizeof(u_int32_t) - MD5_DIGEST_LENGTH16)) == NULL((void*)0))
fatal("orig_rtr_lsa");

/* reserve space for LSA header and LSA Router header */
if (ibuf_reserve(buf, sizeof(lsa_hdr)) == NULL((void*)0))
fatal("orig_rtr_lsa: ibuf_reserve failed");

if (ibuf_reserve(buf, sizeof(lsa_rtr)) == NULL((void*)0))
fatal("orig_rtr_lsa: ibuf_reserve failed");

/* links */
LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
if (self == NULL((void*)0) && iface->self != NULL((void*)0))
	self = iface->self;

bzero(&rtr_link, sizeof(rtr_link));

if (iface->state & IF_STA_LOOPBACK0x02) {
	rtr_link.id = iface->addr.s_addr;
	rtr_link.data = 0xffffffff;
	rtr_link.type = LINK_TYPE_STUB_NET3;
	rtr_link.metric = htons(iface->metric)(__uint16_t)(__builtin_constant_p(iface->metric) ? (__uint16_t
)(((__uint16_t)(iface->metric) & 0xffU) << 8 | (
(__uint16_t)(iface->metric) & 0xff00U) >> 8) : __swap16md
(iface->metric));
	num_links++;
	if (ibuf_add(buf, &rtr_link, sizeof(rtr_link)))
		fatalx("orig_rtr_lsa: ibuf_add failed");
	continue;
}

switch (iface->type) {
case IF_TYPE_POINTOPOINT:
	LIST_FOREACH(nbr, &iface->nbr_list, entry)for((nbr) = ((&iface->nbr_list)->lh_first); (nbr)!=
 ((void*)0); (nbr) = ((nbr)->entry.le_next))
		if (nbr != iface->self &&
		    nbr->state & NBR_STA_FULL0x0100)
			break;
	if (nbr) {
		log_debug("orig_rtr_lsa: point-to-point, "
		    "interface %s", iface->name);
		rtr_link.id = nbr->id.s_addr;
		rtr_link.data = iface->addr.s_addr;
		rtr_link.type = LINK_TYPE_POINTTOPOINT1;
		/* RFC 3137: stub router support */
		if (oeconf->flags & OSPFD_FLAG_STUB_ROUTER0x0002 ||
		    oe_nofib)
			rtr_link.metric = MAX_METRIC65535;
		else if (iface->dependon[0] != '\0' &&
			 iface->depend_ok == 0)
			rtr_link.metric = MAX_METRIC65535;
		else
			rtr_link.metric = htons(iface->metric)(__uint16_t)(__builtin_constant_p(iface->metric) ? (__uint16_t
)(((__uint16_t)(iface->metric) & 0xffU) << 8 | (
(__uint16_t)(iface->metric) & 0xff00U) >> 8) : __swap16md
(iface->metric));
		num_links++;
		if (ibuf_add(buf, &rtr_link, sizeof(rtr_link)))
			fatalx("orig_rtr_lsa: ibuf_add failed");
	}
	if ((iface->flags & IFF_UP0x1) &&
	    LINK_STATE_IS_UP(iface->linkstate)((iface->linkstate) >= 4 || (iface->linkstate) == 0)) {
		log_debug("orig_rtr_lsa: stub net, "
		    "interface %s", iface->name);
		bzero(&rtr_link, sizeof(rtr_link));
		if (nbr) {
			rtr_link.id = nbr->addr.s_addr;
			rtr_link.data = 0xffffffff;
		} else {
			rtr_link.id = iface->addr.s_addr &
			              iface->mask.s_addr;
			rtr_link.data = iface->mask.s_addr;
		}
		rtr_link.type = LINK_TYPE_STUB_NET3;
		if (iface->dependon[0] != '\0' &&
		    iface->depend_ok == 0)
			rtr_link.metric = MAX_METRIC65535;
		else
			rtr_link.metric = htons(iface->metric)(__uint16_t)(__builtin_constant_p(iface->metric) ? (__uint16_t
)(((__uint16_t)(iface->metric) & 0xffU) << 8 | (
(__uint16_t)(iface->metric) & 0xff00U) >> 8) : __swap16md
(iface->metric));
		num_links++;
		if (ibuf_add(buf, &rtr_link, sizeof(rtr_link)))
			fatalx("orig_rtr_lsa: ibuf_add failed");
	}
	continue;
case IF_TYPE_BROADCAST:
case IF_TYPE_NBMA:
	if ((iface->state & IF_STA_MULTI(0x10 | 0x20 | 0x40))) {
		if (iface->dr == iface->self) {
			LIST_FOREACH(nbr, &iface->nbr_list,for((nbr) = ((&iface->nbr_list)->lh_first); (nbr)!=
 ((void*)0); (nbr) = ((nbr)->entry.le_next))
			    entry)for((nbr) = ((&iface->nbr_list)->lh_first); (nbr)!=
 ((void*)0); (nbr) = ((nbr)->entry.le_next))
				if (nbr != iface->self &&
				    nbr->state & NBR_STA_FULL0x0100)
					break;
		} else
			nbr = iface->dr;

		if (nbr && nbr->state & NBR_STA_FULL0x0100) {
			log_debug("orig_rtr_lsa: transit net, "
			    "interface %s", iface->name);

			rtr_link.id = iface->dr->addr.s_addr;
			rtr_link.data = iface->addr.s_addr;
			rtr_link.type = LINK_TYPE_TRANSIT_NET2;
			break;
		}
	}

	/*
	 * do not add a stub net LSA for interfaces that are:
	 *  - down
	 *  - have a linkstate which is down, apart from carp:
	 *    backup carp interfaces have linkstate down, but
	 *    we still announce them.
	 */
	if (!(iface->flags & IFF_UP0x1) ||
	    (!LINK_STATE_IS_UP(iface->linkstate)((iface->linkstate) >= 4 || (iface->linkstate) == 0) &&
	    !(iface->if_type == IFT_CARP0xf7 &&
	    iface->linkstate == LINK_STATE_DOWN2)))
		continue;
	log_debug("orig_rtr_lsa: stub net, "
	    "interface %s", iface->name);

	rtr_link.id =
	    iface->addr.s_addr & iface->mask.s_addr;
	rtr_link.data = iface->mask.s_addr;
	rtr_link.type = LINK_TYPE_STUB_NET3;

	rtr_link.num_tos = 0;
	/*
	 * backup carp interfaces and interfaces that depend
	 * on an interface that is down are announced with
	 * high metric for faster failover.
	 */
	if (iface->if_type == IFT_CARP0xf7 &&
	    iface->linkstate == LINK_STATE_DOWN2)
		rtr_link.metric = MAX_METRIC65535;
	else if (iface->dependon[0] != '\0' &&
	         iface->depend_ok == 0)
		rtr_link.metric = MAX_METRIC65535;
	else
		rtr_link.metric = htons(iface->metric)(__uint16_t)(__builtin_constant_p(iface->metric) ? (__uint16_t
)(((__uint16_t)(iface->metric) & 0xffU) << 8 | (
(__uint16_t)(iface->metric) & 0xff00U) >> 8) : __swap16md
(iface->metric));
	num_links++;
	if (ibuf_add(buf, &rtr_link, sizeof(rtr_link)))
		fatalx("orig_rtr_lsa: ibuf_add failed");
	continue;
case IF_TYPE_VIRTUALLINK:
	LIST_FOREACH(nbr, &iface->nbr_list, entry)for((nbr) = ((&iface->nbr_list)->lh_first); (nbr)!=
 ((void*)0); (nbr) = ((nbr)->entry.le_next)) {
		if (nbr != iface->self &&
		    nbr->state & NBR_STA_FULL0x0100)
			break;
	}
	if (nbr) {
		rtr_link.id = nbr->id.s_addr;
		rtr_link.data = iface->addr.s_addr;
		rtr_link.type = LINK_TYPE_VIRTUAL4;
		/* RFC 3137: stub router support */
		if (oeconf->flags & OSPFD_FLAG_STUB_ROUTER0x0002 ||
		    oe_nofib)
			rtr_link.metric = MAX_METRIC65535;
		else
			rtr_link.metric = htons(iface->metric)(__uint16_t)(__builtin_constant_p(iface->metric) ? (__uint16_t
)(((__uint16_t)(iface->metric) & 0xffU) << 8 | (
(__uint16_t)(iface->metric) & 0xff00U) >> 8) : __swap16md
(iface->metric));
		num_links++;
		virtual = 1;
		if (ibuf_add(buf, &rtr_link, sizeof(rtr_link)))
			fatalx("orig_rtr_lsa: ibuf_add failed");

		log_debug("orig_rtr_lsa: virtual link, "
		    "interface %s", iface->name);
	}
	continue;
case IF_TYPE_POINTOMULTIPOINT:
	log_debug("orig_rtr_lsa: stub net, "
	    "interface %s", iface->name);
	rtr_link.id = iface->addr.s_addr;
	rtr_link.data = 0xffffffff;
	rtr_link.type = LINK_TYPE_STUB_NET3;
	rtr_link.metric = htons(iface->metric)(__uint16_t)(__builtin_constant_p(iface->metric) ? (__uint16_t
)(((__uint16_t)(iface->metric) & 0xffU) << 8 | (
(__uint16_t)(iface->metric) & 0xff00U) >> 8) : __swap16md
(iface->metric));
	num_links++;
	if (ibuf_add(buf, &rtr_link, sizeof(rtr_link)))
		fatalx("orig_rtr_lsa: ibuf_add failed");

	LIST_FOREACH(nbr, &iface->nbr_list, entry)for((nbr) = ((&iface->nbr_list)->lh_first); (nbr)!=
 ((void*)0); (nbr) = ((nbr)->entry.le_next)) {
		if (nbr != iface->self &&
		    nbr->state & NBR_STA_FULL0x0100) {
			bzero(&rtr_link, sizeof(rtr_link));
			log_debug("orig_rtr_lsa: "
			    "point-to-multipoint, interface %s",
			    iface->name);
			rtr_link.id = nbr->addr.s_addr;
			rtr_link.data = iface->addr.s_addr;
			rtr_link.type = LINK_TYPE_POINTTOPOINT1;
			/* RFC 3137: stub router support */
			if (oe_nofib || oeconf->flags &
			    OSPFD_FLAG_STUB_ROUTER0x0002)
				rtr_link.metric = MAX_METRIC65535;
			else if (iface->dependon[0] != '\0' &&
				 iface->depend_ok == 0)
				rtr_link.metric = MAX_METRIC65535;
			else
				rtr_link.metric =
				    htons(iface->metric)(__uint16_t)(__builtin_constant_p(iface->metric) ? (__uint16_t
)(((__uint16_t)(iface->metric) & 0xffU) << 8 | (
(__uint16_t)(iface->metric) & 0xff00U) >> 8) : __swap16md
(iface->metric));
			num_links++;
			if (ibuf_add(buf, &rtr_link,
			    sizeof(rtr_link)))
				fatalx("orig_rtr_lsa: "
				    "ibuf_add failed");
		}
	}
	continue;
default:
	fatalx("orig_rtr_lsa: unknown interface type");
}

rtr_link.num_tos = 0;
/* RFC 3137: stub router support */
if ((oeconf->flags & OSPFD_FLAG_STUB_ROUTER0x0002 || oe_nofib) &&
    rtr_link.type != LINK_TYPE_STUB_NET3)
	rtr_link.metric = MAX_METRIC65535;
else if (iface->dependon[0] != '\0' && iface->depend_ok == 0)
	rtr_link.metric = MAX_METRIC65535;
else
	rtr_link.metric = htons(iface->metric)(__uint16_t)(__builtin_constant_p(iface->metric) ? (__uint16_t
)(((__uint16_t)(iface->metric) & 0xffU) << 8 | (
(__uint16_t)(iface->metric) & 0xff00U) >> 8) : __swap16md
(iface->metric));
num_links++;
if (ibuf_add(buf, &rtr_link, sizeof(rtr_link)))
	fatalx("orig_rtr_lsa: ibuf_add failed");
}

/* LSA router header */
lsa_rtr.flags = 0;
/*
* Set the E bit as soon as an as-ext lsa may be redistributed, only
* setting it in case we redistribute something is not worth the fuss.
* Do not set the E bit in case of a stub area.
*/
if (oeconf->redistribute && !area->stub)
lsa_rtr.flags |= OSPF_RTR_E0x02;

border = (area_border_router(oeconf) != 0);
if (border != oeconf->border) {
oeconf->border = border;
orig_rtr_lsa_all(area);
}
if (oeconf->border)
lsa_rtr.flags |= OSPF_RTR_B0x01;

/* TODO set V flag if a active virtual link ends here and the
* area is the transit area for this link. */
if (virtual)
lsa_rtr.flags |= OSPF_RTR_V0x04;

lsa_rtr.dummy = 0;
lsa_rtr.nlinks = htons(num_links)(__uint16_t)(__builtin_constant_p(num_links) ? (__uint16_t)((
(__uint16_t)(num_links) & 0xffU) << 8 | ((__uint16_t
)(num_links) & 0xff00U) >> 8) : __swap16md(num_links
));
memcpy(ibuf_seek(buf, sizeof(lsa_hdr), sizeof(lsa_rtr)),
   &lsa_rtr, sizeof(lsa_rtr));

/* LSA header */
lsa_hdr.age = htons(DEFAULT_AGE)(__uint16_t)(__builtin_constant_p(0) ? (__uint16_t)(((__uint16_t
)(0) & 0xffU) << 8 | ((__uint16_t)(0) & 0xff00U
) >> 8) : __swap16md(0));
lsa_hdr.opts = area_ospf_options(area);
lsa_hdr.type = LSA_TYPE_ROUTER1;
lsa_hdr.ls_id = oeconf->rtr_id.s_addr;
lsa_hdr.adv_rtr = oeconf->rtr_id.s_addr;
lsa_hdr.seq_num = htonl(INIT_SEQ_NUM)(__uint32_t)(__builtin_constant_p(0x80000001) ? (__uint32_t)(
((__uint32_t)(0x80000001) & 0xff) << 24 | ((__uint32_t
)(0x80000001) & 0xff00) << 8 | ((__uint32_t)(0x80000001
) & 0xff0000) >> 8 | ((__uint32_t)(0x80000001) &
 0xff000000) >> 24) : __swap32md(0x80000001));
lsa_hdr.len = htons(ibuf_size(buf))(__uint16_t)(__builtin_constant_p(ibuf_size(buf)) ? (__uint16_t
)(((__uint16_t)(ibuf_size(buf)) & 0xffU) << 8 | ((__uint16_t
)(ibuf_size(buf)) & 0xff00U) >> 8) : __swap16md(ibuf_size
(buf)));
lsa_hdr.ls_chksum = 0;		/* updated later */
memcpy(ibuf_seek(buf, 0, sizeof(lsa_hdr)), &lsa_hdr, sizeof(lsa_hdr));

chksum = htons(iso_cksum(buf->buf, ibuf_size(buf), LS_CKSUM_OFFSET))(__uint16_t)(__builtin_constant_p(iso_cksum(buf->buf, ibuf_size
(buf), __builtin_offsetof(struct lsa_hdr, ls_chksum))) ? (__uint16_t
)(((__uint16_t)(iso_cksum(buf->buf, ibuf_size(buf), __builtin_offsetof
(struct lsa_hdr, ls_chksum))) & 0xffU) << 8 | ((__uint16_t
)(iso_cksum(buf->buf, ibuf_size(buf), __builtin_offsetof(struct
 lsa_hdr, ls_chksum))) & 0xff00U) >> 8) : __swap16md
(iso_cksum(buf->buf, ibuf_size(buf), __builtin_offsetof(struct
 lsa_hdr, ls_chksum))));
memcpy(ibuf_seek(buf, LS_CKSUM_OFFSET__builtin_offsetof(struct lsa_hdr, ls_chksum), sizeof(chksum)),
   &chksum, sizeof(chksum));

if (self && num_links)
imsg_compose_event(iev_rde, IMSG_LS_UPD, self->peerid, 0,
    -1, buf->buf, ibuf_size(buf));
else
log_warnx("orig_rtr_lsa: empty area %s",
    inet_ntoa(area->id));

ibuf_free(buf);
1115}

1117void
1118orig_net_lsa(struct iface *iface)
1119{
struct lsa_hdr		 lsa_hdr;
struct nbr		*nbr;
struct ibuf		*buf;
int			 num_rtr = 0;
u_int16_t		 chksum;

if ((buf = ibuf_dynamic(sizeof(lsa_hdr),
   IP_MAXPACKET65535 - sizeof(struct ip) - sizeof(struct ospf_hdr) -
   sizeof(u_int32_t) - MD5_DIGEST_LENGTH16)) == NULL((void*)0))
fatal("orig_net_lsa");

/* reserve space for LSA header and LSA Router header */
if (ibuf_reserve(buf, sizeof(lsa_hdr)) == NULL((void*)0))
fatal("orig_net_lsa: ibuf_reserve failed");

/* LSA net mask and then all fully adjacent routers */
if (ibuf_add(buf, &iface->mask, sizeof(iface->mask)))
fatal("orig_net_lsa: ibuf_add failed");

/* fully adjacent neighbors + self */
LIST_FOREACH(nbr, &iface->nbr_list, entry)for((nbr) = ((&iface->nbr_list)->lh_first); (nbr)!=
 ((void*)0); (nbr) = ((nbr)->entry.le_next))
if (nbr->state & NBR_STA_FULL0x0100) {
	if (ibuf_add(buf, &nbr->id, sizeof(nbr->id)))
		fatal("orig_net_lsa: ibuf_add failed");
	num_rtr++;
}

if (num_rtr == 1) {
/* non transit net therefore no need to generate a net lsa */
ibuf_free(buf);
return;
}

/* LSA header */
if (iface->state & IF_STA_DR0x40)
lsa_hdr.age = htons(DEFAULT_AGE)(__uint16_t)(__builtin_constant_p(0) ? (__uint16_t)(((__uint16_t
)(0) & 0xffU) << 8 | ((__uint16_t)(0) & 0xff00U
) >> 8) : __swap16md(0));
else
lsa_hdr.age = htons(MAX_AGE)(__uint16_t)(__builtin_constant_p(3600) ? (__uint16_t)(((__uint16_t
)(3600) & 0xffU) << 8 | ((__uint16_t)(3600) & 0xff00U
) >> 8) : __swap16md(3600));

lsa_hdr.opts = area_ospf_options(iface->area);
lsa_hdr.type = LSA_TYPE_NETWORK2;
lsa_hdr.ls_id = iface->addr.s_addr;
lsa_hdr.adv_rtr = oeconf->rtr_id.s_addr;
lsa_hdr.seq_num = htonl(INIT_SEQ_NUM)(__uint32_t)(__builtin_constant_p(0x80000001) ? (__uint32_t)(
((__uint32_t)(0x80000001) & 0xff) << 24 | ((__uint32_t
)(0x80000001) & 0xff00) << 8 | ((__uint32_t)(0x80000001
) & 0xff0000) >> 8 | ((__uint32_t)(0x80000001) &
 0xff000000) >> 24) : __swap32md(0x80000001));
lsa_hdr.len = htons(ibuf_size(buf))(__uint16_t)(__builtin_constant_p(ibuf_size(buf)) ? (__uint16_t
)(((__uint16_t)(ibuf_size(buf)) & 0xffU) << 8 | ((__uint16_t
)(ibuf_size(buf)) & 0xff00U) >> 8) : __swap16md(ibuf_size
(buf)));
lsa_hdr.ls_chksum = 0;		/* updated later */
memcpy(ibuf_seek(buf, 0, sizeof(lsa_hdr)), &lsa_hdr, sizeof(lsa_hdr));

chksum = htons(iso_cksum(buf->buf, ibuf_size(buf), LS_CKSUM_OFFSET))(__uint16_t)(__builtin_constant_p(iso_cksum(buf->buf, ibuf_size
(buf), __builtin_offsetof(struct lsa_hdr, ls_chksum))) ? (__uint16_t
)(((__uint16_t)(iso_cksum(buf->buf, ibuf_size(buf), __builtin_offsetof
(struct lsa_hdr, ls_chksum))) & 0xffU) << 8 | ((__uint16_t
)(iso_cksum(buf->buf, ibuf_size(buf), __builtin_offsetof(struct
 lsa_hdr, ls_chksum))) & 0xff00U) >> 8) : __swap16md
(iso_cksum(buf->buf, ibuf_size(buf), __builtin_offsetof(struct
 lsa_hdr, ls_chksum))));
memcpy(ibuf_seek(buf, LS_CKSUM_OFFSET__builtin_offsetof(struct lsa_hdr, ls_chksum), sizeof(chksum)),
   &chksum, sizeof(chksum));

imsg_compose_event(iev_rde, IMSG_LS_UPD, iface->self->peerid, 0,
   -1, buf->buf, ibuf_size(buf));

ibuf_free(buf);
1176}

1178u_int32_t
1179ospfe_router_id(void)
1180{
return (oeconf->rtr_id.s_addr);
1182}

1184void
1185ospfe_fib_update(int type)
1186{
int	old = oe_nofib;

if (type == IMSG_CTL_FIB_COUPLE)
oe_nofib = 0;
if (type == IMSG_CTL_FIB_DECOUPLE)
oe_nofib = 1;
if (old != oe_nofib)
orig_rtr_lsa_all(NULL((void*)0));
1195}

1197void
1198ospfe_iface_ctl(struct ctl_conn *c, unsigned int idx)
1199{
struct area		*area;
struct iface		*iface;
struct ctl_iface	*ictl;

LIST_FOREACH(area, &oeconf->area_list, entry)for((area) = ((&oeconf->area_list)->lh_first); (area
)!= ((void*)0); (area) = ((area)->entry.le_next))
LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next))
	if (idx == 0 || idx == iface->ifindex) {
		ictl = if_to_ctl(iface);
		imsg_compose_event(&c->iev,
		    IMSG_CTL_SHOW_INTERFACE, 0, 0, -1,
		    ictl, sizeof(struct ctl_iface));
	}
1212}

1214void
1215ospfe_nbr_ctl(struct ctl_conn *c)
1216{
struct area	*area;
struct iface	*iface;
struct nbr	*nbr;
struct ctl_nbr	*nctl;

LIST_FOREACH(area, &oeconf->area_list, entry)for((area) = ((&oeconf->area_list)->lh_first); (area
)!= ((void*)0); (area) = ((area)->entry.le_next))
LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next))
	LIST_FOREACH(nbr, &iface->nbr_list, entry)for((nbr) = ((&iface->nbr_list)->lh_first); (nbr)!=
 ((void*)0); (nbr) = ((nbr)->entry.le_next)) {
		if (iface->self != nbr) {
			nctl = nbr_to_ctl(nbr);
			imsg_compose_event(&c->iev,
			    IMSG_CTL_SHOW_NBR, 0, 0, -1, nctl,
			    sizeof(struct ctl_nbr));
		}
	}

imsg_compose_event(&c->iev, IMSG_CTL_END, 0, 0, -1, NULL((void*)0), 0);
1234}

1236void
1237ospfe_demote_area(struct area *area, int active)
1238{
struct demote_msg	dmsg;

if (ospfd_process != PROC_OSPF_ENGINE ||
   area->demote_group[0] == '\0')
return;

bzero(&dmsg, sizeof(dmsg));
strlcpy(dmsg.demote_group, area->demote_group,
   sizeof(dmsg.demote_group));
dmsg.level = area->demote_level;
if (active)
dmsg.level = -dmsg.level;

ospfe_imsg_compose_parent(IMSG_DEMOTE, 0, &dmsg, sizeof(dmsg));
1253}

1255void
1256ospfe_demote_iface(struct iface *iface, int active)
1257{
struct demote_msg	dmsg;

if (ospfd_process != PROC_OSPF_ENGINE ||
   iface->demote_group[0] == '\0')
return;

bzero(&dmsg, sizeof(dmsg));
strlcpy(dmsg.demote_group, iface->demote_group,
sizeof(dmsg.demote_group));
if (active)
dmsg.level = -1;
else
dmsg.level = 1;

log_warnx("ospfe_demote_iface: group %s level %d", dmsg.demote_group,
   dmsg.level);

ospfe_imsg_compose_parent(IMSG_DEMOTE, 0, &dmsg, sizeof(dmsg));
1276}