/usr/src/usr.sbin/ospfd/ospfd.c

Bug Summary

File:	src/usr.sbin/ospfd/ospfd.c
Warning:	line 190, column 29 Dereference of null pointer
Annotated Source Code

Press '?' to see keyboard shortcuts
Show analyzer invocation
clang -cc1 -cc1 -triple amd64-unknown-openbsd7.0 -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name ospfd.c -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 1 -pic-is-pie -mframe-pointer=all -relaxed-aliasing -fno-rounding-math -mconstructor-aliases -munwind-tables -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/usr.sbin/ospfd/obj -resource-dir /usr/local/lib/clang/13.0.0 -I /usr/src/usr.sbin/ospfd -internal-isystem /usr/local/lib/clang/13.0.0/include -internal-externc-isystem /usr/include -O2 -fdebug-compilation-dir=/usr/src/usr.sbin/ospfd/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /home/ben/Projects/vmm/scan-build/2022-01-12-194120-40624-1 -x c /usr/src/usr.sbin/ospfd/ospfd.c
1/*	$OpenBSD: ospfd.c,v 1.116 2021/09/06 13:32:18 deraadt Exp $ */

3/*
* Copyright (c) 2005 Claudio Jeker <claudio@openbsd.org>
* Copyright (c) 2004 Esben Norby <norby@openbsd.org>
* Copyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org>
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/

21#include <sys/types.h>
22#include <sys/socket.h>
23#include <sys/queue.h>
24#include <sys/time.h>
25#include <sys/stat.h>
26#include <sys/wait.h>
27#include <sys/sysctl.h>
28#include <syslog.h>

30#include <netinet/in.h>
31#include <arpa/inet.h>
32#include <net/if_types.h>

34#include <event.h>
35#include <err.h>
36#include <errno(*__errno()).h>
37#include <pwd.h>
38#include <stdio.h>
39#include <stdlib.h>
40#include <string.h>
41#include <signal.h>
42#include <unistd.h>

44#include "ospfd.h"
45#include "ospf.h"
46#include "ospfe.h"
47#include "control.h"
48#include "log.h"
49#include "rde.h"

51void		main_sig_handler(int, short, void *);
52__dead__attribute__((__noreturn__)) void	usage(void);
53__dead__attribute__((__noreturn__)) void	ospfd_shutdown(void);

55void	main_dispatch_ospfe(int, short, void *);
56void	main_dispatch_rde(int, short, void *);

58int	ospf_reload(void);
59int	ospf_sendboth(enum imsg_type, void *, u_int16_t);
60int	merge_interfaces(struct area *, struct area *);
61struct iface *iface_lookup(struct area *, struct iface *);

63int	pipe_parent2ospfe[2];
64int	pipe_parent2rde[2];
65int	pipe_ospfe2rde[2];

67enum ospfd_process	 ospfd_process;
68struct ospfd_conf	*ospfd_conf = NULL((void*)0);
69static struct imsgev	*iev_ospfe;
70static struct imsgev	*iev_rde;
71char			*conffile;

73pid_t			 ospfe_pid = 0;
74pid_t			 rde_pid = 0;

76/* ARGSUSED */
77void
78main_sig_handler(int sig, short event, void *arg)
79{
/* signal handler rules don't apply, libevent decouples for us */
switch (sig) {
case SIGTERM15:
case SIGINT2:
ospfd_shutdown();
/* NOTREACHED */
case SIGHUP1:
if (ospf_reload() == -1)
	log_warnx("configuration reload failed");
else
	log_debug("configuration reloaded");
break;
default:
fatalx("unexpected signal");
/* NOTREACHED */
}
96}

98__dead__attribute__((__noreturn__)) void
99usage(void)
100{
extern char *__progname;

fprintf(stderr(&__sF[2]), "usage: %s [-cdnv] [-D macro=value]"
   " [-f file] [-s socket]\n",
   __progname);
exit(1);
107}

109int
110main(int argc, char *argv[])
111{
struct event		 ev_sigint, ev_sigterm, ev_sighup;
struct area		*a;
int			 ch, opts = 0;
int			 debug = 0;
int			 ipforwarding;
int			 mib[4];
size_t			 len;
char			*sockname = NULL((void*)0);
int			 control_fd;

conffile = CONF_FILE"/etc/ospfd.conf";
ospfd_process = PROC_MAIN;

log_init(1, LOG_DAEMON(3<<3));	/* log to stderr until daemonized */
log_procinit(log_procnames[ospfd_process]);

while ((ch = getopt(argc, argv, "cdD:f:ns:v")) != -1) {
1
Assuming the condition is false→
2
←
Loop condition is false. Execution continues on line 162→
switch (ch) {
case 'c':
	opts |= OSPFD_OPT_FORCE_DEMOTE0x00000010;
	break;
case 'd':
	debug = 1;
	break;
case 'D':
	if (cmdline_symset(optarg) < 0)
		log_warnx("could not parse macro definition %s",
		    optarg);
	break;
case 'f':
	conffile = optarg;
	break;
case 'n':
	opts |= OSPFD_OPT_NOACTION0x00000004;
	break;
case 's':
	sockname = optarg;
	break;
case 'v':
	if (opts & OSPFD_OPT_VERBOSE0x00000001)
		opts |= OSPFD_OPT_VERBOSE20x00000002;
	opts |= OSPFD_OPT_VERBOSE0x00000001;
	log_setverbose(1);
	break;
default:
	usage();
	/* NOTREACHED */
}
}

argc -= optind;
argv += optind;
if (argc > 0)
3
←
Assuming 'argc' is <= 0→
4
←
Taking false branch→
usage();

mib[0] = CTL_NET4;
mib[1] = PF_INET2;
mib[2] = IPPROTO_IP0;
mib[3] = IPCTL_FORWARDING1;
len = sizeof(ipforwarding);
if (sysctl(mib, 4, &ipforwarding, &len, NULL((void*)0), 0) == -1)
5
←
Assuming the condition is false→
6
←
Taking false branch→
err(1, "sysctl");

if (ipforwarding != 1) {
7
←
Assuming 'ipforwarding' is equal to 1→
8
←
Taking false branch→
log_warnx("WARNING: IP forwarding NOT enabled, "
    "running as stub router");
opts |= OSPFD_OPT_STUB_ROUTER0x00000008;
}

/* fetch interfaces early */
kif_init();

/* parse config file */
if ((ospfd_conf = parse_config(conffile, opts)) == NULL((void*)0)) {
9
←
Assuming the condition is false→
10
←
Taking false branch→
kif_clear();
exit(1);
}
if (ospfd_conf->rtr_id.s_addr == 0)
11
←
Assuming field 's_addr' is equal to 0→
12
←
Taking true branch→
ospfd_conf->rtr_id.s_addr = get_rtr_id();
13
←
Null pointer value stored to 'ospfd_conf'→
14
←
Dereference of null pointer

if (sockname == NULL((void*)0)) {
if (asprintf(&sockname, "%s.%d", OSPFD_SOCKET"/var/run/ospfd.sock",
    ospfd_conf->rdomain) == -1)
	err(1, "asprintf");
}

ospfd_conf->csock = sockname;

if (ospfd_conf->opts & OSPFD_OPT_NOACTION0x00000004) {
if (ospfd_conf->opts & OSPFD_OPT_VERBOSE0x00000001)
	print_config(ospfd_conf);
else
	fprintf(stderr(&__sF[2]), "configuration OK\n");
kif_clear();
exit(0);
}

/* check for root privileges  */
if (geteuid())
errx(1, "need root privileges");

/* check for ospfd user */
if (getpwnam(OSPFD_USER"_ospfd") == NULL((void*)0))
errx(1, "unknown user %s", OSPFD_USER"_ospfd");

log_init(debug, LOG_DAEMON(3<<3));
log_setverbose(ospfd_conf->opts & OSPFD_OPT_VERBOSE0x00000001);

if ((control_check(ospfd_conf->csock)) == -1)
fatalx("ospfd already running");

if (!debug)
daemon(1, 0);

log_info("startup");

if (socketpair(AF_UNIX1, SOCK_STREAM1 | SOCK_CLOEXEC0x8000 | SOCK_NONBLOCK0x4000,
   PF_UNSPEC0, pipe_parent2ospfe) == -1)
fatal("socketpair");
if (socketpair(AF_UNIX1, SOCK_STREAM1 | SOCK_CLOEXEC0x8000 | SOCK_NONBLOCK0x4000,
   PF_UNSPEC0, pipe_parent2rde) == -1)
fatal("socketpair");
if (socketpair(AF_UNIX1, SOCK_STREAM1 | SOCK_CLOEXEC0x8000 | SOCK_NONBLOCK0x4000,
   PF_UNSPEC0, pipe_ospfe2rde) == -1)
fatal("socketpair");

/* start children */
rde_pid = rde(ospfd_conf, pipe_parent2rde, pipe_ospfe2rde,
   pipe_parent2ospfe);
ospfe_pid = ospfe(ospfd_conf, pipe_parent2ospfe, pipe_ospfe2rde,
   pipe_parent2rde);

event_init();

/* setup signal handler */
signal_set(&ev_sigint, SIGINT, main_sig_handler, NULL)event_set(&ev_sigint, 2, 0x08|0x10, main_sig_handler, ((void
*)0));
signal_set(&ev_sigterm, SIGTERM, main_sig_handler, NULL)event_set(&ev_sigterm, 15, 0x08|0x10, main_sig_handler, (
(void*)0));
signal_set(&ev_sighup, SIGHUP, main_sig_handler, NULL)event_set(&ev_sighup, 1, 0x08|0x10, main_sig_handler, ((void
*)0));
signal_add(&ev_sigint, NULL)event_add(&ev_sigint, ((void*)0));
signal_add(&ev_sigterm, NULL)event_add(&ev_sigterm, ((void*)0));
signal_add(&ev_sighup, NULL)event_add(&ev_sighup, ((void*)0));
signal(SIGPIPE13, SIG_IGN(void (*)(int))1);

/* setup pipes to children */
close(pipe_parent2ospfe[1]);
close(pipe_parent2rde[1]);
close(pipe_ospfe2rde[0]);
close(pipe_ospfe2rde[1]);

if ((iev_ospfe = malloc(sizeof(struct imsgev))) == NULL((void*)0) ||
   (iev_rde = malloc(sizeof(struct imsgev))) == NULL((void*)0))
fatal(NULL((void*)0));
imsg_init(&iev_ospfe->ibuf, pipe_parent2ospfe[0]);
iev_ospfe->handler = main_dispatch_ospfe;
imsg_init(&iev_rde->ibuf, pipe_parent2rde[0]);
iev_rde->handler = main_dispatch_rde;

/* setup event handler */
iev_ospfe->events = EV_READ0x02;
event_set(&iev_ospfe->ev, iev_ospfe->ibuf.fd, iev_ospfe->events,
   iev_ospfe->handler, iev_ospfe);
event_add(&iev_ospfe->ev, NULL((void*)0));

iev_rde->events = EV_READ0x02;
event_set(&iev_rde->ev, iev_rde->ibuf.fd, iev_rde->events,
   iev_rde->handler, iev_rde);
event_add(&iev_rde->ev, NULL((void*)0));

if ((control_fd = control_init(ospfd_conf->csock)) == -1)
fatalx("control socket setup failed");
main_imsg_compose_ospfe_fd(IMSG_CONTROLFD, 0, control_fd);

if (unveil("/", "r") == -1)
fatal("unveil /");
if (unveil(NULL((void*)0), NULL((void*)0)) == -1)
fatal("unveil");

if (kr_init(!(ospfd_conf->flags & OSPFD_FLAG_NO_FIB_UPDATE0x0001),
   ospfd_conf->rdomain, ospfd_conf->redist_label_or_prefix,
   ospfd_conf->fib_priority) == -1)
fatalx("kr_init failed");

/* remove unneeded stuff from config */
while ((a = LIST_FIRST(&ospfd_conf->area_list)((&ospfd_conf->area_list)->lh_first)) != NULL((void*)0)) {
LIST_REMOVE(a, entry)do { if ((a)->entry.le_next != ((void*)0)) (a)->entry.le_next
->entry.le_prev = (a)->entry.le_prev; *(a)->entry.le_prev
 = (a)->entry.le_next; ; ; } while (0);
area_del(a);
}

event_dispatch();

ospfd_shutdown();
/* NOTREACHED */
return (0);
305}

307__dead__attribute__((__noreturn__)) void
308ospfd_shutdown(void)
309{
pid_t			 pid;
int			 status;
struct redistribute	*r;

/* close pipes */
msgbuf_clear(&iev_ospfe->ibuf.w);
close(iev_ospfe->ibuf.fd);
msgbuf_clear(&iev_rde->ibuf.w);
close(iev_rde->ibuf.fd);

control_cleanup();
while ((r = SIMPLEQ_FIRST(&ospfd_conf->redist_list)((&ospfd_conf->redist_list)->sqh_first)) != NULL((void*)0)) {
SIMPLEQ_REMOVE_HEAD(&ospfd_conf->redist_list, entry)do { if (((&ospfd_conf->redist_list)->sqh_first = (
&ospfd_conf->redist_list)->sqh_first->entry.sqe_next
) == ((void*)0)) (&ospfd_conf->redist_list)->sqh_last
 = &(&ospfd_conf->redist_list)->sqh_first; } while
 (0);
free(r);
}
kr_shutdown();
carp_demote_shutdown();

log_debug("waiting for children to terminate");
do {
pid = wait(&status);
if (pid == -1) {
	if (errno(*__errno()) != EINTR4 && errno(*__errno()) != ECHILD10)
		fatal("wait");
} else if (WIFSIGNALED(status)(((status) & 0177) != 0177 && ((status) & 0177
) != 0))
	log_warnx("%s terminated; signal %d",
	    (pid == rde_pid) ? "route decision engine" :
	    "ospf engine", WTERMSIG(status)(((status) & 0177)));
} while (pid != -1 || (pid == -1 && errno(*__errno()) == EINTR4));

free(iev_ospfe);
free(iev_rde);
free(ospfd_conf);

log_info("terminating");
exit(0);
346}

348/* imsg handling */
349/* ARGSUSED */
350void
351main_dispatch_ospfe(int fd, short event, void *bula)
352{
struct imsgev		*iev = bula;
struct imsgbuf		*ibuf;
struct imsg		 imsg;
struct demote_msg	 dmsg;
ssize_t			 n;
int			 shut = 0, verbose;

ibuf = &iev->ibuf;

if (event & EV_READ0x02) {
if ((n = imsg_read(ibuf)) == -1 && errno(*__errno()) != EAGAIN35)
	fatal("imsg_read error");
if (n == 0)	/* connection closed */
	shut = 1;
}
if (event & EV_WRITE0x04) {
if ((n = msgbuf_write(&ibuf->w)) == -1 && errno(*__errno()) != EAGAIN35)
	fatal("msgbuf_write");
if (n == 0)	/* connection closed */
	shut = 1;
}

for (;;) {
if ((n = imsg_get(ibuf, &imsg)) == -1)
	fatal("imsg_get");

if (n == 0)
	break;

switch (imsg.hdr.type) {
case IMSG_CTL_RELOAD:
	if (ospf_reload() == -1)
		log_warnx("configuration reload failed");
	else
		log_debug("configuration reloaded");
	break;
case IMSG_CTL_FIB_COUPLE:
	kr_fib_couple();
	break;
case IMSG_CTL_FIB_DECOUPLE:
	kr_fib_decouple();
	break;
case IMSG_CTL_FIB_RELOAD:
	kr_fib_reload();
	break;
case IMSG_CTL_KROUTE:
case IMSG_CTL_KROUTE_ADDR:
	kr_show_route(&imsg);
	break;
case IMSG_CTL_IFINFO:
	if (imsg.hdr.len == IMSG_HEADER_SIZEsizeof(struct imsg_hdr))
		kr_ifinfo(NULL((void*)0), imsg.hdr.pid);
	else if (imsg.hdr.len == IMSG_HEADER_SIZEsizeof(struct imsg_hdr) + IFNAMSIZ16)
		kr_ifinfo(imsg.data, imsg.hdr.pid);
	else
		log_warnx("IFINFO request with wrong len");
	break;
case IMSG_DEMOTE:
	if (imsg.hdr.len - IMSG_HEADER_SIZEsizeof(struct imsg_hdr) != sizeof(dmsg))
		fatalx("invalid size of OE request");
	memcpy(&dmsg, imsg.data, sizeof(dmsg));
	carp_demote_set(dmsg.demote_group, dmsg.level);
	break;
case IMSG_CTL_LOG_VERBOSE:
	/* already checked by ospfe */
	memcpy(&verbose, imsg.data, sizeof(verbose));
	log_setverbose(verbose);
	break;
default:
	log_debug("main_dispatch_ospfe: error handling imsg %d",
	    imsg.hdr.type);
	break;
}
imsg_free(&imsg);
}
if (!shut)
imsg_event_add(iev);
else {
/* this pipe is dead, so remove the event handler */
event_del(&iev->ev);
event_loopexit(NULL((void*)0));
}
435}

437/* ARGSUSED */
438void
439main_dispatch_rde(int fd, short event, void *bula)
440{
struct imsgev	*iev = bula;
struct imsgbuf  *ibuf;
struct imsg	 imsg;
ssize_t		 n;
int		 count, shut = 0;

ibuf = &iev->ibuf;

if (event & EV_READ0x02) {
if ((n = imsg_read(ibuf)) == -1 && errno(*__errno()) != EAGAIN35)
	fatal("imsg_read error");
if (n == 0)	/* connection closed */
	shut = 1;
}
if (event & EV_WRITE0x04) {
if ((n = msgbuf_write(&ibuf->w)) == -1 && errno(*__errno()) != EAGAIN35)
	fatal("msgbuf_write");
if (n == 0)	/* connection closed */
	shut = 1;
}

for (;;) {
if ((n = imsg_get(ibuf, &imsg)) == -1)
	fatal("imsg_get");

if (n == 0)
	break;

switch (imsg.hdr.type) {
case IMSG_KROUTE_CHANGE:
	count = (imsg.hdr.len - IMSG_HEADER_SIZEsizeof(struct imsg_hdr)) /
	    sizeof(struct kroute);
	if (kr_change(imsg.data, count))
		log_warn("main_dispatch_rde: error changing "
		    "route");
	break;
case IMSG_KROUTE_DELETE:
	if (kr_delete(imsg.data))
		log_warn("main_dispatch_rde: error deleting "
		    "route");
	break;
default:
	log_debug("main_dispatch_rde: error handling imsg %d",
	    imsg.hdr.type);
	break;
}
imsg_free(&imsg);
}
if (!shut)
imsg_event_add(iev);
else {
/* this pipe is dead, so remove the event handler */
event_del(&iev->ev);
event_loopexit(NULL((void*)0));
}
496}

498void
499main_imsg_compose_ospfe(int type, pid_t pid, void *data, u_int16_t datalen)
500{
if (iev_ospfe)
imsg_compose_event(iev_ospfe, type, 0, pid, -1, data, datalen);
503}

505void
506main_imsg_compose_ospfe_fd(int type, pid_t pid, int fd)
507{
if (iev_ospfe)
imsg_compose_event(iev_ospfe, type, 0, pid, fd, NULL((void*)0), 0);
510}

512void
513main_imsg_compose_rde(int type, pid_t pid, void *data, u_int16_t datalen)
514{
if (iev_rde)
imsg_compose_event(iev_rde, type, 0, pid, -1, data, datalen);
517}

519void
520imsg_event_add(struct imsgev *iev)
521{
iev->events = EV_READ0x02;
if (iev->ibuf.w.queued)
iev->events |= EV_WRITE0x04;

event_del(&iev->ev);
event_set(&iev->ev, iev->ibuf.fd, iev->events, iev->handler, iev);
event_add(&iev->ev, NULL((void*)0));
529}

531int
532imsg_compose_event(struct imsgev *iev, u_int16_t type, u_int32_t peerid,
  pid_t pid, int fd, void *data, u_int16_t datalen)
534{
int	ret;

if ((ret = imsg_compose(&iev->ibuf, type, peerid,
   pid, fd, data, datalen)) != -1)
imsg_event_add(iev);
return (ret);
541}

543int
544ospf_redistribute(struct kroute *kr, u_int32_t *metric)
545{
struct in_addr		 addr;
struct kif		*kif;
struct redistribute	*r;
int		 	 is_default, depend_ok;

bzero(&addr, sizeof(addr));

/* only allow 0.0.0.0/0 via REDIST_DEFAULT */
is_default = (kr->prefix.s_addr == INADDR_ANY((u_int32_t)(0x00000000)) && kr->prefixlen == 0);

SIMPLEQ_FOREACH(r, &ospfd_conf->redist_list, entry)for((r) = ((&ospfd_conf->redist_list)->sqh_first); (
r) != ((void*)0); (r) = ((r)->entry.sqe_next)) {
if (r->dependon[0] != '\0') {
	if ((kif = kif_findname(r->dependon, addr, NULL((void*)0))))
		depend_ok = ifstate_is_up(kif);
	else
		depend_ok = 0;
} else
	depend_ok = 1;

switch (r->type & ~REDIST_NO0x10) {
case REDIST_LABEL0x04:
	if (kr->rtlabel == r->label) {
		*metric = depend_ok ? r->metric :
		    r->metric | MAX_METRIC65535;
		return (r->type & REDIST_NO0x10 ? 0 : 1);
	}
	break;
case REDIST_STATIC0x02:
	/*
	 * Dynamic routes are not redistributable. Placed here
	 * so that link local addresses can be redistributed
	 * via a rtlabel.
	 */
	if (is_default)
		continue;
	if (kr->flags & F_DYNAMIC0x0010)
		continue;
	if (kr->flags & F_STATIC0x0008) {
		*metric = depend_ok ? r->metric :
		    r->metric | MAX_METRIC65535;
		return (r->type & REDIST_NO0x10 ? 0 : 1);
	}
	break;
case REDIST_CONNECTED0x01:
	if (is_default)
		continue;
	if (kr->flags & F_DYNAMIC0x0010)
		continue;
	if (kr->flags & F_CONNECTED0x0004) {
		*metric = depend_ok ? r->metric :
		    r->metric | MAX_METRIC65535;
		return (r->type & REDIST_NO0x10 ? 0 : 1);
	}
	break;
case REDIST_ADDR0x08:
	if (kr->flags & F_DYNAMIC0x0010)
		continue;

	if (r->addr.s_addr == INADDR_ANY((u_int32_t)(0x00000000)) &&
	    r->mask.s_addr == INADDR_ANY((u_int32_t)(0x00000000))) {
		if (is_default) {
			*metric = depend_ok ? r->metric :
			    r->metric | MAX_METRIC65535;
			return (r->type & REDIST_NO0x10 ? 0 : 1);
		} else
			return (0);
	}

	if ((kr->prefix.s_addr & r->mask.s_addr) ==
	    (r->addr.s_addr & r->mask.s_addr) &&
	    kr->prefixlen >= mask2prefixlen(r->mask.s_addr)) {
		*metric = depend_ok ? r->metric :
		    r->metric | MAX_METRIC65535;
		return (r->type & REDIST_NO0x10 ? 0 : 1);
	}
	break;
case REDIST_DEFAULT0x20:
	if (is_default) {
		*metric = depend_ok ? r->metric :
		    r->metric | MAX_METRIC65535;
		return (r->type & REDIST_NO0x10 ? 0 : 1);
	}
	break;
}
}

return (0);
633}

635int
636ospf_reload(void)
637{
struct area		*area;
struct iface		*iface;
struct ospfd_conf	*xconf;
struct redistribute	*r;

if ((xconf = parse_config(conffile, ospfd_conf->opts)) == NULL((void*)0))
return (-1);

/* No router-id was specified, keep existing value */
      if (xconf->rtr_id.s_addr == 0)
              xconf->rtr_id.s_addr = ospfd_conf->rtr_id.s_addr;

/* Abort the reload if rtr_id changed */
if (ospfd_conf->rtr_id.s_addr != xconf->rtr_id.s_addr) {
log_warnx("router-id changed: restart required");
return (-1);
}

/* send config to childs */
if (ospf_sendboth(IMSG_RECONF_CONF, xconf, sizeof(*xconf)) == -1)
return (-1);

/* send interfaces */
LIST_FOREACH(area, &xconf->area_list, entry)for((area) = ((&xconf->area_list)->lh_first); (area
)!= ((void*)0); (area) = ((area)->entry.le_next)) {
if (ospf_sendboth(IMSG_RECONF_AREA, area, sizeof(*area)) == -1)
	return (-1);

SIMPLEQ_FOREACH(r, &area->redist_list, entry)for((r) = ((&area->redist_list)->sqh_first); (r) !=
 ((void*)0); (r) = ((r)->entry.sqe_next)) {
	main_imsg_compose_rde(IMSG_RECONF_REDIST, 0, r,
	    sizeof(*r));
}
LIST_FOREACH(iface, &area->iface_list, entry)for((iface) = ((&area->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
	if (ospf_sendboth(IMSG_RECONF_IFACE, iface,
	    sizeof(*iface)) == -1)
		return (-1);
	if (iface->auth_type == AUTH_CRYPT)
		if (md_list_send(&iface->auth_md_list,
		    iev_ospfe) == -1)
			return (-1);
}
}

if (ospf_sendboth(IMSG_RECONF_END, NULL((void*)0), 0) == -1)
return (-1);

merge_config(ospfd_conf, xconf);
/* update redistribute lists */
kr_reload(ospfd_conf->redist_label_or_prefix);
return (0);
687}

689int
690ospf_sendboth(enum imsg_type type, void *buf, u_int16_t len)
691{
if (imsg_compose_event(iev_ospfe, type, 0, 0, -1, buf, len) == -1)
return (-1);
if (imsg_compose_event(iev_rde, type, 0, 0, -1, buf, len) == -1)
return (-1);
return (0);
697}

699void
700merge_config(struct ospfd_conf *conf, struct ospfd_conf *xconf)
701{
struct area		*a, *xa, *na;
struct iface		*iface;
struct redistribute	*r;
int			 rchange = 0;

conf->flags = xconf->flags;
conf->spf_delay = xconf->spf_delay;
conf->spf_hold_time = xconf->spf_hold_time;
if (SIMPLEQ_EMPTY(&conf->redist_list)(((&conf->redist_list)->sqh_first) == ((void*)0)) !=
   SIMPLEQ_EMPTY(&xconf->redist_list)(((&xconf->redist_list)->sqh_first) == ((void*)0)))
rchange = 1;
conf->rfc1583compat = xconf->rfc1583compat;
conf->redist_label_or_prefix = xconf->redist_label_or_prefix;

if (ospfd_process == PROC_MAIN) {
/* main process does neither use areas nor interfaces */
while ((r = SIMPLEQ_FIRST(&conf->redist_list)((&conf->redist_list)->sqh_first)) != NULL((void*)0)) {
	SIMPLEQ_REMOVE_HEAD(&conf->redist_list, entry)do { if (((&conf->redist_list)->sqh_first = (&conf
->redist_list)->sqh_first->entry.sqe_next) == ((void
*)0)) (&conf->redist_list)->sqh_last = &(&conf
->redist_list)->sqh_first; } while (0);
	free(r);
}
SIMPLEQ_CONCAT(&conf->redist_list, &xconf->redist_list)do { if (!((((&xconf->redist_list))->sqh_first) == (
(void*)0))) { *(&conf->redist_list)->sqh_last = (&
xconf->redist_list)->sqh_first; (&conf->redist_list
)->sqh_last = (&xconf->redist_list)->sqh_last; do
 { ((&xconf->redist_list))->sqh_first = ((void*)0);
 ((&xconf->redist_list))->sqh_last = &((&xconf
->redist_list))->sqh_first; } while (0); } } while (0);

/* adjust FIB priority if changed */
if (conf->fib_priority != xconf->fib_priority) {
	kr_fib_decouple();
	kr_fib_update_prio(xconf->fib_priority);
	conf->fib_priority = xconf->fib_priority;
	kr_fib_couple();
}

goto done;
}

/* merge areas and interfaces */
for (a = LIST_FIRST(&conf->area_list)((&conf->area_list)->lh_first); a != NULL((void*)0); a = na) {
na = LIST_NEXT(a, entry)((a)->entry.le_next);
/* find deleted areas */
if ((xa = area_find(xconf, a->id)) == NULL((void*)0)) {
	if (ospfd_process == PROC_OSPF_ENGINE) {
		LIST_FOREACH(iface, &a->iface_list, entry)for((iface) = ((&a->iface_list)->lh_first); (iface)
!= ((void*)0); (iface) = ((iface)->entry.le_next))
			if_fsm(iface, IF_EVT_DOWN);
	}
	LIST_REMOVE(a, entry)do { if ((a)->entry.le_next != ((void*)0)) (a)->entry.le_next
->entry.le_prev = (a)->entry.le_prev; *(a)->entry.le_prev
 = (a)->entry.le_next; ; ; } while (0);
	area_del(a);
}
}

for (xa = LIST_FIRST(&xconf->area_list)((&xconf->area_list)->lh_first); xa != NULL((void*)0); xa = na) {
na = LIST_NEXT(xa, entry)((xa)->entry.le_next);
if ((a = area_find(conf, xa->id)) == NULL((void*)0)) {
	LIST_REMOVE(xa, entry)do { if ((xa)->entry.le_next != ((void*)0)) (xa)->entry
.le_next->entry.le_prev = (xa)->entry.le_prev; *(xa)->
entry.le_prev = (xa)->entry.le_next; ; ; } while (0);
	LIST_INSERT_HEAD(&conf->area_list, xa, entry)do { if (((xa)->entry.le_next = (&conf->area_list)->
lh_first) != ((void*)0)) (&conf->area_list)->lh_first
->entry.le_prev = &(xa)->entry.le_next; (&conf->
area_list)->lh_first = (xa); (xa)->entry.le_prev = &
(&conf->area_list)->lh_first; } while (0);
	if (ospfd_process == PROC_OSPF_ENGINE) {
		/* start interfaces */
		ospfe_demote_area(xa, 0);
		LIST_FOREACH(iface, &xa->iface_list, entry)for((iface) = ((&xa->iface_list)->lh_first); (iface
)!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
			if_init(conf, iface);
			if (if_fsm(iface, IF_EVT_UP)) {
				log_debug("error starting "
				    "interface %s",
				    iface->name);
			}
		}
	}
	/* no need to merge interfaces */
	continue;
}
/*
 * stub is not yet used but switching between stub and normal
 * will be another painful job.
 */
if (a->stub != xa->stub && ospfd_process == PROC_OSPF_ENGINE)
	a->dirty = 1; /* force rtr LSA update */
if (xa->stub && ospfd_process == PROC_RDE_ENGINE) {
	while ((r = SIMPLEQ_FIRST(&a->redist_list)((&a->redist_list)->sqh_first)) != NULL((void*)0)) {
		SIMPLEQ_REMOVE_HEAD(&a->redist_list, entry)do { if (((&a->redist_list)->sqh_first = (&a->
redist_list)->sqh_first->entry.sqe_next) == ((void*)0))
 (&a->redist_list)->sqh_last = &(&a->redist_list
)->sqh_first; } while (0);
		free(r);
	}

	SIMPLEQ_CONCAT(&a->redist_list, &xa->redist_list)do { if (!((((&xa->redist_list))->sqh_first) == ((void
*)0))) { *(&a->redist_list)->sqh_last = (&xa->
redist_list)->sqh_first; (&a->redist_list)->sqh_last
 = (&xa->redist_list)->sqh_last; do { ((&xa->
redist_list))->sqh_first = ((void*)0); ((&xa->redist_list
))->sqh_last = &((&xa->redist_list))->sqh_first
; } while (0); } } while (0);
}

a->stub = xa->stub;
a->stub_default_cost = xa->stub_default_cost;
if (ospfd_process == PROC_RDE_ENGINE)
	a->dirty = 1; /* force SPF tree recalculation */

/* merge interfaces */
if (merge_interfaces(a, xa) &&
    ospfd_process == PROC_OSPF_ENGINE)
	a->dirty = 1; /* force rtr LSA update */
}

if (ospfd_process == PROC_OSPF_ENGINE) {
LIST_FOREACH(a, &conf->area_list, entry)for((a) = ((&conf->area_list)->lh_first); (a)!= ((void
*)0); (a) = ((a)->entry.le_next)) {
	LIST_FOREACH(iface, &a->iface_list, entry)for((iface) = ((&a->iface_list)->lh_first); (iface)
!= ((void*)0); (iface) = ((iface)->entry.le_next)) {
		if (iface->state == IF_STA_NEW0x00) {
			iface->state = IF_STA_DOWN0x01;
			if_init(conf, iface);
			if (if_fsm(iface, IF_EVT_UP)) {
				log_debug("error starting "
				    "interface %s",
				    iface->name);
			}
		}
	}
	if (a->dirty || rchange) {
		a->dirty = 0;
		orig_rtr_lsa(a);
	}
}
}
if (ospfd_process == PROC_RDE_ENGINE) {
LIST_FOREACH(a, &conf->area_list, entry)for((a) = ((&conf->area_list)->lh_first); (a)!= ((void
*)0); (a) = ((a)->entry.le_next)) {
	if (a->dirty) {
		start_spf_timer();
		break;
	}
}
}

823done:
while ((a = LIST_FIRST(&xconf->area_list)((&xconf->area_list)->lh_first)) != NULL((void*)0)) {
LIST_REMOVE(a, entry)do { if ((a)->entry.le_next != ((void*)0)) (a)->entry.le_next
->entry.le_prev = (a)->entry.le_prev; *(a)->entry.le_prev
 = (a)->entry.le_next; ; ; } while (0);
area_del(a);
}
free(xconf);
829}

831int
832merge_interfaces(struct area *a, struct area *xa)
833{
struct iface	*i, *xi, *ni;
int		 dirty = 0;

/* problems:
* - new interfaces (easy)
* - deleted interfaces
* - changing passive (painful?)
*/
for (i = LIST_FIRST(&a->iface_list)((&a->iface_list)->lh_first); i != NULL((void*)0); i = ni) {
ni = LIST_NEXT(i, entry)((i)->entry.le_next);
if (iface_lookup(xa, i) == NULL((void*)0)) {
	log_debug("merge_interfaces: proc %d area %s removing "
	    "interface %s", ospfd_process, inet_ntoa(a->id),
	    i->name);
	if (ospfd_process == PROC_OSPF_ENGINE)
		if_fsm(i, IF_EVT_DOWN);
	else if (ospfd_process == PROC_RDE_ENGINE)
		rde_nbr_iface_del(i);
	LIST_REMOVE(i, entry)do { if ((i)->entry.le_next != ((void*)0)) (i)->entry.le_next
->entry.le_prev = (i)->entry.le_prev; *(i)->entry.le_prev
 = (i)->entry.le_next; ; ; } while (0);
	if_del(i);
	dirty = 1; /* force rtr LSA update */
}
}

for (xi = LIST_FIRST(&xa->iface_list)((&xa->iface_list)->lh_first); xi != NULL((void*)0); xi = ni) {
ni = LIST_NEXT(xi, entry)((xi)->entry.le_next);
if ((i = iface_lookup(a, xi)) == NULL((void*)0)) {
	/* new interface but delay initialisation */
	log_debug("merge_interfaces: proc %d area %s adding "
	    "interface %s", ospfd_process, inet_ntoa(a->id),
	    xi->name);
	LIST_REMOVE(xi, entry)do { if ((xi)->entry.le_next != ((void*)0)) (xi)->entry
.le_next->entry.le_prev = (xi)->entry.le_prev; *(xi)->
entry.le_prev = (xi)->entry.le_next; ; ; } while (0);
	LIST_INSERT_HEAD(&a->iface_list, xi, entry)do { if (((xi)->entry.le_next = (&a->iface_list)->
lh_first) != ((void*)0)) (&a->iface_list)->lh_first
->entry.le_prev = &(xi)->entry.le_next; (&a->
iface_list)->lh_first = (xi); (xi)->entry.le_prev = &
(&a->iface_list)->lh_first; } while (0);
	xi->area = a;
	if (ospfd_process == PROC_OSPF_ENGINE)
		xi->state = IF_STA_NEW0x00;
	continue;
}
log_debug("merge_interfaces: proc %d area %s merging "
    "interface %s", ospfd_process, inet_ntoa(a->id), i->name);
i->dst = xi->dst;
i->abr_id = xi->abr_id;
i->baudrate = xi->baudrate;
i->dead_interval = xi->dead_interval;
i->mtu = xi->mtu;
i->transmit_delay = xi->transmit_delay;
i->hello_interval = xi->hello_interval;
i->rxmt_interval = xi->rxmt_interval;
if (i->metric != xi->metric)
	dirty = 1;
i->metric = xi->metric;
i->priority = xi->priority;
if (i->self)
	i->self->priority = i->priority;
i->flags = xi->flags; /* needed? */
i->if_type = xi->if_type; /* needed? */
i->linkstate = xi->linkstate; /* needed? */

i->auth_type = xi->auth_type;
strncpy(i->auth_key, xi->auth_key, MAX_SIMPLE_AUTH_LEN8);
md_list_clr(&i->auth_md_list);
md_list_copy(&i->auth_md_list, &xi->auth_md_list);

strlcpy(i->dependon, xi->dependon,
        sizeof(i->dependon));
i->depend_ok = xi->depend_ok;

if (i->passive != xi->passive) {
	/* need to restart interface to cope with this change */
	if (ospfd_process == PROC_OSPF_ENGINE)
		if_fsm(i, IF_EVT_DOWN);
	i->passive = xi->passive;
	if (ospfd_process == PROC_OSPF_ENGINE)
		if_fsm(i, IF_EVT_UP);
}

if (i->type != xi->type) {
	/* restart interface to enable or disable DR election */
	if (ospfd_process == PROC_OSPF_ENGINE)
		if_fsm(i, IF_EVT_DOWN);
	i->type = xi->type;
	if (ospfd_process == PROC_OSPF_ENGINE)
		if_fsm(i, IF_EVT_UP);
}
}
return (dirty);
920}

922struct iface *
923iface_lookup(struct area *area, struct iface *iface)
924{
struct iface	*i;

LIST_FOREACH(i, &area->iface_list, entry)for((i) = ((&area->iface_list)->lh_first); (i)!= ((
void*)0); (i) = ((i)->entry.le_next))
if (i->ifindex == iface->ifindex &&
    i->addr.s_addr == iface->addr.s_addr &&
    i->mask.s_addr == iface->mask.s_addr)
	return (i);
return (NULL((void*)0));
933}

935int
936ifstate_is_up(struct kif *kif)
937{
if (!(kif->flags & IFF_UP0x1))
return (0);
if (kif->if_type == IFT_CARP0xf7 &&
   kif->link_state == LINK_STATE_UNKNOWN0)
return (0);
return LINK_STATE_IS_UP(kif->link_state)((kif->link_state) >= 4 || (kif->link_state) == 0);
944}