Linux Audio

Check our new training course

Loading...
v3.1
   1/*
   2 * INET		An implementation of the TCP/IP protocol suite for the LINUX
   3 *		operating system.  INET is implemented using the  BSD Socket
   4 *		interface as the means of communication with the user level.
   5 *
   6 *		Generic socket support routines. Memory allocators, socket lock/release
   7 *		handler for protocols to use and generic option handler.
   8 *
   9 *
  10 * Authors:	Ross Biro
  11 *		Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
  12 *		Florian La Roche, <flla@stud.uni-sb.de>
  13 *		Alan Cox, <A.Cox@swansea.ac.uk>
  14 *
  15 * Fixes:
  16 *		Alan Cox	: 	Numerous verify_area() problems
  17 *		Alan Cox	:	Connecting on a connecting socket
  18 *					now returns an error for tcp.
  19 *		Alan Cox	:	sock->protocol is set correctly.
  20 *					and is not sometimes left as 0.
  21 *		Alan Cox	:	connect handles icmp errors on a
  22 *					connect properly. Unfortunately there
  23 *					is a restart syscall nasty there. I
  24 *					can't match BSD without hacking the C
  25 *					library. Ideas urgently sought!
  26 *		Alan Cox	:	Disallow bind() to addresses that are
  27 *					not ours - especially broadcast ones!!
  28 *		Alan Cox	:	Socket 1024 _IS_ ok for users. (fencepost)
  29 *		Alan Cox	:	sock_wfree/sock_rfree don't destroy sockets,
  30 *					instead they leave that for the DESTROY timer.
  31 *		Alan Cox	:	Clean up error flag in accept
  32 *		Alan Cox	:	TCP ack handling is buggy, the DESTROY timer
  33 *					was buggy. Put a remove_sock() in the handler
  34 *					for memory when we hit 0. Also altered the timer
  35 *					code. The ACK stuff can wait and needs major
  36 *					TCP layer surgery.
  37 *		Alan Cox	:	Fixed TCP ack bug, removed remove sock
  38 *					and fixed timer/inet_bh race.
  39 *		Alan Cox	:	Added zapped flag for TCP
  40 *		Alan Cox	:	Move kfree_skb into skbuff.c and tidied up surplus code
  41 *		Alan Cox	:	for new sk_buff allocations wmalloc/rmalloc now call alloc_skb
  42 *		Alan Cox	:	kfree_s calls now are kfree_skbmem so we can track skb resources
  43 *		Alan Cox	:	Supports socket option broadcast now as does udp. Packet and raw need fixing.
  44 *		Alan Cox	:	Added RCVBUF,SNDBUF size setting. It suddenly occurred to me how easy it was so...
  45 *		Rick Sladkey	:	Relaxed UDP rules for matching packets.
  46 *		C.E.Hawkins	:	IFF_PROMISC/SIOCGHWADDR support
  47 *	Pauline Middelink	:	identd support
  48 *		Alan Cox	:	Fixed connect() taking signals I think.
  49 *		Alan Cox	:	SO_LINGER supported
  50 *		Alan Cox	:	Error reporting fixes
  51 *		Anonymous	:	inet_create tidied up (sk->reuse setting)
  52 *		Alan Cox	:	inet sockets don't set sk->type!
  53 *		Alan Cox	:	Split socket option code
  54 *		Alan Cox	:	Callbacks
  55 *		Alan Cox	:	Nagle flag for Charles & Johannes stuff
  56 *		Alex		:	Removed restriction on inet fioctl
  57 *		Alan Cox	:	Splitting INET from NET core
  58 *		Alan Cox	:	Fixed bogus SO_TYPE handling in getsockopt()
  59 *		Adam Caldwell	:	Missing return in SO_DONTROUTE/SO_DEBUG code
  60 *		Alan Cox	:	Split IP from generic code
  61 *		Alan Cox	:	New kfree_skbmem()
  62 *		Alan Cox	:	Make SO_DEBUG superuser only.
  63 *		Alan Cox	:	Allow anyone to clear SO_DEBUG
  64 *					(compatibility fix)
  65 *		Alan Cox	:	Added optimistic memory grabbing for AF_UNIX throughput.
  66 *		Alan Cox	:	Allocator for a socket is settable.
  67 *		Alan Cox	:	SO_ERROR includes soft errors.
  68 *		Alan Cox	:	Allow NULL arguments on some SO_ opts
  69 *		Alan Cox	: 	Generic socket allocation to make hooks
  70 *					easier (suggested by Craig Metz).
  71 *		Michael Pall	:	SO_ERROR returns positive errno again
  72 *              Steve Whitehouse:       Added default destructor to free
  73 *                                      protocol private data.
  74 *              Steve Whitehouse:       Added various other default routines
  75 *                                      common to several socket families.
  76 *              Chris Evans     :       Call suser() check last on F_SETOWN
  77 *		Jay Schulist	:	Added SO_ATTACH_FILTER and SO_DETACH_FILTER.
  78 *		Andi Kleen	:	Add sock_kmalloc()/sock_kfree_s()
  79 *		Andi Kleen	:	Fix write_space callback
  80 *		Chris Evans	:	Security fixes - signedness again
  81 *		Arnaldo C. Melo :       cleanups, use skb_queue_purge
  82 *
  83 * To Fix:
  84 *
  85 *
  86 *		This program is free software; you can redistribute it and/or
  87 *		modify it under the terms of the GNU General Public License
  88 *		as published by the Free Software Foundation; either version
  89 *		2 of the License, or (at your option) any later version.
  90 */
  91
 
 
  92#include <linux/capability.h>
  93#include <linux/errno.h>
  94#include <linux/types.h>
  95#include <linux/socket.h>
  96#include <linux/in.h>
  97#include <linux/kernel.h>
  98#include <linux/module.h>
  99#include <linux/proc_fs.h>
 100#include <linux/seq_file.h>
 101#include <linux/sched.h>
 102#include <linux/timer.h>
 103#include <linux/string.h>
 104#include <linux/sockios.h>
 105#include <linux/net.h>
 106#include <linux/mm.h>
 107#include <linux/slab.h>
 108#include <linux/interrupt.h>
 109#include <linux/poll.h>
 110#include <linux/tcp.h>
 111#include <linux/init.h>
 112#include <linux/highmem.h>
 113#include <linux/user_namespace.h>
 
 
 
 114
 115#include <asm/uaccess.h>
 116#include <asm/system.h>
 117
 118#include <linux/netdevice.h>
 119#include <net/protocol.h>
 120#include <linux/skbuff.h>
 121#include <net/net_namespace.h>
 122#include <net/request_sock.h>
 123#include <net/sock.h>
 124#include <linux/net_tstamp.h>
 125#include <net/xfrm.h>
 126#include <linux/ipsec.h>
 127#include <net/cls_cgroup.h>
 
 128
 129#include <linux/filter.h>
 130
 131#include <trace/events/sock.h>
 132
 133#ifdef CONFIG_INET
 134#include <net/tcp.h>
 135#endif
 136
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 137/*
 138 * Each address family might have different locking rules, so we have
 139 * one slock key per address family:
 140 */
 141static struct lock_class_key af_family_keys[AF_MAX];
 142static struct lock_class_key af_family_slock_keys[AF_MAX];
 143
 
 
 
 144/*
 145 * Make lock validator output more readable. (we pre-construct these
 146 * strings build-time, so that runtime initialization of socket
 147 * locks is fast):
 148 */
 149static const char *const af_family_key_strings[AF_MAX+1] = {
 150  "sk_lock-AF_UNSPEC", "sk_lock-AF_UNIX"     , "sk_lock-AF_INET"     ,
 151  "sk_lock-AF_AX25"  , "sk_lock-AF_IPX"      , "sk_lock-AF_APPLETALK",
 152  "sk_lock-AF_NETROM", "sk_lock-AF_BRIDGE"   , "sk_lock-AF_ATMPVC"   ,
 153  "sk_lock-AF_X25"   , "sk_lock-AF_INET6"    , "sk_lock-AF_ROSE"     ,
 154  "sk_lock-AF_DECnet", "sk_lock-AF_NETBEUI"  , "sk_lock-AF_SECURITY" ,
 155  "sk_lock-AF_KEY"   , "sk_lock-AF_NETLINK"  , "sk_lock-AF_PACKET"   ,
 156  "sk_lock-AF_ASH"   , "sk_lock-AF_ECONET"   , "sk_lock-AF_ATMSVC"   ,
 157  "sk_lock-AF_RDS"   , "sk_lock-AF_SNA"      , "sk_lock-AF_IRDA"     ,
 158  "sk_lock-AF_PPPOX" , "sk_lock-AF_WANPIPE"  , "sk_lock-AF_LLC"      ,
 159  "sk_lock-27"       , "sk_lock-28"          , "sk_lock-AF_CAN"      ,
 160  "sk_lock-AF_TIPC"  , "sk_lock-AF_BLUETOOTH", "sk_lock-IUCV"        ,
 161  "sk_lock-AF_RXRPC" , "sk_lock-AF_ISDN"     , "sk_lock-AF_PHONET"   ,
 162  "sk_lock-AF_IEEE802154", "sk_lock-AF_CAIF" , "sk_lock-AF_ALG"      ,
 163  "sk_lock-AF_NFC"   , "sk_lock-AF_MAX"
 164};
 165static const char *const af_family_slock_key_strings[AF_MAX+1] = {
 166  "slock-AF_UNSPEC", "slock-AF_UNIX"     , "slock-AF_INET"     ,
 167  "slock-AF_AX25"  , "slock-AF_IPX"      , "slock-AF_APPLETALK",
 168  "slock-AF_NETROM", "slock-AF_BRIDGE"   , "slock-AF_ATMPVC"   ,
 169  "slock-AF_X25"   , "slock-AF_INET6"    , "slock-AF_ROSE"     ,
 170  "slock-AF_DECnet", "slock-AF_NETBEUI"  , "slock-AF_SECURITY" ,
 171  "slock-AF_KEY"   , "slock-AF_NETLINK"  , "slock-AF_PACKET"   ,
 172  "slock-AF_ASH"   , "slock-AF_ECONET"   , "slock-AF_ATMSVC"   ,
 173  "slock-AF_RDS"   , "slock-AF_SNA"      , "slock-AF_IRDA"     ,
 174  "slock-AF_PPPOX" , "slock-AF_WANPIPE"  , "slock-AF_LLC"      ,
 175  "slock-27"       , "slock-28"          , "slock-AF_CAN"      ,
 176  "slock-AF_TIPC"  , "slock-AF_BLUETOOTH", "slock-AF_IUCV"     ,
 177  "slock-AF_RXRPC" , "slock-AF_ISDN"     , "slock-AF_PHONET"   ,
 178  "slock-AF_IEEE802154", "slock-AF_CAIF" , "slock-AF_ALG"      ,
 179  "slock-AF_NFC"   , "slock-AF_MAX"
 180};
 181static const char *const af_family_clock_key_strings[AF_MAX+1] = {
 182  "clock-AF_UNSPEC", "clock-AF_UNIX"     , "clock-AF_INET"     ,
 183  "clock-AF_AX25"  , "clock-AF_IPX"      , "clock-AF_APPLETALK",
 184  "clock-AF_NETROM", "clock-AF_BRIDGE"   , "clock-AF_ATMPVC"   ,
 185  "clock-AF_X25"   , "clock-AF_INET6"    , "clock-AF_ROSE"     ,
 186  "clock-AF_DECnet", "clock-AF_NETBEUI"  , "clock-AF_SECURITY" ,
 187  "clock-AF_KEY"   , "clock-AF_NETLINK"  , "clock-AF_PACKET"   ,
 188  "clock-AF_ASH"   , "clock-AF_ECONET"   , "clock-AF_ATMSVC"   ,
 189  "clock-AF_RDS"   , "clock-AF_SNA"      , "clock-AF_IRDA"     ,
 190  "clock-AF_PPPOX" , "clock-AF_WANPIPE"  , "clock-AF_LLC"      ,
 191  "clock-27"       , "clock-28"          , "clock-AF_CAN"      ,
 192  "clock-AF_TIPC"  , "clock-AF_BLUETOOTH", "clock-AF_IUCV"     ,
 193  "clock-AF_RXRPC" , "clock-AF_ISDN"     , "clock-AF_PHONET"   ,
 194  "clock-AF_IEEE802154", "clock-AF_CAIF" , "clock-AF_ALG"      ,
 195  "clock-AF_NFC"   , "clock-AF_MAX"
 196};
 197
 198/*
 199 * sk_callback_lock locking rules are per-address-family,
 200 * so split the lock classes by using a per-AF key:
 201 */
 202static struct lock_class_key af_callback_keys[AF_MAX];
 203
 204/* Take into consideration the size of the struct sk_buff overhead in the
 205 * determination of these values, since that is non-constant across
 206 * platforms.  This makes socket queueing behavior and performance
 207 * not depend upon such differences.
 208 */
 209#define _SK_MEM_PACKETS		256
 210#define _SK_MEM_OVERHEAD	(sizeof(struct sk_buff) + 256)
 211#define SK_WMEM_MAX		(_SK_MEM_OVERHEAD * _SK_MEM_PACKETS)
 212#define SK_RMEM_MAX		(_SK_MEM_OVERHEAD * _SK_MEM_PACKETS)
 213
 214/* Run time adjustable parameters. */
 215__u32 sysctl_wmem_max __read_mostly = SK_WMEM_MAX;
 
 216__u32 sysctl_rmem_max __read_mostly = SK_RMEM_MAX;
 
 217__u32 sysctl_wmem_default __read_mostly = SK_WMEM_MAX;
 218__u32 sysctl_rmem_default __read_mostly = SK_RMEM_MAX;
 219
 220/* Maximal space eaten by iovec or ancillary data plus some space */
 221int sysctl_optmem_max __read_mostly = sizeof(unsigned long)*(2*UIO_MAXIOV+512);
 222EXPORT_SYMBOL(sysctl_optmem_max);
 223
 224#if defined(CONFIG_CGROUPS) && !defined(CONFIG_NET_CLS_CGROUP)
 
 225int net_cls_subsys_id = -1;
 226EXPORT_SYMBOL_GPL(net_cls_subsys_id);
 227#endif
 
 
 
 
 
 228
 229static int sock_set_timeout(long *timeo_p, char __user *optval, int optlen)
 230{
 231	struct timeval tv;
 232
 233	if (optlen < sizeof(tv))
 234		return -EINVAL;
 235	if (copy_from_user(&tv, optval, sizeof(tv)))
 236		return -EFAULT;
 237	if (tv.tv_usec < 0 || tv.tv_usec >= USEC_PER_SEC)
 238		return -EDOM;
 239
 240	if (tv.tv_sec < 0) {
 241		static int warned __read_mostly;
 242
 243		*timeo_p = 0;
 244		if (warned < 10 && net_ratelimit()) {
 245			warned++;
 246			printk(KERN_INFO "sock_set_timeout: `%s' (pid %d) "
 247			       "tries to set negative timeout\n",
 248				current->comm, task_pid_nr(current));
 249		}
 250		return 0;
 251	}
 252	*timeo_p = MAX_SCHEDULE_TIMEOUT;
 253	if (tv.tv_sec == 0 && tv.tv_usec == 0)
 254		return 0;
 255	if (tv.tv_sec < (MAX_SCHEDULE_TIMEOUT/HZ - 1))
 256		*timeo_p = tv.tv_sec*HZ + (tv.tv_usec+(1000000/HZ-1))/(1000000/HZ);
 257	return 0;
 258}
 259
 260static void sock_warn_obsolete_bsdism(const char *name)
 261{
 262	static int warned;
 263	static char warncomm[TASK_COMM_LEN];
 264	if (strcmp(warncomm, current->comm) && warned < 5) {
 265		strcpy(warncomm,  current->comm);
 266		printk(KERN_WARNING "process `%s' is using obsolete "
 267		       "%s SO_BSDCOMPAT\n", warncomm, name);
 268		warned++;
 269	}
 270}
 271
 272static void sock_disable_timestamp(struct sock *sk, int flag)
 
 
 273{
 274	if (sock_flag(sk, flag)) {
 275		sock_reset_flag(sk, flag);
 276		if (!sock_flag(sk, SOCK_TIMESTAMP) &&
 277		    !sock_flag(sk, SOCK_TIMESTAMPING_RX_SOFTWARE)) {
 278			net_disable_timestamp();
 279		}
 280	}
 281}
 282
 283
 284int sock_queue_rcv_skb(struct sock *sk, struct sk_buff *skb)
 285{
 286	int err;
 287	int skb_len;
 288	unsigned long flags;
 289	struct sk_buff_head *list = &sk->sk_receive_queue;
 290
 291	/* Cast sk->rcvbuf to unsigned... It's pointless, but reduces
 292	   number of warnings when compiling with -W --ANK
 293	 */
 294	if (atomic_read(&sk->sk_rmem_alloc) + skb->truesize >=
 295	    (unsigned)sk->sk_rcvbuf) {
 296		atomic_inc(&sk->sk_drops);
 297		trace_sock_rcvqueue_full(sk, skb);
 298		return -ENOMEM;
 299	}
 300
 301	err = sk_filter(sk, skb);
 302	if (err)
 303		return err;
 304
 305	if (!sk_rmem_schedule(sk, skb->truesize)) {
 306		atomic_inc(&sk->sk_drops);
 307		return -ENOBUFS;
 308	}
 309
 310	skb->dev = NULL;
 311	skb_set_owner_r(skb, sk);
 312
 313	/* Cache the SKB length before we tack it onto the receive
 314	 * queue.  Once it is added it no longer belongs to us and
 315	 * may be freed by other threads of control pulling packets
 316	 * from the queue.
 317	 */
 318	skb_len = skb->len;
 319
 320	/* we escape from rcu protected region, make sure we dont leak
 321	 * a norefcounted dst
 322	 */
 323	skb_dst_force(skb);
 324
 325	spin_lock_irqsave(&list->lock, flags);
 326	skb->dropcount = atomic_read(&sk->sk_drops);
 327	__skb_queue_tail(list, skb);
 328	spin_unlock_irqrestore(&list->lock, flags);
 329
 330	if (!sock_flag(sk, SOCK_DEAD))
 331		sk->sk_data_ready(sk, skb_len);
 332	return 0;
 333}
 334EXPORT_SYMBOL(sock_queue_rcv_skb);
 335
 336int sk_receive_skb(struct sock *sk, struct sk_buff *skb, const int nested)
 337{
 338	int rc = NET_RX_SUCCESS;
 339
 340	if (sk_filter(sk, skb))
 341		goto discard_and_relse;
 342
 343	skb->dev = NULL;
 344
 345	if (sk_rcvqueues_full(sk, skb)) {
 346		atomic_inc(&sk->sk_drops);
 347		goto discard_and_relse;
 348	}
 349	if (nested)
 350		bh_lock_sock_nested(sk);
 351	else
 352		bh_lock_sock(sk);
 353	if (!sock_owned_by_user(sk)) {
 354		/*
 355		 * trylock + unlock semantics:
 356		 */
 357		mutex_acquire(&sk->sk_lock.dep_map, 0, 1, _RET_IP_);
 358
 359		rc = sk_backlog_rcv(sk, skb);
 360
 361		mutex_release(&sk->sk_lock.dep_map, 1, _RET_IP_);
 362	} else if (sk_add_backlog(sk, skb)) {
 363		bh_unlock_sock(sk);
 364		atomic_inc(&sk->sk_drops);
 365		goto discard_and_relse;
 366	}
 367
 368	bh_unlock_sock(sk);
 369out:
 370	sock_put(sk);
 371	return rc;
 372discard_and_relse:
 373	kfree_skb(skb);
 374	goto out;
 375}
 376EXPORT_SYMBOL(sk_receive_skb);
 377
 378void sk_reset_txq(struct sock *sk)
 379{
 380	sk_tx_queue_clear(sk);
 381}
 382EXPORT_SYMBOL(sk_reset_txq);
 383
 384struct dst_entry *__sk_dst_check(struct sock *sk, u32 cookie)
 385{
 386	struct dst_entry *dst = __sk_dst_get(sk);
 387
 388	if (dst && dst->obsolete && dst->ops->check(dst, cookie) == NULL) {
 389		sk_tx_queue_clear(sk);
 390		rcu_assign_pointer(sk->sk_dst_cache, NULL);
 391		dst_release(dst);
 392		return NULL;
 393	}
 394
 395	return dst;
 396}
 397EXPORT_SYMBOL(__sk_dst_check);
 398
 399struct dst_entry *sk_dst_check(struct sock *sk, u32 cookie)
 400{
 401	struct dst_entry *dst = sk_dst_get(sk);
 402
 403	if (dst && dst->obsolete && dst->ops->check(dst, cookie) == NULL) {
 404		sk_dst_reset(sk);
 405		dst_release(dst);
 406		return NULL;
 407	}
 408
 409	return dst;
 410}
 411EXPORT_SYMBOL(sk_dst_check);
 412
 413static int sock_bindtodevice(struct sock *sk, char __user *optval, int optlen)
 414{
 415	int ret = -ENOPROTOOPT;
 416#ifdef CONFIG_NETDEVICES
 417	struct net *net = sock_net(sk);
 418	char devname[IFNAMSIZ];
 419	int index;
 420
 421	/* Sorry... */
 422	ret = -EPERM;
 423	if (!capable(CAP_NET_RAW))
 424		goto out;
 425
 426	ret = -EINVAL;
 427	if (optlen < 0)
 428		goto out;
 429
 430	/* Bind this socket to a particular device like "eth0",
 431	 * as specified in the passed interface name. If the
 432	 * name is "" or the option length is zero the socket
 433	 * is not bound.
 434	 */
 435	if (optlen > IFNAMSIZ - 1)
 436		optlen = IFNAMSIZ - 1;
 437	memset(devname, 0, sizeof(devname));
 438
 439	ret = -EFAULT;
 440	if (copy_from_user(devname, optval, optlen))
 441		goto out;
 442
 443	index = 0;
 444	if (devname[0] != '\0') {
 445		struct net_device *dev;
 446
 447		rcu_read_lock();
 448		dev = dev_get_by_name_rcu(net, devname);
 449		if (dev)
 450			index = dev->ifindex;
 451		rcu_read_unlock();
 452		ret = -ENODEV;
 453		if (!dev)
 454			goto out;
 455	}
 456
 457	lock_sock(sk);
 458	sk->sk_bound_dev_if = index;
 459	sk_dst_reset(sk);
 460	release_sock(sk);
 461
 462	ret = 0;
 463
 464out:
 465#endif
 466
 467	return ret;
 468}
 469
 470static inline void sock_valbool_flag(struct sock *sk, int bit, int valbool)
 471{
 472	if (valbool)
 473		sock_set_flag(sk, bit);
 474	else
 475		sock_reset_flag(sk, bit);
 476}
 477
 478/*
 479 *	This is meant for all protocols to use and covers goings on
 480 *	at the socket level. Everything here is generic.
 481 */
 482
 483int sock_setsockopt(struct socket *sock, int level, int optname,
 484		    char __user *optval, unsigned int optlen)
 485{
 486	struct sock *sk = sock->sk;
 487	int val;
 488	int valbool;
 489	struct linger ling;
 490	int ret = 0;
 491
 492	/*
 493	 *	Options without arguments
 494	 */
 495
 496	if (optname == SO_BINDTODEVICE)
 497		return sock_bindtodevice(sk, optval, optlen);
 498
 499	if (optlen < sizeof(int))
 500		return -EINVAL;
 501
 502	if (get_user(val, (int __user *)optval))
 503		return -EFAULT;
 504
 505	valbool = val ? 1 : 0;
 506
 507	lock_sock(sk);
 508
 509	switch (optname) {
 510	case SO_DEBUG:
 511		if (val && !capable(CAP_NET_ADMIN))
 512			ret = -EACCES;
 513		else
 514			sock_valbool_flag(sk, SOCK_DBG, valbool);
 515		break;
 516	case SO_REUSEADDR:
 517		sk->sk_reuse = valbool;
 518		break;
 519	case SO_TYPE:
 520	case SO_PROTOCOL:
 521	case SO_DOMAIN:
 522	case SO_ERROR:
 523		ret = -ENOPROTOOPT;
 524		break;
 525	case SO_DONTROUTE:
 526		sock_valbool_flag(sk, SOCK_LOCALROUTE, valbool);
 527		break;
 528	case SO_BROADCAST:
 529		sock_valbool_flag(sk, SOCK_BROADCAST, valbool);
 530		break;
 531	case SO_SNDBUF:
 532		/* Don't error on this BSD doesn't and if you think
 533		   about it this is right. Otherwise apps have to
 534		   play 'guess the biggest size' games. RCVBUF/SNDBUF
 535		   are treated in BSD as hints */
 536
 537		if (val > sysctl_wmem_max)
 538			val = sysctl_wmem_max;
 539set_sndbuf:
 540		sk->sk_userlocks |= SOCK_SNDBUF_LOCK;
 541		if ((val * 2) < SOCK_MIN_SNDBUF)
 542			sk->sk_sndbuf = SOCK_MIN_SNDBUF;
 543		else
 544			sk->sk_sndbuf = val * 2;
 545
 546		/*
 547		 *	Wake up sending tasks if we
 548		 *	upped the value.
 549		 */
 550		sk->sk_write_space(sk);
 551		break;
 552
 553	case SO_SNDBUFFORCE:
 554		if (!capable(CAP_NET_ADMIN)) {
 555			ret = -EPERM;
 556			break;
 557		}
 558		goto set_sndbuf;
 559
 560	case SO_RCVBUF:
 561		/* Don't error on this BSD doesn't and if you think
 562		   about it this is right. Otherwise apps have to
 563		   play 'guess the biggest size' games. RCVBUF/SNDBUF
 564		   are treated in BSD as hints */
 565
 566		if (val > sysctl_rmem_max)
 567			val = sysctl_rmem_max;
 568set_rcvbuf:
 569		sk->sk_userlocks |= SOCK_RCVBUF_LOCK;
 570		/*
 571		 * We double it on the way in to account for
 572		 * "struct sk_buff" etc. overhead.   Applications
 573		 * assume that the SO_RCVBUF setting they make will
 574		 * allow that much actual data to be received on that
 575		 * socket.
 576		 *
 577		 * Applications are unaware that "struct sk_buff" and
 578		 * other overheads allocate from the receive buffer
 579		 * during socket buffer allocation.
 580		 *
 581		 * And after considering the possible alternatives,
 582		 * returning the value we actually used in getsockopt
 583		 * is the most desirable behavior.
 584		 */
 585		if ((val * 2) < SOCK_MIN_RCVBUF)
 586			sk->sk_rcvbuf = SOCK_MIN_RCVBUF;
 587		else
 588			sk->sk_rcvbuf = val * 2;
 589		break;
 590
 591	case SO_RCVBUFFORCE:
 592		if (!capable(CAP_NET_ADMIN)) {
 593			ret = -EPERM;
 594			break;
 595		}
 596		goto set_rcvbuf;
 597
 598	case SO_KEEPALIVE:
 599#ifdef CONFIG_INET
 600		if (sk->sk_protocol == IPPROTO_TCP)
 601			tcp_set_keepalive(sk, valbool);
 602#endif
 603		sock_valbool_flag(sk, SOCK_KEEPOPEN, valbool);
 604		break;
 605
 606	case SO_OOBINLINE:
 607		sock_valbool_flag(sk, SOCK_URGINLINE, valbool);
 608		break;
 609
 610	case SO_NO_CHECK:
 611		sk->sk_no_check = valbool;
 612		break;
 613
 614	case SO_PRIORITY:
 615		if ((val >= 0 && val <= 6) || capable(CAP_NET_ADMIN))
 616			sk->sk_priority = val;
 617		else
 618			ret = -EPERM;
 619		break;
 620
 621	case SO_LINGER:
 622		if (optlen < sizeof(ling)) {
 623			ret = -EINVAL;	/* 1003.1g */
 624			break;
 625		}
 626		if (copy_from_user(&ling, optval, sizeof(ling))) {
 627			ret = -EFAULT;
 628			break;
 629		}
 630		if (!ling.l_onoff)
 631			sock_reset_flag(sk, SOCK_LINGER);
 632		else {
 633#if (BITS_PER_LONG == 32)
 634			if ((unsigned int)ling.l_linger >= MAX_SCHEDULE_TIMEOUT/HZ)
 635				sk->sk_lingertime = MAX_SCHEDULE_TIMEOUT;
 636			else
 637#endif
 638				sk->sk_lingertime = (unsigned int)ling.l_linger * HZ;
 639			sock_set_flag(sk, SOCK_LINGER);
 640		}
 641		break;
 642
 643	case SO_BSDCOMPAT:
 644		sock_warn_obsolete_bsdism("setsockopt");
 645		break;
 646
 647	case SO_PASSCRED:
 648		if (valbool)
 649			set_bit(SOCK_PASSCRED, &sock->flags);
 650		else
 651			clear_bit(SOCK_PASSCRED, &sock->flags);
 652		break;
 653
 654	case SO_TIMESTAMP:
 655	case SO_TIMESTAMPNS:
 656		if (valbool)  {
 657			if (optname == SO_TIMESTAMP)
 658				sock_reset_flag(sk, SOCK_RCVTSTAMPNS);
 659			else
 660				sock_set_flag(sk, SOCK_RCVTSTAMPNS);
 661			sock_set_flag(sk, SOCK_RCVTSTAMP);
 662			sock_enable_timestamp(sk, SOCK_TIMESTAMP);
 663		} else {
 664			sock_reset_flag(sk, SOCK_RCVTSTAMP);
 665			sock_reset_flag(sk, SOCK_RCVTSTAMPNS);
 666		}
 667		break;
 668
 669	case SO_TIMESTAMPING:
 670		if (val & ~SOF_TIMESTAMPING_MASK) {
 671			ret = -EINVAL;
 672			break;
 673		}
 674		sock_valbool_flag(sk, SOCK_TIMESTAMPING_TX_HARDWARE,
 675				  val & SOF_TIMESTAMPING_TX_HARDWARE);
 676		sock_valbool_flag(sk, SOCK_TIMESTAMPING_TX_SOFTWARE,
 677				  val & SOF_TIMESTAMPING_TX_SOFTWARE);
 678		sock_valbool_flag(sk, SOCK_TIMESTAMPING_RX_HARDWARE,
 679				  val & SOF_TIMESTAMPING_RX_HARDWARE);
 680		if (val & SOF_TIMESTAMPING_RX_SOFTWARE)
 681			sock_enable_timestamp(sk,
 682					      SOCK_TIMESTAMPING_RX_SOFTWARE);
 683		else
 684			sock_disable_timestamp(sk,
 685					       SOCK_TIMESTAMPING_RX_SOFTWARE);
 686		sock_valbool_flag(sk, SOCK_TIMESTAMPING_SOFTWARE,
 687				  val & SOF_TIMESTAMPING_SOFTWARE);
 688		sock_valbool_flag(sk, SOCK_TIMESTAMPING_SYS_HARDWARE,
 689				  val & SOF_TIMESTAMPING_SYS_HARDWARE);
 690		sock_valbool_flag(sk, SOCK_TIMESTAMPING_RAW_HARDWARE,
 691				  val & SOF_TIMESTAMPING_RAW_HARDWARE);
 692		break;
 693
 694	case SO_RCVLOWAT:
 695		if (val < 0)
 696			val = INT_MAX;
 697		sk->sk_rcvlowat = val ? : 1;
 698		break;
 699
 700	case SO_RCVTIMEO:
 701		ret = sock_set_timeout(&sk->sk_rcvtimeo, optval, optlen);
 702		break;
 703
 704	case SO_SNDTIMEO:
 705		ret = sock_set_timeout(&sk->sk_sndtimeo, optval, optlen);
 706		break;
 707
 708	case SO_ATTACH_FILTER:
 709		ret = -EINVAL;
 710		if (optlen == sizeof(struct sock_fprog)) {
 711			struct sock_fprog fprog;
 712
 713			ret = -EFAULT;
 714			if (copy_from_user(&fprog, optval, sizeof(fprog)))
 715				break;
 716
 717			ret = sk_attach_filter(&fprog, sk);
 718		}
 719		break;
 720
 721	case SO_DETACH_FILTER:
 722		ret = sk_detach_filter(sk);
 723		break;
 724
 725	case SO_PASSSEC:
 726		if (valbool)
 727			set_bit(SOCK_PASSSEC, &sock->flags);
 728		else
 729			clear_bit(SOCK_PASSSEC, &sock->flags);
 730		break;
 731	case SO_MARK:
 732		if (!capable(CAP_NET_ADMIN))
 733			ret = -EPERM;
 734		else
 735			sk->sk_mark = val;
 736		break;
 737
 738		/* We implement the SO_SNDLOWAT etc to
 739		   not be settable (1003.1g 5.3) */
 740	case SO_RXQ_OVFL:
 741		if (valbool)
 742			sock_set_flag(sk, SOCK_RXQ_OVFL);
 
 
 
 
 
 
 
 
 743		else
 744			sock_reset_flag(sk, SOCK_RXQ_OVFL);
 745		break;
 
 
 
 
 
 746	default:
 747		ret = -ENOPROTOOPT;
 748		break;
 749	}
 750	release_sock(sk);
 751	return ret;
 752}
 753EXPORT_SYMBOL(sock_setsockopt);
 754
 755
 756void cred_to_ucred(struct pid *pid, const struct cred *cred,
 757		   struct ucred *ucred)
 758{
 759	ucred->pid = pid_vnr(pid);
 760	ucred->uid = ucred->gid = -1;
 761	if (cred) {
 762		struct user_namespace *current_ns = current_user_ns();
 763
 764		ucred->uid = user_ns_map_uid(current_ns, cred, cred->euid);
 765		ucred->gid = user_ns_map_gid(current_ns, cred, cred->egid);
 766	}
 767}
 768EXPORT_SYMBOL_GPL(cred_to_ucred);
 769
 770int sock_getsockopt(struct socket *sock, int level, int optname,
 771		    char __user *optval, int __user *optlen)
 772{
 773	struct sock *sk = sock->sk;
 774
 775	union {
 776		int val;
 777		struct linger ling;
 778		struct timeval tm;
 779	} v;
 780
 781	int lv = sizeof(int);
 782	int len;
 783
 784	if (get_user(len, optlen))
 785		return -EFAULT;
 786	if (len < 0)
 787		return -EINVAL;
 788
 789	memset(&v, 0, sizeof(v));
 790
 791	switch (optname) {
 792	case SO_DEBUG:
 793		v.val = sock_flag(sk, SOCK_DBG);
 794		break;
 795
 796	case SO_DONTROUTE:
 797		v.val = sock_flag(sk, SOCK_LOCALROUTE);
 798		break;
 799
 800	case SO_BROADCAST:
 801		v.val = !!sock_flag(sk, SOCK_BROADCAST);
 802		break;
 803
 804	case SO_SNDBUF:
 805		v.val = sk->sk_sndbuf;
 806		break;
 807
 808	case SO_RCVBUF:
 809		v.val = sk->sk_rcvbuf;
 810		break;
 811
 812	case SO_REUSEADDR:
 813		v.val = sk->sk_reuse;
 814		break;
 815
 816	case SO_KEEPALIVE:
 817		v.val = !!sock_flag(sk, SOCK_KEEPOPEN);
 818		break;
 819
 820	case SO_TYPE:
 821		v.val = sk->sk_type;
 822		break;
 823
 824	case SO_PROTOCOL:
 825		v.val = sk->sk_protocol;
 826		break;
 827
 828	case SO_DOMAIN:
 829		v.val = sk->sk_family;
 830		break;
 831
 832	case SO_ERROR:
 833		v.val = -sock_error(sk);
 834		if (v.val == 0)
 835			v.val = xchg(&sk->sk_err_soft, 0);
 836		break;
 837
 838	case SO_OOBINLINE:
 839		v.val = !!sock_flag(sk, SOCK_URGINLINE);
 840		break;
 841
 842	case SO_NO_CHECK:
 843		v.val = sk->sk_no_check;
 844		break;
 845
 846	case SO_PRIORITY:
 847		v.val = sk->sk_priority;
 848		break;
 849
 850	case SO_LINGER:
 851		lv		= sizeof(v.ling);
 852		v.ling.l_onoff	= !!sock_flag(sk, SOCK_LINGER);
 853		v.ling.l_linger	= sk->sk_lingertime / HZ;
 854		break;
 855
 856	case SO_BSDCOMPAT:
 857		sock_warn_obsolete_bsdism("getsockopt");
 858		break;
 859
 860	case SO_TIMESTAMP:
 861		v.val = sock_flag(sk, SOCK_RCVTSTAMP) &&
 862				!sock_flag(sk, SOCK_RCVTSTAMPNS);
 863		break;
 864
 865	case SO_TIMESTAMPNS:
 866		v.val = sock_flag(sk, SOCK_RCVTSTAMPNS);
 867		break;
 868
 869	case SO_TIMESTAMPING:
 870		v.val = 0;
 871		if (sock_flag(sk, SOCK_TIMESTAMPING_TX_HARDWARE))
 872			v.val |= SOF_TIMESTAMPING_TX_HARDWARE;
 873		if (sock_flag(sk, SOCK_TIMESTAMPING_TX_SOFTWARE))
 874			v.val |= SOF_TIMESTAMPING_TX_SOFTWARE;
 875		if (sock_flag(sk, SOCK_TIMESTAMPING_RX_HARDWARE))
 876			v.val |= SOF_TIMESTAMPING_RX_HARDWARE;
 877		if (sock_flag(sk, SOCK_TIMESTAMPING_RX_SOFTWARE))
 878			v.val |= SOF_TIMESTAMPING_RX_SOFTWARE;
 879		if (sock_flag(sk, SOCK_TIMESTAMPING_SOFTWARE))
 880			v.val |= SOF_TIMESTAMPING_SOFTWARE;
 881		if (sock_flag(sk, SOCK_TIMESTAMPING_SYS_HARDWARE))
 882			v.val |= SOF_TIMESTAMPING_SYS_HARDWARE;
 883		if (sock_flag(sk, SOCK_TIMESTAMPING_RAW_HARDWARE))
 884			v.val |= SOF_TIMESTAMPING_RAW_HARDWARE;
 885		break;
 886
 887	case SO_RCVTIMEO:
 888		lv = sizeof(struct timeval);
 889		if (sk->sk_rcvtimeo == MAX_SCHEDULE_TIMEOUT) {
 890			v.tm.tv_sec = 0;
 891			v.tm.tv_usec = 0;
 892		} else {
 893			v.tm.tv_sec = sk->sk_rcvtimeo / HZ;
 894			v.tm.tv_usec = ((sk->sk_rcvtimeo % HZ) * 1000000) / HZ;
 895		}
 896		break;
 897
 898	case SO_SNDTIMEO:
 899		lv = sizeof(struct timeval);
 900		if (sk->sk_sndtimeo == MAX_SCHEDULE_TIMEOUT) {
 901			v.tm.tv_sec = 0;
 902			v.tm.tv_usec = 0;
 903		} else {
 904			v.tm.tv_sec = sk->sk_sndtimeo / HZ;
 905			v.tm.tv_usec = ((sk->sk_sndtimeo % HZ) * 1000000) / HZ;
 906		}
 907		break;
 908
 909	case SO_RCVLOWAT:
 910		v.val = sk->sk_rcvlowat;
 911		break;
 912
 913	case SO_SNDLOWAT:
 914		v.val = 1;
 915		break;
 916
 917	case SO_PASSCRED:
 918		v.val = test_bit(SOCK_PASSCRED, &sock->flags) ? 1 : 0;
 919		break;
 920
 921	case SO_PEERCRED:
 922	{
 923		struct ucred peercred;
 924		if (len > sizeof(peercred))
 925			len = sizeof(peercred);
 926		cred_to_ucred(sk->sk_peer_pid, sk->sk_peer_cred, &peercred);
 927		if (copy_to_user(optval, &peercred, len))
 928			return -EFAULT;
 929		goto lenout;
 930	}
 931
 932	case SO_PEERNAME:
 933	{
 934		char address[128];
 935
 936		if (sock->ops->getname(sock, (struct sockaddr *)address, &lv, 2))
 937			return -ENOTCONN;
 938		if (lv < len)
 939			return -EINVAL;
 940		if (copy_to_user(optval, address, len))
 941			return -EFAULT;
 942		goto lenout;
 943	}
 944
 945	/* Dubious BSD thing... Probably nobody even uses it, but
 946	 * the UNIX standard wants it for whatever reason... -DaveM
 947	 */
 948	case SO_ACCEPTCONN:
 949		v.val = sk->sk_state == TCP_LISTEN;
 950		break;
 951
 952	case SO_PASSSEC:
 953		v.val = test_bit(SOCK_PASSSEC, &sock->flags) ? 1 : 0;
 954		break;
 955
 956	case SO_PEERSEC:
 957		return security_socket_getpeersec_stream(sock, optval, optlen, len);
 958
 959	case SO_MARK:
 960		v.val = sk->sk_mark;
 961		break;
 962
 963	case SO_RXQ_OVFL:
 964		v.val = !!sock_flag(sk, SOCK_RXQ_OVFL);
 
 
 
 
 965		break;
 966
 
 
 
 
 
 
 
 
 
 967	default:
 968		return -ENOPROTOOPT;
 969	}
 970
 971	if (len > lv)
 972		len = lv;
 973	if (copy_to_user(optval, &v, len))
 974		return -EFAULT;
 975lenout:
 976	if (put_user(len, optlen))
 977		return -EFAULT;
 978	return 0;
 979}
 980
 981/*
 982 * Initialize an sk_lock.
 983 *
 984 * (We also register the sk_lock with the lock validator.)
 985 */
 986static inline void sock_lock_init(struct sock *sk)
 987{
 988	sock_lock_init_class_and_name(sk,
 989			af_family_slock_key_strings[sk->sk_family],
 990			af_family_slock_keys + sk->sk_family,
 991			af_family_key_strings[sk->sk_family],
 992			af_family_keys + sk->sk_family);
 993}
 994
 995/*
 996 * Copy all fields from osk to nsk but nsk->sk_refcnt must not change yet,
 997 * even temporarly, because of RCU lookups. sk_node should also be left as is.
 998 * We must not copy fields between sk_dontcopy_begin and sk_dontcopy_end
 999 */
1000static void sock_copy(struct sock *nsk, const struct sock *osk)
1001{
1002#ifdef CONFIG_SECURITY_NETWORK
1003	void *sptr = nsk->sk_security;
1004#endif
1005	memcpy(nsk, osk, offsetof(struct sock, sk_dontcopy_begin));
1006
1007	memcpy(&nsk->sk_dontcopy_end, &osk->sk_dontcopy_end,
1008	       osk->sk_prot->obj_size - offsetof(struct sock, sk_dontcopy_end));
1009
1010#ifdef CONFIG_SECURITY_NETWORK
1011	nsk->sk_security = sptr;
1012	security_sk_clone(osk, nsk);
1013#endif
1014}
1015
1016/*
1017 * caches using SLAB_DESTROY_BY_RCU should let .next pointer from nulls nodes
1018 * un-modified. Special care is taken when initializing object to zero.
1019 */
1020static inline void sk_prot_clear_nulls(struct sock *sk, int size)
1021{
1022	if (offsetof(struct sock, sk_node.next) != 0)
1023		memset(sk, 0, offsetof(struct sock, sk_node.next));
1024	memset(&sk->sk_node.pprev, 0,
1025	       size - offsetof(struct sock, sk_node.pprev));
1026}
1027
1028void sk_prot_clear_portaddr_nulls(struct sock *sk, int size)
1029{
1030	unsigned long nulls1, nulls2;
1031
1032	nulls1 = offsetof(struct sock, __sk_common.skc_node.next);
1033	nulls2 = offsetof(struct sock, __sk_common.skc_portaddr_node.next);
1034	if (nulls1 > nulls2)
1035		swap(nulls1, nulls2);
1036
1037	if (nulls1 != 0)
1038		memset((char *)sk, 0, nulls1);
1039	memset((char *)sk + nulls1 + sizeof(void *), 0,
1040	       nulls2 - nulls1 - sizeof(void *));
1041	memset((char *)sk + nulls2 + sizeof(void *), 0,
1042	       size - nulls2 - sizeof(void *));
1043}
1044EXPORT_SYMBOL(sk_prot_clear_portaddr_nulls);
1045
1046static struct sock *sk_prot_alloc(struct proto *prot, gfp_t priority,
1047		int family)
1048{
1049	struct sock *sk;
1050	struct kmem_cache *slab;
1051
1052	slab = prot->slab;
1053	if (slab != NULL) {
1054		sk = kmem_cache_alloc(slab, priority & ~__GFP_ZERO);
1055		if (!sk)
1056			return sk;
1057		if (priority & __GFP_ZERO) {
1058			if (prot->clear_sk)
1059				prot->clear_sk(sk, prot->obj_size);
1060			else
1061				sk_prot_clear_nulls(sk, prot->obj_size);
1062		}
1063	} else
1064		sk = kmalloc(prot->obj_size, priority);
1065
1066	if (sk != NULL) {
1067		kmemcheck_annotate_bitfield(sk, flags);
1068
1069		if (security_sk_alloc(sk, family, priority))
1070			goto out_free;
1071
1072		if (!try_module_get(prot->owner))
1073			goto out_free_sec;
1074		sk_tx_queue_clear(sk);
1075	}
1076
1077	return sk;
1078
1079out_free_sec:
1080	security_sk_free(sk);
1081out_free:
1082	if (slab != NULL)
1083		kmem_cache_free(slab, sk);
1084	else
1085		kfree(sk);
1086	return NULL;
1087}
1088
1089static void sk_prot_free(struct proto *prot, struct sock *sk)
1090{
1091	struct kmem_cache *slab;
1092	struct module *owner;
1093
1094	owner = prot->owner;
1095	slab = prot->slab;
1096
1097	security_sk_free(sk);
1098	if (slab != NULL)
1099		kmem_cache_free(slab, sk);
1100	else
1101		kfree(sk);
1102	module_put(owner);
1103}
1104
1105#ifdef CONFIG_CGROUPS
1106void sock_update_classid(struct sock *sk)
1107{
1108	u32 classid;
1109
1110	rcu_read_lock();  /* doing current task, which cannot vanish. */
1111	classid = task_cls_classid(current);
1112	rcu_read_unlock();
1113	if (classid && classid != sk->sk_classid)
1114		sk->sk_classid = classid;
1115}
1116EXPORT_SYMBOL(sock_update_classid);
 
 
 
 
 
 
 
 
 
1117#endif
1118
1119/**
1120 *	sk_alloc - All socket objects are allocated here
1121 *	@net: the applicable net namespace
1122 *	@family: protocol family
1123 *	@priority: for allocation (%GFP_KERNEL, %GFP_ATOMIC, etc)
1124 *	@prot: struct proto associated with this new sock instance
1125 */
1126struct sock *sk_alloc(struct net *net, int family, gfp_t priority,
1127		      struct proto *prot)
1128{
1129	struct sock *sk;
1130
1131	sk = sk_prot_alloc(prot, priority | __GFP_ZERO, family);
1132	if (sk) {
1133		sk->sk_family = family;
1134		/*
1135		 * See comment in struct sock definition to understand
1136		 * why we need sk_prot_creator -acme
1137		 */
1138		sk->sk_prot = sk->sk_prot_creator = prot;
1139		sock_lock_init(sk);
1140		sock_net_set(sk, get_net(net));
1141		atomic_set(&sk->sk_wmem_alloc, 1);
1142
1143		sock_update_classid(sk);
 
1144	}
1145
1146	return sk;
1147}
1148EXPORT_SYMBOL(sk_alloc);
1149
1150static void __sk_free(struct sock *sk)
1151{
1152	struct sk_filter *filter;
1153
1154	if (sk->sk_destruct)
1155		sk->sk_destruct(sk);
1156
1157	filter = rcu_dereference_check(sk->sk_filter,
1158				       atomic_read(&sk->sk_wmem_alloc) == 0);
1159	if (filter) {
1160		sk_filter_uncharge(sk, filter);
1161		rcu_assign_pointer(sk->sk_filter, NULL);
1162	}
1163
1164	sock_disable_timestamp(sk, SOCK_TIMESTAMP);
1165	sock_disable_timestamp(sk, SOCK_TIMESTAMPING_RX_SOFTWARE);
1166
1167	if (atomic_read(&sk->sk_omem_alloc))
1168		printk(KERN_DEBUG "%s: optmem leakage (%d bytes) detected.\n",
1169		       __func__, atomic_read(&sk->sk_omem_alloc));
1170
1171	if (sk->sk_peer_cred)
1172		put_cred(sk->sk_peer_cred);
1173	put_pid(sk->sk_peer_pid);
1174	put_net(sock_net(sk));
1175	sk_prot_free(sk->sk_prot_creator, sk);
1176}
1177
1178void sk_free(struct sock *sk)
1179{
1180	/*
1181	 * We subtract one from sk_wmem_alloc and can know if
1182	 * some packets are still in some tx queue.
1183	 * If not null, sock_wfree() will call __sk_free(sk) later
1184	 */
1185	if (atomic_dec_and_test(&sk->sk_wmem_alloc))
1186		__sk_free(sk);
1187}
1188EXPORT_SYMBOL(sk_free);
1189
1190/*
1191 * Last sock_put should drop reference to sk->sk_net. It has already
1192 * been dropped in sk_change_net. Taking reference to stopping namespace
1193 * is not an option.
1194 * Take reference to a socket to remove it from hash _alive_ and after that
1195 * destroy it in the context of init_net.
1196 */
1197void sk_release_kernel(struct sock *sk)
1198{
1199	if (sk == NULL || sk->sk_socket == NULL)
1200		return;
1201
1202	sock_hold(sk);
1203	sock_release(sk->sk_socket);
1204	release_net(sock_net(sk));
1205	sock_net_set(sk, get_net(&init_net));
1206	sock_put(sk);
1207}
1208EXPORT_SYMBOL(sk_release_kernel);
1209
1210struct sock *sk_clone(const struct sock *sk, const gfp_t priority)
 
 
 
 
 
 
 
 
 
 
 
 
 
1211{
1212	struct sock *newsk;
1213
1214	newsk = sk_prot_alloc(sk->sk_prot, priority, sk->sk_family);
1215	if (newsk != NULL) {
1216		struct sk_filter *filter;
1217
1218		sock_copy(newsk, sk);
1219
1220		/* SANITY */
1221		get_net(sock_net(newsk));
1222		sk_node_init(&newsk->sk_node);
1223		sock_lock_init(newsk);
1224		bh_lock_sock(newsk);
1225		newsk->sk_backlog.head	= newsk->sk_backlog.tail = NULL;
1226		newsk->sk_backlog.len = 0;
1227
1228		atomic_set(&newsk->sk_rmem_alloc, 0);
1229		/*
1230		 * sk_wmem_alloc set to one (see sk_free() and sock_wfree())
1231		 */
1232		atomic_set(&newsk->sk_wmem_alloc, 1);
1233		atomic_set(&newsk->sk_omem_alloc, 0);
1234		skb_queue_head_init(&newsk->sk_receive_queue);
1235		skb_queue_head_init(&newsk->sk_write_queue);
1236#ifdef CONFIG_NET_DMA
1237		skb_queue_head_init(&newsk->sk_async_wait_queue);
1238#endif
1239
1240		spin_lock_init(&newsk->sk_dst_lock);
1241		rwlock_init(&newsk->sk_callback_lock);
1242		lockdep_set_class_and_name(&newsk->sk_callback_lock,
1243				af_callback_keys + newsk->sk_family,
1244				af_family_clock_key_strings[newsk->sk_family]);
1245
1246		newsk->sk_dst_cache	= NULL;
1247		newsk->sk_wmem_queued	= 0;
1248		newsk->sk_forward_alloc = 0;
1249		newsk->sk_send_head	= NULL;
1250		newsk->sk_userlocks	= sk->sk_userlocks & ~SOCK_BINDPORT_LOCK;
1251
1252		sock_reset_flag(newsk, SOCK_DONE);
1253		skb_queue_head_init(&newsk->sk_error_queue);
1254
1255		filter = rcu_dereference_protected(newsk->sk_filter, 1);
1256		if (filter != NULL)
1257			sk_filter_charge(newsk, filter);
1258
1259		if (unlikely(xfrm_sk_clone_policy(newsk))) {
1260			/* It is still raw copy of parent, so invalidate
1261			 * destructor and make plain sk_free() */
1262			newsk->sk_destruct = NULL;
 
1263			sk_free(newsk);
1264			newsk = NULL;
1265			goto out;
1266		}
1267
1268		newsk->sk_err	   = 0;
1269		newsk->sk_priority = 0;
1270		/*
1271		 * Before updating sk_refcnt, we must commit prior changes to memory
1272		 * (Documentation/RCU/rculist_nulls.txt for details)
1273		 */
1274		smp_wmb();
1275		atomic_set(&newsk->sk_refcnt, 2);
1276
1277		/*
1278		 * Increment the counter in the same struct proto as the master
1279		 * sock (sk_refcnt_debug_inc uses newsk->sk_prot->socks, that
1280		 * is the same as sk->sk_prot->socks, as this field was copied
1281		 * with memcpy).
1282		 *
1283		 * This _changes_ the previous behaviour, where
1284		 * tcp_create_openreq_child always was incrementing the
1285		 * equivalent to tcp_prot->socks (inet_sock_nr), so this have
1286		 * to be taken into account in all callers. -acme
1287		 */
1288		sk_refcnt_debug_inc(newsk);
1289		sk_set_socket(newsk, NULL);
1290		newsk->sk_wq = NULL;
1291
 
 
1292		if (newsk->sk_prot->sockets_allocated)
1293			percpu_counter_inc(newsk->sk_prot->sockets_allocated);
1294
1295		if (sock_flag(newsk, SOCK_TIMESTAMP) ||
1296		    sock_flag(newsk, SOCK_TIMESTAMPING_RX_SOFTWARE))
1297			net_enable_timestamp();
1298	}
1299out:
1300	return newsk;
1301}
1302EXPORT_SYMBOL_GPL(sk_clone);
1303
1304void sk_setup_caps(struct sock *sk, struct dst_entry *dst)
1305{
1306	__sk_dst_set(sk, dst);
1307	sk->sk_route_caps = dst->dev->features;
1308	if (sk->sk_route_caps & NETIF_F_GSO)
1309		sk->sk_route_caps |= NETIF_F_GSO_SOFTWARE;
1310	sk->sk_route_caps &= ~sk->sk_route_nocaps;
1311	if (sk_can_gso(sk)) {
1312		if (dst->header_len) {
1313			sk->sk_route_caps &= ~NETIF_F_GSO_MASK;
1314		} else {
1315			sk->sk_route_caps |= NETIF_F_SG | NETIF_F_HW_CSUM;
1316			sk->sk_gso_max_size = dst->dev->gso_max_size;
 
1317		}
1318	}
1319}
1320EXPORT_SYMBOL_GPL(sk_setup_caps);
1321
1322void __init sk_init(void)
1323{
1324	if (totalram_pages <= 4096) {
1325		sysctl_wmem_max = 32767;
1326		sysctl_rmem_max = 32767;
1327		sysctl_wmem_default = 32767;
1328		sysctl_rmem_default = 32767;
1329	} else if (totalram_pages >= 131072) {
1330		sysctl_wmem_max = 131071;
1331		sysctl_rmem_max = 131071;
1332	}
1333}
1334
1335/*
1336 *	Simple resource managers for sockets.
1337 */
1338
1339
1340/*
1341 * Write buffer destructor automatically called from kfree_skb.
1342 */
1343void sock_wfree(struct sk_buff *skb)
1344{
1345	struct sock *sk = skb->sk;
1346	unsigned int len = skb->truesize;
1347
1348	if (!sock_flag(sk, SOCK_USE_WRITE_QUEUE)) {
1349		/*
1350		 * Keep a reference on sk_wmem_alloc, this will be released
1351		 * after sk_write_space() call
1352		 */
1353		atomic_sub(len - 1, &sk->sk_wmem_alloc);
1354		sk->sk_write_space(sk);
1355		len = 1;
1356	}
1357	/*
1358	 * if sk_wmem_alloc reaches 0, we must finish what sk_free()
1359	 * could not do because of in-flight packets
1360	 */
1361	if (atomic_sub_and_test(len, &sk->sk_wmem_alloc))
1362		__sk_free(sk);
1363}
1364EXPORT_SYMBOL(sock_wfree);
1365
1366/*
1367 * Read buffer destructor automatically called from kfree_skb.
1368 */
1369void sock_rfree(struct sk_buff *skb)
1370{
1371	struct sock *sk = skb->sk;
1372	unsigned int len = skb->truesize;
1373
1374	atomic_sub(len, &sk->sk_rmem_alloc);
1375	sk_mem_uncharge(sk, len);
1376}
1377EXPORT_SYMBOL(sock_rfree);
1378
1379
1380int sock_i_uid(struct sock *sk)
1381{
1382	int uid;
1383
1384	read_lock_bh(&sk->sk_callback_lock);
1385	uid = sk->sk_socket ? SOCK_INODE(sk->sk_socket)->i_uid : 0;
1386	read_unlock_bh(&sk->sk_callback_lock);
1387	return uid;
1388}
1389EXPORT_SYMBOL(sock_i_uid);
1390
1391unsigned long sock_i_ino(struct sock *sk)
1392{
1393	unsigned long ino;
1394
1395	read_lock_bh(&sk->sk_callback_lock);
1396	ino = sk->sk_socket ? SOCK_INODE(sk->sk_socket)->i_ino : 0;
1397	read_unlock_bh(&sk->sk_callback_lock);
1398	return ino;
1399}
1400EXPORT_SYMBOL(sock_i_ino);
1401
1402/*
1403 * Allocate a skb from the socket's send buffer.
1404 */
1405struct sk_buff *sock_wmalloc(struct sock *sk, unsigned long size, int force,
1406			     gfp_t priority)
1407{
1408	if (force || atomic_read(&sk->sk_wmem_alloc) < sk->sk_sndbuf) {
1409		struct sk_buff *skb = alloc_skb(size, priority);
1410		if (skb) {
1411			skb_set_owner_w(skb, sk);
1412			return skb;
1413		}
1414	}
1415	return NULL;
1416}
1417EXPORT_SYMBOL(sock_wmalloc);
1418
1419/*
1420 * Allocate a skb from the socket's receive buffer.
1421 */
1422struct sk_buff *sock_rmalloc(struct sock *sk, unsigned long size, int force,
1423			     gfp_t priority)
1424{
1425	if (force || atomic_read(&sk->sk_rmem_alloc) < sk->sk_rcvbuf) {
1426		struct sk_buff *skb = alloc_skb(size, priority);
1427		if (skb) {
1428			skb_set_owner_r(skb, sk);
1429			return skb;
1430		}
1431	}
1432	return NULL;
1433}
1434
1435/*
1436 * Allocate a memory block from the socket's option memory buffer.
1437 */
1438void *sock_kmalloc(struct sock *sk, int size, gfp_t priority)
1439{
1440	if ((unsigned)size <= sysctl_optmem_max &&
1441	    atomic_read(&sk->sk_omem_alloc) + size < sysctl_optmem_max) {
1442		void *mem;
1443		/* First do the add, to avoid the race if kmalloc
1444		 * might sleep.
1445		 */
1446		atomic_add(size, &sk->sk_omem_alloc);
1447		mem = kmalloc(size, priority);
1448		if (mem)
1449			return mem;
1450		atomic_sub(size, &sk->sk_omem_alloc);
1451	}
1452	return NULL;
1453}
1454EXPORT_SYMBOL(sock_kmalloc);
1455
1456/*
1457 * Free an option memory block.
1458 */
1459void sock_kfree_s(struct sock *sk, void *mem, int size)
1460{
1461	kfree(mem);
1462	atomic_sub(size, &sk->sk_omem_alloc);
1463}
1464EXPORT_SYMBOL(sock_kfree_s);
1465
1466/* It is almost wait_for_tcp_memory minus release_sock/lock_sock.
1467   I think, these locks should be removed for datagram sockets.
1468 */
1469static long sock_wait_for_wmem(struct sock *sk, long timeo)
1470{
1471	DEFINE_WAIT(wait);
1472
1473	clear_bit(SOCK_ASYNC_NOSPACE, &sk->sk_socket->flags);
1474	for (;;) {
1475		if (!timeo)
1476			break;
1477		if (signal_pending(current))
1478			break;
1479		set_bit(SOCK_NOSPACE, &sk->sk_socket->flags);
1480		prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
1481		if (atomic_read(&sk->sk_wmem_alloc) < sk->sk_sndbuf)
1482			break;
1483		if (sk->sk_shutdown & SEND_SHUTDOWN)
1484			break;
1485		if (sk->sk_err)
1486			break;
1487		timeo = schedule_timeout(timeo);
1488	}
1489	finish_wait(sk_sleep(sk), &wait);
1490	return timeo;
1491}
1492
1493
1494/*
1495 *	Generic send/receive buffer handlers
1496 */
1497
1498struct sk_buff *sock_alloc_send_pskb(struct sock *sk, unsigned long header_len,
1499				     unsigned long data_len, int noblock,
1500				     int *errcode)
1501{
1502	struct sk_buff *skb;
1503	gfp_t gfp_mask;
1504	long timeo;
1505	int err;
 
 
 
 
 
1506
1507	gfp_mask = sk->sk_allocation;
1508	if (gfp_mask & __GFP_WAIT)
1509		gfp_mask |= __GFP_REPEAT;
1510
1511	timeo = sock_sndtimeo(sk, noblock);
1512	while (1) {
1513		err = sock_error(sk);
1514		if (err != 0)
1515			goto failure;
1516
1517		err = -EPIPE;
1518		if (sk->sk_shutdown & SEND_SHUTDOWN)
1519			goto failure;
1520
1521		if (atomic_read(&sk->sk_wmem_alloc) < sk->sk_sndbuf) {
1522			skb = alloc_skb(header_len, gfp_mask);
1523			if (skb) {
1524				int npages;
1525				int i;
1526
1527				/* No pages, we're done... */
1528				if (!data_len)
1529					break;
1530
1531				npages = (data_len + (PAGE_SIZE - 1)) >> PAGE_SHIFT;
1532				skb->truesize += data_len;
1533				skb_shinfo(skb)->nr_frags = npages;
1534				for (i = 0; i < npages; i++) {
1535					struct page *page;
1536					skb_frag_t *frag;
1537
1538					page = alloc_pages(sk->sk_allocation, 0);
1539					if (!page) {
1540						err = -ENOBUFS;
1541						skb_shinfo(skb)->nr_frags = i;
1542						kfree_skb(skb);
1543						goto failure;
1544					}
1545
1546					frag = &skb_shinfo(skb)->frags[i];
1547					frag->page = page;
1548					frag->page_offset = 0;
1549					frag->size = (data_len >= PAGE_SIZE ?
1550						      PAGE_SIZE :
1551						      data_len);
1552					data_len -= PAGE_SIZE;
1553				}
1554
1555				/* Full success... */
1556				break;
1557			}
1558			err = -ENOBUFS;
1559			goto failure;
1560		}
1561		set_bit(SOCK_ASYNC_NOSPACE, &sk->sk_socket->flags);
1562		set_bit(SOCK_NOSPACE, &sk->sk_socket->flags);
1563		err = -EAGAIN;
1564		if (!timeo)
1565			goto failure;
1566		if (signal_pending(current))
1567			goto interrupted;
1568		timeo = sock_wait_for_wmem(sk, timeo);
1569	}
1570
1571	skb_set_owner_w(skb, sk);
1572	return skb;
1573
1574interrupted:
1575	err = sock_intr_errno(timeo);
1576failure:
1577	*errcode = err;
1578	return NULL;
1579}
1580EXPORT_SYMBOL(sock_alloc_send_pskb);
1581
1582struct sk_buff *sock_alloc_send_skb(struct sock *sk, unsigned long size,
1583				    int noblock, int *errcode)
1584{
1585	return sock_alloc_send_pskb(sk, size, 0, noblock, errcode);
1586}
1587EXPORT_SYMBOL(sock_alloc_send_skb);
1588
1589static void __lock_sock(struct sock *sk)
1590	__releases(&sk->sk_lock.slock)
1591	__acquires(&sk->sk_lock.slock)
1592{
1593	DEFINE_WAIT(wait);
1594
1595	for (;;) {
1596		prepare_to_wait_exclusive(&sk->sk_lock.wq, &wait,
1597					TASK_UNINTERRUPTIBLE);
1598		spin_unlock_bh(&sk->sk_lock.slock);
1599		schedule();
1600		spin_lock_bh(&sk->sk_lock.slock);
1601		if (!sock_owned_by_user(sk))
1602			break;
1603	}
1604	finish_wait(&sk->sk_lock.wq, &wait);
1605}
1606
1607static void __release_sock(struct sock *sk)
1608	__releases(&sk->sk_lock.slock)
1609	__acquires(&sk->sk_lock.slock)
1610{
1611	struct sk_buff *skb = sk->sk_backlog.head;
1612
1613	do {
1614		sk->sk_backlog.head = sk->sk_backlog.tail = NULL;
1615		bh_unlock_sock(sk);
1616
1617		do {
1618			struct sk_buff *next = skb->next;
1619
 
1620			WARN_ON_ONCE(skb_dst_is_noref(skb));
1621			skb->next = NULL;
1622			sk_backlog_rcv(sk, skb);
1623
1624			/*
1625			 * We are in process context here with softirqs
1626			 * disabled, use cond_resched_softirq() to preempt.
1627			 * This is safe to do because we've taken the backlog
1628			 * queue private:
1629			 */
1630			cond_resched_softirq();
1631
1632			skb = next;
1633		} while (skb != NULL);
1634
1635		bh_lock_sock(sk);
1636	} while ((skb = sk->sk_backlog.head) != NULL);
1637
1638	/*
1639	 * Doing the zeroing here guarantee we can not loop forever
1640	 * while a wild producer attempts to flood us.
1641	 */
1642	sk->sk_backlog.len = 0;
1643}
1644
1645/**
1646 * sk_wait_data - wait for data to arrive at sk_receive_queue
1647 * @sk:    sock to wait on
1648 * @timeo: for how long
1649 *
1650 * Now socket state including sk->sk_err is changed only under lock,
1651 * hence we may omit checks after joining wait queue.
1652 * We check receive queue before schedule() only as optimization;
1653 * it is very likely that release_sock() added new data.
1654 */
1655int sk_wait_data(struct sock *sk, long *timeo)
1656{
1657	int rc;
1658	DEFINE_WAIT(wait);
1659
1660	prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
1661	set_bit(SOCK_ASYNC_WAITDATA, &sk->sk_socket->flags);
1662	rc = sk_wait_event(sk, timeo, !skb_queue_empty(&sk->sk_receive_queue));
1663	clear_bit(SOCK_ASYNC_WAITDATA, &sk->sk_socket->flags);
1664	finish_wait(sk_sleep(sk), &wait);
1665	return rc;
1666}
1667EXPORT_SYMBOL(sk_wait_data);
1668
1669/**
1670 *	__sk_mem_schedule - increase sk_forward_alloc and memory_allocated
1671 *	@sk: socket
1672 *	@size: memory size to allocate
1673 *	@kind: allocation type
1674 *
1675 *	If kind is SK_MEM_SEND, it means wmem allocation. Otherwise it means
1676 *	rmem allocation. This function assumes that protocols which have
1677 *	memory_pressure use sk_wmem_queued as write buffer accounting.
1678 */
1679int __sk_mem_schedule(struct sock *sk, int size, int kind)
1680{
1681	struct proto *prot = sk->sk_prot;
1682	int amt = sk_mem_pages(size);
1683	long allocated;
 
1684
1685	sk->sk_forward_alloc += amt * SK_MEM_QUANTUM;
1686	allocated = atomic_long_add_return(amt, prot->memory_allocated);
 
1687
1688	/* Under limit. */
1689	if (allocated <= prot->sysctl_mem[0]) {
1690		if (prot->memory_pressure && *prot->memory_pressure)
1691			*prot->memory_pressure = 0;
1692		return 1;
1693	}
1694
1695	/* Under pressure. */
1696	if (allocated > prot->sysctl_mem[1])
1697		if (prot->enter_memory_pressure)
1698			prot->enter_memory_pressure(sk);
1699
1700	/* Over hard limit. */
1701	if (allocated > prot->sysctl_mem[2])
 
1702		goto suppress_allocation;
1703
1704	/* guarantee minimum buffer size under pressure */
1705	if (kind == SK_MEM_RECV) {
1706		if (atomic_read(&sk->sk_rmem_alloc) < prot->sysctl_rmem[0])
1707			return 1;
 
1708	} else { /* SK_MEM_SEND */
1709		if (sk->sk_type == SOCK_STREAM) {
1710			if (sk->sk_wmem_queued < prot->sysctl_wmem[0])
1711				return 1;
1712		} else if (atomic_read(&sk->sk_wmem_alloc) <
1713			   prot->sysctl_wmem[0])
1714				return 1;
1715	}
1716
1717	if (prot->memory_pressure) {
1718		int alloc;
1719
1720		if (!*prot->memory_pressure)
1721			return 1;
1722		alloc = percpu_counter_read_positive(prot->sockets_allocated);
1723		if (prot->sysctl_mem[2] > alloc *
1724		    sk_mem_pages(sk->sk_wmem_queued +
1725				 atomic_read(&sk->sk_rmem_alloc) +
1726				 sk->sk_forward_alloc))
1727			return 1;
1728	}
1729
1730suppress_allocation:
1731
1732	if (kind == SK_MEM_SEND && sk->sk_type == SOCK_STREAM) {
1733		sk_stream_moderate_sndbuf(sk);
1734
1735		/* Fail only if socket is _under_ its sndbuf.
1736		 * In this case we cannot block, so that we have to fail.
1737		 */
1738		if (sk->sk_wmem_queued + size >= sk->sk_sndbuf)
1739			return 1;
1740	}
1741
1742	trace_sock_exceed_buf_limit(sk, prot, allocated);
1743
1744	/* Alas. Undo changes. */
1745	sk->sk_forward_alloc -= amt * SK_MEM_QUANTUM;
1746	atomic_long_sub(amt, prot->memory_allocated);
 
 
1747	return 0;
1748}
1749EXPORT_SYMBOL(__sk_mem_schedule);
1750
1751/**
1752 *	__sk_reclaim - reclaim memory_allocated
1753 *	@sk: socket
1754 */
1755void __sk_mem_reclaim(struct sock *sk)
1756{
1757	struct proto *prot = sk->sk_prot;
1758
1759	atomic_long_sub(sk->sk_forward_alloc >> SK_MEM_QUANTUM_SHIFT,
1760		   prot->memory_allocated);
1761	sk->sk_forward_alloc &= SK_MEM_QUANTUM - 1;
1762
1763	if (prot->memory_pressure && *prot->memory_pressure &&
1764	    (atomic_long_read(prot->memory_allocated) < prot->sysctl_mem[0]))
1765		*prot->memory_pressure = 0;
1766}
1767EXPORT_SYMBOL(__sk_mem_reclaim);
1768
1769
1770/*
1771 * Set of default routines for initialising struct proto_ops when
1772 * the protocol does not support a particular function. In certain
1773 * cases where it makes no sense for a protocol to have a "do nothing"
1774 * function, some default processing is provided.
1775 */
1776
1777int sock_no_bind(struct socket *sock, struct sockaddr *saddr, int len)
1778{
1779	return -EOPNOTSUPP;
1780}
1781EXPORT_SYMBOL(sock_no_bind);
1782
1783int sock_no_connect(struct socket *sock, struct sockaddr *saddr,
1784		    int len, int flags)
1785{
1786	return -EOPNOTSUPP;
1787}
1788EXPORT_SYMBOL(sock_no_connect);
1789
1790int sock_no_socketpair(struct socket *sock1, struct socket *sock2)
1791{
1792	return -EOPNOTSUPP;
1793}
1794EXPORT_SYMBOL(sock_no_socketpair);
1795
1796int sock_no_accept(struct socket *sock, struct socket *newsock, int flags)
1797{
1798	return -EOPNOTSUPP;
1799}
1800EXPORT_SYMBOL(sock_no_accept);
1801
1802int sock_no_getname(struct socket *sock, struct sockaddr *saddr,
1803		    int *len, int peer)
1804{
1805	return -EOPNOTSUPP;
1806}
1807EXPORT_SYMBOL(sock_no_getname);
1808
1809unsigned int sock_no_poll(struct file *file, struct socket *sock, poll_table *pt)
1810{
1811	return 0;
1812}
1813EXPORT_SYMBOL(sock_no_poll);
1814
1815int sock_no_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1816{
1817	return -EOPNOTSUPP;
1818}
1819EXPORT_SYMBOL(sock_no_ioctl);
1820
1821int sock_no_listen(struct socket *sock, int backlog)
1822{
1823	return -EOPNOTSUPP;
1824}
1825EXPORT_SYMBOL(sock_no_listen);
1826
1827int sock_no_shutdown(struct socket *sock, int how)
1828{
1829	return -EOPNOTSUPP;
1830}
1831EXPORT_SYMBOL(sock_no_shutdown);
1832
1833int sock_no_setsockopt(struct socket *sock, int level, int optname,
1834		    char __user *optval, unsigned int optlen)
1835{
1836	return -EOPNOTSUPP;
1837}
1838EXPORT_SYMBOL(sock_no_setsockopt);
1839
1840int sock_no_getsockopt(struct socket *sock, int level, int optname,
1841		    char __user *optval, int __user *optlen)
1842{
1843	return -EOPNOTSUPP;
1844}
1845EXPORT_SYMBOL(sock_no_getsockopt);
1846
1847int sock_no_sendmsg(struct kiocb *iocb, struct socket *sock, struct msghdr *m,
1848		    size_t len)
1849{
1850	return -EOPNOTSUPP;
1851}
1852EXPORT_SYMBOL(sock_no_sendmsg);
1853
1854int sock_no_recvmsg(struct kiocb *iocb, struct socket *sock, struct msghdr *m,
1855		    size_t len, int flags)
1856{
1857	return -EOPNOTSUPP;
1858}
1859EXPORT_SYMBOL(sock_no_recvmsg);
1860
1861int sock_no_mmap(struct file *file, struct socket *sock, struct vm_area_struct *vma)
1862{
1863	/* Mirror missing mmap method error code */
1864	return -ENODEV;
1865}
1866EXPORT_SYMBOL(sock_no_mmap);
1867
1868ssize_t sock_no_sendpage(struct socket *sock, struct page *page, int offset, size_t size, int flags)
1869{
1870	ssize_t res;
1871	struct msghdr msg = {.msg_flags = flags};
1872	struct kvec iov;
1873	char *kaddr = kmap(page);
1874	iov.iov_base = kaddr + offset;
1875	iov.iov_len = size;
1876	res = kernel_sendmsg(sock, &msg, &iov, 1, size);
1877	kunmap(page);
1878	return res;
1879}
1880EXPORT_SYMBOL(sock_no_sendpage);
1881
1882/*
1883 *	Default Socket Callbacks
1884 */
1885
1886static void sock_def_wakeup(struct sock *sk)
1887{
1888	struct socket_wq *wq;
1889
1890	rcu_read_lock();
1891	wq = rcu_dereference(sk->sk_wq);
1892	if (wq_has_sleeper(wq))
1893		wake_up_interruptible_all(&wq->wait);
1894	rcu_read_unlock();
1895}
1896
1897static void sock_def_error_report(struct sock *sk)
1898{
1899	struct socket_wq *wq;
1900
1901	rcu_read_lock();
1902	wq = rcu_dereference(sk->sk_wq);
1903	if (wq_has_sleeper(wq))
1904		wake_up_interruptible_poll(&wq->wait, POLLERR);
1905	sk_wake_async(sk, SOCK_WAKE_IO, POLL_ERR);
1906	rcu_read_unlock();
1907}
1908
1909static void sock_def_readable(struct sock *sk, int len)
1910{
1911	struct socket_wq *wq;
1912
1913	rcu_read_lock();
1914	wq = rcu_dereference(sk->sk_wq);
1915	if (wq_has_sleeper(wq))
1916		wake_up_interruptible_sync_poll(&wq->wait, POLLIN | POLLPRI |
1917						POLLRDNORM | POLLRDBAND);
1918	sk_wake_async(sk, SOCK_WAKE_WAITD, POLL_IN);
1919	rcu_read_unlock();
1920}
1921
1922static void sock_def_write_space(struct sock *sk)
1923{
1924	struct socket_wq *wq;
1925
1926	rcu_read_lock();
1927
1928	/* Do not wake up a writer until he can make "significant"
1929	 * progress.  --DaveM
1930	 */
1931	if ((atomic_read(&sk->sk_wmem_alloc) << 1) <= sk->sk_sndbuf) {
1932		wq = rcu_dereference(sk->sk_wq);
1933		if (wq_has_sleeper(wq))
1934			wake_up_interruptible_sync_poll(&wq->wait, POLLOUT |
1935						POLLWRNORM | POLLWRBAND);
1936
1937		/* Should agree with poll, otherwise some programs break */
1938		if (sock_writeable(sk))
1939			sk_wake_async(sk, SOCK_WAKE_SPACE, POLL_OUT);
1940	}
1941
1942	rcu_read_unlock();
1943}
1944
1945static void sock_def_destruct(struct sock *sk)
1946{
1947	kfree(sk->sk_protinfo);
1948}
1949
1950void sk_send_sigurg(struct sock *sk)
1951{
1952	if (sk->sk_socket && sk->sk_socket->file)
1953		if (send_sigurg(&sk->sk_socket->file->f_owner))
1954			sk_wake_async(sk, SOCK_WAKE_URG, POLL_PRI);
1955}
1956EXPORT_SYMBOL(sk_send_sigurg);
1957
1958void sk_reset_timer(struct sock *sk, struct timer_list* timer,
1959		    unsigned long expires)
1960{
1961	if (!mod_timer(timer, expires))
1962		sock_hold(sk);
1963}
1964EXPORT_SYMBOL(sk_reset_timer);
1965
1966void sk_stop_timer(struct sock *sk, struct timer_list* timer)
1967{
1968	if (timer_pending(timer) && del_timer(timer))
1969		__sock_put(sk);
1970}
1971EXPORT_SYMBOL(sk_stop_timer);
1972
1973void sock_init_data(struct socket *sock, struct sock *sk)
1974{
1975	skb_queue_head_init(&sk->sk_receive_queue);
1976	skb_queue_head_init(&sk->sk_write_queue);
1977	skb_queue_head_init(&sk->sk_error_queue);
1978#ifdef CONFIG_NET_DMA
1979	skb_queue_head_init(&sk->sk_async_wait_queue);
1980#endif
1981
1982	sk->sk_send_head	=	NULL;
1983
1984	init_timer(&sk->sk_timer);
1985
1986	sk->sk_allocation	=	GFP_KERNEL;
1987	sk->sk_rcvbuf		=	sysctl_rmem_default;
1988	sk->sk_sndbuf		=	sysctl_wmem_default;
1989	sk->sk_state		=	TCP_CLOSE;
1990	sk_set_socket(sk, sock);
1991
1992	sock_set_flag(sk, SOCK_ZAPPED);
1993
1994	if (sock) {
1995		sk->sk_type	=	sock->type;
1996		sk->sk_wq	=	sock->wq;
1997		sock->sk	=	sk;
1998	} else
1999		sk->sk_wq	=	NULL;
2000
2001	spin_lock_init(&sk->sk_dst_lock);
2002	rwlock_init(&sk->sk_callback_lock);
2003	lockdep_set_class_and_name(&sk->sk_callback_lock,
2004			af_callback_keys + sk->sk_family,
2005			af_family_clock_key_strings[sk->sk_family]);
2006
2007	sk->sk_state_change	=	sock_def_wakeup;
2008	sk->sk_data_ready	=	sock_def_readable;
2009	sk->sk_write_space	=	sock_def_write_space;
2010	sk->sk_error_report	=	sock_def_error_report;
2011	sk->sk_destruct		=	sock_def_destruct;
2012
2013	sk->sk_sndmsg_page	=	NULL;
2014	sk->sk_sndmsg_off	=	0;
 
2015
2016	sk->sk_peer_pid 	=	NULL;
2017	sk->sk_peer_cred	=	NULL;
2018	sk->sk_write_pending	=	0;
2019	sk->sk_rcvlowat		=	1;
2020	sk->sk_rcvtimeo		=	MAX_SCHEDULE_TIMEOUT;
2021	sk->sk_sndtimeo		=	MAX_SCHEDULE_TIMEOUT;
2022
2023	sk->sk_stamp = ktime_set(-1L, 0);
2024
2025	/*
2026	 * Before updating sk_refcnt, we must commit prior changes to memory
2027	 * (Documentation/RCU/rculist_nulls.txt for details)
2028	 */
2029	smp_wmb();
2030	atomic_set(&sk->sk_refcnt, 1);
2031	atomic_set(&sk->sk_drops, 0);
2032}
2033EXPORT_SYMBOL(sock_init_data);
2034
2035void lock_sock_nested(struct sock *sk, int subclass)
2036{
2037	might_sleep();
2038	spin_lock_bh(&sk->sk_lock.slock);
2039	if (sk->sk_lock.owned)
2040		__lock_sock(sk);
2041	sk->sk_lock.owned = 1;
2042	spin_unlock(&sk->sk_lock.slock);
2043	/*
2044	 * The sk_lock has mutex_lock() semantics here:
2045	 */
2046	mutex_acquire(&sk->sk_lock.dep_map, subclass, 0, _RET_IP_);
2047	local_bh_enable();
2048}
2049EXPORT_SYMBOL(lock_sock_nested);
2050
2051void release_sock(struct sock *sk)
2052{
2053	/*
2054	 * The sk_lock has mutex_unlock() semantics:
2055	 */
2056	mutex_release(&sk->sk_lock.dep_map, 1, _RET_IP_);
2057
2058	spin_lock_bh(&sk->sk_lock.slock);
2059	if (sk->sk_backlog.tail)
2060		__release_sock(sk);
2061	sk->sk_lock.owned = 0;
2062	if (waitqueue_active(&sk->sk_lock.wq))
2063		wake_up(&sk->sk_lock.wq);
2064	spin_unlock_bh(&sk->sk_lock.slock);
2065}
2066EXPORT_SYMBOL(release_sock);
2067
2068/**
2069 * lock_sock_fast - fast version of lock_sock
2070 * @sk: socket
2071 *
2072 * This version should be used for very small section, where process wont block
2073 * return false if fast path is taken
2074 *   sk_lock.slock locked, owned = 0, BH disabled
2075 * return true if slow path is taken
2076 *   sk_lock.slock unlocked, owned = 1, BH enabled
2077 */
2078bool lock_sock_fast(struct sock *sk)
2079{
2080	might_sleep();
2081	spin_lock_bh(&sk->sk_lock.slock);
2082
2083	if (!sk->sk_lock.owned)
2084		/*
2085		 * Note : We must disable BH
2086		 */
2087		return false;
2088
2089	__lock_sock(sk);
2090	sk->sk_lock.owned = 1;
2091	spin_unlock(&sk->sk_lock.slock);
2092	/*
2093	 * The sk_lock has mutex_lock() semantics here:
2094	 */
2095	mutex_acquire(&sk->sk_lock.dep_map, 0, 0, _RET_IP_);
2096	local_bh_enable();
2097	return true;
2098}
2099EXPORT_SYMBOL(lock_sock_fast);
2100
2101int sock_get_timestamp(struct sock *sk, struct timeval __user *userstamp)
2102{
2103	struct timeval tv;
2104	if (!sock_flag(sk, SOCK_TIMESTAMP))
2105		sock_enable_timestamp(sk, SOCK_TIMESTAMP);
2106	tv = ktime_to_timeval(sk->sk_stamp);
2107	if (tv.tv_sec == -1)
2108		return -ENOENT;
2109	if (tv.tv_sec == 0) {
2110		sk->sk_stamp = ktime_get_real();
2111		tv = ktime_to_timeval(sk->sk_stamp);
2112	}
2113	return copy_to_user(userstamp, &tv, sizeof(tv)) ? -EFAULT : 0;
2114}
2115EXPORT_SYMBOL(sock_get_timestamp);
2116
2117int sock_get_timestampns(struct sock *sk, struct timespec __user *userstamp)
2118{
2119	struct timespec ts;
2120	if (!sock_flag(sk, SOCK_TIMESTAMP))
2121		sock_enable_timestamp(sk, SOCK_TIMESTAMP);
2122	ts = ktime_to_timespec(sk->sk_stamp);
2123	if (ts.tv_sec == -1)
2124		return -ENOENT;
2125	if (ts.tv_sec == 0) {
2126		sk->sk_stamp = ktime_get_real();
2127		ts = ktime_to_timespec(sk->sk_stamp);
2128	}
2129	return copy_to_user(userstamp, &ts, sizeof(ts)) ? -EFAULT : 0;
2130}
2131EXPORT_SYMBOL(sock_get_timestampns);
2132
2133void sock_enable_timestamp(struct sock *sk, int flag)
2134{
2135	if (!sock_flag(sk, flag)) {
 
 
2136		sock_set_flag(sk, flag);
2137		/*
2138		 * we just set one of the two flags which require net
2139		 * time stamping, but time stamping might have been on
2140		 * already because of the other one
2141		 */
2142		if (!sock_flag(sk,
2143				flag == SOCK_TIMESTAMP ?
2144				SOCK_TIMESTAMPING_RX_SOFTWARE :
2145				SOCK_TIMESTAMP))
2146			net_enable_timestamp();
2147	}
2148}
2149
2150/*
2151 *	Get a socket option on an socket.
2152 *
2153 *	FIX: POSIX 1003.1g is very ambiguous here. It states that
2154 *	asynchronous errors should be reported by getsockopt. We assume
2155 *	this means if you specify SO_ERROR (otherwise whats the point of it).
2156 */
2157int sock_common_getsockopt(struct socket *sock, int level, int optname,
2158			   char __user *optval, int __user *optlen)
2159{
2160	struct sock *sk = sock->sk;
2161
2162	return sk->sk_prot->getsockopt(sk, level, optname, optval, optlen);
2163}
2164EXPORT_SYMBOL(sock_common_getsockopt);
2165
2166#ifdef CONFIG_COMPAT
2167int compat_sock_common_getsockopt(struct socket *sock, int level, int optname,
2168				  char __user *optval, int __user *optlen)
2169{
2170	struct sock *sk = sock->sk;
2171
2172	if (sk->sk_prot->compat_getsockopt != NULL)
2173		return sk->sk_prot->compat_getsockopt(sk, level, optname,
2174						      optval, optlen);
2175	return sk->sk_prot->getsockopt(sk, level, optname, optval, optlen);
2176}
2177EXPORT_SYMBOL(compat_sock_common_getsockopt);
2178#endif
2179
2180int sock_common_recvmsg(struct kiocb *iocb, struct socket *sock,
2181			struct msghdr *msg, size_t size, int flags)
2182{
2183	struct sock *sk = sock->sk;
2184	int addr_len = 0;
2185	int err;
2186
2187	err = sk->sk_prot->recvmsg(iocb, sk, msg, size, flags & MSG_DONTWAIT,
2188				   flags & ~MSG_DONTWAIT, &addr_len);
2189	if (err >= 0)
2190		msg->msg_namelen = addr_len;
2191	return err;
2192}
2193EXPORT_SYMBOL(sock_common_recvmsg);
2194
2195/*
2196 *	Set socket options on an inet socket.
2197 */
2198int sock_common_setsockopt(struct socket *sock, int level, int optname,
2199			   char __user *optval, unsigned int optlen)
2200{
2201	struct sock *sk = sock->sk;
2202
2203	return sk->sk_prot->setsockopt(sk, level, optname, optval, optlen);
2204}
2205EXPORT_SYMBOL(sock_common_setsockopt);
2206
2207#ifdef CONFIG_COMPAT
2208int compat_sock_common_setsockopt(struct socket *sock, int level, int optname,
2209				  char __user *optval, unsigned int optlen)
2210{
2211	struct sock *sk = sock->sk;
2212
2213	if (sk->sk_prot->compat_setsockopt != NULL)
2214		return sk->sk_prot->compat_setsockopt(sk, level, optname,
2215						      optval, optlen);
2216	return sk->sk_prot->setsockopt(sk, level, optname, optval, optlen);
2217}
2218EXPORT_SYMBOL(compat_sock_common_setsockopt);
2219#endif
2220
2221void sk_common_release(struct sock *sk)
2222{
2223	if (sk->sk_prot->destroy)
2224		sk->sk_prot->destroy(sk);
2225
2226	/*
2227	 * Observation: when sock_common_release is called, processes have
2228	 * no access to socket. But net still has.
2229	 * Step one, detach it from networking:
2230	 *
2231	 * A. Remove from hash tables.
2232	 */
2233
2234	sk->sk_prot->unhash(sk);
2235
2236	/*
2237	 * In this point socket cannot receive new packets, but it is possible
2238	 * that some packets are in flight because some CPU runs receiver and
2239	 * did hash table lookup before we unhashed socket. They will achieve
2240	 * receive queue and will be purged by socket destructor.
2241	 *
2242	 * Also we still have packets pending on receive queue and probably,
2243	 * our own packets waiting in device queues. sock_destroy will drain
2244	 * receive queue, but transmitted packets will delay socket destruction
2245	 * until the last reference will be released.
2246	 */
2247
2248	sock_orphan(sk);
2249
2250	xfrm_sk_free_policy(sk);
2251
2252	sk_refcnt_debug_release(sk);
2253	sock_put(sk);
2254}
2255EXPORT_SYMBOL(sk_common_release);
2256
2257static DEFINE_RWLOCK(proto_list_lock);
2258static LIST_HEAD(proto_list);
2259
2260#ifdef CONFIG_PROC_FS
2261#define PROTO_INUSE_NR	64	/* should be enough for the first time */
2262struct prot_inuse {
2263	int val[PROTO_INUSE_NR];
2264};
2265
2266static DECLARE_BITMAP(proto_inuse_idx, PROTO_INUSE_NR);
2267
2268#ifdef CONFIG_NET_NS
2269void sock_prot_inuse_add(struct net *net, struct proto *prot, int val)
2270{
2271	__this_cpu_add(net->core.inuse->val[prot->inuse_idx], val);
2272}
2273EXPORT_SYMBOL_GPL(sock_prot_inuse_add);
2274
2275int sock_prot_inuse_get(struct net *net, struct proto *prot)
2276{
2277	int cpu, idx = prot->inuse_idx;
2278	int res = 0;
2279
2280	for_each_possible_cpu(cpu)
2281		res += per_cpu_ptr(net->core.inuse, cpu)->val[idx];
2282
2283	return res >= 0 ? res : 0;
2284}
2285EXPORT_SYMBOL_GPL(sock_prot_inuse_get);
2286
2287static int __net_init sock_inuse_init_net(struct net *net)
2288{
2289	net->core.inuse = alloc_percpu(struct prot_inuse);
2290	return net->core.inuse ? 0 : -ENOMEM;
2291}
2292
2293static void __net_exit sock_inuse_exit_net(struct net *net)
2294{
2295	free_percpu(net->core.inuse);
2296}
2297
2298static struct pernet_operations net_inuse_ops = {
2299	.init = sock_inuse_init_net,
2300	.exit = sock_inuse_exit_net,
2301};
2302
2303static __init int net_inuse_init(void)
2304{
2305	if (register_pernet_subsys(&net_inuse_ops))
2306		panic("Cannot initialize net inuse counters");
2307
2308	return 0;
2309}
2310
2311core_initcall(net_inuse_init);
2312#else
2313static DEFINE_PER_CPU(struct prot_inuse, prot_inuse);
2314
2315void sock_prot_inuse_add(struct net *net, struct proto *prot, int val)
2316{
2317	__this_cpu_add(prot_inuse.val[prot->inuse_idx], val);
2318}
2319EXPORT_SYMBOL_GPL(sock_prot_inuse_add);
2320
2321int sock_prot_inuse_get(struct net *net, struct proto *prot)
2322{
2323	int cpu, idx = prot->inuse_idx;
2324	int res = 0;
2325
2326	for_each_possible_cpu(cpu)
2327		res += per_cpu(prot_inuse, cpu).val[idx];
2328
2329	return res >= 0 ? res : 0;
2330}
2331EXPORT_SYMBOL_GPL(sock_prot_inuse_get);
2332#endif
2333
2334static void assign_proto_idx(struct proto *prot)
2335{
2336	prot->inuse_idx = find_first_zero_bit(proto_inuse_idx, PROTO_INUSE_NR);
2337
2338	if (unlikely(prot->inuse_idx == PROTO_INUSE_NR - 1)) {
2339		printk(KERN_ERR "PROTO_INUSE_NR exhausted\n");
2340		return;
2341	}
2342
2343	set_bit(prot->inuse_idx, proto_inuse_idx);
2344}
2345
2346static void release_proto_idx(struct proto *prot)
2347{
2348	if (prot->inuse_idx != PROTO_INUSE_NR - 1)
2349		clear_bit(prot->inuse_idx, proto_inuse_idx);
2350}
2351#else
2352static inline void assign_proto_idx(struct proto *prot)
2353{
2354}
2355
2356static inline void release_proto_idx(struct proto *prot)
2357{
2358}
2359#endif
2360
2361int proto_register(struct proto *prot, int alloc_slab)
2362{
2363	if (alloc_slab) {
2364		prot->slab = kmem_cache_create(prot->name, prot->obj_size, 0,
2365					SLAB_HWCACHE_ALIGN | prot->slab_flags,
2366					NULL);
2367
2368		if (prot->slab == NULL) {
2369			printk(KERN_CRIT "%s: Can't create sock SLAB cache!\n",
2370			       prot->name);
2371			goto out;
2372		}
2373
2374		if (prot->rsk_prot != NULL) {
2375			prot->rsk_prot->slab_name = kasprintf(GFP_KERNEL, "request_sock_%s", prot->name);
2376			if (prot->rsk_prot->slab_name == NULL)
2377				goto out_free_sock_slab;
2378
2379			prot->rsk_prot->slab = kmem_cache_create(prot->rsk_prot->slab_name,
2380								 prot->rsk_prot->obj_size, 0,
2381								 SLAB_HWCACHE_ALIGN, NULL);
2382
2383			if (prot->rsk_prot->slab == NULL) {
2384				printk(KERN_CRIT "%s: Can't create request sock SLAB cache!\n",
2385				       prot->name);
2386				goto out_free_request_sock_slab_name;
2387			}
2388		}
2389
2390		if (prot->twsk_prot != NULL) {
2391			prot->twsk_prot->twsk_slab_name = kasprintf(GFP_KERNEL, "tw_sock_%s", prot->name);
2392
2393			if (prot->twsk_prot->twsk_slab_name == NULL)
2394				goto out_free_request_sock_slab;
2395
2396			prot->twsk_prot->twsk_slab =
2397				kmem_cache_create(prot->twsk_prot->twsk_slab_name,
2398						  prot->twsk_prot->twsk_obj_size,
2399						  0,
2400						  SLAB_HWCACHE_ALIGN |
2401							prot->slab_flags,
2402						  NULL);
2403			if (prot->twsk_prot->twsk_slab == NULL)
2404				goto out_free_timewait_sock_slab_name;
2405		}
2406	}
2407
2408	write_lock(&proto_list_lock);
2409	list_add(&prot->node, &proto_list);
2410	assign_proto_idx(prot);
2411	write_unlock(&proto_list_lock);
2412	return 0;
2413
2414out_free_timewait_sock_slab_name:
2415	kfree(prot->twsk_prot->twsk_slab_name);
2416out_free_request_sock_slab:
2417	if (prot->rsk_prot && prot->rsk_prot->slab) {
2418		kmem_cache_destroy(prot->rsk_prot->slab);
2419		prot->rsk_prot->slab = NULL;
2420	}
2421out_free_request_sock_slab_name:
2422	if (prot->rsk_prot)
2423		kfree(prot->rsk_prot->slab_name);
2424out_free_sock_slab:
2425	kmem_cache_destroy(prot->slab);
2426	prot->slab = NULL;
2427out:
2428	return -ENOBUFS;
2429}
2430EXPORT_SYMBOL(proto_register);
2431
2432void proto_unregister(struct proto *prot)
2433{
2434	write_lock(&proto_list_lock);
2435	release_proto_idx(prot);
2436	list_del(&prot->node);
2437	write_unlock(&proto_list_lock);
2438
2439	if (prot->slab != NULL) {
2440		kmem_cache_destroy(prot->slab);
2441		prot->slab = NULL;
2442	}
2443
2444	if (prot->rsk_prot != NULL && prot->rsk_prot->slab != NULL) {
2445		kmem_cache_destroy(prot->rsk_prot->slab);
2446		kfree(prot->rsk_prot->slab_name);
2447		prot->rsk_prot->slab = NULL;
2448	}
2449
2450	if (prot->twsk_prot != NULL && prot->twsk_prot->twsk_slab != NULL) {
2451		kmem_cache_destroy(prot->twsk_prot->twsk_slab);
2452		kfree(prot->twsk_prot->twsk_slab_name);
2453		prot->twsk_prot->twsk_slab = NULL;
2454	}
2455}
2456EXPORT_SYMBOL(proto_unregister);
2457
2458#ifdef CONFIG_PROC_FS
2459static void *proto_seq_start(struct seq_file *seq, loff_t *pos)
2460	__acquires(proto_list_lock)
2461{
2462	read_lock(&proto_list_lock);
2463	return seq_list_start_head(&proto_list, *pos);
2464}
2465
2466static void *proto_seq_next(struct seq_file *seq, void *v, loff_t *pos)
2467{
2468	return seq_list_next(v, &proto_list, pos);
2469}
2470
2471static void proto_seq_stop(struct seq_file *seq, void *v)
2472	__releases(proto_list_lock)
2473{
2474	read_unlock(&proto_list_lock);
2475}
2476
2477static char proto_method_implemented(const void *method)
2478{
2479	return method == NULL ? 'n' : 'y';
2480}
 
 
 
 
 
 
 
 
 
 
2481
2482static void proto_seq_printf(struct seq_file *seq, struct proto *proto)
2483{
 
2484	seq_printf(seq, "%-9s %4u %6d  %6ld   %-3s %6u   %-3s  %-10s "
2485			"%2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c\n",
2486		   proto->name,
2487		   proto->obj_size,
2488		   sock_prot_inuse_get(seq_file_net(seq), proto),
2489		   proto->memory_allocated != NULL ? atomic_long_read(proto->memory_allocated) : -1L,
2490		   proto->memory_pressure != NULL ? *proto->memory_pressure ? "yes" : "no" : "NI",
2491		   proto->max_header,
2492		   proto->slab == NULL ? "no" : "yes",
2493		   module_name(proto->owner),
2494		   proto_method_implemented(proto->close),
2495		   proto_method_implemented(proto->connect),
2496		   proto_method_implemented(proto->disconnect),
2497		   proto_method_implemented(proto->accept),
2498		   proto_method_implemented(proto->ioctl),
2499		   proto_method_implemented(proto->init),
2500		   proto_method_implemented(proto->destroy),
2501		   proto_method_implemented(proto->shutdown),
2502		   proto_method_implemented(proto->setsockopt),
2503		   proto_method_implemented(proto->getsockopt),
2504		   proto_method_implemented(proto->sendmsg),
2505		   proto_method_implemented(proto->recvmsg),
2506		   proto_method_implemented(proto->sendpage),
2507		   proto_method_implemented(proto->bind),
2508		   proto_method_implemented(proto->backlog_rcv),
2509		   proto_method_implemented(proto->hash),
2510		   proto_method_implemented(proto->unhash),
2511		   proto_method_implemented(proto->get_port),
2512		   proto_method_implemented(proto->enter_memory_pressure));
2513}
2514
2515static int proto_seq_show(struct seq_file *seq, void *v)
2516{
2517	if (v == &proto_list)
2518		seq_printf(seq, "%-9s %-4s %-8s %-6s %-5s %-7s %-4s %-10s %s",
2519			   "protocol",
2520			   "size",
2521			   "sockets",
2522			   "memory",
2523			   "press",
2524			   "maxhdr",
2525			   "slab",
2526			   "module",
2527			   "cl co di ac io in de sh ss gs se re sp bi br ha uh gp em\n");
2528	else
2529		proto_seq_printf(seq, list_entry(v, struct proto, node));
2530	return 0;
2531}
2532
2533static const struct seq_operations proto_seq_ops = {
2534	.start  = proto_seq_start,
2535	.next   = proto_seq_next,
2536	.stop   = proto_seq_stop,
2537	.show   = proto_seq_show,
2538};
2539
2540static int proto_seq_open(struct inode *inode, struct file *file)
2541{
2542	return seq_open_net(inode, file, &proto_seq_ops,
2543			    sizeof(struct seq_net_private));
2544}
2545
2546static const struct file_operations proto_seq_fops = {
2547	.owner		= THIS_MODULE,
2548	.open		= proto_seq_open,
2549	.read		= seq_read,
2550	.llseek		= seq_lseek,
2551	.release	= seq_release_net,
2552};
2553
2554static __net_init int proto_init_net(struct net *net)
2555{
2556	if (!proc_net_fops_create(net, "protocols", S_IRUGO, &proto_seq_fops))
2557		return -ENOMEM;
2558
2559	return 0;
2560}
2561
2562static __net_exit void proto_exit_net(struct net *net)
2563{
2564	proc_net_remove(net, "protocols");
2565}
2566
2567
2568static __net_initdata struct pernet_operations proto_net_ops = {
2569	.init = proto_init_net,
2570	.exit = proto_exit_net,
2571};
2572
2573static int __init proto_init(void)
2574{
2575	return register_pernet_subsys(&proto_net_ops);
2576}
2577
2578subsys_initcall(proto_init);
2579
2580#endif /* PROC_FS */
v3.5.6
   1/*
   2 * INET		An implementation of the TCP/IP protocol suite for the LINUX
   3 *		operating system.  INET is implemented using the  BSD Socket
   4 *		interface as the means of communication with the user level.
   5 *
   6 *		Generic socket support routines. Memory allocators, socket lock/release
   7 *		handler for protocols to use and generic option handler.
   8 *
   9 *
  10 * Authors:	Ross Biro
  11 *		Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
  12 *		Florian La Roche, <flla@stud.uni-sb.de>
  13 *		Alan Cox, <A.Cox@swansea.ac.uk>
  14 *
  15 * Fixes:
  16 *		Alan Cox	: 	Numerous verify_area() problems
  17 *		Alan Cox	:	Connecting on a connecting socket
  18 *					now returns an error for tcp.
  19 *		Alan Cox	:	sock->protocol is set correctly.
  20 *					and is not sometimes left as 0.
  21 *		Alan Cox	:	connect handles icmp errors on a
  22 *					connect properly. Unfortunately there
  23 *					is a restart syscall nasty there. I
  24 *					can't match BSD without hacking the C
  25 *					library. Ideas urgently sought!
  26 *		Alan Cox	:	Disallow bind() to addresses that are
  27 *					not ours - especially broadcast ones!!
  28 *		Alan Cox	:	Socket 1024 _IS_ ok for users. (fencepost)
  29 *		Alan Cox	:	sock_wfree/sock_rfree don't destroy sockets,
  30 *					instead they leave that for the DESTROY timer.
  31 *		Alan Cox	:	Clean up error flag in accept
  32 *		Alan Cox	:	TCP ack handling is buggy, the DESTROY timer
  33 *					was buggy. Put a remove_sock() in the handler
  34 *					for memory when we hit 0. Also altered the timer
  35 *					code. The ACK stuff can wait and needs major
  36 *					TCP layer surgery.
  37 *		Alan Cox	:	Fixed TCP ack bug, removed remove sock
  38 *					and fixed timer/inet_bh race.
  39 *		Alan Cox	:	Added zapped flag for TCP
  40 *		Alan Cox	:	Move kfree_skb into skbuff.c and tidied up surplus code
  41 *		Alan Cox	:	for new sk_buff allocations wmalloc/rmalloc now call alloc_skb
  42 *		Alan Cox	:	kfree_s calls now are kfree_skbmem so we can track skb resources
  43 *		Alan Cox	:	Supports socket option broadcast now as does udp. Packet and raw need fixing.
  44 *		Alan Cox	:	Added RCVBUF,SNDBUF size setting. It suddenly occurred to me how easy it was so...
  45 *		Rick Sladkey	:	Relaxed UDP rules for matching packets.
  46 *		C.E.Hawkins	:	IFF_PROMISC/SIOCGHWADDR support
  47 *	Pauline Middelink	:	identd support
  48 *		Alan Cox	:	Fixed connect() taking signals I think.
  49 *		Alan Cox	:	SO_LINGER supported
  50 *		Alan Cox	:	Error reporting fixes
  51 *		Anonymous	:	inet_create tidied up (sk->reuse setting)
  52 *		Alan Cox	:	inet sockets don't set sk->type!
  53 *		Alan Cox	:	Split socket option code
  54 *		Alan Cox	:	Callbacks
  55 *		Alan Cox	:	Nagle flag for Charles & Johannes stuff
  56 *		Alex		:	Removed restriction on inet fioctl
  57 *		Alan Cox	:	Splitting INET from NET core
  58 *		Alan Cox	:	Fixed bogus SO_TYPE handling in getsockopt()
  59 *		Adam Caldwell	:	Missing return in SO_DONTROUTE/SO_DEBUG code
  60 *		Alan Cox	:	Split IP from generic code
  61 *		Alan Cox	:	New kfree_skbmem()
  62 *		Alan Cox	:	Make SO_DEBUG superuser only.
  63 *		Alan Cox	:	Allow anyone to clear SO_DEBUG
  64 *					(compatibility fix)
  65 *		Alan Cox	:	Added optimistic memory grabbing for AF_UNIX throughput.
  66 *		Alan Cox	:	Allocator for a socket is settable.
  67 *		Alan Cox	:	SO_ERROR includes soft errors.
  68 *		Alan Cox	:	Allow NULL arguments on some SO_ opts
  69 *		Alan Cox	: 	Generic socket allocation to make hooks
  70 *					easier (suggested by Craig Metz).
  71 *		Michael Pall	:	SO_ERROR returns positive errno again
  72 *              Steve Whitehouse:       Added default destructor to free
  73 *                                      protocol private data.
  74 *              Steve Whitehouse:       Added various other default routines
  75 *                                      common to several socket families.
  76 *              Chris Evans     :       Call suser() check last on F_SETOWN
  77 *		Jay Schulist	:	Added SO_ATTACH_FILTER and SO_DETACH_FILTER.
  78 *		Andi Kleen	:	Add sock_kmalloc()/sock_kfree_s()
  79 *		Andi Kleen	:	Fix write_space callback
  80 *		Chris Evans	:	Security fixes - signedness again
  81 *		Arnaldo C. Melo :       cleanups, use skb_queue_purge
  82 *
  83 * To Fix:
  84 *
  85 *
  86 *		This program is free software; you can redistribute it and/or
  87 *		modify it under the terms of the GNU General Public License
  88 *		as published by the Free Software Foundation; either version
  89 *		2 of the License, or (at your option) any later version.
  90 */
  91
  92#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  93
  94#include <linux/capability.h>
  95#include <linux/errno.h>
  96#include <linux/types.h>
  97#include <linux/socket.h>
  98#include <linux/in.h>
  99#include <linux/kernel.h>
 100#include <linux/module.h>
 101#include <linux/proc_fs.h>
 102#include <linux/seq_file.h>
 103#include <linux/sched.h>
 104#include <linux/timer.h>
 105#include <linux/string.h>
 106#include <linux/sockios.h>
 107#include <linux/net.h>
 108#include <linux/mm.h>
 109#include <linux/slab.h>
 110#include <linux/interrupt.h>
 111#include <linux/poll.h>
 112#include <linux/tcp.h>
 113#include <linux/init.h>
 114#include <linux/highmem.h>
 115#include <linux/user_namespace.h>
 116#include <linux/static_key.h>
 117#include <linux/memcontrol.h>
 118#include <linux/prefetch.h>
 119
 120#include <asm/uaccess.h>
 
 121
 122#include <linux/netdevice.h>
 123#include <net/protocol.h>
 124#include <linux/skbuff.h>
 125#include <net/net_namespace.h>
 126#include <net/request_sock.h>
 127#include <net/sock.h>
 128#include <linux/net_tstamp.h>
 129#include <net/xfrm.h>
 130#include <linux/ipsec.h>
 131#include <net/cls_cgroup.h>
 132#include <net/netprio_cgroup.h>
 133
 134#include <linux/filter.h>
 135
 136#include <trace/events/sock.h>
 137
 138#ifdef CONFIG_INET
 139#include <net/tcp.h>
 140#endif
 141
 142static DEFINE_MUTEX(proto_list_mutex);
 143static LIST_HEAD(proto_list);
 144
 145#ifdef CONFIG_CGROUP_MEM_RES_CTLR_KMEM
 146int mem_cgroup_sockets_init(struct mem_cgroup *memcg, struct cgroup_subsys *ss)
 147{
 148	struct proto *proto;
 149	int ret = 0;
 150
 151	mutex_lock(&proto_list_mutex);
 152	list_for_each_entry(proto, &proto_list, node) {
 153		if (proto->init_cgroup) {
 154			ret = proto->init_cgroup(memcg, ss);
 155			if (ret)
 156				goto out;
 157		}
 158	}
 159
 160	mutex_unlock(&proto_list_mutex);
 161	return ret;
 162out:
 163	list_for_each_entry_continue_reverse(proto, &proto_list, node)
 164		if (proto->destroy_cgroup)
 165			proto->destroy_cgroup(memcg);
 166	mutex_unlock(&proto_list_mutex);
 167	return ret;
 168}
 169
 170void mem_cgroup_sockets_destroy(struct mem_cgroup *memcg)
 171{
 172	struct proto *proto;
 173
 174	mutex_lock(&proto_list_mutex);
 175	list_for_each_entry_reverse(proto, &proto_list, node)
 176		if (proto->destroy_cgroup)
 177			proto->destroy_cgroup(memcg);
 178	mutex_unlock(&proto_list_mutex);
 179}
 180#endif
 181
 182/*
 183 * Each address family might have different locking rules, so we have
 184 * one slock key per address family:
 185 */
 186static struct lock_class_key af_family_keys[AF_MAX];
 187static struct lock_class_key af_family_slock_keys[AF_MAX];
 188
 189struct static_key memcg_socket_limit_enabled;
 190EXPORT_SYMBOL(memcg_socket_limit_enabled);
 191
 192/*
 193 * Make lock validator output more readable. (we pre-construct these
 194 * strings build-time, so that runtime initialization of socket
 195 * locks is fast):
 196 */
 197static const char *const af_family_key_strings[AF_MAX+1] = {
 198  "sk_lock-AF_UNSPEC", "sk_lock-AF_UNIX"     , "sk_lock-AF_INET"     ,
 199  "sk_lock-AF_AX25"  , "sk_lock-AF_IPX"      , "sk_lock-AF_APPLETALK",
 200  "sk_lock-AF_NETROM", "sk_lock-AF_BRIDGE"   , "sk_lock-AF_ATMPVC"   ,
 201  "sk_lock-AF_X25"   , "sk_lock-AF_INET6"    , "sk_lock-AF_ROSE"     ,
 202  "sk_lock-AF_DECnet", "sk_lock-AF_NETBEUI"  , "sk_lock-AF_SECURITY" ,
 203  "sk_lock-AF_KEY"   , "sk_lock-AF_NETLINK"  , "sk_lock-AF_PACKET"   ,
 204  "sk_lock-AF_ASH"   , "sk_lock-AF_ECONET"   , "sk_lock-AF_ATMSVC"   ,
 205  "sk_lock-AF_RDS"   , "sk_lock-AF_SNA"      , "sk_lock-AF_IRDA"     ,
 206  "sk_lock-AF_PPPOX" , "sk_lock-AF_WANPIPE"  , "sk_lock-AF_LLC"      ,
 207  "sk_lock-27"       , "sk_lock-28"          , "sk_lock-AF_CAN"      ,
 208  "sk_lock-AF_TIPC"  , "sk_lock-AF_BLUETOOTH", "sk_lock-IUCV"        ,
 209  "sk_lock-AF_RXRPC" , "sk_lock-AF_ISDN"     , "sk_lock-AF_PHONET"   ,
 210  "sk_lock-AF_IEEE802154", "sk_lock-AF_CAIF" , "sk_lock-AF_ALG"      ,
 211  "sk_lock-AF_NFC"   , "sk_lock-AF_MAX"
 212};
 213static const char *const af_family_slock_key_strings[AF_MAX+1] = {
 214  "slock-AF_UNSPEC", "slock-AF_UNIX"     , "slock-AF_INET"     ,
 215  "slock-AF_AX25"  , "slock-AF_IPX"      , "slock-AF_APPLETALK",
 216  "slock-AF_NETROM", "slock-AF_BRIDGE"   , "slock-AF_ATMPVC"   ,
 217  "slock-AF_X25"   , "slock-AF_INET6"    , "slock-AF_ROSE"     ,
 218  "slock-AF_DECnet", "slock-AF_NETBEUI"  , "slock-AF_SECURITY" ,
 219  "slock-AF_KEY"   , "slock-AF_NETLINK"  , "slock-AF_PACKET"   ,
 220  "slock-AF_ASH"   , "slock-AF_ECONET"   , "slock-AF_ATMSVC"   ,
 221  "slock-AF_RDS"   , "slock-AF_SNA"      , "slock-AF_IRDA"     ,
 222  "slock-AF_PPPOX" , "slock-AF_WANPIPE"  , "slock-AF_LLC"      ,
 223  "slock-27"       , "slock-28"          , "slock-AF_CAN"      ,
 224  "slock-AF_TIPC"  , "slock-AF_BLUETOOTH", "slock-AF_IUCV"     ,
 225  "slock-AF_RXRPC" , "slock-AF_ISDN"     , "slock-AF_PHONET"   ,
 226  "slock-AF_IEEE802154", "slock-AF_CAIF" , "slock-AF_ALG"      ,
 227  "slock-AF_NFC"   , "slock-AF_MAX"
 228};
 229static const char *const af_family_clock_key_strings[AF_MAX+1] = {
 230  "clock-AF_UNSPEC", "clock-AF_UNIX"     , "clock-AF_INET"     ,
 231  "clock-AF_AX25"  , "clock-AF_IPX"      , "clock-AF_APPLETALK",
 232  "clock-AF_NETROM", "clock-AF_BRIDGE"   , "clock-AF_ATMPVC"   ,
 233  "clock-AF_X25"   , "clock-AF_INET6"    , "clock-AF_ROSE"     ,
 234  "clock-AF_DECnet", "clock-AF_NETBEUI"  , "clock-AF_SECURITY" ,
 235  "clock-AF_KEY"   , "clock-AF_NETLINK"  , "clock-AF_PACKET"   ,
 236  "clock-AF_ASH"   , "clock-AF_ECONET"   , "clock-AF_ATMSVC"   ,
 237  "clock-AF_RDS"   , "clock-AF_SNA"      , "clock-AF_IRDA"     ,
 238  "clock-AF_PPPOX" , "clock-AF_WANPIPE"  , "clock-AF_LLC"      ,
 239  "clock-27"       , "clock-28"          , "clock-AF_CAN"      ,
 240  "clock-AF_TIPC"  , "clock-AF_BLUETOOTH", "clock-AF_IUCV"     ,
 241  "clock-AF_RXRPC" , "clock-AF_ISDN"     , "clock-AF_PHONET"   ,
 242  "clock-AF_IEEE802154", "clock-AF_CAIF" , "clock-AF_ALG"      ,
 243  "clock-AF_NFC"   , "clock-AF_MAX"
 244};
 245
 246/*
 247 * sk_callback_lock locking rules are per-address-family,
 248 * so split the lock classes by using a per-AF key:
 249 */
 250static struct lock_class_key af_callback_keys[AF_MAX];
 251
 252/* Take into consideration the size of the struct sk_buff overhead in the
 253 * determination of these values, since that is non-constant across
 254 * platforms.  This makes socket queueing behavior and performance
 255 * not depend upon such differences.
 256 */
 257#define _SK_MEM_PACKETS		256
 258#define _SK_MEM_OVERHEAD	SKB_TRUESIZE(256)
 259#define SK_WMEM_MAX		(_SK_MEM_OVERHEAD * _SK_MEM_PACKETS)
 260#define SK_RMEM_MAX		(_SK_MEM_OVERHEAD * _SK_MEM_PACKETS)
 261
 262/* Run time adjustable parameters. */
 263__u32 sysctl_wmem_max __read_mostly = SK_WMEM_MAX;
 264EXPORT_SYMBOL(sysctl_wmem_max);
 265__u32 sysctl_rmem_max __read_mostly = SK_RMEM_MAX;
 266EXPORT_SYMBOL(sysctl_rmem_max);
 267__u32 sysctl_wmem_default __read_mostly = SK_WMEM_MAX;
 268__u32 sysctl_rmem_default __read_mostly = SK_RMEM_MAX;
 269
 270/* Maximal space eaten by iovec or ancillary data plus some space */
 271int sysctl_optmem_max __read_mostly = sizeof(unsigned long)*(2*UIO_MAXIOV+512);
 272EXPORT_SYMBOL(sysctl_optmem_max);
 273
 274#if defined(CONFIG_CGROUPS)
 275#if !defined(CONFIG_NET_CLS_CGROUP)
 276int net_cls_subsys_id = -1;
 277EXPORT_SYMBOL_GPL(net_cls_subsys_id);
 278#endif
 279#if !defined(CONFIG_NETPRIO_CGROUP)
 280int net_prio_subsys_id = -1;
 281EXPORT_SYMBOL_GPL(net_prio_subsys_id);
 282#endif
 283#endif
 284
 285static int sock_set_timeout(long *timeo_p, char __user *optval, int optlen)
 286{
 287	struct timeval tv;
 288
 289	if (optlen < sizeof(tv))
 290		return -EINVAL;
 291	if (copy_from_user(&tv, optval, sizeof(tv)))
 292		return -EFAULT;
 293	if (tv.tv_usec < 0 || tv.tv_usec >= USEC_PER_SEC)
 294		return -EDOM;
 295
 296	if (tv.tv_sec < 0) {
 297		static int warned __read_mostly;
 298
 299		*timeo_p = 0;
 300		if (warned < 10 && net_ratelimit()) {
 301			warned++;
 302			pr_info("%s: `%s' (pid %d) tries to set negative timeout\n",
 303				__func__, current->comm, task_pid_nr(current));
 
 304		}
 305		return 0;
 306	}
 307	*timeo_p = MAX_SCHEDULE_TIMEOUT;
 308	if (tv.tv_sec == 0 && tv.tv_usec == 0)
 309		return 0;
 310	if (tv.tv_sec < (MAX_SCHEDULE_TIMEOUT/HZ - 1))
 311		*timeo_p = tv.tv_sec*HZ + (tv.tv_usec+(1000000/HZ-1))/(1000000/HZ);
 312	return 0;
 313}
 314
 315static void sock_warn_obsolete_bsdism(const char *name)
 316{
 317	static int warned;
 318	static char warncomm[TASK_COMM_LEN];
 319	if (strcmp(warncomm, current->comm) && warned < 5) {
 320		strcpy(warncomm,  current->comm);
 321		pr_warn("process `%s' is using obsolete %s SO_BSDCOMPAT\n",
 322			warncomm, name);
 323		warned++;
 324	}
 325}
 326
 327#define SK_FLAGS_TIMESTAMP ((1UL << SOCK_TIMESTAMP) | (1UL << SOCK_TIMESTAMPING_RX_SOFTWARE))
 328
 329static void sock_disable_timestamp(struct sock *sk, unsigned long flags)
 330{
 331	if (sk->sk_flags & flags) {
 332		sk->sk_flags &= ~flags;
 333		if (!(sk->sk_flags & SK_FLAGS_TIMESTAMP))
 
 334			net_disable_timestamp();
 
 335	}
 336}
 337
 338
 339int sock_queue_rcv_skb(struct sock *sk, struct sk_buff *skb)
 340{
 341	int err;
 342	int skb_len;
 343	unsigned long flags;
 344	struct sk_buff_head *list = &sk->sk_receive_queue;
 345
 346	if (atomic_read(&sk->sk_rmem_alloc) >= sk->sk_rcvbuf) {
 
 
 
 
 347		atomic_inc(&sk->sk_drops);
 348		trace_sock_rcvqueue_full(sk, skb);
 349		return -ENOMEM;
 350	}
 351
 352	err = sk_filter(sk, skb);
 353	if (err)
 354		return err;
 355
 356	if (!sk_rmem_schedule(sk, skb->truesize)) {
 357		atomic_inc(&sk->sk_drops);
 358		return -ENOBUFS;
 359	}
 360
 361	skb->dev = NULL;
 362	skb_set_owner_r(skb, sk);
 363
 364	/* Cache the SKB length before we tack it onto the receive
 365	 * queue.  Once it is added it no longer belongs to us and
 366	 * may be freed by other threads of control pulling packets
 367	 * from the queue.
 368	 */
 369	skb_len = skb->len;
 370
 371	/* we escape from rcu protected region, make sure we dont leak
 372	 * a norefcounted dst
 373	 */
 374	skb_dst_force(skb);
 375
 376	spin_lock_irqsave(&list->lock, flags);
 377	skb->dropcount = atomic_read(&sk->sk_drops);
 378	__skb_queue_tail(list, skb);
 379	spin_unlock_irqrestore(&list->lock, flags);
 380
 381	if (!sock_flag(sk, SOCK_DEAD))
 382		sk->sk_data_ready(sk, skb_len);
 383	return 0;
 384}
 385EXPORT_SYMBOL(sock_queue_rcv_skb);
 386
 387int sk_receive_skb(struct sock *sk, struct sk_buff *skb, const int nested)
 388{
 389	int rc = NET_RX_SUCCESS;
 390
 391	if (sk_filter(sk, skb))
 392		goto discard_and_relse;
 393
 394	skb->dev = NULL;
 395
 396	if (sk_rcvqueues_full(sk, skb, sk->sk_rcvbuf)) {
 397		atomic_inc(&sk->sk_drops);
 398		goto discard_and_relse;
 399	}
 400	if (nested)
 401		bh_lock_sock_nested(sk);
 402	else
 403		bh_lock_sock(sk);
 404	if (!sock_owned_by_user(sk)) {
 405		/*
 406		 * trylock + unlock semantics:
 407		 */
 408		mutex_acquire(&sk->sk_lock.dep_map, 0, 1, _RET_IP_);
 409
 410		rc = sk_backlog_rcv(sk, skb);
 411
 412		mutex_release(&sk->sk_lock.dep_map, 1, _RET_IP_);
 413	} else if (sk_add_backlog(sk, skb, sk->sk_rcvbuf)) {
 414		bh_unlock_sock(sk);
 415		atomic_inc(&sk->sk_drops);
 416		goto discard_and_relse;
 417	}
 418
 419	bh_unlock_sock(sk);
 420out:
 421	sock_put(sk);
 422	return rc;
 423discard_and_relse:
 424	kfree_skb(skb);
 425	goto out;
 426}
 427EXPORT_SYMBOL(sk_receive_skb);
 428
 429void sk_reset_txq(struct sock *sk)
 430{
 431	sk_tx_queue_clear(sk);
 432}
 433EXPORT_SYMBOL(sk_reset_txq);
 434
 435struct dst_entry *__sk_dst_check(struct sock *sk, u32 cookie)
 436{
 437	struct dst_entry *dst = __sk_dst_get(sk);
 438
 439	if (dst && dst->obsolete && dst->ops->check(dst, cookie) == NULL) {
 440		sk_tx_queue_clear(sk);
 441		RCU_INIT_POINTER(sk->sk_dst_cache, NULL);
 442		dst_release(dst);
 443		return NULL;
 444	}
 445
 446	return dst;
 447}
 448EXPORT_SYMBOL(__sk_dst_check);
 449
 450struct dst_entry *sk_dst_check(struct sock *sk, u32 cookie)
 451{
 452	struct dst_entry *dst = sk_dst_get(sk);
 453
 454	if (dst && dst->obsolete && dst->ops->check(dst, cookie) == NULL) {
 455		sk_dst_reset(sk);
 456		dst_release(dst);
 457		return NULL;
 458	}
 459
 460	return dst;
 461}
 462EXPORT_SYMBOL(sk_dst_check);
 463
 464static int sock_bindtodevice(struct sock *sk, char __user *optval, int optlen)
 465{
 466	int ret = -ENOPROTOOPT;
 467#ifdef CONFIG_NETDEVICES
 468	struct net *net = sock_net(sk);
 469	char devname[IFNAMSIZ];
 470	int index;
 471
 472	/* Sorry... */
 473	ret = -EPERM;
 474	if (!capable(CAP_NET_RAW))
 475		goto out;
 476
 477	ret = -EINVAL;
 478	if (optlen < 0)
 479		goto out;
 480
 481	/* Bind this socket to a particular device like "eth0",
 482	 * as specified in the passed interface name. If the
 483	 * name is "" or the option length is zero the socket
 484	 * is not bound.
 485	 */
 486	if (optlen > IFNAMSIZ - 1)
 487		optlen = IFNAMSIZ - 1;
 488	memset(devname, 0, sizeof(devname));
 489
 490	ret = -EFAULT;
 491	if (copy_from_user(devname, optval, optlen))
 492		goto out;
 493
 494	index = 0;
 495	if (devname[0] != '\0') {
 496		struct net_device *dev;
 497
 498		rcu_read_lock();
 499		dev = dev_get_by_name_rcu(net, devname);
 500		if (dev)
 501			index = dev->ifindex;
 502		rcu_read_unlock();
 503		ret = -ENODEV;
 504		if (!dev)
 505			goto out;
 506	}
 507
 508	lock_sock(sk);
 509	sk->sk_bound_dev_if = index;
 510	sk_dst_reset(sk);
 511	release_sock(sk);
 512
 513	ret = 0;
 514
 515out:
 516#endif
 517
 518	return ret;
 519}
 520
 521static inline void sock_valbool_flag(struct sock *sk, int bit, int valbool)
 522{
 523	if (valbool)
 524		sock_set_flag(sk, bit);
 525	else
 526		sock_reset_flag(sk, bit);
 527}
 528
 529/*
 530 *	This is meant for all protocols to use and covers goings on
 531 *	at the socket level. Everything here is generic.
 532 */
 533
 534int sock_setsockopt(struct socket *sock, int level, int optname,
 535		    char __user *optval, unsigned int optlen)
 536{
 537	struct sock *sk = sock->sk;
 538	int val;
 539	int valbool;
 540	struct linger ling;
 541	int ret = 0;
 542
 543	/*
 544	 *	Options without arguments
 545	 */
 546
 547	if (optname == SO_BINDTODEVICE)
 548		return sock_bindtodevice(sk, optval, optlen);
 549
 550	if (optlen < sizeof(int))
 551		return -EINVAL;
 552
 553	if (get_user(val, (int __user *)optval))
 554		return -EFAULT;
 555
 556	valbool = val ? 1 : 0;
 557
 558	lock_sock(sk);
 559
 560	switch (optname) {
 561	case SO_DEBUG:
 562		if (val && !capable(CAP_NET_ADMIN))
 563			ret = -EACCES;
 564		else
 565			sock_valbool_flag(sk, SOCK_DBG, valbool);
 566		break;
 567	case SO_REUSEADDR:
 568		sk->sk_reuse = (valbool ? SK_CAN_REUSE : SK_NO_REUSE);
 569		break;
 570	case SO_TYPE:
 571	case SO_PROTOCOL:
 572	case SO_DOMAIN:
 573	case SO_ERROR:
 574		ret = -ENOPROTOOPT;
 575		break;
 576	case SO_DONTROUTE:
 577		sock_valbool_flag(sk, SOCK_LOCALROUTE, valbool);
 578		break;
 579	case SO_BROADCAST:
 580		sock_valbool_flag(sk, SOCK_BROADCAST, valbool);
 581		break;
 582	case SO_SNDBUF:
 583		/* Don't error on this BSD doesn't and if you think
 584		 * about it this is right. Otherwise apps have to
 585		 * play 'guess the biggest size' games. RCVBUF/SNDBUF
 586		 * are treated in BSD as hints
 587		 */
 588		val = min_t(u32, val, sysctl_wmem_max);
 
 589set_sndbuf:
 590		sk->sk_userlocks |= SOCK_SNDBUF_LOCK;
 591		sk->sk_sndbuf = max_t(u32, val * 2, SOCK_MIN_SNDBUF);
 592		/* Wake up sending tasks if we upped the value. */
 
 
 
 
 
 
 
 593		sk->sk_write_space(sk);
 594		break;
 595
 596	case SO_SNDBUFFORCE:
 597		if (!capable(CAP_NET_ADMIN)) {
 598			ret = -EPERM;
 599			break;
 600		}
 601		goto set_sndbuf;
 602
 603	case SO_RCVBUF:
 604		/* Don't error on this BSD doesn't and if you think
 605		 * about it this is right. Otherwise apps have to
 606		 * play 'guess the biggest size' games. RCVBUF/SNDBUF
 607		 * are treated in BSD as hints
 608		 */
 609		val = min_t(u32, val, sysctl_rmem_max);
 
 610set_rcvbuf:
 611		sk->sk_userlocks |= SOCK_RCVBUF_LOCK;
 612		/*
 613		 * We double it on the way in to account for
 614		 * "struct sk_buff" etc. overhead.   Applications
 615		 * assume that the SO_RCVBUF setting they make will
 616		 * allow that much actual data to be received on that
 617		 * socket.
 618		 *
 619		 * Applications are unaware that "struct sk_buff" and
 620		 * other overheads allocate from the receive buffer
 621		 * during socket buffer allocation.
 622		 *
 623		 * And after considering the possible alternatives,
 624		 * returning the value we actually used in getsockopt
 625		 * is the most desirable behavior.
 626		 */
 627		sk->sk_rcvbuf = max_t(u32, val * 2, SOCK_MIN_RCVBUF);
 
 
 
 628		break;
 629
 630	case SO_RCVBUFFORCE:
 631		if (!capable(CAP_NET_ADMIN)) {
 632			ret = -EPERM;
 633			break;
 634		}
 635		goto set_rcvbuf;
 636
 637	case SO_KEEPALIVE:
 638#ifdef CONFIG_INET
 639		if (sk->sk_protocol == IPPROTO_TCP)
 640			tcp_set_keepalive(sk, valbool);
 641#endif
 642		sock_valbool_flag(sk, SOCK_KEEPOPEN, valbool);
 643		break;
 644
 645	case SO_OOBINLINE:
 646		sock_valbool_flag(sk, SOCK_URGINLINE, valbool);
 647		break;
 648
 649	case SO_NO_CHECK:
 650		sk->sk_no_check = valbool;
 651		break;
 652
 653	case SO_PRIORITY:
 654		if ((val >= 0 && val <= 6) || capable(CAP_NET_ADMIN))
 655			sk->sk_priority = val;
 656		else
 657			ret = -EPERM;
 658		break;
 659
 660	case SO_LINGER:
 661		if (optlen < sizeof(ling)) {
 662			ret = -EINVAL;	/* 1003.1g */
 663			break;
 664		}
 665		if (copy_from_user(&ling, optval, sizeof(ling))) {
 666			ret = -EFAULT;
 667			break;
 668		}
 669		if (!ling.l_onoff)
 670			sock_reset_flag(sk, SOCK_LINGER);
 671		else {
 672#if (BITS_PER_LONG == 32)
 673			if ((unsigned int)ling.l_linger >= MAX_SCHEDULE_TIMEOUT/HZ)
 674				sk->sk_lingertime = MAX_SCHEDULE_TIMEOUT;
 675			else
 676#endif
 677				sk->sk_lingertime = (unsigned int)ling.l_linger * HZ;
 678			sock_set_flag(sk, SOCK_LINGER);
 679		}
 680		break;
 681
 682	case SO_BSDCOMPAT:
 683		sock_warn_obsolete_bsdism("setsockopt");
 684		break;
 685
 686	case SO_PASSCRED:
 687		if (valbool)
 688			set_bit(SOCK_PASSCRED, &sock->flags);
 689		else
 690			clear_bit(SOCK_PASSCRED, &sock->flags);
 691		break;
 692
 693	case SO_TIMESTAMP:
 694	case SO_TIMESTAMPNS:
 695		if (valbool)  {
 696			if (optname == SO_TIMESTAMP)
 697				sock_reset_flag(sk, SOCK_RCVTSTAMPNS);
 698			else
 699				sock_set_flag(sk, SOCK_RCVTSTAMPNS);
 700			sock_set_flag(sk, SOCK_RCVTSTAMP);
 701			sock_enable_timestamp(sk, SOCK_TIMESTAMP);
 702		} else {
 703			sock_reset_flag(sk, SOCK_RCVTSTAMP);
 704			sock_reset_flag(sk, SOCK_RCVTSTAMPNS);
 705		}
 706		break;
 707
 708	case SO_TIMESTAMPING:
 709		if (val & ~SOF_TIMESTAMPING_MASK) {
 710			ret = -EINVAL;
 711			break;
 712		}
 713		sock_valbool_flag(sk, SOCK_TIMESTAMPING_TX_HARDWARE,
 714				  val & SOF_TIMESTAMPING_TX_HARDWARE);
 715		sock_valbool_flag(sk, SOCK_TIMESTAMPING_TX_SOFTWARE,
 716				  val & SOF_TIMESTAMPING_TX_SOFTWARE);
 717		sock_valbool_flag(sk, SOCK_TIMESTAMPING_RX_HARDWARE,
 718				  val & SOF_TIMESTAMPING_RX_HARDWARE);
 719		if (val & SOF_TIMESTAMPING_RX_SOFTWARE)
 720			sock_enable_timestamp(sk,
 721					      SOCK_TIMESTAMPING_RX_SOFTWARE);
 722		else
 723			sock_disable_timestamp(sk,
 724					       (1UL << SOCK_TIMESTAMPING_RX_SOFTWARE));
 725		sock_valbool_flag(sk, SOCK_TIMESTAMPING_SOFTWARE,
 726				  val & SOF_TIMESTAMPING_SOFTWARE);
 727		sock_valbool_flag(sk, SOCK_TIMESTAMPING_SYS_HARDWARE,
 728				  val & SOF_TIMESTAMPING_SYS_HARDWARE);
 729		sock_valbool_flag(sk, SOCK_TIMESTAMPING_RAW_HARDWARE,
 730				  val & SOF_TIMESTAMPING_RAW_HARDWARE);
 731		break;
 732
 733	case SO_RCVLOWAT:
 734		if (val < 0)
 735			val = INT_MAX;
 736		sk->sk_rcvlowat = val ? : 1;
 737		break;
 738
 739	case SO_RCVTIMEO:
 740		ret = sock_set_timeout(&sk->sk_rcvtimeo, optval, optlen);
 741		break;
 742
 743	case SO_SNDTIMEO:
 744		ret = sock_set_timeout(&sk->sk_sndtimeo, optval, optlen);
 745		break;
 746
 747	case SO_ATTACH_FILTER:
 748		ret = -EINVAL;
 749		if (optlen == sizeof(struct sock_fprog)) {
 750			struct sock_fprog fprog;
 751
 752			ret = -EFAULT;
 753			if (copy_from_user(&fprog, optval, sizeof(fprog)))
 754				break;
 755
 756			ret = sk_attach_filter(&fprog, sk);
 757		}
 758		break;
 759
 760	case SO_DETACH_FILTER:
 761		ret = sk_detach_filter(sk);
 762		break;
 763
 764	case SO_PASSSEC:
 765		if (valbool)
 766			set_bit(SOCK_PASSSEC, &sock->flags);
 767		else
 768			clear_bit(SOCK_PASSSEC, &sock->flags);
 769		break;
 770	case SO_MARK:
 771		if (!capable(CAP_NET_ADMIN))
 772			ret = -EPERM;
 773		else
 774			sk->sk_mark = val;
 775		break;
 776
 777		/* We implement the SO_SNDLOWAT etc to
 778		   not be settable (1003.1g 5.3) */
 779	case SO_RXQ_OVFL:
 780		sock_valbool_flag(sk, SOCK_RXQ_OVFL, valbool);
 781		break;
 782
 783	case SO_WIFI_STATUS:
 784		sock_valbool_flag(sk, SOCK_WIFI_STATUS, valbool);
 785		break;
 786
 787	case SO_PEEK_OFF:
 788		if (sock->ops->set_peek_off)
 789			sock->ops->set_peek_off(sk, val);
 790		else
 791			ret = -EOPNOTSUPP;
 792		break;
 793
 794	case SO_NOFCS:
 795		sock_valbool_flag(sk, SOCK_NOFCS, valbool);
 796		break;
 797
 798	default:
 799		ret = -ENOPROTOOPT;
 800		break;
 801	}
 802	release_sock(sk);
 803	return ret;
 804}
 805EXPORT_SYMBOL(sock_setsockopt);
 806
 807
 808void cred_to_ucred(struct pid *pid, const struct cred *cred,
 809		   struct ucred *ucred)
 810{
 811	ucred->pid = pid_vnr(pid);
 812	ucred->uid = ucred->gid = -1;
 813	if (cred) {
 814		struct user_namespace *current_ns = current_user_ns();
 815
 816		ucred->uid = from_kuid(current_ns, cred->euid);
 817		ucred->gid = from_kgid(current_ns, cred->egid);
 818	}
 819}
 820EXPORT_SYMBOL_GPL(cred_to_ucred);
 821
 822int sock_getsockopt(struct socket *sock, int level, int optname,
 823		    char __user *optval, int __user *optlen)
 824{
 825	struct sock *sk = sock->sk;
 826
 827	union {
 828		int val;
 829		struct linger ling;
 830		struct timeval tm;
 831	} v;
 832
 833	int lv = sizeof(int);
 834	int len;
 835
 836	if (get_user(len, optlen))
 837		return -EFAULT;
 838	if (len < 0)
 839		return -EINVAL;
 840
 841	memset(&v, 0, sizeof(v));
 842
 843	switch (optname) {
 844	case SO_DEBUG:
 845		v.val = sock_flag(sk, SOCK_DBG);
 846		break;
 847
 848	case SO_DONTROUTE:
 849		v.val = sock_flag(sk, SOCK_LOCALROUTE);
 850		break;
 851
 852	case SO_BROADCAST:
 853		v.val = sock_flag(sk, SOCK_BROADCAST);
 854		break;
 855
 856	case SO_SNDBUF:
 857		v.val = sk->sk_sndbuf;
 858		break;
 859
 860	case SO_RCVBUF:
 861		v.val = sk->sk_rcvbuf;
 862		break;
 863
 864	case SO_REUSEADDR:
 865		v.val = sk->sk_reuse;
 866		break;
 867
 868	case SO_KEEPALIVE:
 869		v.val = sock_flag(sk, SOCK_KEEPOPEN);
 870		break;
 871
 872	case SO_TYPE:
 873		v.val = sk->sk_type;
 874		break;
 875
 876	case SO_PROTOCOL:
 877		v.val = sk->sk_protocol;
 878		break;
 879
 880	case SO_DOMAIN:
 881		v.val = sk->sk_family;
 882		break;
 883
 884	case SO_ERROR:
 885		v.val = -sock_error(sk);
 886		if (v.val == 0)
 887			v.val = xchg(&sk->sk_err_soft, 0);
 888		break;
 889
 890	case SO_OOBINLINE:
 891		v.val = sock_flag(sk, SOCK_URGINLINE);
 892		break;
 893
 894	case SO_NO_CHECK:
 895		v.val = sk->sk_no_check;
 896		break;
 897
 898	case SO_PRIORITY:
 899		v.val = sk->sk_priority;
 900		break;
 901
 902	case SO_LINGER:
 903		lv		= sizeof(v.ling);
 904		v.ling.l_onoff	= sock_flag(sk, SOCK_LINGER);
 905		v.ling.l_linger	= sk->sk_lingertime / HZ;
 906		break;
 907
 908	case SO_BSDCOMPAT:
 909		sock_warn_obsolete_bsdism("getsockopt");
 910		break;
 911
 912	case SO_TIMESTAMP:
 913		v.val = sock_flag(sk, SOCK_RCVTSTAMP) &&
 914				!sock_flag(sk, SOCK_RCVTSTAMPNS);
 915		break;
 916
 917	case SO_TIMESTAMPNS:
 918		v.val = sock_flag(sk, SOCK_RCVTSTAMPNS);
 919		break;
 920
 921	case SO_TIMESTAMPING:
 922		v.val = 0;
 923		if (sock_flag(sk, SOCK_TIMESTAMPING_TX_HARDWARE))
 924			v.val |= SOF_TIMESTAMPING_TX_HARDWARE;
 925		if (sock_flag(sk, SOCK_TIMESTAMPING_TX_SOFTWARE))
 926			v.val |= SOF_TIMESTAMPING_TX_SOFTWARE;
 927		if (sock_flag(sk, SOCK_TIMESTAMPING_RX_HARDWARE))
 928			v.val |= SOF_TIMESTAMPING_RX_HARDWARE;
 929		if (sock_flag(sk, SOCK_TIMESTAMPING_RX_SOFTWARE))
 930			v.val |= SOF_TIMESTAMPING_RX_SOFTWARE;
 931		if (sock_flag(sk, SOCK_TIMESTAMPING_SOFTWARE))
 932			v.val |= SOF_TIMESTAMPING_SOFTWARE;
 933		if (sock_flag(sk, SOCK_TIMESTAMPING_SYS_HARDWARE))
 934			v.val |= SOF_TIMESTAMPING_SYS_HARDWARE;
 935		if (sock_flag(sk, SOCK_TIMESTAMPING_RAW_HARDWARE))
 936			v.val |= SOF_TIMESTAMPING_RAW_HARDWARE;
 937		break;
 938
 939	case SO_RCVTIMEO:
 940		lv = sizeof(struct timeval);
 941		if (sk->sk_rcvtimeo == MAX_SCHEDULE_TIMEOUT) {
 942			v.tm.tv_sec = 0;
 943			v.tm.tv_usec = 0;
 944		} else {
 945			v.tm.tv_sec = sk->sk_rcvtimeo / HZ;
 946			v.tm.tv_usec = ((sk->sk_rcvtimeo % HZ) * 1000000) / HZ;
 947		}
 948		break;
 949
 950	case SO_SNDTIMEO:
 951		lv = sizeof(struct timeval);
 952		if (sk->sk_sndtimeo == MAX_SCHEDULE_TIMEOUT) {
 953			v.tm.tv_sec = 0;
 954			v.tm.tv_usec = 0;
 955		} else {
 956			v.tm.tv_sec = sk->sk_sndtimeo / HZ;
 957			v.tm.tv_usec = ((sk->sk_sndtimeo % HZ) * 1000000) / HZ;
 958		}
 959		break;
 960
 961	case SO_RCVLOWAT:
 962		v.val = sk->sk_rcvlowat;
 963		break;
 964
 965	case SO_SNDLOWAT:
 966		v.val = 1;
 967		break;
 968
 969	case SO_PASSCRED:
 970		v.val = !!test_bit(SOCK_PASSCRED, &sock->flags);
 971		break;
 972
 973	case SO_PEERCRED:
 974	{
 975		struct ucred peercred;
 976		if (len > sizeof(peercred))
 977			len = sizeof(peercred);
 978		cred_to_ucred(sk->sk_peer_pid, sk->sk_peer_cred, &peercred);
 979		if (copy_to_user(optval, &peercred, len))
 980			return -EFAULT;
 981		goto lenout;
 982	}
 983
 984	case SO_PEERNAME:
 985	{
 986		char address[128];
 987
 988		if (sock->ops->getname(sock, (struct sockaddr *)address, &lv, 2))
 989			return -ENOTCONN;
 990		if (lv < len)
 991			return -EINVAL;
 992		if (copy_to_user(optval, address, len))
 993			return -EFAULT;
 994		goto lenout;
 995	}
 996
 997	/* Dubious BSD thing... Probably nobody even uses it, but
 998	 * the UNIX standard wants it for whatever reason... -DaveM
 999	 */
1000	case SO_ACCEPTCONN:
1001		v.val = sk->sk_state == TCP_LISTEN;
1002		break;
1003
1004	case SO_PASSSEC:
1005		v.val = !!test_bit(SOCK_PASSSEC, &sock->flags);
1006		break;
1007
1008	case SO_PEERSEC:
1009		return security_socket_getpeersec_stream(sock, optval, optlen, len);
1010
1011	case SO_MARK:
1012		v.val = sk->sk_mark;
1013		break;
1014
1015	case SO_RXQ_OVFL:
1016		v.val = sock_flag(sk, SOCK_RXQ_OVFL);
1017		break;
1018
1019	case SO_WIFI_STATUS:
1020		v.val = sock_flag(sk, SOCK_WIFI_STATUS);
1021		break;
1022
1023	case SO_PEEK_OFF:
1024		if (!sock->ops->set_peek_off)
1025			return -EOPNOTSUPP;
1026
1027		v.val = sk->sk_peek_off;
1028		break;
1029	case SO_NOFCS:
1030		v.val = sock_flag(sk, SOCK_NOFCS);
1031		break;
1032	default:
1033		return -ENOPROTOOPT;
1034	}
1035
1036	if (len > lv)
1037		len = lv;
1038	if (copy_to_user(optval, &v, len))
1039		return -EFAULT;
1040lenout:
1041	if (put_user(len, optlen))
1042		return -EFAULT;
1043	return 0;
1044}
1045
1046/*
1047 * Initialize an sk_lock.
1048 *
1049 * (We also register the sk_lock with the lock validator.)
1050 */
1051static inline void sock_lock_init(struct sock *sk)
1052{
1053	sock_lock_init_class_and_name(sk,
1054			af_family_slock_key_strings[sk->sk_family],
1055			af_family_slock_keys + sk->sk_family,
1056			af_family_key_strings[sk->sk_family],
1057			af_family_keys + sk->sk_family);
1058}
1059
1060/*
1061 * Copy all fields from osk to nsk but nsk->sk_refcnt must not change yet,
1062 * even temporarly, because of RCU lookups. sk_node should also be left as is.
1063 * We must not copy fields between sk_dontcopy_begin and sk_dontcopy_end
1064 */
1065static void sock_copy(struct sock *nsk, const struct sock *osk)
1066{
1067#ifdef CONFIG_SECURITY_NETWORK
1068	void *sptr = nsk->sk_security;
1069#endif
1070	memcpy(nsk, osk, offsetof(struct sock, sk_dontcopy_begin));
1071
1072	memcpy(&nsk->sk_dontcopy_end, &osk->sk_dontcopy_end,
1073	       osk->sk_prot->obj_size - offsetof(struct sock, sk_dontcopy_end));
1074
1075#ifdef CONFIG_SECURITY_NETWORK
1076	nsk->sk_security = sptr;
1077	security_sk_clone(osk, nsk);
1078#endif
1079}
1080
1081/*
1082 * caches using SLAB_DESTROY_BY_RCU should let .next pointer from nulls nodes
1083 * un-modified. Special care is taken when initializing object to zero.
1084 */
1085static inline void sk_prot_clear_nulls(struct sock *sk, int size)
1086{
1087	if (offsetof(struct sock, sk_node.next) != 0)
1088		memset(sk, 0, offsetof(struct sock, sk_node.next));
1089	memset(&sk->sk_node.pprev, 0,
1090	       size - offsetof(struct sock, sk_node.pprev));
1091}
1092
1093void sk_prot_clear_portaddr_nulls(struct sock *sk, int size)
1094{
1095	unsigned long nulls1, nulls2;
1096
1097	nulls1 = offsetof(struct sock, __sk_common.skc_node.next);
1098	nulls2 = offsetof(struct sock, __sk_common.skc_portaddr_node.next);
1099	if (nulls1 > nulls2)
1100		swap(nulls1, nulls2);
1101
1102	if (nulls1 != 0)
1103		memset((char *)sk, 0, nulls1);
1104	memset((char *)sk + nulls1 + sizeof(void *), 0,
1105	       nulls2 - nulls1 - sizeof(void *));
1106	memset((char *)sk + nulls2 + sizeof(void *), 0,
1107	       size - nulls2 - sizeof(void *));
1108}
1109EXPORT_SYMBOL(sk_prot_clear_portaddr_nulls);
1110
1111static struct sock *sk_prot_alloc(struct proto *prot, gfp_t priority,
1112		int family)
1113{
1114	struct sock *sk;
1115	struct kmem_cache *slab;
1116
1117	slab = prot->slab;
1118	if (slab != NULL) {
1119		sk = kmem_cache_alloc(slab, priority & ~__GFP_ZERO);
1120		if (!sk)
1121			return sk;
1122		if (priority & __GFP_ZERO) {
1123			if (prot->clear_sk)
1124				prot->clear_sk(sk, prot->obj_size);
1125			else
1126				sk_prot_clear_nulls(sk, prot->obj_size);
1127		}
1128	} else
1129		sk = kmalloc(prot->obj_size, priority);
1130
1131	if (sk != NULL) {
1132		kmemcheck_annotate_bitfield(sk, flags);
1133
1134		if (security_sk_alloc(sk, family, priority))
1135			goto out_free;
1136
1137		if (!try_module_get(prot->owner))
1138			goto out_free_sec;
1139		sk_tx_queue_clear(sk);
1140	}
1141
1142	return sk;
1143
1144out_free_sec:
1145	security_sk_free(sk);
1146out_free:
1147	if (slab != NULL)
1148		kmem_cache_free(slab, sk);
1149	else
1150		kfree(sk);
1151	return NULL;
1152}
1153
1154static void sk_prot_free(struct proto *prot, struct sock *sk)
1155{
1156	struct kmem_cache *slab;
1157	struct module *owner;
1158
1159	owner = prot->owner;
1160	slab = prot->slab;
1161
1162	security_sk_free(sk);
1163	if (slab != NULL)
1164		kmem_cache_free(slab, sk);
1165	else
1166		kfree(sk);
1167	module_put(owner);
1168}
1169
1170#ifdef CONFIG_CGROUPS
1171void sock_update_classid(struct sock *sk)
1172{
1173	u32 classid;
1174
1175	rcu_read_lock();  /* doing current task, which cannot vanish. */
1176	classid = task_cls_classid(current);
1177	rcu_read_unlock();
1178	if (classid && classid != sk->sk_classid)
1179		sk->sk_classid = classid;
1180}
1181EXPORT_SYMBOL(sock_update_classid);
1182
1183void sock_update_netprioidx(struct sock *sk)
1184{
1185	if (in_interrupt())
1186		return;
1187
1188	sk->sk_cgrp_prioidx = task_netprioidx(current);
1189}
1190EXPORT_SYMBOL_GPL(sock_update_netprioidx);
1191#endif
1192
1193/**
1194 *	sk_alloc - All socket objects are allocated here
1195 *	@net: the applicable net namespace
1196 *	@family: protocol family
1197 *	@priority: for allocation (%GFP_KERNEL, %GFP_ATOMIC, etc)
1198 *	@prot: struct proto associated with this new sock instance
1199 */
1200struct sock *sk_alloc(struct net *net, int family, gfp_t priority,
1201		      struct proto *prot)
1202{
1203	struct sock *sk;
1204
1205	sk = sk_prot_alloc(prot, priority | __GFP_ZERO, family);
1206	if (sk) {
1207		sk->sk_family = family;
1208		/*
1209		 * See comment in struct sock definition to understand
1210		 * why we need sk_prot_creator -acme
1211		 */
1212		sk->sk_prot = sk->sk_prot_creator = prot;
1213		sock_lock_init(sk);
1214		sock_net_set(sk, get_net(net));
1215		atomic_set(&sk->sk_wmem_alloc, 1);
1216
1217		sock_update_classid(sk);
1218		sock_update_netprioidx(sk);
1219	}
1220
1221	return sk;
1222}
1223EXPORT_SYMBOL(sk_alloc);
1224
1225static void __sk_free(struct sock *sk)
1226{
1227	struct sk_filter *filter;
1228
1229	if (sk->sk_destruct)
1230		sk->sk_destruct(sk);
1231
1232	filter = rcu_dereference_check(sk->sk_filter,
1233				       atomic_read(&sk->sk_wmem_alloc) == 0);
1234	if (filter) {
1235		sk_filter_uncharge(sk, filter);
1236		RCU_INIT_POINTER(sk->sk_filter, NULL);
1237	}
1238
1239	sock_disable_timestamp(sk, SK_FLAGS_TIMESTAMP);
 
1240
1241	if (atomic_read(&sk->sk_omem_alloc))
1242		pr_debug("%s: optmem leakage (%d bytes) detected\n",
1243			 __func__, atomic_read(&sk->sk_omem_alloc));
1244
1245	if (sk->sk_peer_cred)
1246		put_cred(sk->sk_peer_cred);
1247	put_pid(sk->sk_peer_pid);
1248	put_net(sock_net(sk));
1249	sk_prot_free(sk->sk_prot_creator, sk);
1250}
1251
1252void sk_free(struct sock *sk)
1253{
1254	/*
1255	 * We subtract one from sk_wmem_alloc and can know if
1256	 * some packets are still in some tx queue.
1257	 * If not null, sock_wfree() will call __sk_free(sk) later
1258	 */
1259	if (atomic_dec_and_test(&sk->sk_wmem_alloc))
1260		__sk_free(sk);
1261}
1262EXPORT_SYMBOL(sk_free);
1263
1264/*
1265 * Last sock_put should drop reference to sk->sk_net. It has already
1266 * been dropped in sk_change_net. Taking reference to stopping namespace
1267 * is not an option.
1268 * Take reference to a socket to remove it from hash _alive_ and after that
1269 * destroy it in the context of init_net.
1270 */
1271void sk_release_kernel(struct sock *sk)
1272{
1273	if (sk == NULL || sk->sk_socket == NULL)
1274		return;
1275
1276	sock_hold(sk);
1277	sock_release(sk->sk_socket);
1278	release_net(sock_net(sk));
1279	sock_net_set(sk, get_net(&init_net));
1280	sock_put(sk);
1281}
1282EXPORT_SYMBOL(sk_release_kernel);
1283
1284static void sk_update_clone(const struct sock *sk, struct sock *newsk)
1285{
1286	if (mem_cgroup_sockets_enabled && sk->sk_cgrp)
1287		sock_update_memcg(newsk);
1288}
1289
1290/**
1291 *	sk_clone_lock - clone a socket, and lock its clone
1292 *	@sk: the socket to clone
1293 *	@priority: for allocation (%GFP_KERNEL, %GFP_ATOMIC, etc)
1294 *
1295 *	Caller must unlock socket even in error path (bh_unlock_sock(newsk))
1296 */
1297struct sock *sk_clone_lock(const struct sock *sk, const gfp_t priority)
1298{
1299	struct sock *newsk;
1300
1301	newsk = sk_prot_alloc(sk->sk_prot, priority, sk->sk_family);
1302	if (newsk != NULL) {
1303		struct sk_filter *filter;
1304
1305		sock_copy(newsk, sk);
1306
1307		/* SANITY */
1308		get_net(sock_net(newsk));
1309		sk_node_init(&newsk->sk_node);
1310		sock_lock_init(newsk);
1311		bh_lock_sock(newsk);
1312		newsk->sk_backlog.head	= newsk->sk_backlog.tail = NULL;
1313		newsk->sk_backlog.len = 0;
1314
1315		atomic_set(&newsk->sk_rmem_alloc, 0);
1316		/*
1317		 * sk_wmem_alloc set to one (see sk_free() and sock_wfree())
1318		 */
1319		atomic_set(&newsk->sk_wmem_alloc, 1);
1320		atomic_set(&newsk->sk_omem_alloc, 0);
1321		skb_queue_head_init(&newsk->sk_receive_queue);
1322		skb_queue_head_init(&newsk->sk_write_queue);
1323#ifdef CONFIG_NET_DMA
1324		skb_queue_head_init(&newsk->sk_async_wait_queue);
1325#endif
1326
1327		spin_lock_init(&newsk->sk_dst_lock);
1328		rwlock_init(&newsk->sk_callback_lock);
1329		lockdep_set_class_and_name(&newsk->sk_callback_lock,
1330				af_callback_keys + newsk->sk_family,
1331				af_family_clock_key_strings[newsk->sk_family]);
1332
1333		newsk->sk_dst_cache	= NULL;
1334		newsk->sk_wmem_queued	= 0;
1335		newsk->sk_forward_alloc = 0;
1336		newsk->sk_send_head	= NULL;
1337		newsk->sk_userlocks	= sk->sk_userlocks & ~SOCK_BINDPORT_LOCK;
1338
1339		sock_reset_flag(newsk, SOCK_DONE);
1340		skb_queue_head_init(&newsk->sk_error_queue);
1341
1342		filter = rcu_dereference_protected(newsk->sk_filter, 1);
1343		if (filter != NULL)
1344			sk_filter_charge(newsk, filter);
1345
1346		if (unlikely(xfrm_sk_clone_policy(newsk))) {
1347			/* It is still raw copy of parent, so invalidate
1348			 * destructor and make plain sk_free() */
1349			newsk->sk_destruct = NULL;
1350			bh_unlock_sock(newsk);
1351			sk_free(newsk);
1352			newsk = NULL;
1353			goto out;
1354		}
1355
1356		newsk->sk_err	   = 0;
1357		newsk->sk_priority = 0;
1358		/*
1359		 * Before updating sk_refcnt, we must commit prior changes to memory
1360		 * (Documentation/RCU/rculist_nulls.txt for details)
1361		 */
1362		smp_wmb();
1363		atomic_set(&newsk->sk_refcnt, 2);
1364
1365		/*
1366		 * Increment the counter in the same struct proto as the master
1367		 * sock (sk_refcnt_debug_inc uses newsk->sk_prot->socks, that
1368		 * is the same as sk->sk_prot->socks, as this field was copied
1369		 * with memcpy).
1370		 *
1371		 * This _changes_ the previous behaviour, where
1372		 * tcp_create_openreq_child always was incrementing the
1373		 * equivalent to tcp_prot->socks (inet_sock_nr), so this have
1374		 * to be taken into account in all callers. -acme
1375		 */
1376		sk_refcnt_debug_inc(newsk);
1377		sk_set_socket(newsk, NULL);
1378		newsk->sk_wq = NULL;
1379
1380		sk_update_clone(sk, newsk);
1381
1382		if (newsk->sk_prot->sockets_allocated)
1383			sk_sockets_allocated_inc(newsk);
1384
1385		if (newsk->sk_flags & SK_FLAGS_TIMESTAMP)
 
1386			net_enable_timestamp();
1387	}
1388out:
1389	return newsk;
1390}
1391EXPORT_SYMBOL_GPL(sk_clone_lock);
1392
1393void sk_setup_caps(struct sock *sk, struct dst_entry *dst)
1394{
1395	__sk_dst_set(sk, dst);
1396	sk->sk_route_caps = dst->dev->features;
1397	if (sk->sk_route_caps & NETIF_F_GSO)
1398		sk->sk_route_caps |= NETIF_F_GSO_SOFTWARE;
1399	sk->sk_route_caps &= ~sk->sk_route_nocaps;
1400	if (sk_can_gso(sk)) {
1401		if (dst->header_len) {
1402			sk->sk_route_caps &= ~NETIF_F_GSO_MASK;
1403		} else {
1404			sk->sk_route_caps |= NETIF_F_SG | NETIF_F_HW_CSUM;
1405			sk->sk_gso_max_size = dst->dev->gso_max_size;
1406			sk->sk_gso_max_segs = dst->dev->gso_max_segs;
1407		}
1408	}
1409}
1410EXPORT_SYMBOL_GPL(sk_setup_caps);
1411
1412void __init sk_init(void)
1413{
1414	if (totalram_pages <= 4096) {
1415		sysctl_wmem_max = 32767;
1416		sysctl_rmem_max = 32767;
1417		sysctl_wmem_default = 32767;
1418		sysctl_rmem_default = 32767;
1419	} else if (totalram_pages >= 131072) {
1420		sysctl_wmem_max = 131071;
1421		sysctl_rmem_max = 131071;
1422	}
1423}
1424
1425/*
1426 *	Simple resource managers for sockets.
1427 */
1428
1429
1430/*
1431 * Write buffer destructor automatically called from kfree_skb.
1432 */
1433void sock_wfree(struct sk_buff *skb)
1434{
1435	struct sock *sk = skb->sk;
1436	unsigned int len = skb->truesize;
1437
1438	if (!sock_flag(sk, SOCK_USE_WRITE_QUEUE)) {
1439		/*
1440		 * Keep a reference on sk_wmem_alloc, this will be released
1441		 * after sk_write_space() call
1442		 */
1443		atomic_sub(len - 1, &sk->sk_wmem_alloc);
1444		sk->sk_write_space(sk);
1445		len = 1;
1446	}
1447	/*
1448	 * if sk_wmem_alloc reaches 0, we must finish what sk_free()
1449	 * could not do because of in-flight packets
1450	 */
1451	if (atomic_sub_and_test(len, &sk->sk_wmem_alloc))
1452		__sk_free(sk);
1453}
1454EXPORT_SYMBOL(sock_wfree);
1455
1456/*
1457 * Read buffer destructor automatically called from kfree_skb.
1458 */
1459void sock_rfree(struct sk_buff *skb)
1460{
1461	struct sock *sk = skb->sk;
1462	unsigned int len = skb->truesize;
1463
1464	atomic_sub(len, &sk->sk_rmem_alloc);
1465	sk_mem_uncharge(sk, len);
1466}
1467EXPORT_SYMBOL(sock_rfree);
1468
1469
1470int sock_i_uid(struct sock *sk)
1471{
1472	int uid;
1473
1474	read_lock_bh(&sk->sk_callback_lock);
1475	uid = sk->sk_socket ? SOCK_INODE(sk->sk_socket)->i_uid : 0;
1476	read_unlock_bh(&sk->sk_callback_lock);
1477	return uid;
1478}
1479EXPORT_SYMBOL(sock_i_uid);
1480
1481unsigned long sock_i_ino(struct sock *sk)
1482{
1483	unsigned long ino;
1484
1485	read_lock_bh(&sk->sk_callback_lock);
1486	ino = sk->sk_socket ? SOCK_INODE(sk->sk_socket)->i_ino : 0;
1487	read_unlock_bh(&sk->sk_callback_lock);
1488	return ino;
1489}
1490EXPORT_SYMBOL(sock_i_ino);
1491
1492/*
1493 * Allocate a skb from the socket's send buffer.
1494 */
1495struct sk_buff *sock_wmalloc(struct sock *sk, unsigned long size, int force,
1496			     gfp_t priority)
1497{
1498	if (force || atomic_read(&sk->sk_wmem_alloc) < sk->sk_sndbuf) {
1499		struct sk_buff *skb = alloc_skb(size, priority);
1500		if (skb) {
1501			skb_set_owner_w(skb, sk);
1502			return skb;
1503		}
1504	}
1505	return NULL;
1506}
1507EXPORT_SYMBOL(sock_wmalloc);
1508
1509/*
1510 * Allocate a skb from the socket's receive buffer.
1511 */
1512struct sk_buff *sock_rmalloc(struct sock *sk, unsigned long size, int force,
1513			     gfp_t priority)
1514{
1515	if (force || atomic_read(&sk->sk_rmem_alloc) < sk->sk_rcvbuf) {
1516		struct sk_buff *skb = alloc_skb(size, priority);
1517		if (skb) {
1518			skb_set_owner_r(skb, sk);
1519			return skb;
1520		}
1521	}
1522	return NULL;
1523}
1524
1525/*
1526 * Allocate a memory block from the socket's option memory buffer.
1527 */
1528void *sock_kmalloc(struct sock *sk, int size, gfp_t priority)
1529{
1530	if ((unsigned int)size <= sysctl_optmem_max &&
1531	    atomic_read(&sk->sk_omem_alloc) + size < sysctl_optmem_max) {
1532		void *mem;
1533		/* First do the add, to avoid the race if kmalloc
1534		 * might sleep.
1535		 */
1536		atomic_add(size, &sk->sk_omem_alloc);
1537		mem = kmalloc(size, priority);
1538		if (mem)
1539			return mem;
1540		atomic_sub(size, &sk->sk_omem_alloc);
1541	}
1542	return NULL;
1543}
1544EXPORT_SYMBOL(sock_kmalloc);
1545
1546/*
1547 * Free an option memory block.
1548 */
1549void sock_kfree_s(struct sock *sk, void *mem, int size)
1550{
1551	kfree(mem);
1552	atomic_sub(size, &sk->sk_omem_alloc);
1553}
1554EXPORT_SYMBOL(sock_kfree_s);
1555
1556/* It is almost wait_for_tcp_memory minus release_sock/lock_sock.
1557   I think, these locks should be removed for datagram sockets.
1558 */
1559static long sock_wait_for_wmem(struct sock *sk, long timeo)
1560{
1561	DEFINE_WAIT(wait);
1562
1563	clear_bit(SOCK_ASYNC_NOSPACE, &sk->sk_socket->flags);
1564	for (;;) {
1565		if (!timeo)
1566			break;
1567		if (signal_pending(current))
1568			break;
1569		set_bit(SOCK_NOSPACE, &sk->sk_socket->flags);
1570		prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
1571		if (atomic_read(&sk->sk_wmem_alloc) < sk->sk_sndbuf)
1572			break;
1573		if (sk->sk_shutdown & SEND_SHUTDOWN)
1574			break;
1575		if (sk->sk_err)
1576			break;
1577		timeo = schedule_timeout(timeo);
1578	}
1579	finish_wait(sk_sleep(sk), &wait);
1580	return timeo;
1581}
1582
1583
1584/*
1585 *	Generic send/receive buffer handlers
1586 */
1587
1588struct sk_buff *sock_alloc_send_pskb(struct sock *sk, unsigned long header_len,
1589				     unsigned long data_len, int noblock,
1590				     int *errcode)
1591{
1592	struct sk_buff *skb;
1593	gfp_t gfp_mask;
1594	long timeo;
1595	int err;
1596	int npages = (data_len + (PAGE_SIZE - 1)) >> PAGE_SHIFT;
1597
1598	err = -EMSGSIZE;
1599	if (npages > MAX_SKB_FRAGS)
1600		goto failure;
1601
1602	gfp_mask = sk->sk_allocation;
1603	if (gfp_mask & __GFP_WAIT)
1604		gfp_mask |= __GFP_REPEAT;
1605
1606	timeo = sock_sndtimeo(sk, noblock);
1607	while (1) {
1608		err = sock_error(sk);
1609		if (err != 0)
1610			goto failure;
1611
1612		err = -EPIPE;
1613		if (sk->sk_shutdown & SEND_SHUTDOWN)
1614			goto failure;
1615
1616		if (atomic_read(&sk->sk_wmem_alloc) < sk->sk_sndbuf) {
1617			skb = alloc_skb(header_len, gfp_mask);
1618			if (skb) {
 
1619				int i;
1620
1621				/* No pages, we're done... */
1622				if (!data_len)
1623					break;
1624
 
1625				skb->truesize += data_len;
1626				skb_shinfo(skb)->nr_frags = npages;
1627				for (i = 0; i < npages; i++) {
1628					struct page *page;
 
1629
1630					page = alloc_pages(sk->sk_allocation, 0);
1631					if (!page) {
1632						err = -ENOBUFS;
1633						skb_shinfo(skb)->nr_frags = i;
1634						kfree_skb(skb);
1635						goto failure;
1636					}
1637
1638					__skb_fill_page_desc(skb, i,
1639							page, 0,
1640							(data_len >= PAGE_SIZE ?
1641							 PAGE_SIZE :
1642							 data_len));
 
1643					data_len -= PAGE_SIZE;
1644				}
1645
1646				/* Full success... */
1647				break;
1648			}
1649			err = -ENOBUFS;
1650			goto failure;
1651		}
1652		set_bit(SOCK_ASYNC_NOSPACE, &sk->sk_socket->flags);
1653		set_bit(SOCK_NOSPACE, &sk->sk_socket->flags);
1654		err = -EAGAIN;
1655		if (!timeo)
1656			goto failure;
1657		if (signal_pending(current))
1658			goto interrupted;
1659		timeo = sock_wait_for_wmem(sk, timeo);
1660	}
1661
1662	skb_set_owner_w(skb, sk);
1663	return skb;
1664
1665interrupted:
1666	err = sock_intr_errno(timeo);
1667failure:
1668	*errcode = err;
1669	return NULL;
1670}
1671EXPORT_SYMBOL(sock_alloc_send_pskb);
1672
1673struct sk_buff *sock_alloc_send_skb(struct sock *sk, unsigned long size,
1674				    int noblock, int *errcode)
1675{
1676	return sock_alloc_send_pskb(sk, size, 0, noblock, errcode);
1677}
1678EXPORT_SYMBOL(sock_alloc_send_skb);
1679
1680static void __lock_sock(struct sock *sk)
1681	__releases(&sk->sk_lock.slock)
1682	__acquires(&sk->sk_lock.slock)
1683{
1684	DEFINE_WAIT(wait);
1685
1686	for (;;) {
1687		prepare_to_wait_exclusive(&sk->sk_lock.wq, &wait,
1688					TASK_UNINTERRUPTIBLE);
1689		spin_unlock_bh(&sk->sk_lock.slock);
1690		schedule();
1691		spin_lock_bh(&sk->sk_lock.slock);
1692		if (!sock_owned_by_user(sk))
1693			break;
1694	}
1695	finish_wait(&sk->sk_lock.wq, &wait);
1696}
1697
1698static void __release_sock(struct sock *sk)
1699	__releases(&sk->sk_lock.slock)
1700	__acquires(&sk->sk_lock.slock)
1701{
1702	struct sk_buff *skb = sk->sk_backlog.head;
1703
1704	do {
1705		sk->sk_backlog.head = sk->sk_backlog.tail = NULL;
1706		bh_unlock_sock(sk);
1707
1708		do {
1709			struct sk_buff *next = skb->next;
1710
1711			prefetch(next);
1712			WARN_ON_ONCE(skb_dst_is_noref(skb));
1713			skb->next = NULL;
1714			sk_backlog_rcv(sk, skb);
1715
1716			/*
1717			 * We are in process context here with softirqs
1718			 * disabled, use cond_resched_softirq() to preempt.
1719			 * This is safe to do because we've taken the backlog
1720			 * queue private:
1721			 */
1722			cond_resched_softirq();
1723
1724			skb = next;
1725		} while (skb != NULL);
1726
1727		bh_lock_sock(sk);
1728	} while ((skb = sk->sk_backlog.head) != NULL);
1729
1730	/*
1731	 * Doing the zeroing here guarantee we can not loop forever
1732	 * while a wild producer attempts to flood us.
1733	 */
1734	sk->sk_backlog.len = 0;
1735}
1736
1737/**
1738 * sk_wait_data - wait for data to arrive at sk_receive_queue
1739 * @sk:    sock to wait on
1740 * @timeo: for how long
1741 *
1742 * Now socket state including sk->sk_err is changed only under lock,
1743 * hence we may omit checks after joining wait queue.
1744 * We check receive queue before schedule() only as optimization;
1745 * it is very likely that release_sock() added new data.
1746 */
1747int sk_wait_data(struct sock *sk, long *timeo)
1748{
1749	int rc;
1750	DEFINE_WAIT(wait);
1751
1752	prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
1753	set_bit(SOCK_ASYNC_WAITDATA, &sk->sk_socket->flags);
1754	rc = sk_wait_event(sk, timeo, !skb_queue_empty(&sk->sk_receive_queue));
1755	clear_bit(SOCK_ASYNC_WAITDATA, &sk->sk_socket->flags);
1756	finish_wait(sk_sleep(sk), &wait);
1757	return rc;
1758}
1759EXPORT_SYMBOL(sk_wait_data);
1760
1761/**
1762 *	__sk_mem_schedule - increase sk_forward_alloc and memory_allocated
1763 *	@sk: socket
1764 *	@size: memory size to allocate
1765 *	@kind: allocation type
1766 *
1767 *	If kind is SK_MEM_SEND, it means wmem allocation. Otherwise it means
1768 *	rmem allocation. This function assumes that protocols which have
1769 *	memory_pressure use sk_wmem_queued as write buffer accounting.
1770 */
1771int __sk_mem_schedule(struct sock *sk, int size, int kind)
1772{
1773	struct proto *prot = sk->sk_prot;
1774	int amt = sk_mem_pages(size);
1775	long allocated;
1776	int parent_status = UNDER_LIMIT;
1777
1778	sk->sk_forward_alloc += amt * SK_MEM_QUANTUM;
1779
1780	allocated = sk_memory_allocated_add(sk, amt, &parent_status);
1781
1782	/* Under limit. */
1783	if (parent_status == UNDER_LIMIT &&
1784			allocated <= sk_prot_mem_limits(sk, 0)) {
1785		sk_leave_memory_pressure(sk);
1786		return 1;
1787	}
1788
1789	/* Under pressure. (we or our parents) */
1790	if ((parent_status > SOFT_LIMIT) ||
1791			allocated > sk_prot_mem_limits(sk, 1))
1792		sk_enter_memory_pressure(sk);
1793
1794	/* Over hard limit (we or our parents) */
1795	if ((parent_status == OVER_LIMIT) ||
1796			(allocated > sk_prot_mem_limits(sk, 2)))
1797		goto suppress_allocation;
1798
1799	/* guarantee minimum buffer size under pressure */
1800	if (kind == SK_MEM_RECV) {
1801		if (atomic_read(&sk->sk_rmem_alloc) < prot->sysctl_rmem[0])
1802			return 1;
1803
1804	} else { /* SK_MEM_SEND */
1805		if (sk->sk_type == SOCK_STREAM) {
1806			if (sk->sk_wmem_queued < prot->sysctl_wmem[0])
1807				return 1;
1808		} else if (atomic_read(&sk->sk_wmem_alloc) <
1809			   prot->sysctl_wmem[0])
1810				return 1;
1811	}
1812
1813	if (sk_has_memory_pressure(sk)) {
1814		int alloc;
1815
1816		if (!sk_under_memory_pressure(sk))
1817			return 1;
1818		alloc = sk_sockets_allocated_read_positive(sk);
1819		if (sk_prot_mem_limits(sk, 2) > alloc *
1820		    sk_mem_pages(sk->sk_wmem_queued +
1821				 atomic_read(&sk->sk_rmem_alloc) +
1822				 sk->sk_forward_alloc))
1823			return 1;
1824	}
1825
1826suppress_allocation:
1827
1828	if (kind == SK_MEM_SEND && sk->sk_type == SOCK_STREAM) {
1829		sk_stream_moderate_sndbuf(sk);
1830
1831		/* Fail only if socket is _under_ its sndbuf.
1832		 * In this case we cannot block, so that we have to fail.
1833		 */
1834		if (sk->sk_wmem_queued + size >= sk->sk_sndbuf)
1835			return 1;
1836	}
1837
1838	trace_sock_exceed_buf_limit(sk, prot, allocated);
1839
1840	/* Alas. Undo changes. */
1841	sk->sk_forward_alloc -= amt * SK_MEM_QUANTUM;
1842
1843	sk_memory_allocated_sub(sk, amt);
1844
1845	return 0;
1846}
1847EXPORT_SYMBOL(__sk_mem_schedule);
1848
1849/**
1850 *	__sk_reclaim - reclaim memory_allocated
1851 *	@sk: socket
1852 */
1853void __sk_mem_reclaim(struct sock *sk)
1854{
1855	sk_memory_allocated_sub(sk,
1856				sk->sk_forward_alloc >> SK_MEM_QUANTUM_SHIFT);
 
 
1857	sk->sk_forward_alloc &= SK_MEM_QUANTUM - 1;
1858
1859	if (sk_under_memory_pressure(sk) &&
1860	    (sk_memory_allocated(sk) < sk_prot_mem_limits(sk, 0)))
1861		sk_leave_memory_pressure(sk);
1862}
1863EXPORT_SYMBOL(__sk_mem_reclaim);
1864
1865
1866/*
1867 * Set of default routines for initialising struct proto_ops when
1868 * the protocol does not support a particular function. In certain
1869 * cases where it makes no sense for a protocol to have a "do nothing"
1870 * function, some default processing is provided.
1871 */
1872
1873int sock_no_bind(struct socket *sock, struct sockaddr *saddr, int len)
1874{
1875	return -EOPNOTSUPP;
1876}
1877EXPORT_SYMBOL(sock_no_bind);
1878
1879int sock_no_connect(struct socket *sock, struct sockaddr *saddr,
1880		    int len, int flags)
1881{
1882	return -EOPNOTSUPP;
1883}
1884EXPORT_SYMBOL(sock_no_connect);
1885
1886int sock_no_socketpair(struct socket *sock1, struct socket *sock2)
1887{
1888	return -EOPNOTSUPP;
1889}
1890EXPORT_SYMBOL(sock_no_socketpair);
1891
1892int sock_no_accept(struct socket *sock, struct socket *newsock, int flags)
1893{
1894	return -EOPNOTSUPP;
1895}
1896EXPORT_SYMBOL(sock_no_accept);
1897
1898int sock_no_getname(struct socket *sock, struct sockaddr *saddr,
1899		    int *len, int peer)
1900{
1901	return -EOPNOTSUPP;
1902}
1903EXPORT_SYMBOL(sock_no_getname);
1904
1905unsigned int sock_no_poll(struct file *file, struct socket *sock, poll_table *pt)
1906{
1907	return 0;
1908}
1909EXPORT_SYMBOL(sock_no_poll);
1910
1911int sock_no_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1912{
1913	return -EOPNOTSUPP;
1914}
1915EXPORT_SYMBOL(sock_no_ioctl);
1916
1917int sock_no_listen(struct socket *sock, int backlog)
1918{
1919	return -EOPNOTSUPP;
1920}
1921EXPORT_SYMBOL(sock_no_listen);
1922
1923int sock_no_shutdown(struct socket *sock, int how)
1924{
1925	return -EOPNOTSUPP;
1926}
1927EXPORT_SYMBOL(sock_no_shutdown);
1928
1929int sock_no_setsockopt(struct socket *sock, int level, int optname,
1930		    char __user *optval, unsigned int optlen)
1931{
1932	return -EOPNOTSUPP;
1933}
1934EXPORT_SYMBOL(sock_no_setsockopt);
1935
1936int sock_no_getsockopt(struct socket *sock, int level, int optname,
1937		    char __user *optval, int __user *optlen)
1938{
1939	return -EOPNOTSUPP;
1940}
1941EXPORT_SYMBOL(sock_no_getsockopt);
1942
1943int sock_no_sendmsg(struct kiocb *iocb, struct socket *sock, struct msghdr *m,
1944		    size_t len)
1945{
1946	return -EOPNOTSUPP;
1947}
1948EXPORT_SYMBOL(sock_no_sendmsg);
1949
1950int sock_no_recvmsg(struct kiocb *iocb, struct socket *sock, struct msghdr *m,
1951		    size_t len, int flags)
1952{
1953	return -EOPNOTSUPP;
1954}
1955EXPORT_SYMBOL(sock_no_recvmsg);
1956
1957int sock_no_mmap(struct file *file, struct socket *sock, struct vm_area_struct *vma)
1958{
1959	/* Mirror missing mmap method error code */
1960	return -ENODEV;
1961}
1962EXPORT_SYMBOL(sock_no_mmap);
1963
1964ssize_t sock_no_sendpage(struct socket *sock, struct page *page, int offset, size_t size, int flags)
1965{
1966	ssize_t res;
1967	struct msghdr msg = {.msg_flags = flags};
1968	struct kvec iov;
1969	char *kaddr = kmap(page);
1970	iov.iov_base = kaddr + offset;
1971	iov.iov_len = size;
1972	res = kernel_sendmsg(sock, &msg, &iov, 1, size);
1973	kunmap(page);
1974	return res;
1975}
1976EXPORT_SYMBOL(sock_no_sendpage);
1977
1978/*
1979 *	Default Socket Callbacks
1980 */
1981
1982static void sock_def_wakeup(struct sock *sk)
1983{
1984	struct socket_wq *wq;
1985
1986	rcu_read_lock();
1987	wq = rcu_dereference(sk->sk_wq);
1988	if (wq_has_sleeper(wq))
1989		wake_up_interruptible_all(&wq->wait);
1990	rcu_read_unlock();
1991}
1992
1993static void sock_def_error_report(struct sock *sk)
1994{
1995	struct socket_wq *wq;
1996
1997	rcu_read_lock();
1998	wq = rcu_dereference(sk->sk_wq);
1999	if (wq_has_sleeper(wq))
2000		wake_up_interruptible_poll(&wq->wait, POLLERR);
2001	sk_wake_async(sk, SOCK_WAKE_IO, POLL_ERR);
2002	rcu_read_unlock();
2003}
2004
2005static void sock_def_readable(struct sock *sk, int len)
2006{
2007	struct socket_wq *wq;
2008
2009	rcu_read_lock();
2010	wq = rcu_dereference(sk->sk_wq);
2011	if (wq_has_sleeper(wq))
2012		wake_up_interruptible_sync_poll(&wq->wait, POLLIN | POLLPRI |
2013						POLLRDNORM | POLLRDBAND);
2014	sk_wake_async(sk, SOCK_WAKE_WAITD, POLL_IN);
2015	rcu_read_unlock();
2016}
2017
2018static void sock_def_write_space(struct sock *sk)
2019{
2020	struct socket_wq *wq;
2021
2022	rcu_read_lock();
2023
2024	/* Do not wake up a writer until he can make "significant"
2025	 * progress.  --DaveM
2026	 */
2027	if ((atomic_read(&sk->sk_wmem_alloc) << 1) <= sk->sk_sndbuf) {
2028		wq = rcu_dereference(sk->sk_wq);
2029		if (wq_has_sleeper(wq))
2030			wake_up_interruptible_sync_poll(&wq->wait, POLLOUT |
2031						POLLWRNORM | POLLWRBAND);
2032
2033		/* Should agree with poll, otherwise some programs break */
2034		if (sock_writeable(sk))
2035			sk_wake_async(sk, SOCK_WAKE_SPACE, POLL_OUT);
2036	}
2037
2038	rcu_read_unlock();
2039}
2040
2041static void sock_def_destruct(struct sock *sk)
2042{
2043	kfree(sk->sk_protinfo);
2044}
2045
2046void sk_send_sigurg(struct sock *sk)
2047{
2048	if (sk->sk_socket && sk->sk_socket->file)
2049		if (send_sigurg(&sk->sk_socket->file->f_owner))
2050			sk_wake_async(sk, SOCK_WAKE_URG, POLL_PRI);
2051}
2052EXPORT_SYMBOL(sk_send_sigurg);
2053
2054void sk_reset_timer(struct sock *sk, struct timer_list* timer,
2055		    unsigned long expires)
2056{
2057	if (!mod_timer(timer, expires))
2058		sock_hold(sk);
2059}
2060EXPORT_SYMBOL(sk_reset_timer);
2061
2062void sk_stop_timer(struct sock *sk, struct timer_list* timer)
2063{
2064	if (timer_pending(timer) && del_timer(timer))
2065		__sock_put(sk);
2066}
2067EXPORT_SYMBOL(sk_stop_timer);
2068
2069void sock_init_data(struct socket *sock, struct sock *sk)
2070{
2071	skb_queue_head_init(&sk->sk_receive_queue);
2072	skb_queue_head_init(&sk->sk_write_queue);
2073	skb_queue_head_init(&sk->sk_error_queue);
2074#ifdef CONFIG_NET_DMA
2075	skb_queue_head_init(&sk->sk_async_wait_queue);
2076#endif
2077
2078	sk->sk_send_head	=	NULL;
2079
2080	init_timer(&sk->sk_timer);
2081
2082	sk->sk_allocation	=	GFP_KERNEL;
2083	sk->sk_rcvbuf		=	sysctl_rmem_default;
2084	sk->sk_sndbuf		=	sysctl_wmem_default;
2085	sk->sk_state		=	TCP_CLOSE;
2086	sk_set_socket(sk, sock);
2087
2088	sock_set_flag(sk, SOCK_ZAPPED);
2089
2090	if (sock) {
2091		sk->sk_type	=	sock->type;
2092		sk->sk_wq	=	sock->wq;
2093		sock->sk	=	sk;
2094	} else
2095		sk->sk_wq	=	NULL;
2096
2097	spin_lock_init(&sk->sk_dst_lock);
2098	rwlock_init(&sk->sk_callback_lock);
2099	lockdep_set_class_and_name(&sk->sk_callback_lock,
2100			af_callback_keys + sk->sk_family,
2101			af_family_clock_key_strings[sk->sk_family]);
2102
2103	sk->sk_state_change	=	sock_def_wakeup;
2104	sk->sk_data_ready	=	sock_def_readable;
2105	sk->sk_write_space	=	sock_def_write_space;
2106	sk->sk_error_report	=	sock_def_error_report;
2107	sk->sk_destruct		=	sock_def_destruct;
2108
2109	sk->sk_sndmsg_page	=	NULL;
2110	sk->sk_sndmsg_off	=	0;
2111	sk->sk_peek_off		=	-1;
2112
2113	sk->sk_peer_pid 	=	NULL;
2114	sk->sk_peer_cred	=	NULL;
2115	sk->sk_write_pending	=	0;
2116	sk->sk_rcvlowat		=	1;
2117	sk->sk_rcvtimeo		=	MAX_SCHEDULE_TIMEOUT;
2118	sk->sk_sndtimeo		=	MAX_SCHEDULE_TIMEOUT;
2119
2120	sk->sk_stamp = ktime_set(-1L, 0);
2121
2122	/*
2123	 * Before updating sk_refcnt, we must commit prior changes to memory
2124	 * (Documentation/RCU/rculist_nulls.txt for details)
2125	 */
2126	smp_wmb();
2127	atomic_set(&sk->sk_refcnt, 1);
2128	atomic_set(&sk->sk_drops, 0);
2129}
2130EXPORT_SYMBOL(sock_init_data);
2131
2132void lock_sock_nested(struct sock *sk, int subclass)
2133{
2134	might_sleep();
2135	spin_lock_bh(&sk->sk_lock.slock);
2136	if (sk->sk_lock.owned)
2137		__lock_sock(sk);
2138	sk->sk_lock.owned = 1;
2139	spin_unlock(&sk->sk_lock.slock);
2140	/*
2141	 * The sk_lock has mutex_lock() semantics here:
2142	 */
2143	mutex_acquire(&sk->sk_lock.dep_map, subclass, 0, _RET_IP_);
2144	local_bh_enable();
2145}
2146EXPORT_SYMBOL(lock_sock_nested);
2147
2148void release_sock(struct sock *sk)
2149{
2150	/*
2151	 * The sk_lock has mutex_unlock() semantics:
2152	 */
2153	mutex_release(&sk->sk_lock.dep_map, 1, _RET_IP_);
2154
2155	spin_lock_bh(&sk->sk_lock.slock);
2156	if (sk->sk_backlog.tail)
2157		__release_sock(sk);
2158	sk->sk_lock.owned = 0;
2159	if (waitqueue_active(&sk->sk_lock.wq))
2160		wake_up(&sk->sk_lock.wq);
2161	spin_unlock_bh(&sk->sk_lock.slock);
2162}
2163EXPORT_SYMBOL(release_sock);
2164
2165/**
2166 * lock_sock_fast - fast version of lock_sock
2167 * @sk: socket
2168 *
2169 * This version should be used for very small section, where process wont block
2170 * return false if fast path is taken
2171 *   sk_lock.slock locked, owned = 0, BH disabled
2172 * return true if slow path is taken
2173 *   sk_lock.slock unlocked, owned = 1, BH enabled
2174 */
2175bool lock_sock_fast(struct sock *sk)
2176{
2177	might_sleep();
2178	spin_lock_bh(&sk->sk_lock.slock);
2179
2180	if (!sk->sk_lock.owned)
2181		/*
2182		 * Note : We must disable BH
2183		 */
2184		return false;
2185
2186	__lock_sock(sk);
2187	sk->sk_lock.owned = 1;
2188	spin_unlock(&sk->sk_lock.slock);
2189	/*
2190	 * The sk_lock has mutex_lock() semantics here:
2191	 */
2192	mutex_acquire(&sk->sk_lock.dep_map, 0, 0, _RET_IP_);
2193	local_bh_enable();
2194	return true;
2195}
2196EXPORT_SYMBOL(lock_sock_fast);
2197
2198int sock_get_timestamp(struct sock *sk, struct timeval __user *userstamp)
2199{
2200	struct timeval tv;
2201	if (!sock_flag(sk, SOCK_TIMESTAMP))
2202		sock_enable_timestamp(sk, SOCK_TIMESTAMP);
2203	tv = ktime_to_timeval(sk->sk_stamp);
2204	if (tv.tv_sec == -1)
2205		return -ENOENT;
2206	if (tv.tv_sec == 0) {
2207		sk->sk_stamp = ktime_get_real();
2208		tv = ktime_to_timeval(sk->sk_stamp);
2209	}
2210	return copy_to_user(userstamp, &tv, sizeof(tv)) ? -EFAULT : 0;
2211}
2212EXPORT_SYMBOL(sock_get_timestamp);
2213
2214int sock_get_timestampns(struct sock *sk, struct timespec __user *userstamp)
2215{
2216	struct timespec ts;
2217	if (!sock_flag(sk, SOCK_TIMESTAMP))
2218		sock_enable_timestamp(sk, SOCK_TIMESTAMP);
2219	ts = ktime_to_timespec(sk->sk_stamp);
2220	if (ts.tv_sec == -1)
2221		return -ENOENT;
2222	if (ts.tv_sec == 0) {
2223		sk->sk_stamp = ktime_get_real();
2224		ts = ktime_to_timespec(sk->sk_stamp);
2225	}
2226	return copy_to_user(userstamp, &ts, sizeof(ts)) ? -EFAULT : 0;
2227}
2228EXPORT_SYMBOL(sock_get_timestampns);
2229
2230void sock_enable_timestamp(struct sock *sk, int flag)
2231{
2232	if (!sock_flag(sk, flag)) {
2233		unsigned long previous_flags = sk->sk_flags;
2234
2235		sock_set_flag(sk, flag);
2236		/*
2237		 * we just set one of the two flags which require net
2238		 * time stamping, but time stamping might have been on
2239		 * already because of the other one
2240		 */
2241		if (!(previous_flags & SK_FLAGS_TIMESTAMP))
 
 
 
2242			net_enable_timestamp();
2243	}
2244}
2245
2246/*
2247 *	Get a socket option on an socket.
2248 *
2249 *	FIX: POSIX 1003.1g is very ambiguous here. It states that
2250 *	asynchronous errors should be reported by getsockopt. We assume
2251 *	this means if you specify SO_ERROR (otherwise whats the point of it).
2252 */
2253int sock_common_getsockopt(struct socket *sock, int level, int optname,
2254			   char __user *optval, int __user *optlen)
2255{
2256	struct sock *sk = sock->sk;
2257
2258	return sk->sk_prot->getsockopt(sk, level, optname, optval, optlen);
2259}
2260EXPORT_SYMBOL(sock_common_getsockopt);
2261
2262#ifdef CONFIG_COMPAT
2263int compat_sock_common_getsockopt(struct socket *sock, int level, int optname,
2264				  char __user *optval, int __user *optlen)
2265{
2266	struct sock *sk = sock->sk;
2267
2268	if (sk->sk_prot->compat_getsockopt != NULL)
2269		return sk->sk_prot->compat_getsockopt(sk, level, optname,
2270						      optval, optlen);
2271	return sk->sk_prot->getsockopt(sk, level, optname, optval, optlen);
2272}
2273EXPORT_SYMBOL(compat_sock_common_getsockopt);
2274#endif
2275
2276int sock_common_recvmsg(struct kiocb *iocb, struct socket *sock,
2277			struct msghdr *msg, size_t size, int flags)
2278{
2279	struct sock *sk = sock->sk;
2280	int addr_len = 0;
2281	int err;
2282
2283	err = sk->sk_prot->recvmsg(iocb, sk, msg, size, flags & MSG_DONTWAIT,
2284				   flags & ~MSG_DONTWAIT, &addr_len);
2285	if (err >= 0)
2286		msg->msg_namelen = addr_len;
2287	return err;
2288}
2289EXPORT_SYMBOL(sock_common_recvmsg);
2290
2291/*
2292 *	Set socket options on an inet socket.
2293 */
2294int sock_common_setsockopt(struct socket *sock, int level, int optname,
2295			   char __user *optval, unsigned int optlen)
2296{
2297	struct sock *sk = sock->sk;
2298
2299	return sk->sk_prot->setsockopt(sk, level, optname, optval, optlen);
2300}
2301EXPORT_SYMBOL(sock_common_setsockopt);
2302
2303#ifdef CONFIG_COMPAT
2304int compat_sock_common_setsockopt(struct socket *sock, int level, int optname,
2305				  char __user *optval, unsigned int optlen)
2306{
2307	struct sock *sk = sock->sk;
2308
2309	if (sk->sk_prot->compat_setsockopt != NULL)
2310		return sk->sk_prot->compat_setsockopt(sk, level, optname,
2311						      optval, optlen);
2312	return sk->sk_prot->setsockopt(sk, level, optname, optval, optlen);
2313}
2314EXPORT_SYMBOL(compat_sock_common_setsockopt);
2315#endif
2316
2317void sk_common_release(struct sock *sk)
2318{
2319	if (sk->sk_prot->destroy)
2320		sk->sk_prot->destroy(sk);
2321
2322	/*
2323	 * Observation: when sock_common_release is called, processes have
2324	 * no access to socket. But net still has.
2325	 * Step one, detach it from networking:
2326	 *
2327	 * A. Remove from hash tables.
2328	 */
2329
2330	sk->sk_prot->unhash(sk);
2331
2332	/*
2333	 * In this point socket cannot receive new packets, but it is possible
2334	 * that some packets are in flight because some CPU runs receiver and
2335	 * did hash table lookup before we unhashed socket. They will achieve
2336	 * receive queue and will be purged by socket destructor.
2337	 *
2338	 * Also we still have packets pending on receive queue and probably,
2339	 * our own packets waiting in device queues. sock_destroy will drain
2340	 * receive queue, but transmitted packets will delay socket destruction
2341	 * until the last reference will be released.
2342	 */
2343
2344	sock_orphan(sk);
2345
2346	xfrm_sk_free_policy(sk);
2347
2348	sk_refcnt_debug_release(sk);
2349	sock_put(sk);
2350}
2351EXPORT_SYMBOL(sk_common_release);
2352
 
 
 
2353#ifdef CONFIG_PROC_FS
2354#define PROTO_INUSE_NR	64	/* should be enough for the first time */
2355struct prot_inuse {
2356	int val[PROTO_INUSE_NR];
2357};
2358
2359static DECLARE_BITMAP(proto_inuse_idx, PROTO_INUSE_NR);
2360
2361#ifdef CONFIG_NET_NS
2362void sock_prot_inuse_add(struct net *net, struct proto *prot, int val)
2363{
2364	__this_cpu_add(net->core.inuse->val[prot->inuse_idx], val);
2365}
2366EXPORT_SYMBOL_GPL(sock_prot_inuse_add);
2367
2368int sock_prot_inuse_get(struct net *net, struct proto *prot)
2369{
2370	int cpu, idx = prot->inuse_idx;
2371	int res = 0;
2372
2373	for_each_possible_cpu(cpu)
2374		res += per_cpu_ptr(net->core.inuse, cpu)->val[idx];
2375
2376	return res >= 0 ? res : 0;
2377}
2378EXPORT_SYMBOL_GPL(sock_prot_inuse_get);
2379
2380static int __net_init sock_inuse_init_net(struct net *net)
2381{
2382	net->core.inuse = alloc_percpu(struct prot_inuse);
2383	return net->core.inuse ? 0 : -ENOMEM;
2384}
2385
2386static void __net_exit sock_inuse_exit_net(struct net *net)
2387{
2388	free_percpu(net->core.inuse);
2389}
2390
2391static struct pernet_operations net_inuse_ops = {
2392	.init = sock_inuse_init_net,
2393	.exit = sock_inuse_exit_net,
2394};
2395
2396static __init int net_inuse_init(void)
2397{
2398	if (register_pernet_subsys(&net_inuse_ops))
2399		panic("Cannot initialize net inuse counters");
2400
2401	return 0;
2402}
2403
2404core_initcall(net_inuse_init);
2405#else
2406static DEFINE_PER_CPU(struct prot_inuse, prot_inuse);
2407
2408void sock_prot_inuse_add(struct net *net, struct proto *prot, int val)
2409{
2410	__this_cpu_add(prot_inuse.val[prot->inuse_idx], val);
2411}
2412EXPORT_SYMBOL_GPL(sock_prot_inuse_add);
2413
2414int sock_prot_inuse_get(struct net *net, struct proto *prot)
2415{
2416	int cpu, idx = prot->inuse_idx;
2417	int res = 0;
2418
2419	for_each_possible_cpu(cpu)
2420		res += per_cpu(prot_inuse, cpu).val[idx];
2421
2422	return res >= 0 ? res : 0;
2423}
2424EXPORT_SYMBOL_GPL(sock_prot_inuse_get);
2425#endif
2426
2427static void assign_proto_idx(struct proto *prot)
2428{
2429	prot->inuse_idx = find_first_zero_bit(proto_inuse_idx, PROTO_INUSE_NR);
2430
2431	if (unlikely(prot->inuse_idx == PROTO_INUSE_NR - 1)) {
2432		pr_err("PROTO_INUSE_NR exhausted\n");
2433		return;
2434	}
2435
2436	set_bit(prot->inuse_idx, proto_inuse_idx);
2437}
2438
2439static void release_proto_idx(struct proto *prot)
2440{
2441	if (prot->inuse_idx != PROTO_INUSE_NR - 1)
2442		clear_bit(prot->inuse_idx, proto_inuse_idx);
2443}
2444#else
2445static inline void assign_proto_idx(struct proto *prot)
2446{
2447}
2448
2449static inline void release_proto_idx(struct proto *prot)
2450{
2451}
2452#endif
2453
2454int proto_register(struct proto *prot, int alloc_slab)
2455{
2456	if (alloc_slab) {
2457		prot->slab = kmem_cache_create(prot->name, prot->obj_size, 0,
2458					SLAB_HWCACHE_ALIGN | prot->slab_flags,
2459					NULL);
2460
2461		if (prot->slab == NULL) {
2462			pr_crit("%s: Can't create sock SLAB cache!\n",
2463				prot->name);
2464			goto out;
2465		}
2466
2467		if (prot->rsk_prot != NULL) {
2468			prot->rsk_prot->slab_name = kasprintf(GFP_KERNEL, "request_sock_%s", prot->name);
2469			if (prot->rsk_prot->slab_name == NULL)
2470				goto out_free_sock_slab;
2471
2472			prot->rsk_prot->slab = kmem_cache_create(prot->rsk_prot->slab_name,
2473								 prot->rsk_prot->obj_size, 0,
2474								 SLAB_HWCACHE_ALIGN, NULL);
2475
2476			if (prot->rsk_prot->slab == NULL) {
2477				pr_crit("%s: Can't create request sock SLAB cache!\n",
2478					prot->name);
2479				goto out_free_request_sock_slab_name;
2480			}
2481		}
2482
2483		if (prot->twsk_prot != NULL) {
2484			prot->twsk_prot->twsk_slab_name = kasprintf(GFP_KERNEL, "tw_sock_%s", prot->name);
2485
2486			if (prot->twsk_prot->twsk_slab_name == NULL)
2487				goto out_free_request_sock_slab;
2488
2489			prot->twsk_prot->twsk_slab =
2490				kmem_cache_create(prot->twsk_prot->twsk_slab_name,
2491						  prot->twsk_prot->twsk_obj_size,
2492						  0,
2493						  SLAB_HWCACHE_ALIGN |
2494							prot->slab_flags,
2495						  NULL);
2496			if (prot->twsk_prot->twsk_slab == NULL)
2497				goto out_free_timewait_sock_slab_name;
2498		}
2499	}
2500
2501	mutex_lock(&proto_list_mutex);
2502	list_add(&prot->node, &proto_list);
2503	assign_proto_idx(prot);
2504	mutex_unlock(&proto_list_mutex);
2505	return 0;
2506
2507out_free_timewait_sock_slab_name:
2508	kfree(prot->twsk_prot->twsk_slab_name);
2509out_free_request_sock_slab:
2510	if (prot->rsk_prot && prot->rsk_prot->slab) {
2511		kmem_cache_destroy(prot->rsk_prot->slab);
2512		prot->rsk_prot->slab = NULL;
2513	}
2514out_free_request_sock_slab_name:
2515	if (prot->rsk_prot)
2516		kfree(prot->rsk_prot->slab_name);
2517out_free_sock_slab:
2518	kmem_cache_destroy(prot->slab);
2519	prot->slab = NULL;
2520out:
2521	return -ENOBUFS;
2522}
2523EXPORT_SYMBOL(proto_register);
2524
2525void proto_unregister(struct proto *prot)
2526{
2527	mutex_lock(&proto_list_mutex);
2528	release_proto_idx(prot);
2529	list_del(&prot->node);
2530	mutex_unlock(&proto_list_mutex);
2531
2532	if (prot->slab != NULL) {
2533		kmem_cache_destroy(prot->slab);
2534		prot->slab = NULL;
2535	}
2536
2537	if (prot->rsk_prot != NULL && prot->rsk_prot->slab != NULL) {
2538		kmem_cache_destroy(prot->rsk_prot->slab);
2539		kfree(prot->rsk_prot->slab_name);
2540		prot->rsk_prot->slab = NULL;
2541	}
2542
2543	if (prot->twsk_prot != NULL && prot->twsk_prot->twsk_slab != NULL) {
2544		kmem_cache_destroy(prot->twsk_prot->twsk_slab);
2545		kfree(prot->twsk_prot->twsk_slab_name);
2546		prot->twsk_prot->twsk_slab = NULL;
2547	}
2548}
2549EXPORT_SYMBOL(proto_unregister);
2550
2551#ifdef CONFIG_PROC_FS
2552static void *proto_seq_start(struct seq_file *seq, loff_t *pos)
2553	__acquires(proto_list_mutex)
2554{
2555	mutex_lock(&proto_list_mutex);
2556	return seq_list_start_head(&proto_list, *pos);
2557}
2558
2559static void *proto_seq_next(struct seq_file *seq, void *v, loff_t *pos)
2560{
2561	return seq_list_next(v, &proto_list, pos);
2562}
2563
2564static void proto_seq_stop(struct seq_file *seq, void *v)
2565	__releases(proto_list_mutex)
2566{
2567	mutex_unlock(&proto_list_mutex);
2568}
2569
2570static char proto_method_implemented(const void *method)
2571{
2572	return method == NULL ? 'n' : 'y';
2573}
2574static long sock_prot_memory_allocated(struct proto *proto)
2575{
2576	return proto->memory_allocated != NULL ? proto_memory_allocated(proto) : -1L;
2577}
2578
2579static char *sock_prot_memory_pressure(struct proto *proto)
2580{
2581	return proto->memory_pressure != NULL ?
2582	proto_memory_pressure(proto) ? "yes" : "no" : "NI";
2583}
2584
2585static void proto_seq_printf(struct seq_file *seq, struct proto *proto)
2586{
2587
2588	seq_printf(seq, "%-9s %4u %6d  %6ld   %-3s %6u   %-3s  %-10s "
2589			"%2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c %2c\n",
2590		   proto->name,
2591		   proto->obj_size,
2592		   sock_prot_inuse_get(seq_file_net(seq), proto),
2593		   sock_prot_memory_allocated(proto),
2594		   sock_prot_memory_pressure(proto),
2595		   proto->max_header,
2596		   proto->slab == NULL ? "no" : "yes",
2597		   module_name(proto->owner),
2598		   proto_method_implemented(proto->close),
2599		   proto_method_implemented(proto->connect),
2600		   proto_method_implemented(proto->disconnect),
2601		   proto_method_implemented(proto->accept),
2602		   proto_method_implemented(proto->ioctl),
2603		   proto_method_implemented(proto->init),
2604		   proto_method_implemented(proto->destroy),
2605		   proto_method_implemented(proto->shutdown),
2606		   proto_method_implemented(proto->setsockopt),
2607		   proto_method_implemented(proto->getsockopt),
2608		   proto_method_implemented(proto->sendmsg),
2609		   proto_method_implemented(proto->recvmsg),
2610		   proto_method_implemented(proto->sendpage),
2611		   proto_method_implemented(proto->bind),
2612		   proto_method_implemented(proto->backlog_rcv),
2613		   proto_method_implemented(proto->hash),
2614		   proto_method_implemented(proto->unhash),
2615		   proto_method_implemented(proto->get_port),
2616		   proto_method_implemented(proto->enter_memory_pressure));
2617}
2618
2619static int proto_seq_show(struct seq_file *seq, void *v)
2620{
2621	if (v == &proto_list)
2622		seq_printf(seq, "%-9s %-4s %-8s %-6s %-5s %-7s %-4s %-10s %s",
2623			   "protocol",
2624			   "size",
2625			   "sockets",
2626			   "memory",
2627			   "press",
2628			   "maxhdr",
2629			   "slab",
2630			   "module",
2631			   "cl co di ac io in de sh ss gs se re sp bi br ha uh gp em\n");
2632	else
2633		proto_seq_printf(seq, list_entry(v, struct proto, node));
2634	return 0;
2635}
2636
2637static const struct seq_operations proto_seq_ops = {
2638	.start  = proto_seq_start,
2639	.next   = proto_seq_next,
2640	.stop   = proto_seq_stop,
2641	.show   = proto_seq_show,
2642};
2643
2644static int proto_seq_open(struct inode *inode, struct file *file)
2645{
2646	return seq_open_net(inode, file, &proto_seq_ops,
2647			    sizeof(struct seq_net_private));
2648}
2649
2650static const struct file_operations proto_seq_fops = {
2651	.owner		= THIS_MODULE,
2652	.open		= proto_seq_open,
2653	.read		= seq_read,
2654	.llseek		= seq_lseek,
2655	.release	= seq_release_net,
2656};
2657
2658static __net_init int proto_init_net(struct net *net)
2659{
2660	if (!proc_net_fops_create(net, "protocols", S_IRUGO, &proto_seq_fops))
2661		return -ENOMEM;
2662
2663	return 0;
2664}
2665
2666static __net_exit void proto_exit_net(struct net *net)
2667{
2668	proc_net_remove(net, "protocols");
2669}
2670
2671
2672static __net_initdata struct pernet_operations proto_net_ops = {
2673	.init = proto_init_net,
2674	.exit = proto_exit_net,
2675};
2676
2677static int __init proto_init(void)
2678{
2679	return register_pernet_subsys(&proto_net_ops);
2680}
2681
2682subsys_initcall(proto_init);
2683
2684#endif /* PROC_FS */