Linux Audio

Check our new training course

Loading...
v3.15
 
   1/*
   2 *	IPv6 BSD socket options interface
   3 *	Linux INET6 implementation
   4 *
   5 *	Authors:
   6 *	Pedro Roque		<roque@di.fc.ul.pt>
   7 *
   8 *	Based on linux/net/ipv4/ip_sockglue.c
   9 *
  10 *	This program is free software; you can redistribute it and/or
  11 *      modify it under the terms of the GNU General Public License
  12 *      as published by the Free Software Foundation; either version
  13 *      2 of the License, or (at your option) any later version.
  14 *
  15 *	FIXME: Make the setsockopt code POSIX compliant: That is
  16 *
  17 *	o	Truncate getsockopt returns
  18 *	o	Return an optlen of the truncated length if need be
  19 *
  20 *	Changes:
  21 *	David L Stevens <dlstevens@us.ibm.com>:
  22 *		- added multicast source filtering API for MLDv2
  23 */
  24
  25#include <linux/module.h>
  26#include <linux/capability.h>
  27#include <linux/errno.h>
  28#include <linux/types.h>
  29#include <linux/socket.h>
  30#include <linux/sockios.h>
  31#include <linux/net.h>
  32#include <linux/in6.h>
  33#include <linux/mroute6.h>
  34#include <linux/netdevice.h>
  35#include <linux/if_arp.h>
  36#include <linux/init.h>
  37#include <linux/sysctl.h>
  38#include <linux/netfilter.h>
  39#include <linux/slab.h>
  40
  41#include <net/sock.h>
  42#include <net/snmp.h>
  43#include <net/ipv6.h>
  44#include <net/ndisc.h>
  45#include <net/protocol.h>
  46#include <net/transp_v6.h>
  47#include <net/ip6_route.h>
  48#include <net/addrconf.h>
  49#include <net/inet_common.h>
  50#include <net/tcp.h>
  51#include <net/udp.h>
  52#include <net/udplite.h>
  53#include <net/xfrm.h>
  54#include <net/compat.h>
 
  55
  56#include <asm/uaccess.h>
  57
  58struct ip6_ra_chain *ip6_ra_chain;
  59DEFINE_RWLOCK(ip6_ra_lock);
  60
 
 
  61int ip6_ra_control(struct sock *sk, int sel)
  62{
  63	struct ip6_ra_chain *ra, *new_ra, **rap;
  64
  65	/* RA packet may be delivered ONLY to IPPROTO_RAW socket */
  66	if (sk->sk_type != SOCK_RAW || inet_sk(sk)->inet_num != IPPROTO_RAW)
  67		return -ENOPROTOOPT;
  68
  69	new_ra = (sel>=0) ? kmalloc(sizeof(*new_ra), GFP_KERNEL) : NULL;
 
 
  70
  71	write_lock_bh(&ip6_ra_lock);
  72	for (rap = &ip6_ra_chain; (ra=*rap) != NULL; rap = &ra->next) {
  73		if (ra->sk == sk) {
  74			if (sel>=0) {
  75				write_unlock_bh(&ip6_ra_lock);
  76				kfree(new_ra);
  77				return -EADDRINUSE;
  78			}
  79
  80			*rap = ra->next;
  81			write_unlock_bh(&ip6_ra_lock);
  82
  83			sock_put(sk);
  84			kfree(ra);
  85			return 0;
  86		}
  87	}
  88	if (new_ra == NULL) {
  89		write_unlock_bh(&ip6_ra_lock);
  90		return -ENOBUFS;
  91	}
  92	new_ra->sk = sk;
  93	new_ra->sel = sel;
  94	new_ra->next = ra;
  95	*rap = new_ra;
  96	sock_hold(sk);
  97	write_unlock_bh(&ip6_ra_lock);
  98	return 0;
  99}
 100
 101static
 102struct ipv6_txoptions *ipv6_update_options(struct sock *sk,
 103					   struct ipv6_txoptions *opt)
 104{
 105	if (inet_sk(sk)->is_icsk) {
 106		if (opt &&
 107		    !((1 << sk->sk_state) & (TCPF_LISTEN | TCPF_CLOSE)) &&
 108		    inet_sk(sk)->inet_daddr != LOOPBACK4_IPV6) {
 109			struct inet_connection_sock *icsk = inet_csk(sk);
 110			icsk->icsk_ext_hdr_len = opt->opt_flen + opt->opt_nflen;
 111			icsk->icsk_sync_mss(sk, icsk->icsk_pmtu_cookie);
 112		}
 113		opt = xchg(&inet6_sk(sk)->opt, opt);
 114	} else {
 115		spin_lock(&sk->sk_dst_lock);
 116		opt = xchg(&inet6_sk(sk)->opt, opt);
 117		spin_unlock(&sk->sk_dst_lock);
 118	}
 
 
 119	sk_dst_reset(sk);
 120
 121	return opt;
 122}
 123
 124static int do_ipv6_setsockopt(struct sock *sk, int level, int optname,
 125		    char __user *optval, unsigned int optlen)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 126{
 127	struct ipv6_pinfo *np = inet6_sk(sk);
 128	struct net *net = sock_net(sk);
 129	int val, valbool;
 130	int retv = -ENOPROTOOPT;
 
 131
 132	if (optval == NULL)
 133		val=0;
 134	else {
 135		if (optlen >= sizeof(int)) {
 136			if (get_user(val, (int __user *) optval))
 137				return -EFAULT;
 138		} else
 139			val = 0;
 140	}
 141
 142	valbool = (val!=0);
 143
 144	if (ip6_mroute_opt(optname))
 145		return ip6_mroute_setsockopt(sk, optname, optval, optlen);
 146
 147	lock_sock(sk);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 148
 149	switch (optname) {
 150
 151	case IPV6_ADDRFORM:
 152		if (optlen < sizeof(int))
 153			goto e_inval;
 154		if (val == PF_INET) {
 155			struct ipv6_txoptions *opt;
 156			struct sk_buff *pktopt;
 157
 158			if (sk->sk_type == SOCK_RAW)
 159				break;
 160
 161			if (sk->sk_protocol == IPPROTO_UDP ||
 162			    sk->sk_protocol == IPPROTO_UDPLITE) {
 163				struct udp_sock *up = udp_sk(sk);
 164				if (up->pending == AF_INET6) {
 165					retv = -EBUSY;
 166					break;
 167				}
 168			} else if (sk->sk_protocol != IPPROTO_TCP)
 
 
 
 
 
 169				break;
 
 170
 171			if (sk->sk_state != TCP_ESTABLISHED) {
 172				retv = -ENOTCONN;
 173				break;
 174			}
 175
 176			if (ipv6_only_sock(sk) ||
 177			    !ipv6_addr_v4mapped(&sk->sk_v6_daddr)) {
 178				retv = -EADDRNOTAVAIL;
 179				break;
 180			}
 181
 182			fl6_free_socklist(sk);
 183			ipv6_sock_mc_close(sk);
 184
 185			/*
 186			 * Sock is moving from IPv6 to IPv4 (sk_prot), so
 187			 * remove it from the refcnt debug socks count in the
 188			 * original family...
 189			 */
 190			sk_refcnt_debug_dec(sk);
 191
 192			if (sk->sk_protocol == IPPROTO_TCP) {
 193				struct inet_connection_sock *icsk = inet_csk(sk);
 194				local_bh_disable();
 195				sock_prot_inuse_add(net, sk->sk_prot, -1);
 196				sock_prot_inuse_add(net, &tcp_prot, 1);
 197				local_bh_enable();
 198				sk->sk_prot = &tcp_prot;
 199				icsk->icsk_af_ops = &ipv4_specific;
 200				sk->sk_socket->ops = &inet_stream_ops;
 201				sk->sk_family = PF_INET;
 
 
 202				tcp_sync_mss(sk, icsk->icsk_pmtu_cookie);
 203			} else {
 204				struct proto *prot = &udp_prot;
 205
 206				if (sk->sk_protocol == IPPROTO_UDPLITE)
 207					prot = &udplite_prot;
 208				local_bh_disable();
 209				sock_prot_inuse_add(net, sk->sk_prot, -1);
 210				sock_prot_inuse_add(net, prot, 1);
 211				local_bh_enable();
 212				sk->sk_prot = prot;
 213				sk->sk_socket->ops = &inet_dgram_ops;
 214				sk->sk_family = PF_INET;
 
 215			}
 216			opt = xchg(&np->opt, NULL);
 217			if (opt)
 218				sock_kfree_s(sk, opt, opt->tot_len);
 219			pktopt = xchg(&np->pktoptions, NULL);
 220			kfree_skb(pktopt);
 221
 222			sk->sk_destruct = inet_sock_destruct;
 223			/*
 224			 * ... and add it to the refcnt debug socks count
 225			 * in the new family. -acme
 226			 */
 227			sk_refcnt_debug_inc(sk);
 
 
 
 228			module_put(THIS_MODULE);
 229			retv = 0;
 230			break;
 231		}
 232		goto e_inval;
 233
 234	case IPV6_V6ONLY:
 235		if (optlen < sizeof(int) ||
 236		    inet_sk(sk)->inet_num)
 237			goto e_inval;
 238		np->ipv6only = valbool;
 239		retv = 0;
 240		break;
 241
 242	case IPV6_RECVPKTINFO:
 243		if (optlen < sizeof(int))
 244			goto e_inval;
 245		np->rxopt.bits.rxinfo = valbool;
 246		retv = 0;
 247		break;
 248
 249	case IPV6_2292PKTINFO:
 250		if (optlen < sizeof(int))
 251			goto e_inval;
 252		np->rxopt.bits.rxoinfo = valbool;
 253		retv = 0;
 254		break;
 255
 256	case IPV6_RECVHOPLIMIT:
 257		if (optlen < sizeof(int))
 258			goto e_inval;
 259		np->rxopt.bits.rxhlim = valbool;
 260		retv = 0;
 261		break;
 262
 263	case IPV6_2292HOPLIMIT:
 264		if (optlen < sizeof(int))
 265			goto e_inval;
 266		np->rxopt.bits.rxohlim = valbool;
 267		retv = 0;
 268		break;
 269
 270	case IPV6_RECVRTHDR:
 271		if (optlen < sizeof(int))
 272			goto e_inval;
 273		np->rxopt.bits.srcrt = valbool;
 274		retv = 0;
 275		break;
 276
 277	case IPV6_2292RTHDR:
 278		if (optlen < sizeof(int))
 279			goto e_inval;
 280		np->rxopt.bits.osrcrt = valbool;
 281		retv = 0;
 282		break;
 283
 284	case IPV6_RECVHOPOPTS:
 285		if (optlen < sizeof(int))
 286			goto e_inval;
 287		np->rxopt.bits.hopopts = valbool;
 288		retv = 0;
 289		break;
 290
 291	case IPV6_2292HOPOPTS:
 292		if (optlen < sizeof(int))
 293			goto e_inval;
 294		np->rxopt.bits.ohopopts = valbool;
 295		retv = 0;
 296		break;
 297
 298	case IPV6_RECVDSTOPTS:
 299		if (optlen < sizeof(int))
 300			goto e_inval;
 301		np->rxopt.bits.dstopts = valbool;
 302		retv = 0;
 303		break;
 304
 305	case IPV6_2292DSTOPTS:
 306		if (optlen < sizeof(int))
 307			goto e_inval;
 308		np->rxopt.bits.odstopts = valbool;
 309		retv = 0;
 310		break;
 311
 312	case IPV6_TCLASS:
 313		if (optlen < sizeof(int))
 314			goto e_inval;
 315		if (val < -1 || val > 0xff)
 316			goto e_inval;
 317		/* RFC 3542, 6.5: default traffic class of 0x0 */
 318		if (val == -1)
 319			val = 0;
 320		np->tclass = val;
 
 
 
 
 
 
 
 321		retv = 0;
 322		break;
 323
 324	case IPV6_RECVTCLASS:
 325		if (optlen < sizeof(int))
 326			goto e_inval;
 327		np->rxopt.bits.rxtclass = valbool;
 328		retv = 0;
 329		break;
 330
 331	case IPV6_FLOWINFO:
 332		if (optlen < sizeof(int))
 333			goto e_inval;
 334		np->rxopt.bits.rxflow = valbool;
 335		retv = 0;
 336		break;
 337
 338	case IPV6_RECVPATHMTU:
 339		if (optlen < sizeof(int))
 340			goto e_inval;
 341		np->rxopt.bits.rxpmtu = valbool;
 342		retv = 0;
 343		break;
 344
 345	case IPV6_TRANSPARENT:
 346		if (valbool && !ns_capable(net->user_ns, CAP_NET_ADMIN) &&
 347		    !ns_capable(net->user_ns, CAP_NET_RAW)) {
 348			retv = -EPERM;
 349			break;
 350		}
 351		if (optlen < sizeof(int))
 352			goto e_inval;
 353		/* we don't have a separate transparent bit for IPV6 we use the one in the IPv4 socket */
 354		inet_sk(sk)->transparent = valbool;
 
 
 
 
 
 
 
 
 355		retv = 0;
 356		break;
 357
 358	case IPV6_RECVORIGDSTADDR:
 359		if (optlen < sizeof(int))
 360			goto e_inval;
 361		np->rxopt.bits.rxorigdstaddr = valbool;
 362		retv = 0;
 363		break;
 364
 365	case IPV6_HOPOPTS:
 366	case IPV6_RTHDRDSTOPTS:
 367	case IPV6_RTHDR:
 368	case IPV6_DSTOPTS:
 369	{
 370		struct ipv6_txoptions *opt;
 371
 372		/* remove any sticky options header with a zero option
 373		 * length, per RFC3542.
 374		 */
 375		if (optlen == 0)
 376			optval = NULL;
 377		else if (optval == NULL)
 378			goto e_inval;
 379		else if (optlen < sizeof(struct ipv6_opt_hdr) ||
 380			 optlen & 0x7 || optlen > 8 * 255)
 381			goto e_inval;
 382
 383		/* hop-by-hop / destination options are privileged option */
 384		retv = -EPERM;
 385		if (optname != IPV6_RTHDR && !ns_capable(net->user_ns, CAP_NET_RAW))
 386			break;
 387
 388		opt = ipv6_renew_options(sk, np->opt, optname,
 389					 (struct ipv6_opt_hdr __user *)optval,
 390					 optlen);
 391		if (IS_ERR(opt)) {
 392			retv = PTR_ERR(opt);
 393			break;
 394		}
 395
 396		/* routing header option needs extra check */
 397		retv = -EINVAL;
 398		if (optname == IPV6_RTHDR && opt && opt->srcrt) {
 399			struct ipv6_rt_hdr *rthdr = opt->srcrt;
 400			switch (rthdr->type) {
 401#if IS_ENABLED(CONFIG_IPV6_MIP6)
 402			case IPV6_SRCRT_TYPE_2:
 403				if (rthdr->hdrlen != 2 ||
 404				    rthdr->segments_left != 1)
 405					goto sticky_done;
 406
 407				break;
 408#endif
 409			default:
 410				goto sticky_done;
 411			}
 412		}
 413
 414		retv = 0;
 415		opt = ipv6_update_options(sk, opt);
 416sticky_done:
 417		if (opt)
 418			sock_kfree_s(sk, opt, opt->tot_len);
 419		break;
 420	}
 421
 422	case IPV6_PKTINFO:
 423	{
 424		struct in6_pktinfo pkt;
 425
 426		if (optlen == 0)
 427			goto e_inval;
 428		else if (optlen < sizeof(struct in6_pktinfo) || optval == NULL)
 
 429			goto e_inval;
 430
 431		if (copy_from_user(&pkt, optval, sizeof(struct in6_pktinfo))) {
 432				retv = -EFAULT;
 433				break;
 434		}
 435		if (sk->sk_bound_dev_if && pkt.ipi6_ifindex != sk->sk_bound_dev_if)
 436			goto e_inval;
 437
 438		np->sticky_pktinfo.ipi6_ifindex = pkt.ipi6_ifindex;
 439		np->sticky_pktinfo.ipi6_addr = pkt.ipi6_addr;
 440		retv = 0;
 441		break;
 442	}
 443
 444	case IPV6_2292PKTOPTIONS:
 445	{
 446		struct ipv6_txoptions *opt = NULL;
 447		struct msghdr msg;
 448		struct flowi6 fl6;
 449		int junk;
 450
 451		memset(&fl6, 0, sizeof(fl6));
 452		fl6.flowi6_oif = sk->sk_bound_dev_if;
 453		fl6.flowi6_mark = sk->sk_mark;
 454
 455		if (optlen == 0)
 456			goto update;
 457
 458		/* 1K is probably excessive
 459		 * 1K is surely not enough, 2K per standard header is 16K.
 460		 */
 461		retv = -EINVAL;
 462		if (optlen > 64*1024)
 463			break;
 464
 465		opt = sock_kmalloc(sk, sizeof(*opt) + optlen, GFP_KERNEL);
 466		retv = -ENOBUFS;
 467		if (opt == NULL)
 468			break;
 469
 470		memset(opt, 0, sizeof(*opt));
 
 471		opt->tot_len = sizeof(*opt) + optlen;
 472		retv = -EFAULT;
 473		if (copy_from_user(opt+1, optval, optlen))
 474			goto done;
 475
 476		msg.msg_controllen = optlen;
 477		msg.msg_control = (void*)(opt+1);
 
 
 478
 479		retv = ip6_datagram_send_ctl(net, sk, &msg, &fl6, opt, &junk,
 480					     &junk, &junk);
 481		if (retv)
 482			goto done;
 483update:
 484		retv = 0;
 485		opt = ipv6_update_options(sk, opt);
 486done:
 487		if (opt)
 488			sock_kfree_s(sk, opt, opt->tot_len);
 489		break;
 490	}
 491	case IPV6_UNICAST_HOPS:
 492		if (optlen < sizeof(int))
 493			goto e_inval;
 494		if (val > 255 || val < -1)
 495			goto e_inval;
 496		np->hop_limit = val;
 497		retv = 0;
 498		break;
 499
 500	case IPV6_MULTICAST_HOPS:
 501		if (sk->sk_type == SOCK_STREAM)
 502			break;
 503		if (optlen < sizeof(int))
 504			goto e_inval;
 505		if (val > 255 || val < -1)
 506			goto e_inval;
 507		np->mcast_hops = (val == -1 ? IPV6_DEFAULT_MCASTHOPS : val);
 508		retv = 0;
 509		break;
 510
 511	case IPV6_MULTICAST_LOOP:
 512		if (optlen < sizeof(int))
 513			goto e_inval;
 514		if (val != valbool)
 515			goto e_inval;
 516		np->mc_loop = valbool;
 517		retv = 0;
 518		break;
 519
 520	case IPV6_UNICAST_IF:
 521	{
 522		struct net_device *dev = NULL;
 523		int ifindex;
 524
 525		if (optlen != sizeof(int))
 526			goto e_inval;
 527
 528		ifindex = (__force int)ntohl((__force __be32)val);
 529		if (ifindex == 0) {
 530			np->ucast_oif = 0;
 531			retv = 0;
 532			break;
 533		}
 534
 535		dev = dev_get_by_index(net, ifindex);
 536		retv = -EADDRNOTAVAIL;
 537		if (!dev)
 538			break;
 539		dev_put(dev);
 540
 541		retv = -EINVAL;
 542		if (sk->sk_bound_dev_if)
 543			break;
 544
 545		np->ucast_oif = ifindex;
 546		retv = 0;
 547		break;
 548	}
 549
 550	case IPV6_MULTICAST_IF:
 551		if (sk->sk_type == SOCK_STREAM)
 552			break;
 553		if (optlen < sizeof(int))
 554			goto e_inval;
 555
 556		if (val) {
 557			struct net_device *dev;
 558
 559			if (sk->sk_bound_dev_if && sk->sk_bound_dev_if != val)
 560				goto e_inval;
 561
 562			dev = dev_get_by_index(net, val);
 563			if (!dev) {
 564				retv = -ENODEV;
 565				break;
 566			}
 567			dev_put(dev);
 568		}
 569		np->mcast_oif = val;
 570		retv = 0;
 571		break;
 572	case IPV6_ADD_MEMBERSHIP:
 573	case IPV6_DROP_MEMBERSHIP:
 574	{
 575		struct ipv6_mreq mreq;
 576
 577		if (optlen < sizeof(struct ipv6_mreq))
 578			goto e_inval;
 579
 580		retv = -EPROTO;
 581		if (inet_sk(sk)->is_icsk)
 582			break;
 583
 584		retv = -EFAULT;
 585		if (copy_from_user(&mreq, optval, sizeof(struct ipv6_mreq)))
 586			break;
 587
 588		if (optname == IPV6_ADD_MEMBERSHIP)
 589			retv = ipv6_sock_mc_join(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_multiaddr);
 590		else
 591			retv = ipv6_sock_mc_drop(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_multiaddr);
 592		break;
 593	}
 594	case IPV6_JOIN_ANYCAST:
 595	case IPV6_LEAVE_ANYCAST:
 596	{
 597		struct ipv6_mreq mreq;
 598
 599		if (optlen < sizeof(struct ipv6_mreq))
 600			goto e_inval;
 601
 602		retv = -EFAULT;
 603		if (copy_from_user(&mreq, optval, sizeof(struct ipv6_mreq)))
 604			break;
 605
 606		if (optname == IPV6_JOIN_ANYCAST)
 607			retv = ipv6_sock_ac_join(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_acaddr);
 608		else
 609			retv = ipv6_sock_ac_drop(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_acaddr);
 610		break;
 611	}
 612	case MCAST_JOIN_GROUP:
 613	case MCAST_LEAVE_GROUP:
 614	{
 615		struct group_req greq;
 616		struct sockaddr_in6 *psin6;
 617
 618		if (optlen < sizeof(struct group_req))
 619			goto e_inval;
 620
 621		retv = -EFAULT;
 622		if (copy_from_user(&greq, optval, sizeof(struct group_req)))
 623			break;
 624		if (greq.gr_group.ss_family != AF_INET6) {
 625			retv = -EADDRNOTAVAIL;
 626			break;
 627		}
 628		psin6 = (struct sockaddr_in6 *)&greq.gr_group;
 629		if (optname == MCAST_JOIN_GROUP)
 630			retv = ipv6_sock_mc_join(sk, greq.gr_interface,
 631				&psin6->sin6_addr);
 632		else
 633			retv = ipv6_sock_mc_drop(sk, greq.gr_interface,
 634				&psin6->sin6_addr);
 635		break;
 636	}
 637	case MCAST_JOIN_SOURCE_GROUP:
 638	case MCAST_LEAVE_SOURCE_GROUP:
 639	case MCAST_BLOCK_SOURCE:
 640	case MCAST_UNBLOCK_SOURCE:
 641	{
 642		struct group_source_req greqs;
 643		int omode, add;
 644
 645		if (optlen < sizeof(struct group_source_req))
 646			goto e_inval;
 647		if (copy_from_user(&greqs, optval, sizeof(greqs))) {
 648			retv = -EFAULT;
 649			break;
 650		}
 651		if (greqs.gsr_group.ss_family != AF_INET6 ||
 652		    greqs.gsr_source.ss_family != AF_INET6) {
 653			retv = -EADDRNOTAVAIL;
 654			break;
 655		}
 656		if (optname == MCAST_BLOCK_SOURCE) {
 657			omode = MCAST_EXCLUDE;
 658			add = 1;
 659		} else if (optname == MCAST_UNBLOCK_SOURCE) {
 660			omode = MCAST_EXCLUDE;
 661			add = 0;
 662		} else if (optname == MCAST_JOIN_SOURCE_GROUP) {
 663			struct sockaddr_in6 *psin6;
 664
 665			psin6 = (struct sockaddr_in6 *)&greqs.gsr_group;
 666			retv = ipv6_sock_mc_join(sk, greqs.gsr_interface,
 667				&psin6->sin6_addr);
 668			/* prior join w/ different source is ok */
 669			if (retv && retv != -EADDRINUSE)
 670				break;
 671			omode = MCAST_INCLUDE;
 672			add = 1;
 673		} else /* MCAST_LEAVE_SOURCE_GROUP */ {
 674			omode = MCAST_INCLUDE;
 675			add = 0;
 676		}
 677		retv = ip6_mc_source(add, omode, sk, &greqs);
 678		break;
 679	}
 680	case MCAST_MSFILTER:
 681	{
 682		struct group_filter *gsf;
 683
 684		if (optlen < GROUP_FILTER_SIZE(0))
 685			goto e_inval;
 686		if (optlen > sysctl_optmem_max) {
 687			retv = -ENOBUFS;
 688			break;
 689		}
 690		gsf = kmalloc(optlen,GFP_KERNEL);
 691		if (!gsf) {
 692			retv = -ENOBUFS;
 693			break;
 694		}
 695		retv = -EFAULT;
 696		if (copy_from_user(gsf, optval, optlen)) {
 697			kfree(gsf);
 698			break;
 699		}
 700		/* numsrc >= (4G-140)/128 overflow in 32 bits */
 701		if (gsf->gf_numsrc >= 0x1ffffffU ||
 702		    gsf->gf_numsrc > sysctl_mld_max_msf) {
 703			kfree(gsf);
 704			retv = -ENOBUFS;
 705			break;
 706		}
 707		if (GROUP_FILTER_SIZE(gsf->gf_numsrc) > optlen) {
 708			kfree(gsf);
 709			retv = -EINVAL;
 710			break;
 711		}
 712		retv = ip6_mc_msfilter(sk, gsf);
 713		kfree(gsf);
 714
 715		break;
 716	}
 717	case IPV6_ROUTER_ALERT:
 718		if (optlen < sizeof(int))
 719			goto e_inval;
 720		retv = ip6_ra_control(sk, val);
 721		break;
 722	case IPV6_MTU_DISCOVER:
 723		if (optlen < sizeof(int))
 724			goto e_inval;
 725		if (val < IPV6_PMTUDISC_DONT || val > IPV6_PMTUDISC_OMIT)
 726			goto e_inval;
 727		np->pmtudisc = val;
 728		retv = 0;
 729		break;
 730	case IPV6_MTU:
 731		if (optlen < sizeof(int))
 732			goto e_inval;
 733		if (val && val < IPV6_MIN_MTU)
 734			goto e_inval;
 735		np->frag_size = val;
 736		retv = 0;
 737		break;
 738	case IPV6_RECVERR:
 739		if (optlen < sizeof(int))
 740			goto e_inval;
 741		np->recverr = valbool;
 742		if (!val)
 743			skb_queue_purge(&sk->sk_error_queue);
 744		retv = 0;
 745		break;
 746	case IPV6_FLOWINFO_SEND:
 747		if (optlen < sizeof(int))
 748			goto e_inval;
 749		np->sndflow = valbool;
 750		retv = 0;
 751		break;
 752	case IPV6_FLOWLABEL_MGR:
 753		retv = ipv6_flowlabel_opt(sk, optval, optlen);
 754		break;
 755	case IPV6_IPSEC_POLICY:
 756	case IPV6_XFRM_POLICY:
 757		retv = -EPERM;
 758		if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
 759			break;
 760		retv = xfrm_user_policy(sk, optname, optval, optlen);
 761		break;
 762
 763	case IPV6_ADDR_PREFERENCES:
 764	    {
 765		unsigned int pref = 0;
 766		unsigned int prefmask = ~0;
 767
 768		if (optlen < sizeof(int))
 769			goto e_inval;
 770
 771		retv = -EINVAL;
 772
 773		/* check PUBLIC/TMP/PUBTMP_DEFAULT conflicts */
 774		switch (val & (IPV6_PREFER_SRC_PUBLIC|
 775			       IPV6_PREFER_SRC_TMP|
 776			       IPV6_PREFER_SRC_PUBTMP_DEFAULT)) {
 777		case IPV6_PREFER_SRC_PUBLIC:
 778			pref |= IPV6_PREFER_SRC_PUBLIC;
 779			break;
 780		case IPV6_PREFER_SRC_TMP:
 781			pref |= IPV6_PREFER_SRC_TMP;
 782			break;
 783		case IPV6_PREFER_SRC_PUBTMP_DEFAULT:
 784			break;
 785		case 0:
 786			goto pref_skip_pubtmp;
 787		default:
 788			goto e_inval;
 789		}
 790
 791		prefmask &= ~(IPV6_PREFER_SRC_PUBLIC|
 792			      IPV6_PREFER_SRC_TMP);
 793pref_skip_pubtmp:
 794
 795		/* check HOME/COA conflicts */
 796		switch (val & (IPV6_PREFER_SRC_HOME|IPV6_PREFER_SRC_COA)) {
 797		case IPV6_PREFER_SRC_HOME:
 798			break;
 799		case IPV6_PREFER_SRC_COA:
 800			pref |= IPV6_PREFER_SRC_COA;
 801		case 0:
 802			goto pref_skip_coa;
 803		default:
 804			goto e_inval;
 805		}
 806
 807		prefmask &= ~IPV6_PREFER_SRC_COA;
 808pref_skip_coa:
 809
 810		/* check CGA/NONCGA conflicts */
 811		switch (val & (IPV6_PREFER_SRC_CGA|IPV6_PREFER_SRC_NONCGA)) {
 812		case IPV6_PREFER_SRC_CGA:
 813		case IPV6_PREFER_SRC_NONCGA:
 814		case 0:
 815			break;
 816		default:
 817			goto e_inval;
 818		}
 819
 820		np->srcprefs = (np->srcprefs & prefmask) | pref;
 821		retv = 0;
 822
 823		break;
 824	    }
 825	case IPV6_MINHOPCOUNT:
 826		if (optlen < sizeof(int))
 827			goto e_inval;
 828		if (val < 0 || val > 255)
 829			goto e_inval;
 830		np->min_hopcount = val;
 831		retv = 0;
 832		break;
 833	case IPV6_DONTFRAG:
 834		np->dontfrag = valbool;
 835		retv = 0;
 836		break;
 837	}
 838
 839	release_sock(sk);
 
 
 
 840
 841	return retv;
 842
 843e_inval:
 844	release_sock(sk);
 845	return -EINVAL;
 846}
 847
 848int ipv6_setsockopt(struct sock *sk, int level, int optname,
 849		    char __user *optval, unsigned int optlen)
 850{
 851	int err;
 852
 853	if (level == SOL_IP && sk->sk_type != SOCK_RAW)
 854		return udp_prot.setsockopt(sk, level, optname, optval, optlen);
 855
 856	if (level != SOL_IPV6)
 857		return -ENOPROTOOPT;
 858
 859	err = do_ipv6_setsockopt(sk, level, optname, optval, optlen);
 860#ifdef CONFIG_NETFILTER
 861	/* we need to exclude all possible ENOPROTOOPTs except default case */
 862	if (err == -ENOPROTOOPT && optname != IPV6_IPSEC_POLICY &&
 863			optname != IPV6_XFRM_POLICY) {
 864		lock_sock(sk);
 865		err = nf_setsockopt(sk, PF_INET6, optname, optval,
 866				optlen);
 867		release_sock(sk);
 868	}
 869#endif
 870	return err;
 871}
 872
 873EXPORT_SYMBOL(ipv6_setsockopt);
 874
 875#ifdef CONFIG_COMPAT
 876int compat_ipv6_setsockopt(struct sock *sk, int level, int optname,
 877			   char __user *optval, unsigned int optlen)
 878{
 879	int err;
 880
 881	if (level == SOL_IP && sk->sk_type != SOCK_RAW) {
 882		if (udp_prot.compat_setsockopt != NULL)
 883			return udp_prot.compat_setsockopt(sk, level, optname,
 884							  optval, optlen);
 885		return udp_prot.setsockopt(sk, level, optname, optval, optlen);
 886	}
 887
 888	if (level != SOL_IPV6)
 889		return -ENOPROTOOPT;
 890
 891	if (optname >= MCAST_JOIN_GROUP && optname <= MCAST_MSFILTER)
 892		return compat_mc_setsockopt(sk, level, optname, optval, optlen,
 893			ipv6_setsockopt);
 894
 895	err = do_ipv6_setsockopt(sk, level, optname, optval, optlen);
 896#ifdef CONFIG_NETFILTER
 897	/* we need to exclude all possible ENOPROTOOPTs except default case */
 898	if (err == -ENOPROTOOPT && optname != IPV6_IPSEC_POLICY &&
 899	    optname != IPV6_XFRM_POLICY) {
 900		lock_sock(sk);
 901		err = compat_nf_setsockopt(sk, PF_INET6, optname,
 902					   optval, optlen);
 903		release_sock(sk);
 904	}
 905#endif
 906	return err;
 907}
 908
 909EXPORT_SYMBOL(compat_ipv6_setsockopt);
 910#endif
 911
 912static int ipv6_getsockopt_sticky(struct sock *sk, struct ipv6_txoptions *opt,
 913				  int optname, char __user *optval, int len)
 914{
 915	struct ipv6_opt_hdr *hdr;
 916
 917	if (!opt)
 918		return 0;
 919
 920	switch(optname) {
 921	case IPV6_HOPOPTS:
 922		hdr = opt->hopopt;
 923		break;
 924	case IPV6_RTHDRDSTOPTS:
 925		hdr = opt->dst0opt;
 926		break;
 927	case IPV6_RTHDR:
 928		hdr = (struct ipv6_opt_hdr *)opt->srcrt;
 929		break;
 930	case IPV6_DSTOPTS:
 931		hdr = opt->dst1opt;
 932		break;
 933	default:
 934		return -EINVAL;	/* should not happen */
 935	}
 936
 937	if (!hdr)
 938		return 0;
 939
 940	len = min_t(unsigned int, len, ipv6_optlen(hdr));
 941	if (copy_to_user(optval, hdr, len))
 942		return -EFAULT;
 943	return len;
 944}
 945
 946static int do_ipv6_getsockopt(struct sock *sk, int level, int optname,
 947		    char __user *optval, int __user *optlen, unsigned int flags)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 948{
 949	struct ipv6_pinfo *np = inet6_sk(sk);
 950	int len;
 951	int val;
 952
 953	if (ip6_mroute_opt(optname))
 954		return ip6_mroute_getsockopt(sk, optname, optval, optlen);
 955
 956	if (get_user(len, optlen))
 957		return -EFAULT;
 958	switch (optname) {
 959	case IPV6_ADDRFORM:
 960		if (sk->sk_protocol != IPPROTO_UDP &&
 961		    sk->sk_protocol != IPPROTO_UDPLITE &&
 962		    sk->sk_protocol != IPPROTO_TCP)
 963			return -ENOPROTOOPT;
 964		if (sk->sk_state != TCP_ESTABLISHED)
 965			return -ENOTCONN;
 966		val = sk->sk_family;
 967		break;
 968	case MCAST_MSFILTER:
 969	{
 970		struct group_filter gsf;
 971		int err;
 972
 973		if (len < GROUP_FILTER_SIZE(0))
 974			return -EINVAL;
 975		if (copy_from_user(&gsf, optval, GROUP_FILTER_SIZE(0)))
 976			return -EFAULT;
 977		if (gsf.gf_group.ss_family != AF_INET6)
 978			return -EADDRNOTAVAIL;
 979		lock_sock(sk);
 980		err = ip6_mc_msfget(sk, &gsf,
 981			(struct group_filter __user *)optval, optlen);
 982		release_sock(sk);
 983		return err;
 984	}
 985
 986	case IPV6_2292PKTOPTIONS:
 987	{
 988		struct msghdr msg;
 989		struct sk_buff *skb;
 990
 991		if (sk->sk_type != SOCK_STREAM)
 992			return -ENOPROTOOPT;
 993
 994		msg.msg_control = optval;
 
 
 
 
 
 
 995		msg.msg_controllen = len;
 996		msg.msg_flags = flags;
 997
 998		lock_sock(sk);
 999		skb = np->pktoptions;
1000		if (skb)
1001			atomic_inc(&skb->users);
1002		release_sock(sk);
1003
1004		if (skb) {
1005			ip6_datagram_recv_ctl(sk, &msg, skb);
1006			kfree_skb(skb);
1007		} else {
1008			if (np->rxopt.bits.rxinfo) {
 
1009				struct in6_pktinfo src_info;
1010				src_info.ipi6_ifindex = np->mcast_oif ? np->mcast_oif :
 
1011					np->sticky_pktinfo.ipi6_ifindex;
1012				src_info.ipi6_addr = np->mcast_oif ? sk->sk_v6_daddr : np->sticky_pktinfo.ipi6_addr;
1013				put_cmsg(&msg, SOL_IPV6, IPV6_PKTINFO, sizeof(src_info), &src_info);
1014			}
1015			if (np->rxopt.bits.rxhlim) {
1016				int hlim = np->mcast_hops;
 
1017				put_cmsg(&msg, SOL_IPV6, IPV6_HOPLIMIT, sizeof(hlim), &hlim);
1018			}
1019			if (np->rxopt.bits.rxtclass) {
1020				int tclass = (int)ip6_tclass(np->rcv_flowinfo);
1021
1022				put_cmsg(&msg, SOL_IPV6, IPV6_TCLASS, sizeof(tclass), &tclass);
1023			}
1024			if (np->rxopt.bits.rxoinfo) {
 
1025				struct in6_pktinfo src_info;
1026				src_info.ipi6_ifindex = np->mcast_oif ? np->mcast_oif :
 
1027					np->sticky_pktinfo.ipi6_ifindex;
1028				src_info.ipi6_addr = np->mcast_oif ? sk->sk_v6_daddr :
1029								     np->sticky_pktinfo.ipi6_addr;
1030				put_cmsg(&msg, SOL_IPV6, IPV6_2292PKTINFO, sizeof(src_info), &src_info);
1031			}
1032			if (np->rxopt.bits.rxohlim) {
1033				int hlim = np->mcast_hops;
 
1034				put_cmsg(&msg, SOL_IPV6, IPV6_2292HOPLIMIT, sizeof(hlim), &hlim);
1035			}
1036			if (np->rxopt.bits.rxflow) {
1037				__be32 flowinfo = np->rcv_flowinfo;
1038
1039				put_cmsg(&msg, SOL_IPV6, IPV6_FLOWINFO, sizeof(flowinfo), &flowinfo);
1040			}
1041		}
1042		len -= msg.msg_controllen;
1043		return put_user(len, optlen);
1044	}
1045	case IPV6_MTU:
1046	{
1047		struct dst_entry *dst;
1048
1049		val = 0;
1050		rcu_read_lock();
1051		dst = __sk_dst_get(sk);
1052		if (dst)
1053			val = dst_mtu(dst);
1054		rcu_read_unlock();
1055		if (!val)
1056			return -ENOTCONN;
1057		break;
1058	}
1059
1060	case IPV6_V6ONLY:
1061		val = np->ipv6only;
1062		break;
1063
1064	case IPV6_RECVPKTINFO:
1065		val = np->rxopt.bits.rxinfo;
1066		break;
1067
1068	case IPV6_2292PKTINFO:
1069		val = np->rxopt.bits.rxoinfo;
1070		break;
1071
1072	case IPV6_RECVHOPLIMIT:
1073		val = np->rxopt.bits.rxhlim;
1074		break;
1075
1076	case IPV6_2292HOPLIMIT:
1077		val = np->rxopt.bits.rxohlim;
1078		break;
1079
1080	case IPV6_RECVRTHDR:
1081		val = np->rxopt.bits.srcrt;
1082		break;
1083
1084	case IPV6_2292RTHDR:
1085		val = np->rxopt.bits.osrcrt;
1086		break;
1087
1088	case IPV6_HOPOPTS:
1089	case IPV6_RTHDRDSTOPTS:
1090	case IPV6_RTHDR:
1091	case IPV6_DSTOPTS:
1092	{
 
1093
1094		lock_sock(sk);
1095		len = ipv6_getsockopt_sticky(sk, np->opt,
1096					     optname, optval, len);
1097		release_sock(sk);
 
1098		/* check if ipv6_getsockopt_sticky() returns err code */
1099		if (len < 0)
1100			return len;
1101		return put_user(len, optlen);
1102	}
1103
1104	case IPV6_RECVHOPOPTS:
1105		val = np->rxopt.bits.hopopts;
1106		break;
1107
1108	case IPV6_2292HOPOPTS:
1109		val = np->rxopt.bits.ohopopts;
1110		break;
1111
1112	case IPV6_RECVDSTOPTS:
1113		val = np->rxopt.bits.dstopts;
1114		break;
1115
1116	case IPV6_2292DSTOPTS:
1117		val = np->rxopt.bits.odstopts;
1118		break;
1119
1120	case IPV6_TCLASS:
1121		val = np->tclass;
1122		break;
1123
1124	case IPV6_RECVTCLASS:
1125		val = np->rxopt.bits.rxtclass;
1126		break;
1127
1128	case IPV6_FLOWINFO:
1129		val = np->rxopt.bits.rxflow;
1130		break;
1131
1132	case IPV6_RECVPATHMTU:
1133		val = np->rxopt.bits.rxpmtu;
1134		break;
1135
1136	case IPV6_PATHMTU:
1137	{
1138		struct dst_entry *dst;
1139		struct ip6_mtuinfo mtuinfo;
1140
1141		if (len < sizeof(mtuinfo))
1142			return -EINVAL;
1143
1144		len = sizeof(mtuinfo);
1145		memset(&mtuinfo, 0, sizeof(mtuinfo));
1146
1147		rcu_read_lock();
1148		dst = __sk_dst_get(sk);
1149		if (dst)
1150			mtuinfo.ip6m_mtu = dst_mtu(dst);
1151		rcu_read_unlock();
1152		if (!mtuinfo.ip6m_mtu)
1153			return -ENOTCONN;
1154
1155		if (put_user(len, optlen))
1156			return -EFAULT;
1157		if (copy_to_user(optval, &mtuinfo, len))
1158			return -EFAULT;
1159
1160		return 0;
1161		break;
1162	}
1163
1164	case IPV6_TRANSPARENT:
1165		val = inet_sk(sk)->transparent;
 
 
 
 
1166		break;
1167
1168	case IPV6_RECVORIGDSTADDR:
1169		val = np->rxopt.bits.rxorigdstaddr;
1170		break;
1171
1172	case IPV6_UNICAST_HOPS:
1173	case IPV6_MULTICAST_HOPS:
1174	{
1175		struct dst_entry *dst;
1176
1177		if (optname == IPV6_UNICAST_HOPS)
1178			val = np->hop_limit;
1179		else
1180			val = np->mcast_hops;
1181
1182		if (val < 0) {
1183			rcu_read_lock();
1184			dst = __sk_dst_get(sk);
1185			if (dst)
1186				val = ip6_dst_hoplimit(dst);
1187			rcu_read_unlock();
1188		}
1189
1190		if (val < 0)
1191			val = sock_net(sk)->ipv6.devconf_all->hop_limit;
1192		break;
1193	}
1194
1195	case IPV6_MULTICAST_LOOP:
1196		val = np->mc_loop;
1197		break;
1198
1199	case IPV6_MULTICAST_IF:
1200		val = np->mcast_oif;
 
 
 
 
1201		break;
1202
1203	case IPV6_UNICAST_IF:
1204		val = (__force int)htonl((__u32) np->ucast_oif);
1205		break;
1206
1207	case IPV6_MTU_DISCOVER:
1208		val = np->pmtudisc;
1209		break;
1210
1211	case IPV6_RECVERR:
1212		val = np->recverr;
1213		break;
1214
1215	case IPV6_FLOWINFO_SEND:
1216		val = np->sndflow;
1217		break;
1218
1219	case IPV6_FLOWLABEL_MGR:
1220	{
1221		struct in6_flowlabel_req freq;
1222		int flags;
1223
1224		if (len < sizeof(freq))
1225			return -EINVAL;
1226
1227		if (copy_from_user(&freq, optval, sizeof(freq)))
1228			return -EFAULT;
1229
1230		if (freq.flr_action != IPV6_FL_A_GET)
1231			return -EINVAL;
1232
1233		len = sizeof(freq);
1234		flags = freq.flr_flags;
1235
1236		memset(&freq, 0, sizeof(freq));
1237
1238		val = ipv6_flowlabel_opt_get(sk, &freq, flags);
1239		if (val < 0)
1240			return val;
1241
1242		if (put_user(len, optlen))
1243			return -EFAULT;
1244		if (copy_to_user(optval, &freq, len))
1245			return -EFAULT;
1246
1247		return 0;
1248	}
1249
1250	case IPV6_ADDR_PREFERENCES:
 
 
1251		val = 0;
1252
1253		if (np->srcprefs & IPV6_PREFER_SRC_TMP)
1254			val |= IPV6_PREFER_SRC_TMP;
1255		else if (np->srcprefs & IPV6_PREFER_SRC_PUBLIC)
1256			val |= IPV6_PREFER_SRC_PUBLIC;
1257		else {
1258			/* XXX: should we return system default? */
1259			val |= IPV6_PREFER_SRC_PUBTMP_DEFAULT;
1260		}
1261
1262		if (np->srcprefs & IPV6_PREFER_SRC_COA)
1263			val |= IPV6_PREFER_SRC_COA;
1264		else
1265			val |= IPV6_PREFER_SRC_HOME;
1266		break;
1267
1268	case IPV6_MINHOPCOUNT:
1269		val = np->min_hopcount;
1270		break;
1271
1272	case IPV6_DONTFRAG:
1273		val = np->dontfrag;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1274		break;
1275
1276	default:
1277		return -ENOPROTOOPT;
1278	}
1279	len = min_t(unsigned int, sizeof(int), len);
1280	if(put_user(len, optlen))
1281		return -EFAULT;
1282	if(copy_to_user(optval,&val,len))
1283		return -EFAULT;
1284	return 0;
1285}
1286
1287int ipv6_getsockopt(struct sock *sk, int level, int optname,
1288		    char __user *optval, int __user *optlen)
1289{
1290	int err;
1291
1292	if (level == SOL_IP && sk->sk_type != SOCK_RAW)
1293		return udp_prot.getsockopt(sk, level, optname, optval, optlen);
1294
1295	if(level != SOL_IPV6)
1296		return -ENOPROTOOPT;
1297
1298	err = do_ipv6_getsockopt(sk, level, optname, optval, optlen, 0);
1299#ifdef CONFIG_NETFILTER
1300	/* we need to exclude all possible ENOPROTOOPTs except default case */
1301	if (err == -ENOPROTOOPT && optname != IPV6_2292PKTOPTIONS) {
1302		int len;
1303
1304		if (get_user(len, optlen))
1305			return -EFAULT;
1306
1307		lock_sock(sk);
1308		err = nf_getsockopt(sk, PF_INET6, optname, optval,
1309				&len);
1310		release_sock(sk);
1311		if (err >= 0)
1312			err = put_user(len, optlen);
1313	}
1314#endif
1315	return err;
1316}
1317
1318EXPORT_SYMBOL(ipv6_getsockopt);
1319
1320#ifdef CONFIG_COMPAT
1321int compat_ipv6_getsockopt(struct sock *sk, int level, int optname,
1322			   char __user *optval, int __user *optlen)
1323{
1324	int err;
1325
1326	if (level == SOL_IP && sk->sk_type != SOCK_RAW) {
1327		if (udp_prot.compat_getsockopt != NULL)
1328			return udp_prot.compat_getsockopt(sk, level, optname,
1329							  optval, optlen);
1330		return udp_prot.getsockopt(sk, level, optname, optval, optlen);
1331	}
1332
1333	if (level != SOL_IPV6)
1334		return -ENOPROTOOPT;
1335
1336	if (optname == MCAST_MSFILTER)
1337		return compat_mc_getsockopt(sk, level, optname, optval, optlen,
1338			ipv6_getsockopt);
1339
1340	err = do_ipv6_getsockopt(sk, level, optname, optval, optlen,
1341				 MSG_CMSG_COMPAT);
1342#ifdef CONFIG_NETFILTER
1343	/* we need to exclude all possible ENOPROTOOPTs except default case */
1344	if (err == -ENOPROTOOPT && optname != IPV6_2292PKTOPTIONS) {
1345		int len;
1346
1347		if (get_user(len, optlen))
1348			return -EFAULT;
1349
1350		lock_sock(sk);
1351		err = compat_nf_getsockopt(sk, PF_INET6,
1352					   optname, optval, &len);
1353		release_sock(sk);
1354		if (err >= 0)
1355			err = put_user(len, optlen);
1356	}
1357#endif
1358	return err;
1359}
1360
1361EXPORT_SYMBOL(compat_ipv6_getsockopt);
1362#endif
1363
v6.8
   1// SPDX-License-Identifier: GPL-2.0-or-later
   2/*
   3 *	IPv6 BSD socket options interface
   4 *	Linux INET6 implementation
   5 *
   6 *	Authors:
   7 *	Pedro Roque		<roque@di.fc.ul.pt>
   8 *
   9 *	Based on linux/net/ipv4/ip_sockglue.c
  10 *
 
 
 
 
 
  11 *	FIXME: Make the setsockopt code POSIX compliant: That is
  12 *
  13 *	o	Truncate getsockopt returns
  14 *	o	Return an optlen of the truncated length if need be
  15 *
  16 *	Changes:
  17 *	David L Stevens <dlstevens@us.ibm.com>:
  18 *		- added multicast source filtering API for MLDv2
  19 */
  20
  21#include <linux/module.h>
  22#include <linux/capability.h>
  23#include <linux/errno.h>
  24#include <linux/types.h>
  25#include <linux/socket.h>
  26#include <linux/sockios.h>
  27#include <linux/net.h>
  28#include <linux/in6.h>
  29#include <linux/mroute6.h>
  30#include <linux/netdevice.h>
  31#include <linux/if_arp.h>
  32#include <linux/init.h>
  33#include <linux/sysctl.h>
  34#include <linux/netfilter.h>
  35#include <linux/slab.h>
  36
  37#include <net/sock.h>
  38#include <net/snmp.h>
  39#include <net/ipv6.h>
  40#include <net/ndisc.h>
  41#include <net/protocol.h>
  42#include <net/transp_v6.h>
  43#include <net/ip6_route.h>
  44#include <net/addrconf.h>
  45#include <net/inet_common.h>
  46#include <net/tcp.h>
  47#include <net/udp.h>
  48#include <net/udplite.h>
  49#include <net/xfrm.h>
  50#include <net/compat.h>
  51#include <net/seg6.h>
  52
  53#include <linux/uaccess.h>
  54
  55struct ip6_ra_chain *ip6_ra_chain;
  56DEFINE_RWLOCK(ip6_ra_lock);
  57
  58DEFINE_STATIC_KEY_FALSE(ip6_min_hopcount);
  59
  60int ip6_ra_control(struct sock *sk, int sel)
  61{
  62	struct ip6_ra_chain *ra, *new_ra, **rap;
  63
  64	/* RA packet may be delivered ONLY to IPPROTO_RAW socket */
  65	if (sk->sk_type != SOCK_RAW || inet_sk(sk)->inet_num != IPPROTO_RAW)
  66		return -ENOPROTOOPT;
  67
  68	new_ra = (sel >= 0) ? kmalloc(sizeof(*new_ra), GFP_KERNEL) : NULL;
  69	if (sel >= 0 && !new_ra)
  70		return -ENOMEM;
  71
  72	write_lock_bh(&ip6_ra_lock);
  73	for (rap = &ip6_ra_chain; (ra = *rap) != NULL; rap = &ra->next) {
  74		if (ra->sk == sk) {
  75			if (sel >= 0) {
  76				write_unlock_bh(&ip6_ra_lock);
  77				kfree(new_ra);
  78				return -EADDRINUSE;
  79			}
  80
  81			*rap = ra->next;
  82			write_unlock_bh(&ip6_ra_lock);
  83
  84			sock_put(sk);
  85			kfree(ra);
  86			return 0;
  87		}
  88	}
  89	if (!new_ra) {
  90		write_unlock_bh(&ip6_ra_lock);
  91		return -ENOBUFS;
  92	}
  93	new_ra->sk = sk;
  94	new_ra->sel = sel;
  95	new_ra->next = ra;
  96	*rap = new_ra;
  97	sock_hold(sk);
  98	write_unlock_bh(&ip6_ra_lock);
  99	return 0;
 100}
 101
 
 102struct ipv6_txoptions *ipv6_update_options(struct sock *sk,
 103					   struct ipv6_txoptions *opt)
 104{
 105	if (inet_test_bit(IS_ICSK, sk)) {
 106		if (opt &&
 107		    !((1 << sk->sk_state) & (TCPF_LISTEN | TCPF_CLOSE)) &&
 108		    inet_sk(sk)->inet_daddr != LOOPBACK4_IPV6) {
 109			struct inet_connection_sock *icsk = inet_csk(sk);
 110			icsk->icsk_ext_hdr_len = opt->opt_flen + opt->opt_nflen;
 111			icsk->icsk_sync_mss(sk, icsk->icsk_pmtu_cookie);
 112		}
 
 
 
 
 
 113	}
 114	opt = xchg((__force struct ipv6_txoptions **)&inet6_sk(sk)->opt,
 115		   opt);
 116	sk_dst_reset(sk);
 117
 118	return opt;
 119}
 120
 121static bool setsockopt_needs_rtnl(int optname)
 122{
 123	switch (optname) {
 124	case IPV6_ADDRFORM:
 125	case IPV6_ADD_MEMBERSHIP:
 126	case IPV6_DROP_MEMBERSHIP:
 127	case IPV6_JOIN_ANYCAST:
 128	case IPV6_LEAVE_ANYCAST:
 129	case MCAST_JOIN_GROUP:
 130	case MCAST_LEAVE_GROUP:
 131	case MCAST_JOIN_SOURCE_GROUP:
 132	case MCAST_LEAVE_SOURCE_GROUP:
 133	case MCAST_BLOCK_SOURCE:
 134	case MCAST_UNBLOCK_SOURCE:
 135	case MCAST_MSFILTER:
 136		return true;
 137	}
 138	return false;
 139}
 140
 141static int copy_group_source_from_sockptr(struct group_source_req *greqs,
 142		sockptr_t optval, int optlen)
 143{
 144	if (in_compat_syscall()) {
 145		struct compat_group_source_req gr32;
 146
 147		if (optlen < sizeof(gr32))
 148			return -EINVAL;
 149		if (copy_from_sockptr(&gr32, optval, sizeof(gr32)))
 150			return -EFAULT;
 151		greqs->gsr_interface = gr32.gsr_interface;
 152		greqs->gsr_group = gr32.gsr_group;
 153		greqs->gsr_source = gr32.gsr_source;
 154	} else {
 155		if (optlen < sizeof(*greqs))
 156			return -EINVAL;
 157		if (copy_from_sockptr(greqs, optval, sizeof(*greqs)))
 158			return -EFAULT;
 159	}
 160
 161	return 0;
 162}
 163
 164static int do_ipv6_mcast_group_source(struct sock *sk, int optname,
 165		sockptr_t optval, int optlen)
 166{
 167	struct group_source_req greqs;
 168	int omode, add;
 169	int ret;
 170
 171	ret = copy_group_source_from_sockptr(&greqs, optval, optlen);
 172	if (ret)
 173		return ret;
 174
 175	if (greqs.gsr_group.ss_family != AF_INET6 ||
 176	    greqs.gsr_source.ss_family != AF_INET6)
 177		return -EADDRNOTAVAIL;
 178
 179	if (optname == MCAST_BLOCK_SOURCE) {
 180		omode = MCAST_EXCLUDE;
 181		add = 1;
 182	} else if (optname == MCAST_UNBLOCK_SOURCE) {
 183		omode = MCAST_EXCLUDE;
 184		add = 0;
 185	} else if (optname == MCAST_JOIN_SOURCE_GROUP) {
 186		struct sockaddr_in6 *psin6;
 187		int retv;
 188
 189		psin6 = (struct sockaddr_in6 *)&greqs.gsr_group;
 190		retv = ipv6_sock_mc_join_ssm(sk, greqs.gsr_interface,
 191					     &psin6->sin6_addr,
 192					     MCAST_INCLUDE);
 193		/* prior join w/ different source is ok */
 194		if (retv && retv != -EADDRINUSE)
 195			return retv;
 196		omode = MCAST_INCLUDE;
 197		add = 1;
 198	} else /* MCAST_LEAVE_SOURCE_GROUP */ {
 199		omode = MCAST_INCLUDE;
 200		add = 0;
 201	}
 202	return ip6_mc_source(add, omode, sk, &greqs);
 203}
 204
 205static int ipv6_set_mcast_msfilter(struct sock *sk, sockptr_t optval,
 206		int optlen)
 207{
 208	struct group_filter *gsf;
 209	int ret;
 210
 211	if (optlen < GROUP_FILTER_SIZE(0))
 212		return -EINVAL;
 213	if (optlen > READ_ONCE(sock_net(sk)->core.sysctl_optmem_max))
 214		return -ENOBUFS;
 215
 216	gsf = memdup_sockptr(optval, optlen);
 217	if (IS_ERR(gsf))
 218		return PTR_ERR(gsf);
 219
 220	/* numsrc >= (4G-140)/128 overflow in 32 bits */
 221	ret = -ENOBUFS;
 222	if (gsf->gf_numsrc >= 0x1ffffffU ||
 223	    gsf->gf_numsrc > sysctl_mld_max_msf)
 224		goto out_free_gsf;
 225
 226	ret = -EINVAL;
 227	if (GROUP_FILTER_SIZE(gsf->gf_numsrc) > optlen)
 228		goto out_free_gsf;
 229
 230	ret = ip6_mc_msfilter(sk, gsf, gsf->gf_slist_flex);
 231out_free_gsf:
 232	kfree(gsf);
 233	return ret;
 234}
 235
 236static int compat_ipv6_set_mcast_msfilter(struct sock *sk, sockptr_t optval,
 237		int optlen)
 238{
 239	const int size0 = offsetof(struct compat_group_filter, gf_slist_flex);
 240	struct compat_group_filter *gf32;
 241	void *p;
 242	int ret;
 243	int n;
 244
 245	if (optlen < size0)
 246		return -EINVAL;
 247	if (optlen > READ_ONCE(sock_net(sk)->core.sysctl_optmem_max) - 4)
 248		return -ENOBUFS;
 249
 250	p = kmalloc(optlen + 4, GFP_KERNEL);
 251	if (!p)
 252		return -ENOMEM;
 253
 254	gf32 = p + 4; /* we want ->gf_group and ->gf_slist_flex aligned */
 255	ret = -EFAULT;
 256	if (copy_from_sockptr(gf32, optval, optlen))
 257		goto out_free_p;
 258
 259	/* numsrc >= (4G-140)/128 overflow in 32 bits */
 260	ret = -ENOBUFS;
 261	n = gf32->gf_numsrc;
 262	if (n >= 0x1ffffffU || n > sysctl_mld_max_msf)
 263		goto out_free_p;
 264
 265	ret = -EINVAL;
 266	if (offsetof(struct compat_group_filter, gf_slist_flex[n]) > optlen)
 267		goto out_free_p;
 268
 269	ret = ip6_mc_msfilter(sk, &(struct group_filter){
 270			.gf_interface = gf32->gf_interface,
 271			.gf_group = gf32->gf_group,
 272			.gf_fmode = gf32->gf_fmode,
 273			.gf_numsrc = gf32->gf_numsrc}, gf32->gf_slist_flex);
 274
 275out_free_p:
 276	kfree(p);
 277	return ret;
 278}
 279
 280static int ipv6_mcast_join_leave(struct sock *sk, int optname,
 281		sockptr_t optval, int optlen)
 282{
 283	struct sockaddr_in6 *psin6;
 284	struct group_req greq;
 285
 286	if (optlen < sizeof(greq))
 287		return -EINVAL;
 288	if (copy_from_sockptr(&greq, optval, sizeof(greq)))
 289		return -EFAULT;
 290
 291	if (greq.gr_group.ss_family != AF_INET6)
 292		return -EADDRNOTAVAIL;
 293	psin6 = (struct sockaddr_in6 *)&greq.gr_group;
 294	if (optname == MCAST_JOIN_GROUP)
 295		return ipv6_sock_mc_join(sk, greq.gr_interface,
 296					 &psin6->sin6_addr);
 297	return ipv6_sock_mc_drop(sk, greq.gr_interface, &psin6->sin6_addr);
 298}
 299
 300static int compat_ipv6_mcast_join_leave(struct sock *sk, int optname,
 301		sockptr_t optval, int optlen)
 302{
 303	struct compat_group_req gr32;
 304	struct sockaddr_in6 *psin6;
 305
 306	if (optlen < sizeof(gr32))
 307		return -EINVAL;
 308	if (copy_from_sockptr(&gr32, optval, sizeof(gr32)))
 309		return -EFAULT;
 310
 311	if (gr32.gr_group.ss_family != AF_INET6)
 312		return -EADDRNOTAVAIL;
 313	psin6 = (struct sockaddr_in6 *)&gr32.gr_group;
 314	if (optname == MCAST_JOIN_GROUP)
 315		return ipv6_sock_mc_join(sk, gr32.gr_interface,
 316					&psin6->sin6_addr);
 317	return ipv6_sock_mc_drop(sk, gr32.gr_interface, &psin6->sin6_addr);
 318}
 319
 320static int ipv6_set_opt_hdr(struct sock *sk, int optname, sockptr_t optval,
 321		int optlen)
 322{
 323	struct ipv6_pinfo *np = inet6_sk(sk);
 324	struct ipv6_opt_hdr *new = NULL;
 325	struct net *net = sock_net(sk);
 326	struct ipv6_txoptions *opt;
 327	int err;
 328
 329	/* hop-by-hop / destination options are privileged option */
 330	if (optname != IPV6_RTHDR && !sockopt_ns_capable(net->user_ns, CAP_NET_RAW))
 331		return -EPERM;
 332
 333	/* remove any sticky options header with a zero option
 334	 * length, per RFC3542.
 335	 */
 336	if (optlen > 0) {
 337		if (sockptr_is_null(optval))
 338			return -EINVAL;
 339		if (optlen < sizeof(struct ipv6_opt_hdr) ||
 340		    optlen & 0x7 ||
 341		    optlen > 8 * 255)
 342			return -EINVAL;
 343
 344		new = memdup_sockptr(optval, optlen);
 345		if (IS_ERR(new))
 346			return PTR_ERR(new);
 347		if (unlikely(ipv6_optlen(new) > optlen)) {
 348			kfree(new);
 349			return -EINVAL;
 350		}
 351	}
 352
 353	opt = rcu_dereference_protected(np->opt, lockdep_sock_is_held(sk));
 354	opt = ipv6_renew_options(sk, opt, optname, new);
 355	kfree(new);
 356	if (IS_ERR(opt))
 357		return PTR_ERR(opt);
 358
 359	/* routing header option needs extra check */
 360	err = -EINVAL;
 361	if (optname == IPV6_RTHDR && opt && opt->srcrt) {
 362		struct ipv6_rt_hdr *rthdr = opt->srcrt;
 363		switch (rthdr->type) {
 364#if IS_ENABLED(CONFIG_IPV6_MIP6)
 365		case IPV6_SRCRT_TYPE_2:
 366			if (rthdr->hdrlen != 2 || rthdr->segments_left != 1)
 367				goto sticky_done;
 368			break;
 369#endif
 370		case IPV6_SRCRT_TYPE_4:
 371		{
 372			struct ipv6_sr_hdr *srh =
 373				(struct ipv6_sr_hdr *)opt->srcrt;
 374
 375			if (!seg6_validate_srh(srh, optlen, false))
 376				goto sticky_done;
 377			break;
 378		}
 379		default:
 380			goto sticky_done;
 381		}
 382	}
 383
 384	err = 0;
 385	opt = ipv6_update_options(sk, opt);
 386sticky_done:
 387	if (opt) {
 388		atomic_sub(opt->tot_len, &sk->sk_omem_alloc);
 389		txopt_put(opt);
 390	}
 391	return err;
 392}
 393
 394int do_ipv6_setsockopt(struct sock *sk, int level, int optname,
 395		       sockptr_t optval, unsigned int optlen)
 396{
 397	struct ipv6_pinfo *np = inet6_sk(sk);
 398	struct net *net = sock_net(sk);
 399	int val, valbool;
 400	int retv = -ENOPROTOOPT;
 401	bool needs_rtnl = setsockopt_needs_rtnl(optname);
 402
 403	if (sockptr_is_null(optval))
 404		val = 0;
 405	else {
 406		if (optlen >= sizeof(int)) {
 407			if (copy_from_sockptr(&val, optval, sizeof(val)))
 408				return -EFAULT;
 409		} else
 410			val = 0;
 411	}
 412
 413	valbool = (val != 0);
 414
 415	if (ip6_mroute_opt(optname))
 416		return ip6_mroute_setsockopt(sk, optname, optval, optlen);
 417
 418	/* Handle options that can be set without locking the socket. */
 419	switch (optname) {
 420	case IPV6_UNICAST_HOPS:
 421		if (optlen < sizeof(int))
 422			return -EINVAL;
 423		if (val > 255 || val < -1)
 424			return -EINVAL;
 425		WRITE_ONCE(np->hop_limit, val);
 426		return 0;
 427	case IPV6_MULTICAST_LOOP:
 428		if (optlen < sizeof(int))
 429			return -EINVAL;
 430		if (val != valbool)
 431			return -EINVAL;
 432		inet6_assign_bit(MC6_LOOP, sk, valbool);
 433		return 0;
 434	case IPV6_MULTICAST_HOPS:
 435		if (sk->sk_type == SOCK_STREAM)
 436			return retv;
 437		if (optlen < sizeof(int))
 438			return -EINVAL;
 439		if (val > 255 || val < -1)
 440			return -EINVAL;
 441		WRITE_ONCE(np->mcast_hops,
 442			   val == -1 ? IPV6_DEFAULT_MCASTHOPS : val);
 443		return 0;
 444	case IPV6_MTU:
 445		if (optlen < sizeof(int))
 446			return -EINVAL;
 447		if (val && val < IPV6_MIN_MTU)
 448			return -EINVAL;
 449		WRITE_ONCE(np->frag_size, val);
 450		return 0;
 451	case IPV6_MINHOPCOUNT:
 452		if (optlen < sizeof(int))
 453			return -EINVAL;
 454		if (val < 0 || val > 255)
 455			return -EINVAL;
 456
 457		if (val)
 458			static_branch_enable(&ip6_min_hopcount);
 459
 460		/* tcp_v6_err() and tcp_v6_rcv() might read min_hopcount
 461		 * while we are changing it.
 462		 */
 463		WRITE_ONCE(np->min_hopcount, val);
 464		return 0;
 465	case IPV6_RECVERR_RFC4884:
 466		if (optlen < sizeof(int))
 467			return -EINVAL;
 468		if (val < 0 || val > 1)
 469			return -EINVAL;
 470		inet6_assign_bit(RECVERR6_RFC4884, sk, valbool);
 471		return 0;
 472	case IPV6_MULTICAST_ALL:
 473		if (optlen < sizeof(int))
 474			return -EINVAL;
 475		inet6_assign_bit(MC6_ALL, sk, valbool);
 476		return 0;
 477	case IPV6_AUTOFLOWLABEL:
 478		inet6_assign_bit(AUTOFLOWLABEL, sk, valbool);
 479		inet6_set_bit(AUTOFLOWLABEL_SET, sk);
 480		return 0;
 481	case IPV6_DONTFRAG:
 482		inet6_assign_bit(DONTFRAG, sk, valbool);
 483		return 0;
 484	case IPV6_RECVERR:
 485		if (optlen < sizeof(int))
 486			return -EINVAL;
 487		inet6_assign_bit(RECVERR6, sk, valbool);
 488		if (!val)
 489			skb_errqueue_purge(&sk->sk_error_queue);
 490		return 0;
 491	case IPV6_ROUTER_ALERT_ISOLATE:
 492		if (optlen < sizeof(int))
 493			return -EINVAL;
 494		inet6_assign_bit(RTALERT_ISOLATE, sk, valbool);
 495		return 0;
 496	case IPV6_MTU_DISCOVER:
 497		if (optlen < sizeof(int))
 498			return -EINVAL;
 499		if (val < IPV6_PMTUDISC_DONT || val > IPV6_PMTUDISC_OMIT)
 500			return -EINVAL;
 501		WRITE_ONCE(np->pmtudisc, val);
 502		return 0;
 503	case IPV6_FLOWINFO_SEND:
 504		if (optlen < sizeof(int))
 505			return -EINVAL;
 506		inet6_assign_bit(SNDFLOW, sk, valbool);
 507		return 0;
 508	case IPV6_ADDR_PREFERENCES:
 509		if (optlen < sizeof(int))
 510			return -EINVAL;
 511		return ip6_sock_set_addr_preferences(sk, val);
 512	case IPV6_MULTICAST_IF:
 513		if (sk->sk_type == SOCK_STREAM)
 514			return -ENOPROTOOPT;
 515		if (optlen < sizeof(int))
 516			return -EINVAL;
 517		if (val) {
 518			struct net_device *dev;
 519			int bound_dev_if, midx;
 520
 521			rcu_read_lock();
 522
 523			dev = dev_get_by_index_rcu(net, val);
 524			if (!dev) {
 525				rcu_read_unlock();
 526				return -ENODEV;
 527			}
 528			midx = l3mdev_master_ifindex_rcu(dev);
 529
 530			rcu_read_unlock();
 531
 532			bound_dev_if = READ_ONCE(sk->sk_bound_dev_if);
 533			if (bound_dev_if &&
 534			    bound_dev_if != val &&
 535			    (!midx || midx != bound_dev_if))
 536				return -EINVAL;
 537		}
 538		WRITE_ONCE(np->mcast_oif, val);
 539		return 0;
 540	case IPV6_UNICAST_IF:
 541	{
 542		struct net_device *dev;
 543		int ifindex;
 544
 545		if (optlen != sizeof(int))
 546			return -EINVAL;
 547
 548		ifindex = (__force int)ntohl((__force __be32)val);
 549		if (!ifindex) {
 550			WRITE_ONCE(np->ucast_oif, 0);
 551			return 0;
 552		}
 553
 554		dev = dev_get_by_index(net, ifindex);
 555		if (!dev)
 556			return -EADDRNOTAVAIL;
 557		dev_put(dev);
 558
 559		if (READ_ONCE(sk->sk_bound_dev_if))
 560			return -EINVAL;
 561
 562		WRITE_ONCE(np->ucast_oif, ifindex);
 563		return 0;
 564	}
 565	}
 566	if (needs_rtnl)
 567		rtnl_lock();
 568	sockopt_lock_sock(sk);
 569
 570	/* Another thread has converted the socket into IPv4 with
 571	 * IPV6_ADDRFORM concurrently.
 572	 */
 573	if (unlikely(sk->sk_family != AF_INET6))
 574		goto unlock;
 575
 576	switch (optname) {
 577
 578	case IPV6_ADDRFORM:
 579		if (optlen < sizeof(int))
 580			goto e_inval;
 581		if (val == PF_INET) {
 
 
 
 582			if (sk->sk_type == SOCK_RAW)
 583				break;
 584
 585			if (sk->sk_protocol == IPPROTO_UDP ||
 586			    sk->sk_protocol == IPPROTO_UDPLITE) {
 587				struct udp_sock *up = udp_sk(sk);
 588				if (up->pending == AF_INET6) {
 589					retv = -EBUSY;
 590					break;
 591				}
 592			} else if (sk->sk_protocol == IPPROTO_TCP) {
 593				if (sk->sk_prot != &tcpv6_prot) {
 594					retv = -EBUSY;
 595					break;
 596				}
 597			} else {
 598				break;
 599			}
 600
 601			if (sk->sk_state != TCP_ESTABLISHED) {
 602				retv = -ENOTCONN;
 603				break;
 604			}
 605
 606			if (ipv6_only_sock(sk) ||
 607			    !ipv6_addr_v4mapped(&sk->sk_v6_daddr)) {
 608				retv = -EADDRNOTAVAIL;
 609				break;
 610			}
 611
 612			__ipv6_sock_mc_close(sk);
 613			__ipv6_sock_ac_close(sk);
 
 
 
 
 
 
 
 614
 615			if (sk->sk_protocol == IPPROTO_TCP) {
 616				struct inet_connection_sock *icsk = inet_csk(sk);
 617
 618				sock_prot_inuse_add(net, sk->sk_prot, -1);
 619				sock_prot_inuse_add(net, &tcp_prot, 1);
 620
 621				/* Paired with READ_ONCE(sk->sk_prot) in inet6_stream_ops */
 622				WRITE_ONCE(sk->sk_prot, &tcp_prot);
 623				/* Paired with READ_ONCE() in tcp_(get|set)sockopt() */
 624				WRITE_ONCE(icsk->icsk_af_ops, &ipv4_specific);
 625				WRITE_ONCE(sk->sk_socket->ops, &inet_stream_ops);
 626				WRITE_ONCE(sk->sk_family, PF_INET);
 627				tcp_sync_mss(sk, icsk->icsk_pmtu_cookie);
 628			} else {
 629				struct proto *prot = &udp_prot;
 630
 631				if (sk->sk_protocol == IPPROTO_UDPLITE)
 632					prot = &udplite_prot;
 633
 634				sock_prot_inuse_add(net, sk->sk_prot, -1);
 635				sock_prot_inuse_add(net, prot, 1);
 636
 637				/* Paired with READ_ONCE(sk->sk_prot) in inet6_dgram_ops */
 638				WRITE_ONCE(sk->sk_prot, prot);
 639				WRITE_ONCE(sk->sk_socket->ops, &inet_dgram_ops);
 640				WRITE_ONCE(sk->sk_family, PF_INET);
 641			}
 642
 643			/* Disable all options not to allocate memory anymore,
 644			 * but there is still a race.  See the lockless path
 645			 * in udpv6_sendmsg() and ipv6_local_rxpmtu().
 
 
 
 
 
 
 646			 */
 647			np->rxopt.all = 0;
 648
 649			inet6_cleanup_sock(sk);
 650
 651			module_put(THIS_MODULE);
 652			retv = 0;
 653			break;
 654		}
 655		goto e_inval;
 656
 657	case IPV6_V6ONLY:
 658		if (optlen < sizeof(int) ||
 659		    inet_sk(sk)->inet_num)
 660			goto e_inval;
 661		sk->sk_ipv6only = valbool;
 662		retv = 0;
 663		break;
 664
 665	case IPV6_RECVPKTINFO:
 666		if (optlen < sizeof(int))
 667			goto e_inval;
 668		np->rxopt.bits.rxinfo = valbool;
 669		retv = 0;
 670		break;
 671
 672	case IPV6_2292PKTINFO:
 673		if (optlen < sizeof(int))
 674			goto e_inval;
 675		np->rxopt.bits.rxoinfo = valbool;
 676		retv = 0;
 677		break;
 678
 679	case IPV6_RECVHOPLIMIT:
 680		if (optlen < sizeof(int))
 681			goto e_inval;
 682		np->rxopt.bits.rxhlim = valbool;
 683		retv = 0;
 684		break;
 685
 686	case IPV6_2292HOPLIMIT:
 687		if (optlen < sizeof(int))
 688			goto e_inval;
 689		np->rxopt.bits.rxohlim = valbool;
 690		retv = 0;
 691		break;
 692
 693	case IPV6_RECVRTHDR:
 694		if (optlen < sizeof(int))
 695			goto e_inval;
 696		np->rxopt.bits.srcrt = valbool;
 697		retv = 0;
 698		break;
 699
 700	case IPV6_2292RTHDR:
 701		if (optlen < sizeof(int))
 702			goto e_inval;
 703		np->rxopt.bits.osrcrt = valbool;
 704		retv = 0;
 705		break;
 706
 707	case IPV6_RECVHOPOPTS:
 708		if (optlen < sizeof(int))
 709			goto e_inval;
 710		np->rxopt.bits.hopopts = valbool;
 711		retv = 0;
 712		break;
 713
 714	case IPV6_2292HOPOPTS:
 715		if (optlen < sizeof(int))
 716			goto e_inval;
 717		np->rxopt.bits.ohopopts = valbool;
 718		retv = 0;
 719		break;
 720
 721	case IPV6_RECVDSTOPTS:
 722		if (optlen < sizeof(int))
 723			goto e_inval;
 724		np->rxopt.bits.dstopts = valbool;
 725		retv = 0;
 726		break;
 727
 728	case IPV6_2292DSTOPTS:
 729		if (optlen < sizeof(int))
 730			goto e_inval;
 731		np->rxopt.bits.odstopts = valbool;
 732		retv = 0;
 733		break;
 734
 735	case IPV6_TCLASS:
 736		if (optlen < sizeof(int))
 737			goto e_inval;
 738		if (val < -1 || val > 0xff)
 739			goto e_inval;
 740		/* RFC 3542, 6.5: default traffic class of 0x0 */
 741		if (val == -1)
 742			val = 0;
 743		if (sk->sk_type == SOCK_STREAM) {
 744			val &= ~INET_ECN_MASK;
 745			val |= np->tclass & INET_ECN_MASK;
 746		}
 747		if (np->tclass != val) {
 748			np->tclass = val;
 749			sk_dst_reset(sk);
 750		}
 751		retv = 0;
 752		break;
 753
 754	case IPV6_RECVTCLASS:
 755		if (optlen < sizeof(int))
 756			goto e_inval;
 757		np->rxopt.bits.rxtclass = valbool;
 758		retv = 0;
 759		break;
 760
 761	case IPV6_FLOWINFO:
 762		if (optlen < sizeof(int))
 763			goto e_inval;
 764		np->rxopt.bits.rxflow = valbool;
 765		retv = 0;
 766		break;
 767
 768	case IPV6_RECVPATHMTU:
 769		if (optlen < sizeof(int))
 770			goto e_inval;
 771		np->rxopt.bits.rxpmtu = valbool;
 772		retv = 0;
 773		break;
 774
 775	case IPV6_TRANSPARENT:
 776		if (valbool && !sockopt_ns_capable(net->user_ns, CAP_NET_RAW) &&
 777		    !sockopt_ns_capable(net->user_ns, CAP_NET_ADMIN)) {
 778			retv = -EPERM;
 779			break;
 780		}
 781		if (optlen < sizeof(int))
 782			goto e_inval;
 783		/* we don't have a separate transparent bit for IPV6 we use the one in the IPv4 socket */
 784		inet_assign_bit(TRANSPARENT, sk, valbool);
 785		retv = 0;
 786		break;
 787
 788	case IPV6_FREEBIND:
 789		if (optlen < sizeof(int))
 790			goto e_inval;
 791		/* we also don't have a separate freebind bit for IPV6 */
 792		inet_assign_bit(FREEBIND, sk, valbool);
 793		retv = 0;
 794		break;
 795
 796	case IPV6_RECVORIGDSTADDR:
 797		if (optlen < sizeof(int))
 798			goto e_inval;
 799		np->rxopt.bits.rxorigdstaddr = valbool;
 800		retv = 0;
 801		break;
 802
 803	case IPV6_HOPOPTS:
 804	case IPV6_RTHDRDSTOPTS:
 805	case IPV6_RTHDR:
 806	case IPV6_DSTOPTS:
 807		retv = ipv6_set_opt_hdr(sk, optname, optval, optlen);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 808		break;
 
 809
 810	case IPV6_PKTINFO:
 811	{
 812		struct in6_pktinfo pkt;
 813
 814		if (optlen == 0)
 815			goto e_inval;
 816		else if (optlen < sizeof(struct in6_pktinfo) ||
 817			 sockptr_is_null(optval))
 818			goto e_inval;
 819
 820		if (copy_from_sockptr(&pkt, optval, sizeof(pkt))) {
 821			retv = -EFAULT;
 822			break;
 823		}
 824		if (!sk_dev_equal_l3scope(sk, pkt.ipi6_ifindex))
 825			goto e_inval;
 826
 827		np->sticky_pktinfo.ipi6_ifindex = pkt.ipi6_ifindex;
 828		np->sticky_pktinfo.ipi6_addr = pkt.ipi6_addr;
 829		retv = 0;
 830		break;
 831	}
 832
 833	case IPV6_2292PKTOPTIONS:
 834	{
 835		struct ipv6_txoptions *opt = NULL;
 836		struct msghdr msg;
 837		struct flowi6 fl6;
 838		struct ipcm6_cookie ipc6;
 839
 840		memset(&fl6, 0, sizeof(fl6));
 841		fl6.flowi6_oif = sk->sk_bound_dev_if;
 842		fl6.flowi6_mark = sk->sk_mark;
 843
 844		if (optlen == 0)
 845			goto update;
 846
 847		/* 1K is probably excessive
 848		 * 1K is surely not enough, 2K per standard header is 16K.
 849		 */
 850		retv = -EINVAL;
 851		if (optlen > 64*1024)
 852			break;
 853
 854		opt = sock_kmalloc(sk, sizeof(*opt) + optlen, GFP_KERNEL);
 855		retv = -ENOBUFS;
 856		if (!opt)
 857			break;
 858
 859		memset(opt, 0, sizeof(*opt));
 860		refcount_set(&opt->refcnt, 1);
 861		opt->tot_len = sizeof(*opt) + optlen;
 862		retv = -EFAULT;
 863		if (copy_from_sockptr(opt + 1, optval, optlen))
 864			goto done;
 865
 866		msg.msg_controllen = optlen;
 867		msg.msg_control_is_user = false;
 868		msg.msg_control = (void *)(opt+1);
 869		ipc6.opt = opt;
 870
 871		retv = ip6_datagram_send_ctl(net, sk, &msg, &fl6, &ipc6);
 
 872		if (retv)
 873			goto done;
 874update:
 875		retv = 0;
 876		opt = ipv6_update_options(sk, opt);
 877done:
 878		if (opt) {
 879			atomic_sub(opt->tot_len, &sk->sk_omem_alloc);
 880			txopt_put(opt);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 881		}
 
 
 
 
 
 
 
 
 
 
 
 
 
 882		break;
 883	}
 884
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 885	case IPV6_ADD_MEMBERSHIP:
 886	case IPV6_DROP_MEMBERSHIP:
 887	{
 888		struct ipv6_mreq mreq;
 889
 890		if (optlen < sizeof(struct ipv6_mreq))
 891			goto e_inval;
 892
 893		retv = -EPROTO;
 894		if (inet_test_bit(IS_ICSK, sk))
 895			break;
 896
 897		retv = -EFAULT;
 898		if (copy_from_sockptr(&mreq, optval, sizeof(struct ipv6_mreq)))
 899			break;
 900
 901		if (optname == IPV6_ADD_MEMBERSHIP)
 902			retv = ipv6_sock_mc_join(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_multiaddr);
 903		else
 904			retv = ipv6_sock_mc_drop(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_multiaddr);
 905		break;
 906	}
 907	case IPV6_JOIN_ANYCAST:
 908	case IPV6_LEAVE_ANYCAST:
 909	{
 910		struct ipv6_mreq mreq;
 911
 912		if (optlen < sizeof(struct ipv6_mreq))
 913			goto e_inval;
 914
 915		retv = -EFAULT;
 916		if (copy_from_sockptr(&mreq, optval, sizeof(struct ipv6_mreq)))
 917			break;
 918
 919		if (optname == IPV6_JOIN_ANYCAST)
 920			retv = ipv6_sock_ac_join(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_acaddr);
 921		else
 922			retv = ipv6_sock_ac_drop(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_acaddr);
 923		break;
 924	}
 925	case MCAST_JOIN_GROUP:
 926	case MCAST_LEAVE_GROUP:
 927		if (in_compat_syscall())
 928			retv = compat_ipv6_mcast_join_leave(sk, optname, optval,
 929							    optlen);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 930		else
 931			retv = ipv6_mcast_join_leave(sk, optname, optval,
 932						     optlen);
 933		break;
 
 934	case MCAST_JOIN_SOURCE_GROUP:
 935	case MCAST_LEAVE_SOURCE_GROUP:
 936	case MCAST_BLOCK_SOURCE:
 937	case MCAST_UNBLOCK_SOURCE:
 938		retv = do_ipv6_mcast_group_source(sk, optname, optval, optlen);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 939		break;
 
 940	case MCAST_MSFILTER:
 941		if (in_compat_syscall())
 942			retv = compat_ipv6_set_mcast_msfilter(sk, optval,
 943							      optlen);
 944		else
 945			retv = ipv6_set_mcast_msfilter(sk, optval, optlen);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 946		break;
 
 947	case IPV6_ROUTER_ALERT:
 948		if (optlen < sizeof(int))
 949			goto e_inval;
 950		retv = ip6_ra_control(sk, val);
 951		break;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 952	case IPV6_FLOWLABEL_MGR:
 953		retv = ipv6_flowlabel_opt(sk, optval, optlen);
 954		break;
 955	case IPV6_IPSEC_POLICY:
 956	case IPV6_XFRM_POLICY:
 957		retv = -EPERM;
 958		if (!sockopt_ns_capable(net->user_ns, CAP_NET_ADMIN))
 959			break;
 960		retv = xfrm_user_policy(sk, optname, optval, optlen);
 961		break;
 962
 963	case IPV6_RECVFRAGSIZE:
 964		np->rxopt.bits.recvfragsize = valbool;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 965		retv = 0;
 966		break;
 967	}
 968
 969unlock:
 970	sockopt_release_sock(sk);
 971	if (needs_rtnl)
 972		rtnl_unlock();
 973
 974	return retv;
 975
 976e_inval:
 977	retv = -EINVAL;
 978	goto unlock;
 979}
 980
 981int ipv6_setsockopt(struct sock *sk, int level, int optname, sockptr_t optval,
 982		    unsigned int optlen)
 983{
 984	int err;
 985
 986	if (level == SOL_IP && sk->sk_type != SOCK_RAW)
 987		return udp_prot.setsockopt(sk, level, optname, optval, optlen);
 988
 989	if (level != SOL_IPV6)
 990		return -ENOPROTOOPT;
 991
 992	err = do_ipv6_setsockopt(sk, level, optname, optval, optlen);
 993#ifdef CONFIG_NETFILTER
 994	/* we need to exclude all possible ENOPROTOOPTs except default case */
 995	if (err == -ENOPROTOOPT && optname != IPV6_IPSEC_POLICY &&
 996			optname != IPV6_XFRM_POLICY)
 997		err = nf_setsockopt(sk, PF_INET6, optname, optval, optlen);
 
 
 
 
 998#endif
 999	return err;
1000}
 
1001EXPORT_SYMBOL(ipv6_setsockopt);
1002
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1003static int ipv6_getsockopt_sticky(struct sock *sk, struct ipv6_txoptions *opt,
1004				  int optname, sockptr_t optval, int len)
1005{
1006	struct ipv6_opt_hdr *hdr;
1007
1008	if (!opt)
1009		return 0;
1010
1011	switch (optname) {
1012	case IPV6_HOPOPTS:
1013		hdr = opt->hopopt;
1014		break;
1015	case IPV6_RTHDRDSTOPTS:
1016		hdr = opt->dst0opt;
1017		break;
1018	case IPV6_RTHDR:
1019		hdr = (struct ipv6_opt_hdr *)opt->srcrt;
1020		break;
1021	case IPV6_DSTOPTS:
1022		hdr = opt->dst1opt;
1023		break;
1024	default:
1025		return -EINVAL;	/* should not happen */
1026	}
1027
1028	if (!hdr)
1029		return 0;
1030
1031	len = min_t(unsigned int, len, ipv6_optlen(hdr));
1032	if (copy_to_sockptr(optval, hdr, len))
1033		return -EFAULT;
1034	return len;
1035}
1036
1037static int ipv6_get_msfilter(struct sock *sk, sockptr_t optval,
1038			     sockptr_t optlen, int len)
1039{
1040	const int size0 = offsetof(struct group_filter, gf_slist_flex);
1041	struct group_filter gsf;
1042	int num;
1043	int err;
1044
1045	if (len < size0)
1046		return -EINVAL;
1047	if (copy_from_sockptr(&gsf, optval, size0))
1048		return -EFAULT;
1049	if (gsf.gf_group.ss_family != AF_INET6)
1050		return -EADDRNOTAVAIL;
1051	num = gsf.gf_numsrc;
1052	sockopt_lock_sock(sk);
1053	err = ip6_mc_msfget(sk, &gsf, optval, size0);
1054	if (!err) {
1055		if (num > gsf.gf_numsrc)
1056			num = gsf.gf_numsrc;
1057		len = GROUP_FILTER_SIZE(num);
1058		if (copy_to_sockptr(optlen, &len, sizeof(int)) ||
1059		    copy_to_sockptr(optval, &gsf, size0))
1060			err = -EFAULT;
1061	}
1062	sockopt_release_sock(sk);
1063	return err;
1064}
1065
1066static int compat_ipv6_get_msfilter(struct sock *sk, sockptr_t optval,
1067				    sockptr_t optlen, int len)
1068{
1069	const int size0 = offsetof(struct compat_group_filter, gf_slist_flex);
1070	struct compat_group_filter gf32;
1071	struct group_filter gf;
1072	int err;
1073	int num;
1074
1075	if (len < size0)
1076		return -EINVAL;
1077
1078	if (copy_from_sockptr(&gf32, optval, size0))
1079		return -EFAULT;
1080	gf.gf_interface = gf32.gf_interface;
1081	gf.gf_fmode = gf32.gf_fmode;
1082	num = gf.gf_numsrc = gf32.gf_numsrc;
1083	gf.gf_group = gf32.gf_group;
1084
1085	if (gf.gf_group.ss_family != AF_INET6)
1086		return -EADDRNOTAVAIL;
1087
1088	sockopt_lock_sock(sk);
1089	err = ip6_mc_msfget(sk, &gf, optval, size0);
1090	sockopt_release_sock(sk);
1091	if (err)
1092		return err;
1093	if (num > gf.gf_numsrc)
1094		num = gf.gf_numsrc;
1095	len = GROUP_FILTER_SIZE(num) - (sizeof(gf)-sizeof(gf32));
1096	if (copy_to_sockptr(optlen, &len, sizeof(int)) ||
1097	    copy_to_sockptr_offset(optval, offsetof(struct compat_group_filter, gf_fmode),
1098				   &gf.gf_fmode, sizeof(gf32.gf_fmode)) ||
1099	    copy_to_sockptr_offset(optval, offsetof(struct compat_group_filter, gf_numsrc),
1100				   &gf.gf_numsrc, sizeof(gf32.gf_numsrc)))
1101		return -EFAULT;
1102	return 0;
1103}
1104
1105int do_ipv6_getsockopt(struct sock *sk, int level, int optname,
1106		       sockptr_t optval, sockptr_t optlen)
1107{
1108	struct ipv6_pinfo *np = inet6_sk(sk);
1109	int len;
1110	int val;
1111
1112	if (ip6_mroute_opt(optname))
1113		return ip6_mroute_getsockopt(sk, optname, optval, optlen);
1114
1115	if (copy_from_sockptr(&len, optlen, sizeof(int)))
1116		return -EFAULT;
1117	switch (optname) {
1118	case IPV6_ADDRFORM:
1119		if (sk->sk_protocol != IPPROTO_UDP &&
1120		    sk->sk_protocol != IPPROTO_UDPLITE &&
1121		    sk->sk_protocol != IPPROTO_TCP)
1122			return -ENOPROTOOPT;
1123		if (sk->sk_state != TCP_ESTABLISHED)
1124			return -ENOTCONN;
1125		val = sk->sk_family;
1126		break;
1127	case MCAST_MSFILTER:
1128		if (in_compat_syscall())
1129			return compat_ipv6_get_msfilter(sk, optval, optlen, len);
1130		return ipv6_get_msfilter(sk, optval, optlen, len);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1131	case IPV6_2292PKTOPTIONS:
1132	{
1133		struct msghdr msg;
1134		struct sk_buff *skb;
1135
1136		if (sk->sk_type != SOCK_STREAM)
1137			return -ENOPROTOOPT;
1138
1139		if (optval.is_kernel) {
1140			msg.msg_control_is_user = false;
1141			msg.msg_control = optval.kernel;
1142		} else {
1143			msg.msg_control_is_user = true;
1144			msg.msg_control_user = optval.user;
1145		}
1146		msg.msg_controllen = len;
1147		msg.msg_flags = 0;
1148
1149		sockopt_lock_sock(sk);
1150		skb = np->pktoptions;
1151		if (skb)
 
 
 
 
1152			ip6_datagram_recv_ctl(sk, &msg, skb);
1153		sockopt_release_sock(sk);
1154		if (!skb) {
1155			if (np->rxopt.bits.rxinfo) {
1156				int mcast_oif = READ_ONCE(np->mcast_oif);
1157				struct in6_pktinfo src_info;
1158
1159				src_info.ipi6_ifindex = mcast_oif ? :
1160					np->sticky_pktinfo.ipi6_ifindex;
1161				src_info.ipi6_addr = mcast_oif ? sk->sk_v6_daddr : np->sticky_pktinfo.ipi6_addr;
1162				put_cmsg(&msg, SOL_IPV6, IPV6_PKTINFO, sizeof(src_info), &src_info);
1163			}
1164			if (np->rxopt.bits.rxhlim) {
1165				int hlim = READ_ONCE(np->mcast_hops);
1166
1167				put_cmsg(&msg, SOL_IPV6, IPV6_HOPLIMIT, sizeof(hlim), &hlim);
1168			}
1169			if (np->rxopt.bits.rxtclass) {
1170				int tclass = (int)ip6_tclass(np->rcv_flowinfo);
1171
1172				put_cmsg(&msg, SOL_IPV6, IPV6_TCLASS, sizeof(tclass), &tclass);
1173			}
1174			if (np->rxopt.bits.rxoinfo) {
1175				int mcast_oif = READ_ONCE(np->mcast_oif);
1176				struct in6_pktinfo src_info;
1177
1178				src_info.ipi6_ifindex = mcast_oif ? :
1179					np->sticky_pktinfo.ipi6_ifindex;
1180				src_info.ipi6_addr = mcast_oif ? sk->sk_v6_daddr :
1181								 np->sticky_pktinfo.ipi6_addr;
1182				put_cmsg(&msg, SOL_IPV6, IPV6_2292PKTINFO, sizeof(src_info), &src_info);
1183			}
1184			if (np->rxopt.bits.rxohlim) {
1185				int hlim = READ_ONCE(np->mcast_hops);
1186
1187				put_cmsg(&msg, SOL_IPV6, IPV6_2292HOPLIMIT, sizeof(hlim), &hlim);
1188			}
1189			if (np->rxopt.bits.rxflow) {
1190				__be32 flowinfo = np->rcv_flowinfo;
1191
1192				put_cmsg(&msg, SOL_IPV6, IPV6_FLOWINFO, sizeof(flowinfo), &flowinfo);
1193			}
1194		}
1195		len -= msg.msg_controllen;
1196		return copy_to_sockptr(optlen, &len, sizeof(int));
1197	}
1198	case IPV6_MTU:
1199	{
1200		struct dst_entry *dst;
1201
1202		val = 0;
1203		rcu_read_lock();
1204		dst = __sk_dst_get(sk);
1205		if (dst)
1206			val = dst_mtu(dst);
1207		rcu_read_unlock();
1208		if (!val)
1209			return -ENOTCONN;
1210		break;
1211	}
1212
1213	case IPV6_V6ONLY:
1214		val = sk->sk_ipv6only;
1215		break;
1216
1217	case IPV6_RECVPKTINFO:
1218		val = np->rxopt.bits.rxinfo;
1219		break;
1220
1221	case IPV6_2292PKTINFO:
1222		val = np->rxopt.bits.rxoinfo;
1223		break;
1224
1225	case IPV6_RECVHOPLIMIT:
1226		val = np->rxopt.bits.rxhlim;
1227		break;
1228
1229	case IPV6_2292HOPLIMIT:
1230		val = np->rxopt.bits.rxohlim;
1231		break;
1232
1233	case IPV6_RECVRTHDR:
1234		val = np->rxopt.bits.srcrt;
1235		break;
1236
1237	case IPV6_2292RTHDR:
1238		val = np->rxopt.bits.osrcrt;
1239		break;
1240
1241	case IPV6_HOPOPTS:
1242	case IPV6_RTHDRDSTOPTS:
1243	case IPV6_RTHDR:
1244	case IPV6_DSTOPTS:
1245	{
1246		struct ipv6_txoptions *opt;
1247
1248		sockopt_lock_sock(sk);
1249		opt = rcu_dereference_protected(np->opt,
1250						lockdep_sock_is_held(sk));
1251		len = ipv6_getsockopt_sticky(sk, opt, optname, optval, len);
1252		sockopt_release_sock(sk);
1253		/* check if ipv6_getsockopt_sticky() returns err code */
1254		if (len < 0)
1255			return len;
1256		return copy_to_sockptr(optlen, &len, sizeof(int));
1257	}
1258
1259	case IPV6_RECVHOPOPTS:
1260		val = np->rxopt.bits.hopopts;
1261		break;
1262
1263	case IPV6_2292HOPOPTS:
1264		val = np->rxopt.bits.ohopopts;
1265		break;
1266
1267	case IPV6_RECVDSTOPTS:
1268		val = np->rxopt.bits.dstopts;
1269		break;
1270
1271	case IPV6_2292DSTOPTS:
1272		val = np->rxopt.bits.odstopts;
1273		break;
1274
1275	case IPV6_TCLASS:
1276		val = np->tclass;
1277		break;
1278
1279	case IPV6_RECVTCLASS:
1280		val = np->rxopt.bits.rxtclass;
1281		break;
1282
1283	case IPV6_FLOWINFO:
1284		val = np->rxopt.bits.rxflow;
1285		break;
1286
1287	case IPV6_RECVPATHMTU:
1288		val = np->rxopt.bits.rxpmtu;
1289		break;
1290
1291	case IPV6_PATHMTU:
1292	{
1293		struct dst_entry *dst;
1294		struct ip6_mtuinfo mtuinfo;
1295
1296		if (len < sizeof(mtuinfo))
1297			return -EINVAL;
1298
1299		len = sizeof(mtuinfo);
1300		memset(&mtuinfo, 0, sizeof(mtuinfo));
1301
1302		rcu_read_lock();
1303		dst = __sk_dst_get(sk);
1304		if (dst)
1305			mtuinfo.ip6m_mtu = dst_mtu(dst);
1306		rcu_read_unlock();
1307		if (!mtuinfo.ip6m_mtu)
1308			return -ENOTCONN;
1309
1310		if (copy_to_sockptr(optlen, &len, sizeof(int)))
1311			return -EFAULT;
1312		if (copy_to_sockptr(optval, &mtuinfo, len))
1313			return -EFAULT;
1314
1315		return 0;
 
1316	}
1317
1318	case IPV6_TRANSPARENT:
1319		val = inet_test_bit(TRANSPARENT, sk);
1320		break;
1321
1322	case IPV6_FREEBIND:
1323		val = inet_test_bit(FREEBIND, sk);
1324		break;
1325
1326	case IPV6_RECVORIGDSTADDR:
1327		val = np->rxopt.bits.rxorigdstaddr;
1328		break;
1329
1330	case IPV6_UNICAST_HOPS:
1331	case IPV6_MULTICAST_HOPS:
1332	{
1333		struct dst_entry *dst;
1334
1335		if (optname == IPV6_UNICAST_HOPS)
1336			val = READ_ONCE(np->hop_limit);
1337		else
1338			val = READ_ONCE(np->mcast_hops);
1339
1340		if (val < 0) {
1341			rcu_read_lock();
1342			dst = __sk_dst_get(sk);
1343			if (dst)
1344				val = ip6_dst_hoplimit(dst);
1345			rcu_read_unlock();
1346		}
1347
1348		if (val < 0)
1349			val = sock_net(sk)->ipv6.devconf_all->hop_limit;
1350		break;
1351	}
1352
1353	case IPV6_MULTICAST_LOOP:
1354		val = inet6_test_bit(MC6_LOOP, sk);
1355		break;
1356
1357	case IPV6_MULTICAST_IF:
1358		val = READ_ONCE(np->mcast_oif);
1359		break;
1360
1361	case IPV6_MULTICAST_ALL:
1362		val = inet6_test_bit(MC6_ALL, sk);
1363		break;
1364
1365	case IPV6_UNICAST_IF:
1366		val = (__force int)htonl((__u32) READ_ONCE(np->ucast_oif));
1367		break;
1368
1369	case IPV6_MTU_DISCOVER:
1370		val = READ_ONCE(np->pmtudisc);
1371		break;
1372
1373	case IPV6_RECVERR:
1374		val = inet6_test_bit(RECVERR6, sk);
1375		break;
1376
1377	case IPV6_FLOWINFO_SEND:
1378		val = inet6_test_bit(SNDFLOW, sk);
1379		break;
1380
1381	case IPV6_FLOWLABEL_MGR:
1382	{
1383		struct in6_flowlabel_req freq;
1384		int flags;
1385
1386		if (len < sizeof(freq))
1387			return -EINVAL;
1388
1389		if (copy_from_sockptr(&freq, optval, sizeof(freq)))
1390			return -EFAULT;
1391
1392		if (freq.flr_action != IPV6_FL_A_GET)
1393			return -EINVAL;
1394
1395		len = sizeof(freq);
1396		flags = freq.flr_flags;
1397
1398		memset(&freq, 0, sizeof(freq));
1399
1400		val = ipv6_flowlabel_opt_get(sk, &freq, flags);
1401		if (val < 0)
1402			return val;
1403
1404		if (copy_to_sockptr(optlen, &len, sizeof(int)))
1405			return -EFAULT;
1406		if (copy_to_sockptr(optval, &freq, len))
1407			return -EFAULT;
1408
1409		return 0;
1410	}
1411
1412	case IPV6_ADDR_PREFERENCES:
1413		{
1414		u8 srcprefs = READ_ONCE(np->srcprefs);
1415		val = 0;
1416
1417		if (srcprefs & IPV6_PREFER_SRC_TMP)
1418			val |= IPV6_PREFER_SRC_TMP;
1419		else if (srcprefs & IPV6_PREFER_SRC_PUBLIC)
1420			val |= IPV6_PREFER_SRC_PUBLIC;
1421		else {
1422			/* XXX: should we return system default? */
1423			val |= IPV6_PREFER_SRC_PUBTMP_DEFAULT;
1424		}
1425
1426		if (srcprefs & IPV6_PREFER_SRC_COA)
1427			val |= IPV6_PREFER_SRC_COA;
1428		else
1429			val |= IPV6_PREFER_SRC_HOME;
1430		break;
1431		}
1432	case IPV6_MINHOPCOUNT:
1433		val = READ_ONCE(np->min_hopcount);
1434		break;
1435
1436	case IPV6_DONTFRAG:
1437		val = inet6_test_bit(DONTFRAG, sk);
1438		break;
1439
1440	case IPV6_AUTOFLOWLABEL:
1441		val = ip6_autoflowlabel(sock_net(sk), sk);
1442		break;
1443
1444	case IPV6_RECVFRAGSIZE:
1445		val = np->rxopt.bits.recvfragsize;
1446		break;
1447
1448	case IPV6_ROUTER_ALERT_ISOLATE:
1449		val = inet6_test_bit(RTALERT_ISOLATE, sk);
1450		break;
1451
1452	case IPV6_RECVERR_RFC4884:
1453		val = inet6_test_bit(RECVERR6_RFC4884, sk);
1454		break;
1455
1456	default:
1457		return -ENOPROTOOPT;
1458	}
1459	len = min_t(unsigned int, sizeof(int), len);
1460	if (copy_to_sockptr(optlen, &len, sizeof(int)))
1461		return -EFAULT;
1462	if (copy_to_sockptr(optval, &val, len))
1463		return -EFAULT;
1464	return 0;
1465}
1466
1467int ipv6_getsockopt(struct sock *sk, int level, int optname,
1468		    char __user *optval, int __user *optlen)
1469{
1470	int err;
1471
1472	if (level == SOL_IP && sk->sk_type != SOCK_RAW)
1473		return udp_prot.getsockopt(sk, level, optname, optval, optlen);
1474
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1475	if (level != SOL_IPV6)
1476		return -ENOPROTOOPT;
1477
1478	err = do_ipv6_getsockopt(sk, level, optname,
1479				 USER_SOCKPTR(optval), USER_SOCKPTR(optlen));
 
 
 
 
1480#ifdef CONFIG_NETFILTER
1481	/* we need to exclude all possible ENOPROTOOPTs except default case */
1482	if (err == -ENOPROTOOPT && optname != IPV6_2292PKTOPTIONS) {
1483		int len;
1484
1485		if (get_user(len, optlen))
1486			return -EFAULT;
1487
1488		err = nf_getsockopt(sk, PF_INET6, optname, optval, &len);
 
 
 
1489		if (err >= 0)
1490			err = put_user(len, optlen);
1491	}
1492#endif
1493	return err;
1494}
1495EXPORT_SYMBOL(ipv6_getsockopt);