Linux Audio

Check our new training course

Loading...
v4.10.11
  1/* Netfilter messages via netlink socket. Allows for user space
  2 * protocol helpers and general trouble making from userspace.
  3 *
  4 * (C) 2001 by Jay Schulist <jschlst@samba.org>,
  5 * (C) 2002-2005 by Harald Welte <laforge@gnumonks.org>
  6 * (C) 2005,2007 by Pablo Neira Ayuso <pablo@netfilter.org>
  7 *
  8 * Initial netfilter messages via netlink development funded and
  9 * generally made possible by Network Robots, Inc. (www.networkrobots.com)
 10 *
 11 * Further development of this code funded by Astaro AG (http://www.astaro.com)
 12 *
 13 * This software may be used and distributed according to the terms
 14 * of the GNU General Public License, incorporated herein by reference.
 15 */
 16
 17#include <linux/module.h>
 18#include <linux/types.h>
 19#include <linux/socket.h>
 20#include <linux/kernel.h>
 21#include <linux/string.h>
 22#include <linux/sockios.h>
 23#include <linux/net.h>
 24#include <linux/skbuff.h>
 25#include <linux/uaccess.h>
 26#include <net/sock.h>
 27#include <linux/init.h>
 
 28
 29#include <net/netlink.h>
 
 
 30#include <linux/netfilter/nfnetlink.h>
 31
 32MODULE_LICENSE("GPL");
 33MODULE_AUTHOR("Harald Welte <laforge@netfilter.org>");
 34MODULE_ALIAS_NET_PF_PROTO(PF_NETLINK, NETLINK_NETFILTER);
 
 35
 36#define nfnl_dereference_protected(id) \
 37	rcu_dereference_protected(table[(id)].subsys, \
 38				  lockdep_nfnl_is_held((id)))
 39
 40static char __initdata nfversion[] = "0.30";
 
 
 
 
 
 
 
 
 
 
 41
 42static struct {
 43	struct mutex				mutex;
 44	const struct nfnetlink_subsystem __rcu	*subsys;
 45} table[NFNL_SUBSYS_COUNT];
 46
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 47static const int nfnl_group2type[NFNLGRP_MAX+1] = {
 48	[NFNLGRP_CONNTRACK_NEW]		= NFNL_SUBSYS_CTNETLINK,
 49	[NFNLGRP_CONNTRACK_UPDATE]	= NFNL_SUBSYS_CTNETLINK,
 50	[NFNLGRP_CONNTRACK_DESTROY]	= NFNL_SUBSYS_CTNETLINK,
 51	[NFNLGRP_CONNTRACK_EXP_NEW]	= NFNL_SUBSYS_CTNETLINK_EXP,
 52	[NFNLGRP_CONNTRACK_EXP_UPDATE]	= NFNL_SUBSYS_CTNETLINK_EXP,
 53	[NFNLGRP_CONNTRACK_EXP_DESTROY] = NFNL_SUBSYS_CTNETLINK_EXP,
 54	[NFNLGRP_NFTABLES]		= NFNL_SUBSYS_NFTABLES,
 55	[NFNLGRP_ACCT_QUOTA]		= NFNL_SUBSYS_ACCT,
 56	[NFNLGRP_NFTRACE]		= NFNL_SUBSYS_NFTABLES,
 57};
 58
 
 
 
 
 
 59void nfnl_lock(__u8 subsys_id)
 60{
 61	mutex_lock(&table[subsys_id].mutex);
 62}
 63EXPORT_SYMBOL_GPL(nfnl_lock);
 64
 65void nfnl_unlock(__u8 subsys_id)
 66{
 67	mutex_unlock(&table[subsys_id].mutex);
 68}
 69EXPORT_SYMBOL_GPL(nfnl_unlock);
 70
 71#ifdef CONFIG_PROVE_LOCKING
 72bool lockdep_nfnl_is_held(u8 subsys_id)
 73{
 74	return lockdep_is_held(&table[subsys_id].mutex);
 75}
 76EXPORT_SYMBOL_GPL(lockdep_nfnl_is_held);
 77#endif
 78
 79int nfnetlink_subsys_register(const struct nfnetlink_subsystem *n)
 80{
 
 
 
 
 
 
 
 81	nfnl_lock(n->subsys_id);
 82	if (table[n->subsys_id].subsys) {
 83		nfnl_unlock(n->subsys_id);
 84		return -EBUSY;
 85	}
 86	rcu_assign_pointer(table[n->subsys_id].subsys, n);
 87	nfnl_unlock(n->subsys_id);
 88
 89	return 0;
 90}
 91EXPORT_SYMBOL_GPL(nfnetlink_subsys_register);
 92
 93int nfnetlink_subsys_unregister(const struct nfnetlink_subsystem *n)
 94{
 95	nfnl_lock(n->subsys_id);
 96	table[n->subsys_id].subsys = NULL;
 97	nfnl_unlock(n->subsys_id);
 98	synchronize_rcu();
 99	return 0;
100}
101EXPORT_SYMBOL_GPL(nfnetlink_subsys_unregister);
102
103static inline const struct nfnetlink_subsystem *nfnetlink_get_subsys(u_int16_t type)
104{
105	u_int8_t subsys_id = NFNL_SUBSYS_ID(type);
106
107	if (subsys_id >= NFNL_SUBSYS_COUNT)
108		return NULL;
109
110	return rcu_dereference(table[subsys_id].subsys);
111}
112
113static inline const struct nfnl_callback *
114nfnetlink_find_client(u_int16_t type, const struct nfnetlink_subsystem *ss)
115{
116	u_int8_t cb_id = NFNL_MSG_TYPE(type);
117
118	if (cb_id >= ss->cb_count)
119		return NULL;
120
121	return &ss->cb[cb_id];
122}
123
124int nfnetlink_has_listeners(struct net *net, unsigned int group)
125{
126	return netlink_has_listeners(net->nfnl, group);
 
 
127}
128EXPORT_SYMBOL_GPL(nfnetlink_has_listeners);
129
130int nfnetlink_send(struct sk_buff *skb, struct net *net, u32 portid,
131		   unsigned int group, int echo, gfp_t flags)
132{
133	return nlmsg_notify(net->nfnl, skb, portid, group, echo, flags);
 
 
134}
135EXPORT_SYMBOL_GPL(nfnetlink_send);
136
137int nfnetlink_set_err(struct net *net, u32 portid, u32 group, int error)
138{
139	return netlink_set_err(net->nfnl, portid, group, error);
 
 
140}
141EXPORT_SYMBOL_GPL(nfnetlink_set_err);
142
143int nfnetlink_unicast(struct sk_buff *skb, struct net *net, u32 portid,
144		      int flags)
145{
146	return netlink_unicast(net->nfnl, skb, portid, flags);
 
 
 
 
 
 
 
147}
148EXPORT_SYMBOL_GPL(nfnetlink_unicast);
149
 
 
 
 
 
 
 
 
 
150/* Process one complete nfnetlink message. */
151static int nfnetlink_rcv_msg(struct sk_buff *skb, struct nlmsghdr *nlh)
 
152{
153	struct net *net = sock_net(skb->sk);
154	const struct nfnl_callback *nc;
155	const struct nfnetlink_subsystem *ss;
156	int type, err;
157
158	/* All the messages must at least contain nfgenmsg */
159	if (nlmsg_len(nlh) < sizeof(struct nfgenmsg))
160		return 0;
161
162	type = nlh->nlmsg_type;
163replay:
164	rcu_read_lock();
 
165	ss = nfnetlink_get_subsys(type);
166	if (!ss) {
167#ifdef CONFIG_MODULES
168		rcu_read_unlock();
169		request_module("nfnetlink-subsys-%d", NFNL_SUBSYS_ID(type));
170		rcu_read_lock();
171		ss = nfnetlink_get_subsys(type);
172		if (!ss)
173#endif
174		{
175			rcu_read_unlock();
176			return -EINVAL;
177		}
178	}
179
180	nc = nfnetlink_find_client(type, ss);
181	if (!nc) {
182		rcu_read_unlock();
183		return -EINVAL;
184	}
185
186	{
187		int min_len = nlmsg_total_size(sizeof(struct nfgenmsg));
188		u_int8_t cb_id = NFNL_MSG_TYPE(nlh->nlmsg_type);
189		struct nlattr *cda[ss->cb[cb_id].attr_count + 1];
 
190		struct nlattr *attr = (void *)nlh + min_len;
191		int attrlen = nlh->nlmsg_len - min_len;
192		__u8 subsys_id = NFNL_SUBSYS_ID(type);
 
 
 
 
 
 
 
193
194		err = nla_parse(cda, ss->cb[cb_id].attr_count,
195				attr, attrlen, ss->cb[cb_id].policy);
 
 
 
 
 
 
 
196		if (err < 0) {
197			rcu_read_unlock();
198			return err;
199		}
200
201		if (nc->call_rcu) {
202			err = nc->call_rcu(net, net->nfnl, skb, nlh,
203					   (const struct nlattr **)cda);
204			rcu_read_unlock();
205		} else {
 
 
 
 
 
 
 
 
206			rcu_read_unlock();
207			nfnl_lock(subsys_id);
208			if (nfnl_dereference_protected(subsys_id) != ss ||
209			    nfnetlink_find_client(type, ss) != nc)
 
210				err = -EAGAIN;
211			else if (nc->call)
212				err = nc->call(net, net->nfnl, skb, nlh,
213					       (const struct nlattr **)cda);
214			else
215				err = -EINVAL;
216			nfnl_unlock(subsys_id);
 
 
 
 
 
217		}
218		if (err == -EAGAIN)
219			goto replay;
220		return err;
221	}
222}
223
224struct nfnl_err {
225	struct list_head	head;
226	struct nlmsghdr		*nlh;
227	int			err;
 
228};
229
230static int nfnl_err_add(struct list_head *list, struct nlmsghdr *nlh, int err)
 
231{
232	struct nfnl_err *nfnl_err;
233
234	nfnl_err = kmalloc(sizeof(struct nfnl_err), GFP_KERNEL);
235	if (nfnl_err == NULL)
236		return -ENOMEM;
237
238	nfnl_err->nlh = nlh;
239	nfnl_err->err = err;
 
240	list_add_tail(&nfnl_err->head, list);
241
242	return 0;
243}
244
245static void nfnl_err_del(struct nfnl_err *nfnl_err)
246{
247	list_del(&nfnl_err->head);
248	kfree(nfnl_err);
249}
250
251static void nfnl_err_reset(struct list_head *err_list)
252{
253	struct nfnl_err *nfnl_err, *next;
254
255	list_for_each_entry_safe(nfnl_err, next, err_list, head)
256		nfnl_err_del(nfnl_err);
257}
258
259static void nfnl_err_deliver(struct list_head *err_list, struct sk_buff *skb)
260{
261	struct nfnl_err *nfnl_err, *next;
262
263	list_for_each_entry_safe(nfnl_err, next, err_list, head) {
264		netlink_ack(skb, nfnl_err->nlh, nfnl_err->err);
 
265		nfnl_err_del(nfnl_err);
266	}
267}
268
269enum {
270	NFNL_BATCH_FAILURE	= (1 << 0),
271	NFNL_BATCH_DONE		= (1 << 1),
272	NFNL_BATCH_REPLAY	= (1 << 2),
273};
274
275static void nfnetlink_rcv_batch(struct sk_buff *skb, struct nlmsghdr *nlh,
276				u_int16_t subsys_id)
277{
278	struct sk_buff *oskb = skb;
279	struct net *net = sock_net(skb->sk);
280	const struct nfnetlink_subsystem *ss;
281	const struct nfnl_callback *nc;
282	static LIST_HEAD(err_list);
 
283	u32 status;
284	int err;
285
286	if (subsys_id >= NFNL_SUBSYS_COUNT)
287		return netlink_ack(skb, nlh, -EINVAL);
288replay:
289	status = 0;
290
291	skb = netlink_skb_clone(oskb, GFP_KERNEL);
292	if (!skb)
293		return netlink_ack(oskb, nlh, -ENOMEM);
294
295	nfnl_lock(subsys_id);
296	ss = nfnl_dereference_protected(subsys_id);
297	if (!ss) {
298#ifdef CONFIG_MODULES
299		nfnl_unlock(subsys_id);
300		request_module("nfnetlink-subsys-%d", subsys_id);
301		nfnl_lock(subsys_id);
302		ss = nfnl_dereference_protected(subsys_id);
303		if (!ss)
304#endif
305		{
306			nfnl_unlock(subsys_id);
307			netlink_ack(oskb, nlh, -EOPNOTSUPP);
308			return kfree_skb(skb);
309		}
310	}
311
312	if (!ss->commit || !ss->abort) {
313		nfnl_unlock(subsys_id);
314		netlink_ack(oskb, nlh, -EOPNOTSUPP);
315		return kfree_skb(skb);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
316	}
317
318	while (skb->len >= nlmsg_total_size(0)) {
319		int msglen, type;
320
 
 
 
 
 
 
 
 
321		nlh = nlmsg_hdr(skb);
322		err = 0;
323
324		if (nlh->nlmsg_len < NLMSG_HDRLEN ||
325		    skb->len < nlh->nlmsg_len ||
326		    nlmsg_len(nlh) < sizeof(struct nfgenmsg)) {
327			nfnl_err_reset(&err_list);
328			status |= NFNL_BATCH_FAILURE;
329			goto done;
330		}
331
332		/* Only requests are handled by the kernel */
333		if (!(nlh->nlmsg_flags & NLM_F_REQUEST)) {
334			err = -EINVAL;
335			goto ack;
336		}
337
338		type = nlh->nlmsg_type;
339		if (type == NFNL_MSG_BATCH_BEGIN) {
340			/* Malformed: Batch begin twice */
341			nfnl_err_reset(&err_list);
342			status |= NFNL_BATCH_FAILURE;
343			goto done;
344		} else if (type == NFNL_MSG_BATCH_END) {
345			status |= NFNL_BATCH_DONE;
346			goto done;
347		} else if (type < NLMSG_MIN_TYPE) {
348			err = -EINVAL;
349			goto ack;
350		}
351
352		/* We only accept a batch with messages for the same
353		 * subsystem.
354		 */
355		if (NFNL_SUBSYS_ID(type) != subsys_id) {
356			err = -EINVAL;
357			goto ack;
358		}
359
360		nc = nfnetlink_find_client(type, ss);
361		if (!nc) {
362			err = -EINVAL;
363			goto ack;
364		}
365
 
 
 
 
 
366		{
367			int min_len = nlmsg_total_size(sizeof(struct nfgenmsg));
368			u_int8_t cb_id = NFNL_MSG_TYPE(nlh->nlmsg_type);
369			struct nlattr *cda[ss->cb[cb_id].attr_count + 1];
370			struct nlattr *attr = (void *)nlh + min_len;
 
371			int attrlen = nlh->nlmsg_len - min_len;
 
 
 
 
 
 
 
 
 
 
 
 
 
372
373			err = nla_parse(cda, ss->cb[cb_id].attr_count,
374					attr, attrlen, ss->cb[cb_id].policy);
 
 
375			if (err < 0)
376				goto ack;
377
378			if (nc->call_batch) {
379				err = nc->call_batch(net, net->nfnl, skb, nlh,
380						     (const struct nlattr **)cda);
381			}
382
383			/* The lock was released to autoload some module, we
384			 * have to abort and start from scratch using the
385			 * original skb.
386			 */
387			if (err == -EAGAIN) {
388				status |= NFNL_BATCH_REPLAY;
389				goto next;
390			}
391		}
392ack:
393		if (nlh->nlmsg_flags & NLM_F_ACK || err) {
394			/* Errors are delivered once the full batch has been
395			 * processed, this avoids that the same error is
396			 * reported several times when replaying the batch.
397			 */
398			if (nfnl_err_add(&err_list, nlh, err) < 0) {
 
399				/* We failed to enqueue an error, reset the
400				 * list of errors and send OOM to userspace
401				 * pointing to the batch header.
402				 */
403				nfnl_err_reset(&err_list);
404				netlink_ack(oskb, nlmsg_hdr(oskb), -ENOMEM);
 
405				status |= NFNL_BATCH_FAILURE;
406				goto done;
407			}
408			/* We don't stop processing the batch on errors, thus,
409			 * userspace gets all the errors that the batch
410			 * triggers.
411			 */
412			if (err)
413				status |= NFNL_BATCH_FAILURE;
414		}
415next:
416		msglen = NLMSG_ALIGN(nlh->nlmsg_len);
417		if (msglen > skb->len)
418			msglen = skb->len;
419		skb_pull(skb, msglen);
420	}
421done:
422	if (status & NFNL_BATCH_REPLAY) {
423		ss->abort(net, oskb);
424		nfnl_err_reset(&err_list);
425		nfnl_unlock(subsys_id);
426		kfree_skb(skb);
427		goto replay;
428	} else if (status == NFNL_BATCH_DONE) {
429		ss->commit(net, oskb);
 
 
 
 
 
 
 
 
 
 
430	} else {
431		ss->abort(net, oskb);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
432	}
433
434	nfnl_err_deliver(&err_list, oskb);
435	nfnl_unlock(subsys_id);
436	kfree_skb(skb);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
437}
438
439static void nfnetlink_rcv(struct sk_buff *skb)
440{
441	struct nlmsghdr *nlh = nlmsg_hdr(skb);
442	u_int16_t res_id;
443	int msglen;
444
445	if (nlh->nlmsg_len < NLMSG_HDRLEN ||
 
446	    skb->len < nlh->nlmsg_len)
447		return;
448
449	if (!netlink_net_capable(skb, CAP_NET_ADMIN)) {
450		netlink_ack(skb, nlh, -EPERM);
451		return;
452	}
453
454	if (nlh->nlmsg_type == NFNL_MSG_BATCH_BEGIN) {
455		struct nfgenmsg *nfgenmsg;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
456
457		msglen = NLMSG_ALIGN(nlh->nlmsg_len);
458		if (msglen > skb->len)
459			msglen = skb->len;
460
461		if (nlh->nlmsg_len < NLMSG_HDRLEN ||
462		    skb->len < NLMSG_HDRLEN + sizeof(struct nfgenmsg))
463			return;
 
 
 
 
 
464
465		nfgenmsg = nlmsg_data(nlh);
466		skb_pull(skb, msglen);
467		/* Work around old nft using host byte order */
468		if (nfgenmsg->res_id == NFNL_SUBSYS_NFTABLES)
469			res_id = NFNL_SUBSYS_NFTABLES;
470		else
471			res_id = ntohs(nfgenmsg->res_id);
472		nfnetlink_rcv_batch(skb, nlh, res_id);
473	} else {
474		netlink_rcv_skb(skb, &nfnetlink_rcv_msg);
475	}
 
 
 
476}
477
478#ifdef CONFIG_MODULES
479static int nfnetlink_bind(struct net *net, int group)
480{
481	const struct nfnetlink_subsystem *ss;
482	int type;
483
484	if (group <= NFNLGRP_NONE || group > NFNLGRP_MAX)
485		return 0;
486
487	type = nfnl_group2type[group];
488
489	rcu_read_lock();
490	ss = nfnetlink_get_subsys(type << 8);
491	rcu_read_unlock();
492	if (!ss)
493		request_module("nfnetlink-subsys-%d", type);
 
 
494	return 0;
495}
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
496#endif
 
497
498static int __net_init nfnetlink_net_init(struct net *net)
499{
500	struct sock *nfnl;
501	struct netlink_kernel_cfg cfg = {
502		.groups	= NFNLGRP_MAX,
503		.input	= nfnetlink_rcv,
504#ifdef CONFIG_MODULES
505		.bind	= nfnetlink_bind,
506#endif
507	};
508
509	nfnl = netlink_kernel_create(net, NETLINK_NETFILTER, &cfg);
510	if (!nfnl)
511		return -ENOMEM;
512	net->nfnl_stash = nfnl;
513	rcu_assign_pointer(net->nfnl, nfnl);
514	return 0;
515}
516
517static void __net_exit nfnetlink_net_exit_batch(struct list_head *net_exit_list)
518{
 
519	struct net *net;
520
521	list_for_each_entry(net, net_exit_list, exit_list)
522		RCU_INIT_POINTER(net->nfnl, NULL);
523	synchronize_net();
524	list_for_each_entry(net, net_exit_list, exit_list)
525		netlink_kernel_release(net->nfnl_stash);
526}
527
528static struct pernet_operations nfnetlink_net_ops = {
529	.init		= nfnetlink_net_init,
530	.exit_batch	= nfnetlink_net_exit_batch,
 
 
531};
532
533static int __init nfnetlink_init(void)
534{
535	int i;
536
537	for (i = NFNLGRP_NONE + 1; i <= NFNLGRP_MAX; i++)
538		BUG_ON(nfnl_group2type[i] == NFNL_SUBSYS_NONE);
539
540	for (i=0; i<NFNL_SUBSYS_COUNT; i++)
541		mutex_init(&table[i].mutex);
542
543	pr_info("Netfilter messages via NETLINK v%s.\n", nfversion);
544	return register_pernet_subsys(&nfnetlink_net_ops);
545}
546
547static void __exit nfnetlink_exit(void)
548{
549	pr_info("Removing netfilter NETLINK layer.\n");
550	unregister_pernet_subsys(&nfnetlink_net_ops);
551}
552module_init(nfnetlink_init);
553module_exit(nfnetlink_exit);
v6.13.7
  1/* Netfilter messages via netlink socket. Allows for user space
  2 * protocol helpers and general trouble making from userspace.
  3 *
  4 * (C) 2001 by Jay Schulist <jschlst@samba.org>,
  5 * (C) 2002-2005 by Harald Welte <laforge@gnumonks.org>
  6 * (C) 2005-2017 by Pablo Neira Ayuso <pablo@netfilter.org>
  7 *
  8 * Initial netfilter messages via netlink development funded and
  9 * generally made possible by Network Robots, Inc. (www.networkrobots.com)
 10 *
 11 * Further development of this code funded by Astaro AG (http://www.astaro.com)
 12 *
 13 * This software may be used and distributed according to the terms
 14 * of the GNU General Public License, incorporated herein by reference.
 15 */
 16
 17#include <linux/module.h>
 18#include <linux/types.h>
 19#include <linux/socket.h>
 20#include <linux/kernel.h>
 21#include <linux/string.h>
 22#include <linux/sockios.h>
 23#include <linux/net.h>
 24#include <linux/skbuff.h>
 25#include <linux/uaccess.h>
 26#include <net/sock.h>
 27#include <linux/init.h>
 28#include <linux/sched/signal.h>
 29
 30#include <net/netlink.h>
 31#include <net/netns/generic.h>
 32#include <linux/netfilter.h>
 33#include <linux/netfilter/nfnetlink.h>
 34
 35MODULE_LICENSE("GPL");
 36MODULE_AUTHOR("Harald Welte <laforge@netfilter.org>");
 37MODULE_ALIAS_NET_PF_PROTO(PF_NETLINK, NETLINK_NETFILTER);
 38MODULE_DESCRIPTION("Netfilter messages via netlink socket");
 39
 40#define nfnl_dereference_protected(id) \
 41	rcu_dereference_protected(table[(id)].subsys, \
 42				  lockdep_nfnl_is_held((id)))
 43
 44#define NFNL_MAX_ATTR_COUNT	32
 45
 46static unsigned int nfnetlink_pernet_id __read_mostly;
 47
 48#ifdef CONFIG_NF_CONNTRACK_EVENTS
 49static DEFINE_SPINLOCK(nfnl_grp_active_lock);
 50#endif
 51
 52struct nfnl_net {
 53	struct sock *nfnl;
 54};
 55
 56static struct {
 57	struct mutex				mutex;
 58	const struct nfnetlink_subsystem __rcu	*subsys;
 59} table[NFNL_SUBSYS_COUNT];
 60
 61static struct lock_class_key nfnl_lockdep_keys[NFNL_SUBSYS_COUNT];
 62
 63static const char *const nfnl_lockdep_names[NFNL_SUBSYS_COUNT] = {
 64	[NFNL_SUBSYS_NONE] = "nfnl_subsys_none",
 65	[NFNL_SUBSYS_CTNETLINK] = "nfnl_subsys_ctnetlink",
 66	[NFNL_SUBSYS_CTNETLINK_EXP] = "nfnl_subsys_ctnetlink_exp",
 67	[NFNL_SUBSYS_QUEUE] = "nfnl_subsys_queue",
 68	[NFNL_SUBSYS_ULOG] = "nfnl_subsys_ulog",
 69	[NFNL_SUBSYS_OSF] = "nfnl_subsys_osf",
 70	[NFNL_SUBSYS_IPSET] = "nfnl_subsys_ipset",
 71	[NFNL_SUBSYS_ACCT] = "nfnl_subsys_acct",
 72	[NFNL_SUBSYS_CTNETLINK_TIMEOUT] = "nfnl_subsys_cttimeout",
 73	[NFNL_SUBSYS_CTHELPER] = "nfnl_subsys_cthelper",
 74	[NFNL_SUBSYS_NFTABLES] = "nfnl_subsys_nftables",
 75	[NFNL_SUBSYS_NFT_COMPAT] = "nfnl_subsys_nftcompat",
 76	[NFNL_SUBSYS_HOOK] = "nfnl_subsys_hook",
 77};
 78
 79static const int nfnl_group2type[NFNLGRP_MAX+1] = {
 80	[NFNLGRP_CONNTRACK_NEW]		= NFNL_SUBSYS_CTNETLINK,
 81	[NFNLGRP_CONNTRACK_UPDATE]	= NFNL_SUBSYS_CTNETLINK,
 82	[NFNLGRP_CONNTRACK_DESTROY]	= NFNL_SUBSYS_CTNETLINK,
 83	[NFNLGRP_CONNTRACK_EXP_NEW]	= NFNL_SUBSYS_CTNETLINK_EXP,
 84	[NFNLGRP_CONNTRACK_EXP_UPDATE]	= NFNL_SUBSYS_CTNETLINK_EXP,
 85	[NFNLGRP_CONNTRACK_EXP_DESTROY] = NFNL_SUBSYS_CTNETLINK_EXP,
 86	[NFNLGRP_NFTABLES]		= NFNL_SUBSYS_NFTABLES,
 87	[NFNLGRP_ACCT_QUOTA]		= NFNL_SUBSYS_ACCT,
 88	[NFNLGRP_NFTRACE]		= NFNL_SUBSYS_NFTABLES,
 89};
 90
 91static struct nfnl_net *nfnl_pernet(struct net *net)
 92{
 93	return net_generic(net, nfnetlink_pernet_id);
 94}
 95
 96void nfnl_lock(__u8 subsys_id)
 97{
 98	mutex_lock(&table[subsys_id].mutex);
 99}
100EXPORT_SYMBOL_GPL(nfnl_lock);
101
102void nfnl_unlock(__u8 subsys_id)
103{
104	mutex_unlock(&table[subsys_id].mutex);
105}
106EXPORT_SYMBOL_GPL(nfnl_unlock);
107
108#ifdef CONFIG_PROVE_LOCKING
109bool lockdep_nfnl_is_held(u8 subsys_id)
110{
111	return lockdep_is_held(&table[subsys_id].mutex);
112}
113EXPORT_SYMBOL_GPL(lockdep_nfnl_is_held);
114#endif
115
116int nfnetlink_subsys_register(const struct nfnetlink_subsystem *n)
117{
118	u8 cb_id;
119
120	/* Sanity-check attr_count size to avoid stack buffer overflow. */
121	for (cb_id = 0; cb_id < n->cb_count; cb_id++)
122		if (WARN_ON(n->cb[cb_id].attr_count > NFNL_MAX_ATTR_COUNT))
123			return -EINVAL;
124
125	nfnl_lock(n->subsys_id);
126	if (table[n->subsys_id].subsys) {
127		nfnl_unlock(n->subsys_id);
128		return -EBUSY;
129	}
130	rcu_assign_pointer(table[n->subsys_id].subsys, n);
131	nfnl_unlock(n->subsys_id);
132
133	return 0;
134}
135EXPORT_SYMBOL_GPL(nfnetlink_subsys_register);
136
137int nfnetlink_subsys_unregister(const struct nfnetlink_subsystem *n)
138{
139	nfnl_lock(n->subsys_id);
140	table[n->subsys_id].subsys = NULL;
141	nfnl_unlock(n->subsys_id);
142	synchronize_rcu();
143	return 0;
144}
145EXPORT_SYMBOL_GPL(nfnetlink_subsys_unregister);
146
147static inline const struct nfnetlink_subsystem *nfnetlink_get_subsys(u16 type)
148{
149	u8 subsys_id = NFNL_SUBSYS_ID(type);
150
151	if (subsys_id >= NFNL_SUBSYS_COUNT)
152		return NULL;
153
154	return rcu_dereference(table[subsys_id].subsys);
155}
156
157static inline const struct nfnl_callback *
158nfnetlink_find_client(u16 type, const struct nfnetlink_subsystem *ss)
159{
160	u8 cb_id = NFNL_MSG_TYPE(type);
161
162	if (cb_id >= ss->cb_count)
163		return NULL;
164
165	return &ss->cb[cb_id];
166}
167
168int nfnetlink_has_listeners(struct net *net, unsigned int group)
169{
170	struct nfnl_net *nfnlnet = nfnl_pernet(net);
171
172	return netlink_has_listeners(nfnlnet->nfnl, group);
173}
174EXPORT_SYMBOL_GPL(nfnetlink_has_listeners);
175
176int nfnetlink_send(struct sk_buff *skb, struct net *net, u32 portid,
177		   unsigned int group, int echo, gfp_t flags)
178{
179	struct nfnl_net *nfnlnet = nfnl_pernet(net);
180
181	return nlmsg_notify(nfnlnet->nfnl, skb, portid, group, echo, flags);
182}
183EXPORT_SYMBOL_GPL(nfnetlink_send);
184
185int nfnetlink_set_err(struct net *net, u32 portid, u32 group, int error)
186{
187	struct nfnl_net *nfnlnet = nfnl_pernet(net);
188
189	return netlink_set_err(nfnlnet->nfnl, portid, group, error);
190}
191EXPORT_SYMBOL_GPL(nfnetlink_set_err);
192
193int nfnetlink_unicast(struct sk_buff *skb, struct net *net, u32 portid)
 
194{
195	struct nfnl_net *nfnlnet = nfnl_pernet(net);
196	int err;
197
198	err = nlmsg_unicast(nfnlnet->nfnl, skb, portid);
199	if (err == -EAGAIN)
200		err = -ENOBUFS;
201
202	return err;
203}
204EXPORT_SYMBOL_GPL(nfnetlink_unicast);
205
206void nfnetlink_broadcast(struct net *net, struct sk_buff *skb, __u32 portid,
207			 __u32 group, gfp_t allocation)
208{
209	struct nfnl_net *nfnlnet = nfnl_pernet(net);
210
211	netlink_broadcast(nfnlnet->nfnl, skb, portid, group, allocation);
212}
213EXPORT_SYMBOL_GPL(nfnetlink_broadcast);
214
215/* Process one complete nfnetlink message. */
216static int nfnetlink_rcv_msg(struct sk_buff *skb, struct nlmsghdr *nlh,
217			     struct netlink_ext_ack *extack)
218{
219	struct net *net = sock_net(skb->sk);
220	const struct nfnl_callback *nc;
221	const struct nfnetlink_subsystem *ss;
222	int type, err;
223
224	/* All the messages must at least contain nfgenmsg */
225	if (nlmsg_len(nlh) < sizeof(struct nfgenmsg))
226		return 0;
227
228	type = nlh->nlmsg_type;
229replay:
230	rcu_read_lock();
231
232	ss = nfnetlink_get_subsys(type);
233	if (!ss) {
234#ifdef CONFIG_MODULES
235		rcu_read_unlock();
236		request_module("nfnetlink-subsys-%d", NFNL_SUBSYS_ID(type));
237		rcu_read_lock();
238		ss = nfnetlink_get_subsys(type);
239		if (!ss)
240#endif
241		{
242			rcu_read_unlock();
243			return -EINVAL;
244		}
245	}
246
247	nc = nfnetlink_find_client(type, ss);
248	if (!nc) {
249		rcu_read_unlock();
250		return -EINVAL;
251	}
252
253	{
254		int min_len = nlmsg_total_size(sizeof(struct nfgenmsg));
255		struct nfnl_net *nfnlnet = nfnl_pernet(net);
256		u8 cb_id = NFNL_MSG_TYPE(nlh->nlmsg_type);
257		struct nlattr *cda[NFNL_MAX_ATTR_COUNT + 1];
258		struct nlattr *attr = (void *)nlh + min_len;
259		int attrlen = nlh->nlmsg_len - min_len;
260		__u8 subsys_id = NFNL_SUBSYS_ID(type);
261		struct nfnl_info info = {
262			.net	= net,
263			.sk	= nfnlnet->nfnl,
264			.nlh	= nlh,
265			.nfmsg	= nlmsg_data(nlh),
266			.extack	= extack,
267		};
268
269		/* Sanity-check NFNL_MAX_ATTR_COUNT */
270		if (ss->cb[cb_id].attr_count > NFNL_MAX_ATTR_COUNT) {
271			rcu_read_unlock();
272			return -ENOMEM;
273		}
274
275		err = nla_parse_deprecated(cda, ss->cb[cb_id].attr_count,
276					   attr, attrlen,
277					   ss->cb[cb_id].policy, extack);
278		if (err < 0) {
279			rcu_read_unlock();
280			return err;
281		}
282
283		if (!nc->call) {
 
 
284			rcu_read_unlock();
285			return -EINVAL;
286		}
287
288		switch (nc->type) {
289		case NFNL_CB_RCU:
290			err = nc->call(skb, &info, (const struct nlattr **)cda);
291			rcu_read_unlock();
292			break;
293		case NFNL_CB_MUTEX:
294			rcu_read_unlock();
295			nfnl_lock(subsys_id);
296			if (nfnl_dereference_protected(subsys_id) != ss ||
297			    nfnetlink_find_client(type, ss) != nc) {
298				nfnl_unlock(subsys_id);
299				err = -EAGAIN;
300				break;
301			}
302			err = nc->call(skb, &info, (const struct nlattr **)cda);
 
 
303			nfnl_unlock(subsys_id);
304			break;
305		default:
306			rcu_read_unlock();
307			err = -EINVAL;
308			break;
309		}
310		if (err == -EAGAIN)
311			goto replay;
312		return err;
313	}
314}
315
316struct nfnl_err {
317	struct list_head	head;
318	struct nlmsghdr		*nlh;
319	int			err;
320	struct netlink_ext_ack	extack;
321};
322
323static int nfnl_err_add(struct list_head *list, struct nlmsghdr *nlh, int err,
324			const struct netlink_ext_ack *extack)
325{
326	struct nfnl_err *nfnl_err;
327
328	nfnl_err = kmalloc(sizeof(struct nfnl_err), GFP_KERNEL);
329	if (nfnl_err == NULL)
330		return -ENOMEM;
331
332	nfnl_err->nlh = nlh;
333	nfnl_err->err = err;
334	nfnl_err->extack = *extack;
335	list_add_tail(&nfnl_err->head, list);
336
337	return 0;
338}
339
340static void nfnl_err_del(struct nfnl_err *nfnl_err)
341{
342	list_del(&nfnl_err->head);
343	kfree(nfnl_err);
344}
345
346static void nfnl_err_reset(struct list_head *err_list)
347{
348	struct nfnl_err *nfnl_err, *next;
349
350	list_for_each_entry_safe(nfnl_err, next, err_list, head)
351		nfnl_err_del(nfnl_err);
352}
353
354static void nfnl_err_deliver(struct list_head *err_list, struct sk_buff *skb)
355{
356	struct nfnl_err *nfnl_err, *next;
357
358	list_for_each_entry_safe(nfnl_err, next, err_list, head) {
359		netlink_ack(skb, nfnl_err->nlh, nfnl_err->err,
360			    &nfnl_err->extack);
361		nfnl_err_del(nfnl_err);
362	}
363}
364
365enum {
366	NFNL_BATCH_FAILURE	= (1 << 0),
367	NFNL_BATCH_DONE		= (1 << 1),
368	NFNL_BATCH_REPLAY	= (1 << 2),
369};
370
371static void nfnetlink_rcv_batch(struct sk_buff *skb, struct nlmsghdr *nlh,
372				u16 subsys_id, u32 genid)
373{
374	struct sk_buff *oskb = skb;
375	struct net *net = sock_net(skb->sk);
376	const struct nfnetlink_subsystem *ss;
377	const struct nfnl_callback *nc;
378	struct netlink_ext_ack extack;
379	LIST_HEAD(err_list);
380	u32 status;
381	int err;
382
383	if (subsys_id >= NFNL_SUBSYS_COUNT)
384		return netlink_ack(skb, nlh, -EINVAL, NULL);
385replay:
386	status = 0;
387replay_abort:
388	skb = netlink_skb_clone(oskb, GFP_KERNEL);
389	if (!skb)
390		return netlink_ack(oskb, nlh, -ENOMEM, NULL);
391
392	nfnl_lock(subsys_id);
393	ss = nfnl_dereference_protected(subsys_id);
394	if (!ss) {
395#ifdef CONFIG_MODULES
396		nfnl_unlock(subsys_id);
397		request_module("nfnetlink-subsys-%d", subsys_id);
398		nfnl_lock(subsys_id);
399		ss = nfnl_dereference_protected(subsys_id);
400		if (!ss)
401#endif
402		{
403			nfnl_unlock(subsys_id);
404			netlink_ack(oskb, nlh, -EOPNOTSUPP, NULL);
405			return consume_skb(skb);
406		}
407	}
408
409	if (!ss->valid_genid || !ss->commit || !ss->abort) {
410		nfnl_unlock(subsys_id);
411		netlink_ack(oskb, nlh, -EOPNOTSUPP, NULL);
412		return consume_skb(skb);
413	}
414
415	if (!try_module_get(ss->owner)) {
416		nfnl_unlock(subsys_id);
417		netlink_ack(oskb, nlh, -EOPNOTSUPP, NULL);
418		return consume_skb(skb);
419	}
420
421	if (!ss->valid_genid(net, genid)) {
422		module_put(ss->owner);
423		nfnl_unlock(subsys_id);
424		netlink_ack(oskb, nlh, -ERESTART, NULL);
425		return consume_skb(skb);
426	}
427
428	nfnl_unlock(subsys_id);
429
430	if (nlh->nlmsg_flags & NLM_F_ACK) {
431		memset(&extack, 0, sizeof(extack));
432		nfnl_err_add(&err_list, nlh, 0, &extack);
433	}
434
435	while (skb->len >= nlmsg_total_size(0)) {
436		int msglen, type;
437
438		if (fatal_signal_pending(current)) {
439			nfnl_err_reset(&err_list);
440			err = -EINTR;
441			status = NFNL_BATCH_FAILURE;
442			goto done;
443		}
444
445		memset(&extack, 0, sizeof(extack));
446		nlh = nlmsg_hdr(skb);
447		err = 0;
448
449		if (nlh->nlmsg_len < NLMSG_HDRLEN ||
450		    skb->len < nlh->nlmsg_len ||
451		    nlmsg_len(nlh) < sizeof(struct nfgenmsg)) {
452			nfnl_err_reset(&err_list);
453			status |= NFNL_BATCH_FAILURE;
454			goto done;
455		}
456
457		/* Only requests are handled by the kernel */
458		if (!(nlh->nlmsg_flags & NLM_F_REQUEST)) {
459			err = -EINVAL;
460			goto ack;
461		}
462
463		type = nlh->nlmsg_type;
464		if (type == NFNL_MSG_BATCH_BEGIN) {
465			/* Malformed: Batch begin twice */
466			nfnl_err_reset(&err_list);
467			status |= NFNL_BATCH_FAILURE;
468			goto done;
469		} else if (type == NFNL_MSG_BATCH_END) {
470			status |= NFNL_BATCH_DONE;
471			goto done;
472		} else if (type < NLMSG_MIN_TYPE) {
473			err = -EINVAL;
474			goto ack;
475		}
476
477		/* We only accept a batch with messages for the same
478		 * subsystem.
479		 */
480		if (NFNL_SUBSYS_ID(type) != subsys_id) {
481			err = -EINVAL;
482			goto ack;
483		}
484
485		nc = nfnetlink_find_client(type, ss);
486		if (!nc) {
487			err = -EINVAL;
488			goto ack;
489		}
490
491		if (nc->type != NFNL_CB_BATCH) {
492			err = -EINVAL;
493			goto ack;
494		}
495
496		{
497			int min_len = nlmsg_total_size(sizeof(struct nfgenmsg));
498			struct nfnl_net *nfnlnet = nfnl_pernet(net);
499			struct nlattr *cda[NFNL_MAX_ATTR_COUNT + 1];
500			struct nlattr *attr = (void *)nlh + min_len;
501			u8 cb_id = NFNL_MSG_TYPE(nlh->nlmsg_type);
502			int attrlen = nlh->nlmsg_len - min_len;
503			struct nfnl_info info = {
504				.net	= net,
505				.sk	= nfnlnet->nfnl,
506				.nlh	= nlh,
507				.nfmsg	= nlmsg_data(nlh),
508				.extack	= &extack,
509			};
510
511			/* Sanity-check NFTA_MAX_ATTR */
512			if (ss->cb[cb_id].attr_count > NFNL_MAX_ATTR_COUNT) {
513				err = -ENOMEM;
514				goto ack;
515			}
516
517			err = nla_parse_deprecated(cda,
518						   ss->cb[cb_id].attr_count,
519						   attr, attrlen,
520						   ss->cb[cb_id].policy, &extack);
521			if (err < 0)
522				goto ack;
523
524			err = nc->call(skb, &info, (const struct nlattr **)cda);
 
 
 
525
526			/* The lock was released to autoload some module, we
527			 * have to abort and start from scratch using the
528			 * original skb.
529			 */
530			if (err == -EAGAIN) {
531				status |= NFNL_BATCH_REPLAY;
532				goto done;
533			}
534		}
535ack:
536		if (nlh->nlmsg_flags & NLM_F_ACK || err) {
537			/* Errors are delivered once the full batch has been
538			 * processed, this avoids that the same error is
539			 * reported several times when replaying the batch.
540			 */
541			if (err == -ENOMEM ||
542			    nfnl_err_add(&err_list, nlh, err, &extack) < 0) {
543				/* We failed to enqueue an error, reset the
544				 * list of errors and send OOM to userspace
545				 * pointing to the batch header.
546				 */
547				nfnl_err_reset(&err_list);
548				netlink_ack(oskb, nlmsg_hdr(oskb), -ENOMEM,
549					    NULL);
550				status |= NFNL_BATCH_FAILURE;
551				goto done;
552			}
553			/* We don't stop processing the batch on errors, thus,
554			 * userspace gets all the errors that the batch
555			 * triggers.
556			 */
557			if (err)
558				status |= NFNL_BATCH_FAILURE;
559		}
560
561		msglen = NLMSG_ALIGN(nlh->nlmsg_len);
562		if (msglen > skb->len)
563			msglen = skb->len;
564		skb_pull(skb, msglen);
565	}
566done:
567	if (status & NFNL_BATCH_REPLAY) {
568		ss->abort(net, oskb, NFNL_ABORT_AUTOLOAD);
569		nfnl_err_reset(&err_list);
570		consume_skb(skb);
571		module_put(ss->owner);
572		goto replay;
573	} else if (status == NFNL_BATCH_DONE) {
574		err = ss->commit(net, oskb);
575		if (err == -EAGAIN) {
576			status |= NFNL_BATCH_REPLAY;
577			goto done;
578		} else if (err) {
579			ss->abort(net, oskb, NFNL_ABORT_NONE);
580			netlink_ack(oskb, nlmsg_hdr(oskb), err, NULL);
581		} else if (nlh->nlmsg_flags & NLM_F_ACK) {
582			memset(&extack, 0, sizeof(extack));
583			nfnl_err_add(&err_list, nlh, 0, &extack);
584		}
585	} else {
586		enum nfnl_abort_action abort_action;
587
588		if (status & NFNL_BATCH_FAILURE)
589			abort_action = NFNL_ABORT_NONE;
590		else
591			abort_action = NFNL_ABORT_VALIDATE;
592
593		err = ss->abort(net, oskb, abort_action);
594		if (err == -EAGAIN) {
595			nfnl_err_reset(&err_list);
596			consume_skb(skb);
597			module_put(ss->owner);
598			status |= NFNL_BATCH_FAILURE;
599			goto replay_abort;
600		}
601	}
602
603	nfnl_err_deliver(&err_list, oskb);
604	consume_skb(skb);
605	module_put(ss->owner);
606}
607
608static const struct nla_policy nfnl_batch_policy[NFNL_BATCH_MAX + 1] = {
609	[NFNL_BATCH_GENID]	= { .type = NLA_U32 },
610};
611
612static void nfnetlink_rcv_skb_batch(struct sk_buff *skb, struct nlmsghdr *nlh)
613{
614	int min_len = nlmsg_total_size(sizeof(struct nfgenmsg));
615	struct nlattr *attr = (void *)nlh + min_len;
616	struct nlattr *cda[NFNL_BATCH_MAX + 1];
617	int attrlen = nlh->nlmsg_len - min_len;
618	struct nfgenmsg *nfgenmsg;
619	int msglen, err;
620	u32 gen_id = 0;
621	u16 res_id;
622
623	msglen = NLMSG_ALIGN(nlh->nlmsg_len);
624	if (msglen > skb->len)
625		msglen = skb->len;
626
627	if (skb->len < NLMSG_HDRLEN + sizeof(struct nfgenmsg))
628		return;
629
630	err = nla_parse_deprecated(cda, NFNL_BATCH_MAX, attr, attrlen,
631				   nfnl_batch_policy, NULL);
632	if (err < 0) {
633		netlink_ack(skb, nlh, err, NULL);
634		return;
635	}
636	if (cda[NFNL_BATCH_GENID])
637		gen_id = ntohl(nla_get_be32(cda[NFNL_BATCH_GENID]));
638
639	nfgenmsg = nlmsg_data(nlh);
640	skb_pull(skb, msglen);
641	/* Work around old nft using host byte order */
642	if (nfgenmsg->res_id == (__force __be16)NFNL_SUBSYS_NFTABLES)
643		res_id = NFNL_SUBSYS_NFTABLES;
644	else
645		res_id = ntohs(nfgenmsg->res_id);
646
647	nfnetlink_rcv_batch(skb, nlh, res_id, gen_id);
648}
649
650static void nfnetlink_rcv(struct sk_buff *skb)
651{
652	struct nlmsghdr *nlh = nlmsg_hdr(skb);
 
 
653
654	if (skb->len < NLMSG_HDRLEN ||
655	    nlh->nlmsg_len < NLMSG_HDRLEN ||
656	    skb->len < nlh->nlmsg_len)
657		return;
658
659	if (!netlink_net_capable(skb, CAP_NET_ADMIN)) {
660		netlink_ack(skb, nlh, -EPERM, NULL);
661		return;
662	}
663
664	if (nlh->nlmsg_type == NFNL_MSG_BATCH_BEGIN)
665		nfnetlink_rcv_skb_batch(skb, nlh);
666	else
667		netlink_rcv_skb(skb, nfnetlink_rcv_msg);
668}
669
670static void nfnetlink_bind_event(struct net *net, unsigned int group)
671{
672#ifdef CONFIG_NF_CONNTRACK_EVENTS
673	int type, group_bit;
674	u8 v;
675
676	/* All NFNLGRP_CONNTRACK_* group bits fit into u8.
677	 * The other groups are not relevant and can be ignored.
678	 */
679	if (group >= 8)
680		return;
681
682	type = nfnl_group2type[group];
 
 
683
684	switch (type) {
685	case NFNL_SUBSYS_CTNETLINK:
686		break;
687	case NFNL_SUBSYS_CTNETLINK_EXP:
688		break;
689	default:
690		return;
691	}
692
693	group_bit = (1 << group);
694
695	spin_lock(&nfnl_grp_active_lock);
696	v = READ_ONCE(nf_ctnetlink_has_listener);
697	if ((v & group_bit) == 0) {
698		v |= group_bit;
699
700		/* read concurrently without nfnl_grp_active_lock held. */
701		WRITE_ONCE(nf_ctnetlink_has_listener, v);
 
702	}
703
704	spin_unlock(&nfnl_grp_active_lock);
705#endif
706}
707
 
708static int nfnetlink_bind(struct net *net, int group)
709{
710	const struct nfnetlink_subsystem *ss;
711	int type;
712
713	if (group <= NFNLGRP_NONE || group > NFNLGRP_MAX)
714		return 0;
715
716	type = nfnl_group2type[group];
717
718	rcu_read_lock();
719	ss = nfnetlink_get_subsys(type << 8);
720	rcu_read_unlock();
721	if (!ss)
722		request_module_nowait("nfnetlink-subsys-%d", type);
723
724	nfnetlink_bind_event(net, group);
725	return 0;
726}
727
728static void nfnetlink_unbind(struct net *net, int group)
729{
730#ifdef CONFIG_NF_CONNTRACK_EVENTS
731	int type, group_bit;
732
733	if (group <= NFNLGRP_NONE || group > NFNLGRP_MAX)
734		return;
735
736	type = nfnl_group2type[group];
737
738	switch (type) {
739	case NFNL_SUBSYS_CTNETLINK:
740		break;
741	case NFNL_SUBSYS_CTNETLINK_EXP:
742		break;
743	default:
744		return;
745	}
746
747	/* ctnetlink_has_listener is u8 */
748	if (group >= 8)
749		return;
750
751	group_bit = (1 << group);
752
753	spin_lock(&nfnl_grp_active_lock);
754	if (!nfnetlink_has_listeners(net, group)) {
755		u8 v = READ_ONCE(nf_ctnetlink_has_listener);
756
757		v &= ~group_bit;
758
759		/* read concurrently without nfnl_grp_active_lock held. */
760		WRITE_ONCE(nf_ctnetlink_has_listener, v);
761	}
762	spin_unlock(&nfnl_grp_active_lock);
763#endif
764}
765
766static int __net_init nfnetlink_net_init(struct net *net)
767{
768	struct nfnl_net *nfnlnet = nfnl_pernet(net);
769	struct netlink_kernel_cfg cfg = {
770		.groups	= NFNLGRP_MAX,
771		.input	= nfnetlink_rcv,
 
772		.bind	= nfnetlink_bind,
773		.unbind	= nfnetlink_unbind,
774	};
775
776	nfnlnet->nfnl = netlink_kernel_create(net, NETLINK_NETFILTER, &cfg);
777	if (!nfnlnet->nfnl)
778		return -ENOMEM;
 
 
779	return 0;
780}
781
782static void __net_exit nfnetlink_net_exit_batch(struct list_head *net_exit_list)
783{
784	struct nfnl_net *nfnlnet;
785	struct net *net;
786
787	list_for_each_entry(net, net_exit_list, exit_list) {
788		nfnlnet = nfnl_pernet(net);
789
790		netlink_kernel_release(nfnlnet->nfnl);
791	}
792}
793
794static struct pernet_operations nfnetlink_net_ops = {
795	.init		= nfnetlink_net_init,
796	.exit_batch	= nfnetlink_net_exit_batch,
797	.id		= &nfnetlink_pernet_id,
798	.size		= sizeof(struct nfnl_net),
799};
800
801static int __init nfnetlink_init(void)
802{
803	int i;
804
805	for (i = NFNLGRP_NONE + 1; i <= NFNLGRP_MAX; i++)
806		BUG_ON(nfnl_group2type[i] == NFNL_SUBSYS_NONE);
807
808	for (i=0; i<NFNL_SUBSYS_COUNT; i++)
809		__mutex_init(&table[i].mutex, nfnl_lockdep_names[i], &nfnl_lockdep_keys[i]);
810
 
811	return register_pernet_subsys(&nfnetlink_net_ops);
812}
813
814static void __exit nfnetlink_exit(void)
815{
 
816	unregister_pernet_subsys(&nfnetlink_net_ops);
817}
818module_init(nfnetlink_init);
819module_exit(nfnetlink_exit);