Loading...
1/*
2 * INET An implementation of the TCP/IP protocol suite for the LINUX
3 * operating system. INET is implemented using the BSD Socket
4 * interface as the means of communication with the user level.
5 *
6 * Support for INET6 connection oriented protocols.
7 *
8 * Authors: See the TCPv6 sources
9 *
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * as published by the Free Software Foundation; either version
13 * 2 of the License, or(at your option) any later version.
14 */
15
16#include <linux/module.h>
17#include <linux/in6.h>
18#include <linux/ipv6.h>
19#include <linux/jhash.h>
20#include <linux/slab.h>
21
22#include <net/addrconf.h>
23#include <net/inet_connection_sock.h>
24#include <net/inet_ecn.h>
25#include <net/inet_hashtables.h>
26#include <net/ip6_route.h>
27#include <net/sock.h>
28#include <net/inet6_connection_sock.h>
29#include <net/sock_reuseport.h>
30
31int inet6_csk_bind_conflict(const struct sock *sk,
32 const struct inet_bind_bucket *tb, bool relax)
33{
34 const struct sock *sk2;
35 int reuse = sk->sk_reuse;
36 int reuseport = sk->sk_reuseport;
37 kuid_t uid = sock_i_uid((struct sock *)sk);
38
39 /* We must walk the whole port owner list in this case. -DaveM */
40 /*
41 * See comment in inet_csk_bind_conflict about sock lookup
42 * vs net namespaces issues.
43 */
44 sk_for_each_bound(sk2, &tb->owners) {
45 if (sk != sk2 &&
46 (!sk->sk_bound_dev_if ||
47 !sk2->sk_bound_dev_if ||
48 sk->sk_bound_dev_if == sk2->sk_bound_dev_if)) {
49 if ((!reuse || !sk2->sk_reuse ||
50 sk2->sk_state == TCP_LISTEN) &&
51 (!reuseport || !sk2->sk_reuseport ||
52 rcu_access_pointer(sk->sk_reuseport_cb) ||
53 (sk2->sk_state != TCP_TIME_WAIT &&
54 !uid_eq(uid,
55 sock_i_uid((struct sock *)sk2))))) {
56 if (ipv6_rcv_saddr_equal(sk, sk2, true))
57 break;
58 }
59 if (!relax && reuse && sk2->sk_reuse &&
60 sk2->sk_state != TCP_LISTEN &&
61 ipv6_rcv_saddr_equal(sk, sk2, true))
62 break;
63 }
64 }
65
66 return sk2 != NULL;
67}
68EXPORT_SYMBOL_GPL(inet6_csk_bind_conflict);
69
70struct dst_entry *inet6_csk_route_req(const struct sock *sk,
71 struct flowi6 *fl6,
72 const struct request_sock *req,
73 u8 proto)
74{
75 struct inet_request_sock *ireq = inet_rsk(req);
76 const struct ipv6_pinfo *np = inet6_sk(sk);
77 struct in6_addr *final_p, final;
78 struct dst_entry *dst;
79
80 memset(fl6, 0, sizeof(*fl6));
81 fl6->flowi6_proto = proto;
82 fl6->daddr = ireq->ir_v6_rmt_addr;
83 rcu_read_lock();
84 final_p = fl6_update_dst(fl6, rcu_dereference(np->opt), &final);
85 rcu_read_unlock();
86 fl6->saddr = ireq->ir_v6_loc_addr;
87 fl6->flowi6_oif = ireq->ir_iif;
88 fl6->flowi6_mark = ireq->ir_mark;
89 fl6->fl6_dport = ireq->ir_rmt_port;
90 fl6->fl6_sport = htons(ireq->ir_num);
91 security_req_classify_flow(req, flowi6_to_flowi(fl6));
92
93 dst = ip6_dst_lookup_flow(sk, fl6, final_p);
94 if (IS_ERR(dst))
95 return NULL;
96
97 return dst;
98}
99EXPORT_SYMBOL(inet6_csk_route_req);
100
101void inet6_csk_addr2sockaddr(struct sock *sk, struct sockaddr *uaddr)
102{
103 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *) uaddr;
104
105 sin6->sin6_family = AF_INET6;
106 sin6->sin6_addr = sk->sk_v6_daddr;
107 sin6->sin6_port = inet_sk(sk)->inet_dport;
108 /* We do not store received flowlabel for TCP */
109 sin6->sin6_flowinfo = 0;
110 sin6->sin6_scope_id = ipv6_iface_scope_id(&sin6->sin6_addr,
111 sk->sk_bound_dev_if);
112}
113EXPORT_SYMBOL_GPL(inet6_csk_addr2sockaddr);
114
115static inline
116struct dst_entry *__inet6_csk_dst_check(struct sock *sk, u32 cookie)
117{
118 return __sk_dst_check(sk, cookie);
119}
120
121static struct dst_entry *inet6_csk_route_socket(struct sock *sk,
122 struct flowi6 *fl6)
123{
124 struct inet_sock *inet = inet_sk(sk);
125 struct ipv6_pinfo *np = inet6_sk(sk);
126 struct in6_addr *final_p, final;
127 struct dst_entry *dst;
128
129 memset(fl6, 0, sizeof(*fl6));
130 fl6->flowi6_proto = sk->sk_protocol;
131 fl6->daddr = sk->sk_v6_daddr;
132 fl6->saddr = np->saddr;
133 fl6->flowlabel = np->flow_label;
134 IP6_ECN_flow_xmit(sk, fl6->flowlabel);
135 fl6->flowi6_oif = sk->sk_bound_dev_if;
136 fl6->flowi6_mark = sk->sk_mark;
137 fl6->fl6_sport = inet->inet_sport;
138 fl6->fl6_dport = inet->inet_dport;
139 security_sk_classify_flow(sk, flowi6_to_flowi(fl6));
140
141 rcu_read_lock();
142 final_p = fl6_update_dst(fl6, rcu_dereference(np->opt), &final);
143 rcu_read_unlock();
144
145 dst = __inet6_csk_dst_check(sk, np->dst_cookie);
146 if (!dst) {
147 dst = ip6_dst_lookup_flow(sk, fl6, final_p);
148
149 if (!IS_ERR(dst))
150 ip6_dst_store(sk, dst, NULL, NULL);
151 }
152 return dst;
153}
154
155int inet6_csk_xmit(struct sock *sk, struct sk_buff *skb, struct flowi *fl_unused)
156{
157 struct ipv6_pinfo *np = inet6_sk(sk);
158 struct flowi6 fl6;
159 struct dst_entry *dst;
160 int res;
161
162 dst = inet6_csk_route_socket(sk, &fl6);
163 if (IS_ERR(dst)) {
164 sk->sk_err_soft = -PTR_ERR(dst);
165 sk->sk_route_caps = 0;
166 kfree_skb(skb);
167 return PTR_ERR(dst);
168 }
169
170 rcu_read_lock();
171 skb_dst_set_noref(skb, dst);
172
173 /* Restore final destination back after routing done */
174 fl6.daddr = sk->sk_v6_daddr;
175
176 res = ip6_xmit(sk, skb, &fl6, rcu_dereference(np->opt),
177 np->tclass);
178 rcu_read_unlock();
179 return res;
180}
181EXPORT_SYMBOL_GPL(inet6_csk_xmit);
182
183struct dst_entry *inet6_csk_update_pmtu(struct sock *sk, u32 mtu)
184{
185 struct flowi6 fl6;
186 struct dst_entry *dst = inet6_csk_route_socket(sk, &fl6);
187
188 if (IS_ERR(dst))
189 return NULL;
190 dst->ops->update_pmtu(dst, sk, NULL, mtu);
191
192 dst = inet6_csk_route_socket(sk, &fl6);
193 return IS_ERR(dst) ? NULL : dst;
194}
195EXPORT_SYMBOL_GPL(inet6_csk_update_pmtu);
1/*
2 * INET An implementation of the TCP/IP protocol suite for the LINUX
3 * operating system. INET is implemented using the BSD Socket
4 * interface as the means of communication with the user level.
5 *
6 * Support for INET6 connection oriented protocols.
7 *
8 * Authors: See the TCPv6 sources
9 *
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * as published by the Free Software Foundation; either version
13 * 2 of the License, or(at your option) any later version.
14 */
15
16#include <linux/module.h>
17#include <linux/in6.h>
18#include <linux/ipv6.h>
19#include <linux/jhash.h>
20#include <linux/slab.h>
21
22#include <net/addrconf.h>
23#include <net/inet_connection_sock.h>
24#include <net/inet_ecn.h>
25#include <net/inet_hashtables.h>
26#include <net/ip6_route.h>
27#include <net/sock.h>
28#include <net/inet6_connection_sock.h>
29
30int inet6_csk_bind_conflict(const struct sock *sk,
31 const struct inet_bind_bucket *tb, bool relax)
32{
33 const struct sock *sk2;
34 int reuse = sk->sk_reuse;
35 int reuseport = sk->sk_reuseport;
36 kuid_t uid = sock_i_uid((struct sock *)sk);
37
38 /* We must walk the whole port owner list in this case. -DaveM */
39 /*
40 * See comment in inet_csk_bind_conflict about sock lookup
41 * vs net namespaces issues.
42 */
43 sk_for_each_bound(sk2, &tb->owners) {
44 if (sk != sk2 &&
45 (!sk->sk_bound_dev_if ||
46 !sk2->sk_bound_dev_if ||
47 sk->sk_bound_dev_if == sk2->sk_bound_dev_if)) {
48 if ((!reuse || !sk2->sk_reuse ||
49 sk2->sk_state == TCP_LISTEN) &&
50 (!reuseport || !sk2->sk_reuseport ||
51 (sk2->sk_state != TCP_TIME_WAIT &&
52 !uid_eq(uid,
53 sock_i_uid((struct sock *)sk2))))) {
54 if (ipv6_rcv_saddr_equal(sk, sk2))
55 break;
56 }
57 if (!relax && reuse && sk2->sk_reuse &&
58 sk2->sk_state != TCP_LISTEN &&
59 ipv6_rcv_saddr_equal(sk, sk2))
60 break;
61 }
62 }
63
64 return sk2 != NULL;
65}
66
67EXPORT_SYMBOL_GPL(inet6_csk_bind_conflict);
68
69struct dst_entry *inet6_csk_route_req(struct sock *sk,
70 struct flowi6 *fl6,
71 const struct request_sock *req)
72{
73 struct inet_request_sock *ireq = inet_rsk(req);
74 struct ipv6_pinfo *np = inet6_sk(sk);
75 struct in6_addr *final_p, final;
76 struct dst_entry *dst;
77
78 memset(fl6, 0, sizeof(*fl6));
79 fl6->flowi6_proto = IPPROTO_TCP;
80 fl6->daddr = ireq->ir_v6_rmt_addr;
81 final_p = fl6_update_dst(fl6, np->opt, &final);
82 fl6->saddr = ireq->ir_v6_loc_addr;
83 fl6->flowi6_oif = ireq->ir_iif;
84 fl6->flowi6_mark = sk->sk_mark;
85 fl6->fl6_dport = ireq->ir_rmt_port;
86 fl6->fl6_sport = htons(ireq->ir_num);
87 security_req_classify_flow(req, flowi6_to_flowi(fl6));
88
89 dst = ip6_dst_lookup_flow(sk, fl6, final_p);
90 if (IS_ERR(dst))
91 return NULL;
92
93 return dst;
94}
95
96/*
97 * request_sock (formerly open request) hash tables.
98 */
99static u32 inet6_synq_hash(const struct in6_addr *raddr, const __be16 rport,
100 const u32 rnd, const u32 synq_hsize)
101{
102 u32 c;
103
104 c = jhash_3words((__force u32)raddr->s6_addr32[0],
105 (__force u32)raddr->s6_addr32[1],
106 (__force u32)raddr->s6_addr32[2],
107 rnd);
108
109 c = jhash_2words((__force u32)raddr->s6_addr32[3],
110 (__force u32)rport,
111 c);
112
113 return c & (synq_hsize - 1);
114}
115
116struct request_sock *inet6_csk_search_req(const struct sock *sk,
117 struct request_sock ***prevp,
118 const __be16 rport,
119 const struct in6_addr *raddr,
120 const struct in6_addr *laddr,
121 const int iif)
122{
123 const struct inet_connection_sock *icsk = inet_csk(sk);
124 struct listen_sock *lopt = icsk->icsk_accept_queue.listen_opt;
125 struct request_sock *req, **prev;
126
127 for (prev = &lopt->syn_table[inet6_synq_hash(raddr, rport,
128 lopt->hash_rnd,
129 lopt->nr_table_entries)];
130 (req = *prev) != NULL;
131 prev = &req->dl_next) {
132 const struct inet_request_sock *ireq = inet_rsk(req);
133
134 if (ireq->ir_rmt_port == rport &&
135 req->rsk_ops->family == AF_INET6 &&
136 ipv6_addr_equal(&ireq->ir_v6_rmt_addr, raddr) &&
137 ipv6_addr_equal(&ireq->ir_v6_loc_addr, laddr) &&
138 (!ireq->ir_iif || ireq->ir_iif == iif)) {
139 WARN_ON(req->sk != NULL);
140 *prevp = prev;
141 return req;
142 }
143 }
144
145 return NULL;
146}
147
148EXPORT_SYMBOL_GPL(inet6_csk_search_req);
149
150void inet6_csk_reqsk_queue_hash_add(struct sock *sk,
151 struct request_sock *req,
152 const unsigned long timeout)
153{
154 struct inet_connection_sock *icsk = inet_csk(sk);
155 struct listen_sock *lopt = icsk->icsk_accept_queue.listen_opt;
156 const u32 h = inet6_synq_hash(&inet_rsk(req)->ir_v6_rmt_addr,
157 inet_rsk(req)->ir_rmt_port,
158 lopt->hash_rnd, lopt->nr_table_entries);
159
160 reqsk_queue_hash_req(&icsk->icsk_accept_queue, h, req, timeout);
161 inet_csk_reqsk_queue_added(sk, timeout);
162}
163
164EXPORT_SYMBOL_GPL(inet6_csk_reqsk_queue_hash_add);
165
166void inet6_csk_addr2sockaddr(struct sock *sk, struct sockaddr * uaddr)
167{
168 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *) uaddr;
169
170 sin6->sin6_family = AF_INET6;
171 sin6->sin6_addr = sk->sk_v6_daddr;
172 sin6->sin6_port = inet_sk(sk)->inet_dport;
173 /* We do not store received flowlabel for TCP */
174 sin6->sin6_flowinfo = 0;
175 sin6->sin6_scope_id = ipv6_iface_scope_id(&sin6->sin6_addr,
176 sk->sk_bound_dev_if);
177}
178
179EXPORT_SYMBOL_GPL(inet6_csk_addr2sockaddr);
180
181static inline
182void __inet6_csk_dst_store(struct sock *sk, struct dst_entry *dst,
183 const struct in6_addr *daddr,
184 const struct in6_addr *saddr)
185{
186 __ip6_dst_store(sk, dst, daddr, saddr);
187}
188
189static inline
190struct dst_entry *__inet6_csk_dst_check(struct sock *sk, u32 cookie)
191{
192 return __sk_dst_check(sk, cookie);
193}
194
195static struct dst_entry *inet6_csk_route_socket(struct sock *sk,
196 struct flowi6 *fl6)
197{
198 struct inet_sock *inet = inet_sk(sk);
199 struct ipv6_pinfo *np = inet6_sk(sk);
200 struct in6_addr *final_p, final;
201 struct dst_entry *dst;
202
203 memset(fl6, 0, sizeof(*fl6));
204 fl6->flowi6_proto = sk->sk_protocol;
205 fl6->daddr = sk->sk_v6_daddr;
206 fl6->saddr = np->saddr;
207 fl6->flowlabel = np->flow_label;
208 IP6_ECN_flow_xmit(sk, fl6->flowlabel);
209 fl6->flowi6_oif = sk->sk_bound_dev_if;
210 fl6->flowi6_mark = sk->sk_mark;
211 fl6->fl6_sport = inet->inet_sport;
212 fl6->fl6_dport = inet->inet_dport;
213 security_sk_classify_flow(sk, flowi6_to_flowi(fl6));
214
215 final_p = fl6_update_dst(fl6, np->opt, &final);
216
217 dst = __inet6_csk_dst_check(sk, np->dst_cookie);
218 if (!dst) {
219 dst = ip6_dst_lookup_flow(sk, fl6, final_p);
220
221 if (!IS_ERR(dst))
222 __inet6_csk_dst_store(sk, dst, NULL, NULL);
223 }
224 return dst;
225}
226
227int inet6_csk_xmit(struct sock *sk, struct sk_buff *skb, struct flowi *fl_unused)
228{
229 struct ipv6_pinfo *np = inet6_sk(sk);
230 struct flowi6 fl6;
231 struct dst_entry *dst;
232 int res;
233
234 dst = inet6_csk_route_socket(sk, &fl6);
235 if (IS_ERR(dst)) {
236 sk->sk_err_soft = -PTR_ERR(dst);
237 sk->sk_route_caps = 0;
238 kfree_skb(skb);
239 return PTR_ERR(dst);
240 }
241
242 rcu_read_lock();
243 skb_dst_set_noref(skb, dst);
244
245 /* Restore final destination back after routing done */
246 fl6.daddr = sk->sk_v6_daddr;
247
248 res = ip6_xmit(sk, skb, &fl6, np->opt, np->tclass);
249 rcu_read_unlock();
250 return res;
251}
252EXPORT_SYMBOL_GPL(inet6_csk_xmit);
253
254struct dst_entry *inet6_csk_update_pmtu(struct sock *sk, u32 mtu)
255{
256 struct flowi6 fl6;
257 struct dst_entry *dst = inet6_csk_route_socket(sk, &fl6);
258
259 if (IS_ERR(dst))
260 return NULL;
261 dst->ops->update_pmtu(dst, sk, NULL, mtu);
262
263 dst = inet6_csk_route_socket(sk, &fl6);
264 return IS_ERR(dst) ? NULL : dst;
265}
266EXPORT_SYMBOL_GPL(inet6_csk_update_pmtu);