mmc: mmc: Fix partition switch timeout for some eMMCs
[linux-2.6-block.git] / net / xfrm / xfrm_output.c
CommitLineData
406ef77c
HX
1/*
2 * xfrm_output.c - Common IPsec encapsulation code.
3 *
4 * Copyright (c) 2007 Herbert Xu <herbert@gondor.apana.org.au>
5 *
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
10 */
11
12#include <linux/errno.h>
13#include <linux/module.h>
14#include <linux/netdevice.h>
862b82c6 15#include <linux/netfilter.h>
406ef77c 16#include <linux/skbuff.h>
5a0e3ad6 17#include <linux/slab.h>
406ef77c 18#include <linux/spinlock.h>
406ef77c
HX
19#include <net/dst.h>
20#include <net/xfrm.h>
21
0c4b51f0 22static int xfrm_output2(struct net *net, struct sock *sk, struct sk_buff *skb);
c6581a45 23
26b2072e 24static int xfrm_skb_check_space(struct sk_buff *skb)
83815dea 25{
adf30907 26 struct dst_entry *dst = skb_dst(skb);
550ade84 27 int nhead = dst->header_len + LL_RESERVED_SPACE(dst->dev)
83815dea 28 - skb_headroom(skb);
f5184d26 29 int ntail = dst->dev->needed_tailroom - skb_tailroom(skb);
83815dea 30
d01dbeb6
HX
31 if (nhead <= 0) {
32 if (ntail <= 0)
33 return 0;
34 nhead = 0;
35 } else if (ntail < 0)
36 ntail = 0;
37
38 return pskb_expand_head(skb, nhead, ntail, GFP_ATOMIC);
83815dea
HX
39}
40
9449c3cd
YX
41/* Children define the path of the packet through the
42 * Linux networking. Thus, destinations are stackable.
43 */
44
45static struct dst_entry *skb_dst_pop(struct sk_buff *skb)
46{
47 struct dst_entry *child = dst_clone(skb_dst(skb)->child);
48
49 skb_dst_drop(skb);
50 return child;
51}
52
c6581a45 53static int xfrm_output_one(struct sk_buff *skb, int err)
406ef77c 54{
adf30907 55 struct dst_entry *dst = skb_dst(skb);
406ef77c 56 struct xfrm_state *x = dst->xfrm;
a6483b79 57 struct net *net = xs_net(x);
406ef77c 58
c6581a45
HX
59 if (err <= 0)
60 goto resume;
406ef77c
HX
61
62 do {
26b2072e 63 err = xfrm_skb_check_space(skb);
b15c4bcd 64 if (err) {
59c9940e 65 XFRM_INC_STATS(net, LINUX_MIB_XFRMOUTERROR);
910ef70a 66 goto error_nolock;
b15c4bcd 67 }
910ef70a 68
a2deb6d2 69 err = x->outer_mode->output(x, skb);
b15c4bcd 70 if (err) {
59c9940e 71 XFRM_INC_STATS(net, LINUX_MIB_XFRMOUTSTATEMODEERROR);
910ef70a 72 goto error_nolock;
b15c4bcd 73 }
a2deb6d2 74
406ef77c 75 spin_lock_bh(&x->lock);
bb65a9cb
LR
76
77 if (unlikely(x->km.state != XFRM_STATE_VALID)) {
78 XFRM_INC_STATS(net, LINUX_MIB_XFRMOUTSTATEINVALID);
497574c7 79 err = -EINVAL;
fa8599db 80 goto error;
bb65a9cb
LR
81 }
82
910ef70a 83 err = xfrm_state_check_expire(x);
b15c4bcd 84 if (err) {
59c9940e 85 XFRM_INC_STATS(net, LINUX_MIB_XFRMOUTSTATEEXPIRED);
406ef77c 86 goto error;
b15c4bcd 87 }
406ef77c 88
9fdc4883
SK
89 err = x->repl->overflow(x, skb);
90 if (err) {
91 XFRM_INC_STATS(net, LINUX_MIB_XFRMOUTSTATESEQERROR);
92 goto error;
436a0a40
HX
93 }
94
406ef77c
HX
95 x->curlft.bytes += skb->len;
96 x->curlft.packets++;
97
406ef77c
HX
98 spin_unlock_bh(&x->lock);
99
3bc07321
SK
100 skb_dst_force(skb);
101
b7c6538c 102 err = x->type->output(x, skb);
fcb8c156 103 if (err == -EINPROGRESS)
ebd4687a 104 goto out;
c6581a45
HX
105
106resume:
0aa64774 107 if (err) {
59c9940e 108 XFRM_INC_STATS(net, LINUX_MIB_XFRMOUTSTATEPROTOERROR);
b7c6538c 109 goto error_nolock;
0aa64774 110 }
b7c6538c 111
8764ab2c 112 dst = skb_dst_pop(skb);
adf30907 113 if (!dst) {
59c9940e 114 XFRM_INC_STATS(net, LINUX_MIB_XFRMOUTERROR);
406ef77c
HX
115 err = -EHOSTUNREACH;
116 goto error_nolock;
117 }
e433430a 118 skb_dst_set(skb, dst);
406ef77c 119 x = dst->xfrm;
13996378 120 } while (x && !(x->outer_mode->flags & XFRM_MODE_FLAG_TUNNEL));
406ef77c 121
ebd4687a 122 return 0;
406ef77c 123
406ef77c
HX
124error:
125 spin_unlock_bh(&x->lock);
862b82c6
HX
126error_nolock:
127 kfree_skb(skb);
ebd4687a
JS
128out:
129 return err;
862b82c6
HX
130}
131
c6581a45 132int xfrm_output_resume(struct sk_buff *skb, int err)
862b82c6 133{
29a26a56 134 struct net *net = xs_net(skb_dst(skb)->xfrm);
be10de0a 135
c6581a45 136 while (likely((err = xfrm_output_one(skb, err)) == 0)) {
862b82c6
HX
137 nf_reset(skb);
138
cf91a99d 139 err = skb_dst(skb)->ops->local_out(net, skb->sk, skb);
862b82c6 140 if (unlikely(err != 1))
c6581a45 141 goto out;
862b82c6 142
adf30907 143 if (!skb_dst(skb)->xfrm)
13206b6b 144 return dst_output(net, skb->sk, skb);
862b82c6 145
adf30907 146 err = nf_hook(skb_dst(skb)->ops->family,
29a26a56 147 NF_INET_POST_ROUTING, net, skb->sk, skb,
adf30907 148 NULL, skb_dst(skb)->dev, xfrm_output2);
862b82c6 149 if (unlikely(err != 1))
c6581a45 150 goto out;
862b82c6
HX
151 }
152
c6581a45
HX
153 if (err == -EINPROGRESS)
154 err = 0;
155
156out:
862b82c6
HX
157 return err;
158}
c6581a45 159EXPORT_SYMBOL_GPL(xfrm_output_resume);
862b82c6 160
0c4b51f0 161static int xfrm_output2(struct net *net, struct sock *sk, struct sk_buff *skb)
862b82c6 162{
c6581a45
HX
163 return xfrm_output_resume(skb, 1);
164}
862b82c6 165
0c4b51f0 166static int xfrm_output_gso(struct net *net, struct sock *sk, struct sk_buff *skb)
c6581a45
HX
167{
168 struct sk_buff *segs;
862b82c6 169
9207f9d4
KK
170 BUILD_BUG_ON(sizeof(*IPCB(skb)) > SKB_SGO_CB_OFFSET);
171 BUILD_BUG_ON(sizeof(*IP6CB(skb)) > SKB_SGO_CB_OFFSET);
862b82c6
HX
172 segs = skb_gso_segment(skb, 0);
173 kfree_skb(skb);
801678c5 174 if (IS_ERR(segs))
862b82c6 175 return PTR_ERR(segs);
330966e5
FW
176 if (segs == NULL)
177 return -EINVAL;
862b82c6
HX
178
179 do {
180 struct sk_buff *nskb = segs->next;
181 int err;
182
183 segs->next = NULL;
0c4b51f0 184 err = xfrm_output2(net, sk, segs);
862b82c6
HX
185
186 if (unlikely(err)) {
46cfd725 187 kfree_skb_list(nskb);
862b82c6
HX
188 return err;
189 }
190
191 segs = nskb;
192 } while (segs);
193
194 return 0;
406ef77c 195}
c6581a45 196
7026b1dd 197int xfrm_output(struct sock *sk, struct sk_buff *skb)
c6581a45 198{
adf30907 199 struct net *net = dev_net(skb_dst(skb)->dev);
c6581a45
HX
200 int err;
201
202 if (skb_is_gso(skb))
0c4b51f0 203 return xfrm_output_gso(net, sk, skb);
c6581a45
HX
204
205 if (skb->ip_summed == CHECKSUM_PARTIAL) {
206 err = skb_checksum_help(skb);
207 if (err) {
59c9940e 208 XFRM_INC_STATS(net, LINUX_MIB_XFRMOUTERROR);
c6581a45
HX
209 kfree_skb(skb);
210 return err;
211 }
212 }
213
0c4b51f0 214 return xfrm_output2(net, sk, skb);
c6581a45 215}
fc68086c 216EXPORT_SYMBOL_GPL(xfrm_output);
df9dcb45
KM
217
218int xfrm_inner_extract_output(struct xfrm_state *x, struct sk_buff *skb)
219{
220 struct xfrm_mode *inner_mode;
221 if (x->sel.family == AF_UNSPEC)
222 inner_mode = xfrm_ip2inner_mode(x,
adf30907 223 xfrm_af2proto(skb_dst(skb)->ops->family));
df9dcb45
KM
224 else
225 inner_mode = x->inner_mode;
226
227 if (inner_mode == NULL)
228 return -EAFNOSUPPORT;
229 return inner_mode->afinfo->extract_output(x, skb);
230}
fc68086c 231EXPORT_SYMBOL_GPL(xfrm_inner_extract_output);
df9dcb45 232
628e341f
HFS
233void xfrm_local_error(struct sk_buff *skb, int mtu)
234{
844d4874 235 unsigned int proto;
628e341f
HFS
236 struct xfrm_state_afinfo *afinfo;
237
844d4874
HFS
238 if (skb->protocol == htons(ETH_P_IP))
239 proto = AF_INET;
240 else if (skb->protocol == htons(ETH_P_IPV6))
241 proto = AF_INET6;
242 else
243 return;
244
245 afinfo = xfrm_state_get_afinfo(proto);
628e341f
HFS
246 if (!afinfo)
247 return;
248
249 afinfo->local_error(skb, mtu);
250 xfrm_state_put_afinfo(afinfo);
251}
628e341f 252EXPORT_SYMBOL_GPL(xfrm_local_error);