Commit | Line | Data |
---|---|---|
2874c5fd | 1 | // SPDX-License-Identifier: GPL-2.0-or-later |
7c657876 ACM |
2 | /* |
3 | * net/dccp/ipv4.c | |
4 | * | |
5 | * An implementation of the DCCP protocol | |
6 | * Arnaldo Carvalho de Melo <acme@conectiva.com.br> | |
7c657876 ACM |
7 | */ |
8 | ||
7c657876 ACM |
9 | #include <linux/dccp.h> |
10 | #include <linux/icmp.h> | |
5a0e3ad6 | 11 | #include <linux/slab.h> |
7c657876 ACM |
12 | #include <linux/module.h> |
13 | #include <linux/skbuff.h> | |
14 | #include <linux/random.h> | |
15 | ||
16 | #include <net/icmp.h> | |
b61fafc4 | 17 | #include <net/inet_common.h> |
7c657876 | 18 | #include <net/inet_hashtables.h> |
14c85021 | 19 | #include <net/inet_sock.h> |
b61fafc4 | 20 | #include <net/protocol.h> |
7c657876 | 21 | #include <net/sock.h> |
6d6ee43e | 22 | #include <net/timewait_sock.h> |
7c657876 ACM |
23 | #include <net/tcp_states.h> |
24 | #include <net/xfrm.h> | |
6e5714ea | 25 | #include <net/secure_seq.h> |
b98b3304 | 26 | #include <net/netns/generic.h> |
7c657876 | 27 | |
ae31c339 | 28 | #include "ackvec.h" |
7c657876 ACM |
29 | #include "ccid.h" |
30 | #include "dccp.h" | |
afe00251 | 31 | #include "feat.h" |
7c657876 | 32 | |
b98b3304 FW |
33 | struct dccp_v4_pernet { |
34 | struct sock *v4_ctl_sk; | |
35 | }; | |
36 | ||
37 | static unsigned int dccp_v4_pernet_id __read_mostly; | |
38 | ||
72478873 | 39 | /* |
b98b3304 | 40 | * The per-net v4_ctl_sk socket is used for responding to |
72478873 ACM |
41 | * the Out-of-the-blue (OOTB) packets. A control sock will be created |
42 | * for this socket at the initialization time. | |
43 | */ | |
72478873 | 44 | |
f21e68ca | 45 | int dccp_v4_connect(struct sock *sk, struct sockaddr *uaddr, int addr_len) |
7c657876 | 46 | { |
2d7192d6 | 47 | const struct sockaddr_in *usin = (struct sockaddr_in *)uaddr; |
7c657876 ACM |
48 | struct inet_sock *inet = inet_sk(sk); |
49 | struct dccp_sock *dp = dccp_sk(sk); | |
dca8b089 | 50 | __be16 orig_sport, orig_dport; |
8c5dae4c | 51 | __be32 daddr, nexthop; |
2c42758c | 52 | struct flowi4 *fl4; |
2d7192d6 | 53 | struct rtable *rt; |
7c657876 | 54 | int err; |
f6d8bd05 | 55 | struct ip_options_rcu *inet_opt; |
7c657876 ACM |
56 | |
57 | dp->dccps_role = DCCP_ROLE_CLIENT; | |
58 | ||
59 | if (addr_len < sizeof(struct sockaddr_in)) | |
60 | return -EINVAL; | |
61 | ||
62 | if (usin->sin_family != AF_INET) | |
63 | return -EAFNOSUPPORT; | |
64 | ||
65 | nexthop = daddr = usin->sin_addr.s_addr; | |
f6d8bd05 ED |
66 | |
67 | inet_opt = rcu_dereference_protected(inet->inet_opt, | |
1e1d04e6 | 68 | lockdep_sock_is_held(sk)); |
f6d8bd05 | 69 | if (inet_opt != NULL && inet_opt->opt.srr) { |
7c657876 ACM |
70 | if (daddr == 0) |
71 | return -EINVAL; | |
f6d8bd05 | 72 | nexthop = inet_opt->opt.faddr; |
7c657876 ACM |
73 | } |
74 | ||
dca8b089 DM |
75 | orig_sport = inet->inet_sport; |
76 | orig_dport = usin->sin_port; | |
2c42758c DM |
77 | fl4 = &inet->cork.fl.u.ip4; |
78 | rt = ip_route_connect(fl4, nexthop, inet->inet_saddr, | |
67e1e2f4 GN |
79 | sk->sk_bound_dev_if, IPPROTO_DCCP, orig_sport, |
80 | orig_dport, sk); | |
b23dd4fe DM |
81 | if (IS_ERR(rt)) |
82 | return PTR_ERR(rt); | |
7c657876 ACM |
83 | |
84 | if (rt->rt_flags & (RTCF_MULTICAST | RTCF_BROADCAST)) { | |
85 | ip_rt_put(rt); | |
86 | return -ENETUNREACH; | |
87 | } | |
88 | ||
f6d8bd05 | 89 | if (inet_opt == NULL || !inet_opt->opt.srr) |
2c42758c | 90 | daddr = fl4->daddr; |
7c657876 | 91 | |
28044fc1 | 92 | if (inet->inet_saddr == 0) { |
8c5dae4c | 93 | err = inet_bhash2_update_saddr(sk, &fl4->saddr, AF_INET); |
28044fc1 | 94 | if (err) { |
28044fc1 JK |
95 | ip_rt_put(rt); |
96 | return err; | |
97 | } | |
8c5dae4c KI |
98 | } else { |
99 | sk_rcv_saddr_set(sk, inet->inet_saddr); | |
28044fc1 JK |
100 | } |
101 | ||
c720c7e8 | 102 | inet->inet_dport = usin->sin_port; |
d1e559d0 | 103 | sk_daddr_set(sk, daddr); |
7c657876 | 104 | |
d83d8461 | 105 | inet_csk(sk)->icsk_ext_hdr_len = 0; |
f6d8bd05 ED |
106 | if (inet_opt) |
107 | inet_csk(sk)->icsk_ext_hdr_len = inet_opt->opt.optlen; | |
7c657876 ACM |
108 | /* |
109 | * Socket identity is still unknown (sport may be zero). | |
110 | * However we set state to DCCP_REQUESTING and not releasing socket | |
111 | * lock select source port, enter ourselves into the hash tables and | |
112 | * complete initialization after this. | |
113 | */ | |
114 | dccp_set_state(sk, DCCP_REQUESTING); | |
a7f5e7f1 | 115 | err = inet_hash_connect(&dccp_death_row, sk); |
7c657876 ACM |
116 | if (err != 0) |
117 | goto failure; | |
118 | ||
2c42758c | 119 | rt = ip_route_newports(fl4, rt, orig_sport, orig_dport, |
b23dd4fe DM |
120 | inet->inet_sport, inet->inet_dport, sk); |
121 | if (IS_ERR(rt)) { | |
525c6465 | 122 | err = PTR_ERR(rt); |
b23dd4fe | 123 | rt = NULL; |
7c657876 | 124 | goto failure; |
b23dd4fe | 125 | } |
7c657876 | 126 | /* OK, now commit destination to socket. */ |
d8d1f30b | 127 | sk_setup_caps(sk, &rt->dst); |
7c657876 | 128 | |
c720c7e8 ED |
129 | dp->dccps_iss = secure_dccp_sequence_number(inet->inet_saddr, |
130 | inet->inet_daddr, | |
131 | inet->inet_sport, | |
132 | inet->inet_dport); | |
7e3cf084 | 133 | inet->inet_id = get_random_u16(); |
7c657876 ACM |
134 | |
135 | err = dccp_connect(sk); | |
136 | rt = NULL; | |
137 | if (err != 0) | |
138 | goto failure; | |
139 | out: | |
140 | return err; | |
141 | failure: | |
7690af3f ACM |
142 | /* |
143 | * This unhashes the socket and releases the local port, if necessary. | |
144 | */ | |
7c657876 | 145 | dccp_set_state(sk, DCCP_CLOSED); |
e0833d1f | 146 | inet_bhash2_reset_saddr(sk); |
7c657876 ACM |
147 | ip_rt_put(rt); |
148 | sk->sk_route_caps = 0; | |
c720c7e8 | 149 | inet->inet_dport = 0; |
7c657876 ACM |
150 | goto out; |
151 | } | |
f21e68ca ACM |
152 | EXPORT_SYMBOL_GPL(dccp_v4_connect); |
153 | ||
7c657876 ACM |
154 | /* |
155 | * This routine does path mtu discovery as defined in RFC1191. | |
156 | */ | |
157 | static inline void dccp_do_pmtu_discovery(struct sock *sk, | |
158 | const struct iphdr *iph, | |
159 | u32 mtu) | |
160 | { | |
161 | struct dst_entry *dst; | |
162 | const struct inet_sock *inet = inet_sk(sk); | |
163 | const struct dccp_sock *dp = dccp_sk(sk); | |
164 | ||
165 | /* We are not interested in DCCP_LISTEN and request_socks (RESPONSEs | |
166 | * send out by Linux are always < 576bytes so they should go through | |
167 | * unfragmented). | |
168 | */ | |
169 | if (sk->sk_state == DCCP_LISTEN) | |
170 | return; | |
171 | ||
80d0a69f DM |
172 | dst = inet_csk_update_pmtu(sk, mtu); |
173 | if (!dst) | |
7c657876 ACM |
174 | return; |
175 | ||
7c657876 ACM |
176 | /* Something is about to be wrong... Remember soft error |
177 | * for the case, if this connection will not able to recover. | |
178 | */ | |
179 | if (mtu < dst_mtu(dst) && ip_dont_fragment(sk, dst)) | |
9a25f0cb | 180 | WRITE_ONCE(sk->sk_err_soft, EMSGSIZE); |
7c657876 ACM |
181 | |
182 | mtu = dst_mtu(dst); | |
183 | ||
184 | if (inet->pmtudisc != IP_PMTUDISC_DONT && | |
482fc609 | 185 | ip_sk_accept_pmtu(sk) && |
d83d8461 | 186 | inet_csk(sk)->icsk_pmtu_cookie > mtu) { |
7c657876 ACM |
187 | dccp_sync_mss(sk, mtu); |
188 | ||
189 | /* | |
0e64e94e | 190 | * From RFC 4340, sec. 14.1: |
7c657876 | 191 | * |
7690af3f ACM |
192 | * DCCP-Sync packets are the best choice for upward |
193 | * probing, since DCCP-Sync probes do not risk application | |
194 | * data loss. | |
7c657876 | 195 | */ |
e92ae93a | 196 | dccp_send_sync(sk, dp->dccps_gsr, DCCP_PKT_SYNC); |
7c657876 ACM |
197 | } /* else let the usual retransmit timer handle it */ |
198 | } | |
199 | ||
55be7a9c DM |
200 | static void dccp_do_redirect(struct sk_buff *skb, struct sock *sk) |
201 | { | |
202 | struct dst_entry *dst = __sk_dst_check(sk, 0); | |
203 | ||
1ed5c48f | 204 | if (dst) |
6700c270 | 205 | dst->ops->redirect(dst, sk, skb); |
55be7a9c DM |
206 | } |
207 | ||
85645bab ED |
208 | void dccp_req_err(struct sock *sk, u64 seq) |
209 | { | |
210 | struct request_sock *req = inet_reqsk(sk); | |
211 | struct net *net = sock_net(sk); | |
212 | ||
213 | /* | |
214 | * ICMPs are not backlogged, hence we cannot get an established | |
215 | * socket here. | |
216 | */ | |
85645bab | 217 | if (!between48(seq, dccp_rsk(req)->dreq_iss, dccp_rsk(req)->dreq_gss)) { |
02a1d6e7 | 218 | __NET_INC_STATS(net, LINUX_MIB_OUTOFWINDOWICMPS); |
85645bab ED |
219 | } else { |
220 | /* | |
221 | * Still in RESPOND, just remove it silently. | |
222 | * There is no good way to pass the error to the newly | |
223 | * created socket, and POSIX does not want network | |
224 | * errors returned from accept(). | |
225 | */ | |
226 | inet_csk_reqsk_queue_drop(req->rsk_listener, req); | |
227 | } | |
ef84d8ce | 228 | reqsk_put(req); |
85645bab ED |
229 | } |
230 | EXPORT_SYMBOL(dccp_req_err); | |
231 | ||
7c657876 ACM |
232 | /* |
233 | * This routine is called by the ICMP module when it gets some sort of error | |
234 | * condition. If err < 0 then the socket should be closed and the error | |
235 | * returned to the user. If err > 0 it's just the icmp type << 8 | icmp code. | |
236 | * After adjustment header points to the first 8 bytes of the tcp header. We | |
237 | * need to find the appropriate port. | |
238 | * | |
239 | * The locking strategy used here is very "optimistic". When someone else | |
240 | * accesses the socket the ICMP is just dropped and for some paths there is no | |
241 | * check at all. A more general error queue to queue errors for later handling | |
242 | * is probably better. | |
243 | */ | |
32bbd879 | 244 | static int dccp_v4_err(struct sk_buff *skb, u32 info) |
7c657876 ACM |
245 | { |
246 | const struct iphdr *iph = (struct iphdr *)skb->data; | |
18e1d836 | 247 | const u8 offset = iph->ihl << 2; |
6706a97f | 248 | const struct dccp_hdr *dh; |
7c657876 ACM |
249 | struct dccp_sock *dp; |
250 | struct inet_sock *inet; | |
88c7664f ACM |
251 | const int type = icmp_hdr(skb)->type; |
252 | const int code = icmp_hdr(skb)->code; | |
7c657876 ACM |
253 | struct sock *sk; |
254 | __u64 seq; | |
255 | int err; | |
fd54d716 | 256 | struct net *net = dev_net(skb->dev); |
7c657876 | 257 | |
6706a97f ED |
258 | /* Only need dccph_dport & dccph_sport which are the first |
259 | * 4 bytes in dccp header. | |
260 | * Our caller (icmp_socket_deliver()) already pulled 8 bytes for us. | |
261 | */ | |
262 | BUILD_BUG_ON(offsetofend(struct dccp_hdr, dccph_sport) > 8); | |
263 | BUILD_BUG_ON(offsetofend(struct dccp_hdr, dccph_dport) > 8); | |
264 | dh = (struct dccp_hdr *)(skb->data + offset); | |
7c657876 | 265 | |
85645bab ED |
266 | sk = __inet_lookup_established(net, &dccp_hashinfo, |
267 | iph->daddr, dh->dccph_dport, | |
268 | iph->saddr, ntohs(dh->dccph_sport), | |
3fa6f616 | 269 | inet_iif(skb), 0); |
85645bab | 270 | if (!sk) { |
5d3848bc | 271 | __ICMP_INC_STATS(net, ICMP_MIB_INERRORS); |
32bbd879 | 272 | return -ENOENT; |
7c657876 ACM |
273 | } |
274 | ||
275 | if (sk->sk_state == DCCP_TIME_WAIT) { | |
9469c7b4 | 276 | inet_twsk_put(inet_twsk(sk)); |
32bbd879 | 277 | return 0; |
7c657876 | 278 | } |
85645bab | 279 | seq = dccp_hdr_seq(dh); |
32bbd879 SB |
280 | if (sk->sk_state == DCCP_NEW_SYN_RECV) { |
281 | dccp_req_err(sk, seq); | |
282 | return 0; | |
283 | } | |
7c657876 ACM |
284 | |
285 | bh_lock_sock(sk); | |
286 | /* If too many ICMPs get dropped on busy | |
287 | * servers this needs to be solved differently. | |
288 | */ | |
289 | if (sock_owned_by_user(sk)) | |
02a1d6e7 | 290 | __NET_INC_STATS(net, LINUX_MIB_LOCKDROPPEDICMPS); |
7c657876 ACM |
291 | |
292 | if (sk->sk_state == DCCP_CLOSED) | |
293 | goto out; | |
294 | ||
295 | dp = dccp_sk(sk); | |
1238d087 | 296 | if ((1 << sk->sk_state) & ~(DCCPF_REQUESTING | DCCPF_LISTEN) && |
d68f0866 | 297 | !between48(seq, dp->dccps_awl, dp->dccps_awh)) { |
02a1d6e7 | 298 | __NET_INC_STATS(net, LINUX_MIB_OUTOFWINDOWICMPS); |
7c657876 ACM |
299 | goto out; |
300 | } | |
301 | ||
302 | switch (type) { | |
55be7a9c | 303 | case ICMP_REDIRECT: |
45caeaa5 JM |
304 | if (!sock_owned_by_user(sk)) |
305 | dccp_do_redirect(skb, sk); | |
55be7a9c | 306 | goto out; |
7c657876 ACM |
307 | case ICMP_SOURCE_QUENCH: |
308 | /* Just silently ignore these. */ | |
309 | goto out; | |
310 | case ICMP_PARAMETERPROB: | |
311 | err = EPROTO; | |
312 | break; | |
313 | case ICMP_DEST_UNREACH: | |
314 | if (code > NR_ICMP_UNREACH) | |
315 | goto out; | |
316 | ||
317 | if (code == ICMP_FRAG_NEEDED) { /* PMTU discovery (RFC1191) */ | |
318 | if (!sock_owned_by_user(sk)) | |
319 | dccp_do_pmtu_discovery(sk, iph, info); | |
320 | goto out; | |
321 | } | |
322 | ||
323 | err = icmp_err_convert[code].errno; | |
324 | break; | |
325 | case ICMP_TIME_EXCEEDED: | |
326 | err = EHOSTUNREACH; | |
327 | break; | |
328 | default: | |
329 | goto out; | |
330 | } | |
331 | ||
332 | switch (sk->sk_state) { | |
7c657876 ACM |
333 | case DCCP_REQUESTING: |
334 | case DCCP_RESPOND: | |
335 | if (!sock_owned_by_user(sk)) { | |
aa62d76b | 336 | __DCCP_INC_STATS(DCCP_MIB_ATTEMPTFAILS); |
7c657876 ACM |
337 | sk->sk_err = err; |
338 | ||
e3ae2365 | 339 | sk_error_report(sk); |
7c657876 ACM |
340 | |
341 | dccp_done(sk); | |
9a25f0cb ED |
342 | } else { |
343 | WRITE_ONCE(sk->sk_err_soft, err); | |
344 | } | |
7c657876 ACM |
345 | goto out; |
346 | } | |
347 | ||
348 | /* If we've already connected we will keep trying | |
349 | * until we time out, or the user gives up. | |
350 | * | |
351 | * rfc1122 4.2.3.9 allows to consider as hard errors | |
352 | * only PROTO_UNREACH and PORT_UNREACH (well, FRAG_FAILED too, | |
353 | * but it is obsoleted by pmtu discovery). | |
354 | * | |
355 | * Note, that in modern internet, where routing is unreliable | |
356 | * and in each dark corner broken firewalls sit, sending random | |
357 | * errors ordered by their masters even this two messages finally lose | |
358 | * their original sense (even Linux sends invalid PORT_UNREACHs) | |
359 | * | |
360 | * Now we are in compliance with RFCs. | |
361 | * --ANK (980905) | |
362 | */ | |
363 | ||
364 | inet = inet_sk(sk); | |
365 | if (!sock_owned_by_user(sk) && inet->recverr) { | |
366 | sk->sk_err = err; | |
e3ae2365 | 367 | sk_error_report(sk); |
9a25f0cb ED |
368 | } else { /* Only an error on timeout */ |
369 | WRITE_ONCE(sk->sk_err_soft, err); | |
370 | } | |
7c657876 ACM |
371 | out: |
372 | bh_unlock_sock(sk); | |
373 | sock_put(sk); | |
32bbd879 | 374 | return 0; |
7c657876 ACM |
375 | } |
376 | ||
2bda2853 | 377 | static inline __sum16 dccp_v4_csum_finish(struct sk_buff *skb, |
6f4e5fff GR |
378 | __be32 src, __be32 dst) |
379 | { | |
380 | return csum_tcpudp_magic(src, dst, skb->len, IPPROTO_DCCP, skb->csum); | |
381 | } | |
382 | ||
bb296246 | 383 | void dccp_v4_send_check(struct sock *sk, struct sk_buff *skb) |
57cca05a ACM |
384 | { |
385 | const struct inet_sock *inet = inet_sk(sk); | |
386 | struct dccp_hdr *dh = dccp_hdr(skb); | |
387 | ||
6f4e5fff | 388 | dccp_csum_outgoing(skb); |
c720c7e8 ED |
389 | dh->dccph_checksum = dccp_v4_csum_finish(skb, |
390 | inet->inet_saddr, | |
391 | inet->inet_daddr); | |
57cca05a | 392 | } |
f21e68ca ACM |
393 | EXPORT_SYMBOL_GPL(dccp_v4_send_check); |
394 | ||
865e9022 | 395 | static inline u64 dccp_v4_init_sequence(const struct sk_buff *skb) |
7c657876 | 396 | { |
eddc9ec5 ACM |
397 | return secure_dccp_sequence_number(ip_hdr(skb)->daddr, |
398 | ip_hdr(skb)->saddr, | |
7c657876 ACM |
399 | dccp_hdr(skb)->dccph_dport, |
400 | dccp_hdr(skb)->dccph_sport); | |
401 | } | |
402 | ||
7c657876 ACM |
403 | /* |
404 | * The three way handshake has completed - we got a valid ACK or DATAACK - | |
405 | * now create the new socket. | |
406 | * | |
407 | * This is the equivalent of TCP's tcp_v4_syn_recv_sock | |
408 | */ | |
0c27171e ED |
409 | struct sock *dccp_v4_request_recv_sock(const struct sock *sk, |
410 | struct sk_buff *skb, | |
7c657876 | 411 | struct request_sock *req, |
5e0724d0 ED |
412 | struct dst_entry *dst, |
413 | struct request_sock *req_unhash, | |
414 | bool *own_req) | |
7c657876 ACM |
415 | { |
416 | struct inet_request_sock *ireq; | |
417 | struct inet_sock *newinet; | |
7c657876 ACM |
418 | struct sock *newsk; |
419 | ||
420 | if (sk_acceptq_is_full(sk)) | |
421 | goto exit_overflow; | |
422 | ||
7c657876 ACM |
423 | newsk = dccp_create_openreq_child(sk, req, skb); |
424 | if (newsk == NULL) | |
093d2823 | 425 | goto exit_nonewsk; |
7c657876 | 426 | |
7c657876 ACM |
427 | newinet = inet_sk(newsk); |
428 | ireq = inet_rsk(req); | |
d1e559d0 ED |
429 | sk_daddr_set(newsk, ireq->ir_rmt_addr); |
430 | sk_rcv_saddr_set(newsk, ireq->ir_loc_addr); | |
634fb979 | 431 | newinet->inet_saddr = ireq->ir_loc_addr; |
c92e8c02 | 432 | RCU_INIT_POINTER(newinet->inet_opt, rcu_dereference(ireq->ireq_opt)); |
7c657876 | 433 | newinet->mc_index = inet_iif(skb); |
eddc9ec5 | 434 | newinet->mc_ttl = ip_hdr(skb)->ttl; |
7e3cf084 | 435 | newinet->inet_id = get_random_u16(); |
7c657876 | 436 | |
0e734419 DM |
437 | if (dst == NULL && (dst = inet_csk_route_child_sock(sk, newsk, req)) == NULL) |
438 | goto put_and_exit; | |
439 | ||
440 | sk_setup_caps(newsk, dst); | |
441 | ||
7c657876 ACM |
442 | dccp_sync_mss(newsk, dst_mtu(dst)); |
443 | ||
0e734419 DM |
444 | if (__inet_inherit_port(sk, newsk) < 0) |
445 | goto put_and_exit; | |
01770a16 | 446 | *own_req = inet_ehash_nolisten(newsk, req_to_sk(req_unhash), NULL); |
c92e8c02 ED |
447 | if (*own_req) |
448 | ireq->ireq_opt = NULL; | |
449 | else | |
450 | newinet->inet_opt = NULL; | |
7c657876 ACM |
451 | return newsk; |
452 | ||
453 | exit_overflow: | |
02a1d6e7 | 454 | __NET_INC_STATS(sock_net(sk), LINUX_MIB_LISTENOVERFLOWS); |
093d2823 BS |
455 | exit_nonewsk: |
456 | dst_release(dst); | |
7c657876 | 457 | exit: |
02a1d6e7 | 458 | __NET_INC_STATS(sock_net(sk), LINUX_MIB_LISTENDROPS); |
7c657876 | 459 | return NULL; |
0e734419 | 460 | put_and_exit: |
c92e8c02 | 461 | newinet->inet_opt = NULL; |
e337e24d CP |
462 | inet_csk_prepare_forced_close(newsk); |
463 | dccp_done(newsk); | |
0e734419 | 464 | goto exit; |
7c657876 | 465 | } |
f21e68ca ACM |
466 | EXPORT_SYMBOL_GPL(dccp_v4_request_recv_sock); |
467 | ||
f5487398 | 468 | static struct dst_entry* dccp_v4_route_skb(struct net *net, struct sock *sk, |
7c657876 ACM |
469 | struct sk_buff *skb) |
470 | { | |
471 | struct rtable *rt; | |
898f7358 | 472 | const struct iphdr *iph = ip_hdr(skb); |
9d6ec938 | 473 | struct flowi4 fl4 = { |
92101b3b | 474 | .flowi4_oif = inet_iif(skb), |
898f7358 DM |
475 | .daddr = iph->saddr, |
476 | .saddr = iph->daddr, | |
9d6ec938 DM |
477 | .flowi4_tos = RT_CONN_FLAGS(sk), |
478 | .flowi4_proto = sk->sk_protocol, | |
9cce96df DM |
479 | .fl4_sport = dccp_hdr(skb)->dccph_dport, |
480 | .fl4_dport = dccp_hdr(skb)->dccph_sport, | |
1d28f42c | 481 | }; |
7c657876 | 482 | |
3df98d79 | 483 | security_skb_classify_flow(skb, flowi4_to_flowi_common(&fl4)); |
9d6ec938 | 484 | rt = ip_route_output_flow(net, &fl4, sk); |
b23dd4fe | 485 | if (IS_ERR(rt)) { |
95556a88 | 486 | IP_INC_STATS(net, IPSTATS_MIB_OUTNOROUTES); |
7c657876 ACM |
487 | return NULL; |
488 | } | |
489 | ||
d8d1f30b | 490 | return &rt->dst; |
7c657876 ACM |
491 | } |
492 | ||
ea3bea3a | 493 | static int dccp_v4_send_response(const struct sock *sk, struct request_sock *req) |
3d2fe62b GR |
494 | { |
495 | int err = -1; | |
496 | struct sk_buff *skb; | |
fd80eb94 | 497 | struct dst_entry *dst; |
6bd023f3 | 498 | struct flowi4 fl4; |
3d2fe62b | 499 | |
ba3f7f04 | 500 | dst = inet_csk_route_req(sk, &fl4, req); |
fd80eb94 | 501 | if (dst == NULL) |
3d2fe62b GR |
502 | goto out; |
503 | ||
504 | skb = dccp_make_response(sk, dst, req); | |
505 | if (skb != NULL) { | |
506 | const struct inet_request_sock *ireq = inet_rsk(req); | |
507 | struct dccp_hdr *dh = dccp_hdr(skb); | |
508 | ||
634fb979 ED |
509 | dh->dccph_checksum = dccp_v4_csum_finish(skb, ireq->ir_loc_addr, |
510 | ireq->ir_rmt_addr); | |
2ab2ddd3 | 511 | rcu_read_lock(); |
634fb979 ED |
512 | err = ip_build_and_send_pkt(skb, sk, ireq->ir_loc_addr, |
513 | ireq->ir_rmt_addr, | |
de033b7d WW |
514 | rcu_dereference(ireq->ireq_opt), |
515 | inet_sk(sk)->tos); | |
2ab2ddd3 | 516 | rcu_read_unlock(); |
b9df3cb8 | 517 | err = net_xmit_eval(err); |
3d2fe62b GR |
518 | } |
519 | ||
520 | out: | |
521 | dst_release(dst); | |
522 | return err; | |
523 | } | |
524 | ||
a00e7444 | 525 | static void dccp_v4_ctl_send_reset(const struct sock *sk, struct sk_buff *rxskb) |
7c657876 ACM |
526 | { |
527 | int err; | |
eddc9ec5 | 528 | const struct iphdr *rxiph; |
7c657876 ACM |
529 | struct sk_buff *skb; |
530 | struct dst_entry *dst; | |
adf30907 | 531 | struct net *net = dev_net(skb_dst(rxskb)->dev); |
b98b3304 FW |
532 | struct dccp_v4_pernet *pn; |
533 | struct sock *ctl_sk; | |
7c657876 ACM |
534 | |
535 | /* Never send a reset in response to a reset. */ | |
e356d37a | 536 | if (dccp_hdr(rxskb)->dccph_type == DCCP_PKT_RESET) |
7c657876 ACM |
537 | return; |
538 | ||
511c3f92 | 539 | if (skb_rtable(rxskb)->rt_type != RTN_LOCAL) |
7c657876 ACM |
540 | return; |
541 | ||
b98b3304 FW |
542 | pn = net_generic(net, dccp_v4_pernet_id); |
543 | ctl_sk = pn->v4_ctl_sk; | |
f5487398 | 544 | dst = dccp_v4_route_skb(net, ctl_sk, rxskb); |
7c657876 ACM |
545 | if (dst == NULL) |
546 | return; | |
547 | ||
7b1cffa8 | 548 | skb = dccp_ctl_make_reset(ctl_sk, rxskb); |
7c657876 ACM |
549 | if (skb == NULL) |
550 | goto out; | |
551 | ||
eddc9ec5 | 552 | rxiph = ip_hdr(rxskb); |
e356d37a GR |
553 | dccp_hdr(skb)->dccph_checksum = dccp_v4_csum_finish(skb, rxiph->saddr, |
554 | rxiph->daddr); | |
adf30907 | 555 | skb_dst_set(skb, dst_clone(dst)); |
7c657876 | 556 | |
95556a88 | 557 | local_bh_disable(); |
7b1cffa8 PE |
558 | bh_lock_sock(ctl_sk); |
559 | err = ip_build_and_send_pkt(skb, ctl_sk, | |
de033b7d WW |
560 | rxiph->daddr, rxiph->saddr, NULL, |
561 | inet_sk(ctl_sk)->tos); | |
7b1cffa8 | 562 | bh_unlock_sock(ctl_sk); |
7c657876 | 563 | |
b9df3cb8 | 564 | if (net_xmit_eval(err) == 0) { |
95556a88 ED |
565 | __DCCP_INC_STATS(DCCP_MIB_OUTSEGS); |
566 | __DCCP_INC_STATS(DCCP_MIB_OUTRSTS); | |
7c657876 | 567 | } |
95556a88 | 568 | local_bh_enable(); |
7c657876 | 569 | out: |
95556a88 | 570 | dst_release(dst); |
7c657876 ACM |
571 | } |
572 | ||
3d2fe62b GR |
573 | static void dccp_v4_reqsk_destructor(struct request_sock *req) |
574 | { | |
d99a7bd2 | 575 | dccp_feat_list_purge(&dccp_rsk(req)->dreq_featneg); |
c92e8c02 | 576 | kfree(rcu_dereference_protected(inet_rsk(req)->ireq_opt, 1)); |
3d2fe62b GR |
577 | } |
578 | ||
42cb80a2 | 579 | void dccp_syn_ack_timeout(const struct request_sock *req) |
c72e1183 ED |
580 | { |
581 | } | |
582 | EXPORT_SYMBOL(dccp_syn_ack_timeout); | |
583 | ||
3d2fe62b GR |
584 | static struct request_sock_ops dccp_request_sock_ops __read_mostly = { |
585 | .family = PF_INET, | |
586 | .obj_size = sizeof(struct dccp_request_sock), | |
587 | .rtx_syn_ack = dccp_v4_send_response, | |
588 | .send_ack = dccp_reqsk_send_ack, | |
589 | .destructor = dccp_v4_reqsk_destructor, | |
590 | .send_reset = dccp_v4_ctl_send_reset, | |
c72e1183 | 591 | .syn_ack_timeout = dccp_syn_ack_timeout, |
3d2fe62b GR |
592 | }; |
593 | ||
594 | int dccp_v4_conn_request(struct sock *sk, struct sk_buff *skb) | |
595 | { | |
596 | struct inet_request_sock *ireq; | |
3d2fe62b GR |
597 | struct request_sock *req; |
598 | struct dccp_request_sock *dreq; | |
8109b02b | 599 | const __be32 service = dccp_hdr_request(skb)->dccph_req_service; |
3d2fe62b | 600 | struct dccp_skb_cb *dcb = DCCP_SKB_CB(skb); |
3d2fe62b GR |
601 | |
602 | /* Never answer to DCCP_PKT_REQUESTs send to broadcast or multicast */ | |
511c3f92 | 603 | if (skb_rtable(skb)->rt_flags & (RTCF_BROADCAST | RTCF_MULTICAST)) |
4a5409a5 | 604 | return 0; /* discard, don't send a reset here */ |
3d2fe62b GR |
605 | |
606 | if (dccp_bad_service_code(sk, service)) { | |
4a5409a5 | 607 | dcb->dccpd_reset_code = DCCP_RESET_CODE_BAD_SERVICE_CODE; |
3d2fe62b | 608 | goto drop; |
8109b02b | 609 | } |
3d2fe62b GR |
610 | /* |
611 | * TW buckets are converted to open requests without | |
612 | * limitations, they conserve resources and peer is | |
613 | * evidently real one. | |
614 | */ | |
4a5409a5 | 615 | dcb->dccpd_reset_code = DCCP_RESET_CODE_TOO_BUSY; |
3d2fe62b GR |
616 | if (inet_csk_reqsk_queue_is_full(sk)) |
617 | goto drop; | |
618 | ||
5ea8ea2c | 619 | if (sk_acceptq_is_full(sk)) |
3d2fe62b GR |
620 | goto drop; |
621 | ||
a1a5344d | 622 | req = inet_reqsk_alloc(&dccp_request_sock_ops, sk, true); |
3d2fe62b GR |
623 | if (req == NULL) |
624 | goto drop; | |
625 | ||
ac75773c GR |
626 | if (dccp_reqsk_init(req, dccp_sk(sk), skb)) |
627 | goto drop_and_free; | |
3d2fe62b | 628 | |
8b819412 GR |
629 | dreq = dccp_rsk(req); |
630 | if (dccp_parse_options(sk, dreq, skb)) | |
631 | goto drop_and_free; | |
632 | ||
3d2fe62b GR |
633 | if (security_inet_conn_request(sk, skb, req)) |
634 | goto drop_and_free; | |
635 | ||
636 | ireq = inet_rsk(req); | |
08d2cc3b ED |
637 | sk_rcv_saddr_set(req_to_sk(req), ip_hdr(skb)->daddr); |
638 | sk_daddr_set(req_to_sk(req), ip_hdr(skb)->saddr); | |
b855ff82 | 639 | ireq->ir_mark = inet_request_mark(sk, skb); |
3f66b083 | 640 | ireq->ireq_family = AF_INET; |
36f7cec4 | 641 | ireq->ir_iif = READ_ONCE(sk->sk_bound_dev_if); |
3d2fe62b | 642 | |
8109b02b | 643 | /* |
3d2fe62b GR |
644 | * Step 3: Process LISTEN state |
645 | * | |
646 | * Set S.ISR, S.GSR, S.SWL, S.SWH from packet or Init Cookie | |
647 | * | |
f541fb7e | 648 | * Setting S.SWL/S.SWH to is deferred to dccp_create_openreq_child(). |
3d2fe62b | 649 | */ |
3d2fe62b | 650 | dreq->dreq_isr = dcb->dccpd_seq; |
f541fb7e | 651 | dreq->dreq_gsr = dreq->dreq_isr; |
865e9022 | 652 | dreq->dreq_iss = dccp_v4_init_sequence(skb); |
f541fb7e | 653 | dreq->dreq_gss = dreq->dreq_iss; |
3d2fe62b GR |
654 | dreq->dreq_service = service; |
655 | ||
1a2c6181 | 656 | if (dccp_v4_send_response(sk, req)) |
3d2fe62b GR |
657 | goto drop_and_free; |
658 | ||
659 | inet_csk_reqsk_queue_hash_add(sk, req, DCCP_TIMEOUT_INIT); | |
b7953d3c | 660 | reqsk_put(req); |
3d2fe62b GR |
661 | return 0; |
662 | ||
663 | drop_and_free: | |
664 | reqsk_free(req); | |
665 | drop: | |
aa62d76b | 666 | __DCCP_INC_STATS(DCCP_MIB_ATTEMPTFAILS); |
3d2fe62b GR |
667 | return -1; |
668 | } | |
3d2fe62b GR |
669 | EXPORT_SYMBOL_GPL(dccp_v4_conn_request); |
670 | ||
7c657876 ACM |
671 | int dccp_v4_do_rcv(struct sock *sk, struct sk_buff *skb) |
672 | { | |
673 | struct dccp_hdr *dh = dccp_hdr(skb); | |
674 | ||
675 | if (sk->sk_state == DCCP_OPEN) { /* Fast path */ | |
676 | if (dccp_rcv_established(sk, skb, dh, skb->len)) | |
677 | goto reset; | |
678 | return 0; | |
679 | } | |
680 | ||
681 | /* | |
682 | * Step 3: Process LISTEN state | |
d83ca5ac GR |
683 | * If P.type == Request or P contains a valid Init Cookie option, |
684 | * (* Must scan the packet's options to check for Init | |
685 | * Cookies. Only Init Cookies are processed here, | |
686 | * however; other options are processed in Step 8. This | |
687 | * scan need only be performed if the endpoint uses Init | |
688 | * Cookies *) | |
689 | * (* Generate a new socket and switch to that socket *) | |
690 | * Set S := new socket for this port pair | |
691 | * S.state = RESPOND | |
692 | * Choose S.ISS (initial seqno) or set from Init Cookies | |
693 | * Initialize S.GAR := S.ISS | |
694 | * Set S.ISR, S.GSR, S.SWL, S.SWH from packet or Init Cookies | |
695 | * Continue with S.state == RESPOND | |
696 | * (* A Response packet will be generated in Step 11 *) | |
697 | * Otherwise, | |
698 | * Generate Reset(No Connection) unless P.type == Reset | |
699 | * Drop packet and return | |
7c657876 | 700 | * |
7690af3f ACM |
701 | * NOTE: the check for the packet types is done in |
702 | * dccp_rcv_state_process | |
7c657876 | 703 | */ |
7c657876 ACM |
704 | |
705 | if (dccp_rcv_state_process(sk, skb, dh, skb->len)) | |
706 | goto reset; | |
707 | return 0; | |
708 | ||
709 | reset: | |
cfb6eeb4 | 710 | dccp_v4_ctl_send_reset(sk, skb); |
7c657876 ACM |
711 | kfree_skb(skb); |
712 | return 0; | |
713 | } | |
f21e68ca ACM |
714 | EXPORT_SYMBOL_GPL(dccp_v4_do_rcv); |
715 | ||
09dbc389 GR |
716 | /** |
717 | * dccp_invalid_packet - check for malformed packets | |
d0b1101b AL |
718 | * @skb: Packet to validate |
719 | * | |
09dbc389 GR |
720 | * Implements RFC 4340, 8.5: Step 1: Check header basics |
721 | * Packets that fail these checks are ignored and do not receive Resets. | |
722 | */ | |
f21e68ca | 723 | int dccp_invalid_packet(struct sk_buff *skb) |
7c657876 ACM |
724 | { |
725 | const struct dccp_hdr *dh; | |
6f4e5fff | 726 | unsigned int cscov; |
648f0c28 | 727 | u8 dccph_doff; |
7c657876 ACM |
728 | |
729 | if (skb->pkt_type != PACKET_HOST) | |
730 | return 1; | |
731 | ||
09dbc389 | 732 | /* If the packet is shorter than 12 bytes, drop packet and return */ |
7c657876 | 733 | if (!pskb_may_pull(skb, sizeof(struct dccp_hdr))) { |
59348b19 | 734 | DCCP_WARN("pskb_may_pull failed\n"); |
7c657876 ACM |
735 | return 1; |
736 | } | |
737 | ||
738 | dh = dccp_hdr(skb); | |
739 | ||
09dbc389 | 740 | /* If P.type is not understood, drop packet and return */ |
7c657876 | 741 | if (dh->dccph_type >= DCCP_PKT_INVALID) { |
59348b19 | 742 | DCCP_WARN("invalid packet type\n"); |
7c657876 ACM |
743 | return 1; |
744 | } | |
745 | ||
746 | /* | |
09dbc389 | 747 | * If P.Data Offset is too small for packet type, drop packet and return |
7c657876 | 748 | */ |
648f0c28 ED |
749 | dccph_doff = dh->dccph_doff; |
750 | if (dccph_doff < dccp_hdr_len(skb) / sizeof(u32)) { | |
751 | DCCP_WARN("P.Data Offset(%u) too small\n", dccph_doff); | |
7c657876 ACM |
752 | return 1; |
753 | } | |
09dbc389 | 754 | /* |
54633527 | 755 | * If P.Data Offset is too large for packet, drop packet and return |
09dbc389 | 756 | */ |
648f0c28 ED |
757 | if (!pskb_may_pull(skb, dccph_doff * sizeof(u32))) { |
758 | DCCP_WARN("P.Data Offset(%u) too large\n", dccph_doff); | |
7c657876 ACM |
759 | return 1; |
760 | } | |
648f0c28 | 761 | dh = dccp_hdr(skb); |
7c657876 ACM |
762 | /* |
763 | * If P.type is not Data, Ack, or DataAck and P.X == 0 (the packet | |
764 | * has short sequence numbers), drop packet and return | |
765 | */ | |
6079a463 WY |
766 | if ((dh->dccph_type < DCCP_PKT_DATA || |
767 | dh->dccph_type > DCCP_PKT_DATAACK) && dh->dccph_x == 0) { | |
59348b19 GR |
768 | DCCP_WARN("P.type (%s) not Data || [Data]Ack, while P.X == 0\n", |
769 | dccp_packet_name(dh->dccph_type)); | |
7c657876 ACM |
770 | return 1; |
771 | } | |
772 | ||
6f4e5fff GR |
773 | /* |
774 | * If P.CsCov is too large for the packet size, drop packet and return. | |
775 | * This must come _before_ checksumming (not as RFC 4340 suggests). | |
776 | */ | |
777 | cscov = dccp_csum_coverage(skb); | |
778 | if (cscov > skb->len) { | |
59348b19 GR |
779 | DCCP_WARN("P.CsCov %u exceeds packet length %d\n", |
780 | dh->dccph_cscov, skb->len); | |
6f4e5fff GR |
781 | return 1; |
782 | } | |
783 | ||
784 | /* If header checksum is incorrect, drop packet and return. | |
785 | * (This step is completed in the AF-dependent functions.) */ | |
786 | skb->csum = skb_checksum(skb, 0, cscov, 0); | |
787 | ||
7c657876 ACM |
788 | return 0; |
789 | } | |
f21e68ca ACM |
790 | EXPORT_SYMBOL_GPL(dccp_invalid_packet); |
791 | ||
7c657876 | 792 | /* this is called when real data arrives */ |
b61fafc4 | 793 | static int dccp_v4_rcv(struct sk_buff *skb) |
7c657876 ACM |
794 | { |
795 | const struct dccp_hdr *dh; | |
eddc9ec5 | 796 | const struct iphdr *iph; |
3b24d854 | 797 | bool refcounted; |
7c657876 | 798 | struct sock *sk; |
6f4e5fff | 799 | int min_cov; |
7c657876 | 800 | |
6f4e5fff | 801 | /* Step 1: Check header basics */ |
7c657876 ACM |
802 | |
803 | if (dccp_invalid_packet(skb)) | |
804 | goto discard_it; | |
805 | ||
eddc9ec5 | 806 | iph = ip_hdr(skb); |
6f4e5fff | 807 | /* Step 1: If header checksum is incorrect, drop packet and return */ |
eddc9ec5 | 808 | if (dccp_v4_csum_finish(skb, iph->saddr, iph->daddr)) { |
59348b19 | 809 | DCCP_WARN("dropped packet with invalid checksum\n"); |
f21e68ca ACM |
810 | goto discard_it; |
811 | } | |
812 | ||
7c657876 | 813 | dh = dccp_hdr(skb); |
7c657876 | 814 | |
fde20105 | 815 | DCCP_SKB_CB(skb)->dccpd_seq = dccp_hdr_seq(dh); |
7c657876 ACM |
816 | DCCP_SKB_CB(skb)->dccpd_type = dh->dccph_type; |
817 | ||
21454aaa | 818 | dccp_pr_debug("%8.8s src=%pI4@%-5d dst=%pI4@%-5d seq=%llu", |
7c657876 | 819 | dccp_packet_name(dh->dccph_type), |
21454aaa HH |
820 | &iph->saddr, ntohs(dh->dccph_sport), |
821 | &iph->daddr, ntohs(dh->dccph_dport), | |
f6ccf554 | 822 | (unsigned long long) DCCP_SKB_CB(skb)->dccpd_seq); |
7c657876 ACM |
823 | |
824 | if (dccp_packet_without_ack(skb)) { | |
825 | DCCP_SKB_CB(skb)->dccpd_ack_seq = DCCP_PKT_WITHOUT_ACK_SEQ; | |
826 | dccp_pr_debug_cat("\n"); | |
827 | } else { | |
828 | DCCP_SKB_CB(skb)->dccpd_ack_seq = dccp_hdr_ack_seq(skb); | |
d23c7107 | 829 | dccp_pr_debug_cat(", ack=%llu\n", (unsigned long long) |
f6ccf554 | 830 | DCCP_SKB_CB(skb)->dccpd_ack_seq); |
7c657876 ACM |
831 | } |
832 | ||
4bdc3d66 | 833 | lookup: |
a583636a | 834 | sk = __inet_lookup_skb(&dccp_hashinfo, skb, __dccp_hdr_len(dh), |
3fa6f616 | 835 | dh->dccph_sport, dh->dccph_dport, 0, &refcounted); |
4bdc3d66 | 836 | if (!sk) { |
7c657876 ACM |
837 | dccp_pr_debug("failed to look up flow ID in table and " |
838 | "get corresponding socket\n"); | |
839 | goto no_dccp_socket; | |
840 | } | |
841 | ||
8109b02b | 842 | /* |
7c657876 | 843 | * Step 2: |
8109b02b | 844 | * ... or S.state == TIMEWAIT, |
7c657876 ACM |
845 | * Generate Reset(No Connection) unless P.type == Reset |
846 | * Drop packet and return | |
847 | */ | |
7c657876 | 848 | if (sk->sk_state == DCCP_TIME_WAIT) { |
d23c7107 GR |
849 | dccp_pr_debug("sk->sk_state == DCCP_TIME_WAIT: do_time_wait\n"); |
850 | inet_twsk_put(inet_twsk(sk)); | |
851 | goto no_dccp_socket; | |
7c657876 ACM |
852 | } |
853 | ||
079096f1 ED |
854 | if (sk->sk_state == DCCP_NEW_SYN_RECV) { |
855 | struct request_sock *req = inet_reqsk(sk); | |
7716682c | 856 | struct sock *nsk; |
079096f1 ED |
857 | |
858 | sk = req->rsk_listener; | |
7716682c | 859 | if (unlikely(sk->sk_state != DCCP_LISTEN)) { |
f03f2e15 | 860 | inet_csk_reqsk_queue_drop_and_put(sk, req); |
4bdc3d66 ED |
861 | goto lookup; |
862 | } | |
7716682c | 863 | sock_hold(sk); |
3b24d854 | 864 | refcounted = true; |
7716682c | 865 | nsk = dccp_check_req(sk, skb, req); |
079096f1 ED |
866 | if (!nsk) { |
867 | reqsk_put(req); | |
7716682c | 868 | goto discard_and_relse; |
079096f1 ED |
869 | } |
870 | if (nsk == sk) { | |
079096f1 ED |
871 | reqsk_put(req); |
872 | } else if (dccp_child_process(sk, nsk, skb)) { | |
873 | dccp_v4_ctl_send_reset(sk, skb); | |
7716682c | 874 | goto discard_and_relse; |
079096f1 | 875 | } else { |
7716682c | 876 | sock_put(sk); |
079096f1 ED |
877 | return 0; |
878 | } | |
879 | } | |
6f4e5fff GR |
880 | /* |
881 | * RFC 4340, sec. 9.2.1: Minimum Checksum Coverage | |
8109b02b ACM |
882 | * o if MinCsCov = 0, only packets with CsCov = 0 are accepted |
883 | * o if MinCsCov > 0, also accept packets with CsCov >= MinCsCov | |
6f4e5fff GR |
884 | */ |
885 | min_cov = dccp_sk(sk)->dccps_pcrlen; | |
886 | if (dh->dccph_cscov && (min_cov == 0 || dh->dccph_cscov < min_cov)) { | |
887 | dccp_pr_debug("Packet CsCov %d does not satisfy MinCsCov %d\n", | |
888 | dh->dccph_cscov, min_cov); | |
889 | /* FIXME: "Such packets SHOULD be reported using Data Dropped | |
890 | * options (Section 11.7) with Drop Code 0, Protocol | |
891 | * Constraints." */ | |
892 | goto discard_and_relse; | |
893 | } | |
894 | ||
25995ff5 | 895 | if (!xfrm4_policy_check(sk, XFRM_POLICY_IN, skb)) |
7c657876 | 896 | goto discard_and_relse; |
895b5c9f | 897 | nf_reset_ct(skb); |
7c657876 | 898 | |
c3f24cfb | 899 | return __sk_receive_skb(sk, skb, 1, dh->dccph_doff * 4, refcounted); |
7c657876 ACM |
900 | |
901 | no_dccp_socket: | |
902 | if (!xfrm4_policy_check(NULL, XFRM_POLICY_IN, skb)) | |
903 | goto discard_it; | |
904 | /* | |
905 | * Step 2: | |
8109b02b | 906 | * If no socket ... |
7c657876 ACM |
907 | * Generate Reset(No Connection) unless P.type == Reset |
908 | * Drop packet and return | |
909 | */ | |
910 | if (dh->dccph_type != DCCP_PKT_RESET) { | |
7690af3f ACM |
911 | DCCP_SKB_CB(skb)->dccpd_reset_code = |
912 | DCCP_RESET_CODE_NO_CONNECTION; | |
cfb6eeb4 | 913 | dccp_v4_ctl_send_reset(sk, skb); |
7c657876 ACM |
914 | } |
915 | ||
916 | discard_it: | |
7c657876 ACM |
917 | kfree_skb(skb); |
918 | return 0; | |
919 | ||
920 | discard_and_relse: | |
3b24d854 ED |
921 | if (refcounted) |
922 | sock_put(sk); | |
7c657876 ACM |
923 | goto discard_it; |
924 | } | |
925 | ||
3b401a81 | 926 | static const struct inet_connection_sock_af_ops dccp_ipv4_af_ops = { |
543d9cfe ACM |
927 | .queue_xmit = ip_queue_xmit, |
928 | .send_check = dccp_v4_send_check, | |
929 | .rebuild_header = inet_sk_rebuild_header, | |
930 | .conn_request = dccp_v4_conn_request, | |
931 | .syn_recv_sock = dccp_v4_request_recv_sock, | |
932 | .net_header_len = sizeof(struct iphdr), | |
933 | .setsockopt = ip_setsockopt, | |
934 | .getsockopt = ip_getsockopt, | |
935 | .addr2sockaddr = inet_csk_addr2sockaddr, | |
936 | .sockaddr_len = sizeof(struct sockaddr_in), | |
57cca05a ACM |
937 | }; |
938 | ||
3e0fadc5 | 939 | static int dccp_v4_init_sock(struct sock *sk) |
7c657876 | 940 | { |
72478873 ACM |
941 | static __u8 dccp_v4_ctl_sock_initialized; |
942 | int err = dccp_init_sock(sk, dccp_v4_ctl_sock_initialized); | |
f21e68ca | 943 | |
72478873 ACM |
944 | if (err == 0) { |
945 | if (unlikely(!dccp_v4_ctl_sock_initialized)) | |
946 | dccp_v4_ctl_sock_initialized = 1; | |
3e0fadc5 | 947 | inet_csk(sk)->icsk_af_ops = &dccp_ipv4_af_ops; |
72478873 ACM |
948 | } |
949 | ||
3e0fadc5 | 950 | return err; |
7c657876 ACM |
951 | } |
952 | ||
6d6ee43e ACM |
953 | static struct timewait_sock_ops dccp_timewait_sock_ops = { |
954 | .twsk_obj_size = sizeof(struct inet_timewait_sock), | |
955 | }; | |
956 | ||
5e0817f8 | 957 | static struct proto dccp_v4_prot = { |
7c657876 ACM |
958 | .name = "DCCP", |
959 | .owner = THIS_MODULE, | |
960 | .close = dccp_close, | |
961 | .connect = dccp_v4_connect, | |
962 | .disconnect = dccp_disconnect, | |
963 | .ioctl = dccp_ioctl, | |
964 | .init = dccp_v4_init_sock, | |
965 | .setsockopt = dccp_setsockopt, | |
966 | .getsockopt = dccp_getsockopt, | |
967 | .sendmsg = dccp_sendmsg, | |
968 | .recvmsg = dccp_recvmsg, | |
969 | .backlog_rcv = dccp_v4_do_rcv, | |
ab1e0a13 ACM |
970 | .hash = inet_hash, |
971 | .unhash = inet_unhash, | |
7c657876 | 972 | .accept = inet_csk_accept, |
ab1e0a13 | 973 | .get_port = inet_csk_get_port, |
7c657876 | 974 | .shutdown = dccp_shutdown, |
3e0fadc5 | 975 | .destroy = dccp_destroy_sock, |
7c657876 ACM |
976 | .orphan_count = &dccp_orphan_count, |
977 | .max_header = MAX_DCCP_HEADER, | |
978 | .obj_size = sizeof(struct dccp_sock), | |
5f0d5a3a | 979 | .slab_flags = SLAB_TYPESAFE_BY_RCU, |
7c657876 | 980 | .rsk_prot = &dccp_request_sock_ops, |
6d6ee43e | 981 | .twsk_prot = &dccp_timewait_sock_ops, |
39d8cda7 | 982 | .h.hashinfo = &dccp_hashinfo, |
7c657876 | 983 | }; |
6d6ee43e | 984 | |
32613090 | 985 | static const struct net_protocol dccp_v4_protocol = { |
b61fafc4 ACM |
986 | .handler = dccp_v4_rcv, |
987 | .err_handler = dccp_v4_err, | |
988 | .no_policy = 1, | |
8ed1dc44 | 989 | .icmp_strict_tag_validation = 1, |
b61fafc4 ACM |
990 | }; |
991 | ||
992 | static const struct proto_ops inet_dccp_ops = { | |
543d9cfe ACM |
993 | .family = PF_INET, |
994 | .owner = THIS_MODULE, | |
995 | .release = inet_release, | |
996 | .bind = inet_bind, | |
997 | .connect = inet_stream_connect, | |
998 | .socketpair = sock_no_socketpair, | |
999 | .accept = inet_accept, | |
1000 | .getname = inet_getname, | |
b61fafc4 | 1001 | /* FIXME: work on tcp_poll to rename it to inet_csk_poll */ |
a11e1d43 | 1002 | .poll = dccp_poll, |
543d9cfe | 1003 | .ioctl = inet_ioctl, |
c7cbdbf2 | 1004 | .gettstamp = sock_gettstamp, |
b61fafc4 | 1005 | /* FIXME: work on inet_listen to rename it to sock_common_listen */ |
543d9cfe ACM |
1006 | .listen = inet_dccp_listen, |
1007 | .shutdown = inet_shutdown, | |
1008 | .setsockopt = sock_common_setsockopt, | |
1009 | .getsockopt = sock_common_getsockopt, | |
1010 | .sendmsg = inet_sendmsg, | |
1011 | .recvmsg = sock_common_recvmsg, | |
1012 | .mmap = sock_no_mmap, | |
1013 | .sendpage = sock_no_sendpage, | |
b61fafc4 ACM |
1014 | }; |
1015 | ||
1016 | static struct inet_protosw dccp_v4_protosw = { | |
1017 | .type = SOCK_DCCP, | |
1018 | .protocol = IPPROTO_DCCP, | |
1019 | .prot = &dccp_v4_prot, | |
1020 | .ops = &inet_dccp_ops, | |
b61fafc4 ACM |
1021 | .flags = INET_PROTOSW_ICSK, |
1022 | }; | |
1023 | ||
2c8c1e72 | 1024 | static int __net_init dccp_v4_init_net(struct net *net) |
72a2d613 | 1025 | { |
b98b3304 FW |
1026 | struct dccp_v4_pernet *pn = net_generic(net, dccp_v4_pernet_id); |
1027 | ||
d14a0ebd GR |
1028 | if (dccp_hashinfo.bhash == NULL) |
1029 | return -ESOCKTNOSUPPORT; | |
b76c4b27 | 1030 | |
b98b3304 | 1031 | return inet_ctl_sock_create(&pn->v4_ctl_sk, PF_INET, |
d14a0ebd | 1032 | SOCK_DCCP, IPPROTO_DCCP, net); |
72a2d613 PE |
1033 | } |
1034 | ||
2c8c1e72 | 1035 | static void __net_exit dccp_v4_exit_net(struct net *net) |
72a2d613 | 1036 | { |
b98b3304 FW |
1037 | struct dccp_v4_pernet *pn = net_generic(net, dccp_v4_pernet_id); |
1038 | ||
1039 | inet_ctl_sock_destroy(pn->v4_ctl_sk); | |
72a2d613 PE |
1040 | } |
1041 | ||
04c494e6 ED |
1042 | static void __net_exit dccp_v4_exit_batch(struct list_head *net_exit_list) |
1043 | { | |
1044 | inet_twsk_purge(&dccp_hashinfo, AF_INET); | |
1045 | } | |
1046 | ||
72a2d613 PE |
1047 | static struct pernet_operations dccp_v4_ops = { |
1048 | .init = dccp_v4_init_net, | |
1049 | .exit = dccp_v4_exit_net, | |
04c494e6 | 1050 | .exit_batch = dccp_v4_exit_batch, |
b98b3304 FW |
1051 | .id = &dccp_v4_pernet_id, |
1052 | .size = sizeof(struct dccp_v4_pernet), | |
72a2d613 PE |
1053 | }; |
1054 | ||
b61fafc4 ACM |
1055 | static int __init dccp_v4_init(void) |
1056 | { | |
1057 | int err = proto_register(&dccp_v4_prot, 1); | |
1058 | ||
d5494acb | 1059 | if (err) |
b61fafc4 ACM |
1060 | goto out; |
1061 | ||
b61fafc4 ACM |
1062 | inet_register_protosw(&dccp_v4_protosw); |
1063 | ||
72a2d613 PE |
1064 | err = register_pernet_subsys(&dccp_v4_ops); |
1065 | if (err) | |
1066 | goto out_destroy_ctl_sock; | |
d5494acb XL |
1067 | |
1068 | err = inet_add_protocol(&dccp_v4_protocol, IPPROTO_DCCP); | |
1069 | if (err) | |
1070 | goto out_proto_unregister; | |
1071 | ||
b61fafc4 ACM |
1072 | out: |
1073 | return err; | |
d5494acb XL |
1074 | out_proto_unregister: |
1075 | unregister_pernet_subsys(&dccp_v4_ops); | |
72a2d613 | 1076 | out_destroy_ctl_sock: |
b61fafc4 | 1077 | inet_unregister_protosw(&dccp_v4_protosw); |
b61fafc4 ACM |
1078 | proto_unregister(&dccp_v4_prot); |
1079 | goto out; | |
1080 | } | |
1081 | ||
1082 | static void __exit dccp_v4_exit(void) | |
1083 | { | |
d5494acb | 1084 | inet_del_protocol(&dccp_v4_protocol, IPPROTO_DCCP); |
72a2d613 | 1085 | unregister_pernet_subsys(&dccp_v4_ops); |
b61fafc4 | 1086 | inet_unregister_protosw(&dccp_v4_protosw); |
b61fafc4 ACM |
1087 | proto_unregister(&dccp_v4_prot); |
1088 | } | |
1089 | ||
1090 | module_init(dccp_v4_init); | |
1091 | module_exit(dccp_v4_exit); | |
1092 | ||
1093 | /* | |
1094 | * __stringify doesn't likes enums, so use SOCK_DCCP (6) and IPPROTO_DCCP (33) | |
1095 | * values directly, Also cover the case where the protocol is not specified, | |
1096 | * i.e. net-pf-PF_INET-proto-0-type-SOCK_DCCP | |
1097 | */ | |
7131c6c7 JD |
1098 | MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_INET, 33, 6); |
1099 | MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_INET, 0, 6); | |
b61fafc4 ACM |
1100 | MODULE_LICENSE("GPL"); |
1101 | MODULE_AUTHOR("Arnaldo Carvalho de Melo <acme@mandriva.com>"); | |
1102 | MODULE_DESCRIPTION("DCCP - Datagram Congestion Controlled Protocol"); |