[linux-block.git] / net / netfilter / nfnetlink_cttimeout.c

// SPDX-License-Identifier: GPL-2.0-or-later
/*
 * (C) 2012 by Pablo Neira Ayuso <pablo@netfilter.org>
 * (C) 2012 by Vyatta Inc. <http://www.vyatta.com>
 */
#include <linux/init.h>
#include <linux/module.h>
#include <linux/kernel.h>
#include <linux/rculist.h>
#include <linux/rculist_nulls.h>
#include <linux/types.h>
#include <linux/timer.h>
#include <linux/security.h>
#include <linux/skbuff.h>
#include <linux/errno.h>
#include <linux/netlink.h>
#include <linux/spinlock.h>
#include <linux/interrupt.h>
#include <linux/slab.h>

#include <linux/netfilter.h>
#include <net/netlink.h>
#include <net/sock.h>
#include <net/netfilter/nf_conntrack.h>
#include <net/netfilter/nf_conntrack_core.h>
#include <net/netfilter/nf_conntrack_l4proto.h>
#include <net/netfilter/nf_conntrack_tuple.h>
#include <net/netfilter/nf_conntrack_timeout.h>

#include <linux/netfilter/nfnetlink.h>
#include <linux/netfilter/nfnetlink_cttimeout.h>

MODULE_LICENSE("GPL");
MODULE_AUTHOR("Pablo Neira Ayuso <pablo@netfilter.org>");
MODULE_DESCRIPTION("cttimeout: Extended Netfilter Connection Tracking timeout tuning");

static const struct nla_policy cttimeout_nla_policy[CTA_TIMEOUT_MAX+1] = {
	[CTA_TIMEOUT_NAME]	= { .type = NLA_NUL_STRING,
				    .len  = CTNL_TIMEOUT_NAME_MAX - 1},
	[CTA_TIMEOUT_L3PROTO]	= { .type = NLA_U16 },
	[CTA_TIMEOUT_L4PROTO]	= { .type = NLA_U8 },
	[CTA_TIMEOUT_DATA]	= { .type = NLA_NESTED },
};

static int
ctnl_timeout_parse_policy(void *timeout,
			  const struct nf_conntrack_l4proto *l4proto,
			  struct net *net, const struct nlattr *attr)
{
	struct nlattr **tb;
	int ret = 0;

	tb = kcalloc(l4proto->ctnl_timeout.nlattr_max + 1, sizeof(*tb),
		     GFP_KERNEL);

	if (!tb)
		return -ENOMEM;

	ret = nla_parse_nested_deprecated(tb,
					  l4proto->ctnl_timeout.nlattr_max,
					  attr,
					  l4proto->ctnl_timeout.nla_policy,
					  NULL);
	if (ret < 0)
		goto err;

	ret = l4proto->ctnl_timeout.nlattr_to_obj(tb, net, timeout);

err:
	kfree(tb);
	return ret;
}

static int cttimeout_new_timeout(struct net *net, struct sock *ctnl,
				 struct sk_buff *skb,
				 const struct nlmsghdr *nlh,
				 const struct nlattr * const cda[],
				 struct netlink_ext_ack *extack)
{
	__u16 l3num;
	__u8 l4num;
	const struct nf_conntrack_l4proto *l4proto;
	struct ctnl_timeout *timeout, *matching = NULL;
	char *name;
	int ret;

	if (!cda[CTA_TIMEOUT_NAME] ||
	    !cda[CTA_TIMEOUT_L3PROTO] ||
	    !cda[CTA_TIMEOUT_L4PROTO] ||
	    !cda[CTA_TIMEOUT_DATA])
		return -EINVAL;

	name = nla_data(cda[CTA_TIMEOUT_NAME]);
	l3num = ntohs(nla_get_be16(cda[CTA_TIMEOUT_L3PROTO]));
	l4num = nla_get_u8(cda[CTA_TIMEOUT_L4PROTO]);

	list_for_each_entry(timeout, &net->nfct_timeout_list, head) {
		if (strncmp(timeout->name, name, CTNL_TIMEOUT_NAME_MAX) != 0)
			continue;

		if (nlh->nlmsg_flags & NLM_F_EXCL)
			return -EEXIST;

		matching = timeout;
		break;
	}

	if (matching) {
		if (nlh->nlmsg_flags & NLM_F_REPLACE) {
			/* You cannot replace one timeout policy by another of
			 * different kind, sorry.
			 */
			if (matching->timeout.l3num != l3num ||
			    matching->timeout.l4proto->l4proto != l4num)
				return -EINVAL;

			return ctnl_timeout_parse_policy(&matching->timeout.data,
							 matching->timeout.l4proto,
							 net, cda[CTA_TIMEOUT_DATA]);
		}

		return -EBUSY;
	}

	l4proto = nf_ct_l4proto_find(l4num);

	/* This protocol is not supportted, skip. */
	if (l4proto->l4proto != l4num) {
		ret = -EOPNOTSUPP;
		goto err_proto_put;
	}

	timeout = kzalloc(sizeof(struct ctnl_timeout) +
			  l4proto->ctnl_timeout.obj_size, GFP_KERNEL);
	if (timeout == NULL) {
		ret = -ENOMEM;
		goto err_proto_put;
	}

	ret = ctnl_timeout_parse_policy(&timeout->timeout.data, l4proto, net,
					cda[CTA_TIMEOUT_DATA]);
	if (ret < 0)
		goto err;

	strcpy(timeout->name, nla_data(cda[CTA_TIMEOUT_NAME]));
	timeout->timeout.l3num = l3num;
	timeout->timeout.l4proto = l4proto;
	refcount_set(&timeout->refcnt, 1);
	list_add_tail_rcu(&timeout->head, &net->nfct_timeout_list);

	return 0;
err:
	kfree(timeout);
err_proto_put:
	return ret;
}

static int
ctnl_timeout_fill_info(struct sk_buff *skb, u32 portid, u32 seq, u32 type,
		       int event, struct ctnl_timeout *timeout)
{
	struct nlmsghdr *nlh;
	struct nfgenmsg *nfmsg;
	unsigned int flags = portid ? NLM_F_MULTI : 0;
	const struct nf_conntrack_l4proto *l4proto = timeout->timeout.l4proto;
	struct nlattr *nest_parms;
	int ret;

	event = nfnl_msg_type(NFNL_SUBSYS_CTNETLINK_TIMEOUT, event);
	nlh = nlmsg_put(skb, portid, seq, event, sizeof(*nfmsg), flags);
	if (nlh == NULL)
		goto nlmsg_failure;

	nfmsg = nlmsg_data(nlh);
	nfmsg->nfgen_family = AF_UNSPEC;
	nfmsg->version = NFNETLINK_V0;
	nfmsg->res_id = 0;

	if (nla_put_string(skb, CTA_TIMEOUT_NAME, timeout->name) ||
	    nla_put_be16(skb, CTA_TIMEOUT_L3PROTO,
			 htons(timeout->timeout.l3num)) ||
	    nla_put_u8(skb, CTA_TIMEOUT_L4PROTO, l4proto->l4proto) ||
	    nla_put_be32(skb, CTA_TIMEOUT_USE,
			 htonl(refcount_read(&timeout->refcnt))))
		goto nla_put_failure;

	nest_parms = nla_nest_start(skb, CTA_TIMEOUT_DATA);
	if (!nest_parms)
		goto nla_put_failure;

	ret = l4proto->ctnl_timeout.obj_to_nlattr(skb, &timeout->timeout.data);
	if (ret < 0)
		goto nla_put_failure;

	nla_nest_end(skb, nest_parms);

	nlmsg_end(skb, nlh);
	return skb->len;

nlmsg_failure:
nla_put_failure:
	nlmsg_cancel(skb, nlh);
	return -1;
}

static int
ctnl_timeout_dump(struct sk_buff *skb, struct netlink_callback *cb)
{
	struct net *net = sock_net(skb->sk);
	struct ctnl_timeout *cur, *last;

	if (cb->args[2])
		return 0;

	last = (struct ctnl_timeout *)cb->args[1];
	if (cb->args[1])
		cb->args[1] = 0;

	rcu_read_lock();
	list_for_each_entry_rcu(cur, &net->nfct_timeout_list, head) {
		if (last) {
			if (cur != last)
				continue;

			last = NULL;
		}
		if (ctnl_timeout_fill_info(skb, NETLINK_CB(cb->skb).portid,
					   cb->nlh->nlmsg_seq,
					   NFNL_MSG_TYPE(cb->nlh->nlmsg_type),
					   IPCTNL_MSG_TIMEOUT_NEW, cur) < 0) {
			cb->args[1] = (unsigned long)cur;
			break;
		}
	}
	if (!cb->args[1])
		cb->args[2] = 1;
	rcu_read_unlock();
	return skb->len;
}

static int cttimeout_get_timeout(struct net *net, struct sock *ctnl,
				 struct sk_buff *skb,
				 const struct nlmsghdr *nlh,
				 const struct nlattr * const cda[],
				 struct netlink_ext_ack *extack)
{
	int ret = -ENOENT;
	char *name;
	struct ctnl_timeout *cur;

	if (nlh->nlmsg_flags & NLM_F_DUMP) {
		struct netlink_dump_control c = {
			.dump = ctnl_timeout_dump,
		};
		return netlink_dump_start(ctnl, skb, nlh, &c);
	}

	if (!cda[CTA_TIMEOUT_NAME])
		return -EINVAL;
	name = nla_data(cda[CTA_TIMEOUT_NAME]);

	list_for_each_entry(cur, &net->nfct_timeout_list, head) {
		struct sk_buff *skb2;

		if (strncmp(cur->name, name, CTNL_TIMEOUT_NAME_MAX) != 0)
			continue;

		skb2 = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
		if (skb2 == NULL) {
			ret = -ENOMEM;
			break;
		}

		ret = ctnl_timeout_fill_info(skb2, NETLINK_CB(skb).portid,
					     nlh->nlmsg_seq,
					     NFNL_MSG_TYPE(nlh->nlmsg_type),
					     IPCTNL_MSG_TIMEOUT_NEW, cur);
		if (ret <= 0) {
			kfree_skb(skb2);
			break;
		}
		ret = netlink_unicast(ctnl, skb2, NETLINK_CB(skb).portid,
					MSG_DONTWAIT);
		if (ret > 0)
			ret = 0;

		/* this avoids a loop in nfnetlink. */
		return ret == -EAGAIN ? -ENOBUFS : ret;
	}
	return ret;
}

/* try to delete object, fail if it is still in use. */
static int ctnl_timeout_try_del(struct net *net, struct ctnl_timeout *timeout)
{
	int ret = 0;

	/* We want to avoid races with ctnl_timeout_put. So only when the
	 * current refcnt is 1, we decrease it to 0.
	 */
	if (refcount_dec_if_one(&timeout->refcnt)) {
		/* We are protected by nfnl mutex. */
		list_del_rcu(&timeout->head);
		nf_ct_untimeout(net, &timeout->timeout);
		kfree_rcu(timeout, rcu_head);
	} else {
		ret = -EBUSY;
	}
	return ret;
}

static int cttimeout_del_timeout(struct net *net, struct sock *ctnl,
				 struct sk_buff *skb,
				 const struct nlmsghdr *nlh,
				 const struct nlattr * const cda[],
				 struct netlink_ext_ack *extack)
{
	struct ctnl_timeout *cur, *tmp;
	int ret = -ENOENT;
	char *name;

	if (!cda[CTA_TIMEOUT_NAME]) {
		list_for_each_entry_safe(cur, tmp, &net->nfct_timeout_list,
					 head)
			ctnl_timeout_try_del(net, cur);

		return 0;
	}
	name = nla_data(cda[CTA_TIMEOUT_NAME]);

	list_for_each_entry(cur, &net->nfct_timeout_list, head) {
		if (strncmp(cur->name, name, CTNL_TIMEOUT_NAME_MAX) != 0)
			continue;

		ret = ctnl_timeout_try_del(net, cur);
		if (ret < 0)
			return ret;

		break;
	}
	return ret;
}

static int cttimeout_default_set(struct net *net, struct sock *ctnl,
				 struct sk_buff *skb,
				 const struct nlmsghdr *nlh,
				 const struct nlattr * const cda[],
				 struct netlink_ext_ack *extack)
{
	const struct nf_conntrack_l4proto *l4proto;
	__u8 l4num;
	int ret;

	if (!cda[CTA_TIMEOUT_L3PROTO] ||
	    !cda[CTA_TIMEOUT_L4PROTO] ||
	    !cda[CTA_TIMEOUT_DATA])
		return -EINVAL;

	l4num = nla_get_u8(cda[CTA_TIMEOUT_L4PROTO]);
	l4proto = nf_ct_l4proto_find(l4num);

	/* This protocol is not supported, skip. */
	if (l4proto->l4proto != l4num) {
		ret = -EOPNOTSUPP;
		goto err;
	}

	ret = ctnl_timeout_parse_policy(NULL, l4proto, net,
					cda[CTA_TIMEOUT_DATA]);
	if (ret < 0)
		goto err;

	return 0;
err:
	return ret;
}

static int
cttimeout_default_fill_info(struct net *net, struct sk_buff *skb, u32 portid,
			    u32 seq, u32 type, int event, u16 l3num,
			    const struct nf_conntrack_l4proto *l4proto,
			    const unsigned int *timeouts)
{
	struct nlmsghdr *nlh;
	struct nfgenmsg *nfmsg;
	unsigned int flags = portid ? NLM_F_MULTI : 0;
	struct nlattr *nest_parms;
	int ret;

	event = nfnl_msg_type(NFNL_SUBSYS_CTNETLINK_TIMEOUT, event);
	nlh = nlmsg_put(skb, portid, seq, event, sizeof(*nfmsg), flags);
	if (nlh == NULL)
		goto nlmsg_failure;

	nfmsg = nlmsg_data(nlh);
	nfmsg->nfgen_family = AF_UNSPEC;
	nfmsg->version = NFNETLINK_V0;
	nfmsg->res_id = 0;

	if (nla_put_be16(skb, CTA_TIMEOUT_L3PROTO, htons(l3num)) ||
	    nla_put_u8(skb, CTA_TIMEOUT_L4PROTO, l4proto->l4proto))
		goto nla_put_failure;

	nest_parms = nla_nest_start(skb, CTA_TIMEOUT_DATA);
	if (!nest_parms)
		goto nla_put_failure;

	ret = l4proto->ctnl_timeout.obj_to_nlattr(skb, timeouts);
	if (ret < 0)
		goto nla_put_failure;

	nla_nest_end(skb, nest_parms);

	nlmsg_end(skb, nlh);
	return skb->len;

nlmsg_failure:
nla_put_failure:
	nlmsg_cancel(skb, nlh);
	return -1;
}

static int cttimeout_default_get(struct net *net, struct sock *ctnl,
				 struct sk_buff *skb,
				 const struct nlmsghdr *nlh,
				 const struct nlattr * const cda[],
				 struct netlink_ext_ack *extack)
{
	const struct nf_conntrack_l4proto *l4proto;
	unsigned int *timeouts = NULL;
	struct sk_buff *skb2;
	int ret, err;
	__u16 l3num;
	__u8 l4num;

	if (!cda[CTA_TIMEOUT_L3PROTO] || !cda[CTA_TIMEOUT_L4PROTO])
		return -EINVAL;

	l3num = ntohs(nla_get_be16(cda[CTA_TIMEOUT_L3PROTO]));
	l4num = nla_get_u8(cda[CTA_TIMEOUT_L4PROTO]);
	l4proto = nf_ct_l4proto_find(l4num);

	err = -EOPNOTSUPP;
	if (l4proto->l4proto != l4num)
		goto err;

	switch (l4proto->l4proto) {
	case IPPROTO_ICMP:
		timeouts = &nf_icmp_pernet(net)->timeout;
		break;
	case IPPROTO_TCP:
		timeouts = nf_tcp_pernet(net)->timeouts;
		break;
	case IPPROTO_UDP: /* fallthrough */
	case IPPROTO_UDPLITE:
		timeouts = nf_udp_pernet(net)->timeouts;
		break;
	case IPPROTO_DCCP:
#ifdef CONFIG_NF_CT_PROTO_DCCP
		timeouts = nf_dccp_pernet(net)->dccp_timeout;
#endif
		break;
	case IPPROTO_ICMPV6:
		timeouts = &nf_icmpv6_pernet(net)->timeout;
		break;
	case IPPROTO_SCTP:
#ifdef CONFIG_NF_CT_PROTO_SCTP
		timeouts = nf_sctp_pernet(net)->timeouts;
#endif
		break;
	case IPPROTO_GRE:
#ifdef CONFIG_NF_CT_PROTO_GRE
		timeouts = nf_gre_pernet(net)->timeouts;
#endif
		break;
	case 255:
		timeouts = &nf_generic_pernet(net)->timeout;
		break;
	default:
		WARN_ONCE(1, "Missing timeouts for proto %d", l4proto->l4proto);
		break;
	}

	if (!timeouts)
		goto err;

	skb2 = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
	if (skb2 == NULL) {
		err = -ENOMEM;
		goto err;
	}

	ret = cttimeout_default_fill_info(net, skb2, NETLINK_CB(skb).portid,
					  nlh->nlmsg_seq,
					  NFNL_MSG_TYPE(nlh->nlmsg_type),
					  IPCTNL_MSG_TIMEOUT_DEFAULT_SET,
					  l3num, l4proto, timeouts);
	if (ret <= 0) {
		kfree_skb(skb2);
		err = -ENOMEM;
		goto err;
	}
	ret = netlink_unicast(ctnl, skb2, NETLINK_CB(skb).portid, MSG_DONTWAIT);
	if (ret > 0)
		ret = 0;

	/* this avoids a loop in nfnetlink. */
	return ret == -EAGAIN ? -ENOBUFS : ret;
err:
	return err;
}

static struct nf_ct_timeout *ctnl_timeout_find_get(struct net *net,
						   const char *name)
{
	struct ctnl_timeout *timeout, *matching = NULL;

	list_for_each_entry_rcu(timeout, &net->nfct_timeout_list, head) {
		if (strncmp(timeout->name, name, CTNL_TIMEOUT_NAME_MAX) != 0)
			continue;

		if (!try_module_get(THIS_MODULE))
			goto err;

		if (!refcount_inc_not_zero(&timeout->refcnt)) {
			module_put(THIS_MODULE);
			goto err;
		}
		matching = timeout;
		break;
	}
err:
	return matching ? &matching->timeout : NULL;
}

static void ctnl_timeout_put(struct nf_ct_timeout *t)
{
	struct ctnl_timeout *timeout =
		container_of(t, struct ctnl_timeout, timeout);

	if (refcount_dec_and_test(&timeout->refcnt))
		kfree_rcu(timeout, rcu_head);

	module_put(THIS_MODULE);
}

static const struct nfnl_callback cttimeout_cb[IPCTNL_MSG_TIMEOUT_MAX] = {
	[IPCTNL_MSG_TIMEOUT_NEW]	= { .call = cttimeout_new_timeout,
					    .attr_count = CTA_TIMEOUT_MAX,
					    .policy = cttimeout_nla_policy },
	[IPCTNL_MSG_TIMEOUT_GET]	= { .call = cttimeout_get_timeout,
					    .attr_count = CTA_TIMEOUT_MAX,
					    .policy = cttimeout_nla_policy },
	[IPCTNL_MSG_TIMEOUT_DELETE]	= { .call = cttimeout_del_timeout,
					    .attr_count = CTA_TIMEOUT_MAX,
					    .policy = cttimeout_nla_policy },
	[IPCTNL_MSG_TIMEOUT_DEFAULT_SET]= { .call = cttimeout_default_set,
					    .attr_count = CTA_TIMEOUT_MAX,
					    .policy = cttimeout_nla_policy },
	[IPCTNL_MSG_TIMEOUT_DEFAULT_GET]= { .call = cttimeout_default_get,
					    .attr_count = CTA_TIMEOUT_MAX,
					    .policy = cttimeout_nla_policy },
};

static const struct nfnetlink_subsystem cttimeout_subsys = {
	.name				= "conntrack_timeout",
	.subsys_id			= NFNL_SUBSYS_CTNETLINK_TIMEOUT,
	.cb_count			= IPCTNL_MSG_TIMEOUT_MAX,
	.cb				= cttimeout_cb,
};

MODULE_ALIAS_NFNL_SUBSYS(NFNL_SUBSYS_CTNETLINK_TIMEOUT);

static int __net_init cttimeout_net_init(struct net *net)
{
	INIT_LIST_HEAD(&net->nfct_timeout_list);

	return 0;
}

static void __net_exit cttimeout_net_exit(struct net *net)
{
	struct ctnl_timeout *cur, *tmp;

	nf_ct_unconfirmed_destroy(net);
	nf_ct_untimeout(net, NULL);

	list_for_each_entry_safe(cur, tmp, &net->nfct_timeout_list, head) {
		list_del_rcu(&cur->head);

		if (refcount_dec_and_test(&cur->refcnt))
			kfree_rcu(cur, rcu_head);
	}
}

static struct pernet_operations cttimeout_ops = {
	.init	= cttimeout_net_init,
	.exit	= cttimeout_net_exit,
};

static int __init cttimeout_init(void)
{
	int ret;

	ret = register_pernet_subsys(&cttimeout_ops);
	if (ret < 0)
		return ret;

	ret = nfnetlink_subsys_register(&cttimeout_subsys);
	if (ret < 0) {
		pr_err("cttimeout_init: cannot register cttimeout with "
			"nfnetlink.\n");
		goto err_out;
	}
	RCU_INIT_POINTER(nf_ct_timeout_find_get_hook, ctnl_timeout_find_get);
	RCU_INIT_POINTER(nf_ct_timeout_put_hook, ctnl_timeout_put);
	return 0;

err_out:
	unregister_pernet_subsys(&cttimeout_ops);
	return ret;
}

static void __exit cttimeout_exit(void)
{
	nfnetlink_subsys_unregister(&cttimeout_subsys);

	unregister_pernet_subsys(&cttimeout_ops);
	RCU_INIT_POINTER(nf_ct_timeout_find_get_hook, NULL);
	RCU_INIT_POINTER(nf_ct_timeout_put_hook, NULL);
	synchronize_rcu();
}

module_init(cttimeout_init);
module_exit(cttimeout_exit);
Commit	Line	Data
e97150df	1	// SPDX-License-Identifier: GPL-2.0-or-later
50978462 PNA	2	/*
	3	* (C) 2012 by Pablo Neira Ayuso <pablo@netfilter.org>
	4	* (C) 2012 by Vyatta Inc. <http://www.vyatta.com>
50978462 PNA	5	*/
	6	#include <linux/init.h>
	7	#include <linux/module.h>
	8	#include <linux/kernel.h>
	9	#include <linux/rculist.h>
	10	#include <linux/rculist_nulls.h>
	11	#include <linux/types.h>
	12	#include <linux/timer.h>
	13	#include <linux/security.h>
	14	#include <linux/skbuff.h>
	15	#include <linux/errno.h>
	16	#include <linux/netlink.h>
	17	#include <linux/spinlock.h>
	18	#include <linux/interrupt.h>
	19	#include <linux/slab.h>
	20
	21	#include <linux/netfilter.h>
	22	#include <net/netlink.h>
	23	#include <net/sock.h>
	24	#include <net/netfilter/nf_conntrack.h>
	25	#include <net/netfilter/nf_conntrack_core.h>
50978462 PNA	26	#include <net/netfilter/nf_conntrack_l4proto.h>
50978462 PNA	27	#include <net/netfilter/nf_conntrack_tuple.h>
24de58f4	28	#include <net/netfilter/nf_conntrack_timeout.h>
50978462 PNA	29
	30	#include <linux/netfilter/nfnetlink.h>
	31	#include <linux/netfilter/nfnetlink_cttimeout.h>
	32
	33	MODULE_LICENSE("GPL");
	34	MODULE_AUTHOR("Pablo Neira Ayuso <pablo@netfilter.org>");
	35	MODULE_DESCRIPTION("cttimeout: Extended Netfilter Connection Tracking timeout tuning");
	36
50978462	37	static const struct nla_policy cttimeout_nla_policy[CTA_TIMEOUT_MAX+1] = {
e93b5f9f FW	38	[CTA_TIMEOUT_NAME] = { .type = NLA_NUL_STRING,
e93b5f9f FW	39	.len = CTNL_TIMEOUT_NAME_MAX - 1},
50978462 PNA	40	[CTA_TIMEOUT_L3PROTO] = { .type = NLA_U16 },
	41	[CTA_TIMEOUT_L4PROTO] = { .type = NLA_U8 },
	42	[CTA_TIMEOUT_DATA] = { .type = NLA_NESTED },
	43	};
	44
	45	static int
c779e849	46	ctnl_timeout_parse_policy(void *timeout,
2a04aabf	47	const struct nf_conntrack_l4proto *l4proto,
91cb498e	48	struct net net, const struct nlattr attr)
50978462	49	{
8039ab43	50	struct nlattr **tb;
50978462 PNA	51	int ret = 0;
50978462 PNA	52
8039ab43 GS	53	tb = kcalloc(l4proto->ctnl_timeout.nlattr_max + 1, sizeof(*tb),
8039ab43 GS	54	GFP_KERNEL);
50978462	55
8039ab43 GS	56	if (!tb)
	57	return -ENOMEM;
	58
8cb08174 JB	59	ret = nla_parse_nested_deprecated(tb,
	60	l4proto->ctnl_timeout.nlattr_max,
	61	attr,
	62	l4proto->ctnl_timeout.nla_policy,
	63	NULL);
8039ab43 GS	64	if (ret < 0)
	65	goto err;
	66
c779e849	67	ret = l4proto->ctnl_timeout.nlattr_to_obj(tb, net, timeout);
8039ab43 GS	68
	69	err:
	70	kfree(tb);
50978462 PNA	71	return ret;
	72	}
	73
7b8002a1 PNA	74	static int cttimeout_new_timeout(struct net net, struct sock ctnl,
	75	struct sk_buff *skb,
	76	const struct nlmsghdr *nlh,
04ba724b PNA	77	const struct nlattr * const cda[],
04ba724b PNA	78	struct netlink_ext_ack *extack)
50978462 PNA	79	{
	80	__u16 l3num;
	81	__u8 l4num;
b3480fe0	82	const struct nf_conntrack_l4proto *l4proto;
50978462 PNA	83	struct ctnl_timeout timeout, matching = NULL;
	84	char *name;
	85	int ret;
	86
	87	if (!cda[CTA_TIMEOUT_NAME] \|\|
	88	!cda[CTA_TIMEOUT_L3PROTO] \|\|
	89	!cda[CTA_TIMEOUT_L4PROTO] \|\|
	90	!cda[CTA_TIMEOUT_DATA])
	91	return -EINVAL;
	92
	93	name = nla_data(cda[CTA_TIMEOUT_NAME]);
	94	l3num = ntohs(nla_get_be16(cda[CTA_TIMEOUT_L3PROTO]));
	95	l4num = nla_get_u8(cda[CTA_TIMEOUT_L4PROTO]);
	96
19576c94	97	list_for_each_entry(timeout, &net->nfct_timeout_list, head) {
50978462 PNA	98	if (strncmp(timeout->name, name, CTNL_TIMEOUT_NAME_MAX) != 0)
	99	continue;
	100
	101	if (nlh->nlmsg_flags & NLM_F_EXCL)
	102	return -EEXIST;
	103
	104	matching = timeout;
	105	break;
	106	}
	107
50978462 PNA	108	if (matching) {
	109	if (nlh->nlmsg_flags & NLM_F_REPLACE) {
	110	/* You cannot replace one timeout policy by another of
	111	* different kind, sorry.
	112	*/
6c1fd7dc PNA	113	if (matching->timeout.l3num != l3num \|\|
6c1fd7dc PNA	114	matching->timeout.l4proto->l4proto != l4num)
23aaba5a LZ	115	return -EINVAL;
23aaba5a LZ	116
6c1fd7dc PNA	117	return ctnl_timeout_parse_policy(&matching->timeout.data,
	118	matching->timeout.l4proto,
	119	net, cda[CTA_TIMEOUT_DATA]);
50978462	120	}
23aaba5a LZ	121
	122	return -EBUSY;
	123	}
	124
4a60dc74	125	l4proto = nf_ct_l4proto_find(l4num);
23aaba5a LZ	126
	127	/* This protocol is not supportted, skip. */
	128	if (l4proto->l4proto != l4num) {
	129	ret = -EOPNOTSUPP;
c1ebd7df	130	goto err_proto_put;
50978462 PNA	131	}
	132
	133	timeout = kzalloc(sizeof(struct ctnl_timeout) +
	134	l4proto->ctnl_timeout.obj_size, GFP_KERNEL);
c1ebd7df PNA	135	if (timeout == NULL) {
	136	ret = -ENOMEM;
	137	goto err_proto_put;
	138	}
50978462	139
6c1fd7dc	140	ret = ctnl_timeout_parse_policy(&timeout->timeout.data, l4proto, net,
50978462 PNA	141	cda[CTA_TIMEOUT_DATA]);
	142	if (ret < 0)
	143	goto err;
	144
	145	strcpy(timeout->name, nla_data(cda[CTA_TIMEOUT_NAME]));
6c1fd7dc PNA	146	timeout->timeout.l3num = l3num;
6c1fd7dc PNA	147	timeout->timeout.l4proto = l4proto;
b54ab92b	148	refcount_set(&timeout->refcnt, 1);
19576c94	149	list_add_tail_rcu(&timeout->head, &net->nfct_timeout_list);
50978462 PNA	150
	151	return 0;
	152	err:
	153	kfree(timeout);
c1ebd7df	154	err_proto_put:
50978462 PNA	155	return ret;
	156	}
	157
	158	static int
15e47304	159	ctnl_timeout_fill_info(struct sk_buff *skb, u32 portid, u32 seq, u32 type,
50978462 PNA	160	int event, struct ctnl_timeout *timeout)
	161	{
	162	struct nlmsghdr *nlh;
	163	struct nfgenmsg *nfmsg;
15e47304	164	unsigned int flags = portid ? NLM_F_MULTI : 0;
6c1fd7dc	165	const struct nf_conntrack_l4proto *l4proto = timeout->timeout.l4proto;
4430b897 PNA	166	struct nlattr *nest_parms;
4430b897 PNA	167	int ret;
50978462	168
dedb67c4	169	event = nfnl_msg_type(NFNL_SUBSYS_CTNETLINK_TIMEOUT, event);
15e47304	170	nlh = nlmsg_put(skb, portid, seq, event, sizeof(*nfmsg), flags);
50978462 PNA	171	if (nlh == NULL)
	172	goto nlmsg_failure;
	173
	174	nfmsg = nlmsg_data(nlh);
	175	nfmsg->nfgen_family = AF_UNSPEC;
	176	nfmsg->version = NFNETLINK_V0;
	177	nfmsg->res_id = 0;
	178
48f03bda	179	if (nla_put_string(skb, CTA_TIMEOUT_NAME, timeout->name) \|\|
6c1fd7dc PNA	180	nla_put_be16(skb, CTA_TIMEOUT_L3PROTO,
	181	htons(timeout->timeout.l3num)) \|\|
	182	nla_put_u8(skb, CTA_TIMEOUT_L4PROTO, l4proto->l4proto) \|\|
48f03bda	183	nla_put_be32(skb, CTA_TIMEOUT_USE,
b54ab92b	184	htonl(refcount_read(&timeout->refcnt))))
48f03bda	185	goto nla_put_failure;
50978462	186
ae0be8de	187	nest_parms = nla_nest_start(skb, CTA_TIMEOUT_DATA);
4430b897 PNA	188	if (!nest_parms)
4430b897 PNA	189	goto nla_put_failure;
50978462	190
4430b897 PNA	191	ret = l4proto->ctnl_timeout.obj_to_nlattr(skb, &timeout->timeout.data);
	192	if (ret < 0)
	193	goto nla_put_failure;
50978462	194
4430b897	195	nla_nest_end(skb, nest_parms);
c1ebd7df	196
50978462 PNA	197	nlmsg_end(skb, nlh);
	198	return skb->len;
	199
	200	nlmsg_failure:
	201	nla_put_failure:
	202	nlmsg_cancel(skb, nlh);
	203	return -1;
	204	}
	205
	206	static int
	207	ctnl_timeout_dump(struct sk_buff skb, struct netlink_callback cb)
	208	{
19576c94	209	struct net *net = sock_net(skb->sk);
50978462 PNA	210	struct ctnl_timeout cur, last;
	211
	212	if (cb->args[2])
	213	return 0;
	214
	215	last = (struct ctnl_timeout *)cb->args[1];
	216	if (cb->args[1])
	217	cb->args[1] = 0;
	218
	219	rcu_read_lock();
19576c94	220	list_for_each_entry_rcu(cur, &net->nfct_timeout_list, head) {
37bc4f8d PNA	221	if (last) {
	222	if (cur != last)
	223	continue;
50978462	224
37bc4f8d PNA	225	last = NULL;
37bc4f8d PNA	226	}
15e47304	227	if (ctnl_timeout_fill_info(skb, NETLINK_CB(cb->skb).portid,
50978462 PNA	228	cb->nlh->nlmsg_seq,
	229	NFNL_MSG_TYPE(cb->nlh->nlmsg_type),
	230	IPCTNL_MSG_TIMEOUT_NEW, cur) < 0) {
	231	cb->args[1] = (unsigned long)cur;
	232	break;
	233	}
	234	}
	235	if (!cb->args[1])
	236	cb->args[2] = 1;
	237	rcu_read_unlock();
	238	return skb->len;
	239	}
	240
7b8002a1 PNA	241	static int cttimeout_get_timeout(struct net net, struct sock ctnl,
	242	struct sk_buff *skb,
	243	const struct nlmsghdr *nlh,
04ba724b PNA	244	const struct nlattr * const cda[],
04ba724b PNA	245	struct netlink_ext_ack *extack)
50978462 PNA	246	{
	247	int ret = -ENOENT;
	248	char *name;
	249	struct ctnl_timeout *cur;
	250
	251	if (nlh->nlmsg_flags & NLM_F_DUMP) {
	252	struct netlink_dump_control c = {
	253	.dump = ctnl_timeout_dump,
	254	};
	255	return netlink_dump_start(ctnl, skb, nlh, &c);
	256	}
	257
	258	if (!cda[CTA_TIMEOUT_NAME])
	259	return -EINVAL;
	260	name = nla_data(cda[CTA_TIMEOUT_NAME]);
	261
19576c94	262	list_for_each_entry(cur, &net->nfct_timeout_list, head) {
50978462 PNA	263	struct sk_buff *skb2;
	264
	265	if (strncmp(cur->name, name, CTNL_TIMEOUT_NAME_MAX) != 0)
	266	continue;
	267
	268	skb2 = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
	269	if (skb2 == NULL) {
	270	ret = -ENOMEM;
	271	break;
	272	}
	273
15e47304	274	ret = ctnl_timeout_fill_info(skb2, NETLINK_CB(skb).portid,
50978462 PNA	275	nlh->nlmsg_seq,
	276	NFNL_MSG_TYPE(nlh->nlmsg_type),
	277	IPCTNL_MSG_TIMEOUT_NEW, cur);
	278	if (ret <= 0) {
	279	kfree_skb(skb2);
	280	break;
	281	}
15e47304	282	ret = netlink_unicast(ctnl, skb2, NETLINK_CB(skb).portid,
50978462 PNA	283	MSG_DONTWAIT);
	284	if (ret > 0)
	285	ret = 0;
	286
	287	/* this avoids a loop in nfnetlink. */
	288	return ret == -EAGAIN ? -ENOBUFS : ret;
	289	}
	290	return ret;
	291	}
	292
	293	/* try to delete object, fail if it is still in use. */
19576c94	294	static int ctnl_timeout_try_del(struct net net, struct ctnl_timeout timeout)
50978462 PNA	295	{
	296	int ret = 0;
	297
b75911b6 LZ	298	/* We want to avoid races with ctnl_timeout_put. So only when the
	299	* current refcnt is 1, we decrease it to 0.
	300	*/
b54ab92b	301	if (refcount_dec_if_one(&timeout->refcnt)) {
50978462 PNA	302	/* We are protected by nfnl mutex. */
50978462 PNA	303	list_del_rcu(&timeout->head);
6c1fd7dc	304	nf_ct_untimeout(net, &timeout->timeout);
50978462 PNA	305	kfree_rcu(timeout, rcu_head);
50978462 PNA	306	} else {
50978462 PNA	307	ret = -EBUSY;
	308	}
	309	return ret;
	310	}
	311
7b8002a1 PNA	312	static int cttimeout_del_timeout(struct net net, struct sock ctnl,
	313	struct sk_buff *skb,
	314	const struct nlmsghdr *nlh,
04ba724b PNA	315	const struct nlattr * const cda[],
04ba724b PNA	316	struct netlink_ext_ack *extack)
50978462	317	{
93fac10b	318	struct ctnl_timeout cur, tmp;
50978462	319	int ret = -ENOENT;
7b8002a1	320	char *name;
50978462 PNA	321
50978462 PNA	322	if (!cda[CTA_TIMEOUT_NAME]) {
93fac10b LZ	323	list_for_each_entry_safe(cur, tmp, &net->nfct_timeout_list,
93fac10b LZ	324	head)
19576c94	325	ctnl_timeout_try_del(net, cur);
50978462 PNA	326
	327	return 0;
	328	}
	329	name = nla_data(cda[CTA_TIMEOUT_NAME]);
	330
19576c94	331	list_for_each_entry(cur, &net->nfct_timeout_list, head) {
50978462 PNA	332	if (strncmp(cur->name, name, CTNL_TIMEOUT_NAME_MAX) != 0)
	333	continue;
	334
19576c94	335	ret = ctnl_timeout_try_del(net, cur);
50978462 PNA	336	if (ret < 0)
	337	return ret;
	338
	339	break;
	340	}
	341	return ret;
	342	}
	343
7b8002a1 PNA	344	static int cttimeout_default_set(struct net net, struct sock ctnl,
	345	struct sk_buff *skb,
	346	const struct nlmsghdr *nlh,
04ba724b PNA	347	const struct nlattr * const cda[],
04ba724b PNA	348	struct netlink_ext_ack *extack)
91cb498e	349	{
b3480fe0	350	const struct nf_conntrack_l4proto *l4proto;
91cb498e	351	__u8 l4num;
91cb498e PNA	352	int ret;
	353
	354	if (!cda[CTA_TIMEOUT_L3PROTO] \|\|
	355	!cda[CTA_TIMEOUT_L4PROTO] \|\|
	356	!cda[CTA_TIMEOUT_DATA])
	357	return -EINVAL;
	358
91cb498e	359	l4num = nla_get_u8(cda[CTA_TIMEOUT_L4PROTO]);
4a60dc74	360	l4proto = nf_ct_l4proto_find(l4num);
91cb498e PNA	361
	362	/* This protocol is not supported, skip. */
	363	if (l4proto->l4proto != l4num) {
	364	ret = -EOPNOTSUPP;
	365	goto err;
	366	}
	367
c779e849	368	ret = ctnl_timeout_parse_policy(NULL, l4proto, net,
91cb498e PNA	369	cda[CTA_TIMEOUT_DATA]);
	370	if (ret < 0)
	371	goto err;
	372
91cb498e PNA	373	return 0;
91cb498e PNA	374	err:
91cb498e PNA	375	return ret;
	376	}
	377
	378	static int
	379	cttimeout_default_fill_info(struct net net, struct sk_buff skb, u32 portid,
dd2934a9	380	u32 seq, u32 type, int event, u16 l3num,
8866df92 PNA	381	const struct nf_conntrack_l4proto *l4proto,
8866df92 PNA	382	const unsigned int *timeouts)
91cb498e PNA	383	{
	384	struct nlmsghdr *nlh;
	385	struct nfgenmsg *nfmsg;
	386	unsigned int flags = portid ? NLM_F_MULTI : 0;
4430b897 PNA	387	struct nlattr *nest_parms;
4430b897 PNA	388	int ret;
91cb498e	389
dedb67c4	390	event = nfnl_msg_type(NFNL_SUBSYS_CTNETLINK_TIMEOUT, event);
91cb498e PNA	391	nlh = nlmsg_put(skb, portid, seq, event, sizeof(*nfmsg), flags);
	392	if (nlh == NULL)
	393	goto nlmsg_failure;
	394
	395	nfmsg = nlmsg_data(nlh);
	396	nfmsg->nfgen_family = AF_UNSPEC;
	397	nfmsg->version = NFNETLINK_V0;
	398	nfmsg->res_id = 0;
	399
dd2934a9	400	if (nla_put_be16(skb, CTA_TIMEOUT_L3PROTO, htons(l3num)) \|\|
91cb498e PNA	401	nla_put_u8(skb, CTA_TIMEOUT_L4PROTO, l4proto->l4proto))
	402	goto nla_put_failure;
	403
ae0be8de	404	nest_parms = nla_nest_start(skb, CTA_TIMEOUT_DATA);
4430b897 PNA	405	if (!nest_parms)
4430b897 PNA	406	goto nla_put_failure;
91cb498e	407
8866df92	408	ret = l4proto->ctnl_timeout.obj_to_nlattr(skb, timeouts);
4430b897 PNA	409	if (ret < 0)
4430b897 PNA	410	goto nla_put_failure;
91cb498e	411
4430b897	412	nla_nest_end(skb, nest_parms);
91cb498e PNA	413
	414	nlmsg_end(skb, nlh);
	415	return skb->len;
	416
	417	nlmsg_failure:
	418	nla_put_failure:
	419	nlmsg_cancel(skb, nlh);
	420	return -1;
	421	}
	422
7b8002a1 PNA	423	static int cttimeout_default_get(struct net net, struct sock ctnl,
7b8002a1 PNA	424	struct sk_buff *skb,
91cb498e	425	const struct nlmsghdr *nlh,
04ba724b PNA	426	const struct nlattr * const cda[],
04ba724b PNA	427	struct netlink_ext_ack *extack)
91cb498e	428	{
b3480fe0	429	const struct nf_conntrack_l4proto *l4proto;
8866df92	430	unsigned int *timeouts = NULL;
91cb498e PNA	431	struct sk_buff *skb2;
91cb498e PNA	432	int ret, err;
b3480fe0 FW	433	__u16 l3num;
b3480fe0 FW	434	__u8 l4num;
91cb498e PNA	435
	436	if (!cda[CTA_TIMEOUT_L3PROTO] \|\| !cda[CTA_TIMEOUT_L4PROTO])
	437	return -EINVAL;
	438
	439	l3num = ntohs(nla_get_be16(cda[CTA_TIMEOUT_L3PROTO]));
	440	l4num = nla_get_u8(cda[CTA_TIMEOUT_L4PROTO]);
4a60dc74	441	l4proto = nf_ct_l4proto_find(l4num);
91cb498e	442
8866df92 PNA	443	err = -EOPNOTSUPP;
8866df92 PNA	444	if (l4proto->l4proto != l4num)
91cb498e	445	goto err;
8866df92 PNA	446
	447	switch (l4proto->l4proto) {
	448	case IPPROTO_ICMP:
	449	timeouts = &nf_icmp_pernet(net)->timeout;
	450	break;
	451	case IPPROTO_TCP:
	452	timeouts = nf_tcp_pernet(net)->timeouts;
	453	break;
89259088 FW	454	case IPPROTO_UDP: /* fallthrough */
89259088 FW	455	case IPPROTO_UDPLITE:
8866df92 PNA	456	timeouts = nf_udp_pernet(net)->timeouts;
	457	break;
	458	case IPPROTO_DCCP:
	459	#ifdef CONFIG_NF_CT_PROTO_DCCP
	460	timeouts = nf_dccp_pernet(net)->dccp_timeout;
	461	#endif
	462	break;
	463	case IPPROTO_ICMPV6:
	464	timeouts = &nf_icmpv6_pernet(net)->timeout;
	465	break;
	466	case IPPROTO_SCTP:
	467	#ifdef CONFIG_NF_CT_PROTO_SCTP
	468	timeouts = nf_sctp_pernet(net)->timeouts;
89259088 FW	469	#endif
	470	break;
	471	case IPPROTO_GRE:
	472	#ifdef CONFIG_NF_CT_PROTO_GRE
22fc4c4c	473	timeouts = nf_gre_pernet(net)->timeouts;
8866df92 PNA	474	#endif
	475	break;
	476	case 255:
	477	timeouts = &nf_generic_pernet(net)->timeout;
	478	break;
	479	default:
89259088	480	WARN_ONCE(1, "Missing timeouts for proto %d", l4proto->l4proto);
8866df92	481	break;
91cb498e PNA	482	}
91cb498e PNA	483
8866df92 PNA	484	if (!timeouts)
	485	goto err;
	486
91cb498e PNA	487	skb2 = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
	488	if (skb2 == NULL) {
	489	err = -ENOMEM;
	490	goto err;
	491	}
	492
	493	ret = cttimeout_default_fill_info(net, skb2, NETLINK_CB(skb).portid,
	494	nlh->nlmsg_seq,
	495	NFNL_MSG_TYPE(nlh->nlmsg_type),
	496	IPCTNL_MSG_TIMEOUT_DEFAULT_SET,
8866df92	497	l3num, l4proto, timeouts);
91cb498e PNA	498	if (ret <= 0) {
	499	kfree_skb(skb2);
	500	err = -ENOMEM;
	501	goto err;
	502	}
	503	ret = netlink_unicast(ctnl, skb2, NETLINK_CB(skb).portid, MSG_DONTWAIT);
	504	if (ret > 0)
	505	ret = 0;
	506
	507	/* this avoids a loop in nfnetlink. */
	508	return ret == -EAGAIN ? -ENOBUFS : ret;
	509	err:
91cb498e PNA	510	return err;
	511	}
	512
99e25d07 PNA	513	static struct nf_ct_timeout ctnl_timeout_find_get(struct net net,
99e25d07 PNA	514	const char *name)
24de58f4 PNA	515	{
	516	struct ctnl_timeout timeout, matching = NULL;
	517
19576c94	518	list_for_each_entry_rcu(timeout, &net->nfct_timeout_list, head) {
24de58f4 PNA	519	if (strncmp(timeout->name, name, CTNL_TIMEOUT_NAME_MAX) != 0)
	520	continue;
	521
	522	if (!try_module_get(THIS_MODULE))
	523	goto err;
	524
b54ab92b	525	if (!refcount_inc_not_zero(&timeout->refcnt)) {
24de58f4 PNA	526	module_put(THIS_MODULE);
	527	goto err;
	528	}
	529	matching = timeout;
	530	break;
	531	}
	532	err:
99e25d07	533	return matching ? &matching->timeout : NULL;
24de58f4 PNA	534	}
24de58f4 PNA	535
6c1fd7dc	536	static void ctnl_timeout_put(struct nf_ct_timeout *t)
24de58f4	537	{
6c1fd7dc PNA	538	struct ctnl_timeout *timeout =
	539	container_of(t, struct ctnl_timeout, timeout);
	540
b54ab92b	541	if (refcount_dec_and_test(&timeout->refcnt))
b75911b6 LZ	542	kfree_rcu(timeout, rcu_head);
b75911b6 LZ	543
24de58f4 PNA	544	module_put(THIS_MODULE);
24de58f4 PNA	545	}
24de58f4	546
50978462 PNA	547	static const struct nfnl_callback cttimeout_cb[IPCTNL_MSG_TIMEOUT_MAX] = {
	548	[IPCTNL_MSG_TIMEOUT_NEW] = { .call = cttimeout_new_timeout,
	549	.attr_count = CTA_TIMEOUT_MAX,
	550	.policy = cttimeout_nla_policy },
	551	[IPCTNL_MSG_TIMEOUT_GET] = { .call = cttimeout_get_timeout,
	552	.attr_count = CTA_TIMEOUT_MAX,
	553	.policy = cttimeout_nla_policy },
	554	[IPCTNL_MSG_TIMEOUT_DELETE] = { .call = cttimeout_del_timeout,
	555	.attr_count = CTA_TIMEOUT_MAX,
	556	.policy = cttimeout_nla_policy },
91cb498e PNA	557	[IPCTNL_MSG_TIMEOUT_DEFAULT_SET]= { .call = cttimeout_default_set,
	558	.attr_count = CTA_TIMEOUT_MAX,
	559	.policy = cttimeout_nla_policy },
	560	[IPCTNL_MSG_TIMEOUT_DEFAULT_GET]= { .call = cttimeout_default_get,
	561	.attr_count = CTA_TIMEOUT_MAX,
	562	.policy = cttimeout_nla_policy },
50978462 PNA	563	};
	564
	565	static const struct nfnetlink_subsystem cttimeout_subsys = {
	566	.name = "conntrack_timeout",
	567	.subsys_id = NFNL_SUBSYS_CTNETLINK_TIMEOUT,
	568	.cb_count = IPCTNL_MSG_TIMEOUT_MAX,
	569	.cb = cttimeout_cb,
	570	};
	571
	572	MODULE_ALIAS_NFNL_SUBSYS(NFNL_SUBSYS_CTNETLINK_TIMEOUT);
	573
19576c94 PN	574	static int __net_init cttimeout_net_init(struct net *net)
	575	{
	576	INIT_LIST_HEAD(&net->nfct_timeout_list);
	577
	578	return 0;
	579	}
	580
	581	static void __net_exit cttimeout_net_exit(struct net *net)
	582	{
	583	struct ctnl_timeout cur, tmp;
	584
84657984	585	nf_ct_unconfirmed_destroy(net);
4e665afb	586	nf_ct_untimeout(net, NULL);
19576c94 PN	587
	588	list_for_each_entry_safe(cur, tmp, &net->nfct_timeout_list, head) {
	589	list_del_rcu(&cur->head);
b75911b6	590
b54ab92b	591	if (refcount_dec_and_test(&cur->refcnt))
b75911b6	592	kfree_rcu(cur, rcu_head);
19576c94 PN	593	}
	594	}
	595
	596	static struct pernet_operations cttimeout_ops = {
	597	.init = cttimeout_net_init,
	598	.exit = cttimeout_net_exit,
	599	};
	600
50978462 PNA	601	static int __init cttimeout_init(void)
	602	{
	603	int ret;
	604
19576c94 PN	605	ret = register_pernet_subsys(&cttimeout_ops);
	606	if (ret < 0)
	607	return ret;
	608
50978462 PNA	609	ret = nfnetlink_subsys_register(&cttimeout_subsys);
	610	if (ret < 0) {
	611	pr_err("cttimeout_init: cannot register cttimeout with "
	612	"nfnetlink.\n");
	613	goto err_out;
	614	}
24de58f4 PNA	615	RCU_INIT_POINTER(nf_ct_timeout_find_get_hook, ctnl_timeout_find_get);
24de58f4 PNA	616	RCU_INIT_POINTER(nf_ct_timeout_put_hook, ctnl_timeout_put);
50978462 PNA	617	return 0;
	618
	619	err_out:
19576c94	620	unregister_pernet_subsys(&cttimeout_ops);
50978462 PNA	621	return ret;
	622	}
	623
	624	static void __exit cttimeout_exit(void)
	625	{
50978462	626	nfnetlink_subsys_unregister(&cttimeout_subsys);
ae2d708e	627
19576c94	628	unregister_pernet_subsys(&cttimeout_ops);
24de58f4 PNA	629	RCU_INIT_POINTER(nf_ct_timeout_find_get_hook, NULL);
24de58f4 PNA	630	RCU_INIT_POINTER(nf_ct_timeout_put_hook, NULL);
3b7dabf0	631	synchronize_rcu();
50978462 PNA	632	}
	633
	634	module_init(cttimeout_init);
	635	module_exit(cttimeout_exit);