net/sched: fix netdevice reference leaks in attach_default_qdiscs()
[linux-block.git] / net / rxrpc / peer_event.c
CommitLineData
2874c5fd 1// SPDX-License-Identifier: GPL-2.0-or-later
f66d7490 2/* Peer event handling, typically ICMP messages.
17926a79
DH
3 *
4 * Copyright (C) 2007 Red Hat, Inc. All Rights Reserved.
5 * Written by David Howells (dhowells@redhat.com)
17926a79
DH
6 */
7
8#include <linux/module.h>
9#include <linux/net.h>
10#include <linux/skbuff.h>
11#include <linux/errqueue.h>
12#include <linux/udp.h>
13#include <linux/in.h>
14#include <linux/in6.h>
15#include <linux/icmp.h>
16#include <net/sock.h>
17#include <net/af_rxrpc.h>
18#include <net/ip.h>
19#include "ar-internal.h"
20
f66d7490 21static void rxrpc_store_error(struct rxrpc_peer *, struct sock_exterr_skb *);
f3344303
DH
22static void rxrpc_distribute_error(struct rxrpc_peer *, int,
23 enum rxrpc_call_completion);
f66d7490 24
be6e6707
DH
25/*
26 * Find the peer associated with an ICMP packet.
27 */
28static struct rxrpc_peer *rxrpc_lookup_peer_icmp_rcu(struct rxrpc_local *local,
494337c9
DH
29 const struct sk_buff *skb,
30 struct sockaddr_rxrpc *srx)
be6e6707
DH
31{
32 struct sock_exterr_skb *serr = SKB_EXT_ERR(skb);
be6e6707
DH
33
34 _enter("");
35
494337c9
DH
36 memset(srx, 0, sizeof(*srx));
37 srx->transport_type = local->srx.transport_type;
38 srx->transport_len = local->srx.transport_len;
39 srx->transport.family = local->srx.transport.family;
be6e6707
DH
40
41 /* Can we see an ICMP4 packet on an ICMP6 listening socket? and vice
42 * versa?
43 */
494337c9 44 switch (srx->transport.family) {
be6e6707 45 case AF_INET:
46894a13
DH
46 srx->transport_len = sizeof(srx->transport.sin);
47 srx->transport.family = AF_INET;
494337c9 48 srx->transport.sin.sin_port = serr->port;
be6e6707
DH
49 switch (serr->ee.ee_origin) {
50 case SO_EE_ORIGIN_ICMP:
51 _net("Rx ICMP");
494337c9 52 memcpy(&srx->transport.sin.sin_addr,
be6e6707
DH
53 skb_network_header(skb) + serr->addr_offset,
54 sizeof(struct in_addr));
55 break;
56 case SO_EE_ORIGIN_ICMP6:
57 _net("Rx ICMP6 on v4 sock");
494337c9 58 memcpy(&srx->transport.sin.sin_addr,
be6e6707
DH
59 skb_network_header(skb) + serr->addr_offset + 12,
60 sizeof(struct in_addr));
61 break;
62 default:
494337c9 63 memcpy(&srx->transport.sin.sin_addr, &ip_hdr(skb)->saddr,
be6e6707
DH
64 sizeof(struct in_addr));
65 break;
66 }
67 break;
68
d1912747 69#ifdef CONFIG_AF_RXRPC_IPV6
75b54cb5 70 case AF_INET6:
75b54cb5
DH
71 switch (serr->ee.ee_origin) {
72 case SO_EE_ORIGIN_ICMP6:
73 _net("Rx ICMP6");
46894a13 74 srx->transport.sin6.sin6_port = serr->port;
494337c9 75 memcpy(&srx->transport.sin6.sin6_addr,
75b54cb5
DH
76 skb_network_header(skb) + serr->addr_offset,
77 sizeof(struct in6_addr));
78 break;
79 case SO_EE_ORIGIN_ICMP:
80 _net("Rx ICMP on v6 sock");
46894a13
DH
81 srx->transport_len = sizeof(srx->transport.sin);
82 srx->transport.family = AF_INET;
83 srx->transport.sin.sin_port = serr->port;
84 memcpy(&srx->transport.sin.sin_addr,
75b54cb5
DH
85 skb_network_header(skb) + serr->addr_offset,
86 sizeof(struct in_addr));
87 break;
88 default:
494337c9 89 memcpy(&srx->transport.sin6.sin6_addr,
75b54cb5
DH
90 &ipv6_hdr(skb)->saddr,
91 sizeof(struct in6_addr));
92 break;
93 }
94 break;
d1912747 95#endif
75b54cb5 96
be6e6707
DH
97 default:
98 BUG();
99 }
100
494337c9 101 return rxrpc_lookup_peer_rcu(local, srx);
be6e6707
DH
102}
103
1a70c05b
DH
104/*
105 * Handle an MTU/fragmentation problem.
106 */
107static void rxrpc_adjust_mtu(struct rxrpc_peer *peer, struct sock_exterr_skb *serr)
108{
109 u32 mtu = serr->ee.ee_info;
110
111 _net("Rx ICMP Fragmentation Needed (%d)", mtu);
112
113 /* wind down the local interface MTU */
114 if (mtu > 0 && peer->if_mtu == 65535 && mtu < peer->if_mtu) {
115 peer->if_mtu = mtu;
116 _net("I/F MTU %u", mtu);
117 }
118
119 if (mtu == 0) {
120 /* they didn't give us a size, estimate one */
121 mtu = peer->if_mtu;
122 if (mtu > 1500) {
123 mtu >>= 1;
124 if (mtu < 1500)
125 mtu = 1500;
126 } else {
127 mtu -= 100;
128 if (mtu < peer->hdrsize)
129 mtu = peer->hdrsize + 4;
130 }
131 }
132
133 if (mtu < peer->mtu) {
134 spin_lock_bh(&peer->lock);
135 peer->mtu = mtu;
136 peer->maxdata = peer->mtu - peer->hdrsize;
137 spin_unlock_bh(&peer->lock);
138 _net("Net MTU %u (maxdata %u)",
139 peer->mtu, peer->maxdata);
140 }
141}
142
17926a79 143/*
f66d7490 144 * Handle an error received on the local endpoint.
17926a79 145 */
abe89ef0 146void rxrpc_error_report(struct sock *sk)
17926a79
DH
147{
148 struct sock_exterr_skb *serr;
494337c9 149 struct sockaddr_rxrpc srx;
2ca4f6ca 150 struct rxrpc_local *local;
17926a79
DH
151 struct rxrpc_peer *peer;
152 struct sk_buff *skb;
17926a79 153
2ca4f6ca
ED
154 rcu_read_lock();
155 local = rcu_dereference_sk_user_data(sk);
156 if (unlikely(!local)) {
157 rcu_read_unlock();
f0308fb0 158 return;
2ca4f6ca 159 }
17926a79
DH
160 _enter("%p{%d}", sk, local->debug_id);
161
56d282d9
MD
162 /* Clear the outstanding error value on the socket so that it doesn't
163 * cause kernel_sendmsg() to return it later.
164 */
165 sock_error(sk);
166
364a9e93 167 skb = sock_dequeue_err_skb(sk);
17926a79 168 if (!skb) {
2ca4f6ca 169 rcu_read_unlock();
17926a79
DH
170 _leave("UDP socket errqueue empty");
171 return;
172 }
987db9f7 173 rxrpc_new_skb(skb, rxrpc_skb_received);
c247f053
WB
174 serr = SKB_EXT_ERR(skb);
175 if (!skb->len && serr->ee.ee_origin == SO_EE_ORIGIN_TIMESTAMPING) {
49ca0d8b 176 _leave("UDP empty message");
2ca4f6ca 177 rcu_read_unlock();
987db9f7 178 rxrpc_free_skb(skb, rxrpc_skb_freed);
49ca0d8b
WB
179 return;
180 }
17926a79 181
494337c9 182 peer = rxrpc_lookup_peer_icmp_rcu(local, skb, &srx);
be6e6707
DH
183 if (peer && !rxrpc_get_peer_maybe(peer))
184 peer = NULL;
185 if (!peer) {
186 rcu_read_unlock();
987db9f7 187 rxrpc_free_skb(skb, rxrpc_skb_freed);
17926a79
DH
188 _leave(" [no peer]");
189 return;
190 }
191
494337c9
DH
192 trace_rxrpc_rx_icmp(peer, &serr->ee, &srx);
193
1a70c05b
DH
194 if ((serr->ee.ee_origin == SO_EE_ORIGIN_ICMP &&
195 serr->ee.ee_type == ICMP_DEST_UNREACH &&
196 serr->ee.ee_code == ICMP_FRAG_NEEDED)) {
197 rxrpc_adjust_mtu(peer, serr);
f66d7490 198 rcu_read_unlock();
987db9f7 199 rxrpc_free_skb(skb, rxrpc_skb_freed);
f66d7490
DH
200 rxrpc_put_peer(peer);
201 _leave(" [MTU update]");
202 return;
17926a79
DH
203 }
204
f66d7490 205 rxrpc_store_error(peer, serr);
be6e6707 206 rcu_read_unlock();
987db9f7 207 rxrpc_free_skb(skb, rxrpc_skb_freed);
1890fea7 208 rxrpc_put_peer(peer);
17926a79 209
17926a79
DH
210 _leave("");
211}
212
213/*
f66d7490 214 * Map an error report to error codes on the peer record.
17926a79 215 */
f66d7490
DH
216static void rxrpc_store_error(struct rxrpc_peer *peer,
217 struct sock_exterr_skb *serr)
17926a79 218{
f3344303 219 enum rxrpc_call_completion compl = RXRPC_CALL_NETWORK_ERROR;
17926a79 220 struct sock_extended_err *ee;
c9d10c49 221 int err;
17926a79
DH
222
223 _enter("");
224
17926a79
DH
225 ee = &serr->ee;
226
17926a79
DH
227 err = ee->ee_errno;
228
229 switch (ee->ee_origin) {
230 case SO_EE_ORIGIN_ICMP:
17926a79
DH
231 switch (ee->ee_type) {
232 case ICMP_DEST_UNREACH:
233 switch (ee->ee_code) {
234 case ICMP_NET_UNREACH:
235 _net("Rx Received ICMP Network Unreachable");
17926a79
DH
236 break;
237 case ICMP_HOST_UNREACH:
238 _net("Rx Received ICMP Host Unreachable");
17926a79
DH
239 break;
240 case ICMP_PORT_UNREACH:
241 _net("Rx Received ICMP Port Unreachable");
17926a79
DH
242 break;
243 case ICMP_NET_UNKNOWN:
244 _net("Rx Received ICMP Unknown Network");
17926a79
DH
245 break;
246 case ICMP_HOST_UNKNOWN:
247 _net("Rx Received ICMP Unknown Host");
17926a79
DH
248 break;
249 default:
250 _net("Rx Received ICMP DestUnreach code=%u",
251 ee->ee_code);
252 break;
253 }
254 break;
255
256 case ICMP_TIME_EXCEEDED:
257 _net("Rx Received ICMP TTL Exceeded");
258 break;
259
260 default:
261 _proto("Rx Received ICMP error { type=%u code=%u }",
262 ee->ee_type, ee->ee_code);
263 break;
264 }
265 break;
266
f66d7490 267 case SO_EE_ORIGIN_NONE:
17926a79 268 case SO_EE_ORIGIN_LOCAL:
fe77d5fc 269 _proto("Rx Received local error { error=%d }", err);
f3344303 270 compl = RXRPC_CALL_LOCAL_ERROR;
17926a79
DH
271 break;
272
17926a79 273 case SO_EE_ORIGIN_ICMP6:
23e2db31
DH
274 if (err == EACCES)
275 err = EHOSTUNREACH;
df561f66 276 fallthrough;
17926a79 277 default:
fe77d5fc 278 _proto("Rx Received error report { orig=%u }", ee->ee_origin);
17926a79
DH
279 break;
280 }
281
f3344303 282 rxrpc_distribute_error(peer, err, compl);
f66d7490
DH
283}
284
285/*
f3344303 286 * Distribute an error that occurred on a peer.
f66d7490 287 */
f3344303
DH
288static void rxrpc_distribute_error(struct rxrpc_peer *peer, int error,
289 enum rxrpc_call_completion compl)
f66d7490 290{
f66d7490 291 struct rxrpc_call *call;
17926a79 292
f3344303 293 hlist_for_each_entry_rcu(call, &peer->error_targets, error_link) {
e34d4234 294 rxrpc_see_call(call);
5ac0d622 295 rxrpc_set_call_completion(call, compl, 0, -error);
17926a79 296 }
17926a79 297}
cf1a6474 298
ace45bec 299/*
330bdcfa 300 * Perform keep-alive pings.
ace45bec 301 */
330bdcfa
DH
302static void rxrpc_peer_keepalive_dispatch(struct rxrpc_net *rxnet,
303 struct list_head *collector,
304 time64_t base,
305 u8 cursor)
ace45bec 306{
ace45bec 307 struct rxrpc_peer *peer;
330bdcfa
DH
308 const u8 mask = ARRAY_SIZE(rxnet->peer_keepalive) - 1;
309 time64_t keepalive_at;
310 int slot;
ace45bec 311
330bdcfa 312 spin_lock_bh(&rxnet->peer_hash_lock);
ace45bec 313
330bdcfa
DH
314 while (!list_empty(collector)) {
315 peer = list_entry(collector->next,
316 struct rxrpc_peer, keepalive_link);
ace45bec 317
330bdcfa
DH
318 list_del_init(&peer->keepalive_link);
319 if (!rxrpc_get_peer_maybe(peer))
320 continue;
ace45bec 321
04d36d74
DH
322 if (__rxrpc_use_local(peer->local)) {
323 spin_unlock_bh(&rxnet->peer_hash_lock);
324
325 keepalive_at = peer->last_tx_at + RXRPC_KEEPALIVE_TIME;
326 slot = keepalive_at - base;
327 _debug("%02x peer %u t=%d {%pISp}",
328 cursor, peer->debug_id, slot, &peer->srx.transport);
329
330 if (keepalive_at <= base ||
331 keepalive_at > base + RXRPC_KEEPALIVE_TIME) {
332 rxrpc_send_keepalive(peer);
333 slot = RXRPC_KEEPALIVE_TIME;
334 }
330bdcfa 335
04d36d74
DH
336 /* A transmission to this peer occurred since last we
337 * examined it so put it into the appropriate future
338 * bucket.
339 */
340 slot += cursor;
341 slot &= mask;
342 spin_lock_bh(&rxnet->peer_hash_lock);
343 list_add_tail(&peer->keepalive_link,
344 &rxnet->peer_keepalive[slot & mask]);
345 rxrpc_unuse_local(peer->local);
ace45bec 346 }
60034d3d 347 rxrpc_put_peer_locked(peer);
ace45bec
DH
348 }
349
ace45bec 350 spin_unlock_bh(&rxnet->peer_hash_lock);
330bdcfa 351}
ace45bec 352
330bdcfa
DH
353/*
354 * Perform keep-alive pings with VERSION packets to keep any NAT alive.
355 */
356void rxrpc_peer_keepalive_worker(struct work_struct *work)
357{
358 struct rxrpc_net *rxnet =
359 container_of(work, struct rxrpc_net, peer_keepalive_work);
360 const u8 mask = ARRAY_SIZE(rxnet->peer_keepalive) - 1;
361 time64_t base, now, delay;
362 u8 cursor, stop;
363 LIST_HEAD(collector);
ace45bec 364
330bdcfa
DH
365 now = ktime_get_seconds();
366 base = rxnet->peer_keepalive_base;
367 cursor = rxnet->peer_keepalive_cursor;
368 _enter("%lld,%u", base - now, cursor);
ace45bec 369
330bdcfa
DH
370 if (!rxnet->live)
371 return;
ace45bec 372
330bdcfa
DH
373 /* Remove to a temporary list all the peers that are currently lodged
374 * in expired buckets plus all new peers.
375 *
376 * Everything in the bucket at the cursor is processed this
377 * second; the bucket at cursor + 1 goes at now + 1s and so
378 * on...
ace45bec 379 */
ace45bec 380 spin_lock_bh(&rxnet->peer_hash_lock);
330bdcfa
DH
381 list_splice_init(&rxnet->peer_keepalive_new, &collector);
382
383 stop = cursor + ARRAY_SIZE(rxnet->peer_keepalive);
384 while (base <= now && (s8)(cursor - stop) < 0) {
385 list_splice_tail_init(&rxnet->peer_keepalive[cursor & mask],
386 &collector);
387 base++;
388 cursor++;
389 }
ace45bec 390
330bdcfa
DH
391 base = now;
392 spin_unlock_bh(&rxnet->peer_hash_lock);
ace45bec 393
ace45bec
DH
394 rxnet->peer_keepalive_base = base;
395 rxnet->peer_keepalive_cursor = cursor;
330bdcfa
DH
396 rxrpc_peer_keepalive_dispatch(rxnet, &collector, base, cursor);
397 ASSERT(list_empty(&collector));
398
399 /* Schedule the timer for the next occupied timeslot. */
400 cursor = rxnet->peer_keepalive_cursor;
401 stop = cursor + RXRPC_KEEPALIVE_TIME - 1;
402 for (; (s8)(cursor - stop) < 0; cursor++) {
403 if (!list_empty(&rxnet->peer_keepalive[cursor & mask]))
404 break;
405 base++;
406 }
407
408 now = ktime_get_seconds();
409 delay = base - now;
410 if (delay < 1)
411 delay = 1;
412 delay *= HZ;
413 if (rxnet->live)
414 timer_reduce(&rxnet->peer_keepalive_timer, jiffies + delay);
415
ace45bec
DH
416 _leave("");
417}