af_key.c 78 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903
  1. /*
  2. * net/key/af_key.c An implementation of PF_KEYv2 sockets.
  3. *
  4. * This program is free software; you can redistribute it and/or
  5. * modify it under the terms of the GNU General Public License
  6. * as published by the Free Software Foundation; either version
  7. * 2 of the License, or (at your option) any later version.
  8. *
  9. * Authors: Maxim Giryaev <gem@asplinux.ru>
  10. * David S. Miller <davem@redhat.com>
  11. * Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
  12. * Kunihiro Ishiguro <kunihiro@ipinfusion.com>
  13. * Kazunori MIYAZAWA / USAGI Project <miyazawa@linux-ipv6.org>
  14. * Derek Atkins <derek@ihtfp.com>
  15. */
  16. #include <linux/config.h>
  17. #include <linux/module.h>
  18. #include <linux/kernel.h>
  19. #include <linux/socket.h>
  20. #include <linux/pfkeyv2.h>
  21. #include <linux/ipsec.h>
  22. #include <linux/skbuff.h>
  23. #include <linux/rtnetlink.h>
  24. #include <linux/in.h>
  25. #include <linux/in6.h>
  26. #include <linux/proc_fs.h>
  27. #include <linux/init.h>
  28. #include <net/xfrm.h>
  29. #include <net/sock.h>
  30. #define _X2KEY(x) ((x) == XFRM_INF ? 0 : (x))
  31. #define _KEY2X(x) ((x) == 0 ? XFRM_INF : (x))
  32. /* List of all pfkey sockets. */
  33. static HLIST_HEAD(pfkey_table);
  34. static DECLARE_WAIT_QUEUE_HEAD(pfkey_table_wait);
  35. static DEFINE_RWLOCK(pfkey_table_lock);
  36. static atomic_t pfkey_table_users = ATOMIC_INIT(0);
  37. static atomic_t pfkey_socks_nr = ATOMIC_INIT(0);
  38. struct pfkey_sock {
  39. /* struct sock must be the first member of struct pfkey_sock */
  40. struct sock sk;
  41. int registered;
  42. int promisc;
  43. };
  44. static inline struct pfkey_sock *pfkey_sk(struct sock *sk)
  45. {
  46. return (struct pfkey_sock *)sk;
  47. }
  48. static void pfkey_sock_destruct(struct sock *sk)
  49. {
  50. skb_queue_purge(&sk->sk_receive_queue);
  51. if (!sock_flag(sk, SOCK_DEAD)) {
  52. printk("Attempt to release alive pfkey socket: %p\n", sk);
  53. return;
  54. }
  55. BUG_TRAP(!atomic_read(&sk->sk_rmem_alloc));
  56. BUG_TRAP(!atomic_read(&sk->sk_wmem_alloc));
  57. atomic_dec(&pfkey_socks_nr);
  58. }
  59. static void pfkey_table_grab(void)
  60. {
  61. write_lock_bh(&pfkey_table_lock);
  62. if (atomic_read(&pfkey_table_users)) {
  63. DECLARE_WAITQUEUE(wait, current);
  64. add_wait_queue_exclusive(&pfkey_table_wait, &wait);
  65. for(;;) {
  66. set_current_state(TASK_UNINTERRUPTIBLE);
  67. if (atomic_read(&pfkey_table_users) == 0)
  68. break;
  69. write_unlock_bh(&pfkey_table_lock);
  70. schedule();
  71. write_lock_bh(&pfkey_table_lock);
  72. }
  73. __set_current_state(TASK_RUNNING);
  74. remove_wait_queue(&pfkey_table_wait, &wait);
  75. }
  76. }
  77. static __inline__ void pfkey_table_ungrab(void)
  78. {
  79. write_unlock_bh(&pfkey_table_lock);
  80. wake_up(&pfkey_table_wait);
  81. }
  82. static __inline__ void pfkey_lock_table(void)
  83. {
  84. /* read_lock() synchronizes us to pfkey_table_grab */
  85. read_lock(&pfkey_table_lock);
  86. atomic_inc(&pfkey_table_users);
  87. read_unlock(&pfkey_table_lock);
  88. }
  89. static __inline__ void pfkey_unlock_table(void)
  90. {
  91. if (atomic_dec_and_test(&pfkey_table_users))
  92. wake_up(&pfkey_table_wait);
  93. }
  94. static struct proto_ops pfkey_ops;
  95. static void pfkey_insert(struct sock *sk)
  96. {
  97. pfkey_table_grab();
  98. sk_add_node(sk, &pfkey_table);
  99. pfkey_table_ungrab();
  100. }
  101. static void pfkey_remove(struct sock *sk)
  102. {
  103. pfkey_table_grab();
  104. sk_del_node_init(sk);
  105. pfkey_table_ungrab();
  106. }
  107. static struct proto key_proto = {
  108. .name = "KEY",
  109. .owner = THIS_MODULE,
  110. .obj_size = sizeof(struct pfkey_sock),
  111. };
  112. static int pfkey_create(struct socket *sock, int protocol)
  113. {
  114. struct sock *sk;
  115. int err;
  116. if (!capable(CAP_NET_ADMIN))
  117. return -EPERM;
  118. if (sock->type != SOCK_RAW)
  119. return -ESOCKTNOSUPPORT;
  120. if (protocol != PF_KEY_V2)
  121. return -EPROTONOSUPPORT;
  122. err = -ENOMEM;
  123. sk = sk_alloc(PF_KEY, GFP_KERNEL, &key_proto, 1);
  124. if (sk == NULL)
  125. goto out;
  126. sock->ops = &pfkey_ops;
  127. sock_init_data(sock, sk);
  128. sk->sk_family = PF_KEY;
  129. sk->sk_destruct = pfkey_sock_destruct;
  130. atomic_inc(&pfkey_socks_nr);
  131. pfkey_insert(sk);
  132. return 0;
  133. out:
  134. return err;
  135. }
  136. static int pfkey_release(struct socket *sock)
  137. {
  138. struct sock *sk = sock->sk;
  139. if (!sk)
  140. return 0;
  141. pfkey_remove(sk);
  142. sock_orphan(sk);
  143. sock->sk = NULL;
  144. skb_queue_purge(&sk->sk_write_queue);
  145. sock_put(sk);
  146. return 0;
  147. }
  148. static int pfkey_broadcast_one(struct sk_buff *skb, struct sk_buff **skb2,
  149. int allocation, struct sock *sk)
  150. {
  151. int err = -ENOBUFS;
  152. sock_hold(sk);
  153. if (*skb2 == NULL) {
  154. if (atomic_read(&skb->users) != 1) {
  155. *skb2 = skb_clone(skb, allocation);
  156. } else {
  157. *skb2 = skb;
  158. atomic_inc(&skb->users);
  159. }
  160. }
  161. if (*skb2 != NULL) {
  162. if (atomic_read(&sk->sk_rmem_alloc) <= sk->sk_rcvbuf) {
  163. skb_orphan(*skb2);
  164. skb_set_owner_r(*skb2, sk);
  165. skb_queue_tail(&sk->sk_receive_queue, *skb2);
  166. sk->sk_data_ready(sk, (*skb2)->len);
  167. *skb2 = NULL;
  168. err = 0;
  169. }
  170. }
  171. sock_put(sk);
  172. return err;
  173. }
  174. /* Send SKB to all pfkey sockets matching selected criteria. */
  175. #define BROADCAST_ALL 0
  176. #define BROADCAST_ONE 1
  177. #define BROADCAST_REGISTERED 2
  178. #define BROADCAST_PROMISC_ONLY 4
  179. static int pfkey_broadcast(struct sk_buff *skb, int allocation,
  180. int broadcast_flags, struct sock *one_sk)
  181. {
  182. struct sock *sk;
  183. struct hlist_node *node;
  184. struct sk_buff *skb2 = NULL;
  185. int err = -ESRCH;
  186. /* XXX Do we need something like netlink_overrun? I think
  187. * XXX PF_KEY socket apps will not mind current behavior.
  188. */
  189. if (!skb)
  190. return -ENOMEM;
  191. pfkey_lock_table();
  192. sk_for_each(sk, node, &pfkey_table) {
  193. struct pfkey_sock *pfk = pfkey_sk(sk);
  194. int err2;
  195. /* Yes, it means that if you are meant to receive this
  196. * pfkey message you receive it twice as promiscuous
  197. * socket.
  198. */
  199. if (pfk->promisc)
  200. pfkey_broadcast_one(skb, &skb2, allocation, sk);
  201. /* the exact target will be processed later */
  202. if (sk == one_sk)
  203. continue;
  204. if (broadcast_flags != BROADCAST_ALL) {
  205. if (broadcast_flags & BROADCAST_PROMISC_ONLY)
  206. continue;
  207. if ((broadcast_flags & BROADCAST_REGISTERED) &&
  208. !pfk->registered)
  209. continue;
  210. if (broadcast_flags & BROADCAST_ONE)
  211. continue;
  212. }
  213. err2 = pfkey_broadcast_one(skb, &skb2, allocation, sk);
  214. /* Error is cleare after succecful sending to at least one
  215. * registered KM */
  216. if ((broadcast_flags & BROADCAST_REGISTERED) && err)
  217. err = err2;
  218. }
  219. pfkey_unlock_table();
  220. if (one_sk != NULL)
  221. err = pfkey_broadcast_one(skb, &skb2, allocation, one_sk);
  222. if (skb2)
  223. kfree_skb(skb2);
  224. kfree_skb(skb);
  225. return err;
  226. }
  227. static inline void pfkey_hdr_dup(struct sadb_msg *new, struct sadb_msg *orig)
  228. {
  229. *new = *orig;
  230. }
  231. static int pfkey_error(struct sadb_msg *orig, int err, struct sock *sk)
  232. {
  233. struct sk_buff *skb = alloc_skb(sizeof(struct sadb_msg) + 16, GFP_KERNEL);
  234. struct sadb_msg *hdr;
  235. if (!skb)
  236. return -ENOBUFS;
  237. /* Woe be to the platform trying to support PFKEY yet
  238. * having normal errnos outside the 1-255 range, inclusive.
  239. */
  240. err = -err;
  241. if (err == ERESTARTSYS ||
  242. err == ERESTARTNOHAND ||
  243. err == ERESTARTNOINTR)
  244. err = EINTR;
  245. if (err >= 512)
  246. err = EINVAL;
  247. if (err <= 0 || err >= 256)
  248. BUG();
  249. hdr = (struct sadb_msg *) skb_put(skb, sizeof(struct sadb_msg));
  250. pfkey_hdr_dup(hdr, orig);
  251. hdr->sadb_msg_errno = (uint8_t) err;
  252. hdr->sadb_msg_len = (sizeof(struct sadb_msg) /
  253. sizeof(uint64_t));
  254. pfkey_broadcast(skb, GFP_KERNEL, BROADCAST_ONE, sk);
  255. return 0;
  256. }
  257. static u8 sadb_ext_min_len[] = {
  258. [SADB_EXT_RESERVED] = (u8) 0,
  259. [SADB_EXT_SA] = (u8) sizeof(struct sadb_sa),
  260. [SADB_EXT_LIFETIME_CURRENT] = (u8) sizeof(struct sadb_lifetime),
  261. [SADB_EXT_LIFETIME_HARD] = (u8) sizeof(struct sadb_lifetime),
  262. [SADB_EXT_LIFETIME_SOFT] = (u8) sizeof(struct sadb_lifetime),
  263. [SADB_EXT_ADDRESS_SRC] = (u8) sizeof(struct sadb_address),
  264. [SADB_EXT_ADDRESS_DST] = (u8) sizeof(struct sadb_address),
  265. [SADB_EXT_ADDRESS_PROXY] = (u8) sizeof(struct sadb_address),
  266. [SADB_EXT_KEY_AUTH] = (u8) sizeof(struct sadb_key),
  267. [SADB_EXT_KEY_ENCRYPT] = (u8) sizeof(struct sadb_key),
  268. [SADB_EXT_IDENTITY_SRC] = (u8) sizeof(struct sadb_ident),
  269. [SADB_EXT_IDENTITY_DST] = (u8) sizeof(struct sadb_ident),
  270. [SADB_EXT_SENSITIVITY] = (u8) sizeof(struct sadb_sens),
  271. [SADB_EXT_PROPOSAL] = (u8) sizeof(struct sadb_prop),
  272. [SADB_EXT_SUPPORTED_AUTH] = (u8) sizeof(struct sadb_supported),
  273. [SADB_EXT_SUPPORTED_ENCRYPT] = (u8) sizeof(struct sadb_supported),
  274. [SADB_EXT_SPIRANGE] = (u8) sizeof(struct sadb_spirange),
  275. [SADB_X_EXT_KMPRIVATE] = (u8) sizeof(struct sadb_x_kmprivate),
  276. [SADB_X_EXT_POLICY] = (u8) sizeof(struct sadb_x_policy),
  277. [SADB_X_EXT_SA2] = (u8) sizeof(struct sadb_x_sa2),
  278. [SADB_X_EXT_NAT_T_TYPE] = (u8) sizeof(struct sadb_x_nat_t_type),
  279. [SADB_X_EXT_NAT_T_SPORT] = (u8) sizeof(struct sadb_x_nat_t_port),
  280. [SADB_X_EXT_NAT_T_DPORT] = (u8) sizeof(struct sadb_x_nat_t_port),
  281. [SADB_X_EXT_NAT_T_OA] = (u8) sizeof(struct sadb_address),
  282. };
  283. /* Verify sadb_address_{len,prefixlen} against sa_family. */
  284. static int verify_address_len(void *p)
  285. {
  286. struct sadb_address *sp = p;
  287. struct sockaddr *addr = (struct sockaddr *)(sp + 1);
  288. struct sockaddr_in *sin;
  289. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  290. struct sockaddr_in6 *sin6;
  291. #endif
  292. int len;
  293. switch (addr->sa_family) {
  294. case AF_INET:
  295. len = sizeof(*sp) + sizeof(*sin) + (sizeof(uint64_t) - 1);
  296. len /= sizeof(uint64_t);
  297. if (sp->sadb_address_len != len ||
  298. sp->sadb_address_prefixlen > 32)
  299. return -EINVAL;
  300. break;
  301. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  302. case AF_INET6:
  303. len = sizeof(*sp) + sizeof(*sin6) + (sizeof(uint64_t) - 1);
  304. len /= sizeof(uint64_t);
  305. if (sp->sadb_address_len != len ||
  306. sp->sadb_address_prefixlen > 128)
  307. return -EINVAL;
  308. break;
  309. #endif
  310. default:
  311. /* It is user using kernel to keep track of security
  312. * associations for another protocol, such as
  313. * OSPF/RSVP/RIPV2/MIP. It is user's job to verify
  314. * lengths.
  315. *
  316. * XXX Actually, association/policy database is not yet
  317. * XXX able to cope with arbitrary sockaddr families.
  318. * XXX When it can, remove this -EINVAL. -DaveM
  319. */
  320. return -EINVAL;
  321. break;
  322. };
  323. return 0;
  324. }
  325. static int present_and_same_family(struct sadb_address *src,
  326. struct sadb_address *dst)
  327. {
  328. struct sockaddr *s_addr, *d_addr;
  329. if (!src || !dst)
  330. return 0;
  331. s_addr = (struct sockaddr *)(src + 1);
  332. d_addr = (struct sockaddr *)(dst + 1);
  333. if (s_addr->sa_family != d_addr->sa_family)
  334. return 0;
  335. if (s_addr->sa_family != AF_INET
  336. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  337. && s_addr->sa_family != AF_INET6
  338. #endif
  339. )
  340. return 0;
  341. return 1;
  342. }
  343. static int parse_exthdrs(struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  344. {
  345. char *p = (char *) hdr;
  346. int len = skb->len;
  347. len -= sizeof(*hdr);
  348. p += sizeof(*hdr);
  349. while (len > 0) {
  350. struct sadb_ext *ehdr = (struct sadb_ext *) p;
  351. uint16_t ext_type;
  352. int ext_len;
  353. ext_len = ehdr->sadb_ext_len;
  354. ext_len *= sizeof(uint64_t);
  355. ext_type = ehdr->sadb_ext_type;
  356. if (ext_len < sizeof(uint64_t) ||
  357. ext_len > len ||
  358. ext_type == SADB_EXT_RESERVED)
  359. return -EINVAL;
  360. if (ext_type <= SADB_EXT_MAX) {
  361. int min = (int) sadb_ext_min_len[ext_type];
  362. if (ext_len < min)
  363. return -EINVAL;
  364. if (ext_hdrs[ext_type-1] != NULL)
  365. return -EINVAL;
  366. if (ext_type == SADB_EXT_ADDRESS_SRC ||
  367. ext_type == SADB_EXT_ADDRESS_DST ||
  368. ext_type == SADB_EXT_ADDRESS_PROXY ||
  369. ext_type == SADB_X_EXT_NAT_T_OA) {
  370. if (verify_address_len(p))
  371. return -EINVAL;
  372. }
  373. ext_hdrs[ext_type-1] = p;
  374. }
  375. p += ext_len;
  376. len -= ext_len;
  377. }
  378. return 0;
  379. }
  380. static uint16_t
  381. pfkey_satype2proto(uint8_t satype)
  382. {
  383. switch (satype) {
  384. case SADB_SATYPE_UNSPEC:
  385. return IPSEC_PROTO_ANY;
  386. case SADB_SATYPE_AH:
  387. return IPPROTO_AH;
  388. case SADB_SATYPE_ESP:
  389. return IPPROTO_ESP;
  390. case SADB_X_SATYPE_IPCOMP:
  391. return IPPROTO_COMP;
  392. break;
  393. default:
  394. return 0;
  395. }
  396. /* NOTREACHED */
  397. }
  398. static uint8_t
  399. pfkey_proto2satype(uint16_t proto)
  400. {
  401. switch (proto) {
  402. case IPPROTO_AH:
  403. return SADB_SATYPE_AH;
  404. case IPPROTO_ESP:
  405. return SADB_SATYPE_ESP;
  406. case IPPROTO_COMP:
  407. return SADB_X_SATYPE_IPCOMP;
  408. break;
  409. default:
  410. return 0;
  411. }
  412. /* NOTREACHED */
  413. }
  414. /* BTW, this scheme means that there is no way with PFKEY2 sockets to
  415. * say specifically 'just raw sockets' as we encode them as 255.
  416. */
  417. static uint8_t pfkey_proto_to_xfrm(uint8_t proto)
  418. {
  419. return (proto == IPSEC_PROTO_ANY ? 0 : proto);
  420. }
  421. static uint8_t pfkey_proto_from_xfrm(uint8_t proto)
  422. {
  423. return (proto ? proto : IPSEC_PROTO_ANY);
  424. }
  425. static int pfkey_sadb_addr2xfrm_addr(struct sadb_address *addr,
  426. xfrm_address_t *xaddr)
  427. {
  428. switch (((struct sockaddr*)(addr + 1))->sa_family) {
  429. case AF_INET:
  430. xaddr->a4 =
  431. ((struct sockaddr_in *)(addr + 1))->sin_addr.s_addr;
  432. return AF_INET;
  433. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  434. case AF_INET6:
  435. memcpy(xaddr->a6,
  436. &((struct sockaddr_in6 *)(addr + 1))->sin6_addr,
  437. sizeof(struct in6_addr));
  438. return AF_INET6;
  439. #endif
  440. default:
  441. return 0;
  442. }
  443. /* NOTREACHED */
  444. }
  445. static struct xfrm_state *pfkey_xfrm_state_lookup(struct sadb_msg *hdr, void **ext_hdrs)
  446. {
  447. struct sadb_sa *sa;
  448. struct sadb_address *addr;
  449. uint16_t proto;
  450. unsigned short family;
  451. xfrm_address_t *xaddr;
  452. sa = (struct sadb_sa *) ext_hdrs[SADB_EXT_SA-1];
  453. if (sa == NULL)
  454. return NULL;
  455. proto = pfkey_satype2proto(hdr->sadb_msg_satype);
  456. if (proto == 0)
  457. return NULL;
  458. /* sadb_address_len should be checked by caller */
  459. addr = (struct sadb_address *) ext_hdrs[SADB_EXT_ADDRESS_DST-1];
  460. if (addr == NULL)
  461. return NULL;
  462. family = ((struct sockaddr *)(addr + 1))->sa_family;
  463. switch (family) {
  464. case AF_INET:
  465. xaddr = (xfrm_address_t *)&((struct sockaddr_in *)(addr + 1))->sin_addr;
  466. break;
  467. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  468. case AF_INET6:
  469. xaddr = (xfrm_address_t *)&((struct sockaddr_in6 *)(addr + 1))->sin6_addr;
  470. break;
  471. #endif
  472. default:
  473. xaddr = NULL;
  474. }
  475. if (!xaddr)
  476. return NULL;
  477. return xfrm_state_lookup(xaddr, sa->sadb_sa_spi, proto, family);
  478. }
  479. #define PFKEY_ALIGN8(a) (1 + (((a) - 1) | (8 - 1)))
  480. static int
  481. pfkey_sockaddr_size(sa_family_t family)
  482. {
  483. switch (family) {
  484. case AF_INET:
  485. return PFKEY_ALIGN8(sizeof(struct sockaddr_in));
  486. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  487. case AF_INET6:
  488. return PFKEY_ALIGN8(sizeof(struct sockaddr_in6));
  489. #endif
  490. default:
  491. return 0;
  492. }
  493. /* NOTREACHED */
  494. }
  495. static struct sk_buff * pfkey_xfrm_state2msg(struct xfrm_state *x, int add_keys, int hsc)
  496. {
  497. struct sk_buff *skb;
  498. struct sadb_msg *hdr;
  499. struct sadb_sa *sa;
  500. struct sadb_lifetime *lifetime;
  501. struct sadb_address *addr;
  502. struct sadb_key *key;
  503. struct sadb_x_sa2 *sa2;
  504. struct sockaddr_in *sin;
  505. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  506. struct sockaddr_in6 *sin6;
  507. #endif
  508. int size;
  509. int auth_key_size = 0;
  510. int encrypt_key_size = 0;
  511. int sockaddr_size;
  512. struct xfrm_encap_tmpl *natt = NULL;
  513. /* address family check */
  514. sockaddr_size = pfkey_sockaddr_size(x->props.family);
  515. if (!sockaddr_size)
  516. return ERR_PTR(-EINVAL);
  517. /* base, SA, (lifetime (HSC),) address(SD), (address(P),)
  518. key(AE), (identity(SD),) (sensitivity)> */
  519. size = sizeof(struct sadb_msg) +sizeof(struct sadb_sa) +
  520. sizeof(struct sadb_lifetime) +
  521. ((hsc & 1) ? sizeof(struct sadb_lifetime) : 0) +
  522. ((hsc & 2) ? sizeof(struct sadb_lifetime) : 0) +
  523. sizeof(struct sadb_address)*2 +
  524. sockaddr_size*2 +
  525. sizeof(struct sadb_x_sa2);
  526. /* identity & sensitivity */
  527. if ((x->props.family == AF_INET &&
  528. x->sel.saddr.a4 != x->props.saddr.a4)
  529. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  530. || (x->props.family == AF_INET6 &&
  531. memcmp (x->sel.saddr.a6, x->props.saddr.a6, sizeof (struct in6_addr)))
  532. #endif
  533. )
  534. size += sizeof(struct sadb_address) + sockaddr_size;
  535. if (add_keys) {
  536. if (x->aalg && x->aalg->alg_key_len) {
  537. auth_key_size =
  538. PFKEY_ALIGN8((x->aalg->alg_key_len + 7) / 8);
  539. size += sizeof(struct sadb_key) + auth_key_size;
  540. }
  541. if (x->ealg && x->ealg->alg_key_len) {
  542. encrypt_key_size =
  543. PFKEY_ALIGN8((x->ealg->alg_key_len+7) / 8);
  544. size += sizeof(struct sadb_key) + encrypt_key_size;
  545. }
  546. }
  547. if (x->encap)
  548. natt = x->encap;
  549. if (natt && natt->encap_type) {
  550. size += sizeof(struct sadb_x_nat_t_type);
  551. size += sizeof(struct sadb_x_nat_t_port);
  552. size += sizeof(struct sadb_x_nat_t_port);
  553. }
  554. skb = alloc_skb(size + 16, GFP_ATOMIC);
  555. if (skb == NULL)
  556. return ERR_PTR(-ENOBUFS);
  557. /* call should fill header later */
  558. hdr = (struct sadb_msg *) skb_put(skb, sizeof(struct sadb_msg));
  559. memset(hdr, 0, size); /* XXX do we need this ? */
  560. hdr->sadb_msg_len = size / sizeof(uint64_t);
  561. /* sa */
  562. sa = (struct sadb_sa *) skb_put(skb, sizeof(struct sadb_sa));
  563. sa->sadb_sa_len = sizeof(struct sadb_sa)/sizeof(uint64_t);
  564. sa->sadb_sa_exttype = SADB_EXT_SA;
  565. sa->sadb_sa_spi = x->id.spi;
  566. sa->sadb_sa_replay = x->props.replay_window;
  567. sa->sadb_sa_state = SADB_SASTATE_DYING;
  568. if (x->km.state == XFRM_STATE_VALID && !x->km.dying)
  569. sa->sadb_sa_state = SADB_SASTATE_MATURE;
  570. else if (x->km.state == XFRM_STATE_ACQ)
  571. sa->sadb_sa_state = SADB_SASTATE_LARVAL;
  572. else if (x->km.state == XFRM_STATE_EXPIRED)
  573. sa->sadb_sa_state = SADB_SASTATE_DEAD;
  574. sa->sadb_sa_auth = 0;
  575. if (x->aalg) {
  576. struct xfrm_algo_desc *a = xfrm_aalg_get_byname(x->aalg->alg_name, 0);
  577. sa->sadb_sa_auth = a ? a->desc.sadb_alg_id : 0;
  578. }
  579. sa->sadb_sa_encrypt = 0;
  580. BUG_ON(x->ealg && x->calg);
  581. if (x->ealg) {
  582. struct xfrm_algo_desc *a = xfrm_ealg_get_byname(x->ealg->alg_name, 0);
  583. sa->sadb_sa_encrypt = a ? a->desc.sadb_alg_id : 0;
  584. }
  585. /* KAME compatible: sadb_sa_encrypt is overloaded with calg id */
  586. if (x->calg) {
  587. struct xfrm_algo_desc *a = xfrm_calg_get_byname(x->calg->alg_name, 0);
  588. sa->sadb_sa_encrypt = a ? a->desc.sadb_alg_id : 0;
  589. }
  590. sa->sadb_sa_flags = 0;
  591. if (x->props.flags & XFRM_STATE_NOECN)
  592. sa->sadb_sa_flags |= SADB_SAFLAGS_NOECN;
  593. if (x->props.flags & XFRM_STATE_DECAP_DSCP)
  594. sa->sadb_sa_flags |= SADB_SAFLAGS_DECAP_DSCP;
  595. /* hard time */
  596. if (hsc & 2) {
  597. lifetime = (struct sadb_lifetime *) skb_put(skb,
  598. sizeof(struct sadb_lifetime));
  599. lifetime->sadb_lifetime_len =
  600. sizeof(struct sadb_lifetime)/sizeof(uint64_t);
  601. lifetime->sadb_lifetime_exttype = SADB_EXT_LIFETIME_HARD;
  602. lifetime->sadb_lifetime_allocations = _X2KEY(x->lft.hard_packet_limit);
  603. lifetime->sadb_lifetime_bytes = _X2KEY(x->lft.hard_byte_limit);
  604. lifetime->sadb_lifetime_addtime = x->lft.hard_add_expires_seconds;
  605. lifetime->sadb_lifetime_usetime = x->lft.hard_use_expires_seconds;
  606. }
  607. /* soft time */
  608. if (hsc & 1) {
  609. lifetime = (struct sadb_lifetime *) skb_put(skb,
  610. sizeof(struct sadb_lifetime));
  611. lifetime->sadb_lifetime_len =
  612. sizeof(struct sadb_lifetime)/sizeof(uint64_t);
  613. lifetime->sadb_lifetime_exttype = SADB_EXT_LIFETIME_SOFT;
  614. lifetime->sadb_lifetime_allocations = _X2KEY(x->lft.soft_packet_limit);
  615. lifetime->sadb_lifetime_bytes = _X2KEY(x->lft.soft_byte_limit);
  616. lifetime->sadb_lifetime_addtime = x->lft.soft_add_expires_seconds;
  617. lifetime->sadb_lifetime_usetime = x->lft.soft_use_expires_seconds;
  618. }
  619. /* current time */
  620. lifetime = (struct sadb_lifetime *) skb_put(skb,
  621. sizeof(struct sadb_lifetime));
  622. lifetime->sadb_lifetime_len =
  623. sizeof(struct sadb_lifetime)/sizeof(uint64_t);
  624. lifetime->sadb_lifetime_exttype = SADB_EXT_LIFETIME_CURRENT;
  625. lifetime->sadb_lifetime_allocations = x->curlft.packets;
  626. lifetime->sadb_lifetime_bytes = x->curlft.bytes;
  627. lifetime->sadb_lifetime_addtime = x->curlft.add_time;
  628. lifetime->sadb_lifetime_usetime = x->curlft.use_time;
  629. /* src address */
  630. addr = (struct sadb_address*) skb_put(skb,
  631. sizeof(struct sadb_address)+sockaddr_size);
  632. addr->sadb_address_len =
  633. (sizeof(struct sadb_address)+sockaddr_size)/
  634. sizeof(uint64_t);
  635. addr->sadb_address_exttype = SADB_EXT_ADDRESS_SRC;
  636. /* "if the ports are non-zero, then the sadb_address_proto field,
  637. normally zero, MUST be filled in with the transport
  638. protocol's number." - RFC2367 */
  639. addr->sadb_address_proto = 0;
  640. addr->sadb_address_reserved = 0;
  641. if (x->props.family == AF_INET) {
  642. addr->sadb_address_prefixlen = 32;
  643. sin = (struct sockaddr_in *) (addr + 1);
  644. sin->sin_family = AF_INET;
  645. sin->sin_addr.s_addr = x->props.saddr.a4;
  646. sin->sin_port = 0;
  647. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  648. }
  649. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  650. else if (x->props.family == AF_INET6) {
  651. addr->sadb_address_prefixlen = 128;
  652. sin6 = (struct sockaddr_in6 *) (addr + 1);
  653. sin6->sin6_family = AF_INET6;
  654. sin6->sin6_port = 0;
  655. sin6->sin6_flowinfo = 0;
  656. memcpy(&sin6->sin6_addr, x->props.saddr.a6,
  657. sizeof(struct in6_addr));
  658. sin6->sin6_scope_id = 0;
  659. }
  660. #endif
  661. else
  662. BUG();
  663. /* dst address */
  664. addr = (struct sadb_address*) skb_put(skb,
  665. sizeof(struct sadb_address)+sockaddr_size);
  666. addr->sadb_address_len =
  667. (sizeof(struct sadb_address)+sockaddr_size)/
  668. sizeof(uint64_t);
  669. addr->sadb_address_exttype = SADB_EXT_ADDRESS_DST;
  670. addr->sadb_address_proto = 0;
  671. addr->sadb_address_prefixlen = 32; /* XXX */
  672. addr->sadb_address_reserved = 0;
  673. if (x->props.family == AF_INET) {
  674. sin = (struct sockaddr_in *) (addr + 1);
  675. sin->sin_family = AF_INET;
  676. sin->sin_addr.s_addr = x->id.daddr.a4;
  677. sin->sin_port = 0;
  678. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  679. if (x->sel.saddr.a4 != x->props.saddr.a4) {
  680. addr = (struct sadb_address*) skb_put(skb,
  681. sizeof(struct sadb_address)+sockaddr_size);
  682. addr->sadb_address_len =
  683. (sizeof(struct sadb_address)+sockaddr_size)/
  684. sizeof(uint64_t);
  685. addr->sadb_address_exttype = SADB_EXT_ADDRESS_PROXY;
  686. addr->sadb_address_proto =
  687. pfkey_proto_from_xfrm(x->sel.proto);
  688. addr->sadb_address_prefixlen = x->sel.prefixlen_s;
  689. addr->sadb_address_reserved = 0;
  690. sin = (struct sockaddr_in *) (addr + 1);
  691. sin->sin_family = AF_INET;
  692. sin->sin_addr.s_addr = x->sel.saddr.a4;
  693. sin->sin_port = x->sel.sport;
  694. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  695. }
  696. }
  697. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  698. else if (x->props.family == AF_INET6) {
  699. addr->sadb_address_prefixlen = 128;
  700. sin6 = (struct sockaddr_in6 *) (addr + 1);
  701. sin6->sin6_family = AF_INET6;
  702. sin6->sin6_port = 0;
  703. sin6->sin6_flowinfo = 0;
  704. memcpy(&sin6->sin6_addr, x->id.daddr.a6, sizeof(struct in6_addr));
  705. sin6->sin6_scope_id = 0;
  706. if (memcmp (x->sel.saddr.a6, x->props.saddr.a6,
  707. sizeof(struct in6_addr))) {
  708. addr = (struct sadb_address *) skb_put(skb,
  709. sizeof(struct sadb_address)+sockaddr_size);
  710. addr->sadb_address_len =
  711. (sizeof(struct sadb_address)+sockaddr_size)/
  712. sizeof(uint64_t);
  713. addr->sadb_address_exttype = SADB_EXT_ADDRESS_PROXY;
  714. addr->sadb_address_proto =
  715. pfkey_proto_from_xfrm(x->sel.proto);
  716. addr->sadb_address_prefixlen = x->sel.prefixlen_s;
  717. addr->sadb_address_reserved = 0;
  718. sin6 = (struct sockaddr_in6 *) (addr + 1);
  719. sin6->sin6_family = AF_INET6;
  720. sin6->sin6_port = x->sel.sport;
  721. sin6->sin6_flowinfo = 0;
  722. memcpy(&sin6->sin6_addr, x->sel.saddr.a6,
  723. sizeof(struct in6_addr));
  724. sin6->sin6_scope_id = 0;
  725. }
  726. }
  727. #endif
  728. else
  729. BUG();
  730. /* auth key */
  731. if (add_keys && auth_key_size) {
  732. key = (struct sadb_key *) skb_put(skb,
  733. sizeof(struct sadb_key)+auth_key_size);
  734. key->sadb_key_len = (sizeof(struct sadb_key) + auth_key_size) /
  735. sizeof(uint64_t);
  736. key->sadb_key_exttype = SADB_EXT_KEY_AUTH;
  737. key->sadb_key_bits = x->aalg->alg_key_len;
  738. key->sadb_key_reserved = 0;
  739. memcpy(key + 1, x->aalg->alg_key, (x->aalg->alg_key_len+7)/8);
  740. }
  741. /* encrypt key */
  742. if (add_keys && encrypt_key_size) {
  743. key = (struct sadb_key *) skb_put(skb,
  744. sizeof(struct sadb_key)+encrypt_key_size);
  745. key->sadb_key_len = (sizeof(struct sadb_key) +
  746. encrypt_key_size) / sizeof(uint64_t);
  747. key->sadb_key_exttype = SADB_EXT_KEY_ENCRYPT;
  748. key->sadb_key_bits = x->ealg->alg_key_len;
  749. key->sadb_key_reserved = 0;
  750. memcpy(key + 1, x->ealg->alg_key,
  751. (x->ealg->alg_key_len+7)/8);
  752. }
  753. /* sa */
  754. sa2 = (struct sadb_x_sa2 *) skb_put(skb, sizeof(struct sadb_x_sa2));
  755. sa2->sadb_x_sa2_len = sizeof(struct sadb_x_sa2)/sizeof(uint64_t);
  756. sa2->sadb_x_sa2_exttype = SADB_X_EXT_SA2;
  757. sa2->sadb_x_sa2_mode = x->props.mode + 1;
  758. sa2->sadb_x_sa2_reserved1 = 0;
  759. sa2->sadb_x_sa2_reserved2 = 0;
  760. sa2->sadb_x_sa2_sequence = 0;
  761. sa2->sadb_x_sa2_reqid = x->props.reqid;
  762. if (natt && natt->encap_type) {
  763. struct sadb_x_nat_t_type *n_type;
  764. struct sadb_x_nat_t_port *n_port;
  765. /* type */
  766. n_type = (struct sadb_x_nat_t_type*) skb_put(skb, sizeof(*n_type));
  767. n_type->sadb_x_nat_t_type_len = sizeof(*n_type)/sizeof(uint64_t);
  768. n_type->sadb_x_nat_t_type_exttype = SADB_X_EXT_NAT_T_TYPE;
  769. n_type->sadb_x_nat_t_type_type = natt->encap_type;
  770. n_type->sadb_x_nat_t_type_reserved[0] = 0;
  771. n_type->sadb_x_nat_t_type_reserved[1] = 0;
  772. n_type->sadb_x_nat_t_type_reserved[2] = 0;
  773. /* source port */
  774. n_port = (struct sadb_x_nat_t_port*) skb_put(skb, sizeof (*n_port));
  775. n_port->sadb_x_nat_t_port_len = sizeof(*n_port)/sizeof(uint64_t);
  776. n_port->sadb_x_nat_t_port_exttype = SADB_X_EXT_NAT_T_SPORT;
  777. n_port->sadb_x_nat_t_port_port = natt->encap_sport;
  778. n_port->sadb_x_nat_t_port_reserved = 0;
  779. /* dest port */
  780. n_port = (struct sadb_x_nat_t_port*) skb_put(skb, sizeof (*n_port));
  781. n_port->sadb_x_nat_t_port_len = sizeof(*n_port)/sizeof(uint64_t);
  782. n_port->sadb_x_nat_t_port_exttype = SADB_X_EXT_NAT_T_DPORT;
  783. n_port->sadb_x_nat_t_port_port = natt->encap_dport;
  784. n_port->sadb_x_nat_t_port_reserved = 0;
  785. }
  786. return skb;
  787. }
  788. static struct xfrm_state * pfkey_msg2xfrm_state(struct sadb_msg *hdr,
  789. void **ext_hdrs)
  790. {
  791. struct xfrm_state *x;
  792. struct sadb_lifetime *lifetime;
  793. struct sadb_sa *sa;
  794. struct sadb_key *key;
  795. uint16_t proto;
  796. int err;
  797. sa = (struct sadb_sa *) ext_hdrs[SADB_EXT_SA-1];
  798. if (!sa ||
  799. !present_and_same_family(ext_hdrs[SADB_EXT_ADDRESS_SRC-1],
  800. ext_hdrs[SADB_EXT_ADDRESS_DST-1]))
  801. return ERR_PTR(-EINVAL);
  802. if (hdr->sadb_msg_satype == SADB_SATYPE_ESP &&
  803. !ext_hdrs[SADB_EXT_KEY_ENCRYPT-1])
  804. return ERR_PTR(-EINVAL);
  805. if (hdr->sadb_msg_satype == SADB_SATYPE_AH &&
  806. !ext_hdrs[SADB_EXT_KEY_AUTH-1])
  807. return ERR_PTR(-EINVAL);
  808. if (!!ext_hdrs[SADB_EXT_LIFETIME_HARD-1] !=
  809. !!ext_hdrs[SADB_EXT_LIFETIME_SOFT-1])
  810. return ERR_PTR(-EINVAL);
  811. proto = pfkey_satype2proto(hdr->sadb_msg_satype);
  812. if (proto == 0)
  813. return ERR_PTR(-EINVAL);
  814. /* default error is no buffer space */
  815. err = -ENOBUFS;
  816. /* RFC2367:
  817. Only SADB_SASTATE_MATURE SAs may be submitted in an SADB_ADD message.
  818. SADB_SASTATE_LARVAL SAs are created by SADB_GETSPI and it is not
  819. sensible to add a new SA in the DYING or SADB_SASTATE_DEAD state.
  820. Therefore, the sadb_sa_state field of all submitted SAs MUST be
  821. SADB_SASTATE_MATURE and the kernel MUST return an error if this is
  822. not true.
  823. However, KAME setkey always uses SADB_SASTATE_LARVAL.
  824. Hence, we have to _ignore_ sadb_sa_state, which is also reasonable.
  825. */
  826. if (sa->sadb_sa_auth > SADB_AALG_MAX ||
  827. (hdr->sadb_msg_satype == SADB_X_SATYPE_IPCOMP &&
  828. sa->sadb_sa_encrypt > SADB_X_CALG_MAX) ||
  829. sa->sadb_sa_encrypt > SADB_EALG_MAX)
  830. return ERR_PTR(-EINVAL);
  831. key = (struct sadb_key*) ext_hdrs[SADB_EXT_KEY_AUTH-1];
  832. if (key != NULL &&
  833. sa->sadb_sa_auth != SADB_X_AALG_NULL &&
  834. ((key->sadb_key_bits+7) / 8 == 0 ||
  835. (key->sadb_key_bits+7) / 8 > key->sadb_key_len * sizeof(uint64_t)))
  836. return ERR_PTR(-EINVAL);
  837. key = ext_hdrs[SADB_EXT_KEY_ENCRYPT-1];
  838. if (key != NULL &&
  839. sa->sadb_sa_encrypt != SADB_EALG_NULL &&
  840. ((key->sadb_key_bits+7) / 8 == 0 ||
  841. (key->sadb_key_bits+7) / 8 > key->sadb_key_len * sizeof(uint64_t)))
  842. return ERR_PTR(-EINVAL);
  843. x = xfrm_state_alloc();
  844. if (x == NULL)
  845. return ERR_PTR(-ENOBUFS);
  846. x->id.proto = proto;
  847. x->id.spi = sa->sadb_sa_spi;
  848. x->props.replay_window = sa->sadb_sa_replay;
  849. if (sa->sadb_sa_flags & SADB_SAFLAGS_NOECN)
  850. x->props.flags |= XFRM_STATE_NOECN;
  851. if (sa->sadb_sa_flags & SADB_SAFLAGS_DECAP_DSCP)
  852. x->props.flags |= XFRM_STATE_DECAP_DSCP;
  853. lifetime = (struct sadb_lifetime*) ext_hdrs[SADB_EXT_LIFETIME_HARD-1];
  854. if (lifetime != NULL) {
  855. x->lft.hard_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);
  856. x->lft.hard_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);
  857. x->lft.hard_add_expires_seconds = lifetime->sadb_lifetime_addtime;
  858. x->lft.hard_use_expires_seconds = lifetime->sadb_lifetime_usetime;
  859. }
  860. lifetime = (struct sadb_lifetime*) ext_hdrs[SADB_EXT_LIFETIME_SOFT-1];
  861. if (lifetime != NULL) {
  862. x->lft.soft_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);
  863. x->lft.soft_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);
  864. x->lft.soft_add_expires_seconds = lifetime->sadb_lifetime_addtime;
  865. x->lft.soft_use_expires_seconds = lifetime->sadb_lifetime_usetime;
  866. }
  867. key = (struct sadb_key*) ext_hdrs[SADB_EXT_KEY_AUTH-1];
  868. if (sa->sadb_sa_auth) {
  869. int keysize = 0;
  870. struct xfrm_algo_desc *a = xfrm_aalg_get_byid(sa->sadb_sa_auth);
  871. if (!a) {
  872. err = -ENOSYS;
  873. goto out;
  874. }
  875. if (key)
  876. keysize = (key->sadb_key_bits + 7) / 8;
  877. x->aalg = kmalloc(sizeof(*x->aalg) + keysize, GFP_KERNEL);
  878. if (!x->aalg)
  879. goto out;
  880. strcpy(x->aalg->alg_name, a->name);
  881. x->aalg->alg_key_len = 0;
  882. if (key) {
  883. x->aalg->alg_key_len = key->sadb_key_bits;
  884. memcpy(x->aalg->alg_key, key+1, keysize);
  885. }
  886. x->props.aalgo = sa->sadb_sa_auth;
  887. /* x->algo.flags = sa->sadb_sa_flags; */
  888. }
  889. if (sa->sadb_sa_encrypt) {
  890. if (hdr->sadb_msg_satype == SADB_X_SATYPE_IPCOMP) {
  891. struct xfrm_algo_desc *a = xfrm_calg_get_byid(sa->sadb_sa_encrypt);
  892. if (!a) {
  893. err = -ENOSYS;
  894. goto out;
  895. }
  896. x->calg = kmalloc(sizeof(*x->calg), GFP_KERNEL);
  897. if (!x->calg)
  898. goto out;
  899. strcpy(x->calg->alg_name, a->name);
  900. x->props.calgo = sa->sadb_sa_encrypt;
  901. } else {
  902. int keysize = 0;
  903. struct xfrm_algo_desc *a = xfrm_ealg_get_byid(sa->sadb_sa_encrypt);
  904. if (!a) {
  905. err = -ENOSYS;
  906. goto out;
  907. }
  908. key = (struct sadb_key*) ext_hdrs[SADB_EXT_KEY_ENCRYPT-1];
  909. if (key)
  910. keysize = (key->sadb_key_bits + 7) / 8;
  911. x->ealg = kmalloc(sizeof(*x->ealg) + keysize, GFP_KERNEL);
  912. if (!x->ealg)
  913. goto out;
  914. strcpy(x->ealg->alg_name, a->name);
  915. x->ealg->alg_key_len = 0;
  916. if (key) {
  917. x->ealg->alg_key_len = key->sadb_key_bits;
  918. memcpy(x->ealg->alg_key, key+1, keysize);
  919. }
  920. x->props.ealgo = sa->sadb_sa_encrypt;
  921. }
  922. }
  923. /* x->algo.flags = sa->sadb_sa_flags; */
  924. x->props.family = pfkey_sadb_addr2xfrm_addr((struct sadb_address *) ext_hdrs[SADB_EXT_ADDRESS_SRC-1],
  925. &x->props.saddr);
  926. if (!x->props.family) {
  927. err = -EAFNOSUPPORT;
  928. goto out;
  929. }
  930. pfkey_sadb_addr2xfrm_addr((struct sadb_address *) ext_hdrs[SADB_EXT_ADDRESS_DST-1],
  931. &x->id.daddr);
  932. if (ext_hdrs[SADB_X_EXT_SA2-1]) {
  933. struct sadb_x_sa2 *sa2 = (void*)ext_hdrs[SADB_X_EXT_SA2-1];
  934. x->props.mode = sa2->sadb_x_sa2_mode;
  935. if (x->props.mode)
  936. x->props.mode--;
  937. x->props.reqid = sa2->sadb_x_sa2_reqid;
  938. }
  939. if (ext_hdrs[SADB_EXT_ADDRESS_PROXY-1]) {
  940. struct sadb_address *addr = ext_hdrs[SADB_EXT_ADDRESS_PROXY-1];
  941. /* Nobody uses this, but we try. */
  942. x->sel.family = pfkey_sadb_addr2xfrm_addr(addr, &x->sel.saddr);
  943. x->sel.prefixlen_s = addr->sadb_address_prefixlen;
  944. }
  945. if (ext_hdrs[SADB_X_EXT_NAT_T_TYPE-1]) {
  946. struct sadb_x_nat_t_type* n_type;
  947. struct xfrm_encap_tmpl *natt;
  948. x->encap = kmalloc(sizeof(*x->encap), GFP_KERNEL);
  949. if (!x->encap)
  950. goto out;
  951. natt = x->encap;
  952. n_type = ext_hdrs[SADB_X_EXT_NAT_T_TYPE-1];
  953. natt->encap_type = n_type->sadb_x_nat_t_type_type;
  954. if (ext_hdrs[SADB_X_EXT_NAT_T_SPORT-1]) {
  955. struct sadb_x_nat_t_port* n_port =
  956. ext_hdrs[SADB_X_EXT_NAT_T_SPORT-1];
  957. natt->encap_sport = n_port->sadb_x_nat_t_port_port;
  958. }
  959. if (ext_hdrs[SADB_X_EXT_NAT_T_DPORT-1]) {
  960. struct sadb_x_nat_t_port* n_port =
  961. ext_hdrs[SADB_X_EXT_NAT_T_DPORT-1];
  962. natt->encap_dport = n_port->sadb_x_nat_t_port_port;
  963. }
  964. }
  965. x->type = xfrm_get_type(proto, x->props.family);
  966. if (x->type == NULL) {
  967. err = -ENOPROTOOPT;
  968. goto out;
  969. }
  970. if (x->type->init_state(x, NULL)) {
  971. err = -EINVAL;
  972. goto out;
  973. }
  974. x->km.seq = hdr->sadb_msg_seq;
  975. x->km.state = XFRM_STATE_VALID;
  976. return x;
  977. out:
  978. x->km.state = XFRM_STATE_DEAD;
  979. xfrm_state_put(x);
  980. return ERR_PTR(err);
  981. }
  982. static int pfkey_reserved(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  983. {
  984. return -EOPNOTSUPP;
  985. }
  986. static int pfkey_getspi(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  987. {
  988. struct sk_buff *resp_skb;
  989. struct sadb_x_sa2 *sa2;
  990. struct sadb_address *saddr, *daddr;
  991. struct sadb_msg *out_hdr;
  992. struct xfrm_state *x = NULL;
  993. u8 mode;
  994. u32 reqid;
  995. u8 proto;
  996. unsigned short family;
  997. xfrm_address_t *xsaddr = NULL, *xdaddr = NULL;
  998. if (!present_and_same_family(ext_hdrs[SADB_EXT_ADDRESS_SRC-1],
  999. ext_hdrs[SADB_EXT_ADDRESS_DST-1]))
  1000. return -EINVAL;
  1001. proto = pfkey_satype2proto(hdr->sadb_msg_satype);
  1002. if (proto == 0)
  1003. return -EINVAL;
  1004. if ((sa2 = ext_hdrs[SADB_X_EXT_SA2-1]) != NULL) {
  1005. mode = sa2->sadb_x_sa2_mode - 1;
  1006. reqid = sa2->sadb_x_sa2_reqid;
  1007. } else {
  1008. mode = 0;
  1009. reqid = 0;
  1010. }
  1011. saddr = ext_hdrs[SADB_EXT_ADDRESS_SRC-1];
  1012. daddr = ext_hdrs[SADB_EXT_ADDRESS_DST-1];
  1013. family = ((struct sockaddr *)(saddr + 1))->sa_family;
  1014. switch (family) {
  1015. case AF_INET:
  1016. xdaddr = (xfrm_address_t *)&((struct sockaddr_in *)(daddr + 1))->sin_addr.s_addr;
  1017. xsaddr = (xfrm_address_t *)&((struct sockaddr_in *)(saddr + 1))->sin_addr.s_addr;
  1018. break;
  1019. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  1020. case AF_INET6:
  1021. xdaddr = (xfrm_address_t *)&((struct sockaddr_in6 *)(daddr + 1))->sin6_addr;
  1022. xsaddr = (xfrm_address_t *)&((struct sockaddr_in6 *)(saddr + 1))->sin6_addr;
  1023. break;
  1024. #endif
  1025. }
  1026. if (hdr->sadb_msg_seq) {
  1027. x = xfrm_find_acq_byseq(hdr->sadb_msg_seq);
  1028. if (x && xfrm_addr_cmp(&x->id.daddr, xdaddr, family)) {
  1029. xfrm_state_put(x);
  1030. x = NULL;
  1031. }
  1032. }
  1033. if (!x)
  1034. x = xfrm_find_acq(mode, reqid, proto, xdaddr, xsaddr, 1, family);
  1035. if (x == NULL)
  1036. return -ENOENT;
  1037. resp_skb = ERR_PTR(-ENOENT);
  1038. spin_lock_bh(&x->lock);
  1039. if (x->km.state != XFRM_STATE_DEAD) {
  1040. struct sadb_spirange *range = ext_hdrs[SADB_EXT_SPIRANGE-1];
  1041. u32 min_spi, max_spi;
  1042. if (range != NULL) {
  1043. min_spi = range->sadb_spirange_min;
  1044. max_spi = range->sadb_spirange_max;
  1045. } else {
  1046. min_spi = 0x100;
  1047. max_spi = 0x0fffffff;
  1048. }
  1049. xfrm_alloc_spi(x, htonl(min_spi), htonl(max_spi));
  1050. if (x->id.spi)
  1051. resp_skb = pfkey_xfrm_state2msg(x, 0, 3);
  1052. }
  1053. spin_unlock_bh(&x->lock);
  1054. if (IS_ERR(resp_skb)) {
  1055. xfrm_state_put(x);
  1056. return PTR_ERR(resp_skb);
  1057. }
  1058. out_hdr = (struct sadb_msg *) resp_skb->data;
  1059. out_hdr->sadb_msg_version = hdr->sadb_msg_version;
  1060. out_hdr->sadb_msg_type = SADB_GETSPI;
  1061. out_hdr->sadb_msg_satype = pfkey_proto2satype(proto);
  1062. out_hdr->sadb_msg_errno = 0;
  1063. out_hdr->sadb_msg_reserved = 0;
  1064. out_hdr->sadb_msg_seq = hdr->sadb_msg_seq;
  1065. out_hdr->sadb_msg_pid = hdr->sadb_msg_pid;
  1066. xfrm_state_put(x);
  1067. pfkey_broadcast(resp_skb, GFP_KERNEL, BROADCAST_ONE, sk);
  1068. return 0;
  1069. }
  1070. static int pfkey_acquire(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1071. {
  1072. struct xfrm_state *x;
  1073. if (hdr->sadb_msg_len != sizeof(struct sadb_msg)/8)
  1074. return -EOPNOTSUPP;
  1075. if (hdr->sadb_msg_seq == 0 || hdr->sadb_msg_errno == 0)
  1076. return 0;
  1077. x = xfrm_find_acq_byseq(hdr->sadb_msg_seq);
  1078. if (x == NULL)
  1079. return 0;
  1080. spin_lock_bh(&x->lock);
  1081. if (x->km.state == XFRM_STATE_ACQ) {
  1082. x->km.state = XFRM_STATE_ERROR;
  1083. wake_up(&km_waitq);
  1084. }
  1085. spin_unlock_bh(&x->lock);
  1086. xfrm_state_put(x);
  1087. return 0;
  1088. }
  1089. static int pfkey_add(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1090. {
  1091. struct sk_buff *out_skb;
  1092. struct sadb_msg *out_hdr;
  1093. struct xfrm_state *x;
  1094. int err;
  1095. xfrm_probe_algs();
  1096. x = pfkey_msg2xfrm_state(hdr, ext_hdrs);
  1097. if (IS_ERR(x))
  1098. return PTR_ERR(x);
  1099. if (hdr->sadb_msg_type == SADB_ADD)
  1100. err = xfrm_state_add(x);
  1101. else
  1102. err = xfrm_state_update(x);
  1103. if (err < 0) {
  1104. x->km.state = XFRM_STATE_DEAD;
  1105. xfrm_state_put(x);
  1106. return err;
  1107. }
  1108. out_skb = pfkey_xfrm_state2msg(x, 0, 3);
  1109. if (IS_ERR(out_skb))
  1110. return PTR_ERR(out_skb); /* XXX Should we return 0 here ? */
  1111. out_hdr = (struct sadb_msg *) out_skb->data;
  1112. out_hdr->sadb_msg_version = hdr->sadb_msg_version;
  1113. out_hdr->sadb_msg_type = hdr->sadb_msg_type;
  1114. out_hdr->sadb_msg_satype = pfkey_proto2satype(x->id.proto);
  1115. out_hdr->sadb_msg_errno = 0;
  1116. out_hdr->sadb_msg_reserved = 0;
  1117. out_hdr->sadb_msg_seq = hdr->sadb_msg_seq;
  1118. out_hdr->sadb_msg_pid = hdr->sadb_msg_pid;
  1119. pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ALL, sk);
  1120. return 0;
  1121. }
  1122. static int pfkey_delete(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1123. {
  1124. struct xfrm_state *x;
  1125. if (!ext_hdrs[SADB_EXT_SA-1] ||
  1126. !present_and_same_family(ext_hdrs[SADB_EXT_ADDRESS_SRC-1],
  1127. ext_hdrs[SADB_EXT_ADDRESS_DST-1]))
  1128. return -EINVAL;
  1129. x = pfkey_xfrm_state_lookup(hdr, ext_hdrs);
  1130. if (x == NULL)
  1131. return -ESRCH;
  1132. if (xfrm_state_kern(x)) {
  1133. xfrm_state_put(x);
  1134. return -EPERM;
  1135. }
  1136. xfrm_state_delete(x);
  1137. xfrm_state_put(x);
  1138. pfkey_broadcast(skb_clone(skb, GFP_KERNEL), GFP_KERNEL,
  1139. BROADCAST_ALL, sk);
  1140. return 0;
  1141. }
  1142. static int pfkey_get(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1143. {
  1144. __u8 proto;
  1145. struct sk_buff *out_skb;
  1146. struct sadb_msg *out_hdr;
  1147. struct xfrm_state *x;
  1148. if (!ext_hdrs[SADB_EXT_SA-1] ||
  1149. !present_and_same_family(ext_hdrs[SADB_EXT_ADDRESS_SRC-1],
  1150. ext_hdrs[SADB_EXT_ADDRESS_DST-1]))
  1151. return -EINVAL;
  1152. x = pfkey_xfrm_state_lookup(hdr, ext_hdrs);
  1153. if (x == NULL)
  1154. return -ESRCH;
  1155. out_skb = pfkey_xfrm_state2msg(x, 1, 3);
  1156. proto = x->id.proto;
  1157. xfrm_state_put(x);
  1158. if (IS_ERR(out_skb))
  1159. return PTR_ERR(out_skb);
  1160. out_hdr = (struct sadb_msg *) out_skb->data;
  1161. out_hdr->sadb_msg_version = hdr->sadb_msg_version;
  1162. out_hdr->sadb_msg_type = SADB_DUMP;
  1163. out_hdr->sadb_msg_satype = pfkey_proto2satype(proto);
  1164. out_hdr->sadb_msg_errno = 0;
  1165. out_hdr->sadb_msg_reserved = 0;
  1166. out_hdr->sadb_msg_seq = hdr->sadb_msg_seq;
  1167. out_hdr->sadb_msg_pid = hdr->sadb_msg_pid;
  1168. pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ONE, sk);
  1169. return 0;
  1170. }
  1171. static struct sk_buff *compose_sadb_supported(struct sadb_msg *orig, int allocation)
  1172. {
  1173. struct sk_buff *skb;
  1174. struct sadb_msg *hdr;
  1175. int len, auth_len, enc_len, i;
  1176. auth_len = xfrm_count_auth_supported();
  1177. if (auth_len) {
  1178. auth_len *= sizeof(struct sadb_alg);
  1179. auth_len += sizeof(struct sadb_supported);
  1180. }
  1181. enc_len = xfrm_count_enc_supported();
  1182. if (enc_len) {
  1183. enc_len *= sizeof(struct sadb_alg);
  1184. enc_len += sizeof(struct sadb_supported);
  1185. }
  1186. len = enc_len + auth_len + sizeof(struct sadb_msg);
  1187. skb = alloc_skb(len + 16, allocation);
  1188. if (!skb)
  1189. goto out_put_algs;
  1190. hdr = (struct sadb_msg *) skb_put(skb, sizeof(*hdr));
  1191. pfkey_hdr_dup(hdr, orig);
  1192. hdr->sadb_msg_errno = 0;
  1193. hdr->sadb_msg_len = len / sizeof(uint64_t);
  1194. if (auth_len) {
  1195. struct sadb_supported *sp;
  1196. struct sadb_alg *ap;
  1197. sp = (struct sadb_supported *) skb_put(skb, auth_len);
  1198. ap = (struct sadb_alg *) (sp + 1);
  1199. sp->sadb_supported_len = auth_len / sizeof(uint64_t);
  1200. sp->sadb_supported_exttype = SADB_EXT_SUPPORTED_AUTH;
  1201. for (i = 0; ; i++) {
  1202. struct xfrm_algo_desc *aalg = xfrm_aalg_get_byidx(i);
  1203. if (!aalg)
  1204. break;
  1205. if (aalg->available)
  1206. *ap++ = aalg->desc;
  1207. }
  1208. }
  1209. if (enc_len) {
  1210. struct sadb_supported *sp;
  1211. struct sadb_alg *ap;
  1212. sp = (struct sadb_supported *) skb_put(skb, enc_len);
  1213. ap = (struct sadb_alg *) (sp + 1);
  1214. sp->sadb_supported_len = enc_len / sizeof(uint64_t);
  1215. sp->sadb_supported_exttype = SADB_EXT_SUPPORTED_ENCRYPT;
  1216. for (i = 0; ; i++) {
  1217. struct xfrm_algo_desc *ealg = xfrm_ealg_get_byidx(i);
  1218. if (!ealg)
  1219. break;
  1220. if (ealg->available)
  1221. *ap++ = ealg->desc;
  1222. }
  1223. }
  1224. out_put_algs:
  1225. return skb;
  1226. }
  1227. static int pfkey_register(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1228. {
  1229. struct pfkey_sock *pfk = pfkey_sk(sk);
  1230. struct sk_buff *supp_skb;
  1231. if (hdr->sadb_msg_satype > SADB_SATYPE_MAX)
  1232. return -EINVAL;
  1233. if (hdr->sadb_msg_satype != SADB_SATYPE_UNSPEC) {
  1234. if (pfk->registered&(1<<hdr->sadb_msg_satype))
  1235. return -EEXIST;
  1236. pfk->registered |= (1<<hdr->sadb_msg_satype);
  1237. }
  1238. xfrm_probe_algs();
  1239. supp_skb = compose_sadb_supported(hdr, GFP_KERNEL);
  1240. if (!supp_skb) {
  1241. if (hdr->sadb_msg_satype != SADB_SATYPE_UNSPEC)
  1242. pfk->registered &= ~(1<<hdr->sadb_msg_satype);
  1243. return -ENOBUFS;
  1244. }
  1245. pfkey_broadcast(supp_skb, GFP_KERNEL, BROADCAST_REGISTERED, sk);
  1246. return 0;
  1247. }
  1248. static int pfkey_flush(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1249. {
  1250. unsigned proto;
  1251. struct sk_buff *skb_out;
  1252. struct sadb_msg *hdr_out;
  1253. proto = pfkey_satype2proto(hdr->sadb_msg_satype);
  1254. if (proto == 0)
  1255. return -EINVAL;
  1256. skb_out = alloc_skb(sizeof(struct sadb_msg) + 16, GFP_KERNEL);
  1257. if (!skb_out)
  1258. return -ENOBUFS;
  1259. xfrm_state_flush(proto);
  1260. hdr_out = (struct sadb_msg *) skb_put(skb_out, sizeof(struct sadb_msg));
  1261. pfkey_hdr_dup(hdr_out, hdr);
  1262. hdr_out->sadb_msg_errno = (uint8_t) 0;
  1263. hdr_out->sadb_msg_len = (sizeof(struct sadb_msg) / sizeof(uint64_t));
  1264. pfkey_broadcast(skb_out, GFP_KERNEL, BROADCAST_ALL, NULL);
  1265. return 0;
  1266. }
  1267. struct pfkey_dump_data
  1268. {
  1269. struct sk_buff *skb;
  1270. struct sadb_msg *hdr;
  1271. struct sock *sk;
  1272. };
  1273. static int dump_sa(struct xfrm_state *x, int count, void *ptr)
  1274. {
  1275. struct pfkey_dump_data *data = ptr;
  1276. struct sk_buff *out_skb;
  1277. struct sadb_msg *out_hdr;
  1278. out_skb = pfkey_xfrm_state2msg(x, 1, 3);
  1279. if (IS_ERR(out_skb))
  1280. return PTR_ERR(out_skb);
  1281. out_hdr = (struct sadb_msg *) out_skb->data;
  1282. out_hdr->sadb_msg_version = data->hdr->sadb_msg_version;
  1283. out_hdr->sadb_msg_type = SADB_DUMP;
  1284. out_hdr->sadb_msg_satype = pfkey_proto2satype(x->id.proto);
  1285. out_hdr->sadb_msg_errno = 0;
  1286. out_hdr->sadb_msg_reserved = 0;
  1287. out_hdr->sadb_msg_seq = count;
  1288. out_hdr->sadb_msg_pid = data->hdr->sadb_msg_pid;
  1289. pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ONE, data->sk);
  1290. return 0;
  1291. }
  1292. static int pfkey_dump(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1293. {
  1294. u8 proto;
  1295. struct pfkey_dump_data data = { .skb = skb, .hdr = hdr, .sk = sk };
  1296. proto = pfkey_satype2proto(hdr->sadb_msg_satype);
  1297. if (proto == 0)
  1298. return -EINVAL;
  1299. return xfrm_state_walk(proto, dump_sa, &data);
  1300. }
  1301. static int pfkey_promisc(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1302. {
  1303. struct pfkey_sock *pfk = pfkey_sk(sk);
  1304. int satype = hdr->sadb_msg_satype;
  1305. if (hdr->sadb_msg_len == (sizeof(*hdr) / sizeof(uint64_t))) {
  1306. /* XXX we mangle packet... */
  1307. hdr->sadb_msg_errno = 0;
  1308. if (satype != 0 && satype != 1)
  1309. return -EINVAL;
  1310. pfk->promisc = satype;
  1311. }
  1312. pfkey_broadcast(skb_clone(skb, GFP_KERNEL), GFP_KERNEL, BROADCAST_ALL, NULL);
  1313. return 0;
  1314. }
  1315. static int check_reqid(struct xfrm_policy *xp, int dir, int count, void *ptr)
  1316. {
  1317. int i;
  1318. u32 reqid = *(u32*)ptr;
  1319. for (i=0; i<xp->xfrm_nr; i++) {
  1320. if (xp->xfrm_vec[i].reqid == reqid)
  1321. return -EEXIST;
  1322. }
  1323. return 0;
  1324. }
  1325. static u32 gen_reqid(void)
  1326. {
  1327. u32 start;
  1328. static u32 reqid = IPSEC_MANUAL_REQID_MAX;
  1329. start = reqid;
  1330. do {
  1331. ++reqid;
  1332. if (reqid == 0)
  1333. reqid = IPSEC_MANUAL_REQID_MAX+1;
  1334. if (xfrm_policy_walk(check_reqid, (void*)&reqid) != -EEXIST)
  1335. return reqid;
  1336. } while (reqid != start);
  1337. return 0;
  1338. }
  1339. static int
  1340. parse_ipsecrequest(struct xfrm_policy *xp, struct sadb_x_ipsecrequest *rq)
  1341. {
  1342. struct xfrm_tmpl *t = xp->xfrm_vec + xp->xfrm_nr;
  1343. struct sockaddr_in *sin;
  1344. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  1345. struct sockaddr_in6 *sin6;
  1346. #endif
  1347. if (xp->xfrm_nr >= XFRM_MAX_DEPTH)
  1348. return -ELOOP;
  1349. if (rq->sadb_x_ipsecrequest_mode == 0)
  1350. return -EINVAL;
  1351. t->id.proto = rq->sadb_x_ipsecrequest_proto; /* XXX check proto */
  1352. t->mode = rq->sadb_x_ipsecrequest_mode-1;
  1353. if (rq->sadb_x_ipsecrequest_level == IPSEC_LEVEL_USE)
  1354. t->optional = 1;
  1355. else if (rq->sadb_x_ipsecrequest_level == IPSEC_LEVEL_UNIQUE) {
  1356. t->reqid = rq->sadb_x_ipsecrequest_reqid;
  1357. if (t->reqid > IPSEC_MANUAL_REQID_MAX)
  1358. t->reqid = 0;
  1359. if (!t->reqid && !(t->reqid = gen_reqid()))
  1360. return -ENOBUFS;
  1361. }
  1362. /* addresses present only in tunnel mode */
  1363. if (t->mode) {
  1364. switch (xp->family) {
  1365. case AF_INET:
  1366. sin = (void*)(rq+1);
  1367. if (sin->sin_family != AF_INET)
  1368. return -EINVAL;
  1369. t->saddr.a4 = sin->sin_addr.s_addr;
  1370. sin++;
  1371. if (sin->sin_family != AF_INET)
  1372. return -EINVAL;
  1373. t->id.daddr.a4 = sin->sin_addr.s_addr;
  1374. break;
  1375. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  1376. case AF_INET6:
  1377. sin6 = (void *)(rq+1);
  1378. if (sin6->sin6_family != AF_INET6)
  1379. return -EINVAL;
  1380. memcpy(t->saddr.a6, &sin6->sin6_addr, sizeof(struct in6_addr));
  1381. sin6++;
  1382. if (sin6->sin6_family != AF_INET6)
  1383. return -EINVAL;
  1384. memcpy(t->id.daddr.a6, &sin6->sin6_addr, sizeof(struct in6_addr));
  1385. break;
  1386. #endif
  1387. default:
  1388. return -EINVAL;
  1389. }
  1390. }
  1391. /* No way to set this via kame pfkey */
  1392. t->aalgos = t->ealgos = t->calgos = ~0;
  1393. xp->xfrm_nr++;
  1394. return 0;
  1395. }
  1396. static int
  1397. parse_ipsecrequests(struct xfrm_policy *xp, struct sadb_x_policy *pol)
  1398. {
  1399. int err;
  1400. int len = pol->sadb_x_policy_len*8 - sizeof(struct sadb_x_policy);
  1401. struct sadb_x_ipsecrequest *rq = (void*)(pol+1);
  1402. while (len >= sizeof(struct sadb_x_ipsecrequest)) {
  1403. if ((err = parse_ipsecrequest(xp, rq)) < 0)
  1404. return err;
  1405. len -= rq->sadb_x_ipsecrequest_len;
  1406. rq = (void*)((u8*)rq + rq->sadb_x_ipsecrequest_len);
  1407. }
  1408. return 0;
  1409. }
  1410. static int pfkey_xfrm_policy2msg_size(struct xfrm_policy *xp)
  1411. {
  1412. int sockaddr_size = pfkey_sockaddr_size(xp->family);
  1413. int socklen = (xp->family == AF_INET ?
  1414. sizeof(struct sockaddr_in) :
  1415. sizeof(struct sockaddr_in6));
  1416. return sizeof(struct sadb_msg) +
  1417. (sizeof(struct sadb_lifetime) * 3) +
  1418. (sizeof(struct sadb_address) * 2) +
  1419. (sockaddr_size * 2) +
  1420. sizeof(struct sadb_x_policy) +
  1421. (xp->xfrm_nr * (sizeof(struct sadb_x_ipsecrequest) +
  1422. (socklen * 2)));
  1423. }
  1424. static struct sk_buff * pfkey_xfrm_policy2msg_prep(struct xfrm_policy *xp)
  1425. {
  1426. struct sk_buff *skb;
  1427. int size;
  1428. size = pfkey_xfrm_policy2msg_size(xp);
  1429. skb = alloc_skb(size + 16, GFP_ATOMIC);
  1430. if (skb == NULL)
  1431. return ERR_PTR(-ENOBUFS);
  1432. return skb;
  1433. }
  1434. static void pfkey_xfrm_policy2msg(struct sk_buff *skb, struct xfrm_policy *xp, int dir)
  1435. {
  1436. struct sadb_msg *hdr;
  1437. struct sadb_address *addr;
  1438. struct sadb_lifetime *lifetime;
  1439. struct sadb_x_policy *pol;
  1440. struct sockaddr_in *sin;
  1441. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  1442. struct sockaddr_in6 *sin6;
  1443. #endif
  1444. int i;
  1445. int size;
  1446. int sockaddr_size = pfkey_sockaddr_size(xp->family);
  1447. int socklen = (xp->family == AF_INET ?
  1448. sizeof(struct sockaddr_in) :
  1449. sizeof(struct sockaddr_in6));
  1450. size = pfkey_xfrm_policy2msg_size(xp);
  1451. /* call should fill header later */
  1452. hdr = (struct sadb_msg *) skb_put(skb, sizeof(struct sadb_msg));
  1453. memset(hdr, 0, size); /* XXX do we need this ? */
  1454. /* src address */
  1455. addr = (struct sadb_address*) skb_put(skb,
  1456. sizeof(struct sadb_address)+sockaddr_size);
  1457. addr->sadb_address_len =
  1458. (sizeof(struct sadb_address)+sockaddr_size)/
  1459. sizeof(uint64_t);
  1460. addr->sadb_address_exttype = SADB_EXT_ADDRESS_SRC;
  1461. addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto);
  1462. addr->sadb_address_prefixlen = xp->selector.prefixlen_s;
  1463. addr->sadb_address_reserved = 0;
  1464. /* src address */
  1465. if (xp->family == AF_INET) {
  1466. sin = (struct sockaddr_in *) (addr + 1);
  1467. sin->sin_family = AF_INET;
  1468. sin->sin_addr.s_addr = xp->selector.saddr.a4;
  1469. sin->sin_port = xp->selector.sport;
  1470. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  1471. }
  1472. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  1473. else if (xp->family == AF_INET6) {
  1474. sin6 = (struct sockaddr_in6 *) (addr + 1);
  1475. sin6->sin6_family = AF_INET6;
  1476. sin6->sin6_port = xp->selector.sport;
  1477. sin6->sin6_flowinfo = 0;
  1478. memcpy(&sin6->sin6_addr, xp->selector.saddr.a6,
  1479. sizeof(struct in6_addr));
  1480. sin6->sin6_scope_id = 0;
  1481. }
  1482. #endif
  1483. else
  1484. BUG();
  1485. /* dst address */
  1486. addr = (struct sadb_address*) skb_put(skb,
  1487. sizeof(struct sadb_address)+sockaddr_size);
  1488. addr->sadb_address_len =
  1489. (sizeof(struct sadb_address)+sockaddr_size)/
  1490. sizeof(uint64_t);
  1491. addr->sadb_address_exttype = SADB_EXT_ADDRESS_DST;
  1492. addr->sadb_address_proto = pfkey_proto_from_xfrm(xp->selector.proto);
  1493. addr->sadb_address_prefixlen = xp->selector.prefixlen_d;
  1494. addr->sadb_address_reserved = 0;
  1495. if (xp->family == AF_INET) {
  1496. sin = (struct sockaddr_in *) (addr + 1);
  1497. sin->sin_family = AF_INET;
  1498. sin->sin_addr.s_addr = xp->selector.daddr.a4;
  1499. sin->sin_port = xp->selector.dport;
  1500. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  1501. }
  1502. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  1503. else if (xp->family == AF_INET6) {
  1504. sin6 = (struct sockaddr_in6 *) (addr + 1);
  1505. sin6->sin6_family = AF_INET6;
  1506. sin6->sin6_port = xp->selector.dport;
  1507. sin6->sin6_flowinfo = 0;
  1508. memcpy(&sin6->sin6_addr, xp->selector.daddr.a6,
  1509. sizeof(struct in6_addr));
  1510. sin6->sin6_scope_id = 0;
  1511. }
  1512. #endif
  1513. else
  1514. BUG();
  1515. /* hard time */
  1516. lifetime = (struct sadb_lifetime *) skb_put(skb,
  1517. sizeof(struct sadb_lifetime));
  1518. lifetime->sadb_lifetime_len =
  1519. sizeof(struct sadb_lifetime)/sizeof(uint64_t);
  1520. lifetime->sadb_lifetime_exttype = SADB_EXT_LIFETIME_HARD;
  1521. lifetime->sadb_lifetime_allocations = _X2KEY(xp->lft.hard_packet_limit);
  1522. lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.hard_byte_limit);
  1523. lifetime->sadb_lifetime_addtime = xp->lft.hard_add_expires_seconds;
  1524. lifetime->sadb_lifetime_usetime = xp->lft.hard_use_expires_seconds;
  1525. /* soft time */
  1526. lifetime = (struct sadb_lifetime *) skb_put(skb,
  1527. sizeof(struct sadb_lifetime));
  1528. lifetime->sadb_lifetime_len =
  1529. sizeof(struct sadb_lifetime)/sizeof(uint64_t);
  1530. lifetime->sadb_lifetime_exttype = SADB_EXT_LIFETIME_SOFT;
  1531. lifetime->sadb_lifetime_allocations = _X2KEY(xp->lft.soft_packet_limit);
  1532. lifetime->sadb_lifetime_bytes = _X2KEY(xp->lft.soft_byte_limit);
  1533. lifetime->sadb_lifetime_addtime = xp->lft.soft_add_expires_seconds;
  1534. lifetime->sadb_lifetime_usetime = xp->lft.soft_use_expires_seconds;
  1535. /* current time */
  1536. lifetime = (struct sadb_lifetime *) skb_put(skb,
  1537. sizeof(struct sadb_lifetime));
  1538. lifetime->sadb_lifetime_len =
  1539. sizeof(struct sadb_lifetime)/sizeof(uint64_t);
  1540. lifetime->sadb_lifetime_exttype = SADB_EXT_LIFETIME_CURRENT;
  1541. lifetime->sadb_lifetime_allocations = xp->curlft.packets;
  1542. lifetime->sadb_lifetime_bytes = xp->curlft.bytes;
  1543. lifetime->sadb_lifetime_addtime = xp->curlft.add_time;
  1544. lifetime->sadb_lifetime_usetime = xp->curlft.use_time;
  1545. pol = (struct sadb_x_policy *) skb_put(skb, sizeof(struct sadb_x_policy));
  1546. pol->sadb_x_policy_len = sizeof(struct sadb_x_policy)/sizeof(uint64_t);
  1547. pol->sadb_x_policy_exttype = SADB_X_EXT_POLICY;
  1548. pol->sadb_x_policy_type = IPSEC_POLICY_DISCARD;
  1549. if (xp->action == XFRM_POLICY_ALLOW) {
  1550. if (xp->xfrm_nr)
  1551. pol->sadb_x_policy_type = IPSEC_POLICY_IPSEC;
  1552. else
  1553. pol->sadb_x_policy_type = IPSEC_POLICY_NONE;
  1554. }
  1555. pol->sadb_x_policy_dir = dir+1;
  1556. pol->sadb_x_policy_id = xp->index;
  1557. pol->sadb_x_policy_priority = xp->priority;
  1558. for (i=0; i<xp->xfrm_nr; i++) {
  1559. struct sadb_x_ipsecrequest *rq;
  1560. struct xfrm_tmpl *t = xp->xfrm_vec + i;
  1561. int req_size;
  1562. req_size = sizeof(struct sadb_x_ipsecrequest);
  1563. if (t->mode)
  1564. req_size += 2*socklen;
  1565. else
  1566. size -= 2*socklen;
  1567. rq = (void*)skb_put(skb, req_size);
  1568. pol->sadb_x_policy_len += req_size/8;
  1569. memset(rq, 0, sizeof(*rq));
  1570. rq->sadb_x_ipsecrequest_len = req_size;
  1571. rq->sadb_x_ipsecrequest_proto = t->id.proto;
  1572. rq->sadb_x_ipsecrequest_mode = t->mode+1;
  1573. rq->sadb_x_ipsecrequest_level = IPSEC_LEVEL_REQUIRE;
  1574. if (t->reqid)
  1575. rq->sadb_x_ipsecrequest_level = IPSEC_LEVEL_UNIQUE;
  1576. if (t->optional)
  1577. rq->sadb_x_ipsecrequest_level = IPSEC_LEVEL_USE;
  1578. rq->sadb_x_ipsecrequest_reqid = t->reqid;
  1579. if (t->mode) {
  1580. switch (xp->family) {
  1581. case AF_INET:
  1582. sin = (void*)(rq+1);
  1583. sin->sin_family = AF_INET;
  1584. sin->sin_addr.s_addr = t->saddr.a4;
  1585. sin->sin_port = 0;
  1586. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  1587. sin++;
  1588. sin->sin_family = AF_INET;
  1589. sin->sin_addr.s_addr = t->id.daddr.a4;
  1590. sin->sin_port = 0;
  1591. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  1592. break;
  1593. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  1594. case AF_INET6:
  1595. sin6 = (void*)(rq+1);
  1596. sin6->sin6_family = AF_INET6;
  1597. sin6->sin6_port = 0;
  1598. sin6->sin6_flowinfo = 0;
  1599. memcpy(&sin6->sin6_addr, t->saddr.a6,
  1600. sizeof(struct in6_addr));
  1601. sin6->sin6_scope_id = 0;
  1602. sin6++;
  1603. sin6->sin6_family = AF_INET6;
  1604. sin6->sin6_port = 0;
  1605. sin6->sin6_flowinfo = 0;
  1606. memcpy(&sin6->sin6_addr, t->id.daddr.a6,
  1607. sizeof(struct in6_addr));
  1608. sin6->sin6_scope_id = 0;
  1609. break;
  1610. #endif
  1611. default:
  1612. break;
  1613. }
  1614. }
  1615. }
  1616. hdr->sadb_msg_len = size / sizeof(uint64_t);
  1617. hdr->sadb_msg_reserved = atomic_read(&xp->refcnt);
  1618. }
  1619. static int pfkey_spdadd(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1620. {
  1621. int err;
  1622. struct sadb_lifetime *lifetime;
  1623. struct sadb_address *sa;
  1624. struct sadb_x_policy *pol;
  1625. struct xfrm_policy *xp;
  1626. struct sk_buff *out_skb;
  1627. struct sadb_msg *out_hdr;
  1628. if (!present_and_same_family(ext_hdrs[SADB_EXT_ADDRESS_SRC-1],
  1629. ext_hdrs[SADB_EXT_ADDRESS_DST-1]) ||
  1630. !ext_hdrs[SADB_X_EXT_POLICY-1])
  1631. return -EINVAL;
  1632. pol = ext_hdrs[SADB_X_EXT_POLICY-1];
  1633. if (pol->sadb_x_policy_type > IPSEC_POLICY_IPSEC)
  1634. return -EINVAL;
  1635. if (!pol->sadb_x_policy_dir || pol->sadb_x_policy_dir >= IPSEC_DIR_MAX)
  1636. return -EINVAL;
  1637. xp = xfrm_policy_alloc(GFP_KERNEL);
  1638. if (xp == NULL)
  1639. return -ENOBUFS;
  1640. xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?
  1641. XFRM_POLICY_BLOCK : XFRM_POLICY_ALLOW);
  1642. xp->priority = pol->sadb_x_policy_priority;
  1643. sa = ext_hdrs[SADB_EXT_ADDRESS_SRC-1],
  1644. xp->family = pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.saddr);
  1645. if (!xp->family) {
  1646. err = -EINVAL;
  1647. goto out;
  1648. }
  1649. xp->selector.family = xp->family;
  1650. xp->selector.prefixlen_s = sa->sadb_address_prefixlen;
  1651. xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);
  1652. xp->selector.sport = ((struct sockaddr_in *)(sa+1))->sin_port;
  1653. if (xp->selector.sport)
  1654. xp->selector.sport_mask = ~0;
  1655. sa = ext_hdrs[SADB_EXT_ADDRESS_DST-1],
  1656. pfkey_sadb_addr2xfrm_addr(sa, &xp->selector.daddr);
  1657. xp->selector.prefixlen_d = sa->sadb_address_prefixlen;
  1658. /* Amusing, we set this twice. KAME apps appear to set same value
  1659. * in both addresses.
  1660. */
  1661. xp->selector.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);
  1662. xp->selector.dport = ((struct sockaddr_in *)(sa+1))->sin_port;
  1663. if (xp->selector.dport)
  1664. xp->selector.dport_mask = ~0;
  1665. xp->lft.soft_byte_limit = XFRM_INF;
  1666. xp->lft.hard_byte_limit = XFRM_INF;
  1667. xp->lft.soft_packet_limit = XFRM_INF;
  1668. xp->lft.hard_packet_limit = XFRM_INF;
  1669. if ((lifetime = ext_hdrs[SADB_EXT_LIFETIME_HARD-1]) != NULL) {
  1670. xp->lft.hard_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);
  1671. xp->lft.hard_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);
  1672. xp->lft.hard_add_expires_seconds = lifetime->sadb_lifetime_addtime;
  1673. xp->lft.hard_use_expires_seconds = lifetime->sadb_lifetime_usetime;
  1674. }
  1675. if ((lifetime = ext_hdrs[SADB_EXT_LIFETIME_SOFT-1]) != NULL) {
  1676. xp->lft.soft_packet_limit = _KEY2X(lifetime->sadb_lifetime_allocations);
  1677. xp->lft.soft_byte_limit = _KEY2X(lifetime->sadb_lifetime_bytes);
  1678. xp->lft.soft_add_expires_seconds = lifetime->sadb_lifetime_addtime;
  1679. xp->lft.soft_use_expires_seconds = lifetime->sadb_lifetime_usetime;
  1680. }
  1681. xp->xfrm_nr = 0;
  1682. if (pol->sadb_x_policy_type == IPSEC_POLICY_IPSEC &&
  1683. (err = parse_ipsecrequests(xp, pol)) < 0)
  1684. goto out;
  1685. out_skb = pfkey_xfrm_policy2msg_prep(xp);
  1686. if (IS_ERR(out_skb)) {
  1687. err = PTR_ERR(out_skb);
  1688. goto out;
  1689. }
  1690. err = xfrm_policy_insert(pol->sadb_x_policy_dir-1, xp,
  1691. hdr->sadb_msg_type != SADB_X_SPDUPDATE);
  1692. if (err) {
  1693. kfree_skb(out_skb);
  1694. goto out;
  1695. }
  1696. pfkey_xfrm_policy2msg(out_skb, xp, pol->sadb_x_policy_dir-1);
  1697. xfrm_pol_put(xp);
  1698. out_hdr = (struct sadb_msg *) out_skb->data;
  1699. out_hdr->sadb_msg_version = hdr->sadb_msg_version;
  1700. out_hdr->sadb_msg_type = hdr->sadb_msg_type;
  1701. out_hdr->sadb_msg_satype = 0;
  1702. out_hdr->sadb_msg_errno = 0;
  1703. out_hdr->sadb_msg_seq = hdr->sadb_msg_seq;
  1704. out_hdr->sadb_msg_pid = hdr->sadb_msg_pid;
  1705. pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ALL, sk);
  1706. return 0;
  1707. out:
  1708. kfree(xp);
  1709. return err;
  1710. }
  1711. static int pfkey_spddelete(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1712. {
  1713. int err;
  1714. struct sadb_address *sa;
  1715. struct sadb_x_policy *pol;
  1716. struct xfrm_policy *xp;
  1717. struct sk_buff *out_skb;
  1718. struct sadb_msg *out_hdr;
  1719. struct xfrm_selector sel;
  1720. if (!present_and_same_family(ext_hdrs[SADB_EXT_ADDRESS_SRC-1],
  1721. ext_hdrs[SADB_EXT_ADDRESS_DST-1]) ||
  1722. !ext_hdrs[SADB_X_EXT_POLICY-1])
  1723. return -EINVAL;
  1724. pol = ext_hdrs[SADB_X_EXT_POLICY-1];
  1725. if (!pol->sadb_x_policy_dir || pol->sadb_x_policy_dir >= IPSEC_DIR_MAX)
  1726. return -EINVAL;
  1727. memset(&sel, 0, sizeof(sel));
  1728. sa = ext_hdrs[SADB_EXT_ADDRESS_SRC-1],
  1729. sel.family = pfkey_sadb_addr2xfrm_addr(sa, &sel.saddr);
  1730. sel.prefixlen_s = sa->sadb_address_prefixlen;
  1731. sel.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);
  1732. sel.sport = ((struct sockaddr_in *)(sa+1))->sin_port;
  1733. if (sel.sport)
  1734. sel.sport_mask = ~0;
  1735. sa = ext_hdrs[SADB_EXT_ADDRESS_DST-1],
  1736. pfkey_sadb_addr2xfrm_addr(sa, &sel.daddr);
  1737. sel.prefixlen_d = sa->sadb_address_prefixlen;
  1738. sel.proto = pfkey_proto_to_xfrm(sa->sadb_address_proto);
  1739. sel.dport = ((struct sockaddr_in *)(sa+1))->sin_port;
  1740. if (sel.dport)
  1741. sel.dport_mask = ~0;
  1742. xp = xfrm_policy_bysel(pol->sadb_x_policy_dir-1, &sel, 1);
  1743. if (xp == NULL)
  1744. return -ENOENT;
  1745. err = 0;
  1746. out_skb = pfkey_xfrm_policy2msg_prep(xp);
  1747. if (IS_ERR(out_skb)) {
  1748. err = PTR_ERR(out_skb);
  1749. goto out;
  1750. }
  1751. pfkey_xfrm_policy2msg(out_skb, xp, pol->sadb_x_policy_dir-1);
  1752. out_hdr = (struct sadb_msg *) out_skb->data;
  1753. out_hdr->sadb_msg_version = hdr->sadb_msg_version;
  1754. out_hdr->sadb_msg_type = SADB_X_SPDDELETE;
  1755. out_hdr->sadb_msg_satype = 0;
  1756. out_hdr->sadb_msg_errno = 0;
  1757. out_hdr->sadb_msg_seq = hdr->sadb_msg_seq;
  1758. out_hdr->sadb_msg_pid = hdr->sadb_msg_pid;
  1759. pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ALL, sk);
  1760. err = 0;
  1761. out:
  1762. xfrm_pol_put(xp);
  1763. return err;
  1764. }
  1765. static int pfkey_spdget(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1766. {
  1767. int err;
  1768. struct sadb_x_policy *pol;
  1769. struct xfrm_policy *xp;
  1770. struct sk_buff *out_skb;
  1771. struct sadb_msg *out_hdr;
  1772. if ((pol = ext_hdrs[SADB_X_EXT_POLICY-1]) == NULL)
  1773. return -EINVAL;
  1774. xp = xfrm_policy_byid(0, pol->sadb_x_policy_id,
  1775. hdr->sadb_msg_type == SADB_X_SPDDELETE2);
  1776. if (xp == NULL)
  1777. return -ENOENT;
  1778. err = 0;
  1779. out_skb = pfkey_xfrm_policy2msg_prep(xp);
  1780. if (IS_ERR(out_skb)) {
  1781. err = PTR_ERR(out_skb);
  1782. goto out;
  1783. }
  1784. pfkey_xfrm_policy2msg(out_skb, xp, pol->sadb_x_policy_dir-1);
  1785. out_hdr = (struct sadb_msg *) out_skb->data;
  1786. out_hdr->sadb_msg_version = hdr->sadb_msg_version;
  1787. out_hdr->sadb_msg_type = hdr->sadb_msg_type;
  1788. out_hdr->sadb_msg_satype = 0;
  1789. out_hdr->sadb_msg_errno = 0;
  1790. out_hdr->sadb_msg_seq = hdr->sadb_msg_seq;
  1791. out_hdr->sadb_msg_pid = hdr->sadb_msg_pid;
  1792. pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ALL, sk);
  1793. err = 0;
  1794. out:
  1795. xfrm_pol_put(xp);
  1796. return err;
  1797. }
  1798. static int dump_sp(struct xfrm_policy *xp, int dir, int count, void *ptr)
  1799. {
  1800. struct pfkey_dump_data *data = ptr;
  1801. struct sk_buff *out_skb;
  1802. struct sadb_msg *out_hdr;
  1803. out_skb = pfkey_xfrm_policy2msg_prep(xp);
  1804. if (IS_ERR(out_skb))
  1805. return PTR_ERR(out_skb);
  1806. pfkey_xfrm_policy2msg(out_skb, xp, dir);
  1807. out_hdr = (struct sadb_msg *) out_skb->data;
  1808. out_hdr->sadb_msg_version = data->hdr->sadb_msg_version;
  1809. out_hdr->sadb_msg_type = SADB_X_SPDDUMP;
  1810. out_hdr->sadb_msg_satype = SADB_SATYPE_UNSPEC;
  1811. out_hdr->sadb_msg_errno = 0;
  1812. out_hdr->sadb_msg_seq = count;
  1813. out_hdr->sadb_msg_pid = data->hdr->sadb_msg_pid;
  1814. pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_ONE, data->sk);
  1815. return 0;
  1816. }
  1817. static int pfkey_spddump(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1818. {
  1819. struct pfkey_dump_data data = { .skb = skb, .hdr = hdr, .sk = sk };
  1820. return xfrm_policy_walk(dump_sp, &data);
  1821. }
  1822. static int pfkey_spdflush(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr, void **ext_hdrs)
  1823. {
  1824. struct sk_buff *skb_out;
  1825. struct sadb_msg *hdr_out;
  1826. skb_out = alloc_skb(sizeof(struct sadb_msg) + 16, GFP_KERNEL);
  1827. if (!skb_out)
  1828. return -ENOBUFS;
  1829. xfrm_policy_flush();
  1830. hdr_out = (struct sadb_msg *) skb_put(skb_out, sizeof(struct sadb_msg));
  1831. pfkey_hdr_dup(hdr_out, hdr);
  1832. hdr_out->sadb_msg_errno = (uint8_t) 0;
  1833. hdr_out->sadb_msg_len = (sizeof(struct sadb_msg) / sizeof(uint64_t));
  1834. pfkey_broadcast(skb_out, GFP_KERNEL, BROADCAST_ALL, NULL);
  1835. return 0;
  1836. }
  1837. typedef int (*pfkey_handler)(struct sock *sk, struct sk_buff *skb,
  1838. struct sadb_msg *hdr, void **ext_hdrs);
  1839. static pfkey_handler pfkey_funcs[SADB_MAX + 1] = {
  1840. [SADB_RESERVED] = pfkey_reserved,
  1841. [SADB_GETSPI] = pfkey_getspi,
  1842. [SADB_UPDATE] = pfkey_add,
  1843. [SADB_ADD] = pfkey_add,
  1844. [SADB_DELETE] = pfkey_delete,
  1845. [SADB_GET] = pfkey_get,
  1846. [SADB_ACQUIRE] = pfkey_acquire,
  1847. [SADB_REGISTER] = pfkey_register,
  1848. [SADB_EXPIRE] = NULL,
  1849. [SADB_FLUSH] = pfkey_flush,
  1850. [SADB_DUMP] = pfkey_dump,
  1851. [SADB_X_PROMISC] = pfkey_promisc,
  1852. [SADB_X_PCHANGE] = NULL,
  1853. [SADB_X_SPDUPDATE] = pfkey_spdadd,
  1854. [SADB_X_SPDADD] = pfkey_spdadd,
  1855. [SADB_X_SPDDELETE] = pfkey_spddelete,
  1856. [SADB_X_SPDGET] = pfkey_spdget,
  1857. [SADB_X_SPDACQUIRE] = NULL,
  1858. [SADB_X_SPDDUMP] = pfkey_spddump,
  1859. [SADB_X_SPDFLUSH] = pfkey_spdflush,
  1860. [SADB_X_SPDSETIDX] = pfkey_spdadd,
  1861. [SADB_X_SPDDELETE2] = pfkey_spdget,
  1862. };
  1863. static int pfkey_process(struct sock *sk, struct sk_buff *skb, struct sadb_msg *hdr)
  1864. {
  1865. void *ext_hdrs[SADB_EXT_MAX];
  1866. int err;
  1867. pfkey_broadcast(skb_clone(skb, GFP_KERNEL), GFP_KERNEL,
  1868. BROADCAST_PROMISC_ONLY, NULL);
  1869. memset(ext_hdrs, 0, sizeof(ext_hdrs));
  1870. err = parse_exthdrs(skb, hdr, ext_hdrs);
  1871. if (!err) {
  1872. err = -EOPNOTSUPP;
  1873. if (pfkey_funcs[hdr->sadb_msg_type])
  1874. err = pfkey_funcs[hdr->sadb_msg_type](sk, skb, hdr, ext_hdrs);
  1875. }
  1876. return err;
  1877. }
  1878. static struct sadb_msg *pfkey_get_base_msg(struct sk_buff *skb, int *errp)
  1879. {
  1880. struct sadb_msg *hdr = NULL;
  1881. if (skb->len < sizeof(*hdr)) {
  1882. *errp = -EMSGSIZE;
  1883. } else {
  1884. hdr = (struct sadb_msg *) skb->data;
  1885. if (hdr->sadb_msg_version != PF_KEY_V2 ||
  1886. hdr->sadb_msg_reserved != 0 ||
  1887. (hdr->sadb_msg_type <= SADB_RESERVED ||
  1888. hdr->sadb_msg_type > SADB_MAX)) {
  1889. hdr = NULL;
  1890. *errp = -EINVAL;
  1891. } else if (hdr->sadb_msg_len != (skb->len /
  1892. sizeof(uint64_t)) ||
  1893. hdr->sadb_msg_len < (sizeof(struct sadb_msg) /
  1894. sizeof(uint64_t))) {
  1895. hdr = NULL;
  1896. *errp = -EMSGSIZE;
  1897. } else {
  1898. *errp = 0;
  1899. }
  1900. }
  1901. return hdr;
  1902. }
  1903. static inline int aalg_tmpl_set(struct xfrm_tmpl *t, struct xfrm_algo_desc *d)
  1904. {
  1905. return t->aalgos & (1 << d->desc.sadb_alg_id);
  1906. }
  1907. static inline int ealg_tmpl_set(struct xfrm_tmpl *t, struct xfrm_algo_desc *d)
  1908. {
  1909. return t->ealgos & (1 << d->desc.sadb_alg_id);
  1910. }
  1911. static int count_ah_combs(struct xfrm_tmpl *t)
  1912. {
  1913. int i, sz = 0;
  1914. for (i = 0; ; i++) {
  1915. struct xfrm_algo_desc *aalg = xfrm_aalg_get_byidx(i);
  1916. if (!aalg)
  1917. break;
  1918. if (aalg_tmpl_set(t, aalg) && aalg->available)
  1919. sz += sizeof(struct sadb_comb);
  1920. }
  1921. return sz + sizeof(struct sadb_prop);
  1922. }
  1923. static int count_esp_combs(struct xfrm_tmpl *t)
  1924. {
  1925. int i, k, sz = 0;
  1926. for (i = 0; ; i++) {
  1927. struct xfrm_algo_desc *ealg = xfrm_ealg_get_byidx(i);
  1928. if (!ealg)
  1929. break;
  1930. if (!(ealg_tmpl_set(t, ealg) && ealg->available))
  1931. continue;
  1932. for (k = 1; ; k++) {
  1933. struct xfrm_algo_desc *aalg = xfrm_aalg_get_byidx(k);
  1934. if (!aalg)
  1935. break;
  1936. if (aalg_tmpl_set(t, aalg) && aalg->available)
  1937. sz += sizeof(struct sadb_comb);
  1938. }
  1939. }
  1940. return sz + sizeof(struct sadb_prop);
  1941. }
  1942. static void dump_ah_combs(struct sk_buff *skb, struct xfrm_tmpl *t)
  1943. {
  1944. struct sadb_prop *p;
  1945. int i;
  1946. p = (struct sadb_prop*)skb_put(skb, sizeof(struct sadb_prop));
  1947. p->sadb_prop_len = sizeof(struct sadb_prop)/8;
  1948. p->sadb_prop_exttype = SADB_EXT_PROPOSAL;
  1949. p->sadb_prop_replay = 32;
  1950. memset(p->sadb_prop_reserved, 0, sizeof(p->sadb_prop_reserved));
  1951. for (i = 0; ; i++) {
  1952. struct xfrm_algo_desc *aalg = xfrm_aalg_get_byidx(i);
  1953. if (!aalg)
  1954. break;
  1955. if (aalg_tmpl_set(t, aalg) && aalg->available) {
  1956. struct sadb_comb *c;
  1957. c = (struct sadb_comb*)skb_put(skb, sizeof(struct sadb_comb));
  1958. memset(c, 0, sizeof(*c));
  1959. p->sadb_prop_len += sizeof(struct sadb_comb)/8;
  1960. c->sadb_comb_auth = aalg->desc.sadb_alg_id;
  1961. c->sadb_comb_auth_minbits = aalg->desc.sadb_alg_minbits;
  1962. c->sadb_comb_auth_maxbits = aalg->desc.sadb_alg_maxbits;
  1963. c->sadb_comb_hard_addtime = 24*60*60;
  1964. c->sadb_comb_soft_addtime = 20*60*60;
  1965. c->sadb_comb_hard_usetime = 8*60*60;
  1966. c->sadb_comb_soft_usetime = 7*60*60;
  1967. }
  1968. }
  1969. }
  1970. static void dump_esp_combs(struct sk_buff *skb, struct xfrm_tmpl *t)
  1971. {
  1972. struct sadb_prop *p;
  1973. int i, k;
  1974. p = (struct sadb_prop*)skb_put(skb, sizeof(struct sadb_prop));
  1975. p->sadb_prop_len = sizeof(struct sadb_prop)/8;
  1976. p->sadb_prop_exttype = SADB_EXT_PROPOSAL;
  1977. p->sadb_prop_replay = 32;
  1978. memset(p->sadb_prop_reserved, 0, sizeof(p->sadb_prop_reserved));
  1979. for (i=0; ; i++) {
  1980. struct xfrm_algo_desc *ealg = xfrm_ealg_get_byidx(i);
  1981. if (!ealg)
  1982. break;
  1983. if (!(ealg_tmpl_set(t, ealg) && ealg->available))
  1984. continue;
  1985. for (k = 1; ; k++) {
  1986. struct sadb_comb *c;
  1987. struct xfrm_algo_desc *aalg = xfrm_aalg_get_byidx(k);
  1988. if (!aalg)
  1989. break;
  1990. if (!(aalg_tmpl_set(t, aalg) && aalg->available))
  1991. continue;
  1992. c = (struct sadb_comb*)skb_put(skb, sizeof(struct sadb_comb));
  1993. memset(c, 0, sizeof(*c));
  1994. p->sadb_prop_len += sizeof(struct sadb_comb)/8;
  1995. c->sadb_comb_auth = aalg->desc.sadb_alg_id;
  1996. c->sadb_comb_auth_minbits = aalg->desc.sadb_alg_minbits;
  1997. c->sadb_comb_auth_maxbits = aalg->desc.sadb_alg_maxbits;
  1998. c->sadb_comb_encrypt = ealg->desc.sadb_alg_id;
  1999. c->sadb_comb_encrypt_minbits = ealg->desc.sadb_alg_minbits;
  2000. c->sadb_comb_encrypt_maxbits = ealg->desc.sadb_alg_maxbits;
  2001. c->sadb_comb_hard_addtime = 24*60*60;
  2002. c->sadb_comb_soft_addtime = 20*60*60;
  2003. c->sadb_comb_hard_usetime = 8*60*60;
  2004. c->sadb_comb_soft_usetime = 7*60*60;
  2005. }
  2006. }
  2007. }
  2008. static int pfkey_send_notify(struct xfrm_state *x, int hard)
  2009. {
  2010. struct sk_buff *out_skb;
  2011. struct sadb_msg *out_hdr;
  2012. int hsc = (hard ? 2 : 1);
  2013. out_skb = pfkey_xfrm_state2msg(x, 0, hsc);
  2014. if (IS_ERR(out_skb))
  2015. return PTR_ERR(out_skb);
  2016. out_hdr = (struct sadb_msg *) out_skb->data;
  2017. out_hdr->sadb_msg_version = PF_KEY_V2;
  2018. out_hdr->sadb_msg_type = SADB_EXPIRE;
  2019. out_hdr->sadb_msg_satype = pfkey_proto2satype(x->id.proto);
  2020. out_hdr->sadb_msg_errno = 0;
  2021. out_hdr->sadb_msg_reserved = 0;
  2022. out_hdr->sadb_msg_seq = 0;
  2023. out_hdr->sadb_msg_pid = 0;
  2024. pfkey_broadcast(out_skb, GFP_ATOMIC, BROADCAST_REGISTERED, NULL);
  2025. return 0;
  2026. }
  2027. static u32 get_acqseq(void)
  2028. {
  2029. u32 res;
  2030. static u32 acqseq;
  2031. static DEFINE_SPINLOCK(acqseq_lock);
  2032. spin_lock_bh(&acqseq_lock);
  2033. res = (++acqseq ? : ++acqseq);
  2034. spin_unlock_bh(&acqseq_lock);
  2035. return res;
  2036. }
  2037. static int pfkey_send_acquire(struct xfrm_state *x, struct xfrm_tmpl *t, struct xfrm_policy *xp, int dir)
  2038. {
  2039. struct sk_buff *skb;
  2040. struct sadb_msg *hdr;
  2041. struct sadb_address *addr;
  2042. struct sadb_x_policy *pol;
  2043. struct sockaddr_in *sin;
  2044. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  2045. struct sockaddr_in6 *sin6;
  2046. #endif
  2047. int sockaddr_size;
  2048. int size;
  2049. sockaddr_size = pfkey_sockaddr_size(x->props.family);
  2050. if (!sockaddr_size)
  2051. return -EINVAL;
  2052. size = sizeof(struct sadb_msg) +
  2053. (sizeof(struct sadb_address) * 2) +
  2054. (sockaddr_size * 2) +
  2055. sizeof(struct sadb_x_policy);
  2056. if (x->id.proto == IPPROTO_AH)
  2057. size += count_ah_combs(t);
  2058. else if (x->id.proto == IPPROTO_ESP)
  2059. size += count_esp_combs(t);
  2060. skb = alloc_skb(size + 16, GFP_ATOMIC);
  2061. if (skb == NULL)
  2062. return -ENOMEM;
  2063. hdr = (struct sadb_msg *) skb_put(skb, sizeof(struct sadb_msg));
  2064. hdr->sadb_msg_version = PF_KEY_V2;
  2065. hdr->sadb_msg_type = SADB_ACQUIRE;
  2066. hdr->sadb_msg_satype = pfkey_proto2satype(x->id.proto);
  2067. hdr->sadb_msg_len = size / sizeof(uint64_t);
  2068. hdr->sadb_msg_errno = 0;
  2069. hdr->sadb_msg_reserved = 0;
  2070. hdr->sadb_msg_seq = x->km.seq = get_acqseq();
  2071. hdr->sadb_msg_pid = 0;
  2072. /* src address */
  2073. addr = (struct sadb_address*) skb_put(skb,
  2074. sizeof(struct sadb_address)+sockaddr_size);
  2075. addr->sadb_address_len =
  2076. (sizeof(struct sadb_address)+sockaddr_size)/
  2077. sizeof(uint64_t);
  2078. addr->sadb_address_exttype = SADB_EXT_ADDRESS_SRC;
  2079. addr->sadb_address_proto = 0;
  2080. addr->sadb_address_reserved = 0;
  2081. if (x->props.family == AF_INET) {
  2082. addr->sadb_address_prefixlen = 32;
  2083. sin = (struct sockaddr_in *) (addr + 1);
  2084. sin->sin_family = AF_INET;
  2085. sin->sin_addr.s_addr = x->props.saddr.a4;
  2086. sin->sin_port = 0;
  2087. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  2088. }
  2089. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  2090. else if (x->props.family == AF_INET6) {
  2091. addr->sadb_address_prefixlen = 128;
  2092. sin6 = (struct sockaddr_in6 *) (addr + 1);
  2093. sin6->sin6_family = AF_INET6;
  2094. sin6->sin6_port = 0;
  2095. sin6->sin6_flowinfo = 0;
  2096. memcpy(&sin6->sin6_addr,
  2097. x->props.saddr.a6, sizeof(struct in6_addr));
  2098. sin6->sin6_scope_id = 0;
  2099. }
  2100. #endif
  2101. else
  2102. BUG();
  2103. /* dst address */
  2104. addr = (struct sadb_address*) skb_put(skb,
  2105. sizeof(struct sadb_address)+sockaddr_size);
  2106. addr->sadb_address_len =
  2107. (sizeof(struct sadb_address)+sockaddr_size)/
  2108. sizeof(uint64_t);
  2109. addr->sadb_address_exttype = SADB_EXT_ADDRESS_DST;
  2110. addr->sadb_address_proto = 0;
  2111. addr->sadb_address_reserved = 0;
  2112. if (x->props.family == AF_INET) {
  2113. addr->sadb_address_prefixlen = 32;
  2114. sin = (struct sockaddr_in *) (addr + 1);
  2115. sin->sin_family = AF_INET;
  2116. sin->sin_addr.s_addr = x->id.daddr.a4;
  2117. sin->sin_port = 0;
  2118. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  2119. }
  2120. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  2121. else if (x->props.family == AF_INET6) {
  2122. addr->sadb_address_prefixlen = 128;
  2123. sin6 = (struct sockaddr_in6 *) (addr + 1);
  2124. sin6->sin6_family = AF_INET6;
  2125. sin6->sin6_port = 0;
  2126. sin6->sin6_flowinfo = 0;
  2127. memcpy(&sin6->sin6_addr,
  2128. x->id.daddr.a6, sizeof(struct in6_addr));
  2129. sin6->sin6_scope_id = 0;
  2130. }
  2131. #endif
  2132. else
  2133. BUG();
  2134. pol = (struct sadb_x_policy *) skb_put(skb, sizeof(struct sadb_x_policy));
  2135. pol->sadb_x_policy_len = sizeof(struct sadb_x_policy)/sizeof(uint64_t);
  2136. pol->sadb_x_policy_exttype = SADB_X_EXT_POLICY;
  2137. pol->sadb_x_policy_type = IPSEC_POLICY_IPSEC;
  2138. pol->sadb_x_policy_dir = dir+1;
  2139. pol->sadb_x_policy_id = xp->index;
  2140. /* Set sadb_comb's. */
  2141. if (x->id.proto == IPPROTO_AH)
  2142. dump_ah_combs(skb, t);
  2143. else if (x->id.proto == IPPROTO_ESP)
  2144. dump_esp_combs(skb, t);
  2145. return pfkey_broadcast(skb, GFP_ATOMIC, BROADCAST_REGISTERED, NULL);
  2146. }
  2147. static struct xfrm_policy *pfkey_compile_policy(u16 family, int opt,
  2148. u8 *data, int len, int *dir)
  2149. {
  2150. struct xfrm_policy *xp;
  2151. struct sadb_x_policy *pol = (struct sadb_x_policy*)data;
  2152. switch (family) {
  2153. case AF_INET:
  2154. if (opt != IP_IPSEC_POLICY) {
  2155. *dir = -EOPNOTSUPP;
  2156. return NULL;
  2157. }
  2158. break;
  2159. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  2160. case AF_INET6:
  2161. if (opt != IPV6_IPSEC_POLICY) {
  2162. *dir = -EOPNOTSUPP;
  2163. return NULL;
  2164. }
  2165. break;
  2166. #endif
  2167. default:
  2168. *dir = -EINVAL;
  2169. return NULL;
  2170. }
  2171. *dir = -EINVAL;
  2172. if (len < sizeof(struct sadb_x_policy) ||
  2173. pol->sadb_x_policy_len*8 > len ||
  2174. pol->sadb_x_policy_type > IPSEC_POLICY_BYPASS ||
  2175. (!pol->sadb_x_policy_dir || pol->sadb_x_policy_dir > IPSEC_DIR_OUTBOUND))
  2176. return NULL;
  2177. xp = xfrm_policy_alloc(GFP_ATOMIC);
  2178. if (xp == NULL) {
  2179. *dir = -ENOBUFS;
  2180. return NULL;
  2181. }
  2182. xp->action = (pol->sadb_x_policy_type == IPSEC_POLICY_DISCARD ?
  2183. XFRM_POLICY_BLOCK : XFRM_POLICY_ALLOW);
  2184. xp->lft.soft_byte_limit = XFRM_INF;
  2185. xp->lft.hard_byte_limit = XFRM_INF;
  2186. xp->lft.soft_packet_limit = XFRM_INF;
  2187. xp->lft.hard_packet_limit = XFRM_INF;
  2188. xp->family = family;
  2189. xp->xfrm_nr = 0;
  2190. if (pol->sadb_x_policy_type == IPSEC_POLICY_IPSEC &&
  2191. (*dir = parse_ipsecrequests(xp, pol)) < 0)
  2192. goto out;
  2193. *dir = pol->sadb_x_policy_dir-1;
  2194. return xp;
  2195. out:
  2196. kfree(xp);
  2197. return NULL;
  2198. }
  2199. static int pfkey_send_new_mapping(struct xfrm_state *x, xfrm_address_t *ipaddr, u16 sport)
  2200. {
  2201. struct sk_buff *skb;
  2202. struct sadb_msg *hdr;
  2203. struct sadb_sa *sa;
  2204. struct sadb_address *addr;
  2205. struct sadb_x_nat_t_port *n_port;
  2206. struct sockaddr_in *sin;
  2207. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  2208. struct sockaddr_in6 *sin6;
  2209. #endif
  2210. int sockaddr_size;
  2211. int size;
  2212. __u8 satype = (x->id.proto == IPPROTO_ESP ? SADB_SATYPE_ESP : 0);
  2213. struct xfrm_encap_tmpl *natt = NULL;
  2214. sockaddr_size = pfkey_sockaddr_size(x->props.family);
  2215. if (!sockaddr_size)
  2216. return -EINVAL;
  2217. if (!satype)
  2218. return -EINVAL;
  2219. if (!x->encap)
  2220. return -EINVAL;
  2221. natt = x->encap;
  2222. /* Build an SADB_X_NAT_T_NEW_MAPPING message:
  2223. *
  2224. * HDR | SA | ADDRESS_SRC (old addr) | NAT_T_SPORT (old port) |
  2225. * ADDRESS_DST (new addr) | NAT_T_DPORT (new port)
  2226. */
  2227. size = sizeof(struct sadb_msg) +
  2228. sizeof(struct sadb_sa) +
  2229. (sizeof(struct sadb_address) * 2) +
  2230. (sockaddr_size * 2) +
  2231. (sizeof(struct sadb_x_nat_t_port) * 2);
  2232. skb = alloc_skb(size + 16, GFP_ATOMIC);
  2233. if (skb == NULL)
  2234. return -ENOMEM;
  2235. hdr = (struct sadb_msg *) skb_put(skb, sizeof(struct sadb_msg));
  2236. hdr->sadb_msg_version = PF_KEY_V2;
  2237. hdr->sadb_msg_type = SADB_X_NAT_T_NEW_MAPPING;
  2238. hdr->sadb_msg_satype = satype;
  2239. hdr->sadb_msg_len = size / sizeof(uint64_t);
  2240. hdr->sadb_msg_errno = 0;
  2241. hdr->sadb_msg_reserved = 0;
  2242. hdr->sadb_msg_seq = x->km.seq = get_acqseq();
  2243. hdr->sadb_msg_pid = 0;
  2244. /* SA */
  2245. sa = (struct sadb_sa *) skb_put(skb, sizeof(struct sadb_sa));
  2246. sa->sadb_sa_len = sizeof(struct sadb_sa)/sizeof(uint64_t);
  2247. sa->sadb_sa_exttype = SADB_EXT_SA;
  2248. sa->sadb_sa_spi = x->id.spi;
  2249. sa->sadb_sa_replay = 0;
  2250. sa->sadb_sa_state = 0;
  2251. sa->sadb_sa_auth = 0;
  2252. sa->sadb_sa_encrypt = 0;
  2253. sa->sadb_sa_flags = 0;
  2254. /* ADDRESS_SRC (old addr) */
  2255. addr = (struct sadb_address*)
  2256. skb_put(skb, sizeof(struct sadb_address)+sockaddr_size);
  2257. addr->sadb_address_len =
  2258. (sizeof(struct sadb_address)+sockaddr_size)/
  2259. sizeof(uint64_t);
  2260. addr->sadb_address_exttype = SADB_EXT_ADDRESS_SRC;
  2261. addr->sadb_address_proto = 0;
  2262. addr->sadb_address_reserved = 0;
  2263. if (x->props.family == AF_INET) {
  2264. addr->sadb_address_prefixlen = 32;
  2265. sin = (struct sockaddr_in *) (addr + 1);
  2266. sin->sin_family = AF_INET;
  2267. sin->sin_addr.s_addr = x->props.saddr.a4;
  2268. sin->sin_port = 0;
  2269. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  2270. }
  2271. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  2272. else if (x->props.family == AF_INET6) {
  2273. addr->sadb_address_prefixlen = 128;
  2274. sin6 = (struct sockaddr_in6 *) (addr + 1);
  2275. sin6->sin6_family = AF_INET6;
  2276. sin6->sin6_port = 0;
  2277. sin6->sin6_flowinfo = 0;
  2278. memcpy(&sin6->sin6_addr,
  2279. x->props.saddr.a6, sizeof(struct in6_addr));
  2280. sin6->sin6_scope_id = 0;
  2281. }
  2282. #endif
  2283. else
  2284. BUG();
  2285. /* NAT_T_SPORT (old port) */
  2286. n_port = (struct sadb_x_nat_t_port*) skb_put(skb, sizeof (*n_port));
  2287. n_port->sadb_x_nat_t_port_len = sizeof(*n_port)/sizeof(uint64_t);
  2288. n_port->sadb_x_nat_t_port_exttype = SADB_X_EXT_NAT_T_SPORT;
  2289. n_port->sadb_x_nat_t_port_port = natt->encap_sport;
  2290. n_port->sadb_x_nat_t_port_reserved = 0;
  2291. /* ADDRESS_DST (new addr) */
  2292. addr = (struct sadb_address*)
  2293. skb_put(skb, sizeof(struct sadb_address)+sockaddr_size);
  2294. addr->sadb_address_len =
  2295. (sizeof(struct sadb_address)+sockaddr_size)/
  2296. sizeof(uint64_t);
  2297. addr->sadb_address_exttype = SADB_EXT_ADDRESS_DST;
  2298. addr->sadb_address_proto = 0;
  2299. addr->sadb_address_reserved = 0;
  2300. if (x->props.family == AF_INET) {
  2301. addr->sadb_address_prefixlen = 32;
  2302. sin = (struct sockaddr_in *) (addr + 1);
  2303. sin->sin_family = AF_INET;
  2304. sin->sin_addr.s_addr = ipaddr->a4;
  2305. sin->sin_port = 0;
  2306. memset(sin->sin_zero, 0, sizeof(sin->sin_zero));
  2307. }
  2308. #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
  2309. else if (x->props.family == AF_INET6) {
  2310. addr->sadb_address_prefixlen = 128;
  2311. sin6 = (struct sockaddr_in6 *) (addr + 1);
  2312. sin6->sin6_family = AF_INET6;
  2313. sin6->sin6_port = 0;
  2314. sin6->sin6_flowinfo = 0;
  2315. memcpy(&sin6->sin6_addr, &ipaddr->a6, sizeof(struct in6_addr));
  2316. sin6->sin6_scope_id = 0;
  2317. }
  2318. #endif
  2319. else
  2320. BUG();
  2321. /* NAT_T_DPORT (new port) */
  2322. n_port = (struct sadb_x_nat_t_port*) skb_put(skb, sizeof (*n_port));
  2323. n_port->sadb_x_nat_t_port_len = sizeof(*n_port)/sizeof(uint64_t);
  2324. n_port->sadb_x_nat_t_port_exttype = SADB_X_EXT_NAT_T_DPORT;
  2325. n_port->sadb_x_nat_t_port_port = sport;
  2326. n_port->sadb_x_nat_t_port_reserved = 0;
  2327. return pfkey_broadcast(skb, GFP_ATOMIC, BROADCAST_REGISTERED, NULL);
  2328. }
  2329. static int pfkey_sendmsg(struct kiocb *kiocb,
  2330. struct socket *sock, struct msghdr *msg, size_t len)
  2331. {
  2332. struct sock *sk = sock->sk;
  2333. struct sk_buff *skb = NULL;
  2334. struct sadb_msg *hdr = NULL;
  2335. int err;
  2336. err = -EOPNOTSUPP;
  2337. if (msg->msg_flags & MSG_OOB)
  2338. goto out;
  2339. err = -EMSGSIZE;
  2340. if ((unsigned)len > sk->sk_sndbuf - 32)
  2341. goto out;
  2342. err = -ENOBUFS;
  2343. skb = alloc_skb(len, GFP_KERNEL);
  2344. if (skb == NULL)
  2345. goto out;
  2346. err = -EFAULT;
  2347. if (memcpy_fromiovec(skb_put(skb,len), msg->msg_iov, len))
  2348. goto out;
  2349. hdr = pfkey_get_base_msg(skb, &err);
  2350. if (!hdr)
  2351. goto out;
  2352. down(&xfrm_cfg_sem);
  2353. err = pfkey_process(sk, skb, hdr);
  2354. up(&xfrm_cfg_sem);
  2355. out:
  2356. if (err && hdr && pfkey_error(hdr, err, sk) == 0)
  2357. err = 0;
  2358. if (skb)
  2359. kfree_skb(skb);
  2360. return err ? : len;
  2361. }
  2362. static int pfkey_recvmsg(struct kiocb *kiocb,
  2363. struct socket *sock, struct msghdr *msg, size_t len,
  2364. int flags)
  2365. {
  2366. struct sock *sk = sock->sk;
  2367. struct sk_buff *skb;
  2368. int copied, err;
  2369. err = -EINVAL;
  2370. if (flags & ~(MSG_PEEK|MSG_DONTWAIT|MSG_TRUNC|MSG_CMSG_COMPAT))
  2371. goto out;
  2372. msg->msg_namelen = 0;
  2373. skb = skb_recv_datagram(sk, flags, flags & MSG_DONTWAIT, &err);
  2374. if (skb == NULL)
  2375. goto out;
  2376. copied = skb->len;
  2377. if (copied > len) {
  2378. msg->msg_flags |= MSG_TRUNC;
  2379. copied = len;
  2380. }
  2381. skb->h.raw = skb->data;
  2382. err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
  2383. if (err)
  2384. goto out_free;
  2385. sock_recv_timestamp(msg, sk, skb);
  2386. err = (flags & MSG_TRUNC) ? skb->len : copied;
  2387. out_free:
  2388. skb_free_datagram(sk, skb);
  2389. out:
  2390. return err;
  2391. }
  2392. static struct proto_ops pfkey_ops = {
  2393. .family = PF_KEY,
  2394. .owner = THIS_MODULE,
  2395. /* Operations that make no sense on pfkey sockets. */
  2396. .bind = sock_no_bind,
  2397. .connect = sock_no_connect,
  2398. .socketpair = sock_no_socketpair,
  2399. .accept = sock_no_accept,
  2400. .getname = sock_no_getname,
  2401. .ioctl = sock_no_ioctl,
  2402. .listen = sock_no_listen,
  2403. .shutdown = sock_no_shutdown,
  2404. .setsockopt = sock_no_setsockopt,
  2405. .getsockopt = sock_no_getsockopt,
  2406. .mmap = sock_no_mmap,
  2407. .sendpage = sock_no_sendpage,
  2408. /* Now the operations that really occur. */
  2409. .release = pfkey_release,
  2410. .poll = datagram_poll,
  2411. .sendmsg = pfkey_sendmsg,
  2412. .recvmsg = pfkey_recvmsg,
  2413. };
  2414. static struct net_proto_family pfkey_family_ops = {
  2415. .family = PF_KEY,
  2416. .create = pfkey_create,
  2417. .owner = THIS_MODULE,
  2418. };
  2419. #ifdef CONFIG_PROC_FS
  2420. static int pfkey_read_proc(char *buffer, char **start, off_t offset,
  2421. int length, int *eof, void *data)
  2422. {
  2423. off_t pos = 0;
  2424. off_t begin = 0;
  2425. int len = 0;
  2426. struct sock *s;
  2427. struct hlist_node *node;
  2428. len += sprintf(buffer,"sk RefCnt Rmem Wmem User Inode\n");
  2429. read_lock(&pfkey_table_lock);
  2430. sk_for_each(s, node, &pfkey_table) {
  2431. len += sprintf(buffer+len,"%p %-6d %-6u %-6u %-6u %-6lu",
  2432. s,
  2433. atomic_read(&s->sk_refcnt),
  2434. atomic_read(&s->sk_rmem_alloc),
  2435. atomic_read(&s->sk_wmem_alloc),
  2436. sock_i_uid(s),
  2437. sock_i_ino(s)
  2438. );
  2439. buffer[len++] = '\n';
  2440. pos = begin + len;
  2441. if (pos < offset) {
  2442. len = 0;
  2443. begin = pos;
  2444. }
  2445. if(pos > offset + length)
  2446. goto done;
  2447. }
  2448. *eof = 1;
  2449. done:
  2450. read_unlock(&pfkey_table_lock);
  2451. *start = buffer + (offset - begin);
  2452. len -= (offset - begin);
  2453. if (len > length)
  2454. len = length;
  2455. if (len < 0)
  2456. len = 0;
  2457. return len;
  2458. }
  2459. #endif
  2460. static struct xfrm_mgr pfkeyv2_mgr =
  2461. {
  2462. .id = "pfkeyv2",
  2463. .notify = pfkey_send_notify,
  2464. .acquire = pfkey_send_acquire,
  2465. .compile_policy = pfkey_compile_policy,
  2466. .new_mapping = pfkey_send_new_mapping,
  2467. };
  2468. static void __exit ipsec_pfkey_exit(void)
  2469. {
  2470. xfrm_unregister_km(&pfkeyv2_mgr);
  2471. remove_proc_entry("net/pfkey", NULL);
  2472. sock_unregister(PF_KEY);
  2473. proto_unregister(&key_proto);
  2474. }
  2475. static int __init ipsec_pfkey_init(void)
  2476. {
  2477. int err = proto_register(&key_proto, 0);
  2478. if (err != 0)
  2479. goto out;
  2480. err = sock_register(&pfkey_family_ops);
  2481. if (err != 0)
  2482. goto out_unregister_key_proto;
  2483. #ifdef CONFIG_PROC_FS
  2484. err = -ENOMEM;
  2485. if (create_proc_read_entry("net/pfkey", 0, NULL, pfkey_read_proc, NULL) == NULL)
  2486. goto out_sock_unregister;
  2487. #endif
  2488. err = xfrm_register_km(&pfkeyv2_mgr);
  2489. if (err != 0)
  2490. goto out_remove_proc_entry;
  2491. out:
  2492. return err;
  2493. out_remove_proc_entry:
  2494. #ifdef CONFIG_PROC_FS
  2495. remove_proc_entry("net/pfkey", NULL);
  2496. out_sock_unregister:
  2497. #endif
  2498. sock_unregister(PF_KEY);
  2499. out_unregister_key_proto:
  2500. proto_unregister(&key_proto);
  2501. goto out;
  2502. }
  2503. module_init(ipsec_pfkey_init);
  2504. module_exit(ipsec_pfkey_exit);
  2505. MODULE_LICENSE("GPL");
  2506. MODULE_ALIAS_NETPROTO(PF_KEY);