ip_sockglue.c 32 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421
  1. /*
  2. * INET An implementation of the TCP/IP protocol suite for the LINUX
  3. * operating system. INET is implemented using the BSD Socket
  4. * interface as the means of communication with the user level.
  5. *
  6. * The IP to API glue.
  7. *
  8. * Authors: see ip.c
  9. *
  10. * Fixes:
  11. * Many : Split from ip.c , see ip.c for history.
  12. * Martin Mares : TOS setting fixed.
  13. * Alan Cox : Fixed a couple of oopses in Martin's
  14. * TOS tweaks.
  15. * Mike McLagan : Routing by source
  16. */
  17. #include <linux/module.h>
  18. #include <linux/types.h>
  19. #include <linux/mm.h>
  20. #include <linux/skbuff.h>
  21. #include <linux/ip.h>
  22. #include <linux/icmp.h>
  23. #include <linux/inetdevice.h>
  24. #include <linux/netdevice.h>
  25. #include <linux/slab.h>
  26. #include <net/sock.h>
  27. #include <net/ip.h>
  28. #include <net/icmp.h>
  29. #include <net/tcp_states.h>
  30. #include <linux/udp.h>
  31. #include <linux/igmp.h>
  32. #include <linux/netfilter.h>
  33. #include <linux/route.h>
  34. #include <linux/mroute.h>
  35. #include <net/inet_ecn.h>
  36. #include <net/route.h>
  37. #include <net/xfrm.h>
  38. #include <net/compat.h>
  39. #if IS_ENABLED(CONFIG_IPV6)
  40. #include <net/transp_v6.h>
  41. #endif
  42. #include <net/ip_fib.h>
  43. #include <linux/errqueue.h>
  44. #include <asm/uaccess.h>
  45. #define IP_CMSG_PKTINFO 1
  46. #define IP_CMSG_TTL 2
  47. #define IP_CMSG_TOS 4
  48. #define IP_CMSG_RECVOPTS 8
  49. #define IP_CMSG_RETOPTS 16
  50. #define IP_CMSG_PASSSEC 32
  51. #define IP_CMSG_ORIGDSTADDR 64
  52. /*
  53. * SOL_IP control messages.
  54. */
  55. #define PKTINFO_SKB_CB(__skb) ((struct in_pktinfo *)((__skb)->cb))
  56. static void ip_cmsg_recv_pktinfo(struct msghdr *msg, struct sk_buff *skb)
  57. {
  58. struct in_pktinfo info = *PKTINFO_SKB_CB(skb);
  59. info.ipi_addr.s_addr = ip_hdr(skb)->daddr;
  60. put_cmsg(msg, SOL_IP, IP_PKTINFO, sizeof(info), &info);
  61. }
  62. static void ip_cmsg_recv_ttl(struct msghdr *msg, struct sk_buff *skb)
  63. {
  64. int ttl = ip_hdr(skb)->ttl;
  65. put_cmsg(msg, SOL_IP, IP_TTL, sizeof(int), &ttl);
  66. }
  67. static void ip_cmsg_recv_tos(struct msghdr *msg, struct sk_buff *skb)
  68. {
  69. put_cmsg(msg, SOL_IP, IP_TOS, 1, &ip_hdr(skb)->tos);
  70. }
  71. static void ip_cmsg_recv_opts(struct msghdr *msg, struct sk_buff *skb)
  72. {
  73. if (IPCB(skb)->opt.optlen == 0)
  74. return;
  75. put_cmsg(msg, SOL_IP, IP_RECVOPTS, IPCB(skb)->opt.optlen,
  76. ip_hdr(skb) + 1);
  77. }
  78. static void ip_cmsg_recv_retopts(struct msghdr *msg, struct sk_buff *skb)
  79. {
  80. unsigned char optbuf[sizeof(struct ip_options) + 40];
  81. struct ip_options *opt = (struct ip_options *)optbuf;
  82. if (IPCB(skb)->opt.optlen == 0)
  83. return;
  84. if (ip_options_echo(opt, skb)) {
  85. msg->msg_flags |= MSG_CTRUNC;
  86. return;
  87. }
  88. ip_options_undo(opt);
  89. put_cmsg(msg, SOL_IP, IP_RETOPTS, opt->optlen, opt->__data);
  90. }
  91. static void ip_cmsg_recv_security(struct msghdr *msg, struct sk_buff *skb)
  92. {
  93. char *secdata;
  94. u32 seclen, secid;
  95. int err;
  96. err = security_socket_getpeersec_dgram(NULL, skb, &secid);
  97. if (err)
  98. return;
  99. err = security_secid_to_secctx(secid, &secdata, &seclen);
  100. if (err)
  101. return;
  102. put_cmsg(msg, SOL_IP, SCM_SECURITY, seclen, secdata);
  103. security_release_secctx(secdata, seclen);
  104. }
  105. static void ip_cmsg_recv_dstaddr(struct msghdr *msg, struct sk_buff *skb)
  106. {
  107. struct sockaddr_in sin;
  108. const struct iphdr *iph = ip_hdr(skb);
  109. __be16 *ports = (__be16 *)skb_transport_header(skb);
  110. if (skb_transport_offset(skb) + 4 > skb->len)
  111. return;
  112. /* All current transport protocols have the port numbers in the
  113. * first four bytes of the transport header and this function is
  114. * written with this assumption in mind.
  115. */
  116. sin.sin_family = AF_INET;
  117. sin.sin_addr.s_addr = iph->daddr;
  118. sin.sin_port = ports[1];
  119. memset(sin.sin_zero, 0, sizeof(sin.sin_zero));
  120. put_cmsg(msg, SOL_IP, IP_ORIGDSTADDR, sizeof(sin), &sin);
  121. }
  122. void ip_cmsg_recv(struct msghdr *msg, struct sk_buff *skb)
  123. {
  124. struct inet_sock *inet = inet_sk(skb->sk);
  125. unsigned int flags = inet->cmsg_flags;
  126. /* Ordered by supposed usage frequency */
  127. if (flags & 1)
  128. ip_cmsg_recv_pktinfo(msg, skb);
  129. if ((flags >>= 1) == 0)
  130. return;
  131. if (flags & 1)
  132. ip_cmsg_recv_ttl(msg, skb);
  133. if ((flags >>= 1) == 0)
  134. return;
  135. if (flags & 1)
  136. ip_cmsg_recv_tos(msg, skb);
  137. if ((flags >>= 1) == 0)
  138. return;
  139. if (flags & 1)
  140. ip_cmsg_recv_opts(msg, skb);
  141. if ((flags >>= 1) == 0)
  142. return;
  143. if (flags & 1)
  144. ip_cmsg_recv_retopts(msg, skb);
  145. if ((flags >>= 1) == 0)
  146. return;
  147. if (flags & 1)
  148. ip_cmsg_recv_security(msg, skb);
  149. if ((flags >>= 1) == 0)
  150. return;
  151. if (flags & 1)
  152. ip_cmsg_recv_dstaddr(msg, skb);
  153. }
  154. EXPORT_SYMBOL(ip_cmsg_recv);
  155. int ip_cmsg_send(struct net *net, struct msghdr *msg, struct ipcm_cookie *ipc)
  156. {
  157. int err, val;
  158. struct cmsghdr *cmsg;
  159. for (cmsg = CMSG_FIRSTHDR(msg); cmsg; cmsg = CMSG_NXTHDR(msg, cmsg)) {
  160. if (!CMSG_OK(msg, cmsg))
  161. return -EINVAL;
  162. if (cmsg->cmsg_level != SOL_IP)
  163. continue;
  164. switch (cmsg->cmsg_type) {
  165. case IP_RETOPTS:
  166. err = cmsg->cmsg_len - CMSG_ALIGN(sizeof(struct cmsghdr));
  167. err = ip_options_get(net, &ipc->opt, CMSG_DATA(cmsg),
  168. err < 40 ? err : 40);
  169. if (err)
  170. return err;
  171. break;
  172. case IP_PKTINFO:
  173. {
  174. struct in_pktinfo *info;
  175. if (cmsg->cmsg_len != CMSG_LEN(sizeof(struct in_pktinfo)))
  176. return -EINVAL;
  177. info = (struct in_pktinfo *)CMSG_DATA(cmsg);
  178. ipc->oif = info->ipi_ifindex;
  179. ipc->addr = info->ipi_spec_dst.s_addr;
  180. break;
  181. }
  182. case IP_TTL:
  183. if (cmsg->cmsg_len != CMSG_LEN(sizeof(int)))
  184. return -EINVAL;
  185. val = *(int *)CMSG_DATA(cmsg);
  186. if (val < 1 || val > 255)
  187. return -EINVAL;
  188. ipc->ttl = val;
  189. break;
  190. case IP_TOS:
  191. if (cmsg->cmsg_len != CMSG_LEN(sizeof(int)))
  192. return -EINVAL;
  193. val = *(int *)CMSG_DATA(cmsg);
  194. if (val < 0 || val > 255)
  195. return -EINVAL;
  196. ipc->tos = val;
  197. ipc->priority = rt_tos2priority(ipc->tos);
  198. break;
  199. default:
  200. return -EINVAL;
  201. }
  202. }
  203. return 0;
  204. }
  205. /* Special input handler for packets caught by router alert option.
  206. They are selected only by protocol field, and then processed likely
  207. local ones; but only if someone wants them! Otherwise, router
  208. not running rsvpd will kill RSVP.
  209. It is user level problem, what it will make with them.
  210. I have no idea, how it will masquearde or NAT them (it is joke, joke :-)),
  211. but receiver should be enough clever f.e. to forward mtrace requests,
  212. sent to multicast group to reach destination designated router.
  213. */
  214. struct ip_ra_chain __rcu *ip_ra_chain;
  215. static DEFINE_SPINLOCK(ip_ra_lock);
  216. static void ip_ra_destroy_rcu(struct rcu_head *head)
  217. {
  218. struct ip_ra_chain *ra = container_of(head, struct ip_ra_chain, rcu);
  219. sock_put(ra->saved_sk);
  220. kfree(ra);
  221. }
  222. int ip_ra_control(struct sock *sk, unsigned char on,
  223. void (*destructor)(struct sock *))
  224. {
  225. struct ip_ra_chain *ra, *new_ra;
  226. struct ip_ra_chain __rcu **rap;
  227. if (sk->sk_type != SOCK_RAW || inet_sk(sk)->inet_num == IPPROTO_RAW)
  228. return -EINVAL;
  229. new_ra = on ? kmalloc(sizeof(*new_ra), GFP_KERNEL) : NULL;
  230. spin_lock_bh(&ip_ra_lock);
  231. for (rap = &ip_ra_chain;
  232. (ra = rcu_dereference_protected(*rap,
  233. lockdep_is_held(&ip_ra_lock))) != NULL;
  234. rap = &ra->next) {
  235. if (ra->sk == sk) {
  236. if (on) {
  237. spin_unlock_bh(&ip_ra_lock);
  238. kfree(new_ra);
  239. return -EADDRINUSE;
  240. }
  241. /* dont let ip_call_ra_chain() use sk again */
  242. ra->sk = NULL;
  243. rcu_assign_pointer(*rap, ra->next);
  244. spin_unlock_bh(&ip_ra_lock);
  245. if (ra->destructor)
  246. ra->destructor(sk);
  247. /*
  248. * Delay sock_put(sk) and kfree(ra) after one rcu grace
  249. * period. This guarantee ip_call_ra_chain() dont need
  250. * to mess with socket refcounts.
  251. */
  252. ra->saved_sk = sk;
  253. call_rcu(&ra->rcu, ip_ra_destroy_rcu);
  254. return 0;
  255. }
  256. }
  257. if (new_ra == NULL) {
  258. spin_unlock_bh(&ip_ra_lock);
  259. return -ENOBUFS;
  260. }
  261. new_ra->sk = sk;
  262. new_ra->destructor = destructor;
  263. new_ra->next = ra;
  264. rcu_assign_pointer(*rap, new_ra);
  265. sock_hold(sk);
  266. spin_unlock_bh(&ip_ra_lock);
  267. return 0;
  268. }
  269. void ip_icmp_error(struct sock *sk, struct sk_buff *skb, int err,
  270. __be16 port, u32 info, u8 *payload)
  271. {
  272. struct sock_exterr_skb *serr;
  273. skb = skb_clone(skb, GFP_ATOMIC);
  274. if (!skb)
  275. return;
  276. serr = SKB_EXT_ERR(skb);
  277. serr->ee.ee_errno = err;
  278. serr->ee.ee_origin = SO_EE_ORIGIN_ICMP;
  279. serr->ee.ee_type = icmp_hdr(skb)->type;
  280. serr->ee.ee_code = icmp_hdr(skb)->code;
  281. serr->ee.ee_pad = 0;
  282. serr->ee.ee_info = info;
  283. serr->ee.ee_data = 0;
  284. serr->addr_offset = (u8 *)&(((struct iphdr *)(icmp_hdr(skb) + 1))->daddr) -
  285. skb_network_header(skb);
  286. serr->port = port;
  287. if (skb_pull(skb, payload - skb->data) != NULL) {
  288. skb_reset_transport_header(skb);
  289. if (sock_queue_err_skb(sk, skb) == 0)
  290. return;
  291. }
  292. kfree_skb(skb);
  293. }
  294. void ip_local_error(struct sock *sk, int err, __be32 daddr, __be16 port, u32 info)
  295. {
  296. struct inet_sock *inet = inet_sk(sk);
  297. struct sock_exterr_skb *serr;
  298. struct iphdr *iph;
  299. struct sk_buff *skb;
  300. if (!inet->recverr)
  301. return;
  302. skb = alloc_skb(sizeof(struct iphdr), GFP_ATOMIC);
  303. if (!skb)
  304. return;
  305. skb_put(skb, sizeof(struct iphdr));
  306. skb_reset_network_header(skb);
  307. iph = ip_hdr(skb);
  308. iph->daddr = daddr;
  309. serr = SKB_EXT_ERR(skb);
  310. serr->ee.ee_errno = err;
  311. serr->ee.ee_origin = SO_EE_ORIGIN_LOCAL;
  312. serr->ee.ee_type = 0;
  313. serr->ee.ee_code = 0;
  314. serr->ee.ee_pad = 0;
  315. serr->ee.ee_info = info;
  316. serr->ee.ee_data = 0;
  317. serr->addr_offset = (u8 *)&iph->daddr - skb_network_header(skb);
  318. serr->port = port;
  319. __skb_pull(skb, skb_tail_pointer(skb) - skb->data);
  320. skb_reset_transport_header(skb);
  321. if (sock_queue_err_skb(sk, skb))
  322. kfree_skb(skb);
  323. }
  324. /*
  325. * Handle MSG_ERRQUEUE
  326. */
  327. int ip_recv_error(struct sock *sk, struct msghdr *msg, int len)
  328. {
  329. struct sock_exterr_skb *serr;
  330. struct sk_buff *skb, *skb2;
  331. struct sockaddr_in *sin;
  332. struct {
  333. struct sock_extended_err ee;
  334. struct sockaddr_in offender;
  335. } errhdr;
  336. int err;
  337. int copied;
  338. err = -EAGAIN;
  339. skb = skb_dequeue(&sk->sk_error_queue);
  340. if (skb == NULL)
  341. goto out;
  342. copied = skb->len;
  343. if (copied > len) {
  344. msg->msg_flags |= MSG_TRUNC;
  345. copied = len;
  346. }
  347. err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
  348. if (err)
  349. goto out_free_skb;
  350. sock_recv_timestamp(msg, sk, skb);
  351. serr = SKB_EXT_ERR(skb);
  352. sin = (struct sockaddr_in *)msg->msg_name;
  353. if (sin) {
  354. sin->sin_family = AF_INET;
  355. sin->sin_addr.s_addr = *(__be32 *)(skb_network_header(skb) +
  356. serr->addr_offset);
  357. sin->sin_port = serr->port;
  358. memset(&sin->sin_zero, 0, sizeof(sin->sin_zero));
  359. }
  360. memcpy(&errhdr.ee, &serr->ee, sizeof(struct sock_extended_err));
  361. sin = &errhdr.offender;
  362. sin->sin_family = AF_UNSPEC;
  363. if (serr->ee.ee_origin == SO_EE_ORIGIN_ICMP) {
  364. struct inet_sock *inet = inet_sk(sk);
  365. sin->sin_family = AF_INET;
  366. sin->sin_addr.s_addr = ip_hdr(skb)->saddr;
  367. sin->sin_port = 0;
  368. memset(&sin->sin_zero, 0, sizeof(sin->sin_zero));
  369. if (inet->cmsg_flags)
  370. ip_cmsg_recv(msg, skb);
  371. }
  372. put_cmsg(msg, SOL_IP, IP_RECVERR, sizeof(errhdr), &errhdr);
  373. /* Now we could try to dump offended packet options */
  374. msg->msg_flags |= MSG_ERRQUEUE;
  375. err = copied;
  376. /* Reset and regenerate socket error */
  377. spin_lock_bh(&sk->sk_error_queue.lock);
  378. sk->sk_err = 0;
  379. skb2 = skb_peek(&sk->sk_error_queue);
  380. if (skb2 != NULL) {
  381. sk->sk_err = SKB_EXT_ERR(skb2)->ee.ee_errno;
  382. spin_unlock_bh(&sk->sk_error_queue.lock);
  383. sk->sk_error_report(sk);
  384. } else
  385. spin_unlock_bh(&sk->sk_error_queue.lock);
  386. out_free_skb:
  387. kfree_skb(skb);
  388. out:
  389. return err;
  390. }
  391. /*
  392. * Socket option code for IP. This is the end of the line after any
  393. * TCP,UDP etc options on an IP socket.
  394. */
  395. static int do_ip_setsockopt(struct sock *sk, int level,
  396. int optname, char __user *optval, unsigned int optlen)
  397. {
  398. struct inet_sock *inet = inet_sk(sk);
  399. int val = 0, err;
  400. switch (optname) {
  401. case IP_PKTINFO:
  402. case IP_RECVTTL:
  403. case IP_RECVOPTS:
  404. case IP_RECVTOS:
  405. case IP_RETOPTS:
  406. case IP_TOS:
  407. case IP_TTL:
  408. case IP_HDRINCL:
  409. case IP_MTU_DISCOVER:
  410. case IP_RECVERR:
  411. case IP_ROUTER_ALERT:
  412. case IP_FREEBIND:
  413. case IP_PASSSEC:
  414. case IP_TRANSPARENT:
  415. case IP_MINTTL:
  416. case IP_NODEFRAG:
  417. case IP_UNICAST_IF:
  418. case IP_MULTICAST_TTL:
  419. case IP_MULTICAST_ALL:
  420. case IP_MULTICAST_LOOP:
  421. case IP_RECVORIGDSTADDR:
  422. if (optlen >= sizeof(int)) {
  423. if (get_user(val, (int __user *) optval))
  424. return -EFAULT;
  425. } else if (optlen >= sizeof(char)) {
  426. unsigned char ucval;
  427. if (get_user(ucval, (unsigned char __user *) optval))
  428. return -EFAULT;
  429. val = (int) ucval;
  430. }
  431. }
  432. /* If optlen==0, it is equivalent to val == 0 */
  433. if (ip_mroute_opt(optname))
  434. return ip_mroute_setsockopt(sk, optname, optval, optlen);
  435. err = 0;
  436. lock_sock(sk);
  437. switch (optname) {
  438. case IP_OPTIONS:
  439. {
  440. struct ip_options_rcu *old, *opt = NULL;
  441. if (optlen > 40)
  442. goto e_inval;
  443. err = ip_options_get_from_user(sock_net(sk), &opt,
  444. optval, optlen);
  445. if (err)
  446. break;
  447. old = rcu_dereference_protected(inet->inet_opt,
  448. sock_owned_by_user(sk));
  449. if (inet->is_icsk) {
  450. struct inet_connection_sock *icsk = inet_csk(sk);
  451. #if IS_ENABLED(CONFIG_IPV6)
  452. if (sk->sk_family == PF_INET ||
  453. (!((1 << sk->sk_state) &
  454. (TCPF_LISTEN | TCPF_CLOSE)) &&
  455. inet->inet_daddr != LOOPBACK4_IPV6)) {
  456. #endif
  457. if (old)
  458. icsk->icsk_ext_hdr_len -= old->opt.optlen;
  459. if (opt)
  460. icsk->icsk_ext_hdr_len += opt->opt.optlen;
  461. icsk->icsk_sync_mss(sk, icsk->icsk_pmtu_cookie);
  462. #if IS_ENABLED(CONFIG_IPV6)
  463. }
  464. #endif
  465. }
  466. rcu_assign_pointer(inet->inet_opt, opt);
  467. if (old)
  468. kfree_rcu(old, rcu);
  469. break;
  470. }
  471. case IP_PKTINFO:
  472. if (val)
  473. inet->cmsg_flags |= IP_CMSG_PKTINFO;
  474. else
  475. inet->cmsg_flags &= ~IP_CMSG_PKTINFO;
  476. break;
  477. case IP_RECVTTL:
  478. if (val)
  479. inet->cmsg_flags |= IP_CMSG_TTL;
  480. else
  481. inet->cmsg_flags &= ~IP_CMSG_TTL;
  482. break;
  483. case IP_RECVTOS:
  484. if (val)
  485. inet->cmsg_flags |= IP_CMSG_TOS;
  486. else
  487. inet->cmsg_flags &= ~IP_CMSG_TOS;
  488. break;
  489. case IP_RECVOPTS:
  490. if (val)
  491. inet->cmsg_flags |= IP_CMSG_RECVOPTS;
  492. else
  493. inet->cmsg_flags &= ~IP_CMSG_RECVOPTS;
  494. break;
  495. case IP_RETOPTS:
  496. if (val)
  497. inet->cmsg_flags |= IP_CMSG_RETOPTS;
  498. else
  499. inet->cmsg_flags &= ~IP_CMSG_RETOPTS;
  500. break;
  501. case IP_PASSSEC:
  502. if (val)
  503. inet->cmsg_flags |= IP_CMSG_PASSSEC;
  504. else
  505. inet->cmsg_flags &= ~IP_CMSG_PASSSEC;
  506. break;
  507. case IP_RECVORIGDSTADDR:
  508. if (val)
  509. inet->cmsg_flags |= IP_CMSG_ORIGDSTADDR;
  510. else
  511. inet->cmsg_flags &= ~IP_CMSG_ORIGDSTADDR;
  512. break;
  513. case IP_TOS: /* This sets both TOS and Precedence */
  514. if (sk->sk_type == SOCK_STREAM) {
  515. val &= ~INET_ECN_MASK;
  516. val |= inet->tos & INET_ECN_MASK;
  517. }
  518. if (inet->tos != val) {
  519. inet->tos = val;
  520. sk->sk_priority = rt_tos2priority(val);
  521. sk_dst_reset(sk);
  522. }
  523. break;
  524. case IP_TTL:
  525. if (optlen < 1)
  526. goto e_inval;
  527. if (val != -1 && (val < 1 || val > 255))
  528. goto e_inval;
  529. inet->uc_ttl = val;
  530. break;
  531. case IP_HDRINCL:
  532. if (sk->sk_type != SOCK_RAW) {
  533. err = -ENOPROTOOPT;
  534. break;
  535. }
  536. inet->hdrincl = val ? 1 : 0;
  537. break;
  538. case IP_NODEFRAG:
  539. if (sk->sk_type != SOCK_RAW) {
  540. err = -ENOPROTOOPT;
  541. break;
  542. }
  543. inet->nodefrag = val ? 1 : 0;
  544. break;
  545. case IP_MTU_DISCOVER:
  546. if (val < IP_PMTUDISC_DONT || val > IP_PMTUDISC_PROBE)
  547. goto e_inval;
  548. inet->pmtudisc = val;
  549. break;
  550. case IP_RECVERR:
  551. inet->recverr = !!val;
  552. if (!val)
  553. skb_queue_purge(&sk->sk_error_queue);
  554. break;
  555. case IP_MULTICAST_TTL:
  556. if (sk->sk_type == SOCK_STREAM)
  557. goto e_inval;
  558. if (optlen < 1)
  559. goto e_inval;
  560. if (val == -1)
  561. val = 1;
  562. if (val < 0 || val > 255)
  563. goto e_inval;
  564. inet->mc_ttl = val;
  565. break;
  566. case IP_MULTICAST_LOOP:
  567. if (optlen < 1)
  568. goto e_inval;
  569. inet->mc_loop = !!val;
  570. break;
  571. case IP_UNICAST_IF:
  572. {
  573. struct net_device *dev = NULL;
  574. int ifindex;
  575. if (optlen != sizeof(int))
  576. goto e_inval;
  577. ifindex = (__force int)ntohl((__force __be32)val);
  578. if (ifindex == 0) {
  579. inet->uc_index = 0;
  580. err = 0;
  581. break;
  582. }
  583. dev = dev_get_by_index(sock_net(sk), ifindex);
  584. err = -EADDRNOTAVAIL;
  585. if (!dev)
  586. break;
  587. dev_put(dev);
  588. err = -EINVAL;
  589. if (sk->sk_bound_dev_if)
  590. break;
  591. inet->uc_index = ifindex;
  592. err = 0;
  593. break;
  594. }
  595. case IP_MULTICAST_IF:
  596. {
  597. struct ip_mreqn mreq;
  598. struct net_device *dev = NULL;
  599. if (sk->sk_type == SOCK_STREAM)
  600. goto e_inval;
  601. /*
  602. * Check the arguments are allowable
  603. */
  604. if (optlen < sizeof(struct in_addr))
  605. goto e_inval;
  606. err = -EFAULT;
  607. if (optlen >= sizeof(struct ip_mreqn)) {
  608. if (copy_from_user(&mreq, optval, sizeof(mreq)))
  609. break;
  610. } else {
  611. memset(&mreq, 0, sizeof(mreq));
  612. if (optlen >= sizeof(struct ip_mreq)) {
  613. if (copy_from_user(&mreq, optval,
  614. sizeof(struct ip_mreq)))
  615. break;
  616. } else if (optlen >= sizeof(struct in_addr)) {
  617. if (copy_from_user(&mreq.imr_address, optval,
  618. sizeof(struct in_addr)))
  619. break;
  620. }
  621. }
  622. if (!mreq.imr_ifindex) {
  623. if (mreq.imr_address.s_addr == htonl(INADDR_ANY)) {
  624. inet->mc_index = 0;
  625. inet->mc_addr = 0;
  626. err = 0;
  627. break;
  628. }
  629. dev = ip_dev_find(sock_net(sk), mreq.imr_address.s_addr);
  630. if (dev)
  631. mreq.imr_ifindex = dev->ifindex;
  632. } else
  633. dev = dev_get_by_index(sock_net(sk), mreq.imr_ifindex);
  634. err = -EADDRNOTAVAIL;
  635. if (!dev)
  636. break;
  637. dev_put(dev);
  638. err = -EINVAL;
  639. if (sk->sk_bound_dev_if &&
  640. mreq.imr_ifindex != sk->sk_bound_dev_if)
  641. break;
  642. inet->mc_index = mreq.imr_ifindex;
  643. inet->mc_addr = mreq.imr_address.s_addr;
  644. err = 0;
  645. break;
  646. }
  647. case IP_ADD_MEMBERSHIP:
  648. case IP_DROP_MEMBERSHIP:
  649. {
  650. struct ip_mreqn mreq;
  651. err = -EPROTO;
  652. if (inet_sk(sk)->is_icsk)
  653. break;
  654. if (optlen < sizeof(struct ip_mreq))
  655. goto e_inval;
  656. err = -EFAULT;
  657. if (optlen >= sizeof(struct ip_mreqn)) {
  658. if (copy_from_user(&mreq, optval, sizeof(mreq)))
  659. break;
  660. } else {
  661. memset(&mreq, 0, sizeof(mreq));
  662. if (copy_from_user(&mreq, optval, sizeof(struct ip_mreq)))
  663. break;
  664. }
  665. if (optname == IP_ADD_MEMBERSHIP)
  666. err = ip_mc_join_group(sk, &mreq);
  667. else
  668. err = ip_mc_leave_group(sk, &mreq);
  669. break;
  670. }
  671. case IP_MSFILTER:
  672. {
  673. struct ip_msfilter *msf;
  674. if (optlen < IP_MSFILTER_SIZE(0))
  675. goto e_inval;
  676. if (optlen > sysctl_optmem_max) {
  677. err = -ENOBUFS;
  678. break;
  679. }
  680. msf = kmalloc(optlen, GFP_KERNEL);
  681. if (!msf) {
  682. err = -ENOBUFS;
  683. break;
  684. }
  685. err = -EFAULT;
  686. if (copy_from_user(msf, optval, optlen)) {
  687. kfree(msf);
  688. break;
  689. }
  690. /* numsrc >= (1G-4) overflow in 32 bits */
  691. if (msf->imsf_numsrc >= 0x3ffffffcU ||
  692. msf->imsf_numsrc > sysctl_igmp_max_msf) {
  693. kfree(msf);
  694. err = -ENOBUFS;
  695. break;
  696. }
  697. if (IP_MSFILTER_SIZE(msf->imsf_numsrc) > optlen) {
  698. kfree(msf);
  699. err = -EINVAL;
  700. break;
  701. }
  702. err = ip_mc_msfilter(sk, msf, 0);
  703. kfree(msf);
  704. break;
  705. }
  706. case IP_BLOCK_SOURCE:
  707. case IP_UNBLOCK_SOURCE:
  708. case IP_ADD_SOURCE_MEMBERSHIP:
  709. case IP_DROP_SOURCE_MEMBERSHIP:
  710. {
  711. struct ip_mreq_source mreqs;
  712. int omode, add;
  713. if (optlen != sizeof(struct ip_mreq_source))
  714. goto e_inval;
  715. if (copy_from_user(&mreqs, optval, sizeof(mreqs))) {
  716. err = -EFAULT;
  717. break;
  718. }
  719. if (optname == IP_BLOCK_SOURCE) {
  720. omode = MCAST_EXCLUDE;
  721. add = 1;
  722. } else if (optname == IP_UNBLOCK_SOURCE) {
  723. omode = MCAST_EXCLUDE;
  724. add = 0;
  725. } else if (optname == IP_ADD_SOURCE_MEMBERSHIP) {
  726. struct ip_mreqn mreq;
  727. mreq.imr_multiaddr.s_addr = mreqs.imr_multiaddr;
  728. mreq.imr_address.s_addr = mreqs.imr_interface;
  729. mreq.imr_ifindex = 0;
  730. err = ip_mc_join_group(sk, &mreq);
  731. if (err && err != -EADDRINUSE)
  732. break;
  733. omode = MCAST_INCLUDE;
  734. add = 1;
  735. } else /* IP_DROP_SOURCE_MEMBERSHIP */ {
  736. omode = MCAST_INCLUDE;
  737. add = 0;
  738. }
  739. err = ip_mc_source(add, omode, sk, &mreqs, 0);
  740. break;
  741. }
  742. case MCAST_JOIN_GROUP:
  743. case MCAST_LEAVE_GROUP:
  744. {
  745. struct group_req greq;
  746. struct sockaddr_in *psin;
  747. struct ip_mreqn mreq;
  748. if (optlen < sizeof(struct group_req))
  749. goto e_inval;
  750. err = -EFAULT;
  751. if (copy_from_user(&greq, optval, sizeof(greq)))
  752. break;
  753. psin = (struct sockaddr_in *)&greq.gr_group;
  754. if (psin->sin_family != AF_INET)
  755. goto e_inval;
  756. memset(&mreq, 0, sizeof(mreq));
  757. mreq.imr_multiaddr = psin->sin_addr;
  758. mreq.imr_ifindex = greq.gr_interface;
  759. if (optname == MCAST_JOIN_GROUP)
  760. err = ip_mc_join_group(sk, &mreq);
  761. else
  762. err = ip_mc_leave_group(sk, &mreq);
  763. break;
  764. }
  765. case MCAST_JOIN_SOURCE_GROUP:
  766. case MCAST_LEAVE_SOURCE_GROUP:
  767. case MCAST_BLOCK_SOURCE:
  768. case MCAST_UNBLOCK_SOURCE:
  769. {
  770. struct group_source_req greqs;
  771. struct ip_mreq_source mreqs;
  772. struct sockaddr_in *psin;
  773. int omode, add;
  774. if (optlen != sizeof(struct group_source_req))
  775. goto e_inval;
  776. if (copy_from_user(&greqs, optval, sizeof(greqs))) {
  777. err = -EFAULT;
  778. break;
  779. }
  780. if (greqs.gsr_group.ss_family != AF_INET ||
  781. greqs.gsr_source.ss_family != AF_INET) {
  782. err = -EADDRNOTAVAIL;
  783. break;
  784. }
  785. psin = (struct sockaddr_in *)&greqs.gsr_group;
  786. mreqs.imr_multiaddr = psin->sin_addr.s_addr;
  787. psin = (struct sockaddr_in *)&greqs.gsr_source;
  788. mreqs.imr_sourceaddr = psin->sin_addr.s_addr;
  789. mreqs.imr_interface = 0; /* use index for mc_source */
  790. if (optname == MCAST_BLOCK_SOURCE) {
  791. omode = MCAST_EXCLUDE;
  792. add = 1;
  793. } else if (optname == MCAST_UNBLOCK_SOURCE) {
  794. omode = MCAST_EXCLUDE;
  795. add = 0;
  796. } else if (optname == MCAST_JOIN_SOURCE_GROUP) {
  797. struct ip_mreqn mreq;
  798. psin = (struct sockaddr_in *)&greqs.gsr_group;
  799. mreq.imr_multiaddr = psin->sin_addr;
  800. mreq.imr_address.s_addr = 0;
  801. mreq.imr_ifindex = greqs.gsr_interface;
  802. err = ip_mc_join_group(sk, &mreq);
  803. if (err && err != -EADDRINUSE)
  804. break;
  805. greqs.gsr_interface = mreq.imr_ifindex;
  806. omode = MCAST_INCLUDE;
  807. add = 1;
  808. } else /* MCAST_LEAVE_SOURCE_GROUP */ {
  809. omode = MCAST_INCLUDE;
  810. add = 0;
  811. }
  812. err = ip_mc_source(add, omode, sk, &mreqs,
  813. greqs.gsr_interface);
  814. break;
  815. }
  816. case MCAST_MSFILTER:
  817. {
  818. struct sockaddr_in *psin;
  819. struct ip_msfilter *msf = NULL;
  820. struct group_filter *gsf = NULL;
  821. int msize, i, ifindex;
  822. if (optlen < GROUP_FILTER_SIZE(0))
  823. goto e_inval;
  824. if (optlen > sysctl_optmem_max) {
  825. err = -ENOBUFS;
  826. break;
  827. }
  828. gsf = kmalloc(optlen, GFP_KERNEL);
  829. if (!gsf) {
  830. err = -ENOBUFS;
  831. break;
  832. }
  833. err = -EFAULT;
  834. if (copy_from_user(gsf, optval, optlen))
  835. goto mc_msf_out;
  836. /* numsrc >= (4G-140)/128 overflow in 32 bits */
  837. if (gsf->gf_numsrc >= 0x1ffffff ||
  838. gsf->gf_numsrc > sysctl_igmp_max_msf) {
  839. err = -ENOBUFS;
  840. goto mc_msf_out;
  841. }
  842. if (GROUP_FILTER_SIZE(gsf->gf_numsrc) > optlen) {
  843. err = -EINVAL;
  844. goto mc_msf_out;
  845. }
  846. msize = IP_MSFILTER_SIZE(gsf->gf_numsrc);
  847. msf = kmalloc(msize, GFP_KERNEL);
  848. if (!msf) {
  849. err = -ENOBUFS;
  850. goto mc_msf_out;
  851. }
  852. ifindex = gsf->gf_interface;
  853. psin = (struct sockaddr_in *)&gsf->gf_group;
  854. if (psin->sin_family != AF_INET) {
  855. err = -EADDRNOTAVAIL;
  856. goto mc_msf_out;
  857. }
  858. msf->imsf_multiaddr = psin->sin_addr.s_addr;
  859. msf->imsf_interface = 0;
  860. msf->imsf_fmode = gsf->gf_fmode;
  861. msf->imsf_numsrc = gsf->gf_numsrc;
  862. err = -EADDRNOTAVAIL;
  863. for (i = 0; i < gsf->gf_numsrc; ++i) {
  864. psin = (struct sockaddr_in *)&gsf->gf_slist[i];
  865. if (psin->sin_family != AF_INET)
  866. goto mc_msf_out;
  867. msf->imsf_slist[i] = psin->sin_addr.s_addr;
  868. }
  869. kfree(gsf);
  870. gsf = NULL;
  871. err = ip_mc_msfilter(sk, msf, ifindex);
  872. mc_msf_out:
  873. kfree(msf);
  874. kfree(gsf);
  875. break;
  876. }
  877. case IP_MULTICAST_ALL:
  878. if (optlen < 1)
  879. goto e_inval;
  880. if (val != 0 && val != 1)
  881. goto e_inval;
  882. inet->mc_all = val;
  883. break;
  884. case IP_ROUTER_ALERT:
  885. err = ip_ra_control(sk, val ? 1 : 0, NULL);
  886. break;
  887. case IP_FREEBIND:
  888. if (optlen < 1)
  889. goto e_inval;
  890. inet->freebind = !!val;
  891. break;
  892. case IP_IPSEC_POLICY:
  893. case IP_XFRM_POLICY:
  894. err = -EPERM;
  895. if (!ns_capable(sock_net(sk)->user_ns, CAP_NET_ADMIN))
  896. break;
  897. err = xfrm_user_policy(sk, optname, optval, optlen);
  898. break;
  899. case IP_TRANSPARENT:
  900. if (!!val && !ns_capable(sock_net(sk)->user_ns, CAP_NET_RAW) &&
  901. !ns_capable(sock_net(sk)->user_ns, CAP_NET_ADMIN)) {
  902. err = -EPERM;
  903. break;
  904. }
  905. if (optlen < 1)
  906. goto e_inval;
  907. inet->transparent = !!val;
  908. break;
  909. case IP_MINTTL:
  910. if (optlen < 1)
  911. goto e_inval;
  912. if (val < 0 || val > 255)
  913. goto e_inval;
  914. inet->min_ttl = val;
  915. break;
  916. default:
  917. err = -ENOPROTOOPT;
  918. break;
  919. }
  920. release_sock(sk);
  921. return err;
  922. e_inval:
  923. release_sock(sk);
  924. return -EINVAL;
  925. }
  926. /**
  927. * ipv4_pktinfo_prepare - transfert some info from rtable to skb
  928. * @sk: socket
  929. * @skb: buffer
  930. *
  931. * To support IP_CMSG_PKTINFO option, we store rt_iif and specific
  932. * destination in skb->cb[] before dst drop.
  933. * This way, receiver doesnt make cache line misses to read rtable.
  934. */
  935. void ipv4_pktinfo_prepare(const struct sock *sk, struct sk_buff *skb)
  936. {
  937. struct in_pktinfo *pktinfo = PKTINFO_SKB_CB(skb);
  938. if ((inet_sk(sk)->cmsg_flags & IP_CMSG_PKTINFO) &&
  939. skb_rtable(skb)) {
  940. pktinfo->ipi_ifindex = inet_iif(skb);
  941. pktinfo->ipi_spec_dst.s_addr = fib_compute_spec_dst(skb);
  942. } else {
  943. pktinfo->ipi_ifindex = 0;
  944. pktinfo->ipi_spec_dst.s_addr = 0;
  945. }
  946. skb_dst_drop(skb);
  947. }
  948. int ip_setsockopt(struct sock *sk, int level,
  949. int optname, char __user *optval, unsigned int optlen)
  950. {
  951. int err;
  952. if (level != SOL_IP)
  953. return -ENOPROTOOPT;
  954. err = do_ip_setsockopt(sk, level, optname, optval, optlen);
  955. #ifdef CONFIG_NETFILTER
  956. /* we need to exclude all possible ENOPROTOOPTs except default case */
  957. if (err == -ENOPROTOOPT && optname != IP_HDRINCL &&
  958. optname != IP_IPSEC_POLICY &&
  959. optname != IP_XFRM_POLICY &&
  960. !ip_mroute_opt(optname)) {
  961. lock_sock(sk);
  962. err = nf_setsockopt(sk, PF_INET, optname, optval, optlen);
  963. release_sock(sk);
  964. }
  965. #endif
  966. return err;
  967. }
  968. EXPORT_SYMBOL(ip_setsockopt);
  969. #ifdef CONFIG_COMPAT
  970. int compat_ip_setsockopt(struct sock *sk, int level, int optname,
  971. char __user *optval, unsigned int optlen)
  972. {
  973. int err;
  974. if (level != SOL_IP)
  975. return -ENOPROTOOPT;
  976. if (optname >= MCAST_JOIN_GROUP && optname <= MCAST_MSFILTER)
  977. return compat_mc_setsockopt(sk, level, optname, optval, optlen,
  978. ip_setsockopt);
  979. err = do_ip_setsockopt(sk, level, optname, optval, optlen);
  980. #ifdef CONFIG_NETFILTER
  981. /* we need to exclude all possible ENOPROTOOPTs except default case */
  982. if (err == -ENOPROTOOPT && optname != IP_HDRINCL &&
  983. optname != IP_IPSEC_POLICY &&
  984. optname != IP_XFRM_POLICY &&
  985. !ip_mroute_opt(optname)) {
  986. lock_sock(sk);
  987. err = compat_nf_setsockopt(sk, PF_INET, optname,
  988. optval, optlen);
  989. release_sock(sk);
  990. }
  991. #endif
  992. return err;
  993. }
  994. EXPORT_SYMBOL(compat_ip_setsockopt);
  995. #endif
  996. /*
  997. * Get the options. Note for future reference. The GET of IP options gets
  998. * the _received_ ones. The set sets the _sent_ ones.
  999. */
  1000. static int do_ip_getsockopt(struct sock *sk, int level, int optname,
  1001. char __user *optval, int __user *optlen, unsigned int flags)
  1002. {
  1003. struct inet_sock *inet = inet_sk(sk);
  1004. int val;
  1005. int len;
  1006. if (level != SOL_IP)
  1007. return -EOPNOTSUPP;
  1008. if (ip_mroute_opt(optname))
  1009. return ip_mroute_getsockopt(sk, optname, optval, optlen);
  1010. if (get_user(len, optlen))
  1011. return -EFAULT;
  1012. if (len < 0)
  1013. return -EINVAL;
  1014. lock_sock(sk);
  1015. switch (optname) {
  1016. case IP_OPTIONS:
  1017. {
  1018. unsigned char optbuf[sizeof(struct ip_options)+40];
  1019. struct ip_options *opt = (struct ip_options *)optbuf;
  1020. struct ip_options_rcu *inet_opt;
  1021. inet_opt = rcu_dereference_protected(inet->inet_opt,
  1022. sock_owned_by_user(sk));
  1023. opt->optlen = 0;
  1024. if (inet_opt)
  1025. memcpy(optbuf, &inet_opt->opt,
  1026. sizeof(struct ip_options) +
  1027. inet_opt->opt.optlen);
  1028. release_sock(sk);
  1029. if (opt->optlen == 0)
  1030. return put_user(0, optlen);
  1031. ip_options_undo(opt);
  1032. len = min_t(unsigned int, len, opt->optlen);
  1033. if (put_user(len, optlen))
  1034. return -EFAULT;
  1035. if (copy_to_user(optval, opt->__data, len))
  1036. return -EFAULT;
  1037. return 0;
  1038. }
  1039. case IP_PKTINFO:
  1040. val = (inet->cmsg_flags & IP_CMSG_PKTINFO) != 0;
  1041. break;
  1042. case IP_RECVTTL:
  1043. val = (inet->cmsg_flags & IP_CMSG_TTL) != 0;
  1044. break;
  1045. case IP_RECVTOS:
  1046. val = (inet->cmsg_flags & IP_CMSG_TOS) != 0;
  1047. break;
  1048. case IP_RECVOPTS:
  1049. val = (inet->cmsg_flags & IP_CMSG_RECVOPTS) != 0;
  1050. break;
  1051. case IP_RETOPTS:
  1052. val = (inet->cmsg_flags & IP_CMSG_RETOPTS) != 0;
  1053. break;
  1054. case IP_PASSSEC:
  1055. val = (inet->cmsg_flags & IP_CMSG_PASSSEC) != 0;
  1056. break;
  1057. case IP_RECVORIGDSTADDR:
  1058. val = (inet->cmsg_flags & IP_CMSG_ORIGDSTADDR) != 0;
  1059. break;
  1060. case IP_TOS:
  1061. val = inet->tos;
  1062. break;
  1063. case IP_TTL:
  1064. val = (inet->uc_ttl == -1 ?
  1065. sysctl_ip_default_ttl :
  1066. inet->uc_ttl);
  1067. break;
  1068. case IP_HDRINCL:
  1069. val = inet->hdrincl;
  1070. break;
  1071. case IP_NODEFRAG:
  1072. val = inet->nodefrag;
  1073. break;
  1074. case IP_MTU_DISCOVER:
  1075. val = inet->pmtudisc;
  1076. break;
  1077. case IP_MTU:
  1078. {
  1079. struct dst_entry *dst;
  1080. val = 0;
  1081. dst = sk_dst_get(sk);
  1082. if (dst) {
  1083. val = dst_mtu(dst);
  1084. dst_release(dst);
  1085. }
  1086. if (!val) {
  1087. release_sock(sk);
  1088. return -ENOTCONN;
  1089. }
  1090. break;
  1091. }
  1092. case IP_RECVERR:
  1093. val = inet->recverr;
  1094. break;
  1095. case IP_MULTICAST_TTL:
  1096. val = inet->mc_ttl;
  1097. break;
  1098. case IP_MULTICAST_LOOP:
  1099. val = inet->mc_loop;
  1100. break;
  1101. case IP_UNICAST_IF:
  1102. val = (__force int)htonl((__u32) inet->uc_index);
  1103. break;
  1104. case IP_MULTICAST_IF:
  1105. {
  1106. struct in_addr addr;
  1107. len = min_t(unsigned int, len, sizeof(struct in_addr));
  1108. addr.s_addr = inet->mc_addr;
  1109. release_sock(sk);
  1110. if (put_user(len, optlen))
  1111. return -EFAULT;
  1112. if (copy_to_user(optval, &addr, len))
  1113. return -EFAULT;
  1114. return 0;
  1115. }
  1116. case IP_MSFILTER:
  1117. {
  1118. struct ip_msfilter msf;
  1119. int err;
  1120. if (len < IP_MSFILTER_SIZE(0)) {
  1121. release_sock(sk);
  1122. return -EINVAL;
  1123. }
  1124. if (copy_from_user(&msf, optval, IP_MSFILTER_SIZE(0))) {
  1125. release_sock(sk);
  1126. return -EFAULT;
  1127. }
  1128. err = ip_mc_msfget(sk, &msf,
  1129. (struct ip_msfilter __user *)optval, optlen);
  1130. release_sock(sk);
  1131. return err;
  1132. }
  1133. case MCAST_MSFILTER:
  1134. {
  1135. struct group_filter gsf;
  1136. int err;
  1137. if (len < GROUP_FILTER_SIZE(0)) {
  1138. release_sock(sk);
  1139. return -EINVAL;
  1140. }
  1141. if (copy_from_user(&gsf, optval, GROUP_FILTER_SIZE(0))) {
  1142. release_sock(sk);
  1143. return -EFAULT;
  1144. }
  1145. err = ip_mc_gsfget(sk, &gsf,
  1146. (struct group_filter __user *)optval,
  1147. optlen);
  1148. release_sock(sk);
  1149. return err;
  1150. }
  1151. case IP_MULTICAST_ALL:
  1152. val = inet->mc_all;
  1153. break;
  1154. case IP_PKTOPTIONS:
  1155. {
  1156. struct msghdr msg;
  1157. release_sock(sk);
  1158. if (sk->sk_type != SOCK_STREAM)
  1159. return -ENOPROTOOPT;
  1160. msg.msg_control = optval;
  1161. msg.msg_controllen = len;
  1162. msg.msg_flags = flags;
  1163. if (inet->cmsg_flags & IP_CMSG_PKTINFO) {
  1164. struct in_pktinfo info;
  1165. info.ipi_addr.s_addr = inet->inet_rcv_saddr;
  1166. info.ipi_spec_dst.s_addr = inet->inet_rcv_saddr;
  1167. info.ipi_ifindex = inet->mc_index;
  1168. put_cmsg(&msg, SOL_IP, IP_PKTINFO, sizeof(info), &info);
  1169. }
  1170. if (inet->cmsg_flags & IP_CMSG_TTL) {
  1171. int hlim = inet->mc_ttl;
  1172. put_cmsg(&msg, SOL_IP, IP_TTL, sizeof(hlim), &hlim);
  1173. }
  1174. if (inet->cmsg_flags & IP_CMSG_TOS) {
  1175. int tos = inet->rcv_tos;
  1176. put_cmsg(&msg, SOL_IP, IP_TOS, sizeof(tos), &tos);
  1177. }
  1178. len -= msg.msg_controllen;
  1179. return put_user(len, optlen);
  1180. }
  1181. case IP_FREEBIND:
  1182. val = inet->freebind;
  1183. break;
  1184. case IP_TRANSPARENT:
  1185. val = inet->transparent;
  1186. break;
  1187. case IP_MINTTL:
  1188. val = inet->min_ttl;
  1189. break;
  1190. default:
  1191. release_sock(sk);
  1192. return -ENOPROTOOPT;
  1193. }
  1194. release_sock(sk);
  1195. if (len < sizeof(int) && len > 0 && val >= 0 && val <= 255) {
  1196. unsigned char ucval = (unsigned char)val;
  1197. len = 1;
  1198. if (put_user(len, optlen))
  1199. return -EFAULT;
  1200. if (copy_to_user(optval, &ucval, 1))
  1201. return -EFAULT;
  1202. } else {
  1203. len = min_t(unsigned int, sizeof(int), len);
  1204. if (put_user(len, optlen))
  1205. return -EFAULT;
  1206. if (copy_to_user(optval, &val, len))
  1207. return -EFAULT;
  1208. }
  1209. return 0;
  1210. }
  1211. int ip_getsockopt(struct sock *sk, int level,
  1212. int optname, char __user *optval, int __user *optlen)
  1213. {
  1214. int err;
  1215. err = do_ip_getsockopt(sk, level, optname, optval, optlen, 0);
  1216. #ifdef CONFIG_NETFILTER
  1217. /* we need to exclude all possible ENOPROTOOPTs except default case */
  1218. if (err == -ENOPROTOOPT && optname != IP_PKTOPTIONS &&
  1219. !ip_mroute_opt(optname)) {
  1220. int len;
  1221. if (get_user(len, optlen))
  1222. return -EFAULT;
  1223. lock_sock(sk);
  1224. err = nf_getsockopt(sk, PF_INET, optname, optval,
  1225. &len);
  1226. release_sock(sk);
  1227. if (err >= 0)
  1228. err = put_user(len, optlen);
  1229. return err;
  1230. }
  1231. #endif
  1232. return err;
  1233. }
  1234. EXPORT_SYMBOL(ip_getsockopt);
  1235. #ifdef CONFIG_COMPAT
  1236. int compat_ip_getsockopt(struct sock *sk, int level, int optname,
  1237. char __user *optval, int __user *optlen)
  1238. {
  1239. int err;
  1240. if (optname == MCAST_MSFILTER)
  1241. return compat_mc_getsockopt(sk, level, optname, optval, optlen,
  1242. ip_getsockopt);
  1243. err = do_ip_getsockopt(sk, level, optname, optval, optlen,
  1244. MSG_CMSG_COMPAT);
  1245. #ifdef CONFIG_NETFILTER
  1246. /* we need to exclude all possible ENOPROTOOPTs except default case */
  1247. if (err == -ENOPROTOOPT && optname != IP_PKTOPTIONS &&
  1248. !ip_mroute_opt(optname)) {
  1249. int len;
  1250. if (get_user(len, optlen))
  1251. return -EFAULT;
  1252. lock_sock(sk);
  1253. err = compat_nf_getsockopt(sk, PF_INET, optname, optval, &len);
  1254. release_sock(sk);
  1255. if (err >= 0)
  1256. err = put_user(len, optlen);
  1257. return err;
  1258. }
  1259. #endif
  1260. return err;
  1261. }
  1262. EXPORT_SYMBOL(compat_ip_getsockopt);
  1263. #endif