udp.c 37 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496
  1. /*
  2. * UDP over IPv6
  3. * Linux INET6 implementation
  4. *
  5. * Authors:
  6. * Pedro Roque <roque@di.fc.ul.pt>
  7. *
  8. * Based on linux/ipv4/udp.c
  9. *
  10. * Fixes:
  11. * Hideaki YOSHIFUJI : sin6_scope_id support
  12. * YOSHIFUJI Hideaki @USAGI and: Support IPV6_V6ONLY socket option, which
  13. * Alexey Kuznetsov allow both IPv4 and IPv6 sockets to bind
  14. * a single port at the same time.
  15. * Kazunori MIYAZAWA @USAGI: change process style to use ip6_append_data
  16. * YOSHIFUJI Hideaki @USAGI: convert /proc/net/udp6 to seq_file.
  17. *
  18. * This program is free software; you can redistribute it and/or
  19. * modify it under the terms of the GNU General Public License
  20. * as published by the Free Software Foundation; either version
  21. * 2 of the License, or (at your option) any later version.
  22. */
  23. #include <linux/errno.h>
  24. #include <linux/types.h>
  25. #include <linux/socket.h>
  26. #include <linux/sockios.h>
  27. #include <linux/net.h>
  28. #include <linux/in6.h>
  29. #include <linux/netdevice.h>
  30. #include <linux/if_arp.h>
  31. #include <linux/ipv6.h>
  32. #include <linux/icmpv6.h>
  33. #include <linux/init.h>
  34. #include <linux/module.h>
  35. #include <linux/skbuff.h>
  36. #include <linux/slab.h>
  37. #include <asm/uaccess.h>
  38. #include <net/ndisc.h>
  39. #include <net/protocol.h>
  40. #include <net/transp_v6.h>
  41. #include <net/ip6_route.h>
  42. #include <net/raw.h>
  43. #include <net/tcp_states.h>
  44. #include <net/ip6_checksum.h>
  45. #include <net/xfrm.h>
  46. #include <linux/proc_fs.h>
  47. #include <linux/seq_file.h>
  48. #include "udp_impl.h"
  49. int ipv6_rcv_saddr_equal(const struct sock *sk, const struct sock *sk2)
  50. {
  51. const struct in6_addr *sk_rcv_saddr6 = &inet6_sk(sk)->rcv_saddr;
  52. const struct in6_addr *sk2_rcv_saddr6 = inet6_rcv_saddr(sk2);
  53. __be32 sk1_rcv_saddr = inet_sk(sk)->inet_rcv_saddr;
  54. __be32 sk2_rcv_saddr = inet_rcv_saddr(sk2);
  55. int sk_ipv6only = ipv6_only_sock(sk);
  56. int sk2_ipv6only = inet_v6_ipv6only(sk2);
  57. int addr_type = ipv6_addr_type(sk_rcv_saddr6);
  58. int addr_type2 = sk2_rcv_saddr6 ? ipv6_addr_type(sk2_rcv_saddr6) : IPV6_ADDR_MAPPED;
  59. /* if both are mapped, treat as IPv4 */
  60. if (addr_type == IPV6_ADDR_MAPPED && addr_type2 == IPV6_ADDR_MAPPED)
  61. return (!sk2_ipv6only &&
  62. (!sk1_rcv_saddr || !sk2_rcv_saddr ||
  63. sk1_rcv_saddr == sk2_rcv_saddr));
  64. if (addr_type2 == IPV6_ADDR_ANY &&
  65. !(sk2_ipv6only && addr_type == IPV6_ADDR_MAPPED))
  66. return 1;
  67. if (addr_type == IPV6_ADDR_ANY &&
  68. !(sk_ipv6only && addr_type2 == IPV6_ADDR_MAPPED))
  69. return 1;
  70. if (sk2_rcv_saddr6 &&
  71. ipv6_addr_equal(sk_rcv_saddr6, sk2_rcv_saddr6))
  72. return 1;
  73. return 0;
  74. }
  75. static unsigned int udp6_portaddr_hash(struct net *net,
  76. const struct in6_addr *addr6,
  77. unsigned int port)
  78. {
  79. unsigned int hash, mix = net_hash_mix(net);
  80. if (ipv6_addr_any(addr6))
  81. hash = jhash_1word(0, mix);
  82. else if (ipv6_addr_v4mapped(addr6))
  83. hash = jhash_1word((__force u32)addr6->s6_addr32[3], mix);
  84. else
  85. hash = jhash2((__force u32 *)addr6->s6_addr32, 4, mix);
  86. return hash ^ port;
  87. }
  88. int udp_v6_get_port(struct sock *sk, unsigned short snum)
  89. {
  90. unsigned int hash2_nulladdr =
  91. udp6_portaddr_hash(sock_net(sk), &in6addr_any, snum);
  92. unsigned int hash2_partial =
  93. udp6_portaddr_hash(sock_net(sk), &inet6_sk(sk)->rcv_saddr, 0);
  94. /* precompute partial secondary hash */
  95. udp_sk(sk)->udp_portaddr_hash = hash2_partial;
  96. return udp_lib_get_port(sk, snum, ipv6_rcv_saddr_equal, hash2_nulladdr);
  97. }
  98. static inline int compute_score(struct sock *sk, struct net *net,
  99. unsigned short hnum,
  100. struct in6_addr *saddr, __be16 sport,
  101. struct in6_addr *daddr, __be16 dport,
  102. int dif)
  103. {
  104. int score = -1;
  105. if (net_eq(sock_net(sk), net) && udp_sk(sk)->udp_port_hash == hnum &&
  106. sk->sk_family == PF_INET6) {
  107. struct ipv6_pinfo *np = inet6_sk(sk);
  108. struct inet_sock *inet = inet_sk(sk);
  109. score = 0;
  110. if (inet->inet_dport) {
  111. if (inet->inet_dport != sport)
  112. return -1;
  113. score++;
  114. }
  115. if (!ipv6_addr_any(&np->rcv_saddr)) {
  116. if (!ipv6_addr_equal(&np->rcv_saddr, daddr))
  117. return -1;
  118. score++;
  119. }
  120. if (!ipv6_addr_any(&np->daddr)) {
  121. if (!ipv6_addr_equal(&np->daddr, saddr))
  122. return -1;
  123. score++;
  124. }
  125. if (sk->sk_bound_dev_if) {
  126. if (sk->sk_bound_dev_if != dif)
  127. return -1;
  128. score++;
  129. }
  130. }
  131. return score;
  132. }
  133. #define SCORE2_MAX (1 + 1 + 1)
  134. static inline int compute_score2(struct sock *sk, struct net *net,
  135. const struct in6_addr *saddr, __be16 sport,
  136. const struct in6_addr *daddr, unsigned short hnum,
  137. int dif)
  138. {
  139. int score = -1;
  140. if (net_eq(sock_net(sk), net) && udp_sk(sk)->udp_port_hash == hnum &&
  141. sk->sk_family == PF_INET6) {
  142. struct ipv6_pinfo *np = inet6_sk(sk);
  143. struct inet_sock *inet = inet_sk(sk);
  144. if (!ipv6_addr_equal(&np->rcv_saddr, daddr))
  145. return -1;
  146. score = 0;
  147. if (inet->inet_dport) {
  148. if (inet->inet_dport != sport)
  149. return -1;
  150. score++;
  151. }
  152. if (!ipv6_addr_any(&np->daddr)) {
  153. if (!ipv6_addr_equal(&np->daddr, saddr))
  154. return -1;
  155. score++;
  156. }
  157. if (sk->sk_bound_dev_if) {
  158. if (sk->sk_bound_dev_if != dif)
  159. return -1;
  160. score++;
  161. }
  162. }
  163. return score;
  164. }
  165. /* called with read_rcu_lock() */
  166. static struct sock *udp6_lib_lookup2(struct net *net,
  167. const struct in6_addr *saddr, __be16 sport,
  168. const struct in6_addr *daddr, unsigned int hnum, int dif,
  169. struct udp_hslot *hslot2, unsigned int slot2)
  170. {
  171. struct sock *sk, *result;
  172. struct hlist_nulls_node *node;
  173. int score, badness;
  174. begin:
  175. result = NULL;
  176. badness = -1;
  177. udp_portaddr_for_each_entry_rcu(sk, node, &hslot2->head) {
  178. score = compute_score2(sk, net, saddr, sport,
  179. daddr, hnum, dif);
  180. if (score > badness) {
  181. result = sk;
  182. badness = score;
  183. if (score == SCORE2_MAX)
  184. goto exact_match;
  185. }
  186. }
  187. /*
  188. * if the nulls value we got at the end of this lookup is
  189. * not the expected one, we must restart lookup.
  190. * We probably met an item that was moved to another chain.
  191. */
  192. if (get_nulls_value(node) != slot2)
  193. goto begin;
  194. if (result) {
  195. exact_match:
  196. if (unlikely(!atomic_inc_not_zero(&result->sk_refcnt)))
  197. result = NULL;
  198. else if (unlikely(compute_score2(result, net, saddr, sport,
  199. daddr, hnum, dif) < badness)) {
  200. sock_put(result);
  201. goto begin;
  202. }
  203. }
  204. return result;
  205. }
  206. static struct sock *__udp6_lib_lookup(struct net *net,
  207. struct in6_addr *saddr, __be16 sport,
  208. struct in6_addr *daddr, __be16 dport,
  209. int dif, struct udp_table *udptable)
  210. {
  211. struct sock *sk, *result;
  212. struct hlist_nulls_node *node;
  213. unsigned short hnum = ntohs(dport);
  214. unsigned int hash2, slot2, slot = udp_hashfn(net, hnum, udptable->mask);
  215. struct udp_hslot *hslot2, *hslot = &udptable->hash[slot];
  216. int score, badness;
  217. rcu_read_lock();
  218. if (hslot->count > 10) {
  219. hash2 = udp6_portaddr_hash(net, daddr, hnum);
  220. slot2 = hash2 & udptable->mask;
  221. hslot2 = &udptable->hash2[slot2];
  222. if (hslot->count < hslot2->count)
  223. goto begin;
  224. result = udp6_lib_lookup2(net, saddr, sport,
  225. daddr, hnum, dif,
  226. hslot2, slot2);
  227. if (!result) {
  228. hash2 = udp6_portaddr_hash(net, &in6addr_any, hnum);
  229. slot2 = hash2 & udptable->mask;
  230. hslot2 = &udptable->hash2[slot2];
  231. if (hslot->count < hslot2->count)
  232. goto begin;
  233. result = udp6_lib_lookup2(net, saddr, sport,
  234. &in6addr_any, hnum, dif,
  235. hslot2, slot2);
  236. }
  237. rcu_read_unlock();
  238. return result;
  239. }
  240. begin:
  241. result = NULL;
  242. badness = -1;
  243. sk_nulls_for_each_rcu(sk, node, &hslot->head) {
  244. score = compute_score(sk, net, hnum, saddr, sport, daddr, dport, dif);
  245. if (score > badness) {
  246. result = sk;
  247. badness = score;
  248. }
  249. }
  250. /*
  251. * if the nulls value we got at the end of this lookup is
  252. * not the expected one, we must restart lookup.
  253. * We probably met an item that was moved to another chain.
  254. */
  255. if (get_nulls_value(node) != slot)
  256. goto begin;
  257. if (result) {
  258. if (unlikely(!atomic_inc_not_zero(&result->sk_refcnt)))
  259. result = NULL;
  260. else if (unlikely(compute_score(result, net, hnum, saddr, sport,
  261. daddr, dport, dif) < badness)) {
  262. sock_put(result);
  263. goto begin;
  264. }
  265. }
  266. rcu_read_unlock();
  267. return result;
  268. }
  269. static struct sock *__udp6_lib_lookup_skb(struct sk_buff *skb,
  270. __be16 sport, __be16 dport,
  271. struct udp_table *udptable)
  272. {
  273. struct sock *sk;
  274. struct ipv6hdr *iph = ipv6_hdr(skb);
  275. if (unlikely(sk = skb_steal_sock(skb)))
  276. return sk;
  277. return __udp6_lib_lookup(dev_net(skb_dst(skb)->dev), &iph->saddr, sport,
  278. &iph->daddr, dport, inet6_iif(skb),
  279. udptable);
  280. }
  281. /*
  282. * This should be easy, if there is something there we
  283. * return it, otherwise we block.
  284. */
  285. int udpv6_recvmsg(struct kiocb *iocb, struct sock *sk,
  286. struct msghdr *msg, size_t len,
  287. int noblock, int flags, int *addr_len)
  288. {
  289. struct ipv6_pinfo *np = inet6_sk(sk);
  290. struct inet_sock *inet = inet_sk(sk);
  291. struct sk_buff *skb;
  292. unsigned int ulen;
  293. int peeked;
  294. int err;
  295. int is_udplite = IS_UDPLITE(sk);
  296. int is_udp4;
  297. if (addr_len)
  298. *addr_len=sizeof(struct sockaddr_in6);
  299. if (flags & MSG_ERRQUEUE)
  300. return ipv6_recv_error(sk, msg, len);
  301. if (np->rxpmtu && np->rxopt.bits.rxpmtu)
  302. return ipv6_recv_rxpmtu(sk, msg, len);
  303. try_again:
  304. skb = __skb_recv_datagram(sk, flags | (noblock ? MSG_DONTWAIT : 0),
  305. &peeked, &err);
  306. if (!skb)
  307. goto out;
  308. ulen = skb->len - sizeof(struct udphdr);
  309. if (len > ulen)
  310. len = ulen;
  311. else if (len < ulen)
  312. msg->msg_flags |= MSG_TRUNC;
  313. is_udp4 = (skb->protocol == htons(ETH_P_IP));
  314. /*
  315. * If checksum is needed at all, try to do it while copying the
  316. * data. If the data is truncated, or if we only want a partial
  317. * coverage checksum (UDP-Lite), do it before the copy.
  318. */
  319. if (len < ulen || UDP_SKB_CB(skb)->partial_cov) {
  320. if (udp_lib_checksum_complete(skb))
  321. goto csum_copy_err;
  322. }
  323. if (skb_csum_unnecessary(skb))
  324. err = skb_copy_datagram_iovec(skb, sizeof(struct udphdr),
  325. msg->msg_iov,len);
  326. else {
  327. err = skb_copy_and_csum_datagram_iovec(skb, sizeof(struct udphdr), msg->msg_iov);
  328. if (err == -EINVAL)
  329. goto csum_copy_err;
  330. }
  331. if (err)
  332. goto out_free;
  333. if (!peeked) {
  334. if (is_udp4)
  335. UDP_INC_STATS_USER(sock_net(sk),
  336. UDP_MIB_INDATAGRAMS, is_udplite);
  337. else
  338. UDP6_INC_STATS_USER(sock_net(sk),
  339. UDP_MIB_INDATAGRAMS, is_udplite);
  340. }
  341. sock_recv_ts_and_drops(msg, sk, skb);
  342. /* Copy the address. */
  343. if (msg->msg_name) {
  344. struct sockaddr_in6 *sin6;
  345. sin6 = (struct sockaddr_in6 *) msg->msg_name;
  346. sin6->sin6_family = AF_INET6;
  347. sin6->sin6_port = udp_hdr(skb)->source;
  348. sin6->sin6_flowinfo = 0;
  349. sin6->sin6_scope_id = 0;
  350. if (is_udp4)
  351. ipv6_addr_set_v4mapped(ip_hdr(skb)->saddr,
  352. &sin6->sin6_addr);
  353. else {
  354. ipv6_addr_copy(&sin6->sin6_addr,
  355. &ipv6_hdr(skb)->saddr);
  356. if (ipv6_addr_type(&sin6->sin6_addr) & IPV6_ADDR_LINKLOCAL)
  357. sin6->sin6_scope_id = IP6CB(skb)->iif;
  358. }
  359. }
  360. if (is_udp4) {
  361. if (inet->cmsg_flags)
  362. ip_cmsg_recv(msg, skb);
  363. } else {
  364. if (np->rxopt.all)
  365. datagram_recv_ctl(sk, msg, skb);
  366. }
  367. err = len;
  368. if (flags & MSG_TRUNC)
  369. err = ulen;
  370. out_free:
  371. skb_free_datagram_locked(sk, skb);
  372. out:
  373. return err;
  374. csum_copy_err:
  375. lock_sock_bh(sk);
  376. if (!skb_kill_datagram(sk, skb, flags)) {
  377. if (is_udp4)
  378. UDP_INC_STATS_USER(sock_net(sk),
  379. UDP_MIB_INERRORS, is_udplite);
  380. else
  381. UDP6_INC_STATS_USER(sock_net(sk),
  382. UDP_MIB_INERRORS, is_udplite);
  383. }
  384. unlock_sock_bh(sk);
  385. if (flags & MSG_DONTWAIT)
  386. return -EAGAIN;
  387. goto try_again;
  388. }
  389. void __udp6_lib_err(struct sk_buff *skb, struct inet6_skb_parm *opt,
  390. u8 type, u8 code, int offset, __be32 info,
  391. struct udp_table *udptable)
  392. {
  393. struct ipv6_pinfo *np;
  394. struct ipv6hdr *hdr = (struct ipv6hdr*)skb->data;
  395. struct in6_addr *saddr = &hdr->saddr;
  396. struct in6_addr *daddr = &hdr->daddr;
  397. struct udphdr *uh = (struct udphdr*)(skb->data+offset);
  398. struct sock *sk;
  399. int err;
  400. sk = __udp6_lib_lookup(dev_net(skb->dev), daddr, uh->dest,
  401. saddr, uh->source, inet6_iif(skb), udptable);
  402. if (sk == NULL)
  403. return;
  404. np = inet6_sk(sk);
  405. if (!icmpv6_err_convert(type, code, &err) && !np->recverr)
  406. goto out;
  407. if (sk->sk_state != TCP_ESTABLISHED && !np->recverr)
  408. goto out;
  409. if (np->recverr)
  410. ipv6_icmp_error(sk, skb, err, uh->dest, ntohl(info), (u8 *)(uh+1));
  411. sk->sk_err = err;
  412. sk->sk_error_report(sk);
  413. out:
  414. sock_put(sk);
  415. }
  416. static __inline__ void udpv6_err(struct sk_buff *skb,
  417. struct inet6_skb_parm *opt, u8 type,
  418. u8 code, int offset, __be32 info )
  419. {
  420. __udp6_lib_err(skb, opt, type, code, offset, info, &udp_table);
  421. }
  422. int udpv6_queue_rcv_skb(struct sock * sk, struct sk_buff *skb)
  423. {
  424. struct udp_sock *up = udp_sk(sk);
  425. int rc;
  426. int is_udplite = IS_UDPLITE(sk);
  427. if (!xfrm6_policy_check(sk, XFRM_POLICY_IN, skb))
  428. goto drop;
  429. /*
  430. * UDP-Lite specific tests, ignored on UDP sockets (see net/ipv4/udp.c).
  431. */
  432. if ((is_udplite & UDPLITE_RECV_CC) && UDP_SKB_CB(skb)->partial_cov) {
  433. if (up->pcrlen == 0) { /* full coverage was set */
  434. LIMIT_NETDEBUG(KERN_WARNING "UDPLITE6: partial coverage"
  435. " %d while full coverage %d requested\n",
  436. UDP_SKB_CB(skb)->cscov, skb->len);
  437. goto drop;
  438. }
  439. if (UDP_SKB_CB(skb)->cscov < up->pcrlen) {
  440. LIMIT_NETDEBUG(KERN_WARNING "UDPLITE6: coverage %d "
  441. "too small, need min %d\n",
  442. UDP_SKB_CB(skb)->cscov, up->pcrlen);
  443. goto drop;
  444. }
  445. }
  446. if (sk->sk_filter) {
  447. if (udp_lib_checksum_complete(skb))
  448. goto drop;
  449. }
  450. if ((rc = ip_queue_rcv_skb(sk, skb)) < 0) {
  451. /* Note that an ENOMEM error is charged twice */
  452. if (rc == -ENOMEM)
  453. UDP6_INC_STATS_BH(sock_net(sk),
  454. UDP_MIB_RCVBUFERRORS, is_udplite);
  455. goto drop_no_sk_drops_inc;
  456. }
  457. return 0;
  458. drop:
  459. atomic_inc(&sk->sk_drops);
  460. drop_no_sk_drops_inc:
  461. UDP6_INC_STATS_BH(sock_net(sk), UDP_MIB_INERRORS, is_udplite);
  462. kfree_skb(skb);
  463. return -1;
  464. }
  465. static struct sock *udp_v6_mcast_next(struct net *net, struct sock *sk,
  466. __be16 loc_port, struct in6_addr *loc_addr,
  467. __be16 rmt_port, struct in6_addr *rmt_addr,
  468. int dif)
  469. {
  470. struct hlist_nulls_node *node;
  471. struct sock *s = sk;
  472. unsigned short num = ntohs(loc_port);
  473. sk_nulls_for_each_from(s, node) {
  474. struct inet_sock *inet = inet_sk(s);
  475. if (!net_eq(sock_net(s), net))
  476. continue;
  477. if (udp_sk(s)->udp_port_hash == num &&
  478. s->sk_family == PF_INET6) {
  479. struct ipv6_pinfo *np = inet6_sk(s);
  480. if (inet->inet_dport) {
  481. if (inet->inet_dport != rmt_port)
  482. continue;
  483. }
  484. if (!ipv6_addr_any(&np->daddr) &&
  485. !ipv6_addr_equal(&np->daddr, rmt_addr))
  486. continue;
  487. if (s->sk_bound_dev_if && s->sk_bound_dev_if != dif)
  488. continue;
  489. if (!ipv6_addr_any(&np->rcv_saddr)) {
  490. if (!ipv6_addr_equal(&np->rcv_saddr, loc_addr))
  491. continue;
  492. }
  493. if (!inet6_mc_check(s, loc_addr, rmt_addr))
  494. continue;
  495. return s;
  496. }
  497. }
  498. return NULL;
  499. }
  500. static void flush_stack(struct sock **stack, unsigned int count,
  501. struct sk_buff *skb, unsigned int final)
  502. {
  503. unsigned int i;
  504. struct sock *sk;
  505. struct sk_buff *skb1;
  506. for (i = 0; i < count; i++) {
  507. skb1 = (i == final) ? skb : skb_clone(skb, GFP_ATOMIC);
  508. sk = stack[i];
  509. if (skb1) {
  510. if (sk_rcvqueues_full(sk, skb)) {
  511. kfree_skb(skb1);
  512. goto drop;
  513. }
  514. bh_lock_sock(sk);
  515. if (!sock_owned_by_user(sk))
  516. udpv6_queue_rcv_skb(sk, skb1);
  517. else if (sk_add_backlog(sk, skb1)) {
  518. kfree_skb(skb1);
  519. bh_unlock_sock(sk);
  520. goto drop;
  521. }
  522. bh_unlock_sock(sk);
  523. continue;
  524. }
  525. drop:
  526. atomic_inc(&sk->sk_drops);
  527. UDP6_INC_STATS_BH(sock_net(sk),
  528. UDP_MIB_RCVBUFERRORS, IS_UDPLITE(sk));
  529. UDP6_INC_STATS_BH(sock_net(sk),
  530. UDP_MIB_INERRORS, IS_UDPLITE(sk));
  531. }
  532. }
  533. /*
  534. * Note: called only from the BH handler context,
  535. * so we don't need to lock the hashes.
  536. */
  537. static int __udp6_lib_mcast_deliver(struct net *net, struct sk_buff *skb,
  538. struct in6_addr *saddr, struct in6_addr *daddr,
  539. struct udp_table *udptable)
  540. {
  541. struct sock *sk, *stack[256 / sizeof(struct sock *)];
  542. const struct udphdr *uh = udp_hdr(skb);
  543. struct udp_hslot *hslot = udp_hashslot(udptable, net, ntohs(uh->dest));
  544. int dif;
  545. unsigned int i, count = 0;
  546. spin_lock(&hslot->lock);
  547. sk = sk_nulls_head(&hslot->head);
  548. dif = inet6_iif(skb);
  549. sk = udp_v6_mcast_next(net, sk, uh->dest, daddr, uh->source, saddr, dif);
  550. while (sk) {
  551. stack[count++] = sk;
  552. sk = udp_v6_mcast_next(net, sk_nulls_next(sk), uh->dest, daddr,
  553. uh->source, saddr, dif);
  554. if (unlikely(count == ARRAY_SIZE(stack))) {
  555. if (!sk)
  556. break;
  557. flush_stack(stack, count, skb, ~0);
  558. count = 0;
  559. }
  560. }
  561. /*
  562. * before releasing the lock, we must take reference on sockets
  563. */
  564. for (i = 0; i < count; i++)
  565. sock_hold(stack[i]);
  566. spin_unlock(&hslot->lock);
  567. if (count) {
  568. flush_stack(stack, count, skb, count - 1);
  569. for (i = 0; i < count; i++)
  570. sock_put(stack[i]);
  571. } else {
  572. kfree_skb(skb);
  573. }
  574. return 0;
  575. }
  576. static inline int udp6_csum_init(struct sk_buff *skb, struct udphdr *uh,
  577. int proto)
  578. {
  579. int err;
  580. UDP_SKB_CB(skb)->partial_cov = 0;
  581. UDP_SKB_CB(skb)->cscov = skb->len;
  582. if (proto == IPPROTO_UDPLITE) {
  583. err = udplite_checksum_init(skb, uh);
  584. if (err)
  585. return err;
  586. }
  587. if (uh->check == 0) {
  588. /* RFC 2460 section 8.1 says that we SHOULD log
  589. this error. Well, it is reasonable.
  590. */
  591. LIMIT_NETDEBUG(KERN_INFO "IPv6: udp checksum is 0\n");
  592. return 1;
  593. }
  594. if (skb->ip_summed == CHECKSUM_COMPLETE &&
  595. !csum_ipv6_magic(&ipv6_hdr(skb)->saddr, &ipv6_hdr(skb)->daddr,
  596. skb->len, proto, skb->csum))
  597. skb->ip_summed = CHECKSUM_UNNECESSARY;
  598. if (!skb_csum_unnecessary(skb))
  599. skb->csum = ~csum_unfold(csum_ipv6_magic(&ipv6_hdr(skb)->saddr,
  600. &ipv6_hdr(skb)->daddr,
  601. skb->len, proto, 0));
  602. return 0;
  603. }
  604. int __udp6_lib_rcv(struct sk_buff *skb, struct udp_table *udptable,
  605. int proto)
  606. {
  607. struct net *net = dev_net(skb->dev);
  608. struct sock *sk;
  609. struct udphdr *uh;
  610. struct in6_addr *saddr, *daddr;
  611. u32 ulen = 0;
  612. if (!pskb_may_pull(skb, sizeof(struct udphdr)))
  613. goto short_packet;
  614. saddr = &ipv6_hdr(skb)->saddr;
  615. daddr = &ipv6_hdr(skb)->daddr;
  616. uh = udp_hdr(skb);
  617. ulen = ntohs(uh->len);
  618. if (ulen > skb->len)
  619. goto short_packet;
  620. if (proto == IPPROTO_UDP) {
  621. /* UDP validates ulen. */
  622. /* Check for jumbo payload */
  623. if (ulen == 0)
  624. ulen = skb->len;
  625. if (ulen < sizeof(*uh))
  626. goto short_packet;
  627. if (ulen < skb->len) {
  628. if (pskb_trim_rcsum(skb, ulen))
  629. goto short_packet;
  630. saddr = &ipv6_hdr(skb)->saddr;
  631. daddr = &ipv6_hdr(skb)->daddr;
  632. uh = udp_hdr(skb);
  633. }
  634. }
  635. if (udp6_csum_init(skb, uh, proto))
  636. goto discard;
  637. /*
  638. * Multicast receive code
  639. */
  640. if (ipv6_addr_is_multicast(daddr))
  641. return __udp6_lib_mcast_deliver(net, skb,
  642. saddr, daddr, udptable);
  643. /* Unicast */
  644. /*
  645. * check socket cache ... must talk to Alan about his plans
  646. * for sock caches... i'll skip this for now.
  647. */
  648. sk = __udp6_lib_lookup_skb(skb, uh->source, uh->dest, udptable);
  649. if (sk == NULL) {
  650. if (!xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb))
  651. goto discard;
  652. if (udp_lib_checksum_complete(skb))
  653. goto discard;
  654. UDP6_INC_STATS_BH(net, UDP_MIB_NOPORTS,
  655. proto == IPPROTO_UDPLITE);
  656. icmpv6_send(skb, ICMPV6_DEST_UNREACH, ICMPV6_PORT_UNREACH, 0);
  657. kfree_skb(skb);
  658. return 0;
  659. }
  660. /* deliver */
  661. if (sk_rcvqueues_full(sk, skb)) {
  662. sock_put(sk);
  663. goto discard;
  664. }
  665. bh_lock_sock(sk);
  666. if (!sock_owned_by_user(sk))
  667. udpv6_queue_rcv_skb(sk, skb);
  668. else if (sk_add_backlog(sk, skb)) {
  669. atomic_inc(&sk->sk_drops);
  670. bh_unlock_sock(sk);
  671. sock_put(sk);
  672. goto discard;
  673. }
  674. bh_unlock_sock(sk);
  675. sock_put(sk);
  676. return 0;
  677. short_packet:
  678. LIMIT_NETDEBUG(KERN_DEBUG "UDP%sv6: short packet: %d/%u\n",
  679. proto == IPPROTO_UDPLITE ? "-Lite" : "",
  680. ulen, skb->len);
  681. discard:
  682. UDP6_INC_STATS_BH(net, UDP_MIB_INERRORS, proto == IPPROTO_UDPLITE);
  683. kfree_skb(skb);
  684. return 0;
  685. }
  686. static __inline__ int udpv6_rcv(struct sk_buff *skb)
  687. {
  688. return __udp6_lib_rcv(skb, &udp_table, IPPROTO_UDP);
  689. }
  690. /*
  691. * Throw away all pending data and cancel the corking. Socket is locked.
  692. */
  693. static void udp_v6_flush_pending_frames(struct sock *sk)
  694. {
  695. struct udp_sock *up = udp_sk(sk);
  696. if (up->pending == AF_INET)
  697. udp_flush_pending_frames(sk);
  698. else if (up->pending) {
  699. up->len = 0;
  700. up->pending = 0;
  701. ip6_flush_pending_frames(sk);
  702. }
  703. }
  704. /**
  705. * udp6_hwcsum_outgoing - handle outgoing HW checksumming
  706. * @sk: socket we are sending on
  707. * @skb: sk_buff containing the filled-in UDP header
  708. * (checksum field must be zeroed out)
  709. */
  710. static void udp6_hwcsum_outgoing(struct sock *sk, struct sk_buff *skb,
  711. const struct in6_addr *saddr,
  712. const struct in6_addr *daddr, int len)
  713. {
  714. unsigned int offset;
  715. struct udphdr *uh = udp_hdr(skb);
  716. __wsum csum = 0;
  717. if (skb_queue_len(&sk->sk_write_queue) == 1) {
  718. /* Only one fragment on the socket. */
  719. skb->csum_start = skb_transport_header(skb) - skb->head;
  720. skb->csum_offset = offsetof(struct udphdr, check);
  721. uh->check = ~csum_ipv6_magic(saddr, daddr, len, IPPROTO_UDP, 0);
  722. } else {
  723. /*
  724. * HW-checksum won't work as there are two or more
  725. * fragments on the socket so that all csums of sk_buffs
  726. * should be together
  727. */
  728. offset = skb_transport_offset(skb);
  729. skb->csum = skb_checksum(skb, offset, skb->len - offset, 0);
  730. skb->ip_summed = CHECKSUM_NONE;
  731. skb_queue_walk(&sk->sk_write_queue, skb) {
  732. csum = csum_add(csum, skb->csum);
  733. }
  734. uh->check = csum_ipv6_magic(saddr, daddr, len, IPPROTO_UDP,
  735. csum);
  736. if (uh->check == 0)
  737. uh->check = CSUM_MANGLED_0;
  738. }
  739. }
  740. /*
  741. * Sending
  742. */
  743. static int udp_v6_push_pending_frames(struct sock *sk)
  744. {
  745. struct sk_buff *skb;
  746. struct udphdr *uh;
  747. struct udp_sock *up = udp_sk(sk);
  748. struct inet_sock *inet = inet_sk(sk);
  749. struct flowi *fl = &inet->cork.fl;
  750. int err = 0;
  751. int is_udplite = IS_UDPLITE(sk);
  752. __wsum csum = 0;
  753. /* Grab the skbuff where UDP header space exists. */
  754. if ((skb = skb_peek(&sk->sk_write_queue)) == NULL)
  755. goto out;
  756. /*
  757. * Create a UDP header
  758. */
  759. uh = udp_hdr(skb);
  760. uh->source = fl->fl_ip_sport;
  761. uh->dest = fl->fl_ip_dport;
  762. uh->len = htons(up->len);
  763. uh->check = 0;
  764. if (is_udplite)
  765. csum = udplite_csum_outgoing(sk, skb);
  766. else if (skb->ip_summed == CHECKSUM_PARTIAL) { /* UDP hardware csum */
  767. udp6_hwcsum_outgoing(sk, skb, &fl->fl6_src, &fl->fl6_dst,
  768. up->len);
  769. goto send;
  770. } else
  771. csum = udp_csum_outgoing(sk, skb);
  772. /* add protocol-dependent pseudo-header */
  773. uh->check = csum_ipv6_magic(&fl->fl6_src, &fl->fl6_dst,
  774. up->len, fl->proto, csum );
  775. if (uh->check == 0)
  776. uh->check = CSUM_MANGLED_0;
  777. send:
  778. err = ip6_push_pending_frames(sk);
  779. if (err) {
  780. if (err == -ENOBUFS && !inet6_sk(sk)->recverr) {
  781. UDP6_INC_STATS_USER(sock_net(sk),
  782. UDP_MIB_SNDBUFERRORS, is_udplite);
  783. err = 0;
  784. }
  785. } else
  786. UDP6_INC_STATS_USER(sock_net(sk),
  787. UDP_MIB_OUTDATAGRAMS, is_udplite);
  788. out:
  789. up->len = 0;
  790. up->pending = 0;
  791. return err;
  792. }
  793. int udpv6_sendmsg(struct kiocb *iocb, struct sock *sk,
  794. struct msghdr *msg, size_t len)
  795. {
  796. struct ipv6_txoptions opt_space;
  797. struct udp_sock *up = udp_sk(sk);
  798. struct inet_sock *inet = inet_sk(sk);
  799. struct ipv6_pinfo *np = inet6_sk(sk);
  800. struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *) msg->msg_name;
  801. struct in6_addr *daddr, *final_p = NULL, final;
  802. struct ipv6_txoptions *opt = NULL;
  803. struct ip6_flowlabel *flowlabel = NULL;
  804. struct flowi fl;
  805. struct dst_entry *dst;
  806. int addr_len = msg->msg_namelen;
  807. int ulen = len;
  808. int hlimit = -1;
  809. int tclass = -1;
  810. int dontfrag = -1;
  811. int corkreq = up->corkflag || msg->msg_flags&MSG_MORE;
  812. int err;
  813. int connected = 0;
  814. int is_udplite = IS_UDPLITE(sk);
  815. int (*getfrag)(void *, char *, int, int, int, struct sk_buff *);
  816. /* destination address check */
  817. if (sin6) {
  818. if (addr_len < offsetof(struct sockaddr, sa_data))
  819. return -EINVAL;
  820. switch (sin6->sin6_family) {
  821. case AF_INET6:
  822. if (addr_len < SIN6_LEN_RFC2133)
  823. return -EINVAL;
  824. daddr = &sin6->sin6_addr;
  825. break;
  826. case AF_INET:
  827. goto do_udp_sendmsg;
  828. case AF_UNSPEC:
  829. msg->msg_name = sin6 = NULL;
  830. msg->msg_namelen = addr_len = 0;
  831. daddr = NULL;
  832. break;
  833. default:
  834. return -EINVAL;
  835. }
  836. } else if (!up->pending) {
  837. if (sk->sk_state != TCP_ESTABLISHED)
  838. return -EDESTADDRREQ;
  839. daddr = &np->daddr;
  840. } else
  841. daddr = NULL;
  842. if (daddr) {
  843. if (ipv6_addr_v4mapped(daddr)) {
  844. struct sockaddr_in sin;
  845. sin.sin_family = AF_INET;
  846. sin.sin_port = sin6 ? sin6->sin6_port : inet->inet_dport;
  847. sin.sin_addr.s_addr = daddr->s6_addr32[3];
  848. msg->msg_name = &sin;
  849. msg->msg_namelen = sizeof(sin);
  850. do_udp_sendmsg:
  851. if (__ipv6_only_sock(sk))
  852. return -ENETUNREACH;
  853. return udp_sendmsg(iocb, sk, msg, len);
  854. }
  855. }
  856. if (up->pending == AF_INET)
  857. return udp_sendmsg(iocb, sk, msg, len);
  858. /* Rough check on arithmetic overflow,
  859. better check is made in ip6_append_data().
  860. */
  861. if (len > INT_MAX - sizeof(struct udphdr))
  862. return -EMSGSIZE;
  863. if (up->pending) {
  864. /*
  865. * There are pending frames.
  866. * The socket lock must be held while it's corked.
  867. */
  868. lock_sock(sk);
  869. if (likely(up->pending)) {
  870. if (unlikely(up->pending != AF_INET6)) {
  871. release_sock(sk);
  872. return -EAFNOSUPPORT;
  873. }
  874. dst = NULL;
  875. goto do_append_data;
  876. }
  877. release_sock(sk);
  878. }
  879. ulen += sizeof(struct udphdr);
  880. memset(&fl, 0, sizeof(fl));
  881. if (sin6) {
  882. if (sin6->sin6_port == 0)
  883. return -EINVAL;
  884. fl.fl_ip_dport = sin6->sin6_port;
  885. daddr = &sin6->sin6_addr;
  886. if (np->sndflow) {
  887. fl.fl6_flowlabel = sin6->sin6_flowinfo&IPV6_FLOWINFO_MASK;
  888. if (fl.fl6_flowlabel&IPV6_FLOWLABEL_MASK) {
  889. flowlabel = fl6_sock_lookup(sk, fl.fl6_flowlabel);
  890. if (flowlabel == NULL)
  891. return -EINVAL;
  892. daddr = &flowlabel->dst;
  893. }
  894. }
  895. /*
  896. * Otherwise it will be difficult to maintain
  897. * sk->sk_dst_cache.
  898. */
  899. if (sk->sk_state == TCP_ESTABLISHED &&
  900. ipv6_addr_equal(daddr, &np->daddr))
  901. daddr = &np->daddr;
  902. if (addr_len >= sizeof(struct sockaddr_in6) &&
  903. sin6->sin6_scope_id &&
  904. ipv6_addr_type(daddr)&IPV6_ADDR_LINKLOCAL)
  905. fl.oif = sin6->sin6_scope_id;
  906. } else {
  907. if (sk->sk_state != TCP_ESTABLISHED)
  908. return -EDESTADDRREQ;
  909. fl.fl_ip_dport = inet->inet_dport;
  910. daddr = &np->daddr;
  911. fl.fl6_flowlabel = np->flow_label;
  912. connected = 1;
  913. }
  914. if (!fl.oif)
  915. fl.oif = sk->sk_bound_dev_if;
  916. if (!fl.oif)
  917. fl.oif = np->sticky_pktinfo.ipi6_ifindex;
  918. fl.mark = sk->sk_mark;
  919. if (msg->msg_controllen) {
  920. opt = &opt_space;
  921. memset(opt, 0, sizeof(struct ipv6_txoptions));
  922. opt->tot_len = sizeof(*opt);
  923. err = datagram_send_ctl(sock_net(sk), msg, &fl, opt, &hlimit,
  924. &tclass, &dontfrag);
  925. if (err < 0) {
  926. fl6_sock_release(flowlabel);
  927. return err;
  928. }
  929. if ((fl.fl6_flowlabel&IPV6_FLOWLABEL_MASK) && !flowlabel) {
  930. flowlabel = fl6_sock_lookup(sk, fl.fl6_flowlabel);
  931. if (flowlabel == NULL)
  932. return -EINVAL;
  933. }
  934. if (!(opt->opt_nflen|opt->opt_flen))
  935. opt = NULL;
  936. connected = 0;
  937. }
  938. if (opt == NULL)
  939. opt = np->opt;
  940. if (flowlabel)
  941. opt = fl6_merge_options(&opt_space, flowlabel, opt);
  942. opt = ipv6_fixup_options(&opt_space, opt);
  943. fl.proto = sk->sk_protocol;
  944. if (!ipv6_addr_any(daddr))
  945. ipv6_addr_copy(&fl.fl6_dst, daddr);
  946. else
  947. fl.fl6_dst.s6_addr[15] = 0x1; /* :: means loopback (BSD'ism) */
  948. if (ipv6_addr_any(&fl.fl6_src) && !ipv6_addr_any(&np->saddr))
  949. ipv6_addr_copy(&fl.fl6_src, &np->saddr);
  950. fl.fl_ip_sport = inet->inet_sport;
  951. /* merge ip6_build_xmit from ip6_output */
  952. if (opt && opt->srcrt) {
  953. struct rt0_hdr *rt0 = (struct rt0_hdr *) opt->srcrt;
  954. ipv6_addr_copy(&final, &fl.fl6_dst);
  955. ipv6_addr_copy(&fl.fl6_dst, rt0->addr);
  956. final_p = &final;
  957. connected = 0;
  958. }
  959. if (!fl.oif && ipv6_addr_is_multicast(&fl.fl6_dst)) {
  960. fl.oif = np->mcast_oif;
  961. connected = 0;
  962. }
  963. security_sk_classify_flow(sk, &fl);
  964. err = ip6_sk_dst_lookup(sk, &dst, &fl);
  965. if (err)
  966. goto out;
  967. if (final_p)
  968. ipv6_addr_copy(&fl.fl6_dst, final_p);
  969. err = __xfrm_lookup(sock_net(sk), &dst, &fl, sk, XFRM_LOOKUP_WAIT);
  970. if (err < 0) {
  971. if (err == -EREMOTE)
  972. err = ip6_dst_blackhole(sk, &dst, &fl);
  973. if (err < 0)
  974. goto out;
  975. }
  976. if (hlimit < 0) {
  977. if (ipv6_addr_is_multicast(&fl.fl6_dst))
  978. hlimit = np->mcast_hops;
  979. else
  980. hlimit = np->hop_limit;
  981. if (hlimit < 0)
  982. hlimit = ip6_dst_hoplimit(dst);
  983. }
  984. if (tclass < 0)
  985. tclass = np->tclass;
  986. if (dontfrag < 0)
  987. dontfrag = np->dontfrag;
  988. if (msg->msg_flags&MSG_CONFIRM)
  989. goto do_confirm;
  990. back_from_confirm:
  991. lock_sock(sk);
  992. if (unlikely(up->pending)) {
  993. /* The socket is already corked while preparing it. */
  994. /* ... which is an evident application bug. --ANK */
  995. release_sock(sk);
  996. LIMIT_NETDEBUG(KERN_DEBUG "udp cork app bug 2\n");
  997. err = -EINVAL;
  998. goto out;
  999. }
  1000. up->pending = AF_INET6;
  1001. do_append_data:
  1002. up->len += ulen;
  1003. getfrag = is_udplite ? udplite_getfrag : ip_generic_getfrag;
  1004. err = ip6_append_data(sk, getfrag, msg->msg_iov, ulen,
  1005. sizeof(struct udphdr), hlimit, tclass, opt, &fl,
  1006. (struct rt6_info*)dst,
  1007. corkreq ? msg->msg_flags|MSG_MORE : msg->msg_flags, dontfrag);
  1008. if (err)
  1009. udp_v6_flush_pending_frames(sk);
  1010. else if (!corkreq)
  1011. err = udp_v6_push_pending_frames(sk);
  1012. else if (unlikely(skb_queue_empty(&sk->sk_write_queue)))
  1013. up->pending = 0;
  1014. if (dst) {
  1015. if (connected) {
  1016. ip6_dst_store(sk, dst,
  1017. ipv6_addr_equal(&fl.fl6_dst, &np->daddr) ?
  1018. &np->daddr : NULL,
  1019. #ifdef CONFIG_IPV6_SUBTREES
  1020. ipv6_addr_equal(&fl.fl6_src, &np->saddr) ?
  1021. &np->saddr :
  1022. #endif
  1023. NULL);
  1024. } else {
  1025. dst_release(dst);
  1026. }
  1027. dst = NULL;
  1028. }
  1029. if (err > 0)
  1030. err = np->recverr ? net_xmit_errno(err) : 0;
  1031. release_sock(sk);
  1032. out:
  1033. dst_release(dst);
  1034. fl6_sock_release(flowlabel);
  1035. if (!err)
  1036. return len;
  1037. /*
  1038. * ENOBUFS = no kernel mem, SOCK_NOSPACE = no sndbuf space. Reporting
  1039. * ENOBUFS might not be good (it's not tunable per se), but otherwise
  1040. * we don't have a good statistic (IpOutDiscards but it can be too many
  1041. * things). We could add another new stat but at least for now that
  1042. * seems like overkill.
  1043. */
  1044. if (err == -ENOBUFS || test_bit(SOCK_NOSPACE, &sk->sk_socket->flags)) {
  1045. UDP6_INC_STATS_USER(sock_net(sk),
  1046. UDP_MIB_SNDBUFERRORS, is_udplite);
  1047. }
  1048. return err;
  1049. do_confirm:
  1050. dst_confirm(dst);
  1051. if (!(msg->msg_flags&MSG_PROBE) || len)
  1052. goto back_from_confirm;
  1053. err = 0;
  1054. goto out;
  1055. }
  1056. void udpv6_destroy_sock(struct sock *sk)
  1057. {
  1058. lock_sock(sk);
  1059. udp_v6_flush_pending_frames(sk);
  1060. release_sock(sk);
  1061. inet6_destroy_sock(sk);
  1062. }
  1063. /*
  1064. * Socket option code for UDP
  1065. */
  1066. int udpv6_setsockopt(struct sock *sk, int level, int optname,
  1067. char __user *optval, unsigned int optlen)
  1068. {
  1069. if (level == SOL_UDP || level == SOL_UDPLITE)
  1070. return udp_lib_setsockopt(sk, level, optname, optval, optlen,
  1071. udp_v6_push_pending_frames);
  1072. return ipv6_setsockopt(sk, level, optname, optval, optlen);
  1073. }
  1074. #ifdef CONFIG_COMPAT
  1075. int compat_udpv6_setsockopt(struct sock *sk, int level, int optname,
  1076. char __user *optval, unsigned int optlen)
  1077. {
  1078. if (level == SOL_UDP || level == SOL_UDPLITE)
  1079. return udp_lib_setsockopt(sk, level, optname, optval, optlen,
  1080. udp_v6_push_pending_frames);
  1081. return compat_ipv6_setsockopt(sk, level, optname, optval, optlen);
  1082. }
  1083. #endif
  1084. int udpv6_getsockopt(struct sock *sk, int level, int optname,
  1085. char __user *optval, int __user *optlen)
  1086. {
  1087. if (level == SOL_UDP || level == SOL_UDPLITE)
  1088. return udp_lib_getsockopt(sk, level, optname, optval, optlen);
  1089. return ipv6_getsockopt(sk, level, optname, optval, optlen);
  1090. }
  1091. #ifdef CONFIG_COMPAT
  1092. int compat_udpv6_getsockopt(struct sock *sk, int level, int optname,
  1093. char __user *optval, int __user *optlen)
  1094. {
  1095. if (level == SOL_UDP || level == SOL_UDPLITE)
  1096. return udp_lib_getsockopt(sk, level, optname, optval, optlen);
  1097. return compat_ipv6_getsockopt(sk, level, optname, optval, optlen);
  1098. }
  1099. #endif
  1100. static int udp6_ufo_send_check(struct sk_buff *skb)
  1101. {
  1102. struct ipv6hdr *ipv6h;
  1103. struct udphdr *uh;
  1104. if (!pskb_may_pull(skb, sizeof(*uh)))
  1105. return -EINVAL;
  1106. ipv6h = ipv6_hdr(skb);
  1107. uh = udp_hdr(skb);
  1108. uh->check = ~csum_ipv6_magic(&ipv6h->saddr, &ipv6h->daddr, skb->len,
  1109. IPPROTO_UDP, 0);
  1110. skb->csum_start = skb_transport_header(skb) - skb->head;
  1111. skb->csum_offset = offsetof(struct udphdr, check);
  1112. skb->ip_summed = CHECKSUM_PARTIAL;
  1113. return 0;
  1114. }
  1115. static struct sk_buff *udp6_ufo_fragment(struct sk_buff *skb, int features)
  1116. {
  1117. struct sk_buff *segs = ERR_PTR(-EINVAL);
  1118. unsigned int mss;
  1119. unsigned int unfrag_ip6hlen, unfrag_len;
  1120. struct frag_hdr *fptr;
  1121. u8 *mac_start, *prevhdr;
  1122. u8 nexthdr;
  1123. u8 frag_hdr_sz = sizeof(struct frag_hdr);
  1124. int offset;
  1125. __wsum csum;
  1126. mss = skb_shinfo(skb)->gso_size;
  1127. if (unlikely(skb->len <= mss))
  1128. goto out;
  1129. if (skb_gso_ok(skb, features | NETIF_F_GSO_ROBUST)) {
  1130. /* Packet is from an untrusted source, reset gso_segs. */
  1131. int type = skb_shinfo(skb)->gso_type;
  1132. if (unlikely(type & ~(SKB_GSO_UDP | SKB_GSO_DODGY) ||
  1133. !(type & (SKB_GSO_UDP))))
  1134. goto out;
  1135. skb_shinfo(skb)->gso_segs = DIV_ROUND_UP(skb->len, mss);
  1136. segs = NULL;
  1137. goto out;
  1138. }
  1139. /* Do software UFO. Complete and fill in the UDP checksum as HW cannot
  1140. * do checksum of UDP packets sent as multiple IP fragments.
  1141. */
  1142. offset = skb->csum_start - skb_headroom(skb);
  1143. csum = skb_checksum(skb, offset, skb->len- offset, 0);
  1144. offset += skb->csum_offset;
  1145. *(__sum16 *)(skb->data + offset) = csum_fold(csum);
  1146. skb->ip_summed = CHECKSUM_NONE;
  1147. /* Check if there is enough headroom to insert fragment header. */
  1148. if ((skb_headroom(skb) < frag_hdr_sz) &&
  1149. pskb_expand_head(skb, frag_hdr_sz, 0, GFP_ATOMIC))
  1150. goto out;
  1151. /* Find the unfragmentable header and shift it left by frag_hdr_sz
  1152. * bytes to insert fragment header.
  1153. */
  1154. unfrag_ip6hlen = ip6_find_1stfragopt(skb, &prevhdr);
  1155. nexthdr = *prevhdr;
  1156. *prevhdr = NEXTHDR_FRAGMENT;
  1157. unfrag_len = skb_network_header(skb) - skb_mac_header(skb) +
  1158. unfrag_ip6hlen;
  1159. mac_start = skb_mac_header(skb);
  1160. memmove(mac_start-frag_hdr_sz, mac_start, unfrag_len);
  1161. skb->mac_header -= frag_hdr_sz;
  1162. skb->network_header -= frag_hdr_sz;
  1163. fptr = (struct frag_hdr *)(skb_network_header(skb) + unfrag_ip6hlen);
  1164. fptr->nexthdr = nexthdr;
  1165. fptr->reserved = 0;
  1166. ipv6_select_ident(fptr);
  1167. /* Fragment the skb. ipv6 header and the remaining fields of the
  1168. * fragment header are updated in ipv6_gso_segment()
  1169. */
  1170. segs = skb_segment(skb, features);
  1171. out:
  1172. return segs;
  1173. }
  1174. static const struct inet6_protocol udpv6_protocol = {
  1175. .handler = udpv6_rcv,
  1176. .err_handler = udpv6_err,
  1177. .gso_send_check = udp6_ufo_send_check,
  1178. .gso_segment = udp6_ufo_fragment,
  1179. .flags = INET6_PROTO_NOPOLICY|INET6_PROTO_FINAL,
  1180. };
  1181. /* ------------------------------------------------------------------------ */
  1182. #ifdef CONFIG_PROC_FS
  1183. static void udp6_sock_seq_show(struct seq_file *seq, struct sock *sp, int bucket)
  1184. {
  1185. struct inet_sock *inet = inet_sk(sp);
  1186. struct ipv6_pinfo *np = inet6_sk(sp);
  1187. struct in6_addr *dest, *src;
  1188. __u16 destp, srcp;
  1189. dest = &np->daddr;
  1190. src = &np->rcv_saddr;
  1191. destp = ntohs(inet->inet_dport);
  1192. srcp = ntohs(inet->inet_sport);
  1193. seq_printf(seq,
  1194. "%5d: %08X%08X%08X%08X:%04X %08X%08X%08X%08X:%04X "
  1195. "%02X %08X:%08X %02X:%08lX %08X %5d %8d %lu %d %p %d\n",
  1196. bucket,
  1197. src->s6_addr32[0], src->s6_addr32[1],
  1198. src->s6_addr32[2], src->s6_addr32[3], srcp,
  1199. dest->s6_addr32[0], dest->s6_addr32[1],
  1200. dest->s6_addr32[2], dest->s6_addr32[3], destp,
  1201. sp->sk_state,
  1202. sk_wmem_alloc_get(sp),
  1203. sk_rmem_alloc_get(sp),
  1204. 0, 0L, 0,
  1205. sock_i_uid(sp), 0,
  1206. sock_i_ino(sp),
  1207. atomic_read(&sp->sk_refcnt), sp,
  1208. atomic_read(&sp->sk_drops));
  1209. }
  1210. int udp6_seq_show(struct seq_file *seq, void *v)
  1211. {
  1212. if (v == SEQ_START_TOKEN)
  1213. seq_printf(seq,
  1214. " sl "
  1215. "local_address "
  1216. "remote_address "
  1217. "st tx_queue rx_queue tr tm->when retrnsmt"
  1218. " uid timeout inode ref pointer drops\n");
  1219. else
  1220. udp6_sock_seq_show(seq, v, ((struct udp_iter_state *)seq->private)->bucket);
  1221. return 0;
  1222. }
  1223. static struct udp_seq_afinfo udp6_seq_afinfo = {
  1224. .name = "udp6",
  1225. .family = AF_INET6,
  1226. .udp_table = &udp_table,
  1227. .seq_fops = {
  1228. .owner = THIS_MODULE,
  1229. },
  1230. .seq_ops = {
  1231. .show = udp6_seq_show,
  1232. },
  1233. };
  1234. int __net_init udp6_proc_init(struct net *net)
  1235. {
  1236. return udp_proc_register(net, &udp6_seq_afinfo);
  1237. }
  1238. void udp6_proc_exit(struct net *net) {
  1239. udp_proc_unregister(net, &udp6_seq_afinfo);
  1240. }
  1241. #endif /* CONFIG_PROC_FS */
  1242. /* ------------------------------------------------------------------------ */
  1243. struct proto udpv6_prot = {
  1244. .name = "UDPv6",
  1245. .owner = THIS_MODULE,
  1246. .close = udp_lib_close,
  1247. .connect = ip6_datagram_connect,
  1248. .disconnect = udp_disconnect,
  1249. .ioctl = udp_ioctl,
  1250. .destroy = udpv6_destroy_sock,
  1251. .setsockopt = udpv6_setsockopt,
  1252. .getsockopt = udpv6_getsockopt,
  1253. .sendmsg = udpv6_sendmsg,
  1254. .recvmsg = udpv6_recvmsg,
  1255. .backlog_rcv = udpv6_queue_rcv_skb,
  1256. .hash = udp_lib_hash,
  1257. .unhash = udp_lib_unhash,
  1258. .get_port = udp_v6_get_port,
  1259. .memory_allocated = &udp_memory_allocated,
  1260. .sysctl_mem = sysctl_udp_mem,
  1261. .sysctl_wmem = &sysctl_udp_wmem_min,
  1262. .sysctl_rmem = &sysctl_udp_rmem_min,
  1263. .obj_size = sizeof(struct udp6_sock),
  1264. .slab_flags = SLAB_DESTROY_BY_RCU,
  1265. .h.udp_table = &udp_table,
  1266. #ifdef CONFIG_COMPAT
  1267. .compat_setsockopt = compat_udpv6_setsockopt,
  1268. .compat_getsockopt = compat_udpv6_getsockopt,
  1269. #endif
  1270. };
  1271. static struct inet_protosw udpv6_protosw = {
  1272. .type = SOCK_DGRAM,
  1273. .protocol = IPPROTO_UDP,
  1274. .prot = &udpv6_prot,
  1275. .ops = &inet6_dgram_ops,
  1276. .no_check = UDP_CSUM_DEFAULT,
  1277. .flags = INET_PROTOSW_PERMANENT,
  1278. };
  1279. int __init udpv6_init(void)
  1280. {
  1281. int ret;
  1282. ret = inet6_add_protocol(&udpv6_protocol, IPPROTO_UDP);
  1283. if (ret)
  1284. goto out;
  1285. ret = inet6_register_protosw(&udpv6_protosw);
  1286. if (ret)
  1287. goto out_udpv6_protocol;
  1288. out:
  1289. return ret;
  1290. out_udpv6_protocol:
  1291. inet6_del_protocol(&udpv6_protocol, IPPROTO_UDP);
  1292. goto out;
  1293. }
  1294. void udpv6_exit(void)
  1295. {
  1296. inet6_unregister_protosw(&udpv6_protosw);
  1297. inet6_del_protocol(&udpv6_protocol, IPPROTO_UDP);
  1298. }