ipcomp.c 4.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196
  1. /*
  2. * IP Payload Compression Protocol (IPComp) - RFC3173.
  3. *
  4. * Copyright (c) 2003 James Morris <jmorris@intercode.com.au>
  5. *
  6. * This program is free software; you can redistribute it and/or modify it
  7. * under the terms of the GNU General Public License as published by the Free
  8. * Software Foundation; either version 2 of the License, or (at your option)
  9. * any later version.
  10. *
  11. * Todo:
  12. * - Tunable compression parameters.
  13. * - Compression stats.
  14. * - Adaptive compression.
  15. */
  16. #include <linux/module.h>
  17. #include <linux/err.h>
  18. #include <linux/rtnetlink.h>
  19. #include <net/ip.h>
  20. #include <net/xfrm.h>
  21. #include <net/icmp.h>
  22. #include <net/ipcomp.h>
  23. #include <net/protocol.h>
  24. #include <net/sock.h>
  25. static void ipcomp4_err(struct sk_buff *skb, u32 info)
  26. {
  27. struct net *net = dev_net(skb->dev);
  28. __be32 spi;
  29. const struct iphdr *iph = (const struct iphdr *)skb->data;
  30. struct ip_comp_hdr *ipch = (struct ip_comp_hdr *)(skb->data+(iph->ihl<<2));
  31. struct xfrm_state *x;
  32. switch (icmp_hdr(skb)->type) {
  33. case ICMP_DEST_UNREACH:
  34. if (icmp_hdr(skb)->code != ICMP_FRAG_NEEDED)
  35. return;
  36. case ICMP_REDIRECT:
  37. break;
  38. default:
  39. return;
  40. }
  41. spi = htonl(ntohs(ipch->cpi));
  42. x = xfrm_state_lookup(net, skb->mark, (const xfrm_address_t *)&iph->daddr,
  43. spi, IPPROTO_COMP, AF_INET);
  44. if (!x)
  45. return;
  46. if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH)
  47. ipv4_update_pmtu(skb, net, info, 0, 0, IPPROTO_COMP, 0);
  48. else
  49. ipv4_redirect(skb, net, 0, 0, IPPROTO_COMP, 0);
  50. xfrm_state_put(x);
  51. }
  52. /* We always hold one tunnel user reference to indicate a tunnel */
  53. static struct xfrm_state *ipcomp_tunnel_create(struct xfrm_state *x)
  54. {
  55. struct net *net = xs_net(x);
  56. struct xfrm_state *t;
  57. t = xfrm_state_alloc(net);
  58. if (t == NULL)
  59. goto out;
  60. t->id.proto = IPPROTO_IPIP;
  61. t->id.spi = x->props.saddr.a4;
  62. t->id.daddr.a4 = x->id.daddr.a4;
  63. memcpy(&t->sel, &x->sel, sizeof(t->sel));
  64. t->props.family = AF_INET;
  65. t->props.mode = x->props.mode;
  66. t->props.saddr.a4 = x->props.saddr.a4;
  67. t->props.flags = x->props.flags;
  68. t->props.extra_flags = x->props.extra_flags;
  69. memcpy(&t->mark, &x->mark, sizeof(t->mark));
  70. if (xfrm_init_state(t))
  71. goto error;
  72. atomic_set(&t->tunnel_users, 1);
  73. out:
  74. return t;
  75. error:
  76. t->km.state = XFRM_STATE_DEAD;
  77. xfrm_state_put(t);
  78. t = NULL;
  79. goto out;
  80. }
  81. /*
  82. * Must be protected by xfrm_cfg_mutex. State and tunnel user references are
  83. * always incremented on success.
  84. */
  85. static int ipcomp_tunnel_attach(struct xfrm_state *x)
  86. {
  87. struct net *net = xs_net(x);
  88. int err = 0;
  89. struct xfrm_state *t;
  90. u32 mark = x->mark.v & x->mark.m;
  91. t = xfrm_state_lookup(net, mark, (xfrm_address_t *)&x->id.daddr.a4,
  92. x->props.saddr.a4, IPPROTO_IPIP, AF_INET);
  93. if (!t) {
  94. t = ipcomp_tunnel_create(x);
  95. if (!t) {
  96. err = -EINVAL;
  97. goto out;
  98. }
  99. xfrm_state_insert(t);
  100. xfrm_state_hold(t);
  101. }
  102. x->tunnel = t;
  103. atomic_inc(&t->tunnel_users);
  104. out:
  105. return err;
  106. }
  107. static int ipcomp4_init_state(struct xfrm_state *x)
  108. {
  109. int err = -EINVAL;
  110. x->props.header_len = 0;
  111. switch (x->props.mode) {
  112. case XFRM_MODE_TRANSPORT:
  113. break;
  114. case XFRM_MODE_TUNNEL:
  115. x->props.header_len += sizeof(struct iphdr);
  116. break;
  117. default:
  118. goto out;
  119. }
  120. err = ipcomp_init_state(x);
  121. if (err)
  122. goto out;
  123. if (x->props.mode == XFRM_MODE_TUNNEL) {
  124. err = ipcomp_tunnel_attach(x);
  125. if (err)
  126. goto out;
  127. }
  128. err = 0;
  129. out:
  130. return err;
  131. }
  132. static const struct xfrm_type ipcomp_type = {
  133. .description = "IPCOMP4",
  134. .owner = THIS_MODULE,
  135. .proto = IPPROTO_COMP,
  136. .init_state = ipcomp4_init_state,
  137. .destructor = ipcomp_destroy,
  138. .input = ipcomp_input,
  139. .output = ipcomp_output
  140. };
  141. static const struct net_protocol ipcomp4_protocol = {
  142. .handler = xfrm4_rcv,
  143. .err_handler = ipcomp4_err,
  144. .no_policy = 1,
  145. .netns_ok = 1,
  146. };
  147. static int __init ipcomp4_init(void)
  148. {
  149. if (xfrm_register_type(&ipcomp_type, AF_INET) < 0) {
  150. pr_info("%s: can't add xfrm type\n", __func__);
  151. return -EAGAIN;
  152. }
  153. if (inet_add_protocol(&ipcomp4_protocol, IPPROTO_COMP) < 0) {
  154. pr_info("%s: can't add protocol\n", __func__);
  155. xfrm_unregister_type(&ipcomp_type, AF_INET);
  156. return -EAGAIN;
  157. }
  158. return 0;
  159. }
  160. static void __exit ipcomp4_fini(void)
  161. {
  162. if (inet_del_protocol(&ipcomp4_protocol, IPPROTO_COMP) < 0)
  163. pr_info("%s: can't remove protocol\n", __func__);
  164. if (xfrm_unregister_type(&ipcomp_type, AF_INET) < 0)
  165. pr_info("%s: can't remove xfrm type\n", __func__);
  166. }
  167. module_init(ipcomp4_init);
  168. module_exit(ipcomp4_fini);
  169. MODULE_LICENSE("GPL");
  170. MODULE_DESCRIPTION("IP Payload Compression Protocol (IPComp/IPv4) - RFC3173");
  171. MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");
  172. MODULE_ALIAS_XFRM_TYPE(AF_INET, XFRM_PROTO_COMP);