ipv6_sockglue.c 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092
  1. /*
  2. * IPv6 BSD socket options interface
  3. * Linux INET6 implementation
  4. *
  5. * Authors:
  6. * Pedro Roque <roque@di.fc.ul.pt>
  7. *
  8. * Based on linux/net/ipv4/ip_sockglue.c
  9. *
  10. * $Id: ipv6_sockglue.c,v 1.41 2002/02/01 22:01:04 davem Exp $
  11. *
  12. * This program is free software; you can redistribute it and/or
  13. * modify it under the terms of the GNU General Public License
  14. * as published by the Free Software Foundation; either version
  15. * 2 of the License, or (at your option) any later version.
  16. *
  17. * FIXME: Make the setsockopt code POSIX compliant: That is
  18. *
  19. * o Return -EINVAL for setsockopt of short lengths
  20. * o Truncate getsockopt returns
  21. * o Return an optlen of the truncated length if need be
  22. *
  23. * Changes:
  24. * David L Stevens <dlstevens@us.ibm.com>:
  25. * - added multicast source filtering API for MLDv2
  26. */
  27. #include <linux/module.h>
  28. #include <linux/capability.h>
  29. #include <linux/errno.h>
  30. #include <linux/types.h>
  31. #include <linux/socket.h>
  32. #include <linux/sockios.h>
  33. #include <linux/sched.h>
  34. #include <linux/net.h>
  35. #include <linux/in6.h>
  36. #include <linux/netdevice.h>
  37. #include <linux/if_arp.h>
  38. #include <linux/init.h>
  39. #include <linux/sysctl.h>
  40. #include <linux/netfilter.h>
  41. #include <net/sock.h>
  42. #include <net/snmp.h>
  43. #include <net/ipv6.h>
  44. #include <net/ndisc.h>
  45. #include <net/protocol.h>
  46. #include <net/transp_v6.h>
  47. #include <net/ip6_route.h>
  48. #include <net/addrconf.h>
  49. #include <net/inet_common.h>
  50. #include <net/tcp.h>
  51. #include <net/udp.h>
  52. #include <net/xfrm.h>
  53. #include <asm/uaccess.h>
  54. DEFINE_SNMP_STAT(struct ipstats_mib, ipv6_statistics) __read_mostly;
  55. static struct inet6_protocol *ipv6_gso_pull_exthdrs(struct sk_buff *skb,
  56. int proto)
  57. {
  58. struct inet6_protocol *ops = NULL;
  59. for (;;) {
  60. struct ipv6_opt_hdr *opth;
  61. int len;
  62. if (proto != NEXTHDR_HOP) {
  63. ops = rcu_dereference(inet6_protos[proto]);
  64. if (unlikely(!ops))
  65. break;
  66. if (!(ops->flags & INET6_PROTO_GSO_EXTHDR))
  67. break;
  68. }
  69. if (unlikely(!pskb_may_pull(skb, 8)))
  70. break;
  71. opth = (void *)skb->data;
  72. len = opth->hdrlen * 8 + 8;
  73. if (unlikely(!pskb_may_pull(skb, len)))
  74. break;
  75. proto = opth->nexthdr;
  76. __skb_pull(skb, len);
  77. }
  78. return ops;
  79. }
  80. static int ipv6_gso_send_check(struct sk_buff *skb)
  81. {
  82. struct ipv6hdr *ipv6h;
  83. struct inet6_protocol *ops;
  84. int err = -EINVAL;
  85. if (unlikely(!pskb_may_pull(skb, sizeof(*ipv6h))))
  86. goto out;
  87. ipv6h = skb->nh.ipv6h;
  88. __skb_pull(skb, sizeof(*ipv6h));
  89. err = -EPROTONOSUPPORT;
  90. rcu_read_lock();
  91. ops = ipv6_gso_pull_exthdrs(skb, ipv6h->nexthdr);
  92. if (likely(ops && ops->gso_send_check)) {
  93. skb->h.raw = skb->data;
  94. err = ops->gso_send_check(skb);
  95. }
  96. rcu_read_unlock();
  97. out:
  98. return err;
  99. }
  100. static struct sk_buff *ipv6_gso_segment(struct sk_buff *skb, int features)
  101. {
  102. struct sk_buff *segs = ERR_PTR(-EINVAL);
  103. struct ipv6hdr *ipv6h;
  104. struct inet6_protocol *ops;
  105. if (!(features & NETIF_F_HW_CSUM))
  106. features &= ~NETIF_F_SG;
  107. if (unlikely(skb_shinfo(skb)->gso_type &
  108. ~(SKB_GSO_UDP |
  109. SKB_GSO_DODGY |
  110. SKB_GSO_TCP_ECN |
  111. SKB_GSO_TCPV6 |
  112. 0)))
  113. goto out;
  114. if (unlikely(!pskb_may_pull(skb, sizeof(*ipv6h))))
  115. goto out;
  116. ipv6h = skb->nh.ipv6h;
  117. __skb_pull(skb, sizeof(*ipv6h));
  118. segs = ERR_PTR(-EPROTONOSUPPORT);
  119. rcu_read_lock();
  120. ops = ipv6_gso_pull_exthdrs(skb, ipv6h->nexthdr);
  121. if (likely(ops && ops->gso_segment)) {
  122. skb->h.raw = skb->data;
  123. segs = ops->gso_segment(skb, features);
  124. }
  125. rcu_read_unlock();
  126. if (unlikely(IS_ERR(segs)))
  127. goto out;
  128. for (skb = segs; skb; skb = skb->next) {
  129. ipv6h = skb->nh.ipv6h;
  130. ipv6h->payload_len = htons(skb->len - skb->mac_len -
  131. sizeof(*ipv6h));
  132. }
  133. out:
  134. return segs;
  135. }
  136. static struct packet_type ipv6_packet_type = {
  137. .type = __constant_htons(ETH_P_IPV6),
  138. .func = ipv6_rcv,
  139. .gso_send_check = ipv6_gso_send_check,
  140. .gso_segment = ipv6_gso_segment,
  141. };
  142. struct ip6_ra_chain *ip6_ra_chain;
  143. DEFINE_RWLOCK(ip6_ra_lock);
  144. int ip6_ra_control(struct sock *sk, int sel, void (*destructor)(struct sock *))
  145. {
  146. struct ip6_ra_chain *ra, *new_ra, **rap;
  147. /* RA packet may be delivered ONLY to IPPROTO_RAW socket */
  148. if (sk->sk_type != SOCK_RAW || inet_sk(sk)->num != IPPROTO_RAW)
  149. return -EINVAL;
  150. new_ra = (sel>=0) ? kmalloc(sizeof(*new_ra), GFP_KERNEL) : NULL;
  151. write_lock_bh(&ip6_ra_lock);
  152. for (rap = &ip6_ra_chain; (ra=*rap) != NULL; rap = &ra->next) {
  153. if (ra->sk == sk) {
  154. if (sel>=0) {
  155. write_unlock_bh(&ip6_ra_lock);
  156. kfree(new_ra);
  157. return -EADDRINUSE;
  158. }
  159. *rap = ra->next;
  160. write_unlock_bh(&ip6_ra_lock);
  161. if (ra->destructor)
  162. ra->destructor(sk);
  163. sock_put(sk);
  164. kfree(ra);
  165. return 0;
  166. }
  167. }
  168. if (new_ra == NULL) {
  169. write_unlock_bh(&ip6_ra_lock);
  170. return -ENOBUFS;
  171. }
  172. new_ra->sk = sk;
  173. new_ra->sel = sel;
  174. new_ra->destructor = destructor;
  175. new_ra->next = ra;
  176. *rap = new_ra;
  177. sock_hold(sk);
  178. write_unlock_bh(&ip6_ra_lock);
  179. return 0;
  180. }
  181. static int do_ipv6_setsockopt(struct sock *sk, int level, int optname,
  182. char __user *optval, int optlen)
  183. {
  184. struct ipv6_pinfo *np = inet6_sk(sk);
  185. int val, valbool;
  186. int retv = -ENOPROTOOPT;
  187. if (optval == NULL)
  188. val=0;
  189. else if (get_user(val, (int __user *) optval))
  190. return -EFAULT;
  191. valbool = (val!=0);
  192. lock_sock(sk);
  193. switch (optname) {
  194. case IPV6_ADDRFORM:
  195. if (val == PF_INET) {
  196. struct ipv6_txoptions *opt;
  197. struct sk_buff *pktopt;
  198. if (sk->sk_protocol != IPPROTO_UDP &&
  199. sk->sk_protocol != IPPROTO_TCP)
  200. break;
  201. if (sk->sk_state != TCP_ESTABLISHED) {
  202. retv = -ENOTCONN;
  203. break;
  204. }
  205. if (ipv6_only_sock(sk) ||
  206. !(ipv6_addr_type(&np->daddr) & IPV6_ADDR_MAPPED)) {
  207. retv = -EADDRNOTAVAIL;
  208. break;
  209. }
  210. fl6_free_socklist(sk);
  211. ipv6_sock_mc_close(sk);
  212. /*
  213. * Sock is moving from IPv6 to IPv4 (sk_prot), so
  214. * remove it from the refcnt debug socks count in the
  215. * original family...
  216. */
  217. sk_refcnt_debug_dec(sk);
  218. if (sk->sk_protocol == IPPROTO_TCP) {
  219. struct inet_connection_sock *icsk = inet_csk(sk);
  220. local_bh_disable();
  221. sock_prot_dec_use(sk->sk_prot);
  222. sock_prot_inc_use(&tcp_prot);
  223. local_bh_enable();
  224. sk->sk_prot = &tcp_prot;
  225. icsk->icsk_af_ops = &ipv4_specific;
  226. sk->sk_socket->ops = &inet_stream_ops;
  227. sk->sk_family = PF_INET;
  228. tcp_sync_mss(sk, icsk->icsk_pmtu_cookie);
  229. } else {
  230. local_bh_disable();
  231. sock_prot_dec_use(sk->sk_prot);
  232. sock_prot_inc_use(&udp_prot);
  233. local_bh_enable();
  234. sk->sk_prot = &udp_prot;
  235. sk->sk_socket->ops = &inet_dgram_ops;
  236. sk->sk_family = PF_INET;
  237. }
  238. opt = xchg(&np->opt, NULL);
  239. if (opt)
  240. sock_kfree_s(sk, opt, opt->tot_len);
  241. pktopt = xchg(&np->pktoptions, NULL);
  242. if (pktopt)
  243. kfree_skb(pktopt);
  244. sk->sk_destruct = inet_sock_destruct;
  245. /*
  246. * ... and add it to the refcnt debug socks count
  247. * in the new family. -acme
  248. */
  249. sk_refcnt_debug_inc(sk);
  250. module_put(THIS_MODULE);
  251. retv = 0;
  252. break;
  253. }
  254. goto e_inval;
  255. case IPV6_V6ONLY:
  256. if (inet_sk(sk)->num)
  257. goto e_inval;
  258. np->ipv6only = valbool;
  259. retv = 0;
  260. break;
  261. case IPV6_RECVPKTINFO:
  262. np->rxopt.bits.rxinfo = valbool;
  263. retv = 0;
  264. break;
  265. case IPV6_2292PKTINFO:
  266. np->rxopt.bits.rxoinfo = valbool;
  267. retv = 0;
  268. break;
  269. case IPV6_RECVHOPLIMIT:
  270. np->rxopt.bits.rxhlim = valbool;
  271. retv = 0;
  272. break;
  273. case IPV6_2292HOPLIMIT:
  274. np->rxopt.bits.rxohlim = valbool;
  275. retv = 0;
  276. break;
  277. case IPV6_RECVRTHDR:
  278. if (val < 0 || val > 2)
  279. goto e_inval;
  280. np->rxopt.bits.srcrt = val;
  281. retv = 0;
  282. break;
  283. case IPV6_2292RTHDR:
  284. if (val < 0 || val > 2)
  285. goto e_inval;
  286. np->rxopt.bits.osrcrt = val;
  287. retv = 0;
  288. break;
  289. case IPV6_RECVHOPOPTS:
  290. np->rxopt.bits.hopopts = valbool;
  291. retv = 0;
  292. break;
  293. case IPV6_2292HOPOPTS:
  294. np->rxopt.bits.ohopopts = valbool;
  295. retv = 0;
  296. break;
  297. case IPV6_RECVDSTOPTS:
  298. np->rxopt.bits.dstopts = valbool;
  299. retv = 0;
  300. break;
  301. case IPV6_2292DSTOPTS:
  302. np->rxopt.bits.odstopts = valbool;
  303. retv = 0;
  304. break;
  305. case IPV6_TCLASS:
  306. if (val < -1 || val > 0xff)
  307. goto e_inval;
  308. np->tclass = val;
  309. retv = 0;
  310. break;
  311. case IPV6_RECVTCLASS:
  312. np->rxopt.bits.rxtclass = valbool;
  313. retv = 0;
  314. break;
  315. case IPV6_FLOWINFO:
  316. np->rxopt.bits.rxflow = valbool;
  317. retv = 0;
  318. break;
  319. case IPV6_HOPOPTS:
  320. case IPV6_RTHDRDSTOPTS:
  321. case IPV6_RTHDR:
  322. case IPV6_DSTOPTS:
  323. {
  324. struct ipv6_txoptions *opt;
  325. if (optlen == 0)
  326. optval = NULL;
  327. /* hop-by-hop / destination options are privileged option */
  328. retv = -EPERM;
  329. if (optname != IPV6_RTHDR && !capable(CAP_NET_RAW))
  330. break;
  331. retv = -EINVAL;
  332. if (optlen & 0x7 || optlen > 8 * 255)
  333. break;
  334. opt = ipv6_renew_options(sk, np->opt, optname,
  335. (struct ipv6_opt_hdr __user *)optval,
  336. optlen);
  337. if (IS_ERR(opt)) {
  338. retv = PTR_ERR(opt);
  339. break;
  340. }
  341. /* routing header option needs extra check */
  342. if (optname == IPV6_RTHDR && opt->srcrt) {
  343. struct ipv6_rt_hdr *rthdr = opt->srcrt;
  344. switch (rthdr->type) {
  345. case IPV6_SRCRT_TYPE_0:
  346. #ifdef CONFIG_IPV6_MIP6
  347. case IPV6_SRCRT_TYPE_2:
  348. #endif
  349. break;
  350. default:
  351. goto sticky_done;
  352. }
  353. if ((rthdr->hdrlen & 1) ||
  354. (rthdr->hdrlen >> 1) != rthdr->segments_left)
  355. goto sticky_done;
  356. }
  357. retv = 0;
  358. if (inet_sk(sk)->is_icsk) {
  359. if (opt) {
  360. struct inet_connection_sock *icsk = inet_csk(sk);
  361. if (!((1 << sk->sk_state) &
  362. (TCPF_LISTEN | TCPF_CLOSE))
  363. && inet_sk(sk)->daddr != LOOPBACK4_IPV6) {
  364. icsk->icsk_ext_hdr_len =
  365. opt->opt_flen + opt->opt_nflen;
  366. icsk->icsk_sync_mss(sk, icsk->icsk_pmtu_cookie);
  367. }
  368. }
  369. opt = xchg(&np->opt, opt);
  370. sk_dst_reset(sk);
  371. } else {
  372. write_lock(&sk->sk_dst_lock);
  373. opt = xchg(&np->opt, opt);
  374. write_unlock(&sk->sk_dst_lock);
  375. sk_dst_reset(sk);
  376. }
  377. sticky_done:
  378. if (opt)
  379. sock_kfree_s(sk, opt, opt->tot_len);
  380. break;
  381. }
  382. case IPV6_2292PKTOPTIONS:
  383. {
  384. struct ipv6_txoptions *opt = NULL;
  385. struct msghdr msg;
  386. struct flowi fl;
  387. int junk;
  388. fl.fl6_flowlabel = 0;
  389. fl.oif = sk->sk_bound_dev_if;
  390. if (optlen == 0)
  391. goto update;
  392. /* 1K is probably excessive
  393. * 1K is surely not enough, 2K per standard header is 16K.
  394. */
  395. retv = -EINVAL;
  396. if (optlen > 64*1024)
  397. break;
  398. opt = sock_kmalloc(sk, sizeof(*opt) + optlen, GFP_KERNEL);
  399. retv = -ENOBUFS;
  400. if (opt == NULL)
  401. break;
  402. memset(opt, 0, sizeof(*opt));
  403. opt->tot_len = sizeof(*opt) + optlen;
  404. retv = -EFAULT;
  405. if (copy_from_user(opt+1, optval, optlen))
  406. goto done;
  407. msg.msg_controllen = optlen;
  408. msg.msg_control = (void*)(opt+1);
  409. retv = datagram_send_ctl(&msg, &fl, opt, &junk, &junk);
  410. if (retv)
  411. goto done;
  412. update:
  413. retv = 0;
  414. if (inet_sk(sk)->is_icsk) {
  415. if (opt) {
  416. struct inet_connection_sock *icsk = inet_csk(sk);
  417. if (!((1 << sk->sk_state) &
  418. (TCPF_LISTEN | TCPF_CLOSE))
  419. && inet_sk(sk)->daddr != LOOPBACK4_IPV6) {
  420. icsk->icsk_ext_hdr_len =
  421. opt->opt_flen + opt->opt_nflen;
  422. icsk->icsk_sync_mss(sk, icsk->icsk_pmtu_cookie);
  423. }
  424. }
  425. opt = xchg(&np->opt, opt);
  426. sk_dst_reset(sk);
  427. } else {
  428. write_lock(&sk->sk_dst_lock);
  429. opt = xchg(&np->opt, opt);
  430. write_unlock(&sk->sk_dst_lock);
  431. sk_dst_reset(sk);
  432. }
  433. done:
  434. if (opt)
  435. sock_kfree_s(sk, opt, opt->tot_len);
  436. break;
  437. }
  438. case IPV6_UNICAST_HOPS:
  439. if (val > 255 || val < -1)
  440. goto e_inval;
  441. np->hop_limit = val;
  442. retv = 0;
  443. break;
  444. case IPV6_MULTICAST_HOPS:
  445. if (sk->sk_type == SOCK_STREAM)
  446. goto e_inval;
  447. if (val > 255 || val < -1)
  448. goto e_inval;
  449. np->mcast_hops = val;
  450. retv = 0;
  451. break;
  452. case IPV6_MULTICAST_LOOP:
  453. np->mc_loop = valbool;
  454. retv = 0;
  455. break;
  456. case IPV6_MULTICAST_IF:
  457. if (sk->sk_type == SOCK_STREAM)
  458. goto e_inval;
  459. if (sk->sk_bound_dev_if && sk->sk_bound_dev_if != val)
  460. goto e_inval;
  461. if (__dev_get_by_index(val) == NULL) {
  462. retv = -ENODEV;
  463. break;
  464. }
  465. np->mcast_oif = val;
  466. retv = 0;
  467. break;
  468. case IPV6_ADD_MEMBERSHIP:
  469. case IPV6_DROP_MEMBERSHIP:
  470. {
  471. struct ipv6_mreq mreq;
  472. retv = -EFAULT;
  473. if (copy_from_user(&mreq, optval, sizeof(struct ipv6_mreq)))
  474. break;
  475. if (optname == IPV6_ADD_MEMBERSHIP)
  476. retv = ipv6_sock_mc_join(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_multiaddr);
  477. else
  478. retv = ipv6_sock_mc_drop(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_multiaddr);
  479. break;
  480. }
  481. case IPV6_JOIN_ANYCAST:
  482. case IPV6_LEAVE_ANYCAST:
  483. {
  484. struct ipv6_mreq mreq;
  485. if (optlen != sizeof(struct ipv6_mreq))
  486. goto e_inval;
  487. retv = -EFAULT;
  488. if (copy_from_user(&mreq, optval, sizeof(struct ipv6_mreq)))
  489. break;
  490. if (optname == IPV6_JOIN_ANYCAST)
  491. retv = ipv6_sock_ac_join(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_acaddr);
  492. else
  493. retv = ipv6_sock_ac_drop(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_acaddr);
  494. break;
  495. }
  496. case MCAST_JOIN_GROUP:
  497. case MCAST_LEAVE_GROUP:
  498. {
  499. struct group_req greq;
  500. struct sockaddr_in6 *psin6;
  501. retv = -EFAULT;
  502. if (copy_from_user(&greq, optval, sizeof(struct group_req)))
  503. break;
  504. if (greq.gr_group.ss_family != AF_INET6) {
  505. retv = -EADDRNOTAVAIL;
  506. break;
  507. }
  508. psin6 = (struct sockaddr_in6 *)&greq.gr_group;
  509. if (optname == MCAST_JOIN_GROUP)
  510. retv = ipv6_sock_mc_join(sk, greq.gr_interface,
  511. &psin6->sin6_addr);
  512. else
  513. retv = ipv6_sock_mc_drop(sk, greq.gr_interface,
  514. &psin6->sin6_addr);
  515. break;
  516. }
  517. case MCAST_JOIN_SOURCE_GROUP:
  518. case MCAST_LEAVE_SOURCE_GROUP:
  519. case MCAST_BLOCK_SOURCE:
  520. case MCAST_UNBLOCK_SOURCE:
  521. {
  522. struct group_source_req greqs;
  523. int omode, add;
  524. if (optlen != sizeof(struct group_source_req))
  525. goto e_inval;
  526. if (copy_from_user(&greqs, optval, sizeof(greqs))) {
  527. retv = -EFAULT;
  528. break;
  529. }
  530. if (greqs.gsr_group.ss_family != AF_INET6 ||
  531. greqs.gsr_source.ss_family != AF_INET6) {
  532. retv = -EADDRNOTAVAIL;
  533. break;
  534. }
  535. if (optname == MCAST_BLOCK_SOURCE) {
  536. omode = MCAST_EXCLUDE;
  537. add = 1;
  538. } else if (optname == MCAST_UNBLOCK_SOURCE) {
  539. omode = MCAST_EXCLUDE;
  540. add = 0;
  541. } else if (optname == MCAST_JOIN_SOURCE_GROUP) {
  542. struct sockaddr_in6 *psin6;
  543. psin6 = (struct sockaddr_in6 *)&greqs.gsr_group;
  544. retv = ipv6_sock_mc_join(sk, greqs.gsr_interface,
  545. &psin6->sin6_addr);
  546. /* prior join w/ different source is ok */
  547. if (retv && retv != -EADDRINUSE)
  548. break;
  549. omode = MCAST_INCLUDE;
  550. add = 1;
  551. } else /* MCAST_LEAVE_SOURCE_GROUP */ {
  552. omode = MCAST_INCLUDE;
  553. add = 0;
  554. }
  555. retv = ip6_mc_source(add, omode, sk, &greqs);
  556. break;
  557. }
  558. case MCAST_MSFILTER:
  559. {
  560. extern int sysctl_mld_max_msf;
  561. struct group_filter *gsf;
  562. if (optlen < GROUP_FILTER_SIZE(0))
  563. goto e_inval;
  564. if (optlen > sysctl_optmem_max) {
  565. retv = -ENOBUFS;
  566. break;
  567. }
  568. gsf = kmalloc(optlen,GFP_KERNEL);
  569. if (gsf == 0) {
  570. retv = -ENOBUFS;
  571. break;
  572. }
  573. retv = -EFAULT;
  574. if (copy_from_user(gsf, optval, optlen)) {
  575. kfree(gsf);
  576. break;
  577. }
  578. /* numsrc >= (4G-140)/128 overflow in 32 bits */
  579. if (gsf->gf_numsrc >= 0x1ffffffU ||
  580. gsf->gf_numsrc > sysctl_mld_max_msf) {
  581. kfree(gsf);
  582. retv = -ENOBUFS;
  583. break;
  584. }
  585. if (GROUP_FILTER_SIZE(gsf->gf_numsrc) > optlen) {
  586. kfree(gsf);
  587. retv = -EINVAL;
  588. break;
  589. }
  590. retv = ip6_mc_msfilter(sk, gsf);
  591. kfree(gsf);
  592. break;
  593. }
  594. case IPV6_ROUTER_ALERT:
  595. retv = ip6_ra_control(sk, val, NULL);
  596. break;
  597. case IPV6_MTU_DISCOVER:
  598. if (val<0 || val>2)
  599. goto e_inval;
  600. np->pmtudisc = val;
  601. retv = 0;
  602. break;
  603. case IPV6_MTU:
  604. if (val && val < IPV6_MIN_MTU)
  605. goto e_inval;
  606. np->frag_size = val;
  607. retv = 0;
  608. break;
  609. case IPV6_RECVERR:
  610. np->recverr = valbool;
  611. if (!val)
  612. skb_queue_purge(&sk->sk_error_queue);
  613. retv = 0;
  614. break;
  615. case IPV6_FLOWINFO_SEND:
  616. np->sndflow = valbool;
  617. retv = 0;
  618. break;
  619. case IPV6_FLOWLABEL_MGR:
  620. retv = ipv6_flowlabel_opt(sk, optval, optlen);
  621. break;
  622. case IPV6_IPSEC_POLICY:
  623. case IPV6_XFRM_POLICY:
  624. retv = -EPERM;
  625. if (!capable(CAP_NET_ADMIN))
  626. break;
  627. retv = xfrm_user_policy(sk, optname, optval, optlen);
  628. break;
  629. }
  630. release_sock(sk);
  631. return retv;
  632. e_inval:
  633. release_sock(sk);
  634. return -EINVAL;
  635. }
  636. int ipv6_setsockopt(struct sock *sk, int level, int optname,
  637. char __user *optval, int optlen)
  638. {
  639. int err;
  640. if (level == SOL_IP && sk->sk_type != SOCK_RAW)
  641. return udp_prot.setsockopt(sk, level, optname, optval, optlen);
  642. if (level != SOL_IPV6)
  643. return -ENOPROTOOPT;
  644. err = do_ipv6_setsockopt(sk, level, optname, optval, optlen);
  645. #ifdef CONFIG_NETFILTER
  646. /* we need to exclude all possible ENOPROTOOPTs except default case */
  647. if (err == -ENOPROTOOPT && optname != IPV6_IPSEC_POLICY &&
  648. optname != IPV6_XFRM_POLICY) {
  649. lock_sock(sk);
  650. err = nf_setsockopt(sk, PF_INET6, optname, optval,
  651. optlen);
  652. release_sock(sk);
  653. }
  654. #endif
  655. return err;
  656. }
  657. #ifdef CONFIG_COMPAT
  658. int compat_ipv6_setsockopt(struct sock *sk, int level, int optname,
  659. char __user *optval, int optlen)
  660. {
  661. int err;
  662. if (level == SOL_IP && sk->sk_type != SOCK_RAW) {
  663. if (udp_prot.compat_setsockopt != NULL)
  664. return udp_prot.compat_setsockopt(sk, level, optname,
  665. optval, optlen);
  666. return udp_prot.setsockopt(sk, level, optname, optval, optlen);
  667. }
  668. if (level != SOL_IPV6)
  669. return -ENOPROTOOPT;
  670. err = do_ipv6_setsockopt(sk, level, optname, optval, optlen);
  671. #ifdef CONFIG_NETFILTER
  672. /* we need to exclude all possible ENOPROTOOPTs except default case */
  673. if (err == -ENOPROTOOPT && optname != IPV6_IPSEC_POLICY &&
  674. optname != IPV6_XFRM_POLICY) {
  675. lock_sock(sk);
  676. err = compat_nf_setsockopt(sk, PF_INET6, optname,
  677. optval, optlen);
  678. release_sock(sk);
  679. }
  680. #endif
  681. return err;
  682. }
  683. EXPORT_SYMBOL(compat_ipv6_setsockopt);
  684. #endif
  685. static int ipv6_getsockopt_sticky(struct sock *sk, struct ipv6_opt_hdr *hdr,
  686. char __user *optval, int len)
  687. {
  688. if (!hdr)
  689. return 0;
  690. len = min_t(int, len, ipv6_optlen(hdr));
  691. if (copy_to_user(optval, hdr, ipv6_optlen(hdr)))
  692. return -EFAULT;
  693. return len;
  694. }
  695. static int do_ipv6_getsockopt(struct sock *sk, int level, int optname,
  696. char __user *optval, int __user *optlen)
  697. {
  698. struct ipv6_pinfo *np = inet6_sk(sk);
  699. int len;
  700. int val;
  701. if (get_user(len, optlen))
  702. return -EFAULT;
  703. switch (optname) {
  704. case IPV6_ADDRFORM:
  705. if (sk->sk_protocol != IPPROTO_UDP &&
  706. sk->sk_protocol != IPPROTO_TCP)
  707. return -EINVAL;
  708. if (sk->sk_state != TCP_ESTABLISHED)
  709. return -ENOTCONN;
  710. val = sk->sk_family;
  711. break;
  712. case MCAST_MSFILTER:
  713. {
  714. struct group_filter gsf;
  715. int err;
  716. if (len < GROUP_FILTER_SIZE(0))
  717. return -EINVAL;
  718. if (copy_from_user(&gsf, optval, GROUP_FILTER_SIZE(0)))
  719. return -EFAULT;
  720. lock_sock(sk);
  721. err = ip6_mc_msfget(sk, &gsf,
  722. (struct group_filter __user *)optval, optlen);
  723. release_sock(sk);
  724. return err;
  725. }
  726. case IPV6_2292PKTOPTIONS:
  727. {
  728. struct msghdr msg;
  729. struct sk_buff *skb;
  730. if (sk->sk_type != SOCK_STREAM)
  731. return -ENOPROTOOPT;
  732. msg.msg_control = optval;
  733. msg.msg_controllen = len;
  734. msg.msg_flags = 0;
  735. lock_sock(sk);
  736. skb = np->pktoptions;
  737. if (skb)
  738. atomic_inc(&skb->users);
  739. release_sock(sk);
  740. if (skb) {
  741. int err = datagram_recv_ctl(sk, &msg, skb);
  742. kfree_skb(skb);
  743. if (err)
  744. return err;
  745. } else {
  746. if (np->rxopt.bits.rxinfo) {
  747. struct in6_pktinfo src_info;
  748. src_info.ipi6_ifindex = np->mcast_oif;
  749. ipv6_addr_copy(&src_info.ipi6_addr, &np->daddr);
  750. put_cmsg(&msg, SOL_IPV6, IPV6_PKTINFO, sizeof(src_info), &src_info);
  751. }
  752. if (np->rxopt.bits.rxhlim) {
  753. int hlim = np->mcast_hops;
  754. put_cmsg(&msg, SOL_IPV6, IPV6_HOPLIMIT, sizeof(hlim), &hlim);
  755. }
  756. if (np->rxopt.bits.rxoinfo) {
  757. struct in6_pktinfo src_info;
  758. src_info.ipi6_ifindex = np->mcast_oif;
  759. ipv6_addr_copy(&src_info.ipi6_addr, &np->daddr);
  760. put_cmsg(&msg, SOL_IPV6, IPV6_2292PKTINFO, sizeof(src_info), &src_info);
  761. }
  762. if (np->rxopt.bits.rxohlim) {
  763. int hlim = np->mcast_hops;
  764. put_cmsg(&msg, SOL_IPV6, IPV6_2292HOPLIMIT, sizeof(hlim), &hlim);
  765. }
  766. }
  767. len -= msg.msg_controllen;
  768. return put_user(len, optlen);
  769. }
  770. case IPV6_MTU:
  771. {
  772. struct dst_entry *dst;
  773. val = 0;
  774. lock_sock(sk);
  775. dst = sk_dst_get(sk);
  776. if (dst) {
  777. val = dst_mtu(dst);
  778. dst_release(dst);
  779. }
  780. release_sock(sk);
  781. if (!val)
  782. return -ENOTCONN;
  783. break;
  784. }
  785. case IPV6_V6ONLY:
  786. val = np->ipv6only;
  787. break;
  788. case IPV6_RECVPKTINFO:
  789. val = np->rxopt.bits.rxinfo;
  790. break;
  791. case IPV6_2292PKTINFO:
  792. val = np->rxopt.bits.rxoinfo;
  793. break;
  794. case IPV6_RECVHOPLIMIT:
  795. val = np->rxopt.bits.rxhlim;
  796. break;
  797. case IPV6_2292HOPLIMIT:
  798. val = np->rxopt.bits.rxohlim;
  799. break;
  800. case IPV6_RECVRTHDR:
  801. val = np->rxopt.bits.srcrt;
  802. break;
  803. case IPV6_2292RTHDR:
  804. val = np->rxopt.bits.osrcrt;
  805. break;
  806. case IPV6_HOPOPTS:
  807. case IPV6_RTHDRDSTOPTS:
  808. case IPV6_RTHDR:
  809. case IPV6_DSTOPTS:
  810. {
  811. lock_sock(sk);
  812. len = ipv6_getsockopt_sticky(sk, np->opt->hopopt,
  813. optval, len);
  814. release_sock(sk);
  815. return put_user(len, optlen);
  816. }
  817. case IPV6_RECVHOPOPTS:
  818. val = np->rxopt.bits.hopopts;
  819. break;
  820. case IPV6_2292HOPOPTS:
  821. val = np->rxopt.bits.ohopopts;
  822. break;
  823. case IPV6_RECVDSTOPTS:
  824. val = np->rxopt.bits.dstopts;
  825. break;
  826. case IPV6_2292DSTOPTS:
  827. val = np->rxopt.bits.odstopts;
  828. break;
  829. case IPV6_TCLASS:
  830. val = np->tclass;
  831. if (val < 0)
  832. val = 0;
  833. break;
  834. case IPV6_RECVTCLASS:
  835. val = np->rxopt.bits.rxtclass;
  836. break;
  837. case IPV6_FLOWINFO:
  838. val = np->rxopt.bits.rxflow;
  839. break;
  840. case IPV6_UNICAST_HOPS:
  841. val = np->hop_limit;
  842. break;
  843. case IPV6_MULTICAST_HOPS:
  844. val = np->mcast_hops;
  845. break;
  846. case IPV6_MULTICAST_LOOP:
  847. val = np->mc_loop;
  848. break;
  849. case IPV6_MULTICAST_IF:
  850. val = np->mcast_oif;
  851. break;
  852. case IPV6_MTU_DISCOVER:
  853. val = np->pmtudisc;
  854. break;
  855. case IPV6_RECVERR:
  856. val = np->recverr;
  857. break;
  858. case IPV6_FLOWINFO_SEND:
  859. val = np->sndflow;
  860. break;
  861. default:
  862. return -EINVAL;
  863. }
  864. len = min_t(unsigned int, sizeof(int), len);
  865. if(put_user(len, optlen))
  866. return -EFAULT;
  867. if(copy_to_user(optval,&val,len))
  868. return -EFAULT;
  869. return 0;
  870. }
  871. int ipv6_getsockopt(struct sock *sk, int level, int optname,
  872. char __user *optval, int __user *optlen)
  873. {
  874. int err;
  875. if (level == SOL_IP && sk->sk_type != SOCK_RAW)
  876. return udp_prot.getsockopt(sk, level, optname, optval, optlen);
  877. if(level != SOL_IPV6)
  878. return -ENOPROTOOPT;
  879. err = do_ipv6_getsockopt(sk, level, optname, optval, optlen);
  880. #ifdef CONFIG_NETFILTER
  881. /* we need to exclude all possible EINVALs except default case */
  882. if (err == -EINVAL && optname != IPV6_ADDRFORM &&
  883. optname != MCAST_MSFILTER) {
  884. int len;
  885. if (get_user(len, optlen))
  886. return -EFAULT;
  887. lock_sock(sk);
  888. err = nf_getsockopt(sk, PF_INET6, optname, optval,
  889. &len);
  890. release_sock(sk);
  891. if (err >= 0)
  892. err = put_user(len, optlen);
  893. }
  894. #endif
  895. return err;
  896. }
  897. #ifdef CONFIG_COMPAT
  898. int compat_ipv6_getsockopt(struct sock *sk, int level, int optname,
  899. char __user *optval, int __user *optlen)
  900. {
  901. int err;
  902. if (level == SOL_IP && sk->sk_type != SOCK_RAW) {
  903. if (udp_prot.compat_getsockopt != NULL)
  904. return udp_prot.compat_getsockopt(sk, level, optname,
  905. optval, optlen);
  906. return udp_prot.getsockopt(sk, level, optname, optval, optlen);
  907. }
  908. if (level != SOL_IPV6)
  909. return -ENOPROTOOPT;
  910. err = do_ipv6_getsockopt(sk, level, optname, optval, optlen);
  911. #ifdef CONFIG_NETFILTER
  912. /* we need to exclude all possible EINVALs except default case */
  913. if (err == -EINVAL && optname != IPV6_ADDRFORM &&
  914. optname != MCAST_MSFILTER) {
  915. int len;
  916. if (get_user(len, optlen))
  917. return -EFAULT;
  918. lock_sock(sk);
  919. err = compat_nf_getsockopt(sk, PF_INET6,
  920. optname, optval, &len);
  921. release_sock(sk);
  922. if (err >= 0)
  923. err = put_user(len, optlen);
  924. }
  925. #endif
  926. return err;
  927. }
  928. EXPORT_SYMBOL(compat_ipv6_getsockopt);
  929. #endif
  930. void __init ipv6_packet_init(void)
  931. {
  932. dev_add_pack(&ipv6_packet_type);
  933. }
  934. void ipv6_packet_cleanup(void)
  935. {
  936. dev_remove_pack(&ipv6_packet_type);
  937. }