2005-04-17 06:20:36 +08:00
|
|
|
/*
|
|
|
|
* Internet Control Message Protocol (ICMPv6)
|
|
|
|
* Linux INET6 implementation
|
|
|
|
*
|
|
|
|
* Authors:
|
|
|
|
* Pedro Roque <roque@di.fc.ul.pt>
|
|
|
|
*
|
|
|
|
* Based on net/ipv4/icmp.c
|
|
|
|
*
|
|
|
|
* RFC 1885
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
* as published by the Free Software Foundation; either version
|
|
|
|
* 2 of the License, or (at your option) any later version.
|
|
|
|
*/
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Changes:
|
|
|
|
*
|
|
|
|
* Andi Kleen : exception handling
|
|
|
|
* Andi Kleen add rate limits. never reply to a icmp.
|
|
|
|
* add more length checks and other fixes.
|
|
|
|
* yoshfuji : ensure to sent parameter problem for
|
|
|
|
* fragments.
|
|
|
|
* YOSHIFUJI Hideaki @USAGI: added sysctl for icmp rate limit.
|
|
|
|
* Randy Dunlap and
|
|
|
|
* YOSHIFUJI Hideaki @USAGI: Per-interface statistics support
|
|
|
|
* Kazunori MIYAZAWA @USAGI: change output process to use ip6_append_data
|
|
|
|
*/
|
|
|
|
|
2012-05-15 22:11:53 +08:00
|
|
|
#define pr_fmt(fmt) "IPv6: " fmt
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
#include <linux/module.h>
|
|
|
|
#include <linux/errno.h>
|
|
|
|
#include <linux/types.h>
|
|
|
|
#include <linux/socket.h>
|
|
|
|
#include <linux/in.h>
|
|
|
|
#include <linux/kernel.h>
|
|
|
|
#include <linux/sockios.h>
|
|
|
|
#include <linux/net.h>
|
|
|
|
#include <linux/skbuff.h>
|
|
|
|
#include <linux/init.h>
|
2006-02-16 07:24:15 +08:00
|
|
|
#include <linux/netfilter.h>
|
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
percpu.h is included by sched.h and module.h and thus ends up being
included when building most .c files. percpu.h includes slab.h which
in turn includes gfp.h making everything defined by the two files
universally available and complicating inclusion dependencies.
percpu.h -> slab.h dependency is about to be removed. Prepare for
this change by updating users of gfp and slab facilities include those
headers directly instead of assuming availability. As this conversion
needs to touch large number of source files, the following script is
used as the basis of conversion.
http://userweb.kernel.org/~tj/misc/slabh-sweep.py
The script does the followings.
* Scan files for gfp and slab usages and update includes such that
only the necessary includes are there. ie. if only gfp is used,
gfp.h, if slab is used, slab.h.
* When the script inserts a new include, it looks at the include
blocks and try to put the new include such that its order conforms
to its surrounding. It's put in the include block which contains
core kernel includes, in the same order that the rest are ordered -
alphabetical, Christmas tree, rev-Xmas-tree or at the end if there
doesn't seem to be any matching order.
* If the script can't find a place to put a new include (mostly
because the file doesn't have fitting include block), it prints out
an error message indicating which .h file needs to be added to the
file.
The conversion was done in the following steps.
1. The initial automatic conversion of all .c files updated slightly
over 4000 files, deleting around 700 includes and adding ~480 gfp.h
and ~3000 slab.h inclusions. The script emitted errors for ~400
files.
2. Each error was manually checked. Some didn't need the inclusion,
some needed manual addition while adding it to implementation .h or
embedding .c file was more appropriate for others. This step added
inclusions to around 150 files.
3. The script was run again and the output was compared to the edits
from #2 to make sure no file was left behind.
4. Several build tests were done and a couple of problems were fixed.
e.g. lib/decompress_*.c used malloc/free() wrappers around slab
APIs requiring slab.h to be added manually.
5. The script was run on all .h files but without automatically
editing them as sprinkling gfp.h and slab.h inclusions around .h
files could easily lead to inclusion dependency hell. Most gfp.h
inclusion directives were ignored as stuff from gfp.h was usually
wildly available and often used in preprocessor macros. Each
slab.h inclusion directive was examined and added manually as
necessary.
6. percpu.h was updated not to include slab.h.
7. Build test were done on the following configurations and failures
were fixed. CONFIG_GCOV_KERNEL was turned off for all tests (as my
distributed build env didn't work with gcov compiles) and a few
more options had to be turned off depending on archs to make things
build (like ipr on powerpc/64 which failed due to missing writeq).
* x86 and x86_64 UP and SMP allmodconfig and a custom test config.
* powerpc and powerpc64 SMP allmodconfig
* sparc and sparc64 SMP allmodconfig
* ia64 SMP allmodconfig
* s390 SMP allmodconfig
* alpha SMP allmodconfig
* um on x86_64 SMP allmodconfig
8. percpu.h modifications were reverted so that it could be applied as
a separate patch and serve as bisection point.
Given the fact that I had only a couple of failures from tests on step
6, I'm fairly confident about the coverage of this conversion patch.
If there is a breakage, it's likely to be something in one of the arch
headers which should be easily discoverable easily on most builds of
the specific arch.
Signed-off-by: Tejun Heo <tj@kernel.org>
Guess-its-ok-by: Christoph Lameter <cl@linux-foundation.org>
Cc: Ingo Molnar <mingo@redhat.com>
Cc: Lee Schermerhorn <Lee.Schermerhorn@hp.com>
2010-03-24 16:04:11 +08:00
|
|
|
#include <linux/slab.h>
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
#ifdef CONFIG_SYSCTL
|
|
|
|
#include <linux/sysctl.h>
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#include <linux/inet.h>
|
|
|
|
#include <linux/netdevice.h>
|
|
|
|
#include <linux/icmpv6.h>
|
|
|
|
|
|
|
|
#include <net/ip.h>
|
|
|
|
#include <net/sock.h>
|
|
|
|
|
|
|
|
#include <net/ipv6.h>
|
|
|
|
#include <net/ip6_checksum.h>
|
2013-05-23 04:17:31 +08:00
|
|
|
#include <net/ping.h>
|
2005-04-17 06:20:36 +08:00
|
|
|
#include <net/protocol.h>
|
|
|
|
#include <net/raw.h>
|
|
|
|
#include <net/rawv6.h>
|
|
|
|
#include <net/transp_v6.h>
|
|
|
|
#include <net/ip6_route.h>
|
|
|
|
#include <net/addrconf.h>
|
|
|
|
#include <net/icmp.h>
|
2007-12-13 02:44:43 +08:00
|
|
|
#include <net/xfrm.h>
|
2008-04-04 05:31:03 +08:00
|
|
|
#include <net/inet_common.h>
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
#include <asm/uaccess.h>
|
|
|
|
|
|
|
|
/*
|
|
|
|
* The ICMP socket(s). This is the most convenient way to flow control
|
|
|
|
* our ICMP output as well as maintain a clean interface throughout
|
|
|
|
* all layers. All Socketless IP sends will soon be gone.
|
|
|
|
*
|
|
|
|
* On SMP we have one ICMP socket per-cpu.
|
|
|
|
*/
|
2008-03-01 03:21:22 +08:00
|
|
|
static inline struct sock *icmpv6_sk(struct net *net)
|
|
|
|
{
|
|
|
|
return net->ipv6.icmp_sk[smp_processor_id()];
|
|
|
|
}
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2013-01-17 06:09:49 +08:00
|
|
|
static void icmpv6_err(struct sk_buff *skb, struct inet6_skb_parm *opt,
|
|
|
|
u8 type, u8 code, int offset, __be32 info)
|
|
|
|
{
|
2013-05-23 04:17:31 +08:00
|
|
|
/* icmpv6_notify checks 8 bytes can be pulled, icmp6hdr is 8 bytes */
|
|
|
|
struct icmp6hdr *icmp6 = (struct icmp6hdr *) (skb->data + offset);
|
2013-01-17 06:09:49 +08:00
|
|
|
struct net *net = dev_net(skb->dev);
|
|
|
|
|
|
|
|
if (type == ICMPV6_PKT_TOOBIG)
|
|
|
|
ip6_update_pmtu(skb, net, info, 0, 0);
|
|
|
|
else if (type == NDISC_REDIRECT)
|
2013-09-04 19:44:21 +08:00
|
|
|
ip6_redirect(skb, net, skb->dev->ifindex, 0);
|
2013-05-23 04:17:31 +08:00
|
|
|
|
|
|
|
if (!(type & ICMPV6_INFOMSG_MASK))
|
|
|
|
if (icmp6->icmp6_type == ICMPV6_ECHO_REQUEST)
|
|
|
|
ping_err(skb, offset, info);
|
2013-01-17 06:09:49 +08:00
|
|
|
}
|
|
|
|
|
2007-10-16 03:50:28 +08:00
|
|
|
static int icmpv6_rcv(struct sk_buff *skb);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2009-09-14 20:22:28 +08:00
|
|
|
static const struct inet6_protocol icmpv6_protocol = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.handler = icmpv6_rcv,
|
2013-01-17 06:09:49 +08:00
|
|
|
.err_handler = icmpv6_err,
|
2007-12-13 02:44:43 +08:00
|
|
|
.flags = INET6_PROTO_NOPOLICY|INET6_PROTO_FINAL,
|
2005-04-17 06:20:36 +08:00
|
|
|
};
|
|
|
|
|
2008-08-23 19:43:33 +08:00
|
|
|
static __inline__ struct sock *icmpv6_xmit_lock(struct net *net)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2008-08-23 19:43:33 +08:00
|
|
|
struct sock *sk;
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
local_bh_disable();
|
|
|
|
|
2008-08-23 19:43:33 +08:00
|
|
|
sk = icmpv6_sk(net);
|
2008-03-01 03:16:46 +08:00
|
|
|
if (unlikely(!spin_trylock(&sk->sk_lock.slock))) {
|
2005-04-17 06:20:36 +08:00
|
|
|
/* This can happen if the output path (f.e. SIT or
|
|
|
|
* ip6ip6 tunnel) signals dst_link_failure() for an
|
|
|
|
* outgoing ICMP6 packet.
|
|
|
|
*/
|
|
|
|
local_bh_enable();
|
2008-08-23 19:43:33 +08:00
|
|
|
return NULL;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
2008-08-23 19:43:33 +08:00
|
|
|
return sk;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
2008-03-01 03:16:46 +08:00
|
|
|
static __inline__ void icmpv6_xmit_unlock(struct sock *sk)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2008-03-01 03:16:46 +08:00
|
|
|
spin_unlock_bh(&sk->sk_lock.slock);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Figure out, may we reply to this packet with icmp error.
|
|
|
|
*
|
|
|
|
* We do not reply, if:
|
|
|
|
* - it was icmp error message.
|
|
|
|
* - it is truncated, so that it is known, that protocol is ICMPV6
|
|
|
|
* (i.e. in the middle of some exthdr)
|
|
|
|
*
|
|
|
|
* --ANK (980726)
|
|
|
|
*/
|
|
|
|
|
2012-05-19 02:57:34 +08:00
|
|
|
static bool is_ineligible(const struct sk_buff *skb)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2007-04-26 08:54:47 +08:00
|
|
|
int ptr = (u8 *)(ipv6_hdr(skb) + 1) - skb->data;
|
2005-04-17 06:20:36 +08:00
|
|
|
int len = skb->len - ptr;
|
2007-04-26 08:54:47 +08:00
|
|
|
__u8 nexthdr = ipv6_hdr(skb)->nexthdr;
|
2011-12-01 09:05:51 +08:00
|
|
|
__be16 frag_off;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
if (len < 0)
|
2012-05-19 02:57:34 +08:00
|
|
|
return true;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2011-12-01 09:05:51 +08:00
|
|
|
ptr = ipv6_skip_exthdr(skb, ptr, &nexthdr, &frag_off);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (ptr < 0)
|
2012-05-19 02:57:34 +08:00
|
|
|
return false;
|
2005-04-17 06:20:36 +08:00
|
|
|
if (nexthdr == IPPROTO_ICMPV6) {
|
|
|
|
u8 _type, *tp;
|
|
|
|
tp = skb_header_pointer(skb,
|
|
|
|
ptr+offsetof(struct icmp6hdr, icmp6_type),
|
|
|
|
sizeof(_type), &_type);
|
|
|
|
if (tp == NULL ||
|
|
|
|
!(*tp & ICMPV6_INFOMSG_MASK))
|
2012-05-19 02:57:34 +08:00
|
|
|
return true;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
2012-05-19 02:57:34 +08:00
|
|
|
return false;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
2007-02-09 22:24:49 +08:00
|
|
|
/*
|
|
|
|
* Check the ICMP output rate limit
|
2005-04-17 06:20:36 +08:00
|
|
|
*/
|
2011-02-05 07:55:25 +08:00
|
|
|
static inline bool icmpv6_xrlim_allow(struct sock *sk, u8 type,
|
2011-03-13 05:22:43 +08:00
|
|
|
struct flowi6 *fl6)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
struct dst_entry *dst;
|
2008-03-26 01:26:21 +08:00
|
|
|
struct net *net = sock_net(sk);
|
2011-02-05 07:55:25 +08:00
|
|
|
bool res = false;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
/* Informational messages are not limited. */
|
|
|
|
if (type & ICMPV6_INFOMSG_MASK)
|
2011-02-05 07:55:25 +08:00
|
|
|
return true;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
/* Do not limit pmtu discovery, it would break it. */
|
|
|
|
if (type == ICMPV6_PKT_TOOBIG)
|
2011-02-05 07:55:25 +08:00
|
|
|
return true;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-02-09 22:24:49 +08:00
|
|
|
/*
|
2005-04-17 06:20:36 +08:00
|
|
|
* Look up the output route.
|
|
|
|
* XXX: perhaps the expire for routing entries cloned by
|
|
|
|
* this lookup should be more aggressive (not longer than timeout).
|
|
|
|
*/
|
2011-03-13 05:22:43 +08:00
|
|
|
dst = ip6_route_output(net, sk, fl6);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (dst->error) {
|
2008-10-09 01:54:51 +08:00
|
|
|
IP6_INC_STATS(net, ip6_dst_idev(dst),
|
2006-11-04 19:11:37 +08:00
|
|
|
IPSTATS_MIB_OUTNOROUTES);
|
2005-04-17 06:20:36 +08:00
|
|
|
} else if (dst->dev && (dst->dev->flags&IFF_LOOPBACK)) {
|
2011-02-05 07:55:25 +08:00
|
|
|
res = true;
|
2005-04-17 06:20:36 +08:00
|
|
|
} else {
|
|
|
|
struct rt6_info *rt = (struct rt6_info *)dst;
|
2008-03-06 02:49:18 +08:00
|
|
|
int tmo = net->ipv6.sysctl.icmpv6_time;
|
2012-06-09 14:24:18 +08:00
|
|
|
struct inet_peer *peer;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
/* Give more bandwidth to wider prefixes. */
|
|
|
|
if (rt->rt6i_dst.plen < 128)
|
|
|
|
tmo >>= ((128 - rt->rt6i_dst.plen)>>5);
|
|
|
|
|
2012-07-10 18:58:16 +08:00
|
|
|
peer = inet_getpeer_v6(net->ipv6.peers, &rt->rt6i_dst.addr, 1);
|
2012-06-09 14:24:18 +08:00
|
|
|
res = inet_peer_xrlim_allow(peer, tmo);
|
2012-07-10 18:58:16 +08:00
|
|
|
if (peer)
|
|
|
|
inet_putpeer(peer);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
dst_release(dst);
|
|
|
|
return res;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* an inline helper for the "simple" if statement below
|
|
|
|
* checks if parameter problem report is caused by an
|
2007-02-09 22:24:49 +08:00
|
|
|
* unrecognized IPv6 option that has the Option Type
|
2005-04-17 06:20:36 +08:00
|
|
|
* highest-order two bits set to 10
|
|
|
|
*/
|
|
|
|
|
2012-05-19 02:57:34 +08:00
|
|
|
static bool opt_unrec(struct sk_buff *skb, __u32 offset)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
u8 _optval, *op;
|
|
|
|
|
2007-03-11 09:16:10 +08:00
|
|
|
offset += skb_network_offset(skb);
|
2005-04-17 06:20:36 +08:00
|
|
|
op = skb_header_pointer(skb, offset, sizeof(_optval), &_optval);
|
|
|
|
if (op == NULL)
|
2012-05-19 02:57:34 +08:00
|
|
|
return true;
|
2005-04-17 06:20:36 +08:00
|
|
|
return (*op & 0xC0) == 0x80;
|
|
|
|
}
|
|
|
|
|
2013-05-23 04:17:31 +08:00
|
|
|
int icmpv6_push_pending_frames(struct sock *sk, struct flowi6 *fl6,
|
|
|
|
struct icmp6hdr *thdr, int len)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
struct sk_buff *skb;
|
|
|
|
struct icmp6hdr *icmp6h;
|
|
|
|
int err = 0;
|
|
|
|
|
|
|
|
if ((skb = skb_peek(&sk->sk_write_queue)) == NULL)
|
|
|
|
goto out;
|
|
|
|
|
2007-03-14 01:03:22 +08:00
|
|
|
icmp6h = icmp6_hdr(skb);
|
2005-04-17 06:20:36 +08:00
|
|
|
memcpy(icmp6h, thdr, sizeof(struct icmp6hdr));
|
|
|
|
icmp6h->icmp6_cksum = 0;
|
|
|
|
|
|
|
|
if (skb_queue_len(&sk->sk_write_queue) == 1) {
|
2008-11-20 07:44:53 +08:00
|
|
|
skb->csum = csum_partial(icmp6h,
|
2005-04-17 06:20:36 +08:00
|
|
|
sizeof(struct icmp6hdr), skb->csum);
|
2011-03-13 05:22:43 +08:00
|
|
|
icmp6h->icmp6_cksum = csum_ipv6_magic(&fl6->saddr,
|
|
|
|
&fl6->daddr,
|
|
|
|
len, fl6->flowi6_proto,
|
2005-04-17 06:20:36 +08:00
|
|
|
skb->csum);
|
|
|
|
} else {
|
2006-11-15 13:35:48 +08:00
|
|
|
__wsum tmp_csum = 0;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
skb_queue_walk(&sk->sk_write_queue, skb) {
|
|
|
|
tmp_csum = csum_add(tmp_csum, skb->csum);
|
|
|
|
}
|
|
|
|
|
2008-11-20 07:44:53 +08:00
|
|
|
tmp_csum = csum_partial(icmp6h,
|
2005-04-17 06:20:36 +08:00
|
|
|
sizeof(struct icmp6hdr), tmp_csum);
|
2011-03-13 05:22:43 +08:00
|
|
|
icmp6h->icmp6_cksum = csum_ipv6_magic(&fl6->saddr,
|
|
|
|
&fl6->daddr,
|
|
|
|
len, fl6->flowi6_proto,
|
2006-11-15 13:35:48 +08:00
|
|
|
tmp_csum);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
ip6_push_pending_frames(sk);
|
|
|
|
out:
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
struct icmpv6_msg {
|
|
|
|
struct sk_buff *skb;
|
|
|
|
int offset;
|
2006-02-16 07:24:15 +08:00
|
|
|
uint8_t type;
|
2005-04-17 06:20:36 +08:00
|
|
|
};
|
|
|
|
|
|
|
|
static int icmpv6_getfrag(void *from, char *to, int offset, int len, int odd, struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
struct icmpv6_msg *msg = (struct icmpv6_msg *) from;
|
|
|
|
struct sk_buff *org_skb = msg->skb;
|
2006-11-15 13:36:54 +08:00
|
|
|
__wsum csum = 0;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
csum = skb_copy_and_csum_bits(org_skb, msg->offset + offset,
|
|
|
|
to, len, csum);
|
|
|
|
skb->csum = csum_block_add(skb->csum, csum, odd);
|
2006-02-16 07:24:15 +08:00
|
|
|
if (!(msg->type & ICMPV6_INFOMSG_MASK))
|
|
|
|
nf_ct_attach(skb, org_skb);
|
2005-04-17 06:20:36 +08:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2012-10-30 00:23:10 +08:00
|
|
|
#if IS_ENABLED(CONFIG_IPV6_MIP6)
|
2006-08-24 10:27:25 +08:00
|
|
|
static void mip6_addr_swap(struct sk_buff *skb)
|
|
|
|
{
|
2007-04-26 08:54:47 +08:00
|
|
|
struct ipv6hdr *iph = ipv6_hdr(skb);
|
2006-08-24 10:27:25 +08:00
|
|
|
struct inet6_skb_parm *opt = IP6CB(skb);
|
|
|
|
struct ipv6_destopt_hao *hao;
|
|
|
|
struct in6_addr tmp;
|
|
|
|
int off;
|
|
|
|
|
|
|
|
if (opt->dsthao) {
|
|
|
|
off = ipv6_find_tlv(skb, opt->dsthao, IPV6_TLV_HAO);
|
|
|
|
if (likely(off >= 0)) {
|
2007-04-11 11:50:43 +08:00
|
|
|
hao = (struct ipv6_destopt_hao *)
|
|
|
|
(skb_network_header(skb) + off);
|
2011-11-21 11:39:03 +08:00
|
|
|
tmp = iph->saddr;
|
|
|
|
iph->saddr = hao->addr;
|
|
|
|
hao->addr = tmp;
|
2006-08-24 10:27:25 +08:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
#else
|
|
|
|
static inline void mip6_addr_swap(struct sk_buff *skb) {}
|
|
|
|
#endif
|
|
|
|
|
2013-12-30 06:03:31 +08:00
|
|
|
static struct dst_entry *icmpv6_route_lookup(struct net *net,
|
|
|
|
struct sk_buff *skb,
|
|
|
|
struct sock *sk,
|
|
|
|
struct flowi6 *fl6)
|
2011-03-02 14:06:22 +08:00
|
|
|
{
|
|
|
|
struct dst_entry *dst, *dst2;
|
2011-03-13 05:22:43 +08:00
|
|
|
struct flowi6 fl2;
|
2011-03-02 14:06:22 +08:00
|
|
|
int err;
|
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
err = ip6_dst_lookup(sk, &dst, fl6);
|
2011-03-02 14:06:22 +08:00
|
|
|
if (err)
|
|
|
|
return ERR_PTR(err);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* We won't send icmp if the destination is known
|
|
|
|
* anycast.
|
|
|
|
*/
|
|
|
|
if (((struct rt6_info *)dst)->rt6i_flags & RTF_ANYCAST) {
|
2013-04-25 19:08:30 +08:00
|
|
|
LIMIT_NETDEBUG(KERN_DEBUG "icmp6_send: acast source\n");
|
2011-03-02 14:06:22 +08:00
|
|
|
dst_release(dst);
|
|
|
|
return ERR_PTR(-EINVAL);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* No need to clone since we're just using its address. */
|
|
|
|
dst2 = dst;
|
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
dst = xfrm_lookup(net, dst, flowi6_to_flowi(fl6), sk, 0);
|
2011-03-03 05:27:41 +08:00
|
|
|
if (!IS_ERR(dst)) {
|
2011-03-02 14:06:22 +08:00
|
|
|
if (dst != dst2)
|
|
|
|
return dst;
|
2011-03-03 05:27:41 +08:00
|
|
|
} else {
|
|
|
|
if (PTR_ERR(dst) == -EPERM)
|
|
|
|
dst = NULL;
|
|
|
|
else
|
|
|
|
return dst;
|
2011-03-02 14:06:22 +08:00
|
|
|
}
|
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
err = xfrm_decode_session_reverse(skb, flowi6_to_flowi(&fl2), AF_INET6);
|
2011-03-02 14:06:22 +08:00
|
|
|
if (err)
|
|
|
|
goto relookup_failed;
|
|
|
|
|
|
|
|
err = ip6_dst_lookup(sk, &dst2, &fl2);
|
|
|
|
if (err)
|
|
|
|
goto relookup_failed;
|
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
dst2 = xfrm_lookup(net, dst2, flowi6_to_flowi(&fl2), sk, XFRM_LOOKUP_ICMP);
|
2011-03-03 05:27:41 +08:00
|
|
|
if (!IS_ERR(dst2)) {
|
2011-03-02 14:06:22 +08:00
|
|
|
dst_release(dst);
|
|
|
|
dst = dst2;
|
2011-03-03 05:27:41 +08:00
|
|
|
} else {
|
|
|
|
err = PTR_ERR(dst2);
|
|
|
|
if (err == -EPERM) {
|
|
|
|
dst_release(dst);
|
|
|
|
return dst2;
|
|
|
|
} else
|
|
|
|
goto relookup_failed;
|
2011-03-02 14:06:22 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
relookup_failed:
|
|
|
|
if (dst)
|
|
|
|
return dst;
|
|
|
|
return ERR_PTR(err);
|
|
|
|
}
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
/*
|
|
|
|
* Send an ICMP message in response to a packet in error
|
|
|
|
*/
|
2013-04-25 19:08:30 +08:00
|
|
|
static void icmp6_send(struct sk_buff *skb, u8 type, u8 code, __u32 info)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2008-03-25 20:47:49 +08:00
|
|
|
struct net *net = dev_net(skb->dev);
|
2005-04-17 06:20:36 +08:00
|
|
|
struct inet6_dev *idev = NULL;
|
2007-04-26 08:54:47 +08:00
|
|
|
struct ipv6hdr *hdr = ipv6_hdr(skb);
|
2005-06-14 05:59:44 +08:00
|
|
|
struct sock *sk;
|
|
|
|
struct ipv6_pinfo *np;
|
2011-04-22 12:53:02 +08:00
|
|
|
const struct in6_addr *saddr = NULL;
|
2005-04-17 06:20:36 +08:00
|
|
|
struct dst_entry *dst;
|
|
|
|
struct icmp6hdr tmp_hdr;
|
2011-03-13 05:22:43 +08:00
|
|
|
struct flowi6 fl6;
|
2005-04-17 06:20:36 +08:00
|
|
|
struct icmpv6_msg msg;
|
|
|
|
int iif = 0;
|
|
|
|
int addr_type = 0;
|
|
|
|
int len;
|
2009-08-09 16:12:48 +08:00
|
|
|
int hlimit;
|
2005-04-17 06:20:36 +08:00
|
|
|
int err = 0;
|
|
|
|
|
2007-04-20 11:29:13 +08:00
|
|
|
if ((u8 *)hdr < skb->head ||
|
2013-05-29 04:34:26 +08:00
|
|
|
(skb_network_header(skb) + sizeof(*hdr)) > skb_tail_pointer(skb))
|
2005-04-17 06:20:36 +08:00
|
|
|
return;
|
|
|
|
|
|
|
|
/*
|
2007-02-09 22:24:49 +08:00
|
|
|
* Make sure we respect the rules
|
2005-04-17 06:20:36 +08:00
|
|
|
* i.e. RFC 1885 2.4(e)
|
2013-04-25 19:08:30 +08:00
|
|
|
* Rule (e.1) is enforced by not using icmp6_send
|
2005-04-17 06:20:36 +08:00
|
|
|
* in any code that processes icmp errors.
|
|
|
|
*/
|
|
|
|
addr_type = ipv6_addr_type(&hdr->daddr);
|
|
|
|
|
2008-03-06 02:49:18 +08:00
|
|
|
if (ipv6_chk_addr(net, &hdr->daddr, skb->dev, 0))
|
2005-04-17 06:20:36 +08:00
|
|
|
saddr = &hdr->daddr;
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Dest addr check
|
|
|
|
*/
|
|
|
|
|
|
|
|
if ((addr_type & IPV6_ADDR_MULTICAST || skb->pkt_type != PACKET_HOST)) {
|
|
|
|
if (type != ICMPV6_PKT_TOOBIG &&
|
2007-02-09 22:24:49 +08:00
|
|
|
!(type == ICMPV6_PARAMPROB &&
|
|
|
|
code == ICMPV6_UNK_OPTION &&
|
2005-04-17 06:20:36 +08:00
|
|
|
(opt_unrec(skb, info))))
|
|
|
|
return;
|
|
|
|
|
|
|
|
saddr = NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
addr_type = ipv6_addr_type(&hdr->saddr);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Source addr check
|
|
|
|
*/
|
|
|
|
|
2013-03-08 10:07:19 +08:00
|
|
|
if (__ipv6_addr_needs_scope_id(addr_type))
|
2005-04-17 06:20:36 +08:00
|
|
|
iif = skb->dev->ifindex;
|
|
|
|
|
|
|
|
/*
|
2005-12-21 21:57:06 +08:00
|
|
|
* Must not send error if the source does not uniquely
|
|
|
|
* identify a single node (RFC2463 Section 2.4).
|
|
|
|
* We check unspecified / multicast addresses here,
|
|
|
|
* and anycast addresses will be checked later.
|
2005-04-17 06:20:36 +08:00
|
|
|
*/
|
|
|
|
if ((addr_type == IPV6_ADDR_ANY) || (addr_type & IPV6_ADDR_MULTICAST)) {
|
2013-04-25 19:08:30 +08:00
|
|
|
LIMIT_NETDEBUG(KERN_DEBUG "icmp6_send: addr_any/mcast source\n");
|
2005-04-17 06:20:36 +08:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2007-02-09 22:24:49 +08:00
|
|
|
/*
|
2005-04-17 06:20:36 +08:00
|
|
|
* Never answer to a ICMP packet.
|
|
|
|
*/
|
|
|
|
if (is_ineligible(skb)) {
|
2013-04-25 19:08:30 +08:00
|
|
|
LIMIT_NETDEBUG(KERN_DEBUG "icmp6_send: no reply to icmp error\n");
|
2005-04-17 06:20:36 +08:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2006-08-24 10:27:25 +08:00
|
|
|
mip6_addr_swap(skb);
|
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
memset(&fl6, 0, sizeof(fl6));
|
|
|
|
fl6.flowi6_proto = IPPROTO_ICMPV6;
|
2011-11-21 11:39:03 +08:00
|
|
|
fl6.daddr = hdr->saddr;
|
2005-04-17 06:20:36 +08:00
|
|
|
if (saddr)
|
2011-11-21 11:39:03 +08:00
|
|
|
fl6.saddr = *saddr;
|
2011-03-13 05:22:43 +08:00
|
|
|
fl6.flowi6_oif = iif;
|
2011-03-13 05:36:19 +08:00
|
|
|
fl6.fl6_icmp_type = type;
|
|
|
|
fl6.fl6_icmp_code = code;
|
2011-03-13 05:22:43 +08:00
|
|
|
security_skb_classify_flow(skb, flowi6_to_flowi(&fl6));
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2008-08-23 19:43:33 +08:00
|
|
|
sk = icmpv6_xmit_lock(net);
|
|
|
|
if (sk == NULL)
|
2008-03-01 03:16:46 +08:00
|
|
|
return;
|
2008-08-23 19:43:33 +08:00
|
|
|
np = inet6_sk(sk);
|
2008-03-01 03:16:46 +08:00
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
if (!icmpv6_xrlim_allow(sk, type, &fl6))
|
2005-04-17 06:20:36 +08:00
|
|
|
goto out;
|
|
|
|
|
|
|
|
tmp_hdr.icmp6_type = type;
|
|
|
|
tmp_hdr.icmp6_code = code;
|
|
|
|
tmp_hdr.icmp6_cksum = 0;
|
|
|
|
tmp_hdr.icmp6_pointer = htonl(info);
|
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
if (!fl6.flowi6_oif && ipv6_addr_is_multicast(&fl6.daddr))
|
|
|
|
fl6.flowi6_oif = np->mcast_oif;
|
2012-02-08 17:11:08 +08:00
|
|
|
else if (!fl6.flowi6_oif)
|
|
|
|
fl6.flowi6_oif = np->ucast_oif;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
dst = icmpv6_route_lookup(net, skb, sk, &fl6);
|
2011-03-02 14:06:22 +08:00
|
|
|
if (IS_ERR(dst))
|
2005-04-17 06:20:36 +08:00
|
|
|
goto out;
|
2005-12-21 21:57:06 +08:00
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
if (ipv6_addr_is_multicast(&fl6.daddr))
|
2005-04-17 06:20:36 +08:00
|
|
|
hlimit = np->mcast_hops;
|
|
|
|
else
|
|
|
|
hlimit = np->hop_limit;
|
|
|
|
if (hlimit < 0)
|
2008-03-10 18:00:30 +08:00
|
|
|
hlimit = ip6_dst_hoplimit(dst);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
msg.skb = skb;
|
2007-03-11 09:16:10 +08:00
|
|
|
msg.offset = skb_network_offset(skb);
|
2006-02-16 07:24:15 +08:00
|
|
|
msg.type = type;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
len = skb->len - msg.offset;
|
|
|
|
len = min_t(unsigned int, len, IPV6_MIN_MTU - sizeof(struct ipv6hdr) -sizeof(struct icmp6hdr));
|
|
|
|
if (len < 0) {
|
2005-08-10 11:50:53 +08:00
|
|
|
LIMIT_NETDEBUG(KERN_DEBUG "icmp: len problem\n");
|
2005-04-17 06:20:36 +08:00
|
|
|
goto out_dst_release;
|
|
|
|
}
|
|
|
|
|
2011-07-28 05:13:03 +08:00
|
|
|
rcu_read_lock();
|
|
|
|
idev = __in6_dev_get(skb->dev);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
err = ip6_append_data(sk, icmpv6_getfrag, &msg,
|
|
|
|
len + sizeof(struct icmp6hdr),
|
2009-08-09 16:12:48 +08:00
|
|
|
sizeof(struct icmp6hdr), hlimit,
|
2012-04-01 15:49:07 +08:00
|
|
|
np->tclass, NULL, &fl6, (struct rt6_info *)dst,
|
2010-04-23 19:26:08 +08:00
|
|
|
MSG_DONTWAIT, np->dontfrag);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (err) {
|
2010-06-08 06:24:44 +08:00
|
|
|
ICMP6_INC_STATS_BH(net, idev, ICMP6_MIB_OUTERRORS);
|
2005-04-17 06:20:36 +08:00
|
|
|
ip6_flush_pending_frames(sk);
|
2011-07-28 05:13:03 +08:00
|
|
|
} else {
|
|
|
|
err = icmpv6_push_pending_frames(sk, &fl6, &tmp_hdr,
|
|
|
|
len + sizeof(struct icmp6hdr));
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
2011-07-28 05:13:03 +08:00
|
|
|
rcu_read_unlock();
|
2005-04-17 06:20:36 +08:00
|
|
|
out_dst_release:
|
|
|
|
dst_release(dst);
|
|
|
|
out:
|
2008-03-01 03:16:46 +08:00
|
|
|
icmpv6_xmit_unlock(sk);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
2013-04-25 19:08:30 +08:00
|
|
|
|
|
|
|
/* Slightly more convenient version of icmp6_send.
|
|
|
|
*/
|
|
|
|
void icmpv6_param_prob(struct sk_buff *skb, u8 code, int pos)
|
|
|
|
{
|
|
|
|
icmp6_send(skb, ICMPV6_PARAMPROB, code, pos);
|
|
|
|
kfree_skb(skb);
|
|
|
|
}
|
2007-02-22 21:05:40 +08:00
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
static void icmpv6_echo_reply(struct sk_buff *skb)
|
|
|
|
{
|
2008-03-25 20:47:49 +08:00
|
|
|
struct net *net = dev_net(skb->dev);
|
2005-06-14 05:59:44 +08:00
|
|
|
struct sock *sk;
|
2005-04-17 06:20:36 +08:00
|
|
|
struct inet6_dev *idev;
|
2005-06-14 05:59:44 +08:00
|
|
|
struct ipv6_pinfo *np;
|
2011-04-22 12:53:02 +08:00
|
|
|
const struct in6_addr *saddr = NULL;
|
2007-03-14 01:03:22 +08:00
|
|
|
struct icmp6hdr *icmph = icmp6_hdr(skb);
|
2005-04-17 06:20:36 +08:00
|
|
|
struct icmp6hdr tmp_hdr;
|
2011-03-13 05:22:43 +08:00
|
|
|
struct flowi6 fl6;
|
2005-04-17 06:20:36 +08:00
|
|
|
struct icmpv6_msg msg;
|
|
|
|
struct dst_entry *dst;
|
|
|
|
int err = 0;
|
|
|
|
int hlimit;
|
|
|
|
|
2007-04-26 08:54:47 +08:00
|
|
|
saddr = &ipv6_hdr(skb)->daddr;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2014-01-07 21:57:27 +08:00
|
|
|
if (!ipv6_unicast_destination(skb) &&
|
|
|
|
!(net->ipv6.anycast_src_echo_reply &&
|
|
|
|
ipv6_anycast_destination(skb)))
|
2005-04-17 06:20:36 +08:00
|
|
|
saddr = NULL;
|
|
|
|
|
|
|
|
memcpy(&tmp_hdr, icmph, sizeof(tmp_hdr));
|
|
|
|
tmp_hdr.icmp6_type = ICMPV6_ECHO_REPLY;
|
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
memset(&fl6, 0, sizeof(fl6));
|
|
|
|
fl6.flowi6_proto = IPPROTO_ICMPV6;
|
2011-11-21 11:39:03 +08:00
|
|
|
fl6.daddr = ipv6_hdr(skb)->saddr;
|
2005-04-17 06:20:36 +08:00
|
|
|
if (saddr)
|
2011-11-21 11:39:03 +08:00
|
|
|
fl6.saddr = *saddr;
|
2011-03-13 05:22:43 +08:00
|
|
|
fl6.flowi6_oif = skb->dev->ifindex;
|
2011-03-13 05:36:19 +08:00
|
|
|
fl6.fl6_icmp_type = ICMPV6_ECHO_REPLY;
|
2011-03-13 05:22:43 +08:00
|
|
|
security_skb_classify_flow(skb, flowi6_to_flowi(&fl6));
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2008-08-23 19:43:33 +08:00
|
|
|
sk = icmpv6_xmit_lock(net);
|
|
|
|
if (sk == NULL)
|
2008-03-01 03:16:46 +08:00
|
|
|
return;
|
2008-08-23 19:43:33 +08:00
|
|
|
np = inet6_sk(sk);
|
2008-03-01 03:16:46 +08:00
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
if (!fl6.flowi6_oif && ipv6_addr_is_multicast(&fl6.daddr))
|
|
|
|
fl6.flowi6_oif = np->mcast_oif;
|
2012-02-08 17:11:08 +08:00
|
|
|
else if (!fl6.flowi6_oif)
|
|
|
|
fl6.flowi6_oif = np->ucast_oif;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
err = ip6_dst_lookup(sk, &dst, &fl6);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (err)
|
|
|
|
goto out;
|
2011-03-13 05:22:43 +08:00
|
|
|
dst = xfrm_lookup(net, dst, flowi6_to_flowi(&fl6), sk, 0);
|
2011-03-03 05:27:41 +08:00
|
|
|
if (IS_ERR(dst))
|
2005-09-09 06:11:55 +08:00
|
|
|
goto out;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
if (ipv6_addr_is_multicast(&fl6.daddr))
|
2005-04-17 06:20:36 +08:00
|
|
|
hlimit = np->mcast_hops;
|
|
|
|
else
|
|
|
|
hlimit = np->hop_limit;
|
|
|
|
if (hlimit < 0)
|
2008-03-10 18:00:30 +08:00
|
|
|
hlimit = ip6_dst_hoplimit(dst);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2011-07-28 05:13:03 +08:00
|
|
|
idev = __in6_dev_get(skb->dev);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
msg.skb = skb;
|
|
|
|
msg.offset = 0;
|
2006-02-16 07:24:15 +08:00
|
|
|
msg.type = ICMPV6_ECHO_REPLY;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
err = ip6_append_data(sk, icmpv6_getfrag, &msg, skb->len + sizeof(struct icmp6hdr),
|
2011-03-13 05:22:43 +08:00
|
|
|
sizeof(struct icmp6hdr), hlimit, np->tclass, NULL, &fl6,
|
2012-04-01 15:49:07 +08:00
|
|
|
(struct rt6_info *)dst, MSG_DONTWAIT,
|
2010-04-23 19:26:08 +08:00
|
|
|
np->dontfrag);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
if (err) {
|
2010-06-08 06:24:44 +08:00
|
|
|
ICMP6_INC_STATS_BH(net, idev, ICMP6_MIB_OUTERRORS);
|
2005-04-17 06:20:36 +08:00
|
|
|
ip6_flush_pending_frames(sk);
|
2011-07-28 05:13:03 +08:00
|
|
|
} else {
|
|
|
|
err = icmpv6_push_pending_frames(sk, &fl6, &tmp_hdr,
|
|
|
|
skb->len + sizeof(struct icmp6hdr));
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
dst_release(dst);
|
2007-02-09 22:24:49 +08:00
|
|
|
out:
|
2008-03-01 03:16:46 +08:00
|
|
|
icmpv6_xmit_unlock(sk);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
2012-07-12 15:33:37 +08:00
|
|
|
void icmpv6_notify(struct sk_buff *skb, u8 type, u8 code, __be32 info)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2009-09-14 20:22:28 +08:00
|
|
|
const struct inet6_protocol *ipprot;
|
2005-04-17 06:20:36 +08:00
|
|
|
int inner_offset;
|
2011-12-01 09:05:51 +08:00
|
|
|
__be16 frag_off;
|
2012-06-20 09:56:21 +08:00
|
|
|
u8 nexthdr;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
if (!pskb_may_pull(skb, sizeof(struct ipv6hdr)))
|
|
|
|
return;
|
|
|
|
|
|
|
|
nexthdr = ((struct ipv6hdr *)skb->data)->nexthdr;
|
|
|
|
if (ipv6_ext_hdr(nexthdr)) {
|
|
|
|
/* now skip over extension headers */
|
2011-12-01 09:05:51 +08:00
|
|
|
inner_offset = ipv6_skip_exthdr(skb, sizeof(struct ipv6hdr),
|
|
|
|
&nexthdr, &frag_off);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (inner_offset<0)
|
|
|
|
return;
|
|
|
|
} else {
|
|
|
|
inner_offset = sizeof(struct ipv6hdr);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Checkin header including 8 bytes of inner protocol header. */
|
|
|
|
if (!pskb_may_pull(skb, inner_offset+8))
|
|
|
|
return;
|
|
|
|
|
|
|
|
/* BUGGG_FUTURE: we should try to parse exthdrs in this packet.
|
|
|
|
Without this we will not able f.e. to make source routed
|
|
|
|
pmtu discovery.
|
|
|
|
Corresponding argument (opt) to notifiers is already added.
|
|
|
|
--ANK (980726)
|
|
|
|
*/
|
|
|
|
|
|
|
|
rcu_read_lock();
|
2012-06-20 09:56:21 +08:00
|
|
|
ipprot = rcu_dereference(inet6_protos[nexthdr]);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (ipprot && ipprot->err_handler)
|
|
|
|
ipprot->err_handler(skb, NULL, type, code, inner_offset, info);
|
|
|
|
rcu_read_unlock();
|
|
|
|
|
2007-11-20 14:35:57 +08:00
|
|
|
raw6_icmp_error(skb, nexthdr, type, code, inner_offset, info);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
2007-02-09 22:24:49 +08:00
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
/*
|
|
|
|
* Handle icmp messages
|
|
|
|
*/
|
|
|
|
|
2007-10-16 03:50:28 +08:00
|
|
|
static int icmpv6_rcv(struct sk_buff *skb)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
struct net_device *dev = skb->dev;
|
|
|
|
struct inet6_dev *idev = __in6_dev_get(dev);
|
2011-04-22 12:53:02 +08:00
|
|
|
const struct in6_addr *saddr, *daddr;
|
2005-04-17 06:20:36 +08:00
|
|
|
struct icmp6hdr *hdr;
|
2009-06-23 19:31:07 +08:00
|
|
|
u8 type;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-12-13 10:54:16 +08:00
|
|
|
if (!xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb)) {
|
2008-10-29 04:24:06 +08:00
|
|
|
struct sec_path *sp = skb_sec_path(skb);
|
2007-12-13 02:44:43 +08:00
|
|
|
int nh;
|
|
|
|
|
2008-10-29 04:24:06 +08:00
|
|
|
if (!(sp && sp->xvec[sp->len - 1]->props.flags &
|
2007-12-13 10:54:16 +08:00
|
|
|
XFRM_STATE_ICMP))
|
|
|
|
goto drop_no_count;
|
|
|
|
|
2012-06-16 05:54:11 +08:00
|
|
|
if (!pskb_may_pull(skb, sizeof(*hdr) + sizeof(struct ipv6hdr)))
|
2007-12-13 02:44:43 +08:00
|
|
|
goto drop_no_count;
|
|
|
|
|
|
|
|
nh = skb_network_offset(skb);
|
|
|
|
skb_set_network_header(skb, sizeof(*hdr));
|
|
|
|
|
|
|
|
if (!xfrm6_policy_check_reverse(NULL, XFRM_POLICY_IN, skb))
|
|
|
|
goto drop_no_count;
|
|
|
|
|
|
|
|
skb_set_network_header(skb, nh);
|
|
|
|
}
|
|
|
|
|
2008-10-09 01:33:26 +08:00
|
|
|
ICMP6_INC_STATS_BH(dev_net(dev), idev, ICMP6_MIB_INMSGS);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-04-26 08:54:47 +08:00
|
|
|
saddr = &ipv6_hdr(skb)->saddr;
|
|
|
|
daddr = &ipv6_hdr(skb)->daddr;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
/* Perform checksum. */
|
2005-11-11 05:01:24 +08:00
|
|
|
switch (skb->ip_summed) {
|
2006-08-30 07:44:56 +08:00
|
|
|
case CHECKSUM_COMPLETE:
|
2005-11-11 05:01:24 +08:00
|
|
|
if (!csum_ipv6_magic(saddr, daddr, skb->len, IPPROTO_ICMPV6,
|
|
|
|
skb->csum))
|
|
|
|
break;
|
|
|
|
/* fall through */
|
|
|
|
case CHECKSUM_NONE:
|
2006-11-15 13:35:48 +08:00
|
|
|
skb->csum = ~csum_unfold(csum_ipv6_magic(saddr, daddr, skb->len,
|
|
|
|
IPPROTO_ICMPV6, 0));
|
2005-11-11 05:01:24 +08:00
|
|
|
if (__skb_checksum_complete(skb)) {
|
2013-05-23 04:17:31 +08:00
|
|
|
LIMIT_NETDEBUG(KERN_DEBUG
|
|
|
|
"ICMPv6 checksum failed [%pI6c > %pI6c]\n",
|
2008-10-29 07:09:23 +08:00
|
|
|
saddr, daddr);
|
2013-04-29 16:39:56 +08:00
|
|
|
goto csum_error;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2008-02-05 19:15:50 +08:00
|
|
|
if (!pskb_pull(skb, sizeof(*hdr)))
|
|
|
|
goto discard_it;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-03-14 01:03:22 +08:00
|
|
|
hdr = icmp6_hdr(skb);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
type = hdr->icmp6_type;
|
|
|
|
|
2008-10-09 01:34:54 +08:00
|
|
|
ICMP6MSGIN_INC_STATS_BH(dev_net(dev), idev, type);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
switch (type) {
|
|
|
|
case ICMPV6_ECHO_REQUEST:
|
|
|
|
icmpv6_echo_reply(skb);
|
|
|
|
break;
|
|
|
|
|
|
|
|
case ICMPV6_ECHO_REPLY:
|
2013-05-23 04:17:31 +08:00
|
|
|
ping_rcv(skb);
|
2005-04-17 06:20:36 +08:00
|
|
|
break;
|
|
|
|
|
|
|
|
case ICMPV6_PKT_TOOBIG:
|
|
|
|
/* BUGGG_FUTURE: if packet contains rthdr, we cannot update
|
|
|
|
standard destination cache. Seems, only "advanced"
|
|
|
|
destination cache will allow to solve this problem
|
|
|
|
--ANK (980726)
|
|
|
|
*/
|
|
|
|
if (!pskb_may_pull(skb, sizeof(struct ipv6hdr)))
|
|
|
|
goto discard_it;
|
2007-03-14 01:03:22 +08:00
|
|
|
hdr = icmp6_hdr(skb);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Drop through to notify
|
|
|
|
*/
|
|
|
|
|
|
|
|
case ICMPV6_DEST_UNREACH:
|
|
|
|
case ICMPV6_TIME_EXCEED:
|
|
|
|
case ICMPV6_PARAMPROB:
|
|
|
|
icmpv6_notify(skb, type, hdr->icmp6_code, hdr->icmp6_mtu);
|
|
|
|
break;
|
|
|
|
|
|
|
|
case NDISC_ROUTER_SOLICITATION:
|
|
|
|
case NDISC_ROUTER_ADVERTISEMENT:
|
|
|
|
case NDISC_NEIGHBOUR_SOLICITATION:
|
|
|
|
case NDISC_NEIGHBOUR_ADVERTISEMENT:
|
|
|
|
case NDISC_REDIRECT:
|
|
|
|
ndisc_rcv(skb);
|
|
|
|
break;
|
|
|
|
|
|
|
|
case ICMPV6_MGM_QUERY:
|
|
|
|
igmp6_event_query(skb);
|
|
|
|
break;
|
|
|
|
|
|
|
|
case ICMPV6_MGM_REPORT:
|
|
|
|
igmp6_event_report(skb);
|
|
|
|
break;
|
|
|
|
|
|
|
|
case ICMPV6_MGM_REDUCTION:
|
|
|
|
case ICMPV6_NI_QUERY:
|
|
|
|
case ICMPV6_NI_REPLY:
|
|
|
|
case ICMPV6_MLD2_REPORT:
|
|
|
|
case ICMPV6_DHAAD_REQUEST:
|
|
|
|
case ICMPV6_DHAAD_REPLY:
|
|
|
|
case ICMPV6_MOBILE_PREFIX_SOL:
|
|
|
|
case ICMPV6_MOBILE_PREFIX_ADV:
|
|
|
|
break;
|
|
|
|
|
|
|
|
default:
|
2005-08-10 11:50:53 +08:00
|
|
|
LIMIT_NETDEBUG(KERN_DEBUG "icmpv6: msg of unknown type\n");
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
/* informational */
|
|
|
|
if (type & ICMPV6_INFOMSG_MASK)
|
|
|
|
break;
|
|
|
|
|
2007-02-09 22:24:49 +08:00
|
|
|
/*
|
|
|
|
* error of unknown type.
|
|
|
|
* must pass to upper level
|
2005-04-17 06:20:36 +08:00
|
|
|
*/
|
|
|
|
|
|
|
|
icmpv6_notify(skb, type, hdr->icmp6_code, hdr->icmp6_mtu);
|
2007-04-21 08:09:22 +08:00
|
|
|
}
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
kfree_skb(skb);
|
|
|
|
return 0;
|
|
|
|
|
2013-04-29 16:39:56 +08:00
|
|
|
csum_error:
|
|
|
|
ICMP6_INC_STATS_BH(dev_net(dev), idev, ICMP6_MIB_CSUMERRORS);
|
2005-04-17 06:20:36 +08:00
|
|
|
discard_it:
|
2008-10-09 01:33:26 +08:00
|
|
|
ICMP6_INC_STATS_BH(dev_net(dev), idev, ICMP6_MIB_INERRORS);
|
2007-12-13 02:44:43 +08:00
|
|
|
drop_no_count:
|
2005-04-17 06:20:36 +08:00
|
|
|
kfree_skb(skb);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2011-03-13 05:22:43 +08:00
|
|
|
void icmpv6_flow_init(struct sock *sk, struct flowi6 *fl6,
|
2007-12-07 07:43:30 +08:00
|
|
|
u8 type,
|
|
|
|
const struct in6_addr *saddr,
|
|
|
|
const struct in6_addr *daddr,
|
|
|
|
int oif)
|
|
|
|
{
|
2011-03-13 05:22:43 +08:00
|
|
|
memset(fl6, 0, sizeof(*fl6));
|
2011-11-21 11:39:03 +08:00
|
|
|
fl6->saddr = *saddr;
|
|
|
|
fl6->daddr = *daddr;
|
2011-03-13 05:22:43 +08:00
|
|
|
fl6->flowi6_proto = IPPROTO_ICMPV6;
|
2011-03-13 05:36:19 +08:00
|
|
|
fl6->fl6_icmp_type = type;
|
|
|
|
fl6->fl6_icmp_code = 0;
|
2011-03-13 05:22:43 +08:00
|
|
|
fl6->flowi6_oif = oif;
|
|
|
|
security_sk_classify_flow(sk, flowi6_to_flowi(fl6));
|
2007-12-07 07:43:30 +08:00
|
|
|
}
|
|
|
|
|
2006-08-15 15:06:56 +08:00
|
|
|
/*
|
2008-03-01 03:16:08 +08:00
|
|
|
* Special lock-class for __icmpv6_sk:
|
2006-08-15 15:06:56 +08:00
|
|
|
*/
|
|
|
|
static struct lock_class_key icmpv6_socket_sk_dst_lock_key;
|
|
|
|
|
2008-03-01 03:21:22 +08:00
|
|
|
static int __net_init icmpv6_sk_init(struct net *net)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
struct sock *sk;
|
|
|
|
int err, i, j;
|
|
|
|
|
2008-03-01 03:21:22 +08:00
|
|
|
net->ipv6.icmp_sk =
|
|
|
|
kzalloc(nr_cpu_ids * sizeof(struct sock *), GFP_KERNEL);
|
|
|
|
if (net->ipv6.icmp_sk == NULL)
|
2008-03-01 03:17:11 +08:00
|
|
|
return -ENOMEM;
|
|
|
|
|
2006-04-11 13:52:50 +08:00
|
|
|
for_each_possible_cpu(i) {
|
2008-04-04 05:31:03 +08:00
|
|
|
err = inet_ctl_sock_create(&sk, PF_INET6,
|
|
|
|
SOCK_RAW, IPPROTO_ICMPV6, net);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (err < 0) {
|
2012-05-15 22:11:53 +08:00
|
|
|
pr_err("Failed to initialize the ICMP6 control socket (err %d)\n",
|
2005-04-17 06:20:36 +08:00
|
|
|
err);
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
2008-04-04 05:31:03 +08:00
|
|
|
net->ipv6.icmp_sk[i] = sk;
|
2008-03-01 03:19:22 +08:00
|
|
|
|
2006-08-15 15:06:56 +08:00
|
|
|
/*
|
|
|
|
* Split off their lock-class, because sk->sk_dst_lock
|
|
|
|
* gets used from softirqs, which is safe for
|
2008-03-01 03:16:08 +08:00
|
|
|
* __icmpv6_sk (because those never get directly used
|
2006-08-15 15:06:56 +08:00
|
|
|
* via userspace syscalls), but unsafe for normal sockets.
|
|
|
|
*/
|
|
|
|
lockdep_set_class(&sk->sk_dst_lock,
|
|
|
|
&icmpv6_socket_sk_dst_lock_key);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
/* Enough space for 2 64K ICMP packets, including
|
|
|
|
* sk_buff struct overhead.
|
|
|
|
*/
|
2011-10-13 15:28:54 +08:00
|
|
|
sk->sk_sndbuf = 2 * SKB_TRUESIZE(64 * 1024);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
fail:
|
2008-03-01 03:19:22 +08:00
|
|
|
for (j = 0; j < i; j++)
|
2008-04-04 05:31:03 +08:00
|
|
|
inet_ctl_sock_destroy(net->ipv6.icmp_sk[j]);
|
2008-03-01 03:21:22 +08:00
|
|
|
kfree(net->ipv6.icmp_sk);
|
2005-04-17 06:20:36 +08:00
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
2008-03-01 03:21:22 +08:00
|
|
|
static void __net_exit icmpv6_sk_exit(struct net *net)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
2006-04-11 13:52:50 +08:00
|
|
|
for_each_possible_cpu(i) {
|
2008-04-04 05:31:03 +08:00
|
|
|
inet_ctl_sock_destroy(net->ipv6.icmp_sk[i]);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
2008-03-01 03:21:22 +08:00
|
|
|
kfree(net->ipv6.icmp_sk);
|
|
|
|
}
|
|
|
|
|
2008-03-04 04:02:54 +08:00
|
|
|
static struct pernet_operations icmpv6_sk_ops = {
|
2008-03-01 03:21:22 +08:00
|
|
|
.init = icmpv6_sk_init,
|
|
|
|
.exit = icmpv6_sk_exit,
|
|
|
|
};
|
|
|
|
|
|
|
|
int __init icmpv6_init(void)
|
|
|
|
{
|
|
|
|
int err;
|
|
|
|
|
|
|
|
err = register_pernet_subsys(&icmpv6_sk_ops);
|
|
|
|
if (err < 0)
|
|
|
|
return err;
|
|
|
|
|
|
|
|
err = -EAGAIN;
|
|
|
|
if (inet6_add_protocol(&icmpv6_protocol, IPPROTO_ICMPV6) < 0)
|
|
|
|
goto fail;
|
2013-04-25 19:08:30 +08:00
|
|
|
|
|
|
|
err = inet6_register_icmp_sender(icmp6_send);
|
|
|
|
if (err)
|
|
|
|
goto sender_reg_err;
|
2008-03-01 03:21:22 +08:00
|
|
|
return 0;
|
|
|
|
|
2013-04-25 19:08:30 +08:00
|
|
|
sender_reg_err:
|
|
|
|
inet6_del_protocol(&icmpv6_protocol, IPPROTO_ICMPV6);
|
2008-03-01 03:21:22 +08:00
|
|
|
fail:
|
2012-05-15 22:11:53 +08:00
|
|
|
pr_err("Failed to register ICMP6 protocol\n");
|
2008-03-01 03:21:22 +08:00
|
|
|
unregister_pernet_subsys(&icmpv6_sk_ops);
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
2008-03-04 04:02:54 +08:00
|
|
|
void icmpv6_cleanup(void)
|
2008-03-01 03:21:22 +08:00
|
|
|
{
|
2013-04-25 19:08:30 +08:00
|
|
|
inet6_unregister_icmp_sender(icmp6_send);
|
2008-03-01 03:21:22 +08:00
|
|
|
unregister_pernet_subsys(&icmpv6_sk_ops);
|
2005-04-17 06:20:36 +08:00
|
|
|
inet6_del_protocol(&icmpv6_protocol, IPPROTO_ICMPV6);
|
|
|
|
}
|
|
|
|
|
2008-03-01 03:21:22 +08:00
|
|
|
|
2005-11-30 08:21:38 +08:00
|
|
|
static const struct icmp6_err {
|
2005-04-17 06:20:36 +08:00
|
|
|
int err;
|
|
|
|
int fatal;
|
|
|
|
} tab_unreach[] = {
|
|
|
|
{ /* NOROUTE */
|
|
|
|
.err = ENETUNREACH,
|
|
|
|
.fatal = 0,
|
|
|
|
},
|
|
|
|
{ /* ADM_PROHIBITED */
|
|
|
|
.err = EACCES,
|
|
|
|
.fatal = 1,
|
|
|
|
},
|
|
|
|
{ /* Was NOT_NEIGHBOUR, now reserved */
|
|
|
|
.err = EHOSTUNREACH,
|
|
|
|
.fatal = 0,
|
|
|
|
},
|
|
|
|
{ /* ADDR_UNREACH */
|
|
|
|
.err = EHOSTUNREACH,
|
|
|
|
.fatal = 0,
|
|
|
|
},
|
|
|
|
{ /* PORT_UNREACH */
|
|
|
|
.err = ECONNREFUSED,
|
|
|
|
.fatal = 1,
|
|
|
|
},
|
2013-08-30 17:18:45 +08:00
|
|
|
{ /* POLICY_FAIL */
|
|
|
|
.err = EACCES,
|
|
|
|
.fatal = 1,
|
|
|
|
},
|
|
|
|
{ /* REJECT_ROUTE */
|
|
|
|
.err = EACCES,
|
|
|
|
.fatal = 1,
|
|
|
|
},
|
2005-04-17 06:20:36 +08:00
|
|
|
};
|
|
|
|
|
2009-06-23 19:31:07 +08:00
|
|
|
int icmpv6_err_convert(u8 type, u8 code, int *err)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
int fatal = 0;
|
|
|
|
|
|
|
|
*err = EPROTO;
|
|
|
|
|
|
|
|
switch (type) {
|
|
|
|
case ICMPV6_DEST_UNREACH:
|
|
|
|
fatal = 1;
|
2013-08-30 17:18:45 +08:00
|
|
|
if (code < ARRAY_SIZE(tab_unreach)) {
|
2005-04-17 06:20:36 +08:00
|
|
|
*err = tab_unreach[code].err;
|
|
|
|
fatal = tab_unreach[code].fatal;
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
|
|
|
|
case ICMPV6_PKT_TOOBIG:
|
|
|
|
*err = EMSGSIZE;
|
|
|
|
break;
|
2007-02-09 22:24:49 +08:00
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
case ICMPV6_PARAMPROB:
|
|
|
|
*err = EPROTO;
|
|
|
|
fatal = 1;
|
|
|
|
break;
|
|
|
|
|
|
|
|
case ICMPV6_TIME_EXCEED:
|
|
|
|
*err = EHOSTUNREACH;
|
|
|
|
break;
|
2007-04-21 08:09:22 +08:00
|
|
|
}
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
return fatal;
|
|
|
|
}
|
2007-02-22 21:05:40 +08:00
|
|
|
EXPORT_SYMBOL(icmpv6_err_convert);
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
#ifdef CONFIG_SYSCTL
|
2013-12-30 06:03:31 +08:00
|
|
|
static struct ctl_table ipv6_icmp_table_template[] = {
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
.procname = "ratelimit",
|
2008-01-10 19:02:40 +08:00
|
|
|
.data = &init_net.ipv6.sysctl.icmpv6_time,
|
2005-04-17 06:20:36 +08:00
|
|
|
.maxlen = sizeof(int),
|
|
|
|
.mode = 0644,
|
2008-11-04 10:21:05 +08:00
|
|
|
.proc_handler = proc_dointvec_ms_jiffies,
|
2005-04-17 06:20:36 +08:00
|
|
|
},
|
2009-11-06 05:32:03 +08:00
|
|
|
{ },
|
2005-04-17 06:20:36 +08:00
|
|
|
};
|
2008-01-10 18:53:43 +08:00
|
|
|
|
2010-01-17 11:35:32 +08:00
|
|
|
struct ctl_table * __net_init ipv6_icmp_sysctl_init(struct net *net)
|
2008-01-10 18:53:43 +08:00
|
|
|
{
|
|
|
|
struct ctl_table *table;
|
|
|
|
|
|
|
|
table = kmemdup(ipv6_icmp_table_template,
|
|
|
|
sizeof(ipv6_icmp_table_template),
|
|
|
|
GFP_KERNEL);
|
2008-02-27 23:24:28 +08:00
|
|
|
|
2012-11-16 11:03:10 +08:00
|
|
|
if (table)
|
2008-02-27 23:24:28 +08:00
|
|
|
table[0].data = &net->ipv6.sysctl.icmpv6_time;
|
|
|
|
|
2008-01-10 18:53:43 +08:00
|
|
|
return table;
|
|
|
|
}
|
2005-04-17 06:20:36 +08:00
|
|
|
#endif
|
|
|
|
|