[IPV6] MIP6: Report to user-space when home address option is rejected.
Report to user-space when home address option is rejected. In receiving this message user-space application will send Mobile IPv6 binding error. It is rate-limited by kernel. Based on MIPL2 kernel patch. This patch was also written by: Ville Nuorvala <vnuorval@tcs.hut.fi> Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org> Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
97a64b4577
commit
70182ed23d
|
@ -25,6 +25,7 @@
|
||||||
#include <linux/config.h>
|
#include <linux/config.h>
|
||||||
#include <linux/module.h>
|
#include <linux/module.h>
|
||||||
#include <linux/skbuff.h>
|
#include <linux/skbuff.h>
|
||||||
|
#include <linux/time.h>
|
||||||
#include <linux/ipv6.h>
|
#include <linux/ipv6.h>
|
||||||
#include <linux/icmpv6.h>
|
#include <linux/icmpv6.h>
|
||||||
#include <net/sock.h>
|
#include <net/sock.h>
|
||||||
|
@ -138,6 +139,18 @@ int mip6_mh_filter(struct sock *sk, struct sk_buff *skb)
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
struct mip6_report_rate_limiter {
|
||||||
|
spinlock_t lock;
|
||||||
|
struct timeval stamp;
|
||||||
|
int iif;
|
||||||
|
struct in6_addr src;
|
||||||
|
struct in6_addr dst;
|
||||||
|
};
|
||||||
|
|
||||||
|
static struct mip6_report_rate_limiter mip6_report_rl = {
|
||||||
|
.lock = SPIN_LOCK_UNLOCKED
|
||||||
|
};
|
||||||
|
|
||||||
static int mip6_destopt_input(struct xfrm_state *x, struct sk_buff *skb)
|
static int mip6_destopt_input(struct xfrm_state *x, struct sk_buff *skb)
|
||||||
{
|
{
|
||||||
struct ipv6hdr *iph = skb->nh.ipv6h;
|
struct ipv6hdr *iph = skb->nh.ipv6h;
|
||||||
|
@ -189,6 +202,75 @@ static int mip6_destopt_output(struct xfrm_state *x, struct sk_buff *skb)
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
static inline int mip6_report_rl_allow(struct timeval *stamp,
|
||||||
|
struct in6_addr *dst,
|
||||||
|
struct in6_addr *src, int iif)
|
||||||
|
{
|
||||||
|
int allow = 0;
|
||||||
|
|
||||||
|
spin_lock_bh(&mip6_report_rl.lock);
|
||||||
|
if (mip6_report_rl.stamp.tv_sec != stamp->tv_sec ||
|
||||||
|
mip6_report_rl.stamp.tv_usec != stamp->tv_usec ||
|
||||||
|
mip6_report_rl.iif != iif ||
|
||||||
|
!ipv6_addr_equal(&mip6_report_rl.src, src) ||
|
||||||
|
!ipv6_addr_equal(&mip6_report_rl.dst, dst)) {
|
||||||
|
mip6_report_rl.stamp.tv_sec = stamp->tv_sec;
|
||||||
|
mip6_report_rl.stamp.tv_usec = stamp->tv_usec;
|
||||||
|
mip6_report_rl.iif = iif;
|
||||||
|
ipv6_addr_copy(&mip6_report_rl.src, src);
|
||||||
|
ipv6_addr_copy(&mip6_report_rl.dst, dst);
|
||||||
|
allow = 1;
|
||||||
|
}
|
||||||
|
spin_unlock_bh(&mip6_report_rl.lock);
|
||||||
|
return allow;
|
||||||
|
}
|
||||||
|
|
||||||
|
static int mip6_destopt_reject(struct xfrm_state *x, struct sk_buff *skb, struct flowi *fl)
|
||||||
|
{
|
||||||
|
struct inet6_skb_parm *opt = (struct inet6_skb_parm *)skb->cb;
|
||||||
|
struct ipv6_destopt_hao *hao = NULL;
|
||||||
|
struct xfrm_selector sel;
|
||||||
|
int offset;
|
||||||
|
struct timeval stamp;
|
||||||
|
int err = 0;
|
||||||
|
|
||||||
|
if (likely(opt->dsthao)) {
|
||||||
|
offset = ipv6_find_tlv(skb, opt->dsthao, IPV6_TLV_HAO);
|
||||||
|
if (likely(offset >= 0))
|
||||||
|
hao = (struct ipv6_destopt_hao *)(skb->nh.raw + offset);
|
||||||
|
}
|
||||||
|
|
||||||
|
skb_get_timestamp(skb, &stamp);
|
||||||
|
|
||||||
|
if (!mip6_report_rl_allow(&stamp, &skb->nh.ipv6h->daddr,
|
||||||
|
hao ? &hao->addr : &skb->nh.ipv6h->saddr,
|
||||||
|
opt->iif))
|
||||||
|
goto out;
|
||||||
|
|
||||||
|
memset(&sel, 0, sizeof(sel));
|
||||||
|
memcpy(&sel.daddr, (xfrm_address_t *)&skb->nh.ipv6h->daddr,
|
||||||
|
sizeof(sel.daddr));
|
||||||
|
sel.prefixlen_d = 128;
|
||||||
|
memcpy(&sel.saddr, (xfrm_address_t *)&skb->nh.ipv6h->saddr,
|
||||||
|
sizeof(sel.saddr));
|
||||||
|
sel.prefixlen_s = 128;
|
||||||
|
sel.family = AF_INET6;
|
||||||
|
sel.proto = fl->proto;
|
||||||
|
sel.dport = xfrm_flowi_dport(fl);
|
||||||
|
if (sel.dport)
|
||||||
|
sel.dport_mask = ~((__u16)0);
|
||||||
|
sel.sport = xfrm_flowi_sport(fl);
|
||||||
|
if (sel.sport)
|
||||||
|
sel.sport_mask = ~((__u16)0);
|
||||||
|
sel.ifindex = fl->oif;
|
||||||
|
|
||||||
|
err = km_report(IPPROTO_DSTOPTS, &sel,
|
||||||
|
(hao ? (xfrm_address_t *)&hao->addr : NULL));
|
||||||
|
|
||||||
|
out:
|
||||||
|
return err;
|
||||||
|
}
|
||||||
|
|
||||||
static int mip6_destopt_offset(struct xfrm_state *x, struct sk_buff *skb,
|
static int mip6_destopt_offset(struct xfrm_state *x, struct sk_buff *skb,
|
||||||
u8 **nexthdr)
|
u8 **nexthdr)
|
||||||
{
|
{
|
||||||
|
@ -273,6 +355,7 @@ static struct xfrm_type mip6_destopt_type =
|
||||||
.destructor = mip6_destopt_destroy,
|
.destructor = mip6_destopt_destroy,
|
||||||
.input = mip6_destopt_input,
|
.input = mip6_destopt_input,
|
||||||
.output = mip6_destopt_output,
|
.output = mip6_destopt_output,
|
||||||
|
.reject = mip6_destopt_reject,
|
||||||
.hdr_offset = mip6_destopt_offset,
|
.hdr_offset = mip6_destopt_offset,
|
||||||
.local_addr = mip6_xfrm_addr,
|
.local_addr = mip6_xfrm_addr,
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in New Issue