Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C)2003-2006 Helsinki University of Technology |
| 3 | * Copyright (C)2003-2006 USAGI/WIDE Project |
| 4 | * |
| 5 | * This program is free software; you can redistribute it and/or modify |
| 6 | * it under the terms of the GNU General Public License as published by |
| 7 | * the Free Software Foundation; either version 2 of the License, or |
| 8 | * (at your option) any later version. |
| 9 | * |
| 10 | * This program is distributed in the hope that it will be useful, |
| 11 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 12 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 13 | * GNU General Public License for more details. |
| 14 | * |
| 15 | * You should have received a copy of the GNU General Public License |
| 16 | * along with this program; if not, write to the Free Software |
| 17 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
| 18 | */ |
| 19 | /* |
| 20 | * Authors: |
| 21 | * Noriaki TAKAMIYA @USAGI |
| 22 | * Masahide NAKAMURA @USAGI |
| 23 | */ |
| 24 | |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 25 | #include <linux/module.h> |
| 26 | #include <linux/skbuff.h> |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 27 | #include <linux/time.h> |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 28 | #include <linux/ipv6.h> |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 29 | #include <linux/icmpv6.h> |
| 30 | #include <net/sock.h> |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 31 | #include <net/ipv6.h> |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 32 | #include <net/ip6_checksum.h> |
Masahide NAKAMURA | 59fbb3a6 | 2007-06-26 23:56:32 -0700 | [diff] [blame] | 33 | #include <net/rawv6.h> |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 34 | #include <net/xfrm.h> |
| 35 | #include <net/mip6.h> |
| 36 | |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 37 | static inline unsigned int calc_padlen(unsigned int len, unsigned int n) |
| 38 | { |
| 39 | return (n - len + 16) & 0x7; |
| 40 | } |
| 41 | |
| 42 | static inline void *mip6_padn(__u8 *data, __u8 padlen) |
| 43 | { |
| 44 | if (!data) |
| 45 | return NULL; |
| 46 | if (padlen == 1) { |
YOSHIFUJI Hideaki | 7f1eced | 2008-04-10 15:42:12 +0900 | [diff] [blame] | 47 | data[0] = IPV6_TLV_PAD0; |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 48 | } else if (padlen > 1) { |
YOSHIFUJI Hideaki | 7f1eced | 2008-04-10 15:42:12 +0900 | [diff] [blame] | 49 | data[0] = IPV6_TLV_PADN; |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 50 | data[1] = padlen - 2; |
| 51 | if (padlen > 2) |
| 52 | memset(data+2, 0, data[1]); |
| 53 | } |
| 54 | return data + padlen; |
| 55 | } |
| 56 | |
Brian Haley | d5fdd6b | 2009-06-23 04:31:07 -0700 | [diff] [blame] | 57 | static inline void mip6_param_prob(struct sk_buff *skb, u8 code, int pos) |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 58 | { |
Alexey Dobriyan | 3ffe533 | 2010-02-18 08:25:24 +0000 | [diff] [blame] | 59 | icmpv6_send(skb, ICMPV6_PARAMPROB, code, pos); |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 60 | } |
| 61 | |
| 62 | static int mip6_mh_len(int type) |
| 63 | { |
| 64 | int len = 0; |
| 65 | |
| 66 | switch (type) { |
| 67 | case IP6_MH_TYPE_BRR: |
| 68 | len = 0; |
| 69 | break; |
| 70 | case IP6_MH_TYPE_HOTI: |
| 71 | case IP6_MH_TYPE_COTI: |
| 72 | case IP6_MH_TYPE_BU: |
| 73 | case IP6_MH_TYPE_BACK: |
| 74 | len = 1; |
| 75 | break; |
| 76 | case IP6_MH_TYPE_HOT: |
| 77 | case IP6_MH_TYPE_COT: |
| 78 | case IP6_MH_TYPE_BERROR: |
| 79 | len = 2; |
| 80 | break; |
| 81 | } |
| 82 | return len; |
| 83 | } |
| 84 | |
Masahide NAKAMURA | 59fbb3a6 | 2007-06-26 23:56:32 -0700 | [diff] [blame] | 85 | static int mip6_mh_filter(struct sock *sk, struct sk_buff *skb) |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 86 | { |
| 87 | struct ip6_mh *mh; |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 88 | |
Arnaldo Carvalho de Melo | ea2ae17 | 2007-04-25 17:55:53 -0700 | [diff] [blame] | 89 | if (!pskb_may_pull(skb, (skb_transport_offset(skb)) + 8) || |
| 90 | !pskb_may_pull(skb, (skb_transport_offset(skb) + |
Arnaldo Carvalho de Melo | 9c70220 | 2007-04-25 18:04:18 -0700 | [diff] [blame] | 91 | ((skb_transport_header(skb)[1] + 1) << 3)))) |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 92 | return -1; |
| 93 | |
Arnaldo Carvalho de Melo | 9c70220 | 2007-04-25 18:04:18 -0700 | [diff] [blame] | 94 | mh = (struct ip6_mh *)skb_transport_header(skb); |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 95 | |
| 96 | if (mh->ip6mh_hdrlen < mip6_mh_len(mh->ip6mh_type)) { |
| 97 | LIMIT_NETDEBUG(KERN_DEBUG "mip6: MH message too short: %d vs >=%d\n", |
| 98 | mh->ip6mh_hdrlen, mip6_mh_len(mh->ip6mh_type)); |
Arnaldo Carvalho de Melo | d56f90a | 2007-04-10 20:50:43 -0700 | [diff] [blame] | 99 | mip6_param_prob(skb, 0, ((&mh->ip6mh_hdrlen) - |
| 100 | skb_network_header(skb))); |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 101 | return -1; |
| 102 | } |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 103 | |
| 104 | if (mh->ip6mh_proto != IPPROTO_NONE) { |
| 105 | LIMIT_NETDEBUG(KERN_DEBUG "mip6: MH invalid payload proto = %d\n", |
| 106 | mh->ip6mh_proto); |
Arnaldo Carvalho de Melo | d56f90a | 2007-04-10 20:50:43 -0700 | [diff] [blame] | 107 | mip6_param_prob(skb, 0, ((&mh->ip6mh_proto) - |
| 108 | skb_network_header(skb))); |
Masahide NAKAMURA | 7be96f7 | 2006-08-23 20:35:31 -0700 | [diff] [blame] | 109 | return -1; |
| 110 | } |
| 111 | |
| 112 | return 0; |
| 113 | } |
| 114 | |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 115 | struct mip6_report_rate_limiter { |
| 116 | spinlock_t lock; |
| 117 | struct timeval stamp; |
| 118 | int iif; |
| 119 | struct in6_addr src; |
| 120 | struct in6_addr dst; |
| 121 | }; |
| 122 | |
| 123 | static struct mip6_report_rate_limiter mip6_report_rl = { |
Milind Arun Choudhary | 4ef8d0a | 2007-04-26 01:37:44 -0700 | [diff] [blame] | 124 | .lock = __SPIN_LOCK_UNLOCKED(mip6_report_rl.lock) |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 125 | }; |
| 126 | |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 127 | static int mip6_destopt_input(struct xfrm_state *x, struct sk_buff *skb) |
| 128 | { |
Eric Dumazet | b71d1d4 | 2011-04-22 04:53:02 +0000 | [diff] [blame^] | 129 | const struct ipv6hdr *iph = ipv6_hdr(skb); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 130 | struct ipv6_destopt_hdr *destopt = (struct ipv6_destopt_hdr *)skb->data; |
Herbert Xu | 0ebea8e | 2007-11-13 21:45:58 -0800 | [diff] [blame] | 131 | int err = destopt->nexthdr; |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 132 | |
Herbert Xu | 0ebea8e | 2007-11-13 21:45:58 -0800 | [diff] [blame] | 133 | spin_lock(&x->lock); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 134 | if (!ipv6_addr_equal(&iph->saddr, (struct in6_addr *)x->coaddr) && |
| 135 | !ipv6_addr_any((struct in6_addr *)x->coaddr)) |
Herbert Xu | 0ebea8e | 2007-11-13 21:45:58 -0800 | [diff] [blame] | 136 | err = -ENOENT; |
| 137 | spin_unlock(&x->lock); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 138 | |
Herbert Xu | 0ebea8e | 2007-11-13 21:45:58 -0800 | [diff] [blame] | 139 | return err; |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 140 | } |
| 141 | |
| 142 | /* Destination Option Header is inserted. |
| 143 | * IP Header's src address is replaced with Home Address Option in |
| 144 | * Destination Option Header. |
| 145 | */ |
| 146 | static int mip6_destopt_output(struct xfrm_state *x, struct sk_buff *skb) |
| 147 | { |
| 148 | struct ipv6hdr *iph; |
| 149 | struct ipv6_destopt_hdr *dstopt; |
| 150 | struct ipv6_destopt_hao *hao; |
| 151 | u8 nexthdr; |
| 152 | int len; |
| 153 | |
Herbert Xu | 7b277b1 | 2007-10-10 15:44:06 -0700 | [diff] [blame] | 154 | skb_push(skb, -skb_network_offset(skb)); |
Herbert Xu | 007f021 | 2007-10-09 13:25:59 -0700 | [diff] [blame] | 155 | iph = ipv6_hdr(skb); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 156 | |
Herbert Xu | 007f021 | 2007-10-09 13:25:59 -0700 | [diff] [blame] | 157 | nexthdr = *skb_mac_header(skb); |
| 158 | *skb_mac_header(skb) = IPPROTO_DSTOPTS; |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 159 | |
Arnaldo Carvalho de Melo | 9c70220 | 2007-04-25 18:04:18 -0700 | [diff] [blame] | 160 | dstopt = (struct ipv6_destopt_hdr *)skb_transport_header(skb); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 161 | dstopt->nexthdr = nexthdr; |
| 162 | |
| 163 | hao = mip6_padn((char *)(dstopt + 1), |
| 164 | calc_padlen(sizeof(*dstopt), 6)); |
| 165 | |
| 166 | hao->type = IPV6_TLV_HAO; |
Ilpo Järvinen | 547b792 | 2008-07-25 21:43:18 -0700 | [diff] [blame] | 167 | BUILD_BUG_ON(sizeof(*hao) != 18); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 168 | hao->length = sizeof(*hao) - 2; |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 169 | |
| 170 | len = ((char *)hao - (char *)dstopt) + sizeof(*hao); |
| 171 | |
| 172 | memcpy(&hao->addr, &iph->saddr, sizeof(hao->addr)); |
Herbert Xu | b7c6538 | 2007-10-09 13:33:35 -0700 | [diff] [blame] | 173 | spin_lock_bh(&x->lock); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 174 | memcpy(&iph->saddr, x->coaddr, sizeof(iph->saddr)); |
Herbert Xu | b7c6538 | 2007-10-09 13:33:35 -0700 | [diff] [blame] | 175 | spin_unlock_bh(&x->lock); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 176 | |
Ilpo Järvinen | 547b792 | 2008-07-25 21:43:18 -0700 | [diff] [blame] | 177 | WARN_ON(len != x->props.header_len); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 178 | dstopt->hdrlen = (x->props.header_len >> 3) - 1; |
| 179 | |
| 180 | return 0; |
| 181 | } |
| 182 | |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 183 | static inline int mip6_report_rl_allow(struct timeval *stamp, |
Eric Dumazet | b71d1d4 | 2011-04-22 04:53:02 +0000 | [diff] [blame^] | 184 | const struct in6_addr *dst, |
| 185 | const struct in6_addr *src, int iif) |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 186 | { |
| 187 | int allow = 0; |
| 188 | |
| 189 | spin_lock_bh(&mip6_report_rl.lock); |
| 190 | if (mip6_report_rl.stamp.tv_sec != stamp->tv_sec || |
| 191 | mip6_report_rl.stamp.tv_usec != stamp->tv_usec || |
| 192 | mip6_report_rl.iif != iif || |
| 193 | !ipv6_addr_equal(&mip6_report_rl.src, src) || |
| 194 | !ipv6_addr_equal(&mip6_report_rl.dst, dst)) { |
| 195 | mip6_report_rl.stamp.tv_sec = stamp->tv_sec; |
| 196 | mip6_report_rl.stamp.tv_usec = stamp->tv_usec; |
| 197 | mip6_report_rl.iif = iif; |
| 198 | ipv6_addr_copy(&mip6_report_rl.src, src); |
| 199 | ipv6_addr_copy(&mip6_report_rl.dst, dst); |
| 200 | allow = 1; |
| 201 | } |
| 202 | spin_unlock_bh(&mip6_report_rl.lock); |
| 203 | return allow; |
| 204 | } |
| 205 | |
David S. Miller | 8f029de | 2011-02-22 17:59:59 -0800 | [diff] [blame] | 206 | static int mip6_destopt_reject(struct xfrm_state *x, struct sk_buff *skb, |
| 207 | const struct flowi *fl) |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 208 | { |
Alexey Dobriyan | db983c1 | 2008-11-25 17:51:01 -0800 | [diff] [blame] | 209 | struct net *net = xs_net(x); |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 210 | struct inet6_skb_parm *opt = (struct inet6_skb_parm *)skb->cb; |
David S. Miller | 4c9483b | 2011-03-12 16:22:43 -0500 | [diff] [blame] | 211 | const struct flowi6 *fl6 = &fl->u.ip6; |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 212 | struct ipv6_destopt_hao *hao = NULL; |
| 213 | struct xfrm_selector sel; |
| 214 | int offset; |
| 215 | struct timeval stamp; |
| 216 | int err = 0; |
| 217 | |
David S. Miller | 4c9483b | 2011-03-12 16:22:43 -0500 | [diff] [blame] | 218 | if (unlikely(fl6->flowi6_proto == IPPROTO_MH && |
David S. Miller | 1958b85 | 2011-03-12 16:36:19 -0500 | [diff] [blame] | 219 | fl6->fl6_mh_type <= IP6_MH_TYPE_MAX)) |
Masahide NAKAMURA | 01be8e5 | 2006-08-23 20:47:44 -0700 | [diff] [blame] | 220 | goto out; |
| 221 | |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 222 | if (likely(opt->dsthao)) { |
| 223 | offset = ipv6_find_tlv(skb, opt->dsthao, IPV6_TLV_HAO); |
| 224 | if (likely(offset >= 0)) |
Arnaldo Carvalho de Melo | d56f90a | 2007-04-10 20:50:43 -0700 | [diff] [blame] | 225 | hao = (struct ipv6_destopt_hao *) |
| 226 | (skb_network_header(skb) + offset); |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 227 | } |
| 228 | |
| 229 | skb_get_timestamp(skb, &stamp); |
| 230 | |
Arnaldo Carvalho de Melo | 0660e03 | 2007-04-25 17:54:47 -0700 | [diff] [blame] | 231 | if (!mip6_report_rl_allow(&stamp, &ipv6_hdr(skb)->daddr, |
| 232 | hao ? &hao->addr : &ipv6_hdr(skb)->saddr, |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 233 | opt->iif)) |
| 234 | goto out; |
| 235 | |
| 236 | memset(&sel, 0, sizeof(sel)); |
Arnaldo Carvalho de Melo | 0660e03 | 2007-04-25 17:54:47 -0700 | [diff] [blame] | 237 | memcpy(&sel.daddr, (xfrm_address_t *)&ipv6_hdr(skb)->daddr, |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 238 | sizeof(sel.daddr)); |
| 239 | sel.prefixlen_d = 128; |
Arnaldo Carvalho de Melo | 0660e03 | 2007-04-25 17:54:47 -0700 | [diff] [blame] | 240 | memcpy(&sel.saddr, (xfrm_address_t *)&ipv6_hdr(skb)->saddr, |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 241 | sizeof(sel.saddr)); |
| 242 | sel.prefixlen_s = 128; |
| 243 | sel.family = AF_INET6; |
David S. Miller | 4c9483b | 2011-03-12 16:22:43 -0500 | [diff] [blame] | 244 | sel.proto = fl6->flowi6_proto; |
| 245 | sel.dport = xfrm_flowi_dport(fl, &fl6->uli); |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 246 | if (sel.dport) |
Al Viro | e69a4adc | 2006-11-14 20:56:00 -0800 | [diff] [blame] | 247 | sel.dport_mask = htons(~0); |
David S. Miller | 4c9483b | 2011-03-12 16:22:43 -0500 | [diff] [blame] | 248 | sel.sport = xfrm_flowi_sport(fl, &fl6->uli); |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 249 | if (sel.sport) |
Al Viro | e69a4adc | 2006-11-14 20:56:00 -0800 | [diff] [blame] | 250 | sel.sport_mask = htons(~0); |
David S. Miller | 4c9483b | 2011-03-12 16:22:43 -0500 | [diff] [blame] | 251 | sel.ifindex = fl6->flowi6_oif; |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 252 | |
Alexey Dobriyan | db983c1 | 2008-11-25 17:51:01 -0800 | [diff] [blame] | 253 | err = km_report(net, IPPROTO_DSTOPTS, &sel, |
Masahide NAKAMURA | 70182ed | 2006-08-23 20:45:55 -0700 | [diff] [blame] | 254 | (hao ? (xfrm_address_t *)&hao->addr : NULL)); |
| 255 | |
| 256 | out: |
| 257 | return err; |
| 258 | } |
| 259 | |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 260 | static int mip6_destopt_offset(struct xfrm_state *x, struct sk_buff *skb, |
| 261 | u8 **nexthdr) |
| 262 | { |
| 263 | u16 offset = sizeof(struct ipv6hdr); |
Arnaldo Carvalho de Melo | 0660e03 | 2007-04-25 17:54:47 -0700 | [diff] [blame] | 264 | struct ipv6_opt_hdr *exthdr = |
| 265 | (struct ipv6_opt_hdr *)(ipv6_hdr(skb) + 1); |
Arnaldo Carvalho de Melo | d56f90a | 2007-04-10 20:50:43 -0700 | [diff] [blame] | 266 | const unsigned char *nh = skb_network_header(skb); |
Arnaldo Carvalho de Melo | 27a884d | 2007-04-19 20:29:13 -0700 | [diff] [blame] | 267 | unsigned int packet_len = skb->tail - skb->network_header; |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 268 | int found_rhdr = 0; |
| 269 | |
Arnaldo Carvalho de Melo | 0660e03 | 2007-04-25 17:54:47 -0700 | [diff] [blame] | 270 | *nexthdr = &ipv6_hdr(skb)->nexthdr; |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 271 | |
| 272 | while (offset + 1 <= packet_len) { |
| 273 | |
| 274 | switch (**nexthdr) { |
| 275 | case NEXTHDR_HOP: |
| 276 | break; |
| 277 | case NEXTHDR_ROUTING: |
| 278 | found_rhdr = 1; |
| 279 | break; |
| 280 | case NEXTHDR_DEST: |
| 281 | /* |
| 282 | * HAO MUST NOT appear more than once. |
| 283 | * XXX: It is better to try to find by the end of |
| 284 | * XXX: packet if HAO exists. |
| 285 | */ |
| 286 | if (ipv6_find_tlv(skb, offset, IPV6_TLV_HAO) >= 0) { |
| 287 | LIMIT_NETDEBUG(KERN_WARNING "mip6: hao exists already, override\n"); |
| 288 | return offset; |
| 289 | } |
| 290 | |
| 291 | if (found_rhdr) |
| 292 | return offset; |
| 293 | |
| 294 | break; |
| 295 | default: |
| 296 | return offset; |
| 297 | } |
| 298 | |
| 299 | offset += ipv6_optlen(exthdr); |
| 300 | *nexthdr = &exthdr->nexthdr; |
Arnaldo Carvalho de Melo | d56f90a | 2007-04-10 20:50:43 -0700 | [diff] [blame] | 301 | exthdr = (struct ipv6_opt_hdr *)(nh + offset); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 302 | } |
| 303 | |
| 304 | return offset; |
| 305 | } |
| 306 | |
| 307 | static int mip6_destopt_init_state(struct xfrm_state *x) |
| 308 | { |
| 309 | if (x->id.spi) { |
Harvey Harrison | 0dc4787 | 2008-03-05 20:47:47 -0800 | [diff] [blame] | 310 | printk(KERN_INFO "%s: spi is not 0: %u\n", __func__, |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 311 | x->id.spi); |
| 312 | return -EINVAL; |
| 313 | } |
| 314 | if (x->props.mode != XFRM_MODE_ROUTEOPTIMIZATION) { |
| 315 | printk(KERN_INFO "%s: state's mode is not %u: %u\n", |
Harvey Harrison | 0dc4787 | 2008-03-05 20:47:47 -0800 | [diff] [blame] | 316 | __func__, XFRM_MODE_ROUTEOPTIMIZATION, x->props.mode); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 317 | return -EINVAL; |
| 318 | } |
| 319 | |
| 320 | x->props.header_len = sizeof(struct ipv6_destopt_hdr) + |
| 321 | calc_padlen(sizeof(struct ipv6_destopt_hdr), 6) + |
| 322 | sizeof(struct ipv6_destopt_hao); |
Ilpo Järvinen | 547b792 | 2008-07-25 21:43:18 -0700 | [diff] [blame] | 323 | WARN_ON(x->props.header_len != 24); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 324 | |
| 325 | return 0; |
| 326 | } |
| 327 | |
| 328 | /* |
| 329 | * Do nothing about destroying since it has no specific operation for |
| 330 | * destination options header unlike IPsec protocols. |
| 331 | */ |
| 332 | static void mip6_destopt_destroy(struct xfrm_state *x) |
| 333 | { |
| 334 | } |
| 335 | |
Eric Dumazet | 533cb5b | 2008-01-30 19:11:50 -0800 | [diff] [blame] | 336 | static const struct xfrm_type mip6_destopt_type = |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 337 | { |
| 338 | .description = "MIP6DESTOPT", |
| 339 | .owner = THIS_MODULE, |
| 340 | .proto = IPPROTO_DSTOPTS, |
Herbert Xu | f04e7e8 | 2007-11-13 21:36:51 -0800 | [diff] [blame] | 341 | .flags = XFRM_TYPE_NON_FRAGMENT | XFRM_TYPE_LOCAL_COADDR, |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 342 | .init_state = mip6_destopt_init_state, |
| 343 | .destructor = mip6_destopt_destroy, |
| 344 | .input = mip6_destopt_input, |
| 345 | .output = mip6_destopt_output, |
YOSHIFUJI Hideaki | 1ab1457 | 2007-02-09 23:24:49 +0900 | [diff] [blame] | 346 | .reject = mip6_destopt_reject, |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 347 | .hdr_offset = mip6_destopt_offset, |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 348 | }; |
| 349 | |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 350 | static int mip6_rthdr_input(struct xfrm_state *x, struct sk_buff *skb) |
| 351 | { |
Eric Dumazet | b71d1d4 | 2011-04-22 04:53:02 +0000 | [diff] [blame^] | 352 | const struct ipv6hdr *iph = ipv6_hdr(skb); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 353 | struct rt2_hdr *rt2 = (struct rt2_hdr *)skb->data; |
Herbert Xu | 0ebea8e | 2007-11-13 21:45:58 -0800 | [diff] [blame] | 354 | int err = rt2->rt_hdr.nexthdr; |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 355 | |
Herbert Xu | 0ebea8e | 2007-11-13 21:45:58 -0800 | [diff] [blame] | 356 | spin_lock(&x->lock); |
Arnaud Ebalard | d9a9dc6 | 2010-07-16 00:38:44 +0000 | [diff] [blame] | 357 | if (!ipv6_addr_equal(&iph->daddr, (struct in6_addr *)x->coaddr) && |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 358 | !ipv6_addr_any((struct in6_addr *)x->coaddr)) |
Herbert Xu | 0ebea8e | 2007-11-13 21:45:58 -0800 | [diff] [blame] | 359 | err = -ENOENT; |
| 360 | spin_unlock(&x->lock); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 361 | |
Herbert Xu | 0ebea8e | 2007-11-13 21:45:58 -0800 | [diff] [blame] | 362 | return err; |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 363 | } |
| 364 | |
| 365 | /* Routing Header type 2 is inserted. |
| 366 | * IP Header's dst address is replaced with Routing Header's Home Address. |
| 367 | */ |
| 368 | static int mip6_rthdr_output(struct xfrm_state *x, struct sk_buff *skb) |
| 369 | { |
| 370 | struct ipv6hdr *iph; |
| 371 | struct rt2_hdr *rt2; |
| 372 | u8 nexthdr; |
| 373 | |
Herbert Xu | 7b277b1 | 2007-10-10 15:44:06 -0700 | [diff] [blame] | 374 | skb_push(skb, -skb_network_offset(skb)); |
Herbert Xu | 007f021 | 2007-10-09 13:25:59 -0700 | [diff] [blame] | 375 | iph = ipv6_hdr(skb); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 376 | |
Herbert Xu | 007f021 | 2007-10-09 13:25:59 -0700 | [diff] [blame] | 377 | nexthdr = *skb_mac_header(skb); |
| 378 | *skb_mac_header(skb) = IPPROTO_ROUTING; |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 379 | |
Arnaldo Carvalho de Melo | 9c70220 | 2007-04-25 18:04:18 -0700 | [diff] [blame] | 380 | rt2 = (struct rt2_hdr *)skb_transport_header(skb); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 381 | rt2->rt_hdr.nexthdr = nexthdr; |
| 382 | rt2->rt_hdr.hdrlen = (x->props.header_len >> 3) - 1; |
| 383 | rt2->rt_hdr.type = IPV6_SRCRT_TYPE_2; |
| 384 | rt2->rt_hdr.segments_left = 1; |
| 385 | memset(&rt2->reserved, 0, sizeof(rt2->reserved)); |
| 386 | |
Ilpo Järvinen | 547b792 | 2008-07-25 21:43:18 -0700 | [diff] [blame] | 387 | WARN_ON(rt2->rt_hdr.hdrlen != 2); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 388 | |
| 389 | memcpy(&rt2->addr, &iph->daddr, sizeof(rt2->addr)); |
Herbert Xu | b7c6538 | 2007-10-09 13:33:35 -0700 | [diff] [blame] | 390 | spin_lock_bh(&x->lock); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 391 | memcpy(&iph->daddr, x->coaddr, sizeof(iph->daddr)); |
Herbert Xu | b7c6538 | 2007-10-09 13:33:35 -0700 | [diff] [blame] | 392 | spin_unlock_bh(&x->lock); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 393 | |
| 394 | return 0; |
| 395 | } |
| 396 | |
| 397 | static int mip6_rthdr_offset(struct xfrm_state *x, struct sk_buff *skb, |
| 398 | u8 **nexthdr) |
| 399 | { |
| 400 | u16 offset = sizeof(struct ipv6hdr); |
Arnaldo Carvalho de Melo | 0660e03 | 2007-04-25 17:54:47 -0700 | [diff] [blame] | 401 | struct ipv6_opt_hdr *exthdr = |
| 402 | (struct ipv6_opt_hdr *)(ipv6_hdr(skb) + 1); |
Arnaldo Carvalho de Melo | d56f90a | 2007-04-10 20:50:43 -0700 | [diff] [blame] | 403 | const unsigned char *nh = skb_network_header(skb); |
Arnaldo Carvalho de Melo | 27a884d | 2007-04-19 20:29:13 -0700 | [diff] [blame] | 404 | unsigned int packet_len = skb->tail - skb->network_header; |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 405 | int found_rhdr = 0; |
| 406 | |
Arnaldo Carvalho de Melo | 0660e03 | 2007-04-25 17:54:47 -0700 | [diff] [blame] | 407 | *nexthdr = &ipv6_hdr(skb)->nexthdr; |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 408 | |
| 409 | while (offset + 1 <= packet_len) { |
| 410 | |
| 411 | switch (**nexthdr) { |
| 412 | case NEXTHDR_HOP: |
| 413 | break; |
| 414 | case NEXTHDR_ROUTING: |
| 415 | if (offset + 3 <= packet_len) { |
| 416 | struct ipv6_rt_hdr *rt; |
Arnaldo Carvalho de Melo | d56f90a | 2007-04-10 20:50:43 -0700 | [diff] [blame] | 417 | rt = (struct ipv6_rt_hdr *)(nh + offset); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 418 | if (rt->type != 0) |
| 419 | return offset; |
| 420 | } |
| 421 | found_rhdr = 1; |
| 422 | break; |
| 423 | case NEXTHDR_DEST: |
| 424 | if (ipv6_find_tlv(skb, offset, IPV6_TLV_HAO) >= 0) |
| 425 | return offset; |
| 426 | |
| 427 | if (found_rhdr) |
| 428 | return offset; |
| 429 | |
| 430 | break; |
| 431 | default: |
| 432 | return offset; |
| 433 | } |
| 434 | |
| 435 | offset += ipv6_optlen(exthdr); |
| 436 | *nexthdr = &exthdr->nexthdr; |
Arnaldo Carvalho de Melo | d56f90a | 2007-04-10 20:50:43 -0700 | [diff] [blame] | 437 | exthdr = (struct ipv6_opt_hdr *)(nh + offset); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 438 | } |
| 439 | |
| 440 | return offset; |
| 441 | } |
| 442 | |
| 443 | static int mip6_rthdr_init_state(struct xfrm_state *x) |
| 444 | { |
| 445 | if (x->id.spi) { |
Harvey Harrison | 0dc4787 | 2008-03-05 20:47:47 -0800 | [diff] [blame] | 446 | printk(KERN_INFO "%s: spi is not 0: %u\n", __func__, |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 447 | x->id.spi); |
| 448 | return -EINVAL; |
| 449 | } |
| 450 | if (x->props.mode != XFRM_MODE_ROUTEOPTIMIZATION) { |
| 451 | printk(KERN_INFO "%s: state's mode is not %u: %u\n", |
Harvey Harrison | 0dc4787 | 2008-03-05 20:47:47 -0800 | [diff] [blame] | 452 | __func__, XFRM_MODE_ROUTEOPTIMIZATION, x->props.mode); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 453 | return -EINVAL; |
| 454 | } |
| 455 | |
| 456 | x->props.header_len = sizeof(struct rt2_hdr); |
| 457 | |
| 458 | return 0; |
| 459 | } |
| 460 | |
| 461 | /* |
| 462 | * Do nothing about destroying since it has no specific operation for routing |
| 463 | * header type 2 unlike IPsec protocols. |
| 464 | */ |
| 465 | static void mip6_rthdr_destroy(struct xfrm_state *x) |
| 466 | { |
| 467 | } |
| 468 | |
Eric Dumazet | 533cb5b | 2008-01-30 19:11:50 -0800 | [diff] [blame] | 469 | static const struct xfrm_type mip6_rthdr_type = |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 470 | { |
| 471 | .description = "MIP6RT", |
| 472 | .owner = THIS_MODULE, |
| 473 | .proto = IPPROTO_ROUTING, |
Herbert Xu | f04e7e8 | 2007-11-13 21:36:51 -0800 | [diff] [blame] | 474 | .flags = XFRM_TYPE_NON_FRAGMENT | XFRM_TYPE_REMOTE_COADDR, |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 475 | .init_state = mip6_rthdr_init_state, |
| 476 | .destructor = mip6_rthdr_destroy, |
| 477 | .input = mip6_rthdr_input, |
| 478 | .output = mip6_rthdr_output, |
| 479 | .hdr_offset = mip6_rthdr_offset, |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 480 | }; |
| 481 | |
Masahide NAKAMURA | 59fbb3a6 | 2007-06-26 23:56:32 -0700 | [diff] [blame] | 482 | static int __init mip6_init(void) |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 483 | { |
| 484 | printk(KERN_INFO "Mobile IPv6\n"); |
| 485 | |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 486 | if (xfrm_register_type(&mip6_destopt_type, AF_INET6) < 0) { |
Harvey Harrison | 0dc4787 | 2008-03-05 20:47:47 -0800 | [diff] [blame] | 487 | printk(KERN_INFO "%s: can't add xfrm type(destopt)\n", __func__); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 488 | goto mip6_destopt_xfrm_fail; |
| 489 | } |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 490 | if (xfrm_register_type(&mip6_rthdr_type, AF_INET6) < 0) { |
Harvey Harrison | 0dc4787 | 2008-03-05 20:47:47 -0800 | [diff] [blame] | 491 | printk(KERN_INFO "%s: can't add xfrm type(rthdr)\n", __func__); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 492 | goto mip6_rthdr_xfrm_fail; |
| 493 | } |
Masahide NAKAMURA | 59fbb3a6 | 2007-06-26 23:56:32 -0700 | [diff] [blame] | 494 | if (rawv6_mh_filter_register(mip6_mh_filter) < 0) { |
Harvey Harrison | 0dc4787 | 2008-03-05 20:47:47 -0800 | [diff] [blame] | 495 | printk(KERN_INFO "%s: can't add rawv6 mh filter\n", __func__); |
Masahide NAKAMURA | 59fbb3a6 | 2007-06-26 23:56:32 -0700 | [diff] [blame] | 496 | goto mip6_rawv6_mh_fail; |
| 497 | } |
| 498 | |
| 499 | |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 500 | return 0; |
| 501 | |
Masahide NAKAMURA | 59fbb3a6 | 2007-06-26 23:56:32 -0700 | [diff] [blame] | 502 | mip6_rawv6_mh_fail: |
| 503 | xfrm_unregister_type(&mip6_rthdr_type, AF_INET6); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 504 | mip6_rthdr_xfrm_fail: |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 505 | xfrm_unregister_type(&mip6_destopt_type, AF_INET6); |
| 506 | mip6_destopt_xfrm_fail: |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 507 | return -EAGAIN; |
| 508 | } |
| 509 | |
Masahide NAKAMURA | 59fbb3a6 | 2007-06-26 23:56:32 -0700 | [diff] [blame] | 510 | static void __exit mip6_fini(void) |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 511 | { |
Masahide NAKAMURA | 59fbb3a6 | 2007-06-26 23:56:32 -0700 | [diff] [blame] | 512 | if (rawv6_mh_filter_unregister(mip6_mh_filter) < 0) |
Harvey Harrison | 0dc4787 | 2008-03-05 20:47:47 -0800 | [diff] [blame] | 513 | printk(KERN_INFO "%s: can't remove rawv6 mh filter\n", __func__); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 514 | if (xfrm_unregister_type(&mip6_rthdr_type, AF_INET6) < 0) |
Harvey Harrison | 0dc4787 | 2008-03-05 20:47:47 -0800 | [diff] [blame] | 515 | printk(KERN_INFO "%s: can't remove xfrm type(rthdr)\n", __func__); |
Noriaki TAKAMIYA | 3d12689 | 2006-08-23 20:32:34 -0700 | [diff] [blame] | 516 | if (xfrm_unregister_type(&mip6_destopt_type, AF_INET6) < 0) |
Harvey Harrison | 0dc4787 | 2008-03-05 20:47:47 -0800 | [diff] [blame] | 517 | printk(KERN_INFO "%s: can't remove xfrm type(destopt)\n", __func__); |
Noriaki TAKAMIYA | 2c8d7ca | 2006-08-23 20:31:11 -0700 | [diff] [blame] | 518 | } |
Masahide NAKAMURA | 59fbb3a6 | 2007-06-26 23:56:32 -0700 | [diff] [blame] | 519 | |
| 520 | module_init(mip6_init); |
| 521 | module_exit(mip6_fini); |
| 522 | |
| 523 | MODULE_LICENSE("GPL"); |
Masahide NAKAMURA | d3d6dd3 | 2007-06-26 23:57:49 -0700 | [diff] [blame] | 524 | MODULE_ALIAS_XFRM_TYPE(AF_INET6, XFRM_PROTO_DSTOPTS); |
| 525 | MODULE_ALIAS_XFRM_TYPE(AF_INET6, XFRM_PROTO_ROUTING); |