| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* | 
 | 2 |  * INET		An implementation of the TCP/IP protocol suite for the LINUX | 
 | 3 |  *		operating system.  INET is implemented using the  BSD Socket | 
 | 4 |  *		interface as the means of communication with the user level. | 
 | 5 |  * | 
 | 6 |  *		RAW - implementation of IP "raw" sockets. | 
 | 7 |  * | 
 | 8 |  * Version:	$Id: raw.c,v 1.64 2002/02/01 22:01:04 davem Exp $ | 
 | 9 |  * | 
| Jesper Juhl | 02c30a8 | 2005-05-05 16:16:16 -0700 | [diff] [blame] | 10 |  * Authors:	Ross Biro | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 11 |  *		Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> | 
 | 12 |  * | 
 | 13 |  * Fixes: | 
 | 14 |  *		Alan Cox	:	verify_area() fixed up | 
 | 15 |  *		Alan Cox	:	ICMP error handling | 
 | 16 |  *		Alan Cox	:	EMSGSIZE if you send too big a packet | 
 | 17 |  *		Alan Cox	: 	Now uses generic datagrams and shared | 
 | 18 |  *					skbuff library. No more peek crashes, | 
 | 19 |  *					no more backlogs | 
 | 20 |  *		Alan Cox	:	Checks sk->broadcast. | 
 | 21 |  *		Alan Cox	:	Uses skb_free_datagram/skb_copy_datagram | 
 | 22 |  *		Alan Cox	:	Raw passes ip options too | 
 | 23 |  *		Alan Cox	:	Setsocketopt added | 
 | 24 |  *		Alan Cox	:	Fixed error return for broadcasts | 
 | 25 |  *		Alan Cox	:	Removed wake_up calls | 
 | 26 |  *		Alan Cox	:	Use ttl/tos | 
 | 27 |  *		Alan Cox	:	Cleaned up old debugging | 
 | 28 |  *		Alan Cox	:	Use new kernel side addresses | 
 | 29 |  *	Arnt Gulbrandsen	:	Fixed MSG_DONTROUTE in raw sockets. | 
 | 30 |  *		Alan Cox	:	BSD style RAW socket demultiplexing. | 
 | 31 |  *		Alan Cox	:	Beginnings of mrouted support. | 
 | 32 |  *		Alan Cox	:	Added IP_HDRINCL option. | 
 | 33 |  *		Alan Cox	:	Skip broadcast check if BSDism set. | 
 | 34 |  *		David S. Miller	:	New socket lookup architecture. | 
 | 35 |  * | 
 | 36 |  *		This program is free software; you can redistribute it and/or | 
 | 37 |  *		modify it under the terms of the GNU General Public License | 
 | 38 |  *		as published by the Free Software Foundation; either version | 
 | 39 |  *		2 of the License, or (at your option) any later version. | 
 | 40 |  */ | 
 | 41 |   | 
 | 42 | #include <linux/config.h>  | 
 | 43 | #include <asm/atomic.h> | 
 | 44 | #include <asm/byteorder.h> | 
 | 45 | #include <asm/current.h> | 
 | 46 | #include <asm/uaccess.h> | 
 | 47 | #include <asm/ioctls.h> | 
 | 48 | #include <linux/types.h> | 
 | 49 | #include <linux/stddef.h> | 
 | 50 | #include <linux/slab.h> | 
 | 51 | #include <linux/errno.h> | 
 | 52 | #include <linux/aio.h> | 
 | 53 | #include <linux/kernel.h> | 
 | 54 | #include <linux/spinlock.h> | 
 | 55 | #include <linux/sockios.h> | 
 | 56 | #include <linux/socket.h> | 
 | 57 | #include <linux/in.h> | 
 | 58 | #include <linux/mroute.h> | 
 | 59 | #include <linux/netdevice.h> | 
 | 60 | #include <linux/in_route.h> | 
 | 61 | #include <linux/route.h> | 
 | 62 | #include <linux/tcp.h> | 
 | 63 | #include <linux/skbuff.h> | 
 | 64 | #include <net/dst.h> | 
 | 65 | #include <net/sock.h> | 
 | 66 | #include <linux/gfp.h> | 
 | 67 | #include <linux/ip.h> | 
 | 68 | #include <linux/net.h> | 
 | 69 | #include <net/ip.h> | 
 | 70 | #include <net/icmp.h> | 
 | 71 | #include <net/udp.h> | 
 | 72 | #include <net/raw.h> | 
 | 73 | #include <net/snmp.h> | 
 | 74 | #include <net/inet_common.h> | 
 | 75 | #include <net/checksum.h> | 
 | 76 | #include <net/xfrm.h> | 
 | 77 | #include <linux/rtnetlink.h> | 
 | 78 | #include <linux/proc_fs.h> | 
 | 79 | #include <linux/seq_file.h> | 
 | 80 | #include <linux/netfilter.h> | 
 | 81 | #include <linux/netfilter_ipv4.h> | 
 | 82 |  | 
 | 83 | struct hlist_head raw_v4_htable[RAWV4_HTABLE_SIZE]; | 
 | 84 | DEFINE_RWLOCK(raw_v4_lock); | 
 | 85 |  | 
 | 86 | static void raw_v4_hash(struct sock *sk) | 
 | 87 | { | 
 | 88 | 	struct hlist_head *head = &raw_v4_htable[inet_sk(sk)->num & | 
 | 89 | 						 (RAWV4_HTABLE_SIZE - 1)]; | 
 | 90 |  | 
 | 91 | 	write_lock_bh(&raw_v4_lock); | 
 | 92 | 	sk_add_node(sk, head); | 
 | 93 | 	sock_prot_inc_use(sk->sk_prot); | 
 | 94 | 	write_unlock_bh(&raw_v4_lock); | 
 | 95 | } | 
 | 96 |  | 
 | 97 | static void raw_v4_unhash(struct sock *sk) | 
 | 98 | { | 
 | 99 |  	write_lock_bh(&raw_v4_lock); | 
 | 100 | 	if (sk_del_node_init(sk)) | 
 | 101 | 		sock_prot_dec_use(sk->sk_prot); | 
 | 102 | 	write_unlock_bh(&raw_v4_lock); | 
 | 103 | } | 
 | 104 |  | 
 | 105 | struct sock *__raw_v4_lookup(struct sock *sk, unsigned short num, | 
 | 106 | 			     unsigned long raddr, unsigned long laddr, | 
 | 107 | 			     int dif) | 
 | 108 | { | 
 | 109 | 	struct hlist_node *node; | 
 | 110 |  | 
 | 111 | 	sk_for_each_from(sk, node) { | 
 | 112 | 		struct inet_sock *inet = inet_sk(sk); | 
 | 113 |  | 
 | 114 | 		if (inet->num == num 					&& | 
 | 115 | 		    !(inet->daddr && inet->daddr != raddr) 		&& | 
 | 116 | 		    !(inet->rcv_saddr && inet->rcv_saddr != laddr)	&& | 
 | 117 | 		    !(sk->sk_bound_dev_if && sk->sk_bound_dev_if != dif)) | 
 | 118 | 			goto found; /* gotcha */ | 
 | 119 | 	} | 
 | 120 | 	sk = NULL; | 
 | 121 | found: | 
 | 122 | 	return sk; | 
 | 123 | } | 
 | 124 |  | 
 | 125 | /* | 
 | 126 |  *	0 - deliver | 
 | 127 |  *	1 - block | 
 | 128 |  */ | 
 | 129 | static __inline__ int icmp_filter(struct sock *sk, struct sk_buff *skb) | 
 | 130 | { | 
 | 131 | 	int type; | 
 | 132 |  | 
 | 133 | 	if (!pskb_may_pull(skb, sizeof(struct icmphdr))) | 
 | 134 | 		return 1; | 
 | 135 |  | 
 | 136 | 	type = skb->h.icmph->type; | 
 | 137 | 	if (type < 32) { | 
 | 138 | 		__u32 data = raw_sk(sk)->filter.data; | 
 | 139 |  | 
 | 140 | 		return ((1 << type) & data) != 0; | 
 | 141 | 	} | 
 | 142 |  | 
 | 143 | 	/* Do not block unknown ICMP types */ | 
 | 144 | 	return 0; | 
 | 145 | } | 
 | 146 |  | 
 | 147 | /* IP input processing comes here for RAW socket delivery. | 
 | 148 |  * Caller owns SKB, so we must make clones. | 
 | 149 |  * | 
 | 150 |  * RFC 1122: SHOULD pass TOS value up to the transport layer. | 
 | 151 |  * -> It does. And not only TOS, but all IP header. | 
 | 152 |  */ | 
 | 153 | void raw_v4_input(struct sk_buff *skb, struct iphdr *iph, int hash) | 
 | 154 | { | 
 | 155 | 	struct sock *sk; | 
 | 156 | 	struct hlist_head *head; | 
 | 157 |  | 
 | 158 | 	read_lock(&raw_v4_lock); | 
 | 159 | 	head = &raw_v4_htable[hash]; | 
 | 160 | 	if (hlist_empty(head)) | 
 | 161 | 		goto out; | 
 | 162 | 	sk = __raw_v4_lookup(__sk_head(head), iph->protocol, | 
 | 163 | 			     iph->saddr, iph->daddr, | 
 | 164 | 			     skb->dev->ifindex); | 
 | 165 |  | 
 | 166 | 	while (sk) { | 
 | 167 | 		if (iph->protocol != IPPROTO_ICMP || !icmp_filter(sk, skb)) { | 
 | 168 | 			struct sk_buff *clone = skb_clone(skb, GFP_ATOMIC); | 
 | 169 |  | 
 | 170 | 			/* Not releasing hash table! */ | 
 | 171 | 			if (clone) | 
 | 172 | 				raw_rcv(sk, clone); | 
 | 173 | 		} | 
 | 174 | 		sk = __raw_v4_lookup(sk_next(sk), iph->protocol, | 
 | 175 | 				     iph->saddr, iph->daddr, | 
 | 176 | 				     skb->dev->ifindex); | 
 | 177 | 	} | 
 | 178 | out: | 
 | 179 | 	read_unlock(&raw_v4_lock); | 
 | 180 | } | 
 | 181 |  | 
 | 182 | void raw_err (struct sock *sk, struct sk_buff *skb, u32 info) | 
 | 183 | { | 
 | 184 | 	struct inet_sock *inet = inet_sk(sk); | 
 | 185 | 	int type = skb->h.icmph->type; | 
 | 186 | 	int code = skb->h.icmph->code; | 
 | 187 | 	int err = 0; | 
 | 188 | 	int harderr = 0; | 
 | 189 |  | 
 | 190 | 	/* Report error on raw socket, if: | 
 | 191 | 	   1. User requested ip_recverr. | 
 | 192 | 	   2. Socket is connected (otherwise the error indication | 
 | 193 | 	      is useless without ip_recverr and error is hard. | 
 | 194 | 	 */ | 
 | 195 | 	if (!inet->recverr && sk->sk_state != TCP_ESTABLISHED) | 
 | 196 | 		return; | 
 | 197 |  | 
 | 198 | 	switch (type) { | 
 | 199 | 	default: | 
 | 200 | 	case ICMP_TIME_EXCEEDED: | 
 | 201 | 		err = EHOSTUNREACH; | 
 | 202 | 		break; | 
 | 203 | 	case ICMP_SOURCE_QUENCH: | 
 | 204 | 		return; | 
 | 205 | 	case ICMP_PARAMETERPROB: | 
 | 206 | 		err = EPROTO; | 
 | 207 | 		harderr = 1; | 
 | 208 | 		break; | 
 | 209 | 	case ICMP_DEST_UNREACH: | 
 | 210 | 		err = EHOSTUNREACH; | 
 | 211 | 		if (code > NR_ICMP_UNREACH) | 
 | 212 | 			break; | 
 | 213 | 		err = icmp_err_convert[code].errno; | 
 | 214 | 		harderr = icmp_err_convert[code].fatal; | 
 | 215 | 		if (code == ICMP_FRAG_NEEDED) { | 
 | 216 | 			harderr = inet->pmtudisc != IP_PMTUDISC_DONT; | 
 | 217 | 			err = EMSGSIZE; | 
 | 218 | 		} | 
 | 219 | 	} | 
 | 220 |  | 
 | 221 | 	if (inet->recverr) { | 
 | 222 | 		struct iphdr *iph = (struct iphdr*)skb->data; | 
 | 223 | 		u8 *payload = skb->data + (iph->ihl << 2); | 
 | 224 |  | 
 | 225 | 		if (inet->hdrincl) | 
 | 226 | 			payload = skb->data; | 
 | 227 | 		ip_icmp_error(sk, skb, err, 0, info, payload); | 
 | 228 | 	} | 
 | 229 |  | 
 | 230 | 	if (inet->recverr || harderr) { | 
 | 231 | 		sk->sk_err = err; | 
 | 232 | 		sk->sk_error_report(sk); | 
 | 233 | 	} | 
 | 234 | } | 
 | 235 |  | 
 | 236 | static int raw_rcv_skb(struct sock * sk, struct sk_buff * skb) | 
 | 237 | { | 
 | 238 | 	/* Charge it to the socket. */ | 
 | 239 | 	 | 
 | 240 | 	if (sock_queue_rcv_skb(sk, skb) < 0) { | 
 | 241 | 		/* FIXME: increment a raw drops counter here */ | 
 | 242 | 		kfree_skb(skb); | 
 | 243 | 		return NET_RX_DROP; | 
 | 244 | 	} | 
 | 245 |  | 
 | 246 | 	return NET_RX_SUCCESS; | 
 | 247 | } | 
 | 248 |  | 
 | 249 | int raw_rcv(struct sock *sk, struct sk_buff *skb) | 
 | 250 | { | 
 | 251 | 	if (!xfrm4_policy_check(sk, XFRM_POLICY_IN, skb)) { | 
 | 252 | 		kfree_skb(skb); | 
 | 253 | 		return NET_RX_DROP; | 
 | 254 | 	} | 
 | 255 |  | 
 | 256 | 	skb_push(skb, skb->data - skb->nh.raw); | 
 | 257 |  | 
 | 258 | 	raw_rcv_skb(sk, skb); | 
 | 259 | 	return 0; | 
 | 260 | } | 
 | 261 |  | 
| Jesper Juhl | f7d7fc0 | 2005-06-18 23:00:34 -0700 | [diff] [blame] | 262 | static int raw_send_hdrinc(struct sock *sk, void *from, size_t length, | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 263 | 			struct rtable *rt,  | 
 | 264 | 			unsigned int flags) | 
 | 265 | { | 
 | 266 | 	struct inet_sock *inet = inet_sk(sk); | 
 | 267 | 	int hh_len; | 
 | 268 | 	struct iphdr *iph; | 
 | 269 | 	struct sk_buff *skb; | 
 | 270 | 	int err; | 
 | 271 |  | 
 | 272 | 	if (length > rt->u.dst.dev->mtu) { | 
 | 273 | 		ip_local_error(sk, EMSGSIZE, rt->rt_dst, inet->dport, | 
 | 274 | 			       rt->u.dst.dev->mtu); | 
 | 275 | 		return -EMSGSIZE; | 
 | 276 | 	} | 
 | 277 | 	if (flags&MSG_PROBE) | 
 | 278 | 		goto out; | 
 | 279 |  | 
 | 280 | 	hh_len = LL_RESERVED_SPACE(rt->u.dst.dev); | 
 | 281 |  | 
 | 282 | 	skb = sock_alloc_send_skb(sk, length+hh_len+15, | 
 | 283 | 				  flags&MSG_DONTWAIT, &err); | 
 | 284 | 	if (skb == NULL) | 
 | 285 | 		goto error;  | 
 | 286 | 	skb_reserve(skb, hh_len); | 
 | 287 |  | 
 | 288 | 	skb->priority = sk->sk_priority; | 
 | 289 | 	skb->dst = dst_clone(&rt->u.dst); | 
 | 290 |  | 
 | 291 | 	skb->nh.iph = iph = (struct iphdr *)skb_put(skb, length); | 
 | 292 |  | 
 | 293 | 	skb->ip_summed = CHECKSUM_NONE; | 
 | 294 |  | 
 | 295 | 	skb->h.raw = skb->nh.raw; | 
 | 296 | 	err = memcpy_fromiovecend((void *)iph, from, 0, length); | 
 | 297 | 	if (err) | 
 | 298 | 		goto error_fault; | 
 | 299 |  | 
 | 300 | 	/* We don't modify invalid header */ | 
| Jesper Juhl | f7d7fc0 | 2005-06-18 23:00:34 -0700 | [diff] [blame] | 301 | 	if (length >= sizeof(*iph) && iph->ihl * 4U <= length) { | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 302 | 		if (!iph->saddr) | 
 | 303 | 			iph->saddr = rt->rt_src; | 
 | 304 | 		iph->check   = 0; | 
 | 305 | 		iph->tot_len = htons(length); | 
 | 306 | 		if (!iph->id) | 
 | 307 | 			ip_select_ident(iph, &rt->u.dst, NULL); | 
 | 308 |  | 
 | 309 | 		iph->check = ip_fast_csum((unsigned char *)iph, iph->ihl); | 
 | 310 | 	} | 
 | 311 |  | 
 | 312 | 	err = NF_HOOK(PF_INET, NF_IP_LOCAL_OUT, skb, NULL, rt->u.dst.dev, | 
 | 313 | 		      dst_output); | 
 | 314 | 	if (err > 0) | 
 | 315 | 		err = inet->recverr ? net_xmit_errno(err) : 0; | 
 | 316 | 	if (err) | 
 | 317 | 		goto error; | 
 | 318 | out: | 
 | 319 | 	return 0; | 
 | 320 |  | 
 | 321 | error_fault: | 
 | 322 | 	err = -EFAULT; | 
 | 323 | 	kfree_skb(skb); | 
 | 324 | error: | 
 | 325 | 	IP_INC_STATS(IPSTATS_MIB_OUTDISCARDS); | 
 | 326 | 	return err;  | 
 | 327 | } | 
 | 328 |  | 
 | 329 | static void raw_probe_proto_opt(struct flowi *fl, struct msghdr *msg) | 
 | 330 | { | 
 | 331 | 	struct iovec *iov; | 
 | 332 | 	u8 __user *type = NULL; | 
 | 333 | 	u8 __user *code = NULL; | 
 | 334 | 	int probed = 0; | 
| Jesper Juhl | 93765d8 | 2005-06-18 23:00:15 -0700 | [diff] [blame] | 335 | 	unsigned int i; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 336 |  | 
 | 337 | 	if (!msg->msg_iov) | 
 | 338 | 		return; | 
 | 339 |  | 
 | 340 | 	for (i = 0; i < msg->msg_iovlen; i++) { | 
 | 341 | 		iov = &msg->msg_iov[i]; | 
 | 342 | 		if (!iov) | 
 | 343 | 			continue; | 
 | 344 |  | 
 | 345 | 		switch (fl->proto) { | 
 | 346 | 		case IPPROTO_ICMP: | 
 | 347 | 			/* check if one-byte field is readable or not. */ | 
 | 348 | 			if (iov->iov_base && iov->iov_len < 1) | 
 | 349 | 				break; | 
 | 350 |  | 
 | 351 | 			if (!type) { | 
 | 352 | 				type = iov->iov_base; | 
 | 353 | 				/* check if code field is readable or not. */ | 
 | 354 | 				if (iov->iov_len > 1) | 
 | 355 | 					code = type + 1; | 
 | 356 | 			} else if (!code) | 
 | 357 | 				code = iov->iov_base; | 
 | 358 |  | 
 | 359 | 			if (type && code) { | 
 | 360 | 				get_user(fl->fl_icmp_type, type); | 
 | 361 | 				__get_user(fl->fl_icmp_code, code); | 
 | 362 | 				probed = 1; | 
 | 363 | 			} | 
 | 364 | 			break; | 
 | 365 | 		default: | 
 | 366 | 			probed = 1; | 
 | 367 | 			break; | 
 | 368 | 		} | 
 | 369 | 		if (probed) | 
 | 370 | 			break; | 
 | 371 | 	} | 
 | 372 | } | 
 | 373 |  | 
 | 374 | static int raw_sendmsg(struct kiocb *iocb, struct sock *sk, struct msghdr *msg, | 
 | 375 | 		       size_t len) | 
 | 376 | { | 
 | 377 | 	struct inet_sock *inet = inet_sk(sk); | 
 | 378 | 	struct ipcm_cookie ipc; | 
 | 379 | 	struct rtable *rt = NULL; | 
 | 380 | 	int free = 0; | 
 | 381 | 	u32 daddr; | 
 | 382 | 	u32 saddr; | 
 | 383 | 	u8  tos; | 
 | 384 | 	int err; | 
 | 385 |  | 
 | 386 | 	err = -EMSGSIZE; | 
| Jesper Juhl | 926d4b8 | 2005-06-18 23:00:00 -0700 | [diff] [blame] | 387 | 	if (len > 0xFFFF) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 388 | 		goto out; | 
 | 389 |  | 
 | 390 | 	/* | 
 | 391 | 	 *	Check the flags. | 
 | 392 | 	 */ | 
 | 393 |  | 
 | 394 | 	err = -EOPNOTSUPP; | 
 | 395 | 	if (msg->msg_flags & MSG_OOB)	/* Mirror BSD error message */ | 
 | 396 | 		goto out;               /* compatibility */ | 
 | 397 | 			  | 
 | 398 | 	/* | 
 | 399 | 	 *	Get and verify the address.  | 
 | 400 | 	 */ | 
 | 401 |  | 
 | 402 | 	if (msg->msg_namelen) { | 
 | 403 | 		struct sockaddr_in *usin = (struct sockaddr_in*)msg->msg_name; | 
 | 404 | 		err = -EINVAL; | 
 | 405 | 		if (msg->msg_namelen < sizeof(*usin)) | 
 | 406 | 			goto out; | 
 | 407 | 		if (usin->sin_family != AF_INET) { | 
 | 408 | 			static int complained; | 
 | 409 | 			if (!complained++) | 
 | 410 | 				printk(KERN_INFO "%s forgot to set AF_INET in " | 
 | 411 | 						 "raw sendmsg. Fix it!\n", | 
 | 412 | 						 current->comm); | 
 | 413 | 			err = -EAFNOSUPPORT; | 
 | 414 | 			if (usin->sin_family) | 
 | 415 | 				goto out; | 
 | 416 | 		} | 
 | 417 | 		daddr = usin->sin_addr.s_addr; | 
 | 418 | 		/* ANK: I did not forget to get protocol from port field. | 
 | 419 | 		 * I just do not know, who uses this weirdness. | 
 | 420 | 		 * IP_HDRINCL is much more convenient. | 
 | 421 | 		 */ | 
 | 422 | 	} else { | 
 | 423 | 		err = -EDESTADDRREQ; | 
 | 424 | 		if (sk->sk_state != TCP_ESTABLISHED)  | 
 | 425 | 			goto out; | 
 | 426 | 		daddr = inet->daddr; | 
 | 427 | 	} | 
 | 428 |  | 
 | 429 | 	ipc.addr = inet->saddr; | 
 | 430 | 	ipc.opt = NULL; | 
 | 431 | 	ipc.oif = sk->sk_bound_dev_if; | 
 | 432 |  | 
 | 433 | 	if (msg->msg_controllen) { | 
 | 434 | 		err = ip_cmsg_send(msg, &ipc); | 
 | 435 | 		if (err) | 
 | 436 | 			goto out; | 
 | 437 | 		if (ipc.opt) | 
 | 438 | 			free = 1; | 
 | 439 | 	} | 
 | 440 |  | 
 | 441 | 	saddr = ipc.addr; | 
 | 442 | 	ipc.addr = daddr; | 
 | 443 |  | 
 | 444 | 	if (!ipc.opt) | 
 | 445 | 		ipc.opt = inet->opt; | 
 | 446 |  | 
 | 447 | 	if (ipc.opt) { | 
 | 448 | 		err = -EINVAL; | 
 | 449 | 		/* Linux does not mangle headers on raw sockets, | 
 | 450 | 		 * so that IP options + IP_HDRINCL is non-sense. | 
 | 451 | 		 */ | 
 | 452 | 		if (inet->hdrincl) | 
 | 453 | 			goto done; | 
 | 454 | 		if (ipc.opt->srr) { | 
 | 455 | 			if (!daddr) | 
 | 456 | 				goto done; | 
 | 457 | 			daddr = ipc.opt->faddr; | 
 | 458 | 		} | 
 | 459 | 	} | 
 | 460 | 	tos = RT_CONN_FLAGS(sk); | 
 | 461 | 	if (msg->msg_flags & MSG_DONTROUTE) | 
 | 462 | 		tos |= RTO_ONLINK; | 
 | 463 |  | 
 | 464 | 	if (MULTICAST(daddr)) { | 
 | 465 | 		if (!ipc.oif) | 
 | 466 | 			ipc.oif = inet->mc_index; | 
 | 467 | 		if (!saddr) | 
 | 468 | 			saddr = inet->mc_addr; | 
 | 469 | 	} | 
 | 470 |  | 
 | 471 | 	{ | 
 | 472 | 		struct flowi fl = { .oif = ipc.oif, | 
 | 473 | 				    .nl_u = { .ip4_u = | 
 | 474 | 					      { .daddr = daddr, | 
 | 475 | 						.saddr = saddr, | 
 | 476 | 						.tos = tos } }, | 
 | 477 | 				    .proto = inet->hdrincl ? IPPROTO_RAW : | 
 | 478 | 					    		     sk->sk_protocol, | 
 | 479 | 				  }; | 
 | 480 | 		if (!inet->hdrincl) | 
 | 481 | 			raw_probe_proto_opt(&fl, msg); | 
 | 482 |  | 
 | 483 | 		err = ip_route_output_flow(&rt, &fl, sk, !(msg->msg_flags&MSG_DONTWAIT)); | 
 | 484 | 	} | 
 | 485 | 	if (err) | 
 | 486 | 		goto done; | 
 | 487 |  | 
 | 488 | 	err = -EACCES; | 
 | 489 | 	if (rt->rt_flags & RTCF_BROADCAST && !sock_flag(sk, SOCK_BROADCAST)) | 
 | 490 | 		goto done; | 
 | 491 |  | 
 | 492 | 	if (msg->msg_flags & MSG_CONFIRM) | 
 | 493 | 		goto do_confirm; | 
 | 494 | back_from_confirm: | 
 | 495 |  | 
 | 496 | 	if (inet->hdrincl) | 
 | 497 | 		err = raw_send_hdrinc(sk, msg->msg_iov, len,  | 
 | 498 | 					rt, msg->msg_flags); | 
 | 499 | 	 | 
 | 500 | 	 else { | 
 | 501 | 		if (!ipc.addr) | 
 | 502 | 			ipc.addr = rt->rt_dst; | 
 | 503 | 		lock_sock(sk); | 
 | 504 | 		err = ip_append_data(sk, ip_generic_getfrag, msg->msg_iov, len, 0, | 
 | 505 | 					&ipc, rt, msg->msg_flags); | 
 | 506 | 		if (err) | 
 | 507 | 			ip_flush_pending_frames(sk); | 
 | 508 | 		else if (!(msg->msg_flags & MSG_MORE)) | 
 | 509 | 			err = ip_push_pending_frames(sk); | 
 | 510 | 		release_sock(sk); | 
 | 511 | 	} | 
 | 512 | done: | 
 | 513 | 	if (free) | 
 | 514 | 		kfree(ipc.opt); | 
 | 515 | 	ip_rt_put(rt); | 
 | 516 |  | 
| Jesper Juhl | 5418c69 | 2005-06-18 22:59:45 -0700 | [diff] [blame] | 517 | out: | 
 | 518 | 	if (err < 0) | 
 | 519 | 		return err; | 
 | 520 | 	return len; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 521 |  | 
 | 522 | do_confirm: | 
 | 523 | 	dst_confirm(&rt->u.dst); | 
 | 524 | 	if (!(msg->msg_flags & MSG_PROBE) || len) | 
 | 525 | 		goto back_from_confirm; | 
 | 526 | 	err = 0; | 
 | 527 | 	goto done; | 
 | 528 | } | 
 | 529 |  | 
 | 530 | static void raw_close(struct sock *sk, long timeout) | 
 | 531 | { | 
 | 532 |         /* | 
 | 533 | 	 * Raw sockets may have direct kernel refereneces. Kill them. | 
 | 534 | 	 */ | 
 | 535 | 	ip_ra_control(sk, 0, NULL); | 
 | 536 |  | 
 | 537 | 	sk_common_release(sk); | 
 | 538 | } | 
 | 539 |  | 
 | 540 | /* This gets rid of all the nasties in af_inet. -DaveM */ | 
 | 541 | static int raw_bind(struct sock *sk, struct sockaddr *uaddr, int addr_len) | 
 | 542 | { | 
 | 543 | 	struct inet_sock *inet = inet_sk(sk); | 
 | 544 | 	struct sockaddr_in *addr = (struct sockaddr_in *) uaddr; | 
 | 545 | 	int ret = -EINVAL; | 
 | 546 | 	int chk_addr_ret; | 
 | 547 |  | 
 | 548 | 	if (sk->sk_state != TCP_CLOSE || addr_len < sizeof(struct sockaddr_in)) | 
 | 549 | 		goto out; | 
 | 550 | 	chk_addr_ret = inet_addr_type(addr->sin_addr.s_addr); | 
 | 551 | 	ret = -EADDRNOTAVAIL; | 
 | 552 | 	if (addr->sin_addr.s_addr && chk_addr_ret != RTN_LOCAL && | 
 | 553 | 	    chk_addr_ret != RTN_MULTICAST && chk_addr_ret != RTN_BROADCAST) | 
 | 554 | 		goto out; | 
 | 555 | 	inet->rcv_saddr = inet->saddr = addr->sin_addr.s_addr; | 
 | 556 | 	if (chk_addr_ret == RTN_MULTICAST || chk_addr_ret == RTN_BROADCAST) | 
 | 557 | 		inet->saddr = 0;  /* Use device */ | 
 | 558 | 	sk_dst_reset(sk); | 
 | 559 | 	ret = 0; | 
 | 560 | out:	return ret; | 
 | 561 | } | 
 | 562 |  | 
 | 563 | /* | 
 | 564 |  *	This should be easy, if there is something there | 
 | 565 |  *	we return it, otherwise we block. | 
 | 566 |  */ | 
 | 567 |  | 
 | 568 | static int raw_recvmsg(struct kiocb *iocb, struct sock *sk, struct msghdr *msg, | 
 | 569 | 		       size_t len, int noblock, int flags, int *addr_len) | 
 | 570 | { | 
 | 571 | 	struct inet_sock *inet = inet_sk(sk); | 
 | 572 | 	size_t copied = 0; | 
 | 573 | 	int err = -EOPNOTSUPP; | 
 | 574 | 	struct sockaddr_in *sin = (struct sockaddr_in *)msg->msg_name; | 
 | 575 | 	struct sk_buff *skb; | 
 | 576 |  | 
 | 577 | 	if (flags & MSG_OOB) | 
 | 578 | 		goto out; | 
 | 579 |  | 
 | 580 | 	if (addr_len) | 
 | 581 | 		*addr_len = sizeof(*sin); | 
 | 582 |  | 
 | 583 | 	if (flags & MSG_ERRQUEUE) { | 
 | 584 | 		err = ip_recv_error(sk, msg, len); | 
 | 585 | 		goto out; | 
 | 586 | 	} | 
 | 587 |  | 
 | 588 | 	skb = skb_recv_datagram(sk, flags, noblock, &err); | 
 | 589 | 	if (!skb) | 
 | 590 | 		goto out; | 
 | 591 |  | 
 | 592 | 	copied = skb->len; | 
 | 593 | 	if (len < copied) { | 
 | 594 | 		msg->msg_flags |= MSG_TRUNC; | 
 | 595 | 		copied = len; | 
 | 596 | 	} | 
 | 597 |  | 
 | 598 | 	err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied); | 
 | 599 | 	if (err) | 
 | 600 | 		goto done; | 
 | 601 |  | 
 | 602 | 	sock_recv_timestamp(msg, sk, skb); | 
 | 603 |  | 
 | 604 | 	/* Copy the address. */ | 
 | 605 | 	if (sin) { | 
 | 606 | 		sin->sin_family = AF_INET; | 
 | 607 | 		sin->sin_addr.s_addr = skb->nh.iph->saddr; | 
 | 608 | 		memset(&sin->sin_zero, 0, sizeof(sin->sin_zero)); | 
 | 609 | 	} | 
 | 610 | 	if (inet->cmsg_flags) | 
 | 611 | 		ip_cmsg_recv(msg, skb); | 
 | 612 | 	if (flags & MSG_TRUNC) | 
 | 613 | 		copied = skb->len; | 
 | 614 | done: | 
 | 615 | 	skb_free_datagram(sk, skb); | 
| Jesper Juhl | 5418c69 | 2005-06-18 22:59:45 -0700 | [diff] [blame] | 616 | out: | 
 | 617 | 	if (err) | 
 | 618 | 		return err; | 
 | 619 | 	return copied; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 620 | } | 
 | 621 |  | 
 | 622 | static int raw_init(struct sock *sk) | 
 | 623 | { | 
 | 624 | 	struct raw_sock *rp = raw_sk(sk); | 
 | 625 |  | 
 | 626 | 	if (inet_sk(sk)->num == IPPROTO_ICMP) | 
 | 627 | 		memset(&rp->filter, 0, sizeof(rp->filter)); | 
 | 628 | 	return 0; | 
 | 629 | } | 
 | 630 |  | 
 | 631 | static int raw_seticmpfilter(struct sock *sk, char __user *optval, int optlen) | 
 | 632 | { | 
 | 633 | 	if (optlen > sizeof(struct icmp_filter)) | 
 | 634 | 		optlen = sizeof(struct icmp_filter); | 
 | 635 | 	if (copy_from_user(&raw_sk(sk)->filter, optval, optlen)) | 
 | 636 | 		return -EFAULT; | 
 | 637 | 	return 0; | 
 | 638 | } | 
 | 639 |  | 
 | 640 | static int raw_geticmpfilter(struct sock *sk, char __user *optval, int __user *optlen) | 
 | 641 | { | 
 | 642 | 	int len, ret = -EFAULT; | 
 | 643 |  | 
 | 644 | 	if (get_user(len, optlen)) | 
 | 645 | 		goto out; | 
 | 646 | 	ret = -EINVAL; | 
 | 647 | 	if (len < 0) | 
 | 648 | 		goto out; | 
 | 649 | 	if (len > sizeof(struct icmp_filter)) | 
 | 650 | 		len = sizeof(struct icmp_filter); | 
 | 651 | 	ret = -EFAULT; | 
 | 652 | 	if (put_user(len, optlen) || | 
 | 653 | 	    copy_to_user(optval, &raw_sk(sk)->filter, len)) | 
 | 654 | 		goto out; | 
 | 655 | 	ret = 0; | 
 | 656 | out:	return ret; | 
 | 657 | } | 
 | 658 |  | 
 | 659 | static int raw_setsockopt(struct sock *sk, int level, int optname,  | 
 | 660 | 			  char __user *optval, int optlen) | 
 | 661 | { | 
 | 662 | 	if (level != SOL_RAW) | 
 | 663 | 		return ip_setsockopt(sk, level, optname, optval, optlen); | 
 | 664 |  | 
 | 665 | 	if (optname == ICMP_FILTER) { | 
 | 666 | 		if (inet_sk(sk)->num != IPPROTO_ICMP) | 
 | 667 | 			return -EOPNOTSUPP; | 
 | 668 | 		else | 
 | 669 | 			return raw_seticmpfilter(sk, optval, optlen); | 
 | 670 | 	} | 
 | 671 | 	return -ENOPROTOOPT; | 
 | 672 | } | 
 | 673 |  | 
 | 674 | static int raw_getsockopt(struct sock *sk, int level, int optname,  | 
 | 675 | 			  char __user *optval, int __user *optlen) | 
 | 676 | { | 
 | 677 | 	if (level != SOL_RAW) | 
 | 678 | 		return ip_getsockopt(sk, level, optname, optval, optlen); | 
 | 679 |  | 
 | 680 | 	if (optname == ICMP_FILTER) { | 
 | 681 | 		if (inet_sk(sk)->num != IPPROTO_ICMP) | 
 | 682 | 			return -EOPNOTSUPP; | 
 | 683 | 		else | 
 | 684 | 			return raw_geticmpfilter(sk, optval, optlen); | 
 | 685 | 	} | 
 | 686 | 	return -ENOPROTOOPT; | 
 | 687 | } | 
 | 688 |  | 
 | 689 | static int raw_ioctl(struct sock *sk, int cmd, unsigned long arg) | 
 | 690 | { | 
 | 691 | 	switch (cmd) { | 
 | 692 | 		case SIOCOUTQ: { | 
 | 693 | 			int amount = atomic_read(&sk->sk_wmem_alloc); | 
 | 694 | 			return put_user(amount, (int __user *)arg); | 
 | 695 | 		} | 
 | 696 | 		case SIOCINQ: { | 
 | 697 | 			struct sk_buff *skb; | 
 | 698 | 			int amount = 0; | 
 | 699 |  | 
| Herbert Xu | e0f9f85 | 2005-06-18 22:56:18 -0700 | [diff] [blame] | 700 | 			spin_lock_bh(&sk->sk_receive_queue.lock); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 701 | 			skb = skb_peek(&sk->sk_receive_queue); | 
 | 702 | 			if (skb != NULL) | 
 | 703 | 				amount = skb->len; | 
| Herbert Xu | e0f9f85 | 2005-06-18 22:56:18 -0700 | [diff] [blame] | 704 | 			spin_unlock_bh(&sk->sk_receive_queue.lock); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 705 | 			return put_user(amount, (int __user *)arg); | 
 | 706 | 		} | 
 | 707 |  | 
 | 708 | 		default: | 
 | 709 | #ifdef CONFIG_IP_MROUTE | 
 | 710 | 			return ipmr_ioctl(sk, cmd, (void __user *)arg); | 
 | 711 | #else | 
 | 712 | 			return -ENOIOCTLCMD; | 
 | 713 | #endif | 
 | 714 | 	} | 
 | 715 | } | 
 | 716 |  | 
 | 717 | struct proto raw_prot = { | 
 | 718 | 	.name =		"RAW", | 
 | 719 | 	.owner =	THIS_MODULE, | 
 | 720 | 	.close =	raw_close, | 
 | 721 | 	.connect =	ip4_datagram_connect, | 
 | 722 | 	.disconnect =	udp_disconnect, | 
 | 723 | 	.ioctl =	raw_ioctl, | 
 | 724 | 	.init =		raw_init, | 
 | 725 | 	.setsockopt =	raw_setsockopt, | 
 | 726 | 	.getsockopt =	raw_getsockopt, | 
 | 727 | 	.sendmsg =	raw_sendmsg, | 
 | 728 | 	.recvmsg =	raw_recvmsg, | 
 | 729 | 	.bind =		raw_bind, | 
 | 730 | 	.backlog_rcv =	raw_rcv_skb, | 
 | 731 | 	.hash =		raw_v4_hash, | 
 | 732 | 	.unhash =	raw_v4_unhash, | 
 | 733 | 	.obj_size =	sizeof(struct raw_sock), | 
 | 734 | }; | 
 | 735 |  | 
 | 736 | #ifdef CONFIG_PROC_FS | 
 | 737 | struct raw_iter_state { | 
 | 738 | 	int bucket; | 
 | 739 | }; | 
 | 740 |  | 
 | 741 | #define raw_seq_private(seq) ((struct raw_iter_state *)(seq)->private) | 
 | 742 |  | 
 | 743 | static struct sock *raw_get_first(struct seq_file *seq) | 
 | 744 | { | 
 | 745 | 	struct sock *sk; | 
 | 746 | 	struct raw_iter_state* state = raw_seq_private(seq); | 
 | 747 |  | 
 | 748 | 	for (state->bucket = 0; state->bucket < RAWV4_HTABLE_SIZE; ++state->bucket) { | 
 | 749 | 		struct hlist_node *node; | 
 | 750 |  | 
 | 751 | 		sk_for_each(sk, node, &raw_v4_htable[state->bucket]) | 
 | 752 | 			if (sk->sk_family == PF_INET) | 
 | 753 | 				goto found; | 
 | 754 | 	} | 
 | 755 | 	sk = NULL; | 
 | 756 | found: | 
 | 757 | 	return sk; | 
 | 758 | } | 
 | 759 |  | 
 | 760 | static struct sock *raw_get_next(struct seq_file *seq, struct sock *sk) | 
 | 761 | { | 
 | 762 | 	struct raw_iter_state* state = raw_seq_private(seq); | 
 | 763 |  | 
 | 764 | 	do { | 
 | 765 | 		sk = sk_next(sk); | 
 | 766 | try_again: | 
 | 767 | 		; | 
 | 768 | 	} while (sk && sk->sk_family != PF_INET); | 
 | 769 |  | 
 | 770 | 	if (!sk && ++state->bucket < RAWV4_HTABLE_SIZE) { | 
 | 771 | 		sk = sk_head(&raw_v4_htable[state->bucket]); | 
 | 772 | 		goto try_again; | 
 | 773 | 	} | 
 | 774 | 	return sk; | 
 | 775 | } | 
 | 776 |  | 
 | 777 | static struct sock *raw_get_idx(struct seq_file *seq, loff_t pos) | 
 | 778 | { | 
 | 779 | 	struct sock *sk = raw_get_first(seq); | 
 | 780 |  | 
 | 781 | 	if (sk) | 
 | 782 | 		while (pos && (sk = raw_get_next(seq, sk)) != NULL) | 
 | 783 | 			--pos; | 
 | 784 | 	return pos ? NULL : sk; | 
 | 785 | } | 
 | 786 |  | 
 | 787 | static void *raw_seq_start(struct seq_file *seq, loff_t *pos) | 
 | 788 | { | 
 | 789 | 	read_lock(&raw_v4_lock); | 
 | 790 | 	return *pos ? raw_get_idx(seq, *pos - 1) : SEQ_START_TOKEN; | 
 | 791 | } | 
 | 792 |  | 
 | 793 | static void *raw_seq_next(struct seq_file *seq, void *v, loff_t *pos) | 
 | 794 | { | 
 | 795 | 	struct sock *sk; | 
 | 796 |  | 
 | 797 | 	if (v == SEQ_START_TOKEN) | 
 | 798 | 		sk = raw_get_first(seq); | 
 | 799 | 	else | 
 | 800 | 		sk = raw_get_next(seq, v); | 
 | 801 | 	++*pos; | 
 | 802 | 	return sk; | 
 | 803 | } | 
 | 804 |  | 
 | 805 | static void raw_seq_stop(struct seq_file *seq, void *v) | 
 | 806 | { | 
 | 807 | 	read_unlock(&raw_v4_lock); | 
 | 808 | } | 
 | 809 |  | 
 | 810 | static __inline__ char *get_raw_sock(struct sock *sp, char *tmpbuf, int i) | 
 | 811 | { | 
 | 812 | 	struct inet_sock *inet = inet_sk(sp); | 
 | 813 | 	unsigned int dest = inet->daddr, | 
 | 814 | 		     src = inet->rcv_saddr; | 
 | 815 | 	__u16 destp = 0, | 
 | 816 | 	      srcp  = inet->num; | 
 | 817 |  | 
 | 818 | 	sprintf(tmpbuf, "%4d: %08X:%04X %08X:%04X" | 
 | 819 | 		" %02X %08X:%08X %02X:%08lX %08X %5d %8d %lu %d %p", | 
 | 820 | 		i, src, srcp, dest, destp, sp->sk_state,  | 
 | 821 | 		atomic_read(&sp->sk_wmem_alloc), | 
 | 822 | 		atomic_read(&sp->sk_rmem_alloc), | 
 | 823 | 		0, 0L, 0, sock_i_uid(sp), 0, sock_i_ino(sp), | 
 | 824 | 		atomic_read(&sp->sk_refcnt), sp); | 
 | 825 | 	return tmpbuf; | 
 | 826 | } | 
 | 827 |  | 
 | 828 | static int raw_seq_show(struct seq_file *seq, void *v) | 
 | 829 | { | 
 | 830 | 	char tmpbuf[129]; | 
 | 831 |  | 
 | 832 | 	if (v == SEQ_START_TOKEN) | 
 | 833 | 		seq_printf(seq, "%-127s\n", | 
 | 834 | 			       "  sl  local_address rem_address   st tx_queue " | 
 | 835 | 			       "rx_queue tr tm->when retrnsmt   uid  timeout " | 
 | 836 | 			       "inode"); | 
 | 837 | 	else { | 
 | 838 | 		struct raw_iter_state *state = raw_seq_private(seq); | 
 | 839 |  | 
 | 840 | 		seq_printf(seq, "%-127s\n", | 
 | 841 | 			   get_raw_sock(v, tmpbuf, state->bucket)); | 
 | 842 | 	} | 
 | 843 | 	return 0; | 
 | 844 | } | 
 | 845 |  | 
 | 846 | static struct seq_operations raw_seq_ops = { | 
 | 847 | 	.start = raw_seq_start, | 
 | 848 | 	.next  = raw_seq_next, | 
 | 849 | 	.stop  = raw_seq_stop, | 
 | 850 | 	.show  = raw_seq_show, | 
 | 851 | }; | 
 | 852 |  | 
 | 853 | static int raw_seq_open(struct inode *inode, struct file *file) | 
 | 854 | { | 
 | 855 | 	struct seq_file *seq; | 
 | 856 | 	int rc = -ENOMEM; | 
 | 857 | 	struct raw_iter_state *s = kmalloc(sizeof(*s), GFP_KERNEL); | 
 | 858 |  | 
 | 859 | 	if (!s) | 
 | 860 | 		goto out; | 
 | 861 | 	rc = seq_open(file, &raw_seq_ops); | 
 | 862 | 	if (rc) | 
 | 863 | 		goto out_kfree; | 
 | 864 |  | 
 | 865 | 	seq = file->private_data; | 
 | 866 | 	seq->private = s; | 
 | 867 | 	memset(s, 0, sizeof(*s)); | 
 | 868 | out: | 
 | 869 | 	return rc; | 
 | 870 | out_kfree: | 
 | 871 | 	kfree(s); | 
 | 872 | 	goto out; | 
 | 873 | } | 
 | 874 |  | 
 | 875 | static struct file_operations raw_seq_fops = { | 
 | 876 | 	.owner	 = THIS_MODULE, | 
 | 877 | 	.open	 = raw_seq_open, | 
 | 878 | 	.read	 = seq_read, | 
 | 879 | 	.llseek	 = seq_lseek, | 
 | 880 | 	.release = seq_release_private, | 
 | 881 | }; | 
 | 882 |  | 
 | 883 | int __init raw_proc_init(void) | 
 | 884 | { | 
 | 885 | 	if (!proc_net_fops_create("raw", S_IRUGO, &raw_seq_fops)) | 
 | 886 | 		return -ENOMEM; | 
 | 887 | 	return 0; | 
 | 888 | } | 
 | 889 |  | 
 | 890 | void __init raw_proc_exit(void) | 
 | 891 | { | 
 | 892 | 	proc_net_remove("raw"); | 
 | 893 | } | 
 | 894 | #endif /* CONFIG_PROC_FS */ |