1 // SPDX-License-Identifier: GPL-2.0-only
2 /* module that allows mangling of the arp payload */
3 #include <linux/module.h>
4 #include <linux/netfilter.h>
5 #include <linux/netfilter_arp/arpt_mangle.h>
6 #include <net/sock.h>
7
8 MODULE_LICENSE("GPL");
9 MODULE_AUTHOR("Bart De Schuymer <bdschuym@pandora.be>");
10 MODULE_DESCRIPTION("arptables arp payload mangle target");
11
12 static unsigned int
target(struct sk_buff * skb,const struct xt_action_param * par)13 target(struct sk_buff *skb, const struct xt_action_param *par)
14 {
15 const struct arpt_mangle *mangle = par->targinfo;
16 const struct arphdr *arp;
17 unsigned char *arpptr;
18 int pln, hln;
19
20 if (skb_ensure_writable(skb, skb->len))
21 return NF_DROP;
22
23 arp = arp_hdr(skb);
24 arpptr = skb_network_header(skb) + sizeof(*arp);
25 pln = arp->ar_pln;
26 hln = arp->ar_hln;
27 /* We assume that pln and hln were checked in the match */
28 if (mangle->flags & ARPT_MANGLE_SDEV) {
29 if (ARPT_DEV_ADDR_LEN_MAX < hln ||
30 (arpptr + hln > skb_tail_pointer(skb)))
31 return NF_DROP;
32 memcpy(arpptr, mangle->src_devaddr, hln);
33 }
34 arpptr += hln;
35 if (mangle->flags & ARPT_MANGLE_SIP) {
36 if (ARPT_MANGLE_ADDR_LEN_MAX < pln ||
37 (arpptr + pln > skb_tail_pointer(skb)))
38 return NF_DROP;
39 memcpy(arpptr, &mangle->u_s.src_ip, pln);
40 }
41 arpptr += pln;
42 if (mangle->flags & ARPT_MANGLE_TDEV) {
43 if (unlikely(IS_ENABLED(CONFIG_FIREWIRE_NET) &&
44 skb->dev->type == ARPHRD_IEEE1394))
45 return NF_DROP;
46
47 if (ARPT_DEV_ADDR_LEN_MAX < hln ||
48 (arpptr + hln > skb_tail_pointer(skb)))
49 return NF_DROP;
50 memcpy(arpptr, mangle->tgt_devaddr, hln);
51 }
52 arpptr += hln;
53 if (mangle->flags & ARPT_MANGLE_TIP) {
54 if (unlikely(IS_ENABLED(CONFIG_FIREWIRE_NET) &&
55 skb->dev->type == ARPHRD_IEEE1394))
56 return NF_DROP;
57
58 if (ARPT_MANGLE_ADDR_LEN_MAX < pln ||
59 (arpptr + pln > skb_tail_pointer(skb)))
60 return NF_DROP;
61 memcpy(arpptr, &mangle->u_t.tgt_ip, pln);
62 }
63 return mangle->target;
64 }
65
checkentry(const struct xt_tgchk_param * par)66 static int checkentry(const struct xt_tgchk_param *par)
67 {
68 const struct arpt_mangle *mangle = par->targinfo;
69
70 if (mangle->flags & ~ARPT_MANGLE_MASK ||
71 !(mangle->flags & ARPT_MANGLE_MASK))
72 return -EINVAL;
73
74 if (mangle->target != NF_DROP && mangle->target != NF_ACCEPT &&
75 mangle->target != XT_CONTINUE)
76 return -EINVAL;
77 return 0;
78 }
79
80 static struct xt_target arpt_mangle_reg __read_mostly = {
81 .name = "mangle",
82 .family = NFPROTO_ARP,
83 .target = target,
84 .targetsize = sizeof(struct arpt_mangle),
85 .checkentry = checkentry,
86 .me = THIS_MODULE,
87 };
88
arpt_mangle_init(void)89 static int __init arpt_mangle_init(void)
90 {
91 return xt_register_target(&arpt_mangle_reg);
92 }
93
arpt_mangle_fini(void)94 static void __exit arpt_mangle_fini(void)
95 {
96 xt_unregister_target(&arpt_mangle_reg);
97 }
98
99 module_init(arpt_mangle_init);
100 module_exit(arpt_mangle_fini);
101