1c319b4d7SVasiliy Kulikov /* 2c319b4d7SVasiliy Kulikov * INET An implementation of the TCP/IP protocol suite for the LINUX 3c319b4d7SVasiliy Kulikov * operating system. INET is implemented using the BSD Socket 4c319b4d7SVasiliy Kulikov * interface as the means of communication with the user level. 5c319b4d7SVasiliy Kulikov * 6c319b4d7SVasiliy Kulikov * "Ping" sockets 7c319b4d7SVasiliy Kulikov * 8c319b4d7SVasiliy Kulikov * This program is free software; you can redistribute it and/or 9c319b4d7SVasiliy Kulikov * modify it under the terms of the GNU General Public License 10c319b4d7SVasiliy Kulikov * as published by the Free Software Foundation; either version 11c319b4d7SVasiliy Kulikov * 2 of the License, or (at your option) any later version. 12c319b4d7SVasiliy Kulikov * 13c319b4d7SVasiliy Kulikov * Based on ipv4/udp.c code. 14c319b4d7SVasiliy Kulikov * 15c319b4d7SVasiliy Kulikov * Authors: Vasiliy Kulikov / Openwall (for Linux 2.6), 16c319b4d7SVasiliy Kulikov * Pavel Kankovsky (for Linux 2.4.32) 17c319b4d7SVasiliy Kulikov * 18c319b4d7SVasiliy Kulikov * Pavel gave all rights to bugs to Vasiliy, 19c319b4d7SVasiliy Kulikov * none of the bugs are Pavel's now. 20c319b4d7SVasiliy Kulikov * 21c319b4d7SVasiliy Kulikov */ 22c319b4d7SVasiliy Kulikov 23c319b4d7SVasiliy Kulikov #include <linux/uaccess.h> 24c319b4d7SVasiliy Kulikov #include <linux/types.h> 25c319b4d7SVasiliy Kulikov #include <linux/fcntl.h> 26c319b4d7SVasiliy Kulikov #include <linux/socket.h> 27c319b4d7SVasiliy Kulikov #include <linux/sockios.h> 28c319b4d7SVasiliy Kulikov #include <linux/in.h> 29c319b4d7SVasiliy Kulikov #include <linux/errno.h> 30c319b4d7SVasiliy Kulikov #include <linux/timer.h> 31c319b4d7SVasiliy Kulikov #include <linux/mm.h> 32c319b4d7SVasiliy Kulikov #include <linux/inet.h> 33c319b4d7SVasiliy Kulikov #include <linux/netdevice.h> 34c319b4d7SVasiliy Kulikov #include <net/snmp.h> 35c319b4d7SVasiliy Kulikov #include <net/ip.h> 36c319b4d7SVasiliy Kulikov #include <net/icmp.h> 37c319b4d7SVasiliy Kulikov #include <net/protocol.h> 38c319b4d7SVasiliy Kulikov #include <linux/skbuff.h> 39c319b4d7SVasiliy Kulikov #include <linux/proc_fs.h> 40bc3b2d7fSPaul Gortmaker #include <linux/export.h> 41c319b4d7SVasiliy Kulikov #include <net/sock.h> 42c319b4d7SVasiliy Kulikov #include <net/ping.h> 43c319b4d7SVasiliy Kulikov #include <net/udp.h> 44c319b4d7SVasiliy Kulikov #include <net/route.h> 45c319b4d7SVasiliy Kulikov #include <net/inet_common.h> 46c319b4d7SVasiliy Kulikov #include <net/checksum.h> 47c319b4d7SVasiliy Kulikov 486d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 496d0bfe22SLorenzo Colitti #include <linux/in6.h> 506d0bfe22SLorenzo Colitti #include <linux/icmpv6.h> 516d0bfe22SLorenzo Colitti #include <net/addrconf.h> 526d0bfe22SLorenzo Colitti #include <net/ipv6.h> 536d0bfe22SLorenzo Colitti #include <net/transp_v6.h> 546d0bfe22SLorenzo Colitti #endif 55c319b4d7SVasiliy Kulikov 56ea074b34SStephen Hemminger struct ping_table { 57ea074b34SStephen Hemminger struct hlist_nulls_head hash[PING_HTABLE_SIZE]; 58ea074b34SStephen Hemminger rwlock_t lock; 59ea074b34SStephen Hemminger }; 606d0bfe22SLorenzo Colitti 61ea074b34SStephen Hemminger static struct ping_table ping_table; 626d0bfe22SLorenzo Colitti struct pingv6_ops pingv6_ops; 636d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(pingv6_ops); 64c319b4d7SVasiliy Kulikov 651b1cb1f7SEric Dumazet static u16 ping_port_rover; 66c319b4d7SVasiliy Kulikov 6795c96174SEric Dumazet static inline int ping_hashfn(struct net *net, unsigned int num, unsigned int mask) 68c319b4d7SVasiliy Kulikov { 69c319b4d7SVasiliy Kulikov int res = (num + net_hash_mix(net)) & mask; 7095c96174SEric Dumazet 71c319b4d7SVasiliy Kulikov pr_debug("hash(%d) = %d\n", num, res); 72c319b4d7SVasiliy Kulikov return res; 73c319b4d7SVasiliy Kulikov } 746d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_hash); 75c319b4d7SVasiliy Kulikov 76c319b4d7SVasiliy Kulikov static inline struct hlist_nulls_head *ping_hashslot(struct ping_table *table, 7795c96174SEric Dumazet struct net *net, unsigned int num) 78c319b4d7SVasiliy Kulikov { 79c319b4d7SVasiliy Kulikov return &table->hash[ping_hashfn(net, num, PING_HTABLE_MASK)]; 80c319b4d7SVasiliy Kulikov } 81c319b4d7SVasiliy Kulikov 826d0bfe22SLorenzo Colitti int ping_get_port(struct sock *sk, unsigned short ident) 83c319b4d7SVasiliy Kulikov { 84c319b4d7SVasiliy Kulikov struct hlist_nulls_node *node; 85c319b4d7SVasiliy Kulikov struct hlist_nulls_head *hlist; 86c319b4d7SVasiliy Kulikov struct inet_sock *isk, *isk2; 87c319b4d7SVasiliy Kulikov struct sock *sk2 = NULL; 88c319b4d7SVasiliy Kulikov 89c319b4d7SVasiliy Kulikov isk = inet_sk(sk); 90c319b4d7SVasiliy Kulikov write_lock_bh(&ping_table.lock); 91c319b4d7SVasiliy Kulikov if (ident == 0) { 92c319b4d7SVasiliy Kulikov u32 i; 93c319b4d7SVasiliy Kulikov u16 result = ping_port_rover + 1; 94c319b4d7SVasiliy Kulikov 95c319b4d7SVasiliy Kulikov for (i = 0; i < (1L << 16); i++, result++) { 96c319b4d7SVasiliy Kulikov if (!result) 97c319b4d7SVasiliy Kulikov result++; /* avoid zero */ 98c319b4d7SVasiliy Kulikov hlist = ping_hashslot(&ping_table, sock_net(sk), 99c319b4d7SVasiliy Kulikov result); 100c319b4d7SVasiliy Kulikov ping_portaddr_for_each_entry(sk2, node, hlist) { 101c319b4d7SVasiliy Kulikov isk2 = inet_sk(sk2); 102c319b4d7SVasiliy Kulikov 103c319b4d7SVasiliy Kulikov if (isk2->inet_num == result) 104c319b4d7SVasiliy Kulikov goto next_port; 105c319b4d7SVasiliy Kulikov } 106c319b4d7SVasiliy Kulikov 107c319b4d7SVasiliy Kulikov /* found */ 108c319b4d7SVasiliy Kulikov ping_port_rover = ident = result; 109c319b4d7SVasiliy Kulikov break; 110c319b4d7SVasiliy Kulikov next_port: 111c319b4d7SVasiliy Kulikov ; 112c319b4d7SVasiliy Kulikov } 113c319b4d7SVasiliy Kulikov if (i >= (1L << 16)) 114c319b4d7SVasiliy Kulikov goto fail; 115c319b4d7SVasiliy Kulikov } else { 116c319b4d7SVasiliy Kulikov hlist = ping_hashslot(&ping_table, sock_net(sk), ident); 117c319b4d7SVasiliy Kulikov ping_portaddr_for_each_entry(sk2, node, hlist) { 118c319b4d7SVasiliy Kulikov isk2 = inet_sk(sk2); 119c319b4d7SVasiliy Kulikov 1206d0bfe22SLorenzo Colitti /* BUG? Why is this reuse and not reuseaddr? ping.c 1216d0bfe22SLorenzo Colitti * doesn't turn off SO_REUSEADDR, and it doesn't expect 1226d0bfe22SLorenzo Colitti * that other ping processes can steal its packets. 1236d0bfe22SLorenzo Colitti */ 124c319b4d7SVasiliy Kulikov if ((isk2->inet_num == ident) && 125c319b4d7SVasiliy Kulikov (sk2 != sk) && 126c319b4d7SVasiliy Kulikov (!sk2->sk_reuse || !sk->sk_reuse)) 127c319b4d7SVasiliy Kulikov goto fail; 128c319b4d7SVasiliy Kulikov } 129c319b4d7SVasiliy Kulikov } 130c319b4d7SVasiliy Kulikov 131c319b4d7SVasiliy Kulikov pr_debug("found port/ident = %d\n", ident); 132c319b4d7SVasiliy Kulikov isk->inet_num = ident; 133c319b4d7SVasiliy Kulikov if (sk_unhashed(sk)) { 134c319b4d7SVasiliy Kulikov pr_debug("was not hashed\n"); 135c319b4d7SVasiliy Kulikov sock_hold(sk); 136c319b4d7SVasiliy Kulikov hlist_nulls_add_head(&sk->sk_nulls_node, hlist); 137c319b4d7SVasiliy Kulikov sock_prot_inuse_add(sock_net(sk), sk->sk_prot, 1); 138c319b4d7SVasiliy Kulikov } 139c319b4d7SVasiliy Kulikov write_unlock_bh(&ping_table.lock); 140c319b4d7SVasiliy Kulikov return 0; 141c319b4d7SVasiliy Kulikov 142c319b4d7SVasiliy Kulikov fail: 143c319b4d7SVasiliy Kulikov write_unlock_bh(&ping_table.lock); 144c319b4d7SVasiliy Kulikov return 1; 145c319b4d7SVasiliy Kulikov } 1466d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_get_port); 147c319b4d7SVasiliy Kulikov 1486d0bfe22SLorenzo Colitti void ping_hash(struct sock *sk) 149c319b4d7SVasiliy Kulikov { 1506d0bfe22SLorenzo Colitti pr_debug("ping_hash(sk->port=%u)\n", inet_sk(sk)->inet_num); 151c319b4d7SVasiliy Kulikov BUG(); /* "Please do not press this button again." */ 152c319b4d7SVasiliy Kulikov } 153c319b4d7SVasiliy Kulikov 1546d0bfe22SLorenzo Colitti void ping_unhash(struct sock *sk) 155c319b4d7SVasiliy Kulikov { 156c319b4d7SVasiliy Kulikov struct inet_sock *isk = inet_sk(sk); 1576d0bfe22SLorenzo Colitti pr_debug("ping_unhash(isk=%p,isk->num=%u)\n", isk, isk->inet_num); 158c319b4d7SVasiliy Kulikov if (sk_hashed(sk)) { 159c319b4d7SVasiliy Kulikov write_lock_bh(&ping_table.lock); 160c319b4d7SVasiliy Kulikov hlist_nulls_del(&sk->sk_nulls_node); 161c319b4d7SVasiliy Kulikov sock_put(sk); 162747465efSEric Dumazet isk->inet_num = 0; 163747465efSEric Dumazet isk->inet_sport = 0; 164c319b4d7SVasiliy Kulikov sock_prot_inuse_add(sock_net(sk), sk->sk_prot, -1); 165c319b4d7SVasiliy Kulikov write_unlock_bh(&ping_table.lock); 166c319b4d7SVasiliy Kulikov } 167c319b4d7SVasiliy Kulikov } 1686d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_unhash); 169c319b4d7SVasiliy Kulikov 1706d0bfe22SLorenzo Colitti static struct sock *ping_lookup(struct net *net, struct sk_buff *skb, u16 ident) 171c319b4d7SVasiliy Kulikov { 172c319b4d7SVasiliy Kulikov struct hlist_nulls_head *hslot = ping_hashslot(&ping_table, net, ident); 173c319b4d7SVasiliy Kulikov struct sock *sk = NULL; 174c319b4d7SVasiliy Kulikov struct inet_sock *isk; 175c319b4d7SVasiliy Kulikov struct hlist_nulls_node *hnode; 1766d0bfe22SLorenzo Colitti int dif = skb->dev->ifindex; 177c319b4d7SVasiliy Kulikov 1786d0bfe22SLorenzo Colitti if (skb->protocol == htons(ETH_P_IP)) { 179747465efSEric Dumazet pr_debug("try to find: num = %d, daddr = %pI4, dif = %d\n", 1806d0bfe22SLorenzo Colitti (int)ident, &ip_hdr(skb)->daddr, dif); 1816d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 1826d0bfe22SLorenzo Colitti } else if (skb->protocol == htons(ETH_P_IPV6)) { 1836d0bfe22SLorenzo Colitti pr_debug("try to find: num = %d, daddr = %pI6c, dif = %d\n", 1846d0bfe22SLorenzo Colitti (int)ident, &ipv6_hdr(skb)->daddr, dif); 1856d0bfe22SLorenzo Colitti #endif 1866d0bfe22SLorenzo Colitti } 1876d0bfe22SLorenzo Colitti 188c319b4d7SVasiliy Kulikov read_lock_bh(&ping_table.lock); 189c319b4d7SVasiliy Kulikov 190c319b4d7SVasiliy Kulikov ping_portaddr_for_each_entry(sk, hnode, hslot) { 191c319b4d7SVasiliy Kulikov isk = inet_sk(sk); 192c319b4d7SVasiliy Kulikov 1936d0bfe22SLorenzo Colitti pr_debug("iterate\n"); 1946d0bfe22SLorenzo Colitti if (isk->inet_num != ident) 1956d0bfe22SLorenzo Colitti continue; 1966d0bfe22SLorenzo Colitti 1976d0bfe22SLorenzo Colitti if (skb->protocol == htons(ETH_P_IP) && 1986d0bfe22SLorenzo Colitti sk->sk_family == AF_INET) { 199747465efSEric Dumazet pr_debug("found: %p: num=%d, daddr=%pI4, dif=%d\n", sk, 200747465efSEric Dumazet (int) isk->inet_num, &isk->inet_rcv_saddr, 201c319b4d7SVasiliy Kulikov sk->sk_bound_dev_if); 202c319b4d7SVasiliy Kulikov 2036d0bfe22SLorenzo Colitti if (isk->inet_rcv_saddr && 2046d0bfe22SLorenzo Colitti isk->inet_rcv_saddr != ip_hdr(skb)->daddr) 205c319b4d7SVasiliy Kulikov continue; 2066d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 2076d0bfe22SLorenzo Colitti } else if (skb->protocol == htons(ETH_P_IPV6) && 2086d0bfe22SLorenzo Colitti sk->sk_family == AF_INET6) { 2096d0bfe22SLorenzo Colitti 2106d0bfe22SLorenzo Colitti pr_debug("found: %p: num=%d, daddr=%pI6c, dif=%d\n", sk, 2116d0bfe22SLorenzo Colitti (int) isk->inet_num, 212efe4208fSEric Dumazet &sk->sk_v6_rcv_saddr, 2136d0bfe22SLorenzo Colitti sk->sk_bound_dev_if); 2146d0bfe22SLorenzo Colitti 215efe4208fSEric Dumazet if (!ipv6_addr_any(&sk->sk_v6_rcv_saddr) && 216efe4208fSEric Dumazet !ipv6_addr_equal(&sk->sk_v6_rcv_saddr, 2176d0bfe22SLorenzo Colitti &ipv6_hdr(skb)->daddr)) 218c319b4d7SVasiliy Kulikov continue; 2196d0bfe22SLorenzo Colitti #endif 22091a0b603SJane Zhou } else { 22191a0b603SJane Zhou continue; 2226d0bfe22SLorenzo Colitti } 2236d0bfe22SLorenzo Colitti 224c319b4d7SVasiliy Kulikov if (sk->sk_bound_dev_if && sk->sk_bound_dev_if != dif) 225c319b4d7SVasiliy Kulikov continue; 226c319b4d7SVasiliy Kulikov 227c319b4d7SVasiliy Kulikov sock_hold(sk); 228c319b4d7SVasiliy Kulikov goto exit; 229c319b4d7SVasiliy Kulikov } 230c319b4d7SVasiliy Kulikov 231c319b4d7SVasiliy Kulikov sk = NULL; 232c319b4d7SVasiliy Kulikov exit: 233c319b4d7SVasiliy Kulikov read_unlock_bh(&ping_table.lock); 234c319b4d7SVasiliy Kulikov 235c319b4d7SVasiliy Kulikov return sk; 236c319b4d7SVasiliy Kulikov } 237c319b4d7SVasiliy Kulikov 2387064d16eSEric W. Biederman static void inet_get_ping_group_range_net(struct net *net, kgid_t *low, 2397064d16eSEric W. Biederman kgid_t *high) 240f56e03e8SVasiliy Kulikov { 241ba6b918aSCong Wang kgid_t *data = net->ipv4.ping_group_range.range; 24295c96174SEric Dumazet unsigned int seq; 24395c96174SEric Dumazet 244f56e03e8SVasiliy Kulikov do { 245ba6b918aSCong Wang seq = read_seqbegin(&net->ipv4.ping_group_range.lock); 246f56e03e8SVasiliy Kulikov 247f56e03e8SVasiliy Kulikov *low = data[0]; 248f56e03e8SVasiliy Kulikov *high = data[1]; 249ba6b918aSCong Wang } while (read_seqretry(&net->ipv4.ping_group_range.lock, seq)); 250f56e03e8SVasiliy Kulikov } 251f56e03e8SVasiliy Kulikov 252f56e03e8SVasiliy Kulikov 2536d0bfe22SLorenzo Colitti int ping_init_sock(struct sock *sk) 254c319b4d7SVasiliy Kulikov { 255c319b4d7SVasiliy Kulikov struct net *net = sock_net(sk); 2567064d16eSEric W. Biederman kgid_t group = current_egid(); 257b04c4619SWang, Xiaoming struct group_info *group_info; 258b04c4619SWang, Xiaoming int i, j, count; 259ae2975bcSEric W. Biederman kgid_t low, high; 260b04c4619SWang, Xiaoming int ret = 0; 261c319b4d7SVasiliy Kulikov 2627064d16eSEric W. Biederman inet_get_ping_group_range_net(net, &low, &high); 2637064d16eSEric W. Biederman if (gid_lte(low, group) && gid_lte(group, high)) 264c319b4d7SVasiliy Kulikov return 0; 265c319b4d7SVasiliy Kulikov 266b04c4619SWang, Xiaoming group_info = get_current_groups(); 267b04c4619SWang, Xiaoming count = group_info->ngroups; 268c319b4d7SVasiliy Kulikov for (i = 0; i < group_info->nblocks; i++) { 269c319b4d7SVasiliy Kulikov int cp_count = min_t(int, NGROUPS_PER_BLOCK, count); 270c319b4d7SVasiliy Kulikov for (j = 0; j < cp_count; j++) { 271ae2975bcSEric W. Biederman kgid_t gid = group_info->blocks[i][j]; 272ae2975bcSEric W. Biederman if (gid_lte(low, gid) && gid_lte(gid, high)) 273b04c4619SWang, Xiaoming goto out_release_group; 274c319b4d7SVasiliy Kulikov } 275c319b4d7SVasiliy Kulikov 276c319b4d7SVasiliy Kulikov count -= cp_count; 277c319b4d7SVasiliy Kulikov } 278c319b4d7SVasiliy Kulikov 279b04c4619SWang, Xiaoming ret = -EACCES; 280b04c4619SWang, Xiaoming 281b04c4619SWang, Xiaoming out_release_group: 282b04c4619SWang, Xiaoming put_group_info(group_info); 283b04c4619SWang, Xiaoming return ret; 284c319b4d7SVasiliy Kulikov } 2856d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_init_sock); 286c319b4d7SVasiliy Kulikov 2876d0bfe22SLorenzo Colitti void ping_close(struct sock *sk, long timeout) 288c319b4d7SVasiliy Kulikov { 289c319b4d7SVasiliy Kulikov pr_debug("ping_close(sk=%p,sk->num=%u)\n", 290c319b4d7SVasiliy Kulikov inet_sk(sk), inet_sk(sk)->inet_num); 291c319b4d7SVasiliy Kulikov pr_debug("isk->refcnt = %d\n", sk->sk_refcnt.counter); 292c319b4d7SVasiliy Kulikov 293c319b4d7SVasiliy Kulikov sk_common_release(sk); 294c319b4d7SVasiliy Kulikov } 2956d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_close); 296c319b4d7SVasiliy Kulikov 2976d0bfe22SLorenzo Colitti /* Checks the bind address and possibly modifies sk->sk_bound_dev_if. */ 298a06a2d37SWu Fengguang static int ping_check_bind_addr(struct sock *sk, struct inet_sock *isk, 2996d0bfe22SLorenzo Colitti struct sockaddr *uaddr, int addr_len) { 3006d0bfe22SLorenzo Colitti struct net *net = sock_net(sk); 3016d0bfe22SLorenzo Colitti if (sk->sk_family == AF_INET) { 302c319b4d7SVasiliy Kulikov struct sockaddr_in *addr = (struct sockaddr_in *) uaddr; 303c319b4d7SVasiliy Kulikov int chk_addr_ret; 304c319b4d7SVasiliy Kulikov 3056d0bfe22SLorenzo Colitti if (addr_len < sizeof(*addr)) 306c319b4d7SVasiliy Kulikov return -EINVAL; 307c319b4d7SVasiliy Kulikov 3086d0bfe22SLorenzo Colitti pr_debug("ping_check_bind_addr(sk=%p,addr=%pI4,port=%d)\n", 3096d0bfe22SLorenzo Colitti sk, &addr->sin_addr.s_addr, ntohs(addr->sin_port)); 310c319b4d7SVasiliy Kulikov 3116d0bfe22SLorenzo Colitti chk_addr_ret = inet_addr_type(net, addr->sin_addr.s_addr); 3126d0bfe22SLorenzo Colitti 313747465efSEric Dumazet if (addr->sin_addr.s_addr == htonl(INADDR_ANY)) 314c319b4d7SVasiliy Kulikov chk_addr_ret = RTN_LOCAL; 315c319b4d7SVasiliy Kulikov 31649a60158SVincent Bernat if ((net->ipv4.sysctl_ip_nonlocal_bind == 0 && 317c319b4d7SVasiliy Kulikov isk->freebind == 0 && isk->transparent == 0 && 318c319b4d7SVasiliy Kulikov chk_addr_ret != RTN_LOCAL) || 319c319b4d7SVasiliy Kulikov chk_addr_ret == RTN_MULTICAST || 320c319b4d7SVasiliy Kulikov chk_addr_ret == RTN_BROADCAST) 321c319b4d7SVasiliy Kulikov return -EADDRNOTAVAIL; 322c319b4d7SVasiliy Kulikov 3236d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 3246d0bfe22SLorenzo Colitti } else if (sk->sk_family == AF_INET6) { 3256d0bfe22SLorenzo Colitti struct sockaddr_in6 *addr = (struct sockaddr_in6 *) uaddr; 3266d0bfe22SLorenzo Colitti int addr_type, scoped, has_addr; 3276d0bfe22SLorenzo Colitti struct net_device *dev = NULL; 3286d0bfe22SLorenzo Colitti 3296d0bfe22SLorenzo Colitti if (addr_len < sizeof(*addr)) 3306d0bfe22SLorenzo Colitti return -EINVAL; 3316d0bfe22SLorenzo Colitti 33282b276cdSHannes Frederic Sowa if (addr->sin6_family != AF_INET6) 33382b276cdSHannes Frederic Sowa return -EINVAL; 33482b276cdSHannes Frederic Sowa 3356d0bfe22SLorenzo Colitti pr_debug("ping_check_bind_addr(sk=%p,addr=%pI6c,port=%d)\n", 3366d0bfe22SLorenzo Colitti sk, addr->sin6_addr.s6_addr, ntohs(addr->sin6_port)); 3376d0bfe22SLorenzo Colitti 3386d0bfe22SLorenzo Colitti addr_type = ipv6_addr_type(&addr->sin6_addr); 3396d0bfe22SLorenzo Colitti scoped = __ipv6_addr_needs_scope_id(addr_type); 3406d0bfe22SLorenzo Colitti if ((addr_type != IPV6_ADDR_ANY && 3416d0bfe22SLorenzo Colitti !(addr_type & IPV6_ADDR_UNICAST)) || 3426d0bfe22SLorenzo Colitti (scoped && !addr->sin6_scope_id)) 3436d0bfe22SLorenzo Colitti return -EINVAL; 3446d0bfe22SLorenzo Colitti 3456d0bfe22SLorenzo Colitti rcu_read_lock(); 3466d0bfe22SLorenzo Colitti if (addr->sin6_scope_id) { 3476d0bfe22SLorenzo Colitti dev = dev_get_by_index_rcu(net, addr->sin6_scope_id); 3486d0bfe22SLorenzo Colitti if (!dev) { 3496d0bfe22SLorenzo Colitti rcu_read_unlock(); 3506d0bfe22SLorenzo Colitti return -ENODEV; 3516d0bfe22SLorenzo Colitti } 3526d0bfe22SLorenzo Colitti } 3536d0bfe22SLorenzo Colitti has_addr = pingv6_ops.ipv6_chk_addr(net, &addr->sin6_addr, dev, 3546d0bfe22SLorenzo Colitti scoped); 3556d0bfe22SLorenzo Colitti rcu_read_unlock(); 3566d0bfe22SLorenzo Colitti 3576d0bfe22SLorenzo Colitti if (!(isk->freebind || isk->transparent || has_addr || 3586d0bfe22SLorenzo Colitti addr_type == IPV6_ADDR_ANY)) 3596d0bfe22SLorenzo Colitti return -EADDRNOTAVAIL; 3606d0bfe22SLorenzo Colitti 3616d0bfe22SLorenzo Colitti if (scoped) 3626d0bfe22SLorenzo Colitti sk->sk_bound_dev_if = addr->sin6_scope_id; 3636d0bfe22SLorenzo Colitti #endif 3646d0bfe22SLorenzo Colitti } else { 3656d0bfe22SLorenzo Colitti return -EAFNOSUPPORT; 3666d0bfe22SLorenzo Colitti } 3676d0bfe22SLorenzo Colitti return 0; 3686d0bfe22SLorenzo Colitti } 3696d0bfe22SLorenzo Colitti 370a06a2d37SWu Fengguang static void ping_set_saddr(struct sock *sk, struct sockaddr *saddr) 3716d0bfe22SLorenzo Colitti { 3726d0bfe22SLorenzo Colitti if (saddr->sa_family == AF_INET) { 3736d0bfe22SLorenzo Colitti struct inet_sock *isk = inet_sk(sk); 3746d0bfe22SLorenzo Colitti struct sockaddr_in *addr = (struct sockaddr_in *) saddr; 3756d0bfe22SLorenzo Colitti isk->inet_rcv_saddr = isk->inet_saddr = addr->sin_addr.s_addr; 3766d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 3776d0bfe22SLorenzo Colitti } else if (saddr->sa_family == AF_INET6) { 3786d0bfe22SLorenzo Colitti struct sockaddr_in6 *addr = (struct sockaddr_in6 *) saddr; 3796d0bfe22SLorenzo Colitti struct ipv6_pinfo *np = inet6_sk(sk); 380efe4208fSEric Dumazet sk->sk_v6_rcv_saddr = np->saddr = addr->sin6_addr; 3816d0bfe22SLorenzo Colitti #endif 3826d0bfe22SLorenzo Colitti } 3836d0bfe22SLorenzo Colitti } 3846d0bfe22SLorenzo Colitti 385a06a2d37SWu Fengguang static void ping_clear_saddr(struct sock *sk, int dif) 3866d0bfe22SLorenzo Colitti { 3876d0bfe22SLorenzo Colitti sk->sk_bound_dev_if = dif; 3886d0bfe22SLorenzo Colitti if (sk->sk_family == AF_INET) { 3896d0bfe22SLorenzo Colitti struct inet_sock *isk = inet_sk(sk); 3906d0bfe22SLorenzo Colitti isk->inet_rcv_saddr = isk->inet_saddr = 0; 3916d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 3926d0bfe22SLorenzo Colitti } else if (sk->sk_family == AF_INET6) { 3936d0bfe22SLorenzo Colitti struct ipv6_pinfo *np = inet6_sk(sk); 394efe4208fSEric Dumazet memset(&sk->sk_v6_rcv_saddr, 0, sizeof(sk->sk_v6_rcv_saddr)); 3956d0bfe22SLorenzo Colitti memset(&np->saddr, 0, sizeof(np->saddr)); 3966d0bfe22SLorenzo Colitti #endif 3976d0bfe22SLorenzo Colitti } 3986d0bfe22SLorenzo Colitti } 3996d0bfe22SLorenzo Colitti /* 4006d0bfe22SLorenzo Colitti * We need our own bind because there are no privileged id's == local ports. 4016d0bfe22SLorenzo Colitti * Moreover, we don't allow binding to multi- and broadcast addresses. 4026d0bfe22SLorenzo Colitti */ 4036d0bfe22SLorenzo Colitti 4046d0bfe22SLorenzo Colitti int ping_bind(struct sock *sk, struct sockaddr *uaddr, int addr_len) 4056d0bfe22SLorenzo Colitti { 4066d0bfe22SLorenzo Colitti struct inet_sock *isk = inet_sk(sk); 4076d0bfe22SLorenzo Colitti unsigned short snum; 4086d0bfe22SLorenzo Colitti int err; 4096d0bfe22SLorenzo Colitti int dif = sk->sk_bound_dev_if; 4106d0bfe22SLorenzo Colitti 4116d0bfe22SLorenzo Colitti err = ping_check_bind_addr(sk, isk, uaddr, addr_len); 4126d0bfe22SLorenzo Colitti if (err) 4136d0bfe22SLorenzo Colitti return err; 4146d0bfe22SLorenzo Colitti 415c319b4d7SVasiliy Kulikov lock_sock(sk); 416c319b4d7SVasiliy Kulikov 417c319b4d7SVasiliy Kulikov err = -EINVAL; 418c319b4d7SVasiliy Kulikov if (isk->inet_num != 0) 419c319b4d7SVasiliy Kulikov goto out; 420c319b4d7SVasiliy Kulikov 421c319b4d7SVasiliy Kulikov err = -EADDRINUSE; 4226d0bfe22SLorenzo Colitti ping_set_saddr(sk, uaddr); 4236d0bfe22SLorenzo Colitti snum = ntohs(((struct sockaddr_in *)uaddr)->sin_port); 4246d0bfe22SLorenzo Colitti if (ping_get_port(sk, snum) != 0) { 4256d0bfe22SLorenzo Colitti ping_clear_saddr(sk, dif); 426c319b4d7SVasiliy Kulikov goto out; 427c319b4d7SVasiliy Kulikov } 428c319b4d7SVasiliy Kulikov 4296d0bfe22SLorenzo Colitti pr_debug("after bind(): num = %d, dif = %d\n", 430c319b4d7SVasiliy Kulikov (int)isk->inet_num, 431c319b4d7SVasiliy Kulikov (int)sk->sk_bound_dev_if); 432c319b4d7SVasiliy Kulikov 433c319b4d7SVasiliy Kulikov err = 0; 434c2bb06dbSEric Dumazet if (sk->sk_family == AF_INET && isk->inet_rcv_saddr) 435c319b4d7SVasiliy Kulikov sk->sk_userlocks |= SOCK_BINDADDR_LOCK; 436c2bb06dbSEric Dumazet #if IS_ENABLED(CONFIG_IPV6) 437c2bb06dbSEric Dumazet if (sk->sk_family == AF_INET6 && !ipv6_addr_any(&sk->sk_v6_rcv_saddr)) 438c2bb06dbSEric Dumazet sk->sk_userlocks |= SOCK_BINDADDR_LOCK; 439c2bb06dbSEric Dumazet #endif 4406d0bfe22SLorenzo Colitti 441c319b4d7SVasiliy Kulikov if (snum) 442c319b4d7SVasiliy Kulikov sk->sk_userlocks |= SOCK_BINDPORT_LOCK; 443c319b4d7SVasiliy Kulikov isk->inet_sport = htons(isk->inet_num); 444c319b4d7SVasiliy Kulikov isk->inet_daddr = 0; 445c319b4d7SVasiliy Kulikov isk->inet_dport = 0; 4466d0bfe22SLorenzo Colitti 4476d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 4486d0bfe22SLorenzo Colitti if (sk->sk_family == AF_INET6) 449efe4208fSEric Dumazet memset(&sk->sk_v6_daddr, 0, sizeof(sk->sk_v6_daddr)); 4506d0bfe22SLorenzo Colitti #endif 4516d0bfe22SLorenzo Colitti 452c319b4d7SVasiliy Kulikov sk_dst_reset(sk); 453c319b4d7SVasiliy Kulikov out: 454c319b4d7SVasiliy Kulikov release_sock(sk); 455c319b4d7SVasiliy Kulikov pr_debug("ping_v4_bind -> %d\n", err); 456c319b4d7SVasiliy Kulikov return err; 457c319b4d7SVasiliy Kulikov } 4586d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_bind); 459c319b4d7SVasiliy Kulikov 460c319b4d7SVasiliy Kulikov /* 461c319b4d7SVasiliy Kulikov * Is this a supported type of ICMP message? 462c319b4d7SVasiliy Kulikov */ 463c319b4d7SVasiliy Kulikov 4646d0bfe22SLorenzo Colitti static inline int ping_supported(int family, int type, int code) 465c319b4d7SVasiliy Kulikov { 4666d0bfe22SLorenzo Colitti return (family == AF_INET && type == ICMP_ECHO && code == 0) || 4676d0bfe22SLorenzo Colitti (family == AF_INET6 && type == ICMPV6_ECHO_REQUEST && code == 0); 468c319b4d7SVasiliy Kulikov } 469c319b4d7SVasiliy Kulikov 470c319b4d7SVasiliy Kulikov /* 471c319b4d7SVasiliy Kulikov * This routine is called by the ICMP module when it gets some 472c319b4d7SVasiliy Kulikov * sort of error condition. 473c319b4d7SVasiliy Kulikov */ 474c319b4d7SVasiliy Kulikov 4756d0bfe22SLorenzo Colitti void ping_err(struct sk_buff *skb, int offset, u32 info) 476c319b4d7SVasiliy Kulikov { 4776d0bfe22SLorenzo Colitti int family; 4786d0bfe22SLorenzo Colitti struct icmphdr *icmph; 479c319b4d7SVasiliy Kulikov struct inet_sock *inet_sock; 4806d0bfe22SLorenzo Colitti int type; 4816d0bfe22SLorenzo Colitti int code; 482c319b4d7SVasiliy Kulikov struct net *net = dev_net(skb->dev); 483c319b4d7SVasiliy Kulikov struct sock *sk; 484c319b4d7SVasiliy Kulikov int harderr; 485c319b4d7SVasiliy Kulikov int err; 486c319b4d7SVasiliy Kulikov 4876d0bfe22SLorenzo Colitti if (skb->protocol == htons(ETH_P_IP)) { 4886d0bfe22SLorenzo Colitti family = AF_INET; 4896d0bfe22SLorenzo Colitti type = icmp_hdr(skb)->type; 4906d0bfe22SLorenzo Colitti code = icmp_hdr(skb)->code; 4916d0bfe22SLorenzo Colitti icmph = (struct icmphdr *)(skb->data + offset); 4926d0bfe22SLorenzo Colitti } else if (skb->protocol == htons(ETH_P_IPV6)) { 4936d0bfe22SLorenzo Colitti family = AF_INET6; 4946d0bfe22SLorenzo Colitti type = icmp6_hdr(skb)->icmp6_type; 4956d0bfe22SLorenzo Colitti code = icmp6_hdr(skb)->icmp6_code; 4966d0bfe22SLorenzo Colitti icmph = (struct icmphdr *) (skb->data + offset); 4976d0bfe22SLorenzo Colitti } else { 4986d0bfe22SLorenzo Colitti BUG(); 4996d0bfe22SLorenzo Colitti } 5006d0bfe22SLorenzo Colitti 501c319b4d7SVasiliy Kulikov /* We assume the packet has already been checked by icmp_unreach */ 502c319b4d7SVasiliy Kulikov 5036d0bfe22SLorenzo Colitti if (!ping_supported(family, icmph->type, icmph->code)) 504c319b4d7SVasiliy Kulikov return; 505c319b4d7SVasiliy Kulikov 5066d0bfe22SLorenzo Colitti pr_debug("ping_err(proto=0x%x,type=%d,code=%d,id=%04x,seq=%04x)\n", 5076d0bfe22SLorenzo Colitti skb->protocol, type, code, ntohs(icmph->un.echo.id), 5086d0bfe22SLorenzo Colitti ntohs(icmph->un.echo.sequence)); 509c319b4d7SVasiliy Kulikov 5106d0bfe22SLorenzo Colitti sk = ping_lookup(net, skb, ntohs(icmph->un.echo.id)); 511c319b4d7SVasiliy Kulikov if (sk == NULL) { 512c319b4d7SVasiliy Kulikov pr_debug("no socket, dropping\n"); 513c319b4d7SVasiliy Kulikov return; /* No socket for error */ 514c319b4d7SVasiliy Kulikov } 515c319b4d7SVasiliy Kulikov pr_debug("err on socket %p\n", sk); 516c319b4d7SVasiliy Kulikov 517c319b4d7SVasiliy Kulikov err = 0; 518c319b4d7SVasiliy Kulikov harderr = 0; 519c319b4d7SVasiliy Kulikov inet_sock = inet_sk(sk); 520c319b4d7SVasiliy Kulikov 5216d0bfe22SLorenzo Colitti if (skb->protocol == htons(ETH_P_IP)) { 522c319b4d7SVasiliy Kulikov switch (type) { 523c319b4d7SVasiliy Kulikov default: 524c319b4d7SVasiliy Kulikov case ICMP_TIME_EXCEEDED: 525c319b4d7SVasiliy Kulikov err = EHOSTUNREACH; 526c319b4d7SVasiliy Kulikov break; 527c319b4d7SVasiliy Kulikov case ICMP_SOURCE_QUENCH: 528c319b4d7SVasiliy Kulikov /* This is not a real error but ping wants to see it. 5296d0bfe22SLorenzo Colitti * Report it with some fake errno. 5306d0bfe22SLorenzo Colitti */ 531c319b4d7SVasiliy Kulikov err = EREMOTEIO; 532c319b4d7SVasiliy Kulikov break; 533c319b4d7SVasiliy Kulikov case ICMP_PARAMETERPROB: 534c319b4d7SVasiliy Kulikov err = EPROTO; 535c319b4d7SVasiliy Kulikov harderr = 1; 536c319b4d7SVasiliy Kulikov break; 537c319b4d7SVasiliy Kulikov case ICMP_DEST_UNREACH: 538c319b4d7SVasiliy Kulikov if (code == ICMP_FRAG_NEEDED) { /* Path MTU discovery */ 53936393395SDavid S. Miller ipv4_sk_update_pmtu(skb, sk, info); 540c319b4d7SVasiliy Kulikov if (inet_sock->pmtudisc != IP_PMTUDISC_DONT) { 541c319b4d7SVasiliy Kulikov err = EMSGSIZE; 542c319b4d7SVasiliy Kulikov harderr = 1; 543c319b4d7SVasiliy Kulikov break; 544c319b4d7SVasiliy Kulikov } 545c319b4d7SVasiliy Kulikov goto out; 546c319b4d7SVasiliy Kulikov } 547c319b4d7SVasiliy Kulikov err = EHOSTUNREACH; 548c319b4d7SVasiliy Kulikov if (code <= NR_ICMP_UNREACH) { 549c319b4d7SVasiliy Kulikov harderr = icmp_err_convert[code].fatal; 550c319b4d7SVasiliy Kulikov err = icmp_err_convert[code].errno; 551c319b4d7SVasiliy Kulikov } 552c319b4d7SVasiliy Kulikov break; 553c319b4d7SVasiliy Kulikov case ICMP_REDIRECT: 554c319b4d7SVasiliy Kulikov /* See ICMP_SOURCE_QUENCH */ 55555be7a9cSDavid S. Miller ipv4_sk_redirect(skb, sk); 556c319b4d7SVasiliy Kulikov err = EREMOTEIO; 557c319b4d7SVasiliy Kulikov break; 558c319b4d7SVasiliy Kulikov } 5596d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 5606d0bfe22SLorenzo Colitti } else if (skb->protocol == htons(ETH_P_IPV6)) { 5616d0bfe22SLorenzo Colitti harderr = pingv6_ops.icmpv6_err_convert(type, code, &err); 5626d0bfe22SLorenzo Colitti #endif 5636d0bfe22SLorenzo Colitti } 564c319b4d7SVasiliy Kulikov 565c319b4d7SVasiliy Kulikov /* 566c319b4d7SVasiliy Kulikov * RFC1122: OK. Passes ICMP errors back to application, as per 567c319b4d7SVasiliy Kulikov * 4.1.3.3. 568c319b4d7SVasiliy Kulikov */ 5696d0bfe22SLorenzo Colitti if ((family == AF_INET && !inet_sock->recverr) || 5706d0bfe22SLorenzo Colitti (family == AF_INET6 && !inet6_sk(sk)->recverr)) { 571c319b4d7SVasiliy Kulikov if (!harderr || sk->sk_state != TCP_ESTABLISHED) 572c319b4d7SVasiliy Kulikov goto out; 573c319b4d7SVasiliy Kulikov } else { 5746d0bfe22SLorenzo Colitti if (family == AF_INET) { 575c319b4d7SVasiliy Kulikov ip_icmp_error(sk, skb, err, 0 /* no remote port */, 576c319b4d7SVasiliy Kulikov info, (u8 *)icmph); 5776d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 5786d0bfe22SLorenzo Colitti } else if (family == AF_INET6) { 5796d0bfe22SLorenzo Colitti pingv6_ops.ipv6_icmp_error(sk, skb, err, 0, 5806d0bfe22SLorenzo Colitti info, (u8 *)icmph); 5816d0bfe22SLorenzo Colitti #endif 5826d0bfe22SLorenzo Colitti } 583c319b4d7SVasiliy Kulikov } 584c319b4d7SVasiliy Kulikov sk->sk_err = err; 585c319b4d7SVasiliy Kulikov sk->sk_error_report(sk); 586c319b4d7SVasiliy Kulikov out: 587c319b4d7SVasiliy Kulikov sock_put(sk); 588c319b4d7SVasiliy Kulikov } 5896d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_err); 590c319b4d7SVasiliy Kulikov 591c319b4d7SVasiliy Kulikov /* 5926d0bfe22SLorenzo Colitti * Copy and checksum an ICMP Echo packet from user space into a buffer 5936d0bfe22SLorenzo Colitti * starting from the payload. 594c319b4d7SVasiliy Kulikov */ 595c319b4d7SVasiliy Kulikov 5966d0bfe22SLorenzo Colitti int ping_getfrag(void *from, char *to, 597c319b4d7SVasiliy Kulikov int offset, int fraglen, int odd, struct sk_buff *skb) 598c319b4d7SVasiliy Kulikov { 599c319b4d7SVasiliy Kulikov struct pingfakehdr *pfh = (struct pingfakehdr *)from; 600c319b4d7SVasiliy Kulikov 601c319b4d7SVasiliy Kulikov if (offset == 0) { 602c319b4d7SVasiliy Kulikov if (fraglen < sizeof(struct icmphdr)) 603c319b4d7SVasiliy Kulikov BUG(); 604c319b4d7SVasiliy Kulikov if (csum_partial_copy_fromiovecend(to + sizeof(struct icmphdr), 605*cacdc7d2SAl Viro pfh->msg->msg_iter.iov, 0, fraglen - sizeof(struct icmphdr), 606c319b4d7SVasiliy Kulikov &pfh->wcheck)) 607c319b4d7SVasiliy Kulikov return -EFAULT; 6086d0bfe22SLorenzo Colitti } else if (offset < sizeof(struct icmphdr)) { 609c319b4d7SVasiliy Kulikov BUG(); 6106d0bfe22SLorenzo Colitti } else { 611c319b4d7SVasiliy Kulikov if (csum_partial_copy_fromiovecend 612*cacdc7d2SAl Viro (to, pfh->msg->msg_iter.iov, offset - sizeof(struct icmphdr), 613c319b4d7SVasiliy Kulikov fraglen, &pfh->wcheck)) 614c319b4d7SVasiliy Kulikov return -EFAULT; 615c319b4d7SVasiliy Kulikov } 616c319b4d7SVasiliy Kulikov 6176d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 6186d0bfe22SLorenzo Colitti /* For IPv6, checksum each skb as we go along, as expected by 6196d0bfe22SLorenzo Colitti * icmpv6_push_pending_frames. For IPv4, accumulate the checksum in 6206d0bfe22SLorenzo Colitti * wcheck, it will be finalized in ping_v4_push_pending_frames. 6216d0bfe22SLorenzo Colitti */ 6226d0bfe22SLorenzo Colitti if (pfh->family == AF_INET6) { 6236d0bfe22SLorenzo Colitti skb->csum = pfh->wcheck; 6246d0bfe22SLorenzo Colitti skb->ip_summed = CHECKSUM_NONE; 6256d0bfe22SLorenzo Colitti pfh->wcheck = 0; 6266d0bfe22SLorenzo Colitti } 6276d0bfe22SLorenzo Colitti #endif 6286d0bfe22SLorenzo Colitti 6296d0bfe22SLorenzo Colitti return 0; 6306d0bfe22SLorenzo Colitti } 6316d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_getfrag); 6326d0bfe22SLorenzo Colitti 6336d0bfe22SLorenzo Colitti static int ping_v4_push_pending_frames(struct sock *sk, struct pingfakehdr *pfh, 63475e308c8SChangli Gao struct flowi4 *fl4) 635c319b4d7SVasiliy Kulikov { 636c319b4d7SVasiliy Kulikov struct sk_buff *skb = skb_peek(&sk->sk_write_queue); 637c319b4d7SVasiliy Kulikov 638c319b4d7SVasiliy Kulikov pfh->wcheck = csum_partial((char *)&pfh->icmph, 639c319b4d7SVasiliy Kulikov sizeof(struct icmphdr), pfh->wcheck); 640c319b4d7SVasiliy Kulikov pfh->icmph.checksum = csum_fold(pfh->wcheck); 641c319b4d7SVasiliy Kulikov memcpy(icmp_hdr(skb), &pfh->icmph, sizeof(struct icmphdr)); 642c319b4d7SVasiliy Kulikov skb->ip_summed = CHECKSUM_NONE; 643c319b4d7SVasiliy Kulikov return ip_push_pending_frames(sk, fl4); 644c319b4d7SVasiliy Kulikov } 645c319b4d7SVasiliy Kulikov 6466d0bfe22SLorenzo Colitti int ping_common_sendmsg(int family, struct msghdr *msg, size_t len, 6476d0bfe22SLorenzo Colitti void *user_icmph, size_t icmph_len) { 6486d0bfe22SLorenzo Colitti u8 type, code; 6496d0bfe22SLorenzo Colitti 6506d0bfe22SLorenzo Colitti if (len > 0xFFFF) 6516d0bfe22SLorenzo Colitti return -EMSGSIZE; 6526d0bfe22SLorenzo Colitti 6536d0bfe22SLorenzo Colitti /* 6546d0bfe22SLorenzo Colitti * Check the flags. 6556d0bfe22SLorenzo Colitti */ 6566d0bfe22SLorenzo Colitti 6576d0bfe22SLorenzo Colitti /* Mirror BSD error message compatibility */ 6586d0bfe22SLorenzo Colitti if (msg->msg_flags & MSG_OOB) 6596d0bfe22SLorenzo Colitti return -EOPNOTSUPP; 6606d0bfe22SLorenzo Colitti 6616d0bfe22SLorenzo Colitti /* 6626d0bfe22SLorenzo Colitti * Fetch the ICMP header provided by the userland. 6636d0bfe22SLorenzo Colitti * iovec is modified! The ICMP header is consumed. 6646d0bfe22SLorenzo Colitti */ 6656ce8e9ceSAl Viro if (memcpy_from_msg(user_icmph, msg, icmph_len)) 6666d0bfe22SLorenzo Colitti return -EFAULT; 6676d0bfe22SLorenzo Colitti 6686d0bfe22SLorenzo Colitti if (family == AF_INET) { 6696d0bfe22SLorenzo Colitti type = ((struct icmphdr *) user_icmph)->type; 6706d0bfe22SLorenzo Colitti code = ((struct icmphdr *) user_icmph)->code; 6716d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 6726d0bfe22SLorenzo Colitti } else if (family == AF_INET6) { 6736d0bfe22SLorenzo Colitti type = ((struct icmp6hdr *) user_icmph)->icmp6_type; 6746d0bfe22SLorenzo Colitti code = ((struct icmp6hdr *) user_icmph)->icmp6_code; 6756d0bfe22SLorenzo Colitti #endif 6766d0bfe22SLorenzo Colitti } else { 6776d0bfe22SLorenzo Colitti BUG(); 6786d0bfe22SLorenzo Colitti } 6796d0bfe22SLorenzo Colitti 6806d0bfe22SLorenzo Colitti if (!ping_supported(family, type, code)) 6816d0bfe22SLorenzo Colitti return -EINVAL; 6826d0bfe22SLorenzo Colitti 6836d0bfe22SLorenzo Colitti return 0; 6846d0bfe22SLorenzo Colitti } 6856d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_common_sendmsg); 6866d0bfe22SLorenzo Colitti 687ea074b34SStephen Hemminger static int ping_v4_sendmsg(struct kiocb *iocb, struct sock *sk, struct msghdr *msg, 688c319b4d7SVasiliy Kulikov size_t len) 689c319b4d7SVasiliy Kulikov { 690c319b4d7SVasiliy Kulikov struct net *net = sock_net(sk); 691c319b4d7SVasiliy Kulikov struct flowi4 fl4; 692c319b4d7SVasiliy Kulikov struct inet_sock *inet = inet_sk(sk); 693c319b4d7SVasiliy Kulikov struct ipcm_cookie ipc; 694c319b4d7SVasiliy Kulikov struct icmphdr user_icmph; 695c319b4d7SVasiliy Kulikov struct pingfakehdr pfh; 696c319b4d7SVasiliy Kulikov struct rtable *rt = NULL; 697c319b4d7SVasiliy Kulikov struct ip_options_data opt_copy; 698c319b4d7SVasiliy Kulikov int free = 0; 699747465efSEric Dumazet __be32 saddr, daddr, faddr; 700c319b4d7SVasiliy Kulikov u8 tos; 701c319b4d7SVasiliy Kulikov int err; 702c319b4d7SVasiliy Kulikov 7036d0bfe22SLorenzo Colitti pr_debug("ping_v4_sendmsg(sk=%p,sk->num=%u)\n", inet, inet->inet_num); 704c319b4d7SVasiliy Kulikov 7056d0bfe22SLorenzo Colitti err = ping_common_sendmsg(AF_INET, msg, len, &user_icmph, 7066d0bfe22SLorenzo Colitti sizeof(user_icmph)); 7076d0bfe22SLorenzo Colitti if (err) 7086d0bfe22SLorenzo Colitti return err; 709c319b4d7SVasiliy Kulikov 710c319b4d7SVasiliy Kulikov /* 711c319b4d7SVasiliy Kulikov * Get and verify the address. 712c319b4d7SVasiliy Kulikov */ 713c319b4d7SVasiliy Kulikov 714c319b4d7SVasiliy Kulikov if (msg->msg_name) { 715342dfc30SSteffen Hurrle DECLARE_SOCKADDR(struct sockaddr_in *, usin, msg->msg_name); 716c319b4d7SVasiliy Kulikov if (msg->msg_namelen < sizeof(*usin)) 717c319b4d7SVasiliy Kulikov return -EINVAL; 718c319b4d7SVasiliy Kulikov if (usin->sin_family != AF_INET) 719c319b4d7SVasiliy Kulikov return -EINVAL; 720c319b4d7SVasiliy Kulikov daddr = usin->sin_addr.s_addr; 721c319b4d7SVasiliy Kulikov /* no remote port */ 722c319b4d7SVasiliy Kulikov } else { 723c319b4d7SVasiliy Kulikov if (sk->sk_state != TCP_ESTABLISHED) 724c319b4d7SVasiliy Kulikov return -EDESTADDRREQ; 725c319b4d7SVasiliy Kulikov daddr = inet->inet_daddr; 726c319b4d7SVasiliy Kulikov /* no remote port */ 727c319b4d7SVasiliy Kulikov } 728c319b4d7SVasiliy Kulikov 729c319b4d7SVasiliy Kulikov ipc.addr = inet->inet_saddr; 730c319b4d7SVasiliy Kulikov ipc.opt = NULL; 731c319b4d7SVasiliy Kulikov ipc.oif = sk->sk_bound_dev_if; 732c319b4d7SVasiliy Kulikov ipc.tx_flags = 0; 733aa661581SFrancesco Fusco ipc.ttl = 0; 734aa661581SFrancesco Fusco ipc.tos = -1; 735bf84a010SDaniel Borkmann 736bf84a010SDaniel Borkmann sock_tx_timestamp(sk, &ipc.tx_flags); 737c319b4d7SVasiliy Kulikov 738c319b4d7SVasiliy Kulikov if (msg->msg_controllen) { 739c8e6ad08SHannes Frederic Sowa err = ip_cmsg_send(sock_net(sk), msg, &ipc, false); 740c319b4d7SVasiliy Kulikov if (err) 741c319b4d7SVasiliy Kulikov return err; 742c319b4d7SVasiliy Kulikov if (ipc.opt) 743c319b4d7SVasiliy Kulikov free = 1; 744c319b4d7SVasiliy Kulikov } 745c319b4d7SVasiliy Kulikov if (!ipc.opt) { 746c319b4d7SVasiliy Kulikov struct ip_options_rcu *inet_opt; 747c319b4d7SVasiliy Kulikov 748c319b4d7SVasiliy Kulikov rcu_read_lock(); 749c319b4d7SVasiliy Kulikov inet_opt = rcu_dereference(inet->inet_opt); 750c319b4d7SVasiliy Kulikov if (inet_opt) { 751c319b4d7SVasiliy Kulikov memcpy(&opt_copy, inet_opt, 752c319b4d7SVasiliy Kulikov sizeof(*inet_opt) + inet_opt->opt.optlen); 753c319b4d7SVasiliy Kulikov ipc.opt = &opt_copy.opt; 754c319b4d7SVasiliy Kulikov } 755c319b4d7SVasiliy Kulikov rcu_read_unlock(); 756c319b4d7SVasiliy Kulikov } 757c319b4d7SVasiliy Kulikov 758c319b4d7SVasiliy Kulikov saddr = ipc.addr; 759c319b4d7SVasiliy Kulikov ipc.addr = faddr = daddr; 760c319b4d7SVasiliy Kulikov 761c319b4d7SVasiliy Kulikov if (ipc.opt && ipc.opt->opt.srr) { 762c319b4d7SVasiliy Kulikov if (!daddr) 763c319b4d7SVasiliy Kulikov return -EINVAL; 764c319b4d7SVasiliy Kulikov faddr = ipc.opt->opt.faddr; 765c319b4d7SVasiliy Kulikov } 766aa661581SFrancesco Fusco tos = get_rttos(&ipc, inet); 767c319b4d7SVasiliy Kulikov if (sock_flag(sk, SOCK_LOCALROUTE) || 768c319b4d7SVasiliy Kulikov (msg->msg_flags & MSG_DONTROUTE) || 769c319b4d7SVasiliy Kulikov (ipc.opt && ipc.opt->opt.is_strictroute)) { 770c319b4d7SVasiliy Kulikov tos |= RTO_ONLINK; 771c319b4d7SVasiliy Kulikov } 772c319b4d7SVasiliy Kulikov 773c319b4d7SVasiliy Kulikov if (ipv4_is_multicast(daddr)) { 774c319b4d7SVasiliy Kulikov if (!ipc.oif) 775c319b4d7SVasiliy Kulikov ipc.oif = inet->mc_index; 776c319b4d7SVasiliy Kulikov if (!saddr) 777c319b4d7SVasiliy Kulikov saddr = inet->mc_addr; 77876e21053SErich E. Hoover } else if (!ipc.oif) 77976e21053SErich E. Hoover ipc.oif = inet->uc_index; 780c319b4d7SVasiliy Kulikov 781c319b4d7SVasiliy Kulikov flowi4_init_output(&fl4, ipc.oif, sk->sk_mark, tos, 782c319b4d7SVasiliy Kulikov RT_SCOPE_UNIVERSE, sk->sk_protocol, 783c319b4d7SVasiliy Kulikov inet_sk_flowi_flags(sk), faddr, saddr, 0, 0); 784c319b4d7SVasiliy Kulikov 785c319b4d7SVasiliy Kulikov security_sk_classify_flow(sk, flowi4_to_flowi(&fl4)); 786c319b4d7SVasiliy Kulikov rt = ip_route_output_flow(net, &fl4, sk); 787c319b4d7SVasiliy Kulikov if (IS_ERR(rt)) { 788c319b4d7SVasiliy Kulikov err = PTR_ERR(rt); 789c319b4d7SVasiliy Kulikov rt = NULL; 790c319b4d7SVasiliy Kulikov if (err == -ENETUNREACH) 791f1d8cba6SEric Dumazet IP_INC_STATS(net, IPSTATS_MIB_OUTNOROUTES); 792c319b4d7SVasiliy Kulikov goto out; 793c319b4d7SVasiliy Kulikov } 794c319b4d7SVasiliy Kulikov 795c319b4d7SVasiliy Kulikov err = -EACCES; 796c319b4d7SVasiliy Kulikov if ((rt->rt_flags & RTCF_BROADCAST) && 797c319b4d7SVasiliy Kulikov !sock_flag(sk, SOCK_BROADCAST)) 798c319b4d7SVasiliy Kulikov goto out; 799c319b4d7SVasiliy Kulikov 800c319b4d7SVasiliy Kulikov if (msg->msg_flags & MSG_CONFIRM) 801c319b4d7SVasiliy Kulikov goto do_confirm; 802c319b4d7SVasiliy Kulikov back_from_confirm: 803c319b4d7SVasiliy Kulikov 804c319b4d7SVasiliy Kulikov if (!ipc.addr) 805c319b4d7SVasiliy Kulikov ipc.addr = fl4.daddr; 806c319b4d7SVasiliy Kulikov 807c319b4d7SVasiliy Kulikov lock_sock(sk); 808c319b4d7SVasiliy Kulikov 809c319b4d7SVasiliy Kulikov pfh.icmph.type = user_icmph.type; /* already checked */ 810c319b4d7SVasiliy Kulikov pfh.icmph.code = user_icmph.code; /* ditto */ 811c319b4d7SVasiliy Kulikov pfh.icmph.checksum = 0; 812c319b4d7SVasiliy Kulikov pfh.icmph.un.echo.id = inet->inet_sport; 813c319b4d7SVasiliy Kulikov pfh.icmph.un.echo.sequence = user_icmph.un.echo.sequence; 814*cacdc7d2SAl Viro pfh.msg = msg; 815c319b4d7SVasiliy Kulikov pfh.wcheck = 0; 8166d0bfe22SLorenzo Colitti pfh.family = AF_INET; 817c319b4d7SVasiliy Kulikov 818c319b4d7SVasiliy Kulikov err = ip_append_data(sk, &fl4, ping_getfrag, &pfh, len, 819c319b4d7SVasiliy Kulikov 0, &ipc, &rt, msg->msg_flags); 820c319b4d7SVasiliy Kulikov if (err) 821c319b4d7SVasiliy Kulikov ip_flush_pending_frames(sk); 822c319b4d7SVasiliy Kulikov else 8236d0bfe22SLorenzo Colitti err = ping_v4_push_pending_frames(sk, &pfh, &fl4); 824c319b4d7SVasiliy Kulikov release_sock(sk); 825c319b4d7SVasiliy Kulikov 826c319b4d7SVasiliy Kulikov out: 827c319b4d7SVasiliy Kulikov ip_rt_put(rt); 828c319b4d7SVasiliy Kulikov if (free) 829c319b4d7SVasiliy Kulikov kfree(ipc.opt); 830c319b4d7SVasiliy Kulikov if (!err) { 831c319b4d7SVasiliy Kulikov icmp_out_count(sock_net(sk), user_icmph.type); 832c319b4d7SVasiliy Kulikov return len; 833c319b4d7SVasiliy Kulikov } 834c319b4d7SVasiliy Kulikov return err; 835c319b4d7SVasiliy Kulikov 836c319b4d7SVasiliy Kulikov do_confirm: 837c319b4d7SVasiliy Kulikov dst_confirm(&rt->dst); 838c319b4d7SVasiliy Kulikov if (!(msg->msg_flags & MSG_PROBE) || len) 839c319b4d7SVasiliy Kulikov goto back_from_confirm; 840c319b4d7SVasiliy Kulikov err = 0; 841c319b4d7SVasiliy Kulikov goto out; 842c319b4d7SVasiliy Kulikov } 843c319b4d7SVasiliy Kulikov 8446d0bfe22SLorenzo Colitti int ping_recvmsg(struct kiocb *iocb, struct sock *sk, struct msghdr *msg, 845c319b4d7SVasiliy Kulikov size_t len, int noblock, int flags, int *addr_len) 846c319b4d7SVasiliy Kulikov { 847c319b4d7SVasiliy Kulikov struct inet_sock *isk = inet_sk(sk); 8486d0bfe22SLorenzo Colitti int family = sk->sk_family; 849c319b4d7SVasiliy Kulikov struct sk_buff *skb; 850c319b4d7SVasiliy Kulikov int copied, err; 851c319b4d7SVasiliy Kulikov 852c319b4d7SVasiliy Kulikov pr_debug("ping_recvmsg(sk=%p,sk->num=%u)\n", isk, isk->inet_num); 853c319b4d7SVasiliy Kulikov 854a5e7424dSDavid S. Miller err = -EOPNOTSUPP; 855c319b4d7SVasiliy Kulikov if (flags & MSG_OOB) 856c319b4d7SVasiliy Kulikov goto out; 857c319b4d7SVasiliy Kulikov 858f4713a3dSWillem de Bruijn if (flags & MSG_ERRQUEUE) 859f4713a3dSWillem de Bruijn return inet_recv_error(sk, msg, len, addr_len); 860c319b4d7SVasiliy Kulikov 861c319b4d7SVasiliy Kulikov skb = skb_recv_datagram(sk, flags, noblock, &err); 862c319b4d7SVasiliy Kulikov if (!skb) 863c319b4d7SVasiliy Kulikov goto out; 864c319b4d7SVasiliy Kulikov 865c319b4d7SVasiliy Kulikov copied = skb->len; 866c319b4d7SVasiliy Kulikov if (copied > len) { 867c319b4d7SVasiliy Kulikov msg->msg_flags |= MSG_TRUNC; 868c319b4d7SVasiliy Kulikov copied = len; 869c319b4d7SVasiliy Kulikov } 870c319b4d7SVasiliy Kulikov 871c319b4d7SVasiliy Kulikov /* Don't bother checking the checksum */ 87251f3d02bSDavid S. Miller err = skb_copy_datagram_msg(skb, 0, msg, copied); 873c319b4d7SVasiliy Kulikov if (err) 874c319b4d7SVasiliy Kulikov goto done; 875c319b4d7SVasiliy Kulikov 876c319b4d7SVasiliy Kulikov sock_recv_timestamp(msg, sk, skb); 877c319b4d7SVasiliy Kulikov 8786d0bfe22SLorenzo Colitti /* Copy the address and add cmsg data. */ 8796d0bfe22SLorenzo Colitti if (family == AF_INET) { 880342dfc30SSteffen Hurrle DECLARE_SOCKADDR(struct sockaddr_in *, sin, msg->msg_name); 881bceaa902SHannes Frederic Sowa 882cf970c00SHannes Frederic Sowa if (sin) { 883c319b4d7SVasiliy Kulikov sin->sin_family = AF_INET; 884c319b4d7SVasiliy Kulikov sin->sin_port = 0 /* skb->h.uh->source */; 885c319b4d7SVasiliy Kulikov sin->sin_addr.s_addr = ip_hdr(skb)->saddr; 886c319b4d7SVasiliy Kulikov memset(sin->sin_zero, 0, sizeof(sin->sin_zero)); 887bceaa902SHannes Frederic Sowa *addr_len = sizeof(*sin); 888cf970c00SHannes Frederic Sowa } 8896d0bfe22SLorenzo Colitti 890c319b4d7SVasiliy Kulikov if (isk->cmsg_flags) 891c319b4d7SVasiliy Kulikov ip_cmsg_recv(msg, skb); 8926d0bfe22SLorenzo Colitti 8936d0bfe22SLorenzo Colitti #if IS_ENABLED(CONFIG_IPV6) 8946d0bfe22SLorenzo Colitti } else if (family == AF_INET6) { 8956d0bfe22SLorenzo Colitti struct ipv6_pinfo *np = inet6_sk(sk); 8966d0bfe22SLorenzo Colitti struct ipv6hdr *ip6 = ipv6_hdr(skb); 897342dfc30SSteffen Hurrle DECLARE_SOCKADDR(struct sockaddr_in6 *, sin6, msg->msg_name); 898bceaa902SHannes Frederic Sowa 899cf970c00SHannes Frederic Sowa if (sin6) { 9006d0bfe22SLorenzo Colitti sin6->sin6_family = AF_INET6; 9016d0bfe22SLorenzo Colitti sin6->sin6_port = 0; 9026d0bfe22SLorenzo Colitti sin6->sin6_addr = ip6->saddr; 903c26d6b46SCong Wang sin6->sin6_flowinfo = 0; 9046d0bfe22SLorenzo Colitti if (np->sndflow) 9056d0bfe22SLorenzo Colitti sin6->sin6_flowinfo = ip6_flowinfo(ip6); 906cf970c00SHannes Frederic Sowa sin6->sin6_scope_id = 907cf970c00SHannes Frederic Sowa ipv6_iface_scope_id(&sin6->sin6_addr, 9084330487aSDuan Jiong inet6_iif(skb)); 909bceaa902SHannes Frederic Sowa *addr_len = sizeof(*sin6); 910cf970c00SHannes Frederic Sowa } 9116d0bfe22SLorenzo Colitti 9126d0bfe22SLorenzo Colitti if (inet6_sk(sk)->rxopt.all) 9134b261c75SHannes Frederic Sowa pingv6_ops.ip6_datagram_recv_common_ctl(sk, msg, skb); 9144b261c75SHannes Frederic Sowa if (skb->protocol == htons(ETH_P_IPV6) && 9154b261c75SHannes Frederic Sowa inet6_sk(sk)->rxopt.all) 9164b261c75SHannes Frederic Sowa pingv6_ops.ip6_datagram_recv_specific_ctl(sk, msg, skb); 9174b261c75SHannes Frederic Sowa else if (skb->protocol == htons(ETH_P_IP) && isk->cmsg_flags) 9184b261c75SHannes Frederic Sowa ip_cmsg_recv(msg, skb); 9196d0bfe22SLorenzo Colitti #endif 9206d0bfe22SLorenzo Colitti } else { 9216d0bfe22SLorenzo Colitti BUG(); 9226d0bfe22SLorenzo Colitti } 9236d0bfe22SLorenzo Colitti 924c319b4d7SVasiliy Kulikov err = copied; 925c319b4d7SVasiliy Kulikov 926c319b4d7SVasiliy Kulikov done: 927c319b4d7SVasiliy Kulikov skb_free_datagram(sk, skb); 928c319b4d7SVasiliy Kulikov out: 929c319b4d7SVasiliy Kulikov pr_debug("ping_recvmsg -> %d\n", err); 930c319b4d7SVasiliy Kulikov return err; 931c319b4d7SVasiliy Kulikov } 9326d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_recvmsg); 933c319b4d7SVasiliy Kulikov 9346d0bfe22SLorenzo Colitti int ping_queue_rcv_skb(struct sock *sk, struct sk_buff *skb) 935c319b4d7SVasiliy Kulikov { 936c319b4d7SVasiliy Kulikov pr_debug("ping_queue_rcv_skb(sk=%p,sk->num=%d,skb=%p)\n", 937c319b4d7SVasiliy Kulikov inet_sk(sk), inet_sk(sk)->inet_num, skb); 938c319b4d7SVasiliy Kulikov if (sock_queue_rcv_skb(sk, skb) < 0) { 939c319b4d7SVasiliy Kulikov kfree_skb(skb); 940c319b4d7SVasiliy Kulikov pr_debug("ping_queue_rcv_skb -> failed\n"); 941c319b4d7SVasiliy Kulikov return -1; 942c319b4d7SVasiliy Kulikov } 943c319b4d7SVasiliy Kulikov return 0; 944c319b4d7SVasiliy Kulikov } 9456d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_queue_rcv_skb); 946c319b4d7SVasiliy Kulikov 947c319b4d7SVasiliy Kulikov 948c319b4d7SVasiliy Kulikov /* 949c319b4d7SVasiliy Kulikov * All we need to do is get the socket. 950c319b4d7SVasiliy Kulikov */ 951c319b4d7SVasiliy Kulikov 952e3e32170SRick Jones bool ping_rcv(struct sk_buff *skb) 953c319b4d7SVasiliy Kulikov { 954c319b4d7SVasiliy Kulikov struct sock *sk; 955c319b4d7SVasiliy Kulikov struct net *net = dev_net(skb->dev); 956c319b4d7SVasiliy Kulikov struct icmphdr *icmph = icmp_hdr(skb); 957c319b4d7SVasiliy Kulikov 958c319b4d7SVasiliy Kulikov /* We assume the packet has already been checked by icmp_rcv */ 959c319b4d7SVasiliy Kulikov 960c319b4d7SVasiliy Kulikov pr_debug("ping_rcv(skb=%p,id=%04x,seq=%04x)\n", 961c319b4d7SVasiliy Kulikov skb, ntohs(icmph->un.echo.id), ntohs(icmph->un.echo.sequence)); 962c319b4d7SVasiliy Kulikov 963c319b4d7SVasiliy Kulikov /* Push ICMP header back */ 964c319b4d7SVasiliy Kulikov skb_push(skb, skb->data - (u8 *)icmph); 965c319b4d7SVasiliy Kulikov 9666d0bfe22SLorenzo Colitti sk = ping_lookup(net, skb, ntohs(icmph->un.echo.id)); 967c319b4d7SVasiliy Kulikov if (sk != NULL) { 968fc752f1fSsubashab@codeaurora.org struct sk_buff *skb2 = skb_clone(skb, GFP_ATOMIC); 969fc752f1fSsubashab@codeaurora.org 970c319b4d7SVasiliy Kulikov pr_debug("rcv on socket %p\n", sk); 971fc752f1fSsubashab@codeaurora.org if (skb2) 972fc752f1fSsubashab@codeaurora.org ping_queue_rcv_skb(sk, skb2); 973c319b4d7SVasiliy Kulikov sock_put(sk); 974e3e32170SRick Jones return true; 975c319b4d7SVasiliy Kulikov } 976c319b4d7SVasiliy Kulikov pr_debug("no socket, dropping\n"); 977c319b4d7SVasiliy Kulikov 978e3e32170SRick Jones return false; 979c319b4d7SVasiliy Kulikov } 9806d0bfe22SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_rcv); 981c319b4d7SVasiliy Kulikov 982c319b4d7SVasiliy Kulikov struct proto ping_prot = { 983c319b4d7SVasiliy Kulikov .name = "PING", 984c319b4d7SVasiliy Kulikov .owner = THIS_MODULE, 985c319b4d7SVasiliy Kulikov .init = ping_init_sock, 986c319b4d7SVasiliy Kulikov .close = ping_close, 987c319b4d7SVasiliy Kulikov .connect = ip4_datagram_connect, 988c319b4d7SVasiliy Kulikov .disconnect = udp_disconnect, 989c319b4d7SVasiliy Kulikov .setsockopt = ip_setsockopt, 990c319b4d7SVasiliy Kulikov .getsockopt = ip_getsockopt, 9916d0bfe22SLorenzo Colitti .sendmsg = ping_v4_sendmsg, 992c319b4d7SVasiliy Kulikov .recvmsg = ping_recvmsg, 993c319b4d7SVasiliy Kulikov .bind = ping_bind, 994c319b4d7SVasiliy Kulikov .backlog_rcv = ping_queue_rcv_skb, 9958141ed9fSSteffen Klassert .release_cb = ip4_datagram_release_cb, 9966d0bfe22SLorenzo Colitti .hash = ping_hash, 9976d0bfe22SLorenzo Colitti .unhash = ping_unhash, 9986d0bfe22SLorenzo Colitti .get_port = ping_get_port, 999c319b4d7SVasiliy Kulikov .obj_size = sizeof(struct inet_sock), 1000c319b4d7SVasiliy Kulikov }; 1001c319b4d7SVasiliy Kulikov EXPORT_SYMBOL(ping_prot); 1002c319b4d7SVasiliy Kulikov 1003c319b4d7SVasiliy Kulikov #ifdef CONFIG_PROC_FS 1004c319b4d7SVasiliy Kulikov 1005c319b4d7SVasiliy Kulikov static struct sock *ping_get_first(struct seq_file *seq, int start) 1006c319b4d7SVasiliy Kulikov { 1007c319b4d7SVasiliy Kulikov struct sock *sk; 1008c319b4d7SVasiliy Kulikov struct ping_iter_state *state = seq->private; 1009c319b4d7SVasiliy Kulikov struct net *net = seq_file_net(seq); 1010c319b4d7SVasiliy Kulikov 1011c319b4d7SVasiliy Kulikov for (state->bucket = start; state->bucket < PING_HTABLE_SIZE; 1012c319b4d7SVasiliy Kulikov ++state->bucket) { 1013c319b4d7SVasiliy Kulikov struct hlist_nulls_node *node; 101475e308c8SChangli Gao struct hlist_nulls_head *hslot; 101575e308c8SChangli Gao 101675e308c8SChangli Gao hslot = &ping_table.hash[state->bucket]; 1017c319b4d7SVasiliy Kulikov 1018c319b4d7SVasiliy Kulikov if (hlist_nulls_empty(hslot)) 1019c319b4d7SVasiliy Kulikov continue; 1020c319b4d7SVasiliy Kulikov 1021c319b4d7SVasiliy Kulikov sk_nulls_for_each(sk, node, hslot) { 10228cc785f6SLorenzo Colitti if (net_eq(sock_net(sk), net) && 10238cc785f6SLorenzo Colitti sk->sk_family == state->family) 1024c319b4d7SVasiliy Kulikov goto found; 1025c319b4d7SVasiliy Kulikov } 1026c319b4d7SVasiliy Kulikov } 1027c319b4d7SVasiliy Kulikov sk = NULL; 1028c319b4d7SVasiliy Kulikov found: 1029c319b4d7SVasiliy Kulikov return sk; 1030c319b4d7SVasiliy Kulikov } 1031c319b4d7SVasiliy Kulikov 1032c319b4d7SVasiliy Kulikov static struct sock *ping_get_next(struct seq_file *seq, struct sock *sk) 1033c319b4d7SVasiliy Kulikov { 1034c319b4d7SVasiliy Kulikov struct ping_iter_state *state = seq->private; 1035c319b4d7SVasiliy Kulikov struct net *net = seq_file_net(seq); 1036c319b4d7SVasiliy Kulikov 1037c319b4d7SVasiliy Kulikov do { 1038c319b4d7SVasiliy Kulikov sk = sk_nulls_next(sk); 1039c319b4d7SVasiliy Kulikov } while (sk && (!net_eq(sock_net(sk), net))); 1040c319b4d7SVasiliy Kulikov 1041c319b4d7SVasiliy Kulikov if (!sk) 1042c319b4d7SVasiliy Kulikov return ping_get_first(seq, state->bucket + 1); 1043c319b4d7SVasiliy Kulikov return sk; 1044c319b4d7SVasiliy Kulikov } 1045c319b4d7SVasiliy Kulikov 1046c319b4d7SVasiliy Kulikov static struct sock *ping_get_idx(struct seq_file *seq, loff_t pos) 1047c319b4d7SVasiliy Kulikov { 1048c319b4d7SVasiliy Kulikov struct sock *sk = ping_get_first(seq, 0); 1049c319b4d7SVasiliy Kulikov 1050c319b4d7SVasiliy Kulikov if (sk) 1051c319b4d7SVasiliy Kulikov while (pos && (sk = ping_get_next(seq, sk)) != NULL) 1052c319b4d7SVasiliy Kulikov --pos; 1053c319b4d7SVasiliy Kulikov return pos ? NULL : sk; 1054c319b4d7SVasiliy Kulikov } 1055c319b4d7SVasiliy Kulikov 1056d862e546SLorenzo Colitti void *ping_seq_start(struct seq_file *seq, loff_t *pos, sa_family_t family) 1057c319b4d7SVasiliy Kulikov { 1058c319b4d7SVasiliy Kulikov struct ping_iter_state *state = seq->private; 1059c319b4d7SVasiliy Kulikov state->bucket = 0; 10608cc785f6SLorenzo Colitti state->family = family; 1061c319b4d7SVasiliy Kulikov 1062c319b4d7SVasiliy Kulikov read_lock_bh(&ping_table.lock); 1063c319b4d7SVasiliy Kulikov 1064c319b4d7SVasiliy Kulikov return *pos ? ping_get_idx(seq, *pos-1) : SEQ_START_TOKEN; 1065c319b4d7SVasiliy Kulikov } 1066d862e546SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_seq_start); 1067c319b4d7SVasiliy Kulikov 10688cc785f6SLorenzo Colitti static void *ping_v4_seq_start(struct seq_file *seq, loff_t *pos) 10698cc785f6SLorenzo Colitti { 10708cc785f6SLorenzo Colitti return ping_seq_start(seq, pos, AF_INET); 10718cc785f6SLorenzo Colitti } 10728cc785f6SLorenzo Colitti 1073d862e546SLorenzo Colitti void *ping_seq_next(struct seq_file *seq, void *v, loff_t *pos) 1074c319b4d7SVasiliy Kulikov { 1075c319b4d7SVasiliy Kulikov struct sock *sk; 1076c319b4d7SVasiliy Kulikov 1077c319b4d7SVasiliy Kulikov if (v == SEQ_START_TOKEN) 1078c319b4d7SVasiliy Kulikov sk = ping_get_idx(seq, 0); 1079c319b4d7SVasiliy Kulikov else 1080c319b4d7SVasiliy Kulikov sk = ping_get_next(seq, v); 1081c319b4d7SVasiliy Kulikov 1082c319b4d7SVasiliy Kulikov ++*pos; 1083c319b4d7SVasiliy Kulikov return sk; 1084c319b4d7SVasiliy Kulikov } 1085d862e546SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_seq_next); 1086c319b4d7SVasiliy Kulikov 1087d862e546SLorenzo Colitti void ping_seq_stop(struct seq_file *seq, void *v) 1088c319b4d7SVasiliy Kulikov { 1089c319b4d7SVasiliy Kulikov read_unlock_bh(&ping_table.lock); 1090c319b4d7SVasiliy Kulikov } 1091d862e546SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_seq_stop); 1092c319b4d7SVasiliy Kulikov 10938cc785f6SLorenzo Colitti static void ping_v4_format_sock(struct sock *sp, struct seq_file *f, 1094652586dfSTetsuo Handa int bucket) 1095c319b4d7SVasiliy Kulikov { 1096c319b4d7SVasiliy Kulikov struct inet_sock *inet = inet_sk(sp); 1097c319b4d7SVasiliy Kulikov __be32 dest = inet->inet_daddr; 1098c319b4d7SVasiliy Kulikov __be32 src = inet->inet_rcv_saddr; 1099c319b4d7SVasiliy Kulikov __u16 destp = ntohs(inet->inet_dport); 1100c319b4d7SVasiliy Kulikov __u16 srcp = ntohs(inet->inet_sport); 1101c319b4d7SVasiliy Kulikov 1102c319b4d7SVasiliy Kulikov seq_printf(f, "%5d: %08X:%04X %08X:%04X" 1103652586dfSTetsuo Handa " %02X %08X:%08X %02X:%08lX %08X %5u %8d %lu %d %pK %d", 1104c319b4d7SVasiliy Kulikov bucket, src, srcp, dest, destp, sp->sk_state, 1105c319b4d7SVasiliy Kulikov sk_wmem_alloc_get(sp), 1106c319b4d7SVasiliy Kulikov sk_rmem_alloc_get(sp), 1107a7cb5a49SEric W. Biederman 0, 0L, 0, 1108a7cb5a49SEric W. Biederman from_kuid_munged(seq_user_ns(f), sock_i_uid(sp)), 1109a7cb5a49SEric W. Biederman 0, sock_i_ino(sp), 1110c319b4d7SVasiliy Kulikov atomic_read(&sp->sk_refcnt), sp, 1111652586dfSTetsuo Handa atomic_read(&sp->sk_drops)); 1112c319b4d7SVasiliy Kulikov } 1113c319b4d7SVasiliy Kulikov 11148cc785f6SLorenzo Colitti static int ping_v4_seq_show(struct seq_file *seq, void *v) 1115c319b4d7SVasiliy Kulikov { 1116652586dfSTetsuo Handa seq_setwidth(seq, 127); 1117c319b4d7SVasiliy Kulikov if (v == SEQ_START_TOKEN) 1118652586dfSTetsuo Handa seq_puts(seq, " sl local_address rem_address st tx_queue " 1119c319b4d7SVasiliy Kulikov "rx_queue tr tm->when retrnsmt uid timeout " 1120c319b4d7SVasiliy Kulikov "inode ref pointer drops"); 1121c319b4d7SVasiliy Kulikov else { 1122c319b4d7SVasiliy Kulikov struct ping_iter_state *state = seq->private; 1123c319b4d7SVasiliy Kulikov 1124652586dfSTetsuo Handa ping_v4_format_sock(v, seq, state->bucket); 1125c319b4d7SVasiliy Kulikov } 1126652586dfSTetsuo Handa seq_pad(seq, '\n'); 1127c319b4d7SVasiliy Kulikov return 0; 1128c319b4d7SVasiliy Kulikov } 1129c319b4d7SVasiliy Kulikov 11308cc785f6SLorenzo Colitti static const struct seq_operations ping_v4_seq_ops = { 11318cc785f6SLorenzo Colitti .show = ping_v4_seq_show, 11328cc785f6SLorenzo Colitti .start = ping_v4_seq_start, 1133c319b4d7SVasiliy Kulikov .next = ping_seq_next, 1134c319b4d7SVasiliy Kulikov .stop = ping_seq_stop, 1135c319b4d7SVasiliy Kulikov }; 1136c319b4d7SVasiliy Kulikov 1137c319b4d7SVasiliy Kulikov static int ping_seq_open(struct inode *inode, struct file *file) 1138c319b4d7SVasiliy Kulikov { 11398cc785f6SLorenzo Colitti struct ping_seq_afinfo *afinfo = PDE_DATA(inode); 11408cc785f6SLorenzo Colitti return seq_open_net(inode, file, &afinfo->seq_ops, 1141c319b4d7SVasiliy Kulikov sizeof(struct ping_iter_state)); 1142c319b4d7SVasiliy Kulikov } 1143c319b4d7SVasiliy Kulikov 1144d862e546SLorenzo Colitti const struct file_operations ping_seq_fops = { 1145c319b4d7SVasiliy Kulikov .open = ping_seq_open, 1146c319b4d7SVasiliy Kulikov .read = seq_read, 1147c319b4d7SVasiliy Kulikov .llseek = seq_lseek, 1148c319b4d7SVasiliy Kulikov .release = seq_release_net, 1149c319b4d7SVasiliy Kulikov }; 1150d862e546SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_seq_fops); 1151c319b4d7SVasiliy Kulikov 11528cc785f6SLorenzo Colitti static struct ping_seq_afinfo ping_v4_seq_afinfo = { 11538cc785f6SLorenzo Colitti .name = "icmp", 11548cc785f6SLorenzo Colitti .family = AF_INET, 11558cc785f6SLorenzo Colitti .seq_fops = &ping_seq_fops, 11568cc785f6SLorenzo Colitti .seq_ops = { 11578cc785f6SLorenzo Colitti .start = ping_v4_seq_start, 11588cc785f6SLorenzo Colitti .show = ping_v4_seq_show, 11598cc785f6SLorenzo Colitti .next = ping_seq_next, 11608cc785f6SLorenzo Colitti .stop = ping_seq_stop, 11618cc785f6SLorenzo Colitti }, 11628cc785f6SLorenzo Colitti }; 11638cc785f6SLorenzo Colitti 1164d862e546SLorenzo Colitti int ping_proc_register(struct net *net, struct ping_seq_afinfo *afinfo) 1165c319b4d7SVasiliy Kulikov { 1166c319b4d7SVasiliy Kulikov struct proc_dir_entry *p; 11678cc785f6SLorenzo Colitti p = proc_create_data(afinfo->name, S_IRUGO, net->proc_net, 11688cc785f6SLorenzo Colitti afinfo->seq_fops, afinfo); 1169c319b4d7SVasiliy Kulikov if (!p) 11708cc785f6SLorenzo Colitti return -ENOMEM; 11718cc785f6SLorenzo Colitti return 0; 1172c319b4d7SVasiliy Kulikov } 1173d862e546SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_proc_register); 1174c319b4d7SVasiliy Kulikov 1175d862e546SLorenzo Colitti void ping_proc_unregister(struct net *net, struct ping_seq_afinfo *afinfo) 1176c319b4d7SVasiliy Kulikov { 11778cc785f6SLorenzo Colitti remove_proc_entry(afinfo->name, net->proc_net); 1178c319b4d7SVasiliy Kulikov } 1179d862e546SLorenzo Colitti EXPORT_SYMBOL_GPL(ping_proc_unregister); 1180c319b4d7SVasiliy Kulikov 11818cc785f6SLorenzo Colitti static int __net_init ping_v4_proc_init_net(struct net *net) 1182c319b4d7SVasiliy Kulikov { 11838cc785f6SLorenzo Colitti return ping_proc_register(net, &ping_v4_seq_afinfo); 1184c319b4d7SVasiliy Kulikov } 1185c319b4d7SVasiliy Kulikov 11868cc785f6SLorenzo Colitti static void __net_exit ping_v4_proc_exit_net(struct net *net) 1187c319b4d7SVasiliy Kulikov { 11888cc785f6SLorenzo Colitti ping_proc_unregister(net, &ping_v4_seq_afinfo); 1189c319b4d7SVasiliy Kulikov } 1190c319b4d7SVasiliy Kulikov 11918cc785f6SLorenzo Colitti static struct pernet_operations ping_v4_net_ops = { 11928cc785f6SLorenzo Colitti .init = ping_v4_proc_init_net, 11938cc785f6SLorenzo Colitti .exit = ping_v4_proc_exit_net, 1194c319b4d7SVasiliy Kulikov }; 1195c319b4d7SVasiliy Kulikov 1196c319b4d7SVasiliy Kulikov int __init ping_proc_init(void) 1197c319b4d7SVasiliy Kulikov { 11988cc785f6SLorenzo Colitti return register_pernet_subsys(&ping_v4_net_ops); 1199c319b4d7SVasiliy Kulikov } 1200c319b4d7SVasiliy Kulikov 1201c319b4d7SVasiliy Kulikov void ping_proc_exit(void) 1202c319b4d7SVasiliy Kulikov { 12038cc785f6SLorenzo Colitti unregister_pernet_subsys(&ping_v4_net_ops); 1204c319b4d7SVasiliy Kulikov } 1205c319b4d7SVasiliy Kulikov 1206c319b4d7SVasiliy Kulikov #endif 1207c319b4d7SVasiliy Kulikov 1208c319b4d7SVasiliy Kulikov void __init ping_init(void) 1209c319b4d7SVasiliy Kulikov { 1210c319b4d7SVasiliy Kulikov int i; 1211c319b4d7SVasiliy Kulikov 1212c319b4d7SVasiliy Kulikov for (i = 0; i < PING_HTABLE_SIZE; i++) 1213c319b4d7SVasiliy Kulikov INIT_HLIST_NULLS_HEAD(&ping_table.hash[i], i); 1214c319b4d7SVasiliy Kulikov rwlock_init(&ping_table.lock); 1215c319b4d7SVasiliy Kulikov } 1216