3 * Linux INET6 implementation
6 * Pedro Roque <roque@di.fc.ul.pt>
8 * Based on linux/ipv4/udp.c
11 * Hideaki YOSHIFUJI : sin6_scope_id support
12 * YOSHIFUJI Hideaki @USAGI and: Support IPV6_V6ONLY socket option, which
13 * Alexey Kuznetsov allow both IPv4 and IPv6 sockets to bind
14 * a single port at the same time.
15 * Kazunori MIYAZAWA @USAGI: change process style to use ip6_append_data
16 * YOSHIFUJI Hideaki @USAGI: convert /proc/net/udp6 to seq_file.
18 * This program is free software; you can redistribute it and/or
19 * modify it under the terms of the GNU General Public License
20 * as published by the Free Software Foundation; either version
21 * 2 of the License, or (at your option) any later version.
24 #include <linux/errno.h>
25 #include <linux/types.h>
26 #include <linux/socket.h>
27 #include <linux/sockios.h>
28 #include <linux/net.h>
29 #include <linux/in6.h>
30 #include <linux/netdevice.h>
31 #include <linux/if_arp.h>
32 #include <linux/ipv6.h>
33 #include <linux/icmpv6.h>
34 #include <linux/init.h>
35 #include <linux/module.h>
36 #include <linux/skbuff.h>
37 #include <linux/slab.h>
38 #include <asm/uaccess.h>
40 #include <net/addrconf.h>
41 #include <net/ndisc.h>
42 #include <net/protocol.h>
43 #include <net/transp_v6.h>
44 #include <net/ip6_route.h>
46 #include <net/tcp_states.h>
47 #include <net/ip6_checksum.h>
49 #include <net/inet6_hashtables.h>
50 #include <net/busy_poll.h>
51 #include <net/sock_reuseport.h>
53 #include <linux/proc_fs.h>
54 #include <linux/seq_file.h>
55 #include <trace/events/skb.h>
58 static u32
udp6_ehashfn(const struct net
*net
,
59 const struct in6_addr
*laddr
,
61 const struct in6_addr
*faddr
,
64 static u32 udp6_ehash_secret __read_mostly
;
65 static u32 udp_ipv6_hash_secret __read_mostly
;
69 net_get_random_once(&udp6_ehash_secret
,
70 sizeof(udp6_ehash_secret
));
71 net_get_random_once(&udp_ipv6_hash_secret
,
72 sizeof(udp_ipv6_hash_secret
));
74 lhash
= (__force u32
)laddr
->s6_addr32
[3];
75 fhash
= __ipv6_addr_jhash(faddr
, udp_ipv6_hash_secret
);
77 return __inet6_ehashfn(lhash
, lport
, fhash
, fport
,
78 udp_ipv6_hash_secret
+ net_hash_mix(net
));
81 static u32
udp6_portaddr_hash(const struct net
*net
,
82 const struct in6_addr
*addr6
,
85 unsigned int hash
, mix
= net_hash_mix(net
);
87 if (ipv6_addr_any(addr6
))
88 hash
= jhash_1word(0, mix
);
89 else if (ipv6_addr_v4mapped(addr6
))
90 hash
= jhash_1word((__force u32
)addr6
->s6_addr32
[3], mix
);
92 hash
= jhash2((__force u32
*)addr6
->s6_addr32
, 4, mix
);
97 int udp_v6_get_port(struct sock
*sk
, unsigned short snum
)
99 unsigned int hash2_nulladdr
=
100 udp6_portaddr_hash(sock_net(sk
), &in6addr_any
, snum
);
101 unsigned int hash2_partial
=
102 udp6_portaddr_hash(sock_net(sk
), &sk
->sk_v6_rcv_saddr
, 0);
104 /* precompute partial secondary hash */
105 udp_sk(sk
)->udp_portaddr_hash
= hash2_partial
;
106 return udp_lib_get_port(sk
, snum
, ipv6_rcv_saddr_equal
, hash2_nulladdr
);
109 static void udp_v6_rehash(struct sock
*sk
)
111 u16 new_hash
= udp6_portaddr_hash(sock_net(sk
),
112 &sk
->sk_v6_rcv_saddr
,
113 inet_sk(sk
)->inet_num
);
115 udp_lib_rehash(sk
, new_hash
);
118 static inline int compute_score(struct sock
*sk
, struct net
*net
,
120 const struct in6_addr
*saddr
, __be16 sport
,
121 const struct in6_addr
*daddr
, __be16 dport
,
125 struct inet_sock
*inet
;
127 if (!net_eq(sock_net(sk
), net
) ||
128 udp_sk(sk
)->udp_port_hash
!= hnum
||
129 sk
->sk_family
!= PF_INET6
)
135 if (inet
->inet_dport
) {
136 if (inet
->inet_dport
!= sport
)
141 if (!ipv6_addr_any(&sk
->sk_v6_rcv_saddr
)) {
142 if (!ipv6_addr_equal(&sk
->sk_v6_rcv_saddr
, daddr
))
147 if (!ipv6_addr_any(&sk
->sk_v6_daddr
)) {
148 if (!ipv6_addr_equal(&sk
->sk_v6_daddr
, saddr
))
153 if (sk
->sk_bound_dev_if
) {
154 if (sk
->sk_bound_dev_if
!= dif
)
159 if (sk
->sk_incoming_cpu
== raw_smp_processor_id())
165 static inline int compute_score2(struct sock
*sk
, struct net
*net
,
166 const struct in6_addr
*saddr
, __be16 sport
,
167 const struct in6_addr
*daddr
,
168 unsigned short hnum
, int dif
)
171 struct inet_sock
*inet
;
173 if (!net_eq(sock_net(sk
), net
) ||
174 udp_sk(sk
)->udp_port_hash
!= hnum
||
175 sk
->sk_family
!= PF_INET6
)
178 if (!ipv6_addr_equal(&sk
->sk_v6_rcv_saddr
, daddr
))
184 if (inet
->inet_dport
) {
185 if (inet
->inet_dport
!= sport
)
190 if (!ipv6_addr_any(&sk
->sk_v6_daddr
)) {
191 if (!ipv6_addr_equal(&sk
->sk_v6_daddr
, saddr
))
196 if (sk
->sk_bound_dev_if
) {
197 if (sk
->sk_bound_dev_if
!= dif
)
202 if (sk
->sk_incoming_cpu
== raw_smp_processor_id())
208 /* called with read_rcu_lock() */
209 static struct sock
*udp6_lib_lookup2(struct net
*net
,
210 const struct in6_addr
*saddr
, __be16 sport
,
211 const struct in6_addr
*daddr
, unsigned int hnum
, int dif
,
212 struct udp_hslot
*hslot2
, unsigned int slot2
,
215 struct sock
*sk
, *result
;
216 int score
, badness
, matches
= 0, reuseport
= 0;
221 udp_portaddr_for_each_entry_rcu(sk
, &hslot2
->head
) {
222 score
= compute_score2(sk
, net
, saddr
, sport
,
224 if (score
> badness
) {
225 reuseport
= sk
->sk_reuseport
;
227 hash
= udp6_ehashfn(net
, daddr
, hnum
,
230 result
= reuseport_select_sock(sk
, hash
, skb
,
231 sizeof(struct udphdr
));
238 } else if (score
== badness
&& reuseport
) {
240 if (reciprocal_scale(hash
, matches
) == 0)
242 hash
= next_pseudo_random32(hash
);
248 /* rcu_read_lock() must be held */
249 struct sock
*__udp6_lib_lookup(struct net
*net
,
250 const struct in6_addr
*saddr
, __be16 sport
,
251 const struct in6_addr
*daddr
, __be16 dport
,
252 int dif
, struct udp_table
*udptable
,
255 struct sock
*sk
, *result
;
256 unsigned short hnum
= ntohs(dport
);
257 unsigned int hash2
, slot2
, slot
= udp_hashfn(net
, hnum
, udptable
->mask
);
258 struct udp_hslot
*hslot2
, *hslot
= &udptable
->hash
[slot
];
259 int score
, badness
, matches
= 0, reuseport
= 0;
262 if (hslot
->count
> 10) {
263 hash2
= udp6_portaddr_hash(net
, daddr
, hnum
);
264 slot2
= hash2
& udptable
->mask
;
265 hslot2
= &udptable
->hash2
[slot2
];
266 if (hslot
->count
< hslot2
->count
)
269 result
= udp6_lib_lookup2(net
, saddr
, sport
,
273 hash2
= udp6_portaddr_hash(net
, &in6addr_any
, hnum
);
274 slot2
= hash2
& udptable
->mask
;
275 hslot2
= &udptable
->hash2
[slot2
];
276 if (hslot
->count
< hslot2
->count
)
279 result
= udp6_lib_lookup2(net
, saddr
, sport
,
280 &in6addr_any
, hnum
, dif
,
288 sk_for_each_rcu(sk
, &hslot
->head
) {
289 score
= compute_score(sk
, net
, hnum
, saddr
, sport
, daddr
, dport
, dif
);
290 if (score
> badness
) {
291 reuseport
= sk
->sk_reuseport
;
293 hash
= udp6_ehashfn(net
, daddr
, hnum
,
295 result
= reuseport_select_sock(sk
, hash
, skb
,
296 sizeof(struct udphdr
));
303 } else if (score
== badness
&& reuseport
) {
305 if (reciprocal_scale(hash
, matches
) == 0)
307 hash
= next_pseudo_random32(hash
);
312 EXPORT_SYMBOL_GPL(__udp6_lib_lookup
);
314 static struct sock
*__udp6_lib_lookup_skb(struct sk_buff
*skb
,
315 __be16 sport
, __be16 dport
,
316 struct udp_table
*udptable
)
318 const struct ipv6hdr
*iph
= ipv6_hdr(skb
);
321 sk
= skb_steal_sock(skb
);
324 return __udp6_lib_lookup(dev_net(skb
->dev
), &iph
->saddr
, sport
,
325 &iph
->daddr
, dport
, inet6_iif(skb
),
329 struct sock
*udp6_lib_lookup_skb(struct sk_buff
*skb
,
330 __be16 sport
, __be16 dport
)
332 const struct ipv6hdr
*iph
= ipv6_hdr(skb
);
334 return __udp6_lib_lookup(dev_net(skb
->dev
), &iph
->saddr
, sport
,
335 &iph
->daddr
, dport
, inet6_iif(skb
),
338 EXPORT_SYMBOL_GPL(udp6_lib_lookup_skb
);
340 /* Must be called under rcu_read_lock().
341 * Does increment socket refcount.
343 #if IS_ENABLED(CONFIG_NETFILTER_XT_MATCH_SOCKET) || \
344 IS_ENABLED(CONFIG_NETFILTER_XT_TARGET_TPROXY)
345 struct sock
*udp6_lib_lookup(struct net
*net
, const struct in6_addr
*saddr
, __be16 sport
,
346 const struct in6_addr
*daddr
, __be16 dport
, int dif
)
350 sk
= __udp6_lib_lookup(net
, saddr
, sport
, daddr
, dport
,
351 dif
, &udp_table
, NULL
);
352 if (sk
&& !atomic_inc_not_zero(&sk
->sk_refcnt
))
356 EXPORT_SYMBOL_GPL(udp6_lib_lookup
);
360 * This should be easy, if there is something there we
361 * return it, otherwise we block.
364 int udpv6_recvmsg(struct sock
*sk
, struct msghdr
*msg
, size_t len
,
365 int noblock
, int flags
, int *addr_len
)
367 struct ipv6_pinfo
*np
= inet6_sk(sk
);
368 struct inet_sock
*inet
= inet_sk(sk
);
370 unsigned int ulen
, copied
;
371 int peeked
, peeking
, off
;
373 int is_udplite
= IS_UDPLITE(sk
);
374 bool checksum_valid
= false;
378 if (flags
& MSG_ERRQUEUE
)
379 return ipv6_recv_error(sk
, msg
, len
, addr_len
);
381 if (np
->rxpmtu
&& np
->rxopt
.bits
.rxpmtu
)
382 return ipv6_recv_rxpmtu(sk
, msg
, len
, addr_len
);
385 peeking
= off
= sk_peek_offset(sk
, flags
);
386 skb
= __skb_recv_datagram(sk
, flags
| (noblock
? MSG_DONTWAIT
: 0),
387 &peeked
, &off
, &err
);
393 if (copied
> ulen
- off
)
395 else if (copied
< ulen
)
396 msg
->msg_flags
|= MSG_TRUNC
;
398 is_udp4
= (skb
->protocol
== htons(ETH_P_IP
));
401 * If checksum is needed at all, try to do it while copying the
402 * data. If the data is truncated, or if we only want a partial
403 * coverage checksum (UDP-Lite), do it before the copy.
406 if (copied
< ulen
|| UDP_SKB_CB(skb
)->partial_cov
|| peeking
) {
407 checksum_valid
= !udp_lib_checksum_complete(skb
);
412 if (checksum_valid
|| skb_csum_unnecessary(skb
))
413 err
= skb_copy_datagram_msg(skb
, off
, msg
, copied
);
415 err
= skb_copy_and_csum_datagram_msg(skb
, off
, msg
);
420 trace_kfree_skb(skb
, udpv6_recvmsg
);
422 atomic_inc(&sk
->sk_drops
);
424 UDP_INC_STATS(sock_net(sk
), UDP_MIB_INERRORS
,
427 UDP6_INC_STATS(sock_net(sk
), UDP_MIB_INERRORS
,
430 skb_free_datagram_locked(sk
, skb
);
435 UDP_INC_STATS(sock_net(sk
), UDP_MIB_INDATAGRAMS
,
438 UDP6_INC_STATS(sock_net(sk
), UDP_MIB_INDATAGRAMS
,
442 sock_recv_ts_and_drops(msg
, sk
, skb
);
444 /* Copy the address. */
446 DECLARE_SOCKADDR(struct sockaddr_in6
*, sin6
, msg
->msg_name
);
447 sin6
->sin6_family
= AF_INET6
;
448 sin6
->sin6_port
= udp_hdr(skb
)->source
;
449 sin6
->sin6_flowinfo
= 0;
452 ipv6_addr_set_v4mapped(ip_hdr(skb
)->saddr
,
454 sin6
->sin6_scope_id
= 0;
456 sin6
->sin6_addr
= ipv6_hdr(skb
)->saddr
;
457 sin6
->sin6_scope_id
=
458 ipv6_iface_scope_id(&sin6
->sin6_addr
,
461 *addr_len
= sizeof(*sin6
);
465 ip6_datagram_recv_common_ctl(sk
, msg
, skb
);
468 if (inet
->cmsg_flags
)
469 ip_cmsg_recv(msg
, skb
);
472 ip6_datagram_recv_specific_ctl(sk
, msg
, skb
);
476 if (flags
& MSG_TRUNC
)
479 __skb_free_datagram_locked(sk
, skb
, peeking
? -err
: err
);
483 slow
= lock_sock_fast(sk
);
484 if (!skb_kill_datagram(sk
, skb
, flags
)) {
486 UDP_INC_STATS(sock_net(sk
),
487 UDP_MIB_CSUMERRORS
, is_udplite
);
488 UDP_INC_STATS(sock_net(sk
),
489 UDP_MIB_INERRORS
, is_udplite
);
491 UDP6_INC_STATS(sock_net(sk
),
492 UDP_MIB_CSUMERRORS
, is_udplite
);
493 UDP6_INC_STATS(sock_net(sk
),
494 UDP_MIB_INERRORS
, is_udplite
);
497 unlock_sock_fast(sk
, slow
);
499 /* starting over for a new packet, but check if we need to yield */
501 msg
->msg_flags
&= ~MSG_TRUNC
;
505 void __udp6_lib_err(struct sk_buff
*skb
, struct inet6_skb_parm
*opt
,
506 u8 type
, u8 code
, int offset
, __be32 info
,
507 struct udp_table
*udptable
)
509 struct ipv6_pinfo
*np
;
510 const struct ipv6hdr
*hdr
= (const struct ipv6hdr
*)skb
->data
;
511 const struct in6_addr
*saddr
= &hdr
->saddr
;
512 const struct in6_addr
*daddr
= &hdr
->daddr
;
513 struct udphdr
*uh
= (struct udphdr
*)(skb
->data
+offset
);
517 struct net
*net
= dev_net(skb
->dev
);
519 sk
= __udp6_lib_lookup(net
, daddr
, uh
->dest
, saddr
, uh
->source
,
520 inet6_iif(skb
), udptable
, skb
);
522 __ICMP6_INC_STATS(net
, __in6_dev_get(skb
->dev
),
527 harderr
= icmpv6_err_convert(type
, code
, &err
);
530 if (type
== ICMPV6_PKT_TOOBIG
) {
531 if (!ip6_sk_accept_pmtu(sk
))
533 ip6_sk_update_pmtu(skb
, sk
, info
);
534 if (np
->pmtudisc
!= IPV6_PMTUDISC_DONT
)
537 if (type
== NDISC_REDIRECT
) {
538 ip6_sk_redirect(skb
, sk
);
543 if (!harderr
|| sk
->sk_state
!= TCP_ESTABLISHED
)
546 ipv6_icmp_error(sk
, skb
, err
, uh
->dest
, ntohl(info
), (u8
*)(uh
+1));
550 sk
->sk_error_report(sk
);
555 static int __udpv6_queue_rcv_skb(struct sock
*sk
, struct sk_buff
*skb
)
559 if (!ipv6_addr_any(&sk
->sk_v6_daddr
)) {
560 sock_rps_save_rxhash(sk
, skb
);
561 sk_mark_napi_id(sk
, skb
);
562 sk_incoming_cpu_update(sk
);
565 rc
= __sock_queue_rcv_skb(sk
, skb
);
567 int is_udplite
= IS_UDPLITE(sk
);
569 /* Note that an ENOMEM error is charged twice */
571 UDP6_INC_STATS(sock_net(sk
),
572 UDP_MIB_RCVBUFERRORS
, is_udplite
);
573 UDP6_INC_STATS(sock_net(sk
), UDP_MIB_INERRORS
, is_udplite
);
580 static __inline__
void udpv6_err(struct sk_buff
*skb
,
581 struct inet6_skb_parm
*opt
, u8 type
,
582 u8 code
, int offset
, __be32 info
)
584 __udp6_lib_err(skb
, opt
, type
, code
, offset
, info
, &udp_table
);
587 static struct static_key udpv6_encap_needed __read_mostly
;
588 void udpv6_encap_enable(void)
590 if (!static_key_enabled(&udpv6_encap_needed
))
591 static_key_slow_inc(&udpv6_encap_needed
);
593 EXPORT_SYMBOL(udpv6_encap_enable
);
595 int udpv6_queue_rcv_skb(struct sock
*sk
, struct sk_buff
*skb
)
597 struct udp_sock
*up
= udp_sk(sk
);
599 int is_udplite
= IS_UDPLITE(sk
);
601 if (!xfrm6_policy_check(sk
, XFRM_POLICY_IN
, skb
))
604 if (static_key_false(&udpv6_encap_needed
) && up
->encap_type
) {
605 int (*encap_rcv
)(struct sock
*sk
, struct sk_buff
*skb
);
608 * This is an encapsulation socket so pass the skb to
609 * the socket's udp_encap_rcv() hook. Otherwise, just
610 * fall through and pass this up the UDP socket.
611 * up->encap_rcv() returns the following value:
612 * =0 if skb was successfully passed to the encap
613 * handler or was discarded by it.
614 * >0 if skb should be passed on to UDP.
615 * <0 if skb should be resubmitted as proto -N
618 /* if we're overly short, let UDP handle it */
619 encap_rcv
= ACCESS_ONCE(up
->encap_rcv
);
623 /* Verify checksum before giving to encap */
624 if (udp_lib_checksum_complete(skb
))
627 ret
= encap_rcv(sk
, skb
);
629 __UDP_INC_STATS(sock_net(sk
),
636 /* FALLTHROUGH -- it's a UDP Packet */
640 * UDP-Lite specific tests, ignored on UDP sockets (see net/ipv4/udp.c).
642 if ((is_udplite
& UDPLITE_RECV_CC
) && UDP_SKB_CB(skb
)->partial_cov
) {
644 if (up
->pcrlen
== 0) { /* full coverage was set */
645 net_dbg_ratelimited("UDPLITE6: partial coverage %d while full coverage %d requested\n",
646 UDP_SKB_CB(skb
)->cscov
, skb
->len
);
649 if (UDP_SKB_CB(skb
)->cscov
< up
->pcrlen
) {
650 net_dbg_ratelimited("UDPLITE6: coverage %d too small, need min %d\n",
651 UDP_SKB_CB(skb
)->cscov
, up
->pcrlen
);
656 if (rcu_access_pointer(sk
->sk_filter
)) {
657 if (udp_lib_checksum_complete(skb
))
659 if (sk_filter(sk
, skb
))
663 udp_csum_pull_header(skb
);
664 if (sk_rcvqueues_full(sk
, sk
->sk_rcvbuf
)) {
665 __UDP6_INC_STATS(sock_net(sk
),
666 UDP_MIB_RCVBUFERRORS
, is_udplite
);
674 if (!sock_owned_by_user(sk
))
675 rc
= __udpv6_queue_rcv_skb(sk
, skb
);
676 else if (sk_add_backlog(sk
, skb
, sk
->sk_rcvbuf
)) {
685 __UDP6_INC_STATS(sock_net(sk
), UDP_MIB_CSUMERRORS
, is_udplite
);
687 __UDP6_INC_STATS(sock_net(sk
), UDP_MIB_INERRORS
, is_udplite
);
688 atomic_inc(&sk
->sk_drops
);
693 static bool __udp_v6_is_mcast_sock(struct net
*net
, struct sock
*sk
,
694 __be16 loc_port
, const struct in6_addr
*loc_addr
,
695 __be16 rmt_port
, const struct in6_addr
*rmt_addr
,
696 int dif
, unsigned short hnum
)
698 struct inet_sock
*inet
= inet_sk(sk
);
700 if (!net_eq(sock_net(sk
), net
))
703 if (udp_sk(sk
)->udp_port_hash
!= hnum
||
704 sk
->sk_family
!= PF_INET6
||
705 (inet
->inet_dport
&& inet
->inet_dport
!= rmt_port
) ||
706 (!ipv6_addr_any(&sk
->sk_v6_daddr
) &&
707 !ipv6_addr_equal(&sk
->sk_v6_daddr
, rmt_addr
)) ||
708 (sk
->sk_bound_dev_if
&& sk
->sk_bound_dev_if
!= dif
) ||
709 (!ipv6_addr_any(&sk
->sk_v6_rcv_saddr
) &&
710 !ipv6_addr_equal(&sk
->sk_v6_rcv_saddr
, loc_addr
)))
712 if (!inet6_mc_check(sk
, loc_addr
, rmt_addr
))
717 static void udp6_csum_zero_error(struct sk_buff
*skb
)
719 /* RFC 2460 section 8.1 says that we SHOULD log
720 * this error. Well, it is reasonable.
722 net_dbg_ratelimited("IPv6: udp checksum is 0 for [%pI6c]:%u->[%pI6c]:%u\n",
723 &ipv6_hdr(skb
)->saddr
, ntohs(udp_hdr(skb
)->source
),
724 &ipv6_hdr(skb
)->daddr
, ntohs(udp_hdr(skb
)->dest
));
728 * Note: called only from the BH handler context,
729 * so we don't need to lock the hashes.
731 static int __udp6_lib_mcast_deliver(struct net
*net
, struct sk_buff
*skb
,
732 const struct in6_addr
*saddr
, const struct in6_addr
*daddr
,
733 struct udp_table
*udptable
, int proto
)
735 struct sock
*sk
, *first
= NULL
;
736 const struct udphdr
*uh
= udp_hdr(skb
);
737 unsigned short hnum
= ntohs(uh
->dest
);
738 struct udp_hslot
*hslot
= udp_hashslot(udptable
, net
, hnum
);
739 unsigned int offset
= offsetof(typeof(*sk
), sk_node
);
740 unsigned int hash2
= 0, hash2_any
= 0, use_hash2
= (hslot
->count
> 10);
741 int dif
= inet6_iif(skb
);
742 struct hlist_node
*node
;
743 struct sk_buff
*nskb
;
746 hash2_any
= udp6_portaddr_hash(net
, &in6addr_any
, hnum
) &
748 hash2
= udp6_portaddr_hash(net
, daddr
, hnum
) & udp_table
.mask
;
750 hslot
= &udp_table
.hash2
[hash2
];
751 offset
= offsetof(typeof(*sk
), __sk_common
.skc_portaddr_node
);
754 sk_for_each_entry_offset_rcu(sk
, node
, &hslot
->head
, offset
) {
755 if (!__udp_v6_is_mcast_sock(net
, sk
, uh
->dest
, daddr
,
756 uh
->source
, saddr
, dif
, hnum
))
758 /* If zero checksum and no_check is not on for
759 * the socket then skip it.
761 if (!uh
->check
&& !udp_sk(sk
)->no_check6_rx
)
767 nskb
= skb_clone(skb
, GFP_ATOMIC
);
768 if (unlikely(!nskb
)) {
769 atomic_inc(&sk
->sk_drops
);
770 __UDP6_INC_STATS(net
, UDP_MIB_RCVBUFERRORS
,
772 __UDP6_INC_STATS(net
, UDP_MIB_INERRORS
,
777 if (udpv6_queue_rcv_skb(sk
, nskb
) > 0)
781 /* Also lookup *:port if we are using hash2 and haven't done so yet. */
782 if (use_hash2
&& hash2
!= hash2_any
) {
788 if (udpv6_queue_rcv_skb(first
, skb
) > 0)
792 __UDP6_INC_STATS(net
, UDP_MIB_IGNOREDMULTI
,
793 proto
== IPPROTO_UDPLITE
);
798 int __udp6_lib_rcv(struct sk_buff
*skb
, struct udp_table
*udptable
,
801 const struct in6_addr
*saddr
, *daddr
;
802 struct net
*net
= dev_net(skb
->dev
);
807 if (!pskb_may_pull(skb
, sizeof(struct udphdr
)))
810 saddr
= &ipv6_hdr(skb
)->saddr
;
811 daddr
= &ipv6_hdr(skb
)->daddr
;
814 ulen
= ntohs(uh
->len
);
818 if (proto
== IPPROTO_UDP
) {
819 /* UDP validates ulen. */
821 /* Check for jumbo payload */
825 if (ulen
< sizeof(*uh
))
828 if (ulen
< skb
->len
) {
829 if (pskb_trim_rcsum(skb
, ulen
))
831 saddr
= &ipv6_hdr(skb
)->saddr
;
832 daddr
= &ipv6_hdr(skb
)->daddr
;
837 if (udp6_csum_init(skb
, uh
, proto
))
841 * Multicast receive code
843 if (ipv6_addr_is_multicast(daddr
))
844 return __udp6_lib_mcast_deliver(net
, skb
,
845 saddr
, daddr
, udptable
, proto
);
850 * check socket cache ... must talk to Alan about his plans
851 * for sock caches... i'll skip this for now.
853 sk
= __udp6_lib_lookup_skb(skb
, uh
->source
, uh
->dest
, udptable
);
857 if (!uh
->check
&& !udp_sk(sk
)->no_check6_rx
) {
858 udp6_csum_zero_error(skb
);
862 if (inet_get_convert_csum(sk
) && uh
->check
&& !IS_UDPLITE(sk
))
863 skb_checksum_try_convert(skb
, IPPROTO_UDP
, uh
->check
,
866 ret
= udpv6_queue_rcv_skb(sk
, skb
);
868 /* a return value > 0 means to resubmit the input */
876 udp6_csum_zero_error(skb
);
880 if (!xfrm6_policy_check(NULL
, XFRM_POLICY_IN
, skb
))
883 if (udp_lib_checksum_complete(skb
))
886 __UDP6_INC_STATS(net
, UDP_MIB_NOPORTS
, proto
== IPPROTO_UDPLITE
);
887 icmpv6_send(skb
, ICMPV6_DEST_UNREACH
, ICMPV6_PORT_UNREACH
, 0);
893 net_dbg_ratelimited("UDP%sv6: short packet: From [%pI6c]:%u %d/%d to [%pI6c]:%u\n",
894 proto
== IPPROTO_UDPLITE
? "-Lite" : "",
895 saddr
, ntohs(uh
->source
),
897 daddr
, ntohs(uh
->dest
));
900 __UDP6_INC_STATS(net
, UDP_MIB_CSUMERRORS
, proto
== IPPROTO_UDPLITE
);
902 __UDP6_INC_STATS(net
, UDP_MIB_INERRORS
, proto
== IPPROTO_UDPLITE
);
907 static __inline__
int udpv6_rcv(struct sk_buff
*skb
)
909 return __udp6_lib_rcv(skb
, &udp_table
, IPPROTO_UDP
);
913 * Throw away all pending data and cancel the corking. Socket is locked.
915 static void udp_v6_flush_pending_frames(struct sock
*sk
)
917 struct udp_sock
*up
= udp_sk(sk
);
919 if (up
->pending
== AF_INET
)
920 udp_flush_pending_frames(sk
);
921 else if (up
->pending
) {
924 ip6_flush_pending_frames(sk
);
929 * udp6_hwcsum_outgoing - handle outgoing HW checksumming
930 * @sk: socket we are sending on
931 * @skb: sk_buff containing the filled-in UDP header
932 * (checksum field must be zeroed out)
934 static void udp6_hwcsum_outgoing(struct sock
*sk
, struct sk_buff
*skb
,
935 const struct in6_addr
*saddr
,
936 const struct in6_addr
*daddr
, int len
)
939 struct udphdr
*uh
= udp_hdr(skb
);
940 struct sk_buff
*frags
= skb_shinfo(skb
)->frag_list
;
944 /* Only one fragment on the socket. */
945 skb
->csum_start
= skb_transport_header(skb
) - skb
->head
;
946 skb
->csum_offset
= offsetof(struct udphdr
, check
);
947 uh
->check
= ~csum_ipv6_magic(saddr
, daddr
, len
, IPPROTO_UDP
, 0);
950 * HW-checksum won't work as there are two or more
951 * fragments on the socket so that all csums of sk_buffs
954 offset
= skb_transport_offset(skb
);
955 skb
->csum
= skb_checksum(skb
, offset
, skb
->len
- offset
, 0);
957 skb
->ip_summed
= CHECKSUM_NONE
;
960 csum
= csum_add(csum
, frags
->csum
);
961 } while ((frags
= frags
->next
));
963 uh
->check
= csum_ipv6_magic(saddr
, daddr
, len
, IPPROTO_UDP
,
966 uh
->check
= CSUM_MANGLED_0
;
974 static int udp_v6_send_skb(struct sk_buff
*skb
, struct flowi6
*fl6
)
976 struct sock
*sk
= skb
->sk
;
979 int is_udplite
= IS_UDPLITE(sk
);
981 int offset
= skb_transport_offset(skb
);
982 int len
= skb
->len
- offset
;
985 * Create a UDP header
988 uh
->source
= fl6
->fl6_sport
;
989 uh
->dest
= fl6
->fl6_dport
;
990 uh
->len
= htons(len
);
994 csum
= udplite_csum(skb
);
995 else if (udp_sk(sk
)->no_check6_tx
) { /* UDP csum disabled */
996 skb
->ip_summed
= CHECKSUM_NONE
;
998 } else if (skb
->ip_summed
== CHECKSUM_PARTIAL
) { /* UDP hardware csum */
999 udp6_hwcsum_outgoing(sk
, skb
, &fl6
->saddr
, &fl6
->daddr
, len
);
1002 csum
= udp_csum(skb
);
1004 /* add protocol-dependent pseudo-header */
1005 uh
->check
= csum_ipv6_magic(&fl6
->saddr
, &fl6
->daddr
,
1006 len
, fl6
->flowi6_proto
, csum
);
1008 uh
->check
= CSUM_MANGLED_0
;
1011 err
= ip6_send_skb(skb
);
1013 if (err
== -ENOBUFS
&& !inet6_sk(sk
)->recverr
) {
1014 UDP6_INC_STATS(sock_net(sk
),
1015 UDP_MIB_SNDBUFERRORS
, is_udplite
);
1019 UDP6_INC_STATS(sock_net(sk
),
1020 UDP_MIB_OUTDATAGRAMS
, is_udplite
);
1025 static int udp_v6_push_pending_frames(struct sock
*sk
)
1027 struct sk_buff
*skb
;
1028 struct udp_sock
*up
= udp_sk(sk
);
1032 if (up
->pending
== AF_INET
)
1033 return udp_push_pending_frames(sk
);
1035 /* ip6_finish_skb will release the cork, so make a copy of
1038 fl6
= inet_sk(sk
)->cork
.fl
.u
.ip6
;
1040 skb
= ip6_finish_skb(sk
);
1044 err
= udp_v6_send_skb(skb
, &fl6
);
1052 int udpv6_sendmsg(struct sock
*sk
, struct msghdr
*msg
, size_t len
)
1054 struct ipv6_txoptions opt_space
;
1055 struct udp_sock
*up
= udp_sk(sk
);
1056 struct inet_sock
*inet
= inet_sk(sk
);
1057 struct ipv6_pinfo
*np
= inet6_sk(sk
);
1058 DECLARE_SOCKADDR(struct sockaddr_in6
*, sin6
, msg
->msg_name
);
1059 struct in6_addr
*daddr
, *final_p
, final
;
1060 struct ipv6_txoptions
*opt
= NULL
;
1061 struct ipv6_txoptions
*opt_to_free
= NULL
;
1062 struct ip6_flowlabel
*flowlabel
= NULL
;
1064 struct dst_entry
*dst
;
1065 struct ipcm6_cookie ipc6
;
1066 int addr_len
= msg
->msg_namelen
;
1068 int corkreq
= up
->corkflag
|| msg
->msg_flags
&MSG_MORE
;
1071 int is_udplite
= IS_UDPLITE(sk
);
1072 int (*getfrag
)(void *, char *, int, int, int, struct sk_buff
*);
1073 struct sockcm_cookie sockc
;
1079 /* destination address check */
1081 if (addr_len
< offsetof(struct sockaddr
, sa_data
))
1084 switch (sin6
->sin6_family
) {
1086 if (addr_len
< SIN6_LEN_RFC2133
)
1088 daddr
= &sin6
->sin6_addr
;
1091 goto do_udp_sendmsg
;
1093 msg
->msg_name
= sin6
= NULL
;
1094 msg
->msg_namelen
= addr_len
= 0;
1100 } else if (!up
->pending
) {
1101 if (sk
->sk_state
!= TCP_ESTABLISHED
)
1102 return -EDESTADDRREQ
;
1103 daddr
= &sk
->sk_v6_daddr
;
1108 if (ipv6_addr_v4mapped(daddr
)) {
1109 struct sockaddr_in sin
;
1110 sin
.sin_family
= AF_INET
;
1111 sin
.sin_port
= sin6
? sin6
->sin6_port
: inet
->inet_dport
;
1112 sin
.sin_addr
.s_addr
= daddr
->s6_addr32
[3];
1113 msg
->msg_name
= &sin
;
1114 msg
->msg_namelen
= sizeof(sin
);
1116 if (__ipv6_only_sock(sk
))
1117 return -ENETUNREACH
;
1118 return udp_sendmsg(sk
, msg
, len
);
1122 if (up
->pending
== AF_INET
)
1123 return udp_sendmsg(sk
, msg
, len
);
1125 /* Rough check on arithmetic overflow,
1126 better check is made in ip6_append_data().
1128 if (len
> INT_MAX
- sizeof(struct udphdr
))
1131 getfrag
= is_udplite
? udplite_getfrag
: ip_generic_getfrag
;
1134 * There are pending frames.
1135 * The socket lock must be held while it's corked.
1138 if (likely(up
->pending
)) {
1139 if (unlikely(up
->pending
!= AF_INET6
)) {
1141 return -EAFNOSUPPORT
;
1144 goto do_append_data
;
1148 ulen
+= sizeof(struct udphdr
);
1150 memset(&fl6
, 0, sizeof(fl6
));
1153 if (sin6
->sin6_port
== 0)
1156 fl6
.fl6_dport
= sin6
->sin6_port
;
1157 daddr
= &sin6
->sin6_addr
;
1160 fl6
.flowlabel
= sin6
->sin6_flowinfo
&IPV6_FLOWINFO_MASK
;
1161 if (fl6
.flowlabel
&IPV6_FLOWLABEL_MASK
) {
1162 flowlabel
= fl6_sock_lookup(sk
, fl6
.flowlabel
);
1169 * Otherwise it will be difficult to maintain
1172 if (sk
->sk_state
== TCP_ESTABLISHED
&&
1173 ipv6_addr_equal(daddr
, &sk
->sk_v6_daddr
))
1174 daddr
= &sk
->sk_v6_daddr
;
1176 if (addr_len
>= sizeof(struct sockaddr_in6
) &&
1177 sin6
->sin6_scope_id
&&
1178 __ipv6_addr_needs_scope_id(__ipv6_addr_type(daddr
)))
1179 fl6
.flowi6_oif
= sin6
->sin6_scope_id
;
1181 if (sk
->sk_state
!= TCP_ESTABLISHED
)
1182 return -EDESTADDRREQ
;
1184 fl6
.fl6_dport
= inet
->inet_dport
;
1185 daddr
= &sk
->sk_v6_daddr
;
1186 fl6
.flowlabel
= np
->flow_label
;
1190 if (!fl6
.flowi6_oif
)
1191 fl6
.flowi6_oif
= sk
->sk_bound_dev_if
;
1193 if (!fl6
.flowi6_oif
)
1194 fl6
.flowi6_oif
= np
->sticky_pktinfo
.ipi6_ifindex
;
1196 fl6
.flowi6_mark
= sk
->sk_mark
;
1197 sockc
.tsflags
= sk
->sk_tsflags
;
1199 if (msg
->msg_controllen
) {
1201 memset(opt
, 0, sizeof(struct ipv6_txoptions
));
1202 opt
->tot_len
= sizeof(*opt
);
1205 err
= ip6_datagram_send_ctl(sock_net(sk
), sk
, msg
, &fl6
, &ipc6
, &sockc
);
1207 fl6_sock_release(flowlabel
);
1210 if ((fl6
.flowlabel
&IPV6_FLOWLABEL_MASK
) && !flowlabel
) {
1211 flowlabel
= fl6_sock_lookup(sk
, fl6
.flowlabel
);
1215 if (!(opt
->opt_nflen
|opt
->opt_flen
))
1220 opt
= txopt_get(np
);
1224 opt
= fl6_merge_options(&opt_space
, flowlabel
, opt
);
1225 opt
= ipv6_fixup_options(&opt_space
, opt
);
1228 fl6
.flowi6_proto
= sk
->sk_protocol
;
1229 if (!ipv6_addr_any(daddr
))
1232 fl6
.daddr
.s6_addr
[15] = 0x1; /* :: means loopback (BSD'ism) */
1233 if (ipv6_addr_any(&fl6
.saddr
) && !ipv6_addr_any(&np
->saddr
))
1234 fl6
.saddr
= np
->saddr
;
1235 fl6
.fl6_sport
= inet
->inet_sport
;
1237 final_p
= fl6_update_dst(&fl6
, opt
, &final
);
1241 if (!fl6
.flowi6_oif
&& ipv6_addr_is_multicast(&fl6
.daddr
)) {
1242 fl6
.flowi6_oif
= np
->mcast_oif
;
1244 } else if (!fl6
.flowi6_oif
)
1245 fl6
.flowi6_oif
= np
->ucast_oif
;
1247 security_sk_classify_flow(sk
, flowi6_to_flowi(&fl6
));
1249 dst
= ip6_sk_dst_lookup_flow(sk
, &fl6
, final_p
);
1256 if (ipc6
.hlimit
< 0)
1257 ipc6
.hlimit
= ip6_sk_dst_hoplimit(np
, &fl6
, dst
);
1259 if (ipc6
.tclass
< 0)
1260 ipc6
.tclass
= np
->tclass
;
1262 if (msg
->msg_flags
&MSG_CONFIRM
)
1266 /* Lockless fast path for the non-corking case */
1268 struct sk_buff
*skb
;
1270 skb
= ip6_make_skb(sk
, getfrag
, msg
, ulen
,
1271 sizeof(struct udphdr
), &ipc6
,
1272 &fl6
, (struct rt6_info
*)dst
,
1273 msg
->msg_flags
, &sockc
);
1275 if (!IS_ERR_OR_NULL(skb
))
1276 err
= udp_v6_send_skb(skb
, &fl6
);
1281 if (unlikely(up
->pending
)) {
1282 /* The socket is already corked while preparing it. */
1283 /* ... which is an evident application bug. --ANK */
1286 net_dbg_ratelimited("udp cork app bug 2\n");
1291 up
->pending
= AF_INET6
;
1294 if (ipc6
.dontfrag
< 0)
1295 ipc6
.dontfrag
= np
->dontfrag
;
1297 err
= ip6_append_data(sk
, getfrag
, msg
, ulen
, sizeof(struct udphdr
),
1298 &ipc6
, &fl6
, (struct rt6_info
*)dst
,
1299 corkreq
? msg
->msg_flags
|MSG_MORE
: msg
->msg_flags
, &sockc
);
1301 udp_v6_flush_pending_frames(sk
);
1303 err
= udp_v6_push_pending_frames(sk
);
1304 else if (unlikely(skb_queue_empty(&sk
->sk_write_queue
)))
1308 err
= np
->recverr
? net_xmit_errno(err
) : 0;
1314 ip6_dst_store(sk
, dst
,
1315 ipv6_addr_equal(&fl6
.daddr
, &sk
->sk_v6_daddr
) ?
1316 &sk
->sk_v6_daddr
: NULL
,
1317 #ifdef CONFIG_IPV6_SUBTREES
1318 ipv6_addr_equal(&fl6
.saddr
, &np
->saddr
) ?
1330 fl6_sock_release(flowlabel
);
1331 txopt_put(opt_to_free
);
1335 * ENOBUFS = no kernel mem, SOCK_NOSPACE = no sndbuf space. Reporting
1336 * ENOBUFS might not be good (it's not tunable per se), but otherwise
1337 * we don't have a good statistic (IpOutDiscards but it can be too many
1338 * things). We could add another new stat but at least for now that
1339 * seems like overkill.
1341 if (err
== -ENOBUFS
|| test_bit(SOCK_NOSPACE
, &sk
->sk_socket
->flags
)) {
1342 UDP6_INC_STATS(sock_net(sk
),
1343 UDP_MIB_SNDBUFERRORS
, is_udplite
);
1349 if (!(msg
->msg_flags
&MSG_PROBE
) || len
)
1350 goto back_from_confirm
;
1355 void udpv6_destroy_sock(struct sock
*sk
)
1357 struct udp_sock
*up
= udp_sk(sk
);
1359 udp_v6_flush_pending_frames(sk
);
1362 if (static_key_false(&udpv6_encap_needed
) && up
->encap_type
) {
1363 void (*encap_destroy
)(struct sock
*sk
);
1364 encap_destroy
= ACCESS_ONCE(up
->encap_destroy
);
1369 inet6_destroy_sock(sk
);
1373 * Socket option code for UDP
1375 int udpv6_setsockopt(struct sock
*sk
, int level
, int optname
,
1376 char __user
*optval
, unsigned int optlen
)
1378 if (level
== SOL_UDP
|| level
== SOL_UDPLITE
)
1379 return udp_lib_setsockopt(sk
, level
, optname
, optval
, optlen
,
1380 udp_v6_push_pending_frames
);
1381 return ipv6_setsockopt(sk
, level
, optname
, optval
, optlen
);
1384 #ifdef CONFIG_COMPAT
1385 int compat_udpv6_setsockopt(struct sock
*sk
, int level
, int optname
,
1386 char __user
*optval
, unsigned int optlen
)
1388 if (level
== SOL_UDP
|| level
== SOL_UDPLITE
)
1389 return udp_lib_setsockopt(sk
, level
, optname
, optval
, optlen
,
1390 udp_v6_push_pending_frames
);
1391 return compat_ipv6_setsockopt(sk
, level
, optname
, optval
, optlen
);
1395 int udpv6_getsockopt(struct sock
*sk
, int level
, int optname
,
1396 char __user
*optval
, int __user
*optlen
)
1398 if (level
== SOL_UDP
|| level
== SOL_UDPLITE
)
1399 return udp_lib_getsockopt(sk
, level
, optname
, optval
, optlen
);
1400 return ipv6_getsockopt(sk
, level
, optname
, optval
, optlen
);
1403 #ifdef CONFIG_COMPAT
1404 int compat_udpv6_getsockopt(struct sock
*sk
, int level
, int optname
,
1405 char __user
*optval
, int __user
*optlen
)
1407 if (level
== SOL_UDP
|| level
== SOL_UDPLITE
)
1408 return udp_lib_getsockopt(sk
, level
, optname
, optval
, optlen
);
1409 return compat_ipv6_getsockopt(sk
, level
, optname
, optval
, optlen
);
1413 static const struct inet6_protocol udpv6_protocol
= {
1414 .handler
= udpv6_rcv
,
1415 .err_handler
= udpv6_err
,
1416 .flags
= INET6_PROTO_NOPOLICY
|INET6_PROTO_FINAL
,
1419 /* ------------------------------------------------------------------------ */
1420 #ifdef CONFIG_PROC_FS
1421 int udp6_seq_show(struct seq_file
*seq
, void *v
)
1423 if (v
== SEQ_START_TOKEN
) {
1424 seq_puts(seq
, IPV6_SEQ_DGRAM_HEADER
);
1426 int bucket
= ((struct udp_iter_state
*)seq
->private)->bucket
;
1427 struct inet_sock
*inet
= inet_sk(v
);
1428 __u16 srcp
= ntohs(inet
->inet_sport
);
1429 __u16 destp
= ntohs(inet
->inet_dport
);
1430 ip6_dgram_sock_seq_show(seq
, v
, srcp
, destp
, bucket
);
1435 static const struct file_operations udp6_afinfo_seq_fops
= {
1436 .owner
= THIS_MODULE
,
1437 .open
= udp_seq_open
,
1439 .llseek
= seq_lseek
,
1440 .release
= seq_release_net
1443 static struct udp_seq_afinfo udp6_seq_afinfo
= {
1446 .udp_table
= &udp_table
,
1447 .seq_fops
= &udp6_afinfo_seq_fops
,
1449 .show
= udp6_seq_show
,
1453 int __net_init
udp6_proc_init(struct net
*net
)
1455 return udp_proc_register(net
, &udp6_seq_afinfo
);
1458 void udp6_proc_exit(struct net
*net
)
1460 udp_proc_unregister(net
, &udp6_seq_afinfo
);
1462 #endif /* CONFIG_PROC_FS */
1464 void udp_v6_clear_sk(struct sock
*sk
, int size
)
1466 struct inet_sock
*inet
= inet_sk(sk
);
1468 /* we do not want to clear pinet6 field, because of RCU lookups */
1469 sk_prot_clear_portaddr_nulls(sk
, offsetof(struct inet_sock
, pinet6
));
1471 size
-= offsetof(struct inet_sock
, pinet6
) + sizeof(inet
->pinet6
);
1472 memset(&inet
->pinet6
+ 1, 0, size
);
1475 /* ------------------------------------------------------------------------ */
1477 struct proto udpv6_prot
= {
1479 .owner
= THIS_MODULE
,
1480 .close
= udp_lib_close
,
1481 .connect
= ip6_datagram_connect
,
1482 .disconnect
= udp_disconnect
,
1484 .destroy
= udpv6_destroy_sock
,
1485 .setsockopt
= udpv6_setsockopt
,
1486 .getsockopt
= udpv6_getsockopt
,
1487 .sendmsg
= udpv6_sendmsg
,
1488 .recvmsg
= udpv6_recvmsg
,
1489 .backlog_rcv
= __udpv6_queue_rcv_skb
,
1490 .release_cb
= ip6_datagram_release_cb
,
1491 .hash
= udp_lib_hash
,
1492 .unhash
= udp_lib_unhash
,
1493 .rehash
= udp_v6_rehash
,
1494 .get_port
= udp_v6_get_port
,
1495 .memory_allocated
= &udp_memory_allocated
,
1496 .sysctl_mem
= sysctl_udp_mem
,
1497 .sysctl_wmem
= &sysctl_udp_wmem_min
,
1498 .sysctl_rmem
= &sysctl_udp_rmem_min
,
1499 .obj_size
= sizeof(struct udp6_sock
),
1500 .slab_flags
= SLAB_DESTROY_BY_RCU
,
1501 .h
.udp_table
= &udp_table
,
1502 #ifdef CONFIG_COMPAT
1503 .compat_setsockopt
= compat_udpv6_setsockopt
,
1504 .compat_getsockopt
= compat_udpv6_getsockopt
,
1506 .clear_sk
= udp_v6_clear_sk
,
1509 static struct inet_protosw udpv6_protosw
= {
1511 .protocol
= IPPROTO_UDP
,
1512 .prot
= &udpv6_prot
,
1513 .ops
= &inet6_dgram_ops
,
1514 .flags
= INET_PROTOSW_PERMANENT
,
1517 int __init
udpv6_init(void)
1521 ret
= inet6_add_protocol(&udpv6_protocol
, IPPROTO_UDP
);
1525 ret
= inet6_register_protosw(&udpv6_protosw
);
1527 goto out_udpv6_protocol
;
1532 inet6_del_protocol(&udpv6_protocol
, IPPROTO_UDP
);
1536 void udpv6_exit(void)
1538 inet6_unregister_protosw(&udpv6_protosw
);
1539 inet6_del_protocol(&udpv6_protocol
, IPPROTO_UDP
);