ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks
[linux/fpc-iii.git] / net / tipc / udp_media.c
blob78d6b78de29d23fcf8c72dec8a3878c165994a80
1 /* net/tipc/udp_media.c: IP bearer support for TIPC
3 * Copyright (c) 2015, Ericsson AB
4 * All rights reserved.
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions are met:
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
14 * 3. Neither the names of the copyright holders nor the names of its
15 * contributors may be used to endorse or promote products derived from
16 * this software without specific prior written permission.
18 * Alternatively, this software may be distributed under the terms of the
19 * GNU General Public License ("GPL") version 2 as published by the Free
20 * Software Foundation.
22 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
23 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
26 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
27 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
28 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
29 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
30 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
31 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
32 * POSSIBILITY OF SUCH DAMAGE.
35 #include <linux/socket.h>
36 #include <linux/ip.h>
37 #include <linux/udp.h>
38 #include <linux/inet.h>
39 #include <linux/inetdevice.h>
40 #include <linux/igmp.h>
41 #include <linux/kernel.h>
42 #include <linux/workqueue.h>
43 #include <linux/list.h>
44 #include <net/sock.h>
45 #include <net/ip.h>
46 #include <net/udp_tunnel.h>
47 #include <net/addrconf.h>
48 #include <linux/tipc_netlink.h>
49 #include "core.h"
50 #include "bearer.h"
52 /* IANA assigned UDP port */
53 #define UDP_PORT_DEFAULT 6118
55 #define UDP_MIN_HEADROOM 48
57 static const struct nla_policy tipc_nl_udp_policy[TIPC_NLA_UDP_MAX + 1] = {
58 [TIPC_NLA_UDP_UNSPEC] = {.type = NLA_UNSPEC},
59 [TIPC_NLA_UDP_LOCAL] = {.type = NLA_BINARY,
60 .len = sizeof(struct sockaddr_storage)},
61 [TIPC_NLA_UDP_REMOTE] = {.type = NLA_BINARY,
62 .len = sizeof(struct sockaddr_storage)},
65 /**
66 * struct udp_media_addr - IP/UDP addressing information
68 * This is the bearer level originating address used in neighbor discovery
69 * messages, and all fields should be in network byte order
71 struct udp_media_addr {
72 __be16 proto;
73 __be16 udp_port;
74 union {
75 struct in_addr ipv4;
76 struct in6_addr ipv6;
80 /**
81 * struct udp_bearer - ip/udp bearer data structure
82 * @bearer: associated generic tipc bearer
83 * @ubsock: bearer associated socket
84 * @ifindex: local address scope
85 * @work: used to schedule deferred work on a bearer
87 struct udp_bearer {
88 struct tipc_bearer __rcu *bearer;
89 struct socket *ubsock;
90 u32 ifindex;
91 struct work_struct work;
94 /* udp_media_addr_set - convert a ip/udp address to a TIPC media address */
95 static void tipc_udp_media_addr_set(struct tipc_media_addr *addr,
96 struct udp_media_addr *ua)
98 memset(addr, 0, sizeof(struct tipc_media_addr));
99 addr->media_id = TIPC_MEDIA_TYPE_UDP;
100 memcpy(addr->value, ua, sizeof(struct udp_media_addr));
101 if (ntohs(ua->proto) == ETH_P_IP) {
102 if (ipv4_is_multicast(ua->ipv4.s_addr))
103 addr->broadcast = 1;
104 } else if (ntohs(ua->proto) == ETH_P_IPV6) {
105 if (ipv6_addr_type(&ua->ipv6) & IPV6_ADDR_MULTICAST)
106 addr->broadcast = 1;
107 } else {
108 pr_err("Invalid UDP media address\n");
112 /* tipc_udp_addr2str - convert ip/udp address to string */
113 static int tipc_udp_addr2str(struct tipc_media_addr *a, char *buf, int size)
115 struct udp_media_addr *ua = (struct udp_media_addr *)&a->value;
117 if (ntohs(ua->proto) == ETH_P_IP)
118 snprintf(buf, size, "%pI4:%u", &ua->ipv4, ntohs(ua->udp_port));
119 else if (ntohs(ua->proto) == ETH_P_IPV6)
120 snprintf(buf, size, "%pI6:%u", &ua->ipv6, ntohs(ua->udp_port));
121 else
122 pr_err("Invalid UDP media address\n");
123 return 0;
126 /* tipc_udp_msg2addr - extract an ip/udp address from a TIPC ndisc message */
127 static int tipc_udp_msg2addr(struct tipc_bearer *b, struct tipc_media_addr *a,
128 char *msg)
130 struct udp_media_addr *ua;
132 ua = (struct udp_media_addr *) (msg + TIPC_MEDIA_ADDR_OFFSET);
133 if (msg[TIPC_MEDIA_TYPE_OFFSET] != TIPC_MEDIA_TYPE_UDP)
134 return -EINVAL;
135 tipc_udp_media_addr_set(a, ua);
136 return 0;
139 /* tipc_udp_addr2msg - write an ip/udp address to a TIPC ndisc message */
140 static int tipc_udp_addr2msg(char *msg, struct tipc_media_addr *a)
142 memset(msg, 0, TIPC_MEDIA_INFO_SIZE);
143 msg[TIPC_MEDIA_TYPE_OFFSET] = TIPC_MEDIA_TYPE_UDP;
144 memcpy(msg + TIPC_MEDIA_ADDR_OFFSET, a->value,
145 sizeof(struct udp_media_addr));
146 return 0;
149 /* tipc_send_msg - enqueue a send request */
150 static int tipc_udp_send_msg(struct net *net, struct sk_buff *skb,
151 struct tipc_bearer *b,
152 struct tipc_media_addr *dest)
154 int ttl, err = 0;
155 struct udp_bearer *ub;
156 struct udp_media_addr *dst = (struct udp_media_addr *)&dest->value;
157 struct udp_media_addr *src = (struct udp_media_addr *)&b->addr.value;
158 struct rtable *rt;
160 if (skb_headroom(skb) < UDP_MIN_HEADROOM) {
161 err = pskb_expand_head(skb, UDP_MIN_HEADROOM, 0, GFP_ATOMIC);
162 if (err)
163 goto tx_error;
166 skb_set_inner_protocol(skb, htons(ETH_P_TIPC));
167 ub = rcu_dereference_rtnl(b->media_ptr);
168 if (!ub) {
169 err = -ENODEV;
170 goto tx_error;
172 if (dst->proto == htons(ETH_P_IP)) {
173 struct flowi4 fl = {
174 .daddr = dst->ipv4.s_addr,
175 .saddr = src->ipv4.s_addr,
176 .flowi4_mark = skb->mark,
177 .flowi4_proto = IPPROTO_UDP
179 rt = ip_route_output_key(net, &fl);
180 if (IS_ERR(rt)) {
181 err = PTR_ERR(rt);
182 goto tx_error;
184 ttl = ip4_dst_hoplimit(&rt->dst);
185 err = udp_tunnel_xmit_skb(rt, ub->ubsock->sk, skb,
186 src->ipv4.s_addr,
187 dst->ipv4.s_addr, 0, ttl, 0,
188 src->udp_port, dst->udp_port,
189 false, true);
190 if (err < 0) {
191 ip_rt_put(rt);
192 goto tx_error;
194 #if IS_ENABLED(CONFIG_IPV6)
195 } else {
196 struct dst_entry *ndst;
197 struct flowi6 fl6 = {
198 .flowi6_oif = ub->ifindex,
199 .daddr = dst->ipv6,
200 .saddr = src->ipv6,
201 .flowi6_proto = IPPROTO_UDP
203 err = ipv6_stub->ipv6_dst_lookup(net, ub->ubsock->sk, &ndst,
204 &fl6);
205 if (err)
206 goto tx_error;
207 ttl = ip6_dst_hoplimit(ndst);
208 err = udp_tunnel6_xmit_skb(ndst, ub->ubsock->sk, skb,
209 ndst->dev, &src->ipv6,
210 &dst->ipv6, 0, ttl, src->udp_port,
211 dst->udp_port, false);
212 #endif
214 return err;
216 tx_error:
217 kfree_skb(skb);
218 return err;
221 /* tipc_udp_recv - read data from bearer socket */
222 static int tipc_udp_recv(struct sock *sk, struct sk_buff *skb)
224 struct udp_bearer *ub;
225 struct tipc_bearer *b;
227 ub = rcu_dereference_sk_user_data(sk);
228 if (!ub) {
229 pr_err_ratelimited("Failed to get UDP bearer reference");
230 kfree_skb(skb);
231 return 0;
234 skb_pull(skb, sizeof(struct udphdr));
235 rcu_read_lock();
236 b = rcu_dereference_rtnl(ub->bearer);
238 if (b) {
239 tipc_rcv(sock_net(sk), skb, b);
240 rcu_read_unlock();
241 return 0;
243 rcu_read_unlock();
244 kfree_skb(skb);
245 return 0;
248 static int enable_mcast(struct udp_bearer *ub, struct udp_media_addr *remote)
250 int err = 0;
251 struct ip_mreqn mreqn;
252 struct sock *sk = ub->ubsock->sk;
254 if (ntohs(remote->proto) == ETH_P_IP) {
255 if (!ipv4_is_multicast(remote->ipv4.s_addr))
256 return 0;
257 mreqn.imr_multiaddr = remote->ipv4;
258 mreqn.imr_ifindex = ub->ifindex;
259 err = ip_mc_join_group(sk, &mreqn);
260 #if IS_ENABLED(CONFIG_IPV6)
261 } else {
262 if (!ipv6_addr_is_multicast(&remote->ipv6))
263 return 0;
264 err = ipv6_stub->ipv6_sock_mc_join(sk, ub->ifindex,
265 &remote->ipv6);
266 #endif
268 return err;
272 * parse_options - build local/remote addresses from configuration
273 * @attrs: netlink config data
274 * @ub: UDP bearer instance
275 * @local: local bearer IP address/port
276 * @remote: peer or multicast IP/port
278 static int parse_options(struct nlattr *attrs[], struct udp_bearer *ub,
279 struct udp_media_addr *local,
280 struct udp_media_addr *remote)
282 struct nlattr *opts[TIPC_NLA_UDP_MAX + 1];
283 struct sockaddr_storage *sa_local, *sa_remote;
285 if (!attrs[TIPC_NLA_BEARER_UDP_OPTS])
286 goto err;
287 if (nla_parse_nested(opts, TIPC_NLA_UDP_MAX,
288 attrs[TIPC_NLA_BEARER_UDP_OPTS],
289 tipc_nl_udp_policy))
290 goto err;
291 if (opts[TIPC_NLA_UDP_LOCAL] && opts[TIPC_NLA_UDP_REMOTE]) {
292 sa_local = nla_data(opts[TIPC_NLA_UDP_LOCAL]);
293 sa_remote = nla_data(opts[TIPC_NLA_UDP_REMOTE]);
294 } else {
295 err:
296 pr_err("Invalid UDP bearer configuration");
297 return -EINVAL;
299 if ((sa_local->ss_family & sa_remote->ss_family) == AF_INET) {
300 struct sockaddr_in *ip4;
302 ip4 = (struct sockaddr_in *)sa_local;
303 local->proto = htons(ETH_P_IP);
304 local->udp_port = ip4->sin_port;
305 local->ipv4.s_addr = ip4->sin_addr.s_addr;
307 ip4 = (struct sockaddr_in *)sa_remote;
308 remote->proto = htons(ETH_P_IP);
309 remote->udp_port = ip4->sin_port;
310 remote->ipv4.s_addr = ip4->sin_addr.s_addr;
311 return 0;
313 #if IS_ENABLED(CONFIG_IPV6)
314 } else if ((sa_local->ss_family & sa_remote->ss_family) == AF_INET6) {
315 struct sockaddr_in6 *ip6;
317 ip6 = (struct sockaddr_in6 *)sa_local;
318 local->proto = htons(ETH_P_IPV6);
319 local->udp_port = ip6->sin6_port;
320 local->ipv6 = ip6->sin6_addr;
321 ub->ifindex = ip6->sin6_scope_id;
323 ip6 = (struct sockaddr_in6 *)sa_remote;
324 remote->proto = htons(ETH_P_IPV6);
325 remote->udp_port = ip6->sin6_port;
326 remote->ipv6 = ip6->sin6_addr;
327 return 0;
328 #endif
330 return -EADDRNOTAVAIL;
334 * tipc_udp_enable - callback to create a new udp bearer instance
335 * @net: network namespace
336 * @b: pointer to generic tipc_bearer
337 * @attrs: netlink bearer configuration
339 * validate the bearer parameters and initialize the udp bearer
340 * rtnl_lock should be held
342 static int tipc_udp_enable(struct net *net, struct tipc_bearer *b,
343 struct nlattr *attrs[])
345 int err = -EINVAL;
346 struct udp_bearer *ub;
347 struct udp_media_addr *remote;
348 struct udp_media_addr local = {0};
349 struct udp_port_cfg udp_conf = {0};
350 struct udp_tunnel_sock_cfg tuncfg = {NULL};
352 ub = kzalloc(sizeof(*ub), GFP_ATOMIC);
353 if (!ub)
354 return -ENOMEM;
356 remote = (struct udp_media_addr *)&b->bcast_addr.value;
357 memset(remote, 0, sizeof(struct udp_media_addr));
358 err = parse_options(attrs, ub, &local, remote);
359 if (err)
360 goto err;
362 b->bcast_addr.media_id = TIPC_MEDIA_TYPE_UDP;
363 b->bcast_addr.broadcast = 1;
364 rcu_assign_pointer(b->media_ptr, ub);
365 rcu_assign_pointer(ub->bearer, b);
366 tipc_udp_media_addr_set(&b->addr, &local);
367 if (local.proto == htons(ETH_P_IP)) {
368 struct net_device *dev;
370 dev = __ip_dev_find(net, local.ipv4.s_addr, false);
371 if (!dev) {
372 err = -ENODEV;
373 goto err;
375 udp_conf.family = AF_INET;
376 udp_conf.local_ip.s_addr = htonl(INADDR_ANY);
377 udp_conf.use_udp_checksums = false;
378 ub->ifindex = dev->ifindex;
379 if (tipc_mtu_bad(dev, sizeof(struct iphdr) +
380 sizeof(struct udphdr))) {
381 err = -EINVAL;
382 goto err;
384 b->mtu = dev->mtu - sizeof(struct iphdr)
385 - sizeof(struct udphdr);
386 #if IS_ENABLED(CONFIG_IPV6)
387 } else if (local.proto == htons(ETH_P_IPV6)) {
388 udp_conf.family = AF_INET6;
389 udp_conf.use_udp6_tx_checksums = true;
390 udp_conf.use_udp6_rx_checksums = true;
391 udp_conf.local_ip6 = in6addr_any;
392 b->mtu = 1280;
393 #endif
394 } else {
395 err = -EAFNOSUPPORT;
396 goto err;
398 udp_conf.local_udp_port = local.udp_port;
399 err = udp_sock_create(net, &udp_conf, &ub->ubsock);
400 if (err)
401 goto err;
402 tuncfg.sk_user_data = ub;
403 tuncfg.encap_type = 1;
404 tuncfg.encap_rcv = tipc_udp_recv;
405 tuncfg.encap_destroy = NULL;
406 setup_udp_tunnel_sock(net, ub->ubsock, &tuncfg);
408 if (enable_mcast(ub, remote))
409 goto err;
410 return 0;
411 err:
412 kfree(ub);
413 return err;
416 /* cleanup_bearer - break the socket/bearer association */
417 static void cleanup_bearer(struct work_struct *work)
419 struct udp_bearer *ub = container_of(work, struct udp_bearer, work);
421 if (ub->ubsock)
422 udp_tunnel_sock_release(ub->ubsock);
423 synchronize_net();
424 kfree(ub);
427 /* tipc_udp_disable - detach bearer from socket */
428 static void tipc_udp_disable(struct tipc_bearer *b)
430 struct udp_bearer *ub;
432 ub = rcu_dereference_rtnl(b->media_ptr);
433 if (!ub) {
434 pr_err("UDP bearer instance not found\n");
435 return;
437 if (ub->ubsock)
438 sock_set_flag(ub->ubsock->sk, SOCK_DEAD);
439 RCU_INIT_POINTER(ub->bearer, NULL);
441 /* sock_release need to be done outside of rtnl lock */
442 INIT_WORK(&ub->work, cleanup_bearer);
443 schedule_work(&ub->work);
446 struct tipc_media udp_media_info = {
447 .send_msg = tipc_udp_send_msg,
448 .enable_media = tipc_udp_enable,
449 .disable_media = tipc_udp_disable,
450 .addr2str = tipc_udp_addr2str,
451 .addr2msg = tipc_udp_addr2msg,
452 .msg2addr = tipc_udp_msg2addr,
453 .priority = TIPC_DEF_LINK_PRI,
454 .tolerance = TIPC_DEF_LINK_TOL,
455 .window = TIPC_DEF_LINK_WIN,
456 .type_id = TIPC_MEDIA_TYPE_UDP,
457 .hwaddr_len = 0,
458 .name = "udp"