HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
[linux/fpc-iii.git] / net / l2tp / l2tp_netlink.c
blobd3a84a181348b351bc64fdbeec32c94571384dbc
1 /*
2 * L2TP netlink layer, for management
4 * Copyright (c) 2008,2009,2010 Katalix Systems Ltd
6 * Partly based on the IrDA nelink implementation
7 * (see net/irda/irnetlink.c) which is:
8 * Copyright (c) 2007 Samuel Ortiz <samuel@sortiz.org>
9 * which is in turn partly based on the wireless netlink code:
10 * Copyright 2006 Johannes Berg <johannes@sipsolutions.net>
12 * This program is free software; you can redistribute it and/or modify
13 * it under the terms of the GNU General Public License version 2 as
14 * published by the Free Software Foundation.
17 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
19 #include <net/sock.h>
20 #include <net/genetlink.h>
21 #include <net/udp.h>
22 #include <linux/in.h>
23 #include <linux/udp.h>
24 #include <linux/socket.h>
25 #include <linux/module.h>
26 #include <linux/list.h>
27 #include <net/net_namespace.h>
29 #include <linux/l2tp.h>
31 #include "l2tp_core.h"
34 static struct genl_family l2tp_nl_family = {
35 .id = GENL_ID_GENERATE,
36 .name = L2TP_GENL_NAME,
37 .version = L2TP_GENL_VERSION,
38 .hdrsize = 0,
39 .maxattr = L2TP_ATTR_MAX,
40 .netnsok = true,
43 static const struct genl_multicast_group l2tp_multicast_group[] = {
45 .name = L2TP_GENL_MCGROUP,
49 static int l2tp_nl_tunnel_send(struct sk_buff *skb, u32 portid, u32 seq,
50 int flags, struct l2tp_tunnel *tunnel, u8 cmd);
51 static int l2tp_nl_session_send(struct sk_buff *skb, u32 portid, u32 seq,
52 int flags, struct l2tp_session *session,
53 u8 cmd);
55 /* Accessed under genl lock */
56 static const struct l2tp_nl_cmd_ops *l2tp_nl_cmd_ops[__L2TP_PWTYPE_MAX];
58 static struct l2tp_session *l2tp_nl_session_get(struct genl_info *info,
59 bool do_ref)
61 u32 tunnel_id;
62 u32 session_id;
63 char *ifname;
64 struct l2tp_tunnel *tunnel;
65 struct l2tp_session *session = NULL;
66 struct net *net = genl_info_net(info);
68 if (info->attrs[L2TP_ATTR_IFNAME]) {
69 ifname = nla_data(info->attrs[L2TP_ATTR_IFNAME]);
70 session = l2tp_session_get_by_ifname(net, ifname, do_ref);
71 } else if ((info->attrs[L2TP_ATTR_SESSION_ID]) &&
72 (info->attrs[L2TP_ATTR_CONN_ID])) {
73 tunnel_id = nla_get_u32(info->attrs[L2TP_ATTR_CONN_ID]);
74 session_id = nla_get_u32(info->attrs[L2TP_ATTR_SESSION_ID]);
75 tunnel = l2tp_tunnel_get(net, tunnel_id);
76 if (tunnel) {
77 session = l2tp_session_get(net, tunnel, session_id,
78 do_ref);
79 l2tp_tunnel_dec_refcount(tunnel);
83 return session;
86 static int l2tp_nl_cmd_noop(struct sk_buff *skb, struct genl_info *info)
88 struct sk_buff *msg;
89 void *hdr;
90 int ret = -ENOBUFS;
92 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
93 if (!msg) {
94 ret = -ENOMEM;
95 goto out;
98 hdr = genlmsg_put(msg, info->snd_portid, info->snd_seq,
99 &l2tp_nl_family, 0, L2TP_CMD_NOOP);
100 if (!hdr) {
101 ret = -EMSGSIZE;
102 goto err_out;
105 genlmsg_end(msg, hdr);
107 return genlmsg_unicast(genl_info_net(info), msg, info->snd_portid);
109 err_out:
110 nlmsg_free(msg);
112 out:
113 return ret;
116 static int l2tp_tunnel_notify(struct genl_family *family,
117 struct genl_info *info,
118 struct l2tp_tunnel *tunnel,
119 u8 cmd)
121 struct sk_buff *msg;
122 int ret;
124 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
125 if (!msg)
126 return -ENOMEM;
128 ret = l2tp_nl_tunnel_send(msg, info->snd_portid, info->snd_seq,
129 NLM_F_ACK, tunnel, cmd);
131 if (ret >= 0) {
132 ret = genlmsg_multicast_allns(family, msg, 0, 0, GFP_ATOMIC);
133 /* We don't care if no one is listening */
134 if (ret == -ESRCH)
135 ret = 0;
136 return ret;
139 nlmsg_free(msg);
141 return ret;
144 static int l2tp_session_notify(struct genl_family *family,
145 struct genl_info *info,
146 struct l2tp_session *session,
147 u8 cmd)
149 struct sk_buff *msg;
150 int ret;
152 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
153 if (!msg)
154 return -ENOMEM;
156 ret = l2tp_nl_session_send(msg, info->snd_portid, info->snd_seq,
157 NLM_F_ACK, session, cmd);
159 if (ret >= 0) {
160 ret = genlmsg_multicast_allns(family, msg, 0, 0, GFP_ATOMIC);
161 /* We don't care if no one is listening */
162 if (ret == -ESRCH)
163 ret = 0;
164 return ret;
167 nlmsg_free(msg);
169 return ret;
172 static int l2tp_nl_cmd_tunnel_create(struct sk_buff *skb, struct genl_info *info)
174 u32 tunnel_id;
175 u32 peer_tunnel_id;
176 int proto_version;
177 int fd;
178 int ret = 0;
179 struct l2tp_tunnel_cfg cfg = { 0, };
180 struct l2tp_tunnel *tunnel;
181 struct net *net = genl_info_net(info);
183 if (!info->attrs[L2TP_ATTR_CONN_ID]) {
184 ret = -EINVAL;
185 goto out;
187 tunnel_id = nla_get_u32(info->attrs[L2TP_ATTR_CONN_ID]);
189 if (!info->attrs[L2TP_ATTR_PEER_CONN_ID]) {
190 ret = -EINVAL;
191 goto out;
193 peer_tunnel_id = nla_get_u32(info->attrs[L2TP_ATTR_PEER_CONN_ID]);
195 if (!info->attrs[L2TP_ATTR_PROTO_VERSION]) {
196 ret = -EINVAL;
197 goto out;
199 proto_version = nla_get_u8(info->attrs[L2TP_ATTR_PROTO_VERSION]);
201 if (!info->attrs[L2TP_ATTR_ENCAP_TYPE]) {
202 ret = -EINVAL;
203 goto out;
205 cfg.encap = nla_get_u16(info->attrs[L2TP_ATTR_ENCAP_TYPE]);
207 fd = -1;
208 if (info->attrs[L2TP_ATTR_FD]) {
209 fd = nla_get_u32(info->attrs[L2TP_ATTR_FD]);
210 } else {
211 #if IS_ENABLED(CONFIG_IPV6)
212 if (info->attrs[L2TP_ATTR_IP6_SADDR] &&
213 info->attrs[L2TP_ATTR_IP6_DADDR]) {
214 cfg.local_ip6 = nla_data(
215 info->attrs[L2TP_ATTR_IP6_SADDR]);
216 cfg.peer_ip6 = nla_data(
217 info->attrs[L2TP_ATTR_IP6_DADDR]);
218 } else
219 #endif
220 if (info->attrs[L2TP_ATTR_IP_SADDR] &&
221 info->attrs[L2TP_ATTR_IP_DADDR]) {
222 cfg.local_ip.s_addr = nla_get_in_addr(
223 info->attrs[L2TP_ATTR_IP_SADDR]);
224 cfg.peer_ip.s_addr = nla_get_in_addr(
225 info->attrs[L2TP_ATTR_IP_DADDR]);
226 } else {
227 ret = -EINVAL;
228 goto out;
230 if (info->attrs[L2TP_ATTR_UDP_SPORT])
231 cfg.local_udp_port = nla_get_u16(info->attrs[L2TP_ATTR_UDP_SPORT]);
232 if (info->attrs[L2TP_ATTR_UDP_DPORT])
233 cfg.peer_udp_port = nla_get_u16(info->attrs[L2TP_ATTR_UDP_DPORT]);
234 if (info->attrs[L2TP_ATTR_UDP_CSUM])
235 cfg.use_udp_checksums = nla_get_flag(info->attrs[L2TP_ATTR_UDP_CSUM]);
237 #if IS_ENABLED(CONFIG_IPV6)
238 if (info->attrs[L2TP_ATTR_UDP_ZERO_CSUM6_TX])
239 cfg.udp6_zero_tx_checksums = nla_get_flag(info->attrs[L2TP_ATTR_UDP_ZERO_CSUM6_TX]);
240 if (info->attrs[L2TP_ATTR_UDP_ZERO_CSUM6_RX])
241 cfg.udp6_zero_rx_checksums = nla_get_flag(info->attrs[L2TP_ATTR_UDP_ZERO_CSUM6_RX]);
242 #endif
245 if (info->attrs[L2TP_ATTR_DEBUG])
246 cfg.debug = nla_get_u32(info->attrs[L2TP_ATTR_DEBUG]);
248 tunnel = l2tp_tunnel_find(net, tunnel_id);
249 if (tunnel != NULL) {
250 ret = -EEXIST;
251 goto out;
254 ret = -EINVAL;
255 switch (cfg.encap) {
256 case L2TP_ENCAPTYPE_UDP:
257 case L2TP_ENCAPTYPE_IP:
258 ret = l2tp_tunnel_create(net, fd, proto_version, tunnel_id,
259 peer_tunnel_id, &cfg, &tunnel);
260 break;
263 if (ret >= 0)
264 ret = l2tp_tunnel_notify(&l2tp_nl_family, info,
265 tunnel, L2TP_CMD_TUNNEL_CREATE);
266 out:
267 return ret;
270 static int l2tp_nl_cmd_tunnel_delete(struct sk_buff *skb, struct genl_info *info)
272 struct l2tp_tunnel *tunnel;
273 u32 tunnel_id;
274 int ret = 0;
275 struct net *net = genl_info_net(info);
277 if (!info->attrs[L2TP_ATTR_CONN_ID]) {
278 ret = -EINVAL;
279 goto out;
281 tunnel_id = nla_get_u32(info->attrs[L2TP_ATTR_CONN_ID]);
283 tunnel = l2tp_tunnel_get(net, tunnel_id);
284 if (!tunnel) {
285 ret = -ENODEV;
286 goto out;
289 l2tp_tunnel_notify(&l2tp_nl_family, info,
290 tunnel, L2TP_CMD_TUNNEL_DELETE);
292 l2tp_tunnel_delete(tunnel);
294 l2tp_tunnel_dec_refcount(tunnel);
296 out:
297 return ret;
300 static int l2tp_nl_cmd_tunnel_modify(struct sk_buff *skb, struct genl_info *info)
302 struct l2tp_tunnel *tunnel;
303 u32 tunnel_id;
304 int ret = 0;
305 struct net *net = genl_info_net(info);
307 if (!info->attrs[L2TP_ATTR_CONN_ID]) {
308 ret = -EINVAL;
309 goto out;
311 tunnel_id = nla_get_u32(info->attrs[L2TP_ATTR_CONN_ID]);
313 tunnel = l2tp_tunnel_get(net, tunnel_id);
314 if (!tunnel) {
315 ret = -ENODEV;
316 goto out;
319 if (info->attrs[L2TP_ATTR_DEBUG])
320 tunnel->debug = nla_get_u32(info->attrs[L2TP_ATTR_DEBUG]);
322 ret = l2tp_tunnel_notify(&l2tp_nl_family, info,
323 tunnel, L2TP_CMD_TUNNEL_MODIFY);
325 l2tp_tunnel_dec_refcount(tunnel);
327 out:
328 return ret;
331 static int l2tp_nl_tunnel_send(struct sk_buff *skb, u32 portid, u32 seq, int flags,
332 struct l2tp_tunnel *tunnel, u8 cmd)
334 void *hdr;
335 struct nlattr *nest;
336 struct sock *sk = NULL;
337 struct inet_sock *inet;
338 #if IS_ENABLED(CONFIG_IPV6)
339 struct ipv6_pinfo *np = NULL;
340 #endif
342 hdr = genlmsg_put(skb, portid, seq, &l2tp_nl_family, flags, cmd);
343 if (!hdr)
344 return -EMSGSIZE;
346 if (nla_put_u8(skb, L2TP_ATTR_PROTO_VERSION, tunnel->version) ||
347 nla_put_u32(skb, L2TP_ATTR_CONN_ID, tunnel->tunnel_id) ||
348 nla_put_u32(skb, L2TP_ATTR_PEER_CONN_ID, tunnel->peer_tunnel_id) ||
349 nla_put_u32(skb, L2TP_ATTR_DEBUG, tunnel->debug) ||
350 nla_put_u16(skb, L2TP_ATTR_ENCAP_TYPE, tunnel->encap))
351 goto nla_put_failure;
353 nest = nla_nest_start(skb, L2TP_ATTR_STATS);
354 if (nest == NULL)
355 goto nla_put_failure;
357 if (nla_put_u64(skb, L2TP_ATTR_TX_PACKETS,
358 atomic_long_read(&tunnel->stats.tx_packets)) ||
359 nla_put_u64(skb, L2TP_ATTR_TX_BYTES,
360 atomic_long_read(&tunnel->stats.tx_bytes)) ||
361 nla_put_u64(skb, L2TP_ATTR_TX_ERRORS,
362 atomic_long_read(&tunnel->stats.tx_errors)) ||
363 nla_put_u64(skb, L2TP_ATTR_RX_PACKETS,
364 atomic_long_read(&tunnel->stats.rx_packets)) ||
365 nla_put_u64(skb, L2TP_ATTR_RX_BYTES,
366 atomic_long_read(&tunnel->stats.rx_bytes)) ||
367 nla_put_u64(skb, L2TP_ATTR_RX_SEQ_DISCARDS,
368 atomic_long_read(&tunnel->stats.rx_seq_discards)) ||
369 nla_put_u64(skb, L2TP_ATTR_RX_OOS_PACKETS,
370 atomic_long_read(&tunnel->stats.rx_oos_packets)) ||
371 nla_put_u64(skb, L2TP_ATTR_RX_ERRORS,
372 atomic_long_read(&tunnel->stats.rx_errors)))
373 goto nla_put_failure;
374 nla_nest_end(skb, nest);
376 sk = tunnel->sock;
377 if (!sk)
378 goto out;
380 #if IS_ENABLED(CONFIG_IPV6)
381 if (sk->sk_family == AF_INET6)
382 np = inet6_sk(sk);
383 #endif
385 inet = inet_sk(sk);
387 switch (tunnel->encap) {
388 case L2TP_ENCAPTYPE_UDP:
389 if (nla_put_u16(skb, L2TP_ATTR_UDP_SPORT, ntohs(inet->inet_sport)) ||
390 nla_put_u16(skb, L2TP_ATTR_UDP_DPORT, ntohs(inet->inet_dport)) ||
391 nla_put_u8(skb, L2TP_ATTR_UDP_CSUM, !sk->sk_no_check_tx))
392 goto nla_put_failure;
393 /* NOBREAK */
394 case L2TP_ENCAPTYPE_IP:
395 #if IS_ENABLED(CONFIG_IPV6)
396 if (np) {
397 if (nla_put_in6_addr(skb, L2TP_ATTR_IP6_SADDR,
398 &np->saddr) ||
399 nla_put_in6_addr(skb, L2TP_ATTR_IP6_DADDR,
400 &sk->sk_v6_daddr))
401 goto nla_put_failure;
402 } else
403 #endif
404 if (nla_put_in_addr(skb, L2TP_ATTR_IP_SADDR,
405 inet->inet_saddr) ||
406 nla_put_in_addr(skb, L2TP_ATTR_IP_DADDR,
407 inet->inet_daddr))
408 goto nla_put_failure;
409 break;
412 out:
413 genlmsg_end(skb, hdr);
414 return 0;
416 nla_put_failure:
417 genlmsg_cancel(skb, hdr);
418 return -1;
421 static int l2tp_nl_cmd_tunnel_get(struct sk_buff *skb, struct genl_info *info)
423 struct l2tp_tunnel *tunnel;
424 struct sk_buff *msg;
425 u32 tunnel_id;
426 int ret = -ENOBUFS;
427 struct net *net = genl_info_net(info);
429 if (!info->attrs[L2TP_ATTR_CONN_ID]) {
430 ret = -EINVAL;
431 goto err;
434 tunnel_id = nla_get_u32(info->attrs[L2TP_ATTR_CONN_ID]);
436 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
437 if (!msg) {
438 ret = -ENOMEM;
439 goto err;
442 tunnel = l2tp_tunnel_get(net, tunnel_id);
443 if (!tunnel) {
444 ret = -ENODEV;
445 goto err_nlmsg;
448 ret = l2tp_nl_tunnel_send(msg, info->snd_portid, info->snd_seq,
449 NLM_F_ACK, tunnel, L2TP_CMD_TUNNEL_GET);
450 if (ret < 0)
451 goto err_nlmsg_tunnel;
453 l2tp_tunnel_dec_refcount(tunnel);
455 return genlmsg_unicast(net, msg, info->snd_portid);
457 err_nlmsg_tunnel:
458 l2tp_tunnel_dec_refcount(tunnel);
459 err_nlmsg:
460 nlmsg_free(msg);
461 err:
462 return ret;
465 static int l2tp_nl_cmd_tunnel_dump(struct sk_buff *skb, struct netlink_callback *cb)
467 int ti = cb->args[0];
468 struct l2tp_tunnel *tunnel;
469 struct net *net = sock_net(skb->sk);
471 for (;;) {
472 tunnel = l2tp_tunnel_find_nth(net, ti);
473 if (tunnel == NULL)
474 goto out;
476 if (l2tp_nl_tunnel_send(skb, NETLINK_CB(cb->skb).portid,
477 cb->nlh->nlmsg_seq, NLM_F_MULTI,
478 tunnel, L2TP_CMD_TUNNEL_GET) < 0)
479 goto out;
481 ti++;
484 out:
485 cb->args[0] = ti;
487 return skb->len;
490 static int l2tp_nl_cmd_session_create(struct sk_buff *skb, struct genl_info *info)
492 u32 tunnel_id = 0;
493 u32 session_id;
494 u32 peer_session_id;
495 int ret = 0;
496 struct l2tp_tunnel *tunnel;
497 struct l2tp_session *session;
498 struct l2tp_session_cfg cfg = { 0, };
499 struct net *net = genl_info_net(info);
501 if (!info->attrs[L2TP_ATTR_CONN_ID]) {
502 ret = -EINVAL;
503 goto out;
506 tunnel_id = nla_get_u32(info->attrs[L2TP_ATTR_CONN_ID]);
507 tunnel = l2tp_tunnel_get(net, tunnel_id);
508 if (!tunnel) {
509 ret = -ENODEV;
510 goto out;
513 if (!info->attrs[L2TP_ATTR_SESSION_ID]) {
514 ret = -EINVAL;
515 goto out_tunnel;
517 session_id = nla_get_u32(info->attrs[L2TP_ATTR_SESSION_ID]);
519 if (!info->attrs[L2TP_ATTR_PEER_SESSION_ID]) {
520 ret = -EINVAL;
521 goto out_tunnel;
523 peer_session_id = nla_get_u32(info->attrs[L2TP_ATTR_PEER_SESSION_ID]);
525 if (!info->attrs[L2TP_ATTR_PW_TYPE]) {
526 ret = -EINVAL;
527 goto out_tunnel;
529 cfg.pw_type = nla_get_u16(info->attrs[L2TP_ATTR_PW_TYPE]);
530 if (cfg.pw_type >= __L2TP_PWTYPE_MAX) {
531 ret = -EINVAL;
532 goto out_tunnel;
535 if (tunnel->version > 2) {
536 if (info->attrs[L2TP_ATTR_OFFSET])
537 cfg.offset = nla_get_u16(info->attrs[L2TP_ATTR_OFFSET]);
539 if (info->attrs[L2TP_ATTR_DATA_SEQ])
540 cfg.data_seq = nla_get_u8(info->attrs[L2TP_ATTR_DATA_SEQ]);
542 cfg.l2specific_type = L2TP_L2SPECTYPE_DEFAULT;
543 if (info->attrs[L2TP_ATTR_L2SPEC_TYPE])
544 cfg.l2specific_type = nla_get_u8(info->attrs[L2TP_ATTR_L2SPEC_TYPE]);
546 cfg.l2specific_len = 4;
547 if (info->attrs[L2TP_ATTR_L2SPEC_LEN])
548 cfg.l2specific_len = nla_get_u8(info->attrs[L2TP_ATTR_L2SPEC_LEN]);
550 if (info->attrs[L2TP_ATTR_COOKIE]) {
551 u16 len = nla_len(info->attrs[L2TP_ATTR_COOKIE]);
552 if (len > 8) {
553 ret = -EINVAL;
554 goto out_tunnel;
556 cfg.cookie_len = len;
557 memcpy(&cfg.cookie[0], nla_data(info->attrs[L2TP_ATTR_COOKIE]), len);
559 if (info->attrs[L2TP_ATTR_PEER_COOKIE]) {
560 u16 len = nla_len(info->attrs[L2TP_ATTR_PEER_COOKIE]);
561 if (len > 8) {
562 ret = -EINVAL;
563 goto out_tunnel;
565 cfg.peer_cookie_len = len;
566 memcpy(&cfg.peer_cookie[0], nla_data(info->attrs[L2TP_ATTR_PEER_COOKIE]), len);
568 if (info->attrs[L2TP_ATTR_IFNAME])
569 cfg.ifname = nla_data(info->attrs[L2TP_ATTR_IFNAME]);
571 if (info->attrs[L2TP_ATTR_VLAN_ID])
572 cfg.vlan_id = nla_get_u16(info->attrs[L2TP_ATTR_VLAN_ID]);
575 if (info->attrs[L2TP_ATTR_DEBUG])
576 cfg.debug = nla_get_u32(info->attrs[L2TP_ATTR_DEBUG]);
578 if (info->attrs[L2TP_ATTR_RECV_SEQ])
579 cfg.recv_seq = nla_get_u8(info->attrs[L2TP_ATTR_RECV_SEQ]);
581 if (info->attrs[L2TP_ATTR_SEND_SEQ])
582 cfg.send_seq = nla_get_u8(info->attrs[L2TP_ATTR_SEND_SEQ]);
584 if (info->attrs[L2TP_ATTR_LNS_MODE])
585 cfg.lns_mode = nla_get_u8(info->attrs[L2TP_ATTR_LNS_MODE]);
587 if (info->attrs[L2TP_ATTR_RECV_TIMEOUT])
588 cfg.reorder_timeout = nla_get_msecs(info->attrs[L2TP_ATTR_RECV_TIMEOUT]);
590 if (info->attrs[L2TP_ATTR_MTU])
591 cfg.mtu = nla_get_u16(info->attrs[L2TP_ATTR_MTU]);
593 if (info->attrs[L2TP_ATTR_MRU])
594 cfg.mru = nla_get_u16(info->attrs[L2TP_ATTR_MRU]);
596 #ifdef CONFIG_MODULES
597 if (l2tp_nl_cmd_ops[cfg.pw_type] == NULL) {
598 genl_unlock();
599 request_module("net-l2tp-type-%u", cfg.pw_type);
600 genl_lock();
602 #endif
603 if ((l2tp_nl_cmd_ops[cfg.pw_type] == NULL) ||
604 (l2tp_nl_cmd_ops[cfg.pw_type]->session_create == NULL)) {
605 ret = -EPROTONOSUPPORT;
606 goto out_tunnel;
609 /* Check that pseudowire-specific params are present */
610 switch (cfg.pw_type) {
611 case L2TP_PWTYPE_NONE:
612 break;
613 case L2TP_PWTYPE_ETH_VLAN:
614 if (!info->attrs[L2TP_ATTR_VLAN_ID]) {
615 ret = -EINVAL;
616 goto out_tunnel;
618 break;
619 case L2TP_PWTYPE_ETH:
620 break;
621 case L2TP_PWTYPE_PPP:
622 case L2TP_PWTYPE_PPP_AC:
623 break;
624 case L2TP_PWTYPE_IP:
625 default:
626 ret = -EPROTONOSUPPORT;
627 break;
630 ret = l2tp_nl_cmd_ops[cfg.pw_type]->session_create(net, tunnel,
631 session_id,
632 peer_session_id,
633 &cfg);
635 if (ret >= 0) {
636 session = l2tp_session_get(net, tunnel, session_id, false);
637 if (session) {
638 ret = l2tp_session_notify(&l2tp_nl_family, info, session,
639 L2TP_CMD_SESSION_CREATE);
640 l2tp_session_dec_refcount(session);
644 out_tunnel:
645 l2tp_tunnel_dec_refcount(tunnel);
646 out:
647 return ret;
650 static int l2tp_nl_cmd_session_delete(struct sk_buff *skb, struct genl_info *info)
652 int ret = 0;
653 struct l2tp_session *session;
654 u16 pw_type;
656 session = l2tp_nl_session_get(info, true);
657 if (session == NULL) {
658 ret = -ENODEV;
659 goto out;
662 l2tp_session_notify(&l2tp_nl_family, info,
663 session, L2TP_CMD_SESSION_DELETE);
665 pw_type = session->pwtype;
666 if (pw_type < __L2TP_PWTYPE_MAX)
667 if (l2tp_nl_cmd_ops[pw_type] && l2tp_nl_cmd_ops[pw_type]->session_delete)
668 ret = (*l2tp_nl_cmd_ops[pw_type]->session_delete)(session);
670 if (session->deref)
671 session->deref(session);
672 l2tp_session_dec_refcount(session);
674 out:
675 return ret;
678 static int l2tp_nl_cmd_session_modify(struct sk_buff *skb, struct genl_info *info)
680 int ret = 0;
681 struct l2tp_session *session;
683 session = l2tp_nl_session_get(info, false);
684 if (session == NULL) {
685 ret = -ENODEV;
686 goto out;
689 if (info->attrs[L2TP_ATTR_DEBUG])
690 session->debug = nla_get_u32(info->attrs[L2TP_ATTR_DEBUG]);
692 if (info->attrs[L2TP_ATTR_DATA_SEQ])
693 session->data_seq = nla_get_u8(info->attrs[L2TP_ATTR_DATA_SEQ]);
695 if (info->attrs[L2TP_ATTR_RECV_SEQ])
696 session->recv_seq = nla_get_u8(info->attrs[L2TP_ATTR_RECV_SEQ]);
698 if (info->attrs[L2TP_ATTR_SEND_SEQ]) {
699 session->send_seq = nla_get_u8(info->attrs[L2TP_ATTR_SEND_SEQ]);
700 l2tp_session_set_header_len(session, session->tunnel->version);
703 if (info->attrs[L2TP_ATTR_LNS_MODE])
704 session->lns_mode = nla_get_u8(info->attrs[L2TP_ATTR_LNS_MODE]);
706 if (info->attrs[L2TP_ATTR_RECV_TIMEOUT])
707 session->reorder_timeout = nla_get_msecs(info->attrs[L2TP_ATTR_RECV_TIMEOUT]);
709 if (info->attrs[L2TP_ATTR_MTU])
710 session->mtu = nla_get_u16(info->attrs[L2TP_ATTR_MTU]);
712 if (info->attrs[L2TP_ATTR_MRU])
713 session->mru = nla_get_u16(info->attrs[L2TP_ATTR_MRU]);
715 ret = l2tp_session_notify(&l2tp_nl_family, info,
716 session, L2TP_CMD_SESSION_MODIFY);
718 l2tp_session_dec_refcount(session);
720 out:
721 return ret;
724 static int l2tp_nl_session_send(struct sk_buff *skb, u32 portid, u32 seq, int flags,
725 struct l2tp_session *session, u8 cmd)
727 void *hdr;
728 struct nlattr *nest;
729 struct l2tp_tunnel *tunnel = session->tunnel;
730 struct sock *sk = NULL;
732 sk = tunnel->sock;
734 hdr = genlmsg_put(skb, portid, seq, &l2tp_nl_family, flags, cmd);
735 if (!hdr)
736 return -EMSGSIZE;
738 if (nla_put_u32(skb, L2TP_ATTR_CONN_ID, tunnel->tunnel_id) ||
739 nla_put_u32(skb, L2TP_ATTR_SESSION_ID, session->session_id) ||
740 nla_put_u32(skb, L2TP_ATTR_PEER_CONN_ID, tunnel->peer_tunnel_id) ||
741 nla_put_u32(skb, L2TP_ATTR_PEER_SESSION_ID,
742 session->peer_session_id) ||
743 nla_put_u32(skb, L2TP_ATTR_DEBUG, session->debug) ||
744 nla_put_u16(skb, L2TP_ATTR_PW_TYPE, session->pwtype) ||
745 nla_put_u16(skb, L2TP_ATTR_MTU, session->mtu) ||
746 (session->mru &&
747 nla_put_u16(skb, L2TP_ATTR_MRU, session->mru)))
748 goto nla_put_failure;
750 if ((session->ifname[0] &&
751 nla_put_string(skb, L2TP_ATTR_IFNAME, session->ifname)) ||
752 (session->cookie_len &&
753 nla_put(skb, L2TP_ATTR_COOKIE, session->cookie_len,
754 &session->cookie[0])) ||
755 (session->peer_cookie_len &&
756 nla_put(skb, L2TP_ATTR_PEER_COOKIE, session->peer_cookie_len,
757 &session->peer_cookie[0])) ||
758 nla_put_u8(skb, L2TP_ATTR_RECV_SEQ, session->recv_seq) ||
759 nla_put_u8(skb, L2TP_ATTR_SEND_SEQ, session->send_seq) ||
760 nla_put_u8(skb, L2TP_ATTR_LNS_MODE, session->lns_mode) ||
761 #ifdef CONFIG_XFRM
762 (((sk) && (sk->sk_policy[0] || sk->sk_policy[1])) &&
763 nla_put_u8(skb, L2TP_ATTR_USING_IPSEC, 1)) ||
764 #endif
765 (session->reorder_timeout &&
766 nla_put_msecs(skb, L2TP_ATTR_RECV_TIMEOUT, session->reorder_timeout)))
767 goto nla_put_failure;
769 nest = nla_nest_start(skb, L2TP_ATTR_STATS);
770 if (nest == NULL)
771 goto nla_put_failure;
773 if (nla_put_u64(skb, L2TP_ATTR_TX_PACKETS,
774 atomic_long_read(&session->stats.tx_packets)) ||
775 nla_put_u64(skb, L2TP_ATTR_TX_BYTES,
776 atomic_long_read(&session->stats.tx_bytes)) ||
777 nla_put_u64(skb, L2TP_ATTR_TX_ERRORS,
778 atomic_long_read(&session->stats.tx_errors)) ||
779 nla_put_u64(skb, L2TP_ATTR_RX_PACKETS,
780 atomic_long_read(&session->stats.rx_packets)) ||
781 nla_put_u64(skb, L2TP_ATTR_RX_BYTES,
782 atomic_long_read(&session->stats.rx_bytes)) ||
783 nla_put_u64(skb, L2TP_ATTR_RX_SEQ_DISCARDS,
784 atomic_long_read(&session->stats.rx_seq_discards)) ||
785 nla_put_u64(skb, L2TP_ATTR_RX_OOS_PACKETS,
786 atomic_long_read(&session->stats.rx_oos_packets)) ||
787 nla_put_u64(skb, L2TP_ATTR_RX_ERRORS,
788 atomic_long_read(&session->stats.rx_errors)))
789 goto nla_put_failure;
790 nla_nest_end(skb, nest);
792 genlmsg_end(skb, hdr);
793 return 0;
795 nla_put_failure:
796 genlmsg_cancel(skb, hdr);
797 return -1;
800 static int l2tp_nl_cmd_session_get(struct sk_buff *skb, struct genl_info *info)
802 struct l2tp_session *session;
803 struct sk_buff *msg;
804 int ret;
806 session = l2tp_nl_session_get(info, false);
807 if (session == NULL) {
808 ret = -ENODEV;
809 goto err;
812 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
813 if (!msg) {
814 ret = -ENOMEM;
815 goto err_ref;
818 ret = l2tp_nl_session_send(msg, info->snd_portid, info->snd_seq,
819 0, session, L2TP_CMD_SESSION_GET);
820 if (ret < 0)
821 goto err_ref_msg;
823 ret = genlmsg_unicast(genl_info_net(info), msg, info->snd_portid);
825 l2tp_session_dec_refcount(session);
827 return ret;
829 err_ref_msg:
830 nlmsg_free(msg);
831 err_ref:
832 l2tp_session_dec_refcount(session);
833 err:
834 return ret;
837 static int l2tp_nl_cmd_session_dump(struct sk_buff *skb, struct netlink_callback *cb)
839 struct net *net = sock_net(skb->sk);
840 struct l2tp_session *session;
841 struct l2tp_tunnel *tunnel = NULL;
842 int ti = cb->args[0];
843 int si = cb->args[1];
845 for (;;) {
846 if (tunnel == NULL) {
847 tunnel = l2tp_tunnel_find_nth(net, ti);
848 if (tunnel == NULL)
849 goto out;
852 session = l2tp_session_get_nth(tunnel, si, false);
853 if (session == NULL) {
854 ti++;
855 tunnel = NULL;
856 si = 0;
857 continue;
860 if (l2tp_nl_session_send(skb, NETLINK_CB(cb->skb).portid,
861 cb->nlh->nlmsg_seq, NLM_F_MULTI,
862 session, L2TP_CMD_SESSION_GET) < 0) {
863 l2tp_session_dec_refcount(session);
864 break;
866 l2tp_session_dec_refcount(session);
868 si++;
871 out:
872 cb->args[0] = ti;
873 cb->args[1] = si;
875 return skb->len;
878 static struct nla_policy l2tp_nl_policy[L2TP_ATTR_MAX + 1] = {
879 [L2TP_ATTR_NONE] = { .type = NLA_UNSPEC, },
880 [L2TP_ATTR_PW_TYPE] = { .type = NLA_U16, },
881 [L2TP_ATTR_ENCAP_TYPE] = { .type = NLA_U16, },
882 [L2TP_ATTR_OFFSET] = { .type = NLA_U16, },
883 [L2TP_ATTR_DATA_SEQ] = { .type = NLA_U8, },
884 [L2TP_ATTR_L2SPEC_TYPE] = { .type = NLA_U8, },
885 [L2TP_ATTR_L2SPEC_LEN] = { .type = NLA_U8, },
886 [L2TP_ATTR_PROTO_VERSION] = { .type = NLA_U8, },
887 [L2TP_ATTR_CONN_ID] = { .type = NLA_U32, },
888 [L2TP_ATTR_PEER_CONN_ID] = { .type = NLA_U32, },
889 [L2TP_ATTR_SESSION_ID] = { .type = NLA_U32, },
890 [L2TP_ATTR_PEER_SESSION_ID] = { .type = NLA_U32, },
891 [L2TP_ATTR_UDP_CSUM] = { .type = NLA_U8, },
892 [L2TP_ATTR_VLAN_ID] = { .type = NLA_U16, },
893 [L2TP_ATTR_DEBUG] = { .type = NLA_U32, },
894 [L2TP_ATTR_RECV_SEQ] = { .type = NLA_U8, },
895 [L2TP_ATTR_SEND_SEQ] = { .type = NLA_U8, },
896 [L2TP_ATTR_LNS_MODE] = { .type = NLA_U8, },
897 [L2TP_ATTR_USING_IPSEC] = { .type = NLA_U8, },
898 [L2TP_ATTR_RECV_TIMEOUT] = { .type = NLA_MSECS, },
899 [L2TP_ATTR_FD] = { .type = NLA_U32, },
900 [L2TP_ATTR_IP_SADDR] = { .type = NLA_U32, },
901 [L2TP_ATTR_IP_DADDR] = { .type = NLA_U32, },
902 [L2TP_ATTR_UDP_SPORT] = { .type = NLA_U16, },
903 [L2TP_ATTR_UDP_DPORT] = { .type = NLA_U16, },
904 [L2TP_ATTR_MTU] = { .type = NLA_U16, },
905 [L2TP_ATTR_MRU] = { .type = NLA_U16, },
906 [L2TP_ATTR_STATS] = { .type = NLA_NESTED, },
907 [L2TP_ATTR_IP6_SADDR] = {
908 .type = NLA_BINARY,
909 .len = sizeof(struct in6_addr),
911 [L2TP_ATTR_IP6_DADDR] = {
912 .type = NLA_BINARY,
913 .len = sizeof(struct in6_addr),
915 [L2TP_ATTR_IFNAME] = {
916 .type = NLA_NUL_STRING,
917 .len = IFNAMSIZ - 1,
919 [L2TP_ATTR_COOKIE] = {
920 .type = NLA_BINARY,
921 .len = 8,
923 [L2TP_ATTR_PEER_COOKIE] = {
924 .type = NLA_BINARY,
925 .len = 8,
929 static const struct genl_ops l2tp_nl_ops[] = {
931 .cmd = L2TP_CMD_NOOP,
932 .doit = l2tp_nl_cmd_noop,
933 .policy = l2tp_nl_policy,
934 /* can be retrieved by unprivileged users */
937 .cmd = L2TP_CMD_TUNNEL_CREATE,
938 .doit = l2tp_nl_cmd_tunnel_create,
939 .policy = l2tp_nl_policy,
940 .flags = GENL_ADMIN_PERM,
943 .cmd = L2TP_CMD_TUNNEL_DELETE,
944 .doit = l2tp_nl_cmd_tunnel_delete,
945 .policy = l2tp_nl_policy,
946 .flags = GENL_ADMIN_PERM,
949 .cmd = L2TP_CMD_TUNNEL_MODIFY,
950 .doit = l2tp_nl_cmd_tunnel_modify,
951 .policy = l2tp_nl_policy,
952 .flags = GENL_ADMIN_PERM,
955 .cmd = L2TP_CMD_TUNNEL_GET,
956 .doit = l2tp_nl_cmd_tunnel_get,
957 .dumpit = l2tp_nl_cmd_tunnel_dump,
958 .policy = l2tp_nl_policy,
959 .flags = GENL_ADMIN_PERM,
962 .cmd = L2TP_CMD_SESSION_CREATE,
963 .doit = l2tp_nl_cmd_session_create,
964 .policy = l2tp_nl_policy,
965 .flags = GENL_ADMIN_PERM,
968 .cmd = L2TP_CMD_SESSION_DELETE,
969 .doit = l2tp_nl_cmd_session_delete,
970 .policy = l2tp_nl_policy,
971 .flags = GENL_ADMIN_PERM,
974 .cmd = L2TP_CMD_SESSION_MODIFY,
975 .doit = l2tp_nl_cmd_session_modify,
976 .policy = l2tp_nl_policy,
977 .flags = GENL_ADMIN_PERM,
980 .cmd = L2TP_CMD_SESSION_GET,
981 .doit = l2tp_nl_cmd_session_get,
982 .dumpit = l2tp_nl_cmd_session_dump,
983 .policy = l2tp_nl_policy,
984 .flags = GENL_ADMIN_PERM,
988 int l2tp_nl_register_ops(enum l2tp_pwtype pw_type, const struct l2tp_nl_cmd_ops *ops)
990 int ret;
992 ret = -EINVAL;
993 if (pw_type >= __L2TP_PWTYPE_MAX)
994 goto err;
996 genl_lock();
997 ret = -EBUSY;
998 if (l2tp_nl_cmd_ops[pw_type])
999 goto out;
1001 l2tp_nl_cmd_ops[pw_type] = ops;
1002 ret = 0;
1004 out:
1005 genl_unlock();
1006 err:
1007 return ret;
1009 EXPORT_SYMBOL_GPL(l2tp_nl_register_ops);
1011 void l2tp_nl_unregister_ops(enum l2tp_pwtype pw_type)
1013 if (pw_type < __L2TP_PWTYPE_MAX) {
1014 genl_lock();
1015 l2tp_nl_cmd_ops[pw_type] = NULL;
1016 genl_unlock();
1019 EXPORT_SYMBOL_GPL(l2tp_nl_unregister_ops);
1021 static int l2tp_nl_init(void)
1023 pr_info("L2TP netlink interface\n");
1024 return genl_register_family_with_ops_groups(&l2tp_nl_family,
1025 l2tp_nl_ops,
1026 l2tp_multicast_group);
1029 static void l2tp_nl_cleanup(void)
1031 genl_unregister_family(&l2tp_nl_family);
1034 module_init(l2tp_nl_init);
1035 module_exit(l2tp_nl_cleanup);
1037 MODULE_AUTHOR("James Chapman <jchapman@katalix.com>");
1038 MODULE_DESCRIPTION("L2TP netlink");
1039 MODULE_LICENSE("GPL");
1040 MODULE_VERSION("1.0");
1041 MODULE_ALIAS_GENL_FAMILY("l2tp");