205 lines
4.6 KiB
C
205 lines
4.6 KiB
C
|
// SPDX-License-Identifier: GPL-2.0-or-later
|
||
|
/*
|
||
|
* IP Payload Compression Protocol (IPComp) - RFC3173.
|
||
|
*
|
||
|
* Copyright (c) 2003 James Morris <jmorris@intercode.com.au>
|
||
|
*
|
||
|
* Todo:
|
||
|
* - Tunable compression parameters.
|
||
|
* - Compression stats.
|
||
|
* - Adaptive compression.
|
||
|
*/
|
||
|
#include <linux/module.h>
|
||
|
#include <linux/err.h>
|
||
|
#include <linux/rtnetlink.h>
|
||
|
#include <net/ip.h>
|
||
|
#include <net/xfrm.h>
|
||
|
#include <net/icmp.h>
|
||
|
#include <net/ipcomp.h>
|
||
|
#include <net/protocol.h>
|
||
|
#include <net/sock.h>
|
||
|
|
||
|
static int ipcomp4_err(struct sk_buff *skb, u32 info)
|
||
|
{
|
||
|
struct net *net = dev_net(skb->dev);
|
||
|
__be32 spi;
|
||
|
const struct iphdr *iph = (const struct iphdr *)skb->data;
|
||
|
struct ip_comp_hdr *ipch = (struct ip_comp_hdr *)(skb->data+(iph->ihl<<2));
|
||
|
struct xfrm_state *x;
|
||
|
|
||
|
switch (icmp_hdr(skb)->type) {
|
||
|
case ICMP_DEST_UNREACH:
|
||
|
if (icmp_hdr(skb)->code != ICMP_FRAG_NEEDED)
|
||
|
return 0;
|
||
|
break;
|
||
|
case ICMP_REDIRECT:
|
||
|
break;
|
||
|
default:
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
spi = htonl(ntohs(ipch->cpi));
|
||
|
x = xfrm_state_lookup(net, skb->mark, (const xfrm_address_t *)&iph->daddr,
|
||
|
spi, IPPROTO_COMP, AF_INET);
|
||
|
if (!x)
|
||
|
return 0;
|
||
|
|
||
|
if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH)
|
||
|
ipv4_update_pmtu(skb, net, info, 0, IPPROTO_COMP);
|
||
|
else
|
||
|
ipv4_redirect(skb, net, 0, IPPROTO_COMP);
|
||
|
xfrm_state_put(x);
|
||
|
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
/* We always hold one tunnel user reference to indicate a tunnel */
|
||
|
static struct xfrm_state *ipcomp_tunnel_create(struct xfrm_state *x)
|
||
|
{
|
||
|
struct net *net = xs_net(x);
|
||
|
struct xfrm_state *t;
|
||
|
|
||
|
t = xfrm_state_alloc(net);
|
||
|
if (!t)
|
||
|
goto out;
|
||
|
|
||
|
t->id.proto = IPPROTO_IPIP;
|
||
|
t->id.spi = x->props.saddr.a4;
|
||
|
t->id.daddr.a4 = x->id.daddr.a4;
|
||
|
memcpy(&t->sel, &x->sel, sizeof(t->sel));
|
||
|
t->props.family = AF_INET;
|
||
|
t->props.mode = x->props.mode;
|
||
|
t->props.saddr.a4 = x->props.saddr.a4;
|
||
|
t->props.flags = x->props.flags;
|
||
|
t->props.extra_flags = x->props.extra_flags;
|
||
|
memcpy(&t->mark, &x->mark, sizeof(t->mark));
|
||
|
t->if_id = x->if_id;
|
||
|
|
||
|
if (xfrm_init_state(t))
|
||
|
goto error;
|
||
|
|
||
|
atomic_set(&t->tunnel_users, 1);
|
||
|
out:
|
||
|
return t;
|
||
|
|
||
|
error:
|
||
|
t->km.state = XFRM_STATE_DEAD;
|
||
|
xfrm_state_put(t);
|
||
|
t = NULL;
|
||
|
goto out;
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* Must be protected by xfrm_cfg_mutex. State and tunnel user references are
|
||
|
* always incremented on success.
|
||
|
*/
|
||
|
static int ipcomp_tunnel_attach(struct xfrm_state *x)
|
||
|
{
|
||
|
struct net *net = xs_net(x);
|
||
|
int err = 0;
|
||
|
struct xfrm_state *t;
|
||
|
u32 mark = x->mark.v & x->mark.m;
|
||
|
|
||
|
t = xfrm_state_lookup(net, mark, (xfrm_address_t *)&x->id.daddr.a4,
|
||
|
x->props.saddr.a4, IPPROTO_IPIP, AF_INET);
|
||
|
if (!t) {
|
||
|
t = ipcomp_tunnel_create(x);
|
||
|
if (!t) {
|
||
|
err = -EINVAL;
|
||
|
goto out;
|
||
|
}
|
||
|
xfrm_state_insert(t);
|
||
|
xfrm_state_hold(t);
|
||
|
}
|
||
|
x->tunnel = t;
|
||
|
atomic_inc(&t->tunnel_users);
|
||
|
out:
|
||
|
return err;
|
||
|
}
|
||
|
|
||
|
static int ipcomp4_init_state(struct xfrm_state *x,
|
||
|
struct netlink_ext_ack *extack)
|
||
|
{
|
||
|
int err = -EINVAL;
|
||
|
|
||
|
x->props.header_len = 0;
|
||
|
switch (x->props.mode) {
|
||
|
case XFRM_MODE_TRANSPORT:
|
||
|
break;
|
||
|
case XFRM_MODE_TUNNEL:
|
||
|
x->props.header_len += sizeof(struct iphdr);
|
||
|
break;
|
||
|
default:
|
||
|
NL_SET_ERR_MSG(extack, "Unsupported XFRM mode for IPcomp");
|
||
|
goto out;
|
||
|
}
|
||
|
|
||
|
err = ipcomp_init_state(x, extack);
|
||
|
if (err)
|
||
|
goto out;
|
||
|
|
||
|
if (x->props.mode == XFRM_MODE_TUNNEL) {
|
||
|
err = ipcomp_tunnel_attach(x);
|
||
|
if (err) {
|
||
|
NL_SET_ERR_MSG(extack, "Kernel error: failed to initialize the associated state");
|
||
|
goto out;
|
||
|
}
|
||
|
}
|
||
|
|
||
|
err = 0;
|
||
|
out:
|
||
|
return err;
|
||
|
}
|
||
|
|
||
|
static int ipcomp4_rcv_cb(struct sk_buff *skb, int err)
|
||
|
{
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
static const struct xfrm_type ipcomp_type = {
|
||
|
.owner = THIS_MODULE,
|
||
|
.proto = IPPROTO_COMP,
|
||
|
.init_state = ipcomp4_init_state,
|
||
|
.destructor = ipcomp_destroy,
|
||
|
.input = ipcomp_input,
|
||
|
.output = ipcomp_output
|
||
|
};
|
||
|
|
||
|
static struct xfrm4_protocol ipcomp4_protocol = {
|
||
|
.handler = xfrm4_rcv,
|
||
|
.input_handler = xfrm_input,
|
||
|
.cb_handler = ipcomp4_rcv_cb,
|
||
|
.err_handler = ipcomp4_err,
|
||
|
.priority = 0,
|
||
|
};
|
||
|
|
||
|
static int __init ipcomp4_init(void)
|
||
|
{
|
||
|
if (xfrm_register_type(&ipcomp_type, AF_INET) < 0) {
|
||
|
pr_info("%s: can't add xfrm type\n", __func__);
|
||
|
return -EAGAIN;
|
||
|
}
|
||
|
if (xfrm4_protocol_register(&ipcomp4_protocol, IPPROTO_COMP) < 0) {
|
||
|
pr_info("%s: can't add protocol\n", __func__);
|
||
|
xfrm_unregister_type(&ipcomp_type, AF_INET);
|
||
|
return -EAGAIN;
|
||
|
}
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
static void __exit ipcomp4_fini(void)
|
||
|
{
|
||
|
if (xfrm4_protocol_deregister(&ipcomp4_protocol, IPPROTO_COMP) < 0)
|
||
|
pr_info("%s: can't remove protocol\n", __func__);
|
||
|
xfrm_unregister_type(&ipcomp_type, AF_INET);
|
||
|
}
|
||
|
|
||
|
module_init(ipcomp4_init);
|
||
|
module_exit(ipcomp4_fini);
|
||
|
|
||
|
MODULE_LICENSE("GPL");
|
||
|
MODULE_DESCRIPTION("IP Payload Compression Protocol (IPComp/IPv4) - RFC3173");
|
||
|
MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");
|
||
|
|
||
|
MODULE_ALIAS_XFRM_TYPE(AF_INET, XFRM_PROTO_COMP);
|