1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0-or-later
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * IP Payload Compression Protocol (IPComp) - RFC3173.
4*4882a593Smuzhiyun *
5*4882a593Smuzhiyun * Copyright (c) 2003 James Morris <jmorris@intercode.com.au>
6*4882a593Smuzhiyun *
7*4882a593Smuzhiyun * Todo:
8*4882a593Smuzhiyun * - Tunable compression parameters.
9*4882a593Smuzhiyun * - Compression stats.
10*4882a593Smuzhiyun * - Adaptive compression.
11*4882a593Smuzhiyun */
12*4882a593Smuzhiyun #include <linux/module.h>
13*4882a593Smuzhiyun #include <linux/err.h>
14*4882a593Smuzhiyun #include <linux/rtnetlink.h>
15*4882a593Smuzhiyun #include <net/ip.h>
16*4882a593Smuzhiyun #include <net/xfrm.h>
17*4882a593Smuzhiyun #include <net/icmp.h>
18*4882a593Smuzhiyun #include <net/ipcomp.h>
19*4882a593Smuzhiyun #include <net/protocol.h>
20*4882a593Smuzhiyun #include <net/sock.h>
21*4882a593Smuzhiyun
ipcomp4_err(struct sk_buff * skb,u32 info)22*4882a593Smuzhiyun static int ipcomp4_err(struct sk_buff *skb, u32 info)
23*4882a593Smuzhiyun {
24*4882a593Smuzhiyun struct net *net = dev_net(skb->dev);
25*4882a593Smuzhiyun __be32 spi;
26*4882a593Smuzhiyun const struct iphdr *iph = (const struct iphdr *)skb->data;
27*4882a593Smuzhiyun struct ip_comp_hdr *ipch = (struct ip_comp_hdr *)(skb->data+(iph->ihl<<2));
28*4882a593Smuzhiyun struct xfrm_state *x;
29*4882a593Smuzhiyun
30*4882a593Smuzhiyun switch (icmp_hdr(skb)->type) {
31*4882a593Smuzhiyun case ICMP_DEST_UNREACH:
32*4882a593Smuzhiyun if (icmp_hdr(skb)->code != ICMP_FRAG_NEEDED)
33*4882a593Smuzhiyun return 0;
34*4882a593Smuzhiyun case ICMP_REDIRECT:
35*4882a593Smuzhiyun break;
36*4882a593Smuzhiyun default:
37*4882a593Smuzhiyun return 0;
38*4882a593Smuzhiyun }
39*4882a593Smuzhiyun
40*4882a593Smuzhiyun spi = htonl(ntohs(ipch->cpi));
41*4882a593Smuzhiyun x = xfrm_state_lookup(net, skb->mark, (const xfrm_address_t *)&iph->daddr,
42*4882a593Smuzhiyun spi, IPPROTO_COMP, AF_INET);
43*4882a593Smuzhiyun if (!x)
44*4882a593Smuzhiyun return 0;
45*4882a593Smuzhiyun
46*4882a593Smuzhiyun if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH)
47*4882a593Smuzhiyun ipv4_update_pmtu(skb, net, info, 0, IPPROTO_COMP);
48*4882a593Smuzhiyun else
49*4882a593Smuzhiyun ipv4_redirect(skb, net, 0, IPPROTO_COMP);
50*4882a593Smuzhiyun xfrm_state_put(x);
51*4882a593Smuzhiyun
52*4882a593Smuzhiyun return 0;
53*4882a593Smuzhiyun }
54*4882a593Smuzhiyun
55*4882a593Smuzhiyun /* We always hold one tunnel user reference to indicate a tunnel */
ipcomp_tunnel_create(struct xfrm_state * x)56*4882a593Smuzhiyun static struct xfrm_state *ipcomp_tunnel_create(struct xfrm_state *x)
57*4882a593Smuzhiyun {
58*4882a593Smuzhiyun struct net *net = xs_net(x);
59*4882a593Smuzhiyun struct xfrm_state *t;
60*4882a593Smuzhiyun
61*4882a593Smuzhiyun t = xfrm_state_alloc(net);
62*4882a593Smuzhiyun if (!t)
63*4882a593Smuzhiyun goto out;
64*4882a593Smuzhiyun
65*4882a593Smuzhiyun t->id.proto = IPPROTO_IPIP;
66*4882a593Smuzhiyun t->id.spi = x->props.saddr.a4;
67*4882a593Smuzhiyun t->id.daddr.a4 = x->id.daddr.a4;
68*4882a593Smuzhiyun memcpy(&t->sel, &x->sel, sizeof(t->sel));
69*4882a593Smuzhiyun t->props.family = AF_INET;
70*4882a593Smuzhiyun t->props.mode = x->props.mode;
71*4882a593Smuzhiyun t->props.saddr.a4 = x->props.saddr.a4;
72*4882a593Smuzhiyun t->props.flags = x->props.flags;
73*4882a593Smuzhiyun t->props.extra_flags = x->props.extra_flags;
74*4882a593Smuzhiyun memcpy(&t->mark, &x->mark, sizeof(t->mark));
75*4882a593Smuzhiyun t->if_id = x->if_id;
76*4882a593Smuzhiyun
77*4882a593Smuzhiyun if (xfrm_init_state(t))
78*4882a593Smuzhiyun goto error;
79*4882a593Smuzhiyun
80*4882a593Smuzhiyun atomic_set(&t->tunnel_users, 1);
81*4882a593Smuzhiyun out:
82*4882a593Smuzhiyun return t;
83*4882a593Smuzhiyun
84*4882a593Smuzhiyun error:
85*4882a593Smuzhiyun t->km.state = XFRM_STATE_DEAD;
86*4882a593Smuzhiyun xfrm_state_put(t);
87*4882a593Smuzhiyun t = NULL;
88*4882a593Smuzhiyun goto out;
89*4882a593Smuzhiyun }
90*4882a593Smuzhiyun
91*4882a593Smuzhiyun /*
92*4882a593Smuzhiyun * Must be protected by xfrm_cfg_mutex. State and tunnel user references are
93*4882a593Smuzhiyun * always incremented on success.
94*4882a593Smuzhiyun */
ipcomp_tunnel_attach(struct xfrm_state * x)95*4882a593Smuzhiyun static int ipcomp_tunnel_attach(struct xfrm_state *x)
96*4882a593Smuzhiyun {
97*4882a593Smuzhiyun struct net *net = xs_net(x);
98*4882a593Smuzhiyun int err = 0;
99*4882a593Smuzhiyun struct xfrm_state *t;
100*4882a593Smuzhiyun u32 mark = x->mark.v & x->mark.m;
101*4882a593Smuzhiyun
102*4882a593Smuzhiyun t = xfrm_state_lookup(net, mark, (xfrm_address_t *)&x->id.daddr.a4,
103*4882a593Smuzhiyun x->props.saddr.a4, IPPROTO_IPIP, AF_INET);
104*4882a593Smuzhiyun if (!t) {
105*4882a593Smuzhiyun t = ipcomp_tunnel_create(x);
106*4882a593Smuzhiyun if (!t) {
107*4882a593Smuzhiyun err = -EINVAL;
108*4882a593Smuzhiyun goto out;
109*4882a593Smuzhiyun }
110*4882a593Smuzhiyun xfrm_state_insert(t);
111*4882a593Smuzhiyun xfrm_state_hold(t);
112*4882a593Smuzhiyun }
113*4882a593Smuzhiyun x->tunnel = t;
114*4882a593Smuzhiyun atomic_inc(&t->tunnel_users);
115*4882a593Smuzhiyun out:
116*4882a593Smuzhiyun return err;
117*4882a593Smuzhiyun }
118*4882a593Smuzhiyun
ipcomp4_init_state(struct xfrm_state * x)119*4882a593Smuzhiyun static int ipcomp4_init_state(struct xfrm_state *x)
120*4882a593Smuzhiyun {
121*4882a593Smuzhiyun int err = -EINVAL;
122*4882a593Smuzhiyun
123*4882a593Smuzhiyun x->props.header_len = 0;
124*4882a593Smuzhiyun switch (x->props.mode) {
125*4882a593Smuzhiyun case XFRM_MODE_TRANSPORT:
126*4882a593Smuzhiyun break;
127*4882a593Smuzhiyun case XFRM_MODE_TUNNEL:
128*4882a593Smuzhiyun x->props.header_len += sizeof(struct iphdr);
129*4882a593Smuzhiyun break;
130*4882a593Smuzhiyun default:
131*4882a593Smuzhiyun goto out;
132*4882a593Smuzhiyun }
133*4882a593Smuzhiyun
134*4882a593Smuzhiyun err = ipcomp_init_state(x);
135*4882a593Smuzhiyun if (err)
136*4882a593Smuzhiyun goto out;
137*4882a593Smuzhiyun
138*4882a593Smuzhiyun if (x->props.mode == XFRM_MODE_TUNNEL) {
139*4882a593Smuzhiyun err = ipcomp_tunnel_attach(x);
140*4882a593Smuzhiyun if (err)
141*4882a593Smuzhiyun goto out;
142*4882a593Smuzhiyun }
143*4882a593Smuzhiyun
144*4882a593Smuzhiyun err = 0;
145*4882a593Smuzhiyun out:
146*4882a593Smuzhiyun return err;
147*4882a593Smuzhiyun }
148*4882a593Smuzhiyun
ipcomp4_rcv_cb(struct sk_buff * skb,int err)149*4882a593Smuzhiyun static int ipcomp4_rcv_cb(struct sk_buff *skb, int err)
150*4882a593Smuzhiyun {
151*4882a593Smuzhiyun return 0;
152*4882a593Smuzhiyun }
153*4882a593Smuzhiyun
154*4882a593Smuzhiyun static const struct xfrm_type ipcomp_type = {
155*4882a593Smuzhiyun .description = "IPCOMP4",
156*4882a593Smuzhiyun .owner = THIS_MODULE,
157*4882a593Smuzhiyun .proto = IPPROTO_COMP,
158*4882a593Smuzhiyun .init_state = ipcomp4_init_state,
159*4882a593Smuzhiyun .destructor = ipcomp_destroy,
160*4882a593Smuzhiyun .input = ipcomp_input,
161*4882a593Smuzhiyun .output = ipcomp_output
162*4882a593Smuzhiyun };
163*4882a593Smuzhiyun
164*4882a593Smuzhiyun static struct xfrm4_protocol ipcomp4_protocol = {
165*4882a593Smuzhiyun .handler = xfrm4_rcv,
166*4882a593Smuzhiyun .input_handler = xfrm_input,
167*4882a593Smuzhiyun .cb_handler = ipcomp4_rcv_cb,
168*4882a593Smuzhiyun .err_handler = ipcomp4_err,
169*4882a593Smuzhiyun .priority = 0,
170*4882a593Smuzhiyun };
171*4882a593Smuzhiyun
ipcomp4_init(void)172*4882a593Smuzhiyun static int __init ipcomp4_init(void)
173*4882a593Smuzhiyun {
174*4882a593Smuzhiyun if (xfrm_register_type(&ipcomp_type, AF_INET) < 0) {
175*4882a593Smuzhiyun pr_info("%s: can't add xfrm type\n", __func__);
176*4882a593Smuzhiyun return -EAGAIN;
177*4882a593Smuzhiyun }
178*4882a593Smuzhiyun if (xfrm4_protocol_register(&ipcomp4_protocol, IPPROTO_COMP) < 0) {
179*4882a593Smuzhiyun pr_info("%s: can't add protocol\n", __func__);
180*4882a593Smuzhiyun xfrm_unregister_type(&ipcomp_type, AF_INET);
181*4882a593Smuzhiyun return -EAGAIN;
182*4882a593Smuzhiyun }
183*4882a593Smuzhiyun return 0;
184*4882a593Smuzhiyun }
185*4882a593Smuzhiyun
ipcomp4_fini(void)186*4882a593Smuzhiyun static void __exit ipcomp4_fini(void)
187*4882a593Smuzhiyun {
188*4882a593Smuzhiyun if (xfrm4_protocol_deregister(&ipcomp4_protocol, IPPROTO_COMP) < 0)
189*4882a593Smuzhiyun pr_info("%s: can't remove protocol\n", __func__);
190*4882a593Smuzhiyun xfrm_unregister_type(&ipcomp_type, AF_INET);
191*4882a593Smuzhiyun }
192*4882a593Smuzhiyun
193*4882a593Smuzhiyun module_init(ipcomp4_init);
194*4882a593Smuzhiyun module_exit(ipcomp4_fini);
195*4882a593Smuzhiyun
196*4882a593Smuzhiyun MODULE_LICENSE("GPL");
197*4882a593Smuzhiyun MODULE_DESCRIPTION("IP Payload Compression Protocol (IPComp/IPv4) - RFC3173");
198*4882a593Smuzhiyun MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");
199*4882a593Smuzhiyun
200*4882a593Smuzhiyun MODULE_ALIAS_XFRM_TYPE(AF_INET, XFRM_PROTO_COMP);
201